last executing test programs: 2m35.820273122s ago: executing program 2 (id=1686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000500b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b704000001000500850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m35.706614195s ago: executing program 2 (id=1687): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = memfd_create(0x0, 0x3) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000008c0)={'syzkaller1\x00', @link_local}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000029c0)=[{{&(0x7f0000002a00)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40) shutdown(r2, 0x1) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x265}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x2, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x4000002, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000001900)={0x0, 0xd90, "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"}, &(0x7f0000002940)=0xd98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000002980)={r10, 0x6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) open(&(0x7f00000000c0)='./file0\x00', 0xc40c3, 0x50) 2m34.782431005s ago: executing program 2 (id=1691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) ftruncate(0xffffffffffffffff, 0x7000000) syz_usb_connect(0x5, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f0000002180)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rseq(&(0x7f00000021c0), 0xffffffffffffff02, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000020c0)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000002100)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) unshare(0x2c020400) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000002400)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000002440)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000002480)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) splice(r0, &(0x7f00000023c0)=0x89, r4, &(0x7f00000024c0)=0x1, 0x7f, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) 2m32.076204061s ago: executing program 2 (id=1699): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22401, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000580)={&(0x7f00000005c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) 2m31.089787133s ago: executing program 2 (id=1702): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x1, 0x0, 0xfa11, 0xac}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e06, 0x408, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents(r2, &(0x7f00000001c0)=""/35, 0x23) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x12, 0x11}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) sendmmsg$inet(r1, 0x0, 0x0, 0x2400c8c4) ioctl$SET_DISK_FAULTY(0xffffffffffffffff, 0x929, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0x1}}}, 0x24}}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES64], 0xc8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m28.69888096s ago: executing program 2 (id=1711): socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$video4linux(0x0, 0x806, 0x1233c1) (async) syz_open_dev$video4linux(0x0, 0x806, 0x1233c1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) syz_io_uring_setup(0x51dd, &(0x7f0000000380)={0x0, 0x24b3, 0x1000, 0x3, 0xd9}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f00000005c0)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r1, r1, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x22, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000600)={'\x00', 0xdfe, 0x7fff, 0x10000, 0x9, 0x8}) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000600)={'\x00', 0xdfe, 0x7fff, 0x10000, 0x9, 0x8, 0x0}) sched_setattr(r2, &(0x7f0000000680)={0x38, 0x0, 0x0, 0x7, 0x7, 0x5, 0xcec, 0xce, 0x1ff, 0x6}, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000740)={r2}) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000140)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f00000006c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f00000000c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=@newtaction={0x138, 0x30, 0xffff, 0x0, 0x25ffdbfe, {}, [{0x124, 0x1, [@m_ife={0x120, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8000}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0xe44, 0x6, 0xc3, 0x9}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80000001}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xa6, 0x6, "943730726e689b611a542644d90ceec1b6c2c2cb5c8a0be98504b6f565966084376242c988f3c74bda4d35dacb509c9deec8ae43c765c0ed85311854f21b3a97a87b8a379763d384ac0b6360a4405824a51d0628088ea3c9ca70b278360071a4a1cb00295de9aaffabe1510d307df1c5d9475760bae26f96c5e9da0298e65e436b0114cba84a313117bea3c75b2d63d2776af833e0c6ddd4f3600a14bdd0a3c9482a"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=@newtaction={0x138, 0x30, 0xffff, 0x0, 0x25ffdbfe, {}, [{0x124, 0x1, [@m_ife={0x120, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8000}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0xe44, 0x6, 0xc3, 0x9}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80000001}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xa6, 0x6, "943730726e689b611a542644d90ceec1b6c2c2cb5c8a0be98504b6f565966084376242c988f3c74bda4d35dacb509c9deec8ae43c765c0ed85311854f21b3a97a87b8a379763d384ac0b6360a4405824a51d0628088ea3c9ca70b278360071a4a1cb00295de9aaffabe1510d307df1c5d9475760bae26f96c5e9da0298e65e436b0114cba84a313117bea3c75b2d63d2776af833e0c6ddd4f3600a14bdd0a3c9482a"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8000000006030b0400000000000000000200fffe540004802800018007028008000140000000020800024000000013000000000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x200048c6) r7 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r7, 0x0, 0x40000000, &(0x7f0000000b80)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@getqdisc={0x34, 0x26, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffff}, {0x1f, 0x4}, {0xd, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@getqdisc={0x34, 0x26, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffff}, {0x1f, 0x4}, {0xd, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_getattr(r7, &(0x7f0000000b00)={0x38}, 0x38, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x8000002) write(0xffffffffffffffff, &(0x7f0000000d00)='0', 0x1) (async) write(0xffffffffffffffff, &(0x7f0000000d00)='0', 0x1) rmdir(&(0x7f0000000d40)='./cgroup.cpu/test\x00') 2m13.470339478s ago: executing program 32 (id=1711): socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$video4linux(0x0, 0x806, 0x1233c1) (async) syz_open_dev$video4linux(0x0, 0x806, 0x1233c1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) syz_io_uring_setup(0x51dd, &(0x7f0000000380)={0x0, 0x24b3, 0x1000, 0x3, 0xd9}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f00000005c0)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r1, r1, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x22, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000600)={'\x00', 0xdfe, 0x7fff, 0x10000, 0x9, 0x8}) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000600)={'\x00', 0xdfe, 0x7fff, 0x10000, 0x9, 0x8, 0x0}) sched_setattr(r2, &(0x7f0000000680)={0x38, 0x0, 0x0, 0x7, 0x7, 0x5, 0xcec, 0xce, 0x1ff, 0x6}, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000740)={r2}) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000140)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f00000006c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f00000000c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=@newtaction={0x138, 0x30, 0xffff, 0x0, 0x25ffdbfe, {}, [{0x124, 0x1, [@m_ife={0x120, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8000}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0xe44, 0x6, 0xc3, 0x9}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80000001}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xa6, 0x6, "943730726e689b611a542644d90ceec1b6c2c2cb5c8a0be98504b6f565966084376242c988f3c74bda4d35dacb509c9deec8ae43c765c0ed85311854f21b3a97a87b8a379763d384ac0b6360a4405824a51d0628088ea3c9ca70b278360071a4a1cb00295de9aaffabe1510d307df1c5d9475760bae26f96c5e9da0298e65e436b0114cba84a313117bea3c75b2d63d2776af833e0c6ddd4f3600a14bdd0a3c9482a"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=@newtaction={0x138, 0x30, 0xffff, 0x0, 0x25ffdbfe, {}, [{0x124, 0x1, [@m_ife={0x120, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8000}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0xe44, 0x6, 0xc3, 0x9}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80000001}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xa6, 0x6, "943730726e689b611a542644d90ceec1b6c2c2cb5c8a0be98504b6f565966084376242c988f3c74bda4d35dacb509c9deec8ae43c765c0ed85311854f21b3a97a87b8a379763d384ac0b6360a4405824a51d0628088ea3c9ca70b278360071a4a1cb00295de9aaffabe1510d307df1c5d9475760bae26f96c5e9da0298e65e436b0114cba84a313117bea3c75b2d63d2776af833e0c6ddd4f3600a14bdd0a3c9482a"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8000000006030b0400000000000000000200fffe540004802800018007028008000140000000020800024000000013000000000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x200048c6) r7 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r7, 0x0, 0x40000000, &(0x7f0000000b80)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@getqdisc={0x34, 0x26, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffff}, {0x1f, 0x4}, {0xd, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@getqdisc={0x34, 0x26, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffff}, {0x1f, 0x4}, {0xd, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_getattr(r7, &(0x7f0000000b00)={0x38}, 0x38, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x8000002) write(0xffffffffffffffff, &(0x7f0000000d00)='0', 0x1) (async) write(0xffffffffffffffff, &(0x7f0000000d00)='0', 0x1) rmdir(&(0x7f0000000d40)='./cgroup.cpu/test\x00') 11.509089977s ago: executing program 5 (id=2097): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) r1 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000100)={0x1, 0x0, 0x3, 0x9, 0x8b, 0xed1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB]) landlock_create_ruleset(&(0x7f0000000000)={0x1020, 0x0, 0x1, 0x820, 0x8}, 0x30, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) timer_getoverrun(r0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000500)={0x42, 0x0, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000580)={&(0x7f00000005c0)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r7 = landlock_create_ruleset(&(0x7f0000000600)={0x4905, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0xa) r8 = dup3(r5, r6, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000680)={0x42, 0x0, 0x0, 0xffffffff}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x400000b2, 0x0, 0x9}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40080c0) 11.276612131s ago: executing program 1 (id=2098): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000000, 0x8, 0x0, 0x5, 0xd7}, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$usbfs(&(0x7f00000005c0), 0x206, 0xa0582) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r3 = syz_open_dev$usbfs(&(0x7f0000000640), 0x76, 0x501901) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 10.517879238s ago: executing program 3 (id=2099): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) r0 = socket(0x1a, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000018c0)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$tipc(0x1e, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x4001, 0x0) write(r6, 0x0, 0x0) bind$tipc(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000019c0)={0x42, 0xfffffbfc, 0x2}, 0x2e) sendmsg$tipc(r5, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0xe, &(0x7f0000000780)=ANY=[@ANYRES8], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 10.348848866s ago: executing program 5 (id=2101): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000a00)='.\x00', 0x0, 0x0) flock(r0, 0x2) flock(r0, 0x5) clock_gettime(0x0, &(0x7f0000000a40)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000a80)={{r1, r2+10000000}, {0x0, 0x989680}}, &(0x7f0000000ac0)) mq_open(0x0, 0x42, 0x54, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000b00)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write(0xffffffffffffffff, &(0x7f0000000bc0)='100000', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000c40)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000cc0)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r3, 0x6}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000e00)={0x0, 0x3d5e, 0x21804, 0x2, 0x30b}, &(0x7f0000000e80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40e, 0x1, 0x2, 0x275, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x402f, 0x2, 0x3, 0x267}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x38e, 0x20, 0x2, 0xdc, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f93, 0x8, 0x2, 0x159, 0x0, r0}}], 0x4, &(0x7f00000053c0)={0x2e, 0x28, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x2, 0x78a, 0x0, &(0x7f0000005440)=@buf_512="5c7e507584af21ef65f74f346cb565a27fce6db2cf50358e4a3bd5e43bf43ed1358c539b5b0c758ff827b6569eba191bc0bad6072972e303a87f4b994d1afb26c4bb922bd2d344bd33229bbe21f6bcec4a478c83b1589fc89b100fe64ef1da6463490130dc71bde03ded664fabcd4cb370a2f052106d49396a8d71cfe21950a3ac37e30b8ebd6708450b2650dd746142e7d27b0c68e8d319c2593a70141039c7ddb611a9ff42b4c7103af4305b177a7c2145d86dd0fa18a55d7919439f922623e921fb86d441971cdc4013a66c18be45b3d35d76ea6bf989616a09c1401b672ee255fd711a60a4680dcb4b34e255c4fd248325e5ae48c87d3bb9838ff711aff3b850a91683bb065ece42bf0e7af18bf33d64eb6d35eceb8d0100ccafaa7ec7ed9bc170fc1f6ff136ca213c8b323f150e3e0a9bc77110263fde0210acd6e2c3633490ed1409625a03b536b743a717b9ea97cc96b2aa65e43bbfe4ad609c058fef4b8a6799cccb8cdbaecbe81f0f6949b78d3bbd773647e06895caef78023daad6b5fce8bf14760234ced879efa5d5e7cddb418a6d7186651352bf1ec587a3f3aad7b0e05ef863c8ce5e185a15c56121976afdfd7a268ef9a47aa9ad5415dbd42775b41c4c85dc984b16bffb21719b45fdb0b5ce3a6e82c16961317b06c50f8364fb44ccdb9c5630eba245798493752dbfc64f76e76dd09a56bc0d94a755af95b0"}}, &(0x7f0000006440)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000006480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006500)={&(0x7f0000006540)={0x2c, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7430}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x18) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000006580)={&(0x7f00000065c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000006600)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"/293], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x84) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000066c0), 0x800, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x105b00, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 10.178129322s ago: executing program 1 (id=2102): r0 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000380)={0x0, 0x4c4b40}, &(0x7f00000003c0)) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8d) 9.62202452s ago: executing program 3 (id=2103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100050085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.208038474s ago: executing program 4 (id=2105): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x1, 0x10, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff], 0xeeef0000, 0x2011c0}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) write(0xffffffffffffffff, &(0x7f0000000180)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df6653", 0x8e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}}) (fail_nth: 15) 9.20593551s ago: executing program 3 (id=2106): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettid() timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x30f600) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x1}) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) mmap(&(0x7f00000d8000/0x2000)=nil, 0x2000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r1, &(0x7f0000001e80)=""/4090, 0xffa) 8.493439702s ago: executing program 3 (id=2107): r0 = socket(0x11, 0xa, 0x5) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x1e0, 0x100) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f00000002c0)="470300d35d00", 0x0, 0x0, 0x30520cf7f25f0c64, 0x1, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6375fd82}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000140)="9c91d7798c7f1b4ca046b42f0c3d", 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 8.396400625s ago: executing program 4 (id=2108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) close(r2) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x45) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r1, 0x100, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="0a001a0008021100000100000a0006"], 0x34}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f00000004c0)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r5, &(0x7f0000000500)="0802110000010802110000000800", 0xe) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8.377195872s ago: executing program 1 (id=2109): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)={0x10c, 0x12, 0x1, 0x70bd27, 0x25cfdbff, {0x3, 0x9, 0x4, 0xd, {0x4e23, 0x4e22, [0x1000, 0x0, 0xff, 0x60a], [0x10001, 0xfffffff0, 0x0, 0x80000001], 0x0, [0x8, 0xd]}, 0x81, 0x1d8dac21}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "ef382d2e75f30e925282ddaf931c233e604d4d6fd834d03a65953384ce3aba1c4092e8d9a181a2e44a"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "9004bfda0f3a438388f2ccbfd9448e746f5fb12ee40283eb45ac859fc8e7585be14062057fbd49c8ae895c066e1887fd820eb20b9f404da6911a9263169e26cff15cd981cc0676737323820f45c38f4aa3f990a5b71ed4973f6c0573afe22fc58eec5c5a1265ae2931c98bded030d667e587e7d6cb"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "f8f10a045ff55aa74f1b4f37d976758f"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008041) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010025bd4d00f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000300)={'dummy0\x00'}) r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="b20e14370f330000b0e1bb19877c26d389f832c449f82ad063f40edabf8fd5a8b82cf6380fd1395d5ace129bc1"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r8, &(0x7f0000001d00)=[{{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001840)=[{&(0x7f0000000840)="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", 0x1000}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="14000000000000000000000001000000090000000000000014000000000000000000000002007290719b0000000000007800000000000000000000000700f3997987d9b31697050de09802ca4ad05e3b6271ab06077045e2112a0611366d0ae731c1ef7ee26afc2ebe44204c80000001ff00008000000000050000000800000008000000040000000789"], 0xa8}}, {{&(0x7f0000001900)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001940)="6008af92c771cbe06f6fcc1521ba392ad4db3db8a2588843570a873b9f2abfd23668aa12adc2e8752819d9a98ac8349ee5f5537eb52ae9d048dbf246d1bfd5cf880946b913ecd490da2c1275b38a447fc2c9b6f3a8b24c0be02d1912335001be9b814fba81816fcb426d47377179acd918aac965c87c8ada1f8f7c42d376d09b6de3452e2549b045e31f76b4d3f0dfa1c12c", 0x92}, {&(0x7f0000001a00)="ead41880b5d3686d2163cbd225239c4ec21c6e8b10803245b3fb04fdb6169db8526d7cf7ce61c9b7562b0032b4d20536e144ad9bef10a8b1d2e8e22fc3a25e32cba426a75aab7ce228d8827333144f23f0c86ed943dc8adfb7342f128cc1261fe7345b09523d2584a5147235fb89c62a409220d0229216245fd0ad02bcb1b0912961e8345f4dc92b24d76256ebb9249852640625f0d5b3259a4422e999ac8c5a55", 0xa1}, {&(0x7f0000001ac0)="e76d81b290c4c648d2a0c3d52ce6d048f7ea791a971d0381415c5223a42ccd90fc563f6c137f09865aeae96b56227c5277776c0a08eb9d8cd55e1eaf8ca230f7b4b09a3c0c0fc0bc6a0aae7aa0fd061fe39cc111b720ec6e7c5a1e12a126e581feca57257c6cf599820dc3ccb18ad7d1103307089a3cccfb63d5fa34e7b0e1e2a6be74711224e352111bad947f0bb611c3a9697cb5", 0x95}], 0x3, &(0x7f0000001c40)}}], 0x2, 0x2090) write(r8, &(0x7f0000000480)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4c", 0x7e) socket$pppl2tp(0x18, 0x1, 0x1) 8.04869582s ago: executing program 4 (id=2111): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) fanotify_init(0x200, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x80000000) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffec1, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000240)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0x43a2a1553c2ff8d7) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x23, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x800, 0xf, 0x2, 0x1080, 0x4, 0x2}, 0x30, 0x1) landlock_restrict_self(r4, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) fanotify_init(0x200, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x80000000) (async) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffec1, 0x0, 0x0, 0x0) (async) recvfrom$inet(r1, &(0x7f0000000240)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0x43a2a1553c2ff8d7) (async) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) (async) listen(r0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) (async) recvfrom(r2, &(0x7f00000001c0)=""/62, 0x3e, 0x23, 0x0, 0x0) (async) landlock_create_ruleset(&(0x7f0000000000)={0x800, 0xf, 0x2, 0x1080, 0x4, 0x2}, 0x30, 0x1) (async) landlock_restrict_self(r4, 0x4) (async) 7.911104565s ago: executing program 0 (id=2112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000000, 0x8, 0x0, 0x5, 0xd7}, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$usbfs(&(0x7f00000005c0), 0x206, 0xa0582) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r3 = syz_open_dev$usbfs(&(0x7f0000000640), 0x76, 0x501901) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 7.893710314s ago: executing program 3 (id=2113): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x8800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) dup(0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) inotify_init() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) socket(0x10, 0x80002, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000001880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f00000038c0)={0xa0, 0x0, r3, {{0x2, 0x3, 0x77, 0x5, 0x43a, 0x4, {0x6, 0x7, 0x1, 0x4, 0x2, 0x4, 0x1, 0x80000000, 0xfffff800, 0x1000, 0x6, 0x0, r4, 0x8, 0x98}}, {0x0, 0x4}}}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_ethernet(0x22, 0x0, &(0x7f0000003980)={0x1, 0x1, [0xd0c, 0x83f, 0x2de, 0x5af]}) r5 = fsopen(&(0x7f00000039c0)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) unlinkat(r6, &(0x7f0000003a00)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000003a40)={0x13, 0x10, 0xfa00, {&(0x7f0000003a80), 0xffffffffffffffff, 0xe60f0b833be3338c}}, 0x18) 6.343704857s ago: executing program 4 (id=2114): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x41, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) r3 = add_key$keyring(&(0x7f0000000480), 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f00000004c0)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000600)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000680)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f00000006c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = add_key$user(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), 0x390, 0xfffffffffffffffd) add_key$user(0x0, &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)="01", 0x1, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000840)='user\x00', &(0x7f0000000880)=',(+\x00') keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={'sha256\x00'}}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000940)={r10, 0x8c, 0xd6}, &(0x7f0000000c40)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861315f6d620000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000d9992c981c2e946afa31c2a6416b00000000"], &(0x7f0000000a00)="f9e4217198c336c83d51f5290ff200b0edc96e2dc80b0b15bf99155f4aa2f8d5bae1be880697a40d25ca503a433d19f91bfd23cf0c9b89391aeb265f3e70ee00c1d3f975df148411cacfaf971c0185aafd821c680effc440c55e3298a13098db006ebf90a00737f4b1b9b08ae57a9843d90125ba1a6fe43227ab063e101ea2bba890820551b062c6a175c33c", &(0x7f0000000ac0)=""/214) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="660783", @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) pivot_root(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)='.