last executing test programs: 9.360037013s ago: executing program 2 (id=3499): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r3, 0x0, 0xd, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000480)={0x14, &(0x7f00000003c0)={0x20, 0x3, 0xb, {0xb, 0x31, "6a645cd5d0a759b7ce"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}}, &(0x7f0000000880)={0x44, &(0x7f0000000540)={0x40, 0x17, 0x58, "3863d96e1c86ce93b1f19bb21c9291482905edce1ed8aabe60b70d2027578edd493c225ff7d2a8f012baac9ac0731993c2a7dd74d83d5394d4c2cf1fe9590eb5c989b127843f53ee586ddacb8ea5b9ac7d5078f3d35b99f8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x69}, &(0x7f0000000640)={0x20, 0x81, 0x1, "da"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "cb58"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "9bd134"}, &(0x7f0000000700)={0x20, 0x84, 0x3, "b6c73a"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "bac94e"}}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@getqdisc={0x28, 0x26, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xf}, {0x5, 0x4}, {0xe, 0x8}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x2b, 0x1, 0x0) listen(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810) ppoll(&(0x7f0000000280)=[{r5, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) getcwd(0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 9.261378348s ago: executing program 4 (id=3500): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 9.2017505s ago: executing program 1 (id=3502): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x2, 0x3, 0x1, 0x8, 0x8, 0x4, 0x0, 0xfff, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x8006, 0x81, 0x3, r1}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r0], 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)={0x0, 0x1e, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0xd, 0xea, "71d97afdff574aa0f35b5d3739688dc4027f79ffaa3ced2c76c0b8621a54af2d96d5fac9810c10dc0dd5c5cb9ddc30c29f019ca565b4d67552df85dbf73bf886116254bf6f51752e2eef71e378143c6548f66c27f8af647cf65fad114abafd1f0733bf207f8f89cfce3242fec5f9a3c241ddb438a07cd22805f02117c2bced341f4e9dbf21548517e532830fb0d8a9b5a959f304dc7613d1dc4f58216f2439f0dd5e7267190af1dd7207d93b2409195b3d3655196b2e44c09511239720c0b2d7dd8167a71d1c1fc6b6d29e7e95ee375cfaafb2e3b8708ddee1e47d398547ce85ed6f97a3f74b7332aa64"}, @pad1]}, 0x100) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000002c0)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="c7ad8fd7c2e2ad6e958baf29054726d9c3860c31b394692942f499aa9535ecf2b2c2408b95d3d5484dc6a5d036391de09cecd40311a948eddf1c4a577f8cc3c5ae92d443bd6f0f4c267eec7edc99e02ab63b4baef397bb3aa9c1820be3f3178abf7d3f3e07092e4870b20a35f3a1739e1a73220e0393f4af410fde4fac18da658755eb775211e095a6fe7c4ec4bac3800cdee7f30bd61a1a4dc55ea549b925739bd329fe15e123dcd2862c593d0010e0b442a6169982b0015d9a5a5f327e7aaf05fd1d800ff3c0573e8722cbd81369a53257a31a082a0fbd", 0xd8}], 0x1, &(0x7f0000000440)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xfff}}, @sndinfo={0x20, 0x84, 0x2, {0x7aa6, 0x800e, 0x7, 0x1000, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x0, 0x20a, 0x9, 0x0, 0x82a, 0xf, 0x0, r1}}, @sndrcv={0x30, 0x84, 0x1, {0xba, 0x6, 0x18006, 0x8a, 0x4, 0x1, 0xfffffff8, 0x1, r1}}], 0xc8, 0x4044890}], 0x1, 0x8000) getsockname(r0, &(0x7f0000000580)=@l2tp, &(0x7f0000000600)=0x80) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000680)={0xd, 0x7, 0xc, 0x2, 0x841e}) r3 = getpid() ioctl$XFS_IOC_RTGROUP_GEOMETRY(r2, 0xc0805841, &(0x7f00000006c0)={0x0, 0x1, 0x2, 0xd, 0x3}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000740)={@mcast2}, 0x14) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000780), 0x202000, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f00000007c0)={0x3, 0x4, 0x8, 0x9, 0x5da, 0x1}) sched_setaffinity(r3, 0x8, &(0x7f0000000800)=0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x840c0000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}]}, 0x1c}}, 0x28000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000980)={0x85, 0x8, 0x7, 0x3, r1}, &(0x7f00000009c0)=0x10) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000a00)={0x3a, 0x20, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0xd6}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x33}}, @generic={0x5, 0xd3, "eeb37013f884940a4aba9421d7090c03e9077e67ce0cf5031e856f003e54033404da91c47e8116edb0ea9cf6d06abf9e3ed435d558c5153fa4bbfdbf10d1f926a506d9fc8dc3e5b182d292166600c833da141fd5c34b79df0ae79d2ef0bba2cca54d0ae87de9893c754200ab548081f5b322d2b3448ab2792ed83ae26969b4562c598fb94ddacc03dc4a5427ad69ef2ce63c6eded5cba538f5e5eb36d0c2f2c91ff730f1a05e85201b84c5738b3b0f711f8f6803d2c74c524a71abef4ccd11982e944491e45fe1bc015a86656606c2d39392c7"}]}, 0x110) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b40), 0x4400, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x401}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20840) r10 = socket$netlink(0x10, 0x3, 0x9) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f0000000cc0)) sendmsg$IPSET_CMD_TYPE(r10, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x40002005) sendmsg$nl_generic(r8, &(0x7f0000001040)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)={0x1b4, 0x42, 0x20, 0x70bd2b, 0x25dfdbff, {0x10}, [@nested={0x8, 0x5e, 0x0, 0x1, [@nested={0x4, 0x104}]}, @nested={0x133, 0x21, 0x0, 0x1, [@generic="05f848d1b9406c5dd5c186acc5a9a043209730c670fd91d0c76809cffe2ba41629d23f174fd993aabd8d97669740dce0c0ae3a3f73c82c691a76c03c7267450c1015f94fff22481d1249acd0632a2610039482aca05965196cc6f8c4b2174e3f9b826cf386189630f937c405851deb145e4b1bdbc72282de02c733cd403186940a84bbe798d9f27e39fb280e679e04d52aceab9ed0b8df82e756a0981ebb47991ec14fa56f3af65a726007bd963ade226d08aee47f014161266691cb2232a704a81d150364e76e30d768fbc319a958b4e2d6a97bf52dfb39de47b66084d7396eabcfab3e8f3925ba6aeabbf77125f650ef4b48a0fd8ba5ef", @typed={0x8, 0x95, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x15f, 0x0, 0x0, @fd=r4}, @generic="a9869ef299049058096457910cd048f085f9bdfa9e6a6508d0f2669a86a98275fcbb148591a9fb"]}, @generic="4c69768ce9e401d9db0dd232441ca198264d0ff52d5a8f50a50743bc9e8478de43c2d422be3532a41adbfbcfd63618554b3bf864699d4beb7281a10ed2aa72a9807e91e0dfa2af82d533490966d886e44392cd39c29b16507912adf617fe6d2dca36f1fc"]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010000) 9.110277228s ago: executing program 0 (id=3503): openat(0xffffffffffffff9c, 0x0, 0x103802, 0x20) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 8.822690262s ago: executing program 0 (id=3504): openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x82a41, 0x0) ppoll(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)={[0x40]}, 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) 7.912439973s ago: executing program 4 (id=3505): syz_clone3(&(0x7f0000000900)={0x123801000, &(0x7f0000000040), 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x0, 0x0) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0xffff, 0xffffffffffffffff, &(0x7f0000000100)="f042eb6c6828a7", 0x7, 0x4, 0x0, 0x1}, &(0x7f00000001c0)) 7.781570175s ago: executing program 0 (id=3506): syz_emit_ethernet(0xd81, &(0x7f00000014c0)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0xd5f, 0x0, @gue={{0x2, 0x1, 0x3, 0x8, 0x100}, "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"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x100}}}}}}}, 0x0) 7.703672108s ago: executing program 1 (id=3507): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x11000) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000240)=0x4, 0x4) 7.574721517s ago: executing program 3 (id=3508): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x24, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @empty}}}}}, 0x0) io_setup(0x6, &(0x7f0000000d80)=0x0) r1 = eventfd2(0xffff, 0x80801) io_submit(r0, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r1, &(0x7f0000000000), 0x0, 0xfbe, 0x0, 0x1, r1}]) 7.544046279s ago: executing program 0 (id=3509): syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x164, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x152, 0x2, 0x1, 0x4, 0x0, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "8d9af2"}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0xfb, 0x0, 0x40, 0x5e}, {0x6, 0x24, 0x1a, 0x35, 0xa}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x1}, @mdlm_detail={0xf, 0x24, 0x13, 0x5, "4166e704140c54aab8ae99"}, @mdlm_detail={0xc0, 0x24, 0x13, 0x0, "8de5e46705d9adad9a111878fdc8e20c3cd99c8992aa94d4cec98034e4857f73de23a5e30e636037ff173971ddaae6e67fa41b40090d579be366c5d0aaf146eda58218f105fc10dd1043b62fdf98e01f599c87893e3bb2ba99bc2a23a736664bf2482fefbcfc637df6186e166118d688d5ee097895055daa037794d227ce84cfe0a22aa818852dad01b3bc59ed004cc53c8e393130eaa596924d24dfb22ed3bf6026215899e2c31cbd488e6107e0d6f39e5d6775f23a54183f3a7cf3"}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffb, 0x5, 0x7a}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x9, 0xfb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xe1, 0x80, 0x2}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0xc, 0x5, 0x7, 0x40, 0x4}, 0x123, &(0x7f00000003c0)={0x5, 0xf, 0x123, 0x3, [@generic={0xf7, 0x10, 0xb, "2461e267712f5e264b1bac71828027fb56e833201e518131be8b74bf3e3779a2ad46696f1b7900822b48da8da2f0d5fc64b4cd450fc65dc2c14625894643910cb7172f5b8148c6e2416c5a7127d3ca81fe35eb3a38fc2a6e76a8e5ff808f136ccf27c566fdaadb9b550ed72f4882cf1e2d67f00c4d18b1226f934068cad32680128b474e8075221d71e1afe9357f73b3558a0bbdf5b85f96e188bf7a1886e0e0e8b8b3ea1b0200029e60268b4bd5483107a7fb88d6c079d0dee42a3530a66888f5fba6826c2b50cf4d88251dd9ac633c9f284688f432fe79b0790e1c39bd9af2edc2afa59e0d2dc71badf75aecad80adfbfdbb04"}, @generic={0xf, 0x10, 0xb, "0674aca79ec19f2db273cdc9"}, @ssp_cap={0x18, 0x10, 0xa, 0x81, 0x3, 0x9, 0x1e, 0x4, [0x3f0f, 0x3fc0, 0x0]}]}, 0x7, [{0xd7, &(0x7f0000000500)=@string={0xd7, 0x3, "2b2da712174cb814784c9aef3ae74b150c6d24a5887ee09fe9b0f358660118b84498c679b50e959475174d1d23ec6fca0eca9086f5583e52a815898b204cab2b789ab144097e6e055f15defda390eaa2ba12523b75bfc7dec36f191ae99d90b1954d267d13545f0b356e536041de4bf37ec15f3fec0a0b2444c5f06aede1d6856a8a4b40915d006a25279f3dc41e9963178ed22f80f349b714d703e4ace3e3198505c029893327355781922a6120554e5fed854a6579b51800aa35ca327b95fd4bd1382ae3f9c5652600bfb002d6db3543f69fc3b0"}}, {0xd9, &(0x7f00000007c0)=@string={0xd9, 0x3, "ae053d905e9facdc477d704fb69a68a8ec2d919fe42dbd3b62e936bc6e2f4fe63be4a05afb4a6a2fde7449994c82f802e8970b60926d1143774854849accdf10ce35ce105939cd47cbf89864c7b55a4196f65cc8817a183b6fe1a00658fe6b90d9cb1b6233b3cd8cd010b60f3c9cd05f602cb9e6a295720eb9070cb5305139875e4ac938db8c141130bb383af54eda4a9296df80e6486b4dea5bfdad5cd72e2a63d5436c8ff6fd15ed55a0a7b6dd31a4575137b96e56f9a2dc6cfb2ac7dd731e7bb2aafbb9d7f8faf81791a999792a98fd8fb6cec7e5e3"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1801}}, {0xc4, &(0x7f0000000900)=@string={0xc4, 0x3, "5e298db338e1ce1e3dd2af7f961f1ea1f6a5dc4d9ea7e5cc985a5d47bda628a2c6280539f708d9aef36faddfeae22c901d71b5e32f6ccc74f8f474cb3b641b15a4eae895f7150233252cf6fcc3e2dcf785fd84cd0c6e1734ca82b4ffe8794a8d2cb7b09b61697e5f52e0854dd85cdaecf08c23dbde252660910282d5071229ac80cdcf70cc71c3e13ed00d00136ecd6332218e4c087b7942870334857f695f0687594df699bec09fb5cc1e596d45ca85224e85b184f1998136d644b61b95378b3eeb"}}, {0xd0, &(0x7f0000000a00)=@string={0xd0, 0x3, "8c041363110c42f04c457881f930dc5904c7a6734bf8e60886462de27284659ace935420757a98cc3d89fc79553ae55c910b4d338c5070773d99b21879545e797b3142a1793b14e03eddb9bf6b6bfe2c5f907e7dbeb98bba64e4916193bd2324117018d8ebbb4827cb4f4103ed24d25a20688122f0a028a2f70393011d98c649f1d235227da8f271bb9da7ce4c09eb4575f0b8709170b2dbe3862d4f2fff630ab9e96cf566adc44d9f4b4cddba877797ac75ff1591aadf758c89f12d1c817b8b026ddd0151386f6fba16da116cb4"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x89, &(0x7f0000000b40)=@string={0x89, 0x3, "63540848d27b899673aa57b6d19d8108776c479d92b9e064ab0138e80a50b8254d5599bbf05fdfea5139647ace3b0b6b75d6ce829bb47f5bb1dafce5b46a690aad81251193e32de3a9e6d5d85d838895b668e773e7c8141ad7a8889a61d6a5cbd2549bd4c6b131c7fa6dc2c7856e819f4bc2d0309198609dcac7658c404ed512430aa2b3fd2bfa"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000d00)={0x14, &(0x7f0000000c80)={0x0, 0x23, 0x5, {0x5, 0x4, "131cc7"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002100)={0x44, &(0x7f0000001e40)={0x40, 0x17, 0xeb, "cb55187f12cc891a523af49349cfe57eaa6515371cd753b061d71ac7358184ebba64b2c267ef2890d07cd92c099ccea648d75243ca3c2354ecef65745216b1905145a0e4acf47b8d0c05a9faa7114cee48fffa6152cd8d9c8b855f00c2a764c9a1bdd251c271505e0c5bd905cca088f8aea774da6bd085fa530598ff4e2e1a49e30b54186d58281400394525decb3d0510b1ca66fda4421d9522579b520b80f01e9319ccf3b57dd8d711b347a0dfeca85dec6dd90de202f1f5bcf040c1de62d3db775e54b9ba44eb965876ea59773522607ca3990b3b8917d7d700bb2d7232ff29cfdbc99e4c91c55f8982"}, &(0x7f0000001f40)={0x0, 