last executing test programs: 6m43.672323307s ago: executing program 0 (id=703): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/36, 0x24}], 0x1, 0xfffeffff, 0x6) bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x11, &(0x7f0000000880)=ANY=[@ANYRES32=r2], &(0x7f0000000980)='syzkaller\x00', 0xffffffff, 0xe9, &(0x7f0000000a40)=""/233, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x7, 0x2, 0x8001}, 0x10, 0x0, r2, 0x6, &(0x7f0000000c80)=[r2, r2, r2], &(0x7f0000000cc0)=[{0x5, 0x1, 0xd, 0x4}, {0x5, 0x4, 0x0, 0x7}, {0x2, 0x1, 0x4, 0x6}, {0x0, 0x4, 0x3, 0x4}, {0x5, 0x3, 0x8, 0x7}, {0x1, 0x5, 0xf, 0xc}], 0x10, 0x400}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0xf8}, 0x24000000) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 6m42.5161774s ago: executing program 0 (id=709): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'8255\x00', [0x140, 0x0, 0xd, 0x0, 0x2, 0x4, 0x4, 0x2, 0x7, 0x2c731, 0x4000004, 0x7, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x103, 0x80000006, 0x6, 0x0, 0x7, 0x2, 0x2f, 0x81, 0xffd, 0x6, 0xab, 0x1, 0x283, 0x8001, 0x400006]}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000002800)={0x2020, 0x0, 0x0}, 0x2020) r7 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r8) exit(0x81) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) read$FUSE(r5, 0x0, 0x0) write$FUSE_ENTRY(r5, &(0x7f00000068c0)={0x90, 0x0, r6, {0x4, 0x2, 0x4, 0x80000001, 0x6, 0x7, {0x5, 0x1, 0x96a, 0xffff, 0x3, 0x7fffffff, 0x9, 0x7f, 0x2d, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x43e5}}}, 0x90) statx(r8, 0x0, 0x6000, 0x2, &(0x7f00000005c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 6m42.365445429s ago: executing program 0 (id=711): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x11, &(0x7f0000000880)=ANY=[@ANYRES32=r2], &(0x7f0000000980)='syzkaller\x00', 0xffffffff, 0xe9, &(0x7f0000000a40)=""/233, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x7, 0x2, 0x8001}, 0x10, 0x0, r2, 0x5, &(0x7f0000000c80)=[r2, r2, r2], &(0x7f0000000cc0)=[{0x5, 0x1, 0xd, 0x4}, {0x5, 0x4, 0x0, 0x7}, {0x2, 0x1, 0x4, 0x6}, {0x5, 0x3, 0x8, 0x7}, {0x1, 0x5, 0xf, 0xc}], 0x10, 0x400}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0xf8}, 0x24000000) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 6m41.383289493s ago: executing program 0 (id=722): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x9000000}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb98, 0x312, 0x78, 0xea4, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0x8, 0x5, 0x7ff, 0x5f31, 0x4, 0x0, 0x10006, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0xe, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x6, 0x5, 0x100, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0xa, 0xbb2f, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x100c8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6m40.869201751s ago: executing program 0 (id=724): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7b9a) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0xcb774105c71da5b0}, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) keyctl$chown(0x4, r1, r4, 0xffffffffffffffff) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000008c000000030a01020000000000000000020000030900010073797a30000000006b000300fd7c400f2ffd10ac56a901205b56f46dc2de1fa3"], 0xd4}}, 0x0) 6m39.798547808s ago: executing program 0 (id=728): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r2, 0x51ccd000) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xe3cb2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) 6m24.732157003s ago: executing program 32 (id=728): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r2, 0x51ccd000) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xe3cb2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) 5m53.031896525s ago: executing program 5 (id=871): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xfdeb, &(0x7f0000000880)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES64=r1, @ANYRES64=r0, @ANYRESHEX=r2], 0x128}, 0x60045) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x10, 0x0, &(0x7f0000000280)=0xfded) r9 = dup(r7) r10 = syz_io_uring_setup(0x7ab3, &(0x7f0000000040)={0x0, 0xbcbc, 0x800, 0x0, 0x3c3, 0x0, r9}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) r11 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) r14 = memfd_create(&(0x7f00000001c0)='\xf1q\x97.\x8e\xc3\xfe\r\a\xee\xc9[\x9a%=\x01#\x00\r\x9a\xbf\xd9\xcb\xe4\"mqo\xa1\xd2dhV\xf3\n*_A\xef\xc7\xa4\xee\xb2z\xc0\r\n\xd2\xa3\x98_\xf6\xb6\f\xbdOS\t\xfe\x8a\xf9>\x05+\xfc\x9c\xa5y\xf8\x17Vo\x00l\v\xe5\xff\x92\xc9\xaeH\xeeK\x00S\xf6\xecz\x87iiO\xdauvJ\xad\x82\xa5\xa1]\xd5+=\xb4\xf0\x02\xadT\x81\x00\x00\x017\xc5\x8e\\\x00\x8a\x0e\xc50L \xd5\xf3\xee\xa8\x82-\xcb\x00\x00\x00\x00\x00\x00\x00\x04\xa6\x19\xe1\b\x84a\xb9^\xc4\xa3\xa2\xd8\x82\xd0\x8e\xd2\xd2m\xea\x92\xd4\x1f\x1d\xeb\xa0\xf7\x00\xf8\x00Wzh\xd6\x9a\x1d-\x03m^c\x05O\xa2wVA\xe2\xc0\"\xa9\x15\x1e\x13\x82o\xfe\x0e:\x1a\xbb_.Bt\xa7\x8c\v\x92\x90H\xb9\xfd\xf4c\f{\x86\xfd`\xce_k\x17\xf9r\xe8^\xc0N\x8b>\xd6:\x1d\x02z\xec\x9d\xd64/\xc7&\x91\xa3C\xd4\xf8\x16\x82aS]\xa0\x9a\x9bE{\xf6\xfc\x8b\xfb\x96k\xfc\xe3\xf3 \x1d\xd9@\xf6\xdcQG\'\xed(G\xb0\xba\xee8\xa5\xa8\x8c\xb1\xab\x8b\xc8e}\a\x1f\x84(\x85HB\x119\x8d\xab\\\\\xba\xb3\x89>~s1@\x9e\x8dD\xb5\x8c\xb6H\xbfJ5R\x06/.\xc5\xd4o\x0e\xa0\xdd\xb5\x8b\xddwU\xd91\xd2\xcfj\xc4=-\xdb\xa8\xb5r\x9f\xa3\x9f*}\r7B\x9e\xc20\xf5\xe8B\xd0\xb6\x00\xd52\xc9w\x8bAu,\x8b\xdc\xe7\xd8\x8d\x85\xd0\xa8\xf0\xfe\xa9\xf1\x92\x18?\xc1\x02w/\xef\xdb\x02\x87_\x89 \x14T\x9c\xc1\xf6ck\x14 \x18\x10\xb3`\xf4\'Oz\x12\xd2Wr\xc6\xba\x00\x99\x8b\xfd\xdbz\x1e\x1d\xd1\xadFb\xe7\xcb\xf52?\xfbH\xf7\x9bE\x13\xe9\xec\xea)A\x87\xfb+Y.\x85\xd5\xca\xf3F\x13L\xf3\xe7Kd\xe3\xe0*M\xdc\r\x06{.+0\xab\x86\xe7\"\xdf\x05\x90|\t}\x85\xfa\x8a=\xf7\xa0\xbd^F\xf1\'\x9c\xd7\xfc\x01p\x1frn\x83\x10u\xc6M\xfb\x92r\x1f\x8d!\xe5\xf3\xd2\x80!w\xf5\xa6\xac\v\xccr\xf7o\xbbq\x03\xd8\x90\x9a\x1d\xa6}\xf1\x88\x036\xfa\x15\xed9\xc52d\xb1\xd0:\x91\xb5K\xf0\x14\xf3d\x91w\xf2\xa2j\x91U\x02!&\x19\x12\xaeg\x12x\xb3\'xd\xddG5\xc9\xb1\x0e/\xfc\x81\xa6&\xdb\xb5e\x1d\xc9\xffK(\x9d\xdf\x8d\xc6N\xdb\xd50mY\xfbE.\x13\xddw\x8a\xef\xd2l[\x84\xbf\x0f\xa9\x18\xe9\xcfL5\xa7\x14\xcc\x92\xde\xf2X\xb6\xbb\xe3\xa4\xcc\xfb7[\xebS\x9cL\xed\xda\x04\xce/f\xa6<\xea\xee(t\x10G\x10r{\xa9\x9b\x85\xb93\xc7\x8a\'', 0x6) fcntl$addseals(r14, 0x409, 0xc) r15 = dup(r14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x38011, r15, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, 0x0) syz_ublk_setup_queues(r3, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x800, 0x1, 0x7f, 0x0, r10}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe70c, 0x1000, 0x1000003, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x1000, 0x1, 0x40003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x8, 0x4003bfff, 0x248, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x40, 0x4, 0x26c}}], 0x1, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f00000008c0)={0x7, "6ba0960627d4e4ea091c2b9e484b1450e2297e0827af8985b502cefc34172824", 0x3, 0x1800000, 0x5, 0x3000000, 0x1040300, 0x2}) 5m51.801452238s ago: executing program 5 (id=1176): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349", @ANYBLOB="f86b7c8017b8b1e2e2406c8b588f10ea7714ba39de3b9c33fc836896e423ea5fc42a92cc1a7398f54a9b1ac2b173800c2d106b9e8970f9cb5419908d83ba64df98efc003a008887bac681e0169e7cca1be3515d16f9a4fdb143daafa5772567e83840d5105f8283832f9a1554efa964983b6ca37883d272e786190239bcd5269598cbf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="9c1100002100000227bd7000fedbdf250000000000000000000000000000000000000000000000000000ffff000000004e2300004e2000ff0a00208006000000", @ANYBLOB="0000000001000000c30003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d803000076852a09ec6c68e4bcf653b873a26e1fcf108bef6bd497b93f4953b0671c83d861caee6deabd4053f47e92015341840619f17e4daac37dbdebbeb3317775de845fd85fe1dfa2b1c5fe3bc21b79cea4bf6be7f8d6f3fac86b1eb2ae60063df0ca6ed65f101e8d062dcddd6707c786f368beccbc61a04894426825a30038001700070000002abd700027bd700029bd700027bd700002000000b9000000a45b00000300000006000000ffffffff7f0f0000ba00000048100100686d6163287368613235362d636529000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000f869d2b3fd3295d712cc6b4549bde6da0da82a578f41c8981a4eaf4c9dc0b01aa89537e563176d5718778373e8576cf261fbebed1de3c16c2a431fda4c7d018ccfe35994c102a9d0bb822486ef580b302bf01c959248a920ffb0b2b2f2cd15daafd8ad351f72c10975539135c84dd63732a988546d57bcc483add63608418f4ad50d0fb8b5a3fbdcfde791dac98453b0cd3690cb3b5e262c5fcd1e76e7777cff25919d534a1cf7a361f2575d34acd4f41c74d12a0cd52e3219169685ccab03ab4d7627c664e14b9decaf1574f22104cbcb53756e2e199b6b5c08cdb28cc3aaf532f7ab12f58828200ebbe911fb80c6169a01a0d92808310ece14a6b72c6aab69fcf8d8e91e3f02a38cc6af54bd71e2e542eea438b04d643d571222d00b5095591ea52b70fe1c3fa4add4aa8bc130e8b421d40a07a2b1d9661609c6d99ec8ba10cd5282beb07ed4d3e9a1c17a4d98264f7cd6003c82463a397f7b42483ea8ee6ac4a0386f5ac41c376bec57a7b9904e8b8a1abc67fdcc99307ba87467345cce405e597192a26ede3f628aaac17b05bd05cfff16fb251d88b7d350a0047c37a423c15925fc9fd2186676b37d86926a50dec914fe88118b70ec22f4f4ab9eb8b3ede69bc17cee899319f1cc480de6ab2f6283ad58066915a64ad8aeca8f4296e070b2c32a6969f785ba1e0b68d3f07d8e18cc9107c99ffcb6f6fe76c2b197efe984e257624121bd4b9a3472f564f1be4ded981660f911a3b3183e06def0840ac2ced8d2beb933c5ad44b0edd0e7de47715e13578a724c58910c6fbe3f02d8768f81892f13f25c074eeaa0a3ac5967b895949621f219153260205258261f79d1981fb84f89fe6f171e4c05eac18c062483fb13ee"], 0x119c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r1 = syz_usb_connect$midi(0x4, 0xe8, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x24, 0x499, 0x2000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6, 0x1, 0x1, 0x0, 0x30, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x5, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf, 0x9}, @midi_out_jack={0x11, 0x24, 0x3, 0x0, 0x9, 0x5, [{0x5, 0x1}, {0x2d, 0x2}, {0x5, 0x3}, {0x2, 0x7}, {0x2, 0xe2}], 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0x5}], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x8, 0x1, 0x8, {0x8, 0x25, 0x1, 0x4, "530cf802"}}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xc, 0xff, 0x4, {0xa, 0x25, 0x1, 0x6, "27ec18d3e411"}}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x1, 0xf7, 0x0, {0xf, 0x25, 0x1, 0xb, "9bf196d0a8097c5ddb7c93"}}}, {{0x9, 0x5, 0x5, 0x8, 0x400, 0x6, 0x68, 0x3, {0x6, 0x25, 0x1, 0x2, "c000"}}}, {{0x9, 0x5, 0xe, 0x1f, 0x20, 0x61, 0x2, 0x4, {0xf, 0x25, 0x1, 0xb, "f611a61eedd635367d431f"}}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x7, 0x0, 0x2, {0xb, 0x25, 0x1, 0x7, "d7eb65945ef841"}}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0x4, 0x0, 0x6, {0xf, 0x25, 0x1, 0xb, "dfaa8f986bfe7d2f1c9341"}}}, {{0x9, 0x5, 0x7, 0x68d73385299bea28, 0x20, 0x81, 0x4, 0x81, {0x8, 0x25, 0x1, 0x4, "27cb8167"}}}]}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x7, 0xff, 0x3, 0xff, 0x9}, 0x22, &(0x7f0000000600)={0x5, 0xf, 0x22, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xfa, 0x1, 0x7, 0xf0f, 0x9, [0x101003f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x3, 0x8, 0x2}]}, 0x2, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x4001}}]}) syz_usb_control_io$lan78xx(r1, &(0x7f0000000800)={0x14, &(0x7f0000000700)={0x40, 0x5, 0x9, {0x9, 0xc, "2d07acf70dbac9"}}, &(0x7f0000000740)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "f231b0be1c5d0e7a13650f221882c40d901408d00c6c2a7db06b46d1b2b358b236e86d02c54902b21d9220344ee7b5b972974ade02fc6122fafaf6cbbfa85494424d7205807429a056bb73a572a0960fb685452a626bebfd85594a242713a26367dd1cd453efd3d21be13a63f2a1c51ef108a94f2b63f07c24f823b1fa011eafac547a588ba8ed0f7ac66f"}}}, &(0x7f0000000a00)={0x34, &(0x7f0000000840)={0x40, 0x0, 0x3e, "d9f36d7ff038bee90f9a92d4b557c96ca3013e75809bf44054c093e0227b96ff107634d571b383bee197362c1e66e30977648ee312a94301d468104a4a86"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000940)={0xc0, 0xa1, 0x4, 0x608}, &(0x7f0000000980)={0x40, 0xa0, 0x4}, &(0x7f00000009c0)={0xc0, 0xa2, 0x2f, "56ff33badd23905a06ab9bc07d7841ea565709829dee2d614dc0f3e1851b5a69d215f37e9653c4a2867ed74c37aa98"}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000001300)=ANY=[]) r2 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0xe, 0x8c, {0x8c, 0x11, "4f6da8b26220cd96a4d2b4e3a5c23372951ee28fc56579e21bfc4b134c3e173430fa9b87cc5adbcb693430827101d6428dc5c0eb7ab1fd44e2a6a38dccb81fb3a740afc650943af127b03f972a362f580a85b933451d5ae120de1276df11ce5d9d45ddaf3d81db36552e450be80de030987691634e0e3f7d0eda7fa7bd4b6f630a316f824f40b5229cf1"}}, &(0x7f0000000100)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "275e9a6f05e39ee2cfb548386e32424a88c3d6e29fb55fb252cbc05ffe9b7dcf8219decb3cacd7af2d9228e983c15ccdbe4b3d6587195decca54237424b7a1586830a15d8c736c3477954b3ad17781c211c94cfde94b8c3493014bb05c275e8b499476698f35736cc6b18334e60f1b121f1409abe62935df"}}}, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x14, 0xe5, "caf4f4aa53883961f0ea41b8dd3fe0868856f3bddcaae1347d6ddf7d1257518a1f0c27d97c9600f074ef5c9e100f1215e5ca8a943f6a96d09e82b33360d5188b9a875c9633e8fbfc02a23c50b7c015aec3c8df5a264231456cd8210b5da06bd81dd6ec19ca13d782df88aac27d3bb3c7644c40f52ac59da06d0bc5ac7fcee6af859be34bfe66dba4c254bc03ce4b19f062cb81018805651e1d361d75ee2938094b29c551c77867b97280e2bec672d8b354b655d77bddcdbf8c27a344bd74a8fe89feff9687eaeec637ce51a53cf8fc789110e7668b1df79c075c450479bfe2dbacbb1915f3"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0xc0, 0x5, 0x5, 'm;6!|'}, &(0x7f0000000380)}) 5m48.658823944s ago: executing program 5 (id=1219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) (fail_nth: 3) 5m48.31219262s ago: executing program 5 (id=1226): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r0, &(0x7f0000000080)='.\x02\x00', 0x117) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2ac42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0x2, 0x2, 0x4, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6d, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x7fffffffffffffff, 0x23ffffffffffffd, 0x1, 0x380000, 0x1, 0xb, 0x8001, 0x0, 0x2], 0x1, 0x3e4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff8eff80"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'batadv0\x00', @broadcast}) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00"}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x30}}, 0x4084084) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a000310"], 0xf) sendto$inet6(r0, &(0x7f0000847fff)="18", 0x1, 0x4040000, &(0x7f00000004c0)={0xa, 0x4e22, 0x80001000, @mcast1}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000340)=0x50) 5m44.932422196s ago: executing program 5 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0xa873f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f0000000600)) 5m29.894425025s ago: executing program 33 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0xa873f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f0000000600)) 9.72330487s ago: executing program 2 (id=2997): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host, 0xfed2}, {@host}, 0x400, "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"}, 0x418}) 9.625376224s ago: executing program 2 (id=2999): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x12c9498, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x800) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x40044103, &(0x7f0000000100)=0x4) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d, 0x4000010, r5, 0xced2000) r6 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r7, 0x101, 0x1) 7.524403454s ago: executing program 3 (id=3006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 6.931591793s ago: executing program 3 (id=3008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.678062893s ago: executing program 3 (id=3010): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500bc7d202e0990"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000}}, 0x800, 0x40}, &(0x7f00000006c0)=0x90) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) (rerun: 32) 6.401256178s ago: executing program 2 (id=3012): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', 0x109000, 0x4) mkdirat(r3, &(0x7f00000002c0)='./file0\x00', 0x21) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000000c0)="be5350f73ecc857058a2262f466643d72f9d3b9123bb1c4737e029cd2a59a13398f09dfb628a97248f3c151634bf25e6583372d96f5cd5ccb152fa67def3825b4af78e53ab23ab7ae7fda888be0ea5b3ad26b147b965ba43f89143a890d0dd4d659cc4d04cff0f2c31337d8d5ddfbcc259aa44cd6eeb0b6fa737760565af3220954413b5c9badb1e1f47e64d6e895158546e8bb4c422f9455f4d6d9e5d4858f6a4142b62877f9ea90fa316a6f73789fdd69c0b760cb3d328e9ea2745ea80b64b2550c0dbaeba2f56eb7909ae308fc9ae1785cf8453b321411e8841ef9c02d37d25ec85342840d3c05b5b", &(0x7f0000000300)="596aa6d83373a06d4dc8f2da255f9d693262d4651f7d9f34b4d02576111aa560972a9cc42aca5e7e946512e6cad06a9091d184661c67bdedf53c176f9e8dda26643935221ce1b05f3d76b454c2765912516adbb57f7c1620d632efa54852ce6f695abc810789211533e94d5ba97c1a8def1c9e8f41972d7abd0170fd8188656ccb684844c58e61074e33"}}, &(0x7f0000bbdffc)) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500", @ANYRES16=r6, @ANYBLOB="c2"], 0x7c}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) 6.101246274s ago: executing program 1 (id=3015): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000680)=@ethtool_per_queue_op={0x4b, 0x2f, [0x7fefffff, 0xffffffff, 0x3, 0x1, 0x3, 0x5, 0x7, 0x0, 0xa4d, 0x0, 0x7, 0x4, 0xe, 0x4, 0x5, 0x2, 0xa0, 0x10001, 0xb, 0xc2, 0x0, 0x6, 0x7, 0xa4, 0xfdff, 0x2a, 0x4, 0x5, 0x5, 0x6, 0x0, 0x0, 0xfffffffd, 0x3, 0x4, 0xcb, 0x401, 0x8000, 0x7fff, 0x9, 0x80000001, 0xd, 0xe82, 0xffffffff, 0x28b5, 0xfffffffa, 0x2, 0xfffffffe, 0x6, 0x7, 0xff, 0x3, 0x8, 0x1, 0x100, 0x8, 0x4, 0xa0, 0x3335a578, 0x800, 0x6, 0x0, 0xff, 0x4, 0x400, 0x3, 0x5, 0x10, 0x90, 0x7, 0x38, 0xffff0000, 0xfffffffe, 0x6, 0x8, 0x2, 0x3, 0xfff, 0x2, 0x4, 0x2, 0x3, 0x9, 0x5, 0x2, 0xc55b, 0xc, 0x62, 0x8, 0xfffffff8, 0x3, 0x4, 0x4, 0x583, 0xef5, 0x0, 0x0, 0x1, 0x8, 0x0, 0xfffffffc, 0x1000, 0x3, 0xfff, 0x7, 0x3, 0x9, 0x9, 0x8, 0x1, 0x2, 0x7, 0xd, 0x7ff, 0x0, 0x0, 0x0, 0xb53, 0xff, 0xfffffffd, 0x5, 0x3, 0x101, 0x2, 0xe17, 