\x00') syz_ublk_setup_queues(r2, r8, &(0x7f0000000bc0)={0x0, 0x1f98, 0x8000, 0xfffffffd, 0x10d}, &(0x7f0000001440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2000, 0x1006, 0x15a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x2, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f17, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc22d, 0x2000, 0x2, 0xbd, 0x0, r2}}], 0x1, &(0x7f0000000ec0)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0x8, 0x80000000, 0x8, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x13, 0x80000000}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="53411800f673cf400000000000000f0000580018110000e00bcd5d652a06f04931c5bbda6f7254a456d1b80c7df2068982f2f97d8c8a9b059ca4c0bc0c36e731961b6bf32b03345d2c33ee9b6e3cda92482523f24c9cdf347ac1d0976aae092f2a54a50f70272251", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000001000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', r12, 0x25, r0, 0x8, &(0x7f0000001180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000011c0)={0x0, 0x5, 0x100, 0x99}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001200)=[r2, r2, r2], &(0x7f0000001240)=[{0x4, 0x5, 0x4, 0x4}, {0x3, 0x1, 0x9, 0x9}], 0x10, 0x3}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}, 0x1, 0x0, 0x0, 0x801}, 0x0) 5.973177773s ago: executing program 0 (id=2115): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f00000005c0)={0x0, 0x2516, 0x1f480, 0x0, 0x399}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000700), 0x208e24b) mmap(&(0x7f000061b000/0x2000)=nil, 0x2000, 0x1000003, 0x28011, r4, 0x4ca94000) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000a80)=""/140, 0x8c}], 0x1, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000880)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x524, &(0x7f00000002c0)={0x0, 0x1925, 0x4000, 0x8, 0x223, 0x0, r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x3, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x1a4f, 0xdd63, 0x20, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f00000008c0)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0x3ff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_create(0x6, &(0x7f00000000c0)={0x0, 0xe, 0x2, @tid=r7}, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 5.888788428s ago: executing program 5 (id=2116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000001680)='./file1\x00', 0x0, 0x0, 0x1000) (async) execveat(0xffffffffffffff9c, &(0x7f0000001680)='./file1\x00', 0x0, 0x0, 0x1000) syz_clone3(&(0x7f00000016c0)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f00000016c0)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$hiddev(&(0x7f00000015c0), 0x2, 0x882000) (async) r4 = syz_open_dev$hiddev(&(0x7f00000015c0), 0x2, 0x882000) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000001600)={0x1, 0x2, 0x4}) sendmsg$NFT_BATCH(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='net/fib_trie\x00') preadv(r5, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) (async) preadv(r5, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) 5.153924048s ago: executing program 4 (id=2117): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettid() timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x30f600) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x1}) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) mmap(&(0x7f00000d8000/0x2000)=nil, 0x2000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents64(r1, &(0x7f0000001e80)=""/4090, 0xffa) 4.928749333s ago: executing program 1 (id=2118): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001380)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={0x18, 0x42, 0x1, 0x0, 0x0, {0x2, 0x1}, [@generic="0f"]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000013c0)=[@text64={0x40, &(0x7f0000001400)="f7611a4c98b912030000b8ff210000ba000000000f30410ffeb94a370000f3420f2267f30f090fc732b805000000b95de000000f01d90f01c93e0f013e", 0x3d}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001440)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x3, r5, 0x2007) r6 = open(&(0x7f0000000000)='./file0\x00', 0x440000, 0x11b) getdents64(r6, &(0x7f0000000040)=""/82, 0x52) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) close(0x3) r8 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) write$apparmor_current(r7, &(0x7f0000001300)=@hat={'permhat ', 0x4}, 0x1b) write$tun(r7, 0x0, 0x204) mq_notify(r6, &(0x7f0000001140)={0x0, 0x12, 0x5, @thr={&(0x7f0000001180)="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", &(0x7f0000000140)="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"}}) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x7ffffffffd) ptrace$pokeuser(0x6, r5, 0x388, 0x8000) ptrace$pokeuser(0x6, r5, 0x388, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.294713434s ago: executing program 4 (id=2119): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000087000000000000400000000000dd0837"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000084000000b7000000000000009500"/64], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f0000000400)="b800000500000000", &(0x7f0000000440)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x6, 0x1, 0x6, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7, 0xfffffffb, 0x31b7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x80, 0x7, 0x2, 0x7, {{0x14, 0x4, 0x1, 0xe, 0x50, 0x67, 0x0, 0x6, 0x29, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x1b, 0x0, [{0x1, 0x4, "16f3"}, {0x1, 0xa, "51d89d8c2009e570"}, {0x1, 0x7, "b37e2c121e"}]}, @generic={0x94, 0x12, "9dcfa7499cd05441d63514580faa5627"}, @generic={0x83, 0xe, "fbe2bb4b316bcd83ee610ece"}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="144800001000010000000000000000000000000a2c000000180a0101000b0ec3000000de000000000900010073797a30000000f64a00022273797a300000000014000000100001000000000008000000000000ff"], 0x54}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000000)={'sit0\x00', r3, 0x40, 0x0, 0xfffffeff, 0x8001, {{0x1a, 0x4, 0x0, 0x2, 0x68, 0x68, 0x6, 0x9, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@cipso={0x86, 0x3f, 0x0, [{0x2, 0x9, "472077ff7f7032"}, {0x0, 0xb, "e257aa5358272828c3"}, {0x1, 0xc, "2278418b2d39c470aa85"}, {0x2, 0x7, "383d4d8be2"}, {0x1, 0x6, "4df7a35d"}, {0x2, 0x3, "10"}, {0x1, 0x9, "cd01083d1d59d7"}]}, @generic={0x7, 0xf, "ec1b82462b6f1ae438f4331f31"}, @end, @timestamp_prespec={0x44, 0x4, 0x54, 0x3, 0x9}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'syztnl0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xae, 0x4, 0x50, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x8000, 0x0, 0x5}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @initdev, @multicast2}, &(0x7f0000000940)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000980)={@private2}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000a40)={'syztnl2\x00', r2, 0x4, 0x9, 0x4, 0x4, 0x44, @mcast1, @mcast2, 0x40, 0x47, 0xc4, 0x400}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000ac0)={@remote, @multicast2}, &(0x7f0000000b00)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={r0, 0x58, &(0x7f0000000b80)}, 0x10) socket$igmp6(0xa, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000c00)='net/raw6\x00') preadv(r5, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/92, 0x5c}], 0x1, 0x10a6, 0x6) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r6) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000d40), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x10c000) r8 = syz_open_procfs(0x0, &(0x7f0000000d80)='pagemap\x00') pread64(r8, &(0x7f0000000dc0)=""/102400, 0xffffff8c, 0x200000) r9 = syz_open_dev$evdev(&(0x7f0000019dc0), 0x0, 0x882) ioctl$EVIOCGMASK(r9, 0x80104592, &(0x7f0000019e00)={0x1, 0xe4ff71c170d132d5, &(0x7f0000019e40)="fccdccc6aefa"}) 3.556486748s ago: executing program 1 (id=2120): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000047c0)=@nat={'nat\x00', 0x19, 0x3, 0xcd0, [0x200000003980, 0x0, 0x0, 0x2000000039b0, 0x200000004548], 0x0, 0x0, &(0x7f0000003980)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000060000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff020000000300000022000000890d6e65747063693000000000000000000076657468305f6d61637674617000000070696d3672656730000000000000000064756d6d793000000000000000000000bbbbbbbbbbbb0000ffffff0000000000000000ffff0000000000b8090000400a0000700a0000616d6f6e67000000000000000000000000000000000000000000000000000000b0080000000000000c000000800400000200000001000000060000007d0200007d02000009000000e1070000080000000400000009000000faffffff0300000005000000010000000300000003000000040000000400000083aa0000070000006a04000002000000fbffffff020000000600000006000000ff030000e900000007000000000000000100000001000000ffffff7f0000000008000000070000008eaa00000a000000feffffff0000000002000000080000007f0000000300000006000000010000009a000000090000000c0a00000900000004000000f6000000000000000900000003000000cb070000cd00000008000000050000005effffff040000000600000001000000310100000400000003000000050000000800000002000000d41f00000100000004000000080000000c0000000b000000030000000d0000000700000001000080ff0f000008000000a42bffffffffffff64000000030000000b000000000000000f000000160000000800000040000000080000006a500000630000000500000081000000ff01000000000000050000000900000003000000e2be00002c000000fbffffff0000000003000000000100000600000081000000030000008100000080000000080000000b0000000100010000040000ffffffff09000000000000000600000007000000000000000000000077090000c0feffff00080000000008000800000002000000000000000200000003000000ffff00008b6600000700000000000000020000000000010008000000d9feffff08000000dd0dfa740700000002000000bd000000000800000b00000005000000b700000081000000ff7f0000010a000007000000010000002c1000000500000000000080ff0f0000080e000001000000060000000100000004000000ff07000004000000008000008f5a13f107000000010400008001000014010000e1c900001e0c0000020000007c07000080000000ff070000f8ffffff01040000ce6f0000060000000900000009000000070000005a0500000002000003000000f000000005000000090000001a000000900000000f0000000000000001000000090000000b0000009bc400000500000000800000070000000800000002000000780c0000c4000000070000006ec9000006000000dc00000000080000ad0d0000060000000800000007000000ff0700009e00000000000000e3000000020000000100000004000000b3ffffff0104000000000c006300000008000000ff0f000004000000ffff00000104000008000000760b000001000000000040008a0c0000030000000600000001000000540000000900000004000000bb0000000600000038060000fdffffff01000000080000000700000001000000fe00000007000000010000800800000005000000020000006563000041dbe27706000000090000000200000081000000ffffffff43040000ffffffff00000000040000003d000000ac14141d7f0000007f000000e00000010700000005000000000000000800000000000000ac1e000104000000a8000000e00000020900000009000000ac1414260800000001000000ac1e000100040000090000000e00000002000000ff07000000000000ff07000000010000dafcffff010000800800000009000000000900000000000008000000f9ffffff00000000040000000000000004000000000400000100000005000000050000001802000000000000360e000027ffffff2a00000009000000ffffffffff07000004000000fbffffff0400000032b500000400000005000000040000000700000008000000050000000500000004000000020000000a00000006000000010000000e0000000400000000806800800000000200000005000000cd05000001000000bb2c0000ff00000007000000106b000005000000080000000900000006000000070000006a4200000700000028000000010000000080000005000000050000000001000004000000ff7f00007e0000007f000000ff0300002200000006000000000000000e0000000004000004000000020000008200000005000000f2fa000002000000040000000200000005000000ec0a0000f0ffffff010000009e00000000010000030000000002000000100000070000000600000006000000800000000500000007000000e109000009000000020000000400000000000000ff07000009000000020000003f0000000900000004000000de0c00000200000001000000070000001a71885d0500000006000000080000000300000010000000010000007d0b00000e0000000600000004000000060000000002000000000000090000000b00000000000000800000000200000003000000020000000800000006000000050000000400000004000000040000000300000000000009ff01000000000080040000000a0000000400000009000000ff01000000000000ff0300000b0e0000010000000a0000000100000000800000090000000d000000050000000600000006000000050000001c02000001000000ffffffff080000000400000062050000ff0300003d150000810000000000000006000000ce540000faffffff050000000900000007000000d108000005000000000000000500000007000000020000000600000003000000ff000000ff0700002fdc000009000000040000000700000002000000feffffff237dd501e200000006000000070000000300000007000000060000000900000005000000070000000400000002000000260e0000000000000100000003000000d900000009000000060000000300000009000000008000000000000006000000060000000700000001000000ff000000020000000400000005000000840b0000fcffffff800000000300000009000000020000000100008001000000020000000800000008000000000000000000000009000000ff00000000000000000000002a600000020000000500000004000000faffffff0400000000000000030000e378f0249cdb84f700ac14141002000000feffffff7f0000010300000001000000e00000020000000073747000000000000000000000000000000000000000000000000000000000004800000000000000050000000300a6030100ffffffffffffffffff00ffff00000a00000005000000090008000000000000000000ff00ffff4e224e2200000700030003000800050008000500a00404006c6f670000000000000000000000000000000000000000000000000000000000280000000000000005c8b74bdeedad59677d4a4539c7fc8b3fb08237cf59a67067206f71d30f21000c00000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb0000ffffffff00000000415544495400000000000000000000000000000000000000000000000000000008000000000000000200000000000000030000000000000000077465616d5f736c6176655f310000000076657468315f746f5f7465616d0000007767320000000000000000000000000076657468315f746f5f62726964676500aaaaaaaaaabb00ffffff0080a3cb2decf3d600ffffffff000000c0000000c0000000f800000068656c7065720000000000000000000000000000000000000000000000000000280000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa120000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000fcffffff01000000110000006700000000f7627269646765300000000000000000006272696467655f736c6176655f3100006d6163766c616e31000000000000000077673100000000000000000000000000aaaaaaaaaa0effffff0000ffbbbbbbbbbbbbffff00ff000000007000000070000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fdffffff00000000"]}, 0xd48) 3.212300304s ago: executing program 1 (id=2121): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000a00)='.\x00', 0x0, 0x0) flock(r0, 0x2) flock(r0, 0x5) clock_gettime(0x0, &(0x7f0000000a40)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000a80)={{r1, r2+10000000}, {0x0, 0x989680}}, &(0x7f0000000ac0)) mq_open(0x0, 0x42, 0x54, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000b00)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000bc0)='100000', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000c40)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000cc0)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r4, 0x6, '\x00', 0x0, r3}, 0x50) connect$netlink(r4, &(0x7f0000000d80)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000e00)={0x0, 0x3d5e, 0x21804, 0x2, 0x30b, 0x0, r3}, &(0x7f0000000e80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40e, 0x1, 0x2, 0x275, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x402f, 0x2, 0x3, 0x267}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x38e, 0x20, 0x2, 0xdc, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f93, 0x8, 0x2, 0x159, 0x0, r0}}], 0x4, &(0x7f00000053c0)={0x2e, 0x28, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x2, 0x78a, 0x0, &(0x7f0000005440)=@buf_512="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"}}, &(0x7f0000006440)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000006480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006500)={&(0x7f0000006540)={0x2c, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7430}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x18) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000006580)={&(0x7f00000065c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000006600)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"/293], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x84) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000066c0), 0x800, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x105b00, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 3.11911303s ago: executing program 0 (id=2122): socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000300)=0x507, 0x4) (async) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000001540)=[{{&(0x7f0000000380)={0x2, 0x4620, @local}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000e40)="f99d39f5837c8c8268f185fe8da69f58d009ba6ddbbda2e002a5d10a356ffc539737135f5004123656da0907d59d88c8a0dbe86fe7317e0e649101e07b3ffea3d5813e0db099247db48529670b99ff1a7956da6a8b4e8746438b59747cb548ba00c247776dc53ffa7f4c2ea8a9f7cf592bb4edf39b5447bd612c4cac80b9a7056e358c2306c50a064de21b15a559a2e0fe640b255679", 0x96}], 0x1}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000f40)="820bd2307b0701c4a3aad1464db3b340d81eb83cdfaa13ca95792bc8f99be53b4801162949316f5152456944ccb6d62bd14a01ca18720fbf996f7dcbaf117f52190c7be6401d2afcaf97a64fcbf0526e1981ad69fb8fbd311ccffd9ce0c97a46d695c16187533b0f309404dda08d89bb9ef676803a388a6947b8716268fe66b46db93b511d23ff8d6aa0036e71791e830f52", 0x92}, {&(0x7f0000001000)="753078c3c8a924b81f974ff7c45979376c87003e422ab7c6707fde1ca5feb5fbd7e8e1f7262888c55f74118588654681668a13e49bcef23f0114ae1eda106c93caff09f7220ca3987293f2227b165b06c8f6856409a14b19422a4d4ed230c4107336621a766047e0a1bac82b171ecbc58ffb9f7067672c3ddedb4513548ab90a862df63497c8d9b36022a72be7944f68977c7dc8cd16d2539ed50287ed971f1cb8149b7bca9ad01d171c8f32d3b370a0530f94a7d6d7bd26373c490a7b1bec2315f97cd0e7705aba8ed368b3401e476ea02179af83843b314f59b7", 0xdb}, {&(0x7f0000001100)="caf0bc18774e7bdadeefb6a18254fa587d28c426", 0x14}, {&(0x7f0000001140)="9b21ff60d63dc44ef554d60d44be3428ad0ef0bc0404ecb80cc4c9", 0x1b}], 0x4, &(0x7f0000001480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xe3, 0x0, 0xc, [0x430, 0x4, 0x0, 0x8]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x24}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0xd, 0x11, "fd0f896573659ea761be347b2a4182"}]}}}], 0xa0}}], 0x3, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000003c0)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) (async) r5 = socket$netlink(0x10, 0x3, 0x6) connect$inet6(r4, &(0x7f0000000400)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) (async) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000480)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) syz_open_dev$sg(0x0, 0x0, 0x40100) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x1ff) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) preadv(r5, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/39, 0x27}], 0x3, 0x0, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000007c0)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000800)={0xffffffffffffffff, 0x0, &(0x7f0000000840)=""/13, 0x2}, 0x20) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000880)=[{&(0x7f00000008c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f0000000900)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 2.560717648s ago: executing program 5 (id=2123): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000001980)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) timer_create(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='test_dummy_encryption', &(0x7f0000000080)='v1\x1cul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000006f00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000002c0)={r3, 0x0, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000001b40)=0xfff, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.85253245s ago: executing program 3 (id=2124): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000a00)='.