last executing test programs: 1m47.953853744s ago: executing program 2 (id=3): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="68cabf2dfb58fc0a01", 0x9}], 0x1}, 0x8c4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf6", 0x7f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841", 0x3a}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e", 0x32}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x30}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="6c0000001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff640101013100fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172082eaaa90cf56dd042b720000000800058004006080"], 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m46.617243323s ago: executing program 2 (id=5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c484}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2cc466646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',\x00']) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974", 0x76}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36", 0xb7}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x6}}], 0x1, 0x20000044) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m44.770576519s ago: executing program 2 (id=10): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40001a2) io_submit(0x0, 0x6, &(0x7f0000000980)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000000200)="fee4187189217d88ef8f5559b6a926a423ac09044ce99b2a", 0x18, 0x5, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="98757c067ff78461c07cd79641ca8d178382b89f85e44dedffea302f67cc5390aa33a3a0630d88cfb050b9ab3c07f00b98bd9806cf5051f8fae5dc484f68d20913786e0d1cdd14200087421a0efd18008d9096f114d9b775088f5fe363f9001f3ea2752c642a26a79e00dab6309e87f1e67282fb1529e810362ee528ea0205fa7eee16", 0x83, 0x100000001}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x4e5, 0xffffffffffffffff, &(0x7f00000003c0)="0f2ea3642943bda88d40b5100929fc2af6f5fba619ae98055f265bf79a0eb3761aa07b1a90db0dbbddc818134c415effa31ccde970927bbbb361d544d52f684dc9d7f165df4b4fccdaf9472abbe4adfceda5d878067136c2f90847a0d95eadc2222e2a78b588b5e48c6e5fd65e6db223721595bed350606fc1600701f8dea2ee4c570a55d69c0c6d4015889cb6026b313b0407e209", 0x95, 0x7fffffffffffffff, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0xe1b3, 0xffffffffffffffff, &(0x7f00000005c0)="55ef1a5a835b4850c328512d5b531acd0014aac015b844a17d69f8b265e19d00042e49ca3d927c46d8c18c020f5bbaffb19079321b6b1856a31743f1c830753c0ffeddd72b5c1fe1dbbb700cafef4525c3813db432ad54b0a9e7d331d2d6c6347984b5060fe6b7d27c8f5b8406484494b8f7b07b8b3bec432a1e7bf816c27e6d2815e3e7430e9d0d836659b952db92967487d65128d4fc9c1ec487a38ea541661e0b930308bea50ca510e4f5b950738acb02efe91fffddf713786dd5934466f16624e93b2cc0", 0xc6, 0xfffffffffffffff5, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0xf690, 0xffffffffffffffff, &(0x7f0000000700)="eae986131e5e4bcd6449121de32d800186e2ad785a5144ab8eee8bc024b7a45495053fd406c062385c5ce5e9342aa36cc6fbfa8709652016ab90e266c082bfb22005b68ce44c909547655122f324357274b920d9167e651876e1b9b81e2c5b9be4aefeb88d5cfba6d2c22ef308c5182e36faaf22dc1caf5aab28d5ea9cc2023997", 0x81, 0xffffffffffffff00}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000840)="eb378773b6bf40a23369b2fd44e723a74f491da4b0c2ddcd664ccc2e3d2dd733bf4e682ac0ea69d3b4de9332cc5f6b14f6116d5ff915579ea6a426f64ccf508507ec4add73486fb9c5f1bdb09027d2d107d5f9b29d008db76a8e88f2434bf0880bfd00391abc5468f47f3aed419b6a4a2f5cbd75e692f56eca8dcd7bf28ea5803f5112ec82451072e061c78c26508dbce57bcd7f99c4c989f2bc0be8bc5c8cd30c24995725aca9f9bea7bd1735bce409506e7ca87093650d4fe9f3b08bff088213d6acbfcf23f0894623921843e0", 0xce, 0x65ca, 0x0, 0x2}]) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1m43.568497777s ago: executing program 2 (id=15): mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x80, 0x0) (fail_nth: 15) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m42.573965305s ago: executing program 2 (id=18): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x170, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8041}, 0x800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000100)) 1m40.287235641s ago: executing program 0 (id=22): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/asound/seq/clients\x00', 0x41, 0x0) write$FUSE_LK(r3, 0x0, 0x0) r4 = memfd_create(0x0, 0x2) fcntl$addseals(r4, 0x409, 0x7) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x4000000000000000) 1m39.54142965s ago: executing program 0 (id=23): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40001a2) io_submit(0x0, 0x6, &(0x7f0000000980)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000000200)="fee4187189217d88ef8f5559b6a926a423ac09044ce99b2a", 0x18, 0x5, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="98757c067ff78461c07cd79641ca8d178382b89f85e44dedffea302f67cc5390aa33a3a0630d88cfb050b9ab3c07f00b98bd9806cf5051f8fae5dc484f68d20913786e0d1cdd14200087421a0efd18008d9096f114d9b775088f5fe363f9001f3ea2752c642a26a79e00dab6309e87f1e67282fb1529e810362ee528ea0205fa7eee16", 0x83, 0x100000001}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x4e5, 0xffffffffffffffff, &(0x7f00000003c0)="0f2ea3642943bda88d40b5100929fc2af6f5fba619ae98055f265bf79a0eb3761aa07b1a90db0dbbddc818134c415effa31ccde970927bbbb361d544d52f684dc9d7f165df4b4fccdaf9472abbe4adfceda5d878067136c2f90847a0d95eadc2222e2a78b588b5e48c6e5fd65e6db223721595bed350606fc1600701f8dea2ee4c570a55d69c0c6d4015889cb6026b313b0407e209", 0x95, 0x7fffffffffffffff, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0xe1b3, 0xffffffffffffffff, &(0x7f00000005c0)="55ef1a5a835b4850c328512d5b531acd0014aac015b844a17d69f8b265e19d00042e49ca3d927c46d8c18c020f5bbaffb19079321b6b1856a31743f1c830753c0ffeddd72b5c1fe1dbbb700cafef4525c3813db432ad54b0a9e7d331d2d6c6347984b5060fe6b7d27c8f5b8406484494b8f7b07b8b3bec432a1e7bf816c27e6d2815e3e7430e9d0d836659b952db92967487d65128d4fc9c1ec487a38ea541661e0b930308bea50ca510e4f5b950738acb02efe91fffddf713786dd5934466f16624e93b2cc0", 0xc6, 0xfffffffffffffff5, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0xf690, 0xffffffffffffffff, &(0x7f0000000700)="eae986131e5e4bcd6449121de32d800186e2ad785a5144ab8eee8bc024b7a45495053fd406c062385c5ce5e9342aa36cc6fbfa8709652016ab90e266c082bfb22005b68ce44c909547655122f324357274b920d9167e651876e1b9b81e2c5b9be4aefeb88d5cfba6d2c22ef308c5182e36faaf22dc1caf5aab28d5ea9cc2023997", 0x81, 0xffffffffffffff00}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000840)="eb378773b6bf40a23369b2fd44e723a74f491da4b0c2ddcd664ccc2e3d2dd733bf4e682ac0ea69d3b4de9332cc5f6b14f6116d5ff915579ea6a426f64ccf508507ec4add73486fb9c5f1bdb09027d2d107d5f9b29d008db76a8e88f2434bf0880bfd00391abc5468f47f3aed419b6a4a2f5cbd75e692f56eca8dcd7bf28ea5803f5112ec82451072e061c78c26508dbce57bcd7f99c4c989f2bc0be8bc5c8cd30c24995725aca9f9bea7bd1735bce409506e7ca87093650d4fe9f3b08bff088213d6acbfcf23f0894623921843e0", 0xce, 0x65ca, 0x0, 0x2}]) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1m38.782158891s ago: executing program 2 (id=25): r0 = socket$kcm(0x23, 0x5, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) mount$afs(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x814000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x13, 0x4f, 0x1}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x203, 0x0, {{{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}, 0x0, 0xffffffff}}, 0xf8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x66c}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x202, 0xfffffffd}}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x8004) 1m38.08761963s ago: executing program 32 (id=25): r0 = socket$kcm(0x23, 0x5, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) mount$afs(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x814000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x13, 0x4f, 0x1}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x203, 0x0, {{{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}, 0x0, 0xffffffff}}, 0xf8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x66c}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x202, 0xfffffffd}}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x8004) 1m38.07771413s ago: executing program 0 (id=28): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0xa0, 0x3, 0x78, {0x78, 0x24, "2590aa33a4889347afa3d67bae9d39267226fc91df6d43a543106d880908f9282dfc36417662ff5896cc1e9acbc48890a3f02733aa2878dd2e22e55ac81d586f56e060aca969c3a14c8b6400f38ad1f57e9a85eae7cf77531cd835c348b4f5e68ba4e02a0edcae63f49426c3d8025cb46e74a50a2a35"}}, &(0x7f0000000080)={0x0, 0x3, 0xc7, @string={0xc7, 0x3, "fe13d6d946809815dcb71b8d5780f95e74e5a1530d3ade7a8c7ae7b40bdba998a88dc338e0dc4b7e871121c8219102eade77251f7dd377172961f17a9767d87b8acfcd983a3f359f96e3e22dac7bc1917e9840ab0c2ace2d6749a2caf29bd370bcbb7e21def36b216f900347b6f403f7e25c9d020e9b536474a9539232d71edf94b2b5ff26b7eaa9214b17a6da817bf57e89029190557ea0e504fffc22d4260194aa869f10561a33fce5456e6c7144c6c96d9133b4157aff24c420612e27bc43455beb1038"}}}, &(0x7f0000000380)={0x34, &(0x7f0000000200)={0x40, 0x18, 0x2e, "03235b958e03514ac778b96714df05804437abd0c493c594b46b70cc01683123112013b93e5aeffb64eb6902f047"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "cc3b01c083dcbb8ddc6b96d2140fcba5b9dc1c730465fe61370067122d8a363b9cf81b4b2f4df5fc648701d552e73f"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m35.241823224s ago: executing program 0 (id=32): connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0/../file0\x00'}, 0x6e) r0 = socket(0x2, 0x3, 0xa) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) close(r1) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback}}}], 0x20}}], 0x1, 0x4800) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x80, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) accept4(r0, 0x0, &(0x7f0000000040), 0x80000) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0/../file0\x00', 0xa0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m34.733106693s ago: executing program 0 (id=35): inotify_add_watch(0xffffffffffffffff, 0x0, 0x40001a2) io_submit(0x0, 0x6, &(0x7f0000000980)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000000200)="fee4187189217d88ef8f5559b6a926a423ac09044ce99b2a", 0x18, 0x5, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="98757c067ff78461c07cd79641ca8d178382b89f85e44dedffea302f67cc5390aa33a3a0630d88cfb050b9ab3c07f00b98bd9806cf5051f8fae5dc484f68d20913786e0d1cdd14200087421a0efd18008d9096f114d9b775088f5fe363f9001f3ea2752c642a26a79e00dab6309e87f1e67282fb1529e810362ee528ea0205fa7eee16", 0x83, 0x100000001}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x4e5, 0xffffffffffffffff, &(0x7f00000003c0)="0f2ea3642943bda88d40b5100929fc2af6f5fba619ae98055f265bf79a0eb3761aa07b1a90db0dbbddc818134c415effa31ccde970927bbbb361d544d52f684dc9d7f165df4b4fccdaf9472abbe4adfceda5d878067136c2f90847a0d95eadc2222e2a78b588b5e48c6e5fd65e6db223721595bed350606fc1600701f8dea2ee4c570a55d69c0c6d4015889cb6026b313b0407e209", 0x95, 0x7fffffffffffffff, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0xe1b3, 0xffffffffffffffff, &(0x7f00000005c0)="55ef1a5a835b4850c328512d5b531acd0014aac015b844a17d69f8b265e19d00042e49ca3d927c46d8c18c020f5bbaffb19079321b6b1856a31743f1c830753c0ffeddd72b5c1fe1dbbb700cafef4525c3813db432ad54b0a9e7d331d2d6c6347984b5060fe6b7d27c8f5b8406484494b8f7b07b8b3bec432a1e7bf816c27e6d2815e3e7430e9d0d836659b952db92967487d65128d4fc9c1ec487a38ea541661e0b930308bea50ca510e4f5b950738acb02efe91fffddf713786dd5934466f16624e93b2cc0", 0xc6, 0xfffffffffffffff5, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0xf690, 0xffffffffffffffff, &(0x7f0000000700)="eae986131e5e4bcd6449121de32d800186e2ad785a5144ab8eee8bc024b7a45495053fd406c062385c5ce5e9342aa36cc6fbfa8709652016ab90e266c082bfb22005b68ce44c909547655122f324357274b920d9167e651876e1b9b81e2c5b9be4aefeb88d5cfba6d2c22ef308c5182e36faaf22dc1caf5aab28d5ea9cc2023997", 0x81, 0xffffffffffffff00}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000840)="eb378773b6bf40a23369b2fd44e723a74f491da4b0c2ddcd664ccc2e3d2dd733bf4e682ac0ea69d3b4de9332cc5f6b14f6116d5ff915579ea6a426f64ccf508507ec4add73486fb9c5f1bdb09027d2d107d5f9b29d008db76a8e88f2434bf0880bfd00391abc5468f47f3aed419b6a4a2f5cbd75e692f56eca8dcd7bf28ea5803f5112ec82451072e061c78c26508dbce57bcd7f99c4c989f2bc0be8bc5c8cd30c24995725aca9f9bea7bd1735bce409506e7ca87093650d4fe9f3b08bff088213d6acbfcf23f0894623921843e0", 0xce, 0x65ca, 0x0, 0x2}]) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1m30.794526916s ago: executing program 0 (id=44): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x102) close(r0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x102, 0xb0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0xf4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdb2a, 0x2, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x1000, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffff7c}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090ac3f32c270000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004140000000c0a010100000000000000000a0000062c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x4c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x4c}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r10, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10040, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000003c0)=0x7ff) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x10030a0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES32=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) 1m30.261153488s ago: executing program 33 (id=44): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x102) close(r0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x102, 0xb0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x257, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0xf4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdb2a, 0x2, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x1000, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffff7c}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090ac3f32c270000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004140000000c0a010100000000000000000a0000062c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x4c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x4c}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r10, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10040, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4814}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000003c0)=0x7ff) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x10030a0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES32=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) 8.292193295s ago: executing program 4 (id=312): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000200)=[{0xc01, 0xc001, 0x21, &(0x7f00000008c0)="2103c2680eea91545607647fa2ffe2c880c92e82c77479e9cae87c6c5764e25c36a2"}, {0x7, 0x19, 0x0, 0x0}], 0x2}) 6.456118314s ago: executing program 4 (id=319): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002f00090028bd7000fddbdf250400000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (fail_nth: 4) 5.966345434s ago: executing program 4 (id=320): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000200)=[{0xc01, 0xc001, 0x22, &(0x7f00000008c0)="2103c2680eea91545607647fa2ffe2c880c92e82c77479e9cae87c6c5764e25c36a2"}, {0x7, 0x19, 0x0, 0x0}], 0x2}) (fail_nth: 4) 4.445954598s ago: executing program 1 (id=327): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000580)=""/203) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c26881100000000000000e3394553b9851b30599980bc000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001d80)=""/4046, 0xfce}, {&(0x7f0000000d40)=""/4102, 0x1006}, {&(0x7f0000002d80)=""/219, 0xdb}, {&(0x7f0000000140)=""/117, 0x75}, {&(0x7f0000000680)=""/100, 0x64}, {&(0x7f0000000800)=""/191, 0xbf}], 0x6}, 0x40010000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01e2ffffffffffffff0a0000010900010073797a31000000002c0004802800018007000100637400001c0002800400030000000000080002400000000908000140000000090900020073797a3200000000140000001100010000000000000000000200000a00110292fb9a3a6afa148764ae19b980346fd79f39c2c5fafa4bf9f4943e12ada4e7e56a4c5fb1b183e1fb58586a53764c54545d773ede2b1bdd1959688dfb25a4bb9dda60ee42ebb29640cfac447b252cfbe683789835d1d8fca2bb6e6a230648618143bcfc7129089a6f80f6673c08d0d6f178469b985616ef82896f3afc13658a5a72fcc5472c0077790487602cf38a6d7d1f73c79245b36bae6798d6"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000b00)=ANY=[@ANYBLOB="440005000d0605000000000000000005000100070000000500fbfaa785090005000500020000000e0003006269746d617027dfd2ef3a697089ae1f1b6550a4345927b9000000000000000000003f9e0633439bfb3f825176d5ee074dd055d8840f81517127146d99fc230bb4b4746d9e413f58c334dfb28865286fe4c375130858006c4cf7bee993ece7d7b0815c38ae703e6b785235e0c3d662de23b028662a89b3026f610161ed4a00000000000000797ae9f6528ad1720da017b62b5f1f3c3eaa871ea992"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x20, 0x17, 0x1e, "d63508413ed88d5f3aa30ddb149c466d0d0759af83a8c1c19ac4d60ef3f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x8000}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x121203, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r8, 0x4610, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r9, 0x4b2f, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000b221", @ANYRES16=r7, @ANYBLOB="010028bd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00000500120004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r10, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES64=r5, @ANYRES32=r2, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x24044001}, 0x40050) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r11, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {0xfffffffd}, 0x0, 0x40, 0xab, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x200, 0x2, 0xb}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 4.346262317s ago: executing program 5 (id=328): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x104}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000680)={0x420, 0x3f3, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x29, [0x1, 0x863, 0xffffff81, 0x1321, 0x339c000, 0x3, 0xd3f, 0x7, 0x8, 0xffff, 0xc7, 0x5, 0x8, 0x8, 0xa8, 0xd, 0x10000, 0x5, 0x3, 0x7, 0xe7, 0x6, 0x653b3e45, 0x0, 0x2, 0x8, 0xfffffff9, 0x6, 0x2, 0x3, 0x8, 0x5, 0x8, 0xfffffffc, 0x2, 0x401, 0x40000000, 0x3, 0x9, 0xb81b, 0x7, 0x7, 0x9, 0xd5ab, 0x7, 0x101, 0xe, 0x9, 0x0, 0x9, 0x8f7, 0x0, 0x3, 0x6, 0x6, 0x1, 0x4, 0x7, 0x2, 0x3, 0x4, 0x1, 0x6, 0x1], [0xfffffff8, 0xfff, 0xbf, 0x3, 0x8, 0x8, 0xf7, 0x0, 0x9, 0x7, 0x2, 0xfffff287, 0x4, 0x7, 0xfffffffd, 0x200, 0x4, 0x5000000, 0x3ff, 0x21, 0x1e9, 0xfff, 0x4, 0xff, 0x5, 0xfff, 0x0, 0x8, 0xfffffffb, 0x7, 0x4010, 0x0, 0xcd560000, 0x8000, 0xaf, 0xe, 0xf1, 0x1, 0xd12, 0x0, 0x44, 0x8, 0x8, 0x8, 0x1, 0x0, 0xc3, 0x5, 0xfffffffe, 0x3ff, 0x2, 0x8, 0x3, 0x3, 0x6, 0x3c, 0x0, 0x1, 0xf, 0xf, 0x7ff, 0x0, 0x3, 0x3], [0xffff, 0x7, 0xd000, 0x0, 0x9, 0x7, 0x7, 0x7, 0xd1d4, 0x3, 0x4a8, 0x3, 0xc, 0x9, 0x9c, 0x0, 0x7f, 0x4, 0x3ff, 0x8, 0x8001, 0x7, 0x8, 0x3, 0x3, 0xd, 0x7, 0x40, 0xa315, 0x4, 0x3, 0x1, 0x5, 0x5, 0xbc, 0x8be3, 0x2, 0x5, 0x0, 0x1, 0x3, 0x8, 0x7, 0x1, 0x7, 0xadec, 0x4, 0x4, 0x8, 0xf, 0x0, 0x1d04, 0x3ff, 0xfffffff8, 0x2, 0x2, 0xf, 0x7, 0x200, 0x80, 0x9, 0x7fff, 0x9, 0xffff], [0x4, 0xb60, 0x0, 0x8, 0x5, 0x7, 0xffffff32, 0x3340, 0x9, 0xdb200000, 0x7, 0xffff1080, 0x80000001, 0x7f, 0x4, 0x6, 0xdee, 0x1, 0x100000, 0xadc, 0x1, 0x1, 0x4000, 0x8001, 0x1000, 0x1, 0x18, 0x3667, 0x8, 0x27d9499f, 0x0, 0x2, 0x8, 0x8, 0x800, 0x0, 0x401, 0x7, 0x18a, 0xfffffffd, 0x2, 0x3, 0xfd, 0x69c, 0x1000, 0x3ff, 0x9e, 0x7fff, 0xfff, 0x0, 0x6, 0x0, 0x7ff, 0x6, 0x7fffffff, 0x4, 0x10000, 0xb00, 0x7, 0x1, 0x1, 0x7fffffff, 0x1, 0x8780]}}, 0x420}, 0x1, 0x0, 0x0, 0x40}, 0x880) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4.101526986s ago: executing program 4 (id=329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000002440)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000180)=0x2, 