0xa, 0x1, 0xcc}, &(0x7f0000001f80)={0x0, 0x8, 0x1}, &(0x7f0000001fc0)={0x20, 0x80, 0x1c, {0x3, 0x4, 0x8, 0x8, 0x2, 0x9, 0x3ff, 0x9, 0x9, 0x1, 0x8, 0xfff}}, &(0x7f0000002000)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000002040)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002080)={0x20, 0x87, 0x2, 0x7}, &(0x7f00000020c0)={0x20, 0x89, 0x2, 0x1}}) 7.520209996s ago: executing program 1 (id=3510): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./mnt\x00', &(0x7f0000000200)='./dev\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) (fail_nth: 1) 7.369470016s ago: executing program 4 (id=3511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f0000003c00)={0x2020}, 0x2020) pread64(r0, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0xb, 0x1, 0x9, 0x0, 0x7, 0xd, 0x5, 0x5, 0x1, 0x1, 0x3, 0x7, 0x8, 0x9}, 0xe) write(r4, 0x0, 0x0) 7.368780699s ago: executing program 1 (id=3512): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x10000, 0xea, 0x7, 0x6, 0x7fff}, 0x18, 0x1000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "04762958"}, 0xf) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r1, 0x0) r2 = io_uring_setup(0x7b1c, &(0x7f0000000100)={0x0, 0xdfe9}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) close_range(r2, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) ioctl$KVM_GET_STATS_FD_vm(r8, 0xaece) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000500)="fd", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x8, @loopback, 0x1ff}, 0x1c) 7.236549063s ago: executing program 3 (id=3513): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x1ffff, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000003c0)={"2996acbf16803bb0f94a856180c8817f", 0x0, 0x0, {0x5, 0x2}, {0x0, 0x400}, 0x3, [0x1, 0x2, 0x4, 0x200003, 0x4, 0x2, 0x1, 0x7, 0x40000000010000, 0x3, 0x401, 0x101, 0x0, 0x9, 0xf, 0x200000000000008]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendto$inet(r6, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) fallocate(r7, 0x1, 0xfff, 0x6) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000800)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x4cf, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x2f, 0x4a, 0x7e, 0xff, 0x2100, 0x9e62, 0x7971, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4bd, 0x1, 0x1, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0xc5, 0x3, 0xe, 0xdf, 0xe1, 0x9, 0xfa, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x5, 0xbf, 0x1}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0xf, 0x3, 0x7}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1, 0x40, 0xc, [@generic={0xda, 0x9, "37b319782760abc646cade3ce5cc7f40af68a6905b64d3382c93c3ec56e857c4feddec3632b51be7c34622f64f96da65a38305467e713a027919ce986633adef7414b6b5fe348f84f054f949055130e50c9e691fee59bcce8303d0bc2b7a198805ecbe2382be5dddc32e70d533e1ec428e62df55b289030978090d8902a9639cdbd4332be7ce1536f852f6d2617e9708d7ca6975be5dc081bd56575f295f13e221817d694cb8beb11830bc97e991d7c9c1509a2d05b1719b61aaeb7ded4f435e0cf2b74f244ed2513bc75eaaa8d00c3781e2a492510ff6cd"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x7df, 0x10, 0x20, 0x1, [@generic={0x22, 0x22, "0ecd1500c9aaba10ea244517a7b3c5ea99a8d6f9e3816c97be708885c8091e1e"}, @generic={0x4c, 0x9, "02e94a7cf13cac1f3c17a9561584d2a318a596bfdb60954909846340bf3d34267ffeded35480b59ba9adbff4935cafd8afe8254ddc9d3cc66383de355ac5bc23ae021d7611f607f0a80d"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x0, 0xa, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x3b7, 0x3, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x1ff}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x4, 0x1, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x608, 0xdd, 0x6e, 0x51}}, {{0x9, 0x5, 0x80, 0xf, 0x40, 0x80, 0xd, 0x9}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x4, 0x21, 0x5, [@generic={0xa2, 0x30, "22c7320864f482300969c1dcf4a92ace0c703bb5428c10f27bc1cc79bcc28221d772f513e5c928fba0b4d001006db3788337976397f9e5ad2490464b008b070ec1317c6330294222696e76c029defb10223dd12baa5bdf3521eac7339953c8e9ec0e6b75935022e468d8d79506691f0db8bf33d1661124995e44673243db387600350e482b73fbc459ec610da59eaf97c9ca26943f2ab50ea5f2d97fdf6dc15a"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x6, 0x3, 0x7f}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x1, 0x0, 0x8, [@generic={0xcb, 0x1, "a7991bff4c21f5a2ed969e37542eb71472e45f129c659eb08bfa46d033e5242da20b11aef9a1a1a16d201318f2797ccee7b107fb90a2215afcff250c38f9f7a9a1d550c968657fc3a44e74c5955c1d8c286b5ce5403435ab10a86e7ca5c5472abcc34ff274263133ca77cabab74afcf73821ca5f080d51b1aea15d84648a452d4097d44644d12353b1991b19ce656350b85d32a9f8b658f1b2396ebf58655adb90841085014ad3f1310c8c3d5f52251294c1499aa56016a783e1bacbc93051f8fcd122f73e84b94001"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x1, 0x7, 0xf3, [@generic={0xca, 0x8, "73a67a9f01105708888435231d0023a2a601e8ff8834c22d7a6faa36e6b9e27dac83040402501ff04085fbe56d37e749356f2bb9d422cdab4b6675a56949940d9aa9a3e1bf79d94c68dd0f92a7fc035697aab27016e3ccae7de9cf61c532c4b66c7f897abff821b96d8be1bf211011109164b640b865d2ed5935ba4f4301966569f1efccb3e6f7573b9c8c54be63e218086774d70ceb19ffcc727a1b1a47e6ab1c9f36abb9106cccc408829a1b8782dee68750c0c9a2dd637d81f8846e4a5f731c0d0ce740ae436c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x7, 0x18, 0xfe, [@generic={0x99, 0xd, "5eb5038ac27e67ab66625e5c5a43ad49ad3377c6a718f6c9f6c6c647ae95a8578123bacff04e7ebcce6a19031f24a594c41d7e0efe06ab49a44dfb744c4b6057361e67bb1f8269c9b0cfa7908a38c9a78fa28d1012605e059a89c7e1edc3a6042918134fc7258375c4c9dd1d048278547c8a822825c30775039ec5558899c45bb0a44637dfb0ffb96f6f68af0d73fbcb988753133e8f4d"}, @uac_iso={0x7, 0x25, 0x1, 0xba0d417818b38a5e, 0x81, 0xae}]}}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x110, 0x3, 0xb3, 0x1, 0x40, 0x3}, 0xd6, &(0x7f0000001100)={0x5, 0xf, 0xd6, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0xf8, 0x80, 0xfffe, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x42, 0x0, 0x41, 0x8, 0x7f}, @generic={0xb8, 0x10, 0x2, "5020a61817db2a80a8d6bd82fce04246471e54efd7734f9294b34d28c44439e386c81eb1c98324888c4540fe0f46b55638e2b1a112214e85631b46e89e0500b4a7b6e438688433837e7ca5721953f1011d68adcea8ee9c900c0b14b765f2e810df205c9afcb6fce0fb9b1c8a8016472cef915fdc9122f45dbbeeecedee8b1c52778254a6c79537e1eb071494a2bb8659c9b2ba9c83fe4049560aabf8f2d60e822207ba3888476c0a1e331fc2c051a13ab7d2d05dbc"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x40b}}, {0x3, &(0x7f0000001240)=ANY=[@ANYBLOB='\x00\x00\b']}, {0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, {0x52, &(0x7f0000001340)=@string={0x52, 0x3, "83e28dda4e42444871363d4f6224f54b0873a0cd1728a8c42c553cc33fadd31d5c4f6fbf851db23f26dc8e95d55f0fa2d8ffd45d657fc5f05955e2ad10954c930502a5b6a4abd08465ccabcb1888c574"}}, {0x7b, &(0x7f00000013c0)=@string={0x7b, 0x3, "08eed7845ac4cda61e03020e920cf3433ebb897d5ee08aebe241e1f2e936f83bfe30d9e3e83f326c4264a0ceb4801436b68b2bc398dd9a0ce58ee2fc2a9ed65fd2246a7ce9f3d5eb5ef914602b736502471a793bfc09a61249ba2fc968a45f7e4cd6c5b14a5b7acc35c80fccd712aea70e149073c10b4bc783"}}]}) 5.985705595s ago: executing program 1 (id=3514): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000001000000000000000000000001811"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet(0x2, 0x5, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0xc93}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r9, &(0x7f0000000680)={0x0, 0x1, 0x100, 0x2, 0x202e}, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x80000000}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r10, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x4, 0x0, &(0x7f0000000440)=[0x200, 0x5, 0x7fffffff, 0x7], 0x1}}, 0x30) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYRESOCT=r2], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 5.863095186s ago: executing program 4 (id=3515): arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103c3"], 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="c5566a218da29022f0f45a74899be3e4d96e2079bc7d0794b2354a02758847b806397ea5d5544b96ce931aeced11d14cca53bfb5dd", 0x35}, {&(0x7f0000000040)="c5579ffd3f3d5604bf29ef6eb3c4e0b416bf3050247323b906f9f74288b483a845988465e89c2bd2a75f74b644e6a07d319c5438d1ad3a60637f8b593624091ff97dd7cd0e8f8d6ea4b495a0b84e4adac87023dfab1da65d03e504fd296e4261d0446bb84dfc6d7685513436ce56608d7b8fb8b3d3eb55027c9cd1523fb79b3dee3c0cb27d1e87b16ab237a711e53745e45986b845f18e4d73a0a0aa46f8efd712eddc89dafcb0e377580535be4cdf6a2747f10a7c1cae79e86bbfa83fb34e6df4a5f6cfaefad6f56a861cfdfdee145596db68ebbcae526d32080d6bca2789bd97b5392d348669294780", 0xea}], 0x2) 4.098855403s ago: executing program 0 (id=3516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000006800), 0x0, 0x141, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 4.026112748s ago: executing program 2 (id=3517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3.072541919s ago: executing program 2 (id=3518): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97454800", "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"}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x14}, 0x61) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f00000011c0)=ANY=[@ANYBLOB="e4075f96cd482aa684cb66643d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020) write$UHID_CREATE2(r1, &(0x7f0000001240)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x59, 0x1000, 0x7, 0x9, 0xab74, 0x0, "3cce7bbe8b02205fe84e2eaf601bfecc891c9a5e77b1da93fa56fd9db8c624e755690c6722396482e89bd92c5d41c44583209859b9d6489144d3194de3a3ce71b65a5abcd0db68762b838dedaa19b4e25741f25a9df6fef02a"}}, 0x171) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa000000080004"], 0x48}}, 0x0) 2.525359422s ago: executing program 3 (id=3519): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000300)='AQB1234567890123456789012345678901234567=\x00', 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x2, 0x7e, 0x4}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a0000000000000000020000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.213930933s ago: executing program 4 (id=3520): inotify_init() r0 = userfaultfd(0x1) ioperm(0x9, 0x8, 0x8) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) set_mempolicy(0xa002, &(0x7f00000001c0)=0x401, 0x200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x8, 0x1, 0x0, 0xf, 0x2, [{0x3}], 'Iw'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1760"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000600)=""/4, 0x4a, 0x4, 0x1}, 0x28) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) gettid() io_setup(0x4fe, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) r3 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6f3e7a39}}, 0x34000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x80800) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.179172723s ago: executing program 1 (id=3521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x58}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 2.063444778s ago: executing program 0 (id=3522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000500000002000000ffff000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=ntlmssp,ip=127.0.0.1,port=20000,nodfs,username=root,password=root\x00') 2.063061019s ago: executing program 3 (id=3523): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x24, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @empty}}}}}, 0x0) io_setup(0x6, &(0x7f0000000d80)=0x0) r1 = eventfd2(0xffff, 0x80801) io_submit(r0, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r1, &(0x7f0000000000)='1', 0x1, 0xfbe, 0x0, 0x1, r1}]) 1.982516509s ago: executing program 2 (id=3524): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x4c, r1, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x4c}, 0x2, 0x34005}, 0x0) 1.723303804s ago: executing program 2 (id=3525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f0000003c00)={0x2020}, 0x2020) pread64(r0, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0xb, 0x1, 0x9, 0x0, 0x7, 0xd, 0x5, 0x5, 0x1, 0x1, 0x3, 0x7, 0x8, 0x9}, 0xe) write(r4, 0x0, 0x0) 1.219038765s ago: executing program 3 (id=3526): syz_emit_ethernet(0x2a, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x46943, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 355.422982ms ago: executing program 4 (id=3527): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r3, 0x0, 0xd, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000480)={0x14, &(0x7f00000003c0)={0x20, 0x3, 0xb, {0xb, 0x31, "6a645cd5d0a759b7ce"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}}, &(0x7f0000000880)={0x44, &(0x7f0000000540)={0x40, 0x17, 