\x00', 0x0, 0x0) flock(r0, 0x2) flock(r0, 0x5) clock_gettime(0x0, &(0x7f0000000a40)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000a80)={{r1, r2+10000000}, {0x0, 0x989680}}, &(0x7f0000000ac0)) mq_open(0x0, 0x42, 0x54, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000b00)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000bc0)='100000', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000c40)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000cc0)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r3, 0x6}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000e00)={0x0, 0x3d5e, 0x21804, 0x2, 0x30b}, &(0x7f0000000e80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40e, 0x1, 0x2, 0x275, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x402f, 0x2, 0x3, 0x267}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x38e, 0x20, 0x2, 0xdc, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f93, 0x8, 0x2, 0x159, 0x0, r0}}], 0x4, &(0x7f00000053c0)={0x2e, 0x28, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x2, 0x78a, 0x0, &(0x7f0000005440)=@buf_512="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"}}, &(0x7f0000006440)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000006480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006500)={&(0x7f0000006540)={0x2c, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7430}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x18) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000006580)={&(0x7f00000065c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000006600)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"/293], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x84) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000066c0), 0x800, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x105b00, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 1.603636957s ago: executing program 0 (id=2125): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000000, 0x8, 0x0, 0x5, 0xd7}, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$usbfs(&(0x7f00000005c0), 0x206, 0xa0582) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r3 = syz_open_dev$usbfs(&(0x7f0000000640), 0x76, 0x501901) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 1.192077563s ago: executing program 5 (id=2126): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = epoll_create1(0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000000c0)=0xffff, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa002803f}) (async, rerun: 64) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) (rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mq_timedsend(r3, 0x0, 0x0, 0x3, 0x0) (async) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00') setns(r4, 0x8000000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2c, r6, 0x63d23b12adb89819, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r5) (async) r7 = add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r7, &(0x7f0000000700)=""/55, 0x37) (async) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) (async) mq_timedreceive(r3, &(0x7f0000000500)=""/202, 0xca, 0x200000200009, 0x0) fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) open(&(0x7f0000000240)='.\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0xa18, 0x4) 592.133152ms ago: executing program 0 (id=2127): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{0x1}, &(0x7f0000001180), &(0x7f00000011c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{0x1, 0xffffffffffffffff}, &(0x7f0000001180), &(0x7f00000011c0)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001240)={&(0x7f0000000000)="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", &(0x7f0000001000)=""/81, &(0x7f0000001080)="4e230f6f9814b440eee83d0eca048b4d8ba8fcca9dfd99585ccaf6347e5b0014f637d1f22d9830482311a0b612ef98cf2202dcfe335d691de5f4d09c2055f5627e1ffcdafdf1b0c62753ce217e09c33b4cc564e363401fa59f5dbc947853", &(0x7f0000001100)="7f42939c6aabfdaf205844f04f03f9019b39a9546da14a0caa5db01b70993286f3fa45acc0e6108f079999d7d79e6bed3843440cd4dae6211e611dc5959bb54ff78bd9c09c3ef5f36bc5bb91b62fc35faf9d69b72deedee447495594edb791fa5e8f4ad97eec98073d9667e40bcec6d7abd77fee27", 0x74, r0}, 0x38) syz_clone(0x20048000, 0x0, 0x0, 0x0, 0x0, 0x0) 284.471541ms ago: executing program 5 (id=2128): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b15, &(0x7f0000000380)={'wlan1\x00'}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce80009050202000202000009058202"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000013c0)={0x1c, &(0x7f0000000300)={0x40, 0x16}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f0000000700)={0x20, 0x16, 0x2, "d588"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x31, 0x4d, {0x4d, 0x24, "93f50b6c4b8691ac055b5e0f6a62be7cc83c43f54efbe6ec19536348f221949dc323addb2b4a4ac66313e6d4ef1acf7317cfe249db641269d543df24b784fca79586e39e807c5ce50da999"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40, 0xd, 0xb9, "6ad0c38d51a70eda8df0d73b373cd1eea1c56576823d02093dece3d752bcb5bd6c3fe02a4549ebba1bd30131f9f5cfc71e615f571f99f59189a4ede49a2e5d82a3bfa5684d9c5fe78cc199e01cecdf95d0e655426fc33783b3f8f60e856ae6be8b6a6468ec3189ff098cba32f07a19d0d9025a280f9d8916c064aeabf798c6ded90022a435f316915654c21d348623f3c83fc7c42fe12bdb3aa706795e871f93480afa3c4e75d92f0438330737b4ae59392a082cc570669618"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}}) 0s ago: executing program 0 (id=2129): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, 0x0, 0x4004040) syz_open_dev$vim2m(&(0x7f00000002c0), 0x23, 0x2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket(0x1, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000180)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) syz_io_uring_setup(0x3dba, &(0x7f0000000240)={0x0, 0xdbb1, 0x2, 0x1}, &(0x7f0000000340), &(0x7f0000000400), &(0x7f0000000440)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c0001"], 0x3c}}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) kernel console output (not intermixed with test programs): [ 648.862653][T12764] 2097051 pages RAM [ 648.862726][T12764] 0 pages HighMem/MovableOnly [ 648.862747][T12764] 434116 pages reserved [ 648.862768][T12764] 0 pages cma reserved [ 650.001513][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 650.060643][T12772] ip_tables: iptables: counters copy to user failed while replacing table [ 650.340270][ T5691] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 650.547026][ T5691] usb 6-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 650.580799][ T5691] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 650.580823][ T5691] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 650.628762][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.628795][ T5691] usb 6-1: Product: syz [ 650.628840][ T5691] usb 6-1: Manufacturer: syz [ 650.628859][ T5691] usb 6-1: SerialNumber: syz [ 650.753577][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'. [ 651.239955][ T5691] usb 6-1: Cannot retrieve CPort count: -110 [ 651.240014][ T5691] usb 6-1: Cannot retrieve CPort count: -110 [ 651.240034][ T5691] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 651.365681][T11872] usb 6-1: USB disconnect, device number 4 [ 651.488372][ T5726] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 651.491099][ T5726] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 651.736107][T12788] netlink: zone id is out of range [ 652.239459][ T5726] usb 1-1: USB disconnect, device number 90 [ 652.368042][T12306] udevd[12306]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.524650][T12801] FAULT_INJECTION: forcing a failure. [ 652.524650][T12801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.524680][T12801] CPU: 0 UID: 0 PID: 12801 Comm: syz.5.1890 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.524702][T12801] Tainted: [L]=SOFTLOCKUP [ 652.524709][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 652.524719][T12801] Call Trace: [ 652.524726][T12801] [ 652.524733][T12801] dump_stack_lvl+0xe8/0x150 [ 652.524763][T12801] should_fail_ex+0x410/0x560 [ 652.524789][T12801] _copy_from_user+0x2d/0xb0 [ 652.524814][T12801] snd_seq_write+0x309/0x820 [ 652.524927][T12801] ? __pfx_snd_seq_write+0x10/0x10 [ 652.524953][T12801] ? __lock_acquire+0x747/0x2de0 [ 652.524981][T12801] loop_rw_iter+0x426/0x690 [ 652.525031][T12801] io_write+0x11d0/0x1680 [ 652.525057][T12801] ? __pfx_io_write+0x10/0x10 [ 652.525074][T12801] ? __fget_files+0x2a/0x420 [ 652.525093][T12801] ? __fget_files+0x2a/0x420 [ 652.525108][T12801] ? __fget_files+0x3a2/0x420 [ 652.525127][T12801] __io_issue_sqe+0x180/0x450 [ 652.525148][T12801] io_issue_sqe+0x177/0x1290 [ 652.525173][T12801] io_submit_sqes+0xea7/0x2500 [ 652.525227][T12801] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 652.525255][T12801] ? fdget+0x1ac/0x250 [ 652.525270][T12801] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 652.525289][T12801] ? fput+0xa0/0xd0 [ 652.525312][T12801] ? ksys_write+0x242/0x270 [ 652.525339][T12801] ? __pfx_ksys_write+0x10/0x10 [ 652.525361][T12801] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 652.525382][T12801] do_syscall_64+0x166/0x520 [ 652.525398][T12801] ? trace_irq_disable+0x3b/0x140 [ 652.525418][T12801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.525434][T12801] ? clear_bhb_loop+0x70/0xc0 [ 652.525454][T12801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.525469][T12801] RIP: 0033:0x7f458939f559 [ 652.525484][T12801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.525498][T12801] RSP: 002b:00007f458a288028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 652.525515][T12801] RAX: ffffffffffffffda RBX: 00007f4589625fa0 RCX: 00007f458939f559 [ 652.525527][T12801] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 652.525537][T12801] RBP: 00007f458a288090 R08: 0000000000000000 R09: 0000000000000000 [ 652.525547][T12801] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 652.525557][T12801] R13: 00007f4589626038 R14: 00007f4589625fa0 R15: 00007f458974fa48 [ 652.525582][T12801] [ 652.869781][ T5691] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 653.026637][ T5691] usb 4-1: Using ep0 maxpacket: 16 [ 653.027510][ T5691] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 653.031992][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.032015][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.032032][ T5691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 653.032062][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.098111][ T5691] usb 4-1: config 0 descriptor?? [ 653.238905][ T5726] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 653.356786][T12820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1894'. [ 653.376871][ T5726] usb 1-1: device descriptor read/64, error -71 [ 653.447191][ T50] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 653.561784][ T5691] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 653.582744][ T5691] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 653.582772][ T5691] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 653.582792][ T5691] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 653.582811][ T5691] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 653.593074][T11872] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 653.624731][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 653.625948][ T5691] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 653.625989][ T5691] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 653.626018][ T5691] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 653.626045][ T5691] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 653.626207][ T5691] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 653.626234][ T5691] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 653.650808][ T5726] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 653.688302][ T50] usb 6-1: New USB device found: idVendor=05ac, idProduct=8241, bcdDevice=0.40 [ 653.710045][ T50] usb 6-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 80, changing to 10 [ 653.710096][ T50] usb 6-1: config 1 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.710126][ T50] usb 6-1: config 1 interface 0 has no altsetting 0 [ 653.739201][T11872] usb 5-1: device descriptor read/64, error -71 [ 653.761664][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.761685][ T50] usb 6-1: Product: ㈿샠귄⦗挜⹯듎튓ᓞⵦâ‹ì¹äž¾å­¹î³·ì½‚盷㾑昣ìŽå¶¡æŽ¤æ„¥àµ™â¯žåµ¸ê°Ÿã›‚嗨顫빫₅ê»æ–¹çƒŠâ‰’盅ャèŸâƒ“쩯䩼䭙ᱺáµï‹åž†ï¬»ã’€ã…£å—瑧낞葱íšé®£É·èœâ¦ã¦¸î¨ç™”ꨇ発Ԡä´î¡¨çµ¸á£–Çå¯–ê‹²ë‰•à±•ç¡ [ 653.761727][ T50] usb 6-1: Manufacturer: à°‡ [ 653.761745][ T50] usb 6-1: SerialNumber: 昲ä”㵰줓ⅵड़藮羬麿쉿碇ã”탶᫨⊜èî‹”ç€Ôµãœ‚è±ç­î€•ï¾®å¶¬îƒ•ï¯ºè—‚ꋇᰙç§çŠŸè‡¿ï£Ÿã°šá…½ã¼¢ï¿•à´¸ [ 653.836865][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.857213][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.887558][ T5726] usb 1-1: device descriptor read/64, error -71 [ 653.965303][ T5691] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000E/input/input33 [ 653.981421][T11872] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 654.009906][ T5726] usb usb1-port1: attempt power cycle [ 654.107603][T11872] usb 5-1: device descriptor read/64, error -71 [ 654.217555][T11872] usb usb5-port1: attempt power cycle [ 654.283881][ T5691] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 654.376938][ T5726] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 654.397651][ T5726] usb 1-1: device descriptor read/8, error -71 [ 654.576831][T11872] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 654.633522][T11872] usb 5-1: device descriptor read/8, error -71 [ 654.656626][ T5726] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 654.678297][ T5726] usb 1-1: device descriptor read/8, error -71 [ 654.798500][ T5726] usb usb1-port1: unable to enumerate USB device [ 654.862526][ T50] usbhid 6-1:1.0: can't add hid device: -71 [ 654.862645][ T50] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 654.866846][T11872] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 654.898684][T11872] usb 5-1: device descriptor read/8, error -71 [ 654.923520][ T50] usb 6-1: USB disconnect, device number 5 [ 655.010122][T11872] usb usb5-port1: unable to enumerate USB device [ 655.172581][T12828] netlink: 'syz.5.1895': attribute type 61 has an invalid length. [ 655.172603][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1895'. [ 655.307582][ T5726] usb 4-1: reset high-speed USB device number 83 using dummy_hcd [ 656.292641][ T5719] usb 4-1: USB disconnect, device number 83 [ 656.554861][T12843] trusted_key: encrypted_key: insufficient parameters specified [ 657.129232][T12854] ip_tables: iptables: counters copy to user failed while replacing table [ 657.386760][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 657.482849][T12860] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1902'. [ 657.540091][ T9] usb 4-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 657.546094][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 657.546126][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 657.595259][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.595289][ T9] usb 4-1: Product: syz [ 657.595306][ T9] usb 4-1: Manufacturer: syz [ 657.595322][ T9] usb 4-1: SerialNumber: syz [ 657.984200][ T9] usb 4-1: Cannot retrieve CPort count: -71 [ 657.984285][ T9] usb 4-1: Cannot retrieve CPort count: -71 [ 657.984314][ T9] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 658.024549][ T9] usb 4-1: USB disconnect, device number 84 [ 658.649270][T12879] FAULT_INJECTION: forcing a failure. [ 658.649270][T12879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.649301][T12879] CPU: 0 UID: 0 PID: 12879 Comm: syz.4.1907 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.649326][T12879] Tainted: [L]=SOFTLOCKUP [ 658.649332][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 658.649343][T12879] Call Trace: [ 658.649350][T12879] [ 658.649357][T12879] dump_stack_lvl+0xe8/0x150 [ 658.649389][T12879] should_fail_ex+0x410/0x560 [ 658.649416][T12879] _copy_from_user+0x2d/0xb0 [ 658.649439][T12879] snd_seq_write+0x309/0x820 [ 658.649472][T12879] ? __pfx_snd_seq_write+0x10/0x10 [ 658.649498][T12879] ? __lock_acquire+0x747/0x2de0 [ 658.649525][T12879] loop_rw_iter+0x426/0x690 [ 658.649555][T12879] io_write+0x11d0/0x1680 [ 658.649580][T12879] ? __pfx_io_write+0x10/0x10 [ 658.649597][T12879] ? __fget_files+0x2a/0x420 [ 658.649616][T12879] ? __fget_files+0x2a/0x420 [ 658.649631][T12879] ? __fget_files+0x3a2/0x420 [ 658.649654][T12879] __io_issue_sqe+0x180/0x450 [ 658.649675][T12879] io_issue_sqe+0x177/0x1290 [ 658.649699][T12879] io_submit_sqes+0xea7/0x2500 [ 658.649741][T12879] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 658.649769][T12879] ? fdget+0x1ac/0x250 [ 658.649785][T12879] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 658.649804][T12879] ? fput+0xa0/0xd0 [ 658.649833][T12879] ? ksys_write+0x242/0x270 [ 658.649854][T12879] ? __pfx_ksys_write+0x10/0x10 [ 658.649876][T12879] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 658.649897][T12879] do_syscall_64+0x166/0x520 [ 658.649914][T12879] ? trace_irq_disable+0x3b/0x140 [ 658.649935][T12879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.649952][T12879] ? clear_bhb_loop+0x70/0xc0 [ 658.649972][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.649987][T12879] RIP: 0033:0x7f8c8d99f559 [ 658.650002][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.650016][T12879] RSP: 002b:00007f8c8e79f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 658.650034][T12879] RAX: ffffffffffffffda RBX: 00007f8c8dc25fa0 RCX: 00007f8c8d99f559 [ 658.650046][T12879] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 658.650056][T12879] RBP: 00007f8c8e79f090 R08: 0000000000000000 R09: 0000000000000000 [ 658.650067][T12879] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 658.650076][T12879] R13: 00007f8c8dc26038 R14: 00007f8c8dc25fa0 R15: 00007f8c8dd4fa48 [ 658.650102][T12879] [ 659.104162][T12882] program syz.1.1908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.629605][T12898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.776987][ T30] audit: type=1326 audit(1792969847.410:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.5.1917" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f458939f559 code=0x0 [ 662.646558][ T5691] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 662.736471][T12938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1922'. [ 662.764956][T12938] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1922'. [ 662.827249][ T5691] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 662.828276][ T5691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 662.828298][ T5691] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 662.887260][T12938] kAFS: unable to lookup cell 'ÿ' [ 662.890065][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.890096][ T5691] usb 2-1: Product: syz [ 662.890108][ T5691] usb 2-1: Manufacturer: syz [ 662.890119][ T5691] usb 2-1: SerialNumber: syz [ 662.892751][T12940] kAFS: unable to lookup cell '(,c¾Ì' [ 663.486115][T12945] 8021q: adding VLAN 0 to HW filter on device bond2 [ 663.501165][ T5691] usb 2-1: Cannot retrieve CPort count: -110 [ 663.501217][ T5691] usb 2-1: Cannot retrieve CPort count: -110 [ 663.501243][ T5691] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 663.700262][ T5691] usb 2-1: USB disconnect, device number 86 [ 664.632303][T12959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 664.680948][T12956] syz.5.1920: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 664.681035][T12956] CPU: 1 UID: 0 PID: 12956 Comm: syz.5.1920 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.681069][T12956] Tainted: [L]=SOFTLOCKUP [ 664.681079][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 664.681093][T12956] Call Trace: [ 664.681103][T12956] [ 664.681113][T12956] dump_stack_lvl+0xe8/0x150 [ 664.681158][T12956] warn_alloc+0x24d/0x270 [ 664.681192][T12956] ? __pfx_warn_alloc+0x10/0x10 [ 664.681217][T12956] ? policy_nodemask+0x2cc/0x8e0 [ 664.681256][T12956] ? alloc_pages_mpol+0x256/0x390 [ 664.681301][T12956] __vmalloc_node_range_noprof+0x12fd/0x16f0 [ 664.681378][T12956] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 664.681415][T12956] ? kvm_dev_ioctl+0x12c/0x1700 [ 664.681469][T12956] ? rcu_is_watching+0x16/0xb0 [ 664.681513][T12956] ? kvm_dev_ioctl+0x12c/0x1700 [ 664.681539][T12956] ? rcu_is_watching+0x16/0xb0 [ 664.681578][T12956] ? kvm_dev_ioctl+0x12c/0x1700 [ 664.681604][T12956] __kvmalloc_node_noprof+0x59c/0x820 [ 664.681634][T12956] ? kvm_dev_ioctl+0x12c/0x1700 [ 664.681664][T12956] ? kvm_dev_ioctl+0x12c/0x1700 [ 664.681698][T12956] kvm_dev_ioctl+0x12c/0x1700 [ 664.681725][T12956] ? __fget_files+0x2a/0x420 [ 664.681753][T12956] ? __fget_files+0x2a/0x420 [ 664.681778][T12956] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 664.681809][T12956] ? bpf_lsm_file_ioctl+0x9/0x20 [ 664.681843][T12956] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 664.681870][T12956] __se_sys_ioctl+0xfc/0x170 [ 664.681905][T12956] do_syscall_64+0x166/0x520 [ 664.681930][T12956] ? trace_irq_disable+0x3b/0x140 [ 664.681962][T12956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.681985][T12956] ? clear_bhb_loop+0x70/0xc0 [ 664.682015][T12956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.682039][T12956] RIP: 0033:0x7f458939f559 [ 664.682063][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.682084][T12956] RSP: 002b:00007f458a267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.682110][T12956] RAX: ffffffffffffffda RBX: 00007f4589626090 RCX: 00007f458939f559 [ 664.682129][T12956] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 664.682145][T12956] RBP: 00007f4589436b20 R08: 0000000000000000 R09: 0000000000000000 [ 664.682160][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.682174][T12956] R13: 00007f4589626128 R14: 00007f4589626090 R15: 00007f458974fa48 [ 664.682211][T12956] [ 664.701019][T12956] Mem-Info: [ 664.701067][T12956] active_anon:14436 inactive_anon:8309 isolated_anon:0 [ 664.701067][T12956] active_file:7449 inactive_file:12838 