0x4) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_delete(r1) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x17, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000a5497f0500000000000a4c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010008000340000000080800064000000000140000001000fc6e39e44a41da9c3bdeeb39a54f1a99e89cec772e3490fd49643137976cedb05e2c1a015260151e35f30c073ed6c1d86daed73b5f5db0721758de4c26d5"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) timer_getoverrun(r5) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/113) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 3.860867541s ago: executing program 5 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1], 0x8) (async, rerun: 32) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) (async, rerun: 32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r2, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$netlink(0x10, 0x3, 0x6) (async) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000300)=ANY=[@ANYBLOB="800000000802110000010802110000000802110000000080000000000000000064000100e918d535f2e3ced18c02d4f6e7a3c5e14747814f8fbbd948735ad80104848b960c060205007206030303030303"], 0x51) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1b}, 0x12122) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r7], 0xc4}}, 0x0) 3.602039851s ago: executing program 5 (id=331): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) ioctl$RTC_SET_TIME(r0, 0x40187013, &(0x7f0000000100)={0x2b, 0x22, 0xd, 0x0, 0x8, 0xac, 0x5, 0x1, 0x1}) r1 = socket$packet(0x11, 0x2, 0x300) clock_nanosleep(0xfffffff7, 0x0, &(0x7f0000000800), 0x0) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xff}) timer_create(0x3, 0x0, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x1, &(0x7f0000000000)={[0x4]}, 0x0, 0x60) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x2, &(0x7f0000000480)={0x0, 0x20, 0x1, @thr={&(0x7f0000000040)="8d41a9b601b2e658c7b4aa9d660c237d0dbd9439efae3e1c64db8b4fc2f147a30b885ad691ca28c5acbd56c34d97a6931fa84e9223bbfbe56447305c435ff6c046bb6774d68a149d70388c7973d88575242a36846a6b5108ffe3e322ff41e404f10c592ca8aac06cb2a5d3a41e1184484a", &(0x7f0000000380)="ae18ea46c28824daf5adcc98f8e45561a63783a9e3c0f9da3f6627b09594e0c82003cd4d55eb40665b041476676f96bcad91fc856b6fdb250d0013341dbe8c070e33ff66f4177221f36c0b13a6ea738e63340c10220c68ecee03689029d26082c3899552bf88b3b7f62fe0ddf627dbe276c5bf13ac53b4debaf097f266c50142d9da5d8ddb4a76b94e29fcfa83044f23f83449d1178e62c540e2c4f5233aca6373478024592e8a5ef3fac9e19e29d011e574c6099bce094a666ba96fbe2c5a6c831737e766db560fa5bf756f439c1da90d049e8faea9"}}, &(0x7f00000004c0)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x1000}, 0x4) 3.161184572s ago: executing program 4 (id=333): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000f00)={@val={0x12, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0xfdef) 2.804025138s ago: executing program 1 (id=334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (fail_nth: 4) 2.308284753s ago: executing program 5 (id=335): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) (fail_nth: 4) 2.239339777s ago: executing program 1 (id=336): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001cc0)=[{0x0}, {&(0x7f0000001d00)="4673c875ca4d9cb6f1d39f116100f2510db1e88217a55acb8319f17ef647c524516c0e45ec91a98a614276cb3218541b012ff7c4500085a8a73f16de7da7e09fd60d12af378f0d4e45a39c12499049a4c7da706ccb45e59f44eea3e029210fb44896e7390aa9fafaa5904e7102ca2c78281e6d502e74f2f47286ae53d3c2d60e849d4f7f06a1cda02c838026682b4c659d6880f41befc4932c538679b16fc17d5f9ff42cf0c40636a0e93b8df3d52cfcf405d244f08ef85e741b65a6ca657d4cba6489cdec65d7a4700c21f575637c51ce350ce775b107cd0cd53579011d99245b0efd78", 0xe4}, {&(0x7f0000001c00)="e146badcd6aca239c46b952e5dd493f4578940a27af1978ab8560c3b60f6060b76497e6650431a4ddd927750aae5b1792d322a1b3e349e18eb0d88e3ac7d84b4475809817555e4e5fef449336cea36e224bed5ca3cb83390ac1376599cd91e7c0328c417faf2f7347629897d2d7f9dd355d4b4d1889ddb54c17d5258e7ded64fca06", 0x82}], 0x3) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183e9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e425a4146056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423d27f7b78fafa060000006eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f87d2a1a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a42010e24f69de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc46f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4670b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400000000000000000000000000000001df00", 0x1000}}, 0x1006) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000140)=@keyring) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 2.144156447s ago: executing program 1 (id=337): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x11) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x0, 0xf7, 0x2, &(0x7f0000000180)={0x14, "fd6d44512b7e9cd49d5e4fd2f4f500007703000000030000000000000600"}}) (fail_nth: 4) 1.983914618s ago: executing program 1 (id=338): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r4, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) (async) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) 1.580925073s ago: executing program 4 (id=339): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2a, 0x1002) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/208) r1 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 1.580502979s ago: executing program 3 (id=340): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0404"], 0xd) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lsm_get_self_attr(0x65, 0xffffffffffffffff, &(0x7f0000000040), 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}], 0x18, 0x8000}, 0x2c0408d0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000018000902000000000000000002"], 0x1c}}, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xf, 0x0, &(0x7f0000000080)=0x4c) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x28, 0x8, 0x70bd28, 0x0, {0x4}, [@typed={0xc, 0x166, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x0, 0x0, 0x200428d4}, 0x80000) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='pim6reg\x00') 1.242727675s ago: executing program 3 (id=341): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f0000000900)="82ca0a65bd8c002b0304000e0580a70101000000000000fe", 0x18) (fail_nth: 4) 1.046021357s ago: executing program 1 (id=342): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}], 0x1}) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x4858, 0x100, 0x2, 0x63}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV_ZC={0x3a, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, {0x0, 0x0, 0x4}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x20008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8a000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x34, r6, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x97}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xf28, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r9 = socket$netlink(0x10, 0x3, 0x12) setuid(0xee00) clock_adjtime(0x0, &(0x7f0000000600)={0x7fffffff, 0x91df, 0x2, 0x80000000, 0x5, 0x8, 0x8000000000000000, 0x10000, 0x80, 0x8000000000000000, 0x0, 0x8, 0x5, 0xfab1, 0x8, 0x7fffffffffffffff, 0x87d, 0x40, 0x7, 0x0, 0x2, 0xdf, 0x9, 0xee, 0x1, 0x4}) ioctl$XFS_IOC_FD_TO_HANDLE(r9, 0xc038586a, &(0x7f0000000180)={r8, &(0x7f0000000000)='\\^%*^%!^\x00', 0x200000, &(0x7f0000000040)={@_ha_fsid={[0x1ff, 0xf]}, {0xde1, 0xb710, 0x0, 0x7}}, 0x0, &(0x7f0000000080), &(0x7f0000000140)=0x4}) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r10, 0x1, 0xd, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f00000000c0)={0x538b, 0x1, [{0x1, 0x1}]}) 864.931193ms ago: executing program 3 (id=343): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0xd8, 0x4) ptrace$pokeuser(0x6, r0, 0x118, 0x7) 661.72971ms ago: executing program 3 (id=344): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000400)=0x4, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000003c0)=0xbd, 0x4) preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000001200)=""/4093, 0xffd}, {&(0x7f0000003200)=""/4099, 0x1003}], 0x2, 0x0, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000080)="de55d6d5358785ea73b23fd4bffe7e5d", 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000000070500000000000000000001000004040007800c00024000000000000000070c000640000000000000000e08000540000000000c00034000000000000000060c00024000000000000000010900010073797a"], 0x5c}, 0x1, 0x0, 0x0, 0xc801}, 0x40004) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r6}, 0x10, &(0x7f0000000240)={&(0x7f0000000680)=@canfd={{0x2, 0x0, 0x1}, 0x39, 0x2, 0x0, 0x0, "3221e27681f7fcb43fac5b0f1cb5eb82586cf9ca68c368ec2aa8a923703a3d219dfc443c262d11074dbb328881103ed7f63612f92e6726c4d950430f09e4ddf9"}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000000100)={0x8, 0xb6}) writev(r4, &(0x7f0000000480)=[{&(0x7f00000004c0)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e0604080089", 0x59}], 0x1) 452.879617ms ago: executing program 5 (id=345): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0xfff8, 0xb1c2, 0x2, 0x1, 0x0, 0x0, 0x2}}, 0x50) vmsplice(r1, &(0x7f0000001dc0)=[{&(0x7f0000000100)="eb", 0x1}, {&(0x7f0000000300)="bf1b543f01774744496c4202cba401bd6718c2e54b3672e2cec78dae47e4f92f3a1ae5b015df18cbb9ce4865be0c904d3dce357523bf35024fc7468270902e1446c89cf1318dfadbe5f3dcb53def9c59cba08fce5e975dea09aed6d974ebe26cc6d0b4b97ae2fe85de5df593a7db3ed9883ad11d3e76c4467402eb6102cbc82432cb94eca7cf14261c548779568b9ac2ec0f5ff13e7b2b3dd5433818f2fa504eca419443c372b9f21c70", 0xaa}, {&(0x7f0000000480)="0161bbc33e42f1239fc480482e8ebe39a9edf44e1dfb25f61190e870b01aa8f4b86007085414e35169c880ad0e0252e61349371d473f46dc35dd0f7954ecbf05b9f0f574916e45a9de318f4c11eb5b8e82ccbbf2bb13d4711226033883b441f6fc1594d48d318eb1eb8e6e4e45a89063a078e86002b5cae6d73fde77ad11eaed2745eb0f496af633a423c17ce6892148a58e9224609428af8b319055ab24bd8745b5a1ddd84e9d1b0017cfaa885d0d79ed744608dc8718eaa573a6ead1dc3157fab30751ce0e6000594efcbe87859ceb28e2d0904290", 0xd6}, {&(0x7f00000005c0)="c8a957ca916e98eb1a468ead4d35ea2459e13a96651758e64a2c884087f8ec607d630430280ee456505a0c489f9e37b896114b604ce0faea2214384f1f8aeed9856a8413043b4a518ffe0213b2b4e72d597c4d21e46db1a165e44d16508288795c1d6fabeec58f359512438284ee4fb3cebd3462dc9fa8b4ac89c7fa89efe490a479b6c5209bcebac3554a722a57bdaf2cf19a3bb32c998485e49a6b600621", 0x9f}, {&(0x7f00000007c0)="8a6ab903cc000000a706b99dba4cb4bb354000bda351280eb0c62b8f1daa7edfad510cac3c449b453fa61121547d6fceb2555ce8d882e423cb45c12f4d4705a26ae2a1bcfb1ef465a23afc1b596f3261fe44792d9e73358da1128f3d8e7ba2f8b750e00e6114b9a023d2bb9d20c8da32b07a70a3f49b8be90f3afe2bf4254b9b8fde5cdab7ac4f06b21897f9ccc4645b3d8b2e726922f7a6f0f422bd671ff9f2bf62af8fbe2fbbece986", 0xaa}, {&(0x7f00000006c0)="f5", 0x1}, {&(0x7f0000001ec0)="0f2b1bdbf163b9ab5e8c6c20406c5298a44b8c9690a395e4938787fa6cecef74bc321850146245603cec8b29b17aabdb5fcac1d24e5c87416e787f24155029ed21377e233f182407cb06ec43a97c761f9fc5b8b4b216a117719d4d02fec600600f2a9f7ec2e5ff3fd4164ca306f44015cd170ee68f4a4a8712db0a9df9c6c3162ac0021a80353e746e41f3f3bc38c4ab4e096c5d01b320f96c6f7407061376c1ca96ff5a83fb5376d1d49b3bf94c6451f4ac078ffdb3b63260a8c4e0bfdf845f53d8c5476109a5eb2db3dc", 0xcb}, {&(0x7f0000000a80)="70c809ecac8fa811eda844845a44bbae1172459821694e979da1b4e3a8e5f98c8d39ae4fb170ea603e208cbda0166e428973e64c95d2985b2d1021cc70bb0e1c695e7e71c5b923f206bd49e8fba30d274454b720fea9b6a7ce6847c97ef78181c301edc0c93ba3d094a5e47ceec929630bde1494a8aa8e3bffee7f626d4c5b3c38368b2db1c863daa1ee552734e8370e9b8033ed673fe4a6f6c3965bd447b368dd395ec7bb7fd9b5aac73223c5917b3b48f1542ff88b03f13459ef0d6197accd15e539210273ce32fcfbf3dedf1c9e0954eddffc4dfcc95d77c4fedd0df3215a046f18cbea7edddd8d0d37ecf3214379ec917ba4f3ef7b17bb6389b6a837103a90a8f376fd00f71af14b7a93d69cc31ea8c0e794da8514139501ac7fceacd3bab02525fa804ec3cbe5be8622954a4aded9a38930d82acd07d0ea0e514dd5ac81860cf7d59c49a1559090ecc075256897e363e76d55565e9ca8cbdde4b6b5666272b77f0fddadd6a842091c7462037c661b2f62f4e2a9ccb55bff5fe7a1f936560a1197b14ef45e4a700c59817f9341274c6452671f14820e392d5b7667a13bd0b3e60cca7e0bd4c9397e4a91c7c13728240f51aedc1dc539f197535bd4403c579a13b3267e5513445facd91423b2c09aee4c635d611b98d6fe02e837875b92bda819a693ae639ee1ce151101dcd4f381692e0e978ecf7e1cb1a35adaf2e862594603a061343d3a022a976d26af6ffa276450ab0df7333f6c89323f6d4f0e616e6db22c45958da50e800576b486e12295844725807e7ba13a9cb95ac11be1af9cd286ab182d8ce1ff6878aeef112c590bd45fd13f36a5ef8c83436c9f617f96d860ed4f93fdfe674c45ec4f3829716378d4b850a0782c44734af7edc4595c8f0aa0ca7e1465cc090ad5e7bdfffe103cbfc9f15e2d84e74f8c5a91d9ca3c8dafaa85cad51720420788cb8315561974c97f246b060a7335b3a3318148c9884942fa2a12d01bea80ee5adfd5144125fea34835aea75cd00c901232df0f46607eeef9d07a791525c4f639c5542a1d1fbf6a2d3ddc070ed2930a94a46570e649903cd1bbc7f6c917678429e4e4c61f6c6e23aa4b9a3398ed372e6e5c19a4cebe5c3d100c9e72ad81c6663c687c101e8aed18b55c4dae7a425feb1cd37ee383a7a73c26049d120ffe5b592e47d4a64de35f5a9b2d4e2b9e08a8a39d62f12e57262166e9b3c8d6cf3f2dbfe0d8fdd7433b249e3f9847812a181111fc4df16c1de4fd2c149efab2d0ee3cf72932d119820fa43b69ae29fa573f32d4d9f4e4390ad5aa91c3ccc0c6fa77253ce01d47524ef0a525930e6d382a6d7fdfb053a968cc0c80d73b37a37ae4b849ddf5ad4df6aacc04af5e2a8c07b3c4b6354a593fbcb63b5b54ad5acd60f6502f57001f8c618edaa1a53a5d23e2982aa8d3306620ca91be5a8f1d144aa68519a75c4413eff637a780b861e10c76d3e7dca175c0373f9b5fa9c5bdbefec1b1ed007c8e1b352ec7807ff62c5c6ffbd3c9199d643e50b398791dabc0cf03e05ddee041ba31e580bf589b29a5551234a0de7d780ad2a1ae983545b8a09fcdb060dc42abce34cf18dec62148cb3a5ed6cd027e994912176b26529d930cf1c58c17b8be209101c3a6f2ff0792b15bc37a304c907694e38c923564be400def594228e320323c51a3d34b372eb566229e00fda066b2bf238ae6b3ce867d85805d003529d4cb249da2e1913e70f9abf48743f311fdbd28ed9a124f075c0e5028a9a06c7fcec00a32173ebbc6771a1e9fb8fbe4dda0bcb192f8579e1c894c2b05323b02db32309fb37c77e40687dab4881b541abacc4a8dc65bb97f81e97be374b2286053d637804bd479649a02f1fb6c655a92be7e13ae6e2a7b8e456f78c7a7d6852197c05262b9696dd357e44be99dd611b2f0e875e61fa2cbc94f946ce46d4bdc4b0863a65cef98c11b0759f0033bd3669d980bb107e8d99ed63b04315469ac0c579468bb02c62336f5146a52f059a03fcf77a3dbf310e5474e9a3b2d964e6ed2798ca5bebd6889da7694be5a6e5c1bf74ad186bd942d80faf96d9d18692ef86d402b60468abcfacd22d86dc516cd028819473bd1191609c0c68f6a8497a6a75732300827eff9071d21f442c5bc7a2300e09f53a7b5ef6b211365573be7df66b3720a1a80daf8e5464743421d5a983d5da982bae284481b498365ddc3115703000d6398c2f7dabc0685843148a56f7c65ed16882091bf088ab4bfeeb04bc8cd5cabc2167f333bcfb95530ebaad6ea896fb0c96af0b98384fa2c2ee7015f33445c2a594c2d88d616da724908f64ef1e41ec328a9d967942f3421c4cc17ae02fd85549e149acc3c16a01e5531308ec4657fd67031cdfa5279bbb013bf2a21f33afe1dafb95d0cd890a49fe9c4e182a9820fb1f605b0915f17220fbc4d5ff93c0c7bd48d7c54f264455fc01bb56953c705c66fbfc4a959a228211fbf6b7ab6db5a1a40d767cdd3dcbcfcbfcd211be05a20d8a4c2a69d0a7b8c3c81e03550b516bc4ce300d190f958c2b758421abd5d85df6353d8bcd9a464de9815cdc1c89db89972877e4dde7f272aad87f35e89b8999bf7110a20c0b092ed0c0de29381714e10e8e5bbd79352a8fec3502cda0d5004c3b2394b7fc7112b936ed6df7c17af09268c4ae2fa0aa336fa6801b4099b8a7b885e16f7a3daf3e38f965b5cc4ec6b001a44719a5f2a243b0d94ce23b5c784145d8f44d2b2c308f7b8a5e68dcef8d8654a861796c3938763c04d13945ea8c8f804ecee0625a07caea35af43456a94fce85cd17149d629f2920322969ad509bcda3aa13df3e843ccb021c9ac44d0ad300d45d5ad87ac66f7cd81d3689115bd4571b2992e3b25bddb8240a97fbfbb8694e2c996549816405945602d1403aa3acd00d071d6abe65bd7952bc24f65b83ec56f21f8eb41f47969e3101718292d7959f40b2bac24f66f489e7f13df178f52f5ff1ce271a3110bab7af0f0050a850fb954ef08838628d82bec91228a867c2ecb6b836bc53cc59c0f772dab218fcd7b0ed67cf0e05c47e52bf7f7ecddf781bf38e7b95c2aeba9bb5b0ea151a8ca4695be766075bfabaf1ea2cc6c253bdd4018f517008525a51e5ffd8b10ed5d238a4e361d4fa5082867d160b5ded7cfa95bedc0c542f463b33ae76938916a3fd2ba49a34ec49f5c0ed04f6ce5d41f7f6805b539852f749277a0bc1536c2072cbf5dbcf387faace8ca57419e9388831f5b4334f0e5539d94b40bf336e5dc3f45bdd7d61eb5dde8f6af912c31cb765bf1e9f34e0b94ce2959abfb1ca03d813d7da5fae4bf21d62de535d78eabec051c0dcfd49b3efb9818a218f2343b186a7bf5e0d584f50379591ceb73b8c46f431ef36a05d66b8e131f159c85be5447622554366c547cb1a0c0f792d70bd9f9087a773e09a904960ee4d5be344a67d6d07722c6830b48f858d9fe36f6a2da2bcf7f8ad0e15b76cd04bc2338d0d99e9ef17ef2eca24065303aa54d1216311924688ee52e9e7ad09ed1fdc4a8c29b311745fa185962039646b6b27ea1527920629e47268e996a5b5785ee355eb123f04622c65adbd0470b02896c9fbeb82037af852ae40c4cd401abe9740911f2dd7d9364b1d8f9e7c2b54fa4440ffecbd6ed7c852f84b042d4be7b974f32ccc993ce44fe1cf6c6f3b0183645fc2d31efc7ccc2073d824e533ae204f783a581accf5c2dcf6dad238d1a1cf194c643d7c6ddb67bc1da3ba1776a77ce99cde1232bdd0e249c57129d94d2e74c0fe9bb0bf86d538019a18b0c7521b39eba9c02ec1c40fefa0010a3a4a763ad1fb1ab09dc2d8ce8d6faaf9eb21988fa55dada8d0f42922ddb2bd47a0fd09aa065d588325c010cc63fb17bf57f0b6dbbe8ac0fe202be25a836cf8a0eb2999d514d9fc24a1c9dfe9338f423e19a189aeb5f92e19e185cbd77c1c447116d1457d0bbcd4589e46d53e06c7b6e93aae4d56e0b97af01be1ea5bb488cd25e7e5a82f15140e19c70e363834c7b346b34e7a898083408073ad6351f7ed6c4f23ef9f613830af35e131c2689a2646d74fc8c2d3537bad873cdedf4fe8ed923fce00b56b2ecb1d04e0cc34b52d4b0dec8f0588dff608f297a5fcb0dc392ab07880387862045b7906d825f6da874808e3115eba067a5655985b61898aae4bd875785e1345399bc9fd1da7ab83cf4060de0784fe66f352863b40c0058a54352e09064371e8c73aee7b5f0c8070160fa1f3e8fe63c28c374fb14c81a6554285505a251c3881f6ca993a2c90e981ea0b146c8185b9e33503265808e66f5c563a026ea74a551834439912894cb36d947414f17f2c89b24d567f07e6ace0be2e1db6e5b35fb4a1598b0d4c127ef27ca13c77", 0xc1b}], 0x8, 0x1000000000000002) ptrace(0x10, r0) socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) ptrace$pokeuser(0x6, r0, 0x108, 0x4) ptrace$pokeuser(0x6, r0, 0x118, 0x7) 354.443975ms ago: executing program 3 (id=346): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f0000000900)="83ca0a65bd8c002b0304000e0580a70101000000000000fe", 0x18) 24.603553ms ago: executing program 3 (id=347): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001cc0)=[{&(0x7f0000000280)="aefdf79d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11", 0x1c}, {&(0x7f0000001d00)="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", 0xfa}, {&(0x7f0000001c00)="e146badcd6aca239c46b952e5dd493f4578940a27af1978ab8560c3b60f6060b76497e6650431a4ddd927750aae5b1792d322a1b3e349e18eb0d88e3ac7d84b4475809817555e4e5fef449336cea36e224bed5ca3cb83390ac1376599cd91e7c0328c417faf2f7347629897d2d7f9dd355d4b4d1889ddb54c17d5258e7ded64fca062fc431719f65", 0x88}], 0x3) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) (fail_nth: 4) 0s ago: executing program 5 (id=348): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001cc0)=[{&(0x7f0000000280)="aefdf79d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d7", 0x20}, {&(0x7f0000001d00)="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", 0xfa}, {&(0x7f0000001c00)="e146badcd6aca239c46b952e5dd493f4578940a27af1978ab8560c3b60f6060b76497e6650431a4ddd927750aae5b1792d322a1b3e349e18eb0d88e3", 0x3c}], 0x3) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) (fail_nth: 4) kernel console output (not intermixed with test programs): nl_rcv_msg+0x614/0x7a0 [ 176.533557][ T6545] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.533589][ T6545] ? __pfx_thermal_genl_cmd_doit+0x10/0x10 [ 176.533628][ T6545] netlink_rcv_skb+0x226/0x4a0 [ 176.533655][ T6545] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.533690][ T6545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.533730][ T6545] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.533755][ T6545] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.533784][ T6545] genl_rcv+0x28/0x40 [ 176.533823][ T6545] netlink_unicast+0x7f5/0x990 [ 176.533858][ T6545] netlink_sendmsg+0x813/0xb40 [ 176.533895][ T6545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.533935][ T6545] ? aa_sock_msg_perm+0x122/0x200 [ 176.533982][ T6545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.534007][ T6545] sock_sendmsg_nosec+0x13a/0x180 [ 176.534042][ T6545] ____sys_sendmsg+0x565/0x870 [ 176.534068][ T6545] ? __might_fault+0xaf/0x130 [ 176.534101][ T6545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.534129][ T6545] ? import_iovec+0x73/0xa0 [ 176.534150][ T6545] ___sys_sendmsg+0x2a5/0x360 [ 176.534169][ T6545] ? __lock_acquire+0x683/0x2ce0 [ 176.534194][ T6545] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.534248][ T6545] ? __fget_files+0x2a/0x420 [ 176.534263][ T6545] ? __fget_files+0x3a8/0x420 [ 176.534292][ T6545] __x64_sys_sendmsg+0x1b7/0x290 [ 176.534315][ T6545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.534351][ T6545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.534370][ T6545] do_syscall_64+0x174/0x580 [ 176.534390][ T6545] ? trace_irq_disable+0x3b/0x140 [ 176.534411][ T6545] ? clear_bhb_loop+0x40/0x90 [ 176.534434][ T6545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.534454][ T6545] RIP: 0033:0x7f77c3e8ce59 [ 176.534472][ T6545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.534488][ T6545] RSP: 002b:00007f77c20e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.534507][ T6545] RAX: ffffffffffffffda RBX: 00007f77c4105fa0 RCX: 00007f77c3e8ce59 [ 176.534519][ T6545] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 176.534529][ T6545] RBP: 00007f77c20e6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.534539][ T6545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.534548][ T6545] R13: 00007f77c4106038 R14: 00007f77c4105fa0 R15: 00007ffd94bc7538 [ 176.534574][ T6545] [ 176.965445][ T5625] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 176.980998][ T5758] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 177.058054][ T5758] usb 2-1: USB disconnect, device number 17 [ 177.118719][ T5625] usb 4-1: device descriptor read/64, error -71 [ 177.189564][ T5758] usblp0: removed [ 177.254144][ T5828] usb 5-1: USB disconnect, device number 7 [ 177.358943][ T6552] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 177.376426][ T5625] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 177.515617][ T5625] usb 4-1: device descriptor read/64, error -71 [ 177.517767][ T6556] FAULT_INJECTION: forcing a failure. [ 177.517767][ T6556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.517807][ T6556] CPU: 1 UID: 0 PID: 6556 Comm: syz.4.169 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 177.517848][ T6556] Tainted: [L]=SOFTLOCKUP [ 177.517856][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.517870][ T6556] Call Trace: [ 177.517878][ T6556] [ 177.517887][ T6556] dump_stack_lvl+0xe8/0x150 [ 177.517923][ T6556] should_fail_ex+0x467/0x600 [ 177.517960][ T6556] _copy_from_user+0x2d/0xb0 [ 177.517984][ T6556] __sys_sendto+0x2b5/0x5d0 [ 177.518015][ T6556] ? __pfx___sys_sendto+0x10/0x10 [ 177.518066][ T6556] ? __pfx_ksys_write+0x10/0x10 [ 177.518114][ T6556] __x64_sys_sendto+0xde/0x100 [ 177.518138][ T6556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.518162][ T6556] do_syscall_64+0x174/0x580 [ 177.518187][ T6556] ? trace_irq_disable+0x3b/0x140 [ 177.518213][ T6556] ? clear_bhb_loop+0x40/0x90 [ 177.518240][ T6556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.518263][ T6556] RIP: 0033:0x7ffa3faece59 [ 177.518282][ T6556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.518322][ T6556] RSP: 002b:00007ffa3dd46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 177.518345][ T6556] RAX: ffffffffffffffda RBX: 00007ffa3fd65fa0 RCX: 00007ffa3faece59 [ 177.518360][ T6556] RDX: 000000000000ffec RSI: 0000200000000040 RDI: 0000000000000004 [ 177.518374][ T6556] RBP: 00007ffa3dd46090 R08: 0000200000000340 R09: 0000000000000010 [ 177.518388][ T6556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.518406][ T6556] R13: 00007ffa3fd66038 R14: 00007ffa3fd65fa0 R15: 00007ffe33803358 [ 177.518439][ T6556] [ 177.593013][ T5758] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 177.778594][ T5625] usb usb4-port1: attempt power cycle [ 177.877038][ T5758] usb 2-1: Using ep0 maxpacket: 32 [ 177.879380][ T5758] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 177.879416][ T5758] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 177.879434][ T5758] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 177.879477][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 177.879498][ T5758] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 177.879524][ T5758] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 177.879566][ T5758] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 177.879590][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.082048][ T5758] usb 2-1: config 0 descriptor?? [ 178.140980][ T5625] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 178.157788][ T5625] usb 4-1: device descriptor read/8, error -71 [ 178.244494][ T5758] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 178.281078][ T5758] usb 2-1: USB disconnect, device number 18 [ 178.309911][ T5758] usblp0: removed [ 178.398852][ T5625] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 178.416958][ T5625] usb 4-1: device descriptor read/8, error -71 [ 178.538119][ T5625] usb usb4-port1: unable to enumerate USB device [ 179.488451][ T6584] FAULT_INJECTION: forcing a failure. [ 179.488451][ T6584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.488489][ T6584] CPU: 1 UID: 0 PID: 6584 Comm: syz.5.180 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 179.488519][ T6584] Tainted: [L]=SOFTLOCKUP [ 179.488526][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.488538][ T6584] Call Trace: [ 179.488546][ T6584] [ 179.488555][ T6584] dump_stack_lvl+0xe8/0x150 [ 179.488586][ T6584] should_fail_ex+0x467/0x600 [ 179.488623][ T6584] _copy_from_user+0x2d/0xb0 [ 179.488648][ T6584] ip6gre_tunnel_siocdevprivate+0x1fb/0x720 [ 179.488691][ T6584] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 179.488749][ T6584] ? full_name_hash+0x92/0xe0 [ 179.488788][ T6584] dev_ifsioc+0xb56/0x1360 [ 179.488819][ T6584] dev_ioctl+0x84c/0x1150 [ 179.488846][ T6584] sock_ioctl+0x756/0x7f0 [ 179.488880][ T6584] ? __pfx_sock_ioctl+0x10/0x10 [ 179.488912][ T6584] ? __fget_files+0x3a8/0x420 [ 179.488932][ T6584] ? __fget_files+0x2a/0x420 [ 179.488955][ T6584] ? bpf_lsm_file_ioctl+0x9/0x20 [ 179.488981][ T6584] ? __pfx_sock_ioctl+0x10/0x10 [ 179.489011][ T6584] __se_sys_ioctl+0xff/0x170 [ 179.489038][ T6584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.489062][ T6584] do_syscall_64+0x174/0x580 [ 179.489084][ T6584] ? trace_irq_disable+0x3b/0x140 [ 179.489110][ T6584] ? clear_bhb_loop+0x40/0x90 [ 179.489137][ T6584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.489159][ T6584] RIP: 0033:0x7f77c3e8ce59 [ 179.489179][ T6584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.489207][ T6584] RSP: 002b:00007f77c20e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.489234][ T6584] RAX: ffffffffffffffda RBX: 00007f77c4105fa0 RCX: 00007f77c3e8ce59 [ 179.489250][ T6584] RDX: 00002000000002c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 179.489263][ T6584] RBP: 00007f77c20e6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.489276][ T6584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.489288][ T6584] R13: 00007f77c4106038 R14: 00007f77c4105fa0 R15: 00007ffd94bc7538 [ 179.489320][ T6584] [ 179.886025][ T6582] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.072324][ T32] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 180.231377][ T32] usb 6-1: config 0 interface 0 has no altsetting 0 [ 180.231421][ T32] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 180.231447][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.353187][ T32] usb 6-1: config 0 descriptor?? [ 180.591910][ T6588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.654024][ T6588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.664340][ T32] (null): keene_cmd_main failed (-71) [ 180.697839][ T32] video4linux radio48: keene_cmd_main failed (-71) [ 180.697867][ T32] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 180.815929][ T32] usb 6-1: USB disconnect, device number 7 [ 180.996495][ T5758] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 181.127844][ T6610] FAULT_INJECTION: forcing a failure. [ 181.127844][ T6610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.127882][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.3.187 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 181.127912][ T6610] Tainted: [L]=SOFTLOCKUP [ 181.127920][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 181.127933][ T6610] Call Trace: [ 181.127941][ T6610] [ 181.127951][ T6610] dump_stack_lvl+0xe8/0x150 [ 181.127980][ T6610] should_fail_ex+0x467/0x600 [ 181.128017][ T6610] _copy_from_user+0x2d/0xb0 [ 181.128042][ T6610] vti6_siocdevprivate+0x1f2/0x820 [ 181.128077][ T6610] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 181.128133][ T6610] ? full_name_hash+0x92/0xe0 [ 181.128176][ T6610] dev_ifsioc+0xb56/0x1360 [ 181.128205][ T6610] dev_ioctl+0x84c/0x1150 [ 181.128231][ T6610] sock_ioctl+0x756/0x7f0 [ 181.128264][ T6610] ? __pfx_sock_ioctl+0x10/0x10 [ 181.128296][ T6610] ? __fget_files+0x3a8/0x420 [ 181.128316][ T6610] ? __fget_files+0x2a/0x420 [ 181.128339][ T6610] ? bpf_lsm_file_ioctl+0x9/0x20 [ 181.128364][ T6610] ? __pfx_sock_ioctl+0x10/0x10 [ 181.128392][ T6610] __se_sys_ioctl+0xff/0x170 [ 181.128417][ T6610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.128441][ T6610] do_syscall_64+0x174/0x580 [ 181.128464][ T6610] ? trace_irq_disable+0x3b/0x140 [ 181.128490][ T6610] ? clear_bhb_loop+0x40/0x90 [ 181.128528][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.128550][ T6610] RIP: 0033:0x7f232791ce59 [ 181.128570][ T6610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.128590][ T6610] RSP: 002b:00007f2325b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.128613][ T6610] RAX: ffffffffffffffda RBX: 00007f2327b95fa0 RCX: 00007f232791ce59 [ 181.128629][ T6610] RDX: 0000200000000140 RSI: 00000000000089f1 RDI: 0000000000000003 [ 181.128643][ T6610] RBP: 00007f2325b76090 R08: 0000000000000000 R09: 0000000000000000 [ 181.128657][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.128669][ T6610] R13: 00007f2327b96038 R14: 00007f2327b95fa0 R15: 00007ffdeedf9ae8 [ 181.128701][ T6610] [ 181.398049][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 181.398106][ T5758] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 181.398132][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.437749][ T5758] usb 2-1: config 0 descriptor?? [ 181.439049][ T6606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.818910][ T6620] gfs2: Unknown parameter 'discard^ |t&' [ 181.856966][ T5758] hid (null): unknown global tag 0xd [ 181.856992][ T5758] hid (null): report_id 58950 is invalid [ 181.857028][ T5758] hid (null): unknown global tag 0xe [ 181.874547][ T5758] hid (null): unknown global tag 0xd [ 181.943506][ T5758] hid_parser_main: 35 callbacks suppressed [ 181.943534][ T5758] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 181.943566][ T5758] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 181.943589][ T5758] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 181.943613][ T5758] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 181.943635][ T5758] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 181.943658][ T5758] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 181.943681][ T5758] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 181.943706][ T5758] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 181.943731][ T5758] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 181.943756][ T5758] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 181.944418][ T5758] logitech-djreceiver 0003:046D:C71F.000A: unexpected long global item [ 181.945036][ T5758] logitech-djreceiver 0003:046D:C71F.000A: logi_dj_probe: parse failed [ 181.945117][ T5758] logitech-djreceiver 0003:046D:C71F.000A: probe with driver logitech-djreceiver failed with error -22 [ 182.040739][ T32] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 182.130933][ T5758] usb 2-1: USB disconnect, device number 19 [ 182.338310][ T32] usb 4-1: device descriptor read/64, error -71 [ 182.575485][ T32] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 182.708674][ T32] usb 4-1: device descriptor read/64, error -71 [ 182.826565][ T32] usb usb4-port1: attempt power cycle [ 182.947043][ T6623] serio: Serial port ptm0 [ 183.165632][ T32] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 183.186462][ T32] usb 4-1: device descriptor read/8, error -71 [ 183.310753][ T6631] openvswitch: netlink: Message has 1 unknown bytes. [ 183.427721][ T32] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 183.454753][ T32] usb 4-1: device descriptor read/8, error -71 [ 183.565736][ T32] usb usb4-port1: unable to enumerate USB device [ 183.851729][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 185.015434][ T6656] FAULT_INJECTION: forcing a failure. [ 185.015434][ T6656] name failslab, interval 1, probability 0, space 0, times 0 [ 185.015468][ T6656] CPU: 1 UID: 0 PID: 6656 Comm: syz.3.201 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 185.015496][ T6656] Tainted: [L]=SOFTLOCKUP [ 185.015504][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 185.015516][ T6656] Call Trace: [ 185.015524][ T6656] [ 185.015532][ T6656] dump_stack_lvl+0xe8/0x150 [ 185.015564][ T6656] should_fail_ex+0x467/0x600 [ 185.015633][ T6656] should_failslab+0xa8/0x100 [ 185.015659][ T6656] __kmalloc_noprof+0xfe/0x780 [ 185.015692][ T6656] ? tomoyo_encode+0x2ad/0x570 [ 185.015721][ T6656] ? tomoyo_encode+0x2ad/0x570 [ 185.015755][ T6656] tomoyo_encode+0x2ad/0x570 [ 185.015791][ T6656] tomoyo_realpath_from_path+0x5fa/0x640 [ 185.015831][ T6656] ? tomoyo_path_number_perm+0x219/0x5f0 [ 185.015861][ T6656] tomoyo_path_number_perm+0x246/0x5f0 [ 185.015890][ T6656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 185.015915][ T6656] ? __lock_acquire+0x683/0x2ce0 [ 185.015958][ T6656] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 185.015982][ T6656] ? hook_file_ioctl+0x1f3/0x600 [ 185.016008][ T6656] ? lockdep_hardirqs_on+0x7a/0x110 [ 185.016052][ T6656] ? __fget_files+0x2a/0x420 [ 185.016075][ T6656] ? __fget_files+0x2a/0x420 [ 185.016093][ T6656] ? __fget_files+0x3a8/0x420 [ 185.016112][ T6656] ? __fget_files+0x2a/0x420 [ 185.016135][ T6656] security_file_ioctl+0xc3/0x2a0 [ 185.016161][ T6656] __se_sys_ioctl+0x47/0x170 [ 185.016188][ T6656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.016211][ T6656] do_syscall_64+0x174/0x580 [ 185.016234][ T6656] ? trace_irq_disable+0x3b/0x140 [ 185.016260][ T6656] ? clear_bhb_loop+0x40/0x90 [ 185.016287][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.016310][ T6656] RIP: 0033:0x7f232791ce59 [ 185.016330][ T6656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.016349][ T6656] RSP: 002b:00007f2325b55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.016372][ T6656] RAX: ffffffffffffffda RBX: 00007f2327b96090 RCX: 00007f232791ce59 [ 185.016387][ T6656] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 185.016399][ T6656] RBP: 00007f2325b55090 R08: 0000000000000000 R09: 0000000000000000 [ 185.016412][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.016423][ T6656] R13: 00007f2327b96128 R14: 00007f2327b96090 R15: 00007ffdeedf9ae8 [ 185.016456][ T6656] [ 185.017676][ T6656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 185.855440][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 185.858958][ T6676] Cannot find set identified by id 0 to match [ 186.170562][ T6681] FAULT_INJECTION: forcing a failure. [ 186.170562][ T6681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.170596][ T6681] CPU: 1 UID: 0 PID: 6681 Comm: syz.3.210 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 186.170620][ T6681] Tainted: [L]=SOFTLOCKUP [ 186.170626][ T6681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.170637][ T6681] Call Trace: [ 186.170644][ T6681] [ 186.170651][ T6681] dump_stack_lvl+0xe8/0x150 [ 186.170678][ T6681] should_fail_ex+0x467/0x600 [ 186.170709][ T6681] _copy_to_user+0x31/0xb0 [ 186.170740][ T6681] simple_read_from_buffer+0xe1/0x170 [ 186.170776][ T6681] proc_fail_nth_read+0x1be/0x230 [ 186.170806][ T6681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.170835][ T6681] ? rw_verify_area+0x250/0x4d0 [ 186.170855][ T6681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.170882][ T6681] vfs_read+0x219/0xa90 [ 186.170908][ T6681] ? __pfx_vfs_read+0x10/0x10 [ 186.170929][ T6681] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 186.170948][ T6681] ? lockdep_hardirqs_on+0x7a/0x110 [ 186.170966][ T6681] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 186.170984][ T6681] ? mutex_lock_nested+0x152/0x1d0 [ 186.171008][ T6681] ? fdget_pos+0x252/0x320 [ 186.171031][ T6681] ksys_read+0x156/0x270 [ 186.171053][ T6681] ? __pfx_ksys_read+0x10/0x10 [ 186.171076][ T6681] ? __pfx_v4l2_ioctl+0x10/0x10 [ 186.171107][ T6681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.171127][ T6681] do_syscall_64+0x174/0x580 [ 186.171146][ T6681] ? trace_irq_disable+0x3b/0x140 [ 186.171175][ T6681] ? clear_bhb_loop+0x40/0x90 [ 186.171197][ T6681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.171213][ T6681] RIP: 0033:0x7f23278dd68e [ 186.171239][ T6681] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.171256][ T6681] RSP: 002b:00007f2325b75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.171274][ T6681] RAX: ffffffffffffffda RBX: 00007f2325b766c0 RCX: 00007f23278dd68e [ 186.171286][ T6681] RDX: 000000000000000f RSI: 00007f2325b760a0 RDI: 0000000000000004 [ 186.171296][ T6681] RBP: 00007f2325b76090 R08: 0000000000000000 R09: 0000000000000000 [ 186.171307][ T6681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.171316][ T6681] R13: 00007f2327b96038 R14: 00007f2327b95fa0 R15: 00007ffdeedf9ae8 [ 186.171347][ T6681] [ 186.240566][ T5758] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 186.495416][ T5758] usb 6-1: Using ep0 maxpacket: 16 [ 186.497873][ T5758] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.497901][ T5758] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.501289][ T5758] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.501321][ T5758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.501343][ T5758] usb 6-1: Product: syz [ 186.501368][ T5758] usb 6-1: Manufacturer: syz [ 186.501382][ T5758] usb 6-1: SerialNumber: syz [ 186.629705][ T5758] usb 6-1: 0:2 : does not exist [ 186.847027][ T5758] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 186.912315][ T37] audit: type=1400 audit(1782285238.429:5): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6687 comm="syz.4.213" [ 187.138549][ T37] audit: type=1400 audit(1782285238.629:6): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=6689 comm="syz.4.214" [ 187.185510][ T5758] usb 6-1: USB disconnect, device number 8 [ 187.339025][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.465540][ T5828] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 187.489519][ T6697] sg_write: data in/out 235872/136 bytes for SCSI command 0x0-- guessing data in; [ 187.489519][ T6697] program syz.3.216 not setting count and/or reply_len properly [ 187.515469][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 187.618652][ T5828] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 187.618692][ T5828] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 187.618714][ T5828] usb 5-1: config 220 has no interface number 2 [ 187.618783][ T5828] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 187.618816][ T5828] usb 5-1: config 220 interface 0 has no altsetting 0 [ 187.618834][ T5828] usb 5-1: config 220 interface 76 has no altsetting 0 [ 187.618847][ T5828] usb 5-1: config 220 interface 1 has no altsetting 0 [ 187.640795][ T5828] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 187.640889][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.640944][ T5828] usb 5-1: Product: syz [ 187.640985][ T5828] usb 5-1: Manufacturer: syz [ 187.641027][ T5828] usb 5-1: SerialNumber: syz [ 187.645468][ T10] usb 2-1: device descriptor read/64, error -71 [ 187.945577][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 187.975156][ T5828] usb 5-1: selecting invalid altsetting 0 [ 187.982951][ T5828] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 187.982987][ T5828] uvcvideo 5-1:220.0: No valid video chain found. [ 188.032441][ T1011] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 188.069409][ T5828] usb 5-1: selecting invalid