last executing test programs: 19.247117071s ago: executing program 1 (id=202): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast}}}}) close_range(r2, 0xffffffffffffffff, 0x0) 15.212361243s ago: executing program 3 (id=210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000021000005000700ff0000000c00018008000140e00040000c00028008000140e00000020d00148008000140ffffffe200"/95], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x2004c484) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x100, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 14.847394564s ago: executing program 0 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000002000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x30, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xac}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./dev/ttyUSB0\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3"], 0x0) stat(&(0x7f0000000080)='./dev/ttyUSB0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@nullb, r3, &(0x7f0000000280)) fchmodat(r2, &(0x7f0000000300)='./dev\x00', 0xfffffffb) r4 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) openat(r4, &(0x7f0000000340)='./dev\x00', 0x10800, 0x5c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$rtc(0xffffffffffffff9c, 0x0, 0x840, 0x0) ioctl$RTC_PIE_ON(r6, 0x7005) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x21) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) syz_usb_connect(0x5, 0x47, &(0x7f0000001280)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904"], 0x0) 14.710240588s ago: executing program 3 (id=213): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) fchdir(r2) r3 = open(&(0x7f0000000200)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9360, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000a9b000/0x1000)=nil, 0x1000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x92a1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x9d7203fc8afb1c97, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) 13.902957872s ago: executing program 1 (id=214): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000002c0)="740300005f03ed8bb89e08f086dd96bbc59d8f37f30c63c489d23eafdce458f21a4d8d457abf08e67639aea332608ea55f71661f645e", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) chroot(&(0x7f0000000100)='./file0\x00') 13.90135308s ago: executing program 3 (id=215): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x14, 0x16, 0xa01, 0x4001, 0x0, {0xa}}, 0x14}}, 0x0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x4002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) lseek(r3, 0x0, 0x4) readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 11.928737176s ago: executing program 1 (id=216): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) r2 = epoll_create1(0x0) sendmmsg$alg(r1, &(0x7f0000007140)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000805}], 0x1, 0x48000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x30000000}) 11.654691019s ago: executing program 3 (id=217): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@fallback=r3, r3, 0x2e, 0x4, r3, @void, @value=r3}, 0x20) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc8, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfa5a8d9}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x9c, 0x8, 0x0, 0x1, [{0x4}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c5052aa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7672572e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64c1065e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38317973}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2237d0a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4da232ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50413e82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c4b62d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}]}]}]}, 0xc8}}, 0x4000014) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x1, {{@in=@multicast2, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x0, 0x20, 0x5c}, {0x1ff, 0x0, 0x0, 0xfffffffffffffffc, 0x10000, 0x0, 0x0, 0xfffffffffffffffb}, {0x218, 0x9, 0x200000000000000, 0x4}, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x1}, [@mark={0xc, 0x15, {0x35075b, 0x3}}]}, 0xc4}}, 0x2c000014) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000008c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) ptrace(0x10, r6) tkill(r6, 0x30) ptrace$peeksig(0x4209, r6, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) syz_emit_ethernet(0x66, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x6c, 0x40, @local, @remote}}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x58f, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8001, 0x8, 0x3, 0x80000001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.618955952s ago: executing program 4 (id=218): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000006c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r1, 0x16, 0x1, 0x1400000, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0}, 0x40) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x28003, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x135) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000680)='./mnt\x00', &(0x7f0000000700)='minix\x00', 0x8410, 0x0) 11.518609923s ago: executing program 0 (id=219): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) r2 = epoll_create1(0x0) sendmmsg$alg(r1, &(0x7f0000007140)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000805}], 0x1, 0x48000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x30000000}) (fail_nth: 1) 11.004316239s ago: executing program 0 (id=221): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async, rerun: 32) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x2449, 0x2, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000001403000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000007c000000b700000001000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac66ad029d1c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a7c31de7910d1ed4065a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db3503680e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dacfeb47479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3de8726c2a61ec45c19f97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9bdce38c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4af05c28308241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5490f6589880ed6eea7b9c670012be05e7de0940313c5870786554df2623d58f5ace92d028f2c71a6ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77962a2cd8a104e16b77d5f7f13b1640d43e11801140caf1a8b1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b905fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf34117a82a96b2ced73abb8e4bb718d6ee7aebf9ef40662d7836d252c566f5ee938a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000001762e5f5a3a0bc33fdbe28a5ffc83f2f08544eb2794e7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f85d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d801002653c4d9818708e27c89b552d3fcd11ebce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff2a8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4000000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b850580994484305d7a1759782ae57773e0d8b0ab900edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0bd91e328b6a6f732a91f0e2e9120be61e58c79d497247d278888901d44bf77ff246605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c2d0836395fe39f0e11c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc71300000000000021000000b12f0ec0412268860027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b50f3ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861ddb54684cb73e7aeefae47fa09fd88e6043bd52ae84c1bb0c8a6b769f952283a1f4e3842edb3d42c68a2102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e81163bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4c4b51b1f922a44ec675203bf8d1548e49262727c3de6daab3b4ed15aa99802e45d0620617e839b5237ddfcf103c91e61d174e3be6c9fd47398797e3b814e751ff31ecb42de6dd9d6b88121aaa680c236a303914e00150e1ec3f144ebc28287d5b51cfb8cabb844d12b140767d0fc24425590024b2e431722392489e3d43b3e31438a0138988083c47c61384d54e9a40fba01cac6e59ec82edc764840fe551c1d57442970cd8e59b9f41094e158c0a1ee855d8515599685486c2a21fa1c107531a0db8306441e8408b34aa90e9736e672d74cb8e78f8bdb93a23d024fc200796836ab396911a56231e953efad6cd83db32ffc595d970108e9547ea0000002730d5d1b70fe8b458ac1651135037b6cb9c8053299f77ab84c5b9fd2f764c3caa9c69377c397d310ddc7bc4bfa165def7b49e28ef196ae263b6829a8419d8860f56c86c288964ac4bc19839d96ff24b981c3a4fd6f93a000000ea9d6b06dafae4c91177", @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8001}, 0x10}, 0x50) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8f, 0x0, &(0x7f0000000100)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6a9310b27e0cfa1bd1b9681010191b1621ede21d1a35bee936310009c5b58259a71b07ec6ba7cb67b84a895bd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2be3f656d8f630632395fd3377dc1ee6daeeae21d79df2ce65cd0930600000000000000da3f94de97", 0x0, 0xfffff7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc}, 0x50) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a090581"], 0x0) 10.806859636s ago: executing program 4 (id=222): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x6, 0x3, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x64, 0x0, 0x0, 0x2b, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp_prespec={0x44, 0x2c, 0x66, 0x3, 0x1, [{@remote, 0xbb69}, {@private=0xa010101, 0xa14c}, {@local, 0x7fffffff}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x7ff}]}, @timestamp={0x44, 0x18, 0x32, 0x0, 0x9, [0x1, 0x3, 0x3, 0x1ff, 0x1]}, @timestamp_addr={0x44, 0x14, 0x8c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xead}, {@multicast2, 0x5}]}, @lsrr={0x83, 0x1f, 0x94, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0xa}, @local, @private=0xa010101, @multicast1, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r0, 0x2f, 0x4, 0xb7, 0x8, 0x12, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast1, 0x1, 0x20, 0x80000000, 0xff}}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x157, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a20000000000a01030000000000000000010000000900010073797a310000000024000000030a0102000000000000000001000000040004800900010073797a31ae0f000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000c0004800800014000000005140000001100010000000000000000000000000a"], 0xa4}}, 0x0) setns(0xc9, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b0000000000011907864010101ac14142100004e20009c907801000000000400007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340), 0x8700, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x3, 0x20, 0x5d79bb3e, 0x7f}, &(0x7f00000003c0)=0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf910}}}, &(0x7f00000004c0)=0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r6 = open(&(0x7f0000001080)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r6, 0x400, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) write$P9_RLERRORu(r5, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="c40000007d0a000000ab000300060000000001000000050000000000000000001000081100000700000002000000000000000300529000010000730017e05f7c732feccf1e7c7ef42a774958be5b5f12d47a5a7385c42fa23f9b3d824fc7f7f10dd00614bbf1bb99aadbf1f0e3df1c167b220c8c30d049ff02293a39e7a69e7ea9a3f7aa57296f961b6d2bcbf1bf0eaad67c22f733722b4610f250cc1fd77ffc0e2c78e5105efff91200000000000001007b040047504c0039d66bfa7c1f8bf30100010000000000b293b09b778763caf5a800a3427d531e11da37000000000000000911d43567b4a751cc706fe889", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xc4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) 10.728552841s ago: executing program 3 (id=224): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast}}}}) close_range(r2, 0xffffffffffffffff, 0x0) 9.283334714s ago: executing program 2 (id=225): lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "7a8b74"}, 0x4, 0x2) timer_create(0x5, &(0x7f0000000280)={0x0, 0x3e, 0x1, @thr={&(0x7f00000000c0)="6d40594c1d4d3043fc15ab6a871a49f58667355f2c511bd01ec19fe5750c754e2fd34e23c849d9823ee97800b07677f2a5f9a22f442c2ed2a9537c673ef6d779572ba959168c94b196f4af7dade67ecb8518c9391a5f6e4c25efe00f41030ca156d2ca43502b4181a27516aabe8c92d6df4e2a83b73e892bbc43fef40809474a6329959f605cd9213aabc6427e068cf082e0b61c6678adbfa6be00fdcfc1900690dc961cbb1c9d230a17e84f787f04f7d6740e3080b0487278b01a10d647d37074eae7d888f3dd49149b9f55e98f8e1f9b0e1f168c913e8ced289da0", &(0x7f00000001c0)="afb04fa7abf1e89e57a66390cead1447c406a1a5459ddc905a73597d883d7358f66d57a34341a0434cd4f90e5c09e8f2480f87815d9494982022bdf309d3988c4e93dbce0e21276f673819d9a83d438978a1d4fd4d6a687d7b85dd23dbab7c09318893b1ab2489aca9f1af289a05051f5601a36b9986c3bfacefaba5f47c612c3a6b"}}, &(0x7f00000002c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, &(0x7f0000000340)) r1 = syz_open_dev$radio(&(0x7f0000000380), 0x3, 0x2) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000400)={{[0x23, 0x1000, 0x9, 0x6]}, 0x0, 0x0, 0xc891, 0x0, &(0x7f00000003c0)=[{{@_ha_fsid={[0x10001, 0x5]}, {0x81, 0x0, 0x6, 0x191b}}, 0x8001, 0x0, 'security.ima\x00'}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000600)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_rdma(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x10a2411, &(0x7f0000000700)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0x23}}, {@timeout={'timeout', 0x3d, 0x3}}, {@rq={'rq', 0x3d, 0x923}}, {@common=@cache_readahead}, {@rq={'rq', 0x3d, 0x4}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'security.ima\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/radio#\x00'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@uid_lt={'uid<', r4}}, {@subj_user={'subj_user', 0x3d, '!'}}]}}) close(r1) vmsplice(r1, &(0x7f0000001940)=[{&(0x7f0000000880)="d16c400757d3e83cc0c37e150e67c1ec9da455f1d6bd169090dd4c714f98894d1c1dede88016e4f623090c7830871a1dfe73421b02d0edd217e5b7b1fd61d243637edd6265ce3af346bfbbdd960594f957cf8b052771f84763d316b6d9a625db3ea556a37e06685e9ed33994fa1bc7599315273143623a301072a53645", 0x7d}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="1dd859e3afecbf269f8574b856884d481a0c217aa16e3809b5a4be169ae62f8296cbb2405e59343fe97817897070b08f1fab", 0x32}], 0x3, 0x0) timer_delete(r0) syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x1e, 0x3617, 0xe5a, 0xc, 0x41, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x5}, 0x50) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1) r7 = socket(0x26, 0x5, 0x5) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001a80)={'veth1_vlan\x00', &(0x7f0000001a40)=@ethtool_sfeatures={0x3b, 0x1, [{0x7, 0xf}]}}) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001b00), r7) r9 = syz_open_procfs$userns(0x0, &(0x7f0000001b40)) sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x54, r8, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000001d80)={r1, &(0x7f0000001c80)='!