isolated_file:0 [ 664.701067][T12956] unevictable:16 dirty:127 writeback:0 [ 664.701067][T12956] slab_reclaimable:8230 slab_unreclaimable:105547 [ 664.701067][T12956] mapped:39734 shmem:14969 pagetables:1932 [ 664.701067][T12956] sec_pagetables:0 bounce:0 [ 664.701067][T12956] kernel_misc_reclaimable:0 [ 664.701067][T12956] free:870293 free_pcp:10952 free_cma:0 [ 664.701226][T12956] Node 0 active_anon:39584kB inactive_anon:33228kB active_file:29796kB inactive_file:49340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149708kB dirty:504kB writeback:0kB shmem:50664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13888kB pagetables:6764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 664.701421][T12956] Node 1 active_anon:18160kB inactive_anon:8kB active_file:0kB inactive_file:2012kB unevictable:64kB isolated(anon):0kB isolated(file):0kB mapped:9228kB dirty:4kB writeback:0kB shmem:9212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:388kB pagetables:964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 664.701566][T12956] Node 0 DMA free:10016kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:92kB local_pcp:60kB free_cma:0kB [ 664.701749][T12956] lowmem_reserve[]: 0 2464 2466 2466 2466 [ 664.701861][T12956] Node 0 DMA32 free:120328kB boost:71680kB min:105616kB low:114100kB high:122584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:39584kB inactive_anon:33228kB active_file:29796kB inactive_file:49340kB unevictable:0kB writepending:504kB zspages:2448kB present:3129332kB managed:2523600kB mlocked:0kB bounce:0kB free_pcp:1084kB local_pcp:764kB free_cma:0kB [ 664.702098][T12956] lowmem_reserve[]: 0 0 1 1 1 [ 664.702201][T12956] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1676kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 664.702370][T12956] lowmem_reserve[]: 0 0 0 0 0 [ 664.702471][T12956] Node 1 Normal free:3350828kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:18260kB inactive_anon:8kB active_file:0kB inactive_file:2012kB unevictable:64kB writepending:4kB zspages:904kB present:4194300kB managed:4111104kB mlocked:32kB bounce:0kB free_pcp:42632kB local_pcp:22724kB free_cma:0kB [ 664.739621][T12956] lowmem_reserve[]: 0 0 0 0 0 [ 664.739737][T12956] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10016kB [ 664.740178][T12956] Node 0 DMA32: 8625*4kB (UM) 3609*8kB (UME) 1213*16kB (UME) 638*32kB (UME) 148*64kB (UME) 54*128kB (UME) 3*256kB (UE) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 120348kB [ 664.740588][T12956] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 664.818363][T12956] Node 1 Normal: 1*4kB (E) 1*8kB (U) 268*16kB (UME) 268*32kB (UM) 104*64kB (M) 27*128kB (UM) 10*256kB (ME) 6*512kB (UM) 4*1024kB (UME) 2*2048kB (ME) 809*4096kB (M) = 3350476kB [ 664.818837][T12956] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 664.818889][T12956] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 664.818938][T12956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 664.819011][T12956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 664.819061][T12956] 35304 total pagecache pages [ 664.819083][T12956] 30 pages in swap cache [ 664.819112][T12956] Free swap = 97896kB [ 664.819133][T12956] Total swap = 124996kB [ 664.819162][T12956] 2097051 pages RAM [ 664.819182][T12956] 0 pages HighMem/MovableOnly [ 664.819203][T12956] 434116 pages reserved [ 664.819224][T12956] 0 pages cma reserved [ 665.796519][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 665.946698][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 665.947414][ T9] usb 2-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 665.963571][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 665.986260][ T9] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 665.986292][ T9] usb 2-1: Product: syz [ 665.986309][ T9] usb 2-1: Manufacturer: syz [ 665.986325][ T9] usb 2-1: SerialNumber: syz [ 666.174683][ T30] audit: type=1326 audit(1792969851.810:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.3.1931" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 666.174741][ T30] audit: type=1326 audit(1792969851.810:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.3.1931" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 666.175608][ T30] audit: type=1326 audit(1792969851.810:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.3.1931" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 666.269379][ T30] audit: type=1326 audit(1792969851.910:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.3.1931" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 666.270068][ T30] audit: type=1326 audit(1792969851.910:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.3.1931" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 666.271174][ T9] usb 2-1: palm_os_3_probe - error -71 getting connection information [ 666.271296][ T9] visor 2-1:1.0: probe with driver visor failed with error -71 [ 666.355764][ T9] usb 2-1: USB disconnect, device number 87 [ 666.433302][ T30] audit: type=1326 audit(1792969852.070:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.3.1931" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 666.433346][ T30] audit: type=1326 audit(1792969852.070:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.3.1931" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 666.433379][ T30] audit: type=1326 audit(1792969852.070:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.3.1931" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 666.587159][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1932'. [ 667.334083][T12989] sock: sock_timestamping_bind_phc: sock not bind to device [ 667.669927][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 667.821943][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 667.823026][ T9] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 667.862662][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 667.862685][ T9] usb 2-1: config 0 has no interface number 0 [ 667.862719][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 667.899046][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.899076][ T9] usb 2-1: Product: syz [ 667.899092][ T9] usb 2-1: Manufacturer: syz [ 667.899108][ T9] usb 2-1: SerialNumber: syz [ 667.940523][ T9] usb 2-1: config 0 descriptor?? [ 668.431783][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 668.431819][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 668.431842][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 668.432098][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 669.836106][T13026] FAULT_INJECTION: forcing a failure. [ 669.836106][T13026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.836136][T13026] CPU: 1 UID: 0 PID: 13026 Comm: syz.4.1937 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.836159][T13026] Tainted: [L]=SOFTLOCKUP [ 669.836166][T13026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 669.836176][T13026] Call Trace: [ 669.836183][T13026] [ 669.836190][T13026] dump_stack_lvl+0xe8/0x150 [ 669.836221][T13026] should_fail_ex+0x410/0x560 [ 669.836248][T13026] _copy_from_user+0x2d/0xb0 [ 669.836273][T13026] snd_seq_write+0x309/0x820 [ 669.836306][T13026] ? __pfx_snd_seq_write+0x10/0x10 [ 669.836332][T13026] ? __lock_acquire+0x747/0x2de0 [ 669.836374][T13026] loop_rw_iter+0x426/0x690 [ 669.836415][T13026] io_write+0x11d0/0x1680 [ 669.836451][T13026] ? __pfx_io_write+0x10/0x10 [ 669.836473][T13026] ? __fget_files+0x2a/0x420 [ 669.836507][T13026] ? __fget_files+0x2a/0x420 [ 669.836528][T13026] ? __fget_files+0x3a2/0x420 [ 669.836555][T13026] __io_issue_sqe+0x180/0x450 [ 669.836584][T13026] io_issue_sqe+0x177/0x1290 [ 669.836619][T13026] io_submit_sqes+0xea7/0x2500 [ 669.836677][T13026] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 669.836717][T13026] ? fdget+0x1ac/0x250 [ 669.836740][T13026] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 669.836767][T13026] ? fput+0xa0/0xd0 [ 669.836798][T13026] ? ksys_write+0x242/0x270 [ 669.836825][T13026] ? __pfx_ksys_write+0x10/0x10 [ 669.836856][T13026] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 669.836885][T13026] do_syscall_64+0x166/0x520 [ 669.836910][T13026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.836934][T13026] ? clear_bhb_loop+0x70/0xc0 [ 669.836963][T13026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.836980][T13026] RIP: 0033:0x7f8c8d99f559 [ 669.836998][T13026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.837012][T13026] RSP: 002b:00007f8c8e79f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 669.837030][T13026] RAX: ffffffffffffffda RBX: 00007f8c8dc25fa0 RCX: 00007f8c8d99f559 [ 669.837043][T13026] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 669.837053][T13026] RBP: 00007f8c8e79f090 R08: 0000000000000000 R09: 0000000000000000 [ 669.837064][T13026] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 669.837074][T13026] R13: 00007f8c8dc26038 R14: 00007f8c8dc25fa0 R15: 00007f8c8dd4fa48 [ 669.837099][T13026] [ 670.787393][ T5691] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 670.956497][ T5691] usb 6-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 670.982969][ T5691] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 670.983001][ T5691] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 670.985995][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.986024][ T5691] usb 6-1: Product: syz [ 670.986041][ T5691] usb 6-1: Manufacturer: syz [ 670.986057][ T5691] usb 6-1: SerialNumber: syz [ 671.159362][ T5726] usb 2-1: USB disconnect, device number 88 [ 671.606913][ T5691] usb 6-1: Cannot retrieve CPort count: -110 [ 671.606966][ T5691] usb 6-1: Cannot retrieve CPort count: -110 [ 671.606994][ T5691] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 671.954910][ T9] usb 6-1: USB disconnect, device number 6 [ 672.201562][T13077] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 673.406524][ T5691] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 673.558462][ T5691] usb 4-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 673.561521][ T5691] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 673.561550][ T5691] usb 4-1: config 0 has no interface number 0 [ 673.561594][ T5691] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 673.576026][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.576056][ T5691] usb 4-1: Product: syz [ 673.576072][ T5691] usb 4-1: Manufacturer: syz [ 673.576089][ T5691] usb 4-1: SerialNumber: syz [ 673.633704][ T5691] usb 4-1: config 0 descriptor?? [ 673.701928][ T5691] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 674.000095][T13111] FAULT_INJECTION: forcing a failure. [ 674.000095][T13111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.000124][T13111] CPU: 0 UID: 0 PID: 13111 Comm: syz.4.1950 Tainted: G L syzkaller #0 PREEMPT(full) [ 674.000160][T13111] Tainted: [L]=SOFTLOCKUP [ 674.000169][T13111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 674.000183][T13111] Call Trace: [ 674.000191][T13111] [ 674.000201][T13111] dump_stack_lvl+0xe8/0x150 [ 674.000248][T13111] should_fail_ex+0x410/0x560 [ 674.000293][T13111] _copy_from_user+0x2d/0xb0 [ 674.000337][T13111] snd_seq_write+0x309/0x820 [ 674.000385][T13111] ? __pfx_snd_seq_write+0x10/0x10 [ 674.000418][T13111] ? __lock_acquire+0x747/0x2de0 [ 674.000445][T13111] loop_rw_iter+0x426/0x690 [ 674.000497][T13111] io_write+0x11d0/0x1680 [ 674.000532][T13111] ? __pfx_io_write+0x10/0x10 [ 674.000558][T13111] ? __fget_files+0x2a/0x420 [ 674.000577][T13111] ? __fget_files+0x2a/0x420 [ 674.000592][T13111] ? __fget_files+0x3a2/0x420 [ 674.000621][T13111] __io_issue_sqe+0x180/0x450 [ 674.000653][T13111] io_issue_sqe+0x177/0x1290 [ 674.000687][T13111] io_submit_sqes+0xea7/0x2500 [ 674.000740][T13111] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 674.000782][T13111] ? fdget+0x1ac/0x250 [ 674.000806][T13111] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 674.000831][T13111] ? fput+0xa0/0xd0 [ 674.000865][T13111] ? ksys_write+0x242/0x270 [ 674.000885][T13111] ? __pfx_ksys_write+0x10/0x10 [ 674.000907][T13111] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 674.000944][T13111] do_syscall_64+0x166/0x520 [ 674.000968][T13111] ? trace_irq_disable+0x3b/0x140 [ 674.000996][T13111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.001022][T13111] ? clear_bhb_loop+0x70/0xc0 [ 674.001042][T13111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.001058][T13111] RIP: 0033:0x7f8c8d99f559 [ 674.001085][T13111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.001106][T13111] RSP: 002b:00007f8c8e79f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 674.001131][T13111] RAX: ffffffffffffffda RBX: 00007f8c8dc25fa0 RCX: 00007f8c8d99f559 [ 674.001148][T13111] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 674.001161][T13111] RBP: 00007f8c8e79f090 R08: 0000000000000000 R09: 0000000000000000 [ 674.001178][T13111] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 674.001188][T13111] R13: 00007f8c8dc26038 R14: 00007f8c8dc25fa0 R15: 00007f8c8dd4fa48 [ 674.001219][T13111] [ 674.774688][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1947'. [ 674.920243][T13099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1948'. [ 674.920283][T13099] netlink: 'syz.3.1948': attribute type 1 has an invalid length. [ 674.920299][T13099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1948'. [ 675.006631][ T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 675.158739][ T9] usb 6-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 675.176196][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 675.234691][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.234723][ T9] usb 6-1: Product: syz [ 675.234741][ T9] usb 6-1: Manufacturer: syz [ 675.234758][ T9] usb 6-1: SerialNumber: syz [ 675.263417][ T9] usb 6-1: config 0 descriptor?? [ 675.277093][ T9] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 675.494567][T11872] usb 4-1: USB disconnect, device number 85 [ 675.519798][T11872] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 675.529559][ T5691] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 675.666573][ T5691] usb 2-1: device descriptor read/64, error -71 [ 675.906845][ T5691] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 676.037780][ T5691] usb 2-1: device descriptor read/64, error -71 [ 676.146937][ T5726] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 676.147269][ T5691] usb usb2-port1: attempt power cycle [ 676.316965][ T5726] usb 5-1: Using ep0 maxpacket: 16 [ 676.317732][ T5726] usb 5-1: New USB device found: idVendor=1430, idProduct=474b, bcdDevice=0.40 [ 676.356175][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.356206][ T5726] usb 5-1: Product: syz [ 676.356222][ T5726] usb 5-1: Manufacturer: syz [ 676.356239][ T5726] usb 5-1: SerialNumber: syz [ 676.497726][ T5691] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 676.521922][ T5691] usb 2-1: device descriptor read/8, error -71 [ 676.777100][ T5691] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 676.810136][ T5691] usb 2-1: device descriptor read/8, error -71 [ 676.867026][ T5719] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 676.927496][ T5691] usb usb2-port1: unable to enumerate USB device [ 677.035419][ T5719] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 677.050108][ T5719] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 677.050132][ T5719] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 677.090605][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.090647][ T5719] usb 1-1: Product: syz [ 677.090658][ T5719] usb 1-1: Manufacturer: syz [ 677.090670][ T5719] usb 1-1: SerialNumber: syz [ 677.120805][ T50] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 677.317335][ T50] usb 4-1: Using ep0 maxpacket: 32 [ 677.318172][ T50] usb 4-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.40 [ 677.319724][ T50] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 677.326197][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.326216][ T50] usb 4-1: Product: syz [ 677.326227][ T50] usb 4-1: Manufacturer: syz [ 677.326238][ T50] usb 4-1: SerialNumber: syz [ 677.622171][ T5719] usb 1-1: Cannot retrieve CPort count: -71 [ 677.622225][ T5719] usb 1-1: Cannot retrieve CPort count: -71 [ 677.622253][ T5719] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 677.679413][ T50] snd-ua101 4-1:1.1: sample format descriptor not found [ 677.679494][ T50] snd-ua101 4-1:1.0: invalid num_altsetting [ 677.755158][ T5719] usb 1-1: USB disconnect, device number 95 [ 677.866143][ T50] usb 4-1: USB disconnect, device number 86 [ 678.065683][T13156] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1958'. [ 678.534463][T13165] FAULT_INJECTION: forcing a failure. [ 678.534463][T13165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.534508][T13165] CPU: 0 UID: 0 PID: 13165 Comm: syz.3.1961 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.534539][T13165] Tainted: [L]=SOFTLOCKUP [ 678.534547][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 678.534561][T13165] Call Trace: [ 678.534570][T13165] [ 678.534581][T13165] dump_stack_lvl+0xe8/0x150 [ 678.534622][T13165] should_fail_ex+0x410/0x560 [ 678.534660][T13165] _copy_from_user+0x2d/0xb0 [ 678.534693][T13165] snd_seq_write+0x309/0x820 [ 678.534741][T13165] ? __pfx_snd_seq_write+0x10/0x10 [ 678.534777][T13165] ? __lock_acquire+0x747/0x2de0 [ 678.534815][T13165] loop_rw_iter+0x426/0x690 [ 678.534868][T13165] io_write+0x11d0/0x1680 [ 678.534907][T13165] ? __pfx_io_write+0x10/0x10 [ 678.534932][T13165] ? __fget_files+0x2a/0x420 [ 678.534959][T13165] ? __fget_files+0x2a/0x420 [ 678.534981][T13165] ? __fget_files+0x3a2/0x420 [ 678.535008][T13165] __io_issue_sqe+0x180/0x450 [ 678.535038][T13165] io_issue_sqe+0x177/0x1290 [ 678.535074][T13165] io_submit_sqes+0xea7/0x2500 [ 678.535136][T13165] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 678.535179][T13165] ? fdget+0x1ac/0x250 [ 678.535202][T13165] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 678.535230][T13165] ? fput+0xa0/0xd0 [ 678.535262][T13165] ? ksys_write+0x242/0x270 [ 678.535294][T13165] ? __pfx_ksys_write+0x10/0x10 [ 678.535326][T13165] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 678.535356][T13165] do_syscall_64+0x166/0x520 [ 678.535380][T13165] ? trace_irq_disable+0x3b/0x140 [ 678.535411][T13165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.535436][T13165] ? clear_bhb_loop+0x70/0xc0 [ 678.535466][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.535490][T13165] RIP: 0033:0x7fb3db99f559 [ 678.535512][T13165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.535532][T13165] RSP: 002b:00007fb3dc859028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 678.535556][T13165] RAX: ffffffffffffffda RBX: 00007fb3dbc25fa0 RCX: 00007fb3db99f559 [ 678.535574][T13165] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 678.535589][T13165] RBP: 00007fb3dc859090 R08: 0000000000000000 R09: 0000000000000000 [ 678.535603][T13165] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 678.535617][T13165] R13: 00007fb3dbc26038 R14: 00007fb3dbc25fa0 R15: 00007fb3dbd4fa48 [ 678.535656][T13165] [ 679.059697][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'. [ 679.143786][ T5726] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 679.181828][T11872] usb 6-1: USB disconnect, device number 7 [ 680.052951][ T5726] usb 5-1: USB disconnect, device number 94 [ 680.383565][T12560] udevd[12560]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.355020][T13173] tipc: can't start tipc receive workqueue [ 682.356498][ T5726] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 682.527910][ T5726] usb 2-1: Using ep0 maxpacket: 16 [ 682.528733][ T5726] usb 2-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 682.531561][ T5726] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 682.531595][ T5726] usb 2-1: config 0 interface 0 has no altsetting 0 [ 682.534617][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.534636][ T5726] usb 2-1: Product: syz [ 682.534647][ T5726] usb 2-1: Manufacturer: syz [ 682.534659][ T5726] usb 2-1: SerialNumber: syz [ 682.596011][ T5726] usb 2-1: config 0 descriptor?? [ 683.357794][T13243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.363548][T13243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.448211][T13217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.455880][T13217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.856615][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 684.101353][ T5726] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34 [ 684.390279][ T5726] imon:send_packet: packet tx failed (-71) [ 684.410456][ T5726] imon 2-1:0.0: panel buttons/knobs setup failed [ 684.472112][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1975'. [ 684.819122][ T5726] rc_core: IR keymap rc-imon-pad not found [ 684.819144][ T5726] Registered IR keymap rc-empty [ 684.819469][ T5726] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 684.819493][ T5726] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 684.824666][ T5726] imon:send_packet: packet tx failed (-71) [ 684.868012][ T5726] imon 2-1:0.0: remote input dev register failed [ 684.868245][ T5726] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 685.011228][T13267] FAULT_INJECTION: forcing a failure. [ 685.011228][T13267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.011283][T13267] CPU: 0 UID: 0 PID: 13267 Comm: syz.1.1979 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.011311][T13267] Tainted: [L]=SOFTLOCKUP [ 685.011318][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 685.011331][T13267] Call Trace: [ 685.011339][T13267] [ 685.011348][T13267] dump_stack_lvl+0xe8/0x150 [ 685.011385][T13267] should_fail_ex+0x410/0x560 [ 685.011437][T13267] copy_fpstate_to_sigframe+0xaf8/0xe10 [ 685.011463][T13267] ? copy_fpstate_to_sigframe+0x196/0xe10 [ 685.011491][T13267] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 685.011517][T13267] ? ktime_get+0x45/0x220 [ 685.011543][T13267] ? ktime_get+0x45/0x220 [ 