last executing test programs: 4m9.274006537s ago: executing program 4 (id=179): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='batadv0\x00'}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x495d}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}}, 0x40000) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0xfffffffffffffe27, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x4b91, 0x40, {"03633069617330a2651238a3afd2a29f"}, 0x9, 0x6, 0x10000}}}, 0x90) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 4m9.067604466s ago: executing program 4 (id=180): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x498144ee5762a149, 0x0, 0x20, 0x0, 0x0, 0x0) 4m7.161097067s ago: executing program 4 (id=185): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)='l', 0x1, 0x7ddfdbdfafa554cd, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x9) 4m6.318173535s ago: executing program 4 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(r0, 0x2, &(0x7f0000000000)={0x1, 0x81}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/rt_acct\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r2, r1, 0x0, 0x200000007ffffffd) 4m5.521518288s ago: executing program 4 (id=192): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) 4m1.784506182s ago: executing program 4 (id=196): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x32) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x9, 0x10}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x9, 0xe, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x10, 0xe55, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000380)={'tunl0\x00', r3, 0x1, 0x8000, 0x8, 0x80000000, {{0x25, 0x4, 0x3, 0x1, 0x94, 0x65, 0x0, 0xc, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x35, 0x2, [{0x0, 0x12, "023a8414f3e03411c4f714f86d0b65b2"}, {0x5, 0x3, 'G'}, {0x7, 0xf, "8d03173b9fbeafb0062d51e0c1"}, {0x7, 0xb, "5a5b1f07b5f6456a73"}]}, @ssrr={0x89, 0x13, 0xfb, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x19}]}, @timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0x6, [{@multicast2, 0x2}, {@rand_addr=0x64010102, 0xffff3a19}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x2}]}, @noop, @ssrr={0x89, 0xf, 0xe9, [@local, @loopback, @remote]}, @timestamp={0x44, 0x8, 0x32, 0x0, 0x6, [0x9]}, @noop, @end, @noop, @noop]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 3m45.751212663s ago: executing program 32 (id=196): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x32) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x9, 0x10}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x9, 0xe, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x10, 0xe55, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000380)={'tunl0\x00', r3, 0x1, 0x8000, 0x8, 0x80000000, {{0x25, 0x4, 0x3, 0x1, 0x94, 0x65, 0x0, 0xc, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x35, 0x2, [{0x0, 0x12, "023a8414f3e03411c4f714f86d0b65b2"}, {0x5, 0x3, 'G'}, {0x7, 0xf, "8d03173b9fbeafb0062d51e0c1"}, {0x7, 0xb, "5a5b1f07b5f6456a73"}]}, @ssrr={0x89, 0x13, 0xfb, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x19}]}, @timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0x6, [{@multicast2, 0x2}, {@rand_addr=0x64010102, 0xffff3a19}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x2}]}, @noop, @ssrr={0x89, 0xf, 0xe9, [@local, @loopback, @remote]}, @timestamp={0x44, 0x8, 0x32, 0x0, 0x6, [0x9]}, @noop, @end, @noop, @noop]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 1m10.225130439s ago: executing program 2 (id=828): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085507, &(0x7f0000000100)=0xb) r2 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r3, &(0x7f0000000000)="f7", 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) shutdown(r3, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_SRC={0x8, 0x2, @multicast1}]}, 0x2c}}, 0xea5bc50b6199d77e) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @qipcrtr={0x2a, 0x3, 0x7ffd}, @vsock={0x28, 0x0, 0x2711, @hyper}, @can={0x1d, r2}, 0xab, 0x0, 0x0, 0x0, 0x8f7, &(0x7f00000000c0)='veth0_to_bond\x00', 0x7fff, 0x4, 0x7}) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x34, {[@noop]}}}], 0x18}, 0x4840) 1m2.790335601s ago: executing program 3 (id=848): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, 0x0, 0x6008040) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd4de7f9c764360000000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f000051a000/0x1000)=nil, &(0x7f0000ab6000/0x4000)=nil, &(0x7f0000178000/0x8000)=nil, &(0x7f0000007000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000034b000/0x3000)=nil, &(0x7f000044d000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00005d9000/0x2000)=nil, &(0x7f0000000400)="bd1e063a8eaad149206df5a1fee53ce1c7ade2fa911b62589b24d988424020fd27103759c84b5e6c281dba31e730485da4753ff2e8e0bc4f37e9f0da991c59c164a9dff87864d70c1ddda6ec14fab7dae65180bc26da94f91e072f6f215e92e9472a4cb709d8d303eed496114d8a4323b5093aab7780680bbc28e910b891adf366bf43b3af8b8c036206896199969bc6e9d9ef106647fb45642de6d0a5c87f3005540e61bc5b3af28c273576d7fa12af0d8db82dc41efa469dfe6488dda118fc17bd8fe8", 0xc4, r5}, 0x68) r6 = mq_open(&(0x7f0000000180)='&\xaf\x12}N\xf3oW\'\x00', 0x9998bdb00e53b1b2, 0x80, 0x0) r7 = syz_clone(0x1100000, &(0x7f0000000300)="02d4be84a4389c8ebba432dcaeb79870421d97417025fd4a0696ca5390512e0d374e49f570f2d71daff0b08becb2290b7f230f67ecb0a0e5f618fcd0ed133c70a914599fb23550103b430bc6da72bbe1dde5760299178f33ac8fc144b1a6fdc328311832da3e34daba4e35e03d5eab8f755e5fc62017a9a30631c20d04894b7881f0641a4a1669dc0fd549b2a13cd253910b310ba394c13f463678f2e59726d2e3035a1c0321dd22cd00a8ff2ca2e7871728245f4cb089a3a76776177e105fba3e5a8e13d9c4dae143df45d7315c", 0xce, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000240)="343fccb8f74048f6ca39633ba9a3fc78ec07dc3a2a21a2535b5c5e3a372abf6e964619c9ef41b469c3d8b2ebc0f2e9e47d860b206d20b05f6cb878d995efc2aa0e423d7bf3448a3d559fc06c4449fba61452b3") mq_notify(r6, &(0x7f0000000000)={0x110c230000, 0x3, 0x1, @tid=r7}) 1m2.080681286s ago: executing program 2 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000480)={0x5, 0x0, [{0x2, 0x0, 0x0, 0xa39, 0x2de}, {0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000001, 0x8, 0x0, 0x8, 0xe01, 0x401, 0x8000}, {0xb, 0x0, 0x4, 0xffffff7f, 0x4, 0x100, 0x9}, {0x6, 0x18, 0x3, 0x3, 0x7, 0x4000003, 0x8}]}) 56.467423013s ago: executing program 3 (id=855): r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x2, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000540)={{0x0, 0x0, 0x4, 0x2, 'syz0\x00', 0x8}, 0x1, [0x0, 0xfb, 0xf, 0xffffffff, 0x5, 0x3ff, 0x8, 0x9, 0x5, 0x100000001, 0x2, 0xa, 0x80000001, 0x9, 0x8000000000000001, 0x1, 0x8, 0xe, 0x7, 0x10001, 0xffff, 0x0, 0xed, 0x3c8, 0x8, 0x2, 0x2, 0xfffffffffffffff5, 0xfe, 0xffffffffffffff5b, 0xfffffffffffffffe, 0x4ea, 0x7, 0x9, 0x9, 0x100, 0xfffffffffffffffa, 0x0, 0x7, 0x101, 0x401, 0x0, 0x1, 0xfffffffffffffffb, 0x3f87, 0x9, 0x95, 0x6, 0x2, 0x8000000000000000, 0x9461, 0x7, 0x7fffffff, 0xfff, 0x7, 0x9, 0x1, 0x1, 0x3, 0x5, 0x7, 0x7, 0x8, 0x1, 0xffffffff, 0x20ab1fa6, 0x3, 0x4, 0x1, 0x2, 0xf, 0x7fff, 0x7, 0xffffffff, 0xf6c9, 0x1, 0x1, 0x0, 0xff, 0x6759, 0x3, 0x8, 0x40, 0x5, 0x8, 0x7fff, 0xffffffff, 0xd, 0xfffbffffffffffff, 0x400, 0xffff, 0xfffffffffffff4b4, 0x0, 0x7, 0x8, 0x3, 0x6, 0x7, 0x10001, 0x0, 0x9, 0x8000000000000000, 0x8, 0x7, 0x4264, 0xf9, 0x4, 0x3, 0x9, 0x3, 0x777, 0x8, 0x7fffffff, 0x3, 0xfffffffffffffffb, 0x5, 0x4, 0x21e, 0x9, 0x5, 0x6, 0x6, 0x8, 0x0, 0x6, 0x8, 0x4, 0x4]}) 54.540785503s ago: executing program 0 (id=859): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x140, 0x10, 0x1, 0xf7fffffe, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, 0xffff, 0x714, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xff}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x1, 0xfffffffc}, 0x70bd2a, 0x3507, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x7ff}]}, 0x140}, 0x1, 0x0, 0x0, 0x1400c0d1}, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) dup2(r1, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='l', 0x1, 0x7ddfdbdfafa554cd, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x9) r5 = syz_usb_connect$printer(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x8, 0x8, 0xb}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x5, 0x9}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xac, 0x40, 0x7, 0x8, 0xfc}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x90, 0xfc, 0x9b, 0x0, 0xf}]}, 0x4, [{0x1e, &(0x7f00000001c0)=@string={0x1e, 0x3, "b82931b2c0ae8c363a3a3adcc61aa131707c8fa0b5b93c63224ccf03"}}, {0x9e, &(0x7f00000002c0)=@string={0x9e, 0x3, "1fdc951398e3e3102c91de124726726a8e2640d62b0a179fbad43ccf4594f0aa269e363248e7f3c520f47d4bd07b03f49864d6e2d58e61da1f434a3868e2c2fd7eef0fc5c59389d23e2e2f8ea89e39be86a70a17692f889d113203f585eb077cc8d6d321fd771c849f1f355f9ced6c2d412e2a1dc245e499ac78e1b9d7954ef272655f3c9c8267731ec7bf13f8461e65a032be799544d5533c524136"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x423}}, {0xf7, &(0x7f0000000440)=@string={0xf7, 0x3, "8f85d4ece177720e5ec6a78a553b7dc85b95156d7b29edffe1862d73ae2a0dea8f335ae12df9948aaa22fa9f3f042f85414a2f1cee6456dfa4d75b3dfd51adda79c067f3c7da48b9fd612b8fe6416e8b55beb6432bcf9adbce5ea28f2bbeef591d4110e074501bf70424ca9db5655cde6540be648a24410b9e8735c66a0c7265013286ae3cd3936a0b33f52753e40d8a252212dd023a519034805bc104a5c9720e2a14c365313a8eb36f97e5ee090c81b805a0ad08341ab2e64280b4a06cdce404123e2eb06ac4ef19a6281f08ac9d7822d578bdb32e35788ad43954b0573cb176c2e270482ffc7233c4cc2745d1b980da10ec3e24"}}]}) syz_usb_disconnect(r5) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r6, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) 53.890727253s ago: executing program 2 (id=861): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0xfe, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a"], 0x0) syz_usb_ep_read(r1, 0xa, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="04e289674cdc16c8bed787f1a4fac4977fe11696c3d22f308097f69c56c52d59f2cfb9a4855379d490aaac066debfc11f3c24931c15d3bdb83367dba41de8f96dd609dfcfdfad21c8c4b4dd9cf9e61d9051257e4e8250aafd41abe24ac443b3487acaae1da5fa0dbaa282c793f9fcb34ed3cee90abbd17daa9b0e9b386cd52c4b085431b66eb7248c1f77f123b3c764d054ca8cf476fd21294f88860568ab00422eb3c8a74ad8ea2464132925f382c950172b096ed33c8e4d7da74d76e0a00c20e9aa9871e", 0xc5}], 0x1}}], 0x1, 0x20000001) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x10, 0x26, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) r4 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000280)=""/70, 0x46) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) 51.149710905s ago: executing program 0 (id=865): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085507, &(0x7f0000000100)=0xb) r2 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 45.115684789s ago: executing program 2 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000480)={0x5, 0x0, [{0x2, 0x0, 0x0, 0xa39, 0x2de}, {0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000001, 0x8, 0x0, 0x8, 0xe01, 0x401, 0x8000}, {0xb, 0x0, 0x4, 0xffffff7f, 0x4, 0x100, 0x9}, {0x6, 0x18, 0x3, 0x3, 0x7, 0x4000003, 0x8}]}) 44.44940528s ago: executing program 5 (id=872): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=@newsa={0x184, 0x10, 0x1, 0x70bd26, 0x0, {{@in=@loopback, @in=@private=0xa010101, 0x0, 0x0, 0x2001, 0x0, 0xa, 0x0, 0x0, 0x73, 0x0, 0xffffffffffffffff}, {@in=@empty, 0x14, 0x6c}, @in6=@loopback, {0x0, 0x800000004, 0x0, 0xfffffff7ffffffff, 0x100000000000, 0x0, 0x1000000000000000}, {0x0, 0x5, 0x1000}, {}, 0x80000003, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha3-256\x00'}, 0x0, 0xa0}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="63a02a3a340977"], 0xa) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000480)={{{@in=@private=0xa010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x843, 0x2}, {}, {0xfffffffffffffffc, 0x7fffffffffd, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0x1, 0x3c}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1001}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r8, 0x89f4, &(0x7f0000000000)={'sit0\x00', 0x0}) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000000000000000000001000000010000000000000000000000000000000000000073baffffffffffffffffffffffffffff000000000000000000000000100000000000000000000082382f1c044c647d00fffffffffffffffffeffffff000000000000000000951500"], 0xb8}}, 0x4004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000000000000f5fa81020d0daa3b515c5e3d1a00000000000000000c00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000d90a0000000000000000000000000000e900000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@private1, 0x0, 0x0, 0x1000, 0x8, 0xa, 0x20, 0x0, 0x33}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x6, 0x1, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c8b0}, 0x0) 43.694102885s ago: executing program 0 (id=873): r0 = socket(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) 43.475180537s ago: executing program 3 (id=874): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="300200007d00000005ef000000000000000002000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x230) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x3) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') read$dsp(r2, &(0x7f00000002c0)=""/140, 0x8c) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x2, 0xffffffd9, "1676e8f1be06"}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b1b, &(0x7f0000000040)) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3, 0x0, 0x0, 0x20000000}, 0x0) 43.176961339s ago: executing program 0 (id=876): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, &(0x7f0000000040)) write$nci(r0, &(0x7f0000000080)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x1, 0x2, 0x0, 0x9, {0x1, 0x7}}, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000200), 0x1000, &(0x7f0000000280)={[{@metacopy_on}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x33, 0x38, 0x66, 0x33, 0x38, 0x35, 0x61], 0x2d, [0x61, 0x36, 0x61, 0x34], 0x2d, [0x33, 0x31, 0x62, 0x36], 0x2d, [0x32, 0x66, 0x61, 0x30], 0x2d, [0x37, 0x33, 0x61, 0x66, 0x5, 0x39, 0x62, 0x30]}}}, {@dont_measure}, {@obj_type={'obj_type', 0x3d, '/dev/vcsu\x00'}}, {@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x32, 0x64, 0x63, 0x39, 0x63, 0x62, 0x36], 0x2d, [0x61, 0x61, 0x37, 0x64], 0x2d, [0x35, 0x38, 0x37, 0x34], 0x2d, [0x33, 0x53, 0x31, 0x30], 0x2d, [0x31, 0x0, 0x33, 0x36, 0x62, 0x3e, 0x37, 0x4d4e82cc8130aaff]}}}]}) r6 = eventfd(0x0) io_submit(r5, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x9, r6, &(0x7f0000000080)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r6}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, r6}]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r7, 0x402, 0x4000001c) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0x1, 0x20000000, 0x7, 0x2240, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x50) close_range(r8, 0xffffffffffffffff, 0x200000000000000) 39.200939357s ago: executing program 0 (id=878): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000005000000000000007f000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000b8b021f0efb20586ab1a92bae84c9a5a908f62496bab96f624a31ffc5efb0ce43d4be6309f9799f71663a2a73262738ecb2384dab42db8ede735ac128f610173bd06e3de400cb050031aec3f489df971321679fa7d84c8385c1692b7b6946f62b9072e1eddf184c1748588f8"], &(0x7f0000000680)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) futex(&(0x7f0000000000), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x3) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x8400000) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, &(0x7f0000000000)=0x3, 0x4ffffff) r1 = socket$inet(0x2, 0xa, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "5f9818c8d2ecc136dc6093622187215b5626dd14d303fb3941d378d2882fa0a3", "1de89dab06ef846e38639b9b659fc7d60a2eb37481886281668383792314630f", "1badcb2ef5483cae219450986cf22c0c293863efc7b09a8b0a876211efdd00", "13530fadb42fcefca448c97ebb97abe0fac5adbebd82f04ed81b527a141fa0db", "5f81f3e1045cc252696091e1f5c6b96e8089396eb43195596b11b4a4fa48de78", "e91ace18a023154351c59f0e", 0x200, 0x5cd, 0x3, 0x1, 0x8}}) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de0102030109026800020002000009044a00037d998b07052406000005240000000d240f0100000000000000000009050e030004"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x80111500, 0x0) sendfile(r2, r2, &(0x7f0000000080)=0x2, 0x7f03) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5218) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000100)='ipvlan1\x00') r9 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x10, 0x20001000, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) sendfile(r9, 0xffffffffffffffff, 0x0, 0x1fc0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000ffff26bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1d9503004000000008000a00", @ANYRES32=r6, @ANYBLOB="140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="45fe7df9493811b094b08c5112fb7ca1300326ff0e9a4870cf4325173b2e218c9fb8bff78b6b7c17a2c533ffa522778b6dcc8009ac53746a5a122886a62b85bb353d228dc1438c18e3753486757f1ff0787e759db50d6509e4becf9bb18ad8a9221720636adb3cd430e9363f7c9830afeda6e6a28a0ac380416450001506d0b7826d7180622a02"], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x40000) r10 = getpgrp(0xffffffffffffffff) getpgrp(r10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="06000000f10a0000b33a00000008000001000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000000000000000000000069fdc73acb2c9c1c22d7921e9250a3e760a77a89a989b4f33c952f4c9f8aecfc3c619ce9312282803d2e340e9a7eb4b26a1bf4763ef00310228b888b90575e708f20969090c30a9daaa96e845b4e240bd22cc15ffe7ef04c4b255ce702b179bce5454089cfab44113af8c91dd7ffdf48fd0069b8b19e6d6f6efd5f8ca15d75879e9e25a298a93441449dca07b0b37e06", @ANYRES32=r6, @ANYRES32, @ANYBLOB="02000000000000000500"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 38.464238613s ago: executing program 3 (id=879): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x61c8, &(0x7f0000000040)={0x0, 0x4200, 0xc000, 0xe, 0xa0002f5}) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x9e, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x3}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 38.463763353s ago: executing program 5 (id=880): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d733000000fe8000000000000000000000000000bb0800000000000000070000000000000009000000000004000000000000006405000000000000091100000000000008000000000000000000000000000000fdffffffffffffff01000000000000000000000000000000810000000000000000000100030000000200000021bd7000073500000a00000f4100000000000000030000000400000014000d00e0"], 0x10c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) 37.521250711s ago: executing program 5 (id=881): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc", 0x29}], 0x1}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48c0}, 0xc046) write$P9_RLCREATE(r1, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x0, 0x3, 0x4}, 0x9}}, 0x18) close_range(r3, r0, 0x0) 34.578074453s ago: executing program 5 (id=884): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'gretap0\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0x2}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) 32.63358701s ago: executing program 3 (id=886): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20201}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c850}, 