last executing test programs: 7m55.667529903s ago: executing program 2 (id=164): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl711\x00', [0x5c22, 0xffffffff, 0x1, 0x3, 0xffff, 0x7, 0xfe, 0x3, 0x0, 0x800, 0x6b5e, 0x2, 0x3d, 0x403, 0x6, 0xc, 0x1, 0x1a449, 0x100b, 0x2d5c, 0xd1a8, 0x7fff, 0xb2a, 0xb, 0x2, 0x10001, 0x1000002, 0x8, 0x4001, 0x1]}) (fail_nth: 1) 7m55.166771437s ago: executing program 2 (id=166): unshare(0x36050000) fanotify_init(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x202) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) epoll_create(0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0x1d, 0x2, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff0100000000000000000000000000016401010100000000000000000000000001000000000000060a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="020000000000000080011100fe8000000000000000000000000000bbac1e000100000000000000000000000020010000000000000000000000000000fe8800000000000000000000000001012b0200000135000002000200e0000001000000000000000000000000ac1414aa000000000000000000000000fc020000000000000000000000000000fe88000000000000000000000000000133040000ff34000002000200fc010000000000000000000000000001fe800000000000000000000000000035ac1414aa000000000000000000000000fc0200000000000000000000000000013c00000000000000026cc911c7"], 0x1d0}}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) unshare(0x94060480) 7m52.935765265s ago: executing program 2 (id=172): timerfd_create(0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30be, 0x400, 0x8, 0x40000187}) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x60}, 0x122) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 7m50.896910605s ago: executing program 2 (id=178): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x101001, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) sendfile(r0, r0, 0x0, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffed1) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0x5, 0x0, {0x5, 0x0, 0x6b, 0x7, 0x400000000000007, 0xd, 0xfff7ffff, 0x6, 0x4101, 0xa000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x100, 0x4b) r6 = open_tree(r5, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448e1, &(0x7f00000005c0)) 7m47.2121566s ago: executing program 2 (id=190): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x15, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1a, 0x0, {0x1, r3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 7m44.839396718s ago: executing program 2 (id=198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8981f23689eb65be16f4264404ead348", 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 7m44.059287929s ago: executing program 32 (id=198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8981f23689eb65be16f4264404ead348", 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 4m37.177520335s ago: executing program 5 (id=1103): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="66b8cc000f00d8c401a9f5e5490fc75a0066baf80cb86ef08187ef66bafc0c66b8050066ef0f236c67420f01ca8f297801995ba0000066bad104ed0f78f84a0fc79974000000", 0x46}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x1f) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4004001) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000140)={&(0x7f0000000100)=[{0x3, 0x8800, 0x22, &(0x7f0000000080)="132bcf444ef7b8ffb5d2831e173baceec474d397488fbe621a647fa9b74e7320e6d0"}], 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) 4m33.758177651s ago: executing program 5 (id=1110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x15, &(0x7f0000000840)={0x22, 0x7, 0xfffff7ff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000004c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast1, 0xffffffff}, r5}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r5}}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m32.238061996s ago: executing program 5 (id=1122): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f00000001c0)=[{0x5, 0xf8, 0x3, 0x1000000e}, {0x2, 0xf8, 0x7f, 0x2}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000280)='(\x00', 0x84000, &(0x7f00000002c0)={@_ha_fsid={[0xff, 0x6]}, {0xcd91, 0x0, 0x80, 0x6f0}}, 0x0, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x10}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = dup(r10) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000002500)=0xc480, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000200000018190000", @ANYRES32, @ANYBLOB="0000000000000000185800000a0000000000000000000000b7080000000000007b8af8ff00000000b7080000be8200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000001800000007000000000000000d0000001851000002000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000000400000085000000b100000018480000000000000000000000000000183400000200000000000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x4, 0x82, &(0x7f0000000480)=""/130, 0x41000, 0x16, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000740)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x10, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r9, r11], 0x0, 0x10, 0x7fff}, 0x94) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x4e) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x10000) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x8000400) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x3, 0x0) 4m29.795553569s ago: executing program 5 (id=1137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x43b, 0x2, {0xffffffffffffffff}, {0x0}, 0x8, 0xd}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000190001000c000000000000000a14000000040007002e000008001e0001000000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x24000040) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r3], 0x108}}], 0x2, 0xc040) sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0xd) close(0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x9}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x1c2, &(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0], 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, r0, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x1000000, 0xfffffffe, {r7}, {r1}, 0x30, 0x5}) read$msr(r6, &(0x7f0000025300)=""/102392, 0x18ff8) mmap(&(0x7f00000db000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r9, &(0x7f0000000640)={0x1d, r10, 0x6, {0x1, 0x1, 0x2}, 0xfd}, 0x18) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) 4m29.323163623s ago: executing program 5 (id=1143): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) fstat(r0, &(0x7f00000000c0)) (fail_nth: 1) 4m28.85260066s ago: executing program 5 (id=1145): timerfd_create(0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30be, 0x400, 0x8, 0x40000187}) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800", @ANYRES16=r0], 0xc4}}, 0x0) 4m13.54122586s ago: executing program 33 (id=1145): timerfd_create(0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30be, 0x400, 0x8, 0x40000187}) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800", @ANYRES16=r0], 0xc4}}, 0x0) 2m42.618863349s ago: executing program 4 (id=1546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000000401400e27f000001"], 0x48) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x54, r3, 0x1, 0x70bf25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xffffffff}, {0xc, 0x90, 0xe1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) r5 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x1}, &(0x7f0000000a00)="9179", 0x2, r5) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0x1e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000008510000006000000037f79e9ffffffff8500000058000000184c0000ffffffff0000000000000000f3e7954d938e560bc11b51e0ffd89318010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x3, &(0x7f00000001c0)=""/3, 0x41100, 0x1f, '\x00', 0x0, @fallback=0xc, r2, 0x8, &(0x7f0000000400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xb, 0x7, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000840), &(0x7f0000000880)=[{0x2, 0x3, 0xa, 0x7}, {0x4, 0x2, 0xd, 0x1}, {0x2, 0x4, 0x10000000}], 0x10, 0x3ff}, 0x94) r6 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000002140)=0x5) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$FUSE(r6, &(0x7f0000002b00)={0x2020}, 0x2028) 2m41.926628727s ago: executing program 4 (id=1550): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "235cd1c80dcfdcf67afe9ad6304b946b09970902cb35f48c660cbd89d88039b23af928f0667531662c83f1ba0e9432553efad303749e08fb5c2bd32c6ed339f1", 0x17}, 0x48, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='logon\x00', &(0x7f00000001c0)=@keyring) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0x8, "0f1137c6"}, @local=@item_012={0x2, 0x2, 0x8, "3994"}, @local=@item_4={0x3, 0x2, 0x2, "b09ea549"}, @main=@item_4={0x3, 0x0, 0x8, "ce9abc16"}]}}, 0x0}, 0x0) 2m39.792655071s ago: executing program 4 (id=1554): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xffffff1f, 0x70bd28, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x480c4}, 0x8000) 2m39.295585224s ago: executing program 4 (id=1556): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002000)=[{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)="18c44b1ffae2764c98de25a8d8a67262fb421b7119583538d6bdbcf4531fa5b7cbb069c4808d67fa906a4f8ae3c087e366d9cf99e468a25f54b5327fc2f3a4cfa0344d72b3fbeae96f8cc5dc9cefa6e4344d32d45f77d7251616d6f65b1f950bf7b01f86a55dcd1e7a72bfc623122b7aae9f7b8857030b9fb0294eb01c98c00d680c93aed0e581588f3fe075f4f1387c6ffe8b9f4aac1ac7e06fdaf5cf9e8d12f576d31e6e2d070a0a50b4509a25e93e27d4141bf329eb28181ea669ef40f16b28e1877d664b32d5775e62347c07e993a2bd5e44a2ed8a7259f8897b0f06d7fd57a4a51418ae7b34cde710ced4", 0xed}, {&(0x7f0000001f00)="f9e175df6cbee1f95cb3acdb97136d2517d7aebab6fb9712fed018afd40cdf08566d7453226a4b62e6b31c7e5f632ef6acdebf9cc0f809483b599975459535f53ffde77146b484170d49eeb95654c599b684f0b78a2cfb828bf1cfb6b31433312d7edbaeb45152bd505328e3948234dfb103988c0f77185eabc2d3288f30004ac211acbf8cea4daefa17ce9e7ca9d268a9f3d3cb55ee5cbd0ac915fce9d3a9175749ed5a76a3f5", 0xa7}, {&(0x7f0000001800)="8b8d187d79fd306a008621efb4d642dd264b09ac43867c0ff10b71b2435523008d80a663925369a7820d0f00088484357957bbe7ca3f54a64ecb586e5c898a2cdf3fa3a210f457382e9bda4b2289691960888bf0af992f261ec993155c6651bfa2ba9be390b2e5a587eaf6cf24bd99a878c5c073364f508f8753e35fbdfce1ad8c24ef48c81daedeff641199ada83e3dbbcde37f5aee867b72af8f89380679ca46e404c6d9877cd87dbb16aeefbbf4610a646d520a75853a13014cf6799dd6912b9eeb9c75fc018a07e52f22cd75b1e445afee1b67b6264834e8ccfa2cd52d4d", 0xe0}, {0x0}], 0x4, &(0x7f0000001b00)=[@assoc={0x18, 0x117, 0x4, 0x100000}, @op={0x18}, @op={0x18}], 0x48, 0x41}], 0x1, 0x40010) 2m38.687628034s ago: executing program 4 (id=1558): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xfff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prlimit64(r5, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) lsm_get_self_attr(0x64, &(0x7f00000000c0)={0x0, 0x0, 0x3c, 0x1c, ""/28}, 0x0, 0x1) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={0x0, 0xffffffffffffffff, 0x1f}, 0x14) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) 2m37.614899117s ago: executing program 4 (id=1561): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) read(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r1, 0x708, 0x2) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x7, &(0x7f0000000000)={0x14, "1401003d876ff44271f19ca6e4482707dab729631eae010000004d70b41d4008e3"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000002000000000000040017028500000011000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="e02742e8680d85ff9782762f86dd", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x200, 0x0) read$msr(r3, &(0x7f0000001200)=""/102400, 0x19000) syz_usb_connect(0x2, 0x440, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="b2"], 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0x8401) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$getown(r4, 0x9) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f0000000340)=[{0x4, 0x1010, 0xf5, &(0x7f0000000380)="753ed2bedb9f3b5fe6dec68779283cc2e8b0ad50aa8e23cd634f07791cbb4678d5bfd518384c165d9412cb449f92078864800272e4a750ff75f061a136892f4074cfa1b2de0f902814f5eda092a3b2711c2a6b0f231837412121fcff9d6d8b2a4a76debc3d5b5a9a880a04b725241058af1e63a87af7c932bd895b37fbb1dfe524dad93a1ad46e439ebc816a662509c108c9e364db5606811729d673c7f30b621fed8a294bd8408c7a8cdfb6a4132da531ef44a27c808da2baf91e80b5f41e1060226b41477025ada5f8c89f8b3474fcc0479a86927e9eeea1bfa90c1a78fa23ce794790348503256cabdca3ee4b27fe8843323560"}], 0x1}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xf, 0x8, 0x9, 0x8, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d6}, @sadb_lifetime={0x4, 0x4, 0x1, 0x3, 0x4, 0x7}]}, 0x40}}, 0x40c0) 2m22.421279962s ago: executing program 34 (id=1561): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) read(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r1, 0x708, 0x2) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x7, &(0x7f0000000000)={0x14, "1401003d876ff44271f19ca6e4482707dab729631eae010000004d70b41d4008e3"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000002000000000000040017028500000011000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="e02742e8680d85ff9782762f86dd", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x200, 0x0) read$msr(r3, &(0x7f0000001200)=""/102400, 0x19000) syz_usb_connect(0x2, 0x440, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="b2"], 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0x8401) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$getown(r4, 0x9) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f0000000340)=[{0x4, 0x1010, 0xf5, &(0x7f0000000380)="753ed2bedb9f3b5fe6dec68779283cc2e8b0ad50aa8e23cd634f07791cbb4678d5bfd518384c165d9412cb449f92078864800272e4a750ff75f061a136892f4074cfa1b2de0f902814f5eda092a3b2711c2a6b0f231837412121fcff9d6d8b2a4a76debc3d5b5a9a880a04b725241058af1e63a87af7c932bd895b37fbb1dfe524dad93a1ad46e439ebc816a662509c108c9e364db5606811729d673c7f30b621fed8a294bd8408c7a8cdfb6a4132da531ef44a27c808da2baf91e80b5f41e1060226b41477025ada5f8c89f8b3474fcc0479a86927e9eeea1bfa90c1a78fa23ce794790348503256cabdca3ee4b27fe8843323560"}], 0x1}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xf, 0x8, 0x9, 0x8, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d6}, @sadb_lifetime={0x4, 0x4, 0x1, 0x3, 0x4, 0x7}]}, 0x40}}, 0x40c0) 25.681017991s ago: executing program 1 (id=2054): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000100)="fbffffff", 0x4) 22.003856088s ago: executing program 1 (id=2068): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1800, 0x42004}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0x8cd) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_usb_connect(0x0, 0x56, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x5) 21.547368502s ago: executing program 3 (id=2071): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0x1) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 21.155623479s ago: executing program 3 (id=2073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000000401400e27f000001"], 0x48) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x54, r3, 0x1, 0x70bf25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xffffffff}, {0xc, 0x90, 0xe1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) r5 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x1}, &(0x7f0000000a00)="9179", 0x2, r5) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0x1e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000008510000006000000037f79e9ffffffff8500000058000000184c0000ffffffff0000000000000000f3e7954d938e560bc11b51e0ffd89318010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x3, &(0x7f00000001c0)=""/3, 0x41100, 0x1f, '\x00', 0x0, @fallback=0xc, r2, 0x8, &(0x7f0000000400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xb, 0x7, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000840), &(0x7f0000000880)=[{0x2, 0x3, 0xa, 0x7}, {0x4, 0x2, 0xd, 0x1}, {0x2, 0x4, 0x10000000}], 0x10, 0x3ff}, 0x94) r6 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000002140)=0x5) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$FUSE(r6, &(0x7f0000002b00)={0x2020}, 0x2028) 20.069001824s ago: executing program 3 (id=2074): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socket$alg(0x26, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x7) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket(0x10, 0x803, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000001300), 0x101001, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r4, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) 18.814037649s ago: executing program 3 (id=2079): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000100)="fbffffff", 0x4) 18.310329214s ago: executing program 1 (id=2084): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 13.706974585s ago: executing program 7 (id=2094): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1800, 0x42004}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) write$dsp(r0, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99", 0xa45) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_usb_connect(0x0, 0x56, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x5) 12.47540749s ago: executing program 3 (id=2095): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0x95, &(0x7f0000000000)=""/149}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 10.873591272s ago: executing program 3 (id=2096): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0x2, 0xfffe, 0x410003, 0x7, 0x52, "a294e7003e805a9d1b78d681c441000700"}) write$UHID_INPUT(r0, &(0x7f0000001c40)={0xfe04, {"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", 0x1000}}, 0x1006) 9.568622709s ago: executing program 7 (id=2102): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14}}, 0xc0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4100}}}}}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x4840) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0x42, 0x4, 0x438, 0xffffffff, 0x1e0, 0x1e0, 0x0, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xffffff00, 0x0, 'veth0_to_batadv\x00', 'pimreg0\x00', {}, {}, 0x11, 0x1}, 0x0, 0xa0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x88, {0x5}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@inet=@sctp={{0x148}, {[0x4e23, 0x4e24], [0x4e20, 0x4e20], [0x0, 0x65, 0x3, 0xffff, 0x9, 0x8000, 0x800, 0x0, 0xfffffc00, 0x1a, 0x8, 0x2, 0x6, 0x8, 0x1, 0x4, 0x895, 0x1, 0x7, 0x8001, 0x4, 0x3, 0x7, 0x23b, 0x7fff, 0x2400, 0x10, 0x5, 0x7ff, 0xee, 0x7, 0x4, 0x6, 0x7, 0x1087, 0x3, 0x39d, 0xffffffff, 0x4, 0x5, 0x1, 0x0, 0x4, 0x200, 0x0, 0x5, 0xe6, 0x1, 0xffff, 0x1, 0x401, 0x7, 0x4, 0x1, 0x1, 0x76b, 0x8, 0x401, 0xa71c, 0x4000000, 0x8, 0x0, 0x1ff, 0x9], 0x1, [{0xfc, 0x1}, {0x8, 0x9, 0x29}, {0x2, 0x81, 0x7}, {0x8, 0x7}], 0x0, 0x1, 0x7}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000500)) 7.455661118s ago: executing program 7 (id=2105): unshare(0x36050000) fanotify_init(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x202) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) epoll_create(0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0x1d, 