\x00', 0x454801, &(0x7f0000001cc0)={@align=0xe, {0x1ff, 0x6, 0x4, 0x1}}, 0x6, &(0x7f0000001d00), &(0x7f0000001d40)=0x7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000001dc0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r10, 0x3b80, &(0x7f0000001e40)={0x8, r11}) recvfrom$llc(r10, &(0x7f0000001e80)=""/79, 0x4f, 0x20, &(0x7f0000001f00)={0x1a, 0x206, 0x1, 0x5, 0x1, 0x3, @remote}, 0x10) r13 = getpgid(0x0) r14 = syz_open_procfs(r13, &(0x7f0000001f40)='fd\x00') ioctl$IOMMU_HWPT_ALLOC$TEST(r10, 0x3b89, &(0x7f0000001fc0)={0x28, 0x3, r12, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000001f80)}) mount$fuseblk(&(0x7f0000002000), &(0x7f0000002040)='./file0\x00', &(0x7f0000002080), 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r1}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0xf054}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xde}}], [{@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<', r4}}]}}) ioctl$sock_SIOCOUTQNSD(r14, 0x894b, &(0x7f0000002280)) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a) ioctl$VIDIOC_S_PARM(r10, 0xc0cc5616, &(0x7f00000022c0)={0xb, @output={0x1000, 0x1, {0x4, 0x2185}, 0x8, 0x5}}) 9.166516918s ago: executing program 4 (id=226): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000002c0)="740300005f03ed8bb89e08f086dd96bbc59d8f37f30c63c489d23eafdce458f21a4d8d457abf08e67639aea332608ea55f71661f645e", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) chroot(&(0x7f0000000100)='./file0\x00') 9.027611318s ago: executing program 2 (id=227): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x14, 0x16, 0xa01, 0x4001, 0x0, {0xa}}, 0x14}}, 0x0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x4002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) lseek(r3, 0x0, 0x4) readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 7.247540706s ago: executing program 4 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) 6.546429708s ago: executing program 0 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000002000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x30, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xac}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./dev/ttyUSB0\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3"], 0x0) stat(&(0x7f0000000080)='./dev/ttyUSB0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@nullb, r3, &(0x7f0000000280)) fchmodat(r2, &(0x7f0000000300)='./dev\x00', 0xfffffffb) r4 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) openat(r4, &(0x7f0000000340)='./dev\x00', 0x10800, 0x5c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$RTC_PIE_ON(r6, 0x7005) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x21) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) syz_usb_connect(0x5, 0x47, &(0x7f0000001280)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904"], 0x0) 6.409721753s ago: executing program 4 (id=230): openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x29, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000040000070e8f14ed33ef0fb9a736f1e10e19e5a1e600b13a60148be05988ac68bd40fcb9c7fda324cd5db825da3861a84958ae5d0f4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000005000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r5, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002d00)=ANY=[@ANYRES8=r0], 0x4794}, 0x1, 0x0, 0x0, 0x10}, 0x40) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/register\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)=':syz_custom:M:0:\\x7fELF\\x01\\x01\\x01::/file1:OL', 0x2e) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r2}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r8 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80000) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r10 = inotify_init() inotify_add_watch(r10, &(0x7f0000000300)='./file0\x00', 0x44000101) close(r9) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000150902b901010000003f0904"], 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 6.125616191s ago: executing program 2 (id=231): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='source', 0x0, 0xffffffffffffffff) 5.782919441s ago: executing program 2 (id=232): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000006c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r1, 0x16, 0x1, 0x1400000, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0}, 0x40) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x28003, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x135) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000680)='./mnt\x00', &(0x7f0000000700)='minix\x00', 0x8410, 0x0) 5.508741929s ago: executing program 2 (id=233): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x80, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "88b1e9e2678aa133d56ea7217e3e2ea7b1b24df5ed3e3b4de28f9a43cb38420d9e231f93410bb461c972f42f11ea3add85661c93d9afc70e20a883d436ef643a0d"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r2, &(0x7f00000000c0)=""/7, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYBLOB="05"], 0x24}}, 0x24008800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r6 = io_uring_setup(0xe1e, &(0x7f0000000040)={0x0, 0x96e, 0x1f480, 0x2, 0x329}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) setfsgid(0xffffffffffffffff) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r9, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r7, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @GTPA_LINK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20008800) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0x40048e0) readv(r4, &(0x7f0000000640)=[{&(0x7f0000000480)=""/88, 0x58}, {&(0x7f0000000500)=""/37, 0x25}, {&(0x7f0000000540)=""/250, 0xfa}], 0x3) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1c2841, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSSOFTCAR(r10, 0x5435, 0x0) 5.305907113s ago: executing program 1 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x8, 0x7ffc0001}]}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0x8000000040000503, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x144, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0x3}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x118, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x80000001}]}}]}, 0x144}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x144, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0x3}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x118, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x80000001}]}}]}, 0x144}}, 0x0) 4.894546293s ago: executing program 1 (id=235): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpgrp(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x40) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(r1, r0, 0x0) r8 = socket(0x1, 0x5, 0x0) close(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x200048f4, &(0x7f0000b63fe4)={0xa, 0x2, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x20}, 0x5}, 0x1c) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r8, &(0x7f0000000000)={0x1}) 4.800005441s ago: executing program 3 (id=236): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r0, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008000000ff01", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010000000000000000000000009220c84689b645a6b2c0c66df5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x929b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x85434d09f3f6babb, 0x1, 0x2, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x40}, @generic={0xfa, 0x5, 0x4, 0x6, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000480)="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", 0x1d8, 0xfffffffffffffffd) close(r4) r5 = socket(0x2b, 0x1, 0x1) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) accept4$unix(r5, &(0x7f00000010c0), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r13, &(0x7f00000005c0)={0x0, 0xfffffffffffffd98, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r12, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x8d0) recvmsg(r11, &(0x7f0000003b80)={0x0, 0x0, 0x0}, 0x80) 2.52816663s ago: executing program 1 (id=237): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r0, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008000000ff01", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010000000000000000000000009220c84689b645a6b2c0c66df5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x929b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x85434d09f3f6babb, 0x1, 0x2, 0x7, 0x0, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x40}, @generic={0xfa, 0x5, 0x4, 0x6, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000480)="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", 0x1d8, 0xfffffffffffffffd) close(r4) r5 = socket(0x2b, 0x1, 0x1) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) accept4$unix(r5, &(0x7f00000010c0), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r13, &(0x7f00000005c0)={0x0, 0xfffffffffffffd98, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r12, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x8d0) recvmsg(r11, &(0x7f0000003b80)={0x0, 0x0, 0x0}, 0x80) 2.461277081s ago: executing program 0 (id=238): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000002c0)="740300005f03ed8bb89e08f086dd96bbc59d8f37f30c63c489d23eafdce458f21a4d8d457abf08e67639aea332608ea55f71661f645e", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) chroot(&(0x7f0000000100)='./file0\x00') 2.318796406s ago: executing program 4 (id=239): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2d) keyctl$read(0xb, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x6, 0x7, 0xfff7fff7, 0x8, 0x12, "c63bf9e2f100", 0xef3, 0x3}) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) r8 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r9 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_write(r8, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r9, 0x40106150, &(0x7f0000000000)) 2.15406775s ago: executing program 2 (id=240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) 0s ago: executing program 0 (id=241): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x14, 0x16, 0xa01, 0x4001, 0x0, {0xa}}, 0x14}}, 0x0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x4002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) lseek(r3, 0x0, 0x4) readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 91.994924][ T1001] cfg80211: failed to load regulatory.db [ 93.699174][ T5573] cgroup: Unknown subsys name 'net' [ 93.960853][ T5573] cgroup: Unknown subsys name 'cpuset' [ 94.024890][ T5573] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.023209][ T5573] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.867334][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.888534][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.915996][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.916890][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.918368][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.920713][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.937249][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.938099][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.939170][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.957952][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.966689][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.981659][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.983038][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.984022][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.995982][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.028387][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.034372][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.039421][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.044420][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.048025][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.070250][ T5601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.075411][ T5601] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.098350][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.100109][ T5592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.138210][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.185816][ T60] Bluetooth: hci2: command tx timeout [ 101.255534][ T60] Bluetooth: hci0: command tx timeout [ 101.255570][ T5598] Bluetooth: hci4: command tx timeout [ 101.264709][ T5598] Bluetooth: hci3: command tx timeout [ 101.334674][ T5598] Bluetooth: hci1: command tx timeout [ 102.049606][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.051992][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.052186][ T5588] bridge_slave_0: entered allmulticast mode [ 102.061539][ T5588] bridge_slave_0: entered promiscuous mode [ 102.134177][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.134297][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.134458][ T5588] bridge_slave_1: entered allmulticast mode [ 102.137189][ T5588] bridge_slave_1: entered promiscuous mode [ 102.251288][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.251413][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.251536][ T5587] bridge_slave_0: entered allmulticast mode [ 102.253471][ T5587] bridge_slave_0: entered promiscuous mode [ 102.300466][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.300622][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.301037][ T5585] bridge_slave_0: entered allmulticast mode [ 102.303025][ T5585] bridge_slave_0: entered promiscuous mode [ 102.363597][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.363727][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.370567][ T5587] bridge_slave_1: entered allmulticast mode [ 102.376972][ T5587] bridge_slave_1: entered promiscuous mode [ 102.379610][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.379742][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.380966][ T5586] bridge_slave_0: entered allmulticast mode [ 102.390360][ T5586] bridge_slave_0: entered promiscuous mode [ 102.397685][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.398024][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.411240][ T5585] bridge_slave_1: entered allmulticast mode [ 102.420174][ T5585] bridge_slave_1: entered promiscuous mode [ 102.456207][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.457106][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.457238][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.457425][ T5584] bridge_slave_0: entered allmulticast mode [ 102.460919][ T5584] bridge_slave_0: entered promiscuous mode [ 102.510456][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.510582][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.510741][ T5586] bridge_slave_1: entered allmulticast mode [ 102.512992][ T5586] bridge_slave_1: entered promiscuous mode [ 102.553230][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.555684][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.556062][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.556536][ T5584] bridge_slave_1: entered allmulticast mode [ 102.570431][ T5584] bridge_slave_1: entered promiscuous mode [ 102.669557][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.698018][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.741101][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.749043][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.770062][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.773235][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.787312][ T5588] team0: Port device team_slave_0 added [ 102.831046][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.861021][ T5588] team0: Port device team_slave_1 added [ 102.863670][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.948900][ T5587] team0: Port device team_slave_0 added [ 102.970843][ T5585] team0: Port device team_slave_0 added [ 103.009473][ T5587] team0: Port device team_slave_1 added [ 103.012286][ T5586] team0: Port device team_slave_0 added [ 103.023595][ T5585] team0: Port device team_slave_1 added [ 103.033001][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.033021][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.033040][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.070322][ T5584] team0: Port device team_slave_0 added [ 103.103495][ T5586] team0: Port device team_slave_1 added [ 103.124619][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.124635][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.124655][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.127182][ T5584] team0: Port device team_slave_1 added [ 103.243034][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.243050][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.243076][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.255280][ T5598] Bluetooth: hci2: command tx timeout [ 103.303318][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.303340][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.303368][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.334342][ T5598] Bluetooth: hci4: command tx timeout [ 103.334380][ T5598] Bluetooth: hci3: command tx timeout [ 103.334405][ T5598] Bluetooth: hci0: command tx timeout [ 103.384544][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.384574][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.384604][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.385825][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.385837][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.385856][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.387223][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.387238][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.387267][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.414435][ T5589] Bluetooth: hci1: command tx timeout [ 103.887893][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.887909][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.887929][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.931869][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.931928][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.931988][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.011799][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.011814][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.011834][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.108554][ T5588] hsr_slave_0: entered promiscuous mode [ 104.109626][ T5588] hsr_slave_1: entered promiscuous mode [ 104.223738][ T5587] hsr_slave_0: entered promiscuous mode [ 104.231397][ T5587] hsr_slave_1: entered promiscuous mode [ 104.232228][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 104.232320][ T5587] Cannot create hsr debugfs directory [ 104.281948][ T5585] hsr_slave_0: entered promiscuous mode [ 104.283020][ T5585] hsr_slave_1: entered promiscuous mode [ 104.283760][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 104.283779][ T5585] Cannot create hsr debugfs directory [ 104.330292][ T5586] hsr_slave_0: entered promiscuous mode [ 104.331227][ T5586] hsr_slave_1: entered promiscuous mode [ 104.331919][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 104.331938][ T5586] Cannot create hsr debugfs directory [ 104.368868][ T5584] hsr_slave_0: entered promiscuous mode [ 104.370310][ T5584] hsr_slave_1: entered promiscuous mode [ 104.371297][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 104.371316][ T5584] Cannot create hsr debugfs directory [ 105.334678][ T5589] Bluetooth: hci2: command tx timeout [ 105.415352][ T5589] Bluetooth: hci0: command tx timeout [ 105.415395][ T5589] Bluetooth: hci4: command tx timeout [ 105.425204][ T60] Bluetooth: hci3: command tx timeout [ 105.449120][ T5588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.492975][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.498909][ T60] Bluetooth: hci1: command tx timeout [ 105.526249][ T5588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.570849][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.583014][ T5588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.618693][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.645836][ T5588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.678931][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.801559][ T5587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.839878][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.849306][ T5587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.904943][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.910296][ T5587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.958301][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.986644][ T5587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.018472][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.192480][ T5585] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.218477][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.245123][ T5585] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.268799][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.273621][ T5585] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.302747][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.330903][ T5585] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.373335][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.519828][ T5586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.549316][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.571761][ T5586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.607721][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.612207][ T5586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.642281][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.680008][ T5586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.698318][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.837634][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.916711][ T5584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.949317][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.962648][ T5584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.988407][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.992153][ T5584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.030023][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.046209][ T5584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.087662][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.161725][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.215786][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.216262][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.246015][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.300729][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.300833][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.378640][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.414404][ T60] Bluetooth: hci2: command tx timeout [ 107.433272][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.433435][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.464662][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.494962][ T5589] Bluetooth: hci4: command tx timeout [ 107.494998][ T5589] Bluetooth: hci0: command tx timeout [ 107.495069][ T60] Bluetooth: hci3: command tx timeout [ 107.580482][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.580675][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.585270][ T5598] Bluetooth: hci1: command tx timeout [ 107.694581][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.748111][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.748276][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.752443][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.838869][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.839051][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.933264][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.995696][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.037762][ T3911] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.037940][ T3911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.106706][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.106847][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.187861][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.257692][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.261752][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.381665][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.396770][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.135668][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.613322][ T5588] veth0_vlan: entered promiscuous mode [ 109.675289][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.719244][ T5588] veth1_vlan: entered promiscuous mode [ 109.852838][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.992740][ T5588] veth0_macvtap: entered promiscuous mode [ 110.049127][ T5588] veth1_macvtap: entered promiscuous mode [ 110.090628][ T5587] veth0_vlan: entered promiscuous mode [ 110.172083][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.213547][ T5587] veth1_vlan: entered promiscuous mode [ 110.240626][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.273812][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.289377][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.326513][ T5585] veth0_vlan: entered promiscuous mode [ 110.430591][ T5585] veth1_vlan: entered promiscuous mode [ 110.627335][ T5587] veth0_macvtap: entered promiscuous mode [ 110.776095][ T5587] veth1_macvtap: entered promiscuous mode [ 110.894095][ T5586] veth0_vlan: entered promiscuous mode [ 110.958023][ T5585] veth0_macvtap: entered promiscuous mode [ 111.001745][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.025006][ T5585] veth1_macvtap: entered promiscuous mode [ 111.049464][ T5586] veth1_vlan: entered promiscuous mode [ 111.052105][ T3911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.052126][ T3911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.108207][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.197765][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.197790][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.262996][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.269077][ T5584] veth0_vlan: entered promiscuous mode [ 111.326470][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.485773][ T5584] veth1_vlan: entered promiscuous mode [ 111.660362][ T5586] veth0_macvtap: entered promiscuous mode [ 111.821974][ T5586] veth1_macvtap: entered promiscuous mode [ 111.960318][ T5588] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 112.121743][ T3911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.121768][ T3911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.510492][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.569142][ T5584] veth0_macvtap: entered promiscuous mode [ 112.583957][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.583980][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.625034][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.838549][ T5584] veth1_macvtap: entered promiscuous mode [ 112.945368][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.945392][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.111071][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.310918][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.367038][ T3911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.367061][ T3911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.633700][ T149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.274875][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.274901][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.459883][ T5794] fuse: Unknown parameter 'group_i00000000000000000000' [ 115.731675][ T5794] FAULT_INJECTION: forcing a failure. [ 115.731675][ T5794] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 115.731726][ T5794] CPU: 1 UID: 0 PID: 5794 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.731758][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.731783][ T5794] Call Trace: [ 115.731793][ T5794] [ 115.731804][ T5794] dump_stack_lvl+0xe8/0x150 [ 115.731856][ T5794] should_fail_ex+0x46b/0x600 [ 115.731896][ T5794] prepare_alloc_pages+0x223/0x650 [ 115.731939][ T5794] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 115.731989][ T5794] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 115.732032][ T5794] ? __pfx_policy_nodemask+0x10/0x10 [ 115.732056][ T5794] ? __split_page_owner+0x2c/0x330 [ 115.732095][ T5794] ? __split_page_owner+0x2c/0x330 [ 115.732132][ T5794] alloc_pages_mpol+0xd4/0x280 [ 115.732160][ T5794] alloc_pages_noprof+0xd2/0x2f0 [ 115.732188][ T5794] alloc_pages_exact_noprof+0x3b/0xc0 [ 115.732213][ T5794] snd_pcm_attach_substream+0x629/0xb20 [ 115.732263][ T5794] snd_pcm_open_substream+0xb9/0x24f0 [ 115.732307][ T5794] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 115.732338][ T5794] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 115.732365][ T5794] ? mutex_lock_nested+0x152/0x1d0 [ 115.732397][ T5794] ? snd_pcm_open+0x17d/0x620 [ 115.732425][ T5794] snd_pcm_open+0x1d2/0x620 [ 115.732461][ T5794] ? __pfx_snd_pcm_open+0x10/0x10 [ 115.732487][ T5794] ? __pfx_default_wake_function+0x10/0x10 [ 115.732520][ T5794] ? snd_lookup_minor_data+0x11e/0x150 [ 115.732563][ T5794] snd_pcm_capture_open+0x62/0xc0 [ 115.732594][ T5794] chrdev_open+0x4dc/0x600 [ 115.732633][ T5794] ? __pfx_chrdev_open+0x10/0x10 [ 115.732669][ T5794] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 115.732716][ T5794] ? __pfx_chrdev_open+0x10/0x10 [ 115.732751][ T5794] do_dentry_open+0x849/0x1420 [ 115.732801][ T5794] vfs_open+0x3b/0x350 [ 115.732821][ T5794] ? path_openat+0x142d/0x1d60 [ 115.732857][ T5794] path_openat+0x1448/0x1d60 [ 115.732912][ T5794] do_file_open+0x23e/0x4a0 [ 115.732978][ T5794] ? __pfx_do_file_open+0x10/0x10 [ 115.733039][ T5794] ? alloc_fd+0x654/0x6d0 [ 115.733077][ T5794] do_sys_openat2+0x115/0x200 [ 115.733104][ T5794] ? __pfx_do_sys_openat2+0x10/0x10 [ 115.733129][ T5794] ? exc_page_fault+0x6a/0xc0 [ 115.733159][ T5794] ? do_user_addr_fault+0xc4c/0x1340 [ 115.733188][ T5794] __x64_sys_openat+0x138/0x170 [ 115.733218][ T5794] do_syscall_64+0x166/0x520 [ 115.733243][ T5794] ? trace_irq_disable+0x3b/0x140 [ 115.733275][ T5794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.733300][ T5794] ? clear_bhb_loop+0x70/0xc0 [ 115.733329][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.733353][ T5794] RIP: 0033:0x7f2aae59e98e [ 115.733393][ T5794] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.733414][ T5794] RSP: 002b:00007f2aac814b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 115.733445][ T5794] RAX: ffffffffffffffda RBX: 00007f2aac8156c0 RCX: 00007f2aae59e98e [ 115.733464][ T5794] RDX: 0000000000000002 RSI: 00007f2aac814c00 RDI: ffffffffffffff9c [ 115.733481][ T5794] RBP: 00007f2aac814c00 R08: 0000000000000000 R09: 0000000000000000 [ 115.733496][ T5794] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 115.733512][ T5794] R13: 00007f2aae866128 R14: 00007f2aae866090 R15: 00007fffdab79ad8 [ 115.733550][ T5794] [ 116.159512][ T3911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.159539][ T3911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.197220][ T166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.197602][ T166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.250673][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.203930][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.203959][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.510818][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.523205][ T1028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.603152][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.603177][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.678690][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.964847][ T1122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.994442][ T166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.055075][ T166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.055285][ T166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.056154][ T166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.056619][ T3911] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.056662][ T3911] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.056702][ T3911] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.056743][ T3911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.056782][ T3911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.056822][ T3911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.056872][ T3911] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.090287][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.232255][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.596216][ T9] usb 1-1: device descriptor read/all, error -71 [ 118.984763][ T5694] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 120.298549][ T5694] usb 4-1: not running at top speed; connect to a high speed hub [ 120.298703][ T5694] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 120.344774][ T5694] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.344837][ T5694] usb 4-1: config 1 interface 1 has no altsetting 0 [ 120.344877][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.004979][ T5694] usb 4-1: can't set config #1, error -71 [ 122.068343][ T5694] usb 4-1: USB disconnect, device number 2 [ 123.974200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.722009][ T5722] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.389649][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 126.709049][ T5722] usb 4-1: device descriptor read/all, error -71 [ 126.826360][ T5860] FAULT_INJECTION: forcing a failure. [ 126.826360][ T5860] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.826400][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: syz.4.