0x8000002) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) (fail_nth: 4) 30.399320913s ago: executing program 5 (id=887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x4004800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) fsetxattr$smack_xattr_label(r1, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000240)={'/dev/snd/pcmC#D#c\x00'}, 0x13, 0x2) 29.726619238s ago: executing program 1 (id=888): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) (fail_nth: 1) 29.642062354s ago: executing program 33 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000480)={0x5, 0x0, [{0x2, 0x0, 0x0, 0xa39, 0x2de}, {0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000001, 0x8, 0x0, 0x8, 0xe01, 0x401, 0x8000}, {0xb, 0x0, 0x4, 0xffffff7f, 0x4, 0x100, 0x9}, {0x6, 0x18, 0x3, 0x3, 0x7, 0x4000003, 0x8}]}) 27.590656335s ago: executing program 1 (id=890): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x6, 0xd, 0xfffff03c}, {0x6, 0x0, 0x17, 0xffffffff}]}, 0x10) (fail_nth: 5) 22.657280274s ago: executing program 34 (id=878): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000005000000000000007f000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000b8b021f0efb20586ab1a92bae84c9a5a908f62496bab96f624a31ffc5efb0ce43d4be6309f9799f71663a2a73262738ecb2384dab42db8ede735ac128f610173bd06e3de400cb050031aec3f489df971321679fa7d84c8385c1692b7b6946f62b9072e1eddf184c1748588f8"], &(0x7f0000000680)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) futex(&(0x7f0000000000), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x3) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x8400000) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, &(0x7f0000000000)=0x3, 0x4ffffff) r1 = socket$inet(0x2, 0xa, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "5f9818c8d2ecc136dc6093622187215b5626dd14d303fb3941d378d2882fa0a3", "1de89dab06ef846e38639b9b659fc7d60a2eb37481886281668383792314630f", "1badcb2ef5483cae219450986cf22c0c293863efc7b09a8b0a876211efdd00", "13530fadb42fcefca448c97ebb97abe0fac5adbebd82f04ed81b527a141fa0db", "5f81f3e1045cc252696091e1f5c6b96e8089396eb43195596b11b4a4fa48de78", "e91ace18a023154351c59f0e", 0x200, 0x5cd, 0x3, 0x1, 0x8}}) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de0102030109026800020002000009044a00037d998b07052406000005240000000d240f0100000000000000000009050e030004"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x80111500, 0x0) sendfile(r2, r2, &(0x7f0000000080)=0x2, 0x7f03) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5218) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000100)='ipvlan1\x00') r9 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000140)={0x10, 0x20001000, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) sendfile(r9, 0xffffffffffffffff, 0x0, 0x1fc0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000ffff26bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1d9503004000000008000a00", @ANYRES32=r6, @ANYBLOB="140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="45fe7df9493811b094b08c5112fb7ca1300326ff0e9a4870cf4325173b2e218c9fb8bff78b6b7c17a2c533ffa522778b6dcc8009ac53746a5a122886a62b85bb353d228dc1438c18e3753486757f1ff0787e759db50d6509e4becf9bb18ad8a9221720636adb3cd430e9363f7c9830afeda6e6a28a0ac380416450001506d0b7826d7180622a02"], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x40000) r10 = getpgrp(0xffffffffffffffff) getpgrp(r10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="06000000f10a0000b33a00000008000001000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000000000000000000000069fdc73acb2c9c1c22d7921e9250a3e760a77a89a989b4f33c952f4c9f8aecfc3c619ce9312282803d2e340e9a7eb4b26a1bf4763ef00310228b888b90575e708f20969090c30a9daaa96e845b4e240bd22cc15ffe7ef04c4b255ce702b179bce5454089cfab44113af8c91dd7ffdf48fd0069b8b19e6d6f6efd5f8ca15d75879e9e25a298a93441449dca07b0b37e06", @ANYRES32=r6, @ANYRES32, @ANYBLOB="02000000000000000500"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 21.79200464s ago: executing program 1 (id=892): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}], 0x1}}], 0x1, 0x0) r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 21.249937803s ago: executing program 1 (id=893): syz_open_dev$vim2m(0x0, 0x47b, 0x2) io_uring_setup(0x80000667, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 19.210152335s ago: executing program 1 (id=894): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x40000a1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1ba142, 0x9f667fd378a54ed4) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 16.365024871s ago: executing program 35 (id=886): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20201}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x504, 0x347}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c850}, 0x8000002) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) (fail_nth: 4) 16.085154675s ago: executing program 1 (id=896): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x10002, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x121f01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="59cf000000d00100000008000800050003"], 0x28}, 0x1, 0x0, 0x0, 0xc008801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002"], 0x140}}, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000940)=0x6, 0x6}], 0x1, 0x0, 0x0, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r3}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, 0x0, 0x0) r10 = socket(0xa, 0x1, 0x0) ioctl(r10, 0x8936, &(0x7f0000000000)) 14.59985411s ago: executing program 36 (id=887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x4004800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) fsetxattr$smack_xattr_label(r1, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000240)={'/dev/snd/pcmC#D#c\x00'}, 0x13, 0x2) 0s ago: executing program 37 (id=896): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x10002, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x121f01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="59cf000000d00100000008000800050003"], 0x28}, 0x1, 0x0, 0x0, 0xc008801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002"], 0x140}}, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000940)=0x6, 0x6}], 0x1, 0x0, 0x0, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r3}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, 0x0, 0x0) r10 = socket(0xa, 0x1, 0x0) ioctl(r10, 0x8936, &(0x7f0000000000)) kernel console output (not intermixed with test programs): T7924] ? safesetid_security_capable+0xa9/0x1a0 [ 249.647006][ T7924] vfs_get_tree+0x92/0x2a0 [ 249.647034][ T7924] vfs_cmd_create+0xa2/0x200 [ 249.647055][ T7924] __se_sys_fsconfig+0x6cf/0x820 [ 249.647079][ T7924] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 249.647095][ T7924] ? ksys_write+0x248/0x270 [ 249.647122][ T7924] ? __pfx_ksys_write+0x10/0x10 [ 249.647153][ T7924] ? __x64_sys_fsconfig+0x20/0xc0 [ 249.647173][ T7924] do_syscall_64+0x14d/0xf80 [ 249.647196][ T7924] ? trace_irq_disable+0x3b/0x150 [ 249.647216][ T7924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.647235][ T7924] ? clear_bhb_loop+0x40/0x90 [ 249.647257][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.647275][ T7924] RIP: 0033:0x7fb87e34c799 [ 249.647293][ T7924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.647315][ T7924] RSP: 002b:00007fb87c5a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 249.647334][ T7924] RAX: ffffffffffffffda RBX: 00007fb87e5c5fa0 RCX: 00007fb87e34c799 [ 249.647347][ T7924] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 249.647357][ T7924] RBP: 00007fb87c5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 249.647368][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.647378][ T7924] R13: 00007fb87e5c6038 R14: 00007fb87e5c5fa0 R15: 00007ffcb0268988 [ 249.647410][ T7924] [ 250.107299][ T7932] FAULT_INJECTION: forcing a failure. [ 250.107299][ T7932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.107335][ T7932] CPU: 1 UID: 0 PID: 7932 Comm: syz.3.599 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.107356][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.107367][ T7932] Call Trace: [ 250.107374][ T7932] [ 250.107381][ T7932] dump_stack_lvl+0xe8/0x150 [ 250.107412][ T7932] should_fail_ex+0x46b/0x600 [ 250.107439][ T7932] _copy_to_user+0x31/0xb0 [ 250.107467][ T7932] ucma_create_id+0x2de/0x380 [ 250.107492][ T7932] ? __pfx_ucma_create_id+0x10/0x10 [ 250.107529][ T7932] ucma_write+0x257/0x2f0 [ 250.107552][ T7932] ? __pfx_ucma_write+0x10/0x10 [ 250.107575][ T7932] ? rw_verify_area+0x25b/0x4e0 [ 250.107603][ T7932] vfs_writev+0x4c6/0x9a0 [ 250.107625][ T7932] ? __pfx_ucma_write+0x10/0x10 [ 250.107650][ T7932] ? __pfx_vfs_writev+0x10/0x10 [ 250.107683][ T7932] ? __fget_files+0x2a/0x420 [ 250.107710][ T7932] ? __fget_files+0x3a6/0x420 [ 250.107730][ T7932] ? __fget_files+0x2a/0x420 [ 250.107758][ T7932] do_writev+0x15a/0x2e0 [ 250.107781][ T7932] ? __pfx_do_writev+0x10/0x10 [ 250.107810][ T7932] do_syscall_64+0x14d/0xf80 [ 250.107835][ T7932] ? trace_irq_disable+0x3b/0x150 [ 250.107855][ T7932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.107874][ T7932] ? clear_bhb_loop+0x40/0x90 [ 250.107895][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.107913][ T7932] RIP: 0033:0x7f5e8833c799 [ 250.107931][ T7932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.107946][ T7932] RSP: 002b:00007f5e8658e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 250.107966][ T7932] RAX: ffffffffffffffda RBX: 00007f5e885b5fa0 RCX: 00007f5e8833c799 [ 250.107979][ T7932] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000006 [ 250.107991][ T7932] RBP: 00007f5e8658e090 R08: 0000000000000000 R09: 0000000000000000 [ 250.108002][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.108013][ T7932] R13: 00007f5e885b6038 R14: 00007f5e885b5fa0 R15: 00007ffe184e7a18 [ 250.108042][ T7932] [ 250.538449][ T7939] FAULT_INJECTION: forcing a failure. [ 250.538449][ T7939] name failslab, interval 1, probability 0, space 0, times 0 [ 250.542915][ T7939] CPU: 0 UID: 0 PID: 7939 Comm: syz.1.603 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.542941][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.542953][ T7939] Call Trace: [ 250.542960][ T7939] [ 250.542969][ T7939] dump_stack_lvl+0xe8/0x150 [ 250.543001][ T7939] should_fail_ex+0x46b/0x600 [ 250.543030][ T7939] should_failslab+0xa8/0x100 [ 250.543051][ T7939] __kmalloc_noprof+0xdf/0x7b0 [ 250.543079][ T7939] ? fib_create_info+0x1723/0x31f0 [ 250.543096][ T7939] ? __lock_acquire+0x6b5/0x2cf0 [ 250.543118][ T7939] fib_create_info+0x1723/0x31f0 [ 250.543161][ T7939] fib_table_insert+0xc8/0x1b50 [ 250.543194][ T7939] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.543221][ T7939] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.543246][ T7939] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 250.543273][ T7939] ? fib_new_table+0x10a/0x2d0 [ 250.543299][ T7939] inet_rtm_newroute+0x14f/0x250 [ 250.543328][ T7939] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 250.543351][ T7939] ? rcu_is_watching+0x15/0xb0 [ 250.543391][ T7939] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 250.543415][ T7939] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 250.543444][ T7939] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 250.543466][ T7939] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.543493][ T7939] ? __lock_acquire+0x6b5/0x2cf0 [ 250.543521][ T7939] netlink_rcv_skb+0x232/0x4b0 [ 250.543547][ T7939] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.543572][ T7939] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.543606][ T7939] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.543637][ T7939] netlink_unicast+0x831/0x9f0 [ 250.543668][ T7939] ? __pfx_netlink_unicast+0x10/0x10 [ 250.543691][ T7939] ? netlink_sendmsg+0x650/0xb40 [ 250.543720][ T7939] ? skb_put+0x11b/0x210 [ 250.543750][ T7939] netlink_sendmsg+0x813/0xb40 [ 250.543782][ T7939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.543808][ T7939] ? unwind_get_return_address+0x4d/0x90 [ 250.543831][ T7939] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.543860][ T7939] ____sys_sendmsg+0x94c/0x9c0 [ 250.543885][ T7939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.543914][ T7939] ? import_iovec+0x73/0xa0 [ 250.543942][ T7939] ___sys_sendmsg+0x2a5/0x360 [ 250.543966][ T7939] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.544021][ T7939] ? __fget_files+0x2a/0x420 [ 250.544043][ T7939] ? __fget_files+0x3a6/0x420 [ 250.544074][ T7939] __x64_sys_sendmsg+0x1c3/0x2a0 [ 250.544096][ T7939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.544125][ T7939] ? __pfx_ksys_write+0x10/0x10 [ 250.544162][ T7939] do_syscall_64+0x14d/0xf80 [ 250.544186][ T7939] ? trace_irq_disable+0x3b/0x150 [ 250.544206][ T7939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.544226][ T7939] ? clear_bhb_loop+0x40/0x90 [ 250.544248][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.544266][ T7939] RIP: 0033:0x7fb87e34c799 [ 250.544284][ T7939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.544300][ T7939] RSP: 002b:00007fb87c5a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.544320][ T7939] RAX: ffffffffffffffda RBX: 00007fb87e5c5fa0 RCX: 00007fb87e34c799 [ 250.544334][ T7939] RDX: 0000000000060800 RSI: 0000200000000180 RDI: 0000000000000003 [ 250.544345][ T7939] RBP: 00007fb87c5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.544357][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.544368][ T7939] R13: 00007fb87e5c6038 R14: 00007fb87e5c5fa0 R15: 00007ffcb0268988 [ 250.544398][ T7939] [ 253.505141][ T7975] FAULT_INJECTION: forcing a failure. [ 253.505141][ T7975] name failslab, interval 1, probability 0, space 0, times 0 [ 253.505173][ T7975] CPU: 0 UID: 0 PID: 7975 Comm: syz.3.611 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 253.505195][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.505206][ T7975] Call Trace: [ 253.505213][ T7975] [ 253.505221][ T7975] dump_stack_lvl+0xe8/0x150 [ 253.505252][ T7975] should_fail_ex+0x46b/0x600 [ 253.505281][ T7975] should_failslab+0xa8/0x100 [ 253.505302][ T7975] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 253.505329][ T7975] ? __d_alloc+0x37/0x6f0 [ 253.505358][ T7975] __d_alloc+0x37/0x6f0 [ 253.505380][ T7975] ? lockdep_unlock+0x5d/0xd0 [ 253.505404][ T7975] ? __lock_acquire+0x146e/0x2cf0 [ 253.505426][ T7975] d_alloc_parallel+0xe6/0x1610 [ 253.505458][ T7975] ? __d_lookup+0x66/0x780 [ 253.505487][ T7975] ? __d_lookup+0x66/0x780 [ 253.505515][ T7975] ? __pfx_d_alloc_parallel+0x10/0x10 [ 253.505547][ T7975] ? d_lookup+0x1f/0xc0 [ 253.505574][ T7975] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 253.505604][ T7975] path_openat+0xcc3/0x38a0 [ 253.505663][ T7975] ? __pfx_path_openat+0x10/0x10 [ 253.505703][ T7975] ? do_raw_spin_lock+0x12b/0x2f0 [ 253.505739][ T7975] do_file_open+0x23e/0x4a0 [ 253.505763][ T7975] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 253.505794][ T7975] ? __pfx_do_file_open+0x10/0x10 [ 253.505817][ T7975] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 253.505862][ T7975] ? alloc_fd+0x64e/0x6c0 [ 253.505895][ T7975] do_sys_openat2+0x113/0x200 [ 253.505920][ T7975] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.505943][ T7975] ? ksys_write+0x248/0x270 [ 253.505969][ T7975] ? __pfx_ksys_write+0x10/0x10 [ 253.505998][ T7975] __x64_sys_openat+0x138/0x170 [ 253.506025][ T7975] do_syscall_64+0x14d/0xf80 [ 253.506050][ T7975] ? trace_irq_disable+0x3b/0x150 [ 253.506071][ T7975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.506090][ T7975] ? clear_bhb_loop+0x40/0x90 [ 253.506113][ T7975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.506131][ T7975] RIP: 0033:0x7f5e8833c799 [ 253.506149][ T7975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.506165][ T7975] RSP: 002b:00007f5e8656d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.506185][ T7975] RAX: ffffffffffffffda RBX: 00007f5e885b6090 RCX: 00007f5e8833c799 [ 253.506198][ T7975] RDX: 0000000000143480 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 253.506212][ T7975] RBP: 00007f5e8656d090 R08: 0000000000000000 R09: 0000000000000000 [ 253.506223][ T7975] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 253.506235][ T7975] R13: 00007f5e885b6128 R14: 00007f5e885b6090 R15: 00007ffe184e7a18 [ 253.506264][ T7975] [ 253.913735][ T7988] overlayfs: missing 'lowerdir' [ 253.979120][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 254.218149][ T7992] overlay: Unknown parameter 'measure' [ 254.314742][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 255.000814][ T7992] vxlan0: entered promiscuous mode [ 255.000840][ T7992] vxlan0: entered allmulticast mode [ 255.005236][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.005276][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.005309][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.005342][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.212366][ T8019] FAULT_INJECTION: forcing a failure. [ 255.212366][ T8019] name failslab, interval 1, probability 0, space 0, times 0 [ 255.212407][ T8019] CPU: 0 UID: 0 PID: 8019 Comm: syz.3.626 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 255.212428][ T8019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.212439][ T8019] Call Trace: [ 255.212446][ T8019] [ 255.212455][ T8019] dump_stack_lvl+0xe8/0x150 [ 255.212486][ T8019] should_fail_ex+0x46b/0x600 [ 255.212514][ T8019] should_failslab+0xa8/0x100 [ 255.212535][ T8019] kmem_cache_alloc_noprof+0x87/0x680 [ 255.212561][ T8019] ? skb_clone+0x212/0x3a0 [ 255.212585][ T8019] skb_clone+0x212/0x3a0 [ 255.212608][ T8019] __netlink_deliver_tap+0x404/0x850 [ 255.212644][ T8019] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.212669][ T8019] netlink_deliver_tap+0x19c/0x1b0 [ 255.212693][ T8019] netlink_unicast+0x805/0x9f0 [ 255.212723][ T8019] ? __pfx_netlink_unicast+0x10/0x10 [ 255.212747][ T8019] ? netlink_sendmsg+0x650/0xb40 [ 255.212768][ T8019] ? skb_put+0x11b/0x210 [ 255.212797][ T8019] netlink_sendmsg+0x813/0xb40 [ 255.212828][ T8019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.212854][ T8019] ? unwind_get_return_address+0x4d/0x90 [ 255.212878][ T8019] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.212905][ T8019] ____sys_sendmsg+0x94c/0x9c0 [ 255.212930][ T8019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.212957][ T8019] ? import_iovec+0x73/0xa0 [ 255.212987][ T8019] ___sys_sendmsg+0x2a5/0x360 [ 255.213012][ T8019] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.213065][ T8019] ? __fget_files+0x2a/0x420 [ 255.213087][ T8019] ? __fget_files+0x3a6/0x420 [ 255.213119][ T8019] __x64_sys_sendmsg+0x1c3/0x2a0 [ 255.213141][ T8019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.213169][ T8019] ? __pfx_ksys_write+0x10/0x10 [ 255.213206][ T8019] do_syscall_64+0x14d/0xf80 [ 255.213231][ T8019] ? trace_irq_disable+0x3b/0x150 [ 255.213251][ T8019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.213270][ T8019] ? clear_bhb_loop+0x40/0x90 [ 255.213292][ T8019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.213311][ T8019] RIP: 0033:0x7f5e8833c799 [ 255.213329][ T8019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.213344][ T8019] RSP: 002b:00007f5e8658e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.213364][ T8019] RAX: ffffffffffffffda RBX: 00007f5e885b5fa0 RCX: 00007f5e8833c799 [ 255.213378][ T8019] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 255.213396][ T8019] RBP: 00007f5e8658e090 R08: 0000000000000000 R09: 0000000000000000 [ 255.213408][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.213419][ T8019] R13: 00007f5e885b6038 R14: 00007f5e885b5fa0 R15: 00007ffe184e7a18 [ 255.213450][ T8019] [ 255.659158][ T993] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 256.231339][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.231411][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.368617][ T993] usb 3-1: Using ep0 maxpacket: 32 [ 256.371886][ T993] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 256.371926][ T993] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 256.371966][ T993] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 256.371993][ T993] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 256.372019][ T993] usb 3-1: config 0 interface 0 has no altsetting 0 [ 256.374746][ T993] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 256.374772][ T993] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 256.374792][ T993] usb 3-1: Product: syz [ 256.374807][ T993] usb 3-1: Manufacturer: syz [ 256.374821][ T993] usb 3-1: SerialNumber: syz [ 256.476971][ T993] usb 3-1: config 0 descriptor?? [ 256.488893][ T993] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 256.492761][ T993] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 256.624900][ T8025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.159611][ T31] usb 3-1: USB disconnect, device number 21 [ 257.169605][ T31] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 257.364743][ T993] kernel write not supported for file /snd/seq (pid: 993 comm: kworker/0:2) [ 257.366461][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 257.458407][ T8038] FAULT_INJECTION: forcing a failure. [ 257.458407][ T8038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.458438][ T8038] CPU: 1 UID: 0 PID: 8038 Comm: syz.1.634 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 257.458458][ T8038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.458472][ T8038] Call Trace: [ 257.458479][ T8038] [ 257.458486][ T8038] dump_stack_lvl+0xe8/0x150 [ 257.458516][ T8038] should_fail_ex+0x46b/0x600 [ 257.458542][ T8038] _copy_to_user+0x31/0xb0 [ 257.458568][ T8038] simple_read_from_buffer+0xe1/0x170 [ 257.458595][ T8038] proc_fail_nth_read+0x1be/0x230 [ 257.458619][ T8038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.458642][ T8038] ? rw_verify_area+0x2ac/0x4e0 [ 257.458665][ T8038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.458687][ T8038] vfs_read+0x212/0xa80 [ 257.458719][ T8038] ? __pfx_vfs_read+0x10/0x10 [ 257.458746][ T8038] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 257.458781][ T8038] ? lockdep_hardirqs_on+0x7a/0x110 [ 257.458807][ T8038] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 257.458831][ T8038] ? mutex_lock_nested+0x152/0x1d0 [ 257.458851][ T8038] ? fdget_pos+0x252/0x320 [ 257.458882][ T8038] ksys_read+0x156/0x270 [ 257.458907][ T8038] ? __pfx_ksys_read+0x10/0x10 [ 257.458943][ T8038] do_syscall_64+0x14d/0xf80 [ 257.458967][ T8038] ? trace_irq_disable+0x3b/0x150 [ 257.458987][ T8038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.459006][ T8038] ? clear_bhb_loop+0x40/0x90 [ 257.459029][ T8038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.459047][ T8038] RIP: 0033:0x7fb87e30cfce [ 257.459066][ T8038] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 257.459082][ T8038] RSP: 002b:00007fb87c5a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.459102][ T8038] RAX: ffffffffffffffda RBX: 00007fb87c5a66c0 RCX: 00007fb87e30cfce [ 257.459116][ T8038] RDX: 000000000000000f RSI: 00007fb87c5a60a0 RDI: 0000000000000003 [ 257.459127][ T8038] RBP: 00007fb87c5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.459139][ T8038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.459150][ T8038] R13: 00007fb87e5c6038 R14: 00007fb87e5c5fa0 R15: 00007ffcb0268988 [ 257.459181][ T8038] [ 257.553480][ T8042] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 257.770817][ T8047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.771347][ T8047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.818629][ T8049] FAULT_INJECTION: forcing a failure. [ 257.818629][ T8049] name failslab, interval 1, probability 0, space 0, times 0 [ 257.818662][ T8049] CPU: 0 UID: 0 PID: 8049 Comm: syz.3.638 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 257.818684][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.818695][ T8049] Call Trace: [ 257.818702][ T8049] [ 257.818710][ T8049] dump_stack_lvl+0xe8/0x150 [ 257.818741][ T8049] should_fail_ex+0x46b/0x600 [ 257.818770][ T8049] should_failslab+0xa8/0x100 [ 257.818791][ T8049] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 257.818818][ T8049] ? __d_alloc+0x37/0x6f0 [ 257.818848][ T8049] __d_alloc+0x37/0x6f0 [ 257.818870][ T8049] ? lockdep_unlock+0x5d/0xd0 [ 257.818894][ T8049] ? __lock_acquire+0x146e/0x2cf0 [ 257.818916][ T8049] d_alloc_parallel+0xe6/0x1610 [ 257.818948][ T8049] ? __d_lookup+0x66/0x780 [ 257.818978][ T8049] ? __d_lookup+0x66/0x780 [ 257.819007][ T8049] ? __pfx_d_alloc_parallel+0x10/0x10 [ 257.819032][ T8049] ? d_lookup+0x1f/0xc0 [ 257.819058][ T8049] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 257.819090][ T8049] path_openat+0xcc3/0x38a0 [ 257.819150][ T8049] ? __pfx_path_openat+0x10/0x10 [ 257.819192][ T8049] ? do_raw_spin_lock+0x12b/0x2f0 [ 257.819225][ T8049] do_file_open+0x23e/0x4a0 [ 257.819262][ T8049] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 257.819294][ T8049] ? __pfx_do_file_open+0x10/0x10 [ 257.819317][ T8049] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 257.819362][ T8049] ? alloc_fd+0x64e/0x6c0 [ 257.819394][ T8049] do_sys_openat2+0x113/0x200 [ 257.819420][ T8049] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.819443][ T8049] ? ksys_write+0x248/0x270 [ 257.819471][ T8049] ? __pfx_ksys_write+0x10/0x10 [ 257.819501][ T8049] __x64_sys_creat+0x8f/0xc0 [ 257.819528][ T8049] do_syscall_64+0x14d/0xf80 [ 257.819553][ T8049] ? trace_irq_disable+0x3b/0x150 [ 257.819573][ T8049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.819592][ T8049] ? clear_bhb_loop+0x40/0x90 [ 257.819615][ T8049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.819633][ T8049] RIP: 0033:0x7f5e8833c799 [ 257.819651][ T8049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.819667][ T8049] RSP: 002b:00007f5e8658e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 257.819686][ T8049] RAX: ffffffffffffffda RBX: 00007f5e885b5fa0 RCX: 00007f5e8833c799 [ 257.819700][ T8049] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000002440 [ 257.819712][ T8049] RBP: 00007f5e8658e090 R08: 0000000000000000 R09: 0000000000000000 [ 257.819723][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.819734][ T8049] R13: 00007f5e885b6038 R14: 00007f5e885b5fa0 R15: 00007ffe184e7a18 [ 257.819766][ T8049] [ 259.230858][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.231387][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.047821][ T8074] FAULT_INJECTION: forcing a failure. [ 260.047821][ T8074] name failslab, interval 1, probability 0, space 0, times 0 [ 260.047854][ T8074] CPU: 1 UID: 0 PID: 8074 Comm: syz.3.644 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 260.047875][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.047885][ T8074] Call Trace: [ 260.047893][ T8074] [ 260.047901][ T8074] dump_stack_lvl+0xe8/0x150 [ 260.047931][ T8074] should_fail_ex+0x46b/0x600 [ 260.047960][ T8074] should_failslab+0xa8/0x100 [ 260.047980][ T8074] kmem_cache_alloc_noprof+0x87/0x680 [ 260.048007][ T8074] ? do_getname+0x2e/0x250 [ 260.048031][ T8074] do_getname+0x2e/0x250 [ 260.048049][ T8074] ? user_path_at+0x1e/0x160 [ 260.048075][ T8074] user_path_at+0x2a/0x160 [ 260.048100][ T8074] __se_sys_mount+0x2dc/0x420 [ 260.048127][ T8074] ? __pfx___se_sys_mount+0x10/0x10 [ 260.048162][ T8074] ? __x64_sys_mount+0x20/0xc0 [ 260.048185][ T8074] do_syscall_64+0x14d/0xf80 [ 260.048211][ T8074] ? trace_irq_disable+0x3b/0x150 [ 260.048231][ T8074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.048250][ T8074] ? clear_bhb_loop+0x40/0x90 [ 260.048273][ T8074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.048291][ T8074] RIP: 0033:0x7f5e8833c799 [ 260.048309][ T8074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.048324][ T8074] RSP: 002b:00007f5e8658e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.048344][ T8074] RAX: ffffffffffffffda RBX: 00007f5e885b5fa0 RCX: 00007f5e8833c799 [ 260.048358][ T8074] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 260.048370][ T8074] RBP: 00007f5e8658e090 R08: 00002000000001c0 R09: 0000000000000000 [ 260.048383][ T8074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.048394][ T8074] R13: 00007f5e885b6038 R14: 00007f5e885b5fa0 R15: 00007ffe184e7a18 [ 260.048424][ T8074] [ 260.179314][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 260.330965][ T10] usb 3-1: config 1 has an invalid interface number: 93 but max is 0 [ 260.330995][ T10] usb 3-1: config 1 has no interface number 0 [ 260.331026][ T10] usb 3-1: config 1 interface 93 has no altsetting 0 [ 260.331059][ T10] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 260.331082][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.362611][ T8078] netlink: 36 bytes leftover after parsing attributes in process `syz.3.646'. [ 260.483204][ T8083] FAULT_INJECTION: forcing a failure. [ 260.483204][ T8083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.483226][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.0.647 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 260.483238][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.483244][ T8083] Call Trace: [ 260.483251][ T8083] [ 260.483255][ T8083] dump_stack_lvl+0xe8/0x150 [ 260.483275][ T8083] should_fail_ex+0x46b/0x600 [ 260.483291][ T8083] _copy_from_user+0x2d/0xb0 [ 260.483307][ T8083] do_sock_getsockopt+0x165/0x3f0 [ 260.483325][ T8083] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 260.483342][ T8083] ? __fget_files+0x3a6/0x420 [ 260.483355][ T8083] ? __fget_files+0x2a/0x420 [ 260.483371][ T8083] __x64_sys_getsockopt+0x1aa/0x250 [ 260.483391][ T8083] do_syscall_64+0x14d/0xf80 [ 260.483406][ T8083] ? trace_irq_disable+0x3b/0x150 [ 260.483418][ T8083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.483429][ T8083] ? clear_bhb_loop+0x40/0x90 [ 260.483441][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.483451][ T8083] RIP: 0033:0x7f4c7075c799 [ 260.483461][ T8083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.483470][ T8083] RSP: 002b:00007f4c6e9ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 260.483482][ T8083] RAX: ffffffffffffffda RBX: 00007f4c709d5fa0 RCX: 00007f4c7075c799 [ 260.483489][ T8083] RDX: 000000000000000d RSI: 0000000000000001 RDI: 0000000000000004 [ 260.483495][ T8083] RBP: 00007f4c6e9ae090 R08: 0000200000000040 R09: 0000000000000000 [ 260.483501][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.483508][ T8083] R13: 00007f4c709d6038 R14: 00007f4c709d5fa0 R15: 00007fff56a88198 [ 260.483523][ T8083] [ 260.714605][ T10] usb 3-1: string descriptor 0 read error: -71 [ 260.743529][ T10] gl620a 3-1:1.93: probe with driver gl620a failed with error -22 [ 260.855006][ T8090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.859267][ T10] usb 3-1: USB disconnect, device number 22 [ 260.864425][ T8090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.919064][ T8090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.923225][ T8090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.118684][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 261.207735][ T8095] FAULT_INJECTION: forcing a failure. [ 261.207735][ T8095] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.207757][ T8095] CPU: 0 UID: 0 PID: 8095 Comm: syz.3.651 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 261.207769][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.207775][ T8095] Call Trace: [ 261.207779][ T8095] [ 261.207784][ T8095] dump_stack_lvl+0xe8/0x150 [ 261.207803][ T8095] should_fail_ex+0x46b/0x600 [ 261.207819][ T8095] prepare_alloc_pages+0x22a/0x6b0 [ 261.207834][ T8095] __alloc_frozen_pages_noprof+0x12f/0x380 [ 261.207847][ T8095] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 261.207860][ T8095] ? __pfx_policy_nodemask+0x10/0x10 [ 261.207872][ T8095] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 261.207889][ T8095] ? lockdep_hardirqs_on+0x7a/0x110 [ 261.207906][ T8095] alloc_pages_mpol+0xd1/0x380 [ 261.207917][ T8095] alloc_pages_noprof+0xce/0x1e0 [ 261.207929][ T8095] get_free_pages_noprof+0xf/0x80 [ 261.207940][ T8095] __kasan_populate_vmalloc+0x38/0x1d0 [ 261.207955][ T8095] ? rt_spin_unlock+0x160/0x200 [ 261.207968][ T8095] alloc_vmap_area+0xd73/0x14b0 [ 261.207990][ T8095] ? __pfx_alloc_vmap_area+0x10/0x10 [ 261.208005][ T8095] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 261.208021][ T8095] ? __get_vm_area_node+0x171/0x350 [ 261.208035][ T8095] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 261.208049][ T8095] __get_vm_area_node+0x226/0x350 [ 261.208066][ T8095] __vmalloc_node_range_noprof+0x372/0x1730 [ 261.208082][ T8095] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 261.208101][ T8095] ? __lock_acquire+0x6b5/0x2cf0 [ 261.208114][ T8095] ? kernel_text_address+0xa5/0xe0 [ 261.208129][ T8095] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.208143][ T8095] ? arch_stack_walk+0xfb/0x150 [ 261.208159][ T8095] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 261.208174][ T8095] __vmalloc_noprof+0xd2/0x120 [ 261.208189][ T8095] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 261.208203][ T8095] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 261.208217][ T8095] bpf_prog_alloc+0x3c/0x1a0 [ 261.208231][ T8095] bpf_prog_load+0x7ba/0x1ae0 [ 261.208251][ T8095] ? __pfx_bpf_prog_load+0x10/0x10 [ 261.208274][ T8095] ? bpf_lsm_bpf+0x9/0x20 [ 261.208284][ T8095] ? security_bpf+0x7e/0x2d0 [ 261.208296][ T8095] __sys_bpf+0x618/0x950 [ 261.208309][ T8095] ? __pfx___sys_bpf+0x10/0x10 [ 261.208320][ T8095] ? rt_mutex_slowunlock+0x1cb/0x300 [ 261.208340][ T8095] ? ksys_write+0x248/0x270 [ 261.208356][ T8095] ? __pfx_ksys_write+0x10/0x10 [ 261.208374][ T8095] __x64_sys_bpf+0x7c/0x90 [ 261.208385][ T8095] do_syscall_64+0x14d/0xf80 [ 261.208400][ T8095] ? trace_irq_disable+0x3b/0x150 [ 261.208412][ T8095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.208422][ T8095] ? clear_bhb_loop+0x40/0x90 [ 261.208434][ T8095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.208444][ T8095] RIP: 0033:0x7f5e8833c799 [ 261.208471][ T8095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.208486][ T8095] RSP: 002b:00007f5e8658e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.208504][ T8095] RAX: ffffffffffffffda RBX: 00007f5e885b5fa0 RCX: 00007f5e8833c799 [ 261.208516][ T8095] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 261.208526][ T8095] RBP: 00007f5e8658e090 R08: 0000000000000000 R09: 0000000000000000 [ 261.208538][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.208547][ T8095] R13: 00007f5e885b6038 R14: 00007f5e885b5fa0 R15: 00007ffe184e7a18 [ 261.208575][ T8095] [ 261.215754][ T8095] syz.3.651: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 261.215820][ T8095] CPU: 0 UID: 0 PID: 8095 Comm: syz.3.651 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 261.215841][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.215851][ T8095] Call Trace: [ 261.215858][ T8095] [ 261.215865][ T8095] dump_stack_lvl+0xe8/0x150 [ 261.215897][ T8095] warn_alloc+0x263/0x3e0 [ 261.215918][ T8095] ? kasan_quarantine_put+0xbb/0x1f0 [ 261.215945][ T8095] ? __pfx_warn_alloc+0x10/0x10 [ 261.215964][ T8095] ? __get_vm_area_node+0x23f/0x350 [ 261.215986][ T8095] ? __get_vm_area_node+0x171/0x350 [ 261.216010][ T8095] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 261.216034][ T8095] ? __get_vm_area_node+0x23f/0x350 [ 261.216064][ T8095] __vmalloc_node_range_noprof+0x397/0x1730 [ 261.216102][ T8095] ? __lock_acquire+0x6b5/0x2cf0 [ 261.216126][ T8095] ? kernel_text_address+0xa5/0xe0 [ 261.216149][ T8095] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.216173][ T8095] ? arch_stack_walk+0xfb/0x150 [ 261.216202][ T8095] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 261.216222][ T8095] __vmalloc_noprof+0xd2/0x120 [ 261.216245][ T8095] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 261.216270][ T8095] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 261.216296][ T8095] bpf_prog_alloc+0x3c/0x1a0 [ 261.216320][ T8095] bpf_prog_load+0x7ba/0x1ae0 [ 261.216354][ T8095] ? __pfx_bpf_prog_load+0x10/0x10 [ 261.216396][ T8095] ? bpf_lsm_bpf+0x9/0x20 [ 261.216413][ T8095] ? security_bpf+0x7e/0x2d0 [ 261.216434][ T8095] __sys_bpf+0x618/0x950 [ 261.216456][ T8095] ? __pfx___sys_bpf+0x10/0x10 [ 261.216475][ T8095] ? rt_mutex_slowunlock+0x1cb/0x300 [ 261.216512][ T8095] ? ksys_write+0x248/0x270 [ 261.216537][ T8095] ? __pfx_ksys_write+0x10/0x10 [ 261.216568][ T8095] __x64_sys_bpf+0x7c/0x90 [ 261.216588][ T8095] do_syscall_64+0x14d/0xf80 [ 261.216612][ T8095] ? trace_irq_disable+0x3b/0x150 [ 261.216631][ T8095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.216649][ T8095] ? clear_bhb_loop+0x40/0x90 [ 261.216677][ T8095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.216694][ T8095] RIP: 0033:0x7f5e8833c799 [ 261.216711][ T8095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.216726][ T8095] RSP: 002b:00007f5e8658e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.216745][ T8095] RAX: ffffffffffffffda RBX: 00007f5e885b5fa0 RCX: 00007f5e8833c799 [ 261.216758][ T8095] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 261.216770][ T8095] RBP: 00007f5e8658e090 R08: 0000000000000000 R09: 0000000000000000 [ 261.216781][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.216792][ T8095] R13: 00007f5e885b6038 R14: 00007f5e885b5fa0 R15: 00007ffe184e7a18 [ 261.216821][ T8095] [ 261.216828][ T8095] Mem-Info: [ 261.216836][ T8095] active_anon:283 inactive_anon:7174 isolated_anon:0 [ 261.216836][ T8095] active_file:23630 inactive_file:37268 isolated_file:0 [ 261.216836][ T8095] unevictable:768 dirty:218 writeback:0 [ 261.216836][ T8095] slab_reclaimable:12367 slab_unreclaimable:101992 [ 261.216836][ T8095] mapped:30613 shmem:1387 pagetables:1488 [ 261.216836][ T8095] sec_pagetables:0 bounce:0 [ 261.216836][ T8095] kernel_misc_reclaimable:0 [ 261.216836][ T8095] free:1308573 free_pcp:1702 free_cma:0 [ 261.216887][ T8095] Node 0 active_anon:1132kB inactive_anon:28696kB active_file:94328kB inactive_file:149072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122452kB dirty:872kB writeback:0kB shmem:4012kB kernel_stack:13468kB pagetables:5784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 261.216931][ T8095] Node 1 active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 261.216971][ T8095] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.217027][ T8095] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 261.217058][ T8095] Node 0 DMA32 free:1286300kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1132kB inactive_anon:28696kB active_file:94328kB inactive_file:149072kB unevictable:1536kB writepending:872kB zspages:0kB present:3129332kB managed:2566540kB mlocked:0kB bounce:0kB free_pcp:2076kB local_pcp:948kB free_cma:0kB [ 261.217111][ T8095] lowmem_reserve[]: 0 0 0 0 0 [ 261.217138][ T8095] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.217187][ T8095] lowmem_reserve[]: 0 0 0 0 0 [ 261.217217][ T8095] Node 1 Normal free:3932632kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4732kB local_pcp:640kB free_cma:0kB [ 261.225525][ T8095] lowmem_reserve[]: 0 0 0 0 0 [ 261.225561][ T8095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.225675][ T8095] Node 0 DMA32: 1923*4kB (UME) 1456*8kB (UME) 1238*16kB (UME) 477*32kB (UME) 368*64kB (UME) 259*128kB (UME) 148*256kB (UM) 83*512kB (UM) 39*1024kB (UME) 15*2048kB (UME) 250*4096kB (UM) = 1286156kB [ 261.225819][ T8095] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 261.225907][ T8095] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 3*16kB (UM) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3932684kB [ 261.226046][ T8095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.226061][ T8095] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 261.226077][ T8095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.226092][ T8095] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.226107][ T8095] 62281 total pagecache pages [ 261.226114][ T8095] 0 pages in swap cache [ 261.226120][ T8095] Free swap = 124996kB [ 261.226131][ T8095] Total swap = 124996kB [ 261.226138][ T8095] 2097051 pages RAM [ 261.226145][ T8095] 0 pages HighMem/MovableOnly [ 261.226151][ T8095] 423696 pages reserved [ 261.226157][ T8095] 0 pages cma reserved [ 261.343881][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 44, changing to 7 [ 261.343916][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 261.343942][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 261.343966][ T31] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x14, changing to 0x4 [ 261.343991][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 261.634696][ T8103] IPVS: length: 24 != 49176 [ 262.688888][ T31] usb 1-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 262.688918][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.688939][ T31] usb 1-1: Product: syz [ 262.688952][ T31] usb 1-1: Manufacturer: ꒫饂犻⻤Щ⬭◒뷢⚭왳鴌ㄙꅓ膏錒췇⹓䀇ꦚ晛쪪砐↳蘪咩诫ʪ秽沈냰퓿䉨娆ར췇玒齡㘣ﵝ䄤ᨘ嶌簋禴ࡽ㚏謕ᾗ紓曜稀둢蠭ẫ媦᠈봑ඟ鞋鞁䞛噾᫆矸흩獻爿ㅛꋀ [ 262.688976][ T31] usb 1-1: SerialNumber: syz [ 263.102557][ T8087] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 263.368608][ T10] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 263.438588][ T5979] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 263.519671][ T10] usb 4-1: Invalid ep0 maxpacket: 16 [ 263.524758][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.568829][ T5979] usb 3-1: device descriptor read/64, error -71 [ 263.621269][ T31] usb 1-1: USB disconnect, device number 26 [ 263.639700][ T993] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 263.649890][ T10] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 263.735143][ T6260] udevd[6260]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.768630][ T993] usb 6-1: device descriptor read/64, error -71 [ 263.809106][ T10] usb 4-1: Invalid ep0 maxpacket: 16 [ 263.818694][ T10] usb usb4-port1: attempt power cycle [ 263.818917][ T5979] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 263.948705][ T5979] usb 3-1: device descriptor read/64, error -71 [ 264.016003][ T993] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 264.060285][ T5979] usb usb3-port1: attempt power cycle [ 264.138612][ T993] usb 6-1: device descriptor read/64, error -71 [ 264.159776][ T10] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 264.180330][ T10] usb 4-1: Invalid ep0 maxpacket: 16 [ 264.249761][ T993] usb usb6-port1: attempt power cycle [ 264.311109][ T10] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 264.352142][ T10] usb 4-1: Invalid ep0 maxpacket: 16 [ 264.353767][ T10] usb usb4-port1: unable to enumerate USB device [ 264.388656][ T5892] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 264.398809][ T5979] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 264.420409][ T5979] usb 3-1: device descriptor read/8, error -71 [ 264.435399][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 264.435416][ T37] audit: type=1326 audit(1773982389.301:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87e34c799 code=0x7ffc0000 [ 264.437414][ T37] audit: type=1326 audit(1773982389.301:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87e34c799 code=0x7ffc0000 [ 264.439412][ T37] audit: type=1326 audit(1773982389.311:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb87e34c799 code=0x7ffc0000 [ 264.439645][ T37] audit: type=1326 audit(1773982389.311:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87e34c799 code=0x7ffc0000 [ 264.439888][ T37] audit: type=1326 audit(1773982389.311:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87e34c799 code=0x7ffc0000 [ 264.440424][ T37] audit: type=1326 audit(1773982389.311:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb87e34c799 code=0x7ffc0000 [ 264.440856][ T37] audit: type=1326 audit(1773982389.311:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87e34c799 code=0x7ffc0000 [ 264.441077][ T37] audit: type=1326 audit(1773982389.311:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87e34c799 code=0x7ffc0000 [ 264.441399][ T37] audit: type=1326 audit(1773982389.311:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb87e34c799 code=0x7ffc0000 [ 264.441558][ T8129] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 264.441574][ T8129] netlink: 760 bytes leftover after parsing attributes in process `syz.1.665'. [ 264.441599][ T8129] netlink: 1 bytes leftover after parsing attributes in process `syz.1.665'. [ 264.442124][ T37] audit: type=1326 audit(1773982389.311:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8128 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87e34c799 code=0x7ffc0000 [ 264.529939][ T5892] usb 1-1: device descriptor read/64, error -71 [ 264.608686][ T993] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 264.629377][ T993] usb 6-1: device descriptor read/8, error -71 [ 264.658635][ T5979] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 264.680650][ T5979] usb 3-1: device descriptor read/8, error -71 [ 264.768601][ T5892] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 264.788877][ T5979] usb usb3-port1: unable to enumerate USB device [ 264.868659][ T993] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 264.889400][ T993] usb 6-1: device descriptor read/8, error -71 [ 264.898847][ T5892] usb 1-1: device descriptor read/64, error -71 [ 264.999390][ T993] usb usb6-port1: unable to enumerate USB device [ 265.009393][ T5892] usb usb1-port1: attempt power cycle [ 265.348899][ T5892] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 265.379416][ T5892] usb 1-1: device descriptor read/8, error -71 [ 265.628733][ T5892] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 265.649307][ T5892] usb 1-1: device descriptor read/8, error -71 [ 265.769591][ T5892] usb usb1-port1: unable to enumerate USB device [ 266.537258][ T8150] netlink: 48 bytes leftover after parsing attributes in process `syz.3.673'. [ 266.893151][ T8161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.893778][ T8161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.988625][ T5961] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 267.138608][ T5961] usb 4-1: Using ep0 maxpacket: 16 [ 267.141189][ T5961] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 267.141216][ T5961] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 267.141236][ T5961] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 267.141255][ T5961] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 267.141274][ T5961] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 267.141294][ T5961] usb 4-1: config 0 has no interface number 0 [ 267.141338][ T5961] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 267.141365][ T5961] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 267.141387][ T5961] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.141421][ T5961] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.141449][ T5961] usb 4-1: config 0 interface 125 has no altsetting 2 [ 267.144141][ T5961] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 267.144167][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.144186][ T5961] usb 4-1: Product: syz [ 267.144200][ T5961] usb 4-1: Manufacturer: syz [ 267.144214][ T5961] usb 4-1: SerialNumber: syz [ 267.294313][ T5961] usb 4-1: config 0 descriptor?? [ 267.312476][ T5961] usb 4-1: selecting invalid altsetting 2 [ 267.515459][ T8158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.517249][ T8158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.988621][ T5961] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 268.098302][ T8176] FAULT_INJECTION: forcing a failure. [ 268.098302][ T8176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.098333][ T8176] CPU: 1 UID: 0 PID: 8176 Comm: syz.2.681 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 268.098355][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.098367][ T8176] Call Trace: [ 268.098374][ T8176] [ 268.098382][ T8176] dump_stack_lvl+0xe8/0x150 [ 268.098413][ T8176] should_fail_ex+0x46b/0x600 [ 268.098442][ T8176] strncpy_from_user+0x36/0x2b0 [ 268.098469][ T8176] do_getname+0x77/0x250 [ 268.098492][ T8176] __se_sys_mkdirat+0x24/0x150 [ 268.098513][ T8176] do_syscall_64+0x14d/0xf80 [ 268.098536][ T8176] ? trace_irq_disable+0x3b/0x150 [ 268.098557][ T8176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.098576][ T8176] ? clear_bhb_loop+0x40/0x90 [ 268.098597][ T8176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.098615][ T8176] RIP: 0033:0x7fd1c7a9c799 [ 268.098632][ T8176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.098647][ T8176] RSP: 002b:00007fd1c5cee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 268.098666][ T8176] RAX: ffffffffffffffda RBX: 00007fd1c7d15fa0 RCX: 00007fd1c7a9c799 [ 268.098678][ T8176] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 268.098689][ T8176] RBP: 00007fd1c5cee090 R08: 0000000000000000 R09: 0000000000000000 [ 268.098700][ T8176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.098711][ T8176] R13: 00007fd1c7d16038 R14: 00007fd1c7d15fa0 R15: 00007ffd7103c6e8 [ 268.098739][ T8176] [ 268.274027][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 268.274058][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 268.274084][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 268.277377][ T5961] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 268.277404][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.277424][ T5961] usb 1-1: Product: syz [ 268.277438][ T5961] usb 1-1: Manufacturer: syz [ 268.277451][ T5961] usb 1-1: SerialNumber: syz [ 268.350643][ T5961] usb 1-1: config 0 descriptor?? [ 268.357466][ T5961] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 268.435634][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.436142][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.519194][ T5979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 268.584242][ T8170] bond1: entered allmulticast mode [ 268.584669][ T8170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.588637][ T5892] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 268.620267][ T5979] usb 1-1: USB disconnect, device number 31 [ 268.738637][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 268.741185][ T5892] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 268.741217][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 268.741247][ T5892] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 268.741260][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.747618][ T5892] usb 3-1: config 0 descriptor?? [ 268.884546][ T5979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 269.279022][ T5892] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 269.683530][ T5892] corsair-cpro 0003:1B1C:0C10.0002: probe with driver corsair-cpro failed with error -71 [ 269.686659][ T8199] pim6reg: tun_chr_ioctl cmd 21731 [ 269.884235][ T5892] usb 3-1: USB disconnect, device number 27 [ 271.408614][ T5961] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 271.625483][ T8217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.625989][ T8217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.658585][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 271.660780][ T5961] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 271.660805][ T5961] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 271.660825][ T5961] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 271.660844][ T5961] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 271.660863][ T5961] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 271.660883][ T5961] usb 6-1: config 0 has no interface number 0 [ 271.660926][ T5961] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 271.660952][ T5961] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 271.660974][ T5961] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 271.661008][ T5961] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.661034][ T5961] usb 6-1: config 0 interface 125 has no altsetting 2 [ 271.665131][ T5961] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 271.665157][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.665260][ T5961] usb 6-1: Product: syz [ 271.665274][ T5961] usb 6-1: Manufacturer: syz [ 271.665288][ T5961] usb 6-1: SerialNumber: syz [ 271.788651][ T5979] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 271.820987][ T5961] usb 6-1: config 0 descriptor?? [ 271.825885][ T5961] usb 6-1: selecting invalid altsetting 2 [ 271.926450][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.932383][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.938578][ T5979] usb 3-1: Using ep0 maxpacket: 8 [ 271.943032][ T5979] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 271.943058][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.943077][ T5979] usb 3-1: Product: syz [ 271.943090][ T5979] usb 3-1: Manufacturer: syz [ 271.943104][ T5979] usb 3-1: SerialNumber: syz [ 271.958009][ T5979] usb 3-1: config 0 descriptor?? [ 272.031110][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.032052][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.164808][ T5979] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 273.017715][ T8246] tmpfs: Unknown parameter 'indo64' [ 273.633128][ T5961] rtc_cmos 00:00: Alarms can be up to one day in the future [ 273.633391][ T5961] rtc_cmos 00:00: Alarms can be up to one day in the future [ 273.633787][ T5961] rtc_cmos 00:00: Alarms can be up to one day in the future [ 273.634038][ T5961] rtc_cmos 00:00: Alarms can be up to one day in the future [ 273.634055][ T5961] rtc rtc0: __rtc_set_alarm: err=-22 [ 273.900885][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.903481][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.912758][ T8254] vxcan1: entered allmulticast mode [ 273.999211][ T5812] Bluetooth: hci5: command 0x0405 tx timeout [ 274.070493][ T8259] netlink: 'syz.5.708': attribute type 11 has an invalid length. [ 274.070516][ T8259] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.708'. [ 274.240179][ T5979] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 275.665275][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.666113][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.899027][ T5948] usb 3-1: USB disconnect, device number 28 [ 276.984325][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.719'. [ 277.364328][ T8300] overlayfs: overlapping lowerdir path [ 277.412110][ T8303] FAULT_INJECTION: forcing a failure. [ 277.412110][ T8303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.412142][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.2.720 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 277.412163][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.412173][ T8303] Call Trace: [ 277.412180][ T8303] [ 277.412188][ T8303] dump_stack_lvl+0xe8/0x150 [ 277.412218][ T8303] should_fail_ex+0x46b/0x600 [ 277.412247][ T8303] _copy_from_user+0x2d/0xb0 [ 277.412274][ T8303] kstrtouint_from_user+0xd6/0x180 [ 277.412298][ T8303] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 277.412324][ T8303] ? __lock_acquire+0x6b5/0x2cf0 [ 277.412351][ T8303] proc_fail_nth_write+0x8e/0x210 [ 277.412374][ T8303] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 277.412401][ T8303] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 277.412423][ T8303] vfs_write+0x2a3/0xba0 [ 277.412458][ T8303] ? __pfx_vfs_write+0x10/0x10 [ 277.412486][ T8303] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 277.412513][ T8303] ? lockdep_hardirqs_on+0x7a/0x110 [ 277.412539][ T8303] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 277.412563][ T8303] ? mutex_lock_nested+0x152/0x1d0 [ 277.412583][ T8303] ? fdget_pos+0x252/0x320 [ 277.412614][ T8303] ksys_write+0x156/0x270 [ 277.412642][ T8303] ? __pfx_ksys_write+0x10/0x10 [ 277.412677][ T8303] do_syscall_64+0x14d/0xf80 [ 277.412702][ T8303] ? trace_irq_disable+0x3b/0x150 [ 277.412722][ T8303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.412741][ T8303] ? clear_bhb_loop+0x40/0x90 [ 277.412764][ T8303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.412782][ T8303] RIP: 0033:0x7fd1c7a5cfce [ 277.412799][ T8303] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 277.412812][ T8303] RSP: 002b:00007fd1c5cabfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.412832][ T8303] RAX: ffffffffffffffda RBX: 00007fd1c5cac6c0 RCX: 00007fd1c7a5cfce [ 277.412843][ T8303] RDX: 0000000000000001 RSI: 00007fd1c5cac0a0 RDI: 0000000000000003 [ 277.412852][ T8303] RBP: 00007fd1c5cac090 R08: 0000000000000000 R09: 0000000000000000 [ 277.412860][ T8303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.412868][ T8303] R13: 00007fd1c7d16218 R14: 00007fd1c7d16180 R15: 00007ffd7103c6e8 [ 277.412898][ T8303] [ 278.341625][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.342156][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.398144][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.411713][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.800257][ T5812] Bluetooth: hci5: command 0x0405 tx timeout [ 280.371845][ T8345] netlink: 'syz.1.735': attribute type 29 has an invalid length. [ 280.611042][ T8348] FAULT_INJECTION: forcing a failure. [ 280.611042][ T8348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.611074][ T8348] CPU: 1 UID: 0 PID: 8348 Comm: syz.3.738 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 280.611096][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.611107][ T8348] Call Trace: [ 280.611115][ T8348] [ 280.611122][ T8348] dump_stack_lvl+0xe8/0x150 [ 280.611153][ T8348] should_fail_ex+0x46b/0x600 [ 280.611183][ T8348] _copy_to_user+0x31/0xb0 [ 280.611221][ T8348] simple_read_from_buffer+0xe1/0x170 [ 280.611248][ T8348] proc_fail_nth_read+0x1be/0x230 [ 280.611273][ T8348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.611298][ T8348] ? rw_verify_area+0x2ac/0x4e0 [ 280.611327][ T8348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.611350][ T8348] vfs_read+0x212/0xa80 [ 280.611382][ T8348] ? __pfx_vfs_read+0x10/0x10 [ 280.611409][ T8348] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 280.611437][ T8348] ? lockdep_hardirqs_on+0x7a/0x110 [ 280.611461][ T8348] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 