0x2, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff0100000000000000000000000000016401010100000000000000000000000001000000000000060a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="020000000000000080011100fe8000000000000000000000000000bbac1e000100000000000000000000000020010000000000000000000000000000fe8800000000000000000000000001012b0200000135000002000200e0000001000000000000000000000000ac1414aa000000000000000000000000fc020000000000000000000000000000fe88000000000000000000000000000133040000ff34000002000200fc010000000000000000000000000001fe800000000000000000000000000035ac1414aa000000000000000000000000fc0200000000000000000000000000013c00000000000000026cc911c7"], 0x1d0}}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) unshare(0x94060480) 7.364256883s ago: executing program 0 (id=2106): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1335f0a6) 6.848433515s ago: executing program 0 (id=2107): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x5f]}}, 0x0, 0x53}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xd3) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) syz_emit_vhci(0x0, 0xd) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x40}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 6.687354323s ago: executing program 6 (id=2108): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/power/pm_trace', 0x0, 0x95) sendfile(r0, r1, 0x0, 0x1335f0a6) fchdir(r1) 6.270931549s ago: executing program 6 (id=2109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @local, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="fc", 0x1}], 0x1}}], 0x1, 0x44440) 5.97235288s ago: executing program 1 (id=2110): r0 = socket(0x10, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000700)=[@in6={0xa, 0x4e22, 0x5, @local, 0x593}, @in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, @in6={0xa, 0x4e20, 0x7, @remote, 0x17f}, @in={0x2, 0x4e22, @private=0xa0100ff}, @in={0x2, 0x4e21, @remote}], 0xa0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0xfffffffb, 0x0, 0x0, 0x4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0x7b], 0xdddd0000, 0x1c4213}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) 5.169429096s ago: executing program 0 (id=2111): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1800, 0x42004}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0xa45) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_usb_connect(0x0, 0x56, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x5) 4.879266028s ago: executing program 6 (id=2112): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x2a18091, 0x0) 4.807939673s ago: executing program 1 (id=2113): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x4080) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4100}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = getpgrp(0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r3, &(0x7f0000000040)={r6, r2, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4840) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x6004) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000500)) 3.859074489s ago: executing program 6 (id=2114): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}, @struct={0x4}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c, 0x0, 0x1}, 0x28) (fail_nth: 1) 2.659588555s ago: executing program 6 (id=2115): syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x3ff, &(0x7f0000000500)) 2.007101422s ago: executing program 0 (id=2116): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40007}}, 0x2, 0x3a34089a, 0x7, 0x2, 0x1b06}, &(0x7f00000002c0)=0x98) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@generic={0x3, 0x10001, 0x4}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x100, 0x20, 0x41}, 0x18) 1.920082202s ago: executing program 6 (id=2117): ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty, 0x0, 0x3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x2, 0x2000) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x19ea33745a03305f, 0x0, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000100), 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000380)={r4, 0x2, 0x12e, 0xb6, 0x1, [], [0x0, 0x0, 0x68a65ad0, 0x3acd], [0xbb, 0x62, 0xe, 0x5], [0x4, 0x2, 0x9, 0x1]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0xffff, r7, 0x2b}) 1.868198156s ago: executing program 1 (id=2118): socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x4, 0xff, 0x1800}, {0x4, 0x2, 0x800}, {0x1, 0x0, 0x1000}], 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) (fail_nth: 1) 1.386804126s ago: executing program 0 (id=2119): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000040000007b4b143b7461fd777b1c012bd14efb9f0c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b519e6000000fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b33fcbb2c5a57df67d544af6e8dafe090000000000000000"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) r2 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r4 = socket$inet6_sctp(0xa, 0xf, 0x84) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x40810, &(0x7f0000000080)={0xa, 0x3, 0x2, @remote, 0x9}, 0x1c) listen(r4, 0x100101) r5 = accept4(r4, 0x0, 0x0, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='net_prio.prioidx\x00', 0x275a, 0x0) fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e1e, 0x9, @remote, 0x6}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 1.357227449s ago: executing program 7 (id=2120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$audion(&(0x7f0000000000), 0xa, 0x400200) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000005400010026bdf001"], 0x38}}, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e05003e20"], 0x8) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000840000000001400058008"], 0x5c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.052531439s ago: executing program 7 (id=2121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() socket(0x400000000010, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000001a00)=ANY=[@ANYRESHEX, @ANYRES16=r0, @ANYRESHEX, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRES16, @ANYRESHEX=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_socket_connect_nvme_tcp() syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="7199dab04e1b2ecafcc67af208004501002400640000002f9078e0000002e000000132004e21001090780200000080000000"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f0212475400f6a13bb1000e00080088a84803", 0x1a, 0xffffffffffffdd86, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 31.10102ms ago: executing program 0 (id=2122): r0 = socket(0x10, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000700)=[@in6={0xa, 0x4e22, 0x5, @local, 0x593}, @in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, @in6={0xa, 0x4e20, 0x7, @remote, 0x17f}, @in={0x2, 0x4e22, @private=0xa0100ff}, @in={0x2, 0x4e21, @remote}], 0xa0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0xfffffffb, 0x0, 0x0, 0x4}, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0x7b], 0xdddd0000, 0x1c4213}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) 0s ago: executing program 7 (id=2123): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x2a18091, 0x0) kernel console output (not intermixed with test programs): 82][T11511] do_syscall_64+0x14d/0xf80 [ 493.803010][T11511] ? trace_irq_disable+0x3b/0x150 [ 493.803031][T11511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.803052][T11511] ? clear_bhb_loop+0x40/0x90 [ 493.803076][T11511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.803095][T11511] RIP: 0033:0x7faea457c799 [ 493.803117][T11511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.803134][T11511] RSP: 002b:00007faea27ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.803158][T11511] RAX: ffffffffffffffda RBX: 00007faea47f5fa0 RCX: 00007faea457c799 [ 493.803174][T11511] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 493.803186][T11511] RBP: 00007faea27ce090 R08: 0000000000000000 R09: 0000000000000000 [ 493.803199][T11511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.803211][T11511] R13: 00007faea47f6038 R14: 00007faea47f5fa0 R15: 00007ffedc79c8f8 [ 493.803246][T11511] [ 494.261335][T11498] netlink: 'syz.6.1710': attribute type 10 has an invalid length. [ 494.300475][T11121] usb 7-1: USB disconnect, device number 7 [ 494.315722][ T1435] usb 7-1: Failed to submit usb control message: -71 [ 494.315766][ T1435] usb 7-1: unable to send the bmi data to the device: -71 [ 494.315785][ T1435] usb 7-1: unable to get target info from device [ 494.315802][ T1435] usb 7-1: could not get target info (-71) [ 494.316019][ T1435] usb 7-1: could not probe fw (-71) [ 494.511667][T11515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.598257][T11518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.226860][ T5882] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 495.377322][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 495.381661][ T5882] usb 2-1: unable to get BOS descriptor or descriptor too short [ 495.383580][ T5882] usb 2-1: config 3 has an invalid interface number: 212 but max is 0 [ 495.383611][ T5882] usb 2-1: config 3 has no interface number 0 [ 495.383662][ T5882] usb 2-1: config 3 interface 212 has no altsetting 0 [ 495.447753][ T5882] usb 2-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=c1.67 [ 495.447786][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.447807][ T5882] usb 2-1: Product: syz [ 495.447822][ T5882] usb 2-1: Manufacturer: syz [ 495.447837][ T5882] usb 2-1: SerialNumber: syz [ 495.473104][T11538] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1724'. [ 496.503562][T11545] FAULT_INJECTION: forcing a failure. [ 496.503562][T11545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.503607][T11545] CPU: 0 UID: 0 PID: 11545 Comm: syz.0.1727 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 496.503637][T11545] Tainted: [L]=SOFTLOCKUP [ 496.503646][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.503659][T11545] Call Trace: [ 496.503668][T11545] [ 496.503679][T11545] dump_stack_lvl+0xe8/0x150 [ 496.503714][T11545] should_fail_ex+0x46b/0x600 [ 496.503744][T11545] _copy_from_user+0x2d/0xb0 [ 496.503773][T11545] __sys_bpf+0x229/0x950 [ 496.503803][T11545] ? __pfx___sys_bpf+0x10/0x10 [ 496.503860][T11545] __x64_sys_bpf+0x7c/0x90 [ 496.503884][T11545] do_syscall_64+0x14d/0xf80 [ 496.503911][T11545] ? trace_irq_disable+0x3b/0x150 [ 496.503932][T11545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.503952][T11545] ? clear_bhb_loop+0x40/0x90 [ 496.503975][T11545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.503994][T11545] RIP: 0033:0x7f0dad69c799 [ 496.504014][T11545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.504031][T11545] RSP: 002b:00007f0dab8ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 496.504056][T11545] RAX: ffffffffffffffda RBX: 00007f0dad915fa0 RCX: 00007f0dad69c799 [ 496.504072][T11545] RDX: 0000000000000028 RSI: 0000200000000440 RDI: 0000000000000012 [ 496.504086][T11545] RBP: 00007f0dab8ee090 R08: 0000000000000000 R09: 0000000000000000 [ 496.504099][T11545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.504113][T11545] R13: 00007f0dad916038 R14: 00007f0dad915fa0 R15: 00007ffd31bd8fc8 [ 496.504142][T11545] [ 496.907132][T11543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.880870][ T5882] rndis_host 2-1:3.212: More than one union descriptor, skipping ... [ 497.880900][ T5882] usb 2-1: bad CDC descriptors [ 497.887370][ T5882] cdc_acm 2-1:3.212: More than one union descriptor, skipping ... [ 497.940729][ T5882] usb 2-1: USB disconnect, device number 45 [ 499.991332][ T5882] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 500.064556][T11578] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1736'. [ 500.157139][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 500.210561][ T5882] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 500.210613][ T5882] usb 2-1: too many endpoints for config 0 interface 0 altsetting 1: 97, using maximum allowed: 30 [ 500.210657][ T5882] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 500.210688][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 500.265231][ T5882] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 500.269273][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.269303][ T5882] usb 2-1: Product: syz [ 500.270121][ T5882] usb 2-1: Manufacturer: syz [ 500.271172][ T5882] usb 2-1: SerialNumber: syz [ 500.428102][ T5882] usb 2-1: config 0 descriptor?? [ 500.685380][T11588] FAULT_INJECTION: forcing a failure. [ 500.685380][T11588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.685419][T11588] CPU: 0 UID: 0 PID: 11588 Comm: syz.6.1740 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 500.685445][T11588] Tainted: [L]=SOFTLOCKUP [ 500.685449][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.685457][T11588] Call Trace: [ 500.685462][T11588] [ 500.685468][T11588] dump_stack_lvl+0xe8/0x150 [ 500.685510][T11588] should_fail_ex+0x46b/0x600 [ 500.685541][T11588] _copy_from_user+0x2d/0xb0 [ 500.685570][T11588] ___sys_sendmsg+0x1c6/0x360 [ 500.685605][T11588] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.685645][T11588] ? __fget_files+0x2a/0x420 [ 500.685667][T11588] ? __fget_files+0x3a6/0x420 [ 500.685703][T11588] __x64_sys_sendmsg+0x1c3/0x2a0 [ 500.685736][T11588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 500.685776][T11588] ? __pfx_ksys_write+0x10/0x10 [ 500.685820][T11588] do_syscall_64+0x14d/0xf80 [ 500.685845][T11588] ? trace_irq_disable+0x3b/0x150 [ 500.685870][T11588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.685892][T11588] ? clear_bhb_loop+0x40/0x90 [ 500.685918][T11588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.685939][T11588] RIP: 0033:0x7f0de8e8c799 [ 500.685960][T11588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.685976][T11588] RSP: 002b:00007f0de70e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.685998][T11588] RAX: ffffffffffffffda RBX: 00007f0de9105fa0 RCX: 00007f0de8e8c799 [ 500.686015][T11588] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 500.686030][T11588] RBP: 00007f0de70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 500.686043][T11588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.686056][T11588] R13: 00007f0de9106038 R14: 00007f0de9105fa0 R15: 00007ffd605c1dc8 [ 500.686093][T11588] [ 501.675254][T11567] syz.1.1733 (11567) used greatest stack depth: 17600 bytes left [ 502.741116][T11604] nftables ruleset with unbound chain [ 502.947548][ T5882] usb 2-1: Can not set alternate setting to 1, error: -71 [ 502.947601][ T5882] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -71 [ 503.014644][ T5882] usb 2-1: USB disconnect, device number 46 [ 503.298857][ T7100] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 503.856553][T11617] FAULT_INJECTION: forcing a failure. [ 503.856553][T11617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.856580][T11617] CPU: 0 UID: 0 PID: 11617 Comm: syz.1.1749 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 503.856597][T11617] Tainted: [L]=SOFTLOCKUP [ 503.856602][T11617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.856609][T11617] Call Trace: [ 503.856615][T11617] [ 503.856621][T11617] dump_stack_lvl+0xe8/0x150 [ 503.856644][T11617] should_fail_ex+0x46b/0x600 [ 503.856661][T11617] _copy_from_user+0x2d/0xb0 [ 503.856677][T11617] ___sys_sendmsg+0x1c6/0x360 [ 503.856698][T11617] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.856718][T11617] ? kstrtouint+0x6e/0xe0 [ 503.856745][T11617] ? __fget_files+0x2a/0x420 [ 503.856760][T11617] ? __fget_files+0x3a6/0x420 [ 503.856779][T11617] __sys_sendmmsg+0x282/0x4e0 [ 503.856799][T11617] ? __pfx___sys_sendmmsg+0x10/0x10 [ 503.856821][T11617] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 503.856850][T11617] ? ksys_write+0x248/0x270 [ 503.856878][T11617] ? __pfx_ksys_write+0x10/0x10 [ 503.856912][T11617] __x64_sys_sendmmsg+0xa0/0xc0 [ 503.856943][T11617] do_syscall_64+0x14d/0xf80 [ 503.856967][T11617] ? trace_irq_disable+0x3b/0x150 [ 503.856990][T11617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.857034][T11617] ? clear_bhb_loop+0x40/0x90 [ 503.857049][T11617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.857061][T11617] RIP: 0033:0x7fe5d8d4c799 [ 503.857074][T11617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.857084][T11617] RSP: 002b:00007fe5d6f7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 503.857098][T11617] RAX: ffffffffffffffda RBX: 00007fe5d8fc6090 RCX: 00007fe5d8d4c799 [ 503.857107][T11617] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 000000000000000d [ 503.857116][T11617] RBP: 00007fe5d6f7d090 R08: 0000000000000000 R09: 0000000000000000 [ 503.857123][T11617] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 503.857131][T11617] R13: 00007fe5d8fc6128 R14: 00007fe5d8fc6090 R15: 00007ffc55846a48 [ 503.857149][T11617] [ 504.124597][ T7100] usb 7-1: config 0 has an invalid interface number: 147 but max is 0 [ 504.124627][ T7100] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.124645][ T7100] usb 7-1: config 0 has no interface number 0 [ 504.124676][ T7100] usb 7-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 504.124692][ T7100] usb 7-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.127113][ T7100] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 504.127139][ T7100] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.127151][ T7100] usb 7-1: Product: syz [ 504.127159][ T7100] usb 7-1: Manufacturer: syz [ 504.127168][ T7100] usb 7-1: SerialNumber: syz [ 504.252881][ T7100] usb 7-1: config 0 descriptor?? [ 504.253722][T11608] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 504.304796][ T7100] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 504.717063][T11624] netlink: 'syz.6.1747': attribute type 10 has an invalid length. [ 504.743524][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1752'. [ 505.312309][T11608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.411964][ T8309] usb 7-1: Failed to submit usb control message: -110 [ 505.411992][ T8309] usb 7-1: unable to send the bmi data to the device: -110 [ 505.412017][ T8309] usb 7-1: unable to get target info from device [ 505.412027][ T8309] usb 7-1: could not get target info (-110) [ 505.412098][ T8309] usb 7-1: could not probe fw (-110) [ 505.430513][ T10] usb 7-1: USB disconnect, device number 8 [ 507.293437][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.293487][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.662464][T11652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1763'. [ 507.868322][ T5882] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 508.021593][ T5882] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 508.021628][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.027716][ T5882] usb 1-1: config 0 descriptor?? [ 508.063375][ T5882] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 508.230232][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 