0x5]}}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket(0x10, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4d}, 0x28) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a", @ANYRES16=r5], 0x44}}, 0x2000800) 5.732932518s ago: executing program 1 (id=3017): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000500000018010000756c6c2500000000002020247b1af8ff00000000bfa100000000000007010000f8ffffffb702000092ac67a2b703000007000080850000002d000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.600074124s ago: executing program 3 (id=3018): r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0xffffffff, 0x0, 0x1013, 0x9, 0xa, 0x0, 0x5, 0x1993012db91ab52e}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffff1}, [@generic={0x91, 0x1, 0x1, 0x6d}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 5.446979677s ago: executing program 1 (id=3019): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/36, 0x24}], 0x1, 0xfffeffff, 0x6) bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0xf, 0x1, 0x20, @loopback, @empty, 0x700, 0x1, 0xffffff93, 0x401}}) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x11, 0x0, &(0x7f0000000980)='syzkaller\x00', 0xffffffff, 0xe9, &(0x7f0000000a40)=""/233, 0x41100, 0x0, '\x00', r2, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x7, 0x2, 0x8001}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x5, 0x1, 0xd, 0x4}, {0x5, 0x4, 0x0, 0x7}, {0x2, 0x1, 0x4, 0x6}, {0x5, 0x3, 0x8, 0x7}, {0x1, 0x5, 0xf, 0xc}], 0x10, 0x400}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000400)=ANY=[], 0xf8}, 0x24000000) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 5.268357573s ago: executing program 3 (id=3020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3a) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x8001, 0x0, 0x1, 0x0, 0x6, 0x1}}, 0xb8}}, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0xb) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003000000108c0d780040000102030109026f00060000b0060904000000010100000a240100000a00020102090401000001020000090401010101020000090501094000fe07000725010806ff000904020000010200000904020101010200000724017f0300000824020108010127090582090002050cf1062501"], &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0}) 3.520139799s ago: executing program 1 (id=3024): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c0000000000000021", 0x13) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x11, &(0x7f0000000880)=ANY=[@ANYBLOB="18320000050000000000000000000000850000005f00000018690000010000000000000006000000dc78e1ff100000007d1b06000300000018110000", @ANYRES32, @ANYBLOB="0200000000000000b7080000f9f51f6d2a4df5ff00000000bfa200000000000007020000f8ffff11b703000008000000b704000003000000850000008200"], &(0x7f0000000980)='syzkaller\x00', 0xffffffff, 0xe9, &(0x7f0000000a40)=""/233, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x7, 0x2, 0x8001}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x5, 0x1, 0xd, 0x4}, {0x5, 0x4, 0x0, 0x7}, {0x2, 0x1, 0x4, 0x6}, {0x0, 0x4, 0x3, 0x4}, {0x5, 0x3, 0x8, 0x7}], 0x10, 0x400}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 3.001042299s ago: executing program 6 (id=3029): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x400) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000600)={0x0, 0x9, 0x3002, 0x1}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000600)={0x0, 0x9, 0x3002, 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x63}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xf}]}}]}, 0x48}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) 2.776394039s ago: executing program 6 (id=3031): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x8000, 0x10000, 0x9}) 2.686046275s ago: executing program 4 (id=3032): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="45f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c00000008000300040000003400028008000100"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d70a000020000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x12, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x62) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffa, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x6, 0x82f1, 0x1, 'queue0\x00', 0x2}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.560837391s ago: executing program 2 (id=3033): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host, 0xfed2}, {@host}, 0x400, "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"}, 0x418}) 2.503505551s ago: executing program 4 (id=3034): write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x80}}, 0x18) r0 = socket$alg(0x26, 0x5, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x1c, 0x80800) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 2.36138932s ago: executing program 3 (id=3035): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x9, 0x0, 0x0, 0x9}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001680)='/proc/schedstat\x00', 0x0, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x2022, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 2.32770906s ago: executing program 1 (id=3036): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x7, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x1, 0x34, 0x14, 0x68, 0x0, 0x6, 0x4, 0x0, @loopback, @loopback}}}}) syz_usb_connect(0x2, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES64=r3, @ANYRESDEC], 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(0x0, 0x206, 0x20182) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100100000008d12544504000010203010902800a5650997f0904002502030101520921050005012221000905810310000405050905020300811dce10416dee93a1b2950aad3105752e8c40594c2958d42cf92942020e3a"], 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) rt_sigpending(0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)="d26015051ce24e3757bdf53ba3421c7a8f298c8fb86f3473951ac0e18533c4abf6bcd98d80150f55239e05b8b27c54ab83ee001134db1344abd0000ac7bb77558837da2ecf69abfe21ed39a1075d669bd332be633eb95a30c03b008a06032318a610ee92f501ab075a36a6bc64efad0a2d77942b7bbbff4db9488db8a2d6e6244353429d", 0x84, 0x4000, &(0x7f0000000140)={0xa, 0x4e20, 0xffff, @remote, 0x6}, 0x1c) sendto$inet(r6, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) socket$inet6(0xa, 0x80000, 0xf) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) r7 = syz_open_dev$evdev(&(0x7f000001fa80), 0x1ffffffd, 0x6000) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000440)=""/98) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) 1.519623171s ago: executing program 4 (id=3040): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpgrp(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 520.864294ms ago: executing program 6 (id=3041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)) 496.491942ms ago: executing program 4 (id=3042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 402.801009ms ago: executing program 1 (id=3043): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x12c9498, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x800) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x40044103, &(0x7f0000000100)=0x4) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d, 0x4000010, r5, 0xced2000) r6 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r8, 0x101, 0x1) 228.057122ms ago: executing program 4 (id=3044): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) write$cgroup_pid(r3, &(0x7f00000001c0)=r4, 0x12) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="010000000010000074001280080001006774700068000280050005000000000008000200", @ANYRES32, @ANYBLOB="0800040000000000050006"], 0x94}, 0x1, 0x0, 0x0, 0x40040}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000580)=""/174, 0xae) 188.525728ms ago: executing program 6 (id=3045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4252914}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x32}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x19, 0x0, 0x44) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x44}}, 0x20008010) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)=0x3) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7b, 0x7b, 0x7, [@datasec={0x5, 0x9, 0x0, 0xf, 0x3, [{0x5, 0x6, 0x80000001}, {0x2, 0x4, 0x8}, {0x4, 0x3, 0x5}, {0x5, 0x18, 0x1}, {0x4, 0x5e, 0x3}, {0x5, 0x1, 0x6}, {0x3, 0x6, 0x10001}, {0x5, 0x6b, 0x40}, {0x3, 0x2, 0x8f}], "e814eb"}]}, {0x0, [0x5f, 0x0, 0x0, 0x30, 0x61]}}, &(0x7f0000000400)=""/8, 0x9b, 0x8, 0x1, 0x8, 0x10000}, 0x28) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000100070000fc69117e000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', r5, @fallback=0x22, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f00000000c0), 0x0) 40.326113ms ago: executing program 6 (id=3046): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c0000000000000021", 0x13) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x11, &(0x7f0000000880)=ANY=[@ANYBLOB="18320000050000000000000000000000850000005f00000018690000010000000000000006000000dc78e1ff100000007d1b06000300000018110000", @ANYRES32, @ANYBLOB="0200000000000000b7080000f9f51f6d2a4df5ff00000000bfa200000000000007020000f8ffff11b703000008000000b704000003000000850000008200"], &(0x7f0000000980)='syzkaller\x00', 0xffffffff, 0xe9, &(0x7f0000000a40)=""/233, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x7, 0x2, 0x8001}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x5, 0x1, 0xd, 0x4}, {0x5, 0x4, 0x0, 0x7}, {0x2, 0x1, 0x4, 0x6}, {0x0, 0x4, 0x3, 0x4}, {0x5, 0x3, 0x8, 0x7}], 0x10, 0x400}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 0s ago: executing program 4 (id=3047): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x8000, 0x10000, 0x9}) kernel console output (not intermixed with test programs): ? trace_irq_disable+0x3b/0x140 [ 545.649265][T13206] ? clear_bhb_loop+0x40/0x90 [ 545.649285][T13206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.649301][T13206] RIP: 0033:0x7f9e1606de99 [ 545.649317][T13206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.649332][T13206] RSP: 002b:00007f9e142c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 545.649350][T13206] RAX: ffffffffffffffda RBX: 00007f9e162f5fa0 RCX: 00007f9e1606de99 [ 545.649363][T13206] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000040 [ 545.649375][T13206] RBP: 00007f9e142c6090 R08: 0000000000000000 R09: 0000000000000000 [ 545.649385][T13206] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000001 [ 545.649396][T13206] R13: 00007f9e162f6038 R14: 00007f9e162f5fa0 R15: 00007ffedb849338 [ 545.649424][T13206] [ 545.990973][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 546.157448][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 546.162950][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.162975][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.163008][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 546.163028][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.205754][ T10] usb 2-1: config 0 descriptor?? [ 546.397240][ T10] usb 2-1: can't set config #0, error -71 [ 546.455878][ T10] usb 2-1: USB disconnect, device number 15 [ 546.857485][ T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 546.876430][T13225] FAULT_INJECTION: forcing a failure. [ 546.876430][T13225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.876461][T13225] CPU: 1 UID: 0 PID: 13225 Comm: syz.3.2601 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 546.876484][T13225] Tainted: [L]=SOFTLOCKUP [ 546.876490][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 546.876500][T13225] Call Trace: [ 546.876507][T13225] [ 546.876515][T13225] dump_stack_lvl+0xe8/0x150 [ 546.876546][T13225] should_fail_ex+0x467/0x600 [ 546.876574][T13225] _copy_to_user+0x31/0xb0 [ 546.876596][T13225] simple_read_from_buffer+0xe1/0x170 [ 546.876618][T13225] proc_fail_nth_read+0x1be/0x230 [ 546.876639][T13225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.876661][T13225] ? rw_verify_area+0x250/0x4d0 [ 546.876683][T13225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.876701][T13225] vfs_read+0x219/0xa90 [ 546.876728][T13225] ? __pfx_vfs_read+0x10/0x10 [ 546.876751][T13225] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 546.876771][T13225] ? lockdep_hardirqs_on+0x7a/0x110 [ 546.876789][T13225] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 546.876807][T13225] ? mutex_lock_nested+0x152/0x1d0 [ 546.876828][T13225] ? fdget_pos+0x252/0x320 [ 546.876854][T13225] ksys_read+0x156/0x270 [ 546.876876][T13225] ? __pfx_ksys_read+0x10/0x10 [ 546.876912][T13225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.876931][T13225] do_syscall_64+0x174/0x580 [ 546.876949][T13225] ? trace_irq_disable+0x3b/0x140 [ 546.876975][T13225] ? clear_bhb_loop+0x40/0x90 [ 546.876995][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.877013][T13225] RIP: 0033:0x7fe614b1e6ce [ 546.877029][T13225] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 546.877044][T13225] RSP: 002b:00007fe612db5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 546.877061][T13225] RAX: ffffffffffffffda RBX: 00007fe612db66c0 RCX: 00007fe614b1e6ce [ 546.877074][T13225] RDX: 000000000000000f RSI: 00007fe612db60a0 RDI: 0000000000000005 [ 546.877085][T13225] RBP: 00007fe612db6090 R08: 0000000000000000 R09: 0000000000000000 [ 546.877095][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.877106][T13225] R13: 00007fe614de6038 R14: 00007fe614de5fa0 R15: 00007ffca03fbc68 [ 546.877136][T13225] [ 547.123734][ T10] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 547.123760][ T10] usb 2-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 547.123776][ T10] usb 2-1: Product: syz [ 547.123783][ T10] usb 2-1: Manufacturer: syz [ 547.123790][ T10] usb 2-1: SerialNumber: syz [ 547.155153][ T10] usb 2-1: config 0 descriptor?? [ 547.405638][ T10] usb 2-1: selecting invalid altsetting 3 [ 547.405657][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 547.405670][ T10] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 547.445187][ T10] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 547.913741][ T5825] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 549.076191][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.076220][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.076254][ T5825] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 549.076273][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.035747][ T36] usb 2-1: USB disconnect, device number 16 [ 550.051715][ T5825] usb 4-1: config 0 descriptor?? [ 551.468150][ T5825] usbhid 4-1:0.0: can't add hid device: -71 [ 551.468360][ T5825] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 551.507710][ T5825] usb 4-1: USB disconnect, device number 37 [ 552.647044][T13286] FAULT_INJECTION: forcing a failure. [ 552.647044][T13286] name failslab, interval 1, probability 0, space 0, times 0 [ 552.647076][T13286] CPU: 0 UID: 0 PID: 13286 Comm: syz.4.2623 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 552.647100][T13286] Tainted: [L]=SOFTLOCKUP [ 552.647105][T13286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 552.647114][T13286] Call Trace: [ 552.647121][T13286] [ 552.647129][T13286] dump_stack_lvl+0xe8/0x150 [ 552.647159][T13286] should_fail_ex+0x467/0x600 [ 552.647188][T13286] should_failslab+0xa8/0x100 [ 552.647211][T13286] __kmalloc_cache_noprof+0xa0/0x6b0 [ 552.647238][T13286] ? ucma_alloc_ctx+0x4e/0x340 [ 552.647355][T13286] ? ucma_alloc_ctx+0x4e/0x340 [ 552.647376][T13286] ucma_alloc_ctx+0x4e/0x340 [ 552.647397][T13286] ucma_create_id+0x1e3/0x370 [ 552.647415][T13286] ? __pfx_ucma_create_id+0x10/0x10 [ 552.647447][T13286] ucma_write+0x257/0x2f0 [ 552.647465][T13286] ? __pfx_ucma_write+0x10/0x10 [ 552.647519][T13286] ? security_file_permission+0x75/0x260 [ 552.647539][T13286] ? rw_verify_area+0x209/0x4d0 [ 552.647563][T13286] vfs_writev+0x4c4/0x990 [ 552.647587][T13286] ? __pfx_ucma_write+0x10/0x10 [ 552.647615][T13286] ? __pfx_vfs_writev+0x10/0x10 [ 552.647651][T13286] ? __fget_files+0x2a/0x420 [ 552.647671][T13286] ? __fget_files+0x3a8/0x420 [ 552.647686][T13286] ? __fget_files+0x2a/0x420 [ 552.647710][T13286] do_writev+0x15a/0x2e0 [ 552.647735][T13286] ? __pfx_do_writev+0x10/0x10 [ 552.647765][T13286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.647785][T13286] do_syscall_64+0x174/0x580 [ 552.647804][T13286] ? trace_irq_disable+0x3b/0x140 [ 552.647829][T13286] ? clear_bhb_loop+0x40/0x90 [ 552.647850][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.647867][T13286] RIP: 0033:0x7f9e1606de99 [ 552.647883][T13286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.647897][T13286] RSP: 002b:00007f9e142c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 552.647916][T13286] RAX: ffffffffffffffda RBX: 00007f9e162f5fa0 RCX: 00007f9e1606de99 [ 552.647928][T13286] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000005 [ 552.647938][T13286] RBP: 00007f9e142c6090 R08: 0000000000000000 R09: 0000000000000000 [ 552.647949][T13286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.647959][T13286] R13: 00007f9e162f6038 R14: 00007f9e162f5fa0 R15: 00007ffedb849338 [ 552.647987][T13286] [ 553.059129][ T5825] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 553.152310][T13305] netlink: 'syz.3.2632': attribute type 4 has an invalid length. [ 554.756237][T13282] Bluetooth: hci5: command 0x0406 tx timeout [ 554.774681][ T5825] usb 2-1: config 0 has an invalid interface number: 121 but max is 0 [ 554.774705][ T5825] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 554.774723][ T5825] usb 2-1: config 0 has no interface number 1 [ 554.774949][ T5825] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 554.774974][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 554.775001][ T5825] usb 2-1: config 0 interface 121 has no altsetting 0 [ 554.794631][ T5825] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 554.794657][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 554.794675][ T5825] usb 2-1: Product: syz [ 554.794686][ T5825] usb 2-1: Manufacturer: syz [ 554.794699][ T5825] usb 2-1: SerialNumber: syz [ 554.824459][ T5825] usb 2-1: config 0 descriptor?? [ 