280.611487][ T8348] ? mutex_lock_nested+0x152/0x1d0 [ 280.611507][ T8348] ? fdget_pos+0x252/0x320 [ 280.611539][ T8348] ksys_read+0x156/0x270 [ 280.611566][ T8348] ? __pfx_ksys_read+0x10/0x10 [ 280.611590][ T8348] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 280.611622][ T8348] do_syscall_64+0x14d/0xf80 [ 280.611647][ T8348] ? trace_irq_disable+0x3b/0x150 [ 280.611668][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.611686][ T8348] ? clear_bhb_loop+0x40/0x90 [ 280.611708][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.611726][ T8348] RIP: 0033:0x7f5e882fcfce [ 280.611743][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 280.611758][ T8348] RSP: 002b:00007f5e8658dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.611778][ T8348] RAX: ffffffffffffffda RBX: 00007f5e8658e6c0 RCX: 00007f5e882fcfce [ 280.611792][ T8348] RDX: 000000000000000f RSI: 00007f5e8658e0a0 RDI: 0000000000000005 [ 280.611804][ T8348] RBP: 00007f5e8658e090 R08: 0000000000000000 R09: 0000000000000000 [ 280.611815][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.611826][ T8348] R13: 00007f5e885b6038 R14: 00007f5e885b5fa0 R15: 00007ffe184e7a18 [ 280.611856][ T8348] [ 283.169252][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 283.213701][ T8367] unsupported nla_type 224 [ 283.241175][ T8354] Bluetooth: hci4: Frame reassembly failed (-84) [ 283.467415][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.467917][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.553757][ T8376] FAULT_INJECTION: forcing a failure. [ 283.553757][ T8376] name failslab, interval 1, probability 0, space 0, times 0 [ 283.553785][ T8376] CPU: 1 UID: 0 PID: 8376 Comm: syz.5.746 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 283.553802][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.553810][ T8376] Call Trace: [ 283.553816][ T8376] [ 283.553823][ T8376] dump_stack_lvl+0xe8/0x150 [ 283.553848][ T8376] should_fail_ex+0x46b/0x600 [ 283.553871][ T8376] should_failslab+0xa8/0x100 [ 283.553886][ T8376] __kmalloc_noprof+0xdf/0x7b0 [ 283.553905][ T8376] ? kfree+0x4d/0x6c0 [ 283.553923][ T8376] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 283.553949][ T8376] tomoyo_realpath_from_path+0xe3/0x5d0 [ 283.553978][ T8376] ? tomoyo_path_number_perm+0x219/0x630 [ 283.554011][ T8376] tomoyo_path_number_perm+0x246/0x630 [ 283.554033][ T8376] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 283.554055][ T8376] ? __lock_acquire+0x6b5/0x2cf0 [ 283.554092][ T8376] ? __fget_files+0x2a/0x420 [ 283.554112][ T8376] ? __fget_files+0x2a/0x420 [ 283.554128][ T8376] ? __fget_files+0x3a6/0x420 [ 283.554144][ T8376] ? __fget_files+0x2a/0x420 [ 283.554163][ T8376] security_file_ioctl+0xc3/0x2a0 [ 283.554180][ T8376] __se_sys_ioctl+0x47/0x170 [ 283.554209][ T8376] do_syscall_64+0x14d/0xf80 [ 283.554232][ T8376] ? trace_irq_disable+0x3b/0x150 [ 283.554246][ T8376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.554262][ T8376] ? clear_bhb_loop+0x40/0x90 [ 283.554280][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.554294][ T8376] RIP: 0033:0x7f167812c799 [ 283.554309][ T8376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.554322][ T8376] RSP: 002b:00007f167635d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.554340][ T8376] RAX: ffffffffffffffda RBX: 00007f16783a6090 RCX: 00007f167812c799 [ 283.554352][ T8376] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000009 [ 283.554363][ T8376] RBP: 00007f167635d090 R08: 0000000000000000 R09: 0000000000000000 [ 283.554373][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.554384][ T8376] R13: 00007f16783a6128 R14: 00007f16783a6090 R15: 00007ffd5c1a19b8 [ 283.554413][ T8376] [ 283.554422][ T8376] ERROR: Out of memory at tomoyo_realpath_from_path. [ 283.554442][ T8376] Bluetooth: hci6: Frame reassembly failed (-84) [ 283.601624][ T3948] Bluetooth: hci6: Frame reassembly failed (-84) [ 284.187962][ T8384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.188441][ T8384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.938642][ T5961] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 285.088626][ T5961] usb 1-1: Using ep0 maxpacket: 16 [ 285.090196][ T5961] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 285.090212][ T5961] usb 1-1: config 0 has no interface number 0 [ 285.090241][ T5961] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 285.092299][ T5961] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 285.092319][ T5961] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 285.092330][ T5961] usb 1-1: Product: syz [ 285.092338][ T5961] usb 1-1: Manufacturer: syz [ 285.092345][ T5961] usb 1-1: SerialNumber: syz [ 285.095346][ T5961] usb 1-1: config 0 descriptor?? [ 285.101173][ T5961] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 285.101524][ T5961] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 285.109759][ T5961] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 285.113387][ T5961] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 285.127059][ T5961] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 285.134378][ T5961] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 285.139556][ T5961] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 285.146310][ T5961] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 285.166508][ T5961] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 285.193555][ T5961] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 285.278617][ T5809] Bluetooth: hci4: command 0x1003 tx timeout [ 285.288921][ T5804] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 285.467247][ T5961] usb 1-1: USB disconnect, device number 32 [ 285.506570][ T5961] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 285.527192][ T5961] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 285.559289][ T5961] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 285.583114][ T5961] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 285.585007][ T5961] keyspan 1-1:0.107: device disconnected [ 285.598740][ T5812] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 285.807283][ T8393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.807940][ T8393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.196460][ T8400] netlink: 20 bytes leftover after parsing attributes in process `syz.5.755'. [ 287.547585][ T8418] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 287.926395][ T3656] Bluetooth: hci4: Frame reassembly failed (-84) [ 287.927913][ T8422] Bluetooth: hci4: Frame reassembly failed (-84) [ 288.074333][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 288.074539][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 289.121744][ T8448] FAULT_INJECTION: forcing a failure. [ 289.121744][ T8448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.121776][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.1.771 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 289.121798][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.121809][ T8448] Call Trace: [ 289.121816][ T8448] [ 289.121824][ T8448] dump_stack_lvl+0xe8/0x150 [ 289.121854][ T8448] should_fail_ex+0x46b/0x600 [ 289.121882][ T8448] _copy_from_iter+0x1d3/0x1670 [ 289.121917][ T8448] ? __pfx__copy_from_iter+0x10/0x10 [ 289.121939][ T8448] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 289.121963][ T8448] ? __lock_acquire+0x6b5/0x2cf0 [ 289.121981][ T8448] ? skb_put+0x11b/0x210 [ 289.122010][ T8448] hci_sock_sendmsg+0x426/0xf40 [ 289.122037][ T8448] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 289.122062][ T8448] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.122088][ T8448] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 289.122107][ T8448] sock_write_iter+0x4a1/0x4f0 [ 289.122131][ T8448] ? __pfx_sock_write_iter+0x10/0x10 [ 289.122170][ T8448] vfs_write+0x629/0xba0 [ 289.122205][ T8448] ? __pfx_vfs_write+0x10/0x10 [ 289.122239][ T8448] ? __fget_files+0x2a/0x420 [ 289.122269][ T8448] ksys_write+0x156/0x270 [ 289.122296][ T8448] ? __pfx_ksys_write+0x10/0x10 [ 289.122331][ T8448] do_syscall_64+0x14d/0xf80 [ 289.122355][ T8448] ? trace_irq_disable+0x3b/0x150 [ 289.122375][ T8448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.122395][ T8448] ? clear_bhb_loop+0x40/0x90 [ 289.122417][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.122436][ T8448] RIP: 0033:0x7fb87e34c799 [ 289.122453][ T8448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.122469][ T8448] RSP: 002b:00007fb87c5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.122488][ T8448] RAX: ffffffffffffffda RBX: 00007fb87e5c5fa0 RCX: 00007fb87e34c799 [ 289.122502][ T8448] RDX: 0000000000000006 RSI: 0000200000000100 RDI: 0000000000000004 [ 289.122513][ T8448] RBP: 00007fb87c5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.122524][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.122535][ T8448] R13: 00007fb87e5c6038 R14: 00007fb87e5c5fa0 R15: 00007ffcb0268988 [ 289.122573][ T8448] [ 289.155152][ T5809] block nbd2: Receive control failed (result -32) [ 289.172818][ T8443] block nbd2: shutting down sockets [ 289.383058][ T8452] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 289.489470][ T8454] tipc: Started in network mode [ 289.489493][ T8454] tipc: Node identity 7f000001, cluster identity 4711 [ 289.490402][ T8454] tipc: Enabling of bearer rejected, failed to enable media [ 289.508586][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 289.669267][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 289.673344][ T10] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 289.673371][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.673389][ T10] usb 1-1: Product: syz [ 289.673402][ T10] usb 1-1: Manufacturer: syz [ 289.673415][ T10] usb 1-1: SerialNumber: syz [ 289.724022][ T10] usb 1-1: config 0 descriptor?? [ 289.840560][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 289.841233][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 289.881830][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.883123][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 289.883184][ T10] usb 1-1: media controller created [ 289.918274][ T5979] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 289.952572][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.001726][ T5812] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 290.139055][ T5979] usb 3-1: Using ep0 maxpacket: 8 [ 290.259765][ T5979] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 290.259840][ T5979] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 290.259884][ T5979] usb 3-1: config 179 has no interface number 0 [ 290.262621][ T5979] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 290.262675][ T5979] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 290.262725][ T5979] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 290.262961][ T5979] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 290.263008][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.651263][ T8460] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 290.910525][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 291.953576][ T8476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.954100][ T8476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.985774][ T5948] usb 3-1: USB disconnect, device number 29 [ 292.000129][ T10] DVB: Unable to find symbol mt352_attach() [ 292.000155][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 292.210617][ T10] rc_core: IR keymap rc-dvico-portable not found [ 292.210637][ T10] Registered IR keymap rc-empty [ 292.216647][ T10] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 292.255063][ T10] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input8 [ 292.295589][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 292.295612][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 292.327294][ T10] usb 1-1: USB disconnect, device number 33 [ 292.803207][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 292.836298][ T8494] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 293.035682][ T8496] FAULT_INJECTION: forcing a failure. [ 293.035682][ T8496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.035715][ T8496] CPU: 0 UID: 0 PID: 8496 Comm: syz.0.785 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 293.035736][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.035747][ T8496] Call Trace: [ 293.035755][ T8496] [ 293.035762][ T8496] dump_stack_lvl+0xe8/0x150 [ 293.035792][ T8496] should_fail_ex+0x46b/0x600 [ 293.035821][ T8496] _copy_to_user+0x31/0xb0 [ 293.035852][ T8496] simple_read_from_buffer+0xe1/0x170 [ 293.035880][ T8496] proc_fail_nth_read+0x1be/0x230 [ 293.035905][ T8496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.035928][ T8496] ? rw_verify_area+0x2ac/0x4e0 [ 293.035953][ T8496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.035975][ T8496] vfs_read+0x212/0xa80 [ 293.036007][ T8496] ? __pfx_vfs_read+0x10/0x10 [ 293.036032][ T8496] ? __asan_memset+0x22/0x50 [ 293.036055][ T8496] ? smack_file_ioctl+0x263/0x360 [ 293.036083][ T8496] ? __pfx_smack_file_ioctl+0x10/0x10 [ 293.036116][ T8496] ksys_read+0x156/0x270 [ 293.036143][ T8496] ? __pfx_ksys_read+0x10/0x10 [ 293.036178][ T8496] do_syscall_64+0x14d/0xf80 [ 293.036203][ T8496] ? trace_irq_disable+0x3b/0x150 [ 293.036224][ T8496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.036243][ T8496] ? clear_bhb_loop+0x40/0x90 [ 293.036265][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.036291][ T8496] RIP: 0033:0x7f4c7071cfce [ 293.036309][ T8496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 293.036325][ T8496] RSP: 002b:00007f4c6e9adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 293.036344][ T8496] RAX: ffffffffffffffda RBX: 00007f4c6e9ae6c0 RCX: 00007f4c7071cfce [ 293.036359][ T8496] RDX: 000000000000000f RSI: 00007f4c6e9ae0a0 RDI: 0000000000000004 [ 293.036371][ T8496] RBP: 00007f4c6e9ae090 R08: 0000000000000000 R09: 0000000000000000 [ 293.036382][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.036394][ T8496] R13: 00007f4c709d6038 R14: 00007f4c709d5fa0 R15: 00007fff56a88198 [ 293.036424][ T8496] [ 294.598592][ T5892] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 294.748667][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 294.751583][ T5892] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 294.751609][ T5892] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 294.751630][ T5892] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 294.751759][ T5892] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 294.751779][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 294.751799][ T5892] usb 1-1: config 0 has no interface number 0 [ 294.751843][ T5892] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 294.751870][ T5892] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 294.751893][ T5892] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 294.751927][ T5892] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.751955][ T5892] usb 1-1: config 0 interface 125 has no altsetting 2 [ 294.755417][ T5892] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 294.755445][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.755465][ T5892] usb 1-1: Product: syz [ 294.755479][ T5892] usb 1-1: Manufacturer: syz [ 294.755493][ T5892] usb 1-1: SerialNumber: syz [ 294.899211][ T5892] usb 1-1: config 0 descriptor?? [ 294.904456][ T5892] usb 1-1: selecting invalid altsetting 2 [ 295.100480][ T8514] QAT: failed to copy from user cfg_data. [ 295.164445][ T8515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.167255][ T8515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.273912][ T8485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.709630][ T10] usb 1-1: USB disconnect, device number 34 [ 297.882133][ T8544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.882666][ T8544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.552145][ T8548] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 299.548630][ T5961] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 299.718636][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 299.721158][ T5961] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 299.721189][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 299.721215][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 299.721238][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 299.721345][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 299.724075][ T5961] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 299.724101][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.724122][ T5961] usb 3-1: Product: syz [ 299.724137][ T5961] usb 3-1: Manufacturer: syz [ 299.724151][ T5961] usb 3-1: SerialNumber: syz [ 299.965842][ T5961] usb 3-1: config 0 descriptor?? [ 301.141545][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -110 [ 301.141911][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.142303][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.142738][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.143189][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.143632][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.144066][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.144500][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.146263][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.146603][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.146904][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.147203][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.147503][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.147800][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.148093][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.148386][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.257996][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.267017][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 301.341016][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 301.341487][ T5961] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 301.341544][ T5961] input input9: Timeout waiting for response from device. [ 301.379990][ T8566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.410617][ T5961] usb 3-1: USB disconnect, device number 30 [ 301.736602][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.760293][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 301.931522][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.679158][ T993] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 302.945774][ T8580] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 303.038747][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 303.044858][ T993] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 303.044884][ T993] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 303.044905][ T993] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 303.044924][ T993] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 303.044954][ T993] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 303.044975][ T993] usb 1-1: config 0 has no interface number 0 [ 303.045020][ T993] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 303.045052][ T993] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 303.045074][ T993] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 303.045117][ T993] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.045145][ T993] usb 1-1: config 0 interface 125 has no altsetting 