508.381969][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.382006][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.382031][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 508.382079][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 508.382104][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.400070][ T10] usb 2-1: config 0 descriptor?? [ 508.560842][ T7100] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 510.026050][ T7100] usb 7-1: device descriptor read/64, error -71 [ 510.084245][ T5882] gp8psk: usb in 128 operation failed. [ 510.084758][ T5882] gp8psk: usb in 137 operation failed. [ 510.084777][ T5882] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 510.084825][ T5882] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 510.154866][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 510.154902][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 510.154918][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 510.154933][ T10] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 510.154948][ T10] plantronics 0003:047F:FFFF.000B: unexpected long global item [ 510.155430][ T10] plantronics 0003:047F:FFFF.000B: parse failed [ 510.155490][ T10] plantronics 0003:047F:FFFF.000B: probe with driver plantronics failed with error -22 [ 510.278513][ T7100] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 510.374955][T11687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1776'. [ 510.418590][ T7100] usb 7-1: device descriptor read/64, error -71 [ 510.476165][T11690] FAULT_INJECTION: forcing a failure. [ 510.476165][T11690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.476193][T11690] CPU: 1 UID: 0 PID: 11690 Comm: syz.3.1777 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 510.476212][T11690] Tainted: [L]=SOFTLOCKUP [ 510.476217][T11690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.476224][T11690] Call Trace: [ 510.476229][T11690] [ 510.476235][T11690] dump_stack_lvl+0xe8/0x150 [ 510.476258][T11690] should_fail_ex+0x46b/0x600 [ 510.476275][T11690] _copy_from_user+0x2d/0xb0 [ 510.476291][T11690] __sys_connect+0x156/0x450 [ 510.476309][T11690] ? __pfx___sys_connect+0x10/0x10 [ 510.476346][T11690] ? __pfx_ksys_write+0x10/0x10 [ 510.476374][T11690] __x64_sys_connect+0x7a/0x90 [ 510.476389][T11690] do_syscall_64+0x14d/0xf80 [ 510.476405][T11690] ? trace_irq_disable+0x3b/0x150 [ 510.476419][T11690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.476431][T11690] ? clear_bhb_loop+0x40/0x90 [ 510.476446][T11690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.476459][T11690] RIP: 0033:0x7faea457c799 [ 510.476478][T11690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.476497][T11690] RSP: 002b:00007faea27ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 510.476519][T11690] RAX: ffffffffffffffda RBX: 00007faea47f6090 RCX: 00007faea457c799 [ 510.476535][T11690] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000006 [ 510.476549][T11690] RBP: 00007faea27ad090 R08: 0000000000000000 R09: 0000000000000000 [ 510.476559][T11690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.476567][T11690] R13: 00007faea47f6128 R14: 00007faea47f6090 R15: 00007ffedc79c8f8 [ 510.476586][T11690] [ 510.675238][ T7100] usb usb7-port1: attempt power cycle [ 510.819473][ T31] usb 1-1: USB disconnect, device number 34 [ 510.899817][T11121] usb 2-1: USB disconnect, device number 47 [ 511.012361][T11694] netlink: 'syz.1.1779': attribute type 7 has an invalid length. [ 511.012388][T11694] netlink: 'syz.1.1779': attribute type 8 has an invalid length. [ 511.012402][T11694] netlink: 209788 bytes leftover after parsing attributes in process `syz.1.1779'. [ 511.071595][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1778'. [ 511.071629][T11695] bond0: option resend_igmp: invalid value (52140) [ 511.071649][T11695] bond0: option resend_igmp: allowed values 0 - 255 [ 511.101531][ T7100] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 511.318616][ T7100] usb 7-1: device not accepting address 11, error -71 [ 511.337824][T11702] netlink: 384 bytes leftover after parsing attributes in process `syz.1.1780'. [ 512.078844][T11719] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1787'. [ 512.080626][T11719] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1787'. [ 512.417195][T11735] FAULT_INJECTION: forcing a failure. [ 512.417195][T11735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.417222][T11735] CPU: 0 UID: 0 PID: 11735 Comm: syz.0.1792 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 512.417240][T11735] Tainted: [L]=SOFTLOCKUP [ 512.417245][T11735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.417252][T11735] Call Trace: [ 512.417258][T11735] [ 512.417273][T11735] dump_stack_lvl+0xe8/0x150 [ 512.417296][T11735] should_fail_ex+0x46b/0x600 [ 512.417313][T11735] _copy_from_user+0x2d/0xb0 [ 512.417330][T11735] io_submit_one+0xd3/0x14c0 [ 512.417349][T11735] ? irqentry_exit+0x59e/0x620 [ 512.417366][T11735] ? lockdep_hardirqs_on+0x7a/0x110 [ 512.417381][T11735] ? irqentry_exit+0x59e/0x620 [ 512.417396][T11735] ? trace_irq_disable+0x3b/0x150 [ 512.417413][T11735] ? __pfx_io_submit_one+0x10/0x10 [ 512.417439][T11735] ? __might_fault+0xaf/0x130 [ 512.417459][T11735] __se_sys_io_submit+0x195/0x340 [ 512.417476][T11735] ? __pfx___se_sys_io_submit+0x10/0x10 [ 512.417491][T11735] ? ksys_write+0x248/0x270 [ 512.417518][T11735] do_syscall_64+0x14d/0xf80 [ 512.417532][T11735] ? trace_irq_disable+0x3b/0x150 [ 512.417546][T11735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.417558][T11735] ? clear_bhb_loop+0x40/0x90 [ 512.417572][T11735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.417584][T11735] RIP: 0033:0x7f0dad69c799 [ 512.417597][T11735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.417608][T11735] RSP: 002b:00007f0dab8ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 512.417622][T11735] RAX: ffffffffffffffda RBX: 00007f0dad915fa0 RCX: 00007f0dad69c799 [ 512.417631][T11735] RDX: 0000200000000940 RSI: 0000000000000001 RDI: 00007f0dab8ad000 [ 512.417639][T11735] RBP: 00007f0dab8ee090 R08: 0000000000000000 R09: 0000000000000000 [ 512.417646][T11735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.417653][T11735] R13: 00007f0dad916038 R14: 00007f0dad915fa0 R15: 00007ffd31bd8fc8 [ 512.417672][T11735] [ 512.722481][ T7100] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 512.848884][ T7100] usb 7-1: device descriptor read/64, error -71 [ 512.979143][ T10] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 513.088915][ T7100] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 513.137391][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 513.137431][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 202, changing to 4 [ 513.137461][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 59073, setting to 1023 [ 513.137509][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 513.137535][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.150568][ T10] usb 4-1: config 0 descriptor?? [ 513.229196][ T7100] usb 7-1: device descriptor read/64, error -71 [ 513.381853][ T7100] usb usb7-port1: attempt power cycle [ 513.388735][ T10] ath6kl: Failed to submit usb control message: -71 [ 513.389257][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 513.389277][ T10] ath6kl: Unable to send get target info: -71 [ 513.392644][ T10] ath6kl: Failed to init ath6kl core: -71 [ 513.420160][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 513.457054][ T10] usb 4-1: USB disconnect, device number 34 [ 513.739048][ T7100] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 513.762368][ T7100] usb 7-1: device descriptor read/8, error -71 [ 514.009081][ T7100] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 514.029836][ T7100] usb 7-1: device descriptor read/8, error -71 [ 514.067549][T11779] FAULT_INJECTION: forcing a failure. [ 514.067549][T11779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.067578][T11779] CPU: 0 UID: 0 PID: 11779 Comm: syz.3.1796 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 514.067601][T11779] Tainted: [L]=SOFTLOCKUP [ 514.067606][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.067613][T11779] Call Trace: [ 514.067619][T11779] [ 514.067625][T11779] dump_stack_lvl+0xe8/0x150 [ 514.067647][T11779] should_fail_ex+0x46b/0x600 [ 514.067664][T11779] _copy_from_user+0x2d/0xb0 [ 514.067681][T11779] __sys_bpf+0x229/0x950 [ 514.067699][T11779] ? __pfx___sys_bpf+0x10/0x10 [ 514.067712][T11779] ? rt_mutex_slowunlock+0x1cb/0x300 [ 514.067735][T11779] ? ksys_write+0x248/0x270 [ 514.067759][T11779] ? __pfx_ksys_write+0x10/0x10 [ 514.067784][T11779] __x64_sys_bpf+0x7c/0x90 [ 514.067799][T11779] do_syscall_64+0x14d/0xf80 [ 514.067814][T11779] ? trace_irq_disable+0x3b/0x150 [ 514.067827][T11779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.067845][T11779] ? clear_bhb_loop+0x40/0x90 [ 514.067860][T11779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.067872][T11779] RIP: 0033:0x7faea457c799 [ 514.067885][T11779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.067896][T11779] RSP: 002b:00007faea27ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 514.067913][T11779] RAX: ffffffffffffffda RBX: 00007faea47f5fa0 RCX: 00007faea457c799 [ 514.067930][T11779] RDX: 0000000000000020 RSI: 0000200000000a00 RDI: 0000000000000002 [ 514.067938][T11779] RBP: 00007faea27ce090 R08: 0000000000000000 R09: 0000000000000000 [ 514.067946][T11779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.067963][T11779] R13: 00007faea47f6038 R14: 00007faea47f5fa0 R15: 00007ffedc79c8f8 [ 514.067983][T11779] [ 514.346474][ T7100] usb usb7-port1: unable to enumerate USB device [ 515.339378][ T10] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 515.900102][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 515.900140][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 202, changing to 4 [ 515.900168][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 59073, setting to 1023 [ 515.900223][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 515.900247][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.910279][ T10] usb 4-1: config 0 descriptor?? [ 516.120711][ T10] ath6kl: Failed to submit usb control message: -71 [ 516.120768][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 516.120784][ T10] ath6kl: Unable to send get target info: -71 [ 516.121762][ T10] ath6kl: Failed to init ath6kl core: -71 [ 516.122372][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 516.235415][ T10] usb 4-1: USB disconnect, device number 35 [ 516.908525][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1803'. [ 517.129437][ T31] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 517.152599][T11813] FAULT_INJECTION: forcing a failure. [ 517.152599][T11813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.152640][T11813] CPU: 0 UID: 0 PID: 11813 Comm: syz.0.1806 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 517.152669][T11813] Tainted: [L]=SOFTLOCKUP [ 517.152678][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.152691][T11813] Call Trace: [ 517.152700][T11813] [ 517.152710][T11813] dump_stack_lvl+0xe8/0x150 [ 517.152748][T11813] should_fail_ex+0x46b/0x600 [ 517.152779][T11813] _copy_from_user+0x2d/0xb0 [ 517.152809][T11813] __sys_bpf+0x229/0x950 [ 517.152841][T11813] ? __pfx___sys_bpf+0x10/0x10 [ 517.152865][T11813] ? rt_mutex_slowunlock+0x1cb/0x300 [ 517.152907][T11813] ? ksys_write+0x248/0x270 [ 517.152942][T11813] ? __pfx_ksys_write+0x10/0x10 [ 517.152980][T11813] __x64_sys_bpf+0x7c/0x90 [ 517.153006][T11813] do_syscall_64+0x14d/0xf80 [ 517.153034][T11813] ? trace_irq_disable+0x3b/0x150 [ 517.153059][T11813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.153082][T11813] ? clear_bhb_loop+0x40/0x90 [ 517.153109][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.153131][T11813] RIP: 0033:0x7f0dad69c799 [ 517.153152][T11813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.153172][T11813] RSP: 002b:00007f0dab8ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 517.153207][T11813] RAX: ffffffffffffffda RBX: 00007f0dad915fa0 RCX: 00007f0dad69c799 [ 517.153224][T11813] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 0000000000000000 [ 517.153238][T11813] RBP: 00007f0dab8ee090 R08: 0000000000000000 R09: 0000000000000000 [ 517.153252][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.153265][T11813] R13: 00007f0dad916038 R14: 00007f0dad915fa0 R15: 00007ffd31bd8fc8 [ 517.153302][T11813] [ 517.301972][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.302006][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.302045][ T31] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 517.302066][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.357052][ T31] usb 2-1: config 0 descriptor?? [ 517.798089][ T31] hid-led 0003:1D34:000A.000C: item fetching failed at offset 0/3 [ 517.799078][ T31] hid-led 0003:1D34:000A.000C: probe with driver hid-led failed with error -22 [ 518.202782][ T5978] usb 2-1: USB disconnect, device number 48 [ 518.303283][T11829] FAULT_INJECTION: forcing a failure. [ 518.303283][T11829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.303353][T11829] CPU: 1 UID: 0 PID: 11829 Comm: syz.0.1811 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 518.303384][T11829] Tainted: [L]=SOFTLOCKUP [ 518.303392][T11829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.303405][T11829] Call Trace: [ 518.303415][T11829] [ 518.303425][T11829] dump_stack_lvl+0xe8/0x150 [ 518.303463][T11829] should_fail_ex+0x46b/0x600 [ 518.303494][T11829] _copy_from_user+0x2d/0xb0 [ 518.303524][T11829] ___sys_sendmsg+0x1c6/0x360 [ 518.303562][T11829] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.303598][T11829] ? __schedule+0x1569/0x5240 [ 518.303658][T11829] ? __fget_files+0x2a/0x420 [ 518.303684][T11829] ? __fget_files+0x3a6/0x420 [ 518.303722][T11829] __x64_sys_sendmsg+0x1c3/0x2a0 [ 518.303756][T11829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.303815][T11829] do_syscall_64+0x14d/0xf80 [ 518.303844][T11829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.303868][T11829] ? clear_bhb_loop+0x40/0x90 [ 518.303895][T11829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.303915][T11829] RIP: 0033:0x7f0dad69c799 [ 518.303937][T11829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.303956][T11829] RSP: 002b:00007f0dab8ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.303981][T11829] RAX: ffffffffffffffda RBX: 00007f0dad916180 RCX: 00007f0dad69c799 [ 518.303998][T11829] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 518.304012][T11829] RBP: 00007f0dab8ac090 R08: 0000000000000000 R09: 0000000000000000 [ 518.304026][T11829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.304040][T11829] R13: 00007f0dad916218 R14: 00007f0dad916180 R15: 00007ffd31bd8fc8 [ 518.304077][T11829] [ 519.950214][T11843] : renamed from vlan0 (while UP) [ 520.047080][T11845] FAULT_INJECTION: forcing a failure. [ 520.047080][T11845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.047157][T11845] CPU: 1 UID: 0 PID: 11845 Comm: syz.1.1815 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 520.047188][T11845] Tainted: [L]=SOFTLOCKUP [ 520.047196][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.047209][T11845] Call Trace: [ 520.047218][T11845] [ 520.047228][T11845] dump_stack_lvl+0xe8/0x150 [ 520.047267][T11845] should_fail_ex+0x46b/0x600 [ 520.047293][T11845] _copy_from_user+0x2d/0xb0 [ 520.047315][T11845] ___sys_recvmsg+0x175/0x590 [ 520.047344][T11845] ? __pfx____sys_recvmsg+0x10/0x10 [ 520.047384][T11845] ? __rcu_read_unlock+0x83/0xe0 [ 520.047408][T11845] ? __fget_files+0x3a6/0x420 [ 520.047436][T11845] do_recvmmsg+0x33a/0x800 [ 520.047465][T11845] ? __schedule+0x1569/0x5240 [ 520.047484][T11845] ? __pfx_do_recvmmsg+0x10/0x10 [ 520.047534][T11845] __x64_sys_recvmmsg+0x198/0x250 [ 520.047559][T11845] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 520.047592][T11845] do_syscall_64+0x14d/0xf80 [ 520.047614][T11845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.047631][T11845] ? clear_bhb_loop+0x40/0x90 [ 520.047651][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.047667][T11845] RIP: 0033:0x7fe5d8d4c799 [ 520.047682][T11845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.047696][T11845] RSP: 002b:00007fe5d6f5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 520.047715][T11845] RAX: ffffffffffffffda RBX: 00007fe5d8fc6180 RCX: 00007fe5d8d4c799 [ 520.047727][T11845] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000005 [ 520.047738][T11845] RBP: 00007fe5d6f5c090 R08: 0000000000000000 R09: 0000000000000000 [ 520.047748][T11845] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 520.047758][T11845] R13: 00007fe5d8fc6218 R14: 00007fe5d8fc6180 R15: 00007ffc55846a48 [ 520.047785][T11845] [ 520.859357][ T5971] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 521.019921][ T5971] usb 7-1: Using ep0 maxpacket: 16 [ 521.022639][ T5971] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.022668][ T5971] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.030268][ T5971] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 521.030302][ T5971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.030324][ T5971] usb 7-1: Product: syz [ 521.030340][ T5971] usb 7-1: Manufacturer: syz [ 521.030355][ T5971] usb 7-1: SerialNumber: syz [ 521.301199][ T5971] usb 7-1: 0:2 : does not exist [ 521.338915][ T5971] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 521.459294][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 521.459313][ T37] audit: type=1326 audit(5319504170.342:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11851 comm="syz.0.1817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dad69c799 code=0x0 [ 521.514397][ T5971] usb 7-1: USB disconnect, device number 17 [ 521.665928][T10854] udevd[10854]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.009847][ T31] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 522.171176][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 522.190868][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 522.192670][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.204148][ T31] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 522.204179][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.204199][ T31] usb 1-1: Product: syz [ 522.204213][ T31] usb 1-1: Manufacturer: syz [ 522.204226][ T31] usb 1-1: SerialNumber: syz [ 522.216375][ T5882] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 522.551792][ T5882] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 522.572958][ T31] usb 1-1: unit 2 not found! [ 522.910335][ T31] usb 1-1: can't set first interface for hiFace device. [ 522.910380][ T31] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 522.979815][T11870] FAULT_INJECTION: forcing a failure. [ 522.979815][T11870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.979889][T11870] CPU: 1 UID: 0 PID: 11870 Comm: syz.6.1823 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 522.979920][T11870] Tainted: [L]=SOFTLOCKUP [ 522.979928][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 522.979941][T11870] Call Trace: [ 522.979951][T11870] [ 522.979961][T11870] dump_stack_lvl+0xe8/0x150 [ 522.979999][T11870] should_fail_ex+0x46b/0x600 [ 522.980030][T11870] _copy_from_user+0x2d/0xb0 [ 522.980062][T11870] __sys_bpf+0x229/0x950 [ 522.980092][T11870] ? __pfx___sys_bpf+0x10/0x10 [ 522.980141][T11870] ? rcu_is_watching+0x15/0xb0 [ 522.980175][T11870] __x64_sys_bpf+0x7c/0x90 [ 522.980201][T11870] do_syscall_64+0x14d/0xf80 [ 522.980230][T11870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.980253][T11870] ? clear_bhb_loop+0x40/0x90 [ 522.980280][T11870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.980302][T11870] RIP: 0033:0x7f0de8e8c799 [ 522.980323][T11870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.980341][T11870] RSP: 002b:00007f0de70a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.980366][T11870] RAX: ffffffffffffffda RBX: 00007f0de9106180 RCX: 00007f0de8e8c799 [ 522.980383][T11870] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 522.980398][T11870] RBP: 00007f0de70a4090 R08: 0000000000000000 R09: 0000000000000000 [ 522.980412][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.980426][T11870] R13: 00007f0de9106218 R14: 00007f0de9106180 R15: 00007ffd605c1dc8 [ 522.980463][T11870] [ 523.326650][ T31] usb 1-1: can't set first interface for hiFace device. [ 523.327149][ T31] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 523.496427][ T31] usb 1-1: USB disconnect, device number 35 [ 523.615709][T10854] udevd[10854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.713152][T11873] FAULT_INJECTION: forcing a failure. [ 523.713152][T11873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.713193][T11873] CPU: 1 UID: 0 PID: 11873 Comm: syz.3.1825 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 523.713223][T11873] Tainted: [L]=SOFTLOCKUP [ 523.713231][T11873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 523.713245][T11873] Call Trace: [ 523.713254][T11873] [ 523.713263][T11873] dump_stack_lvl+0xe8/0x150 [ 523.713301][T11873] should_fail_ex+0x46b/0x600 [ 523.713331][T11873] _copy_from_user+0x2d/0xb0 [ 523.713361][T11873] ___sys_sendmsg+0x1c6/0x360 [ 523.713399][T11873] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.713435][T11873] ? kstrtouint+0x6e/0xe0 [ 523.713486][T11873] ? __fget_files+0x2a/0x420 [ 523.713513][T11873] ? __fget_files+0x3a6/0x420 [ 523.713552][T11873] __sys_sendmmsg+0x282/0x4e0 [ 523.713589][T11873] ? __pfx___sys_sendmmsg+0x10/0x10 [ 523.713631][T11873] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 523.713671][T11873] ? ksys_write+0x248/0x270 [ 523.713705][T11873] ? __pfx_ksys_write+0x10/0x10 [ 523.713744][T11873] __x64_sys_sendmmsg+0xa0/0xc0 [ 523.713786][T11873] do_syscall_64+0x14d/0xf80 [ 523.713813][T11873] ? trace_irq_disable+0x3b/0x150 [ 523.713835][T11873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.713854][T11873] ? clear_bhb_loop+0x40/0x90 [ 523.713877][T11873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.713895][T11873] RIP: 0033:0x7faea457c799 [ 523.713913][T11873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.713935][T11873] RSP: 002b:00007faea27ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 523.713956][T11873] RAX: ffffffffffffffda RBX: 00007faea47f5fa0 RCX: 00007faea457c799 [ 523.713972][T11873] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 523.713985][T11873] RBP: 00007faea27ce090 R08: 0000000000000000 R09: 0000000000000000 [ 523.713997][T11873] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 523.714009][T11873] R13: 00007faea47f6038 R14: 00007faea47f5fa0 R15: 00007ffedc79c8f8 [ 523.714041][T11873] [ 524.354753][ T31] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 524.984081][ T31] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 524.984123][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.989539][ T31] usb 2-1: config 0 descriptor?? [ 525.031712][ T31] cp210x 2-1:0.0: cp210x converter detected [ 525.048234][T11882] : renamed from vlan0 (while UP) [ 525.895333][T11891] FAULT_INJECTION: forcing a failure. [ 525.895333][T11891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.895921][T11891] CPU: 0 UID: 0 PID: 11891 Comm: syz.7.1831 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 525.895954][T11891] Tainted: [L]=SOFTLOCKUP [ 525.895961][T11891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 525.895981][T11891] Call Trace: [ 525.895990][T11891] [ 525.896000][T11891] dump_stack_lvl+0xe8/0x150 [ 525.896023][T11891] should_fail_ex+0x46b/0x600 [ 525.896045][T11891] _copy_from_user+0x2d/0xb0 [ 525.896072][T11891] ___sys_sendmsg+0x1c6/0x360 [ 525.896111][T11891] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.896146][T11891] ? kstrtouint+0x6e/0xe0 [ 525.896187][T11891] ? __fget_files+0x2a/0x420 [ 525.896202][T11891] ? __fget_files+0x3a6/0x420 [ 525.896226][T11891] __sys_sendmmsg+0x282/0x4e0 [ 525.896273][T11891] ? __pfx___sys_sendmmsg+0x10/0x10 [ 525.896312][T11891] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 525.896349][T11891] ? ksys_write+0x248/0x270 [ 525.896369][T11891] ? __pfx_ksys_write+0x10/0x10 [ 525.896390][T11891] __x64_sys_sendmmsg+0xa0/0xc0 [ 525.896417][T11891] do_syscall_64+0x14d/0xf80 [ 525.896445][T11891] ? trace_irq_disable+0x3b/0x150 [ 525.896469][T11891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.896490][T11891] ? clear_bhb_loop+0x40/0x90 [ 525.896514][T11891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.896533][T11891] RIP: 0033:0x7f9b188dc799 [ 525.896546][T11891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.896557][T11891] RSP: 002b:00007f9b16b2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 525.896574][T11891] RAX: ffffffffffffffda RBX: 00007f9b18b55fa0 RCX: 00007f9b188dc799 [ 525.896589][T11891] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 525.896603][T11891] RBP: 00007f9b16b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 525.896617][T11891] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 525.896630][T11891] R13: 00007f9b18b56038 R14: 00007f9b18b55fa0 R15: 00007ffdc2caf8b8 [ 525.896664][T11891] [ 526.127160][ T31] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 526.127193][ T31] cp210x 2-1:0.0: querying part number failed [ 526.171882][ T31] usb 2-1: cp210x converter now attached to ttyUSB0 [ 526.201623][ T31] usb 2-1: USB disconnect, device number 49 [ 526.251142][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 526.253648][ T31] cp210x 2-1:0.0: device disconnected [ 526.257802][T11896] fuse: Unknown parameter 'fd0x0000000000000005' [ 526.409594][T11902] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1834'. [ 526.493453][T11904] loop7: detected capacity change from 0 to 7 [ 526.764737][ T5163] Dev loop7: unable to read RDB block 7 [ 526.764793][ T5163] loop7: unable to read partition table [ 526.764964][ T5163] loop7: partition table beyond EOD, truncated [ 526.859852][T11904] Dev loop7: unable to read RDB block 7 [ 526.859902][T11904] loop7: unable to read partition table [ 526.860147][T11904] loop7: partition table beyond EOD, truncated [ 526.860171][T11904] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 526.940706][ T5971] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 527.162876][ T5971] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 527.162911][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.191191][ T5971] usb 4-1: config 0 descriptor?? [ 527.271998][ T5163] Dev loop7: unable to read RDB block 7 [ 527.272150][ T5163] loop7: unable to read partition table [ 527.272608][ T5163] loop7: partition table beyond EOD, truncated [ 528.220939][ T5971] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 528.225631][ T5971] [drm:udl_init] *ERROR* Selecting channel failed [ 528.498777][ T5971] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 528.498808][ T5971] [drm] Initialized udl on minor 2 [ 528.585717][ T5971] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 528.618369][ T5971] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 528.670642][ T5971] usb 4-1: USB disconnect, device number 36 [ 528.680503][ T5978] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 528.699684][ T5978] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 528.823641][T11924] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 528.835567][T11924] team0 (unregistering): Port device team_slave_0 removed [ 528.935564][T11924] team0 (unregistering): Failed to send options change via netlink (err -105) [ 528.945246][T11924] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 528.961762][T11924] team0 (unregistering): Port device team_slave_1 removed [ 529.156690][T11940] fuse: Unknown parameter 'group_i00000000000000000000' [ 530.281353][ T5978] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 530.431467][ T5971] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 530.436256][ T5978] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 530.436284][ T5978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.471635][ T5978] usb 7-1: config 0 descriptor?? [ 530.495004][ T5978] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 530.597339][ T5971] usb 4-1: config 0 has an invalid interface number: 147 but max is 0 [ 530.597490][ T5971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.597512][ T5971] usb 4-1: config 0 has no interface number 0 [ 530.597561][ T5971] usb 4-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 530.597666][ T5971] usb 4-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.603702][ T5971] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 530.603724][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.603736][ T5971] usb 4-1: Product: syz [ 530.603745][ T5971] usb 4-1: Manufacturer: syz [ 530.632319][ T5971] usb 4-1: SerialNumber: syz [ 530.772534][ T5971] usb 4-1: config 0 descriptor?? [ 530.776235][T11952] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 530.883736][ T5971] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 530.905756][ T5978] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 531.274686][T11952] netlink: 'syz.3.1849': attribute type 10 has an invalid length. [ 531.308549][ T5978] gspca_cpia1: usb_control_msg 02, error -32 [ 531.409563][T11768] usb 4-1: Failed to submit usb control message: -71 [ 531.409595][T11768] usb 4-1: unable to send the bmi data to the device: -71 [ 531.409606][T11768] usb 4-1: unable to get target info from device [ 531.409618][T11768] usb 4-1: could not get target info (-71) [ 531.429828][T11768] usb 4-1: could not probe fw (-71) [ 531.465978][ T36] usb 4-1: USB disconnect, device number 37 [ 531.512609][ T5978] gspca_cpia1: usb_control_msg 05, error -71 [ 531.512634][ T5978] cpia1 7-1:0.0: unexpected systemstate: 00 [ 531.554094][ T5978] usb 7-1: USB disconnect, device number 18 [ 531.819188][T11971] fuse: Unknown parameter 'group_i00000000000000000000' [ 532.398038][T11992] FAULT_INJECTION: forcing a failure. [ 532.398038][T11992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.398080][T11992] CPU: 1 UID: 0 PID: 11992 Comm: syz.7.1861 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 532.398111][T11992] Tainted: [L]=SOFTLOCKUP [ 532.398120][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.398133][T11992] Call Trace: [ 532.398142][T11992] [ 532.398152][T11992] dump_stack_lvl+0xe8/0x150 [ 532.398191][T11992] should_fail_ex+0x46b/0x600 [ 532.398221][T11992] _copy_from_user+0x2d/0xb0 [ 532.398250][T11992] ___sys_sendmsg+0x1c6/0x360 [ 532.398287][T11992] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.398356][T11992] ? __fget_files+0x2a/0x420 [ 532.398383][T11992] ? __fget_files+0x3a6/0x420 [ 532.398420][T11992] __x64_sys_sendmsg+0x1c3/0x2a0 [ 532.398453][T11992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.398494][T11992] ? __pfx_ksys_write+0x10/0x10 [ 532.398536][T11992] do_syscall_64+0x14d/0xf80 [ 532.398562][T11992] ? trace_irq_disable+0x3b/0x150 [ 532.398587][T11992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.398609][T11992] ? clear_bhb_loop+0x40/0x90 [ 532.398636][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.398667][T11992] RIP: 0033:0x7f9b188dc799 [ 532.398691][T11992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.398709][T11992] RSP: 002b:00007f9b16b2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.398734][T11992] RAX: ffffffffffffffda RBX: 00007f9b18b55fa0 RCX: 00007f9b188dc799 [ 532.398749][T11992] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 532.398763][T11992] RBP: 00007f9b16b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 532.398776][T11992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.398789][T11992] R13: 00007f9b18b56038 R14: 00007f9b18b55fa0 R15: 00007ffdc2caf8b8 [ 532.398825][T11992] [ 533.027481][T12002] loop7: detected capacity change from 0 to 7 [ 533.291115][T10854] Dev loop7: unable to read RDB block 7 [ 533.291171][T10854] loop7: unable to read partition table [ 533.292394][T10854] loop7: partition table beyond EOD, truncated [ 533.538077][T12002] Dev loop7: unable to read RDB block 7 [ 533.538137][T12002] loop7: unable to read partition table [ 533.538387][T12002] loop7: partition table beyond EOD, truncated [ 533.538422][T12002] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 534.127632][T12015] FAULT_INJECTION: forcing a failure. [ 534.127632][T12015] name failslab, interval 1, probability 0, space 0, times 0 [ 534.127658][T12015] CPU: 0 UID: 0 PID: 12015 Comm: syz.0.1868 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 534.127676][T12015] Tainted: [L]=SOFTLOCKUP [ 534.127681][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 534.127687][T12015] Call Trace: [ 534.127693][T12015] [ 534.127699][T12015] dump_stack_lvl+0xe8/0x150 [ 534.127721][T12015] should_fail_ex+0x46b/0x600 [ 534.127738][T12015] should_failslab+0xa8/0x100 [ 534.127752][T12015] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 534.127769][T12015] ? __alloc_skb+0x1d0/0x7d0 [ 534.127784][T12015] ? lockdep_hardirqs_on+0x7a/0x110 [ 534.127803][T12015] __alloc_skb+0x1d0/0x7d0 [ 534.127820][T12015] sock_wmalloc+0xb2/0x130 [ 534.127838][T12015] pppol2tp_sendmsg+0x183/0x5f0 [ 534.127858][T12015] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 534.127873][T12015] sock_write_iter+0x4a1/0x4f0 [ 534.127887][T12015] ? __pfx_sock_write_iter+0x10/0x10 [ 534.127912][T12015] do_iter_readv_writev+0x62b/0x8d0 [ 534.127940][T12015] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 534.127963][T12015] ? rw_verify_area+0x25b/0x4e0 [ 534.127982][T12015] vfs_writev+0x345/0x9a0 [ 534.128000][T12015] ? __pfx_vfs_writev+0x10/0x10 [ 534.128022][T12015] ? __fget_files+0x2a/0x420 [ 534.128039][T12015] ? __fget_files+0x3a6/0x420 [ 534.128052][T12015] ? __fget_files+0x2a/0x420 [ 534.128071][T12015] do_writev+0x15a/0x2e0 [ 534.128086][T12015] ? __pfx_do_writev+0x10/0x10 [ 534.128106][T12015] do_syscall_64+0x14d/0xf80 [ 534.128121][T12015] ? trace_irq_disable+0x3b/0x150 [ 534.128135][T12015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.128148][T12015] ? clear_bhb_loop+0x40/0x90 [ 534.128162][T12015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.128174][T12015] RIP: 0033:0x7f0dad69c799 [ 534.128187][T12015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.128198][T12015] RSP: 002b:00007f0dab8ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 534.128213][T12015] RAX: ffffffffffffffda RBX: 00007f0dad915fa0 RCX: 00007f0dad69c799 [ 534.128222][T12015] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 534.128230][T12015] RBP: 00007f0dab8ee090 R08: 0000000000000000 R09: 0000000000000000 [ 534.128238][T12015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.128245][T12015] R13: 00007f0dad916038 R14: 00007f0dad915fa0 R15: 00007ffd31bd8fc8 [ 534.128264][T12015] [ 535.305321][ T7100] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 536.064169][ T7100] usb 1-1: Using ep0 maxpacket: 32 [ 537.132088][ T7100] usb 1-1: unable to get BOS descriptor or descriptor too short [ 537.135709][ T7100] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 537.135760][ T7100] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 90, changing to 7 [ 537.141168][ T7100] usb 1-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 537.141201][ T7100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.141223][ T7100] usb 1-1: Product: syz [ 537.141239][ T7100] usb 1-1: Manufacturer: syz [ 537.141254][ T7100] usb 1-1: SerialNumber: syz [ 537.472311][ T7100] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 537.522481][ T7100] usb 1-1: USB disconnect, device number 36 [ 537.562500][T12051] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1880'. [ 538.885502][T12072] Invalid source name [ 538.988611][T12072] IPv6: sit1: Disabled Multicast RS [ 539.002908][T12072] sit1: entered allmulticast mode [ 539.323102][ T5788] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 539.786529][ T5788] usb 1-1: device descriptor read/64, error -71 [ 540.023364][ T5788] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 540.152552][ T5788] usb 1-1: device descriptor read/64, error -71 [ 540.263179][ T5788] usb usb1-port1: attempt power cycle [ 540.359866][T12085] pimreg: entered allmulticast mode [ 540.613611][ T5788] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 540.633279][ T5788] usb 1-1: device descriptor read/8, error -71 [ 540.695948][T12097] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1897'. [ 540.697417][T12097] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1897'. [ 540.895391][ T5788] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 540.913356][ T5788] usb 1-1: device descriptor read/8, error -71 [ 540.943554][T12103] fuse: Unknown parameter 'group_i00000000000000000000' [ 541.023155][ T5788] usb usb1-port1: unable to enumerate USB device [ 541.304959][T12119] FAULT_INJECTION: forcing a failure. [ 541.304959][T12119] name fail_futex, interval 1, probability 0, space 0, times 1 [ 541.305001][T12119] CPU: 0 UID: 0 PID: 12119 Comm: syz.3.1905 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 541.305032][T12119] Tainted: [L]=SOFTLOCKUP [ 541.305041][T12119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 541.305054][T12119] Call Trace: [ 541.305064][T12119] [ 541.305074][T12119] dump_stack_lvl+0xe8/0x150 [ 541.305114][T12119] should_fail_ex+0x46b/0x600 [ 541.305145][T12119] get_futex_key+0x1ac/0x1690 [ 541.305183][T12119] ? unwind_get_return_address+0x4d/0x90 [ 541.305212][T12119] ? __pfx_get_futex_key+0x10/0x10 [ 541.305245][T12119] ? __lock_acquire+0x6b5/0x2cf0 [ 541.305275][T12119] futex_requeue+0x23d/0x1bb0 [ 541.305298][T12119] ? kstrtoull+0x12f/0x1d0 [ 541.305324][T12119] ? kstrtouint+0x6e/0xe0 [ 541.305353][T12119] ? get_pid_task+0x20/0x1f0 [ 541.305377][T12119] ? __pfx_futex_requeue+0x10/0x10 [ 541.305404][T12119] ? __lock_acquire+0x6b5/0x2cf0 [ 541.305449][T12119] ? do_raw_spin_lock+0x12b/0x2f0 [ 541.305488][T12119] do_futex+0x362/0x420 [ 541.305511][T12119] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 