554.922550][T13317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.938316][T13321] FAULT_INJECTION: forcing a failure. [ 554.938316][T13321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.938348][T13321] CPU: 1 UID: 0 PID: 13321 Comm: syz.4.2633 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 554.938371][T13321] Tainted: [L]=SOFTLOCKUP [ 554.938377][T13321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 554.938388][T13321] Call Trace: [ 554.938401][T13321] [ 554.938408][T13321] dump_stack_lvl+0xe8/0x150 [ 554.938440][T13321] should_fail_ex+0x467/0x600 [ 554.938470][T13321] _copy_to_user+0x31/0xb0 [ 554.938491][T13321] simple_read_from_buffer+0xe1/0x170 [ 554.938514][T13321] proc_fail_nth_read+0x1be/0x230 [ 554.938534][T13321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.938555][T13321] ? rw_verify_area+0x250/0x4d0 [ 554.938577][T13321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.938594][T13321] vfs_read+0x219/0xa90 [ 554.938621][T13321] ? __pfx_vfs_read+0x10/0x10 [ 554.938643][T13321] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 554.938662][T13321] ? lockdep_hardirqs_on+0x7a/0x110 [ 554.938680][T13321] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 554.938697][T13321] ? mutex_lock_nested+0x152/0x1d0 [ 554.938718][T13321] ? fdget_pos+0x252/0x320 [ 554.938742][T13321] ksys_read+0x156/0x270 [ 554.938765][T13321] ? __pfx_ksys_read+0x10/0x10 [ 554.938792][T13321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.938810][T13321] do_syscall_64+0x174/0x580 [ 554.938827][T13321] ? trace_irq_disable+0x3b/0x140 [ 554.938850][T13321] ? clear_bhb_loop+0x40/0x90 [ 554.938870][T13321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.938887][T13321] RIP: 0033:0x7f9e1602e6ce [ 554.938903][T13321] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 554.938916][T13321] RSP: 002b:00007f9e142c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 554.938934][T13321] RAX: ffffffffffffffda RBX: 00007f9e142c66c0 RCX: 00007f9e1602e6ce [ 554.938946][T13321] RDX: 000000000000000f RSI: 00007f9e142c60a0 RDI: 0000000000000005 [ 554.938957][T13321] RBP: 00007f9e142c6090 R08: 0000000000000000 R09: 0000000000000000 [ 554.938967][T13321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.938978][T13321] R13: 00007f9e162f6038 R14: 00007f9e162f5fa0 R15: 00007ffedb849338 [ 554.939006][T13321] [ 554.946801][ T5825] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 555.197500][ T36] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 555.360967][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 555.360996][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 555.361016][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 555.361037][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 555.390407][ T36] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 555.390433][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.390451][ T36] usb 3-1: Product: syz [ 555.390464][ T36] usb 3-1: Manufacturer: syz [ 555.390476][ T36] usb 3-1: SerialNumber: syz [ 555.405911][ T36] usb 3-1: config 0 descriptor?? [ 555.441827][ T5825] snd-usb-audio 2-1:0.121: probe with driver snd-usb-audio failed with error -22 [ 555.529716][T11343] udevd[11343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.121/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.530842][ T5825] usb 2-1: USB disconnect, device number 17 [ 557.791198][ T36] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 559.380718][T13353] FAULT_INJECTION: forcing a failure. [ 559.380718][T13353] name failslab, interval 1, probability 0, space 0, times 0 [ 559.380750][T13353] CPU: 0 UID: 0 PID: 13353 Comm: syz.4.2645 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 559.380773][T13353] Tainted: [L]=SOFTLOCKUP [ 559.380780][T13353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 559.380790][T13353] Call Trace: [ 559.380798][T13353] [ 559.380806][T13353] dump_stack_lvl+0xe8/0x150 [ 559.380836][T13353] should_fail_ex+0x467/0x600 [ 559.380867][T13353] should_failslab+0xa8/0x100 [ 559.380890][T13353] __kmalloc_cache_noprof+0xa0/0x6b0 [ 559.380910][T13353] ? alloc_pipe_info+0xe8/0x4c0 [ 559.380930][T13353] ? alloc_pipe_info+0xe8/0x4c0 [ 559.380957][T13353] alloc_pipe_info+0xe8/0x4c0 [ 559.380982][T13353] create_pipe_files+0x88/0x7d0 [ 559.381003][T13353] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 559.381030][T13353] __do_pipe_flags+0x46/0x1f0 [ 559.381054][T13353] do_pipe2+0xaa/0x190 [ 559.381076][T13353] ? fput+0xa0/0xd0 [ 559.381101][T13353] ? __pfx_do_pipe2+0x10/0x10 [ 559.381121][T13353] ? ksys_write+0x248/0x270 [ 559.381152][T13353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.381171][T13353] __x64_sys_pipe2+0x5a/0x70 [ 559.381194][T13353] do_syscall_64+0x174/0x580 [ 559.381211][T13353] ? trace_irq_disable+0x3b/0x140 [ 559.381234][T13353] ? clear_bhb_loop+0x40/0x90 [ 559.381253][T13353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.381267][T13353] RIP: 0033:0x7f9e1606de99 [ 559.381283][T13353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.381297][T13353] RSP: 002b:00007f9e14284028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 559.381316][T13353] RAX: ffffffffffffffda RBX: 00007f9e162f6180 RCX: 00007f9e1606de99 [ 559.381328][T13353] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 559.381338][T13353] RBP: 00007f9e14284090 R08: 0000000000000000 R09: 0000000000000000 [ 559.381348][T13353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.381359][T13353] R13: 00007f9e162f6218 R14: 00007f9e162f6180 R15: 00007ffedb849338 [ 559.381385][T13353] [ 559.692110][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 559.726823][ T5586] usb 3-1: USB disconnect, device number 21 [ 559.909587][T13367] veth0: entered promiscuous mode [ 559.922126][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2650'. [ 560.141494][T13373] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2653'. [ 560.144935][T13374] FAULT_INJECTION: forcing a failure. [ 560.144935][T13374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.144966][T13374] CPU: 1 UID: 0 PID: 13374 Comm: syz.2.2654 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 560.144990][T13374] Tainted: [L]=SOFTLOCKUP [ 560.144996][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 560.145007][T13374] Call Trace: [ 560.145015][T13374] [ 560.145032][T13374] dump_stack_lvl+0xe8/0x150 [ 560.145063][T13374] should_fail_ex+0x467/0x600 [ 560.145094][T13374] strncpy_from_user+0x36/0x2c0 [ 560.145121][T13374] do_getname+0x77/0x250 [ 560.145151][T13374] __x64_sys_getxattr+0x1fb/0x2b0 [ 560.145177][T13374] ? __pfx___x64_sys_getxattr+0x10/0x10 [ 560.145195][T13374] ? rt_mutex_slowunlock+0x219/0x460 [ 560.145243][T13374] ? __pfx_ksys_write+0x10/0x10 [ 560.145271][T13374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.145290][T13374] do_syscall_64+0x174/0x580 [ 560.145310][T13374] ? clear_bhb_loop+0x40/0x90 [ 560.145332][T13374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.145348][T13374] RIP: 0033:0x7f2fbbfede99 [ 560.145366][T13374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.145380][T13374] RSP: 002b:00007f2fba246028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 560.145400][T13374] RAX: ffffffffffffffda RBX: 00007f2fbc275fa0 RCX: 00007f2fbbfede99 [ 560.145413][T13374] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000040 [ 560.145425][T13374] RBP: 00007f2fba246090 R08: 0000000000000000 R09: 0000000000000000 [ 560.145436][T13374] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000001 [ 560.145448][T13374] R13: 00007f2fbc276038 R14: 00007f2fbc275fa0 R15: 00007ffdbed75728 [ 560.145477][T13374] [ 561.046703][T13376] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2653'. [ 561.059980][T13378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2653'. [ 561.352920][T13390] FAULT_INJECTION: forcing a failure. [ 561.352920][T13390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.352953][T13390] CPU: 0 UID: 0 PID: 13390 Comm: syz.2.2661 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 561.352977][T13390] Tainted: [L]=SOFTLOCKUP [ 561.352984][T13390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 561.352995][T13390] Call Trace: [ 561.353002][T13390] [ 561.353011][T13390] dump_stack_lvl+0xe8/0x150 [ 561.353042][T13390] should_fail_ex+0x467/0x600 [ 561.353073][T13390] _copy_from_iter+0x1d3/0x1660 [ 561.353102][T13390] ? rcu_is_watching+0x15/0xb0 [ 561.353124][T13390] ? trace_kmem_cache_alloc+0x29/0xe0 [ 561.353153][T13390] ? __pfx__copy_from_iter+0x10/0x10 [ 561.353178][T13390] ? __alloc_skb+0x276/0x7a0 [ 561.353194][T13390] ? __alloc_skb+0x276/0x7a0 [ 561.353215][T13390] ? netlink_sendmsg+0x650/0xb40 [ 561.353235][T13390] ? skb_put+0x112/0x210 [ 561.353256][T13390] netlink_sendmsg+0x6c0/0xb40 [ 561.353282][T13390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.353304][T13390] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 561.353330][T13390] ? __kernel_text_address+0xd/0x30 [ 561.353347][T13390] ? unwind_get_return_address+0x4d/0x90 [ 561.353369][T13390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.353387][T13390] sock_sendmsg_nosec+0x13a/0x180 [ 561.353414][T13390] ____sys_sendmsg+0x565/0x870 [ 561.353434][T13390] ? __might_fault+0xaf/0x130 [ 561.353458][T13390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.353487][T13390] ? import_iovec+0x73/0xa0 [ 561.353510][T13390] ___sys_sendmsg+0x2a5/0x360 [ 561.353528][T13390] ? __lock_acquire+0x683/0x2ce0 [ 561.353550][T13390] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.353603][T13390] ? __fget_files+0x2a/0x420 [ 561.353620][T13390] ? __fget_files+0x3a8/0x420 [ 561.353648][T13390] __x64_sys_sendmsg+0x1b7/0x290 [ 561.353671][T13390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.353710][T13390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.353730][T13390] do_syscall_64+0x174/0x580 [ 561.353749][T13390] ? trace_irq_disable+0x3b/0x140 [ 561.353781][T13390] ? clear_bhb_loop+0x40/0x90 [ 561.353803][T13390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.353821][T13390] RIP: 0033:0x7f2fbbfede99 [ 561.353837][T13390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.353850][T13390] RSP: 002b:00007f2fba246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.353869][T13390] RAX: ffffffffffffffda RBX: 00007f2fbc275fa0 RCX: 00007f2fbbfede99 [ 561.353881][T13390] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 561.353899][T13390] RBP: 00007f2fba246090 R08: 0000000000000000 R09: 0000000000000000 [ 561.353910][T13390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.353921][T13390] R13: 00007f2fbc276038 R14: 00007f2fbc275fa0 R15: 00007ffdbed75728 [ 561.353950][T13390] [ 562.769957][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.248101][ T5586] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 564.157452][ T5586] usb 2-1: Using ep0 maxpacket: 16 [ 564.162771][ T5586] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 564.162796][ T5586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.162814][ T5586] usb 2-1: Product: syz [ 564.162827][ T5586] usb 2-1: Manufacturer: syz [ 564.162840][ T5586] usb 2-1: SerialNumber: syz [ 564.207882][T13429] FAULT_INJECTION: forcing a failure. [ 564.207882][T13429] name failslab, interval 1, probability 0, space 0, times 0 [ 564.207914][T13429] CPU: 0 UID: 0 PID: 13429 Comm: syz.3.2673 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 564.207938][T13429] Tainted: [L]=SOFTLOCKUP [ 564.207945][T13429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 564.207956][T13429] Call Trace: [ 564.207964][T13429] [ 564.207972][T13429] dump_stack_lvl+0xe8/0x150 [ 564.208012][T13429] should_fail_ex+0x467/0x600 [ 564.208044][T13429] should_failslab+0xa8/0x100 [ 564.208066][T13429] __kmalloc_cache_noprof+0xa0/0x6b0 [ 564.208086][T13429] ? cma_alloc_port+0xb5/0x670 [ 564.208181][T13429] ? cma_alloc_port+0xb5/0x670 [ 564.208213][T13429] cma_alloc_port+0xb5/0x670 [ 564.208237][T13429] rdma_bind_addr_dst+0x28c7/0x3590 [ 564.208263][T13429] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 564.208297][T13429] ? rt_spin_unlock+0x157/0x200 [ 564.208330][T13429] rdma_resolve_addr+0x3e7/0x21a0 [ 564.208358][T13429] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 564.208379][T13429] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 564.208399][T13429] ? lockdep_hardirqs_on+0x7a/0x110 [ 564.208442][T13429] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 564.208461][T13429] ? mutex_lock_nested+0x152/0x1d0 [ 564.208482][T13429] ? ucma_resolve_ip+0x2fe/0x490 [ 564.208504][T13429] ucma_resolve_ip+0x336/0x490 [ 564.208525][T13429] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 564.208563][T13429] ucma_write+0x257/0x2f0 [ 564.208584][T13429] ? __pfx_ucma_write+0x10/0x10 [ 564.208609][T13429] ? security_file_permission+0x75/0x260 [ 564.208634][T13429] ? rw_verify_area+0x209/0x4d0 [ 564.208660][T13429] vfs_writev+0x4c4/0x990 [ 564.208686][T13429] ? __pfx_ucma_write+0x10/0x10 [ 564.208717][T13429] ? __pfx_vfs_writev+0x10/0x10 [ 564.208756][T13429] ? __fget_files+0x2a/0x420 [ 564.208779][T13429] ? __fget_files+0x3a8/0x420 [ 564.208796][T13429] ? __fget_files+0x2a/0x420 [ 564.208823][T13429] do_writev+0x15a/0x2e0 [ 564.208850][T13429] ? __pfx_do_writev+0x10/0x10 [ 564.208884][T13429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.208904][T13429] do_syscall_64+0x174/0x580 [ 564.208922][T13429] ? trace_irq_disable+0x3b/0x140 [ 564.208949][T13429] ? clear_bhb_loop+0x40/0x90 [ 564.208971][T13429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.208995][T13429] RIP: 0033:0x7fe614b5de99 [ 564.209018][T13429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.209033][T13429] RSP: 002b:00007fe612db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 564.209052][T13429] RAX: ffffffffffffffda RBX: 00007fe614de5fa0 RCX: 00007fe614b5de99 [ 564.209065][T13429] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000a [ 564.209076][T13429] RBP: 00007fe612db6090 R08: 0000000000000000 R09: 0000000000000000 [ 564.209088][T13429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.209099][T13429] R13: 00007fe614de6038 R14: 00007fe614de5fa0 R15: 00007ffca03fbc68 [ 564.209129][T13429] [ 564.508532][ T5586] usb 2-1: config 0 descriptor?? [ 564.568064][ T5586] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 565.060628][ T5586] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 566.872107][T13462] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2684'. [ 566.873650][T13462] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2684'. [ 566.874240][T13462] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2684'. [ 567.267469][ T5586] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 567.470703][ T5735] usb 2-1: USB disconnect, device number 18 [ 567.483472][ T5586] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 567.483501][ T5586] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 567.483522][ T5586] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 567.483543][ T5586] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 567.511440][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2686'. [ 567.542207][ T5586] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 567.542235][ T5586] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.542253][ T5586] usb 7-1: Product: syz [ 567.542266][ T5586] usb 7-1: Manufacturer: syz [ 567.542280][ T5586] usb 7-1: SerialNumber: syz [ 567.692294][ T5586] usb 7-1: config 0 descriptor?? [ 567.923463][T13483] netlink: 'syz.2.2690': attribute type 11 has an invalid length. [ 567.923505][T13483] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2690'. [ 568.608210][ T5733] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 569.018259][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 569.138960][ T5733] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 569.139041][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.295439][ T5733] usb 4-1: config 0 descriptor?? [ 569.881046][ T5586] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 569.881080][ T5733] gspca_main: sq930x-2.14.0 probing 041e:403c [ 570.357474][ T5733] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 570.357572][ T5733] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 570.367559][ T5733] usb 4-1: USB disconnect, device number 38 [ 571.881519][T13518] netlink: 'syz.3.2701': attribute type 11 has an invalid length. [ 571.881580][T13518] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2701'. [ 575.241576][T12901] usb 7-1: USB disconnect, device number 17 [ 575.377803][T13535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.383030][T13535] FAULT_INJECTION: forcing a failure. [ 575.383030][T13535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.383061][T13535] CPU: 1 UID: 0 PID: 13535 Comm: syz.1.2707 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 575.383085][T13535] Tainted: [L]=SOFTLOCKUP [ 575.383091][T13535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 575.383102][T13535] Call Trace: [ 575.383109][T13535] [ 575.383116][T13535] dump_stack_lvl+0xe8/0x150 [ 575.383145][T13535] should_fail_ex+0x467/0x600 [ 575.383173][T13535] _copy_from_user+0x2d/0xb0 [ 575.383192][T13535] iommufd_fops_ioctl+0x419/0x600 [ 575.383298][T13535] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 575.383328][T13535] ? __fget_files+0x2a/0x420 [ 575.383348][T13535] ? bpf_lsm_file_ioctl+0x9/0x20 [ 575.383372][T13535] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 575.383392][T13535] __se_sys_ioctl+0xff/0x170 [ 575.383414][T13535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.383433][T13535] do_syscall_64+0x174/0x580 [ 575.383452][T13535] ? trace_irq_disable+0x3b/0x140 [ 575.383475][T13535] ? clear_bhb_loop+0x40/0x90 [ 575.383496][T13535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.383512][T13535] RIP: 0033:0x7fb3e325de99 [ 575.383529][T13535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.383551][T13535] RSP: 002b:00007fb3e14b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.383569][T13535] RAX: ffffffffffffffda RBX: 00007fb3e34e5fa0 RCX: 00007fb3e325de99 [ 575.383581][T13535] RDX: 