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.826427][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.826440][ T5860] Call Trace: [ 126.826449][ T5860] [ 126.826459][ T5860] dump_stack_lvl+0xe8/0x150 [ 126.826499][ T5860] should_fail_ex+0x46b/0x600 [ 126.826537][ T5860] _copy_from_user+0x2d/0xb0 [ 126.826573][ T5860] ___sys_sendmsg+0x1c6/0x360 [ 126.826600][ T5860] ? __lock_acquire+0x747/0x2de0 [ 126.826636][ T5860] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.826702][ T5860] ? __fget_files+0x2a/0x420 [ 126.826727][ T5860] ? __fget_files+0x3a8/0x420 [ 126.826762][ T5860] __x64_sys_sendmsg+0x1b7/0x290 [ 126.826791][ T5860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.826841][ T5860] do_syscall_64+0x166/0x520 [ 126.826865][ T5860] ? trace_irq_disable+0x3b/0x140 [ 126.826896][ T5860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.826920][ T5860] ? clear_bhb_loop+0x70/0xc0 [ 126.826949][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.826982][ T5860] RIP: 0033:0x7fd0ab72e159 [ 126.827004][ T5860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.827023][ T5860] RSP: 002b:00007fd0a9986028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.827048][ T5860] RAX: ffffffffffffffda RBX: 00007fd0ab9b5fa0 RCX: 00007fd0ab72e159 [ 126.827064][ T5860] RDX: 000000000000fc40 RSI: 0000200000000080 RDI: 0000000000000003 [ 126.827079][ T5860] RBP: 00007fd0a9986090 R08: 0000000000000000 R09: 0000000000000000 [ 126.827093][ T5860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.827106][ T5860] R13: 00007fd0ab9b6038 R14: 00007fd0ab9b5fa0 R15: 00007ffc545e87b8 [ 126.827141][ T5860] [ 127.564170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.584179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.594170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.604172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.614171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.624163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.744173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.804172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.554170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.582582][ T1239] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.177009][ T5819] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.089862][ T5809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.389141][ T5809] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 131.432471][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.466288][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 131.466328][ T5809] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 131.466436][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.269647][ T5874] MINIX-fs: unable to read superblock [ 132.961435][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.967401][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.224816][ T5809] cxacru 2-1:1.0: send of cm 0x91 failed (-104) [ 136.257170][ T5809] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104 [ 136.257211][ T5809] ATM dev 0: usbatm_atm_init: atm_start failed: -104! [ 136.530048][ T5809] cxacru 2-1:1.0: probe with driver cxacru failed with error -104 [ 136.586264][ T5721] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 136.748469][ T5721] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 136.763614][ T5721] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.763689][ T5721] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 136.763721][ T5721] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 136.763763][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.875609][ T31] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 137.034272][ T31] usb 5-1: Invalid ep0 maxpacket: 64 [ 137.066339][ T5594] usb 2-1: USB disconnect, device number 2 [ 137.186309][ T31] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 137.368113][ T31] usb 5-1: Invalid ep0 maxpacket: 64 [ 137.402714][ T31] usb usb5-port1: attempt power cycle [ 138.843034][ T5721] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 138.843071][ T5721] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 138.843085][ T5721] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 138.875417][ T5721] cxacru 3-1:1.0: probe with driver cxacru failed with error -71 [ 139.158054][ T5721] usb 3-1: USB disconnect, device number 3 [ 141.632184][ T5928] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 144.813409][ T5956] mmap: syz.0.43 (5956) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 144.827909][ T5951] syz.0.43 uses obsolete (PF_INET,SOCK_PACKET) [ 144.837586][ T5951] netlink: 'syz.0.43': attribute type 15 has an invalid length. [ 144.924273][ T1001] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.130957][ T1001] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 145.137627][ T1001] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.137791][ T1001] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 145.137883][ T1001] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 145.138002][ T1001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.215240][ T5961] FAULT_INJECTION: forcing a failure. [ 145.215240][ T5961] name failslab, interval 1, probability 0, space 0, times 1 [ 145.215281][ T5961] CPU: 0 UID: 0 PID: 5961 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.215307][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.215320][ T5961] Call Trace: [ 145.215330][ T5961] [ 145.215339][ T5961] dump_stack_lvl+0xe8/0x150 [ 145.215374][ T5961] should_fail_ex+0x46b/0x600 [ 145.215412][ T5961] should_failslab+0xa8/0x100 [ 145.215438][ T5961] __kmalloc_noprof+0xfb/0x790 [ 145.215479][ T5961] ? kernfs_fop_write_iter+0x158/0x540 [ 145.215513][ T5961] ? kernfs_fop_write_iter+0x158/0x540 [ 145.215557][ T5961] kernfs_fop_write_iter+0x158/0x540 [ 145.215600][ T5961] vfs_write+0x61e/0xbb0 [ 145.215638][ T5961] ? __pfx_vfs_write+0x10/0x10 [ 145.215673][ T5961] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 145.215704][ T5961] ? mutex_lock_nested+0x152/0x1d0 [ 145.215735][ T5961] ? fdget_pos+0x252/0x320 [ 145.215772][ T5961] ksys_write+0x156/0x270 [ 145.215804][ T5961] ? __pfx_ksys_write+0x10/0x10 [ 145.215876][ T5961] do_syscall_64+0x166/0x520 [ 145.215901][ T5961] ? trace_irq_disable+0x3b/0x140 [ 145.215932][ T5961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.215957][ T5961] ? clear_bhb_loop+0x70/0xc0 [ 145.215986][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.216010][ T5961] RIP: 0033:0x7f7a0e5ee159 [ 145.216032][ T5961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.216051][ T5961] RSP: 002b:00007f7a0c846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.216076][ T5961] RAX: ffffffffffffffda RBX: 00007f7a0e875fa0 RCX: 00007f7a0e5ee159 [ 145.216093][ T5961] RDX: 0000000000000009 RSI: 0000200000000040 RDI: 0000000000000003 [ 145.216108][ T5961] RBP: 00007f7a0c846090 R08: 0000000000000000 R09: 0000000000000000 [ 145.216123][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.216137][ T5961] R13: 00007f7a0e876038 R14: 00007f7a0e875fa0 R15: 00007ffe9b1ad178 [ 145.216172][ T5961] [ 146.009860][ T5963] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 147.498652][ T1001] cxacru 2-1:1.0: send of cm 0x90 failed (-104) [ 147.555474][ T5975] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 147.555505][ T5975] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 147.715610][ T1001] usb 2-1: USB disconnect, device number 3 [ 149.584009][ T5989] FAULT_INJECTION: forcing a failure. [ 149.584009][ T5989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.584074][ T5989] CPU: 1 UID: 0 PID: 5989 Comm: syz.0.50 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.584105][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.584118][ T5989] Call Trace: [ 149.584127][ T5989] [ 149.584138][ T5989] dump_stack_lvl+0xe8/0x150 [ 149.584179][ T5989] should_fail_ex+0x46b/0x600 [ 149.584219][ T5989] _copy_to_user+0x31/0xb0 [ 149.584259][ T5989] simple_read_from_buffer+0xe1/0x170 [ 149.584292][ T5989] proc_fail_nth_read+0x1be/0x230 [ 149.584327][ T5989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.584361][ T5989] ? rw_verify_area+0x250/0x4d0 [ 149.584393][ T5989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.584422][ T5989] vfs_read+0x219/0xa90 [ 149.584459][ T5989] ? __pfx_vfs_read+0x10/0x10 [ 149.584489][ T5989] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 149.584516][ T5989] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 149.584536][ T5989] ? mutex_lock_nested+0x152/0x1d0 [ 149.584560][ T5989] ? fdget_pos+0x252/0x320 [ 149.584588][ T5989] ksys_read+0x156/0x270 [ 149.584613][ T5989] ? __pfx_ksys_read+0x10/0x10 [ 149.584646][ T5989] do_syscall_64+0x166/0x520 [ 149.584665][ T5989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.584684][ T5989] ? clear_bhb_loop+0x70/0xc0 [ 149.584707][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.584725][ T5989] RIP: 0033:0x7f7a0e5ae98e [ 149.584743][ T5989] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.584757][ T5989] RSP: 002b:00007f7a0c803fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.584777][ T5989] RAX: ffffffffffffffda RBX: 00007f7a0c8046c0 RCX: 00007f7a0e5ae98e [ 149.584791][ T5989] RDX: 000000000000000f RSI: 00007f7a0c8040a0 RDI: 0000000000000006 [ 149.584802][ T5989] RBP: 00007f7a0c804090 R08: 0000000000000000 R09: 0000000000000000 [ 149.584814][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.584824][ T5989] R13: 00007f7a0e876218 R14: 00007f7a0e876180 R15: 00007ffe9b1ad178 [ 149.584852][ T5989] [ 151.309198][ T6004] netlink: 'syz.4.55': attribute type 5 has an invalid length. [ 152.053540][ T6006] FAULT_INJECTION: forcing a failure. [ 152.053540][ T6006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.053579][ T6006] CPU: 1 UID: 0 PID: 6006 Comm: syz.0.58 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.053605][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.053618][ T6006] Call Trace: [ 152.053627][ T6006] [ 152.053637][ T6006] dump_stack_lvl+0xe8/0x150 [ 152.053687][ T6006] should_fail_ex+0x46b/0x600 [ 152.053726][ T6006] _copy_from_user+0x2d/0xb0 [ 152.053763][ T6006] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 152.053788][ T6006] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 152.053822][ T6006] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 152.053868][ T6006] ? __pfx_ksys_write+0x10/0x10 [ 152.053901][ T6006] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 152.053929][ T6006] do_syscall_64+0x166/0x520 [ 152.053953][ T6006] ? trace_irq_disable+0x3b/0x140 [ 152.053983][ T6006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.054007][ T6006] ? clear_bhb_loop+0x70/0xc0 [ 152.054036][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.054059][ T6006] RIP: 0033:0x7f7a0e5ee159 [ 152.054080][ T6006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.054099][ T6006] RSP: 002b:00007f7a0c845ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 152.054122][ T6006] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f7a0e5ee159 [ 152.054139][ T6006] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000e26 [ 152.054155][ T6006] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 152.054170][ T6006] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 152.054186][ T6006] R13: 0000200000000890 R14: 00007f7a0c845fd8 R15: 0000000000000000 [ 152.054221][ T6006] [ 152.274008][ T6010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.012771][ T6026] ======================================================= [ 154.012771][ T6026] WARNING: The mand mount option has been deprecated and [ 154.012771][ T6026] and is ignored by this kernel. Remove the mand [ 154.012771][ T6026] option from the mount to silence this warning. [ 154.012771][ T6026] ======================================================= [ 154.981995][ T1028] IPVS: starting estimator thread 0... [ 155.304367][ T6036] IPVS: using max 10 ests per chain, 24000 per kthread [ 157.728555][ T5830] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 158.036118][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 158.036145][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.69'. [ 158.178966][ T6065] FAULT_INJECTION: forcing a failure. [ 158.178966][ T6065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.179005][ T6065] CPU: 1 UID: 0 PID: 6065 Comm: syz.2.70 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.179030][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.179044][ T6065] Call Trace: [ 158.179053][ T6065] [ 158.179063][ T6065] dump_stack_lvl+0xe8/0x150 [ 158.179103][ T6065] should_fail_ex+0x46b/0x600 [ 158.179141][ T6065] _copy_from_user+0x2d/0xb0 [ 158.179189][ T6065] __sys_bpf+0x2e7/0xd90 [ 158.179233][ T6065] ? __pfx___sys_bpf+0x10/0x10 [ 158.179269][ T6065] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 158.179300][ T6065] ? rt_mutex_slowunlock+0x219/0x460 [ 158.179352][ T6065] ? ksys_write+0x248/0x270 [ 158.179384][ T6065] ? __pfx_ksys_write+0x10/0x10 [ 158.179419][ T6065] __x64_sys_bpf+0xba/0xd0 [ 158.179454][ T6065] do_syscall_64+0x166/0x520 [ 158.179479][ T6065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.179503][ T6065] ? clear_bhb_loop+0x70/0xc0 [ 158.179531][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.179553][ T6065] RIP: 0033:0x7f28d69ee159 [ 158.179574][ T6065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.179593][ T6065] RSP: 002b:00007f28d4c46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.179617][ T6065] RAX: ffffffffffffffda RBX: 00007f28d6c75fa0 RCX: 00007f28d69ee159 [ 158.179634][ T6065] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 158.179648][ T6065] RBP: 00007f28d4c46090 R08: 0000000000000000 R09: 0000000000000000 [ 158.179664][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.179674][ T6065] R13: 00007f28d6c76038 R14: 00007f28d6c75fa0 R15: 00007ffe97e60dc8 [ 158.179701][ T6065] [ 158.420649][ T6066] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 159.974674][ T5830] usb 3-1: device descriptor read/64, error -71 [ 160.014778][ T5721] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 160.164311][ T5721] usb 1-1: Using ep0 maxpacket: 8 [ 160.165605][ T5721] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 160.193285][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 160.193314][ T5721] usb 1-1: Product: syz [ 160.193329][ T5721] usb 1-1: Manufacturer: syz [ 160.193345][ T5721] usb 1-1: SerialNumber: syz [ 160.214277][ T5830] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.265457][ T5721] usb 1-1: config 0 descriptor?? [ 160.273949][ T5721] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 