0x58, "3863d96e1c86ce93b1f19bb21c9291482905edce1ed8aabe60b70d2027578edd493c225ff7d2a8f012baac9ac0731993c2a7dd74d83d5394d4c2cf1fe9590eb5c989b127843f53ee586ddacb8ea5b9ac7d5078f3d35b99f8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x69}, &(0x7f0000000640)={0x20, 0x81, 0x1, "da"}, &(0x7f0000000680)={0x20, 0x82, 0x2, "cb58"}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "9bd134"}, &(0x7f0000000700)={0x20, 0x84, 0x3, "b6c73a"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "bac94e"}}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@getqdisc={0x28, 0x26, 0x20, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xf}, {0x5, 0x4}, {0xe, 0x8}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x2b, 0x1, 0x0) listen(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810) ppoll(&(0x7f0000000280)=[{r5, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) getcwd(0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 310.084581ms ago: executing program 2 (id=3528): socketpair(0x1, 0x4, 0x28, &(0x7f0000000000)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000140)={'netpci0\x00'}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090200000000000000000100000008000600ac1414bb08000b00"], 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000005c0)={0x6, {{0x2, 0x4e23, @rand_addr=0x64010101}}, {{0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x108) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) 0s ago: executing program 3 (id=3529): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000000c0)=0x1ffff, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000003c0)={"2996acbf16803bb0f94a856180c8817f", 0x0, 0x0, {0x5, 0x2}, {0x0, 0x400}, 0x3, [0x1, 0x2, 0x4, 0x200003, 0x4, 0x2, 0x1, 0x7, 0x40000000010000, 0x3, 0x401, 0x101, 0x0, 0x9, 0xf, 0x200000000000008]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendto$inet(r6, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) fallocate(r7, 0x1, 0xfff, 0x6) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000800)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x4, 0x4cf, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x2f, 0x4a, 0x7e, 0xff, 0x2100, 0x9e62, 0x7971, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4bd, 0x1, 0x1, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0xc5, 0x3, 0xe, 0xdf, 0xe1, 0x9, 0xfa, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x5, 0xbf, 0x1}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0xf, 0x3, 0x7}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1, 0x40, 0xc, [@generic={0xda, 0x9, "37b319782760abc646cade3ce5cc7f40af68a6905b64d3382c93c3ec56e857c4feddec3632b51be7c34622f64f96da65a38305467e713a027919ce986633adef7414b6b5fe348f84f054f949055130e50c9e691fee59bcce8303d0bc2b7a198805ecbe2382be5dddc32e70d533e1ec428e62df55b289030978090d8902a9639cdbd4332be7ce1536f852f6d2617e9708d7ca6975be5dc081bd56575f295f13e221817d694cb8beb11830bc97e991d7c9c1509a2d05b1719b61aaeb7ded4f435e0cf2b74f244ed2513bc75eaaa8d00c3781e2a492510ff6cd"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x7df, 0x10, 0x20, 0x1, [@generic={0x22, 0x22, "0ecd1500c9aaba10ea244517a7b3c5ea99a8d6f9e3816c97be708885c8091e1e"}, @generic={0x4c, 0x9, "02e94a7cf13cac1f3c17a9561584d2a318a596bfdb60954909846340bf3d34267ffeded35480b59ba9adbff4935cafd8afe8254ddc9d3cc66383de355ac5bc23ae021d7611f607f0a80d"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x0, 0xa, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x3b7, 0x3, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x1ff}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x4, 0x1, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x608, 0xdd, 0x6e, 0x51}}, {{0x9, 0x5, 0x80, 0xf, 0x40, 0x80, 0xd, 0x9}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x4, 0x21, 0x5, [@generic={0xa2, 0x30, "22c7320864f482300969c1dcf4a92ace0c703bb5428c10f27bc1cc79bcc28221d772f513e5c928fba0b4d001006db3788337976397f9e5ad2490464b008b070ec1317c6330294222696e76c029defb10223dd12baa5bdf3521eac7339953c8e9ec0e6b75935022e468d8d79506691f0db8bf33d1661124995e44673243db387600350e482b73fbc459ec610da59eaf97c9ca26943f2ab50ea5f2d97fdf6dc15a"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x6, 0x3, 0x7f}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x1, 0x0, 0x8, [@generic={0xcb, 0x1, "a7991bff4c21f5a2ed969e37542eb71472e45f129c659eb08bfa46d033e5242da20b11aef9a1a1a16d201318f2797ccee7b107fb90a2215afcff250c38f9f7a9a1d550c968657fc3a44e74c5955c1d8c286b5ce5403435ab10a86e7ca5c5472abcc34ff274263133ca77cabab74afcf73821ca5f080d51b1aea15d84648a452d4097d44644d12353b1991b19ce656350b85d32a9f8b658f1b2396ebf58655adb90841085014ad3f1310c8c3d5f52251294c1499aa56016a783e1bacbc93051f8fcd122f73e84b94001"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x1, 0x7, 0xf3, [@generic={0xca, 0x8, "73a67a9f01105708888435231d0023a2a601e8ff8834c22d7a6faa36e6b9e27dac83040402501ff04085fbe56d37e749356f2bb9d422cdab4b6675a56949940d9aa9a3e1bf79d94c68dd0f92a7fc035697aab27016e3ccae7de9cf61c532c4b66c7f897abff821b96d8be1bf211011109164b640b865d2ed5935ba4f4301966569f1efccb3e6f7573b9c8c54be63e218086774d70ceb19ffcc727a1b1a47e6ab1c9f36abb9106cccc408829a1b8782dee68750c0c9a2dd637d81f8846e4a5f731c0d0ce740ae436c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x9}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x7, 0x18, 0xfe, [@generic={0x99, 0xd, "5eb5038ac27e67ab66625e5c5a43ad49ad3377c6a718f6c9f6c6c647ae95a8578123bacff04e7ebcce6a19031f24a594c41d7e0efe06ab49a44dfb744c4b6057361e67bb1f8269c9b0cfa7908a38c9a78fa28d1012605e059a89c7e1edc3a6042918134fc7258375c4c9dd1d048278547c8a822825c30775039ec5558899c45bb0a44637dfb0ffb96f6f68af0d73fbcb988753133e8f4d"}, @uac_iso={0x7, 0x25, 0x1, 0xba0d417818b38a5e, 0x81, 0xae}]}}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x110, 0x3, 0xb3, 0x1, 0x40, 0x3}, 0xd6, &(0x7f0000001100)={0x5, 0xf, 0xd6, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0xf8, 0x80, 0xfffe, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x42, 0x0, 0x41, 0x8, 0x7f}, @generic={0xb8, 0x10, 0x2, "5020a61817db2a80a8d6bd82fce04246471e54efd7734f9294b34d28c44439e386c81eb1c98324888c4540fe0f46b55638e2b1a112214e85631b46e89e0500b4a7b6e438688433837e7ca5721953f1011d68adcea8ee9c900c0b14b765f2e810df205c9afcb6fce0fb9b1c8a8016472cef915fdc9122f45dbbeeecedee8b1c52778254a6c79537e1eb071494a2bb8659c9b2ba9c83fe4049560aabf8f2d60e822207ba3888476c0a1e331fc2c051a13ab7d2d05dbc"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x40b}}, {0x3, &(0x7f0000001240)=ANY=[@ANYBLOB='\x00\x00\b']}, {0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, {0x52, &(0x7f0000001340)=@string={0x52, 0x3, "83e28dda4e42444871363d4f6224f54b0873a0cd1728a8c42c553cc33fadd31d5c4f6fbf851db23f26dc8e95d55f0fa2d8ffd45d657fc5f05955e2ad10954c930502a5b6a4abd08465ccabcb1888c574"}}, {0x7b, &(0x7f00000013c0)=@string={0x7b, 0x3, "08eed7845ac4cda61e03020e920cf3433ebb897d5ee08aebe241e1f2e936f83bfe30d9e3e83f326c4264a0ceb4801436b68b2bc398dd9a0ce58ee2fc2a9ed65fd2246a7ce9f3d5eb5ef914602b736502471a793bfc09a61249ba2fc968a45f7e4cd6c5b14a5b7acc35c80fccd712aea70e149073c10b4bc783"}}]}) kernel console output (not intermixed with test programs): [ 838.321686][ T6046] usb 1-1: config 0 descriptor?? [ 838.330993][T14776] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 838.463816][ T6153] tipc: Left network mode [ 838.702377][ T6046] elecom 0003:056E:010D.0012: unexpected long global item [ 838.705957][ T6046] elecom 0003:056E:010D.0012: probe with driver elecom failed with error -22 [ 838.847757][ T6046] usb 1-1: USB disconnect, device number 94 [ 839.042176][ T36] usbhid 3-1:0.0: can't add hid device: -71 [ 839.042321][ T36] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 839.172292][ T36] usb 3-1: USB disconnect, device number 67 [ 839.612605][ T5826] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 839.706648][ T36] usb 2-1: USB disconnect, device number 53 [ 839.706797][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 839.792930][ T5826] usb 4-1: New USB device found, idVendor=6547, idProduct=0232, bcdDevice= 0.00 [ 839.792967][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.792989][ T5826] usb 4-1: Product: syz [ 839.793005][ T5826] usb 4-1: Manufacturer: syz [ 839.793021][ T5826] usb 4-1: SerialNumber: syz [ 839.911404][ T5826] ark3116 4-1:1.0: ark3116 converter detected [ 840.027308][T14804] netlink: 'syz.1.3094': attribute type 29 has an invalid length. [ 840.122570][ T5826] ark3116 ttyUSB0: using RS232 mode [ 840.172654][T14810] FAULT_INJECTION: forcing a failure. [ 840.172654][T14810] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 840.172698][T14810] CPU: 0 UID: 0 PID: 14810 Comm: syz.2.3095 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 840.172731][T14810] Tainted: [L]=SOFTLOCKUP [ 840.172739][T14810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 840.172753][T14810] Call Trace: [ 840.172762][T14810] [ 840.172773][T14810] dump_stack_lvl+0xe8/0x150 [ 840.172815][T14810] should_fail_ex+0x467/0x600 [ 840.172856][T14810] prepare_alloc_pages+0x223/0x690 [ 840.172887][T14810] __alloc_frozen_pages_noprof+0x12f/0x380 [ 840.172918][T14810] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 840.172951][T14810] ? __pfx_policy_nodemask+0x10/0x10 [ 840.172978][T14810] ? lockdep_hardirqs_on+0x7a/0x110 [ 840.173013][T14810] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 840.173043][T14810] alloc_pages_mpol+0xce/0x280 [ 840.173076][T14810] alloc_pages_noprof+0xd2/0x2f0 [ 840.173106][T14810] get_free_pages_noprof+0xf/0x80 [ 840.173142][T14810] __kasan_populate_vmalloc+0x38/0x1c0 [ 840.173179][T14810] ? rt_spin_unlock+0x163/0x200 [ 840.173206][T14810] alloc_vmap_area+0xd1a/0x1420 [ 840.173330][T14810] ? __pfx_alloc_vmap_area+0x10/0x10 [ 840.173366][T14810] ? __kmalloc_cache_node_noprof+0x47b/0x6a0 [ 840.173394][T14810] ? __get_vm_area_node+0x136/0x300 [ 840.173426][T14810] ? __get_vm_area_node+0x136/0x300 [ 840.173465][T14810] __get_vm_area_node+0x1f2/0x300 [ 840.173505][T14810] __vmalloc_node_range_noprof+0x358/0x1730 [ 840.173528][T14810] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 840.173579][T14810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 840.173615][T14810] ? is_bpf_text_address+0x26/0x2b0 [ 840.173646][T14810] ? kernel_text_address+0xa5/0xe0 [ 840.173678][T14810] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 840.173706][T14810] __vmalloc_noprof+0xd2/0x120 [ 840.173730][T14810] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 840.173757][T14810] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 840.173782][T14810] ? bpf_prog_alloc+0x2a/0x1a0 [ 840.173809][T14810] bpf_prog_alloc+0x3c/0x1a0 [ 840.173837][T14810] bpf_prog_load+0x7f8/0x1c00 [ 840.173902][T14810] ? __pfx_bpf_prog_load+0x10/0x10 [ 840.173955][T14810] __sys_bpf+0xd0d/0xd90 [ 840.173988][T14810] ? __pfx___sys_bpf+0x10/0x10 [ 840.174015][T14810] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 840.174051][T14810] ? rt_mutex_slowunlock+0x219/0x460 [ 840.174096][T14810] ? ksys_write+0x248/0x270 [ 840.174128][T14810] ? __pfx_ksys_write+0x10/0x10 [ 840.174163][T14810] __x64_sys_bpf+0xba/0xd0 [ 840.174199][T14810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.174225][T14810] do_syscall_64+0x174/0x580 [ 840.174255][T14810] ? trace_irq_disable+0x3b/0x140 [ 840.174278][T14810] ? clear_bhb_loop+0x40/0x90 [ 840.174306][T14810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.174329][T14810] RIP: 0033:0x7f3c17d8e0d9 [ 840.174351][T14810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.174372][T14810] RSP: 002b:00007f3c15fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 840.174397][T14810] RAX: ffffffffffffffda RBX: 00007f3c18015fa0 RCX: 00007f3c17d8e0d9 [ 840.174414][T14810] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 840.174429][T14810] RBP: 00007f3c15fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 840.174442][T14810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.174456][T14810] R13: 00007f3c18016038 R14: 00007f3c18015fa0 R15: 00007ffe235494a8 [ 840.174491][T14810] [ 840.175188][ T5826] usb 4-1: ark3116 converter now attached to ttyUSB0 [ 840.196230][T14810] syz.2.3095: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 840.196319][T14810] CPU: 0 UID: 0 PID: 14810 Comm: syz.2.3095 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 840.196346][T14810] Tainted: [L]=SOFTLOCKUP [ 840.196354][T14810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 840.196366][T14810] Call Trace: [ 840.196374][T14810] [ 840.196383][T14810] dump_stack_lvl+0xe8/0x150 [ 840.196419][T14810] warn_alloc+0x24c/0x270 [ 840.196442][T14810] ? kasan_quarantine_put+0xbb/0x1f0 [ 840.196466][T14810] ? __pfx_warn_alloc+0x10/0x10 [ 840.196489][T14810] ? __get_vm_area_node+0x20b/0x300 [ 840.196524][T14810] ? __get_vm_area_node+0x20b/0x300 [ 840.196559][T14810] __vmalloc_node_range_noprof+0x37d/0x1730 [ 840.196606][T14810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 840.196625][T14810] ? is_bpf_text_address+0x26/0x2b0 [ 840.196652][T14810] ? kernel_text_address+0xa5/0xe0 [ 840.196679][T14810] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 840.196699][T14810] __vmalloc_noprof+0xd2/0x120 [ 840.196719][T14810] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 840.196743][T14810] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 840.196775][T14810] ? bpf_prog_alloc+0x2a/0x1a0 [ 840.196799][T14810] bpf_prog_alloc+0x3c/0x1a0 [ 840.196822][T14810] bpf_prog_load+0x7f8/0x1c00 [ 840.196855][T14810] ? __pfx_bpf_prog_load+0x10/0x10 [ 840.196900][T14810] __sys_bpf+0xd0d/0xd90 [ 840.196928][T14810] ? __pfx___sys_bpf+0x10/0x10 [ 840.196951][T14810] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 840.196983][T14810] ? rt_mutex_slowunlock+0x219/0x460 [ 840.197021][T14810] ? ksys_write+0x248/0x270 [ 840.197050][T14810] ? __pfx_ksys_write+0x10/0x10 [ 840.197080][T14810] __x64_sys_bpf+0xba/0xd0 [ 840.197110][T14810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.197131][T14810] do_syscall_64+0x174/0x580 [ 840.197157][T14810] ? trace_irq_disable+0x3b/0x140 [ 840.197177][T14810] ? clear_bhb_loop+0x40/0x90 [ 840.197201][T14810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.197222][T14810] RIP: 0033:0x7f3c17d8e0d9 [ 840.197242][T14810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.197259][T14810] RSP: 002b:00007f3c15fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 840.197279][T14810] RAX: ffffffffffffffda RBX: 00007f3c18015fa0 RCX: 00007f3c17d8e0d9 [ 840.197293][T14810] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 840.197306][T14810] RBP: 00007f3c15fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 840.197323][T14810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.197335][T14810] R13: 00007f3c18016038 R14: 00007f3c18015fa0 R15: 00007ffe235494a8 [ 840.197366][T14810] [ 840.197385][T14810] Mem-Info: [ 840.197394][T14810] active_anon:191 inactive_anon:7680 isolated_anon:0 [ 840.197394][T14810] active_file:26694 inactive_file:39391 isolated_file:0 [ 840.197394][T14810] unevictable:768 dirty:110 writeback:0 [ 840.197394][T14810] slab_reclaimable:12261 slab_unreclaimable:102058 [ 840.197394][T14810] mapped:32077 shmem:1291 pagetables:1446 [ 840.197394][T14810] sec_pagetables:0 bounce:0 [ 840.197394][T14810] kernel_misc_reclaimable:0 [ 840.197394][T14810] free:1281926 free_pcp:6406 free_cma:0 [ 840.197653][T14810] Node 0 active_anon:764kB inactive_anon:30720kB active_file:106564kB inactive_file:157564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128308kB dirty:440kB writeback:0kB shmem:3628kB kernel_stack:13388kB pagetables:5620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 840.197706][T14810] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 840.201092][T14810] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 840.201155][T14810] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 840.201191][T14810] Node 0 DMA32 free:1176288kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:764kB inactive_anon:30720kB active_file:106564kB inactive_file:157564kB unevictable:1536kB writepending:440kB zspages:0kB present:3129332kB managed:2560556kB mlocked:0kB bounce:0kB free_pcp:25612kB local_pcp:11208kB free_cma:0kB [ 840.201252][T14810] lowmem_reserve[]: 0 0 1 1 1 [ 840.201285][T14810] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 840.201338][T14810] lowmem_reserve[]: 0 0 0 0 0 [ 840.201371][T14810] Node 1 Normal free:3936056kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 840.201428][T14810] lowmem_reserve[]: 0 0 0 0 0 [ 840.201460][T14810] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 840.201575][T14810] Node 0 DMA32: 860*4kB (UME) 834*8kB (UME) 822*16kB (UME) 444*32kB (UM) 299*64kB (UME) 213*128kB (UME) 99*256kB (UME) 44*512kB (UM) 26*1024kB (UME) 23*2048kB (UME) 237*4096kB (UM) = 1176224kB [ 840.201728][T14810] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 840.201831][T14810] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 6*16kB (UM) 9*32kB (UM) 6*64kB (UM) 2*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3936056kB [ 840.201981][T14810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 840.201997][T14810] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 840.202013][T14810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 840.202029][T14810] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 840.202045][T14810] 67372 total pagecache pages [ 840.202053][T14810] 0 pages in swap cache [ 840.202060][T14810] Free swap = 124996kB [ 840.202067][T14810] Total swap = 124996kB [ 840.202075][T14810] 2097051 pages RAM [ 840.202082][T14810] 0 pages HighMem/MovableOnly [ 840.202090][T14810] 424834 pages reserved [ 840.202097][T14810] 0 pages cma reserved [ 840.234203][ T5826] usb 4-1: USB disconnect, device number 69 [ 840.354977][ T5826] ark3116 ttyUSB0: ark3116 converter now disconnected from ttyUSB0 [ 840.362865][ T5826] ark3116 4-1:1.0: device disconnected [ 841.032114][ T5588] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 841.203271][ T5588] usb 2-1: config 94 has an invalid interface number: 182 but max is 0 [ 841.203302][ T5588] usb 2-1: config 94 has no interface number 0 [ 841.203332][ T5588] usb 2-1: config 94 interface 182 has no altsetting 0 [ 841.216662][ T5588] usb 2-1: string descriptor 0 read error: -22 [ 841.216823][ T5588] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=c4.57 [ 841.216847][ T5588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.307675][ T5588] rndis_host 2-1:94.182: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 841.309470][ T5588] cdc_acm 2-1:94.182: Zero length descriptor references [ 841.309509][ T5588] cdc_acm 2-1:94.182: probe with driver cdc_acm failed with error -22 [ 841.507176][T14814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.519389][T14814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.728077][T14841] FAULT_INJECTION: forcing a failure. [ 841.728077][T14841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.728112][T14841] CPU: 0 UID: 0 PID: 14841 Comm: syz.3.3106 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 841.728138][T14841] Tainted: [L]=SOFTLOCKUP [ 841.728145][T14841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 841.728157][T14841] Call Trace: [ 841.728164][T14841] [ 841.728173][T14841] dump_stack_lvl+0xe8/0x150 [ 841.728211][T14841] should_fail_ex+0x467/0x600 [ 841.728245][T14841] _copy_from_user+0x2d/0xb0 [ 841.728269][T14841] sock_do_ioctl+0x195/0x320 [ 841.728290][T14841] ? __pfx_sock_do_ioctl+0x10/0x10 [ 841.728316][T14841] ? hook_file_ioctl+0x1f3/0x600 [ 841.728337][T14841] ? __asan_memset+0x22/0x50 [ 841.728364][T14841] ? smack_file_ioctl+0x263/0x360 [ 841.728389][T14841] sock_ioctl+0x57d/0x7f0 [ 841.728417][T14841] ? __pfx_sock_ioctl+0x10/0x10 [ 841.728443][T14841] ? __fget_files+0x2a/0x420 [ 841.728462][T14841] ? __fget_files+0x3a8/0x420 [ 841.728480][T14841] ? __fget_files+0x2a/0x420 [ 841.728502][T14841] ? bpf_lsm_file_ioctl+0x9/0x20 [ 841.728520][T14841] ? __pfx_sock_ioctl+0x10/0x10 [ 841.728546][T14841] __se_sys_ioctl+0xff/0x170 [ 841.728571][T14841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.728591][T14841] do_syscall_64+0x174/0x580 [ 841.728614][T14841] ? trace_irq_disable+0x3b/0x140 [ 841.728633][T14841] ? clear_bhb_loop+0x40/0x90 [ 841.728654][T14841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.728672][T14841] RIP: 0033:0x7f8d4375e0d9 [ 841.728690][T14841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.728705][T14841] RSP: 002b:00007f8d419b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.728726][T14841] RAX: ffffffffffffffda RBX: 00007f8d439e5fa0 RCX: 00007f8d4375e0d9 [ 841.728748][T14841] RDX: 0000200000000240 RSI: 0000000000008931 RDI: 0000000000000003 [ 841.728760][T14841] RBP: 00007f8d419b6090 R08: 0000000000000000 R09: 0000000000000000 [ 841.728771][T14841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.728782][T14841] R13: 00007f8d439e6038 R14: 00007f8d439e5fa0 R15: 00007ffe0b7dd818 [ 841.728810][T14841] [ 841.956116][T14806] netlink: 'syz.1.3094': attribute type 29 has an invalid length. [ 841.974959][ T6047] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 841.992401][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 842.014417][T14814] netlink: 774 bytes leftover after parsing attributes in process `syz.1.3094'. [ 842.112896][T14846] FAULT_INJECTION: forcing a failure. [ 842.112896][T14846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.112923][T14846] CPU: 1 UID: 0 PID: 14846 Comm: syz.3.3108 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 842.112942][T14846] Tainted: [L]=SOFTLOCKUP [ 842.112947][T14846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 842.112954][T14846] Call Trace: [ 842.112960][T14846] [ 842.112965][T14846] dump_stack_lvl+0xe8/0x150 [ 842.112991][T14846] should_fail_ex+0x467/0x600 [ 842.113015][T14846] _copy_to_user+0x31/0xb0 [ 842.113042][T14846] simple_read_from_buffer+0xe1/0x170 [ 842.113059][T14846] proc_fail_nth_read+0x1be/0x230 [ 842.113077][T14846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 842.113098][T14846] ? rw_verify_area+0x250/0x4d0 [ 842.113116][T14846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 842.113129][T14846] vfs_read+0x219/0xa90 [ 842.113150][T14846] ? __pfx_vfs_read+0x10/0x10 [ 842.113167][T14846] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 842.113189][T14846] ? lockdep_hardirqs_on+0x7a/0x110 [ 842.113221][T14846] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 842.113248][T14846] ? mutex_lock_nested+0x152/0x1d0 [ 842.113261][T14846] ? fdget_pos+0x252/0x320 [ 842.113279][T14846] ksys_read+0x156/0x270 [ 842.113297][T14846] ? __pfx_ksys_read+0x10/0x10 [ 842.113325][T14846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.113339][T14846] do_syscall_64+0x174/0x580 [ 842.113356][T14846] ? trace_irq_disable+0x3b/0x140 [ 842.113374][T14846] ? clear_bhb_loop+0x40/0x90 [ 842.113400][T14846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.113421][T14846] RIP: 0033:0x7f8d4371e90e [ 842.113441][T14846] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 842.113459][T14846] RSP: 002b:00007f8d419b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 842.113483][T14846] RAX: ffffffffffffffda RBX: 00007f8d419b66c0 RCX: 00007f8d4371e90e [ 842.113497][T14846] RDX: 000000000000000f RSI: 00007f8d419b60a0 RDI: 0000000000000005 [ 842.113510][T14846] RBP: 00007f8d419b6090 R08: 0000000000000000 R09: 0000000000000000 [ 842.113522][T14846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.113535][T14846] R13: 00007f8d439e6038 R14: 00007f8d439e5fa0 R15: 00007ffe0b7dd818 [ 842.113567][T14846] [ 842.243630][ T6047] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.243661][ T6047] usb 1-1: config 0 interface 0 has no altsetting 0 [ 842.310909][ T6047] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 842.310945][ T6047] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.310967][ T6047] usb 1-1: Product: syz [ 842.310984][ T6047] usb 1-1: Manufacturer: syz [ 842.311000][ T6047] usb 1-1: SerialNumber: syz [ 842.435743][ T6047] usb 1-1: config 0 descriptor?? [ 842.450265][T14809] netlink: 'syz.1.3094': attribute type 29 has an invalid length. [ 842.746908][ T6047] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 842.767739][ T6046] usb 2-1: USB disconnect, device number 54 [ 843.259008][ T6047] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 843.261688][ T6047] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 843.261755][ T6047] usb 1-1: media controller created [ 843.333020][ T6047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 843.474588][ T6047] DVB: Unable to find symbol tda10046_attach() [ 843.474600][ T6047] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 843.474674][ T6047] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 843.699940][ T6047] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 843.729475][ T6047] usb 1-1: USB disconnect, device number 95 [ 843.832961][T14862] FAULT_INJECTION: forcing a failure. [ 843.832961][T14862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.833002][T14862] CPU: 0 UID: 0 PID: 14862 Comm: syz.3.3112 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 843.833033][T14862] Tainted: [L]=SOFTLOCKUP [ 843.833042][T14862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 843.833054][T14862] Call Trace: [ 843.833063][T14862] [ 843.833073][T14862] dump_stack_lvl+0xe8/0x150 [ 843.833115][T14862] should_fail_ex+0x467/0x600 [ 843.833157][T14862] _copy_to_user+0x31/0xb0 [ 843.833189][T14862] simple_read_from_buffer+0xe1/0x170 [ 843.833220][T14862] proc_fail_nth_read+0x1be/0x230 [ 843.833260][T14862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.833291][T14862] ? rw_verify_area+0x250/0x4d0 [ 843.833322][T14862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.833346][T14862] vfs_read+0x219/0xa90 [ 843.833389][T14862] ? __pfx_vfs_read+0x10/0x10 [ 843.833420][T14862] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 843.833451][T14862] ? lockdep_hardirqs_on+0x7a/0x110 [ 843.833480][T14862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 843.833509][T14862] ? mutex_lock_nested+0x152/0x1d0 [ 843.833530][T14862] ? fdget_pos+0x252/0x320 [ 843.833564][T14862] ksys_read+0x156/0x270 [ 843.833596][T14862] ? __pfx_ksys_read+0x10/0x10 [ 843.833634][T14862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.833658][T14862] do_syscall_64+0x174/0x580 [ 843.833687][T14862] ? trace_irq_disable+0x3b/0x140 [ 843.833711][T14862] ? clear_bhb_loop+0x40/0x90 [ 843.833738][T14862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.833760][T14862] RIP: 0033:0x7f8d4371e90e [ 843.833781][T14862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 843.833800][T14862] RSP: 002b:00007f8d419b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 843.833824][T14862] RAX: ffffffffffffffda RBX: 00007f8d419b66c0 RCX: 00007f8d4371e90e [ 843.833840][T14862] RDX: 000000000000000f RSI: 00007f8d419b60a0 RDI: 0000000000000004 [ 843.833854][T14862] RBP: 00007f8d419b6090 R08: 0000000000000000 R09: 0000000000000000 [ 843.833868][T14862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.833881][T14862] R13: 00007f8d439e6038 R14: 00007f8d439e5fa0 R15: 00007ffe0b7dd818 [ 843.833918][T14862] [ 844.595941][T14868] nbd0: detected capacity change from 0 to 63 [ 844.614367][ T5599] block nbd0: Receive control failed (result -32) [ 844.654000][ T32] block nbd0: Dead connection, failed to find a fallback [ 844.654033][ T32] block nbd0: shutting down sockets [ 844.654234][ T32] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 844.654334][ T32] Buffer I/O error on dev nbd0, logical block 0, async page read [ 844.657764][ T32] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 844.657797][ T32] Buffer I/O error on dev nbd0, logical block 1, async page read [ 844.657929][ T32] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 844.657952][ T32] Buffer I/O error on dev nbd0, logical block 2, async page read [ 844.703857][ T32] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 844.703904][ T32] Buffer I/O error on dev nbd0, logical block 3, async page read [ 844.728134][ T57] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 844.728170][ T57] Buffer I/O error on dev nbd0, logical block 0, async page read [ 844.728191][ T57] Buffer I/O error on dev nbd0, logical block 1, async page read [ 844.728208][ T57] Buffer I/O error on dev nbd0, logical block 2, async page read [ 844.728225][ T57] Buffer I/O error on dev nbd0, logical block 3, async page read [ 844.758188][ T57] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 844.758224][ T57] Buffer I/O error on dev nbd0, logical block 0, async page read [ 844.758244][ T57] Buffer I/O error on dev nbd0, logical block 1, async page read [ 844.758587][ T57] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 844.761423][ T57] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 844.789439][ T57] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 844.819596][ T57] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 844.823340][ T5885] ldm_validate_partition_table(): Disk read failed. [ 844.826717][ T5885] Dev nbd0: unable to read RDB block 0 [ 844.829206][ T5885] nbd0: unable to read partition table [ 844.945896][ T5885] ldm_validate_partition_table(): Disk read failed. [ 844.948023][T14867] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 844.948803][ T5885] Dev nbd0: unable to read RDB block 0 [ 844.950663][ T5885] nbd0: unable to read partition table [ 844.965240][ T5702] team_slave_0: entered promiscuous mode [ 844.965293][ T5702] team_slave_1: entered promiscuous mode [ 845.678324][T14905] netlink: 'syz.1.3122': attribute type 29 has an invalid length. [ 845.829481][T14908] netlink: 'syz.1.3122': attribute type 29 has an invalid length. [ 845.830204][T14913] netlink: 'syz.1.3122': attribute type 29 has an invalid length. [ 846.147538][ T5588] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 846.167532][ T6153] hsr_slave_0: left promiscuous mode [ 846.204728][ T6153] hsr_slave_1: left promiscuous mode [ 846.205856][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.205880][ T6153] net_ratelimit: 10 callbacks suppressed [ 846.205892][ T6153] batadv0: mtu less than device minimum [ 846.303607][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.312937][ T5588] usb 2-1: config 94 has an invalid interface number: 182 but max is 0 [ 846.312967][ T5588] usb 2-1: config 94 has no interface number 0 [ 846.312998][ T5588] usb 2-1: config 94 interface 182 has no altsetting 0 [ 846.316605][ T5588] usb 2-1: string descriptor 0 read error: -22 [ 846.316741][ T5588] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=c4.57 [ 846.316765][ T5588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.349852][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.353140][T14930] FAULT_INJECTION: forcing a failure. [ 846.353140][T14930] name failslab, interval 1, probability 0, space 0, times 0 [ 846.353175][T14930] CPU: 0 UID: 0 PID: 14930 Comm: syz.3.3129 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 846.353214][T14930] Tainted: [L]=SOFTLOCKUP [ 846.353222][T14930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 846.353235][T14930] Call Trace: [ 846.353243][T14930] [ 846.353252][T14930] dump_stack_lvl+0xe8/0x150 [ 846.353292][T14930] should_fail_ex+0x467/0x600 [ 846.353331][T14930] should_failslab+0xa8/0x100 [ 846.353357][T14930] kmem_cache_alloc_noprof+0xa4/0x650 [ 846.353379][T14930] ? sctp_get_port_local+0x749/0x17a0 [ 846.353486][T14930] ? sctp_get_port_local+0x749/0x17a0 [ 846.353520][T14930] sctp_get_port_local+0x749/0x17a0 [ 846.353560][T14930] ? __pfx_sctp_get_port_local+0x10/0x10 [ 846.353591][T14930] ? sctp_bind_addr_match+0x28b/0x2b0 [ 846.353619][T14930] sctp_do_bind+0x4d9/0x9a0 [ 846.353656][T14930] sctp_bindx_add+0xa9/0x210 [ 846.353701][T14930] sctp_setsockopt_bindx+0x1c2/0x2b0 [ 846.353735][T14930] sctp_setsockopt+0x83b/0x12c0 [ 846.353758][T14930] ? sock_common_setsockopt+0x36/0xc0 [ 846.353781][T14930] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 846.353805][T14930] do_sock_setsockopt+0x17c/0x1b0 [ 846.353836][T14930] __x64_sys_setsockopt+0x143/0x1b0 [ 846.353863][T14930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.353886][T14930] do_syscall_64+0x174/0x580 [ 846.353912][T14930] ? trace_irq_disable+0x3b/0x140 [ 846.353933][T14930] ? clear_bhb_loop+0x40/0x90 [ 846.353958][T14930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.353978][T14930] RIP: 0033:0x7f8d4375e0d9 [ 846.353998][T14930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.354014][T14930] RSP: 002b:00007f8d419b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 846.354037][T14930] RAX: ffffffffffffffda RBX: 00007f8d439e5fa0 RCX: 00007f8d4375e0d9 [ 846.354052][T14930] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 846.354064][T14930] RBP: 00007f8d419b6090 R08: 000000000000001c R09: 0000000000000000 [ 846.354077][T14930] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 846.354089][T14930] R13: 00007f8d439e6038 R14: 00007f8d439e5fa0 R15: 00007ffe0b7dd818 [ 846.354123][T14930] [ 846.419028][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.438809][ T5588] rndis_host 2-1:94.182: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 846.454217][ T5588] cdc_acm 2-1:94.182: Zero length descriptor references [ 846.454261][ T5588] cdc_acm 2-1:94.182: probe with driver cdc_acm failed with error -22 [ 846.470625][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.510940][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.555148][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.595106][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.646647][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.686549][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.686846][T14905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.687472][T14905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.739043][ T6047] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 846.879344][ T6153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.908577][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.931207][ T6047] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 846.931244][ T6047] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.931267][ T6047] usb 1-1: Product: syz [ 846.931282][ T6047] usb 1-1: Manufacturer: syz [ 846.931298][ T6047] usb 1-1: SerialNumber: syz [ 847.220908][ T6047] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 847.366516][ T6153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.408824][ T6153] batman_adv: batadv0: Interface deactivated: dummy0 [ 847.408857][ T6153] batman_adv: batadv0: Removing interface: dummy0 [ 847.528017][ T6047] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 847.533737][ T6047] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 847.595216][ T6047] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 847.618994][ T6047] usb 1-1: USB disconnect, device number 96 [ 847.659878][ T6153] veth1_macvtap: left promiscuous mode [ 847.659950][ T6153] veth0_macvtap: left promiscuous mode [ 847.660243][ T6153] veth1_vlan: left promiscuous mode [ 847.660355][ T6153] veth0_vlan: left promiscuous mode [ 848.688544][T14974] FAULT_INJECTION: forcing a failure. [ 848.688544][T14974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.688571][T14974] CPU: 1 UID: 0 PID: 14974 Comm: syz.0.3147 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 848.688589][T14974] Tainted: [L]=SOFTLOCKUP [ 848.688593][T14974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.688601][T14974] Call Trace: [ 848.688607][T14974] [ 848.688613][T14974] dump_stack_lvl+0xe8/0x150 [ 848.688645][T14974] should_fail_ex+0x467/0x600 [ 848.688669][T14974] _copy_to_user+0x31/0xb0 [ 848.688686][T14974] simple_read_from_buffer+0xe1/0x170 [ 848.688704][T14974] proc_fail_nth_read+0x1be/0x230 [ 848.688721][T14974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.688736][T14974] ? rw_verify_area+0x250/0x4d0 [ 848.688754][T14974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.688767][T14974] vfs_read+0x219/0xa90 [ 848.688788][T14974] ? __pfx_vfs_read+0x10/0x10 [ 848.688805][T14974] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 848.688824][T14974] ? lockdep_hardirqs_on+0x7a/0x110 [ 848.688841][T14974] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 848.688858][T14974] ? mutex_lock_nested+0x152/0x1d0 [ 848.688870][T14974] ? fdget_pos+0x252/0x320 [ 848.688888][T14974] ksys_read+0x156/0x270 [ 848.688906][T14974] ? __pfx_ksys_read+0x10/0x10 [ 848.688926][T14974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.688940][T14974] do_syscall_64+0x174/0x580 [ 848.688956][T14974] ? trace_irq_disable+0x3b/0x140 [ 848.688969][T14974] ? clear_bhb_loop+0x40/0x90 [ 848.688984][T14974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.688996][T14974] RIP: 0033:0x7f2acdf3e90e [ 848.689009][T14974] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 848.689020][T14974] RSP: 002b:00007f2acc1d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 848.689034][T14974] RAX: ffffffffffffffda RBX: 00007f2acc1d66c0 RCX: 00007f2acdf3e90e [ 848.689044][T14974] RDX: 000000000000000f RSI: 00007f2acc1d60a0 RDI: 0000000000000005 [ 848.689052][T14974] RBP: 00007f2acc1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 848.689060][T14974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.689067][T14974] R13: 00007f2ace206038 R14: 00007f2ace205fa0 R15: 00007ffd398b2e68 [ 848.689086][T14974] [ 849.865972][ T6153] team0 (unregistering): Port device team_slave_1 removed [ 850.009281][ T6153] team0 (unregistering): Port device team_slave_0 removed [ 850.772223][T14905] netlink: 774 bytes leftover after parsing attributes in process `syz.1.3122'. [ 850.780556][T14990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3153'. [ 850.846995][ T5588] usb 2-1: USB disconnect, device number 55 [ 851.239535][T15048] FAULT_INJECTION: forcing a failure. [ 851.239535][T15048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.239575][T15048] CPU: 0 