2 [ 303.239257][ T993] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 303.239289][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.239308][ T993] usb 1-1: Product: syz [ 303.239322][ T993] usb 1-1: Manufacturer: syz [ 303.239336][ T993] usb 1-1: SerialNumber: syz [ 303.294517][ T993] usb 1-1: config 0 descriptor?? [ 303.312482][ T993] usb 1-1: selecting invalid altsetting 2 [ 303.448724][ T5809] Bluetooth: hci2: command 0x0401 tx timeout [ 303.448864][ T5812] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 303.546134][ T8572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.546649][ T8572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.570726][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.573290][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.126995][ T5961] usb 1-1: USB disconnect, device number 35 [ 308.416946][ T8627] FAULT_INJECTION: forcing a failure. [ 308.416946][ T8627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.416979][ T8627] CPU: 0 UID: 0 PID: 8627 Comm: syz.5.819 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 308.417003][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 308.417013][ T8627] Call Trace: [ 308.417020][ T8627] [ 308.417028][ T8627] dump_stack_lvl+0xe8/0x150 [ 308.417058][ T8627] should_fail_ex+0x46b/0x600 [ 308.417086][ T8627] _copy_from_user+0x2d/0xb0 [ 308.417112][ T8627] ucma_write+0x166/0x2f0 [ 308.417139][ T8627] ? __pfx_ucma_write+0x10/0x10 [ 308.417163][ T8627] ? rw_verify_area+0x25b/0x4e0 [ 308.417187][ T8627] ? __pfx_ucma_write+0x10/0x10 [ 308.417218][ T8627] vfs_write+0x2a3/0xba0 [ 308.417250][ T8627] ? __pfx_vfs_write+0x10/0x10 [ 308.417277][ T8627] ? __fget_files+0x2a/0x420 [ 308.417302][ T8627] ? __fget_files+0x2a/0x420 [ 308.417323][ T8627] ? __fget_files+0x3a6/0x420 [ 308.417343][ T8627] ? __fget_files+0x2a/0x420 [ 308.417373][ T8627] ksys_write+0x156/0x270 [ 308.417401][ T8627] ? __pfx_ksys_write+0x10/0x10 [ 308.417436][ T8627] do_syscall_64+0x14d/0xf80 [ 308.417461][ T8627] ? trace_irq_disable+0x3b/0x150 [ 308.417481][ T8627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.417500][ T8627] ? clear_bhb_loop+0x40/0x90 [ 308.417523][ T8627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.417542][ T8627] RIP: 0033:0x7f167812c799 [ 308.417559][ T8627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.417575][ T8627] RSP: 002b:00007f167637e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 308.417595][ T8627] RAX: ffffffffffffffda RBX: 00007f16783a5fa0 RCX: 00007f167812c799 [ 308.417609][ T8627] RDX: 000000000000fc36 RSI: 0000200000000140 RDI: 0000000000000003 [ 308.417621][ T8627] RBP: 00007f167637e090 R08: 0000000000000000 R09: 0000000000000000 [ 308.417633][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.417644][ T8627] R13: 00007f16783a6038 R14: 00007f16783a5fa0 R15: 00007ffd5c1a19b8 [ 308.417674][ T8627] [ 308.834238][ T8629] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 309.524684][ T5979] IPVS: starting estimator thread 0... [ 309.673370][ T8640] IPVS: using max 9 ests per chain, 21600 per kthread [ 310.829117][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.829653][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.999822][ T993] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 312.820642][ T993] usb 3-1: config 0 has no interfaces? [ 312.820681][ T993] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 312.820704][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.878936][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 312.944522][ T993] usb 3-1: config 0 descriptor?? [ 313.042706][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 313.044937][ T10] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 313.044962][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 313.044982][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 313.045000][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 313.045019][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 313.045039][ T10] usb 1-1: config 0 has no interface number 0 [ 313.045084][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 313.045110][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 313.045132][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 313.045166][ T10] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.045289][ T10] usb 1-1: config 0 interface 125 has no altsetting 2 [ 313.047933][ T10] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 313.047959][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.047979][ T10] usb 1-1: Product: syz [ 313.047993][ T10] usb 1-1: Manufacturer: syz [ 313.048007][ T10] usb 1-1: SerialNumber: syz [ 313.207539][ T10] usb 1-1: config 0 descriptor?? [ 313.233954][ T10] usb 1-1: selecting invalid altsetting 2 [ 313.462042][ T8671] FAULT_INJECTION: forcing a failure. [ 313.462042][ T8671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.462074][ T8671] CPU: 0 UID: 0 PID: 8671 Comm: syz.1.838 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.462093][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.462103][ T8671] Call Trace: [ 313.462110][ T8671] [ 313.462118][ T8671] dump_stack_lvl+0xe8/0x150 [ 313.462148][ T8671] should_fail_ex+0x46b/0x600 [ 313.462175][ T8671] _copy_from_user+0x2d/0xb0 [ 313.462201][ T8671] ___sys_sendmsg+0x1c6/0x360 [ 313.462224][ T8671] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.462272][ T8671] ? __fget_files+0x2a/0x420 [ 313.462292][ T8671] ? __fget_files+0x3a6/0x420 [ 313.462323][ T8671] __x64_sys_sendmsg+0x1c3/0x2a0 [ 313.462345][ T8671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.462373][ T8671] ? __pfx_ksys_write+0x10/0x10 [ 313.462417][ T8671] do_syscall_64+0x14d/0xf80 [ 313.462442][ T8671] ? trace_irq_disable+0x3b/0x150 [ 313.462463][ T8671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.462482][ T8671] ? clear_bhb_loop+0x40/0x90 [ 313.462503][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.462522][ T8671] RIP: 0033:0x7fb87e34c799 [ 313.462539][ T8671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.462553][ T8671] RSP: 002b:00007fb87c5a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.462573][ T8671] RAX: ffffffffffffffda RBX: 00007fb87e5c5fa0 RCX: 00007fb87e34c799 [ 313.462586][ T8671] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 313.462596][ T8671] RBP: 00007fb87c5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.462608][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.462620][ T8671] R13: 00007fb87e5c6038 R14: 00007fb87e5c5fa0 R15: 00007ffcb0268988 [ 313.462650][ T8671] [ 313.656541][ T9] usb 3-1: USB disconnect, device number 31 [ 313.751747][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.752296][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.353530][ T8685] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 315.014702][ T993] usb 1-1: USB disconnect, device number 36 [ 315.450466][ T8703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.456973][ T8703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.520091][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.535490][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.772740][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.773322][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.354157][ T8742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.354668][ T8742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.393490][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 326.799904][ T8744] netlink: 40 bytes leftover after parsing attributes in process `syz.5.862'. [ 326.890612][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 326.892938][ T10] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 326.892969][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 326.892995][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 326.893025][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 326.893043][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 326.893063][ T10] usb 1-1: config 0 has no interface number 0 [ 326.893106][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 326.893138][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 326.893159][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 326.893193][ T10] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.893220][ T10] usb 1-1: config 0 interface 125 has no altsetting 2 [ 326.895930][ T10] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 326.895957][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.895977][ T10] usb 1-1: Product: syz [ 326.895990][ T10] usb 1-1: Manufacturer: syz [ 326.896003][ T10] usb 1-1: SerialNumber: syz [ 326.972050][ T10] usb 1-1: config 0 descriptor?? [ 326.989206][ T8744] syz.5.862 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 327.014700][ T10] usb 1-1: selecting invalid altsetting 2 [ 327.240932][ T10] usb 1-1: USB disconnect, device number 37 [ 327.348648][ T5892] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 328.566465][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 328.566498][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 328.566525][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 328.611857][ T5892] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 328.611886][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.611906][ T5892] usb 3-1: Product: syz [ 328.611919][ T5892] usb 3-1: Manufacturer: syz [ 328.611933][ T5892] usb 3-1: SerialNumber: syz [ 328.690405][ T5892] usb 3-1: config 0 descriptor?? [ 328.697053][ T5892] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 330.290903][ T8756] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.866'. [ 330.358725][ T8755] mmap: syz.1.866 (8755): VmData 37593088 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 331.903758][ T8761] batadv_slave_1: entered promiscuous mode [ 331.906346][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.907135][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.909979][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.910476][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.510483][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.510997][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.078675][ T5961] usb 3-1: USB disconnect, device number 32 [ 334.723372][ T8760] batadv_slave_1: left promiscuous mode [ 335.529531][ T8779] netlink: 104 bytes leftover after parsing attributes in process `syz.5.872'. [ 341.674158][ T8800] syz.0.878 uses obsolete (PF_INET,SOCK_PACKET) [ 341.830236][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.831859][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.662167][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 342.861647][ T10] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 342.861677][ T10] usb 1-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 342.861697][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 342.861718][ T10] usb 1-1: config 0 has no interface number 0 [ 342.861762][ T10] usb 1-1: config 0 interface 74 altsetting 0 endpoint 0xE has an invalid bInterval 47, changing to 9 [ 342.861789][ T10] usb 1-1: config 0 interface 74 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 343.001525][ T10] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 343.001555][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.001575][ T10] usb 1-1: Product: syz [ 343.001590][ T10] usb 1-1: Manufacturer: syz [ 343.001604][ T10] usb 1-1: SerialNumber: syz [ 343.051432][ T10] usb 1-1: config 0 descriptor?? [ 343.964649][ T8814] fuse: Bad value for 'fd' [ 348.306658][ T10] cypress_m8 1-1:0.74: HID->COM RS232 Adapter converter detected [ 348.309147][ T10] cyphidcom ttyUSB0: required endpoint is missing [ 348.412766][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 348.412784][ T37] audit: type=1326 audit(1773983241.258:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8818 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87e34c799 code=0x7ffc0000 [ 348.412828][ T37] audit: type=1326 audit(1773983241.268:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8818 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb87e3094fb code=0x7ffc0000 [ 348.415023][ T37] audit: type=1326 audit(1773983241.278:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8818 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb87e34c799 code=0x7ffc0000 [ 348.417464][ T37] audit: type=1326 audit(1773983241.278:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8818 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87e34c799 code=0x7ffc0000 [ 348.471254][ T8823] FAULT_INJECTION: forcing a failure. [ 348.471254][ T8823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.471287][ T8823] CPU: 0 UID: 0 PID: 8823 Comm: syz.3.886 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 348.471309][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.471320][ T8823] Call Trace: [ 348.471327][ T8823] [ 348.471335][ T8823] dump_stack_lvl+0xe8/0x150 [ 348.471366][ T8823] should_fail_ex+0x46b/0x600 [ 348.471395][ T8823] _copy_from_iter+0x3b0/0x1670 [ 348.471427][ T8823] ? __alloc_skb+0x27d/0x7d0 [ 348.471451][ T8823] ? __pfx__copy_from_iter+0x10/0x10 [ 348.471471][ T8823] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 348.471497][ T8823] ? __alloc_skb+0x27d/0x7d0 [ 348.471525][ T8823] ? netlink_sendmsg+0x650/0xb40 [ 348.471547][ T8823] ? skb_put+0x11b/0x210 [ 348.471575][ T8823] netlink_sendmsg+0x6c0/0xb40 [ 348.471607][ T8823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.471631][ T8823] ? unwind_get_return_address+0x4d/0x90 [ 348.471654][ T8823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.471681][ T8823] ____sys_sendmsg+0x94c/0x9c0 [ 348.471705][ T8823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.471731][ T8823] ? import_iovec+0x73/0xa0 [ 348.471758][ T8823] ___sys_sendmsg+0x2a5/0x360 [ 348.471782][ T8823] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.471832][ T8823] ? __fget_files+0x2a/0x420 [ 348.471853][ T8823] ? __fget_files+0x3a6/0x420 [ 348.471884][ T8823] __x64_sys_sendmsg+0x1c3/0x2a0 [ 348.471905][ T8823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.471932][ T8823] ? __pfx_ksys_write+0x10/0x10 [ 348.471973][ T8823] do_syscall_64+0x14d/0xf80 [ 348.471998][ T8823] ? trace_irq_disable+0x3b/0x150 [ 348.472018][ T8823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.472036][ T8823] ? clear_bhb_loop+0x40/0x90 [ 348.472058][ T8823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.472076][ T8823] RIP: 0033:0x7f5e8833c799 [ 348.472093][ T8823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.472109][ T8823] RSP: 002b:00007f5e8656d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.472129][ T8823] RAX: ffffffffffffffda RBX: 00007f5e885b6090 RCX: 00007f5e8833c799 [ 348.472142][ T8823] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 348.472154][ T8823] RBP: 00007f5e8656d090 R08: 0000000000000000 R09: 0000000000000000 [ 348.472165][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.472176][ T8823] R13: 00007f5e885b6128 R14: 00007f5e885b6090 R15: 00007ffe184e7a18 [ 348.472205][ T8823] [ 348.804121][ T8832] FAULT_INJECTION: forcing a failure. [ 348.804121][ T8832] name failslab, interval 1, probability 0, space 0, times 0 [ 348.804153][ T8832] CPU: 0 UID: 0 PID: 8832 Comm: syz.1.888 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 348.804175][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.804186][ T8832] Call Trace: [ 348.804193][ T8832] [ 348.804202][ T8832] dump_stack_lvl+0xe8/0x150 [ 348.804232][ T8832] should_fail_ex+0x46b/0x600 [ 348.804261][ T8832] should_failslab+0xa8/0x100 [ 348.804281][ T8832] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 348.804308][ T8832] ? __alloc_skb+0x1d0/0x7d0 [ 348.804331][ T8832] ? lockdep_hardirqs_on+0x7a/0x110 [ 348.804364][ T8832] __alloc_skb+0x1d0/0x7d0 [ 348.804393][ T8832] alloc_skb_with_frags+0xca/0x890 [ 348.804431][ T8832] sock_alloc_send_pskb+0x884/0x9a0 [ 348.804451][ T8832] ? __lock_acquire+0x6b5/0x2cf0 [ 348.804486][ T8832] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 348.804507][ T8832] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 348.804532][ T8832] ? __lock_acquire+0x6b5/0x2cf0 [ 348.804557][ T8832] hci_sock_sendmsg+0x208/0xf40 [ 348.804587][ T8832] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 348.804613][ T8832] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.804641][ T8832] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 348.804661][ T8832] sock_write_iter+0x4a1/0x4f0 [ 348.804685][ T8832] ? __pfx_sock_write_iter+0x10/0x10 [ 348.804728][ T8832] vfs_write+0x629/0xba0 [ 348.804761][ T8832] ? __pfx_vfs_write+0x10/0x10 [ 348.804796][ T8832] ? __fget_files+0x2a/0x420 [ 348.804828][ T8832] ksys_write+0x156/0x270 [ 348.804859][ T8832] ? __pfx_ksys_write+0x10/0x10 [ 348.804895][ T8832] do_syscall_64+0x14d/0xf80 [ 348.804926][ T8832] ? trace_irq_disable+0x3b/0x150 [ 348.804946][ T8832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.804966][ T8832] ? clear_bhb_loop+0x40/0x90 [ 348.804988][ T8832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.805007][ T8832] RIP: 0033:0x7fb87e34c799 [ 348.805025][ T8832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.805041][ T8832] RSP: 002b:00007fb87c5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 348.805061][ T8832] RAX: ffffffffffffffda RBX: 00007fb87e5c5fa0 RCX: 00007fb87e34c799 [ 348.805075][ T8832] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000004 [ 348.805087][ T8832] RBP: 00007fb87c5a6090 R08: 0000000000000000 R09: 0000000000000000 [ 348.805099][ T8832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.805110][ T8832] R13: 00007fb87e5c6038 R14: 00007fb87e5c5fa0 R15: 00007ffcb0268988 [ 348.805141][ T8832] [ 350.905050][ T8834] FAULT_INJECTION: forcing a failure. [ 350.905050][ T8834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.905084][ T8834] CPU: 1 UID: 0 PID: 8834 Comm: syz.1.890 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 350.905106][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.905117][ T8834] Call Trace: [ 350.905125][ T8834] [ 350.905133][ T8834] dump_stack_lvl+0xe8/0x150 [ 350.905164][ T8834] should_fail_ex+0x46b/0x600 [ 350.905192][ T8834] prepare_alloc_pages+0x22a/0x6b0 [ 350.905220][ T8834] __alloc_frozen_pages_noprof+0x12f/0x380 [ 350.905244][ T8834] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 350.905274][ T8834] ? __pfx_policy_nodemask+0x10/0x10 [ 350.905292][ T8834] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 350.905320][ T8834] alloc_pages_bulk_noprof+0x5f1/0x7d0 [ 350.905345][ T8834] ? alloc_pages_noprof+0xe3/0x1e0 [ 350.905365][ T8834] __kasan_populate_vmalloc+0xc1/0x1d0 [ 350.905388][ T8834] ? rt_spin_unlock+0x160/0x200 [ 350.905410][ T8834] alloc_vmap_area+0xd73/0x14b0 [ 350.905448][ T8834] ? __pfx_alloc_vmap_area+0x10/0x10 [ 350.905474][ T8834] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 350.905500][ T8834] ? __get_vm_area_node+0x171/0x350 [ 350.905521][ T8834] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 350.905543][ T8834] __get_vm_area_node+0x226/0x350 [ 350.905571][ T8834] __vmalloc_node_range_noprof+0x372/0x1730 [ 350.905597][ T8834] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 350.905627][ T8834] ? __lock_acquire+0x6b5/0x2cf0 [ 350.905650][ T8834] ? __lock_acquire+0x6b5/0x2cf0 [ 350.905677][ T8834] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 