altsetting 0 [ 188.069438][ T5828] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 188.078592][ T5828] usb 5-1: USB disconnect, device number 8 [ 188.091608][ T10] usb 2-1: device descriptor read/64, error -71 [ 188.203429][ T10] usb usb2-port1: attempt power cycle [ 188.214697][ T1011] usb 6-1: config 0 has no interfaces? [ 188.214743][ T1011] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.214761][ T1011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.240322][ T1011] usb 6-1: config 0 descriptor?? [ 188.578617][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 188.596253][ T10] usb 2-1: device descriptor read/8, error -71 [ 188.795559][ T1011] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 188.837056][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 188.856165][ T10] usb 2-1: device descriptor read/8, error -71 [ 188.885541][ T5828] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 188.950641][ T1011] usb 5-1: not running at top speed; connect to a high speed hub [ 188.968149][ T1011] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= 0.40 [ 188.968174][ T1011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.968191][ T1011] usb 5-1: Product: syz [ 188.968202][ T1011] usb 5-1: Manufacturer: syz [ 188.968214][ T1011] usb 5-1: SerialNumber: syz [ 188.972763][ T10] usb usb2-port1: unable to enumerate USB device [ 189.104279][ T10] usb 6-1: USB disconnect, device number 9 [ 189.115782][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 189.120063][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.120217][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.121691][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.121746][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.123174][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.123281][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.202650][ T5828] usb 4-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 189.202742][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.202765][ T5828] usb 4-1: Product: syz [ 189.202780][ T5828] usb 4-1: Manufacturer: syz [ 189.202807][ T5828] usb 4-1: SerialNumber: syz [ 189.285602][ T5828] usb 4-1: config 0 descriptor?? [ 189.294742][ T5828] cdc_acm 4-1:0.0: Zero length descriptor references [ 189.294777][ T5828] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 189.400642][ T1011] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.473197][ T6709] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 189.473243][ T6709] audit: out of memory in audit_log_start [ 189.498338][ T10] usb 4-1: USB disconnect, device number 29 [ 189.674680][ T1011] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 189.711075][ T1011] usb 5-1: USB disconnect, device number 9 [ 189.765153][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.945383][ T6718] FAULT_INJECTION: forcing a failure. [ 189.945383][ T6718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.945416][ T6718] CPU: 0 UID: 0 PID: 6718 Comm: syz.4.226 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 189.945440][ T6718] Tainted: [L]=SOFTLOCKUP [ 189.945446][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.945456][ T6718] Call Trace: [ 189.945463][ T6718] [ 189.945472][ T6718] dump_stack_lvl+0xe8/0x150 [ 189.945496][ T6718] should_fail_ex+0x467/0x600 [ 189.945525][ T6718] _copy_to_user+0x31/0xb0 [ 189.945546][ T6718] ipv6_get_msfilter+0x259/0x360 [ 189.945576][ T6718] ? __pfx_ipv6_get_msfilter+0x10/0x10 [ 189.945632][ T6718] do_ipv6_getsockopt+0xd3f/0x2510 [ 189.945664][ T6718] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 189.945692][ T6718] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 189.945717][ T6718] ? _parse_integer_limit+0x192/0x1e0 [ 189.945753][ T6718] ? __lock_acquire+0x683/0x2ce0 [ 189.945777][ T6718] ? kstrtouint+0x6e/0xe0 [ 189.945819][ T6718] ? __might_fault+0xaf/0x130 [ 189.945850][ T6718] ipv6_getsockopt+0xbd/0x2c0 [ 189.945876][ T6718] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 189.945902][ T6718] ? sock_common_getsockopt+0x2d/0xb0 [ 189.945930][ T6718] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 189.945956][ T6718] do_sock_getsockopt+0x51d/0x7e0 [ 189.945993][ T6718] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 189.946025][ T6718] ? __fget_files+0x3a8/0x420 [ 189.946040][ T6718] ? __fget_files+0x2a/0x420 [ 189.946061][ T6718] __x64_sys_getsockopt+0x1aa/0x250 [ 189.946086][ T6718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.946105][ T6718] do_syscall_64+0x174/0x580 [ 189.946124][ T6718] ? trace_irq_disable+0x3b/0x140 [ 189.946144][ T6718] ? clear_bhb_loop+0x40/0x90 [ 189.946166][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.946182][ T6718] RIP: 0033:0x7ffa3faece59 [ 189.946199][ T6718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.946214][ T6718] RSP: 002b:00007ffa3dd46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 189.946233][ T6718] RAX: ffffffffffffffda RBX: 00007ffa3fd65fa0 RCX: 00007ffa3faece59 [ 189.946246][ T6718] RDX: 0010000000000030 RSI: 0000000000000029 RDI: 0000000000000003 [ 189.946256][ T6718] RBP: 00007ffa3dd46090 R08: 0000200000e5f000 R09: 0000000000000000 [ 189.946267][ T6718] R10: 0000200000034000 R11: 0000000000000246 R12: 0000000000000001 [ 189.946278][ T6718] R13: 00007ffa3fd66038 R14: 00007ffa3fd65fa0 R15: 00007ffe33803358 [ 189.946304][ T6718] [ 190.786543][ T6734] FAULT_INJECTION: forcing a failure. [ 190.786543][ T6734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.786583][ T6734] CPU: 0 UID: 0 PID: 6734 Comm: syz.5.232 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 190.786613][ T6734] Tainted: [L]=SOFTLOCKUP [ 190.786621][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.786634][ T6734] Call Trace: [ 190.786643][ T6734] [ 190.786652][ T6734] dump_stack_lvl+0xe8/0x150 [ 190.786683][ T6734] should_fail_ex+0x467/0x600 [ 190.786718][ T6734] _copy_from_iter+0x1d3/0x1660 [ 190.786754][ T6734] ? rcu_is_watching+0x15/0xb0 [ 190.786786][ T6734] ? trace_kmem_cache_alloc+0x29/0xe0 [ 190.786825][ T6734] ? __pfx__copy_from_iter+0x10/0x10 [ 190.786855][ T6734] ? __alloc_skb+0x276/0x7a0 [ 190.786875][ T6734] ? __alloc_skb+0x276/0x7a0 [ 190.786902][ T6734] ? netlink_sendmsg+0x650/0xb40 [ 190.786928][ T6734] ? skb_put+0x112/0x210 [ 190.786954][ T6734] netlink_sendmsg+0x6c0/0xb40 [ 190.786991][ T6734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.787022][ T6734] ? aa_sock_msg_perm+0x122/0x200 [ 190.787056][ T6734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.787082][ T6734] sock_sendmsg_nosec+0x13a/0x180 [ 190.787121][ T6734] ____sys_sendmsg+0x565/0x870 [ 190.787146][ T6734] ? __might_fault+0xaf/0x130 [ 190.787186][ T6734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.787214][ T6734] ? import_iovec+0x73/0xa0 [ 190.787233][ T6734] ___sys_sendmsg+0x2a5/0x360 [ 190.787252][ T6734] ? __lock_acquire+0x683/0x2ce0 [ 190.787276][ T6734] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.787335][ T6734] ? __fget_files+0x2a/0x420 [ 190.787351][ T6734] ? __fget_files+0x3a8/0x420 [ 190.787374][ T6734] __x64_sys_sendmsg+0x1b7/0x290 [ 190.787396][ T6734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.787430][ T6734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.787449][ T6734] do_syscall_64+0x174/0x580 [ 190.787467][ T6734] ? trace_irq_disable+0x3b/0x140 [ 190.787492][ T6734] ? clear_bhb_loop+0x40/0x90 [ 190.787513][ T6734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.787530][ T6734] RIP: 0033:0x7f77c3e8ce59 [ 190.787547][ T6734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.787562][ T6734] RSP: 002b:00007f77c20e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.787581][ T6734] RAX: ffffffffffffffda RBX: 00007f77c4105fa0 RCX: 00007f77c3e8ce59 [ 190.787593][ T6734] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 190.787604][ T6734] RBP: 00007f77c20e6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.787614][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.787624][ T6734] R13: 00007f77c4106038 R14: 00007f77c4105fa0 R15: 00007ffd94bc7538 [ 190.787649][ T6734] [ 191.344470][ T6743] FAULT_INJECTION: forcing a failure. [ 191.344470][ T6743] name failslab, interval 1, probability 0, space 0, times 0 [ 191.344515][ T6743] CPU: 0 UID: 0 PID: 6743 Comm: syz.5.234 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 191.344546][ T6743] Tainted: [L]=SOFTLOCKUP [ 191.344553][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.344565][ T6743] Call Trace: [ 191.344573][ T6743] [ 191.344582][ T6743] dump_stack_lvl+0xe8/0x150 [ 191.344613][ T6743] should_fail_ex+0x467/0x600 [ 191.344650][ T6743] should_failslab+0xa8/0x100 [ 191.344675][ T6743] __kmalloc_node_track_caller_noprof+0x102/0x7c0 [ 191.344723][ T6743] ? down_read+0x156/0x200 [ 191.344748][ T6743] ? dh_data_from_key+0x1aa/0x280 [ 191.344779][ T6743] ? dh_data_from_key+0x1aa/0x280 [ 191.344818][ T6743] kmemdup_noprof+0x2b/0x70 [ 191.344854][ T6743] dh_data_from_key+0x1aa/0x280 [ 191.344888][ T6743] __keyctl_dh_compute+0x3a7/0xd10 [ 191.344928][ T6743] ? __lock_acquire+0x683/0x2ce0 [ 191.344960][ T6743] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 191.345022][ T6743] ? get_pid_task+0x20/0x1f0 [ 191.345043][ T6743] ? get_pid_task+0x20/0x1f0 [ 191.345065][ T6743] keyctl_dh_compute+0x124/0x180 [ 191.345098][ T6743] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 191.345132][ T6743] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.345163][ T6743] __se_sys_keyctl+0x44c/0x9d0 [ 191.345192][ T6743] ? __pfx___se_sys_keyctl+0x10/0x10 [ 191.345220][ T6743] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 191.345243][ T6743] ? rt_mutex_slowunlock+0x219/0x460 [ 191.345273][ T6743] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 191.345297][ T6743] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 191.345337][ T6743] ? fput+0xa0/0xd0 [ 191.345370][ T6743] ? ksys_write+0x248/0x270 [ 191.345397][ T6743] ? __pfx_ksys_write+0x10/0x10 [ 191.345427][ T6743] ? __x64_sys_keyctl+0x20/0xc0 [ 191.345451][ T6743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.345476][ T6743] do_syscall_64+0x174/0x580 [ 191.345499][ T6743] ? trace_irq_disable+0x3b/0x140 [ 191.345525][ T6743] ? clear_bhb_loop+0x40/0x90 [ 191.345552][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.345575][ T6743] RIP: 0033:0x7f77c3e8ce59 [ 191.345602][ T6743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.345620][ T6743] RSP: 002b:00007f77c20e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 191.345644][ T6743] RAX: ffffffffffffffda RBX: 00007f77c4105fa0 RCX: 00007f77c3e8ce59 [ 191.345661][ T6743] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017 [ 191.345675][ T6743] RBP: 00007f77c20e6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.345687][ T6743] R10: fffffffffffffe4f R11: 0000000000000246 R12: 0000000000000001 [ 191.345707][ T6743] R13: 00007f77c4106038 R14: 00007f77c4105fa0 R15: 00007ffd94bc7538 [ 191.345736][ T6743] [ 191.674361][ T6738] mmap: syz.4.233 (6738) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 191.858780][ T6750] FAULT_INJECTION: forcing a failure. [ 191.858780][ T6750] name failslab, interval 1, probability 0, space 0, times 0 [ 191.858822][ T6750] CPU: 1 UID: 0 PID: 6750 Comm: syz.1.236 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 191.858851][ T6750] Tainted: [L]=SOFTLOCKUP [ 191.858860][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.858872][ T6750] Call Trace: [ 191.858881][ T6750] [ 191.858890][ T6750] dump_stack_lvl+0xe8/0x150 [ 191.858919][ T6750] should_fail_ex+0x467/0x600 [ 191.858954][ T6750] should_failslab+0xa8/0x100 [ 191.858980][ T6750] kmem_cache_alloc_node_noprof+0xae/0x670 [ 191.859008][ T6750] ? alloc_vmap_area+0x21c/0x1420 [ 191.859032][ T6750] ? alloc_vmap_area+0x21c/0x1420 [ 191.859061][ T6750] alloc_vmap_area+0x21c/0x1420 [ 191.859093][ T6750] ? rcu_is_watching+0x15/0xb0 [ 191.859123][ T6750] ? __pfx_alloc_vmap_area+0x10/0x10 [ 191.859150][ T6750] ? __kmalloc_cache_node_noprof+0x47b/0x6a0 [ 191.859169][ T6750] ? __get_vm_area_node+0x136/0x300 [ 191.859194][ T6750] ? __get_vm_area_node+0x136/0x300 [ 191.859233][ T6750] __get_vm_area_node+0x1f2/0x300 [ 191.859263][ T6750] __vmalloc_node_range_noprof+0x358/0x1730 [ 191.859290][ T6750] ? vc_uniscr_check+0x18f/0x7b0 [ 191.859330][ T6750] ? __lock_acquire+0x683/0x2ce0 [ 191.859361][ T6750] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.859391][ T6750] ? __pfx_bit_putcs+0x10/0x10 [ 191.859420][ T6750] ? vc_uniscr_check+0x18f/0x7b0 [ 191.859452][ T6750] vzalloc_noprof+0xb2/0xe0 [ 191.859480][ T6750] ? vc_uniscr_check+0x18f/0x7b0 [ 191.859514][ T6750] vc_uniscr_check+0x18f/0x7b0 [ 191.859540][ T6750] ? atomic_notifier_call_chain+0x26/0x180 [ 191.859563][ T6750] do_con_write+0xcb2/0x5540 [ 191.859647][ T6750] ? __pfx_do_con_write+0x10/0x10 [ 191.859672][ T6750] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.859720][ T6750] ? lockdep_hardirqs_on+0x7a/0x110 [ 191.859741][ T6750] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 191.859762][ T6750] con_write+0x31/0x2e0 [ 191.859785][ T6750] n_tty_write+0xd4f/0x11e0 [ 191.859830][ T6750] ? __pfx_n_tty_write+0x10/0x10 [ 191.859859][ T6750] ? __pfx_woken_wake_function+0x10/0x10 [ 191.859881][ T6750] ? rcu_is_watching+0x15/0xb0 [ 191.859910][ T6750] ? kfree+0x4d/0x6c0 [ 191.859939][ T6750] ? __pfx_n_tty_write+0x10/0x10 [ 191.859961][ T6750] file_tty_write+0x50b/0x980 [ 191.859993][ T6750] vfs_write+0x61e/0xbb0 [ 191.860022][ T6750] ? __pfx_vfs_write+0x10/0x10 [ 191.860053][ T6750] ? __fget_files+0x2a/0x420 [ 191.860081][ T6750] ksys_write+0x156/0x270 [ 191.860102][ T6750] ? __pfx_ksys_write+0x10/0x10 [ 191.860136][ T6750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.860157][ T6750] do_syscall_64+0x174/0x580 [ 191.860180][ T6750] ? trace_irq_disable+0x3b/0x140 [ 191.860202][ T6750] ? clear_bhb_loop+0x40/0x90 [ 191.860223][ T6750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.860240][ T6750] RIP: 0033:0x7feda0e8ce59 [ 191.860258][ T6750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.860273][ T6750] RSP: 002b:00007fed9f0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.860293][ T6750] RAX: ffffffffffffffda RBX: 00007feda1105fa0 RCX: 00007feda0e8ce59 [ 191.860305][ T6750] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 191.860317][ T6750] RBP: 00007fed9f0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.860327][ T6750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.860338][ T6750] R13: 00007feda1106038 R14: 00007feda1105fa0 R15: 00007ffe82f08698 [ 191.860368][ T6750] [ 191.861831][ T6750] syz.1.236: vmalloc error: size 24960, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 191.863272][ T6750] CPU: 1 UID: 0 PID: 6750 Comm: syz.1.236 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 191.863302][ T6750] Tainted: [L]=SOFTLOCKUP [ 191.863309][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.863330][ T6750] Call Trace: [ 191.863343][ T6750] [ 191.863353][ T6750] dump_stack_lvl+0xe8/0x150 [ 191.863382][ T6750] warn_alloc+0x24c/0x270 [ 191.863422][ T6750] ? kasan_quarantine_put+0xbb/0x1f0 [ 191.863458][ T6750] ? __pfx_warn_alloc+0x10/0x10 [ 191.863482][ T6750] ? __get_vm_area_node+0x20b/0x300 [ 191.863517][ T6750] ? __get_vm_area_node+0x20b/0x300 [ 191.863576][ T6750] __vmalloc_node_range_noprof+0x37d/0x1730 [ 191.863625][ T6750] ? __lock_acquire+0x683/0x2ce0 [ 191.863805][ T6750] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.863852][ T6750] ? __pfx_bit_putcs+0x10/0x10 [ 191.863889][ T6750] ? vc_uniscr_check+0x18f/0x7b0 [ 191.863922][ T6750] vzalloc_noprof+0xb2/0xe0 [ 191.863954][ T6750] ? vc_uniscr_check+0x18f/0x7b0 [ 191.863987][ T6750] vc_uniscr_check+0x18f/0x7b0 [ 191.864020][ T6750] ? atomic_notifier_call_chain+0x26/0x180 [ 191.864051][ T6750] do_con_write+0xcb2/0x5540 [ 191.864138][ T6750] ? __pfx_do_con_write+0x10/0x10 [ 191.864170][ T6750] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.864227][ T6750] ? lockdep_hardirqs_on+0x7a/0x110 [ 191.864251][ T6750] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 191.864278][ T6750] con_write+0x31/0x2e0 [ 191.864306][ T6750] n_tty_write+0xd4f/0x11e0 [ 191.864373][ T6750] ? __pfx_n_tty_write+0x10/0x10 [ 191.864413][ T6750] ? __pfx_woken_wake_function+0x10/0x10 [ 191.864444][ T6750] ? rcu_is_watching+0x15/0xb0 [ 191.864479][ T6750] ? kfree+0x4d/0x6c0 [ 191.864519][ T6750] ? __pfx_n_tty_write+0x10/0x10 [ 191.864551][ T6750] file_tty_write+0x50b/0x980 [ 191.864589][ T6750] vfs_write+0x61e/0xbb0 [ 191.864626][ T6750] ? __pfx_vfs_write+0x10/0x10 [ 191.864662][ T6750] ? __fget_files+0x2a/0x420 [ 191.864703][ T6750] ksys_write+0x156/0x270 [ 191.864733][ T6750] ? __pfx_ksys_write+0x10/0x10 [ 191.864767][ T6750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.864793][ T6750] do_syscall_64+0x174/0x580 [ 191.864816][ T6750] ? trace_irq_disable+0x3b/0x140 [ 191.864842][ T6750] ? clear_bhb_loop+0x40/0x90 [ 191.864872][ T6750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.864895][ T6750] RIP: 0033:0x7feda0e8ce59 [ 191.864915][ T6750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.864933][ T6750] RSP: 002b:00007fed9f0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.864955][ T6750] RAX: ffffffffffffffda RBX: 00007feda1105fa0 RCX: 00007feda0e8ce59 [ 191.864971][ T6750] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000004 [ 191.864984][ T6750] RBP: 00007fed9f0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.864997][ T6750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.865009][ T6750] R13: 00007feda1106038 R14: 00007feda1105fa0 R15: 00007ffe82f08698 [ 191.865043][ T6750] [ 191.884117][ T6750] Mem-Info: [ 191.884137][ T6750] active_anon:6762 inactive_anon:0 isolated_anon:0 [ 191.884137][ T6750] active_file:0 inactive_file:42915 isolated_file:0 [ 191.884137][ T6750] unevictable:768 dirty:99 writeback:0 [ 191.884137][ T6750] slab_reclaimable:11506 slab_unreclaimable:99126 [ 191.884137][ T6750] mapped:25272 shmem:1546 pagetables:1435 [ 191.884137][ T6750] sec_pagetables:0 bounce:0 [ 191.884137][ T6750] kernel_misc_reclaimable:0 [ 191.884137][ T6750] free:1341675 free_pcp:2254 free_cma:0 [ 191.884186][ T6750] Node 0 active_anon:27048kB inactive_anon:0kB active_file:0kB inactive_file:171460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101088kB dirty:392kB writeback:0kB shmem:4648kB kernel_stack:13184kB pagetables:5580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 191.884231][ T6750] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 191.884273][ T6750] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.884331][ T6750] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 191.884363][ T6750] Node 0 DMA32 free:1416664kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27048kB inactive_anon:0kB active_file:0kB inactive_file:171460kB unevictable:1536kB writepending:392kB zspages:0kB present:3129332kB managed:2552064kB mlocked:0kB bounce:0kB free_pcp:9016kB local_pcp:6008kB free_cma:0kB [ 191.884416][ T6750] lowmem_reserve[]: 0 0 0 0 0 [ 191.884449][ T6750] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:864kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.884502][ T6750] lowmem_reserve[]: 0 0 0 0 0 [ 191.884532][ T6750] Node 1 Normal free:3934676kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.884580][ T6750] lowmem_reserve[]: 0 0 0 0 0 [ 191.884606][ T6750] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 191.900966][ T6750] Node 0 DMA32: 780*4kB (UME) 355*8kB (UME) 279*16kB (UE) 31*32kB (U) 5*64kB (UE) 13*128kB (UM) 15*256kB (ME) 13*512kB (UM) 12*1024kB (M) 10*2048kB (ME) 332*4096kB (UM) = 1416536kB [ 191.901112][ T6750] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 191.901199][ T6750] Node 1 Normal: 1*4kB (M) 6*8kB (UM) 6*16kB (UM) 12*32kB (UM) 11*64kB (UM) 4*128kB (UM) 1*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3934676kB [ 191.901364][ T6750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.901379][ T6750] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.901396][ T6750] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.901411][ T6750] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.901424][ T6750] 44457 total pagecache pages [ 191.901434][ T6750] 0 pages in swap cache [ 191.901440][ T6750] Free swap = 124996kB [ 191.901446][ T6750] Total swap = 124996kB [ 191.901454][ T6750] 2097051 pages RAM [ 191.901459][ T6750] 0 pages HighMem/MovableOnly [ 191.901465][ T6750] 427205 pages reserved [ 191.901471][ T6750] 0 pages cma reserved [ 192.044146][ T6751] netlink: 666 bytes leftover after parsing attributes in process `syz.5.237'. [ 192.427106][ T6738] warning: `syz.4.233' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 192.773303][ T6758] tipc: Started in network mode [ 192.773396][ T6758] tipc: Node identity ac14140f, cluster identity 4711 [ 192.805061][ T6758] tipc: New replicast peer: 172.20.20.187 [ 193.425606][ T6758] tipc: Enabled bearer , priority 10 [ 193.491052][ T6764] program syz.1.