541.305545][T12119] ? __pfx_do_futex+0x10/0x10 [ 541.305563][T12119] ? rt_mutex_slowunlock+0x1cb/0x300 [ 541.305586][T12119] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 541.305617][T12119] __se_sys_futex+0x3a8/0x450 [ 541.305652][T12119] ? ksys_write+0x248/0x270 [ 541.305693][T12119] ? __pfx___se_sys_futex+0x10/0x10 [ 541.305717][T12119] ? __pfx_ksys_write+0x10/0x10 [ 541.305754][T12119] ? __x64_sys_futex+0x21/0xf0 [ 541.305779][T12119] do_syscall_64+0x14d/0xf80 [ 541.305808][T12119] ? trace_irq_disable+0x3b/0x150 [ 541.305833][T12119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.305855][T12119] ? clear_bhb_loop+0x40/0x90 [ 541.305881][T12119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.305903][T12119] RIP: 0033:0x7faea457c799 [ 541.305924][T12119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.305943][T12119] RSP: 002b:00007faea27ad028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 541.305967][T12119] RAX: ffffffffffffffda RBX: 00007faea47f6090 RCX: 00007faea457c799 [ 541.305984][T12119] RDX: 0000000000000801 RSI: 0000000000000003 RDI: 000020000000cffc [ 541.305998][T12119] RBP: 00007faea27ad090 R08: 0000200000000040 R09: 00000000fffffffc [ 541.306014][T12119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.306027][T12119] R13: 00007faea47f6128 R14: 00007faea47f6090 R15: 00007ffedc79c8f8 [ 541.306064][T12119] [ 541.423331][T12118] ucma_write: process 130 (syz.7.1906) changed security contexts after opening file descriptor, this is not allowed. [ 541.555680][T12122] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1901'. [ 542.574827][T12148] fuse: Unknown parameter 'group_i00000000000000000000' [ 543.312325][T12167] Invalid source name [ 544.272578][T12175] FAULT_INJECTION: forcing a failure. [ 544.272578][T12175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.272620][T12175] CPU: 0 UID: 0 PID: 12175 Comm: syz.3.1925 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 544.272650][T12175] Tainted: [L]=SOFTLOCKUP [ 544.272659][T12175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 544.272672][T12175] Call Trace: [ 544.272681][T12175] [ 544.272691][T12175] dump_stack_lvl+0xe8/0x150 [ 544.272731][T12175] should_fail_ex+0x46b/0x600 [ 544.272762][T12175] _copy_from_user+0x2d/0xb0 [ 544.272792][T12175] do_ip_vs_set_ctl+0x353/0xaf0 [ 544.272837][T12175] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 544.272885][T12175] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 544.272916][T12175] ? rt_mutex_slowunlock+0x1cb/0x300 [ 544.272940][T12175] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 544.272978][T12175] nf_setsockopt+0x26f/0x290 [ 544.273012][T12175] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 544.273042][T12175] do_sock_setsockopt+0x17c/0x1b0 [ 544.273078][T12175] __x64_sys_setsockopt+0x143/0x1b0 [ 544.273114][T12175] do_syscall_64+0x14d/0xf80 [ 544.273142][T12175] ? trace_irq_disable+0x3b/0x150 [ 544.273168][T12175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.273191][T12175] ? clear_bhb_loop+0x40/0x90 [ 544.273218][T12175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.273240][T12175] RIP: 0033:0x7faea457c799 [ 544.273261][T12175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.273280][T12175] RSP: 002b:00007faea27ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 544.273305][T12175] RAX: ffffffffffffffda RBX: 00007faea47f5fa0 RCX: 00007faea457c799 [ 544.273321][T12175] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000006 [ 544.273335][T12175] RBP: 00007faea27ce090 R08: 0000000000000044 R09: 0000000000000000 [ 544.273349][T12175] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.273363][T12175] R13: 00007faea47f6038 R14: 00007faea47f5fa0 R15: 00007ffedc79c8f8 [ 544.273398][T12175] [ 545.463215][ T5788] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 545.623172][ T5788] usb 7-1: Using ep0 maxpacket: 16 [ 545.625899][ T5788] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 134 [ 545.629042][ T5788] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 545.629073][ T5788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.629093][ T5788] usb 7-1: Product: syz [ 545.629108][ T5788] usb 7-1: Manufacturer: syz [ 545.629124][ T5788] usb 7-1: SerialNumber: syz [ 545.728293][T12191] FAULT_INJECTION: forcing a failure. [ 545.728293][T12191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.728318][T12191] CPU: 0 UID: 0 PID: 12191 Comm: syz.1.1931 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 545.728336][T12191] Tainted: [L]=SOFTLOCKUP [ 545.728340][T12191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 545.728347][T12191] Call Trace: [ 545.728353][T12191] [ 545.728358][T12191] dump_stack_lvl+0xe8/0x150 [ 545.728381][T12191] should_fail_ex+0x46b/0x600 [ 545.728398][T12191] _copy_to_user+0x31/0xb0 [ 545.728416][T12191] simple_read_from_buffer+0xe1/0x170 [ 545.728433][T12191] proc_fail_nth_read+0x1be/0x230 [ 545.728450][T12191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.728466][T12191] ? rw_verify_area+0x2ac/0x4e0 [ 545.728491][T12191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.728506][T12191] vfs_read+0x212/0xa80 [ 545.728527][T12191] ? __pfx_vfs_read+0x10/0x10 [ 545.728545][T12191] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 545.728562][T12191] ? lockdep_hardirqs_on+0x7a/0x110 [ 545.728577][T12191] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 545.728592][T12191] ? mutex_lock_nested+0x152/0x1d0 [ 545.728604][T12191] ? fdget_pos+0x252/0x320 [ 545.728624][T12191] ksys_read+0x156/0x270 [ 545.728642][T12191] ? __pfx_ksys_read+0x10/0x10 [ 545.728666][T12191] do_syscall_64+0x14d/0xf80 [ 545.728681][T12191] ? trace_irq_disable+0x3b/0x150 [ 545.728694][T12191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.728706][T12191] ? clear_bhb_loop+0x40/0x90 [ 545.728721][T12191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.728733][T12191] RIP: 0033:0x7fe5d8d0cfce [ 545.728745][T12191] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 545.728755][T12191] RSP: 002b:00007fe5d6f9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 545.728769][T12191] RAX: ffffffffffffffda RBX: 00007fe5d6f9e6c0 RCX: 00007fe5d8d0cfce [ 545.728779][T12191] RDX: 000000000000000f RSI: 00007fe5d6f9e0a0 RDI: 0000000000000006 [ 545.728786][T12191] RBP: 00007fe5d6f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 545.728793][T12191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.728801][T12191] R13: 00007fe5d8fc6038 R14: 00007fe5d8fc5fa0 R15: 00007ffc55846a48 [ 545.728820][T12191] [ 545.783270][ T5883] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 545.894364][ T5788] usb 7-1: config 0 descriptor?? [ 545.896272][T12179] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 545.952378][ T5883] usb 4-1: config 0 has an invalid interface number: 147 but max is 0 [ 545.952405][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.952423][ T5883] usb 4-1: config 0 has no interface number 0 [ 545.952466][ T5883] usb 4-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 545.952492][ T5883] usb 4-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.968410][ T5883] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 545.968441][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.968460][ T5883] usb 4-1: Product: syz [ 545.968474][ T5883] usb 4-1: Manufacturer: syz [ 545.968487][ T5883] usb 4-1: SerialNumber: syz [ 545.992158][ T5883] usb 4-1: config 0 descriptor?? [ 545.993443][T12182] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 546.160690][ T5788] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 546.219791][ T5883] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 546.604009][T12208] Invalid source name [ 547.159312][T11741] usb 7-1: Failed to submit usb control message: -71 [ 547.159356][T11741] usb 7-1: unable to send the bmi data to the device: -71 [ 547.159376][T11741] usb 7-1: unable to get target info from device [ 547.159393][T11741] usb 7-1: could not get target info (-71) [ 547.159615][T11741] usb 7-1: could not probe fw (-71) [ 547.170524][ T5788] usb 7-1: USB disconnect, device number 19 [ 547.362760][T11761] usb 4-1: Failed to submit usb control message: -110 [ 547.362802][T11761] usb 4-1: unable to send the bmi data to the device: -110 [ 547.362820][T11761] usb 4-1: unable to get target info from device [ 547.362837][T11761] usb 4-1: could not get target info (-110) [ 547.363047][T11761] usb 4-1: could not probe fw (-110) [ 547.592242][T11121] usb 4-1: USB disconnect, device number 38 [ 547.981355][T12222] FAULT_INJECTION: forcing a failure. [ 547.981355][T12222] name failslab, interval 1, probability 0, space 0, times 0 [ 547.981396][T12222] CPU: 0 UID: 0 PID: 12222 Comm: syz.6.1938 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 547.981426][T12222] Tainted: [L]=SOFTLOCKUP [ 547.981434][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 547.981447][T12222] Call Trace: [ 547.981457][T12222] [ 547.981467][T12222] dump_stack_lvl+0xe8/0x150 [ 547.981506][T12222] should_fail_ex+0x46b/0x600 [ 547.981552][T12222] should_failslab+0xa8/0x100 [ 547.981576][T12222] __kmalloc_noprof+0xdf/0x7b0 [ 547.981607][T12222] ? kfree+0x4d/0x6c0 [ 547.981634][T12222] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 547.981665][T12222] tomoyo_realpath_from_path+0xe3/0x5d0 [ 547.981701][T12222] ? tomoyo_path_number_perm+0x219/0x630 [ 547.981731][T12222] tomoyo_path_number_perm+0x246/0x630 [ 547.981764][T12222] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 547.981797][T12222] ? __lock_acquire+0x6b5/0x2cf0 [ 547.981858][T12222] ? __fget_files+0x2a/0x420 [ 547.981888][T12222] ? __fget_files+0x2a/0x420 [ 547.981913][T12222] ? __fget_files+0x3a6/0x420 [ 547.981939][T12222] ? __fget_files+0x2a/0x420 [ 547.981966][T12222] security_file_ioctl+0xc3/0x2a0 [ 547.981999][T12222] __se_sys_ioctl+0x47/0x170 [ 547.982034][T12222] do_syscall_64+0x14d/0xf80 [ 547.982060][T12222] ? trace_irq_disable+0x3b/0x150 [ 547.982084][T12222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.982107][T12222] ? clear_bhb_loop+0x40/0x90 [ 547.982135][T12222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.982156][T12222] RIP: 0033:0x7f0de8e8c799 [ 547.982178][T12222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.982196][T12222] RSP: 002b:00007f0de70e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.982221][T12222] RAX: ffffffffffffffda RBX: 00007f0de9105fa0 RCX: 00007f0de8e8c799 [ 547.982237][T12222] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 547.982252][T12222] RBP: 00007f0de70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 547.982265][T12222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.982279][T12222] R13: 00007f0de9106038 R14: 00007f0de9105fa0 R15: 00007ffd605c1dc8 [ 547.982316][T12222] [ 547.982325][T12222] ERROR: Out of memory at tomoyo_realpath_from_path. [ 549.263646][T12240] FAULT_INJECTION: forcing a failure. [ 549.263646][T12240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.263713][T12240] CPU: 1 UID: 0 PID: 12240 Comm: syz.7.1941 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.263754][T12240] Tainted: [L]=SOFTLOCKUP [ 549.263763][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 549.263775][T12240] Call Trace: [ 549.263785][T12240] [ 549.263796][T12240] dump_stack_lvl+0xe8/0x150 [ 549.263835][T12240] should_fail_ex+0x46b/0x600 [ 549.263866][T12240] _copy_from_user+0x2d/0xb0 [ 549.263896][T12240] __sys_connect+0x156/0x450 [ 549.263922][T12240] ? irqentry_exit+0x59e/0x620 [ 549.263952][T12240] ? lockdep_hardirqs_on+0x7a/0x110 [ 549.263980][T12240] ? __pfx___sys_connect+0x10/0x10 [ 549.264004][T12240] ? rcu_is_watching+0x15/0xb0 [ 549.264054][T12240] __x64_sys_connect+0x7a/0x90 [ 549.264084][T12240] do_syscall_64+0x14d/0xf80 [ 549.264113][T12240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.264136][T12240] ? clear_bhb_loop+0x40/0x90 [ 549.264164][T12240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.264186][T12240] RIP: 0033:0x7f9b188dc799 [ 549.264207][T12240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.264225][T12240] RSP: 002b:00007f9b16aec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 549.264250][T12240] RAX: ffffffffffffffda RBX: 00007f9b18b56180 RCX: 00007f9b188dc799 [ 549.264266][T12240] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000005 [ 549.264281][T12240] RBP: 00007f9b16aec090 R08: 0000000000000000 R09: 0000000000000000 [ 549.264295][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.264308][T12240] R13: 00007f9b18b56218 R14: 00007f9b18b56180 R15: 00007ffdc2caf8b8 [ 549.264344][T12240] [ 549.879997][T12242] FAULT_INJECTION: forcing a failure. [ 549.879997][T12242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.880040][T12242] CPU: 1 UID: 0 PID: 12242 Comm: syz.3.1943 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.880070][T12242] Tainted: [L]=SOFTLOCKUP [ 549.880079][T12242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 549.880092][T12242] Call Trace: [ 549.880101][T12242] [ 549.880111][T12242] dump_stack_lvl+0xe8/0x150 [ 549.880148][T12242] should_fail_ex+0x46b/0x600 [ 549.880178][T12242] _copy_from_user+0x2d/0xb0 [ 549.880209][T12242] do_ip_vs_set_ctl+0x353/0xaf0 [ 549.880243][T12242] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 549.880294][T12242] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 549.880325][T12242] ? rt_mutex_slowunlock+0x1cb/0x300 [ 549.880348][T12242] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 549.880386][T12242] nf_setsockopt+0x26f/0x290 [ 549.880419][T12242] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 549.880448][T12242] do_sock_setsockopt+0x17c/0x1b0 [ 549.880492][T12242] __x64_sys_setsockopt+0x143/0x1b0 [ 549.880527][T12242] do_syscall_64+0x14d/0xf80 [ 549.880555][T12242] ? trace_irq_disable+0x3b/0x150 [ 549.880580][T12242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.880602][T12242] ? clear_bhb_loop+0x40/0x90 [ 549.880630][T12242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.880652][T12242] RIP: 0033:0x7faea457c799 [ 549.880673][T12242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.880692][T12242] RSP: 002b:00007faea27ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 549.880717][T12242] RAX: ffffffffffffffda RBX: 00007faea47f5fa0 RCX: 00007faea457c799 [ 549.880733][T12242] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000004 [ 549.880747][T12242] RBP: 00007faea27ce090 R08: 0000000000000044 R09: 0000000000000000 [ 549.880761][T12242] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.880775][T12242] R13: 00007faea47f6038 R14: 00007faea47f5fa0 R15: 00007ffedc79c8f8 [ 549.880810][T12242] [ 550.016605][T12246] No source specified [ 550.952248][T12261] FAULT_INJECTION: forcing a failure. [ 550.952248][T12261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.952311][T12261] CPU: 0 UID: 0 PID: 12261 Comm: syz.1.1950 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 550.952340][T12261] Tainted: [L]=SOFTLOCKUP [ 550.952348][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.952360][T12261] Call Trace: [ 550.952368][T12261] [ 550.952377][T12261] dump_stack_lvl+0xe8/0x150 [ 550.952406][T12261] should_fail_ex+0x46b/0x600 [ 550.952423][T12261] _copy_from_user+0x2d/0xb0 [ 550.952439][T12261] sk_setsockopt+0x2b3/0x2bb0 [ 550.952456][T12261] ? __pfx___schedule+0x10/0x10 [ 550.952475][T12261] ? __pfx_sk_setsockopt+0x10/0x10 [ 550.952494][T12261] ? lockdep_hardirqs_on+0x7a/0x110 [ 550.952514][T12261] ? trace_irq_disable+0x3b/0x150 [ 550.952535][T12261] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 550.952553][T12261] mptcp_setsockopt+0x15b8/0x36f0 [ 550.952565][T12261] ? irqentry_exit+0x59e/0x620 [ 550.952583][T12261] ? trace_irq_disable+0x3b/0x150 [ 550.952598][T12261] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 550.952615][T12261] ? security_socket_setsockopt+0xa1/0x290 [ 550.952633][T12261] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 550.952647][T12261] ? sock_common_setsockopt+0x36/0xc0 [ 550.952660][T12261] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 550.952675][T12261] do_sock_setsockopt+0x17c/0x1b0 [ 550.952694][T12261] __x64_sys_setsockopt+0x143/0x1b0 [ 550.952714][T12261] do_syscall_64+0x14d/0xf80 [ 550.952730][T12261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.952742][T12261] ? clear_bhb_loop+0x40/0x90 [ 550.952765][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.952777][T12261] RIP: 0033:0x7fe5d8d4c799 [ 550.952790][T12261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.952800][T12261] RSP: 002b:00007fe5d6f5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 550.952815][T12261] RAX: ffffffffffffffda RBX: 00007fe5d8fc6180 RCX: 00007fe5d8d4c799 [ 550.952824][T12261] RDX: 0000000000000012 RSI: 0000000000000001 RDI: 0000000000000003 [ 550.952832][T12261] RBP: 00007fe5d6f5c090 R08: 0000000000000004 R09: 0000000000000000 [ 550.952839][T12261] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 550.952847][T12261] R13: 00007fe5d8fc6218 R14: 00007fe5d8fc6180 R15: 00007ffc55846a48 [ 550.952866][T12261] [ 551.364219][ T5882] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 551.528348][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 551.532494][ T5882] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 551.532528][ T5882] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 551.532549][ T5882] usb 4-1: config 251 has no interface number 0 [ 551.532598][ T5882] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 551.532634][ T5882] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 551.532660][ T5882] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 551.532680][ T5882] usb 4-1: config 251 interface 202 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.532710][ T5882] usb 4-1: config 251 interface 202 has no altsetting 0 [ 551.545569][ T5882] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 551.545600][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 551.545619][ T5882] usb 4-1: Product: syz [ 551.545632][ T5882] usb 4-1: SerialNumber: syz [ 551.826314][ T5882] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 551.901517][ T5882] usb 4-1: USB disconnect, device number 39 [ 554.031435][T12295] No source specified [ 555.538546][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 555.714851][ T1854] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 555.900909][ T1854] usb 4-1: Using ep0 maxpacket: 16 [ 555.904971][ T1854] usb 4-1: unable to get BOS descriptor or descriptor too short [ 555.907700][ T1854] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 555.912013][ T1854] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 555.912047][ T1854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.912069][ T1854] usb 4-1: Product: syz [ 555.912085][ T1854] usb 4-1: Manufacturer: syz [ 555.912101][ T1854] usb 4-1: SerialNumber: syz [ 558.060437][ T1854] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 558.060942][ T1854] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 558.240277][ T1854] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 559.365967][ T1854] usb 4-1: USB disconnect, device number 40 [ 559.643829][T10854] udevd[10854]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.785747][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1969'. [ 560.785777][T12339] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1969'. [ 560.838328][T12342] FAULT_INJECTION: forcing a failure. [ 560.838328][T12342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.838379][T12342] CPU: 1 UID: 0 PID: 12342 Comm: syz.3.1969 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 560.838409][T12342] Tainted: [L]=SOFTLOCKUP [ 560.838417][T12342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 560.838430][T12342] Call Trace: [ 560.838439][T12342] [ 560.838449][T12342] dump_stack_lvl+0xe8/0x150 [ 560.838487][T12342] should_fail_ex+0x46b/0x600 [ 560.838518][T12342] _copy_from_user+0x2d/0xb0 [ 560.838548][T12342] ___sys_sendmsg+0x1c6/0x360 [ 560.838585][T12342] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.838620][T12342] ? kstrtouint+0x6e/0xe0 [ 560.838671][T12342] ? __fget_files+0x2a/0x420 [ 560.838698][T12342] ? __fget_files+0x3a6/0x420 [ 560.838736][T12342] __sys_sendmmsg+0x282/0x4e0 [ 560.838774][T12342] ? __pfx___sys_sendmmsg+0x10/0x10 [ 560.838816][T12342] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 560.838856][T12342] ? ksys_write+0x248/0x270 [ 560.838890][T12342] ? __pfx_ksys_write+0x10/0x10 [ 560.838930][T12342] __x64_sys_sendmmsg+0xa0/0xc0 [ 560.838963][T12342] do_syscall_64+0x14d/0xf80 [ 560.838992][T12342] ? trace_irq_disable+0x3b/0x150 [ 560.839017][T12342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.839039][T12342] ? clear_bhb_loop+0x40/0x90 [ 560.839067][T12342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.839088][T12342] RIP: 0033:0x7faea457c799 [ 560.839109][T12342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.839128][T12342] RSP: 002b:00007faea27ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 560.839153][T12342] RAX: ffffffffffffffda RBX: 00007faea47f6090 RCX: 00007faea457c799 [ 560.839169][T12342] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 560.839184][T12342] RBP: 00007faea27ad090 R08: 0000000000000000 R09: 0000000000000000 [ 560.839198][T12342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.839211][T12342] R13: 00007faea47f6128 R14: 00007faea47f6090 R15: 00007ffedc79c8f8 [ 560.839247][T12342] [ 560.841998][T12341] No source specified [ 561.286767][T12346] FAULT_INJECTION: forcing a failure. [ 561.286767][T12346] name failslab, interval 1, probability 0, space 0, times 0 [ 561.286805][T12346] CPU: 1 UID: 0 PID: 12346 Comm: syz.6.1972 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 561.286832][T12346] Tainted: [L]=SOFTLOCKUP [ 561.286839][T12346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.286852][T12346] Call Trace: [ 561.286860][T12346] [ 561.286871][T12346] dump_stack_lvl+0xe8/0x150 [ 561.286906][T12346] should_fail_ex+0x46b/0x600 [ 561.286935][T12346] should_failslab+0xa8/0x100 [ 561.286960][T12346] kmem_cache_alloc_noprof+0x87/0x680 [ 561.286990][T12346] ? lockdep_hardirqs_on+0x7a/0x110 [ 561.287018][T12346] ? do_getname+0x2e/0x250 [ 561.287046][T12346] do_getname+0x2e/0x250 [ 561.287065][T12346] ? getname_flags+0x11/0x20 [ 561.287090][T12346] do_sys_openat2+0xca/0x200 [ 561.287119][T12346] ? __pfx_do_sys_openat2+0x10/0x10 [ 561.287147][T12346] ? ksys_write+0x248/0x270 [ 561.287179][T12346] ? __pfx_ksys_write+0x10/0x10 [ 561.287214][T12346] __x64_sys_openat+0x138/0x170 [ 561.287243][T12346] do_syscall_64+0x14d/0xf80 [ 561.287270][T12346] ? trace_irq_disable+0x3b/0x150 [ 561.287294][T12346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.287324][T12346] ? clear_bhb_loop+0x40/0x90 [ 561.287349][T12346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.287370][T12346] RIP: 0033:0x7f0de8e4cfce [ 561.287391][T12346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 561.287408][T12346] RSP: 002b:00007f0de70e5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 561.287431][T12346] RAX: ffffffffffffffda RBX: 00007f0de70e66c0 RCX: 00007f0de8e4cfce [ 561.287446][T12346] RDX: 0000000000103401 RSI: 00007f0de70e5c00 RDI: ffffffffffffff9c [ 561.287461][T12346] RBP: 00007f0de70e5c00 R08: 0000000000000000 R09: 0000000000000000 [ 561.287474][T12346] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 561.287488][T12346] R13: 00007f0de9106038 R14: 00007f0de9105fa0 R15: 00007ffd605c1dc8 [ 561.287522][T12346] [ 564.123135][T12396] FAULT_INJECTION: forcing a failure. [ 564.123135][T12396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.123203][T12396] CPU: 1 UID: 0 PID: 12396 Comm: syz.7.1987 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 564.123249][T12396] Tainted: [L]=SOFTLOCKUP [ 564.123265][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 564.123278][T12396] Call Trace: [ 564.123288][T12396] [ 564.123298][T12396] dump_stack_lvl+0xe8/0x150 [ 564.123336][T12396] should_fail_ex+0x46b/0x600 [ 564.123366][T12396] _copy_from_user+0x2d/0xb0 [ 564.123395][T12396] do_sock_getsockopt+0x165/0x3f0 [ 564.123429][T12396] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 564.123465][T12396] ? __x64_sys_getsockopt+0x173/0x250 [ 564.123501][T12396] __x64_sys_getsockopt+0x1aa/0x250 [ 564.123540][T12396] do_syscall_64+0x14d/0xf80 [ 564.123575][T12396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.123598][T12396] ? clear_bhb_loop+0x40/0x90 [ 564.123625][T12396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.123647][T12396] RIP: 0033:0x7f9b188dc799 [ 564.123668][T12396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.123686][T12396] RSP: 002b:00007f9b16aec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 564.123710][T12396] RAX: ffffffffffffffda RBX: 00007f9b18b56180 RCX: 00007f9b188dc799 [ 564.123726][T12396] RDX: 0000000000000484 RSI: 0000000000000000 RDI: 0000000000000005 [ 564.123739][T12396] RBP: 00007f9b16aec090 R08: 0000200000000340 R09: 0000000000000000 [ 564.123754][T12396] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 564.123768][T12396] R13: 00007f9b18b56218 R14: 00007f9b18b56180 R15: 00007ffdc2caf8b8 [ 564.123804][T12396] [ 565.097728][T12403] netlink: zone id is out of range [ 565.097748][T12403] netlink: zone id is out of range [ 565.124266][T12403] netlink: set zone limit has 8 unknown bytes [ 567.634335][T12423] FAULT_INJECTION: forcing a failure. [ 567.634335][T12423] name failslab, interval 1, probability 0, space 0, times 0 [ 567.634363][T12423] CPU: 1 UID: 0 PID: 12423 Comm: syz.3.1994 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 567.634381][T12423] Tainted: [L]=SOFTLOCKUP [ 567.634386][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 567.634393][T12423] Call Trace: [ 567.634399][T12423] [ 567.634405][T12423] dump_stack_lvl+0xe8/0x150 [ 567.634429][T12423] should_fail_ex+0x46b/0x600 [ 567.634451][T12423] should_failslab+0xa8/0x100 [ 567.634465][T12423] __kmalloc_noprof+0xdf/0x7b0 [ 567.634482][T12423] ? kfree+0x4d/0x6c0 [ 567.634497][T12423] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 567.634514][T12423] tomoyo_realpath_from_path+0xe3/0x5d0 [ 567.634538][T12423] ? tomoyo_path_number_perm+0x219/0x630 [ 567.634555][T12423] tomoyo_path_number_perm+0x246/0x630 [ 567.634573][T12423] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 567.634598][T12423] ? __lock_acquire+0x6b5/0x2cf0 [ 567.634631][T12423] ? __fget_files+0x2a/0x420 [ 567.634648][T12423] ? __fget_files+0x2a/0x420 [ 567.634662][T12423] ? __fget_files+0x3a6/0x420 [ 567.634676][T12423] ? __fget_files+0x2a/0x420 [ 567.634692][T12423] security_file_ioctl+0xc3/0x2a0 [ 567.634711][T12423] __se_sys_ioctl+0x47/0x170 [ 567.634732][T12423] do_syscall_64+0x14d/0xf80 [ 567.634748][T12423] ? trace_irq_disable+0x3b/0x150 [ 567.634762][T12423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.634774][T12423] ? clear_bhb_loop+0x40/0x90 [ 567.634789][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.634801][T12423] RIP: 0033:0x7faea457c799 [ 567.634814][T12423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.634825][T12423] RSP: 002b:00007faea27ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.634843][T12423] RAX: ffffffffffffffda RBX: 00007faea47f6090 RCX: 00007faea457c799 [ 567.634859][T12423] RDX: 0000200000000040 RSI: 0000000000005414 RDI: 0000000000000005 [ 567.634873][T12423] RBP: 00007faea27ad090 R08: 0000000000000000 R09: 0000000000000000 [ 567.634887][T12423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.634900][T12423] R13: 00007faea47f6128 R14: 00007faea47f6090 R15: 00007ffedc79c8f8 [ 567.634936][T12423] [ 567.680882][T12423] ERROR: Out of memory at tomoyo_realpath_from_path. [ 568.445839][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.445923][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.825814][T12443] vivid-000: ================= START STATUS ================= [ 569.825937][T12443] vivid-000: Test Pattern: 75% Colorbar [ 569.825958][T12443] vivid-000: Fill Percentage of Frame: 100 [ 569.825976][T12443] vivid-000: Horizontal Movement: No Movement [ 569.825990][T12443] vivid-000: Vertical Movement: No Movement [ 569.826004][T12443] vivid-000: OSD Text Mode: All [ 569.826018][T12443] vivid-000: Show Border: false [ 569.826032][T12443] vivid-000: Show Square: false [ 569.826045][T12443] vivid-000: Sensor Flipped Horizontally: false [ 569.826069][T12443] vivid-000: Sensor Flipped Vertically: false [ 569.826084][T12443] vivid-000: Insert SAV Code in Image: false [ 569.826098][T12443] vivid-000: Insert EAV Code in Image: false [ 569.826112][T12443] vivid-000: Insert Video Guard Band: false [ 569.826127][T12443] vivid-000: Reduced Framerate: false [ 569.826140][T12443] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 569.826156][T12443] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 569.866397][T12443] vivid-000: Enable Capture Cropping: true [ 569.866420][T12443] vivid-000: Enable Capture Composing: true [ 569.866437][T12443] vivid-000: Enable Capture Scaler: true [ 569.866454][T12443] vivid-000: Timestamp Source: End of Frame [ 569.866471][T12443] vivid-000: Colorspace: sRGB [ 569.866487][T12443] vivid-000: Transfer Function: Default [ 569.866503][T12443] vivid-000: Y'CbCr Encoding: Default [ 569.866519][T12443] vivid-000: HSV Encoding: Hue 0-179 [ 569.866534][T12443] vivid-000: Quantization: Default [ 569.866550][T12443] vivid-000: Apply Alpha To Red Only: false [ 569.866567][T12443] vivid-000: Standard Aspect Ratio: 4x3 [ 569.866584][T12443] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 569.866605][T12443] vivid-000: DV Timings: 640x480p59 inactive [ 569.866626][T12443] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 569.866645][T12443] vivid-000: Maximum EDID Blocks: 2 [ 569.866662][T12443] vivid-000: Limited RGB Range (16-235): false [ 569.866679][T12443] vivid-000: Rx RGB Quantization Range: Automatic [ 569.866696][T12443] vivid-000: Power Present: 0x00000001 [ 569.866717][T12443] tpg source WxH: 1920x1080 (Luma) [ 569.866730][T12443] tpg field: 1 [ 569.866737][T12443] tpg crop: (0,0)/1920x1080 [ 569.866749][T12443] tpg compose: (0,0)/1920x1080 [ 569.866761][T12443] tpg colorspace: 8 [ 569.866769][T12443] tpg transfer function: 0/0 [ 569.866778][T12443] tpg quantization: 0/0 [ 569.866787][T12443] tpg RGB range: 0/2 [ 569.866796][T12443] vivid-000: ================== END STATUS ================== [ 569.866871][T12444] vivid-000: ================= START STATUS ================= [ 569.866886][T12444] vivid-000: Test Pattern: 75% Colorbar [ 569.866904][T12444] vivid-000: Fill Percentage of Frame: 100 [ 569.866921][T12444] vivid-000: Horizontal Movement: No Movement [ 569.866938][T12444] vivid-000: Vertical Movement: No Movement [ 569.866955][T12444] vivid-000: OSD Text Mode: All [ 569.866971][T12444] vivid-000: Show Border: false [ 569.866987][T12444] vivid-000: Show Square: false [ 569.867002][T12444] vivid-000: Sensor Flipped Horizontally: false [ 569.867019][T12444] vivid-000: Sensor Flipped Vertically: false [ 569.867035][T12444] vivid-000: Insert SAV Code in Image: false [ 569.867051][T12444] vivid-000: Insert EAV Code in Image: false [ 569.867067][T12444] vivid-000: Insert Video Guard Band: false [ 569.867083][T12444] vivid-000: Reduced Framerate: false [ 569.867099][T12444] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 569.867117][T12444] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 569.867134][T12444] vivid-000: Enable Capture Cropping: true [ 569.867151][T12444] vivid-000: Enable Capture Composing: true [ 569.867167][T12444] vivid-000: Enable Capture Scaler: true [ 569.867183][T12444] vivid-000: Timestamp Source: End of Frame [ 569.867200][T12444] vivid-000: Colorspace: sRGB [ 569.867215][T12444] vivid-000: Transfer Function: Default [ 569.867231][T12444] vivid-000: Y'CbCr Encoding: Default [ 569.867247][T12444] vivid-000: HSV Encoding: Hue 0-179 [ 569.867264][T12444] vivid-000: Quantization: Default [ 569.867288][T12444] vivid-000: Apply Alpha To Red Only: false [ 569.867304][T12444] vivid-000: Standard Aspect Ratio: 4x3 [ 569.867321][T12444] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 569.867342][T12444] vivid-000: DV Timings: 640x480p59 inactive [ 569.867363][T12444] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 569.867380][T12444] vivid-000: Maximum EDID Blocks: 2 [ 569.867397][T12444] vivid-000: Limited RGB Range (16-235): false [ 569.867414][T12444] vivid-000: Rx RGB Quantization Range: Automatic [ 569.867431][T12444] vivid-000: Power Present: 0x00000001 [ 569.867449][T12444] tpg source WxH: 1920x1080 (Luma) [ 569.867460][T12444] tpg field: 1 [ 569.867468][T12444] tpg crop: (0,0)/1920x1080 [ 569.867479][T12444] tpg compose: (0,0)/1920x1080 [ 569.867492][T12444] tpg colorspace: 8 [ 569.867499][T12444] tpg transfer function: 0/0 [ 569.867509][T12444] tpg quantization: 0/0 [ 569.867517][T12444] tpg RGB range: 0/2 [ 569.867526][T12444] vivid-000: ================== END STATUS ================== [ 570.196484][ T1854] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 570.346694][ T1854] usb 2-1: Using ep0 maxpacket: 8 [ 570.349497][ T1854] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.352668][ T1854] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 570.352694][ T1854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.352712][ T1854] usb 2-1: Product: syz [ 570.352726][ T1854] usb 2-1: Manufacturer: syz [ 570.352739][ T1854] usb 2-1: SerialNumber: syz [ 570.449556][ T1854] usb 2-1: config 0 descriptor?? [ 570.454244][ T1854] usb 2-1: bad CDC descriptors [ 570.455029][ T1854] usb 2-1: unsupported MDLM descriptors [ 571.695642][T12461] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2006'. [ 572.319170][ T5788] usb 2-1: USB disconnect, device number 50 [ 572.566042][T12466] netlink: 'syz.0.2008': attribute type 16 has an invalid length. [ 573.204476][T12469] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 573.446203][ T820] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 573.706914][ T820] usb 2-1: Using ep0 maxpacket: 8 [ 573.710005][ T820] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 573.710050][ T820] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 573.710095][ T820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 573.710126][ T820] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.710180][ T820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 573.710208][ T820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 573.710235][ T820] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 573.710261][ T820] usb 2-1: config 168 interface 0 has no altsetting 0 [ 573.719939][ T820] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 573.719981][ T820] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 573.720020][ T820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 573.720047][ T820] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.720071][ T820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 573.720095][ T820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 573.720121][ T820] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 573.720155][ T820] usb 2-1: config 168 interface 0 has no altsetting 0 [ 573.767315][ T820] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 573.767362][ T820] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 573.767405][ T820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 573.767444][ T820] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.767471][ T820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 573.767499][ T820] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 573.767528][ T820] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 573.767557][ T820] usb 2-1: config 168 interface 0 has no altsetting 0 [ 573.772065][ T820] usb 2-1: string descriptor 0 read error: -22 [ 573.772209][ T820] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 573.772231][ T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.018312][ T820] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 574.110222][ T820] usb 2-1: USB disconnect, device number 51 [ 574.193682][T12466] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.194170][T12466] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.306936][ T5865] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 574.470557][ T5865] usb 7-1: config 0 has an invalid interface number: 147 but max is 0 [ 574.470591][ T5865] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.470611][ T5865] usb 7-1: config 0 has no interface number 0 [ 574.470661][ T5865] usb 7-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 574.470690][ T5865] usb 7-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.474353][ T5865] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 574.474385][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.474406][ T5865] usb 7-1: Product: syz [ 574.474421][ T5865] usb 7-1: Manufacturer: syz [ 574.474436][ T5865] usb 7-1: SerialNumber: syz [ 574.496601][ T5865] usb 7-1: config 0 descriptor?? [ 574.497860][T12487] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 574.539221][ T5865] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 574.879314][T12500] netlink: 'syz.6.2014': attribute type 10 has an invalid length. [ 575.308015][T12504] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2018'. [ 575.954035][T11763] usb 7-1: Failed to submit usb control message: -110 [ 575.954080][T11763] usb 7-1: unable to send the bmi data to the device: -110 [ 575.954101][T11763] usb 7-1: unable to get target info from device [ 575.954118][T11763] usb 7-1: could not get target info (-110) [ 575.954208][T11763] usb 7-1: could not probe fw (-110) [ 576.145272][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 576.259642][T12466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.266899][T12466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.255368][T12495] lo speed is unknown, defaulting to 1000 [ 577.263839][T12487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.277548][T11761] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.284911][T12495] lo