350.905716][ T8834] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 350.905736][ T8834] __vmalloc_noprof+0xd2/0x120 [ 350.905760][ T8834] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 350.905785][ T8834] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 350.905812][ T8834] bpf_prog_alloc+0x3c/0x1a0 [ 350.905836][ T8834] bpf_prog_create_from_user+0xa7/0x440 [ 350.905865][ T8834] fanout_set_data+0x2cc/0x430 [ 350.905894][ T8834] ? __pfx_fanout_set_data+0x10/0x10 [ 350.905932][ T8834] packet_setsockopt+0x8b6/0x1510 [ 350.905958][ T8834] ? __pfx_packet_setsockopt+0x10/0x10 [ 350.905990][ T8834] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 350.906016][ T8834] ? lockdep_hardirqs_on+0x7a/0x110 [ 350.906055][ T8834] ? __fget_files+0x2a/0x420 [ 350.906080][ T8834] ? __fget_files+0x2a/0x420 [ 350.906101][ T8834] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 350.906125][ T8834] ? __pfx_packet_setsockopt+0x10/0x10 [ 350.906150][ T8834] do_sock_setsockopt+0x17c/0x1b0 [ 350.906181][ T8834] __x64_sys_setsockopt+0x143/0x1b0 [ 350.906212][ T8834] do_syscall_64+0x14d/0xf80 [ 350.906235][ T8834] ? trace_irq_disable+0x3b/0x150 [ 350.906267][ T8834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.906286][ T8834] ? clear_bhb_loop+0x40/0x90 [ 350.906309][ T8834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.906327][ T8834] RIP: 0033:0x7fb87e34c799 [ 350.906346][ T8834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.906361][ T8834] RSP: 002b:00007fb87c5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 350.906381][ T8834] RAX: ffffffffffffffda RBX: 00007fb87e5c5fa0 RCX: 00007fb87e34c799 [ 350.906394][ T8834] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000003 [ 350.906405][ T8834] RBP: 00007fb87c5a6090 R08: 0000000000000010 R09: 0000000000000000 [ 350.906418][ T8834] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.906429][ T8834] R13: 00007fb87e5c6038 R14: 00007fb87e5c5fa0 R15: 00007ffcb0268988 [ 350.906460][ T8834] [ 350.906519][ T8834] syz.1.890: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 350.906578][ T8834] CPU: 1 UID: 0 PID: 8834 Comm: syz.1.890 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 350.906598][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 350.906609][ T8834] Call Trace: [ 350.906616][ T8834] [ 350.906623][ T8834] dump_stack_lvl+0xe8/0x150 [ 350.906650][ T8834] warn_alloc+0x263/0x3e0 [ 350.906670][ T8834] ? kasan_quarantine_put+0xbb/0x1f0 [ 350.906698][ T8834] ? __pfx_warn_alloc+0x10/0x10 [ 350.906718][ T8834] ? __get_vm_area_node+0x23f/0x350 [ 350.906741][ T8834] ? __get_vm_area_node+0x171/0x350 [ 350.906764][ T8834] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 350.906788][ T8834] ? __get_vm_area_node+0x23f/0x350 [ 350.906819][ T8834] __vmalloc_node_range_noprof+0x397/0x1730 [ 350.906852][ T8834] ? __lock_acquire+0x6b5/0x2cf0 [ 350.906876][ T8834] ? __lock_acquire+0x6b5/0x2cf0 [ 350.906904][ T8834] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 350.906944][ T8834] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 350.906966][ T8834] __vmalloc_noprof+0xd2/0x120 [ 350.906991][ T8834] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 350.907016][ T8834] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 350.907043][ T8834] bpf_prog_alloc+0x3c/0x1a0 [ 350.907068][ T8834] bpf_prog_create_from_user+0xa7/0x440 [ 350.907095][ T8834] fanout_set_data+0x2cc/0x430 [ 350.907123][ T8834] ? __pfx_fanout_set_data+0x10/0x10 [ 350.907164][ T8834] packet_setsockopt+0x8b6/0x1510 [ 350.907192][ T8834] ? __pfx_packet_setsockopt+0x10/0x10 [ 350.907225][ T8834] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 350.907257][ T8834] ? lockdep_hardirqs_on+0x7a/0x110 [ 350.907295][ T8834] ? __fget_files+0x2a/0x420 [ 350.907319][ T8834] ? __fget_files+0x2a/0x420 [ 350.907340][ T8834] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 350.907363][ T8834] ? __pfx_packet_setsockopt+0x10/0x10 [ 350.907388][ T8834] do_sock_setsockopt+0x17c/0x1b0 [ 350.907419][ T8834] __x64_sys_setsockopt+0x143/0x1b0 [ 350.907450][ T8834] do_syscall_64+0x14d/0xf80 [ 350.907473][ T8834] ? trace_irq_disable+0x3b/0x150 [ 350.907493][ T8834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.907512][ T8834] ? clear_bhb_loop+0x40/0x90 [ 350.907534][ T8834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.907552][ T8834] RIP: 0033:0x7fb87e34c799 [ 350.907568][ T8834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.907583][ T8834] RSP: 002b:00007fb87c5a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 350.907601][ T8834] RAX: ffffffffffffffda RBX: 00007fb87e5c5fa0 RCX: 00007fb87e34c799 [ 350.907614][ T8834] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000003 [ 350.907626][ T8834] RBP: 00007fb87c5a6090 R08: 0000000000000010 R09: 0000000000000000 [ 350.907638][ T8834] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.907650][ T8834] R13: 00007fb87e5c6038 R14: 00007fb87e5c5fa0 R15: 00007ffcb0268988 [ 350.907680][ T8834] [ 350.907687][ T8834] Mem-Info: [ 350.907695][ T8834] active_anon:270 inactive_anon:27375 isolated_anon:0 [ 350.907695][ T8834] active_file:23763 inactive_file:37794 isolated_file:0 [ 350.907695][ T8834] unevictable:768 dirty:109 writeback:0 [ 350.907695][ T8834] slab_reclaimable:12046 slab_unreclaimable:116926 [ 350.907695][ T8834] mapped:45080 shmem:21128 pagetables:2042 [ 350.907695][ T8834] sec_pagetables:0 bounce:0 [ 350.907695][ T8834] kernel_misc_reclaimable:0 [ 350.907695][ T8834] free:1271952 free_pcp:1743 free_cma:0 [ 350.907747][ T8834] Node 0 active_anon:1080kB inactive_anon:109500kB active_file:94860kB inactive_file:151176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:180320kB dirty:436kB writeback:0kB shmem:82976kB kernel_stack:13756kB pagetables:8000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 350.907791][ T8834] Node 1 active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 350.907831][ T8834] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.907887][ T8834] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 350.907920][ T8834] Node 0 DMA32 free:1136036kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1080kB inactive_anon:109500kB active_file:94860kB inactive_file:151176kB unevictable:1536kB writepending:436kB zspages:0kB present:3129332kB managed:2566540kB mlocked:0kB bounce:0kB free_pcp:6020kB local_pcp:3184kB free_cma:0kB [ 350.907979][ T8834] lowmem_reserve[]: 0 0 0 0 0 [ 350.908009][ T8834] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.908061][ T8834] lowmem_reserve[]: 0 0 0 0 0 [ 350.908091][ T8834] Node 1 Normal free:3936412kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:952kB local_pcp:952kB free_cma:0kB [ 350.908147][ T8834] lowmem_reserve[]: 0 0 0 0 0 [ 350.908178][ T8834] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 350.908291][ T8834] Node 0 DMA32: 23*4kB (ME) 46*8kB (UME) 28*16kB (UE) 23*32kB (UE) 8*64kB (UME) 142*128kB (UME) 64*256kB (M) 45*512kB (M) 33*1024kB (UME) 13*2048kB (ME) 248*4096kB (M) = 1135980kB [ 350.908438][ T8834] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 350.909531][ T8834] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 6*16kB (UM) 8*32kB (UM) 7*64kB (UM) 3*128kB (M) 2*256kB (UM) 1*512kB (U) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3936464kB [ 350.910270][ T8834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.910288][ T8834] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 350.910303][ T8834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.910318][ T8834] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 350.910333][ T8834] 82682 total pagecache pages [ 350.910340][ T8834] 0 pages in swap cache [ 350.910346][ T8834] Free swap = 124996kB [ 350.910353][ T8834] Total swap = 124996kB [ 350.910360][ T8834] 2097051 pages RAM [ 350.910366][ T8834] 0 pages HighMem/MovableOnly [ 350.910373][ T8834] 423696 pages reserved [ 350.910379][ T8834] 0 pages cma reserved [ 356.619523][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.633792][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.638956][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.667424][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.696211][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.088086][ T8822] vlan2: entered allmulticast mode [ 357.088107][ T8822] team0: entered allmulticast mode [ 357.088118][ T8822] team_slave_0: entered allmulticast mode [ 357.088136][ T8822] team_slave_1: entered allmulticast mode [ 358.802511][ T5809] Bluetooth: hci4: command tx timeout [ 360.298788][ T8848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.325457][ T8848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.349368][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.360013][ T8848] overlayfs: failed to resolve './file0': -2 [ 360.454396][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.471441][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.473783][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.474502][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.881607][ T5812] Bluetooth: hci4: command tx timeout [ 362.802256][ T5812] Bluetooth: hci6: command tx timeout [ 362.966094][ T5812] Bluetooth: hci4: command tx timeout [ 363.856711][ T36] usb 4-1: USB disconnect, device number 25 [ 364.998049][ T5812] Bluetooth: hci6: command tx timeout [ 365.047145][ T5812] Bluetooth: hci4: command tx timeout [ 365.398460][ T8856] bond2: option ad_user_port_key: invalid value (2306) [ 365.468721][ T8856] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 367.038754][ T5812] Bluetooth: hci6: command tx timeout [ 367.072776][ T5809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 367.096997][ T5809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 367.102650][ T5809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 367.108714][ T5809] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 367.109538][ T5809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.421034][ T8856] bond2 (unregistering): Released all slaves [ 367.421213][ T5809] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 367.448768][ T5809] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 367.450660][ T5809] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 367.488823][ T5809] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 367.521233][ T5809] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 369.118668][ T5812] Bluetooth: hci6: command tx timeout [ 369.283632][ T5812] Bluetooth: hci7: command tx timeout [ 369.678975][ T5812] Bluetooth: hci8: command tx timeout [ 371.430447][ T5812] Bluetooth: hci7: command tx timeout [ 371.769081][ T5812] Bluetooth: hci8: command tx timeout [ 373.441103][ T5812] Bluetooth: hci7: command tx timeout [ 373.862869][ T5812] Bluetooth: hci8: command tx timeout [ 375.518712][ T5812] Bluetooth: hci7: command tx timeout [ 375.918767][ T5812] Bluetooth: hci8: command tx timeout [ 378.565254][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.565327][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.809077][ T809] usb 2-1: USB disconnect, device number 9 [ 382.041337][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.044886][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.086194][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.098767][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.129306][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.819085][ T8849] chnl_net:caif_netlink_parms(): no params data found [ 382.858871][ T8835] chnl_net:caif_netlink_parms(): no params data found [ 384.158637][ T5812] Bluetooth: hci5: command tx timeout [ 386.250494][ T5812] Bluetooth: hci5: command tx timeout [ 388.318654][ T5812] Bluetooth: hci5: command tx timeout [ 390.398642][ T5812] Bluetooth: hci5: command tx timeout [ 392.389746][ T8860] chnl_net:caif_netlink_parms(): no params data found [ 396.338680][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.338872][ T8849] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.339125][ T8849] bridge_slave_0: entered allmulticast mode [ 396.342713][ T8849] bridge_slave_0: entered promiscuous mode [ 396.819265][ T8859] chnl_net:caif_netlink_parms(): no params data found [ 396.903470][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.903594][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.903837][ T8835] bridge_slave_0: entered allmulticast mode [ 396.940979][ T8835] bridge_slave_0: entered promiscuous mode [ 397.221374][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.235896][ T8849] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.236159][ T8849] bridge_slave_1: entered allmulticast mode [ 397.298639][ T8849] bridge_slave_1: entered promiscuous mode [ 397.603904][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.604029][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.604263][ T8835] bridge_slave_1: entered allmulticast mode [ 397.606824][ T8835] bridge_slave_1: entered promiscuous mode [ 399.451278][ T8849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.632144][ T8835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.813589][ T8849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.371444][ T8835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.514005][ T8849] team0: Port device team_slave_0 added [ 412.544239][ T8860] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.544355][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.544595][ T8860] bridge_slave_0: entered allmulticast mode [ 412.573663][ T8860] bridge_slave_0: entered promiscuous mode [ 415.593306][ T8849] team0: Port device team_slave_1 added [ 415.594294][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.594412][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.594607][ T8860] bridge_slave_1: entered allmulticast mode [ 415.597103][ T8860] bridge_slave_1: entered promiscuous mode [ 415.632283][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.632402][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.632618][ T8859] bridge_slave_0: entered allmulticast mode [ 415.676555][ T8859] bridge_slave_0: entered promiscuous mode [ 415.692177][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 415.706166][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 415.717347][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 415.729051][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 415.729796][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 416.479418][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.479541][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.479787][ T8859] bridge_slave_1: entered allmulticast mode [ 416.482490][ T8859] bridge_slave_1: entered promiscuous mode [ 418.014836][ T5812] Bluetooth: hci3: command tx timeout [ 420.079059][ T5812] Bluetooth: hci3: command tx timeout [ 420.281183][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.285338][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.286902][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.287986][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.290763][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.158790][ T5812] Bluetooth: hci3: command tx timeout [ 422.318746][ T5812] Bluetooth: hci4: command tx timeout [ 422.535996][ T8860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.240942][ T5812] Bluetooth: hci3: command tx timeout [ 424.601760][ T5812] Bluetooth: hci4: command tx timeout [ 424.632916][ T8860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.638630][ T5812] Bluetooth: hci4: command tx timeout [ 428.424413][ T5804] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 428.437877][ T5804] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 428.460109][ T61] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 428.540570][ T61] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 428.542764][ T61] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 428.543522][ T61] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 428.564153][ T5812] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 428.566667][ T5812] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 428.570120][ T5812] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 428.574933][ T5812] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 428.718619][ T5809] Bluetooth: hci4: command tx timeout [ 430.641004][ T5812] Bluetooth: hci10: command tx timeout [ 431.358812][ T5812] Bluetooth: hci9: command tx timeout [ 432.718612][ T5812] Bluetooth: hci10: command tx timeout [ 433.438670][ T5812] Bluetooth: hci9: command tx timeout [ 434.798606][ T5812] Bluetooth: hci10: command tx timeout [ 435.518653][ T5812] Bluetooth: hci9: command tx timeout [ 436.878955][ T5812] Bluetooth: hci10: command tx timeout [ 437.598781][ T5812] Bluetooth: hci9: command tx timeout [ 440.003784][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.027726][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.027793][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.589624][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 443.602671][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 443.608730][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 443.610058][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 443.610718][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 445.688825][ T61] Bluetooth: hci6: command tx timeout [ 447.560161][ T8881] chnl_net:caif_netlink_parms(): no params data found [ 447.758645][ T61] Bluetooth: hci6: command tx timeout [ 449.838827][ T61] Bluetooth: hci6: command tx timeout [ 451.938611][ T61] Bluetooth: hci6: command tx timeout [ 469.249263][ T8903] chnl_net:caif_netlink_parms(): no params data found [ 470.545917][ T8909] chnl_net:caif_netlink_parms(): no params data found [ 475.457631][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 476.548990][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 476.554162][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 476.559915][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 476.562958][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 478.638638][ T61] Bluetooth: hci5: command tx timeout [ 479.232386][ T8918] chnl_net:caif_netlink_parms(): no params data found [ 479.970038][ T8917] chnl_net:caif_netlink_parms(): no params data found [ 480.719094][ T61] Bluetooth: hci5: command tx timeout [ 481.660125][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 481.686693][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 481.692146][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 481.693473][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 481.694165][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 482.798754][ T61] Bluetooth: hci5: command tx timeout [ 483.758617][ T61] Bluetooth: hci3: command tx timeout [ 484.878568][ T61] Bluetooth: hci5: command tx timeout [ 485.838651][ T61] Bluetooth: hci3: command tx timeout [ 487.486767][ T8929] chnl_net:caif_netlink_parms(): no params data found [ 487.522852][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 487.566377][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 487.568343][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 487.588441][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 487.602951][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 487.918582][ T5812] Bluetooth: hci3: command tx timeout [ 