685.011565][T13267] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 685.011595][T13267] ? ktime_get+0x1f5/0x220 [ 685.011626][T13267] ? fpu__alloc_mathframe+0xac/0x130 [ 685.011650][T13267] get_sigframe+0x603/0x830 [ 685.011689][T13267] ? __pfx_get_sigframe+0x10/0x10 [ 685.011733][T13267] x64_setup_rt_frame+0x163/0xc50 [ 685.011774][T13267] ? _raw_spin_unlock_irq+0x2e/0x50 [ 685.011876][T13267] ? get_signal+0x10d8/0x12c0 [ 685.011909][T13267] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 685.011945][T13267] arch_do_signal_or_restart+0x456/0x860 [ 685.011969][T13267] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 685.011996][T13267] ? ksys_write+0x242/0x270 [ 685.012028][T13267] exit_to_user_mode_loop+0x10e/0x770 [ 685.012077][T13267] ? rcu_is_watching+0x16/0xb0 [ 685.012113][T13267] do_syscall_64+0x328/0x520 [ 685.012138][T13267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.012162][T13267] ? clear_bhb_loop+0x70/0xc0 [ 685.012189][T13267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.012213][T13267] RIP: 0033:0x7efccd35fd8e [ 685.012236][T13267] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 685.012256][T13267] RSP: 002b:00007efcce254fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 685.012280][T13267] RAX: 0000000000000001 RBX: 00007efcce2556c0 RCX: 00007efccd35fd8e [ 685.012296][T13267] RDX: 0000000000000001 RSI: 00007efcce255090 RDI: 0000000000000005 [ 685.012311][T13267] RBP: 00007efcce255090 R08: 0000000000000000 R09: 0000000000000000 [ 685.012326][T13267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.012340][T13267] R13: 00007efccd626038 R14: 00007efccd625fa0 R15: 00007efccd74fa48 [ 685.012377][T13267] [ 685.030553][T11872] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 685.252616][T11872] usb 1-1: Invalid ep0 maxpacket: 9 [ 685.397875][ T5726] imon 2-1:0.0: unable to initialize intf0, err 0 [ 685.413510][T11872] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 685.464214][ T5726] usb 2-1: USB disconnect, device number 93 [ 685.566523][T11872] usb 1-1: Invalid ep0 maxpacket: 9 [ 685.567083][T11872] usb usb1-port1: attempt power cycle [ 685.850287][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.850328][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.906512][T11872] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 685.940499][T11872] usb 1-1: Invalid ep0 maxpacket: 9 [ 686.071169][T11872] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 686.088724][T11872] usb 1-1: Invalid ep0 maxpacket: 9 [ 686.089212][T11872] usb usb1-port1: unable to enumerate USB device [ 686.123689][T13274] syzkaller0: entered promiscuous mode [ 686.123707][T13274] syzkaller0: entered allmulticast mode [ 686.656845][T13272] syz.5.1980: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 686.658557][T13272] CPU: 0 UID: 0 PID: 13272 Comm: syz.5.1980 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.658593][T13272] Tainted: [L]=SOFTLOCKUP [ 686.658604][T13272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 686.658619][T13272] Call Trace: [ 686.658629][T13272] [ 686.658640][T13272] dump_stack_lvl+0xe8/0x150 [ 686.658686][T13272] warn_alloc+0x24d/0x270 [ 686.658720][T13272] ? __pfx_warn_alloc+0x10/0x10 [ 686.658744][T13272] ? policy_nodemask+0x2cc/0x8e0 [ 686.658795][T13272] ? alloc_pages_mpol+0x256/0x390 [ 686.658840][T13272] __vmalloc_node_range_noprof+0x12fd/0x16f0 [ 686.658919][T13272] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 686.658957][T13272] ? kvm_dev_ioctl+0x12c/0x1700 [ 686.658983][T13272] ? rcu_is_watching+0x16/0xb0 [ 686.659019][T13272] ? kvm_dev_ioctl+0x12c/0x1700 [ 686.659045][T13272] ? rcu_is_watching+0x16/0xb0 [ 686.659083][T13272] ? kvm_dev_ioctl+0x12c/0x1700 [ 686.659109][T13272] __kvmalloc_node_noprof+0x59c/0x820 [ 686.659138][T13272] ? kvm_dev_ioctl+0x12c/0x1700 [ 686.659168][T13272] ? kvm_dev_ioctl+0x12c/0x1700 [ 686.659202][T13272] kvm_dev_ioctl+0x12c/0x1700 [ 686.659229][T13272] ? __fget_files+0x2a/0x420 [ 686.659256][T13272] ? __fget_files+0x2a/0x420 [ 686.659280][T13272] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 686.659312][T13272] ? bpf_lsm_file_ioctl+0x9/0x20 [ 686.659346][T13272] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 686.659372][T13272] __se_sys_ioctl+0xfc/0x170 [ 686.659406][T13272] do_syscall_64+0x166/0x520 [ 686.659431][T13272] ? trace_irq_disable+0x3b/0x140 [ 686.659463][T13272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.659488][T13272] ? clear_bhb_loop+0x70/0xc0 [ 686.659518][T13272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.659542][T13272] RIP: 0033:0x7f458939f559 [ 686.659565][T13272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.659586][T13272] RSP: 002b:00007f458a267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 686.659611][T13272] RAX: ffffffffffffffda RBX: 00007f4589626090 RCX: 00007f458939f559 [ 686.659630][T13272] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 686.659646][T13272] RBP: 00007f4589436b20 R08: 0000000000000000 R09: 0000000000000000 [ 686.659662][T13272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.659677][T13272] R13: 00007f4589626128 R14: 00007f4589626090 R15: 00007f458974fa48 [ 686.659715][T13272] [ 686.686256][T13272] Mem-Info: [ 686.686274][T13272] active_anon:2112 inactive_anon:11412 isolated_anon:0 [ 686.686274][T13272] active_file:5042 inactive_file:10525 isolated_file:0 [ 686.686274][T13272] unevictable:0 dirty:303 writeback:0 [ 686.686274][T13272] slab_reclaimable:7905 slab_unreclaimable:108049 [ 686.686274][T13272] mapped:37086 shmem:7838 pagetables:1920 [ 686.686274][T13272] sec_pagetables:0 bounce:0 [ 686.686274][T13272] kernel_misc_reclaimable:0 [ 686.686274][T13272] free:774997 free_pcp:14530 free_cma:0 [ 686.686340][T13272] Node 0 active_anon:1880kB inactive_anon:45636kB active_file:20168kB inactive_file:28072kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140488kB dirty:756kB writeback:0kB shmem:25944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13984kB pagetables:6764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 686.785512][T13272] Node 1 active_anon:6588kB inactive_anon:12kB active_file:0kB inactive_file:14036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7860kB dirty:456kB writeback:0kB shmem:5364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:384kB pagetables:920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 686.785586][T13272] Node 0 DMA free:10016kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:92kB local_pcp:60kB free_cma:0kB [ 686.785657][T13272] lowmem_reserve[]: 0 2464 2466 2466 2466 [ 686.785703][T13272] Node 0 DMA32 free:149380kB boost:71680kB min:105616kB low:114100kB high:122584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1880kB inactive_anon:45568kB active_file:20168kB inactive_file:28072kB unevictable:0kB writepending:820kB zspages:2448kB present:3129332kB managed:2523600kB mlocked:0kB bounce:0kB free_pcp:1304kB local_pcp:708kB free_cma:0kB [ 686.785777][T13272] lowmem_reserve[]: 0 0 1 1 1 [ 686.785817][T13272] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1676kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 686.785881][T13272] lowmem_reserve[]: 0 0 0 0 0 [ 686.785921][T13272] Node 1 Normal free:2940592kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:6588kB inactive_anon:12kB active_file:0kB inactive_file:14036kB unevictable:0kB writepending:456kB zspages:3344kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:56712kB local_pcp:17708kB free_cma:0kB [ 686.785991][T13272] lowmem_reserve[]: 0 0 0 0 0 [ 686.786031][T13272] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10016kB [ 686.786184][T13272] Node 0 DMA32: 8659*4kB (UME) 4673*8kB (UME) 1943*16kB (UME) 770*32kB (UME) 204*64kB (UME) 53*128kB (UME) 5*256kB (UME) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 149380kB [ 686.927811][T13272] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 686.928129][T13272] Node 1 Normal: 0*4kB 2*8kB (ME) 110*16kB (UME) 267*32kB (M) 105*64kB (ME) 26*128kB (M) 11*256kB (UME) 6*512kB (ME) 2*1024kB (M) 2*2048kB (UM) 710*4096kB (M) = 2940560kB [ 686.928603][T13272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 686.928653][T13272] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 686.928704][T13272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 686.928747][T13272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 686.928807][T13272] 23415 total pagecache pages [ 686.928835][T13272] 31 pages in swap cache [ 686.928856][T13272] Free swap = 69212kB [ 686.928878][T13272] Total swap = 124996kB [ 687.234667][T13272] 2097051 pages RAM [ 687.234709][T13272] 0 pages HighMem/MovableOnly [ 687.234748][T13272] 434116 pages reserved [ 687.234776][T13272] 0 pages cma reserved [ 687.243145][ T5705] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 687.496593][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 687.505742][ T5705] usb 4-1: New USB device found: idVendor=044f, idProduct=b320, bcdDevice=0.40 [ 687.528431][ T5705] usb 4-1: config 1 interface 0 has no altsetting 0 [ 687.550865][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.550894][ T5705] usb 4-1: Product: 균췖筢ʚ釃䂫㛵î¦à¤®èˆçµ²î¥å™³é‹ë¤—씶幩㎦⽅ㆰꬕ헡ᢠ腸ï«ï¿¸ï¸…囌⋼㚙㋀꥞䞘䂑쪹Ꞵ꣘ؘ屰æ§ã½¬ä‡¼è¶»í„¾ëˆœà¼ˆâ¢±à©€à¦²å”ᆒ剂íšé¥ºå¢®á§µå¨’ꞹ槒ᆃꊑ猤ì±á”¾å¦šâ…’䄘ቴ耆ꬿⲼ嘘ꀸ⑓㖠퀶î½ëƒ•é§©æ©ƒæ’‰ [ 687.550925][ T5705] usb 4-1: Manufacturer: 㹉⫷锊膋仗뫼é±ç«¨å„—ҜⱯëŠï´ê¯¡âº€í‡¬î°†æ’žî’¤ä§ï¸Œæ™Îµá­¸í—ƒâ¹¡é‡˜ëžŸâ—㰽툀蛔䅊瘚撖⢗쵗﹕廊产뿱饿褯ڵ嘩봰ƅ퟾뱉錘䣄겗꯹〉꾟웮⌈雡鰄轧ꄔâ—ã«‚è©ä”…얄ᧂ棤殲⥰阀뤂ឱâœá•‚玠뉬Ĺ싼籟ê¥å†¨é…‹ì‡¸è¡Žï¨¶Ó§ã«»ì·¡à¿•ê„«èµ“㈿↠[ 687.550960][ T5705] usb 4-1: SerialNumber: à ¬ [ 688.290244][T13277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.293079][T13277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.945636][ T5705] usbhid 4-1:1.0: can't add hid device: -71 [ 688.945720][ T5705] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 688.979910][ T5705] usb 4-1: USB disconnect, device number 87 [ 689.032004][T13285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1985'. [ 689.726115][T13299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 689.786539][ T5705] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 689.938131][ T5705] usb 5-1: New USB device found: idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 689.940240][ T5705] usb 5-1: config 4 has an invalid interface number: 88 but max is 0 [ 689.940270][ T5705] usb 5-1: config 4 has no interface number 0 [ 689.940326][ T5705] usb 5-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 689.940354][ T5705] usb 5-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 689.940383][ T5705] usb 5-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 689.940413][ T5705] usb 5-1: config 4 interface 88 has no altsetting 0 [ 690.040048][ T5705] usb 5-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 690.040354][ T5705] usb 5-1: Manufacturer: syz [ 690.040372][ T5705] usb 5-1: SerialNumber: syz [ 690.097478][T13302] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 690.773609][ T30] audit: type=1326 audit(1792969876.410:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13300 comm="syz.4.1991" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c8d99f559 code=0x0 [ 691.206462][ T5705] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 691.356488][ T5705] usb 2-1: device descriptor read/64, error -71 [ 691.597925][ T5705] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 691.726847][ T5705] usb 2-1: device descriptor read/64, error -71 [ 691.841838][ T5705] usb usb2-port1: attempt power cycle [ 692.186928][ T5705] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 692.216578][ T5705] usb 2-1: device descriptor read/8, error -71 [ 692.456524][ T5705] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 692.478912][ T5705] usb 2-1: device descriptor read/8, error -71 [ 692.589939][ T5705] usb usb2-port1: unable to enumerate USB device [ 692.897967][ T5726] usb 5-1: USB disconnect, device number 95 [ 693.249470][ T30] audit: type=1326 audit(1792969878.890:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13345 comm="syz.5.2000" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f458939f559 code=0x0 [ 694.503367][ T5726] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 694.599307][ T5719] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 694.649458][ T5726] usb 2-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 694.657932][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 694.658045][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 694.658126][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 694.727011][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.727035][ T5726] usb 2-1: Product: syz [ 694.727046][ T5726] usb 2-1: Manufacturer: syz [ 694.727058][ T5726] usb 2-1: SerialNumber: syz [ 694.761401][ T5726] usb 2-1: config 0 descriptor?? [ 694.762878][T13363] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 694.806918][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 694.813694][ T5719] usb 4-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 694.858913][ T5719] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 694.858945][ T5719] usb 4-1: config 0 has no interface number 0 [ 694.858992][ T5719] usb 4-1: config 0 interface 184 has no altsetting 0 [ 694.895974][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.896005][ T5719] usb 4-1: Product: syz [ 694.896023][ T5719] usb 4-1: Manufacturer: syz [ 694.896039][ T5719] usb 4-1: SerialNumber: syz [ 694.942809][ T5719] usb 4-1: config 0 descriptor?? [ 694.969062][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.969470][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.970916][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.972670][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.973614][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.975553][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.027938][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.028412][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.030588][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.032010][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.210260][ T5726] rc_core: IR keymap rc-streamzap not found [ 695.210281][ T5726] Registered IR keymap rc-empty [ 695.211701][ T5726] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 695.277149][ T5726] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36 [ 695.890167][ T5726] usb 2-1: USB disconnect, device number 98 [ 696.842809][T13393] loop5: detected capacity change from 0 to 7 [ 696.884255][T13393] Dev loop5: unable to read RDB block 7 [ 696.884303][T13393] loop5: AHDI p1 p2 p4 [ 696.884320][T13393] loop5: partition table partially beyond EOD, truncated [ 696.884519][T13393] loop5: p1 start 5439488 is beyond EOD, truncated [ 696.884580][T13393] loop5: p4 start 3288604672 is beyond EOD, truncated [ 696.956189][ T5719] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 696.956224][ T5719] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 696.979798][ T5719] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 696.979830][ T5719] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 696.979851][ T5719] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 696.979871][ T5719] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 696.980145][ T5719] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 697.082953][ T5719] usb 4-1: USB disconnect, device number 88 [ 697.166326][T13367] debugfs: out of free dentries, can not create file 'invlpg' [ 697.591442][T13399] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 697.629197][T13401] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 698.686529][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 698.838216][ T9] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 698.839583][ T9] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 698.839610][ T9] usb 6-1: config 1 has no interface number 0 [ 698.880514][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.880533][ T9] usb 6-1: Product: syz [ 698.880544][ T9] usb 6-1: Manufacturer: syz [ 698.880554][ T9] usb 6-1: SerialNumber: syz [ 698.954680][ T9] usb 6-1: 3:0 : does not exist [ 698.954709][ T9] usb 6-1: 3:0 : does not exist [ 699.393907][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.394234][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.455718][ T9] usb 6-1: USB disconnect, device number 8 [ 699.538643][T13426] FAULT_INJECTION: forcing a failure. [ 699.538643][T13426] name failslab, interval 1, probability 0, space 0, times 0 [ 699.538689][T13426] CPU: 0 UID: 0 PID: 13426 Comm: syz.0.2021 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.538712][T13426] Tainted: [L]=SOFTLOCKUP [ 699.538719][T13426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 699.538729][T13426] Call Trace: [ 699.538736][T13426] [ 699.538743][T13426] dump_stack_lvl+0xe8/0x150 [ 699.538777][T13426] should_fail_ex+0x410/0x560 [ 699.538803][T13426] should_failslab+0xa8/0x100 [ 699.538827][T13426] __kvmalloc_node_noprof+0x171/0x820 [ 699.538849][T13426] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 699.538867][T13426] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 699.538890][T13426] bpf_jit_binary_pack_alloc+0x10a/0x300 [ 699.538907][T13426] ? __pfx_jit_fill_hole+0x10/0x10 [ 699.538935][T13426] bpf_int_jit_compile+0xc70/0x1a40 [ 699.538973][T13426] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 699.539003][T13426] ? bpf_prog_has_arena_insns+0x457/0x4d0 [ 699.539023][T13426] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 699.539041][T13426] ? bpf_prepare_filter+0xd5d/0x12d0 [ 699.539067][T13426] __bpf_prog_select_runtime+0x542/0xbe0 [ 699.539087][T13426] ? bpf_prog_realloc+0x17a/0x220 [ 699.539113][T13426] bpf_prepare_filter+0x10df/0x12d0 [ 699.539138][T13426] ? __pfx_seccomp_check_filter+0x10/0x10 [ 699.539169][T13426] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 699.539190][T13426] ? __asan_memcpy+0x40/0x70 [ 699.539209][T13426] bpf_prog_create_from_user+0x2c6/0x440 [ 699.539230][T13426] ? __pfx_seccomp_check_filter+0x10/0x10 [ 699.539248][T13426] do_seccomp+0x791/0xdc0 [ 699.539264][T13426] ? fdget+0x1ac/0x250 [ 699.539282][T13426] ? __pfx_do_seccomp+0x10/0x10 [ 699.539297][T13426] ? ksys_write+0x242/0x270 [ 699.539315][T13426] ? __pfx_ksys_write+0x10/0x10 [ 699.539340][T13426] do_syscall_64+0x166/0x520 [ 699.539356][T13426] ? trace_irq_disable+0x3b/0x140 [ 699.539376][T13426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.539391][T13426] ? clear_bhb_loop+0x70/0xc0 [ 699.539410][T13426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.539425][T13426] RIP: 0033:0x7fc95319f559 [ 699.539440][T13426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.539452][T13426] RSP: 002b:00007fc9540f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 699.539469][T13426] RAX: ffffffffffffffda RBX: 00007fc953425fa0 RCX: 00007fc95319f559 [ 699.539480][T13426] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000001 [ 699.539490][T13426] RBP: 00007fc9540f8090 R08: 0000000000000000 R09: 0000000000000000 [ 699.539499][T13426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 699.539509][T13426] R13: 00007fc953426038 R14: 00007fc953425fa0 R15: 00007fc95354fa48 [ 699.539532][T13426] [ 700.706742][ T50] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 700.879898][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 700.880599][ T50] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 700.897225][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.935355][ T50] usb 1-1: config 0 descriptor?? [ 701.011320][T13439] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 701.011344][T13439] PKCS7: Only support pkcs7_signedData type [ 701.150096][ T50] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 701.171961][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 701.195690][ T50] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 701.195731][ T50] usb 1-1: media controller created [ 701.345701][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 701.367546][ T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 701.523990][ T50] az6027: usb out operation failed. (-71) [ 701.524807][ T50] az6027: usb out operation failed. (-71) [ 701.524825][ T50] stb0899_attach: Driver disabled by Kconfig [ 701.524908][ T50] az6027: no front-end attached [ 701.524908][ T50] [ 701.525296][ T50] az6027: usb out operation failed. (-71) [ 701.525351][ T50] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 701.569480][ T9] usb 5-1: New USB device found: idVendor=2466, idProduct=8010, bcdDevice=1.00 [ 701.592649][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 701.611945][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.611972][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 701.612023][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.654375][ T50] dvb-usb: schedule remote query interval to 400 msecs. [ 701.654398][ T50] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 701.746935][ T50] usb 1-1: USB disconnect, device number 100 [ 702.023414][ T9] usb 5-1: failed waiting for Axe-Fx III to boot: -71 [ 702.023488][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 702.078054][ T9] usb 5-1: USB disconnect, device number 96 [ 702.226726][ T50] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 702.358264][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'. [ 702.825665][T13458] batadv_slave_1: entered promiscuous mode [ 703.032410][ T50] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 703.077427][ T9] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 703.196629][ T50] usb 4-1: Using ep0 maxpacket: 32 [ 703.197414][ T50] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 703.198863][ T50] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 703.198893][ T50] usb 4-1: config 0 has no interface number 0 [ 703.219651][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.219728][ T50] usb 4-1: Product: syz [ 703.219769][ T50] usb 4-1: Manufacturer: syz [ 703.219813][ T50] usb 4-1: SerialNumber: syz [ 703.275427][ T9] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 703.287101][T13462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2034'. [ 703.287146][T13462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2034'. [ 703.326949][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 703.326979][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 703.327000][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 703.327056][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 703.327103][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 703.331336][ T50] usb 4-1: config 0 descriptor?? [ 703.406534][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 703.406574][ T9] usb 1-1: Product: syz [ 703.406591][ T9] usb 1-1: Manufacturer: syz [ 703.415389][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 703.415403][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 703.466627][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 703.466650][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 703.586906][ T5705] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 703.625523][T13449] fuse: Unknown parameter 'fd½0xffffffffffffffff' [ 703.741328][ T5705] usb 5-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 703.766556][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.768217][ T5705] usb 5-1: Product: syz [ 703.768238][ T5705] usb 5-1: Manufacturer: syz [ 703.768266][ T5705] usb 5-1: SerialNumber: syz [ 703.811540][ T5705] usb 5-1: config 0 descriptor?? [ 703.828861][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 703.829014][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 703.830597][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 703.830620][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 703.830839][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 703.830868][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 703.831103][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 703.831126][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 703.831417][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 703.831441][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 703.831637][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 703.831651][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 703.831949][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 703.831963][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 703.832212][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 703.832234][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 703.833463][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 703.833488][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 703.833712][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 703.833737][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 703.977751][ T5726] usb 1-1: USB disconnect, device number 101 [ 703.977831][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 704.031036][ T5705] usb 5-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 704.031137][ T5705] f81604 5-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 704.031167][ T5705] f81604 5-1:0.0: probe with driver f81604 failed with error -121 [ 704.068052][T13458] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 704.145508][ T50] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 704.145544][ T50] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 704.190383][T13458] batadv_slave_1: left promiscuous mode [ 704.382291][ T1179] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 704.382679][T13462] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 704.756791][ T50] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 704.756991][ T50] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 704.831062][ T50] usb 4-1: USB disconnect, device number 89 [ 705.113578][ T5705] usb 5-1: USB disconnect, device number 97 [ 705.954956][T13475] ip_tables: iptables: counters copy to user failed while replacing table [ 706.309571][ T5719] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 706.473384][ T5719] usb 6-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 706.489288][ T5719] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.489308][ T5719] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 706.512297][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.512379][ T5719] usb 6-1: Product: syz [ 706.512426][ T5719] usb 6-1: Manufacturer: syz [ 706.512469][ T5719] usb 6-1: SerialNumber: syz [ 707.227943][ T5719] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 707.398611][ T5719] usb 5-1: New USB device found: idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 707.403426][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 707.403449][ T5719] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 707.403468][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 707.403484][ T5719] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 707.403513][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.515734][ T5719] usb 5-1: config 0 descriptor?? [ 707.741882][ T5719] hdpvr 5-1:0.0: firmware version 0x0 dated [ 707.741920][ T5719] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 707.841370][T13493] FAULT_INJECTION: forcing a failure. [ 707.841370][T13493] name failslab, interval 1, probability 0, space 0, times 0 [ 707.841408][T13493] CPU: 1 UID: 0 PID: 13493 Comm: syz.1.2042 Tainted: G L syzkaller #0 PREEMPT(full) [ 707.841450][T13493] Tainted: [L]=SOFTLOCKUP [ 707.841459][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 707.841474][T13493] Call Trace: [ 707.841483][T13493] [ 707.841494][T13493] dump_stack_lvl+0xe8/0x150 [ 707.841535][T13493] should_fail_ex+0x410/0x560 [ 707.841571][T13493] should_failslab+0xa8/0x100 [ 707.841593][T13493] ? __kernfs_new_node+0xe6/0x980 [ 707.841698][T13493] kmem_cache_alloc_noprof+0x9c/0x600 [ 707.841717][T13493] ? __kernfs_new_node+0xe6/0x980 [ 707.841745][T13493] __kernfs_new_node+0xe6/0x980 [ 707.841775][T13493] ? __pfx___kernfs_new_node+0x10/0x10 [ 707.841798][T13493] ? lock_acquire+0x115/0x350 [ 707.841818][T13493] ? kernfs_root+0x1c/0x230 [ 707.841845][T13493] ? kernfs_root+0x1c/0x230 [ 707.841866][T13493] ? kernfs_root+0x1c/0x230 [ 707.841885][T13493] ? kernfs_root+0x1c/0x230 [ 707.841923][T13493] kernfs_new_node+0xeb/0x140 [ 707.841949][T13493] __kernfs_create_file+0x4b/0x2e0 [ 707.841968][T13493] sysfs_add_file_mode_ns+0x237/0x300 [ 707.841992][T13493] internal_create_group+0x679/0x1180 [ 707.842026][T13493] ? __pfx_internal_create_group+0x10/0x10 [ 707.842054][T13493] ? loop_update_dio+0x263/0x3c0 [ 707.842131][T13493] loop_configure+0xcfe/0x1180 [ 707.842163][T13493] ? __pfx_loop_configure+0x10/0x10 [ 707.842184][T13493] ? __lock_acquire+0x747/0x2de0 [ 707.842229][T13493] lo_ioctl+0xa2e/0x1730 [ 707.842254][T13493] ? lock_acquire+0x115/0x350 [ 707.842272][T13493] ? __pfx_lo_ioctl+0x10/0x10 [ 707.842297][T13493] ? lock_acquire+0x115/0x350 [ 707.842324][T13493] ? __lock_acquire+0x747/0x2de0 [ 707.842346][T13493] ? is_bpf_text_address+0x292/0x2b0 [ 707.842365][T13493] ? kernel_text_address+0xa5/0xe0 [ 707.842386][T13493] ? __kernel_text_address+0xd/0x30 [ 707.842405][T13493] ? unwind_get_return_address+0x4d/0x90 [ 707.842432][T13493] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 707.842452][T13493] ? arch_stack_walk+0xfb/0x150 [ 707.842479][T13493] ? __lock_acquire+0x747/0x2de0 [ 707.842505][T13493] ? __lock_acquire+0x747/0x2de0 [ 707.842531][T13493] ? __lock_acquire+0x747/0x2de0 [ 707.842584][T13493] ? __lock_acquire+0x747/0x2de0 [ 707.842627][T13493] ? lock_acquire+0x115/0x350 [ 707.842661][T13493] ? lock_acquire+0x115/0x350 [ 707.842701][T13493] ? is_bpf_text_address+0x26/0x2b0 [ 707.842720][T13493] ? is_bpf_text_address+0x292/0x2b0 [ 707.842734][T13493] ? is_bpf_text_address+0x26/0x2b0 [ 707.842752][T13493] ? kernel_text_address+0xa5/0xe0 [ 707.842772][T13493] ? __kernel_text_address+0xd/0x30 [ 707.842791][T13493] ? unwind_get_return_address+0x4d/0x90 [ 707.842813][T13493] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 707.842833][T13493] ? arch_stack_walk+0xfb/0x150 [ 707.842861][T13493] ? stack_trace_save+0xa9/0x100 [ 707.842881][T13493] ? __pfx_stack_trace_save+0x10/0x10 [ 707.842899][T13493] ? kasan_save_track+0x4f/0x80 [ 707.842919][T13493] ? stack_depot_save_flags+0x33/0x7f0 [ 707.842976][T13493] ? __lock_acquire+0x747/0x2de0 [ 707.842999][T13493] ? kasan_save_track+0x4f/0x80 [ 707.843016][T13493] ? kasan_save_track+0x3e/0x80 [ 707.843033][T13493] ? kasan_save_free_info+0x40/0x50 [ 707.843056][T13493] ? __kasan_slab_free+0x5c/0x80 [ 707.843074][T13493] ? kfree+0x1c5/0x650 [ 707.843096][T13493] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 707.843149][T13493] ? security_file_ioctl+0xc3/0x2a0 [ 707.843173][T13493] ? __se_sys_ioctl+0x47/0x170 [ 707.843192][T13493] ? do_syscall_64+0x166/0x520 [ 707.843209][T13493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.843229][T13493] ? __asan_memset+0x22/0x50 [ 707.843245][T13493] ? blk_get_meta_cap+0x19d/0x780 [ 707.843294][T13493] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 707.843320][T13493] ? blkdev_common_ioctl+0x14b7/0x3250 [ 707.843375][T13493] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 707.843397][T13493] ? kasan_quarantine_put+0xbb/0x1f0 [ 707.843420][T13493] ? tomoyo_path_number_perm+0x219/0x5f0 [ 707.843446][T13493] ? tomoyo_path_number_perm+0x219/0x5f0 [ 707.843474][T13493] ? do_vfs_ioctl+0x116f/0x1530 [ 707.843522][T13493] ? __pfx_lo_ioctl+0x10/0x10 [ 707.843545][T13493] blkdev_ioctl+0x5e3/0x740 [ 707.843576][T13493] ? __pfx_blkdev_ioctl+0x10/0x10 [ 707.843622][T13493] ? bpf_lsm_file_ioctl+0x9/0x20 [ 707.843658][T13493] ? __pfx_blkdev_ioctl+0x10/0x10 [ 707.843729][T13493] __se_sys_ioctl+0xfc/0x170 [ 707.843761][T13493] do_syscall_64+0x166/0x520 [ 707.843782][T13493] ? trace_irq_disable+0x3b/0x140 [ 707.843811][T13493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.843839][T13493] ? clear_bhb_loop+0x70/0xc0 [ 707.843859][T13493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.843875][T13493] RIP: 0033:0x7efccd39f559 [ 707.843890][T13493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.843904][T13493] RSP: 002b:00007efcce255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 707.843921][T13493] RAX: ffffffffffffffda RBX: 00007efccd625fa0 RCX: 00007efccd39f559 [ 707.843933][T13493] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 707.843944][T13493] RBP: 00007efcce255090 R08: 0000000000000000 R09: 0000000000000000 [ 707.843954][T13493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.843964][T13493] R13: 00007efccd626038 R14: 00007efccd625fa0 R15: 00007efccd74fa48 [ 707.843993][T13493] [ 708.424382][T13493] loop5: detected capacity change from 0 to 7 [ 708.433440][T13493] Dev loop5: unable to read RDB block 7 [ 708.433504][T13493] loop5: AHDI p1 p2 p4 [ 708.433521][T13493] loop5: partition table partially beyond EOD, truncated [ 708.433804][T13493] loop5: p1 start 5439488 is beyond EOD, truncated [ 708.433853][T13493] loop5: p4 start 3288604672 is beyond EOD, truncated [ 708.998670][ T5719] hdpvr 5-1:0.0: Could not setup controls [ 708.999160][ T5719] hdpvr 5-1:0.0: registering videodev failed [ 709.094043][ T5719] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 709.143312][ T5719] usb 5-1: USB disconnect, device number 98 [ 709.303791][T13499] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2043'. [ 709.562265][ T5719] usb 6-1: USB disconnect, device number 9 [ 709.802623][T13506] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 710.634644][T13521] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2049'. [ 711.684761][T13537] FAULT_INJECTION: forcing a failure. [ 711.684761][T13537] name failslab, interval 1, probability 0, space 0, times 0 [ 711.684790][T13537] CPU: 0 UID: 0 PID: 13537 Comm: syz.0.2054 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.684812][T13537] Tainted: [L]=SOFTLOCKUP [ 711.684819][T13537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 711.684829][T13537] Call Trace: [ 711.684836][T13537] [ 711.684843][T13537] dump_stack_lvl+0xe8/0x150 [ 711.684874][T13537] should_fail_ex+0x410/0x560 [ 711.684901][T13537] should_failslab+0xa8/0x100 [ 711.684923][T13537] ? __kernfs_new_node+0xe6/0x980 [ 711.684947][T13537] kmem_cache_alloc_noprof+0x9c/0x600 [ 711.684965][T13537] ? __kernfs_new_node+0xe6/0x980 [ 711.684993][T13537] __kernfs_new_node+0xe6/0x980 [ 711.685022][T13537] ? __pfx___kernfs_new_node+0x10/0x10 [ 711.685052][T13537] ? lock_acquire+0x115/0x350 [ 711.685073][T13537] ? kernfs_root+0x1c/0x230 [ 711.685100][T13537] ? kernfs_root+0x1c/0x230 [ 711.685121][T13537] ? kernfs_root+0x1c/0x230 [ 711.685141][T13537] ? kernfs_root+0x1c/0x230 [ 711.685166][T13537] kernfs_new_node+0xeb/0x140 [ 711.685192][T13537] __kernfs_create_file+0x4b/0x2e0 [ 711.685212][T13537] sysfs_add_file_mode_ns+0x237/0x300 [ 711.685237][T13537] internal_create_group+0x679/0x1180 [ 711.685271][T13537] ? __pfx_internal_create_group+0x10/0x10 [ 711.685298][T13537] ? loop_update_dio+0x263/0x3c0 [ 711.685325][T13537] loop_configure+0xcfe/0x1180 [ 711.685357][T13537] ? __pfx_loop_configure+0x10/0x10 [ 711.685380][T13537] ? __lock_acquire+0x747/0x2de0 [ 711.685459][T13537] lo_ioctl+0xa2e/0x1730 [ 711.685485][T13537] ? lock_acquire+0x115/0x350 [ 711.685505][T13537] ? __pfx_lo_ioctl+0x10/0x10 [ 711.685532][T13537] ? lock_acquire+0x115/0x350 [ 711.685561][T13537] ? __lock_acquire+0x747/0x2de0 [ 711.685596][T13537] ? is_bpf_text_address+0x292/0x2b0 [ 711.685615][T13537] ? kernel_text_address+0xa5/0xe0 [ 711.685638][T13537] ? __kernel_text_address+0xd/0x30 [ 711.685657][T13537] ? unwind_get_return_address+0x4d/0x90 [ 711.685679][T13537] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 711.685699][T13537] ? arch_stack_walk+0xfb/0x150 [ 711.685722][T13537] ? __lock_acquire+0x747/0x2de0 [ 711.685748][T13537] ? __lock_acquire+0x747/0x2de0 [ 711.685774][T13537] ? __lock_acquire+0x747/0x2de0 [ 711.685798][T13537] ? __lock_acquire+0x747/0x2de0 [ 711.685828][T13537] ? lock_acquire+0x115/0x350 [ 711.685852][T13537] ? lock_acquire+0x115/0x350 [ 711.685878][T13537] ? is_bpf_text_address+0x26/0x2b0 [ 711.685896][T13537] ? is_bpf_text_address+0x292/0x2b0 [ 711.685911][T13537] ? is_bpf_text_address+0x26/0x2b0 [ 711.685928][T13537] ? kernel_text_address+0xa5/0xe0 [ 711.685949][T13537] ? __kernel_text_address+0xd/0x30 [ 711.685968][T13537] ? unwind_get_return_address+0x4d/0x90 [ 711.685989][T13537] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 711.686009][T13537] ? arch_stack_walk+0xfb/0x150 [ 711.686048][T13537] ? stack_trace_save+0xa9/0x100 [ 711.686067][T13537] ? __pfx_stack_trace_save+0x10/0x10 [ 711.686086][T13537] ? kasan_save_track+0x4f/0x80 [ 711.686106][T13537] ? stack_depot_save_flags+0x33/0x7f0 [ 711.686128][T13537] ? __lock_acquire+0x747/0x2de0 [ 711.686150][T13537] ? kasan_save_track+0x4f/0x80 [ 711.686167][T13537] ? kasan_save_track+0x3e/0x80 [ 711.686183][T13537] ? kasan_save_free_info+0x40/0x50 [ 711.686206][T13537] ? __kasan_slab_free+0x5c/0x80 [ 711.686224][T13537] ? kfree+0x1c5/0x650 [ 711.686247][T13537] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 711.686272][T13537] ? security_file_ioctl+0xc3/0x2a0 [ 711.686295][T13537] ? __se_sys_ioctl+0x47/0x170 [ 711.686313][T13537] ? do_syscall_64+0x166/0x520 [ 711.686329][T13537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.686367][T13537] ? __asan_memset+0x22/0x50 [ 711.686391][T13537] ? blk_get_meta_cap+0x19d/0x780 [ 711.686432][T13537] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 711.686476][T13537] ? blkdev_common_ioctl+0x14b7/0x3250 [ 711.686502][T13537] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 711.686523][T13537] ? kasan_quarantine_put+0xbb/0x1f0 [ 711.686551][T13537] ? tomoyo_path_number_perm+0x219/0x5f0 [ 711.686578][T13537] ? tomoyo_path_number_perm+0x219/0x5f0 [ 711.686607][T13537] ? do_vfs_ioctl+0x116f/0x1530 [ 711.686657][T13537] ? __pfx_lo_ioctl+0x10/0x10 [ 711.686679][T13537] blkdev_ioctl+0x5e3/0x740 [ 711.686702][T13537] ? __pfx_blkdev_ioctl+0x10/0x10 [ 711.686725][T13537] ? bpf_lsm_file_ioctl+0x9/0x20 [ 711.686746][T13537] ? __pfx_blkdev_ioctl+0x10/0x10 [ 711.686766][T13537] __se_sys_ioctl+0xfc/0x170 [ 711.686787][T13537] do_syscall_64+0x166/0x520 [ 711.686803][T13537] ? trace_irq_disable+0x3b/0x140 [ 711.686823][T13537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.686840][T13537] ? clear_bhb_loop+0x70/0xc0 [ 711.686859][T13537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.686875][T13537] RIP: 0033:0x7fc95319f559 [ 711.686890][T13537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.686904][T13537] RSP: 002b:00007fc9540f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 711.686921][T13537] RAX: ffffffffffffffda RBX: 00007fc953425fa0 RCX: 00007fc95319f559 [ 711.686933][T13537] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 711.686943][T13537] RBP: 00007fc9540f8090 R08: 0000000000000000 R09: 0000000000000000 [ 711.686953][T13537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 711.686963][T13537] R13: 00007fc953426038 R14: 00007fc953425fa0 R15: 00007fc95354fa48 [ 711.686988][T13537] [ 712.075120][T13537] loop5: detected capacity change from 0 to 7 [ 712.399399][T13537] Dev loop5: unable to read RDB block 7 [ 712.399432][T13537] loop5: AHDI p1 p2 p4 [ 712.399454][T13537] loop5: partition table partially beyond EOD, truncated [ 712.399617][T13537] loop5: p1 start 5439488 is beyond EOD, truncated [ 712.399639][T13537] loop5: p4 start 3288604672 is beyond EOD, truncated [ 712.608823][ T50] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 712.791455][ T50] usb 4-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 712.829139][ T50] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 712.829170][ T50] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 712.862451][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.862471][ T50] usb 4-1: Product: syz [ 712.862482][ T50] usb 4-1: Manufacturer: syz [ 712.862493][ T50] usb 4-1: SerialNumber: syz [ 713.440095][ T50] usb 4-1: Cannot retrieve CPort count: -110 [ 713.440132][ T50] usb 4-1: Cannot retrieve CPort count: -110 [ 713.440151][ T50] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 714.523986][T11871] usb 4-1: USB disconnect, device number 90 [ 714.649378][ T5705] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 714.817377][ T5705] usb 1-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 714.818591][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.818625][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.818654][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.825002][ T5705] usb 1-1: config 0 descriptor?? [ 715.206697][T11871] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 715.357757][T11871] usb 6-1: New USB device found: idVendor=174c, idProduct=55aa, bcdDevice=1.00 [ 715.391142][T11871] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.391191][T11871] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 715.391211][T11871] usb 6-1: config 1 interface 0 has no altsetting 0 [ 715.432250][T11871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.432313][T11871] usb 6-1: Product: syz [ 715.432332][T11871] usb 6-1: Manufacturer: syz [ 715.432361][T11871] usb 6-1: SerialNumber: syz [ 715.480015][T11871] usb-storage 6-1:1.0: USB Mass Storage device detected [ 715.513050][T11871] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 715.639476][T13551] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 715.702072][ T50] usb 6-1: USB disconnect, device number 10 [ 715.737972][ T5719] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 715.893566][ T30] audit: type=1326 audit(1792969901.530:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.3.2061" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 715.924825][ T30] audit: type=1326 audit(1792969901.530:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.3.2061" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 715.926242][ T30] audit: type=1326 audit(1792969901.560:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.3.2061" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 715.981030][ T30] audit: type=1326 audit(1792969901.620:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.3.2061" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 715.981982][ T30] audit: type=1326 audit(1792969901.620:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.3.2061" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 715.985005][ T5719] usb 5-1: Using ep0 maxpacket: 16 [ 716.069417][ T30] audit: type=1326 audit(1792969901.710:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.3.2061" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 716.069911][ T30] audit: type=1326 audit(1792969901.710:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.3.2061" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 716.070575][ T30] audit: type=1326 audit(1792969901.710:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.3.2061" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 716.155101][ T5719] usb 5-1: unable to get BOS descriptor or descriptor too short [ 716.155167][ T5719] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 716.185202][ T30] audit: type=1326 audit(1792969901.820:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.3.2061" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 716.185295][ T30] audit: type=1326 audit(1792969901.820:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.3.2061" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3db99f559 code=0x7ffc0000 [ 716.246036][ T5719] usb 5-1: config index 0 descriptor too short (expected 1033, got 27) [ 716.246059][ T5719] usb 5-1: config 7 has an invalid descriptor of length 123, skipping remainder of the config [ 716.246112][ T5719] usb 5-1: config 7 has no interfaces? [ 716.320617][ T5719] usb 5-1: string descriptor 0 read error: -22 [ 716.320782][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.380502][ T5705] usbhid 1-1:0.0: can't add hid device: -71 [ 716.380622][ T5705] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 716.409764][ T5705] usb 1-1: USB disconnect, device number 102 [ 716.741745][T13573] xt_hashlimit: size too large, truncated to 1048576 [ 717.033698][T13579] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2062'. [ 717.455132][T13582] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 718.331314][T11871] usb 5-1: USB disconnect, device number 99 [ 718.986515][T11871] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 719.858357][ T5719] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 720.021895][ T5719] usb 4-1: New USB device found: idVendor=046d, idProduct=0821, bcdDevice=1.00 [ 720.025437][ T5719] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 720.025512][ T5719] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 720.074923][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 720.074944][ T5719] usb 4-1: Product: syz [ 720.074955][ T5719] usb 4-1: Manufacturer: syz [ 720.174010][ T5719] uvcvideo 4-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 720.174134][ T5719] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 720.174210][ T5719] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 720.423133][T11872] usb 4-1: USB disconnect, device number 91 [ 721.112605][T13615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2074'. [ 722.395613][T13628] FAULT_INJECTION: forcing a failure. [ 722.395613][T13628] name failslab, interval 1, probability 0, space 0, times 0 [ 722.395654][T13628] CPU: 0 UID: 0 PID: 13628 Comm: syz.1.2078 Tainted: G L syzkaller #0 PREEMPT(full) [ 722.395685][T13628] Tainted: [L]=SOFTLOCKUP [ 722.395694][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 722.395708][T13628] Call Trace: [ 722.395717][T13628] [ 722.395728][T13628] dump_stack_lvl+0xe8/0x150 [ 722.395769][T13628] should_fail_ex+0x410/0x560 [ 722.395805][T13628] should_failslab+0xa8/0x100 [ 722.395835][T13628] ? __kernfs_new_node+0xe6/0x980 [ 722.395867][T13628] kmem_cache_alloc_noprof+0x9c/0x600 [ 722.395894][T13628] ? __kernfs_new_node+0xe6/0x980 [ 722.395932][T13628] __kernfs_new_node+0xe6/0x980 [ 722.395975][T13628] ? __pfx___kernfs_new_node+0x10/0x10 [ 722.396005][T13628] ? lock_acquire+0x115/0x350 [ 722.396032][T13628] ? kernfs_root+0x1c/0x230 [ 722.396069][T13628] ? kernfs_root+0x1c/0x230 [ 722.396098][T13628] ? kernfs_root+0x1c/0x230 [ 722.396129][T13628] ? kernfs_root+0x1c/0x230 [ 722.396170][T13628] kernfs_new_node+0xeb/0x140 [ 722.396206][T13628] __kernfs_create_file+0x4b/0x2e0 [ 722.396233][T13628] sysfs_add_file_mode_ns+0x237/0x300 [ 722.396267][T13628] internal_create_group+0x679/0x1180 [ 722.396316][T13628] ? __pfx_internal_create_group+0x10/0x10 [ 722.396351][T13628] ? loop_update_dio+0x263/0x3c0 [ 722.396387][T13628] loop_configure+0xcfe/0x1180 [ 722.396432][T13628] ? __pfx_loop_configure+0x10/0x10 [ 722.396461][T13628] ? __lock_acquire+0x747/0x2de0 [ 722.396522][T13628] lo_ioctl+0xa2e/0x1730 [ 722.396556][T13628] ? lock_acquire+0x115/0x350 [ 722.396581][T13628] ? __pfx_lo_ioctl+0x10/0x10 [ 722.396617][T13628] ? lock_acquire+0x115/0x350 [ 722.396656][T13628] ? __lock_acquire+0x747/0x2de0 [ 722.396686][T13628] ? is_bpf_text_address+0x292/0x2b0 [ 722.396714][T13628] ? kernel_text_address+0xa5/0xe0 [ 722.396742][T13628] ? __kernel_text_address+0xd/0x30 [ 722.396769][T13628] ? unwind_get_return_address+0x4d/0x90 [ 722.396799][T13628] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 722.396827][T13628] ? arch_stack_walk+0xfb/0x150 [ 722.396858][T13628] ? __lock_acquire+0x747/0x2de0 [ 722.396896][T13628] ? __lock_acquire+0x747/0x2de0 [ 722.396933][T13628] ? __lock_acquire+0x747/0x2de0 [ 722.396969][T13628] ? __lock_acquire+0x747/0x2de0 [ 722.397013][T13628] ? lock_acquire+0x115/0x350 [ 722.397047][T13628] ? lock_acquire+0x115/0x350 [ 722.397083][T13628] ? is_bpf_text_address+0x26/0x2b0 [ 722.397110][T13628] ? is_bpf_text_address+0x292/0x2b0 [ 722.397131][T13628] ? is_bpf_text_address+0x26/0x2b0 [ 722.397164][T13628] ? kernel_text_address+0xa5/0xe0 [ 722.397193][T13628] ? __kernel_text_address+0xd/0x30 [ 722.397220][T13628] ? unwind_get_return_address+0x4d/0x90 [ 722.397250][T13628] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 722.397278][T13628] ? arch_stack_walk+0xfb/0x150 [ 722.397320][T13628] ? stack_trace_save+0xa9/0x100 [ 722.397366][T13628] ? __pfx_stack_trace_save+0x10/0x10 [ 722.397391][T13628] ? kasan_save_track+0x4f/0x80 [ 722.397422][T13628] ? stack_depot_save_flags+0x33/0x7f0 [ 722.397452][T13628] ? __lock_acquire+0x747/0x2de0 [ 722.397484][T13628] ? kasan_save_track+0x4f/0x80 [ 722.397508][T13628] ? kasan_save_track+0x3e/0x80 [ 722.397533][T13628] ? kasan_save_free_info+0x40/0x50 [ 722.397566][T13628] ? __kasan_slab_free+0x5c/0x80 [ 722.397591][T13628] ? kfree+0x1c5/0x650 [ 722.397623][T13628] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 722.397657][T13628] ? security_file_ioctl+0xc3/0x2a0 [ 722.397689][T13628] ? __se_sys_ioctl+0x47/0x170 [ 722.397716][T13628] ? do_syscall_64+0x166/0x520 [ 722.397738][T13628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.397768][T13628] ? __asan_memset+0x22/0x50 [ 722.397791][T13628] ? blk_get_meta_cap+0x19d/0x780 [ 722.397825][T13628] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 722.397865][T13628] ? blkdev_common_ioctl+0x14b7/0x3250 [ 722.397903][T13628] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 722.397934][T13628] ? kasan_quarantine_put+0xbb/0x1f0 [ 722.397968][T13628] ? tomoyo_path_number_perm+0x219/0x5f0 [ 722.398005][T13628] ? tomoyo_path_number_perm+0x219/0x5f0 [ 722.398046][T13628] ? do_vfs_ioctl+0x116f/0x1530 [ 722.398118][T13628] ? __pfx_lo_ioctl+0x10/0x10 [ 722.398158][T13628] blkdev_ioctl+0x5e3/0x740 [ 722.398190][T13628] ? __pfx_blkdev_ioctl+0x10/0x10 [ 722.398223][T13628] ? bpf_lsm_file_ioctl+0x9/0x20 [ 722.398256][T13628] ? __pfx_blkdev_ioctl+0x10/0x10 [ 722.398286][T13628] __se_sys_ioctl+0xfc/0x170 [ 722.398319][T13628] do_syscall_64+0x166/0x520 [ 722.398341][T13628] ? trace_irq_disable+0x3b/0x140 [ 722.398371][T13628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.398394][T13628] ? clear_bhb_loop+0x70/0xc0 [ 722.398423][T13628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.398447][T13628] RIP: 0033:0x7efccd39f559 [ 722.398468][T13628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.398488][T13628] RSP: 002b:00007efcce255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.398513][T13628] RAX: ffffffffffffffda RBX: 00007efccd625fa0 RCX: 00007efccd39f559 [ 722.398531][T13628] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 722.398546][T13628] RBP: 00007efcce255090 R08: 0000000000000000 R09: 0000000000000000 [ 722.398562][T13628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 722.398576][T13628] R13: 00007efccd626038 R14: 00007efccd625fa0 R15: 00007efccd74fa48 [ 722.398611][T13628] [ 722.859504][T13628] loop5: detected capacity change from 0 to 7 [ 722.923210][T13628] Dev loop5: unable to read RDB block 7 [ 722.923284][T13628] loop5: AHDI p1 p2 p4 [ 722.923334][T13628] loop5: partition table partially beyond EOD, truncated [ 722.923983][T13628] loop5: p1 start 5439488 is beyond EOD, truncated [ 722.924059][T13628] loop5: p4 start 3288604672 is beyond EOD, truncated [ 725.504752][T13670] ip_tables: iptables: counters copy to user failed while replacing table [ 725.653345][T13674] loop5: detected capacity change from 0 to 7 [ 725.653386][T13674] FAULT_INJECTION: forcing a failure. [ 725.653386][T13674] name failslab, interval 1, probability 0, space 0, times 0 [ 725.653419][T13674] CPU: 1 UID: 0 PID: 13674 Comm: syz.1.2093 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.653451][T13674] Tainted: [L]=SOFTLOCKUP [ 725.653460][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 725.653473][T13674] Call Trace: [ 725.653483][T13674] [ 725.653501][T13674] dump_stack_lvl+0xe8/0x150 [ 725.653543][T13674] should_fail_ex+0x410/0x560 [ 725.653580][T13674] should_failslab+0xa8/0x100 [ 725.653615][T13674] __kmalloc_noprof+0xf9/0x710 [ 725.653641][T13674] ? kobject_get_path+0xc5/0x2f0 [ 725.653742][T13674] ? kobject_get_path+0xc5/0x2f0 [ 725.653780][T13674] kobject_get_path+0xc5/0x2f0 [ 725.653816][T13674] kobject_uevent_env+0x29e/0x9e0 [ 725.653859][T13674] loop_configure+0xeb1/0x1180 [ 725.653907][T13674] ? __pfx_loop_configure+0x10/0x10 [ 725.653942][T13674] ? __lock_acquire+0x747/0x2de0 [ 725.654005][T13674] lo_ioctl+0xa2e/0x1730 [ 725.654042][T13674] ? lock_acquire+0x115/0x350 [ 725.654070][T13674] ? __pfx_lo_ioctl+0x10/0x10 [ 725.654103][T13674] ? lock_acquire+0x115/0x350 [ 725.654144][T13674] ? __lock_acquire+0x747/0x2de0 [ 725.654174][T13674] ? is_bpf_text_address+0x292/0x2b0 [ 725.654203][T13674] ? kernel_text_address+0xa5/0xe0 [ 725.654232][T13674] ? __kernel_text_address+0xd/0x30 [ 725.654252][T13674] ? unwind_get_return_address+0x4d/0x90 [ 725.654275][T13674] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 725.654296][T13674] ? arch_stack_walk+0xfb/0x150 [ 725.654319][T13674] ? __lock_acquire+0x747/0x2de0 [ 725.654347][T13674] ? __lock_acquire+0x747/0x2de0 [ 725.654374][T13674] ? __lock_acquire+0x747/0x2de0 [ 725.654399][T13674] ? __lock_acquire+0x747/0x2de0 [ 725.654430][T13674] ? lock_acquire+0x115/0x350 [ 725.654455][T13674] ? lock_acquire+0x115/0x350 [ 725.654482][T13674] ? is_bpf_text_address+0x26/0x2b0 [ 725.654506][T13674] ? is_bpf_text_address+0x292/0x2b0 [ 725.654522][T13674] ? is_bpf_text_address+0x26/0x2b0 [ 725.654540][T13674] ? kernel_text_address+0xa5/0xe0 [ 725.654561][T13674] ? __kernel_text_address+0xd/0x30 [ 725.654581][T13674] ? unwind_get_return_address+0x4d/0x90 [ 725.654623][T13674] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 725.654652][T13674] ? arch_stack_walk+0xfb/0x150 [ 725.654693][T13674] ? stack_trace_save+0xa9/0x100 [ 725.654719][T13674] ? __pfx_stack_trace_save+0x10/0x10 [ 725.654746][T13674] ? kasan_save_track+0x4f/0x80 [ 725.654767][T13674] ? stack_depot_save_flags+0x33/0x7f0 [ 725.654789][T13674] ? __lock_acquire+0x747/0x2de0 [ 725.654810][T13674] ? kasan_save_track+0x4f/0x80 [ 725.654827][T13674] ? kasan_save_track+0x3e/0x80 [ 725.654843][T13674] ? kasan_save_free_info+0x40/0x50 [ 725.654866][T13674] ? __kasan_slab_free+0x5c/0x80 [ 725.654884][T13674] ? kfree+0x1c5/0x650 [ 725.654907][T13674] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 725.654931][T13674] ? security_file_ioctl+0xc3/0x2a0 [ 725.654953][T13674] ? __se_sys_ioctl+0x47/0x170 [ 725.654972][T13674] ? do_syscall_64+0x166/0x520 [ 725.654988][T13674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.655010][T13674] ? __asan_memset+0x22/0x50 [ 725.655027][T13674] ? blk_get_meta_cap+0x19d/0x780 [ 725.655051][T13674] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 725.655078][T13674] ? blkdev_common_ioctl+0x14b7/0x3250 [ 725.655104][T13674] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 725.655127][T13674] ? kasan_quarantine_put+0xbb/0x1f0 [ 725.655152][T13674] ? tomoyo_path_number_perm+0x219/0x5f0 [ 725.655179][T13674] ? tomoyo_path_number_perm+0x219/0x5f0 [ 725.655208][T13674] ? do_vfs_ioctl+0x116f/0x1530 [ 725.655258][T13674] ? __pfx_lo_ioctl+0x10/0x10 [ 725.655282][T13674] blkdev_ioctl+0x5e3/0x740 [ 725.655305][T13674] ? __pfx_blkdev_ioctl+0x10/0x10 [ 725.655329][T13674] ? bpf_lsm_file_ioctl+0x9/0x20 [ 725.655352][T13674] ? __pfx_blkdev_ioctl+0x10/0x10 [ 725.655372][T13674] __se_sys_ioctl+0xfc/0x170 [ 725.655395][T13674] do_syscall_64+0x166/0x520 [ 725.655411][T13674] ? trace_irq_disable+0x3b/0x140 [ 725.655433][T13674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.655449][T13674] ? clear_bhb_loop+0x70/0xc0 [ 725.655469][T13674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.655486][T13674] RIP: 0033:0x7efccd39f559 [ 725.655506][T13674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.655520][T13674] RSP: 002b:00007efcce255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 725.655538][T13674] RAX: ffffffffffffffda RBX: 00007efccd625fa0 RCX: 00007efccd39f559 [ 725.655550][T13674] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 725.655561][T13674] RBP: 00007efcce255090 R08: 0000000000000000 R09: 0000000000000000 [ 725.655571][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 725.655581][T13674] R13: 00007efccd626038 R14: 00007efccd625fa0 R15: 00007efccd74fa48 [ 725.655606][T13674] [ 725.897222][T13674] Dev loop5: unable to read RDB block 7 [ 725.911406][T11871] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 725.938792][T13674] loop5: AHDI p1 p2 p4 [ 725.938887][T13674] loop5: partition table partially beyond EOD, truncated [ 725.950272][T13674] loop5: p1 start 5439488 is beyond EOD, truncated [ 725.950340][T13674] loop5: p4 start 3288604672 is beyond EOD, truncated [ 726.027378][ T5719] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 726.154389][T11871] usb 5-1: Using ep0 maxpacket: 32 [ 726.219212][T11871] usb 5-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 726.221327][T11871] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 726.221357][T11871] usb 5-1: config 0 has no interface number 0 [ 726.221403][T11871] usb 5-1: config 0 interface 184 has no altsetting 0 [ 726.224335][T11871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.224362][T11871] usb 5-1: Product: syz [ 726.224378][T11871] usb 5-1: Manufacturer: syz [ 726.224395][T11871] usb 5-1: SerialNumber: syz [ 726.286011][T11871] usb 5-1: config 0 descriptor?? [ 726.362819][ T5719] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 726.389168][ T5719] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.389199][ T5719] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 726.419045][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.419066][ T5719] usb 1-1: Product: syz [ 726.419078][ T5719] usb 1-1: Manufacturer: syz [ 726.419105][ T5719] usb 1-1: SerialNumber: syz [ 726.960935][T13673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.961301][T13673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.013751][T11871] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 727.013776][T11871] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 727.013792][T11871] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 727.013979][T11871] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 727.077311][T11871] usb 5-1: USB disconnect, device number 100 [ 728.321641][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 728.321664][ T30] audit: type=1326 audit(1792969913.960:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.4.2100" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8d99f559 code=0x7ffc0000 [ 728.322037][ T30] audit: type=1326 audit(1792969913.960:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.4.2100" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8d99f559 code=0x7ffc0000 [ 728.322938][ T30] audit: type=1326 audit(1792969913.960:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.4.2100" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c8d99f559 code=0x7ffc0000 [ 728.448799][ T30] audit: type=1326 audit(1792969914.090:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.4.2100" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8d99f559 code=0x7ffc0000 [ 728.448856][ T30] audit: type=1326 audit(1792969914.090:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.4.2100" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8d99f559 code=0x7ffc0000 [ 728.759743][T13704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.782678][T13704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.876853][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 728.943842][ T5719] usb 1-1: USB disconnect, device number 103 [ 729.241025][T13710] loop5: detected capacity change from 0 to 7 [ 729.241051][T13710] FAULT_INJECTION: forcing a failure. [ 729.241051][T13710] name failslab, interval 1, probability 0, space 0, times 0 [ 729.241074][T13710] CPU: 0 UID: 0 PID: 13710 Comm: syz.4.2105 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.241096][T13710] Tainted: [L]=SOFTLOCKUP [ 729.241102][T13710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 729.241112][T13710] Call Trace: [ 729.241118][T13710] [ 729.241126][T13710] dump_stack_lvl+0xe8/0x150 [ 729.241156][T13710] should_fail_ex+0x410/0x560 [ 729.241184][T13710] should_failslab+0xa8/0x100 [ 729.241208][T13710] __kmalloc_noprof+0xf9/0x710 [ 729.241227][T13710] ? kobject_get_path+0xc5/0x2f0 [ 729.241247][T13710] ? kobject_get_path+0xc5/0x2f0 [ 729.241283][T13710] kobject_get_path+0xc5/0x2f0 [ 729.241326][T13710] kobject_uevent_env+0x29e/0x9e0 [ 729.241356][T13710] loop_configure+0xeb1/0x1180 [ 729.241389][T13710] ? __pfx_loop_configure+0x10/0x10 [ 729.241411][T13710] ? __lock_acquire+0x747/0x2de0 [ 729.241455][T13710] lo_ioctl+0xa2e/0x1730 [ 729.241480][T13710] ? lock_acquire+0x115/0x350 [ 729.241500][T13710] ? __pfx_lo_ioctl+0x10/0x10 [ 729.241538][T13710] ? lock_acquire+0x115/0x350 [ 729.241564][T13710] ? __lock_acquire+0x747/0x2de0 [ 729.241585][T13710] ? is_bpf_text_address+0x292/0x2b0 [ 729.241603][T13710] ? kernel_text_address+0xa5/0xe0 [ 729.241623][T13710] ? __kernel_text_address+0xd/0x30 [ 729.241641][T13710] ? unwind_get_return_address+0x4d/0x90 [ 729.241662][T13710] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 729.241681][T13710] ? arch_stack_walk+0xfb/0x150 [ 729.241702][T13710] ? __lock_acquire+0x747/0x2de0 [ 729.241728][T13710] ? __lock_acquire+0x747/0x2de0 [ 729.241753][T13710] ? __lock_acquire+0x747/0x2de0 [ 729.241782][T13710] ? __lock_acquire+0x747/0x2de0 [ 729.241812][T13710] ? lock_acquire+0x115/0x350 [ 729.241840][T13710] ? lock_acquire+0x115/0x350 [ 729.241866][T13710] ? is_bpf_text_address+0x26/0x2b0 [ 729.241885][T13710] ? is_bpf_text_address+0x292/0x2b0 [ 729.241899][T13710] ? is_bpf_text_address+0x26/0x2b0 [ 729.241917][T13710] ? kernel_text_address+0xa5/0xe0 [ 729.241937][T13710] ? __kernel_text_address+0xd/0x30 [ 729.241956][T13710] ? unwind_get_return_address+0x4d/0x90 [ 729.241978][T13710] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 729.241997][T13710] ? arch_stack_walk+0xfb/0x150 [ 729.242026][T13710] ? stack_trace_save+0xa9/0x100 [ 729.242045][T13710] ? __pfx_stack_trace_save+0x10/0x10 [ 729.242063][T13710] ? kasan_save_track+0x4f/0x80 [ 729.242084][T13710] ? stack_depot_save_flags+0x33/0x7f0 [ 729.242106][T13710] ? __lock_acquire+0x747/0x2de0 [ 729.242128][T13710] ? kasan_save_track+0x4f/0x80 [ 729.242144][T13710] ? kasan_save_track+0x3e/0x80 [ 729.242161][T13710] ? kasan_save_free_info+0x40/0x50 [ 729.242184][T13710] ? __kasan_slab_free+0x5c/0x80 [ 729.242202][T13710] ? kfree+0x1c5/0x650 [ 729.242225][T13710] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 729.242250][T13710] ? security_file_ioctl+0xc3/0x2a0 [ 729.242273][T13710] ? __se_sys_ioctl+0x47/0x170 [ 729.242292][T13710] ? do_syscall_64+0x166/0x520 [ 729.242307][T13710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.242327][T13710] ? __asan_memset+0x22/0x50 [ 729.242343][T13710] ? blk_get_meta_cap+0x19d/0x780 [ 729.242366][T13710] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 729.242392][T13710] ? blkdev_common_ioctl+0x14b7/0x3250 [ 729.242418][T13710] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 729.242439][T13710] ? kasan_quarantine_put+0xbb/0x1f0 [ 729.242481][T13710] ? tomoyo_path_number_perm+0x219/0x5f0 [ 729.242507][T13710] ? tomoyo_path_number_perm+0x219/0x5f0 [ 729.242535][T13710] ? do_vfs_ioctl+0x116f/0x1530 [ 729.242583][T13710] ? __pfx_lo_ioctl+0x10/0x10 [ 729.242606][T13710] blkdev_ioctl+0x5e3/0x740 [ 729.242628][T13710] ? __pfx_blkdev_ioctl+0x10/0x10 [ 729.242651][T13710] ? bpf_lsm_file_ioctl+0x9/0x20 [ 729.242673][T13710] ? __pfx_blkdev_ioctl+0x10/0x10 [ 729.242693][T13710] __se_sys_ioctl+0xfc/0x170 [ 729.242715][T13710] do_syscall_64+0x166/0x520 [ 729.242730][T13710] ? trace_irq_disable+0x3b/0x140 [ 729.242751][T13710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.242771][T13710] ? clear_bhb_loop+0x70/0xc0 [ 729.242791][T13710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.242806][T13710] RIP: 0033:0x7f8c8d99f559 [ 729.242822][T13710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.242835][T13710] RSP: 002b:00007f8c8e79f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 729.242852][T13710] RAX: ffffffffffffffda RBX: 00007f8c8dc25fa0 RCX: 00007f8c8d99f559 [ 729.242864][T13710] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 729.242875][T13710] RBP: 00007f8c8e79f090 R08: 0000000000000000 R09: 0000000000000000 [ 729.242885][T13710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 729.242895][T13710] R13: 00007f8c8dc26038 R14: 00007f8c8dc25fa0 R15: 00007f8c8dd4fa48 [ 729.242920][T13710] [ 729.569004][T13710] Dev loop5: unable to read RDB block 7 [ 729.569082][T13710] loop5: AHDI p1 p2 p4 [ 729.569179][T13710] loop5: partition table partially beyond EOD, truncated [ 729.572896][T13710] loop5: p1 start 5439488 is beyond EOD, truncated [ 729.572958][T13710] loop5: p4 start 3288604672 is beyond EOD, truncated [ 730.628901][T13723] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.656996][T13723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.816550][T11872] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 730.822888][T13740] netlink: 'syz.3.2113': attribute type 10 has an invalid length. [ 730.882919][T13723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.900112][T13723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.946503][T11872] usb 2-1: device descriptor read/64, error -71 [ 730.984378][T13723] veth1_vlan: left promiscuous mode [ 731.000761][T13723] veth0_vlan: left promiscuous mode [ 731.016848][T13723] veth0_vlan: entered promiscuous mode [ 731.034272][T13723] veth1_vlan: entered promiscuous mode [ 731.045725][T13723] macvlan0: left promiscuous mode [ 731.075351][T13718] syz.5.2101: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 731.075434][T13718] CPU: 1 UID: 0 PID: 13718 Comm: syz.5.2101 Tainted: G L syzkaller #0 PREEMPT(full) [ 731.075467][T13718] Tainted: [L]=SOFTLOCKUP [ 731.075477][T13718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 