00002000000079c0 RSI: 0000000000003b85 RDI: 0000000000000003 [ 575.383592][T13535] RBP: 00007fb3e14b6090 R08: 0000000000000000 R09: 0000000000000000 [ 575.383603][T13535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.383613][T13535] R13: 00007fb3e34e6038 R14: 00007fb3e34e5fa0 R15: 00007ffc98397648 [ 575.383641][T13535] [ 581.151991][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2729'. [ 581.560912][T13616] FAULT_INJECTION: forcing a failure. [ 581.560912][T13616] name failslab, interval 1, probability 0, space 0, times 0 [ 581.560944][T13616] CPU: 0 UID: 0 PID: 13616 Comm: syz.2.2734 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 581.560968][T13616] Tainted: [L]=SOFTLOCKUP [ 581.560974][T13616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 581.560984][T13616] Call Trace: [ 581.560992][T13616] [ 581.560999][T13616] dump_stack_lvl+0xe8/0x150 [ 581.561030][T13616] should_fail_ex+0x467/0x600 [ 581.561060][T13616] should_failslab+0xa8/0x100 [ 581.561082][T13616] __kmalloc_noprof+0xfe/0x780 [ 581.561099][T13616] ? rcu_is_watching+0x15/0xb0 [ 581.561120][T13616] ? tomoyo_realpath_from_path+0xef/0x640 [ 581.561139][T13616] ? tomoyo_realpath_from_path+0xef/0x640 [ 581.561166][T13616] tomoyo_realpath_from_path+0xef/0x640 [ 581.561195][T13616] ? tomoyo_path_number_perm+0x219/0x5f0 [ 581.561212][T13616] tomoyo_path_number_perm+0x246/0x5f0 [ 581.561233][T13616] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 581.561251][T13616] ? __lock_acquire+0x683/0x2ce0 [ 581.561283][T13616] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 581.561302][T13616] ? hook_file_ioctl+0x1f3/0x600 [ 581.561326][T13616] ? lockdep_hardirqs_on+0x7a/0x110 [ 581.561362][T13616] ? __fget_files+0x2a/0x420 [ 581.561382][T13616] ? __fget_files+0x2a/0x420 [ 581.561398][T13616] ? __fget_files+0x3a8/0x420 [ 581.561414][T13616] ? __fget_files+0x2a/0x420 [ 581.561435][T13616] security_file_ioctl+0xc3/0x2a0 [ 581.561455][T13616] __se_sys_ioctl+0x47/0x170 [ 581.561475][T13616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.561494][T13616] do_syscall_64+0x174/0x580 [ 581.561509][T13616] ? trace_irq_disable+0x3b/0x140 [ 581.561532][T13616] ? clear_bhb_loop+0x40/0x90 [ 581.561553][T13616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.561570][T13616] RIP: 0033:0x7f2fbbfede99 [ 581.561587][T13616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.561601][T13616] RSP: 002b:00007f2fba246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.561619][T13616] RAX: ffffffffffffffda RBX: 00007f2fbc275fa0 RCX: 00007f2fbbfede99 [ 581.561633][T13616] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000003 [ 581.561644][T13616] RBP: 00007f2fba246090 R08: 0000000000000000 R09: 0000000000000000 [ 581.561656][T13616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.561675][T13616] R13: 00007f2fbc276038 R14: 00007f2fbc275fa0 R15: 00007ffdbed75728 [ 581.561703][T13616] [ 581.561711][T13616] ERROR: Out of memory at tomoyo_realpath_from_path. [ 581.561755][T13616] : renamed from virt_wifi0 [ 581.564793][T13615] netlink: 'syz.3.2735': attribute type 2 has an invalid length. [ 581.564821][T13615] netlink: 'syz.3.2735': attribute type 2 has an invalid length. [ 581.765871][T13614] : renamed from virt_wifi0 [ 581.957580][ T5586] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 582.112267][ T5586] usb 4-1: unable to get BOS descriptor or descriptor too short [ 582.113865][ T5586] usb 4-1: not running at top speed; connect to a high speed hub [ 582.115469][ T5586] usb 4-1: config 1 has an invalid interface number: 93 but max is 0 [ 582.115492][ T5586] usb 4-1: config 1 has no interface number 0 [ 582.115535][ T5586] usb 4-1: config 1 interface 93 has no altsetting 0 [ 583.387851][T13647] FAULT_INJECTION: forcing a failure. [ 583.387851][T13647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.387885][T13647] CPU: 0 UID: 0 PID: 13647 Comm: syz.2.2749 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 583.387909][T13647] Tainted: [L]=SOFTLOCKUP [ 583.387915][T13647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 583.387929][T13647] Call Trace: [ 583.387936][T13647] [ 583.387944][T13647] dump_stack_lvl+0xe8/0x150 [ 583.387977][T13647] should_fail_ex+0x467/0x600 [ 583.388008][T13647] _copy_from_iter+0x1d3/0x1660 [ 583.388038][T13647] ? rcu_is_watching+0x15/0xb0 [ 583.388060][T13647] ? trace_kmem_cache_alloc+0x29/0xe0 [ 583.388090][T13647] ? __pfx__copy_from_iter+0x10/0x10 [ 583.388115][T13647] ? __alloc_skb+0x276/0x7a0 [ 583.388132][T13647] ? __alloc_skb+0x276/0x7a0 [ 583.388161][T13647] ? netlink_sendmsg+0x650/0xb40 [ 583.388181][T13647] ? skb_put+0x112/0x210 [ 583.388202][T13647] netlink_sendmsg+0x6c0/0xb40 [ 583.388230][T13647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.388252][T13647] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 583.388277][T13647] ? finish_task_switch+0x15d/0xc60 [ 583.388364][T13647] ? lock_acquire+0x106/0x350 [ 583.388386][T13647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.388405][T13647] sock_sendmsg_nosec+0x13a/0x180 [ 583.388432][T13647] ____sys_sendmsg+0x565/0x870 [ 583.388452][T13647] ? __might_fault+0xaf/0x130 [ 583.388476][T13647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.388504][T13647] ? import_iovec+0x73/0xa0 [ 583.388527][T13647] ___sys_sendmsg+0x2a5/0x360 [ 583.388545][T13647] ? __lock_acquire+0x683/0x2ce0 [ 583.388567][T13647] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.388607][T13647] ? lockdep_hardirqs_on+0x7a/0x110 [ 583.388642][T13647] ? __x64_sys_sendmsg+0x19c/0x290 [ 583.388668][T13647] __x64_sys_sendmsg+0x1b7/0x290 [ 583.388690][T13647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 583.388754][T13647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.388775][T13647] do_syscall_64+0x174/0x580 [ 583.388794][T13647] ? trace_irq_disable+0x3b/0x140 [ 583.388820][T13647] ? clear_bhb_loop+0x40/0x90 [ 583.388842][T13647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.388860][T13647] RIP: 0033:0x7f2fbbfede99 [ 583.388879][T13647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.388894][T13647] RSP: 002b:00007f2fba246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.388914][T13647] RAX: ffffffffffffffda RBX: 00007f2fbc275fa0 RCX: 00007f2fbbfede99 [ 583.388928][T13647] RDX: 0000000020000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 583.388941][T13647] RBP: 00007f2fba246090 R08: 0000000000000000 R09: 0000000000000000 [ 583.388952][T13647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.388962][T13647] R13: 00007f2fbc276038 R14: 00007f2fbc275fa0 R15: 00007ffdbed75728 [ 583.388997][T13647] [ 583.654234][ T5586] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 583.654261][ T5586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.654279][ T5586] usb 4-1: Product: syz [ 583.654293][ T5586] usb 4-1: Manufacturer: syz [ 583.654306][ T5586] usb 4-1: SerialNumber: syz [ 584.202513][ T5586] usb 4-1: USB disconnect, device number 39 [ 584.827038][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2752'. [ 585.620026][T13665] FAULT_INJECTION: forcing a failure. [ 585.620026][T13665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.620059][T13665] CPU: 0 UID: 0 PID: 13665 Comm: syz.4.2756 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.620083][T13665] Tainted: [L]=SOFTLOCKUP [ 585.620090][T13665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 585.620101][T13665] Call Trace: [ 585.620108][T13665] [ 585.620116][T13665] dump_stack_lvl+0xe8/0x150 [ 585.620146][T13665] should_fail_ex+0x467/0x600 [ 585.620177][T13665] _copy_from_iter+0x1d3/0x1660 [ 585.620206][T13665] ? rcu_is_watching+0x15/0xb0 [ 585.620228][T13665] ? trace_kmem_cache_alloc+0x29/0xe0 [ 585.620257][T13665] ? __pfx__copy_from_iter+0x10/0x10 [ 585.620282][T13665] ? __alloc_skb+0x276/0x7a0 [ 585.620298][T13665] ? __alloc_skb+0x276/0x7a0 [ 585.620319][T13665] ? netlink_sendmsg+0x650/0xb40 [ 585.620340][T13665] ? skb_put+0x112/0x210 [ 585.620367][T13665] netlink_sendmsg+0x6c0/0xb40 [ 585.620395][T13665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.620415][T13665] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 585.620445][T13665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.620464][T13665] sock_sendmsg_nosec+0x13a/0x180 [ 585.620489][T13665] ____sys_sendmsg+0x565/0x870 [ 585.620512][T13665] ? __might_fault+0xaf/0x130 [ 585.620534][T13665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.620560][T13665] ? import_iovec+0x73/0xa0 [ 585.620584][T13665] ___sys_sendmsg+0x2a5/0x360 [ 585.620602][T13665] ? __lock_acquire+0x683/0x2ce0 [ 585.620622][T13665] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.620672][T13665] ? __fget_files+0x2a/0x420 [ 585.620689][T13665] ? __fget_files+0x3a8/0x420 [ 585.620716][T13665] __x64_sys_sendmsg+0x1b7/0x290 [ 585.620739][T13665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.620775][T13665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.620795][T13665] do_syscall_64+0x174/0x580 [ 585.620817][T13665] ? clear_bhb_loop+0x40/0x90 [ 585.620839][T13665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.620856][T13665] RIP: 0033:0x7f9e1606de99 [ 585.620873][T13665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.620886][T13665] RSP: 002b:00007f9e142c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.620906][T13665] RAX: ffffffffffffffda RBX: 00007f9e162f5fa0 RCX: 00007f9e1606de99 [ 585.620919][T13665] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 585.620931][T13665] RBP: 00007f9e142c6090 R08: 0000000000000000 R09: 0000000000000000 [ 585.620943][T13665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.620953][T13665] R13: 00007f9e162f6038 R14: 00007f9e162f5fa0 R15: 00007ffedb849338 [ 585.620982][T13665] [ 585.639514][T13667] FAULT_INJECTION: forcing a failure. [ 585.639514][T13667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.639545][T13667] CPU: 0 UID: 0 PID: 13667 Comm: syz.6.2755 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.639569][T13667] Tainted: [L]=SOFTLOCKUP [ 585.639575][T13667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 585.639586][T13667] Call Trace: [ 585.639593][T13667] [ 585.639601][T13667] dump_stack_lvl+0xe8/0x150 [ 585.639631][T13667] should_fail_ex+0x467/0x600 [ 585.639662][T13667] _copy_from_user+0x2d/0xb0 [ 585.639683][T13667] sync_file_ioctl+0x1c9/0x1170 [ 585.639816][T13667] ? __pfx_sync_file_ioctl+0x10/0x10 [ 585.639841][T13667] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 585.639860][T13667] ? hook_file_ioctl+0x1f3/0x600 [ 585.639887][T13667] ? __asan_memset+0x22/0x50 [ 585.639917][T13667] ? __pfx_smack_file_ioctl+0x10/0x10 [ 585.639953][T13667] ? __fget_files+0x2a/0x420 [ 585.639969][T13667] ? __fget_files+0x3a8/0x420 [ 585.639984][T13667] ? __fget_files+0x2a/0x420 [ 585.640004][T13667] ? bpf_lsm_file_ioctl+0x9/0x20 [ 585.640029][T13667] ? __pfx_sync_file_ioctl+0x10/0x10 [ 585.640053][T13667] __se_sys_ioctl+0xff/0x170 [ 585.640074][T13667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.640096][T13667] do_syscall_64+0x174/0x580 [ 585.640114][T13667] ? trace_irq_disable+0x3b/0x140 [ 585.640140][T13667] ? clear_bhb_loop+0x40/0x90 [ 585.640160][T13667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.640178][T13667] RIP: 0033:0x7f5867e4de99 [ 585.640195][T13667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.640209][T13667] RSP: 002b:00007f58660a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.640228][T13667] RAX: ffffffffffffffda RBX: 00007f58680d5fa0 RCX: 00007f5867e4de99 [ 585.640241][T13667] RDX: 0000000000000000 RSI: 00000000c0383e04 RDI: 0000000000000004 [ 585.640251][T13667] RBP: 00007f58660a6090 R08: 0000000000000000 R09: 0000000000000000 [ 585.640263][T13667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.640273][T13667] R13: 00007f58680d6038 R14: 00007f58680d5fa0 R15: 00007ffc1d7d1b78 [ 585.640302][T13667] [ 585.811407][T13673] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2759'. [ 585.815850][T13675] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2759'. [ 586.401651][T13682] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2757'. [ 587.101511][T13282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 587.745176][T13282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 587.759064][T13282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 587.780943][T13282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 587.782060][T13282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 588.082692][ T5586] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 588.256218][ T5586] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 588.256245][ T5586] usb 4-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 588.256264][ T5586] usb 4-1: Product: syz [ 588.256277][ T5586] usb 4-1: Manufacturer: syz [ 588.256291][ T5586] usb 4-1: SerialNumber: syz [ 588.300513][ T5586] usb 4-1: config 0 descriptor?? [ 588.326452][ T5586] usb 4-1: selecting invalid altsetting 3 [ 588.326474][ T5586] comedi comedi5: could not set alternate setting 3 in high speed [ 588.326488][ T5586] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 588.391000][ T5586] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 589.210999][T13706] No source specified [ 589.212307][T13706] overlayfs: overlapping lowerdir path [ 589.278068][ T5708] usb 4-1: USB disconnect, device number 40 [ 589.534307][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2766'. [ 590.190257][ T61] Bluetooth: hci3: command tx timeout [ 592.098176][ T5708] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 592.156769][ T5586] syz1: Port: 1 Link DOWN [ 592.183347][ T1179] smbdirect: ib_dev[syz1] removed [ 592.208168][ T61] Bluetooth: hci3: command tx timeout [ 592.277432][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 592.358705][ T5708] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 592.361164][ T5708] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 592.361189][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.361206][ T5708] usb 2-1: Product: syz [ 592.361218][ T5708] usb 2-1: Manufacturer: syz [ 592.361230][ T5708] usb 2-1: SerialNumber: syz [ 592.414896][ T5708] r8152-cfgselector 2-1: Unknown version 0x0000 [ 592.414919][ T5708] r8152-cfgselector 2-1: config 0 descriptor?? [ 592.795772][T13738] FAULT_INJECTION: forcing a failure. [ 592.795772][T13738] name failslab, interval 1, probability 0, space 0, times 0 [ 592.795805][T13738] CPU: 1 UID: 0 PID: 13738 Comm: syz.6.2776 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 592.795829][T13738] Tainted: [L]=SOFTLOCKUP [ 592.795836][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 592.795846][T13738] Call Trace: [ 592.795854][T13738] [ 592.795862][T13738] dump_stack_lvl+0xe8/0x150 [ 592.795892][T13738] should_fail_ex+0x467/0x600 [ 592.795922][T13738] should_failslab+0xa8/0x100 [ 592.795946][T13738] __kmalloc_noprof+0xfe/0x780 [ 592.795964][T13738] ? iovec_from_user+0x87/0x250 [ 592.795981][T13738] ? iovec_from_user+0x87/0x250 [ 592.796006][T13738] iovec_from_user+0x87/0x250 [ 592.796029][T13738] __import_iovec+0x15e/0x7e0 [ 592.796057][T13738] import_iovec+0x73/0xa0 [ 592.796081][T13738] ___sys_sendmsg+0x255/0x360 [ 592.796101][T13738] ? __lock_acquire+0x683/0x2ce0 [ 592.796124][T13738] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.796149][T13738] ? kstrtouint+0x6e/0xe0 [ 592.796197][T13738] ? __fget_files+0x2a/0x420 [ 592.796214][T13738] ? __fget_files+0x3a8/0x420 [ 592.796241][T13738] __sys_sendmmsg+0x279/0x4d0 [ 592.796267][T13738] ? __pfx___sys_sendmmsg+0x10/0x10 [ 592.796295][T13738] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 592.796334][T13738] ? ksys_write+0x248/0x270 [ 592.796357][T13738] ? __pfx_ksys_write+0x10/0x10 [ 592.796384][T13738] __x64_sys_sendmmsg+0xa0/0xc0 [ 592.796404][T13738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.796423][T13738] do_syscall_64+0x174/0x580 [ 592.796441][T13738] ? trace_irq_disable+0x3b/0x140 [ 592.796468][T13738] ? clear_bhb_loop+0x40/0x90 [ 592.796489][T13738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.796507][T13738] RIP: 0033:0x7f5867e4de99 [ 592.796525][T13738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.796540][T13738] RSP: 002b:00007f58660a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 592.796567][T13738] RAX: ffffffffffffffda RBX: 00007f58680d5fa0 RCX: 00007f5867e4de99 [ 592.796581][T13738] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000005 [ 592.796596][T13738] RBP: 00007f58660a6090 R08: 0000000000000000 R09: 0000000000000000 [ 592.796607][T13738] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 592.796619][T13738] R13: 00007f58680d6038 R14: 00007f58680d5fa0 R15: 00007ffc1d7d1b78 [ 592.796649][T13738] [ 592.855971][T13730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.980581][T13730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.989142][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 592.989290][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 592.989428][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 592.989559][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 592.989681][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 592.989804][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 592.989925][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 592.990054][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 592.990172][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 592.990292][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'. [ 593.084990][ T36] r8152-cfgselector 2-1: USB disconnect, device number 19 [ 593.553485][ T5832] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 593.658455][ T5586] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 593.709611][ T5832] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 593.709640][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 593.709657][ T5832] usb 3-1: Product: syz [ 593.709670][ T5832] usb 3-1: Manufacturer: syz [ 593.709682][ T5832] usb 3-1: SerialNumber: syz [ 593.735514][ T5832] usb 3-1: config 0 descriptor?? [ 593.773292][ T5832] usb 3-1: selecting