489.680073][ T5812] Bluetooth: hci4: command tx timeout [ 490.083052][ T5812] Bluetooth: hci3: command tx timeout [ 491.759018][ T61] Bluetooth: hci4: command tx timeout [ 492.304889][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 492.327927][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 492.336245][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 492.356225][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 492.356978][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 493.848557][ T5812] Bluetooth: hci4: command tx timeout [ 494.478707][ T5812] Bluetooth: hci7: command tx timeout [ 495.918749][ T5812] Bluetooth: hci4: command tx timeout [ 496.565489][ T5812] Bluetooth: hci7: command tx timeout [ 498.816142][ T5812] Bluetooth: hci7: command tx timeout [ 500.878879][ T5812] Bluetooth: hci7: command tx timeout [ 501.463624][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.463694][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.167675][ T61] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 502.199786][ T61] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 502.205538][ T61] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 502.206666][ T61] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 502.207748][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 504.318659][ T61] Bluetooth: hci8: command tx timeout [ 505.278895][ T38] INFO: task syz.3.886:8822 blocked for more than 143 seconds. [ 505.278919][ T38] Not tainted syzkaller #0 [ 505.278929][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 505.278938][ T38] task:syz.3.886 state:D stack:19104 pid:8822 tgid:8821 ppid:5797 task_flags:0x400140 flags:0x00080002 [ 505.278992][ T38] Call Trace: [ 505.278999][ T38] [ 505.279014][ T38] __schedule+0x1553/0x5240 [ 505.279058][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 505.279081][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 505.279117][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 505.279138][ T38] ? __pfx___schedule+0x10/0x10 [ 505.279173][ T38] rt_mutex_schedule+0x76/0xf0 [ 505.279195][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 505.279236][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 505.279260][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 505.279282][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 505.279322][ T38] ? rcu_barrier+0x4c/0x580 [ 505.279350][ T38] ? rcu_barrier+0x4c/0x580 [ 505.279369][ T38] mutex_lock_nested+0x168/0x1d0 [ 505.279390][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 505.279417][ T38] rcu_barrier+0x4c/0x580 [ 505.279449][ T38] netdev_run_todo+0x2e0/0xde0 [ 505.279477][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 505.279497][ T38] ? rtnl_newlink+0x8a1/0x1be0 [ 505.279537][ T38] rtnl_newlink+0x16c7/0x1be0 [ 505.279558][ T38] ? kasan_save_track+0x3e/0x80 [ 505.279596][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 505.279645][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 505.279672][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 505.279697][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 505.279727][ T38] ? kmem_cache_free+0x185/0x6b0 [ 505.279745][ T38] ? nlmon_xmit+0xb0/0x100 [ 505.279781][ T38] ? __local_bh_enable+0x1e1/0x2f0 [ 505.279809][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 505.279833][ T38] ? __dev_queue_xmit+0x27d/0x39b0 [ 505.279856][ T38] ? __dev_queue_xmit+0x1ebb/0x39b0 [ 505.279874][ T38] ? netlink_unicast+0x805/0x9f0 [ 505.279895][ T38] ? netlink_sendmsg+0x813/0xb40 [ 505.279917][ T38] ? ____sys_sendmsg+0x94c/0x9c0 [ 505.279960][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 505.279984][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 505.280012][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 505.280035][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 505.280064][ T38] ? ref_tracker_free+0x673/0x820 [ 505.280086][ T38] ? __copy_skb_header+0xa3/0x4a0 [ 505.280106][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 505.280127][ T38] ? __skb_clone+0x63/0x7a0 [ 505.280155][ T38] netlink_rcv_skb+0x232/0x4b0 [ 505.280180][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 505.280206][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.280241][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 505.280273][ T38] netlink_unicast+0x831/0x9f0 [ 505.280304][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 505.280328][ T38] ? netlink_sendmsg+0x650/0xb40 [ 505.280350][ T38] ? skb_put+0x11b/0x210 [ 505.280380][ T38] netlink_sendmsg+0x813/0xb40 [ 505.280414][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.280446][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 505.280476][ T38] ____sys_sendmsg+0x94c/0x9c0 [ 505.280501][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.280530][ T38] ? import_iovec+0x73/0xa0 [ 505.280559][ T38] ___sys_sendmsg+0x2a5/0x360 [ 505.280585][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.280612][ T38] ? futex_wait+0x29a/0x380 [ 505.280660][ T38] ? __fget_files+0x2a/0x420 [ 505.280682][ T38] ? __fget_files+0x3a6/0x420 [ 505.280715][ T38] __x64_sys_sendmsg+0x1c3/0x2a0 [ 505.280738][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.280767][ T38] ? rcu_is_watching+0x15/0xb0 [ 505.280799][ T38] do_syscall_64+0x14d/0xf80 [ 505.280824][ T38] ? trace_irq_disable+0x3b/0x150 [ 505.280844][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.280864][ T38] ? clear_bhb_loop+0x40/0x90 [ 505.280887][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.280907][ T38] RIP: 0033:0x7f5e8833c799 [ 505.280925][ T38] RSP: 002b:00007f5e8658e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.280945][ T38] RAX: ffffffffffffffda RBX: 00007f5e885b5fa0 RCX: 00007f5e8833c799 [ 505.280959][ T38] RDX: 0000000008000002 RSI: 0000200000000080 RDI: 0000000000000004 [ 505.280971][ T38] RBP: 00007f5e883d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 505.280983][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.280994][ T38] R13: 00007f5e885b6038 R14: 00007f5e885b5fa0 R15: 00007ffe184e7a18 [ 505.281026][ T38] [ 505.281075][ T38] [ 505.281075][ T38] Showing all locks held in the system: [ 505.281085][ T38] 2 locks held by kworker/0:1/10: [ 505.281099][ T38] 1 lock held by khungtaskd/38: [ 505.281109][ T38] #0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 505.281160][ T38] 9 locks held by kworker/u8:2/43: [ 505.281176][ T38] 9 locks held by kworker/u8:6/149: [ 505.281202][ T38] 5 locks held by kworker/u8:12/3888: [ 505.281216][ T38] 2 locks held by getty/5556: [ 505.281226][ T38] #0: ffff888037d6d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 505.281275][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 505.281327][ T38] 1 lock held by syz.5.694/8233: [ 505.281338][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.281385][ T38] 1 lock held by syz.2.871/8771: [ 505.281395][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.281442][ T38] 2 locks held by syz.0.878/8800: [ 505.281452][ T38] #0: ffffffff8f6a5e20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 505.281506][ T38] #1: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.281552][ T38] 2 locks held by syz.3.886/8822: [ 505.281562][ T38] #0: ffffffff8f6c17e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 505.281616][ T38] #1: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.281661][ T38] 1 lock held by syz-executor/8835: [ 505.281671][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.281716][ T38] 1 lock held by syz-executor/8849: [ 505.281727][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.281772][ T38] 2 locks held by syz.1.896/8856: [ 505.281782][ T38] #0: ffffffff8f6a56d8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 505.281835][ T38] #1: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.281880][ T38] 1 lock held by syz-executor/8859: [ 505.281891][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.281937][ T38] 1 lock held by syz-executor/8860: [ 505.281948][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.281993][ T38] 1 lock held by syz-executor/8881: [ 505.282004][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.282056][ T38] 1 lock held by syz-executor/8903: [ 505.282066][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.282113][ T38] 1 lock held by syz-executor/8909: [ 505.282124][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.282169][ T38] 1 lock held by syz-executor/8917: [ 505.282180][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.282225][ T38] 1 lock held by syz-executor/8918: [ 505.282236][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 505.282281][ T38] 1 lock held by syz-executor/8929: [ 505.282293][ T38] 1 lock held by syz-executor/8949: [ 505.282303][ T38] #0: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 505.282350][ T38] 2 locks held by syz-executor/8957: [ 505.282361][ T38] #0: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 505.282408][ T38] #1: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 505.282458][ T38] 2 locks held by syz-executor/8960: [ 505.282469][ T38] #0: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 505.282515][ T38] #1: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 505.282562][ T38] 2 locks held by syz-executor/8963: [ 505.282573][ T38] 2 locks held by syz-executor/8970: [ 505.282583][ T38] #0: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 505.282630][ T38] #1: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 505.282679][ T38] 1 lock held by dhcpcd/8977: [ 505.282689][ T38] #0: ffff88805fb68278 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 505.282739][ T38] 1 lock held by dhcpcd/8978: [ 505.282749][ T38] #0: ffff888040eea978 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 505.282800][ T38] 1 lock held by dhcpcd/8979: [ 505.282811][ T38] 1 lock held by dhcpcd/8980: [ 505.282821][ T38] #0: ffff8880609aa358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 505.282872][ T38] [ 505.282877][ T38] ============================================= [ 505.282877][ T38] [ 505.282896][ T38] NMI backtrace for cpu 1 [ 505.282917][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 505.282966][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.282989][ T38] Call Trace: [ 505.283005][ T38] [ 505.283022][ T38] dump_stack_lvl+0xe8/0x150 [ 505.283081][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 505.283103][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 505.283130][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 505.283155][ T38] sys_info+0x135/0x170 [ 505.283174][ T38] watchdog+0xfd9/0x1030 [ 505.283201][ T38] ? watchdog+0x21a/0x1030 [ 505.283229][ T38] kthread+0x388/0x470 [ 505.283249][ T38] ? __pfx_watchdog+0x10/0x10 [ 505.283268][ T38] ? __pfx_kthread+0x10/0x10 [ 505.283288][ T38] ret_from_fork+0x51e/0xb90 [ 505.283316][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 505.283338][ T38] ? __switch_to+0xc7d/0x1450 [ 505.283364][ T38] ? __pfx_kthread+0x10/0x10 [ 505.283385][ T38] ret_from_fork_asm+0x1a/0x30 [ 505.283418][ T38] [ 505.283425][ T38] Sending NMI from CPU 1 to CPUs 0: [ 505.283451][ C0] NMI backtrace for cpu 0 [ 505.283468][ C0] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 505.283510][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.283533][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 505.283562][ C0] RIP: 0010:__lock_acquire+0x6d5/0x2cf0 [ 505.283579][ C0] Code: ba 08 00 00 00 e8 6b 44 00 00 31 ed 85 c0 0f 84 6d 0d 00 00 83 3d 9a 54 b9 17 00 75 13 48 63 44 24 18 48 0f a3 05 6b c4 b5 11 <0f> 83 8a 1e 00 00 49 8b 9e a8 0b 00 00 48 83 7c 24 28 00 75 19 83 [ 505.283592][ C0] RSP: 0018:ffffc90000b565b8 EFLAGS: 00000047 [ 505.283605][ C0] RAX: 000000000000000b RBX: ffff88801fa94a18 RCX: ffffffff92f70c88 [ 505.283617][ C0] RDX: 0000000000000008 RSI: ffff88801fa949f8 RDI: ffff88801fa93d00 [ 505.283628][ C0] RBP: 0000000000000000 R08: ffffffff81767e65 R09: ffffffff8ddcb980 [ 505.283639][ C0] R10: ffffc90000b56898 R11: ffffffff81af8890 R12: 0000000000000003 [ 505.283650][ C0] R13: ffff88801fa949f8 R14: ffff88801fa93d00 R15: 0000000000000008 [ 505.283661][ C0] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 505.283674][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 505.283685][ C0] CR2: 00007f77f413d708 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 505.283700][ C0] Call Trace: [ 505.283705][ C0] [ 505.283715][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 505.283733][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 505.283749][ C0] lock_acquire+0xf0/0x2e0 [ 505.283763][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 505.283779][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 505.283793][ C0] ? process_scheduled_works+0xb6e/0x18c0 [ 505.283812][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 505.283826][ C0] unwind_next_frame+0xc2/0x23c0 [ 505.283839][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 505.283856][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 505.283871][ C0] ? nsim_dev_trap_report_work+0x29f/0xbc0 [ 505.283889][ C0] ? process_scheduled_works+0xb6e/0x18c0 [ 505.283908][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 505.283929][ C0] arch_stack_walk+0x11b/0x150 [ 505.283946][ C0] ? process_scheduled_works+0xb6e/0x18c0 [ 505.283965][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 505.283984][ C0] stack_trace_save+0xa9/0x100 [ 505.284001][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 505.284021][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 505.284036][ C0] kasan_save_track+0x3e/0x80 [ 505.284055][ C0] ? kasan_save_track+0x3e/0x80 [ 505.284073][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 505.284092][ C0] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 505.284113][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 505.284131][ C0] ? synproxy_send_client_synack+0x172/0xe30 [ 505.284151][ C0] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 505.284165][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 505.284179][ C0] ? nft_do_chain+0x45e/0x1990 [ 505.284193][ C0] ? nft_do_chain_inet+0x29d/0x380 [ 505.284213][ C0] ? nf_hook_slow+0xc5/0x220 [ 505.284232][ C0] ? NF_HOOK+0x21f/0x3c0 [ 505.284246][ C0] ? NF_HOOK+0x336/0x3c0 [ 505.284258][ C0] ? process_backlog+0x569/0xc60 [ 505.284277][ C0] ? __napi_poll+0xaf/0x580 [ 505.284293][ C0] ? net_rx_action+0x696/0xe00 [ 505.284310][ C0] ? handle_softirqs+0x1de/0x6f0 [ 505.284328][ C0] ? __local_bh_enable_ip+0x170/0x2b0 [ 505.284346][ C0] ? __alloc_skb+0x1aa/0x7d0 [ 505.284364][ C0] ? nsim_dev_trap_report_work+0x29f/0xbc0 [ 505.284382][ C0] ? process_scheduled_works+0xb6e/0x18c0 [ 505.284415][ C0] __kasan_slab_alloc+0x6c/0x80 [ 505.284436][ C0] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 505.284457][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 505.284478][ C0] __alloc_skb+0x1d0/0x7d0 [ 505.284498][ C0] synproxy_send_client_synack+0x172/0xe30 [ 505.284524][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 505.284551][ C0] ? nft_log_dump+0x20/0x4e0 [ 505.284568][ C0] ? synproxy_pernet+0x45/0x270 [ 505.284585][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 505.284602][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 505.284619][ C0] ? nf_ip_checksum+0x13c/0x510 [ 505.284635][ C0] nft_synproxy_do_eval+0x305/0x580 [ 505.284652][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 505.284674][ C0] nft_do_chain+0x45e/0x1990 [ 505.284690][ C0] ? nft_do_chain+0x16e9/0x1990 [ 505.284707][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 505.284733][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 505.284750][ C0] nft_do_chain_inet+0x29d/0x380 [ 505.284771][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 505.284794][ C0] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 505.284816][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 505.284837][ C0] nf_hook_slow+0xc5/0x220 [ 505.284858][ C0] NF_HOOK+0x21f/0x3c0 [ 505.284873][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 505.284888][ C0] ? NF_HOOK+0x9e/0x3c0 [ 505.284902][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 505.284914][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 505.284931][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 505.284948][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 505.284964][ C0] NF_HOOK+0x336/0x3c0 [ 505.284977][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 505.284998][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 505.285013][ C0] ? NF_HOOK+0x9e/0x3c0 [ 505.285026][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 505.285041][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 505.285059][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 505.285073][ C0] ? process_backlog+0x271/0xc60 [ 505.285090][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 505.285104][ C0] process_backlog+0x569/0xc60 [ 505.285130][ C0] __napi_poll+0xaf/0x580 [ 505.285146][ C0] ? skb_defer_free_flush+0x233/0x260 [ 505.285165][ C0] net_rx_action+0x696/0xe00 [ 505.285190][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 505.285208][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 505.285231][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 505.285248][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 505.285274][ C0] handle_softirqs+0x1de/0x6f0 [ 505.285297][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 505.285316][ C0] ? __alloc_skb+0x186/0x7d0 [ 505.285335][ C0] __alloc_skb+0x1aa/0x7d0 [ 505.285355][ C0] nsim_dev_trap_report_work+0x29f/0xbc0 [ 505.285381][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 505.285402][ C0] process_scheduled_works+0xb6e/0x18c0 [ 505.285433][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 505.285455][ C0] ? assign_work+0x3d5/0x5e0 [ 505.285475][ C0] worker_thread+0xa53/0xfc0 [ 505.285505][ C0] kthread+0x388/0x470 [ 505.285520][ C0] ? __pfx_worker_thread+0x10/0x10 [ 505.285544][ C0] ? __pfx_kthread+0x10/0x10 [ 505.285560][ C0] ret_from_fork+0x51e/0xb90 [ 505.285580][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 505.285598][ C0] ? __switch_to+0xc7d/0x1450 [ 505.285617][ C0] ? __pfx_kthread+0x10/0x10 [ 505.285632][ C0] ret_from_fork_asm+0x1a/0x30 [ 505.285653][ C0] [ 505.286460][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 505.286475][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 505.286496][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.286507][ T38] Call Trace: [ 505.286514][ T38] [ 505.286522][ T38] vpanic+0x56c/0xa60 [ 505.286552][ T38] ? __pfx_vpanic+0x10/0x10 [ 505.286587][ T38] panic+0xc5/0xd0 [ 505.286610][ T38] ? __pfx_panic+0x10/0x10 [ 505.286633][ T38] ? printk_trigger_flush+0x117/0x180 [ 505.286658][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 505.286690][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 505.286716][ T38] watchdog+0x1023/0x1030 [ 505.286743][ T38] ? watchdog+0x21a/0x1030 [ 505.286772][ T38] kthread+0x388/0x470 [ 505.286792][ T38] ? __pfx_watchdog+0x10/0x10 [ 505.286812][ T38] ? __pfx_kthread+0x10/0x10 [ 505.286833][ T38] ret_from_fork+0x51e/0xb90 [ 505.286860][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 505.286883][ T38] ? __switch_to+0xc7d/0x1450 [ 505.286908][ T38] ? __pfx_kthread+0x10/0x10 [ 505.286929][ T38] ret_from_fork_asm+0x1a/0x30 [ 505.286962][ T38] [ 505.287244][ T38] Kernel Offset: disabled