731.075496][T13718] Call Trace: [ 731.075502][T13718] [ 731.075510][T13718] dump_stack_lvl+0xe8/0x150 [ 731.075546][T13718] warn_alloc+0x24d/0x270 [ 731.075569][T13718] ? __pfx_warn_alloc+0x10/0x10 [ 731.075585][T13718] ? policy_nodemask+0x2cc/0x8e0 [ 731.075611][T13718] ? alloc_pages_mpol+0x256/0x390 [ 731.075640][T13718] __vmalloc_node_range_noprof+0x12fd/0x16f0 [ 731.075692][T13718] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 731.075718][T13718] ? kvm_dev_ioctl+0x12c/0x1700 [ 731.075735][T13718] ? rcu_is_watching+0x16/0xb0 [ 731.075762][T13718] ? kvm_dev_ioctl+0x12c/0x1700 [ 731.075779][T13718] ? rcu_is_watching+0x16/0xb0 [ 731.075805][T13718] ? kvm_dev_ioctl+0x12c/0x1700 [ 731.075821][T13718] __kvmalloc_node_noprof+0x59c/0x820 [ 731.075858][T13718] ? kvm_dev_ioctl+0x12c/0x1700 [ 731.075887][T13718] ? kvm_dev_ioctl+0x12c/0x1700 [ 731.075918][T13718] kvm_dev_ioctl+0x12c/0x1700 [ 731.075960][T13718] ? __fget_files+0x2a/0x420 [ 731.075980][T13718] ? __fget_files+0x2a/0x420 [ 731.076014][T13718] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 731.076036][T13718] ? bpf_lsm_file_ioctl+0x9/0x20 [ 731.076063][T13718] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 731.076082][T13718] __se_sys_ioctl+0xfc/0x170 [ 731.076105][T13718] do_syscall_64+0x166/0x520 [ 731.076123][T13718] ? trace_irq_disable+0x3b/0x140 [ 731.076145][T13718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.076162][T13718] ? clear_bhb_loop+0x70/0xc0 [ 731.076183][T13718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.076199][T13718] RIP: 0033:0x7f458939f559 [ 731.076215][T13718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.076229][T13718] RSP: 002b:00007f458a267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.076246][T13718] RAX: ffffffffffffffda RBX: 00007f4589626090 RCX: 00007f458939f559 [ 731.076258][T13718] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 731.076269][T13718] RBP: 00007f4589436b20 R08: 0000000000000000 R09: 0000000000000000 [ 731.076279][T13718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.076289][T13718] R13: 00007f4589626128 R14: 00007f4589626090 R15: 00007f458974fa48 [ 731.076314][T13718] [ 731.208542][T11872] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 731.255430][T13718] Mem-Info: [ 731.255470][T13718] active_anon:26899 inactive_anon:2282 isolated_anon:0 [ 731.255470][T13718] active_file:2971 inactive_file:21022 isolated_file:0 [ 731.255470][T13718] unevictable:0 dirty:64 writeback:0 [ 731.255470][T13718] slab_reclaimable:7503 slab_unreclaimable:109736 [ 731.255470][T13718] mapped:48609 shmem:25976 pagetables:3155 [ 731.255470][T13718] sec_pagetables:0 bounce:0 [ 731.255470][T13718] kernel_misc_reclaimable:0 [ 731.255470][T13718] free:559592 free_pcp:18173 free_cma:0 [ 731.267184][T13718] Node 0 active_anon:2776kB inactive_anon:8712kB active_file:11880kB inactive_file:34444kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136724kB dirty:244kB writeback:0kB shmem:604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13856kB pagetables:8024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 731.270100][T13718] Node 1 active_anon:104820kB inactive_anon:416kB active_file:4kB inactive_file:49644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57712kB dirty:12kB writeback:0kB shmem:103400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:736kB pagetables:4596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 731.270265][T13718] Node 0 DMA free:9984kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 731.270435][T13718] lowmem_reserve[]: 0 2464 2466 2466 2466 [ 731.270549][T13718] Node 0 DMA32 free:122488kB boost:76356kB min:110292kB low:118776kB high:127260kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2776kB inactive_anon:8712kB active_file:11880kB inactive_file:34444kB unevictable:0kB writepending:244kB zspages:2448kB present:3129332kB managed:2523600kB mlocked:0kB bounce:0kB free_pcp:1604kB local_pcp:932kB free_cma:0kB [ 731.270757][T13718] lowmem_reserve[]: 0 0 1 1 1 [ 731.270859][T13718] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1676kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 731.396261][T13718] lowmem_reserve[]: 0 0 0 0 0 [ 731.396538][T13718] Node 1 Normal free:2105896kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:105120kB inactive_anon:416kB active_file:4kB inactive_file:49644kB unevictable:0kB writepending:12kB zspages:6484kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:70720kB local_pcp:65464kB free_cma:0kB [ 731.396708][T13718] lowmem_reserve[]: 0 0 0 0 0 [ 731.396819][T13718] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 9984kB [ 731.397198][T13718] Node 0 DMA32: 6452*4kB (UME) 2815*8kB (UME) 1911*16kB (UME) 764*32kB (UME) 187*64kB (UME) 48*128kB (UME) 4*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 122488kB [ 731.397639][T13718] Node 0 [ 731.409972][T11872] usb 2-1: device descriptor read/64, error -71 [ 731.474059][T13718] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 731.474588][T13718] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (ME) 1*32kB (M) 1*64kB (U) 1*128kB (E) 1*256kB (E) 2*512kB (ME) 3*1024kB (ME) 0*2048kB 513*4096kB (M) = 2105868kB [ 731.475027][T13718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.475084][T13718] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 731.475134][T13718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.475184][T13718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 731.475238][T13718] 50289 total pagecache pages [ 731.475266][T13718] 223 pages in swap cache [ 731.475287][T13718] Free swap = 36584kB [ 731.475313][T13718] Total swap = 124996kB [ 731.475336][T13718] 2097051 pages RAM [ 731.475356][T13718] 0 pages HighMem/MovableOnly [ 731.475384][T13718] 434116 pages reserved [ 731.475404][T13718] 0 pages cma reserved [ 731.549370][T11872] usb usb2-port1: attempt power cycle [ 731.836217][T13723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 731.855030][T13723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 731.875310][T13723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 731.908579][T13723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 731.931002][T11872] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 731.947329][T11872] usb 2-1: device descriptor read/8, error -71 [ 731.978423][T13723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 732.167700][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.167779][ T6767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.191973][T11872] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 732.202202][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.202376][ T6767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.225840][T11872] usb 2-1: device descriptor read/8, error -71 [ 732.329568][T11872] usb usb2-port1: unable to enumerate USB device [ 732.412032][T13740] team0: Device bond0 failed to register rx_handler [ 732.502715][ T1179] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.502743][ T1179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.503083][ T1179] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.503105][ T1179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.503434][ T1179] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.503455][ T1179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.578197][ T6767] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.578226][ T6767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.824637][T13743] fuse: Unknown parameter 'fƒ0x0000000000000008' [ 735.881215][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 735.996999][T13780] netlink: 'syz.0.2122': attribute type 4 has an invalid length. [ 736.139096][T13784] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 738.316958][ T33] INFO: task syz.2.1711:12126 blocked for more than 143 seconds. [ 738.316995][ T33] Tainted: G L syzkaller #0 [ 738.317009][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.317019][ T33] task:syz.2.1711 state:D stack:28584 pid:12126 tgid:12120 ppid:5654 task_flags:0x480040 flags:0x00080002 [ 738.317091][ T33] Call Trace: [ 738.317099][ T33] [ 738.317114][ T33] __schedule+0x17dd/0x5820 [ 738.317184][ T33] ? __pfx___schedule+0x10/0x10 [ 738.317226][ T33] ? schedule+0x90/0x2b0 [ 738.317261][ T33] schedule+0x164/0x2b0 [ 738.317296][ T33] schedule_preempt_disabled+0x13/0x30 [ 738.317327][ T33] __mutex_lock+0x7c4/0x15a0 [ 738.317354][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 738.317380][ T33] ? blk_trace_setup+0x2d0/0x520 [ 738.317415][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 738.317460][ T33] blk_trace_setup+0x2d0/0x520 [ 738.317499][ T33] ? __pfx_blk_trace_setup+0x10/0x10 [ 738.317553][ T33] ? snprintf+0xe8/0x140 [ 738.317609][ T33] blk_trace_ioctl+0x37f/0x910 [ 738.317647][ T33] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 738.317684][ T33] ? kasan_quarantine_put+0xbb/0x1f0 [ 738.317720][ T33] ? tomoyo_path_number_perm+0x219/0x5f0 [ 738.317757][ T33] ? tomoyo_path_number_perm+0x219/0x5f0 [ 738.317797][ T33] ? do_vfs_ioctl+0x116f/0x1530 [ 738.317829][ T33] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 738.317869][ T33] ? do_futex+0x3e7/0x4e0 [ 738.317912][ T33] blkdev_ioctl+0x4c1/0x740 [ 738.322627][ T33] ? __pfx_blkdev_ioctl+0x10/0x10 [ 738.322668][ T33] ? bpf_lsm_file_ioctl+0x9/0x20 [ 738.322697][ T33] ? __pfx_blkdev_ioctl+0x10/0x10 [ 738.322723][ T33] __se_sys_ioctl+0xfc/0x170 [ 738.322753][ T33] do_syscall_64+0x166/0x520 [ 738.322776][ T33] ? trace_irq_disable+0x3b/0x140 [ 738.322803][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.322826][ T33] ? clear_bhb_loop+0x70/0xc0 [ 738.322851][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.327897][ T33] RIP: 0033:0x7fec0ed9f559 [ 738.327924][ T33] RSP: 002b:00007fec0fb8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 738.328027][ T33] RAX: ffffffffffffffda RBX: 00007fec0f026180 RCX: 00007fec0ed9f559 [ 738.328074][ T33] RDX: 0000200000000600 RSI: 00000000c0481273 RDI: 0000000000000005 [ 738.328100][ T33] RBP: 00007fec0ee36b20 R08: 0000000000000000 R09: 0000000000000000 [ 738.328150][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.328181][ T33] R13: 00007fec0f026218 R14: 00007fec0f026180 R15: 00007fec0f14fa48 [ 738.328271][ T33] [ 738.339131][ T33] [ 738.339131][ T33] Showing all locks held in the system: [ 738.339179][ T33] locks held by pr/ttyS0/32: 2, last CPU#0: [ 738.339350][ T33] #0: ffffffff8fe33e18 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 738.339585][ T33] #1: ffffffff9bfd0998 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 738.339790][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 738.339839][ T33] #0: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 738.412312][ T33] locks held by kswapd0/91: 2, last CPU#0: [ 738.412374][ T33] #0: ffffffff90094680 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa53/0x3a20 [ 738.412527][ T33] #1: ffffe8ffffc20c28 (&acomp_ctx->mutex){+.+.}-{4:4}, at: zswap_store+0xbde/0x2200 [ 738.412702][ T33] locks held by kworker/u8:7/709: 3, last CPU#1: [ 738.412743][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 738.412911][ T33] #1: ffffc9000416fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 738.413102][ T33] #2: ffff888058eb5258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 738.413455][ T33] locks held by klogd/4989: 1, last CPU#1: [ 738.413507][ T33] #0: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 738.413696][ T33] locks held by getty/5388: 2, on CPU#0: [ 738.413737][ T33] #0: ffff888036f0c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 738.511938][ T33] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 738.512145][ T33] locks held by kworker/u8:16/6767: 3, last CPU#1: [ 738.512194][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 738.519667][ T33] #1: ffffc900034dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 738.519875][ T33] #2: ffff88805848c258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 738.520155][ T33] locks held by kworker/u8:19/11640: 5, last CPU#1: [ 738.520206][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 738.520354][ T33] #1: ffffc9000351fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 738.576187][ T33] #2: ffffffff8fde60d0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 738.625894][T11872] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 738.643084][ T33] #3: ffffffff9003c6c0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 738.643232][ T33] #4: ffffffff8fdfd120 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 738.643406][ T33] locks held by kworker/0:8/11872: 5, on CPU#0: [ 738.643453][ T33] #0: ffff8880222fa948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 738.643605][ T33] #1: ffffc90005687c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 738.708230][ T33] #2: ffff88802b58c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 738.708595][ T33] #3: ffff88802b5d0568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 738.708789][ T33] #4: ffff88802b4dc460 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 738.708970][ T33] locks held by syz.2.1711/12123: 2, last CPU#1: [ 738.709012][ T33] #0: ffff888027aff868 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x2d0/0x520 [ 738.709181][ T33] #1: ffffffff8ffbae00 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3a4/0x900 [ 738.709319][ T33] locks held by syz.2.1711/12126: 1, on CPU#1: [ 738.709361][ T33] #0: ffff888027aff868 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x2d0/0x520 [ 738.709537][ T33] locks held by syz.3.2061/13575: 5, last CPU#1: [ 738.709579][ T33] #0: ffff888029136460 (sb_writers#5){.+.+}-{0:0} [ 738.837831][T11872] usb 6-1: Using ep0 maxpacket: 16 [ 738.973732][T11872] usb 6-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 739.027457][T11872] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 739.027494][T11872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 739.031201][T11872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.031230][T11872] usb 6-1: Product: syz [ 739.031246][T11872] usb 6-1: Manufacturer: syz [ 739.031263][T11872] usb 6-1: SerialNumber: syz [ 739.048950][T11872] usb 6-1: config 0 descriptor?? [ 739.079284][ T33] , at: vfs_coredump+0xac3/0x10c0 [ 739.079444][ T33] #1: ffff88805462b440 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1be/0xca0 [ 739.079618][ T33] #2: ffff8880b823c360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 739.079787][ T33] #3: ffff8880b8324708 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 739.079941][ T33] #4: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 739.080113][ T33] locks held by syz.4.2114/13745: 3, last CPU#1: [ 739.080159][ T33] #0: ffff88807a2ca460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xac3/0x10c0 [ 739.156077][ T33] #1: ffff88805767b348 (&sb->s_type->i_mutex_key#16){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 739.156168][ T33] #2: ffff8880b823c360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 739.156229][ T33] locks held by syz.4.2119/13771: 1, last CPU#1: [ 739.156242][ T33] #0: ffff8880359a0340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 739.156721][ T33] locks held by syz.3.2124/13788: 1, last CPU#1: [ 739.156773][ T33] #0: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: mem_cgroup_iter+0x3b/0x440 [ 739.156925][ T33] locks held by syz.3.2124/13789: 2, last CPU#1: [ 739.156967][ T33] #0: ffff8880359a1bc0 (&mm->mmap_lock){++++}-{4:4}, at: try_to_inc_max_seq+0xc69/0x1090 [ 739.157139][ T33] #1: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 739.157310][ T33] locks held by syz.0.2127/13805: 2, last CPU#1: [ 739.157352][ T33] #0: ffff88807f097180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 739.157512][ T33] #1: ffffffff8ff5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 739.211703][ T33] [ 739.211734][ T33] ============================================= [ 739.211734][ T33] [ 739.251560][ T33] NMI backtrace for cpu 1 [ 739.251629][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 739.251703][ T33] Tainted: [L]=SOFTLOCKUP [ 739.251731][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 739.251771][ T33] Call Trace: [ 739.251793][ T33] [ 739.251822][ T33] dump_stack_lvl+0xe8/0x150 [ 739.251925][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 739.252016][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 739.252088][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 739.252181][ T33] sys_info+0x135/0x170 [ 739.252252][ T33] watchdog+0xfd2/0x1030 [ 739.252362][ T33] ? watchdog+0x1c7/0x1030 [ 739.252455][ T33] kthread+0x38b/0x480 [ 739.252511][ T33] ? __pfx_watchdog+0x10/0x10 [ 739.252574][ T33] ? __pfx_kthread+0x10/0x10 [ 739.252644][ T33] ret_from_fork+0x514/0xb70 [ 739.252716][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 739.252778][ T33] ? __switch_to+0xc78/0x1410 [ 739.252869][ T33] ? __pfx_kthread+0x10/0x10 [ 739.252936][ T33] ret_from_fork_asm+0x1a/0x30 [ 739.252975][ T33] [ 739.253009][ T33] Sending NMI from CPU 1 to CPUs 0: [ 739.253043][ C0] NMI backtrace for cpu 0 [ 739.253059][ C0] CPU: 0 UID: 0 PID: 32 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.253085][ C0] Tainted: [L]=SOFTLOCKUP [ 739.253092][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 739.253104][ C0] RIP: 0010:kasan_check_range+0x1d1/0x2c0 [ 739.253134][ C0] Code: 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c 41 5d 41 5e 41 5f 5d ca 18 c1 09 cc 45 84 ff 0f 85 a1 00 00 00 41 f7 c7 00 ff 00 00 [ 739.253151][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00000056 [ 739.253168][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81d1551c [ 739.253182][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff919cf4b8 [ 739.253195][ C0] RBP: ffffc90000007f08 R08: ffffffff919cf4bf R09: 1ffffffff2339e97 [ 739.253210][ C0] R10: dffffc0000000000 R11: fffffbfff2339e98 R12: dffffc0000000000 [ 739.253225][ C0] R13: ffff8880b82264c8 R14: 0000000000000000 R15: 0000000000000000 [ 739.253239][ C0] FS: 0000000000000000(0000) GS:ffff88812363c000(0000) knlGS:0000000000000000 [ 739.253255][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 739.253268][ C0] CR2: 00007fb3dbbcee10 CR3: 0000000034432000 CR4: 00000000003526f0 [ 739.253286][ C0] Call Trace: [ 739.253294][ C0] [ 739.253300][ C0] tr ** replaying previous printk message ** [ 739.253300][ C0] trace_irq_enable+0x2c/0x140 [ 739.253330][ C0] trace_hardirqs_on+0x18/0x40 [ 739.253356][ C0] _raw_spin_unlock_irq+0x23/0x50 [ 739.253386][ C0] __run_timer_base+0x1ea/0x8b0 [ 739.253422][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 739.253453][ C0] ? lapic_next_event+0x11/0x20 [ 739.253476][ C0] ? clockevents_program_event+0x491/0x630 [ 739.253505][ C0] run_timer_softirq+0xb7/0x170 [ 739.253533][ C0] handle_softirqs+0x265/0x8d0 [ 739.253568][ C0] __irq_exit_rcu+0xc6/0x220 [ 739.253594][ C0] irq_exit_rcu+0x9/0x30 [ 739.253618][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 739.253649][ C0] [ 739.253656][ C0] [ 739.253664][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 739.253685][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 739.253714][ C0] Code: f7 e8 5d a0 a4 f5 f7 c3 00 02 00 00 74 05 e8 30 37 d1 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 99 95 f5 65 48 8b 05 dc 20 be 08 48 85 c0 74 18 5b 41 5e c3 [ 739.253730][ C0] RSP: 0018:ffffc90000a87ca8 EFLAGS: 00000206 [ 739.253746][ C0] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001 [ 739.253759][ C0] RDX: 0000000000000000 RSI: ffffffff8e69bde9 RDI: 0000000000000001 [ 739.253772][ C0] RBP: ffffc90000a87e18 R08: ffffffff919cf4bf R09: 1ffffffff2339e97 [ 739.253786][ C0] R10: dffffc0000000000 R11: fffffbfff2339e98 R12: 0000000000000002 [ 739.253800][ C0] R13: ffff88801f6a3e80 R14: ffffffff9bfd0980 R15: dffffc0000000000 [ 739.253826][ C0] nbcon_kthread_func+0x724/0x8d0 [ 739.253855][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 739.253879][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 739.253907][ C0] ? __kthread_parkme+0x71/0x1f0 [ 739.253926][ C0] ? __kthread_parkme+0x199/0x1f0 [ 739.253947][ C0] kthread+0x38b/0x480 [ 739.253968][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 739.253991][ C0] ? __pfx_kthread+0x10/0x10 [ 739.254018][ C0] ret_from_fork+0x514/0xb70 [ 739.254076][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 739.254097][ C0] ? __switch_to+0xc78/0x1410 [ 739.254128][ C0] ? __pfx_kthread+0x10/0x10 [ 739.254149][ C0] ret_from_fork_asm+0x1a/0x30 [ 739.254178][ C0] [ 739.301185][T11872] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 739.301284][T11872] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 739.539326][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 739.777213][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 739.787994][ T33] Tainted: [L]=SOFTLOCKUP [ 739.792341][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 739.802424][ T33] Call Trace: [ 739.805726][ T33] [ 739.808703][ T33] vpanic+0x56d/0xa60 [ 739.812717][ T33] ? __pfx___schedule+0x10/0x10 [ 739.817602][ T33] ? __pfx_vpanic+0x10/0x10 [ 739.822129][ T33] panic+0xc5/0xd0 [ 739.825864][ T33] ? __pfx_panic+0x10/0x10 [ 739.830319][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 739.835805][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 739.841197][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 739.847370][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 739.853566][ T33] watchdog+0x102b/0x1030 [ 739.857923][ T33] ? watchdog+0x1c7/0x1030 [ 739.862367][ T33] kthread+0x38b/0x480 [ 739.866458][ T33] ? __pfx_watchdog+0x10/0x10 [ 739.871154][ T33] ? __pfx_kthread+0x10/0x10 [ 739.875757][ T33] ret_from_fork+0x514/0xb70 [ 739.880366][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 739.885496][ T33] ? __switch_to+0xc78/0x1410 [ 739.890198][ T33] ? __pfx_kthread+0x10/0x10 [ 739.894812][ T33] ret_from_fork_asm+0x1a/0x30 [ 739.899601][ T33] [ 739.903215][ T33] Kernel Offset: disabled [ 739.907571][ T33] Rebooting in 86400 seconds..