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.523148][ T6764] program syz.1.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.642953][ T6770] netlink: 40 bytes leftover after parsing attributes in process `syz.1.244'. [ 193.785993][ T5625] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 193.929037][ T10] tipc: Node number set to 2886997007 [ 193.945465][ T5625] usb 6-1: Using ep0 maxpacket: 16 [ 193.950668][ T5625] usb 6-1: unable to get BOS descriptor or descriptor too short [ 193.951960][ T5625] usb 6-1: config 8 has an invalid interface number: 114 but max is 0 [ 193.951987][ T5625] usb 6-1: config 8 has no interface number 0 [ 193.952020][ T5625] usb 6-1: config 8 interface 114 has no altsetting 0 [ 193.954638][ T5625] usb 6-1: New USB device found, idVendor=15a4, idProduct=1000, bcdDevice=5d.75 [ 193.954668][ T5625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.954693][ T5625] usb 6-1: Product: syz [ 193.954704][ T5625] usb 6-1: Manufacturer: syz [ 193.954714][ T5625] usb 6-1: SerialNumber: syz [ 194.298172][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 194.382249][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.382344][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.456382][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 194.480095][ T10] usb 2-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 194.480127][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.480148][ T10] usb 2-1: Product: 析뺖뉡슫䞉嘢⍯笌㔮왍塌⏼ꈣ㰐๝ﻳង縗␨㽯ꌹ䢬ﷸ적촅今춏姦铗䧊 [ 194.480169][ T10] usb 2-1: Manufacturer: 麝ᣴ맄猤⎢⢡뿊Ṱ䭎ᦊ홿䐊蒵턓ዄ뎗븅৊硠픻졼鿳䀩燡Ԝ㈩Ⰷ䭄䁃⒨즨铆길ᧃ媢ģ떨凖賳뛜ﾯ [ 194.480192][ T10] usb 2-1: SerialNumber: ᐔ [ 194.820669][ T5625] rndis_host 6-1:8.114: ACM capabilities 04, not really RNDIS? [ 194.849843][ T5625] usb 6-1: USB disconnect, device number 10 [ 194.900526][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.901151][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.304986][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 195.354585][ T10] usb 2-1: USB disconnect, device number 24 [ 195.552711][ T6795] netlink: 22 bytes leftover after parsing attributes in process `syz.3.251'. [ 195.786551][ T6805] FAULT_INJECTION: forcing a failure. [ 195.786551][ T6805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.786592][ T6805] CPU: 1 UID: 0 PID: 6805 Comm: syz.4.254 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 195.786622][ T6805] Tainted: [L]=SOFTLOCKUP [ 195.786630][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.786646][ T6805] Call Trace: [ 195.786655][ T6805] [ 195.786677][ T6805] dump_stack_lvl+0xe8/0x150 [ 195.786710][ T6805] should_fail_ex+0x467/0x600 [ 195.786747][ T6805] _copy_from_iter+0x1d3/0x1660 [ 195.786784][ T6805] ? rcu_is_watching+0x15/0xb0 [ 195.786818][ T6805] ? trace_kmem_cache_alloc+0x29/0xe0 [ 195.786857][ T6805] ? __pfx__copy_from_iter+0x10/0x10 [ 195.786890][ T6805] ? __alloc_skb+0x276/0x7a0 [ 195.786918][ T6805] ? __alloc_skb+0x276/0x7a0 [ 195.786946][ T6805] ? netlink_sendmsg+0x650/0xb40 [ 195.786973][ T6805] ? skb_put+0x112/0x210 [ 195.787000][ T6805] netlink_sendmsg+0x6c0/0xb40 [ 195.787037][ T6805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.787068][ T6805] ? aa_sock_msg_perm+0x122/0x200 [ 195.787104][ T6805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.787131][ T6805] sock_sendmsg_nosec+0x13a/0x180 [ 195.787168][ T6805] ____sys_sendmsg+0x565/0x870 [ 195.787193][ T6805] ? __might_fault+0xaf/0x130 [ 195.787234][ T6805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.787269][ T6805] ? import_iovec+0x73/0xa0 [ 195.787296][ T6805] ___sys_sendmsg+0x2a5/0x360 [ 195.787321][ T6805] ? __lock_acquire+0x683/0x2ce0 [ 195.787352][ T6805] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.787413][ T6805] ? __fget_files+0x2a/0x420 [ 195.787439][ T6805] ? __fget_files+0x3a8/0x420 [ 195.787472][ T6805] __x64_sys_sendmsg+0x1b7/0x290 [ 195.787501][ T6805] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.787555][ T6805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.787579][ T6805] do_syscall_64+0x174/0x580 [ 195.787608][ T6805] ? trace_irq_disable+0x3b/0x140 [ 195.787639][ T6805] ? clear_bhb_loop+0x40/0x90 [ 195.787674][ T6805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.787697][ T6805] RIP: 0033:0x7ffa3faece59 [ 195.787717][ T6805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.787736][ T6805] RSP: 002b:00007ffa3dd46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.787761][ T6805] RAX: ffffffffffffffda RBX: 00007ffa3fd65fa0 RCX: 00007ffa3faece59 [ 195.787777][ T6805] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 195.787789][ T6805] RBP: 00007ffa3dd46090 R08: 0000000000000000 R09: 0000000000000000 [ 195.787802][ T6805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.787814][ T6805] R13: 00007ffa3fd66038 R14: 00007ffa3fd65fa0 R15: 00007ffe33803358 [ 195.787846][ T6805] [ 196.214494][ T5824] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 196.237741][ T6811] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 196.391386][ T5824] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 196.391455][ T5824] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 196.391479][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.416900][ T1011] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 196.442642][ T5824] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 196.552266][ T1011] usb 4-1: device descriptor read/64, error -71 [ 196.621006][ T6820] FAULT_INJECTION: forcing a failure. [ 196.621006][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 196.621047][ T6820] CPU: 1 UID: 0 PID: 6820 Comm: syz.1.261 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 196.621077][ T6820] Tainted: [L]=SOFTLOCKUP [ 196.621085][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.621099][ T6820] Call Trace: [ 196.621107][ T6820] [ 196.621118][ T6820] dump_stack_lvl+0xe8/0x150 [ 196.621151][ T6820] should_fail_ex+0x467/0x600 [ 196.621188][ T6820] should_failslab+0xa8/0x100 [ 196.621217][ T6820] __kmalloc_cache_noprof+0xa0/0x6b0 [ 196.621240][ T6820] ? drm_atomic_commit_alloc+0xa9/0x100 [ 196.621269][ T6820] ? drm_atomic_commit_alloc+0xa9/0x100 [ 196.621306][ T6820] drm_atomic_commit_alloc+0xa9/0x100 [ 196.621337][ T6820] drm_atomic_helper_update_plane+0x55/0x3b0 [ 196.621373][ T6820] drm_mode_setplane+0x89f/0xda0 [ 196.621424][ T6820] ? __pfx_drm_mode_setplane+0x10/0x10 [ 196.621478][ T6820] ? rt_spin_unlock+0x163/0x200 [ 196.621516][ T6820] ? drm_is_current_master+0x1a2/0x210 [ 196.621566][ T6820] drm_ioctl_kernel+0x2e2/0x3b0 [ 196.621598][ T6820] ? __pfx_drm_mode_setplane+0x10/0x10 [ 196.621625][ T6820] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 196.621663][ T6820] drm_ioctl+0x713/0xba0 [ 196.621701][ T6820] ? __pfx_drm_mode_setplane+0x10/0x10 [ 196.621734][ T6820] ? __pfx_drm_ioctl+0x10/0x10 [ 196.621777][ T6820] ? __fget_files+0x2a/0x420 [ 196.621804][ T6820] ? bpf_lsm_file_ioctl+0x9/0x20 [ 196.621829][ T6820] ? __pfx_drm_ioctl+0x10/0x10 [ 196.621857][ T6820] __se_sys_ioctl+0xff/0x170 [ 196.621886][ T6820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.621912][ T6820] do_syscall_64+0x174/0x580 [ 196.621937][ T6820] ? trace_irq_disable+0x3b/0x140 [ 196.621962][ T6820] ? clear_bhb_loop+0x40/0x90 [ 196.621991][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.622015][ T6820] RIP: 0033:0x7feda0e8ce59 [ 196.622035][ T6820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.622055][ T6820] RSP: 002b:00007fed9f0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.622079][ T6820] RAX: ffffffffffffffda RBX: 00007feda1105fa0 RCX: 00007feda0e8ce59 [ 196.622097][ T6820] RDX: 0000200000000040 RSI: 00000000c03064b7 RDI: 0000000000000003 [ 196.622111][ T6820] RBP: 00007fed9f0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.622125][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.622138][ T6820] R13: 00007feda1106038 R14: 00007feda1105fa0 R15: 00007ffe82f08698 [ 196.622174][ T6820] [ 196.668121][ T6800] netlink: 'syz.5.255': attribute type 2 has an invalid length. [ 196.668189][ T6800] netlink: 224 bytes leftover after parsing attributes in process `syz.5.255'. [ 196.708781][ T6821] netlink: 'syz.5.255': attribute type 2 has an invalid length. [ 196.708806][ T6821] netlink: 224 bytes leftover after parsing attributes in process `syz.5.255'. [ 196.989695][ T6822] FAULT_INJECTION: forcing a failure. [ 196.989695][ T6822] name failslab, interval 1, probability 0, space 0, times 0 [ 196.989725][ T6822] CPU: 0 UID: 0 PID: 6822 Comm: syz.4.262 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 196.989747][ T6822] Tainted: [L]=SOFTLOCKUP [ 196.989759][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.989770][ T6822] Call Trace: [ 196.989776][ T6822] [ 196.989782][ T6822] dump_stack_lvl+0xe8/0x150 [ 196.989805][ T6822] should_fail_ex+0x467/0x600 [ 196.989831][ T6822] should_failslab+0xa8/0x100 [ 196.989850][ T6822] __kmalloc_cache_noprof+0xa0/0x6b0 [ 196.989865][ T6822] ? sctp_association_new+0x89/0x25d0 [ 196.989883][ T6822] ? sctp_association_new+0x89/0x25d0 [ 196.989905][ T6822] sctp_association_new+0x89/0x25d0 [ 196.989930][ T6822] sctp_connect_new_asoc+0x2e4/0x6b0 [ 196.989950][ T6822] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 196.989971][ T6822] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 196.989994][ T6822] ? lockdep_hardirqs_on+0x7a/0x110 [ 196.990010][ T6822] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 196.990027][ T6822] ? security_sctp_bind_connect+0x7e/0x2c0 [ 196.990047][ T6822] sctp_sendmsg+0x1506/0x2a50 [ 196.990075][ T6822] ? __pfx_sctp_sendmsg+0x10/0x10 [ 196.990097][ T6822] ? aa_sk_perm+0x703/0x950 [ 196.990120][ T6822] ? __might_fault+0xaf/0x130 [ 196.990148][ T6822] ? sock_rps_record_flow+0x19/0x350 [ 196.990176][ T6822] ? inet_sendmsg+0x298/0x320 [ 196.990202][ T6822] ? __pfx_inet_sendmsg+0x10/0x10 [ 196.990226][ T6822] sock_sendmsg_nosec+0x10e/0x180 [ 196.990252][ T6822] __sys_sendto+0x41e/0x5d0 [ 196.990272][ T6822] ? __pfx___sys_sendto+0x10/0x10 [ 196.990308][ T6822] ? __pfx_ksys_write+0x10/0x10 [ 196.990330][ T6822] __x64_sys_sendto+0xde/0x100 [ 196.990347][ T6822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.990364][ T6822] do_syscall_64+0x174/0x580 [ 196.990381][ T6822] ? trace_irq_disable+0x3b/0x140 [ 196.990399][ T6822] ? clear_bhb_loop+0x40/0x90 [ 196.990419][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.990434][ T6822] RIP: 0033:0x7ffa3faece59 [ 196.990449][ T6822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.990465][ T6822] RSP: 002b:00007ffa3dd25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 196.990481][ T6822] RAX: ffffffffffffffda RBX: 00007ffa3fd66090 RCX: 00007ffa3faece59 [ 196.990493][ T6822] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 196.990503][ T6822] RBP: 00007ffa3dd25090 R08: 0000200000000080 R09: 000000000000001c [ 196.990514][ T6822] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000001 [ 196.990523][ T6822] R13: 00007ffa3fd66128 R14: 00007ffa3fd66090 R15: 00007ffe33803358 [ 196.990547][ T6822] [ 197.051250][ T1011] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 197.205639][ T1011] usb 4-1: device descriptor read/64, error -71 [ 197.339878][ T1011] usb usb4-port1: attempt power cycle [ 197.511501][ T5824] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 197.675604][ T1011] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 197.696696][ T1011] usb 4-1: device descriptor read/8, error -71 [ 197.713840][ T5625] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 197.724458][ T5824] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 197.724482][ T5824] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 197.743396][ T5824] usb 6-1: USB disconnect, device number 11 [ 197.788985][ T6831] FAULT_INJECTION: forcing a failure. [ 197.788985][ T6831] name failslab, interval 1, probability 0, space 0, times 0 [ 197.789949][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz.4.265 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 197.789982][ T6831] Tainted: [L]=SOFTLOCKUP [ 197.789990][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.790002][ T6831] Call Trace: [ 197.790011][ T6831] [ 197.790020][ T6831] dump_stack_lvl+0xe8/0x150 [ 197.790053][ T6831] should_fail_ex+0x467/0x600 [ 197.790090][ T6831] should_failslab+0xa8/0x100 [ 197.790115][ T6831] kmem_cache_alloc_noprof+0xa4/0x650 [ 197.790150][ T6831] ? mas_alloc_nodes+0x291/0x350 [ 197.790172][ T6831] ? mas_alloc_nodes+0x291/0x350 [ 197.790202][ T6831] mas_alloc_nodes+0x291/0x350 [ 197.790230][ T6831] mas_preallocate+0x2cf/0x630 [ 197.790253][ T6831] ? trace_hrtimer_start+0x82/0x200 [ 197.790282][ T6831] ? __pfx_mas_preallocate+0x10/0x10 [ 197.790315][ T6831] ? __asan_memset+0x22/0x50 [ 197.790347][ T6831] ? init_multi_vma_prep+0x466/0x550 [ 197.790385][ T6831] commit_merge+0x20f/0x650 [ 197.790413][ T6831] ? __pfx_commit_merge+0x10/0x10 [ 197.790436][ T6831] ? vma_modify+0xece/0x1ec0 [ 197.790478][ T6831] ? __vma_start_write+0x1b4/0x290 [ 197.790509][ T6831] vma_modify+0x1788/0x1ec0 [ 197.790553][ T6831] vma_modify_flags_uffd+0x24c/0x2c0 [ 197.790585][ T6831] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 197.790627][ T6831] userfaultfd_ioctl+0x4792/0x8640 [ 197.790661][ T6831] ? kasan_save_track+0x3e/0x80 [ 197.790684][ T6831] ? kasan_save_free_info+0x40/0x50 [ 197.790703][ T6831] ? __kasan_slab_free+0x5c/0x80 [ 197.790716][ T6831] ? kfree+0x1c5/0x6c0 [ 197.790736][ T6831] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 197.790754][ T6831] ? security_file_ioctl+0xc3/0x2a0 [ 197.790770][ T6831] ? __se_sys_ioctl+0x47/0x170 [ 197.790788][ T6831] ? do_syscall_64+0x174/0x580 [ 197.790804][ T6831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.790822][ T6831] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 197.790868][ T6831] ? kasan_quarantine_put+0xbb/0x1f0 [ 197.790898][ T6831] ? tomoyo_path_number_perm+0x219/0x5f0 [ 197.790919][ T6831] ? tomoyo_path_number_perm+0x219/0x5f0 [ 197.790940][ T6831] ? do_vfs_ioctl+0x1184/0x1550 [ 197.790961][ T6831] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 197.791006][ T6831] ? __fget_files+0x2a/0x420 [ 197.791023][ T6831] ? __fget_files+0x2a/0x420 [ 197.791036][ T6831] ? __fget_files+0x3a8/0x420 [ 197.791050][ T6831] ? __fget_files+0x2a/0x420 [ 197.791066][ T6831] ? bpf_lsm_file_ioctl+0x9/0x20 [ 197.791083][ T6831] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 197.791102][ T6831] __se_sys_ioctl+0xff/0x170 [ 197.791121][ T6831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.791138][ T6831] do_syscall_64+0x174/0x580 [ 197.791154][ T6831] ? trace_irq_disable+0x3b/0x140 [ 197.791173][ T6831] ? clear_bhb_loop+0x40/0x90 [ 197.791192][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.791215][ T6831] RIP: 0033:0x7ffa3faece59 [ 197.791230][ T6831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.791243][ T6831] RSP: 002b:00007ffa3dd25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.791260][ T6831] RAX: ffffffffffffffda RBX: 00007ffa3fd66090 RCX: 00007ffa3faece59 [ 197.791272][ T6831] RDX: 0000200000000000 RSI: 000000008010aa01 RDI: 0000000000000003 [ 197.791283][ T6831] RBP: 00007ffa3dd25090 R08: 0000000000000000 R09: 0000000000000000 [ 197.791292][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.791301][ T6831] R13: 00007ffa3fd66128 R14: 00007ffa3fd66090 R15: 00007ffe33803358 [ 197.791325][ T6831] [ 197.905373][ T5625] usb 2-1: Using ep0 maxpacket: 8 [ 197.925687][ T5625] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 197.925720][ T5625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.925741][ T5625] usb 2-1: Product: syz [ 197.925757][ T5625] usb 2-1: Manufacturer: syz [ 197.925773][ T5625] usb 2-1: SerialNumber: syz [ 198.092894][ T1011] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 198.120530][ T1011] usb 4-1: device descriptor read/8, error -71 [ 198.226816][ T1011] usb usb4-port1: unable to enumerate USB device [ 198.251444][ T5625] usb 2-1: config 0 descriptor?? [ 198.268007][ T5625] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 198.268754][ T5625] dvb-usb: bulk message failed: -22 (2/0) [ 198.371000][ T5625] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 198.372174][ T5625] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 198.372279][ T5625] usb 2-1: media controller created [ 198.432011][ T5625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.525523][ T5625] cxusb: set interface failed [ 198.525544][ T5625] dvb-usb: bulk message failed: -22 (1/0) [ 198.571360][ T5625] DVB: Unable to find symbol mt352_attach() [ 198.571373][ T5625] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 198.675426][ T5625] rc_core: IR keymap rc-dvico-portable not found [ 198.675459][ T5625] Registered IR keymap rc-empty [ 198.719904][ T5625] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 198.733988][ T5625] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input11 [ 198.762022][ T5625] dvb-usb: schedule remote query interval to 100 msecs. [ 198.762049][ T5625] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 198.783125][ T5625] usb 2-1: USB disconnect, device number 25 [ 198.950596][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.268'. [ 199.012137][ T5625] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 199.343028][ T6854] netlink: 156 bytes leftover after parsing attributes in process `syz.5.270'. [ 199.416081][ T6854] FAULT_INJECTION: forcing a failure. [ 199.416081][ T6854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.416124][ T6854] CPU: 0 UID: 0 PID: 6854 Comm: syz.5.270 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 199.416153][ T6854] Tainted: [L]=SOFTLOCKUP [ 199.416161][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 199.416175][ T6854] Call Trace: [ 199.416183][ T6854] [ 199.416193][ T6854] dump_stack_lvl+0xe8/0x150 [ 199.416227][ T6854] should_fail_ex+0x467/0x600 [ 199.416264][ T6854] _copy_from_iter+0x1d3/0x1660 [ 199.416302][ T6854] ? rcu_is_watching+0x15/0xb0 [ 199.416335][ T6854] ? trace_kmem_cache_alloc+0x29/0xe0 [ 199.416372][ T6854] ? __pfx__copy_from_iter+0x10/0x10 [ 199.416404][ T6854] ? __alloc_skb+0x276/0x7a0 [ 199.416425][ T6854] ? __alloc_skb+0x276/0x7a0 [ 199.416452][ T6854] ? netlink_sendmsg+0x650/0xb40 [ 199.416480][ T6854] ? skb_put+0x112/0x210 [ 199.416506][ T6854] netlink_sendmsg+0x6c0/0xb40 [ 199.416541][ T6854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.416572][ T6854] ? aa_sock_msg_perm+0x122/0x200 [ 199.416609][ T6854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.416636][ T6854] sock_sendmsg_nosec+0x13a/0x180 [ 199.416679][ T6854] ____sys_sendmsg+0x565/0x870 [ 199.416706][ T6854] ? __might_fault+0xaf/0x130 [ 199.416752][ T6854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.416794][ T6854] ? import_iovec+0x73/0xa0 [ 199.416826][ T6854] ___sys_sendmsg+0x2a5/0x360 [ 199.416853][ T6854] ? __lock_acquire+0x683/0x2ce0 [ 199.416892][ T6854] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.416956][ T6854] ? __fget_files+0x2a/0x420 [ 199.416976][ T6854] ? __fget_files+0x3a8/0x420 [ 199.417006][ T6854] __x64_sys_sendmsg+0x1b7/0x290 [ 199.417033][ T6854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.417076][ T6854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.417099][ T6854] do_syscall_64+0x174/0x580 [ 199.417123][ T6854] ? trace_irq_disable+0x3b/0x140 [ 199.417147][ T6854] ? clear_bhb_loop+0x40/0x90 [ 199.417174][ T6854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.417197][ T6854] RIP: 0033:0x7f77c3e8ce59 [ 199.417217][ T6854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.417236][ T6854] RSP: 002b:00007f77c20e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.417260][ T6854] RAX: ffffffffffffffda RBX: 00007f77c4105fa0 RCX: 00007f77c3e8ce59 [ 199.417277][ T6854] RDX: 0000000000000880 RSI: 0000200000000180 RDI: 0000000000000004 [ 199.417291][ T6854] RBP: 00007f77c20e6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.417305][ T6854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.417316][ T6854] R13: 00007f77c4106038 R14: 00007f77c4105fa0 R15: 00007ffd94bc7538 [ 199.417349][ T6854] [ 199.778947][ T6859] netlink: 'syz.3.273': attribute type 2 has an invalid length. [ 199.810180][ T6861] FAULT_INJECTION: forcing a failure. [ 199.810180][ T6861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.810214][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.1.274 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 199.810238][ T6861] Tainted: [L]=SOFTLOCKUP [ 199.810244][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 199.810255][ T6861] Call Trace: [ 199.810261][ T6861] [ 199.810268][ T6861] dump_stack_lvl+0xe8/0x150 [ 199.810293][ T6861] should_fail_ex+0x467/0x600 [ 199.810321][ T6861] _copy_from_iter+0x1d3/0x1660 [ 199.810348][ T6861] ? sctp_chunkify+0x5a/0x260 [ 199.810373][ T6861] ? sctp_chunkify+0x5a/0x260 [ 199.810402][ T6861] ? sctp_addto_chunk+0xf8/0x220 [ 199.810429][ T6861] ? __asan_memcpy+0x40/0x70 [ 199.810456][ T6861] ? __pfx__copy_from_iter+0x10/0x10 [ 199.810481][ T6861] ? __asan_memcpy+0x40/0x70 [ 199.810504][ T6861] ? sctp_make_datafrag_empty+0x184/0x240 [ 199.810532][ T6861] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 199.810556][ T6861] ? skb_put+0x112/0x210 [ 199.810578][ T6861] sctp_user_addto_chunk+0x7c/0x230 [ 199.810598][ T6861] sctp_datamsg_from_user+0x754/0xef0 [ 199.810641][ T6861] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 199.810675][ T6861] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 199.810698][ T6861] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 199.810746][ T6861] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 199.810764][ T6861] ? __local_bh_enable+0x1e1/0x2f0 [ 199.810792][ T6861] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 199.810815][ T6861] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 199.810837][ T6861] sctp_sendmsg+0x1759/0x2a50 [ 199.810867][ T6861] ? __pfx_sctp_sendmsg+0x10/0x10 [ 199.810890][ T6861] ? aa_sk_perm+0x703/0x950 [ 199.810923][ T6861] ? sock_rps_record_flow+0x19/0x350 [ 199.810954][ T6861] ? inet_sendmsg+0x298/0x320 [ 199.810983][ T6861] ? __pfx_inet_sendmsg+0x10/0x10 [ 199.811016][ T6861] sock_sendmsg_nosec+0x10e/0x180 [ 199.811044][ T6861] __sys_sendto+0x41e/0x5d0 [ 199.811067][ T6861] ? __pfx___sys_sendto+0x10/0x10 [ 199.811106][ T6861] ? __pfx_ksys_write+0x10/0x10 [ 199.811139][ T6861] __x64_sys_sendto+0xde/0x100 [ 199.811164][ T6861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.811184][ T6861] do_syscall_64+0x174/0x580 [ 199.811202][ T6861] ? trace_irq_disable+0x3b/0x140 [ 199.811223][ T6861] ? clear_bhb_loop+0x40/0x90 [ 199.811250][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.811268][ T6861] RIP: 0033:0x7feda0e8ce59 [ 199.811286][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.811306][ T6861] RSP: 002b:00007fed9f0e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 199.811332][ T6861] RAX: ffffffffffffffda RBX: 00007feda1105fa0 RCX: 00007feda0e8ce59 [ 199.811345][ T6861] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 199.811355][ T6861] RBP: 00007fed9f0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.811370][ T6861] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 199.811380][ T6861] R13: 00007feda1106038 R14: 00007feda1105fa0 R15: 00007ffe82f08698 [ 199.811417][ T6861] [ 200.196983][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 200.326848][ T10] usb 4-1: device descriptor read/64, error -71 [ 200.431269][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 200.525554][ T1011] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 200.575480][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 200.638027][ T6874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.278'. [ 200.667527][ T6874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'. [ 200.684957][ T1011] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 200.684992][ T1011] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 200.685018][ T1011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 200.685041][ T1011] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 200.728728][ T10] usb 4-1: device descriptor read/64, error -71 [ 200.743527][ T1011] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 200.743552][ T1011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.743566][ T1011] usb 5-1: Product: syz [ 200.743577][ T1011] usb 5-1: Manufacturer: syz [ 200.743588][ T1011] usb 5-1: SerialNumber: syz [ 200.778017][ T1011] usb 5-1: config 0 descriptor?? [ 200.779010][ T6866] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 200.805822][ T1011] usb 5-1: ucan: probing device on interface #0 [ 200.805857][ T1011] usb 5-1: ucan: invalid in_ep MaxPacketSize [ 200.805868][ T1011] usb 5-1: ucan: probe failed; try to update the device firmware [ 200.851925][ T10] usb usb4-port1: attempt power cycle [ 200.897536][ T6877] 9p: Bad value for 'rfdno' [ 201.000336][ T1011] usb 5-1: USB disconnect, device number 10 [ 201.195626][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 201.216744][ T10] usb 4-1: device descriptor read/8, error -71 [ 201.455544][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 201.476259][ T10] usb 4-1: device descriptor read/8, error -71 [ 201.586137][ T10] usb usb4-port1: unable to enumerate USB device [ 201.865544][ T5783] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 201.905819][ T5625] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 201.965541][ T32] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 202.017637][ T5783] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.017691][ T5783] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 202.020234][ T5783] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.020270][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.020289][ T5783] usb 5-1: Product: syz [ 202.020309][ T5783] usb 5-1: Manufacturer: syz [ 202.020320][ T5783] usb 5-1: SerialNumber: syz [ 202.101398][ T5625] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 202.101428][ T5625] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 202.101443][ T5625] usb 6-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 202.101503][ T5625] usb 6-1: config 220 has no interface number 2 [ 202.101551][ T5625] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 202.101571][ T5625] usb 6-1: config 220 interface 0 has no altsetting 0 [ 202.101584][ T5625] usb 6-1: config 220 interface 76 has no altsetting 0 [ 202.101597][ T5625] usb 6-1: config 220 interface 1 has no altsetting 0 [ 202.208815][ T5625] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 202.208839][ T5625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.208894][ T5625] usb 6-1: Product: syz [ 202.208905][ T5625] usb 6-1: Manufacturer: syz [ 202.208917][ T5625] usb 6-1: SerialNumber: syz [ 202.233061][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 202.267166][ T32] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 202.267190][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.267204][ T32] usb 2-1: Product: syz [ 202.267214][ T32] usb 2-1: Manufacturer: syz [ 202.267224][ T32] usb 2-1: SerialNumber: syz [ 202.334039][ T6893] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 202.359687][ T32] usb 2-1: config 0 descriptor?? [ 202.389084][ T32] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 202.389123][ T32] dvb-usb: bulk message failed: -22 (2/0) [ 202.439164][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.439859][ T32] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 202.439957][ T32] usb 2-1: media controller created [ 202.510567][ T5625] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 202.510593][ T5625] uvcvideo 6-1:220.0: No valid video chain found. [ 202.510679][ T5625] usb 6-1: selecting invalid altsetting 0 [ 202.657623][ T5625] usb 6-1: selecting invalid altsetting 0 [ 202.657723][ T5625] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 202.677932][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.691502][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.706645][ T5625] usb 6-1: USB disconnect, device number 12 [ 202.708142][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.002032][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.098516][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.101241][ T5783] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 203.101836][ T5783] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 203.115971][ T5783] cdc_ncm 5-1:1.0: bind() failure [ 203.263186][ T5783] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 203.263643][ T5783] cdc_ncm 5-1:1.1: bind() failure [ 203.475054][ T5783] usb 5-1: USB disconnect, device number 11 [ 203.540779][ T32] cxusb: set interface failed [ 203.540801][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 203.733601][ T32] DVB: Unable to find symbol mt352_attach() [ 203.733629][ T32] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 203.807622][ T6914] FAULT_INJECTION: forcing a failure. [ 203.807622][ T6914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.807660][ T6914] CPU: 0 UID: 0 PID: 6914 Comm: syz.4.292 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 203.807688][ T6914] Tainted: [L]=SOFTLOCKUP [ 203.807696][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.807710][ T6914] Call Trace: [ 203.807717][ T6914] [ 203.807726][ T6914] dump_stack_lvl+0xe8/0x150 [ 203.807755][ T6914] should_fail_ex+0x467/0x600 [ 203.807792][ T6914] _copy_from_iter+0x1d3/0x1660 [ 203.807827][ T6914] ? rcu_is_watching+0x15/0xb0 [ 203.807858][ T6914] ? trace_kmem_cache_alloc+0x29/0xe0 [ 203.807895][ T6914] ? __pfx__copy_from_iter+0x10/0x10 [ 203.807928][ T6914] ? __alloc_skb+0x276/0x7a0 [ 203.807948][ T6914] ? __alloc_skb+0x276/0x7a0 [ 203.807975][ T6914] ? netlink_sendmsg+0x650/0xb40 [ 203.808000][ T6914] ? skb_put+0x112/0x210 [ 203.808032][ T6914] netlink_sendmsg+0x6c0/0xb40 [ 203.808068][ T6914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.808100][ T6914] ? aa_sock_msg_perm+0x122/0x200 [ 203.808135][ T6914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.808161][ T6914] sock_sendmsg_nosec+0x13a/0x180 [ 203.808204][ T6914] ____sys_sendmsg+0x565/0x870 [ 203.808233][ T6914] ? __might_fault+0xaf/0x130 [ 203.808275][ T6914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.808311][ T6914] ? import_iovec+0x73/0xa0 [ 203.808337][ T6914] ___sys_sendmsg+0x2a5/0x360 [ 203.808361][ T6914] ? __lock_acquire+0x683/0x2ce0 [ 203.808393][ T6914] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.808454][ T6914] ? __fget_files+0x2a/0x420 [ 203.808474][ T6914] ? __fget_files+0x3a8/0x420 [ 203.808505][ T6914] __x64_sys_sendmsg+0x1b7/0x290 [ 203.808534][ T6914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.808578][ T6914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.808602][ T6914] do_syscall_64+0x174/0x580 [ 203.808627][ T6914] ? trace_irq_disable+0x3b/0x140 [ 203.808652][ T6914] ? clear_bhb_loop+0x40/0x90 [ 203.808679][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.808702][ T6914] RIP: 0033:0x7ffa3faece59 [ 203.808723][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.808741][ T6914] RSP: 002b:00007ffa3dd46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.808765][ T6914] RAX: ffffffffffffffda RBX: 00007ffa3fd65fa0 RCX: 00007ffa3faece59 [ 203.808782][ T6914] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 203.808795][ T6914] RBP: 00007ffa3dd46090 R08: 0000000000000000 R09: 0000000000000000 [ 203.808808][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.808820][ T6914] R13: 00007ffa3fd66038 R14: 00007ffa3fd65fa0 R15: 00007ffe33803358 [ 203.808852][ T6914] [ 203.886644][ T32] rc_core: IR keymap rc-dvico-portable not found [ 203.886665][ T32] Registered IR keymap rc-empty [ 203.933037][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 204.004237][ T32] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 204.177056][ T32] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input12 [ 204.226545][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 204.228338][ T32] dvb-usb: schedule remote query interval to 100 msecs. [ 204.228363][ T32] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 204.230749][ T10] usb 4-1: config 4 has an invalid interface number: 207 but max is 0 [ 204.230776][ T10] usb 4-1: config 4 has no interface number 0 [ 204.230809][ T10] usb 4-1: config 4 interface 207 has no altsetting 0 [ 204.239119][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 0.02 [ 204.239205][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.239259][ T10] usb 4-1: Product: syz [ 204.239319][ T10] usb 4-1: Manufacturer: syz [ 204.239368][ T10] usb 4-1: SerialNumber: syz [ 204.312476][ T32] usb 2-1: USB disconnect, device number 26 [ 204.331683][ T6912] netlink: 16 bytes leftover after parsing attributes in process `syz.5.290'. [ 204.566610][ T10] ttusb_dec_send_command: command bulk message failed: error -22 [ 204.566856][ T10] ttusb-dec 4-1:4.207: probe with driver ttusb-dec failed with error -22 [ 204.629834][ T10] usb 4-1: USB disconnect, device number 38 [ 204.800128][ T32] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 204.965451][ T5758] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 205.119598][ T5758] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.119628][ T5758] usb 5-1: config 0 has no interface number 0 [ 205.140763][ T5758] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 205.140796][ T5758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.140817][ T5758] usb 5-1: Product: syz [ 205.140832][ T5758] usb 5-1: Manufacturer: syz [ 205.140847][ T5758] usb 5-1: SerialNumber: syz [ 205.195518][ T1011] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 205.197438][ T5758] usb 5-1: config 0 descriptor?? [ 205.261886][ T5758] usb 5-1: selecting invalid altsetting 1 [ 205.262953][ T5758] dvb_ttusb_budget: ttusb_init_controller: error [ 205.262973][ T5758] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 205.369149][ T1011] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.369184][ T1011] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.369225][ T1011] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 205.369249][ T1011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.381315][ T1011] usb 6-1: config 0 descriptor?? [ 205.427339][ T6928] : renamed from lo (while UP) [ 205.463704][ T6920] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.598443][ T6929] can: request_module (can-proto-4) failed. [ 205.642904][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.716007][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.805536][ T5824] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 205.921196][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.921703][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.955479][ T5824] usb 2-1: device descriptor read/64, error -71 [ 205.964586][ T1011] hid_parser_main: 64 callbacks suppressed [ 205.964612][ T1011] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 205.964643][ T1011] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 205.964671][ T1011] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 205.964697][ T1011] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 205.964724][ T1011] playstation 0003:054C:0DF2.000B: item fetching failed at offset 4/5 [ 206.006837][ T1011] playstation 0003:054C:0DF2.000B: Parse failed [ 206.007061][ T1011] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -22 [ 206.105413][ T5758] DVB: Unable to find symbol stv0299_attach() [ 206.175073][ T5758] DVB: Unable to find symbol tda8083_attach() [ 206.175086][ T5758] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 206.205460][ T5824] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 206.345962][ T5824] usb 2-1: device descriptor read/64, error -71 [ 206.456175][ T5824] usb usb2-port1: attempt power cycle [ 206.817129][ T5824] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 206.848755][ T5824] usb 2-1: device descriptor read/8, error -71 [ 206.873875][ T6945] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.105632][ T5824] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 207.126288][ T5824] usb 2-1: device descriptor read/8, error -71 [ 207.200395][ T6945] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.236328][ T5824] usb usb2-port1: unable to enumerate USB device [ 207.589751][ T6945] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.663270][ T10] usb 5-1: USB disconnect, device number 12 [ 207.796322][ T6950] FAULT_INJECTION: forcing a failure. [ 207.796322][ T6950] name failslab, interval 1, probability 0, space 0, times 0 [ 207.797257][ T6950] CPU: 1 UID: 0 PID: 6950 Comm: syz.4.302 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 207.797286][ T6950] Tainted: [L]=SOFTLOCKUP [ 207.797293][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.797304][ T6950] Call Trace: [ 207.797311][ T6950] [ 207.797319][ T6950] dump_stack_lvl+0xe8/0x150 [ 207.797345][ T6950] should_fail_ex+0x467/0x600 [ 207.797373][ T6950] should_failslab+0xa8/0x100 [ 207.797398][ T6950] __kmalloc_noprof+0xfe/0x780 [ 207.797444][ T6950] ? do_pagemap_cmd+0x46f/0xc50 [ 207.797468][ T6950] ? do_pagemap_cmd+0x46f/0xc50 [ 207.797501][ T6950] do_pagemap_cmd+0x46f/0xc50 [ 207.797528][ T6950] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 207.797546][ T6950] ? hook_file_ioctl+0x1f3/0x600 [ 207.797568][ T6950] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 207.797604][ T6950] ? __fget_files+0x2a/0x420 [ 207.797622][ T6950] ? __fget_files+0x2a/0x420 [ 207.797636][ T6950] ? __fget_files+0x3a8/0x420 [ 207.797649][ T6950] ? __fget_files+0x2a/0x420 [ 207.797667][ T6950] ? bpf_lsm_file_ioctl+0x9/0x20 [ 207.797685][ T6950] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 207.797709][ T6950] __se_sys_ioctl+0xff/0x170 [ 207.797736][ T6950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.797755][ T6950] do_syscall_64+0x174/0x580 [ 207.797772][ T6950] ? trace_irq_disable+0x3b/0x140 [ 207.797792][ T6950] ? clear_bhb_loop+0x40/0x90 [ 207.797813][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.797831][ T6950] RIP: 0033:0x7ffa3faece59 [ 207.797852][ T6950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.797867][ T6950] RSP: 002b:00007ffa3dd46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.797886][ T6950] RAX: ffffffffffffffda RBX: 00007ffa3fd65fa0 RCX: 00007ffa3faece59 [ 207.797898][ T6950] RDX: 00002000000004c0 RSI: 00000000c0606610 RDI: 0000000000000003 [ 207.797910][ T6950] RBP: 00007ffa3dd46090 R08: 0000000000000000 R09: 0000000000000000 [ 207.797922][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.797933][ T6950] R13: 00007ffa3fd66038 R14: 00007ffa3fd65fa0 R15: 00007ffe33803358 [ 207.797958][ T6950] [ 208.133654][ T32] usb 6-1: USB disconnect, device number 13 [ 208.273411][ T6945] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.493672][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 208.530851][ T6963] FAULT_INJECTION: forcing a failure. [ 208.530851][ T6963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.530895][ T6963] CPU: 1 UID: 0 PID: 6963 Comm: syz.5.305 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 208.530926][ T6963] Tainted: [L]=SOFTLOCKUP [ 208.530933][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 208.530947][ T6963] Call Trace: [ 208.530956][ T6963] [ 208.530970][ T6963] dump_stack_lvl+0xe8/0x150 [ 208.531001][ T6963] should_fail_ex+0x467/0x600 [ 208.531039][ T6963] _copy_to_user+0x31/0xb0 [ 208.531065][ T6963] simple_read_from_buffer+0xe1/0x170 [ 208.531107][ T6963] proc_fail_nth_read+0x1be/0x230 [ 208.531147][ T6963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.531187][ T6963] ? rw_verify_area+0x250/0x4d0 [ 208.531214][ T6963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.531248][ T6963] vfs_read+0x219/0xa90 [ 208.531281][ T6963] ? __pfx_vfs_read+0x10/0x10 [ 208.531308][ T6963] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 208.531334][ T6963] ? lockdep_hardirqs_on+0x7a/0x110 [ 208.531357][ T6963] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 208.531381][ T6963] ? mutex_lock_nested+0x152/0x1d0 [ 208.531412][ T6963] ? fdget_pos+0x252/0x320 [ 208.531443][ T6963] ksys_read+0x156/0x270 [ 208.531468][ T6963] ? __pfx_ksys_read+0x10/0x10 [ 208.531500][ T6963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.531524][ T6963] do_syscall_64+0x174/0x580 [ 208.531548][ T6963] ? trace_irq_disable+0x3b/0x140 [ 208.531574][ T6963] ? clear_bhb_loop+0x40/0x90 [ 208.531601][ T6963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.531623][ T6963] RIP: 0033:0x7f77c3e4d68e [ 208.531643][ T6963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.531661][ T6963] RSP: 002b:00007f77c20e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.531684][ T6963] RAX: ffffffffffffffda RBX: 00007f77c20e66c0 RCX: 00007f77c3e4d68e [ 208.531699][ T6963] RDX: 000000000000000f RSI: 00007f77c20e60a0 RDI: 0000000000000004 [ 208.531724][ T6963] RBP: 00007f77c20e6090 R08: 0000000000000000 R09: 0000000000000000 [ 208.531737][ T6963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.531750][ T6963] R13: 00007f77c4106038 R14: 00007f77c4105fa0 R15: 00007ffd94bc7538 [ 208.531784][ T6963] [ 209.217449][ T32] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 209.333195][ T3339] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.391592][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 209.439548][ T32] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 209.439580][ T32] usb 6-1: config 0 has no interface number 0 [ 209.439636][ T32] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 209.439664][ T32] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 209.491367][ T32] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 209.491400][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.491420][ T32] usb 6-1: Product: syz [ 209.491435][ T32] usb 6-1: Manufacturer: syz [ 209.491449][ T32] usb 6-1: SerialNumber: syz [ 209.535060][ T32] usb 6-1: config 0 descriptor?? [ 209.554985][ T6973] sg_write: data in/out 491584/136 bytes for SCSI command 0x0-- guessing data in; [ 209.554985][ T6973] program syz.4.308 not setting count and/or reply_len properly [ 209.674195][ T1431] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.719619][ T67] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.760782][ T32] radio-si470x 6-1:0.35: this is not a si470x device. [ 209.786493][ T32] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 209.989084][ T32] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 210.057891][ T32] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 210.129606][ T32] usb 6-1: USB disconnect, device number 14 [ 210.159148][ T32] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 210.175384][ T1011] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 210.257539][ T1431] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.325414][ T1011] usb 2-1: Using ep0 maxpacket: 8 [ 210.328594][ T1011] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.328648][ T1011] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 210.328673][ T1011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.404274][ T1011] usb 2-1: config 0 descriptor?? [ 210.417848][ T1011] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 210.687938][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 210.849907][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.849937][ T10] usb 5-1: config 0 has no interface number 0 [ 210.850373][ T6986] FAULT_INJECTION: forcing a failure. [ 210.850373][ T6986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.850426][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.3.313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 210.850456][ T6986] Tainted: [L]=SOFTLOCKUP [ 210.850463][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 210.850481][ T6986] Call Trace: [ 210.850490][ T6986] [ 210.850498][ T6986] dump_stack_lvl+0xe8/0x150 [ 210.850539][ T6986] should_fail_ex+0x467/0x600 [ 210.850591][ T6986] _copy_from_user+0x2d/0xb0 [ 210.850622][ T6986] binder_ioctl_write_read+0xb05/0xa5d0 [ 210.850685][ T6986] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 210.850722][ T6986] ? stack_depot_save_flags+0x33/0x800 [ 210.850793][ T6986] ? __lock_acquire+0x683/0x2ce0 [ 210.850843][ T6986] ? do_raw_spin_lock+0x12b/0x2f0 [ 210.850887][ T6986] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 210.850921][ T6986] ? reacquire_held_locks+0x104/0x190 [ 210.850961][ T6986] ? rt_spin_unlock+0x157/0x200 [ 210.851012][ T6986] ? binder_get_thread+0x176/0x6d0 [ 210.851033][ T6986] ? binder_ioctl+0x189/0x1b10 [ 210.851058][ T6986] binder_ioctl+0x420/0x1b10 [ 210.851079][ T6986] ? tomoyo_path_number_perm+0x219/0x5f0 [ 210.851108][ T6986] ? tomoyo_path_number_perm+0x219/0x5f0 [ 210.851138][ T6986] ? do_vfs_ioctl+0x1184/0x1550 [ 210.851166][ T6986] ? __pfx_binder_ioctl+0x10/0x10 [ 210.851188][ T6986] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 210.851228][ T6986] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 210.851252][ T6986] ? hook_file_ioctl+0x1f3/0x600 [ 210.851278][ T6986] ? lockdep_hardirqs_on+0x7a/0x110 [ 210.851322][ T6986] ? __fget_files+0x2a/0x420 [ 210.851347][ T6986] ? __fget_files+0x2a/0x420 [ 210.851366][ T6986] ? __fget_files+0x3a8/0x420 [ 210.851386][ T6986] ? __fget_files+0x2a/0x420 [ 210.851410][ T6986] ? bpf_lsm_file_ioctl+0x9/0x20 [ 210.851434][ T6986] ? __pfx_binder_ioctl+0x10/0x10 [ 210.851455][ T6986] __se_sys_ioctl+0xff/0x170 [ 210.851483][ T6986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.851525][ T6986] do_syscall_64+0x174/0x580 [ 210.851555][ T6986] ? trace_irq_disable+0x3b/0x140 [ 210.851590][ T6986] ? clear_bhb_loop+0x40/0x90 [ 210.851632][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.851655][ T6986] RIP: 0033:0x7f232791ce59 [ 210.851677][ T6986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.851697][ T6986] RSP: 002b:00007f2325b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.851722][ T6986] RAX: ffffffffffffffda RBX: 00007f2327b95fa0 RCX: 00007f232791ce59 [ 210.851737][ T6986] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 210.851751][ T6986] RBP: 00007f2325b76090 R08: 0000000000000000 R09: 0000000000000000 [ 210.851764][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.851778][ T6986] R13: 00007f2327b96038 R14: 00007f2327b95fa0 R15: 00007ffdeedf9ae8 [ 210.851812][ T6986] [ 210.852940][ T6986] binder: 6983:6986 ioctl c0306201 200000004a40 returned -14 [ 210.985552][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 210.985581][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.985600][ T10] usb 5-1: Product: syz [ 210.985612][ T10] usb 5-1: Manufacturer: syz [ 210.985676][ T10] usb 5-1: SerialNumber: syz [ 211.242965][ T10] usb 5-1: config 0 descriptor?? [ 211.274089][ T10] usb 5-1: selecting invalid altsetting 1 [ 211.293047][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 211.293068][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 211.605939][ T10] DVB: Unable to find symbol stv0299_attach() [ 211.760429][ T10] DVB: Unable to find symbol tda8083_attach() [ 211.760447][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 211.791320][ T10] usb 5-1: USB disconnect, device number 13 [ 212.058747][ T1011] gspca_vc032x: reg_w err -71 [ 212.058841][ T1011] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 212.128358][ T1011] usb 2-1: USB disconnect, device number 31 [ 212.260802][ T7007] FAULT_INJECTION: forcing a failure. [ 212.260802][ T7007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.260835][ T7007] CPU: 1 UID: 0 PID: 7007 Comm: syz.4.319 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 212.260860][ T7007] Tainted: [L]=SOFTLOCKUP [ 212.260866][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.260877][ T7007] Call Trace: [ 212.260886][ T7007] [ 212.260894][ T7007] dump_stack_lvl+0xe8/0x150 [ 212.260921][ T7007] should_fail_ex+0x467/0x600 [ 212.260950][ T7007] _copy_from_iter+0x1d3/0x1660 [ 212.260981][ T7007] ? rcu_is_watching+0x15/0xb0 [ 212.261007][ T7007] ? trace_kmem_cache_alloc+0x29/0xe0 [ 212.261037][ T7007] ? __pfx__copy_from_iter+0x10/0x10 [ 212.261066][ T7007] ? __alloc_skb+0x276/0x7a0 [ 212.261084][ T7007] ? __alloc_skb+0x276/0x7a0 [ 212.261106][ T7007] ? netlink_sendmsg+0x650/0xb40 [ 212.261128][ T7007] ? skb_put+0x112/0x210 [ 212.261148][ T7007] netlink_sendmsg+0x6c0/0xb40 [ 212.261177][ T7007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.261202][ T7007] ? aa_sock_msg_perm+0x122/0x200 [ 212.261232][ T7007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.261255][ T7007] sock_sendmsg_nosec+0x13a/0x180 [ 212.261284][ T7007] ____sys_sendmsg+0x565/0x870 [ 212.261304][ T7007] ? __might_fault+0xaf/0x130 [ 212.261337][ T7007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.261365][ T7007] ? import_iovec+0x73/0xa0 [ 212.261385][ T7007] ___sys_sendmsg+0x2a5/0x360 [ 212.261415][ T7007] ? __lock_acquire+0x683/0x2ce0 [ 212.261440][ T7007] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.261488][ T7007] ? __fget_files+0x2a/0x420 [ 212.261504][ T7007] ? __fget_files+0x3a8/0x420 [ 212.261534][ T7007] __x64_sys_sendmsg+0x1b7/0x290 [ 212.261557][ T7007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.261593][ T7007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.261613][ T7007] do_syscall_64+0x174/0x580 [ 212.261632][ T7007] ? trace_irq_disable+0x3b/0x140 [ 212.261653][ T7007] ? clear_bhb_loop+0x40/0x90 [ 212.261675][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.261692][ T7007] RIP: 0033:0x7ffa3faece59 [ 212.261708][ T7007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.261727][ T7007] RSP: 002b:00007ffa3dd46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.261746][ T7007] RAX: ffffffffffffffda RBX: 00007ffa3fd65fa0 RCX: 00007ffa3faece59 [ 212.261759][ T7007] RDX: 0000000000000084 RSI: 0000200000000080 RDI: 0000000000000003 [ 212.261770][ T7007] RBP: 00007ffa3dd46090 R08: 0000000000000000 R09: 0000000000000000 [ 212.261781][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.261791][ T7007] R13: 00007ffa3fd66038 R14: 00007ffa3fd65fa0 R15: 00007ffe33803358 [ 212.261818][ T7007] [ 212.985425][ T32] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 213.059855][ T7016] sctp: [Deprecated]: syz.5.323 (pid 7016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.059855][ T7016] Use struct sctp_sack_info instead [ 213.141553][ T32] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 213.141580][ T32] usb 5-1: config 0 has no interface number 0 [ 213.168198][ T32] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 213.168231][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.168252][ T32] usb 5-1: Product: syz [ 213.168268][ T32] usb 5-1: Manufacturer: syz [ 213.168282][ T32] usb 5-1: SerialNumber: syz [ 213.168671][ T7020] FAULT_INJECTION: forcing a failure. [ 213.168671][ T7020] name failslab, interval 1, probability 0, space 0, times 0 [ 213.168707][ T7020] CPU: 0 UID: 0 PID: 7020 Comm: syz.5.325 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 213.168736][ T7020] Tainted: [L]=SOFTLOCKUP [ 213.168744][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.168757][ T7020] Call Trace: [ 213.168765][ T7020] [ 213.168775][ T7020] dump_stack_lvl+0xe8/0x150 [ 213.168805][ T7020] should_fail_ex+0x467/0x600 [ 213.168841][ T7020] should_failslab+0xa8/0x100 [ 213.168867][ T7020] __kmalloc_noprof+0xfe/0x780 [ 213.168901][ T7020] ? rcu_is_watching+0x15/0xb0 [ 213.168933][ T7020] ? tomoyo_realpath_from_path+0xef/0x640 [ 213.168965][ T7020] ? tomoyo_realpath_from_path+0xef/0x640 [ 213.169005][ T7020] tomoyo_realpath_from_path+0xef/0x640 [ 213.169051][ T7020] tomoyo_path_perm+0x283/0x560 [ 213.169077][ T7020] ? tomoyo_path_perm+0x251/0x560 [ 213.169102][ T7020] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 213.169159][ T7020] ? do_raw_spin_lock+0x12b/0x2f0 [ 213.169200][ T7020] security_inode_getattr+0x12b/0x310 [ 213.169236][ T7020] vfs_getattr+0x23/0x70 [ 213.169268][ T7020] loop_assign_backing_file+0x286/0x4c0 [ 213.169311][ T7020] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 213.169367][ T7020] ? __asan_memcpy+0x40/0x70 [ 213.169400][ T7020] ? loop_set_status_from_info+0x17b/0x240 [ 213.169437][ T7020] loop_configure+0x75e/0xdd0 [ 213.169466][ T7020] ? __lock_acquire+0x683/0x2ce0 [ 213.169504][ T7020] ? __pfx_loop_configure+0x10/0x10 [ 213.169569][ T7020] lo_ioctl+0xaa0/0x1fe0 [ 213.169612][ T7020] ? kernel_text_address+0xa5/0xe0 [ 213.169640][ T7020] ? __kernel_text_address+0xd/0x30 [ 213.169666][ T7020] ? __pfx_lo_ioctl+0x10/0x10 [ 213.169698][ T7020] ? __lock_acquire+0x683/0x2ce0 [ 213.169728][ T7020] ? register_lock_class+0x31/0x2e0 [ 213.169760][ T7020] ? __lock_acquire+0x683/0x2ce0 [ 213.169789][ T7020] ? __lock_acquire+0x683/0x2ce0 [ 213.169826][ T7020] ? __lock_acquire+0x683/0x2ce0 [ 213.169862][ T7020] ? __lock_acquire+0x683/0x2ce0 [ 213.169896][ T7020] ? __lock_acquire+0x683/0x2ce0 [ 213.169938][ T7020] ? unwind_next_frame+0x8f/0x2550 [ 213.169976][ T7020] ? is_bpf_text_address+0x26/0x2b0 [ 213.170023][ T7020] ? is_bpf_text_address+0x26/0x2b0 [ 213.170060][ T7020] ? is_bpf_text_address+0x292/0x2b0 [ 213.170088][ T7020] ? is_bpf_text_address+0x26/0x2b0 [ 213.170120][ T7020] ? kernel_text_address+0xa5/0xe0 [ 213.170146][ T7020] ? __kernel_text_address+0xd/0x30 [ 213.170171][ T7020] ? unwind_get_return_address+0x4d/0x90 [ 213.170198][ T7020] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 213.170223][ T7020] ? arch_stack_walk+0xfb/0x150 [ 213.170264][ T7020] ? stack_trace_save+0xa9/0x100 [ 213.170287][ T7020] ? __pfx_stack_trace_save+0x10/0x10 [ 213.170309][ T7020] ? kasan_save_track+0x4f/0x80 [ 213.170347][ T7020] ? stack_depot_save_flags+0x33/0x800 [ 213.170377][ T7020] ? __lock_acquire+0x683/0x2ce0 [ 213.170407][ T7020] ? kasan_save_track+0x4f/0x80 [ 213.170439][ T7020] ? kasan_save_track+0x3e/0x80 [ 213.170470][ T7020] ? kasan_save_free_info+0x40/0x50 [ 213.170496][ T7020] ? __kasan_slab_free+0x5c/0x80 [ 213.170515][ T7020] ? kfree+0x1c5/0x6c0 [ 213.170544][ T7020] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 213.170582][ T7020] ? security_file_ioctl+0xc3/0x2a0 [ 213.170608][ T7020] ? __se_sys_ioctl+0x47/0x170 [ 213.170634][ T7020] ? do_syscall_64+0x174/0x580 [ 213.170657][ T7020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.170692][ T7020] ? __asan_memset+0x22/0x50 [ 213.170723][ T7020] ? blk_get_meta_cap+0x19d/0x780 [ 213.170753][ T7020] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 213.170791][ T7020] ? blkdev_common_ioctl+0x14b7/0x3250 [ 213.170827][ T7020] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 213.170856][ T7020] ? kasan_quarantine_put+0xbb/0x1f0 [ 213.170899][ T7020] ? tomoyo_path_number_perm+0x219/0x5f0 [ 213.170926][ T7020] ? tomoyo_path_number_perm+0x219/0x5f0 [ 213.170957][ T7020] ? do_vfs_ioctl+0x1184/0x1550 [ 213.171028][ T7020] ? __pfx_lo_ioctl+0x10/0x10 [ 213.171061][ T7020] blkdev_ioctl+0x5e6/0x750 [ 213.171091][ T7020] ? __pfx_blkdev_ioctl+0x10/0x10 [ 213.171114][ T7020] ? __fget_files+0x2a/0x420 [ 213.171139][ T7020] ? bpf_lsm_file_ioctl+0x9/0x20 [ 213.171164][ T7020] ? __pfx_blkdev_ioctl+0x10/0x10 [ 213.171190][ T7020] __se_sys_ioctl+0xff/0x170 [ 213.171217][ T7020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.171242][ T7020] do_syscall_64+0x174/0x580 [ 213.171263][ T7020] ? trace_irq_disable+0x3b/0x140 [ 213.171287][ T7020] ? clear_bhb_loop+0x40/0x90 [ 213.171314][ T7020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.171336][ T7020] RIP: 0033:0x7f77c3e8ce59 [ 213.171357][ T7020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.171376][ T7020] RSP: 002b:00007f77c20e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.171399][ T7020] RAX: ffffffffffffffda RBX: 00007f77c4105fa0 RCX: 00007f77c3e8ce59 [ 213.171415][ T7020] RDX: 0000200000000400 RSI: 0000000000004c0a RDI: 0000000000000003 [ 213.171428][ T7020] RBP: 00007f77c20e6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.171441][ T7020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.171454][ T7020] R13: 00007f77c4106038 R14: 00007f77c4105fa0 R15: 00007ffd94bc7538 [ 213.171488][ T7020] [ 213.171530][ T7020] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.172188][ T7020] loop5: detected capacity change from 0 to 7 [ 213.226136][ T5783] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 213.299862][ T32] usb 5-1: config 0 descriptor?? [ 213.642300][ T5783] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 213.642386][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.830396][ T32] usb 5-1: selecting invalid altsetting 1 [ 213.830567][ T32] dvb_ttusb_budget: ttusb_init_controller: error [ 213.832283][ T5783] usb 4-1: config 0 descriptor?? [ 213.833266][ T32] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 213.872416][ T5783] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 213.911095][ T7020] Dev loop5: unable to read RDB block 7 [ 213.911142][ T7020] loop5: unable to read partition table [ 213.911358][ T7020] loop5: partition table beyond EOD, truncated [ 213.911392][ T7020] loop_reread_partitions: partition scan of loop5 (被x) failed (rc=-5) [ 214.082717][ T5618] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 214.206915][ T7024] netlink: 60 bytes leftover after parsing attributes in process `syz.1.327'. [ 214.208115][ T7024] netlink: 60 bytes leftover after parsing attributes in process `syz.1.327'. [ 214.210015][ T7024] netlink: 68 bytes leftover after parsing attributes in process `syz.1.327'. [ 214.279143][ T5783] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 214.327564][ T32] DVB: Unable to find symbol stv0299_attach() [ 214.391531][ T32] DVB: Unable to find symbol tda8083_attach() [ 214.391543][ T32] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 214.444069][ T32] usb 5-1: USB disconnect, device number 14 [ 214.495379][ T5758] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 214.550353][ T7028] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 214.572454][ T5783] gspca_cpia1: usb_control_msg 01, error -71 [ 214.572476][ T5783] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 214.618637][ T5783] usb 4-1: USB disconnect, device number 39 [ 214.645427][ T5758] usb 2-1: Using ep0 maxpacket: 8 [ 214.648797][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.648822][ T5758] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 214.651089][ T5758] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 214.651120][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.651141][ T5758] usb 2-1: Product: syz [ 214.651157][ T5758] usb 2-1: Manufacturer: syz [ 214.651172][ T5758] usb 2-1: SerialNumber: syz [ 214.748636][ T5758] usb 2-1: config 0 descriptor?? [ 215.238032][ T10] usb 2-1: USB disconnect, device number 32 [ 215.448510][ T5758] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 215.597504][ T5758] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.597537][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 215.597562][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 215.600383][ T5758] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 215.600414][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.600629][ T5758] usb 4-1: Product: syz [ 215.600645][ T5758] usb 4-1: Manufacturer: syz [ 215.600659][ T5758] usb 4-1: SerialNumber: syz [ 215.684638][ T5758] usb 4-1: config 0 descriptor?? [ 215.697299][ T5758] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 215.852074][ T7047] FAULT_INJECTION: forcing a failure. [ 215.852074][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 215.852106][ T7047] CPU: 1 UID: 0 PID: 7047 Comm: syz.1.334 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 215.852130][ T7047] Tainted: [L]=SOFTLOCKUP [ 215.852136][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 215.852147][ T7047] Call Trace: [ 215.852154][ T7047] [ 215.852161][ T7047] dump_stack_lvl+0xe8/0x150 [ 215.852184][ T7047] should_fail_ex+0x467/0x600 [ 215.852213][ T7047] should_failslab+0xa8/0x100 [ 215.852233][ T7047] kmem_cache_alloc_noprof+0xa4/0x650 [ 215.852260][ T7047] ? skb_clone+0x212/0x3a0 [ 215.852280][ T7047] ? skb_clone+0x212/0x3a0 [ 215.852307][ T7047] skb_clone+0x212/0x3a0 [ 215.852331][ T7047] __netlink_deliver_tap+0x410/0x880 [ 215.852352][ T7047] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.852387][ T7047] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.852410][ T7047] netlink_deliver_tap+0x19c/0x1b0 [ 215.852432][ T7047] netlink_unicast+0x7b8/0x990 [ 215.852465][ T7047] netlink_sendmsg+0x813/0xb40 [ 215.852501][ T7047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.852563][ T7047] ? aa_sock_msg_perm+0x122/0x200 [ 215.852603][ T7047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.852633][ T7047] sock_sendmsg_nosec+0x13a/0x180 [ 215.852674][ T7047] ____sys_sendmsg+0x565/0x870 [ 215.852708][ T7047] ? __might_fault+0xaf/0x130 [ 215.852742][ T7047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.852770][ T7047] ? import_iovec+0x73/0xa0 [ 215.852791][ T7047] ___sys_sendmsg+0x2a5/0x360 [ 215.852811][ T7047] ? __lock_acquire+0x683/0x2ce0 [ 215.852836][ T7047] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.852888][ T7047] ? __fget_files+0x2a/0x420 [ 215.852903][ T7047] ? __fget_files+0x3a8/0x420 [ 215.852928][ T7047] __x64_sys_sendmsg+0x1b7/0x290 [ 215.852957][ T7047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.852998][ T7047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.853018][ T7047] do_syscall_64+0x174/0x580 [ 215.853037][ T7047] ? trace_irq_disable+0x3b/0x140 [ 215.853058][ T7047] ? clear_bhb_loop+0x40/0x90 [ 215.853079][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.853097][ T7047] RIP: 0033:0x7feda0e8ce59 [ 215.853113][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.853128][ T7047] RSP: 002b:00007fed9f0e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.853147][ T7047] RAX: ffffffffffffffda RBX: 00007feda1105fa0 RCX: 00007feda0e8ce59 [ 215.853160][ T7047] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 215.853171][ T7047] RBP: 00007fed9f0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 215.853182][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.853193][ T7047] R13: 00007feda1106038 R14: 00007feda1105fa0 R15: 00007ffe82f08698 [ 215.853219][ T7047] [ 215.949454][ T7042] netlink: 2 bytes leftover after parsing attributes in process `syz.3.332'. [ 216.213074][ T10] usb 4-1: USB disconnect, device number 40 [ 216.404761][ T7050] loop8: detected capacity change from 0 to 8 [ 216.424941][ T7050] Dev loop8: unable to read RDB block 8 [ 216.424990][ T7050] loop8: unable to read partition table [ 216.425226][ T7050] loop8: partition table beyond EOD, truncated [ 216.425906][ T7050] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 216.507607][ T7051] FAULT_INJECTION: forcing a failure. [ 216.507607][ T7051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.507647][ T7051] CPU: 0 UID: 0 PID: 7051 Comm: syz.5.335 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 216.507676][ T7051] Tainted: [L]=SOFTLOCKUP [ 216.507683][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.507696][ T7051] Call Trace: [ 216.507704][ T7051] [ 216.507714][ T7051] dump_stack_lvl+0xe8/0x150 [ 216.507744][ T7051] should_fail_ex+0x467/0x600 [ 216.507782][ T7051] _copy_from_user+0x2d/0xb0 [ 216.507816][ T7051] snd_pcm_oss_write2+0x227/0x440 [ 216.507855][ T7051] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 216.507890][ T7051] ? lockdep_hardirqs_on+0x7a/0x110 [ 216.507916][ T7051] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 216.507951][ T7051] ? snd_pcm_oss_write+0x207/0xb40 [ 216.507987][ T7051] snd_pcm_oss_write+0x664/0xb40 [ 216.508036][ T7051] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 216.508069][ T7051] vfs_write+0x29f/0xbb0 [ 216.508104][ T7051] ? __pfx_vfs_write+0x10/0x10 [ 216.508131][ T7051] ? __fget_files+0x2a/0x420 [ 216.508155][ T7051] ? __fget_files+0x2a/0x420 [ 216.508174][ T7051] ? __fget_files+0x3a8/0x420 [ 216.508193][ T7051] ? __fget_files+0x2a/0x420 [ 216.508222][ T7051] ksys_write+0x156/0x270 [ 216.508249][ T7051] ? __pfx_ksys_write+0x10/0x10 [ 216.508282][ T7051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.508307][ T7051] do_syscall_64+0x174/0x580 [ 216.508329][ T7051] ? trace_irq_disable+0x3b/0x140 [ 216.508355][ T7051] ? clear_bhb_loop+0x40/0x90 [ 216.508382][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.508403][ T7051] RIP: 0033:0x7f77c3e8ce59 [ 216.508424][ T7051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.508442][ T7051] RSP: 002b:00007f77c20e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.508465][ T7051] RAX: ffffffffffffffda RBX: 00007f77c4105fa0 RCX: 00007f77c3e8ce59 [ 216.508482][ T7051] RDX: 000000000000ffaa RSI: 0000200000000140 RDI: 0000000000000003 [ 216.508495][ T7051] RBP: 00007f77c20e6090 R08: 0000000000000000 R09: 0000000000000000 [ 216.508508][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.508520][ T7051] R13: 00007f77c4106038 R14: 00007f77c4105fa0 R15: 00007ffd94bc7538 [ 216.508553][ T7051] [ 216.508835][ T7053] FAULT_INJECTION: forcing a failure. [ 216.508835][ T7053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.508873][ T7053] CPU: 1 UID: 0 PID: 7053 Comm: syz.1.337 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 216.508899][ T7053] Tainted: [L]=SOFTLOCKUP [ 216.508907][ T7053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.508927][ T7053] Call Trace: [ 216.508935][ T7053] [ 216.508943][ T7053] dump_stack_lvl+0xe8/0x150 [ 216.508970][ T7053] should_fail_ex+0x467/0x600 [ 216.509011][ T7053] _copy_from_user+0x2d/0xb0 [ 216.509036][ T7053] i2cdev_ioctl_smbus+0x328/0x700 [ 216.509084][ T7053] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 216.509133][ T7053] i2cdev_ioctl+0x618/0x890 [ 216.509167][ T7053] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 216.509199][ T7053] ? __fget_files+0x2a/0x420 [ 216.509218][ T7053] ? __fget_files+0x3a8/0x420 [ 216.509242][ T7053] ? bpf_lsm_file_ioctl+0x9/0x20 [ 216.509265][ T7053] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 216.509314][ T7053] __se_sys_ioctl+0xff/0x170 [ 216.509341][ T7053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.509366][ T7053] do_syscall_64+0x174/0x580 [ 216.509389][ T7053] ? trace_irq_disable+0x3b/0x140 [ 216.509414][ T7053] ? clear_bhb_loop+0x40/0x90 [ 216.509442][ T7053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.509464][ T7053] RIP: 0033:0x7feda0e8ce59 [ 216.509483][ T7053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.509501][ T7053] RSP: 002b:00007fed9f0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.509522][ T7053] RAX: ffffffffffffffda RBX: 00007feda1105fa0 RCX: 00007feda0e8ce59 [ 216.509537][ T7053] RDX: 0000200000000300 RSI: 0000000000000720 RDI: 0000000000000003 [ 216.509550][ T7053] RBP: 00007fed9f0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 216.509563][ T7053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.509575][ T7053] R13: 00007feda1106038 R14: 00007feda1105fa0 R15: 00007ffe82f08698 [ 216.509608][ T7053] [ 217.120730][ T5618] Bluetooth: hci2: connection err: -111 [ 217.301690][ T7060] syz.3.340 (7060) used greatest stack depth: 18408 bytes left [ 217.335445][ T5828] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 217.463955][ T7065] FAULT_INJECTION: forcing a failure. [ 217.463955][ T7065] name failslab, interval 1, probability 0, space 0, times 0 [ 217.463998][ T7065] CPU: 1 UID: 0 PID: 7065 Comm: syz.3.341 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 217.464021][ T7065] Tainted: [L]=SOFTLOCKUP [ 217.464028][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 217.464038][ T7065] Call Trace: [ 217.464044][ T7065] [ 217.464051][ T7065] dump_stack_lvl+0xe8/0x150 [ 217.464072][ T7065] should_fail_ex+0x467/0x600 [ 217.464098][ T7065] should_failslab+0xa8/0x100 [ 217.464117][ T7065] kmem_cache_alloc_node_noprof+0xae/0x670 [ 217.464150][ T7065] ? __alloc_skb+0x1d7/0x7a0 [ 217.464166][ T7065] ? __alloc_skb+0x1d7/0x7a0 [ 217.464188][ T7065] __alloc_skb+0x1d7/0x7a0 [ 217.464207][ T7065] __ip6_append_data+0x2ec4/0x40c0 [ 217.464246][ T7065] ? __pfx_raw6_getfrag+0x10/0x10 [ 217.464277][ T7065] ? ip6_mtu+0x7d/0x490 [ 217.464301][ T7065] ? ip6_mtu+0x7d/0x490 [ 217.464320][ T7065] ? __pfx___ip6_append_data+0x10/0x10 [ 217.464339][ T7065] ? ip6_setup_cork+0x547/0xf60 [ 217.464358][ T7065] ? ip6_append_data+0x1b6/0x280 [ 217.464377][ T7065] ip6_append_data+0x108/0x280 [ 217.464397][ T7065] ? __pfx_raw6_getfrag+0x10/0x10 [ 217.464420][ T7065] rawv6_sendmsg+0x1298/0x18c0 [ 217.464447][ T7065] ? aa_file_perm+0x18b/0x1600 [ 217.464471][ T7065] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 217.464514][ T7065] ? sock_rps_record_flow+0x19/0x350 [ 217.464542][ T7065] ? inet_sendmsg+0x298/0x320 [ 217.464568][ T7065] ? __pfx_inet_sendmsg+0x10/0x10 [ 217.464592][ T7065] sock_sendmsg_nosec+0x10e/0x180 [ 217.464617][ T7065] sock_write_iter+0x2e4/0x3f0 [ 217.464640][ T7065] ? __pfx_sock_write_iter+0x10/0x10 [ 217.464668][ T7065] ? bpf_lsm_file_permission+0x9/0x20 [ 217.464684][ T7065] ? security_file_permission+0x75/0x260 [ 217.464707][ T7065] vfs_write+0x61e/0xbb0 [ 217.464730][ T7065] ? __pfx_vfs_write+0x10/0x10 [ 217.464761][ T7065] ? __fget_files+0x2a/0x420 [ 217.464782][ T7065] ksys_write+0x156/0x270 [ 217.464801][ T7065] ? __pfx_ksys_write+0x10/0x10 [ 217.464825][ T7065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.464842][ T7065] do_syscall_64+0x174/0x580 [ 217.464860][ T7065] ? trace_irq_disable+0x3b/0x140 [ 217.464878][ T7065] ? clear_bhb_loop+0x40/0x90 [ 217.464898][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.464914][ T7065] RIP: 0033:0x7f232791ce59 [ 217.464929][ T7065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.464943][ T7065] RSP: 002b:00007f2325b76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.464959][ T7065] RAX: ffffffffffffffda RBX: 00007f2327b95fa0 RCX: 00007f232791ce59 [ 217.464971][ T7065] RDX: 0000000000000018 RSI: 0000200000000900 RDI: 0000000000000003 [ 217.464981][ T7065] RBP: 00007f2325b76090 R08: 0000000000000000 R09: 0000000000000000 [ 217.464991][ T7065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.465000][ T7065] R13: 00007f2327b96038 R14: 00007f2327b95fa0 R15: 00007ffdeedf9ae8 [ 217.465024][ T7065] [ 217.624065][ T5828] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 217.801958][ T5828] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 217.801988][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.802007][ T5828] usb 5-1: Product: syz [ 217.802020][ T5828] usb 5-1: Manufacturer: syz [ 217.802040][ T5828] usb 5-1: SerialNumber: syz [ 217.911429][ T5828] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 218.119798][ T7072] No control pipe specified [ 218.146989][ T5783] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 218.309143][ T5783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.309175][ T5783] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 218.309231][ T5783] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 218.309252][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.346985][ T5783] usb 2-1: config 0 descriptor?? [ 218.416390][ T5828] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 218.416849][ T5828] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 218.416902][ T5828] usb 5-1: media controller created [ 218.420188][ T5783] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 218.420361][ T5783] dvb-usb: bulk message failed: -22 (3/0) [ 218.488331][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.560489][ T5783] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 218.603166][ T5783] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 218.603215][ T5783] usb 2-1: media controller created [ 218.626074][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.681591][ T7067] ------------[ cut here ]------------ [ 218.681607][ T7067] usb 5-1: BOGUS control dir, pipe 80000f80 doesn't match bRequestType c0 [ 218.681633][ T7067] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.1.342/7067 [ 218.681685][ T7067] Modules linked in: [ 218.681713][ T7067] CPU: 1 UID: 0 PID: 7067 Comm: syz.1.342 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 218.681744][ T7067] Tainted: [L]=SOFTLOCKUP [ 218.681751][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.681765][ T7067] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 218.681800][ T7067] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 218.681820][ T7067] RSP: 0018:ffffc90003b0f8d8 EFLAGS: 00010246 [ 218.681839][ T7067] RAX: 0000000000000000 RBX: ffff8880336d0500 RCX: 0000000080000f80 [ 218.681854][ T7067] RDX: ffff888033cbdc20 RSI: ffffffff8bf2ddc0 RDI: ffffffff8fbaa490 [ 218.681870][ T7067] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 218.681885][ T7067] R10: ffffc90003b0f9c0 R11: fffff52000761f44 R12: 1ffff110058dc778 [ 218.681901][ T7067] R13: ffff88802c6e3bc0 R14: ffff888033cbdc20 R15: 0000000080000f80 [ 218.681918][ T7067] FS: 00007fed9f0e66c0(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 218.684478][ T7067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.684509][ T7067] CR2: 0000001b33c1fff8 CR3: 000000002c904000 CR4: 00000000003526f0 [ 218.684529][ T7067] Call Trace: [ 218.684537][ T7067] [ 218.684561][ T7067] usb_start_wait_urb+0x13f/0x5b0 [ 218.684597][ T7067] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 218.684640][ T7067] usb_control_msg+0x234/0x3e0 [ 218.684669][ T7067] gl861_ctrl_msg+0x207/0x420 [ 218.684710][ T7067] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 218.684750][ T7067] gl861_i2c_master_xfer+0x439/0x6a0 [ 218.684787][ T7067] __i2c_transfer+0x7be/0x1fe0 [ 218.684824][ T7067] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 218.684849][ T7067] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.684873][ T7067] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 218.684897][ T7067] ? rt_mutex_lock_nested+0x156/0x1c0 [ 218.684925][ T7067] ? i2c_transfer+0xc8/0x2d0 [ 218.684962][ T7067] i2c_transfer+0x1cc/0x2d0 [ 218.685000][ T7067] i2cdev_ioctl_rdwr+0x460/0x740 [ 218.685047][ T7067] i2cdev_ioctl+0x6a8/0x890 [ 218.685082][ T7067] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 218.685119][ T7067] ? __fget_files+0x3a8/0x420 [ 218.685139][ T7067] ? __fget_files+0x2a/0x420 [ 218.685164][ T7067] ? bpf_lsm_file_ioctl+0x9/0x20 [ 218.685188][ T7067] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 218.685223][ T7067] __se_sys_ioctl+0xff/0x170 [ 218.685304][ T7067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.685329][ T7067] do_syscall_64+0x174/0x580 [ 218.685352][ T7067] ? trace_irq_disable+0x3b/0x140 [ 218.685379][ T7067] ? clear_bhb_loop+0x40/0x90 [ 218.685406][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.685429][ T7067] RIP: 0033:0x7feda0e8ce59 [ 218.685449][ T7067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.685485][ T7067] RSP: 002b:00007fed9f0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.685522][ T7067] RAX: ffffffffffffffda RBX: 00007feda1105fa0 RCX: 00007feda0e8ce59 [ 218.685534][ T7067] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 218.685544][ T7067] RBP: 00007feda0f22e6f R08: 0000000000000000 R09: 0000000000000000 [ 218.685555][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.685564][ T7067] R13: 00007feda1106038 R14: 00007feda1105fa0 R15: 00007ffe82f08698 [ 218.685599][ T7067] [ 218.685622][ T7067] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 218.685637][ T7067] CPU: 1 UID: 0 PID: 7067 Comm: syz.1.342 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 218.685660][ T7067] Tainted: [L]=SOFTLOCKUP [ 218.685666][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.685676][ T7067] Call Trace: [ 218.685683][ T7067] [ 218.685689][ T7067] vpanic+0x56c/0xa60 [ 218.685715][ T7067] ? __pfx__printk+0x10/0x10 [ 218.685732][ T7067] ? __pfx_vpanic+0x10/0x10 [ 218.685754][ T7067] ? is_bpf_text_address+0x292/0x2b0 [ 218.685776][ T7067] ? is_bpf_text_address+0x26/0x2b0 [ 218.685804][ T7067] panic+0xc5/0xd0 [ 218.685827][ T7067] ? __pfx_panic+0x10/0x10 [ 218.685868][ T7067] __warn+0x315/0x4c0 [ 218.685890][ T7067] ? usb_submit_urb+0x1057/0x18b0 [ 218.685918][ T7067] ? usb_submit_urb+0x1057/0x18b0 [ 218.685943][ T7067] __report_bug+0x331/0x530 [ 218.685965][ T7067] ? usb_submit_urb+0x1057/0x18b0 [ 218.685991][ T7067] ? __pfx___report_bug+0x10/0x10 [ 218.686017][ T7067] ? stack_depot_save_flags+0x3ec/0x800 [ 218.686047][ T7067] report_bug_entry+0x19a/0x290 [ 218.686066][ T7067] ? usb_submit_urb+0x1100/0x18b0 [ 218.686092][ T7067] ? usb_submit_urb+0x1105/0x18b0 [ 218.686116][ T7067] handle_bug+0xce/0x200 [ 218.686170][ T7067] exc_invalid_op+0x1a/0x50 [ 218.686205][ T7067] asm_exc_invalid_op+0x1a/0x20 [ 218.686221][ T7067] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 218.686247][ T7067] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 218.686261][ T7067] RSP: 0018:ffffc90003b0f8d8 EFLAGS: 00010246 [ 218.686274][ T7067] RAX: 0000000000000000 RBX: ffff8880336d0500 RCX: 0000000080000f80 [ 218.686286][ T7067] RDX: ffff888033cbdc20 RSI: ffffffff8bf2ddc0 RDI: ffffffff8fbaa490 [ 218.686298][ T7067] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 218.686309][ T7067] R10: ffffc90003b0f9c0 R11: fffff52000761f44 R12: 1ffff110058dc778 [ 218.686321][ T7067] R13: ffff88802c6e3bc0 R14: ffff888033cbdc20 R15: 0000000080000f80 [ 218.686345][ T7067] ? usb_submit_urb+0x1091/0x18b0 [ 218.686377][ T7067] usb_start_wait_urb+0x13f/0x5b0 [ 218.686398][ T7067] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 218.686429][ T7067] usb_control_msg+0x234/0x3e0 [ 218.686449][ T7067] gl861_ctrl_msg+0x207/0x420 [ 218.686477][ T7067] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 218.686517][ T7067] gl861_i2c_master_xfer+0x439/0x6a0 [ 218.686545][ T7067] __i2c_transfer+0x7be/0x1fe0 [ 218.686572][ T7067] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 218.686590][ T7067] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.686608][ T7067] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 218.686625][ T7067] ? rt_mutex_lock_nested+0x156/0x1c0 [ 218.686645][ T7067] ? i2c_transfer+0xc8/0x2d0 [ 218.686671][ T7067] i2c_transfer+0x1cc/0x2d0 [ 218.686699][ T7067] i2cdev_ioctl_rdwr+0x460/0x740 [ 218.686732][ T7067] i2cdev_ioctl+0x6a8/0x890 [ 218.686757][ T7067] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 218.686784][ T7067] ? __fget_files+0x3a8/0x420 [ 218.686798][ T7067] ? __fget_files+0x2a/0x420 [ 218.686816][ T7067] ? bpf_lsm_file_ioctl+0x9/0x20 [ 218.686833][ T7067] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 218.686858][ T7067] __se_sys_ioctl+0xff/0x170 [ 218.686878][ T7067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.686895][ T7067] do_syscall_64+0x174/0x580 [ 218.686912][ T7067] ? trace_irq_disable+0x3b/0x140 [ 218.686930][ T7067] ? clear_bhb_loop+0x40/0x90 [ 218.686950][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.686966][ T7067] RIP: 0033:0x7feda0e8ce59 [ 218.686980][ T7067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.686993][ T7067] RSP: 002b:00007fed9f0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.687011][ T7067] RAX: ffffffffffffffda RBX: 00007feda1105fa0 RCX: 00007feda0e8ce59 [ 218.687022][ T7067] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 218.687032][ T7067] RBP: 00007feda0f22e6f R08: 0000000000000000 R09: 0000000000000000 [ 218.687043][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.687052][ T7067] R13: 00007feda1106038 R14: 00007feda1105fa0 R15: 00007ffe82f08698 [ 218.687077][ T7067] [ 218.687704][ T7067] Kernel Offset: disabled