UID: 0 PID: 15048 Comm: syz.2.3178 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 851.239606][T15048] Tainted: [L]=SOFTLOCKUP [ 851.239614][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 851.239626][T15048] Call Trace: [ 851.239635][T15048] [ 851.239645][T15048] dump_stack_lvl+0xe8/0x150 [ 851.239684][T15048] should_fail_ex+0x467/0x600 [ 851.239722][T15048] _copy_from_user+0x2d/0xb0 [ 851.239752][T15048] hidp_sock_ioctl+0x2dc/0x650 [ 851.239864][T15048] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 851.239937][T15048] ? do_vfs_ioctl+0x1184/0x1550 [ 851.239983][T15048] sock_do_ioctl+0x101/0x320 [ 851.240009][T15048] ? __pfx_sock_do_ioctl+0x10/0x10 [ 851.240052][T15048] ? smack_file_ioctl+0x263/0x360 [ 851.240092][T15048] sock_ioctl+0x57d/0x7f0 [ 851.240129][T15048] ? __pfx_sock_ioctl+0x10/0x10 [ 851.240164][T15048] ? __fget_files+0x2a/0x420 [ 851.240188][T15048] ? __fget_files+0x3a8/0x420 [ 851.240211][T15048] ? __fget_files+0x2a/0x420 [ 851.240238][T15048] ? bpf_lsm_file_ioctl+0x9/0x20 [ 851.240260][T15048] ? __pfx_sock_ioctl+0x10/0x10 [ 851.240294][T15048] __se_sys_ioctl+0xff/0x170 [ 851.240324][T15048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.240349][T15048] do_syscall_64+0x174/0x580 [ 851.240377][T15048] ? trace_irq_disable+0x3b/0x140 [ 851.240401][T15048] ? clear_bhb_loop+0x40/0x90 [ 851.240429][T15048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.240452][T15048] RIP: 0033:0x7f3c17d8e0d9 [ 851.240473][T15048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.240502][T15048] RSP: 002b:00007f3c15fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.240527][T15048] RAX: ffffffffffffffda RBX: 00007f3c18015fa0 RCX: 00007f3c17d8e0d9 [ 851.240544][T15048] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000004 [ 851.240558][T15048] RBP: 00007f3c15fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 851.240570][T15048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.240580][T15048] R13: 00007f3c18016038 R14: 00007f3c18015fa0 R15: 00007ffe235494a8 [ 851.240608][T15048] [ 853.992423][T15082] FAULT_INJECTION: forcing a failure. [ 853.992423][T15082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.992465][T15082] CPU: 0 UID: 0 PID: 15082 Comm: syz.3.3189 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 853.992497][T15082] Tainted: [L]=SOFTLOCKUP [ 853.992506][T15082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 853.992519][T15082] Call Trace: [ 853.992528][T15082] [ 853.992537][T15082] dump_stack_lvl+0xe8/0x150 [ 853.992578][T15082] should_fail_ex+0x467/0x600 [ 853.992620][T15082] _copy_from_user+0x2d/0xb0 [ 853.992649][T15082] __sys_bind+0x1cc/0x410 [ 853.992678][T15082] ? __pfx___sys_bind+0x10/0x10 [ 853.992716][T15082] ? __pfx_ksys_write+0x10/0x10 [ 853.992749][T15082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.992774][T15082] __x64_sys_bind+0x7a/0x90 [ 853.992800][T15082] do_syscall_64+0x174/0x580 [ 853.992831][T15082] ? trace_irq_disable+0x3b/0x140 [ 853.992853][T15082] ? clear_bhb_loop+0x40/0x90 [ 853.992880][T15082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.992903][T15082] RIP: 0033:0x7f8d4375e0d9 [ 853.992924][T15082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.992943][T15082] RSP: 002b:00007f8d419b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 853.992968][T15082] RAX: ffffffffffffffda RBX: 00007f8d439e5fa0 RCX: 00007f8d4375e0d9 [ 853.992985][T15082] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 853.992999][T15082] RBP: 00007f8d419b6090 R08: 0000000000000000 R09: 0000000000000000 [ 853.993013][T15082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.993028][T15082] R13: 00007f8d439e6038 R14: 00007f8d439e5fa0 R15: 00007ffe0b7dd818 [ 853.993071][T15082] [ 854.485952][T14496] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 854.590107][T14496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 854.609278][T14496] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 855.409106][T14496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 855.673346][T14496] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 855.811257][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3196'. [ 855.955777][T14496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 855.995960][T14496] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 856.070010][ T6047] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 856.143289][T14496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.277604][ T6047] usb 3-1: unable to get BOS descriptor or descriptor too short [ 856.278489][ T6047] usb 3-1: not running at top speed; connect to a high speed hub [ 856.286613][ T6047] usb 3-1: config 0 has no interfaces? [ 856.308615][ T6047] usb 3-1: string descriptor 0 read error: -22 [ 856.308778][ T6047] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 856.308806][ T6047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.612454][ T6047] usb 3-1: config 0 descriptor?? [ 857.571806][T15140] 8021q: VLANs not supported on wg0 [ 857.912692][ T6047] usb 3-1: USB disconnect, device number 68 [ 858.223543][T14496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.284600][T14496] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.308148][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.308380][ T6153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.388767][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.389008][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.035434][T15181] trusted_key: syz.0.3213 sent an empty control message without MSG_MORE. [ 859.259011][ T5824] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 859.414198][ T5824] usb 2-1: device descriptor read/64, error -71 [ 859.689269][ T5824] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 859.883949][ T5824] usb 2-1: device descriptor read/64, error -71 [ 859.978814][T15213] FAULT_INJECTION: forcing a failure. [ 859.978814][T15213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.978855][T15213] CPU: 0 UID: 0 PID: 15213 Comm: syz.0.3221 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 859.978886][T15213] Tainted: [L]=SOFTLOCKUP [ 859.978894][T15213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.978907][T15213] Call Trace: [ 859.978916][T15213] [ 859.978926][T15213] dump_stack_lvl+0xe8/0x150 [ 859.978968][T15213] should_fail_ex+0x467/0x600 [ 859.979008][T15213] _copy_from_user+0x2d/0xb0 [ 859.979036][T15213] j1939_sk_setsockopt+0x713/0xc60 [ 859.979152][T15213] ? __pfx_j1939_sk_setsockopt+0x10/0x10 [ 859.979176][T15213] ? __fget_files+0x2a/0x420 [ 859.979205][T15213] ? __fget_files+0x2a/0x420 [ 859.979227][T15213] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 859.979285][T15213] ? __pfx_j1939_sk_setsockopt+0x10/0x10 [ 859.979315][T15213] do_sock_setsockopt+0x17c/0x1b0 [ 859.979349][T15213] __x64_sys_setsockopt+0x143/0x1b0 [ 859.979381][T15213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.979406][T15213] do_syscall_64+0x174/0x580 [ 859.979437][T15213] ? trace_irq_disable+0x3b/0x140 [ 859.979459][T15213] ? clear_bhb_loop+0x40/0x90 [ 859.979485][T15213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.979504][T15213] RIP: 0033:0x7f2acdf7e0d9 [ 859.979524][T15213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.979544][T15213] RSP: 002b:00007f2acc1d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 859.979566][T15213] RAX: ffffffffffffffda RBX: 00007f2ace205fa0 RCX: 00007f2acdf7e0d9 [ 859.979582][T15213] RDX: 0000000000000001 RSI: 000000000000006b RDI: 0000000000000003 [ 859.979595][T15213] RBP: 00007f2acc1d6090 R08: 0000000000004000 R09: 0000000000000000 [ 859.979609][T15213] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.979624][T15213] R13: 00007f2ace206038 R14: 00007f2ace205fa0 R15: 00007ffd398b2e68 [ 859.979657][T15213] [ 859.998553][ T5824] usb usb2-port1: attempt power cycle [ 860.283565][T14496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.358697][ T36] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 860.493563][ T5824] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 860.515141][ T5824] usb 2-1: device descriptor read/8, error -71 [ 860.523036][ T36] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 860.523070][ T36] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 860.523102][ T36] usb 4-1: config 220 has no interface number 2 [ 860.523196][ T36] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 860.523226][ T36] usb 4-1: config 220 interface 0 has no altsetting 0 [ 860.523246][ T36] usb 4-1: config 220 interface 76 has no altsetting 0 [ 860.523265][ T36] usb 4-1: config 220 interface 1 has no altsetting 0 [ 860.602974][ T36] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 860.603009][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.603031][ T36] usb 4-1: Product: syz [ 860.603047][ T36] usb 4-1: Manufacturer: syz [ 860.603063][ T36] usb 4-1: SerialNumber: syz [ 860.765097][ T5824] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 860.785183][ T5824] usb 2-1: device descriptor read/8, error -71 [ 860.881954][T15217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3222'. [ 860.910384][ T5824] usb usb2-port1: unable to enumerate USB device [ 860.979021][T14496] veth0_vlan: entered promiscuous mode [ 861.032376][ T36] usb 4-1: selecting invalid altsetting 0 [ 861.078975][ T36] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 861.079015][ T36] uvcvideo 4-1:220.0: No valid video chain found. [ 861.096512][ T36] usb 4-1: selecting invalid altsetting 0 [ 861.096553][ T36] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 861.105733][ T36] usb 4-1: USB disconnect, device number 70 [ 861.188732][T14496] veth1_vlan: entered promiscuous mode [ 861.305759][T14496] veth0_macvtap: entered promiscuous mode [ 861.315589][T14496] veth1_macvtap: entered promiscuous mode [ 861.369722][T14496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.407046][T14496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.924207][ T9750] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.057326][ T148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.073436][ T176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.073484][ T176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.445606][ T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.445700][ T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.616800][ T36] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 863.687421][ T9750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.687439][ T9750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.698598][T15273] FAULT_INJECTION: forcing a failure. [ 863.698598][T15273] name failslab, interval 1, probability 0, space 0, times 0 [ 863.698635][T15273] CPU: 0 UID: 0 PID: 15273 Comm: syz.1.3243 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 863.698664][T15273] Tainted: [L]=SOFTLOCKUP [ 863.698671][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 863.698683][T15273] Call Trace: [ 863.698691][T15273] [ 863.698699][T15273] dump_stack_lvl+0xe8/0x150 [ 863.698736][T15273] should_fail_ex+0x467/0x600 [ 863.698771][T15273] should_failslab+0xa8/0x100 [ 863.698797][T15273] kmem_cache_alloc_noprof+0xa4/0x650 [ 863.698818][T15273] ? do_getname+0x2e/0x250 [ 863.698835][T15273] ? do_getname+0x2e/0x250 [ 863.698860][T15273] do_getname+0x2e/0x250 [ 863.698877][T15273] ? __se_sys_mkdirat+0x18/0x150 [ 863.698903][T15273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.698933][T15273] __se_sys_mkdirat+0x24/0x150 [ 863.698960][T15273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.698981][T15273] do_syscall_64+0x174/0x580 [ 863.699008][T15273] ? trace_irq_disable+0x3b/0x140 [ 863.699029][T15273] ? clear_bhb_loop+0x40/0x90 [ 863.699052][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.699071][T15273] RIP: 0033:0x7fe5a4a9e0d9 [ 863.699091][T15273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.699109][T15273] RSP: 002b:00007fe5a2cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 863.699131][T15273] RAX: ffffffffffffffda RBX: 00007fe5a4d25fa0 RCX: 00007fe5a4a9e0d9 [ 863.699150][T15273] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 863.699164][T15273] RBP: 00007fe5a2cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 863.699176][T15273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.699188][T15273] R13: 00007fe5a4d26038 R14: 00007fe5a4d25fa0 R15: 00007fff16d03528 [ 863.699219][T15273] [ 863.806691][T15276] FAULT_INJECTION: forcing a failure. [ 863.806691][T15276] name failslab, interval 1, probability 0, space 0, times 0 [ 863.806726][T15276] CPU: 0 UID: 0 PID: 15276 Comm: syz.3.3245 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 