160.405784][ T5830] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.408238][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.409234][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.409253][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.409305][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.477785][ T5721] gspca_sn9c2028: read1 error -32 [ 160.497373][ T5830] usb 3-1: config 0 descriptor?? [ 160.514015][ T5721] gspca_sn9c2028: read1 error -32 [ 160.940738][ T5721] usb 1-1: USB disconnect, device number 5 [ 161.571477][ T6081] FAULT_INJECTION: forcing a failure. [ 161.571477][ T6081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.571517][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz.2.73 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 161.571544][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.571557][ T6081] Call Trace: [ 161.571567][ T6081] [ 161.571577][ T6081] dump_stack_lvl+0xe8/0x150 [ 161.571617][ T6081] should_fail_ex+0x46b/0x600 [ 161.571657][ T6081] _copy_to_user+0x31/0xb0 [ 161.571694][ T6081] simple_read_from_buffer+0xe1/0x170 [ 161.571727][ T6081] proc_fail_nth_read+0x1be/0x230 [ 161.571762][ T6081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.571796][ T6081] ? rw_verify_area+0x250/0x4d0 [ 161.571827][ T6081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.571855][ T6081] vfs_read+0x219/0xa90 [ 161.571892][ T6081] ? __pfx_vfs_read+0x10/0x10 [ 161.571922][ T6081] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 161.571949][ T6081] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 161.571974][ T6081] ? mutex_lock_nested+0x152/0x1d0 [ 161.572004][ T6081] ? fdget_pos+0x252/0x320 [ 161.572040][ T6081] ksys_read+0x156/0x270 [ 161.572071][ T6081] ? __pfx_ksys_read+0x10/0x10 [ 161.572113][ T6081] do_syscall_64+0x166/0x520 [ 161.572137][ T6081] ? trace_irq_disable+0x3b/0x140 [ 161.572167][ T6081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.572190][ T6081] ? clear_bhb_loop+0x70/0xc0 [ 161.572219][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.572242][ T6081] RIP: 0033:0x7f28d69ae98e [ 161.572263][ T6081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.572283][ T6081] RSP: 002b:00007f28d4c24fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.572307][ T6081] RAX: ffffffffffffffda RBX: 00007f28d4c256c0 RCX: 00007f28d69ae98e [ 161.572342][ T6081] RDX: 000000000000000f RSI: 00007f28d4c250a0 RDI: 0000000000000004 [ 161.572357][ T6081] RBP: 00007f28d4c25090 R08: 0000000000000000 R09: 0000000000000000 [ 161.572371][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.572385][ T6081] R13: 00007f28d6c76128 R14: 00007f28d6c76090 R15: 00007ffe97e60dc8 [ 161.572422][ T6081] [ 161.878022][ T5830] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 161.925444][ T5714] usb 3-1: USB disconnect, device number 5 [ 162.390692][ T6085] fido_id[6085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 162.614523][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.615216][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.678828][ T6091] process 'syz.0.79' launched './file2' with NULL argv: empty string added [ 162.715159][ T5819] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.954294][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 162.975083][ T5819] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 162.990767][ T5819] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 162.990844][ T5819] usb 1-1: config 0 has no interface number 0 [ 162.990970][ T5819] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.991051][ T5819] usb 1-1: config 0 interface 85 has no altsetting 0 [ 163.087459][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.087492][ T5819] usb 1-1: Product: syz [ 163.087508][ T5819] usb 1-1: Manufacturer: syz [ 163.087524][ T5819] usb 1-1: SerialNumber: syz [ 163.137381][ T6099] FAULT_INJECTION: forcing a failure. [ 163.137381][ T6099] name failslab, interval 1, probability 0, space 0, times 0 [ 163.137428][ T6099] CPU: 1 UID: 0 PID: 6099 Comm: syz.2.81 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.137454][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.137468][ T6099] Call Trace: [ 163.137477][ T6099] [ 163.137487][ T6099] dump_stack_lvl+0xe8/0x150 [ 163.137527][ T6099] should_fail_ex+0x46b/0x600 [ 163.137565][ T6099] should_failslab+0xa8/0x100 [ 163.137590][ T6099] __kmalloc_noprof+0xfb/0x790 [ 163.137623][ T6099] ? tomoyo_realpath_from_path+0xef/0x640 [ 163.137659][ T6099] ? tomoyo_realpath_from_path+0xef/0x640 [ 163.137701][ T6099] tomoyo_realpath_from_path+0xef/0x640 [ 163.137747][ T6099] ? tomoyo_path_number_perm+0x219/0x5f0 [ 163.137788][ T6099] tomoyo_path_number_perm+0x246/0x5f0 [ 163.137821][ T6099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.137852][ T6099] ? __lock_acquire+0x747/0x2de0 [ 163.137897][ T6099] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 163.137922][ T6099] ? hook_file_ioctl+0x1f5/0x610 [ 163.137969][ T6099] ? __fget_files+0x2a/0x420 [ 163.137999][ T6099] ? __fget_files+0x2a/0x420 [ 163.138024][ T6099] ? __fget_files+0x3a8/0x420 [ 163.138048][ T6099] ? __fget_files+0x2a/0x420 [ 163.138075][ T6099] security_file_ioctl+0xc3/0x2a0 [ 163.138104][ T6099] __se_sys_ioctl+0x47/0x170 [ 163.138138][ T6099] do_syscall_64+0x166/0x520 [ 163.138161][ T6099] ? trace_irq_disable+0x3b/0x140 [ 163.138189][ T6099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.138209][ T6099] ? clear_bhb_loop+0x70/0xc0 [ 163.138233][ T6099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.138253][ T6099] RIP: 0033:0x7f28d69ee159 [ 163.138274][ T6099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.138291][ T6099] RSP: 002b:00007f28d4c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.138314][ T6099] RAX: ffffffffffffffda RBX: 00007f28d6c76090 RCX: 00007f28d69ee159 [ 163.138329][ T6099] RDX: 0000200000000040 RSI: 0000000000008982 RDI: 0000000000000003 [ 163.138341][ T6099] RBP: 00007f28d4c25090 R08: 0000000000000000 R09: 0000000000000000 [ 163.138353][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.138365][ T6099] R13: 00007f28d6c76128 R14: 00007f28d6c76090 R15: 00007ffe97e60dc8 [ 163.138397][ T6099] [ 163.138406][ T6099] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.500961][ T5819] usb 1-1: config 0 descriptor?? [ 165.496600][ T5830] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 165.651090][ T5830] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 165.665001][ T5830] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.665065][ T5830] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 165.665095][ T5830] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 165.665141][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.083022][ T5819] appletouch 1-1:0.85: Failed to read mode from device. [ 166.083272][ T5819] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 167.034360][ T5830] usb 5-1: can't set config #1, error -71 [ 167.071322][ T5830] usb 5-1: USB disconnect, device number 5 [ 167.468960][ T5819] usb 1-1: USB disconnect, device number 6 [ 167.613958][ T6127] FAULT_INJECTION: forcing a failure. [ 167.613958][ T6127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.613997][ T6127] CPU: 1 UID: 0 PID: 6127 Comm: syz.4.87 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 167.614023][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.614038][ T6127] Call Trace: [ 167.614047][ T6127] [ 167.614057][ T6127] dump_stack_lvl+0xe8/0x150 [ 167.614100][ T6127] should_fail_ex+0x46b/0x600 [ 167.614138][ T6127] _copy_from_user+0x2d/0xb0 [ 167.614174][ T6127] ___sys_sendmsg+0x1c6/0x360 [ 167.614200][ T6127] ? __lock_acquire+0x747/0x2de0 [ 167.614252][ T6127] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.614318][ T6127] ? __fget_files+0x2a/0x420 [ 167.614343][ T6127] ? __fget_files+0x3a8/0x420 [ 167.614380][ T6127] __x64_sys_sendmsg+0x1b7/0x290 [ 167.614410][ T6127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.614460][ T6127] do_syscall_64+0x166/0x520 [ 167.614484][ T6127] ? trace_irq_disable+0x3b/0x140 [ 167.614514][ T6127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.614538][ T6127] ? clear_bhb_loop+0x70/0xc0 [ 167.614567][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.614590][ T6127] RIP: 0033:0x7fd0ab72e159 [ 167.614611][ T6127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.614629][ T6127] RSP: 002b:00007fd0a9986028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.614653][ T6127] RAX: ffffffffffffffda RBX: 00007fd0ab9b5fa0 RCX: 00007fd0ab72e159 [ 167.614670][ T6127] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 167.614685][ T6127] RBP: 00007fd0a9986090 R08: 0000000000000000 R09: 0000000000000000 [ 167.614699][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.614713][ T6127] R13: 00007fd0ab9b6038 R14: 00007fd0ab9b5fa0 R15: 00007ffc545e87b8 [ 167.614757][ T6127] [ 167.860279][ T6128] binder: 6126:6128 ioctl c0306201 0 returned -14 [ 171.727935][ T6144] capability: warning: `syz.3.92' uses 32-bit capabilities (legacy support in use) [ 171.745886][ T6144] FAULT_INJECTION: forcing a failure. [ 171.745886][ T6144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.745925][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: syz.3.92 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.745950][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.745964][ T6144] Call Trace: [ 171.745973][ T6144] [ 171.745983][ T6144] dump_stack_lvl+0xe8/0x150 [ 171.746022][ T6144] should_fail_ex+0x46b/0x600 [ 171.746060][ T6144] strncpy_from_user+0x36/0x2c0 [ 171.746096][ T6144] __x64_sys_lgetxattr+0x19c/0x2b0 [ 171.746133][ T6144] ? __pfx___x64_sys_lgetxattr+0x10/0x10 [ 171.746160][ T6144] ? rt_mutex_slowunlock+0x219/0x460 [ 171.746219][ T6144] ? __pfx_ksys_write+0x10/0x10 [ 171.746260][ T6144] do_syscall_64+0x166/0x520 [ 171.746284][ T6144] ? trace_irq_disable+0x3b/0x140 [ 171.746314][ T6144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.746337][ T6144] ? clear_bhb_loop+0x70/0xc0 [ 171.746366][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.746388][ T6144] RIP: 0033:0x7f3bcaabe159 [ 171.746410][ T6144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.746428][ T6144] RSP: 002b:00007f3bc8d16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 171.746453][ T6144] RAX: ffffffffffffffda RBX: 00007f3bcad45fa0 RCX: 00007f3bcaabe159 [ 171.746470][ T6144] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000240 [ 171.746486][ T6144] RBP: 00007f3bc8d16090 R08: 0000000000000000 R09: 0000000000000000 [ 171.746509][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.746523][ T6144] R13: 00007f3bcad46038 R14: 00007f3bcad45fa0 R15: 00007ffc519c5aa8 [ 171.746559][ T6144] [ 171.757351][ T5318] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.997681][ T5318] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 172.002746][ T5318] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.002809][ T5318] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 172.002841][ T5318] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 172.002886][ T5318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.402635][ T5318] cxacru 5-1:1.0: send of cm 0x91 failed (-104) [ 175.638664][ T5318] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104 [ 175.638693][ T5318] ATM dev 0: usbatm_atm_init: atm_start failed: -104! [ 176.433087][ T6166] FAULT_INJECTION: forcing a failure. [ 176.433087][ T6166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.433163][ T6166] CPU: 0 UID: 0 PID: 6166 Comm: syz.4.98 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.433199][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.433211][ T6166] Call Trace: [ 176.433219][ T6166] [ 176.433229][ T6166] dump_stack_lvl+0xe8/0x150 [ 176.433260][ T6166] should_fail_ex+0x46b/0x600 [ 176.433289][ T6166] _copy_from_user+0x2d/0xb0 [ 176.433316][ T6166] ___sys_sendmsg+0x1c6/0x360 [ 176.433335][ T6166] ? __lock_acquire+0x747/0x2de0 [ 176.433362][ T6166] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.433384][ T6166] ? __schedule+0x16ef/0x5700 [ 176.433451][ T6166] ? __fget_files+0x2a/0x420 [ 176.433470][ T6166] ? __fget_files+0x3a8/0x420 [ 176.433496][ T6166] __x64_sys_sendmsg+0x1b7/0x290 [ 176.433518][ T6166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.433553][ T6166] do_syscall_64+0x166/0x520 [ 176.433571][ T6166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.433588][ T6166] ? clear_bhb_loop+0x70/0xc0 [ 176.433608][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.433625][ T6166] RIP: 0033:0x7fd0ab72e159 [ 176.433641][ T6166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.433655][ T6166] RSP: 002b:00007fd0a9965028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.433672][ T6166] RAX: ffffffffffffffda RBX: 00007fd0ab9b6090 RCX: 00007fd0ab72e159 [ 176.433685][ T6166] RDX: 0000000000040000 RSI: 0000200000000280 RDI: 0000000000000007 [ 176.433696][ T6166] RBP: 00007fd0a9965090 R08: 0000000000000000 R09: 0000000000000000 [ 176.433706][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.433715][ T6166] R13: 00007fd0ab9b6128 R14: 00007fd0ab9b6090 R15: 00007ffc545e87b8 [ 176.433740][ T6166] [ 177.634314][ T5722] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 177.940541][ T5318] cxacru 5-1:1.0: probe with driver cxacru failed with error -104 [ 178.011857][ T5318] usb 5-1: USB disconnect, device number 6 [ 180.491647][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'. [ 181.565117][ T5318] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 181.718142][ T5318] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.718202][ T5318] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=7b.81 [ 181.719699][ T5318] usb 3-1: config 255 has an invalid interface number: 100 but max is 1 [ 181.719728][ T5318] usb 3-1: config 255 has an invalid interface number: 100 but max is 1 [ 181.719751][ T5318] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 181.719774][ T5318] usb 3-1: config 255 has no interface number 0 [ 181.719811][ T5318] usb 3-1: config 255 interface 100 has no altsetting 0 [ 181.719843][ T5318] usb 3-1: config 255 interface 100 has no altsetting 1 [ 181.795203][ T5318] usb 3-1: string descriptor 0 read error: -22 [ 181.795384][ T5318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.097138][ T5318] usb 3-1: USB disconnect, device number 6 [ 188.270428][ T6213] Zero length message leads to an empty skb [ 189.153852][ T6222] binder_alloc: binder_alloc_mmap_handler: 6217 200000ffe000-200001000000 already mapped failed -16 [ 191.131478][ T6238] MINIX-fs: unable to read superblock [ 191.283252][ T6242] FAULT_INJECTION: forcing a failure. [ 191.283252][ T6242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.283290][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.3.115 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.283316][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.283330][ T6242] Call Trace: [ 191.283339][ T6242] [ 191.283352][ T6242] dump_stack_lvl+0xe8/0x150 [ 191.283391][ T6242] should_fail_ex+0x46b/0x600 [ 191.283429][ T6242] _copy_from_user+0x2d/0xb0 [ 191.283466][ T6242] ucma_write+0x166/0x2f0 [ 191.283497][ T6242] ? __pfx_ucma_write+0x10/0x10 [ 191.283525][ T6242] ? security_file_permission+0x75/0x260 [ 191.283557][ T6242] ? rw_verify_area+0x209/0x4d0 [ 191.283588][ T6242] ? __pfx_ucma_write+0x10/0x10 [ 191.283621][ T6242] vfs_write+0x29f/0xbb0 [ 191.283659][ T6242] ? __pfx_vfs_write+0x10/0x10 [ 191.283689][ T6242] ? __fget_files+0x2a/0x420 [ 191.283719][ T6242] ? __fget_files+0x2a/0x420 [ 191.283743][ T6242] ? __fget_files+0x3a8/0x420 [ 191.283767][ T6242] ? __fget_files+0x2a/0x420 [ 191.283802][ T6242] ksys_write+0x156/0x270 [ 191.283834][ T6242] ? __pfx_ksys_write+0x10/0x10 [ 191.283875][ T6242] do_syscall_64+0x166/0x520 [ 191.283898][ T6242] ? trace_irq_disable+0x3b/0x140 [ 191.283927][ T6242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.283949][ T6242] ? clear_bhb_loop+0x70/0xc0 [ 191.283976][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.283999][ T6242] RIP: 0033:0x7f3bcaabe159 [ 191.284019][ T6242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.284038][ T6242] RSP: 002b:00007f3bc8d16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.284062][ T6242] RAX: ffffffffffffffda RBX: 00007f3bcad45fa0 RCX: 00007f3bcaabe159 [ 191.284079][ T6242] RDX: 0000000000000110 RSI: 00002000000001c0 RDI: 0000000000000003 [ 191.284093][ T6242] RBP: 00007f3bc8d16090 R08: 0000000000000000 R09: 0000000000000000 [ 191.284107][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.284120][ T6242] R13: 00007f3bcad46038 R14: 00007f3bcad45fa0 R15: 00007ffc519c5aa8 [ 191.284155][ T6242] [ 192.280797][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 192.504363][ T5722] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 192.714247][ T6074] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 192.745056][ T5809] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 192.753575][ T6257] FAULT_INJECTION: forcing a failure. [ 192.753575][ T6257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.753614][ T6257] CPU: 1 UID: 0 PID: 6257 Comm: syz.1.119 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.753640][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.753653][ T6257] Call Trace: [ 192.753662][ T6257] [ 192.753672][ T6257] dump_stack_lvl+0xe8/0x150 [ 192.753711][ T6257] should_fail_ex+0x46b/0x600 [ 192.753749][ T6257] _copy_from_user+0x2d/0xb0 [ 192.753784][ T6257] tracing_trace_options_write+0x137/0x270 [ 192.753821][ T6257] ? lock_acquire+0x115/0x350 [ 192.753852][ T6257] ? __pfx_tracing_trace_options_write+0x10/0x10 [ 192.753906][ T6257] vfs_writev+0x4c4/0x990 [ 192.753946][ T6257] ? __pfx_tracing_trace_options_write+0x10/0x10 [ 192.753987][ T6257] ? __pfx_vfs_writev+0x10/0x10 [ 192.754046][ T6257] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 192.754075][ T6257] ? mutex_lock_nested+0x152/0x1d0 [ 192.754103][ T6257] ? fdget_pos+0x252/0x320 [ 192.754138][ T6257] do_writev+0x15a/0x2e0 [ 192.754176][ T6257] ? __pfx_do_writev+0x10/0x10 [ 192.754223][ T6257] do_syscall_64+0x166/0x520 [ 192.754246][ T6257] ? trace_irq_disable+0x3b/0x140 [ 192.754276][ T6257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.754300][ T6257] ? clear_bhb_loop+0x70/0xc0 [ 192.754329][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.754352][ T6257] RIP: 0033:0x7f2aae5de159 [ 192.754373][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.754391][ T6257] RSP: 002b:00007f2aac836028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 192.754415][ T6257] RAX: ffffffffffffffda RBX: 00007f2aae865fa0 RCX: 00007f2aae5de159 [ 192.754432][ T6257] RDX: 0000000000000002 RSI: 0000200000000b40 RDI: 0000000000000003 [ 192.754446][ T6257] RBP: 00007f2aac836090 R08: 0000000000000000 R09: 0000000000000000 [ 192.754460][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.754473][ T6257] R13: 00007f2aae866038 R14: 00007f2aae865fa0 R15: 00007fffdab79ad8 [ 192.754509][ T6257] [ 192.768859][ T5722] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 192.912443][ T5722] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.912487][ T5722] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.925601][ T5809] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 192.926596][ T5722] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 192.926621][ T5722] usb 4-1: Product: syz [ 192.926634][ T5722] usb 4-1: Manufacturer: syz [ 192.945050][ T5809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.945219][ T5809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 192.945295][ T5809] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 192.945385][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.040204][ T6074] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.101804][ T6074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.101839][ T6074] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.101885][ T6074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.304561][ T6074] usb 5-1: config 0 descriptor?? [ 193.403508][ T5722] hub 4-1:4.0: USB hub found [ 193.558807][ T5722] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 193.857883][ T37] audit: type=1326 audit(1790611938.488:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.3.117" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcaabe159 code=0x7ffc0000 [ 193.857945][ T37] audit: type=1326 audit(1790611938.488:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.3.117" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcaabe159 code=0x7ffc0000 [ 193.944375][ T37] audit: type=1326 audit(1790611938.488:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.3.117" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcaabe159 code=0x7ffc0000 [ 193.947074][ T37] audit: type=1326 audit(1790611938.578:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.3.117" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcaabe159 code=0x7ffc0000 [ 193.947196][ T37] audit: type=1326 audit(1790611938.578:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.3.117" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3bcaabe159 code=0x7ffc0000 [ 194.030226][ T37] audit: type=1326 audit(1790611938.578:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.3.117" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcaabe159 code=0x7ffc0000 [ 194.032620][ T37] audit: type=1326 audit(1790611938.608:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.3.117" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcaabe159 code=0x7ffc0000 [ 194.038831][ T37] audit: type=1326 audit(1790611938.658:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.3.117" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcaabe159 code=0x7ffc0000 [ 194.039941][ T37] audit: type=1326 audit(1790611938.668:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.3.117" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3bcaabe159 code=0x7ffc0000 [ 194.068145][ T37] audit: type=1326 audit(1790611938.688:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.3.117" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bcaabe159 code=0x7ffc0000 [ 194.385673][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.391883][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.427260][ T5819] usb 4-1: USB disconnect, device number 5 [ 195.023506][ T6074] usbhid 5-1:0.0: can't add hid device: -71 [ 195.023640][ T6074] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 195.090460][ T6074] usb 5-1: USB disconnect, device number 7 [ 195.245389][ T5809] usb 3-1: USB disconnect, device number 7 [ 195.452428][ T6283] FAULT_INJECTION: forcing a failure. [ 195.452428][ T6283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.452461][ T6283] CPU: 0 UID: 0 PID: 6283 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.452482][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.452499][ T6283] Call Trace: [ 195.452506][ T6283] [ 195.452514][ T6283] dump_stack_lvl+0xe8/0x150 [ 195.452547][ T6283] should_fail_ex+0x46b/0x600 [ 195.452579][ T6283] _copy_to_user+0x31/0xb0 [ 195.452610][ T6283] simple_read_from_buffer+0xe1/0x170 [ 195.452636][ T6283] proc_fail_nth_read+0x1be/0x230 [ 195.452663][ T6283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.452690][ T6283] ? rw_verify_area+0x250/0x4d0 [ 195.452711][ T6283] ? tun_chr_write_iter+0xe6/0x200 [ 195.452739][ T6283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.452763][ T6283] vfs_read+0x219/0xa90 [ 195.452793][ T6283] ? __pfx_vfs_read+0x10/0x10 [ 195.452818][ T6283] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 195.452840][ T6283] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 195.452862][ T6283] ? mutex_lock_nested+0x152/0x1d0 [ 195.452887][ T6283] ? fdget_pos+0x252/0x320 [ 195.452915][ T6283] ksys_read+0x156/0x270 [ 195.452939][ T6283] ? __pfx_ksys_read+0x10/0x10 [ 195.452971][ T6283] do_syscall_64+0x166/0x520 [ 195.452990][ T6283] ? trace_irq_disable+0x3b/0x140 [ 195.453016][ T6283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.453035][ T6283] ? clear_bhb_loop+0x70/0xc0 [ 195.453059][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.453077][ T6283] RIP: 0033:0x7f7a0e5ae98e [ 195.453095][ T6283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.453111][ T6283] RSP: 002b:00007f7a0c803fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.453132][ T6283] RAX: ffffffffffffffda RBX: 00007f7a0c8046c0 RCX: 00007f7a0e5ae98e [ 195.453145][ T6283] RDX: 000000000000000f RSI: 00007f7a0c8040a0 RDI: 0000000000000005 [ 195.453156][ T6283] RBP: 00007f7a0c804090 R08: 0000000000000000 R09: 0000000000000000 [ 195.453168][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.453179][ T6283] R13: 00007f7a0e876218 R14: 00007f7a0e876180 R15: 00007ffe9b1ad178 [ 195.453209][ T6283] [ 198.023130][ T6299] MINIX-fs: unable to read superblock [ 198.349995][ T6297] FAULT_INJECTION: forcing a failure. [ 198.349995][ T6297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.350035][ T6297] CPU: 0 UID: 0 PID: 6297 Comm: syz.4.127 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.350061][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.350074][ T6297] Call Trace: [ 198.350084][ T6297] [ 198.350094][ T6297] dump_stack_lvl+0xe8/0x150 [ 198.350132][ T6297] should_fail_ex+0x46b/0x600 [ 198.350170][ T6297] _copy_to_user+0x31/0xb0 [ 198.350208][ T6297] simple_read_from_buffer+0xe1/0x170 [ 198.350241][ T6297] proc_fail_nth_read+0x1be/0x230 [ 198.350275][ T6297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.350309][ T6297] ? rw_verify_area+0x250/0x4d0 [ 198.350338][ T6297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.350367][ T6297] vfs_read+0x219/0xa90 [ 198.350404][ T6297] ? __pfx_vfs_read+0x10/0x10 [ 198.350435][ T6297] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 198.350462][ T6297] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 198.350496][ T6297] ? mutex_lock_nested+0x152/0x1d0 [ 198.350526][ T6297] ? fdget_pos+0x252/0x320 [ 198.350562][ T6297] ksys_read+0x156/0x270 [ 198.350593][ T6297] ? __pfx_ksys_read+0x10/0x10 [ 198.350634][ T6297] do_syscall_64+0x166/0x520 [ 198.350660][ T6297] ? trace_irq_disable+0x3b/0x140 [ 198.350691][ T6297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.350715][ T6297] ? clear_bhb_loop+0x70/0xc0 [ 198.350743][ T6297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.350766][ T6297] RIP: 0033:0x7fd0ab6ee98e [ 198.350787][ T6297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 198.350805][ T6297] RSP: 002b:00007fd0a9922fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.350830][ T6297] RAX: ffffffffffffffda RBX: 00007fd0a99236c0 RCX: 00007fd0ab6ee98e [ 198.350846][ T6297] RDX: 000000000000000f RSI: 00007fd0a99230a0 RDI: 0000000000000009 [ 198.350860][ T6297] RBP: 00007fd0a9923090 R08: 0000000000000000 R09: 0000000000000000 [ 198.350874][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.350888][ T6297] R13: 00007fd0ab9b6308 R14: 00007fd0ab9b6270 R15: 00007ffc545e87b8 [ 198.350923][ T6297] [ 199.988297][ T6318] input: syz0 as /devices/virtual/input/input7 [ 199.988737][ T6318] input: failed to attach handler leds to device input7, error: -6 [ 200.154754][ T6321] binder: 6320:6321 ioctl c0306201 0 returned -14 [ 203.014466][ T5722] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 203.068226][ T6344] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 203.144262][ T5722] usb 5-1: device descriptor read/64, error -71 [ 203.387082][ T5722] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 203.534322][ T5722] usb 5-1: device descriptor read/64, error -71 [ 203.656302][ T5722] usb usb5-port1: attempt power cycle [ 204.317672][ T5722] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 204.339000][ T5722] usb 5-1: device descriptor read/8, error -71 [ 204.624284][ T5722] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 204.667278][ T5722] usb 5-1: device descriptor read/8, error -71 [ 204.956572][ T5722] usb usb5-port1: unable to enumerate USB device [ 206.117741][ T6364] binder: 6362:6364 ioctl c0306201 0 returned -14 [ 206.137425][ T5722] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 208.864233][ T5722] usb 4-1: device not accepting address 6, error -71 [ 209.140975][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 209.234340][ T5722] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 209.353761][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 209.356785][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.356980][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 209.357057][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 209.357123][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 209.357198][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 209.357261][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 209.441197][ T5722] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 209.465687][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.465765][ T5722] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 209.465784][ T5722] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 209.465802][ T5722] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 209.465843][ T5722] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 209.465868][ T5722] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 209.469549][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.469577][ T5722] usb 4-1: Product: syz [ 209.469593][ T5722] usb 4-1: Manufacturer: syz [ 209.469609][ T5722] usb 4-1: SerialNumber: syz [ 209.593074][ T6374] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 209.593283][ T6374] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 209.621938][ T6374] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 209.650133][ T5722] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 209.650961][ T5722] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 87 [ 209.651042][ T5722] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 209.679414][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.679440][ T10] usb 5-1: Product: syz [ 209.679454][ T10] usb 5-1: Manufacturer: syz [ 209.679465][ T10] usb 5-1: SerialNumber: syz [ 209.727776][ T5722] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 209.727843][ T5722] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 209.727901][ T5722] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 85 [ 209.728047][ T5722] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 209.821679][ T5722] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 209.869652][ T6276] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 209.949380][ T6380] FAULT_INJECTION: forcing a failure. [ 209.949380][ T6380] name failslab, interval 1, probability 0, space 0, times 0 [ 209.949408][ T6380] CPU: 0 UID: 0 PID: 6380 Comm: syz.3.147 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.949435][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.949446][ T6380] Call Trace: [ 209.949452][ T6380] [ 209.949459][ T6380] dump_stack_lvl+0xe8/0x150 [ 209.949488][ T6380] should_fail_ex+0x46b/0x600 [ 209.949517][ T6380] should_failslab+0xa8/0x100 [ 209.949533][ T6380] ? do_getname+0x2e/0x250 [ 209.949549][ T6380] kmem_cache_alloc_noprof+0x9e/0x690 [ 209.949573][ T6380] ? do_getname+0x2e/0x250 [ 209.949588][ T6380] ? rt_mutex_slowunlock+0x219/0x460 [ 209.949615][ T6380] do_getname+0x2e/0x250 [ 209.949629][ T6380] ? getname_flags+0x11/0x20 [ 209.949646][ T6380] do_sys_openat2+0xcc/0x200 [ 209.949664][ T6380] ? __pfx_do_sys_openat2+0x10/0x10 [ 209.949681][ T6380] ? ksys_write+0x248/0x270 [ 209.949704][ T6380] ? __pfx_ksys_write+0x10/0x10 [ 209.949727][ T6380] __x64_sys_openat+0x138/0x170 [ 209.949747][ T6380] do_syscall_64+0x166/0x520 [ 209.949764][ T6380] ? trace_irq_disable+0x3b/0x140 [ 209.949787][ T6380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.949803][ T6380] ? clear_bhb_loop+0x70/0xc0 [ 209.949823][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.949839][ T6380] RIP: 0033:0x7f3bcaabe159 [ 209.949854][ T6380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.949868][ T6380] RSP: 002b:00007f3bc8cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 209.949885][ T6380] RAX: ffffffffffffffda RBX: 00007f3bcad46090 RCX: 00007f3bcaabe159 [ 209.949898][ T6380] RDX: 0000000000000002 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 209.949909][ T6380] RBP: 00007f3bc8cf5090 R08: 0000000000000000 R09: 0000000000000000 [ 209.949919][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.949929][ T6380] R13: 00007f3bcad46128 R14: 00007f3bcad46090 R15: 00007ffc519c5aa8 [ 209.949953][ T6380] [ 210.221090][ T6373] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 210.221258][ T6373] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 210.221418][ T6373] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 210.305046][ T5722] keyspan 4-1:1.0: unsupported endpoint type 0 [ 210.305138][ T5722] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 210.305217][ T5722] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 210.305297][ T5722] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 86 [ 210.305374][ T5722] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 210.305548][ T10] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 210.306338][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 87 [ 210.306418][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 210.437672][ T5722] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 210.464711][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 210.464779][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 210.464836][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 85 [ 210.464893][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5 [ 210.479415][ T5975] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 210.578093][ T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 210.688795][ T5722] usb 4-1: USB disconnect, device number 7 [ 210.724762][ T10] keyspan 5-1:1.0: unsupported endpoint type 0 [ 210.724861][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 210.724950][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 210.725038][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 86 [ 210.725125][ T10] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 210.793443][ T5722] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 210.816022][ T10] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 210.857434][ T5722] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 210.858602][ T5722] keyspan 4-1:1.0: device disconnected [ 211.024227][ T1001] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 211.051586][ T10] usb 5-1: USB disconnect, device number 12 [ 211.195744][ T1001] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 211.215431][ T1001] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.215558][ T1001] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 211.215578][ T1001] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 211.215596][ T1001] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 211.215614][ T1001] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 211.215630][ T1001] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 211.317781][ T1001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.317814][ T1001] usb 2-1: Product: syz [ 211.317831][ T1001] usb 2-1: Manufacturer: syz [ 211.317848][ T1001] usb 2-1: SerialNumber: syz [ 211.405108][ T6371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.405325][ T6371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.407057][ T6371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.411113][ T1001] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 211.412001][ T1001] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 87 [ 211.412080][ T1001] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 211.483179][ T1001] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 211.483288][ T1001] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 211.483378][ T1001] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 85 [ 211.483562][ T1001] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 5 [ 211.536813][ T1001] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 211.568183][ T1001] keyspan 2-1:1.0: unsupported endpoint type 0 [ 211.568281][ T1001] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 211.568365][ T1001] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4 [ 211.568592][ T1001] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 86 [ 211.568682][ T1001] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 211.572359][ T1001] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 211.728432][ T10] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 211.794302][ T1247] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 211.966533][ T1247] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 211.989719][ T1247] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 211.989756][ T1247] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 211.992477][ T1247] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 211.992511][ T1247] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 212.105118][ T1247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.105150][ T1247] usb 4-1: Product: syz [ 212.105166][ T1247] usb 4-1: Manufacturer: syz [ 212.105182][ T1247] usb 4-1: SerialNumber: syz [ 212.184358][ T5830] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 212.211586][ T1001] usb 2-1: USB disconnect, device number 4 [ 212.224401][ T5722] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 212.266148][ T10] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 212.268779][ T10] keyspan 5-1:1.0: device disconnected [ 212.334218][ T5830] usb 1-1: Invalid ep0 maxpacket: 64 [ 212.375143][ T5722] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 212.376735][ T5722] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.376765][ T5722] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 212.380666][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 212.380695][ T5722] usb 3-1: Product: syz [ 212.380712][ T5722] usb 3-1: Manufacturer: syz [ 212.475597][ T5830] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 212.614808][ T1247] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 212.637326][ T5830] usb 1-1: Invalid ep0 maxpacket: 64 [ 212.644962][ T1247] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 212.669144][ T5830] usb usb1-port1: attempt power cycle [ 212.706873][ T1247] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 212.711619][ T1001] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 212.788134][ T5722] usbtouchscreen 3-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 212.815977][ T1001] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 212.843126][ T1001] keyspan 2-1:1.0: device disconnected [ 212.871765][ T10] usb 4-1: USB disconnect, device number 8 [ 212.981790][ T10] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 213.031273][ T10] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 213.045165][ T10] ti_usb_3410_5052 4-1:2.0: device disconnected [ 213.054282][ T5830] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 213.078319][ T5830] usb 1-1: Invalid ep0 maxpacket: 64 [ 213.205258][ T5830] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 213.229943][ T5830] usb 1-1: Invalid ep0 maxpacket: 64 [ 213.230350][ T5830] usb usb1-port1: unable to enumerate USB device [ 213.493624][ T10] usb 3-1: USB disconnect, device number 8 [ 215.080183][ T5830] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 215.537393][ T5830] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 215.539647][ T5830] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.539711][ T5830] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 215.539742][ T5830] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 215.539787][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.531732][ T5830] cxacru_cm: 45 callbacks suppressed [ 217.531759][ T5830] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 217.633382][ T6443] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 217.633413][ T6443] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 217.664881][ T5830] usb 4-1: USB disconnect, device number 9 [ 221.718918][ T6474] FAULT_INJECTION: forcing a failure. [ 221.718918][ T6474] name failslab, interval 1, probability 0, space 0, times 0 [ 221.718957][ T6474] CPU: 1 UID: 0 PID: 6474 Comm: syz.3.173 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.718983][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.718998][ T6474] Call Trace: [ 221.719007][ T6474] [ 221.719018][ T6474] dump_stack_lvl+0xe8/0x150 [ 221.719059][ T6474] should_fail_ex+0x46b/0x600 [ 221.719099][ T6474] should_failslab+0xa8/0x100 [ 221.719126][ T6474] __kmalloc_cache_noprof+0xa1/0x680 [ 221.719160][ T6474] ? unwind_get_return_address+0x4d/0x90 [ 221.719190][ T6474] ? futex_lock_pi+0x99c/0xab0 [ 221.719216][ T6474] ? futex_lock_pi+0x99c/0xab0 [ 221.719250][ T6474] futex_lock_pi+0x99c/0xab0 [ 221.719293][ T6474] ? __pfx_futex_lock_pi+0x10/0x10 [ 221.719346][ T6474] ? get_pid_task+0x20/0x1f0 [ 221.719368][ T6474] ? get_pid_task+0x20/0x1f0 [ 221.719395][ T6474] ? __pfx_futex_wake_mark+0x10/0x10 [ 221.719435][ T6474] ? do_raw_spin_lock+0x12b/0x2f0 [ 221.719465][ T6474] do_futex+0x330/0x4e0 [ 221.719486][ T6474] ? __pfx_do_futex+0x10/0x10 [ 221.719503][ T6474] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 221.719532][ T6474] __se_sys_futex+0x3a8/0x450 [ 221.719553][ T6474] ? ksys_write+0x248/0x270 [ 221.719573][ T6474] ? __pfx___se_sys_futex+0x10/0x10 [ 221.719591][ T6474] ? __pfx_ksys_write+0x10/0x10 [ 221.719615][ T6474] ? __x64_sys_futex+0x21/0xf0 [ 221.719634][ T6474] do_syscall_64+0x166/0x520 [ 221.719652][ T6474] ? trace_irq_disable+0x3b/0x140 [ 221.719674][ T6474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.719691][ T6474] ? clear_bhb_loop+0x70/0xc0 [ 221.719711][ T6474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.719727][ T6474] RIP: 0033:0x7f3bcaabe159 [ 221.719742][ T6474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.719756][ T6474] RSP: 002b:00007f3bc8d16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 221.719774][ T6474] RAX: ffffffffffffffda RBX: 00007f3bcad45fa0 RCX: 00007f3bcaabe159 [ 221.719786][ T6474] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000020000000cffc [ 221.719796][ T6474] RBP: 00007f3bc8d16090 R08: 0000000000000000 R09: 0000000000000000 [ 221.719806][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.719816][ T6474] R13: 00007f3bcad46038 R14: 00007f3bcad45fa0 R15: 00007ffc519c5aa8 [ 221.719841][ T6474] [ 222.054842][ T5592] Bluetooth: hci1: command 0x0406 tx timeout [ 222.144314][ T5592] Bluetooth: hci2: command 0x0406 tx timeout [ 222.144512][ T5592] Bluetooth: hci4: command 0x0406 tx timeout [ 222.220353][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 222.636281][ T1247] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 222.794228][ T1247] usb 2-1: Invalid ep0 maxpacket: 64 [ 222.954300][ T1247] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 222.994711][ T6485] MINIX-fs: unable to read superblock [ 223.048549][ T6074] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 223.133470][ T1247] usb 2-1: Invalid ep0 maxpacket: 64 [ 223.139396][ T1247] usb usb2-port1: attempt power cycle [ 223.196923][ T6074] usb 5-1: not running at top speed; connect to a high speed hub [ 223.196968][ T6074] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 223.198584][ T6074] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.198611][ T6074] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.198667][ T6074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.317505][ T6074] gspca_main: spca501-2.14.0 probing 0000:0000 [ 223.594896][ T1247] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 223.618600][ T1247] usb 2-1: Invalid ep0 maxpacket: 64 [ 223.858316][ T6074] gspca_spca501: reg write: error -110 [ 223.858338][ T6074] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 223.858437][ T6074] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 223.859347][ T6074] uvcvideo 5-1:1.0: Found UVC 1.00 device (0000:0000) [ 223.859431][ T6074] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 224.816296][ T1247] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 224.945688][ T6074] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 225.054813][ T1247] usb 2-1: device descriptor read/8, error -71 [ 225.105061][ T6074] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 225.107844][ T6074] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.107907][ T6074] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 225.107938][ T6074] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 225.107991][ T6074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.182760][ T1247] usb usb2-port1: unable to enumerate USB device [ 227.122836][ T6074] cxacru 1-1:1.0: send of cm 0x90 failed (-71) [ 227.206172][ T6074] usb 1-1: USB disconnect, device number 12 [ 227.448171][ T6480] syz.4.175 (6480) used greatest stack depth: 18952 bytes left [ 227.678250][ T5318] usb 5-1: USB disconnect, device number 13 [ 228.755607][ T6532] overlayfs: failed to resolve './file0': -2 [ 229.999498][ T6535] MINIX-fs: unable to read superblock [ 231.746109][ T1247] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 231.897834][ T1247] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 231.901724][ T1247] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.901762][ T1247] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.944271][ T1247] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 231.944304][ T1247] usb 2-1: Product: syz [ 231.944321][ T1247] usb 2-1: Manufacturer: syz [ 232.081003][ T1247] hub 2-1:4.0: USB hub found [ 232.245100][ T1247] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 232.482678][ T37] audit: type=1326 audit(1790611977.088:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6544 comm="syz.1.192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 232.482736][ T37] audit: type=1326 audit(1790611977.108:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6544 comm="syz.1.192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 232.490236][ T37] audit: type=1326 audit(1790611977.118:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6544 comm="syz.1.192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 232.490404][ T37] audit: type=1326 audit(1790611977.118:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6544 comm="syz.1.192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 232.493456][ T37] audit: type=1326 audit(1790611977.118:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6544 comm="syz.1.192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 232.493630][ T37] audit: type=1326 audit(1790611977.118:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6544 comm="syz.1.192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 232.493727][ T37] audit: type=1326 audit(1790611977.118:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6544 comm="syz.1.192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 232.530591][ T37] audit: type=1326 audit(1790611977.158:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6544 comm="syz.1.192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 232.530742][ T37] audit: type=1326 audit(1790611977.158:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6544 comm="syz.1.192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 232.642732][ T37] audit: type=1326 audit(1790611977.248:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6544 