invalid altsetting 3 [ 593.773305][ T5832] comedi comedi5: could not set alternate setting 3 in high speed [ 593.773313][ T5832] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 594.708433][ T5586] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 594.708465][ T5586] usb 4-1: config 0 interface 0 has no altsetting 0 [ 594.708495][ T5586] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 594.708515][ T5586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.723893][ T61] Bluetooth: hci3: command tx timeout [ 594.781003][ T5586] usb 4-1: config 0 descriptor?? [ 594.784379][T13759] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 594.857519][ T5708] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 594.950614][ T5832] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 595.071707][ T5708] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 595.071735][ T5708] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 595.071973][ T5708] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 595.071997][ T5708] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 595.076344][ T5708] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 595.076368][ T5708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.076435][ T5708] usb 7-1: Product: syz [ 595.076448][ T5708] usb 7-1: Manufacturer: syz [ 595.076460][ T5708] usb 7-1: SerialNumber: syz [ 595.199180][ T5708] usb 7-1: config 0 descriptor?? [ 595.251576][ T5586] hid_parser_main: 31 callbacks suppressed [ 595.251693][ T5586] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 595.251722][ T5586] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 595.251743][ T5586] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 595.251764][ T5586] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 595.251786][ T5586] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 595.251862][ T5586] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 595.251887][ T5586] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 595.251910][ T5586] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 595.251934][ T5586] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 595.252006][ T5586] razer 0003:1532:010D.0002: unknown main item tag 0x0 [ 595.332954][ T5586] razer 0003:1532:010D.0002: unexpected long global item [ 595.342597][ T5586] razer 0003:1532:010D.0002: probe with driver razer failed with error -22 [ 595.563524][T13759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.564011][T13759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.569297][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 596.542323][ T5708] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 596.644794][ T5832] usb 3-1: USB disconnect, device number 22 [ 596.781566][T13282] Bluetooth: hci3: command tx timeout [ 596.788266][ T5708] usb 4-1: USB disconnect, device number 41 [ 596.887605][T13685] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.887724][T13685] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.887910][T13685] bridge_slave_0: entered allmulticast mode [ 596.904490][T13685] bridge_slave_0: entered promiscuous mode [ 596.919938][T13685] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.920223][T13685] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.920406][T13685] bridge_slave_1: entered allmulticast mode [ 596.942437][T13685] bridge_slave_1: entered promiscuous mode [ 597.051436][T13685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.066177][T13685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.137763][T13685] team0: Port device team_slave_0 added [ 597.141557][T13685] team0: Port device team_slave_1 added [ 597.189770][T13685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.189786][T13685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.189808][T13685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.192212][T13685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.192224][T13685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.192247][T13685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.237995][ T5826] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 597.300043][T13685] hsr_slave_0: entered promiscuous mode [ 597.301561][T13685] hsr_slave_1: entered promiscuous mode [ 597.303293][T13685] debugfs: 'hsr0' already exists in 'hsr' [ 597.303316][T13685] Cannot create hsr debugfs directory [ 597.429405][ T5826] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 597.429434][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 597.429452][ T5826] usb 3-1: Product: syz [ 597.429465][ T5826] usb 3-1: Manufacturer: syz [ 597.429478][ T5826] usb 3-1: SerialNumber: syz [ 597.533742][ T5826] usb 3-1: config 0 descriptor?? [ 597.542180][T13789] FAULT_INJECTION: forcing a failure. [ 597.542180][T13789] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 597.542212][T13789] CPU: 1 UID: 0 PID: 13789 Comm: syz.3.2787 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 597.542236][T13789] Tainted: [L]=SOFTLOCKUP [ 597.542246][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 597.542256][T13789] Call Trace: [ 597.542263][T13789] [ 597.542272][T13789] dump_stack_lvl+0xe8/0x150 [ 597.542306][T13789] should_fail_ex+0x467/0x600 [ 597.542338][T13789] prepare_alloc_pages+0x223/0x690 [ 597.542365][T13789] __alloc_frozen_pages_noprof+0x12f/0x380 [ 597.542389][T13789] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 597.542414][T13789] ? __pfx_policy_nodemask+0x10/0x10 [ 597.542434][T13789] ? lockdep_hardirqs_on+0x7a/0x110 [ 597.542458][T13789] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 597.542488][T13789] alloc_pages_mpol+0xce/0x280 [ 597.542512][T13789] alloc_pages_noprof+0xd2/0x2f0 [ 597.542536][T13789] get_free_pages_noprof+0xf/0x80 [ 597.542556][T13789] __kasan_populate_vmalloc+0x38/0x1c0 [ 597.542582][T13789] ? rt_spin_unlock+0x163/0x200 [ 597.542607][T13789] alloc_vmap_area+0xd1a/0x1420 [ 597.542647][T13789] ? __pfx_alloc_vmap_area+0x10/0x10 [ 597.542679][T13789] ? __kmalloc_cache_node_noprof+0x47b/0x6a0 [ 597.542699][T13789] ? __get_vm_area_node+0x136/0x300 [ 597.542721][T13789] ? __get_vm_area_node+0x136/0x300 [ 597.542749][T13789] __get_vm_area_node+0x1f2/0x300 [ 597.542779][T13789] __vmalloc_node_range_noprof+0x358/0x1730 [ 597.542805][T13789] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 597.542833][T13789] ? is_bpf_text_address+0x26/0x2b0 [ 597.542869][T13789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 597.542894][T13789] ? is_bpf_text_address+0x26/0x2b0 [ 597.542916][T13789] ? kernel_text_address+0xa5/0xe0 [ 597.542941][T13789] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 597.542958][T13789] __vmalloc_noprof+0xd2/0x120 [ 597.542982][T13789] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 597.543003][T13789] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 597.543020][T13789] ? bpf_prog_alloc+0x2a/0x1a0 [ 597.543039][T13789] bpf_prog_alloc+0x3c/0x1a0 [ 597.543059][T13789] bpf_prog_load+0x7f8/0x1c00 [ 597.543089][T13789] ? __pfx_bpf_prog_load+0x10/0x10 [ 597.543131][T13789] __sys_bpf+0xd0d/0xd90 [ 597.543155][T13789] ? __pfx___sys_bpf+0x10/0x10 [ 597.543175][T13789] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.543199][T13789] ? rt_mutex_slowunlock+0x219/0x460 [ 597.543240][T13789] ? ksys_write+0x248/0x270 [ 597.543264][T13789] ? __pfx_ksys_write+0x10/0x10 [ 597.543290][T13789] __x64_sys_bpf+0xba/0xd0 [ 597.543315][T13789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.543336][T13789] do_syscall_64+0x174/0x580 [ 597.543354][T13789] ? trace_irq_disable+0x3b/0x140 [ 597.543380][T13789] ? clear_bhb_loop+0x40/0x90 [ 597.543402][T13789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.543420][T13789] RIP: 0033:0x7fe614b5de99 [ 597.543436][T13789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.543449][T13789] RSP: 002b:00007fe612db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.543468][T13789] RAX: ffffffffffffffda RBX: 00007fe614de5fa0 RCX: 00007fe614b5de99 [ 597.543480][T13789] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 597.543491][T13789] RBP: 00007fe612db6090 R08: 0000000000000000 R09: 0000000000000000 [ 597.543502][T13789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.543512][T13789] R13: 00007fe614de6038 R14: 00007fe614de5fa0 R15: 00007ffca03fbc68 [ 597.543541][T13789] [ 597.565636][T13789] syz.3.2787: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 597.565703][T13789] CPU: 1 UID: 0 PID: 13789 Comm: syz.3.2787 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 597.565727][T13789] Tainted: [L]=SOFTLOCKUP [ 597.565734][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 597.565744][T13789] Call Trace: [ 597.565751][T13789] [ 597.565759][T13789] dump_stack_lvl+0xe8/0x150 [ 597.565790][T13789] warn_alloc+0x24c/0x270 [ 597.565811][T13789] ? kasan_quarantine_put+0xbb/0x1f0 [ 597.565841][T13789] ? __pfx_warn_alloc+0x10/0x10 [ 597.565861][T13789] ? __get_vm_area_node+0x20b/0x300 [ 597.565891][T13789] ? __get_vm_area_node+0x20b/0x300 [ 597.565921][T13789] __vmalloc_node_range_noprof+0x37d/0x1730 [ 597.565954][T13789] ? is_bpf_text_address+0x26/0x2b0 [ 597.565991][T13789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 597.566022][T13789] ? is_bpf_text_address+0x26/0x2b0 [ 597.566044][T13789] ? kernel_text_address+0xa5/0xe0 [ 597.566067][T13789] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 597.566082][T13789] __vmalloc_noprof+0xd2/0x120 [ 597.566108][T13789] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 597.566129][T13789] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 597.566145][T13789] ? bpf_prog_alloc+0x2a/0x1a0 [ 597.566163][T13789] bpf_prog_alloc+0x3c/0x1a0 [ 597.566183][T13789] bpf_prog_load+0x7f8/0x1c00 [ 597.566211][T13789] ? __pfx_bpf_prog_load+0x10/0x10 [ 597.566250][T13789] __sys_bpf+0xd0d/0xd90 [ 597.566275][T13789] ? __pfx___sys_bpf+0x10/0x10 [ 597.566294][T13789] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.566316][T13789] ? rt_mutex_slowunlock+0x219/0x460 [ 597.566354][T13789] ? ksys_write+0x248/0x270 [ 597.566377][T13789] ? __pfx_ksys_write+0x10/0x10 [ 597.566401][T13789] __x64_sys_bpf+0xba/0xd0 [ 597.566424][T13789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.566442][T13789] do_syscall_64+0x174/0x580 [ 597.566460][T13789] ? trace_irq_disable+0x3b/0x140 [ 597.566484][T13789] ? clear_bhb_loop+0x40/0x90 [ 597.566506][T13789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.566523][T13789] RIP: 0033:0x7fe614b5de99 [ 597.566540][T13789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.566554][T13789] RSP: 002b:00007fe612db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.566572][T13789] RAX: ffffffffffffffda RBX: 00007fe614de5fa0 RCX: 00007fe614b5de99 [ 597.566584][T13789] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 597.566595][T13789] RBP: 00007fe612db6090 R08: 0000000000000000 R09: 0000000000000000 [ 597.566607][T13789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.566617][T13789] R13: 00007fe614de6038 R14: 00007fe614de5fa0 R15: 00007ffca03fbc68 [ 597.566646][T13789] [ 597.566654][T13789] Mem-Info: [ 597.566663][T13789] active_anon:3044 inactive_anon:8870 isolated_anon:0 [ 597.566663][T13789] active_file:24308 inactive_file:45029 isolated_file:0 [ 597.566663][T13789] unevictable:2816 dirty:173 writeback:0 [ 597.566663][T13789] slab_reclaimable:8309 slab_unreclaimable:108339 [ 597.566663][T13789] mapped:31439 shmem:7811 pagetables:1640 [ 597.566663][T13789] sec_pagetables:0 bounce:0 [ 597.566663][T13789] kernel_misc_reclaimable:0 [ 597.566663][T13789] free:1283000 free_pcp:5256 free_cma:0 [ 597.566710][T13789] Node 0 active_anon:12176kB inactive_anon:34328kB active_file:97040kB inactive_file:180116kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:125756kB dirty:692kB writeback:0kB shmem:28556kB kernel_stack:14248kB pagetables:6464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 597.566754][T13789] Node 1 active_anon:0kB inactive_anon:1152kB active_file:192kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2688kB kernel_stack:64kB pagetables:96kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 597.566795][T13789] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 597.566842][T13789] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 597.566872][T13789] Node 0 DMA32 free:1174464kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12176kB inactive_anon:34328kB active_file:97040kB inactive_file:180116kB unevictable:9728kB writepending:692kB zspages:0kB present:3129332kB managed:2560668kB mlocked:0kB bounce:0kB free_pcp:20564kB local_pcp:18360kB free_cma:0kB [ 597.566924][T13789] lowmem_reserve[]: 0 0 1 1 1 [ 597.566951][T13789] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1856kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 597.567013][T13789] lowmem_reserve[]: 0 0 0 0 0 [ 597.572616][T13789] Node 1 Normal free:3942176kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:1152kB active_file:192kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:452kB local_pcp:0kB free_cma:0kB [ 597.572670][T13789] lowmem_reserve[]: 0 0 0 0 0 [ 597.572700][T13789] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 597.572799][T13789] Node 0 DMA32: 1334*4kB (UME) 566*8kB (UME) 198*16kB (UME) 244*32kB (UME) 475*64kB (UME) 187*128kB (UME) 126*256kB (UME) 24*512kB (ME) 6*1024kB (M) 4*2048kB (M) 254*4096kB (UM) = 1174440kB [ 597.572934][T13789] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 597.573025][T13789] Node 1 Normal: 6*4kB (U) 7*8kB (UM) 7*16kB (U) 9*32kB (UM) 5*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (U) 1*2048kB (U) 961*4096kB (M) = 3942176kB [ 597.573159][T13789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 597.573173][T13789] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 597.573188][T13789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 597.573202][T13789] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 597.573216][T13789] 76996 total pagecache pages [ 597.573224][T13789] 0 pages in swap cache [ 597.573231][T13789] Free swap = 124996kB [ 597.573237][T13789] Total swap = 124996kB [ 597.573245][T13789] 2097051 pages RAM [ 597.573252][T13789] 0 pages HighMem/MovableOnly [ 597.573259][T13789] 424805 pages reserved [ 597.573265][T13789] 0 pages cma reserved [ 597.691889][ T5708] usb 7-1: USB disconnect, device number 18 [ 597.753305][ T5826] usb 3-1: selecting invalid altsetting 3 [ 597.753326][ T5826] comedi comedi5: could not set alternate setting 3 in high speed [ 597.753340][ T5826] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 597.791369][ T5826] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 598.169919][ T5826] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 598.321571][ T5826] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 598.321602][ T5826] usb 4-1: config 0 interface 0 has no altsetting 0 [ 598.324435][ T5826] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 598.324459][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 598.324475][ T5826] usb 4-1: Product: syz [ 598.324488][ T5826] usb 4-1: Manufacturer: syz [ 598.324501][ T5826] usb 4-1: SerialNumber: syz [ 598.334598][ T5826] usb 4-1: config 0 descriptor?? [ 598.378852][ T5826] usb 4-1: selecting invalid altsetting 0 [ 598.427574][ T5708] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 598.601164][ T5708] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.601200][ T5708] usb 7-1: config 0 interface 0 has no altsetting 0 [ 598.686997][ T5826] usb 4-1: USB disconnect, device number 42 [ 598.724554][ T5708] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 598.724580][ T5708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.724598][ T5708] usb 7-1: Product: syz [ 598.724611][ T5708] usb 7-1: Manufacturer: syz [ 598.724623][ T5708] usb 7-1: SerialNumber: syz [ 598.784086][ T5708] usb 7-1: config 0 descriptor?? [ 598.830302][ T5708] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 598.841035][ T5586] usb 3-1: USB disconnect, device number 23 [ 600.353912][ T5708] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 600.397801][ T5708] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 600.397972][ T5708] usb 7-1: media controller created [ 601.097636][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 601.392921][ T5586] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 601.843675][T13816] __nla_validate_parse: 15 callbacks suppressed [ 601.843740][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2794'. [ 602.338409][ T5586] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 602.338438][ T5586] usb 2-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 602.338456][ T5586] usb 2-1: Product: syz [ 602.338468][ T5586] usb 2-1: Manufacturer: syz [ 602.338481][ T5586] usb 2-1: SerialNumber: syz [ 602.363784][ T5586] usb 2-1: config 0 descriptor?? [ 602.473161][T13685] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.522063][ T5708] DVB: Unable to find symbol tda10046_attach() [ 602.522130][ T5708] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 602.522178][ T5708] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 602.522501][ T5708] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 602.525348][ T5586] usb 2-1: selecting invalid altsetting 3 [ 602.525360][ T5586] comedi comedi5: could not set alternate setting 3 in high speed [ 602.525368][ T5586] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 602.531051][ T5708] usb 7-1: USB disconnect, device number 19 [ 602.536925][ T5586] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 603.087805][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 603.250861][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 603.250890][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 603.250911][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 603.250932][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 603.253319][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 603.253343][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.253361][ T10] usb 3-1: Product: syz [ 603.253374][ T10] usb 3-1: Manufacturer: syz [ 603.253387][ T10] usb 3-1: SerialNumber: syz [ 603.272126][ T10] usb 3-1: config 0 descriptor?? [ 603.337561][ T5708] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 605.156529][ T5708] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 605.156559][ T5708] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 605.156577][ T5708] usb 7-1: Product: syz [ 605.156589][ T5708] usb 7-1: SerialNumber: syz [ 605.212973][ T5832] usb 2-1: USB disconnect, device number 20 [ 605.219582][ T10] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 605.235573][ T5708] usb 7-1: config 0 descriptor?? [ 605.852559][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'. [ 607.144804][T13685] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.317622][T12901] usb 3-1: USB disconnect, device number 24 [ 607.366192][ T5708] usb 7-1: USB disconnect, device number 20 [ 607.644566][T13846] FAULT_INJECTION: forcing a failure. [ 607.644566][T13846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.644597][T13846] CPU: 1 UID: 0 PID: 13846 Comm: syz.1.2803 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 607.644622][T13846] Tainted: [L]=SOFTLOCKUP [ 607.644628][T13846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 607.644639][T13846] Call Trace: [ 607.644646][T13846] [ 607.644654][T13846] dump_stack_lvl+0xe8/0x150 [ 607.644687][T13846] should_fail_ex+0x467/0x600 [ 607.644717][T13846] _copy_from_user+0x2d/0xb0 [ 607.644738][T13846] video_usercopy+0x359/0x1430 [ 607.644861][T13846] ? smk_tskacc+0x2fb/0x370 [ 607.644886][T13846] ? __pfx___video_do_ioctl+0x10/0x10 [ 607.644911][T13846] ? __pfx_video_usercopy+0x10/0x10 [ 607.644936][T13846] ? smack_file_ioctl+0x2c2/0x360 [ 607.644976][T13846] ? __fget_files+0x2a/0x420 [ 607.644993][T13846] ? __fget_files+0x3a8/0x420 [ 607.645012][T13846] v4l2_ioctl+0x190/0x1e0 [ 607.645034][T13846] ? __pfx_v4l2_ioctl+0x10/0x10 [ 607.645054][T13846] __se_sys_ioctl+0xff/0x170 [ 607.645075][T13846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.645095][T13846] do_syscall_64+0x174/0x580 [ 607.645114][T13846] ? trace_irq_disable+0x3b/0x140 [ 607.645139][T13846] ? clear_bhb_loop+0x40/0x90 [ 607.645160][T13846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.645177][T13846] RIP: 0033:0x7fb3e325de99 [ 607.645194][T13846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.645209][T13846] RSP: 002b:00007fb3e14b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.645228][T13846] RAX: ffffffffffffffda RBX: 00007fb3e34e5fa0 RCX: 00007fb3e325de99 [ 607.645242][T13846] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 607.645253][T13846] RBP: 00007fb3e14b6090 R08: 0000000000000000 R09: 0000000000000000 [ 607.645264][T13846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.645274][T13846] R13: 00007fb3e34e6038 R14: 00007fb3e34e5fa0 R15: 00007ffc98397648 [ 607.645300][T13846] [ 609.344284][T13685] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.497504][T13861] FAULT_INJECTION: forcing a failure. [ 609.497504][T13861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.497534][T13861] CPU: 0 UID: 0 PID: 13861 Comm: syz.6.2808 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 609.497553][T13861] Tainted: [L]=SOFTLOCKUP [ 609.497558][T13861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 609.497566][T13861] Call Trace: [ 609.497572][T13861] [ 609.497579][T13861] dump_stack_lvl+0xe8/0x150 [ 609.497605][T13861] should_fail_ex+0x467/0x600 [ 609.497630][T13861] _copy_from_user+0x2d/0xb0 [ 609.497645][T13861] video_usercopy+0x359/0x1430 [ 609.497667][T13861] ? smk_tskacc+0x2fb/0x370 [ 609.497685][T13861] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 609.497773][T13861] ? __pfx_video_usercopy+0x10/0x10 [ 609.497789][T13861] ? smack_file_ioctl+0x2c2/0x360 [ 609.497822][T13861] ? __fget_files+0x2a/0x420 [ 609.497836][T13861] ? __fget_files+0x3a8/0x420 [ 609.497853][T13861] v4l2_ioctl+0x190/0x1e0 [ 609.497872][T13861] ? __pfx_v4l2_ioctl+0x10/0x10 [ 609.497889][T13861] __se_sys_ioctl+0xff/0x170 [ 609.497905][T13861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.497920][T13861] do_syscall_64+0x174/0x580 [ 609.497935][T13861] ? trace_irq_disable+0x3b/0x140 [ 609.497954][T13861] ? clear_bhb_loop+0x40/0x90 [ 609.497971][T13861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.497984][T13861] RIP: 0033:0x7f5867e4de99 [ 609.497998][T13861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.498009][T13861] RSP: 002b:00007f58660a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.498025][T13861] RAX: ffffffffffffffda RBX: 00007f58680d5fa0 RCX: 00007f5867e4de99 [ 609.498035][T13861] RDX: 0000200000000040 RSI: 00000000c040563d RDI: 0000000000000003 [ 609.498044][T13861] RBP: 00007f58660a6090 R08: 0000000000000000 R09: 0000000000000000 [ 609.498054][T13861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.498062][T13861] R13: 00007f58680d6038 R14: 00007f58680d5fa0 R15: 00007ffc1d7d1b78 [ 609.498084][T13861] [ 609.661862][ T5708] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 609.908592][ T5708] usb 4-1: Using ep0 maxpacket: 32 [ 609.910578][ T5708] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 609.910600][ T5708] usb 4-1: config 0 has no interface number 0 [ 609.913125][ T5708] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 609.913150][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.913166][ T5708] usb 4-1: Product: syz [ 609.913176][ T5708] usb 4-1: Manufacturer: syz [ 609.913183][ T5708] usb 4-1: SerialNumber: syz [ 609.931492][ T5708] usb 4-1: config 0 descriptor?? [ 610.153303][T13685] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.373788][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2810'. [ 611.543948][ T5708] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 611.543979][ T5708] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 611.544467][ T5708] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 611.544755][ T5708] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 611.568212][ T5708] usb 4-1: USB disconnect, device number 43 [ 611.640712][T13871] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2812'. [ 612.240500][ T5708] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 613.033639][ T5708] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 613.033669][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 613.043424][ T5708] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 613.043452][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 613.043470][ T5708] usb 3-1: Product: syz [ 613.043484][ T5708] usb 3-1: Manufacturer: syz [ 613.043496][ T5708] usb 3-1: SerialNumber: syz [ 613.116969][ T5708] usb 3-1: config 0 descriptor?? [ 613.204074][ T5708] usb 3-1: selecting invalid altsetting 0 [ 614.813327][ T5708] usb 3-1: USB disconnect, device number 25 [ 614.859614][T13890] kthread_run failed with err -4 [ 615.104221][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 615.306969][T13905] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2822'. [ 615.837490][ T5708] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 615.994861][ T5708] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 615.994889][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.994907][ T5708] usb 3-1: Product: syz [ 615.994920][ T5708] usb 3-1: Manufacturer: syz [ 615.994934][ T5708] usb 3-1: SerialNumber: syz [ 617.326670][T13916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.329636][ T5708] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 617.329770][ T5708] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 618.101967][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2830'. [ 618.340035][T13916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.573606][T13685] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 618.795997][T13685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 619.479819][T13685] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 619.674344][T13685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 619.719140][T13685] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 619.750670][T13685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 619.752767][T13685] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 619.823608][T13685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 620.129307][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2831'. [ 621.312825][ T5708] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 621.312879][ T5708] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 621.359330][ T5708] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 621.503028][ T5708] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 621.607512][ T5708] usb 3-1: USB disconnect, device number 26 [ 621.731016][T13959] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2837'. [ 622.141685][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 622.159230][T13969] NILFS (nullb0): couldn't find nilfs on the device [ 622.704522][T13964] FAULT_INJECTION: forcing a failure. [ 622.704522][T13964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.704555][T13964] CPU: 0 UID: 0 PID: 13964 Comm: syz.3.2839 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 622.704578][T13964] Tainted: [L]=SOFTLOCKUP [ 622.704584][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 622.704595][T13964] Call Trace: [ 622.704602][T13964] [ 622.704610][T13964] dump_stack_lvl+0xe8/0x150 [ 622.704640][T13964] should_fail_ex+0x467/0x600 [ 622.704669][T13964] _copy_to_iter+0x59c/0x1810 [ 622.704725][T13964] ? __pfx__copy_to_iter+0x10/0x10 [ 622.704750][T13964] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 622.704770][T13964] ? lockdep_hardirqs_on+0x7a/0x110 [ 622.704790][T13964] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 622.704809][T13964] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 622.704840][T13964] __skb_datagram_iter+0x419/0x980 [ 622.704865][T13964] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 622.704894][T13964] skb_copy_datagram_iter+0xb5/0x240 [ 622.704917][T13964] virtio_transport_stream_dequeue+0x203/0xb90 [ 622.705025][T13964] ? virtio_transport_stream_dequeue+0xdb/0xb90 [ 622.705056][T13964] ? __pfx_virtio_transport_stream_dequeue+0x10/0x10 [ 622.705082][T13964] ? vsock_connectible_wait_data+0x4d1/0x510 [ 622.705148][T13964] __vsock_connectible_recvmsg+0x844/0xc30 [ 622.705187][T13964] ? __pfx___vsock_connectible_recvmsg+0x10/0x10 [ 622.705226][T13964] ? __pfx_autoremove_wake_function+0x10/0x10 [ 622.705288][T13964] ? vsock_connectible_recvmsg+0xb7/0xe0 [ 622.705314][T13964] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 622.705340][T13964] sock_recvmsg+0x196/0x1e0 [ 622.705370][T13964] ____sys_recvmsg+0x1f2/0x4b0 [ 622.705390][T13964] ? iovec_from_user+0x87/0x250 [ 622.705417][T13964] ? __pfx_____sys_recvmsg+0x10/0x10 [ 622.705454][T13964] ? import_iovec+0x73/0xa0 [ 622.705476][T13964] ___sys_recvmsg+0x213/0x5a0 [ 622.705503][T13964] ? __pfx____sys_recvmsg+0x10/0x10 [ 622.705528][T13964] ? __fget_files+0x2a/0x420 [ 622.705563][T13964] ? __fget_files+0x3a8/0x420 [ 622.705591][T13964] do_recvmmsg+0x320/0x7f0 [ 622.705619][T13964] ? __pfx_do_recvmmsg+0x10/0x10 [ 622.705640][T13964] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 622.705670][T13964] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 622.705710][T13964] __x64_sys_recvmmsg+0x198/0x250 [ 622.705733][T13964] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 622.705763][T13964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.705784][T13964] do_syscall_64+0x174/0x580 [ 622.705802][T13964] ? trace_irq_disable+0x3b/0x140 [ 622.705828][T13964] ? clear_bhb_loop+0x40/0x90 [ 622.705850][T13964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.705867][T13964] RIP: 0033:0x7fe614b5de99 [ 622.705884][T13964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.705898][T13964] RSP: 002b:00007fe612db6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 622.705917][T13964] RAX: ffffffffffffffda RBX: 00007fe614de5fa0 RCX: 00007fe614b5de99 [ 622.705929][T13964] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 622.705941][T13964] RBP: 00007fe612db6090 R08: 0000000000000000 R09: 0000000000000000 [ 622.705952][T13964] R10: 0000000000004002 R11: 0000000000000246 R12: 0000000000000001 [ 622.705962][T13964] R13: 00007fe614de6038 R14: 00007fe614de5fa0 R15: 00007ffca03fbc68 [ 622.705997][T13964] [ 622.853895][T13685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.279886][T13685] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.291306][ T508] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.406185][ T508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.461282][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2840'. [ 624.129305][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.129447][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.227258][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.773269][T13685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.863154][T14001] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 627.664829][T14026] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2850'. [ 627.849275][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'. [ 627.975204][T14020] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 628.523916][T14038] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 628.523945][T14038] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 628.523993][T14038] overlayfs: conflicting lowerdir path [ 628.793605][T13685] veth0_vlan: entered promiscuous mode [ 628.816633][T13685] veth1_vlan: entered promiscuous mode [ 628.889306][T13685] veth0_macvtap: entered promiscuous mode [ 628.895345][T13685] veth1_macvtap: entered promiscuous mode [ 628.968399][T13685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.691867][T13685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.713004][ T3541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.713466][ T3541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.713503][ T3541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.713536][ T3541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.221132][ T10] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 630.502384][ T10] usb 4-1: config 0 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 630.502413][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 630.511857][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 630.511882][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 630.511901][ T10] usb 4-1: Product: syz [ 630.511914][ T10] usb 4-1: Manufacturer: syz [ 630.511928][ T10] usb 4-1: SerialNumber: syz [ 630.730620][ T10] usb 4-1: config 0 descriptor?? [ 630.760314][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.760333][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.051523][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.051542][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.072991][T14069] FAULT_INJECTION: forcing a failure. [ 631.072991][T14069] name failslab, interval 1, probability 0, space 0, times 0 [ 631.073023][T14069] CPU: 0 UID: 0 PID: 14069 Comm: syz.6.2866 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 631.073047][T14069] Tainted: [L]=SOFTLOCKUP [ 631.073054][T14069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 631.073064][T14069] Call Trace: [ 631.073072][T14069] [ 631.073079][T14069] dump_stack_lvl+0xe8/0x150 [ 631.073119][T14069] should_fail_ex+0x467/0x600 [ 631.073150][T14069] should_failslab+0xa8/0x100 [ 631.073172][T14069] __kmalloc_node_track_caller_noprof+0x102/0x7c0 [ 631.073193][T14069] ? simple_xattr_set+0xc8/0x2820 [ 631.073213][T14069] ? simple_xattr_set+0xc8/0x2820 [ 631.073241][T14069] kstrdup+0x42/0x100 [ 631.073265][T14069] simple_xattr_set+0xc8/0x2820 [ 631.073299][T14069] simple_xattr_set_limited+0x11d/0x230 [ 631.073326][T14069] sockfs_user_xattr_set+0x5a/0x70 [ 631.073352][T14069] ? __pfx_sockfs_user_xattr_set+0x10/0x10 [ 631.073375][T14069] __vfs_setxattr+0x442/0x480 [ 631.073405][T14069] __vfs_setxattr_noperm+0x12a/0x660 [ 631.073429][T14069] vfs_setxattr+0x163/0x360 [ 631.073453][T14069] ? __pfx_vfs_setxattr+0x10/0x10 [ 631.073474][T14069] ? mnt_want_write_file+0x17e/0x210 [ 631.073499][T14069] file_setxattr+0x1d9/0x2b0 [ 631.073520][T14069] path_setxattrat+0x3cc/0x450 [ 631.073554][T14069] ? __pfx_path_setxattrat+0x10/0x10 [ 631.073599][T14069] ? ksys_write+0x248/0x270 [ 631.073621][T14069] ? __pfx_ksys_write+0x10/0x10 [ 631.073646][T14069] __x64_sys_fsetxattr+0xbc/0xe0 [ 631.073665][T14069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.073685][T14069] do_syscall_64+0x174/0x580 [ 631.073703][T14069] ? trace_irq_disable+0x3b/0x140 [ 631.073728][T14069] ? clear_bhb_loop+0x40/0x90 [ 631.073749][T14069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.073766][T14069] RIP: 0033:0x7f5867e4de99 [ 631.073783][T14069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.073798][T14069] RSP: 002b:00007f58660a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 631.073818][T14069] RAX: ffffffffffffffda RBX: 00007f58680d5fa0 RCX: 00007f5867e4de99 [ 631.073830][T14069] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 631.073842][T14069] RBP: 00007f58660a6090 R08: 0000000000000002 R09: 0000000000000000 [ 631.073853][T14069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.073864][T14069] R13: 00007f58680d6038 R14: 00007f58680d5fa0 R15: 00007ffc1d7d1b78 [ 631.073894][T14069] [ 631.294142][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 631.305720][ T10] usb 4-1: USB disconnect, device number 44 [ 631.416070][T14072] F2FS-fs: Conflicting test_dummy_encryption options [ 631.429999][T11343] udevd[11343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 634.178687][T14087] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2873'. [ 634.354287][T14093] comedi comedi3: aio_iiro_16: I/O port conflict (0x100,8) [ 634.528076][ T821] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 634.547483][ T5735] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 634.908328][ T5735] usb 3-1: too many configurations: 37, using maximum allowed: 8 [ 634.982128][ T5735] usb 3-1: config index 0 descriptor too short (expected 72, got 36) [ 635.004432][ T5735] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 635.153907][ T5735] usb 3-1: config index 1 descriptor too short (expected 72, got 36) [ 635.153959][ T5735] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 635.316683][ T5735] usb 3-1: config index 2 descriptor too short (expected 72, got 36) [ 635.316745][ T5735] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 635.318413][ T821] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 635.318510][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.318529][ T821] usb 5-1: Product: syz [ 635.318541][ T821] usb 5-1: Manufacturer: syz [ 635.318554][ T821] usb 5-1: SerialNumber: syz [ 635.320516][ T5735] usb 3-1: config index 3 descriptor too short (expected 72, got 36) [ 635.320565][ T5735] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 635.336506][ T5735] usb 3-1: config index 4 descriptor too short (expected 72, got 36) [ 635.337248][ T5735] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 635.339474][ T821] usb 5-1: config 0 descriptor?? [ 635.483083][ T5735] usb 3-1: config index 5 descriptor too short (expected 72, got 36) [ 635.483140][ T5735] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 635.511007][ T5735] usb 3-1: config index 6 descriptor too short (expected 72, got 36) [ 635.511071][ T5735] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 635.544762][ T5735] usb 3-1: config index 7 descriptor too short (expected 72, got 36) [ 635.544814][ T5735] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 635.554370][ T5735] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 635.554385][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.554395][ T5735] usb 3-1: Product: syz [ 635.554402][ T5735] usb 3-1: Manufacturer: syz [ 635.554409][ T5735] usb 3-1: SerialNumber: syz [ 635.642359][ T821] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 636.044500][ T821] gspca_stk1135: reg_w 0x0 err -71 [ 636.045664][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 636.045676][ T821] gspca_stk1135: Sensor write failed [ 636.045704][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 636.045713][ T821] gspca_stk1135: Sensor write failed [ 636.045790][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 636.045800][ T821] gspca_stk1135: Sensor read failed [ 636.045823][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 636.045832][ T821] gspca_stk1135: Sensor read failed [ 636.045838][ T821] gspca_stk1135: Detected sensor type unknown (0x0) [ 636.045866][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 636.045875][ T821] gspca_stk1135: Sensor read failed [ 636.045899][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 636.045908][ T821] gspca_stk1135: Sensor read failed [ 636.045930][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 636.045939][ T821] gspca_stk1135: Sensor write failed [ 636.056816][ T821] gspca_stk1135: serial bus timeout: status=0x00 [ 636.056830][ T821] gspca_stk1135: Sensor write failed [ 636.056913][ T821] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 636.154520][ T821] usb 5-1: USB disconnect, device number 52 [ 636.327499][T12901] usb 3-1: USB disconnect, device number 27 [ 636.558178][T14133] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 636.590711][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2885'. [ 636.590734][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2885'. [ 636.603971][T14133] bond1 (unregistering): Released all slaves [ 636.987598][ T5734] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 637.129387][T14147] FAULT_INJECTION: forcing a failure. [ 637.129387][T14147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.129650][T14147] CPU: 0 UID: 0 PID: 14147 Comm: syz.6.2888 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 637.129673][T14147] Tainted: [L]=SOFTLOCKUP [ 637.129678][T14147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 637.129686][T14147] Call Trace: [ 637.129692][T14147] [ 637.129698][T14147] dump_stack_lvl+0xe8/0x150 [ 637.129723][T14147] should_fail_ex+0x467/0x600 [ 637.129746][T14147] _copy_from_user+0x2d/0xb0 [ 637.129762][T14147] cec_ioctl+0xa7a/0x3060 [ 637.129846][T14147] ? local_clock_noinstr+0xb0/0xe0 [ 637.129863][T14147] ? kvm_sched_clock_read+0x11/0x20 [ 637.129876][T14147] ? __pfx_cec_ioctl+0x10/0x10 [ 637.129888][T14147] ? sched_clock_cpu+0x74/0x440 [ 637.129904][T14147] ? do_raw_spin_lock+0x26c/0x2f0 [ 637.129920][T14147] ? raw_spin_rq_lock_nested+0xb2/0x160 [ 637.129968][T14147] ? arch_scale_cpu_capacity+0x18/0xb0 [ 637.130014][T14147] ? rcu_is_watching+0x15/0xb0 [ 637.130030][T14147] ? trace_sched_exit_tp+0x3a/0x130 [ 637.130044][T14147] ? __schedule+0x16f2/0x5500 [ 637.130092][T14147] ? irqentry_exit+0x218/0x8f0 [ 637.130106][T14147] ? lockdep_hardirqs_on+0x7a/0x110 [ 637.130119][T14147] ? irqentry_exit+0x218/0x8f0 [ 637.130131][T14147] ? trace_irq_disable+0x3b/0x140 [ 637.130156][T14147] ? __pfx_cec_ioctl+0x10/0x10 [ 637.130169][T14147] ? __pfx_cec_ioctl+0x10/0x10 [ 637.130183][T14147] ? __se_sys_ioctl+0xed/0x170 [ 637.130202][T14147] ? __pfx_cec_ioctl+0x10/0x10 [ 637.130215][T14147] __se_sys_ioctl+0xff/0x170 [ 637.130231][T14147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.130246][T14147] do_syscall_64+0x174/0x580 [ 637.130261][T14147] ? clear_bhb_loop+0x40/0x90 [ 637.130279][T14147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.130295][T14147] RIP: 0033:0x7f5867e4de99 [ 637.130309][T14147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.130321][T14147] RSP: 002b:00007f5866085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.130336][T14147] RAX: ffffffffffffffda RBX: 00007f58680d6090 RCX: 00007f5867e4de99 [ 637.130346][T14147] RDX: 0000200000000040 RSI: 00000000c05c6104 RDI: 0000000000000004 [ 637.130356][T14147] RBP: 00007f5866085090 R08: 0000000000000000 R09: 0000000000000000 [ 637.130365][T14147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.130373][T14147] R13: 00007f58680d6128 R14: 00007f58680d6090 R15: 00007ffc1d7d1b78 [ 637.130395][T14147] [ 637.259093][T12901] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 637.592273][ T5734] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 637.592304][ T5734] usb 5-1: config 0 interface 0 has no altsetting 0 [ 637.648911][ T5734] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 637.648940][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 637.648957][ T5734] usb 5-1: Product: syz [ 637.648970][ T5734] usb 5-1: Manufacturer: syz [ 637.648982][ T5734] usb 5-1: SerialNumber: syz [ 637.654904][ T5734] usb 5-1: config 0 descriptor?? [ 637.716806][ T5734] usb 5-1: selecting invalid altsetting 0 [ 637.730705][T12901] usb 2-1: Using ep0 maxpacket: 8 [ 637.998077][T12901] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 637.998104][T12901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.998122][T12901] usb 2-1: Product: syz [ 637.998135][T12901] usb 2-1: Manufacturer: syz [ 637.998148][T12901] usb 2-1: SerialNumber: syz [ 638.047505][T12901] usb 2-1: config 0 descriptor?? [ 638.075031][T12901] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 638.138647][ T5734] usb 5-1: USB disconnect, device number 53 [ 638.369161][ T5736] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 638.580100][T12901] gspca_sonixj: reg_w1 err -110 [ 638.581925][T12901] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 638.790348][ T5736] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 638.790378][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.790394][ T5736] usb 3-1: Product: syz [ 638.790407][ T5736] usb 3-1: Manufacturer: syz [ 638.790420][ T5736] usb 3-1: SerialNumber: syz [ 639.381912][ T5736] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 639.381972][ T5736] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 639.459703][ T5733] usb 2-1: USB disconnect, device number 21 [ 640.837005][ T5736] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 640.853068][ T5736] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 640.997498][ T821] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 641.123303][ T5736] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 641.123352][ T5736] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 641.124028][ T5736] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 641.168070][ T821] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 641.168096][ T821] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 641.168114][ T821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 641.168160][ T821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 641.168182][ T821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 641.170000][ T821] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 641.170023][ T821] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 641.170048][ T821] usb 4-1: Product: syz [ 641.170059][ T821] usb 4-1: Manufacturer: syz [ 641.274533][ T821] cdc_wdm 4-1:1.0: skipping garbage [ 641.274553][ T821] cdc_wdm 4-1:1.0: skipping garbage [ 641.361295][T14061] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 641.389263][ T5736] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 641.413313][ T821] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 641.413362][ T821] cdc_wdm 4-1:1.0: Unknown control protocol [ 641.457616][T14172] syz.6.2893 (14172) used greatest stack depth: 17824 bytes left [ 641.528509][T14061] usb 2-1: Using ep0 maxpacket: 32 [ 641.530989][T14061] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 641.531022][T14061] usb 2-1: config 0 has no interface number 0 [ 641.531065][T14061] usb 2-1: config 0 interface 12 has no altsetting 0 [ 641.535017][T14061] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 641.535041][T14061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.535058][T14061] usb 2-1: Product: syz [ 641.535071][T14061] usb 2-1: Manufacturer: syz [ 641.535083][T14061] usb 2-1: SerialNumber: syz [ 641.535099][ T5736] usb 3-1: USB disconnect, device number 28 [ 641.599562][T14061] usb 2-1: config 0 descriptor?? [ 641.844299][T14187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.845043][T14187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.026574][T14061] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 642.026815][T14061] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 642.026840][T14061] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 642.026923][T14061] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 642.183764][T14061] usb 2-1: USB disconnect, device number 22 [ 642.185281][T14192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2900'. [ 642.306169][T14195] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) ! [ 642.350450][ T5586] usb 4-1: USB disconnect, device number 45 [ 642.457741][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'. [ 642.953516][T14215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2906'. [ 642.982080][T14215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2906'. [ 643.167830][T14219] kAFS: unparsable volume name [ 643.498240][ T5736] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 643.659945][ T5736] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 643.659971][ T5736] usb 5-1: config 0 has no interface number 0 [ 643.660012][ T5736] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 643.660035][ T5736] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 643.660057][ T5736] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 643.660091][ T5736] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 643.660112][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.743958][ T5736] usb 5-1: config 0 descriptor?? [ 643.772563][ T5736] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input9 [ 644.225615][ T5832] usb 5-1: USB disconnect, device number 54 [ 644.303913][T14241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2917'. [ 644.656959][T14252] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2921'. [ 648.729181][T14294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2935'. [ 650.262730][T14315] ./file0: Can't open blockdev [ 650.327443][T14061] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 650.484359][T14321] FAULT_INJECTION: forcing a failure. [ 650.484359][T14321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.484392][T14321] CPU: 1 UID: 0 PID: 14321 Comm: syz.3.2946 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 650.484417][T14321] Tainted: [L]=SOFTLOCKUP [ 650.484424][T14321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 650.484434][T14321] Call Trace: [ 650.484441][T14321] [ 650.484450][T14321] dump_stack_lvl+0xe8/0x150 [ 650.484481][T14321] should_fail_ex+0x467/0x600 [ 650.484512][T14321] _copy_from_user+0x2d/0xb0 [ 650.484532][T14321] ___sys_recvmsg+0x173/0x5a0 [ 650.484560][T14321] ? __pfx____sys_recvmsg+0x10/0x10 [ 650.484584][T14321] ? __fget_files+0x2a/0x420 [ 650.484631][T14321] do_recvmmsg+0x320/0x7f0 [ 650.484658][T14321] ? __pfx_do_recvmmsg+0x10/0x10 [ 650.484677][T14321] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 650.484705][T14321] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 650.484739][T14321] __x64_sys_recvmmsg+0x198/0x250 [ 650.484762][T14321] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 650.484790][T14321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.484810][T14321] do_syscall_64+0x174/0x580 [ 650.484829][T14321] ? trace_irq_disable+0x3b/0x140 [ 650.484856][T14321] ? clear_bhb_loop+0x40/0x90 [ 650.484885][T14321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.484904][T14321] RIP: 0033:0x7fe614b5de99 [ 650.484921][T14321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.484936][T14321] RSP: 002b:00007fe612db6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 650.484955][T14321] RAX: ffffffffffffffda RBX: 00007fe614de5fa0 RCX: 00007fe614b5de99 [ 650.484968][T14321] RDX: 040000000000026c RSI: 00002000000005c0 RDI: 0000000000000004 [ 650.484979][T14321] RBP: 00007fe612db6090 R08: 0000000000000000 R09: 0000000000000000 [ 650.484991][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.485002][T14321] R13: 00007fe614de6038 R14: 00007fe614de5fa0 R15: 00007ffca03fbc68 [ 650.485032][T14321] [ 650.504620][T14061] usb 3-1: unable to get BOS descriptor or descriptor too short [ 650.507659][T14061] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 650.519340][T14061] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 650.519365][T14061] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.519383][T14061] usb 3-1: Product: syz [ 650.519396][T14061] usb 3-1: Manufacturer: syz [ 650.519409][T14061] usb 3-1: SerialNumber: syz [ 650.792702][ T37] kauditd_printk_skb: 115 callbacks suppressed [ 650.792719][ T37] audit: type=1326 audit(1784899804.982:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14307 comm="syz.2.2939" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbbfede99 code=0x7ffc0000 [ 650.794649][ T37] audit: type=1326 audit(1784899804.982:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14307 comm="syz.2.2939" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbbfede99 code=0x7ffc0000 [ 650.798079][ T37] audit: type=1326 audit(1784899804.982:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14307 comm="syz.2.2939" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbbfede99 code=0x7ffc0000 [ 650.798439][ T37] audit: type=1326 audit(1784899804.992:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14307 comm="syz.2.2939" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbbfede99 code=0x7ffc0000 [ 650.805493][ T37] audit: type=1326 audit(1784899804.992:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14307 comm="syz.2.2939" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fbbfae6ce code=0x7ffc0000 [ 650.805808][ T37] audit: type=1326 audit(1784899804.992:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14307 comm="syz.2.2939" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbbfede99 code=0x7ffc0000 [ 650.807094][ T37] audit: type=1326 audit(1784899804.992:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14307 comm="syz.2.2939" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbbfede99 code=0x7ffc0000 [ 650.809031][ T37] audit: type=1326 audit(1784899805.002:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14307 comm="syz.2.2939" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbbfede99 code=0x7ffc0000 [ 650.810649][ T37] audit: type=1326 audit(1784899805.002:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14307 comm="syz.2.2939" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbbfede99 code=0x7ffc0000 [ 650.811982][ T37] audit: type=1326 audit(1784899805.002:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14307 comm="syz.2.2939" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fbbfae6ce code=0x7ffc0000 [ 651.629925][T14061] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 651.630505][T14061] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 651.778537][T14061] usb 3-1: USB disconnect, device number 29 [ 651.814348][T14334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.437506][T14061] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 652.590355][T14061] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 652.590423][T14061] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 652.590447][T14061] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.597196][T14061] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 652.597222][T14061] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 652.597241][T14061] usb 4-1: Product: syz [ 652.597253][T14061] usb 4-1: Manufacturer: syz [ 652.597266][T14061] usb 4-1: SerialNumber: syz [ 652.627694][T14061] usb 4-1: config 0 descriptor?? [ 653.022890][T14061] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 653.035450][T14061] usb 4-1: USB disconnect, device number 46 [ 653.099062][ T5832] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 653.148125][T11343] udevd[11343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.401361][T14365] FAULT_INJECTION: forcing a failure. [ 653.401361][T14365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.401394][T14365] CPU: 1 UID: 0 PID: 14365 Comm: syz.1.2963 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 653.401421][T14365] Tainted: [L]=SOFTLOCKUP [ 653.401428][T14365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 653.401438][T14365] Call Trace: [ 653.401446][T14365] [ 653.401454][T14365] dump_stack_lvl+0xe8/0x150 [ 653.401486][T14365] should_fail_ex+0x467/0x600 [ 653.401528][T14365] _copy_to_user+0x31/0xb0 [ 653.401551][T14365] simple_read_from_buffer+0xe1/0x170 [ 653.401575][T14365] proc_fail_nth_read+0x1be/0x230 [ 653.401598][T14365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 653.401620][T14365] ? rw_verify_area+0x250/0x4d0 [ 653.401643][T14365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 653.401660][T14365] vfs_read+0x219/0xa90 [ 653.401689][T14365] ? __pfx_vfs_read+0x10/0x10 [ 653.401712][T14365] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 653.401732][T14365] ? lockdep_hardirqs_on+0x7a/0x110 [ 653.401751][T14365] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 653.401769][T14365] ? mutex_lock_nested+0x152/0x1d0 [ 653.401798][T14365] ? fdget_pos+0x252/0x320 [ 653.401824][T14365] ksys_read+0x156/0x270 [ 653.401848][T14365] ? __pfx_ksys_read+0x10/0x10 [ 653.401877][T14365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.401897][T14365] do_syscall_64+0x174/0x580 [ 653.401916][T14365] ? trace_irq_disable+0x3b/0x140 [ 653.401942][T14365] ? clear_bhb_loop+0x40/0x90 [ 653.401964][T14365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.401982][T14365] RIP: 0033:0x7fb3e321e6ce [ 653.401999][T14365] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 653.402014][T14365] RSP: 002b:00007fb3e14b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 653.402034][T14365] RAX: ffffffffffffffda RBX: 00007fb3e14b66c0 RCX: 00007fb3e321e6ce [ 653.402048][T14365] RDX: 000000000000000f RSI: 00007fb3e14b60a0 RDI: 0000000000000007 [ 653.402060][T14365] RBP: 00007fb3e14b6090 R08: 0000000000000000 R09: 0000000000000000 [ 653.402072][T14365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.402083][T14365] R13: 00007fb3e34e6038 R14: 00007fb3e34e5fa0 R15: 00007ffc98397648 [ 653.402114][T14365] [ 653.438356][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 654.370192][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.370234][ T5832] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 654.370255][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.419620][ T5832] usb 3-1: config 0 descriptor?? [ 654.434930][ T5832] uvcvideo 3-1:0.0: Found UVC 0.00 device (10c4:ea90) [ 654.434961][ T5832] uvcvideo 3-1:0.0: No valid video chain found. [ 654.657595][ T5736] usb 3-1: USB disconnect, device number 30 [ 655.049631][T14374] netlink: 'syz.3.2967': attribute type 1 has an invalid length. [ 655.199887][T14374] bond1: entered promiscuous mode [ 655.200847][T14374] bond1: entered allmulticast mode [ 655.201737][T14374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 655.600763][T14370] syz.6.2964 (14370) used greatest stack depth: 17216 bytes left [ 656.297427][T12901] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 657.243405][T12901] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 657.243473][T12901] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.243498][T12901] usb 3-1: config 0 interface 0 has no altsetting 0 [ 657.257229][T12901] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 657.257254][T12901] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 657.257273][T12901] usb 3-1: Product: syz [ 657.257286][T12901] usb 3-1: Manufacturer: syz [ 657.257299][T12901] usb 3-1: SerialNumber: syz [ 657.306645][T12901] usb 3-1: config 0 descriptor?? [ 657.484168][T14411] IPv6: NLM_F_CREATE should be specified when creating new route [ 657.632001][T12901] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 657.640627][T12901] usb 3-1: USB disconnect, device number 31 [ 657.683508][T11343] udevd[11343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.232191][T14438] Bluetooth: hci0: invalid len left 7, exp >= 18 [ 659.387466][T14061] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 659.527526][T14061] usb 7-1: device descriptor read/64, error -71 [ 659.687473][ T821] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 659.767485][T14061] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 659.838614][ T821] usb 2-1: Using ep0 maxpacket: 16 [ 659.840910][ T821] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 659.840952][ T821] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 659.840973][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.849786][ T821] usb 2-1: config 0 descriptor?? [ 659.898867][T14061] usb 7-1: device descriptor read/64, error -71 [ 660.008127][T14061] usb usb7-port1: attempt power cycle [ 660.357444][T14061] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 660.378157][T14061] usb 7-1: device descriptor read/8, error -71 [ 660.513715][ T821] usbhid 2-1:0.0: can't add hid device: -71 [ 660.513879][ T821] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 660.520334][ T5832] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 660.521227][ T821] usb 2-1: USB disconnect, device number 23 [ 660.539192][T12901] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 660.617531][T14061] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 660.650583][T14061] usb 7-1: device descriptor read/8, error -71 [ 660.671018][ T5832] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 660.671065][ T5832] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.671091][ T5832] usb 4-1: config 0 interface 0 has no altsetting 0 [ 660.674207][ T5832] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 660.674232][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 660.674250][ T5832] usb 4-1: Product: syz [ 660.674261][ T5832] usb 4-1: Manufacturer: syz [ 660.674268][ T5832] usb 4-1: SerialNumber: syz [ 660.707022][ T5832] usb 4-1: config 0 descriptor?? [ 660.707707][T12901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 660.707733][T12901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 660.707803][T12901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 660.707825][T12901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 660.764128][T12901] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 660.764154][T12901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.764172][T12901] usb 3-1: Product: syz [ 660.764185][T12901] usb 3-1: Manufacturer: syz [ 660.764198][T12901] usb 3-1: SerialNumber: syz [ 660.792109][T12901] usb 3-1: config 0 descriptor?? [ 660.809825][T14061] usb usb7-port1: unable to enumerate USB device [ 660.914495][ T5832] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 660.939089][T14061] usb 4-1: USB disconnect, device number 47 [ 660.979210][T11343] udevd[11343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 661.191509][ T821] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 662.092651][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.092683][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.092716][ T821] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 662.092736][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.159035][T12901] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 662.263783][ T821] usb 5-1: config 0 descriptor?? [ 662.707064][ T821] hid_parser_main: 365 callbacks suppressed [ 662.707087][ T821] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 662.890392][ T821] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 663.052900][ T821] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 663.444101][T14492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3011'. [ 663.449957][ T5735] usb 3-1: USB disconnect, device number 32 [ 663.542575][T14487] dns_resolver: Unsupported content type (89) [ 664.145625][ T821] cp2112 0003:10C4:EA90.0003: error setting SMBus config [ 664.276754][ T821] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 664.324604][ T821] usb 5-1: USB disconnect, device number 55 [ 664.401369][T14496] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3012'. [ 666.527663][ T5734] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 666.687609][ T5734] usb 4-1: Using ep0 maxpacket: 16 [ 666.697209][ T5734] usb 4-1: unable to get BOS descriptor or descriptor too short [ 666.699230][ T5734] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 666.699250][ T5734] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 6 [ 666.699317][ T5734] usb 4-1: config 0 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 7 [ 666.703362][T14530] netlink: 'syz.6.3027': attribute type 1 has an invalid length. [ 666.703377][ T5734] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 666.703390][T14530] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3027'. [ 666.703399][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.703409][T14530] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3027'. [ 666.703418][ T5734] usb 4-1: Product: syz [ 666.703430][ T5734] usb 4-1: Manufacturer: syz [ 666.703443][ T5734] usb 4-1: SerialNumber: syz [ 666.719769][ T5734] usb 4-1: config 0 descriptor?? [ 666.737142][ T5734] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 666.944034][ T5734] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 666.944059][ T5734] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 666.944112][ T5734] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 667.139038][ T5734] usb 4-1: USB disconnect, device number 48 [ 667.264361][T14542] netlink: 'syz.4.3032': attribute type 1 has an invalid length. [ 667.264381][T14542] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3032'. [ 667.264393][T14542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3032'. [ 667.571032][T11343] udevd[11343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.577534][ T5734] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 669.692600][T14569] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3044'. [ 669.704020][T14569] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 669.707079][T14569] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 669.708328][T14570] overlayfs: maximum fs stacking depth exceeded [ 669.757516][ T821] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 669.803469][ T5734] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 669.803491][ T5734] usb 3-1: config 0 has no interface number 0 [ 669.803530][ T5734] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.803553][ T5734] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 669.811099][ T5734] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 669.811124][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 669.811142][ T5734] usb 3-1: Product: syz [ 669.811154][ T5734] usb 3-1: SerialNumber: syz [ 669.836014][ T5734] usb 3-1: config 0 descriptor?? [ 669.836992][T14560] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 669.857218][ T5734] cm109 3-1:0.8: invalid payload size 64, expected 4 [ 669.959375][ T5734] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input11 [ 669.960440][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 669.960469][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 669.960492][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 669.960515][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 669.978180][ T821] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 669.978205][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.978223][ T821] usb 2-1: Product: syz [ 669.978236][ T821] usb 2-1: Manufacturer: syz [ 669.978248][ T821] usb 2-1: SerialNumber: syz [ 670.003043][ T821] usb 2-1: config 0 descriptor?? [ 670.013823][ T5734] list_add double add: new=ffff88802abae318, prev=ffff88802abae318, next=ffff88802a268078. [ 670.015395][ T5734] ------------[ cut here ]------------ [ 670.015404][ T5734] kernel BUG at lib/list_debug.c:37! [ 670.015435][ T5734] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 670.015519][ T5734] CPU: 0 UID: 0 PID: 5734 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 670.015540][ T5734] Tainted: [L]=SOFTLOCKUP [ 670.015546][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 670.015557][ T5734] Workqueue: usb_hub_wq hub_event [ 670.015608][ T5734] RIP: 0010:__list_add_valid_or_report+0xa5/0x130 [ 670.015682][ T5734] Code: 74 12 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 c7 60 69 ca 8b 4c 89 fe 4c 89 f2 48 89 d9 e8 0c e9 59 fc 90 <0f> 0b 48 c7 c7 40 67 ca 8b e8 fd e8 59 fc 90 0f 0b 48 c7 c7 00 68 [ 670.015697][ T5734] RSP: 0018:ffffc90005caeb20 EFLAGS: 00010246 [ 670.015710][ T5734] RAX: 0000000000000058 RBX: ffff88802a268078 RCX: 8361fdb6a7254e00 [ 670.015722][ T5734] RDX: ffffc9001c7ef000 RSI: 0000000000014614 RDI: 0000000000014615 [ 670.015734][ T5734] RBP: 1ffff1100544d010 R08: 0000000000000000 R09: 0000000000000000 [ 670.015744][ T5734] R10: dffffc0000000000 R11: fffff52000b95d15 R12: 1ffff11005575c63 [ 670.015757][ T5734] R13: dffffc0000000000 R14: ffff88802abae318 R15: ffff88802abae318 [ 670.015769][ T5734] FS: 0000000000000000(0000) GS:ffff888125c45000(0000) knlGS:0000000000000000 [ 670.015783][ T5734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 670.015794][ T5734] CR2: 00007f5867e9b580 CR3: 000000003549c000 CR4: 00000000003526f0 [ 670.015812][ T5734] Call Trace: [ 670.015818][ T5734] [ 670.015827][ T5734] usb_hcd_link_urb_to_ep+0x1d2/0x330 [ 670.015846][ T5734] dummy_urb_enqueue+0x299/0x760 [ 670.015933][ T5734] usb_hcd_submit_urb+0x322/0x1b40 [ 670.015954][ T5734] cm109_input_open+0x1fb/0x460 [ 670.016011][ T5734] input_open_device+0x1f9/0x3b0 [ 670.016079][ T5734] kbd_connect+0xf6/0x150 [ 670.016156][ T5734] input_register_device+0xd08/0x1150 [ 670.016178][ T5734] cm109_usb_probe+0x11e4/0x16f0 [ 670.016211][ T5734] usb_probe_interface+0x653/0xc60 [ 670.016252][ T5734] ? __pfx_usb_probe_interface+0x10/0x10 [ 670.016268][ T5734] really_probe+0x254/0xae0 [ 670.016347][ T5734] __driver_probe_device+0x1e8/0x360 [ 670.016366][ T5734] driver_probe_device+0x4f/0x240 [ 670.016386][ T5734] __device_attach_driver+0x270/0x410 [ 670.016406][ T5734] bus_for_each_drv+0x25b/0x2f0 [ 670.016420][ T5734] ? __pfx___device_attach_driver+0x10/0x10 [ 670.016439][ T5734] ? __pfx_bus_for_each_drv+0x10/0x10 [ 670.016453][ T5734] ? rt_spin_unlock+0x163/0x200 [ 670.016476][ T5734] __device_attach+0x2c7/0x450 [ 670.016491][ T5734] ? rt_spin_unlock+0x157/0x200 [ 670.016510][ T5734] ? __pfx___device_attach+0x10/0x10 [ 670.016530][ T5734] device_initial_probe+0xa1/0xd0 [ 670.016547][ T5734] bus_probe_device+0x12d/0x220 [ 670.016561][ T5734] device_add+0x7d7/0xb80 [ 670.016578][ T5734] usb_set_configuration+0x1ad8/0x2180 [ 670.016601][ T5734] usb_generic_driver_probe+0x8d/0x150 [ 670.016654][ T5734] usb_probe_device+0x1c3/0x3b0 [ 670.016671][ T5734] ? __pfx_usb_probe_device+0x10/0x10 [ 670.016686][ T5734] really_probe+0x254/0xae0 [ 670.016705][ T5734] __driver_probe_device+0x1e8/0x360 [ 670.016723][ T5734] driver_probe_device+0x4f/0x240 [ 670.016741][ T5734] __device_attach_driver+0x270/0x410 [ 670.016761][ T5734] bus_for_each_drv+0x25b/0x2f0 [ 670.016774][ T5734] ? __pfx___device_attach_driver+0x10/0x10 [ 670.016792][ T5734] ? __pfx_bus_for_each_drv+0x10/0x10 [ 670.016805][ T5734] ? rt_spin_unlock+0x163/0x200 [ 670.016826][ T5734] __device_attach+0x2c7/0x450 [ 670.016843][ T5734] ? __pfx___device_attach+0x10/0x10 [ 670.016864][ T5734] device_initial_probe+0xa1/0xd0 [ 670.016881][ T5734] bus_probe_device+0x12d/0x220 [ 670.016895][ T5734] device_add+0x7d7/0xb80 [ 670.016911][ T5734] usb_new_device+0x98d/0x1610 [ 670.016929][ T5734] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 670.016946][ T5734] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 670.016965][ T5734] ? __pfx_usb_new_device+0x10/0x10 [ 670.016987][ T5734] hub_event+0x28cf/0x4cf0 [ 670.017017][ T5734] ? __pfx_hub_event+0x10/0x10 [ 670.017030][ T5734] ? process_scheduled_works+0xa20/0x14e0 [ 670.017049][ T5734] ? rcu_is_watching+0x15/0xb0 [ 670.017066][ T5734] ? process_scheduled_works+0xa20/0x14e0 [ 670.017082][ T5734] process_scheduled_works+0xa8e/0x14e0 [ 670.017107][ T5734] ? __pfx_process_scheduled_works+0x10/0x10 [ 670.017125][ T5734] ? assign_work+0x3cf/0x5d0 [ 670.017141][ T5734] worker_thread+0xa47/0xfb0 [ 670.017163][ T5734] ? __kthread_parkme+0x71/0x1f0 [ 670.017189][ T5734] kthread+0x388/0x470 [ 670.017209][ T5734] ? __pfx_worker_thread+0x10/0x10 [ 670.017225][ T5734] ? __pfx_kthread+0x10/0x10 [ 670.017245][ T5734] ret_from_fork+0x514/0xb70 [ 670.017268][ T5734] ? __pfx_ret_from_fork+0x10/0x10 [ 670.017287][ T5734] ? __switch_to+0xc89/0x1420 [ 670.017305][ T5734] ? __pfx_kthread+0x10/0x10 [ 670.017328][ T5734] ret_from_fork_asm+0x1a/0x30 [ 670.017351][ T5734] [ 670.017362][ T5734] Modules linked in: [ 670.017399][ T5734] ---[ end trace 0000000000000000 ]--- [ 670.017415][ T5734] RIP: 0010:__list_add_valid_or_report+0xa5/0x130 [ 670.017440][ T5734] Code: 74 12 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 c7 60 69 ca 8b 4c 89 fe 4c 89 f2 48 89 d9 e8 0c e9 59 fc 90 <0f> 0b 48 c7 c7 40 67 ca 8b e8 fd e8 59 fc 90 0f 0b 48 c7 c7 00 68 [ 670.017454][ T5734] RSP: 0018:ffffc90005caeb20 EFLAGS: 00010246 [ 670.017468][ T5734] RAX: 0000000000000058 RBX: ffff88802a268078 RCX: 8361fdb6a7254e00 [ 670.017479][ T5734] RDX: ffffc9001c7ef000 RSI: 0000000000014614 RDI: 0000000000014615 [ 670.017491][ T5734] RBP: 1ffff1100544d010 R08: 0000000000000000 R09: 0000000000000000 [ 670.017501][ T5734] R10: dffffc0000000000 R11: fffff52000b95d15 R12: 1ffff11005575c63 [ 670.017513][ T5734] R13: dffffc0000000000 R14: ffff88802abae318 R15: ffff88802abae318 [ 670.017524][ T5734] FS: 0000000000000000(0000) GS:ffff888125c45000(0000) knlGS:0000000000000000 [ 670.017537][ T5734] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 670.017548][ T5734] CR2: 00007f5867e9b580 CR3: 000000003549c000 CR4: 00000000003526f0 [ 670.017594][ T5734] Kernel panic - not syncing: Fatal exception [ 670.017845][ T5734] Kernel Offset: disabled