863.806753][T15276] Tainted: [L]=SOFTLOCKUP [ 863.806760][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 863.806772][T15276] Call Trace: [ 863.806780][T15276] [ 863.806789][T15276] dump_stack_lvl+0xe8/0x150 [ 863.806824][T15276] should_fail_ex+0x467/0x600 [ 863.806862][T15276] should_failslab+0xa8/0x100 [ 863.806887][T15276] __kmalloc_noprof+0xfe/0x780 [ 863.806910][T15276] ? iovec_from_user+0x87/0x250 [ 863.806941][T15276] ? iovec_from_user+0x87/0x250 [ 863.806970][T15276] iovec_from_user+0x87/0x250 [ 863.806997][T15276] __import_iovec+0x15e/0x7e0 [ 863.807031][T15276] import_iovec+0x73/0xa0 [ 863.807058][T15276] ___sys_sendmsg+0x255/0x360 [ 863.807084][T15276] ? __lock_acquire+0x683/0x2ce0 [ 863.807110][T15276] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.807170][T15276] ? __fget_files+0x2a/0x420 [ 863.807190][T15276] ? __fget_files+0x3a8/0x420 [ 863.807221][T15276] __x64_sys_sendmsg+0x1b7/0x290 [ 863.807250][T15276] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 863.807301][T15276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.807324][T15276] do_syscall_64+0x174/0x580 [ 863.807351][T15276] ? trace_irq_disable+0x3b/0x140 [ 863.807372][T15276] ? clear_bhb_loop+0x40/0x90 [ 863.807395][T15276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.807415][T15276] RIP: 0033:0x7f8d4375e0d9 [ 863.807434][T15276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.807450][T15276] RSP: 002b:00007f8d419b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.807472][T15276] RAX: ffffffffffffffda RBX: 00007f8d439e5fa0 RCX: 00007f8d4375e0d9 [ 863.807487][T15276] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 863.807499][T15276] RBP: 00007f8d419b6090 R08: 0000000000000000 R09: 0000000000000000 [ 863.807512][T15276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.807524][T15276] R13: 00007f8d439e6038 R14: 00007f8d439e5fa0 R15: 00007ffe0b7dd818 [ 863.807554][T15276] [ 863.970690][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.970747][ T36] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 863.970775][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.080891][ T36] usb 3-1: config 0 descriptor?? [ 864.308854][ T36] usbhid 3-1:0.0: can't add hid device: -71 [ 864.308995][ T36] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 864.315409][ T36] usb 3-1: USB disconnect, device number 69 [ 866.408992][ T36] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 866.409014][ T5824] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 866.573981][ T5824] usb 2-1: device descriptor read/64, error -71 [ 866.793150][ T36] usb 3-1: device not accepting address 70, error -71 [ 866.825461][ T5824] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 866.968556][ T5824] usb 2-1: device descriptor read/64, error -71 [ 867.085805][ T5824] usb usb2-port1: attempt power cycle [ 867.133238][T15324] FAULT_INJECTION: forcing a failure. [ 867.133238][T15324] name failslab, interval 1, probability 0, space 0, times 0 [ 867.133280][T15324] CPU: 1 UID: 0 PID: 15324 Comm: syz.0.3264 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 867.133311][T15324] Tainted: [L]=SOFTLOCKUP [ 867.133319][T15324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 867.133341][T15324] Call Trace: [ 867.133351][T15324] [ 867.133361][T15324] dump_stack_lvl+0xe8/0x150 [ 867.133477][T15324] should_fail_ex+0x467/0x600 [ 867.133519][T15324] should_failslab+0xa8/0x100 [ 867.133548][T15324] kmem_cache_alloc_noprof+0xa4/0x650 [ 867.133573][T15324] ? alloc_empty_file+0x5b/0x1d0 [ 867.133594][T15324] ? alloc_empty_file+0x5b/0x1d0 [ 867.133623][T15324] alloc_empty_file+0x5b/0x1d0 [ 867.133647][T15324] path_openat+0x8f/0x3850 [ 867.133685][T15324] ? kasan_save_track+0x3e/0x80 [ 867.133705][T15324] ? __kasan_slab_alloc+0x6c/0x80 [ 867.133727][T15324] ? kmem_cache_alloc_noprof+0x355/0x650 [ 867.133747][T15324] ? do_getname+0x2e/0x250 [ 867.133765][T15324] ? do_sys_openat2+0xcc/0x200 [ 867.133785][T15324] ? __x64_sys_openat+0x138/0x170 [ 867.133806][T15324] ? do_syscall_64+0x174/0x580 [ 867.133836][T15324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.133880][T15324] do_file_open+0x23e/0x4a0 [ 867.133906][T15324] ? lockdep_hardirqs_on+0x7a/0x110 [ 867.133942][T15324] ? __pfx_do_file_open+0x10/0x10 [ 867.133993][T15324] ? alloc_fd+0x654/0x6d0 [ 867.134026][T15324] do_sys_openat2+0x115/0x200 [ 867.134052][T15324] ? __pfx_do_sys_openat2+0x10/0x10 [ 867.134077][T15324] ? ksys_write+0x248/0x270 [ 867.134106][T15324] ? __pfx_ksys_write+0x10/0x10 [ 867.134135][T15324] __x64_sys_openat+0x138/0x170 [ 867.134161][T15324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.134183][T15324] do_syscall_64+0x174/0x580 [ 867.134211][T15324] ? trace_irq_disable+0x3b/0x140 [ 867.134232][T15324] ? clear_bhb_loop+0x40/0x90 [ 867.134258][T15324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.134280][T15324] RIP: 0033:0x7f2acdf3e90e [ 867.134301][T15324] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 867.134320][T15324] RSP: 002b:00007f2acc1d5f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 867.134345][T15324] RAX: ffffffffffffffda RBX: 00007f2acc1d66c0 RCX: 00007f2acdf3e90e [ 867.134361][T15324] RDX: 0000000000000000 RSI: 00007f2ace01475f RDI: ffffffffffffff9c [ 867.134385][T15324] RBP: 00007f2acc1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 867.134399][T15324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.134412][T15324] R13: 00007f2ace206038 R14: 00007f2ace205fa0 R15: 00007ffd398b2e68 [ 867.134447][T15324] [ 867.623231][ T5824] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 867.772007][ T5824] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 867.796693][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.796750][ T5824] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 867.796779][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.945391][ T5824] usb 2-1: config 0 descriptor?? [ 868.089533][T15342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3270'. [ 869.000238][ T5824] usbhid 2-1:0.0: can't add hid device: -71 [ 869.003158][ T5824] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 869.019692][ T5824] usb 2-1: USB disconnect, device number 63 [ 869.151242][ T36] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 869.339341][ T36] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 869.339376][ T36] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 869.339398][ T36] usb 4-1: config 220 has no interface number 2 [ 869.339474][ T36] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 869.339505][ T36] usb 4-1: config 220 interface 0 has no altsetting 0 [ 869.339525][ T36] usb 4-1: config 220 interface 76 has no altsetting 0 [ 869.339546][ T36] usb 4-1: config 220 interface 1 has no altsetting 0 [ 869.376629][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3281'. [ 869.400358][ T36] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 869.400394][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.400415][ T36] usb 4-1: Product: syz [ 869.400432][ T36] usb 4-1: Manufacturer: syz [ 869.400448][ T36] usb 4-1: SerialNumber: syz [ 869.561125][ T5824] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 869.735314][T15376] netlink: 'syz.2.3283': attribute type 32 has an invalid length. [ 869.735338][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 869.740199][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.740255][ T5824] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 869.740280][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.899746][ T36] usb 4-1: selecting invalid altsetting 0 [ 869.900259][ T36] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 869.900292][ T36] uvcvideo 4-1:220.0: No valid video chain found. [ 869.977197][ T5824] usb 2-1: config 0 descriptor?? [ 870.000886][ T36] usb 4-1: selecting invalid altsetting 0 [ 870.000930][ T36] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 870.032104][ T36] usb 4-1: USB disconnect, device number 71 [ 870.069756][T15376] bond1: option coupled_control: invalid value (46) [ 870.152546][T15376] bond1 (unregistering): Released all slaves [ 870.633707][T15396] netlink: 'syz.4.3293': attribute type 3 has an invalid length. [ 872.483016][ T5824] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 872.515373][ T5824] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 872.632896][T15419] netlink: 'syz.3.3300': attribute type 2 has an invalid length. [ 872.716732][ T825] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 872.794138][ T5824] usb 2-1: USB disconnect, device number 64 [ 872.794239][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 872.883759][ T825] usb 3-1: device descriptor read/64, error -71 [ 873.137743][ T825] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 873.288982][ T825] usb 3-1: device descriptor read/64, error -71 [ 873.408727][ T825] usb usb3-port1: attempt power cycle [ 873.474155][ T5824] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 873.640184][ T5824] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 873.640219][ T5824] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 873.640241][ T5824] usb 2-1: config 220 has no interface number 2 [ 873.640317][ T5824] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 873.640347][ T5824] usb 2-1: config 220 interface 0 has no altsetting 0 [ 873.640366][ T5824] usb 2-1: config 220 interface 76 has no altsetting 0 [ 873.640386][ T5824] usb 2-1: config 220 interface 1 has no altsetting 0 [ 873.644169][ T5824] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 873.644201][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.644223][ T5824] usb 2-1: Product: syz [ 873.644238][ T5824] usb 2-1: Manufacturer: syz [ 873.644254][ T5824] usb 2-1: SerialNumber: syz [ 873.820147][ T825] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 873.841522][ T825] usb 3-1: device descriptor read/8, error -71 [ 874.020661][ T5824] usb 2-1: selecting invalid altsetting 0 [ 874.074398][ T5824] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 874.074433][ T5824] uvcvideo 2-1:220.0: No valid video chain found. [ 874.119475][ T5824] usb 2-1: selecting invalid altsetting 0 [ 874.119521][ T5824] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 874.141871][ T5824] usb 2-1: USB disconnect, device number 65 [ 874.155373][ T825] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 874.158639][T15450] FAULT_INJECTION: forcing a failure. [ 874.158639][T15450] name failslab, interval 1, probability 0, space 0, times 0 [ 874.158678][T15450] CPU: 0 UID: 0 PID: 15450 Comm: syz.3.3313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 874.158709][T15450] Tainted: [L]=SOFTLOCKUP [ 874.158717][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 874.158729][T15450] Call Trace: [ 874.158738][T15450] [ 874.158748][T15450] dump_stack_lvl+0xe8/0x150 [ 874.158788][T15450] should_fail_ex+0x467/0x600 [ 874.158828][T15450] should_failslab+0xa8/0x100 [ 874.158858][T15450] __kmalloc_noprof+0xfe/0x780 [ 874.158883][T15450] ? tomoyo_encode+0x2ad/0x570 [ 874.158911][T15450] ? tomoyo_encode+0x2ad/0x570 [ 874.158948][T15450] tomoyo_encode+0x2ad/0x570 [ 874.158983][T15450] tomoyo_realpath_from_path+0x5fa/0x640 [ 874.159025][T15450] ? tomoyo_path_number_perm+0x219/0x5f0 [ 874.159050][T15450] tomoyo_path_number_perm+0x246/0x5f0 [ 874.159080][T15450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 874.159104][T15450] ? __lock_acquire+0x683/0x2ce0 [ 874.159152][T15450] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 874.159183][T15450] ? hook_file_ioctl+0x1f3/0x600 [ 874.159203][T15450] ? lockdep_hardirqs_on+0x7a/0x110 [ 874.159253][T15450] ? __fget_files+0x2a/0x420 [ 874.159281][T15450] ? __fget_files+0x2a/0x420 [ 874.159303][T15450] ? __fget_files+0x3a8/0x420 [ 874.159325][T15450] ? __fget_files+0x2a/0x420 [ 874.159362][T15450] security_file_ioctl+0xc3/0x2a0 [ 874.159390][T15450] __se_sys_ioctl+0x47/0x170 [ 874.159419][T15450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.159442][T15450] do_syscall_64+0x174/0x580 [ 874.159470][T15450] ? trace_irq_disable+0x3b/0x140 [ 874.159492][T15450] ? clear_bhb_loop+0x40/0x90 [ 874.159519][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.159542][T15450] RIP: 0033:0x7f8d4375e0d9 [ 874.159562][T15450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.159579][T15450] RSP: 002b:00007f8d419b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.159604][T15450] RAX: ffffffffffffffda RBX: 00007f8d439e5fa0 RCX: 00007f8d4375e0d9 [ 874.159620][T15450] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 874.159634][T15450] RBP: 00007f8d419b6090 R08: 0000000000000000 R09: 0000000000000000 [ 