speed is unknown, defaulting to 1000 [ 577.289310][T11761] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.292606][T11761] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.292649][T11761] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.305880][T12495] lo speed is unknown, defaulting to 1000 [ 577.351541][T12495] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 577.445509][T12495] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 577.646851][T12495] lo speed is unknown, defaulting to 1000 [ 577.674851][ T5883] usb 7-1: USB disconnect, device number 20 [ 577.717092][T12495] lo speed is unknown, defaulting to 1000 [ 577.727125][T12495] lo speed is unknown, defaulting to 1000 [ 577.768635][T12495] lo speed is unknown, defaulting to 1000 [ 577.771981][T12495] lo speed is unknown, defaulting to 1000 [ 577.776798][T12495] lo speed is unknown, defaulting to 1000 [ 579.365431][T12534] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 580.748017][ T5882] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 580.877807][ T5882] usb 7-1: device descriptor read/64, error -71 [ 581.193562][T12547] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2029'. [ 581.365651][ T5882] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 581.963656][T12549] FAULT_INJECTION: forcing a failure. [ 581.963656][T12549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.963683][T12549] CPU: 1 UID: 0 PID: 12549 Comm: syz.3.2030 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 581.963701][T12549] Tainted: [L]=SOFTLOCKUP [ 581.963706][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 581.963713][T12549] Call Trace: [ 581.963719][T12549] [ 581.963728][T12549] dump_stack_lvl+0xe8/0x150 [ 581.963750][T12549] should_fail_ex+0x46b/0x600 [ 581.963768][T12549] _copy_from_user+0x2d/0xb0 [ 581.963784][T12549] ___sys_sendmsg+0x1c6/0x360 [ 581.963805][T12549] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.963826][T12549] ? kstrtouint+0x6e/0xe0 [ 581.963853][T12549] ? __fget_files+0x2a/0x420 [ 581.963867][T12549] ? __fget_files+0x3a6/0x420 [ 581.963896][T12549] __sys_sendmmsg+0x282/0x4e0 [ 581.963917][T12549] ? __pfx___sys_sendmmsg+0x10/0x10 [ 581.963942][T12549] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 581.963964][T12549] ? ksys_write+0x248/0x270 [ 581.963983][T12549] ? __pfx_ksys_write+0x10/0x10 [ 581.964003][T12549] __x64_sys_sendmmsg+0xa0/0xc0 [ 581.964022][T12549] do_syscall_64+0x14d/0xf80 [ 581.964039][T12549] ? trace_irq_disable+0x3b/0x150 [ 581.964056][T12549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.964069][T12549] ? clear_bhb_loop+0x40/0x90 [ 581.964083][T12549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.964095][T12549] RIP: 0033:0x7faea457c799 [ 581.964108][T12549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.964119][T12549] RSP: 002b:00007faea27ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 581.964133][T12549] RAX: ffffffffffffffda RBX: 00007faea47f6090 RCX: 00007faea457c799 [ 581.964142][T12549] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 581.964150][T12549] RBP: 00007faea27ad090 R08: 0000000000000000 R09: 0000000000000000 [ 581.964158][T12549] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 581.964166][T12549] R13: 00007faea47f6128 R14: 00007faea47f6090 R15: 00007ffedc79c8f8 [ 581.964184][T12549] [ 582.088002][ T5882] usb 7-1: device descriptor read/64, error -71 [ 582.198721][ T5882] usb usb7-port1: attempt power cycle [ 582.474374][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2031'. [ 582.563932][ T5882] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 582.768000][ T5882] usb 7-1: device not accepting address 23, error -71 [ 582.976695][T12595] FAULT_INJECTION: forcing a failure. [ 582.976695][T12595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.976737][T12595] CPU: 1 UID: 0 PID: 12595 Comm: syz.1.2035 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 582.976765][T12595] Tainted: [L]=SOFTLOCKUP [ 582.976773][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 582.976785][T12595] Call Trace: [ 582.976794][T12595] [ 582.976804][T12595] dump_stack_lvl+0xe8/0x150 [ 582.976841][T12595] should_fail_ex+0x46b/0x600 [ 582.976871][T12595] _copy_from_user+0x2d/0xb0 [ 582.976893][T12595] ___sys_sendmsg+0x1c6/0x360 [ 582.976915][T12595] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.976944][T12595] ? kstrtouint+0x6e/0xe0 [ 582.976971][T12595] ? __fget_files+0x2a/0x420 [ 582.976987][T12595] ? __fget_files+0x3a6/0x420 [ 582.977007][T12595] __sys_sendmmsg+0x282/0x4e0 [ 582.977027][T12595] ? __pfx___sys_sendmmsg+0x10/0x10 [ 582.977055][T12595] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 582.977077][T12595] ? ksys_write+0x248/0x270 [ 582.977095][T12595] ? __pfx_ksys_write+0x10/0x10 [ 582.977116][T12595] __x64_sys_sendmmsg+0xa0/0xc0 [ 582.977135][T12595] do_syscall_64+0x14d/0xf80 [ 582.977150][T12595] ? trace_irq_disable+0x3b/0x150 [ 582.977165][T12595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.977177][T12595] ? clear_bhb_loop+0x40/0x90 [ 582.977192][T12595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.977204][T12595] RIP: 0033:0x7fe5d8d4c799 [ 582.977217][T12595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.977228][T12595] RSP: 002b:00007fe5d6f9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 582.977243][T12595] RAX: ffffffffffffffda RBX: 00007fe5d8fc5fa0 RCX: 00007fe5d8d4c799 [ 582.977252][T12595] RDX: 0000000000000001 RSI: 00002000000014c0 RDI: 0000000000000003 [ 582.977260][T12595] RBP: 00007fe5d6f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 582.977268][T12595] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 582.977276][T12595] R13: 00007fe5d8fc6038 R14: 00007fe5d8fc5fa0 R15: 00007ffc55846a48 [ 582.977296][T12595] [ 583.643870][T12606] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2034'. [ 583.708190][ T1854] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 583.861506][ T1854] usb 2-1: Using ep0 maxpacket: 32 [ 583.875793][ T1854] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.893052][ T1854] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 583.893086][ T1854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.893109][ T1854] usb 2-1: Product: syz [ 583.893124][ T1854] usb 2-1: Manufacturer: syz [ 583.893138][ T1854] usb 2-1: SerialNumber: syz [ 583.964775][ T1854] usb 2-1: config 0 descriptor?? [ 584.257346][ T5865] usb 2-1: USB disconnect, device number 52 [ 584.677588][T12620] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2041'. [ 585.443983][T12629] FAULT_INJECTION: forcing a failure. [ 585.443983][T12629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.444052][T12629] CPU: 0 UID: 0 PID: 12629 Comm: syz.7.2043 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.444082][T12629] Tainted: [L]=SOFTLOCKUP [ 585.444090][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.444102][T12629] Call Trace: [ 585.444111][T12629] [ 585.444120][T12629] dump_stack_lvl+0xe8/0x150 [ 585.444145][T12629] should_fail_ex+0x46b/0x600 [ 585.444163][T12629] _copy_from_user+0x2d/0xb0 [ 585.444179][T12629] ___sys_sendmsg+0x1c6/0x360 [ 585.444200][T12629] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.444220][T12629] ? __schedule+0x1569/0x5240 [ 585.444252][T12629] ? __fget_files+0x2a/0x420 [ 585.444266][T12629] ? __fget_files+0x3a6/0x420 [ 585.444291][T12629] __x64_sys_sendmsg+0x1c3/0x2a0 [ 585.444310][T12629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.444340][T12629] do_syscall_64+0x14d/0xf80 [ 585.444356][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.444369][T12629] ? clear_bhb_loop+0x40/0x90 [ 585.444384][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.444396][T12629] RIP: 0033:0x7f9b188dc799 [ 585.444409][T12629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.444419][T12629] RSP: 002b:00007f9b16b0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.444434][T12629] RAX: ffffffffffffffda RBX: 00007f9b18b56090 RCX: 00007f9b188dc799 [ 585.444443][T12629] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 585.444451][T12629] RBP: 00007f9b16b0d090 R08: 0000000000000000 R09: 0000000000000000 [ 585.444459][T12629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.444467][T12629] R13: 00007f9b18b56128 R14: 00007f9b18b56090 R15: 00007ffdc2caf8b8 [ 585.444486][T12629] [ 586.292965][T12656] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2051'. [ 587.777236][T12676] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2056'. [ 590.949565][T12704] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2067'. [ 591.234241][T12710] FAULT_INJECTION: forcing a failure. [ 591.234241][T12710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.234283][T12710] CPU: 1 UID: 0 PID: 12710 Comm: syz.3.2069 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 591.234313][T12710] Tainted: [L]=SOFTLOCKUP [ 591.234321][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 591.234334][T12710] Call Trace: [ 591.234344][T12710] [ 591.234353][T12710] dump_stack_lvl+0xe8/0x150 [ 591.234392][T12710] should_fail_ex+0x46b/0x600 [ 591.234423][T12710] _copy_from_user+0x2d/0xb0 [ 591.234453][T12710] ___sys_recvmsg+0x175/0x590 [ 591.234492][T12710] ? __pfx____sys_recvmsg+0x10/0x10 [ 591.234559][T12710] ? __fget_files+0x3a6/0x420 [ 591.234598][T12710] do_recvmmsg+0x33a/0x800 [ 591.234639][T12710] ? __pfx_do_recvmmsg+0x10/0x10 [ 591.234686][T12710] ? rt_mutex_slowunlock+0x1cb/0x300 [ 591.234728][T12710] __x64_sys_recvmmsg+0x198/0x250 [ 591.234764][T12710] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 591.234808][T12710] do_syscall_64+0x14d/0xf80 [ 591.234835][T12710] ? trace_irq_disable+0x3b/0x150 [ 591.234859][T12710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.234881][T12710] ? clear_bhb_loop+0x40/0x90 [ 591.234908][T12710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.234930][T12710] RIP: 0033:0x7faea457c799 [ 591.234964][T12710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.234983][T12710] RSP: 002b:00007faea27ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 591.235008][T12710] RAX: ffffffffffffffda RBX: 00007faea47f5fa0 RCX: 00007faea457c799 [ 591.235025][T12710] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000003 [ 591.235039][T12710] RBP: 00007faea27ce090 R08: 0000000000000000 R09: 0000000000000000 [ 591.235053][T12710] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 591.235067][T12710] R13: 00007faea47f6038 R14: 00007faea47f5fa0 R15: 00007ffedc79c8f8 [ 591.235102][T12710] [ 591.274686][T12713] netlink: 5820 bytes leftover after parsing attributes in process `syz.0.2070'. [ 594.488718][T12750] FAULT_INJECTION: forcing a failure. [ 594.488718][T12750] name failslab, interval 1, probability 0, space 0, times 0 [ 594.488746][T12750] CPU: 0 UID: 0 PID: 12750 Comm: syz.7.2082 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 594.488767][T12750] Tainted: [L]=SOFTLOCKUP [ 594.488771][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.488779][T12750] Call Trace: [ 594.488784][T12750] [ 594.488790][T12750] dump_stack_lvl+0xe8/0x150 [ 594.488813][T12750] should_fail_ex+0x46b/0x600 [ 594.488830][T12750] should_failslab+0xa8/0x100 [ 594.488843][T12750] __kmalloc_noprof+0xdf/0x7b0 [ 594.488861][T12750] ? kfree+0x4d/0x6c0 [ 594.488876][T12750] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 594.488893][T12750] tomoyo_realpath_from_path+0xe3/0x5d0 [ 594.488915][T12750] ? tomoyo_path_number_perm+0x219/0x630 [ 594.488942][T12750] tomoyo_path_number_perm+0x246/0x630 [ 594.488960][T12750] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 594.488978][T12750] ? __lock_acquire+0x6b5/0x2cf0 [ 594.489013][T12750] ? __fget_files+0x2a/0x420 [ 594.489030][T12750] ? __fget_files+0x2a/0x420 [ 594.489043][T12750] ? __fget_files+0x3a6/0x420 [ 594.489057][T12750] ? __fget_files+0x2a/0x420 [ 594.489073][T12750] security_file_ioctl+0xc3/0x2a0 [ 594.489092][T12750] __se_sys_ioctl+0x47/0x170 [ 594.489113][T12750] do_syscall_64+0x14d/0xf80 [ 594.489129][T12750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.489142][T12750] ? clear_bhb_loop+0x40/0x90 [ 594.489164][T12750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.489176][T12750] RIP: 0033:0x7f9b188dc799 [ 594.489191][T12750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.489203][T12750] RSP: 002b:00007f9b16b2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.489221][T12750] RAX: ffffffffffffffda RBX: 00007f9b18b55fa0 RCX: 00007f9b188dc799 [ 594.489230][T12750] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000003 [ 594.489238][T12750] RBP: 00007f9b16b2e090 R08: 0000000000000000 R09: 0000000000000000 [ 594.489246][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.489253][T12750] R13: 00007f9b18b56038 R14: 00007f9b18b55fa0 R15: 00007ffdc2caf8b8 [ 594.489272][T12750] [ 594.489277][T12750] ERROR: Out of memory at tomoyo_realpath_from_path. [ 594.700183][ T5971] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 594.864438][ T5971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.864515][ T5971] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.869131][ T5971] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 594.869163][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.869184][ T5971] usb 1-1: Product: syz [ 594.869198][ T5971] usb 1-1: Manufacturer: syz [ 594.869213][ T5971] usb 1-1: SerialNumber: syz [ 594.934083][ T5971] cdc_ncm 1-1:1.0: skipping garbage [ 596.013362][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 596.759213][ T5971] cdc_ncm 1-1:1.0: bind() failure [ 596.777505][ T5971] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 596.777561][ T5971] cdc_ncm 1-1:1.1: bind() failure [ 596.844719][ T5971] usb 1-1: USB disconnect, device number 41 [ 597.133585][T12767] No source specified [ 598.506643][T12778] FAULT_INJECTION: forcing a failure. [ 598.506643][T12778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.506682][T12778] CPU: 1 UID: 0 PID: 12778 Comm: syz.7.2091 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 598.506709][T12778] Tainted: [L]=SOFTLOCKUP [ 598.506717][T12778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.506729][T12778] Call Trace: [ 598.506739][T12778] [ 598.506748][T12778] dump_stack_lvl+0xe8/0x150 [ 598.506781][T12778] should_fail_ex+0x46b/0x600 [ 598.506810][T12778] _copy_to_user+0x31/0xb0 [ 598.506847][T12778] simple_read_from_buffer+0xe1/0x170 [ 598.506873][T12778] proc_fail_nth_read+0x1be/0x230 [ 598.506908][T12778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.506932][T12778] ? rw_verify_area+0x2ac/0x4e0 [ 598.506956][T12778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.506977][T12778] vfs_read+0x212/0xa80 [ 598.507010][T12778] ? __pfx_vfs_read+0x10/0x10 [ 598.507037][T12778] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 598.507062][T12778] ? lockdep_hardirqs_on+0x7a/0x110 [ 598.507087][T12778] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 598.507110][T12778] ? mutex_lock_nested+0x152/0x1d0 [ 598.507128][T12778] ? fdget_pos+0x252/0x320 [ 598.507159][T12778] ksys_read+0x156/0x270 [ 598.507185][T12778] ? __pfx_ksys_read+0x10/0x10 [ 598.507220][T12778] do_syscall_64+0x14d/0xf80 [ 598.507241][T12778] ? trace_irq_disable+0x3b/0x150 [ 598.507261][T12778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.507279][T12778] ? clear_bhb_loop+0x40/0x90 [ 598.507301][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.507318][T12778] RIP: 0033:0x7f9b1889cfce [ 598.507337][T12778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 598.507352][T12778] RSP: 002b:00007f9b16b0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 598.507373][T12778] RAX: ffffffffffffffda RBX: 00007f9b16b0d6c0 RCX: 00007f9b1889cfce [ 598.507387][T12778] RDX: 000000000000000f RSI: 00007f9b16b0d0a0 RDI: 0000000000000004 [ 598.507398][T12778] RBP: 00007f9b16b0d090 R08: 0000000000000000 R09: 0000000000000000 [ 598.507409][T12778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.507420][T12778] R13: 00007f9b18b56128 R14: 00007f9b18b56090 R15: 00007ffdc2caf8b8 [ 598.507451][T12778] [ 598.918457][ T1854] kernel write not supported for file /dsp1 (pid: 1854 comm: kworker/0:3) [ 602.251505][T12796] [U]  [ 602.251519][T12796] [U] K{ [ 602.251529][T12796] [U] t 1ŠFfˊ`GJgo/mC [ 602.251544][T12796] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 602.251557][T12796] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 602.251577][T12796] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 602.251615][T12796] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 602.251628][T12796] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 602.251639][T12796] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 602.251654][T12796] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 602.251731][T12796] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 602.251741][T12796] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 602.251749][T12796] [U] 22Ʃx?0;3u [ 602.251763][T12796] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 602.251776][T12796] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 602.251785][T12796] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 602.251793][T12796] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 602.251802][T12796] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 602.251810][T12796] [U] ec [ 602.251821][T12796] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 602.257271][T12795] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 603.178845][ T5807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 603.200831][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 603.203735][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 603.205549][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 603.208499][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 603.221636][T12804] No source specified [ 605.255174][T12802] lo speed is unknown, defaulting to 1000 [ 605.371270][ T5807] Bluetooth: hci6: command tx timeout [ 605.601094][T12822] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2104'. [ 607.836028][ T5807] Bluetooth: hci6: command tx timeout [ 608.076494][T11756] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.480994][T12844] No source specified [ 609.563302][T12853] FAULT_INJECTION: forcing a failure. [ 609.563302][T12853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.563368][T12853] CPU: 1 UID: 0 PID: 12853 Comm: syz.6.2114 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 609.563399][T12853] Tainted: [L]=SOFTLOCKUP [ 609.563407][T12853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 609.563420][T12853] Call Trace: [ 609.563429][T12853] [ 609.563439][T12853] dump_stack_lvl+0xe8/0x150 [ 609.563478][T12853] should_fail_ex+0x46b/0x600 [ 609.563508][T12853] _copy_from_user+0x2d/0xb0 [ 609.563538][T12853] __sys_bpf+0x229/0x950 [ 609.563568][T12853] ? __pfx___sys_bpf+0x10/0x10 [ 609.563592][T12853] ? rt_mutex_slowunlock+0x1cb/0x300 [ 609.563635][T12853] ? ksys_write+0x248/0x270 [ 609.563669][T12853] ? rcu_is_watching+0x15/0xb0 [ 609.563711][T12853] __x64_sys_bpf+0x7c/0x90 [ 609.563737][T12853] do_syscall_64+0x14d/0xf80 [ 609.563767][T12853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.563790][T12853] ? clear_bhb_loop+0x40/0x90 [ 609.563818][T12853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.563840][T12853] RIP: 0033:0x7f0de8e8c799 [ 609.563862][T12853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.563882][T12853] RSP: 002b:00007f0de70a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 609.563908][T12853] RAX: ffffffffffffffda RBX: 00007f0de9106180 RCX: 00007f0de8e8c799 [ 609.563924][T12853] RDX: 0000000000000028 RSI: 0000200000000c40 RDI: 0000000000000012 [ 609.563939][T12853] RBP: 00007f0de70a4090 R08: 0000000000000000 R09: 0000000000000000 [ 609.563954][T12853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.563967][T12853] R13: 00007f0de9106218 R14: 00007f0de9106180 R15: 00007ffd605c1dc8 [ 609.564003][T12853] [ 610.268588][ T5807] Bluetooth: hci6: command tx timeout [ 610.979773][T11756] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.398135][T11756] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.539129][T12802] chnl_net:caif_netlink_parms(): no params data found [ 611.791294][ T5807] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 611.791562][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2120'. [ 611.800746][ T5807] Bluetooth: hci1: unexpected event for opcode 0x203e [ 611.914326][T11756] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 611.914355][T11756] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 611.949379][T11756] bridge0: port 3(netdevsim0) entered disabled state [ 612.341885][ T5807] Bluetooth: hci6: command tx timeout [ 612.544788][T12879] FAULT_INJECTION: forcing a failure. [ 612.544788][T12879] name failslab, interval 1, probability 0, space 0, times 0 [ 612.544828][T12879] CPU: 0 UID: 0 PID: 12879 Comm: syz.1.2118 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 612.544859][T12879] Tainted: [L]=SOFTLOCKUP [ 612.544867][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.544881][T12879] Call Trace: [ 612.544890][T12879] [ 612.544900][T12879] dump_stack_lvl+0xe8/0x150 [ 612.544949][T12879] should_fail_ex+0x46b/0x600 [ 612.544982][T12879] should_failslab+0xa8/0x100 [ 612.545006][T12879] __kmalloc_noprof+0xdf/0x7b0 [ 612.545038][T12879] ? kfree+0x4d/0x6c0 [ 612.545065][T12879] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 612.545096][T12879] tomoyo_realpath_from_path+0xe3/0x5d0 [ 612.545132][T12879] ? tomoyo_path_number_perm+0x219/0x630 [ 612.545163][T12879] tomoyo_path_number_perm+0x246/0x630 [ 612.545197][T12879] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 612.545232][T12879] ? __lock_acquire+0x6b5/0x2cf0 [ 612.545296][T12879] ? __fget_files+0x2a/0x420 [ 612.545328][T12879] ? __fget_files+0x2a/0x420 [ 612.545354][T12879] ? __fget_files+0x3a6/0x420 [ 612.545380][T12879] ? __fget_files+0x2a/0x420 [ 612.545412][T12879] security_file_ioctl+0xc3/0x2a0 [ 612.545446][T12879] __se_sys_ioctl+0x47/0x170 [ 612.545483][T12879] do_syscall_64+0x14d/0xf80 [ 612.545512][T12879] ? trace_irq_disable+0x3b/0x150 [ 612.545537][T12879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.545561][T12879] ? clear_bhb_loop+0x40/0x90 [ 612.545589][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.545612][T12879] RIP: 0033:0x7fe5d8d4c799 [ 612.545634][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.545653][T12879] RSP: 002b:00007fe5d6f5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.545678][T12879] RAX: ffffffffffffffda RBX: 00007fe5d8fc6180 RCX: 00007fe5d8d4c799 [ 612.545694][T12879] RDX: 0000200000001340 RSI: 00000000c1105517 RDI: 0000000000000007 [ 612.545709][T12879] RBP: 00007fe5d6f5c090 R08: 0000000000000000 R09: 0000000000000000 [ 612.545723][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.545737][T12879] R13: 00007fe5d8fc6218 R14: 00007fe5d8fc6180 R15: 00007ffc55846a48 [ 612.545774][T12879] [ 612.545783][T12879] ERROR: Out of memory at tomoyo_realpath_from_path. [ 612.926900][T11756] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.132539][ T38] INFO: task kworker/0:5:5904 blocked for more than 144 seconds. [ 613.132567][ T38] Tainted: G L syzkaller #0 [ 613.132580][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.132591][ T38] task:kwor[ 613.132591][ T38] task:kworker/0:5 state:D stack:21440 pid:5904 tgid:5904 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 613.132656][ T38] Workqueue: usb_hub_wq hub_event [ 613.132693][ T38] Call Trace: [ 613.132701][ T38] [ 613.132728][ T38] __schedule+0x1553/0x5240 [ 613.132793][ T38] ? __pfx___schedule+0x10/0x10 [ 613.132832][ T38] ? schedule+0x90/0x360 [ 613.132862][ T38] schedule+0x164/0x360 [ 613.132893][ T38] schedule_timeout+0xc3/0x2c0 [ 613.132924][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 613.132952][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 613.132993][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 613.133021][ T38] ? wait_for_completion+0x274/0x5e0 [ 613.133052][ T38] wait_for_completion+0x2cc/0x5e0 [ 613.133096][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 613.133141][ T38] i2c_del_adapter+0x5c0/0x790 [ 613.133168][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 613.133203][ T38] ? dvb_usbv2_exit+0x4a1/0xb60 [ 613.133233][ T38] ? __pfx_i2c_del_adapter+0x10/0x10 [ 613.133263][ T38] ? dvb_usbv2_exit+0x935/0xb60 [ 613.133298][ T38] dvb_usbv2_probe+0x4c0/0x3c20 [ 613.133389][ T38] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 613.133420][ T38] ? __pm_runtime_set_status+0x99c/0xc70 [ 613.133465][ T38] usb_probe_interface+0x668/0xc90 [ 613.133512][ T38] ? __pfx_usb_probe_interface+0x10/0x10 [ 613.133533][ T38] really_probe+0x267/0xaf0 [ 613.133566][ T38] __driver_probe_device+0x18c/0x320 [ 613.133594][ T38] driver_probe_device+0x4f/0x240 [ 613.133622][ T38] __device_attach_driver+0x279/0x430 [ 613.133649][ T38] bus_for_each_drv+0x25b/0x2f0 [ 613.133675][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 613.133698][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 613.133736][ T38] ? rt_spin_unlock+0x160/0x200 [ 613.133770][ T38] __device_attach+0x2c8/0x450 [ 613.133796][ T38] ? __pfx___device_attach+0x10/0x10 [ 613.133820][ T38] ? rt_spin_unlock+0x160/0x200 [ 613.133853][ T38] device_initial_probe+0xa1/0xd0 [ 613.133880][ T38] bus_probe_device+0x12d/0x220 [ 613.133907][ T38] ? device_add+0x726/0xb80 [ 613.133943][ T38] device_add+0x7b6/0xb80 [ 613.133980][ T38] usb_set_configuration+0x1a87/0x2110 [ 613.134046][ T38] usb_generic_driver_probe+0x8d/0x150 [ 613.134082][ T38] usb_probe_device+0x1c4/0x3b0 [ 613.134110][ T38] ? __pfx_usb_probe_device+0x10/0x10 [ 613.134130][ T38] really_probe+0x267/0xaf0 [ 613.134162][ T38] __driver_probe_device+0x18c/0x320 [ 613.134189][ T38] driver_probe_device+0x4f/0x240 [ 613.134217][ T38] __device_attach_driver+0x279/0x430 [ 613.134246][ T38] bus_for_each_drv+0x25b/0x2f0 [ 613.134276][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 613.134301][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 613.134330][ T38] ? rt_spin_unlock+0x160/0x200 [ 613.134363][ T38] __device_attach+0x2c8/0x450 [ 613.134389][ T38] ? __pfx___device_attach+0x10/0x10 [ 613.134411][ T38] ? rt_spin_unlock+0x160/0x200 [ 613.134443][ T38] device_initial_probe+0xa1/0xd0 [ 613.134469][ T38] bus_probe_device+0x12d/0x220 [ 613.134496][ T38] ? device_add+0x726/0xb80 [ 613.134531][ T38] device_add+0x7b6/0xb80 [ 613.134567][ T38] usb_new_device+0x9f8/0x16e0 [ 613.134612][ T38] ? __pfx_usb_new_device+0x10/0x10 [ 613.134653][ T38] hub_event+0x2a49/0x4f60 [ 613.134753][ T38] ? __pfx_hub_event+0x10/0x10 [ 613.134797][ T38] ? process_scheduled_works+0xa25/0x1830 [ 613.134827][ T38] ? process_scheduled_works+0xa25/0x1830 [ 613.134859][ T38] process_scheduled_works+0xb02/0x1830 [ 613.134923][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 613.134960][ T38] ? assign_work+0x3d5/0x5e0 [ 613.134997][ T38] worker_thread+0xa50/0xfc0 [ 613.135060][ T38] kthread+0x388/0x470 [ 613.135084][ T38] ? __pfx_worker_thread+0x10/0x10 [ 613.135112][ T38] ? __pfx_kthread+0x10/0x10 [ 613.135136][ T38] ret_from_fork+0x51e/0xb90 [ 613.135170][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 613.135198][ T38] ? __switch_to+0xc7d/0x1450 [ 613.135230][ T38] ? __pfx_kthread+0x10/0x10 [ 613.135255][ T38] ret_from_fork_asm+0x1a/0x30 [ 613.135297][ T38] [ 613.135332][ T38] INFO: task syz.4.1561:10985 blocked for more than 144 seconds. [ 613.135351][ T38] Tainted: G L syzkaller #0 [ 613.135362][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.135373][ T38] task:syz.4.1561 state:D stack:26120 pid:10985 tgid:10984 ppid:5796 task_flags:0x400140 flags:0x00080002 [ 613.135435][ T38] Call Trace: [ 613.135443][ T38] [ 613.135457][ T38] __schedule+0x1553/0x5240 [ 613.135514][ T38] ? __pfx___schedule+0x10/0x10 [ 613.135557][ T38] rt_mutex_schedule+0x76/0xf0 [ 613.144831][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 613.144878][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 613.144902][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 613.144926][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 613.144949][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 613.144989][ T38] ? usbdev_open+0x182/0x790 [ 613.145017][ T38] ? usbdev_open+0x182/0x790 [ 613.145036][ T38] mutex_lock_nested+0x168/0x1d0 [ 613.145055][ T38] ? usbdev_open+0xa7/0x790 [ 613.145080][ T38] usbdev_open+0x182/0x790 [ 613.145104][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 613.145126][ T38] ? __pfx_usbdev_open+0x10/0x10 [ 613.145145][ T38] ? rt_spin_unlock+0x14f/0x200 [ 613.145170][ T38] ? rt_spin_unlock+0x160/0x200 [ 613.145193][ T38] chrdev_open+0x4d0/0x5f0 [ 613.145217][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 613.145238][ T38] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 613.145270][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 613.145289][ T38] do_dentry_open+0x83d/0x13e0 [ 613.145326][ T38] vfs_open+0x3b/0x350 [ 613.145345][ T38] ? path_openat+0x2e2b/0x38a0 [ 613.145374][ T38] path_openat+0x2e43/0x38a0 [ 613.145437][ T38] ? __pfx_path_openat+0x10/0x10 [ 613.145464][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 613.145487][ T38] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 613.145521][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 613.145557][ T38] do_file_open+0x23e/0x4a0 [ 613.145584][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 613.145613][ T38] ? __pfx_do_file_open+0x10/0x10 [ 613.145637][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 613.145682][ T38] ? alloc_fd+0x64e/0x6c0 [ 613.145725][ T38] do_sys_openat2+0x113/0x200 [ 613.145748][ T38] ? __se_sys_futex+0x3a8/0x450 [ 613.145768][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 613.145797][ T38] ? rcu_is_watching+0x15/0xb0 [ 613.145824][ T38] __x64_sys_openat+0x138/0x170 [ 613.145853][ T38] do_syscall_64+0x14d/0xf80 [ 613.145876][ T38] ? trace_irq_disable+0x3b/0x150 [ 613.145898][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.145918][ T38] ? clear_bhb_loop+0x40/0x90 [ 613.145942][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.145962][ T38] RIP: 0033:0x7f10da63cfce [ 613.145981][ T38] RSP: 002b:00007f10d88d5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 613.146003][ T38] RAX: ffffffffffffffda RBX: 00007f10d88d66c0 RCX: 00007f10da63cfce [ 613.146018][ T38] RDX: 0000000000008401 RSI: 00007f10d88d5c00 RDI: ffffffffffffff9c [ 613.146032][ T38] RBP: 00007f10d88d5c00 R08: 0000000000000000 R09: 0000000000000000 [ 613.146045][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 613.146058][ T38] R13: 00007f10da8f6038 R14: 00007f10da8f5fa0 R15: 00007fff5f898a48 [ 613.146091][ T38] [ 613.146134][ T38] [ 613.146134][ T38] Showing all locks held in the system: [ 613.146144][ T38] 4 locks held by pr/legacy/17: [ 613.146158][ T38] 1 lock held by khungtaskd/38: [ 613.146169][ T38] #0: ffffffff8ddcb840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 613.146222][ T38] 3 locks held by kworker/1:2/820: [ 613.146241][ T38] 2 locks held by kworker/0:3/1854: [ 613.146251][ T38] #0: ffff888019c03938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 613.146302][ T38] #1: ffffc90006b67c40 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 613.146365][ T38] 2 locks held by getty/5555: [ 613.146375][ T38] #0: ffff88802874c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 613.146421][ T38] #1: ffffc90003e732e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 613.146476][ T38] 5 locks held by kworker/0:5/5904: [ 613.146487][ T38] #0: ffff888021aee938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 613.146536][ T38] #1: ffffc90004fffc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 613.146584][ T38] #2: ffff888029cf1188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 613.146634][ T38] #3: ffff88803834f188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 613.146676][ T38] #4: ffff888038348150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 613.146732][ T38] 1 lock held by syz.4.1561/10985: [ 613.146745][ T38] #0: ffff888029cf1188 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x790 [ 613.146801][ T38] 2 locks held by kworker/u8:29/11743: [ 613.146813][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 613.146863][ T38] #1: ffffc900064e7c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 613.146913][ T38] 2 locks held by kworker/u8:31/11745: [ 613.146924][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 613.146972][ T38] #1: ffffc900068e7c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 613.147022][ T38] 5 locks held by kworker/u8:42/11756: [ 613.147034][ T38] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 613.147083][ T38] #1: ffffc90006997c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 613.147131][ T38] #2: ffffffff8f14b7c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 613.147181][ T38] #3: ffff88805fa150d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x117/0x3f0 [ 613.147227][ T38] #4: ffff888024da2300 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x3f0 [ 613.147278][ T38] 3 locks held by kworker/u8:45/11759: [ 613.147291][ T38] 3 locks held by syz-executor/12802: [ 613.147302][ T38] 2 locks held by syz.7.2123/12880: [ 613.147314][ T38] 6 locks held by syz-executor/12881: [ 613.147326][ T38] [ 613.147331][ T38] ============================================= [ 613.147331][ T38] [ 613.147340][ T38] NMI backtrace for cpu 1 [ 613.147357][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 613.147383][ T38] Tainted: [L]=SOFTLOCKUP [ 613.147404][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 613.147416][ T38] Call Trace: [ 613.147424][ T38] [ 613.147432][ T38] dump_stack_lvl+0xe8/0x150 [ 613.147461][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 613.147481][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 613.147509][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 613.147532][ T38] sys_info+0x135/0x170 [ 613.147558][ T38] watchdog+0xfd9/0x1030 [ 613.147586][ T38] ? watchdog+0x21a/0x1030 [ 613.147615][ T38] kthread+0x388/0x470 [ 613.147636][ T38] ? __pfx_watchdog+0x10/0x10 [ 613.147655][ T38] ? __pfx_kthread+0x10/0x10 [ 613.147677][ T38] ret_from_fork+0x51e/0xb90 [ 613.147712][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 613.147735][ T38] ? __switch_to+0xc7d/0x1450 [ 613.147762][ T38] ? __pfx_kthread+0x10/0x10 [ 613.147783][ T38] ret_from_fork_asm+0x1a/0x30 [ 613.147816][ T38] [ 613.147824][ T38] Sending NMI from CPU 1 to CPUs 0: [ 613.147851][ C0] NMI backtrace for cpu 0 [ 613.147870][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 613.147894][ C0] Tainted: [L]=SOFTLOCKUP [ 613.147900][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 613.147910][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 613.147935][ C0] Code: e8 ce e3 94 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8f ff fa fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 613.147951][ C0] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 613.147975][ C0] RAX: 1ffffffff332a020 RBX: 00000000000003fd RCX: 0000000000000000 [ 613.147988][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 613.148000][ C0] RBP: ffffffff99950730 R08: 0000000000000000 R09: 0000000000000000 [ 613.148011][ C0] R10: dffffc0000000000 R11: ffffffff852f6fb0 R12: dffffc0000000000 [ 613.148024][ C0] R13: 0000000000000000 R14: ffffffff999504a0 R15: 0000000000000000 [ 613.148036][ C0] FS: 0000000000000000(0000) GS:ffff88812633f000(0000) knlGS:0000000000000000 [ 613.148051][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.148064][ C0] CR2: 00007f9b19685690 CR3: 0000000064bda000 CR4: 00000000003526f0 [ 613.148082][ C0] Call Trace: [ 613.148088][ C0] [ 613.148097][ C0] wait_for_lsr+0x1aa/0x2f0 [ 613.148126][ C0] serial8250_console_write+0x120d/0x1b90 [ 613.148156][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 613.148181][ C0] ? console_flush_one_record+0x48f/0xb90 [ 613.148209][ C0] console_flush_one_record+0x68b/0xb90 [ 613.148237][ C0] ? console_flush_one_record+0xfa/0xb90 [ 613.148264][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 613.148289][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 613.148314][ C0] legacy_kthread_func+0x1b6/0x250 [ 613.148340][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 613.148365][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 613.148390][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 613.148419][ C0] kthread+0x388/0x470 [ 613.148436][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 613.148459][ C0] ? __pfx_kthread+0x10/0x10 [ 613.148476][ C0] ret_from_fork+0x51e/0xb90 [ 613.148500][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 613.148521][ C0] ? __switch_to+0xc7d/0x1450 [ 613.148543][ C0] ? __pfx_kthread+0x10/0x10 [ 613.148561][ C0] ret_from_fork_asm+0x1a/0x30 [ 613.148586][ C0] [ 613.168934][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 613.169028][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 613.169068][ T38] Tainted: [L]=SOFTLOCKUP [ 613.169076][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 613.169088][ T38] Call Trace: [ 613.169102][ T38] [ 613.169112][ T38] vpanic+0x56c/0xa60 [ 613.169156][ T38] ? __pfx___schedule+0x10/0x10 [ 613.169189][ T38] ? __pfx_vpanic+0x10/0x10 [ 613.169226][ T38] panic+0xc5/0xd0 [ 613.169252][ T38] ? __pfx_panic+0x10/0x10 [ 613.169280][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 613.169308][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 613.169333][ T38] watchdog+0x1023/0x1030 [ 613.169363][ T38] ? watchdog+0x21a/0x1030 [ 613.169393][ T38] kthread+0x388/0x470 [ 613.169414][ T38] ? __pfx_watchdog+0x10/0x10 [ 613.169435][ T38] ? __pfx_kthread+0x10/0x10 [ 613.169457][ T38] ret_from_fork+0x51e/0xb90 [ 613.169486][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 613.169510][ T38] ? __switch_to+0xc7d/0x1450 [ 613.169537][ T38] ? __pfx_kthread+0x10/0x10 [ 613.169558][ T38] ret_from_fork_asm+0x1a/0x30 [ 613.169592][ T38] [ 613.170157][ T38] Kernel Offset: disabled