comm="syz.1.192" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 233.044640][ T1247] usb 2-1: USB disconnect, device number 9 [ 234.384303][ T5722] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 234.544290][ T5722] usb 5-1: Using ep0 maxpacket: 16 [ 234.547759][ T5722] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 234.549235][ T5722] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 234.549308][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.549357][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 212, changing to 11 [ 234.549378][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58557, setting to 1024 [ 234.549398][ T5722] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.549455][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.690836][ T5722] usb 5-1: config 0 descriptor?? [ 234.816721][ T5722] rc_core: IR keymap rc-hauppauge not found [ 234.816778][ T5722] Registered IR keymap rc-empty [ 234.835283][ T5722] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 234.857063][ T5722] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 234.907231][ T5722] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 234.945215][ T5722] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 235.150882][ T5722] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 235.164670][ T5722] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 235.186470][ T5722] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 235.191436][ T6558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.193668][ T6558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.204524][ T5722] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 235.226112][ T5722] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 235.252115][ T5722] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 235.264731][ T5722] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 235.284716][ T5722] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 235.304564][ T5722] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 235.346144][ T5722] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 235.370935][ T5722] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 235.370964][ T5722] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 235.553085][ T5722] usb 5-1: USB disconnect, device number 14 [ 239.524952][ T6587] MINIX-fs: unable to read superblock [ 242.130457][ T31] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 242.287574][ T31] usb 3-1: Invalid ep0 maxpacket: 64 [ 242.415140][ T31] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 242.574245][ T31] usb 3-1: Invalid ep0 maxpacket: 64 [ 242.574634][ T31] usb usb3-port1: attempt power cycle [ 242.937553][ T31] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 242.968703][ T31] usb 3-1: Invalid ep0 maxpacket: 64 [ 243.124240][ T31] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 243.148079][ T31] usb 3-1: Invalid ep0 maxpacket: 64 [ 243.165688][ T31] usb usb3-port1: unable to enumerate USB device [ 245.879888][ T6639] FAULT_INJECTION: forcing a failure. [ 245.879888][ T6639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.879918][ T6639] CPU: 1 UID: 0 PID: 6639 Comm: syz.0.219 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 245.879937][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.879954][ T6639] Call Trace: [ 245.879961][ T6639] [ 245.879968][ T6639] dump_stack_lvl+0xe8/0x150 [ 245.879998][ T6639] should_fail_ex+0x46b/0x600 [ 245.880027][ T6639] _copy_from_user+0x2d/0xb0 [ 245.880053][ T6639] __se_sys_epoll_ctl+0xbd/0x230 [ 245.880080][ T6639] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 245.880113][ T6639] do_syscall_64+0x166/0x520 [ 245.880131][ T6639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.880148][ T6639] ? clear_bhb_loop+0x70/0xc0 [ 245.880168][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.880184][ T6639] RIP: 0033:0x7f7a0e5ee159 [ 245.880200][ T6639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.880213][ T6639] RSP: 002b:00007f7a0c846028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 245.880231][ T6639] RAX: ffffffffffffffda RBX: 00007f7a0e875fa0 RCX: 00007f7a0e5ee159 [ 245.880243][ T6639] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 245.880253][ T6639] RBP: 00007f7a0c846090 R08: 0000000000000000 R09: 0000000000000000 [ 245.880263][ T6639] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 245.880273][ T6639] R13: 00007f7a0e876038 R14: 00007f7a0e875fa0 R15: 00007ffe9b1ad178 [ 245.880299][ T6639] [ 246.017773][ T6641] MINIX-fs: unable to read superblock [ 246.289793][ T6648] program syz.0.221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.555124][ T6686] MINIX-fs: unable to read superblock [ 251.575262][ T31] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 251.725738][ T31] usb 5-1: Invalid ep0 maxpacket: 64 [ 251.854609][ T31] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 251.949138][ T37] kauditd_printk_skb: 73 callbacks suppressed [ 251.949168][ T37] audit: type=1326 audit(1790611996.578:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.1.234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 251.949388][ T37] audit: type=1326 audit(1790611996.578:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.1.234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 251.951356][ T37] audit: type=1326 audit(1790611996.578:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.1.234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 251.951686][ T37] audit: type=1326 audit(1790611996.578:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.1.234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 251.951992][ T37] audit: type=1326 audit(1790611996.578:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.1.234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 251.980025][ T37] audit: type=1326 audit(1790611996.578:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.1.234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 251.980202][ T37] audit: type=1326 audit(1790611996.598:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.1.234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 251.980329][ T37] audit: type=1326 audit(1790611996.598:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.1.234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 251.980454][ T37] audit: type=1326 audit(1790611996.598:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.1.234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2aae5ddec2 code=0x7ffc0000 [ 251.980574][ T37] audit: type=1326 audit(1790611996.588:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6693 comm="syz.1.234" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aae5de159 code=0x7ffc0000 [ 252.014211][ T31] usb 5-1: Invalid ep0 maxpacket: 64 [ 252.014622][ T31] usb usb5-port1: attempt power cycle [ 252.312442][ T6698] binder: 6697:6698 ioctl c0306201 0 returned -14 [ 254.274205][ T31] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 254.486296][ T31] usb 5-1: device descriptor read/8, error -71 [ 254.503273][ T6703] FAULT_INJECTION: forcing a failure. [ 254.503273][ T6703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.503309][ T6703] CPU: 1 UID: 0 PID: 6703 Comm: syz.3.236 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 254.503336][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.503350][ T6703] Call Trace: [ 254.503359][ T6703] [ 254.503369][ T6703] dump_stack_lvl+0xe8/0x150 [ 254.503408][ T6703] should_fail_ex+0x46b/0x600 [ 254.503448][ T6703] _copy_from_user+0x2d/0xb0 [ 254.503491][ T6703] do_sys_poll+0x258/0xf50 [ 254.503530][ T6703] ? __lock_acquire+0x747/0x2de0 [ 254.503570][ T6703] ? __pfx_do_sys_poll+0x10/0x10 [ 254.503596][ T6703] ? is_bpf_text_address+0x292/0x2b0 [ 254.503620][ T6703] ? is_bpf_text_address+0x26/0x2b0 [ 254.503756][ T6703] ? set_user_sigmask+0xcd/0x1c0 [ 254.503790][ T6703] ? __pfx_set_user_sigmask+0x10/0x10 [ 254.503824][ T6703] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 254.503866][ T6703] __se_sys_ppoll+0x209/0x2b0 [ 254.503889][ T6703] ? fput+0xa0/0xd0 [ 254.503914][ T6703] ? __pfx___se_sys_ppoll+0x10/0x10 [ 254.503938][ T6703] ? __pfx_ksys_write+0x10/0x10 [ 254.503974][ T6703] ? __x64_sys_ppoll+0x20/0xc0 [ 254.503999][ T6703] do_syscall_64+0x166/0x520 [ 254.504022][ T6703] ? trace_irq_disable+0x3b/0x140 [ 254.504056][ T6703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.504079][ T6703] ? clear_bhb_loop+0x70/0xc0 [ 254.504108][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.504131][ T6703] RIP: 0033:0x7f3bcaabe159 [ 254.504152][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.504171][ T6703] RSP: 002b:00007f3bc8d16028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 254.504196][ T6703] RAX: ffffffffffffffda RBX: 00007f3bcad45fa0 RCX: 00007f3bcaabe159 [ 254.504212][ T6703] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000000c0 [ 254.504226][ T6703] RBP: 00007f3bc8d16090 R08: 0000000000000000 R09: 0000000000000000 [ 254.504240][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.504253][ T6703] R13: 00007f3bcad46038 R14: 00007f3bcad45fa0 R15: 00007ffc519c5aa8 [ 254.504289][ T6703] [ 257.700078][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.700183][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.483372][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 259.534029][ T6703] [ 259.536920][ T6703] ====================================================== [ 259.545090][ T6703] WARNING: possible circular locking dependency detected [ 259.552779][ T6703] syzkaller #0 Not tainted [ 259.557233][ T6703] ------------------------------------------------------ [ 259.564379][ T6703] syz.3.236/6703 is trying to acquire lock: [ 259.570307][ T6703] ffff888063ebf7b0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xd70 [ 259.583365][ T6703] [ 259.583365][ T6703] but task is already holding lock: [ 259.592963][ T6703] ffff88801167b118 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22f/0x580 [ 259.605171][ T6703] [ 259.605171][ T6703] which lock already depends on the new lock. [ 259.605171][ T6703] [ 259.618581][ T6703] [ 259.618581][ T6703] the existing dependency chain (in reverse order) is: [ 259.630737][ T6703] [ 259.630737][ T6703] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 259.640568][ T6703] lock_sock_nested+0x41/0x130 [ 259.647630][ T6703] smc_listen_out+0xd4/0x3d0 [ 259.656361][ T6703] process_scheduled_works+0xc3d/0x1630 [ 259.664642][ T6703] worker_thread+0xa47/0xfb0 [ 259.673161][ T6703] kthread+0x38b/0x470 [ 259.678765][ T6703] ret_from_fork+0x514/0xb70 [ 259.685345][ T6703] ret_from_fork_asm+0x1a/0x30 [ 259.691008][ T6703] [ 259.691008][ T6703] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 259.701683][ T6703] __lock_acquire+0x164c/0x2de0 [ 259.707535][ T6703] lock_acquire+0x115/0x350 [ 259.712625][ T6703] __flush_work+0x6c5/0xd70 [ 259.717696][ T6703] __cancel_work_sync+0xbf/0x110 [ 259.724044][ T6703] smc_clcsock_release+0x60/0xf0 [ 259.734265][ T6703] __smc_release+0x662/0x7d0 [ 259.741574][ T6703] smc_close_non_accepted+0xd5/0x1f0 [ 259.750557][ T6703] smc_close_active+0xb59/0xf50 [ 259.757884][ T6703] __smc_release+0x9e/0x7d0 [ 259.765702][ T6703] smc_release+0x2cd/0x580 [ 259.771095][ T6703] __sock_release+0xa0/0x1f0 [ 259.776885][ T6703] sock_close+0x1c/0x30 [ 259.783456][ T6703] __fput+0x42a/0xa80 [ 259.790501][ T6703] task_work_run+0x1d9/0x270 [ 259.798280][ T6703] get_signal+0x1182/0x12c0 [ 259.804306][ T6703] arch_do_signal_or_restart+0xbb/0x860 [ 259.812073][ T6703] exit_to_user_mode_loop+0x10e/0x770 [ 259.820271][ T6703] do_syscall_64+0x328/0x520 [ 259.827491][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.837592][ T6703] [ 259.837592][ T6703] other info that might help us debug this: [ 259.837592][ T6703] [ 259.852325][ T6703] Possible unsafe locking scenario: [ 259.852325][ T6703] [ 259.860475][ T6703] CPU0 CPU1 [ 259.866688][ T6703] ---- ---- [ 259.872182][ T6703] lock(sk_lock-AF_SMC/1); [ 259.876726][ T6703] lock((work_completion)(&new_smc->smc_listen_work)); [ 259.886204][ T6703] lock(sk_lock-AF_SMC/1); [ 259.895921][ T6703] lock((work_completion)(&new_smc->smc_listen_work)); [ 259.905104][ T6703] [ 259.905104][ T6703] *** DEADLOCK *** [ 259.905104][ T6703] [ 259.917980][ T6703] locks held by syz.3.236/6703: 3, last CPU#0: [ 259.926306][ T6703] #0: ffff8880405496f8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 259.941477][ T6703] #1: ffff88801167b118 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22f/0x580 [ 259.953681][ T6703] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xd70 [ 259.967944][ T6703] [ 259.967944][ T6703] stack backtrace: [ 259.975306][ T6703] CPU: 0 UID: 0 PID: 6703 Comm: syz.3.236 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.988358][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.002376][ T6703] Call Trace: [ 260.006223][ T6703] [ 260.010506][ T6703] dump_stack_lvl+0xe8/0x150 [ 260.016325][ T6703] print_circular_bug+0x2e2/0x300 [ 260.023681][ T6703] check_noncircular+0x12f/0x150 [ 260.029009][ T6703] __lock_acquire+0x164c/0x2de0 [ 260.034184][ T6703] ? do_raw_spin_unlock+0xf5/0x200 [ 260.039348][ T6703] lock_acquire+0x115/0x350 [ 260.043974][ T6703] ? __flush_work+0x101/0xd70 [ 260.049200][ T6703] ? __flush_work+0x101/0xd70 [ 260.053930][ T6703] __flush_work+0x6c5/0xd70 [ 260.058939][ T6703] ? __flush_work+0x101/0xd70 [ 260.066608][ T6703] ? __flush_work+0x101/0xd70 [ 260.073170][ T6703] ? __pfx___flush_work+0x10/0x10 [ 260.081161][ T6703] ? __pfx_wq_barrier_func+0x10/0x10 [ 260.092738][ T6703] ? __cancel_work_sync+0x5c/0x110 [ 260.100835][ T6703] __cancel_work_sync+0xbf/0x110 [ 260.106981][ T6703] smc_clcsock_release+0x60/0xf0 [ 260.115158][ T6703] __smc_release+0x662/0x7d0 [ 260.121265][ T6703] smc_close_non_accepted+0xd5/0x1f0 [ 260.128655][ T6703] smc_close_active+0xb59/0xf50 [ 260.141839][ T6703] ? __pfx_sock_def_readable+0x10/0x10 [ 260.150202][ T6703] ? smc_close_active+0x3ed/0xf50 [ 260.157431][ T6703] __smc_release+0x9e/0x7d0 [ 260.163008][ T6703] ? lockdep_hardirqs_on+0x7b/0x110 [ 260.169814][ T6703] smc_release+0x2cd/0x580 [ 260.175120][ T6703] __sock_release+0xa0/0x1f0 [ 260.180016][ T6703] ? __pfx_sock_close+0x10/0x10 [ 260.185367][ T6703] sock_close+0x1c/0x30 [ 260.189570][ T6703] __fput+0x42a/0xa80 [ 260.193596][ T6703] task_work_run+0x1d9/0x270 [ 260.198305][ T6703] ? __pfx_task_work_run+0x10/0x10 [ 260.203461][ T6703] get_signal+0x1182/0x12c0 [ 260.208009][ T6703] ? task_work_add+0x298/0x420 [ 260.212809][ T6703] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 260.218653][ T6703] ? __pfx_task_work_add+0x10/0x10 [ 260.224707][ T6703] ? reacquire_held_locks+0x117/0x1a0 [ 260.230556][ T6703] arch_do_signal_or_restart+0xbb/0x860 [ 260.238202][ T6703] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 260.248477][ T6703] exit_to_user_mode_loop+0x10e/0x770 [ 260.255017][ T6703] ? rcu_is_watching+0x16/0xb0 [ 260.260204][ T6703] do_syscall_64+0x328/0x520 [ 260.266162][ T6703] ? trace_irq_disable+0x3b/0x140 [ 260.274556][ T6703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.280949][ T6703] ? clear_bhb_loop+0x70/0xc0 [ 260.287154][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.294522][ T6703] RIP: 0033:0x7f3bcaabe159 [ 260.299488][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.324505][ T6703] RSP: 002b:00007f3bc8d16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 260.333763][ T6703] RAX: fffffffffffffe00 RBX: 00007f3bcad45fa0 RCX: 00007f3bcaabe159 [ 260.344665][ T6703] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000005 [ 260.353431][ T6703] RBP: 00007f3bcab5506b R08: 0000000000000000 R09: 0000000000000000 [ 260.361433][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.369446][ T6703] R13: 00007f3bcad46038 R14: 00007f3bcad45fa0 R15: 00007ffc519c5aa8 [ 260.377839][ T6703] [ 260.767046][ T31] usb 5-1: device descriptor read/all, error -71