874.159648][T15450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.159661][T15450] R13: 00007f8d439e6038 R14: 00007f8d439e5fa0 R15: 00007ffe0b7dd818 [ 874.159696][T15450] [ 874.159718][T15450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 874.213639][ T825] usb 3-1: device descriptor read/8, error -71 [ 874.347960][ T825] usb usb3-port1: unable to enumerate USB device [ 875.647829][ T36] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 875.817848][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 875.827363][ T36] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 875.827384][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.827396][ T36] usb 2-1: Product: syz [ 875.827405][ T36] usb 2-1: Manufacturer: syz [ 875.827414][ T36] usb 2-1: SerialNumber: syz [ 875.865926][ T36] usb 2-1: config 0 descriptor?? [ 875.884137][ T36] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 876.252000][ T36] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 876.396451][ T825] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 876.622513][ T825] usb 3-1: Using ep0 maxpacket: 16 [ 876.900817][ T825] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 876.900856][ T825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 876.909106][ T825] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 876.909149][ T825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.909172][ T825] usb 3-1: Product: syz [ 876.909188][ T825] usb 3-1: Manufacturer: syz [ 876.909204][ T825] usb 3-1: SerialNumber: syz [ 876.939930][ T825] usb 3-1: config 0 descriptor?? [ 876.967460][ T825] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 876.967487][ T825] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 878.519652][ T825] em28xx 3-1:0.0: chip ID is em2874 [ 878.732545][ T5588] usb 2-1: USB disconnect, device number 66 [ 879.255731][ T5588] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 879.408370][T15501] overlayfs: overlapping lowerdir path [ 879.422915][ T5588] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 879.422952][ T5588] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58011, setting to 1024 [ 879.422997][ T5588] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 879.423013][ T5588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.440749][ T5588] usb 2-1: config 0 descriptor?? [ 879.930578][ T5729] usb 3-1: USB disconnect, device number 76 [ 879.937066][ T5729] em28xx 3-1:0.0: Disconnecting em28xx [ 880.014828][ T5729] em28xx 3-1:0.0: Freeing device [ 880.156906][ T5588] usbhid 2-1:0.0: can't add hid device: -71 [ 880.157049][ T5588] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 880.170642][ T5588] usb 2-1: USB disconnect, device number 67 [ 880.488100][ T36] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 880.532221][T15528] FAULT_INJECTION: forcing a failure. [ 880.532221][T15528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.532265][T15528] CPU: 0 UID: 0 PID: 15528 Comm: syz.0.3346 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 880.532286][T15528] Tainted: [L]=SOFTLOCKUP [ 880.532291][T15528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 880.532298][T15528] Call Trace: [ 880.532304][T15528] [ 880.532310][T15528] dump_stack_lvl+0xe8/0x150 [ 880.532335][T15528] should_fail_ex+0x467/0x600 [ 880.532366][T15528] _copy_to_user+0x31/0xb0 [ 880.532395][T15528] simple_read_from_buffer+0xe1/0x170 [ 880.532414][T15528] proc_fail_nth_read+0x1be/0x230 [ 880.532431][T15528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 880.532447][T15528] ? rw_verify_area+0x250/0x4d0 [ 880.532465][T15528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 880.532478][T15528] vfs_read+0x219/0xa90 [ 880.532499][T15528] ? __pfx_vfs_read+0x10/0x10 [ 880.532516][T15528] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 880.532534][T15528] ? lockdep_hardirqs_on+0x7a/0x110 [ 880.532551][T15528] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 880.532567][T15528] ? mutex_lock_nested+0x152/0x1d0 [ 880.532579][T15528] ? fdget_pos+0x252/0x320 [ 880.532597][T15528] ksys_read+0x156/0x270 [ 880.532615][T15528] ? __pfx_ksys_read+0x10/0x10 [ 880.532635][T15528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.532649][T15528] do_syscall_64+0x174/0x580 [ 880.532665][T15528] ? trace_irq_disable+0x3b/0x140 [ 880.532679][T15528] ? clear_bhb_loop+0x40/0x90 [ 880.532694][T15528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.532706][T15528] RIP: 0033:0x7f2acdf3e90e [ 880.532719][T15528] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 880.532730][T15528] RSP: 002b:00007f2acc1d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 880.532745][T15528] RAX: ffffffffffffffda RBX: 00007f2acc1d66c0 RCX: 00007f2acdf3e90e [ 880.532755][T15528] RDX: 000000000000000f RSI: 00007f2acc1d60a0 RDI: 0000000000000003 [ 880.532770][T15528] RBP: 00007f2acc1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 880.532778][T15528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.532785][T15528] R13: 00007f2ace206038 R14: 00007f2ace205fa0 R15: 00007ffd398b2e68 [ 880.532805][T15528] [ 880.639265][ T148] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.788063][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.788116][ T36] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 880.788139][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.832203][ T36] usb 4-1: config 0 descriptor?? [ 881.076096][ T36] usbhid 4-1:0.0: can't add hid device: -71 [ 881.076228][ T36] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 881.105674][ T36] usb 4-1: USB disconnect, device number 72 [ 881.419051][ T5588] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 881.608466][ T5588] usb 2-1: Using ep0 maxpacket: 16 [ 881.611066][ T5588] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 881.611101][ T5588] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 881.634841][ T5588] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 881.634875][ T5588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.634905][ T5588] usb 2-1: Product: syz [ 881.634920][ T5588] usb 2-1: Manufacturer: syz [ 881.634934][ T5588] usb 2-1: SerialNumber: syz [ 881.656801][ T36] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 881.663411][ T5588] usb 2-1: config 0 descriptor?? [ 881.731472][ T5588] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 881.731498][ T5588] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 881.868014][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.868072][ T36] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 881.868099][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.919158][ T36] usb 4-1: config 0 descriptor?? [ 883.158456][ T5588] em28xx 2-1:0.0: chip ID is em2874 [ 883.418108][ T4911] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 883.471183][ T4911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 883.494695][ T4911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 883.534659][ T4911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 883.545090][ T4911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 883.706472][ T36] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 883.729379][ T36] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 884.085005][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 884.085059][ T36] usb 4-1: USB disconnect, device number 73 [ 884.269833][T15555] FAULT_INJECTION: forcing a failure. [ 884.269833][T15555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.269869][T15555] CPU: 1 UID: 0 PID: 15555 Comm: syz.4.3354 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 884.269896][T15555] Tainted: [L]=SOFTLOCKUP [ 884.269904][T15555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 884.269916][T15555] Call Trace: [ 884.269923][T15555] [ 884.269932][T15555] dump_stack_lvl+0xe8/0x150 [ 884.269968][T15555] should_fail_ex+0x467/0x600 [ 884.270003][T15555] _copy_to_user+0x31/0xb0 [ 884.270027][T15555] simple_read_from_buffer+0xe1/0x170 [ 884.270051][T15555] proc_fail_nth_read+0x1be/0x230 [ 884.270074][T15555] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 884.270097][T15555] ? rw_verify_area+0x250/0x4d0 [ 884.270121][T15555] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 884.270139][T15555] vfs_read+0x219/0xa90 [ 884.270168][T15555] ? __pfx_vfs_read+0x10/0x10 [ 884.270190][T15555] ? pn_socket_bind+0xbe/0x4f0 [ 884.270306][T15555] ? __sys_bind+0x30c/0x410 [ 884.270328][T15555] ? __pfx___sys_bind+0x10/0x10 [ 884.270353][T15555] ksys_read+0x156/0x270 [ 884.270378][T15555] ? __pfx_ksys_read+0x10/0x10 [ 884.270408][T15555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.270438][T15555] do_syscall_64+0x174/0x580 [ 884.270462][T15555] ? trace_irq_disable+0x3b/0x140 [ 884.270481][T15555] ? clear_bhb_loop+0x40/0x90 [ 884.270503][T15555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.270520][T15555] RIP: 0033:0x7fbecb7ae90e [ 884.270538][T15555] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 884.270553][T15555] RSP: 002b:00007fbec9a45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 884.270572][T15555] RAX: ffffffffffffffda RBX: 00007fbec9a466c0 RCX: 00007fbecb7ae90e [ 884.270585][T15555] RDX: 000000000000000f RSI: 00007fbec9a460a0 RDI: 0000000000000004 [ 884.270596][T15555] RBP: 00007fbec9a46090 R08: 0000000000000000 R09: 0000000000000000 [ 884.270607][T15555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.270619][T15555] R13: 00007fbecba76038 R14: 00007fbecba75fa0 R15: 00007ffc2f0559a8 [ 884.270652][T15555] [ 884.650727][ T5729] usb 2-1: USB disconnect, device number 68 [ 884.656683][ T5729] em28xx 2-1:0.0: Disconnecting em28xx [ 884.858983][ T5729] em28xx 2-1:0.0: Freeing device [ 885.326605][T15577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3358'. [ 885.924771][ T36] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 886.008772][ T5599] Bluetooth: hci3: command tx timeout [ 886.361300][ T36] usb 4-1: device descriptor read/64, error -71 [ 886.404900][ T204] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 886.404968][T15585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3361'. [ 886.405018][T15585] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3361'. [ 886.563762][ T204] usb 2-1: Using ep0 maxpacket: 16 [ 886.571180][ T204] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 886.571214][ T204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.571235][ T204] usb 2-1: Product: syz [ 886.571252][ T204] usb 2-1: Manufacturer: syz [ 886.571267][ T204] usb 2-1: SerialNumber: syz [ 886.635585][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3362'. [ 886.657299][ T36] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 886.684710][ T204] usb 2-1: config 0 descriptor?? [ 886.743429][ T204] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 886.828794][ T36] usb 4-1: device descriptor read/64, error -71 [ 886.959067][ T204] ssu100 2-1:0.0: probe with driver ssu100 failed with error -32 [ 886.975469][ T36] usb usb4-port1: attempt power cycle [ 887.367966][ T36] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 887.410508][ T5824] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 887.570987][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 887.573470][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 887.573505][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 887.577614][ T5824] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 887.577647][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.577668][ T5824] usb 3-1: Product: syz [ 887.577684][ T5824] usb 3-1: Manufacturer: syz [ 887.577699][ T5824] usb 3-1: SerialNumber: syz [ 887.593180][ T36] usb 4-1: device not accepting address 76, error -71 [ 887.701252][ T5824] usb 3-1: config 0 descriptor?? [ 887.721264][ T5824] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 887.721303][ T5824] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 887.807555][T15612] netlink: 'syz.1.3359': attribute type 1 has an invalid length. [ 889.288735][ T5599] Bluetooth: hci3: command tx timeout [ 889.375633][ T5824] em28xx 3-1:0.0: chip ID is em2874 [ 889.443687][ T6046] usb 2-1: USB disconnect, device number 69 [ 889.812376][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.938632][T15629] 9p: Could not find request transport: cqport=0x0000000000004e22 [ 890.798328][ T5824] usb 3-1: USB disconnect, device number 77 [ 890.802259][ T5824] em28xx 3-1:0.0: Disconnecting em28xx [ 890.816495][ T5824] em28xx 3-1:0.0: Freeing device [ 891.408599][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.481784][ T5599] Bluetooth: hci3: command tx timeout [ 891.898057][ T37] audit: type=1800 audit(1786013336.515:135): pid=15644 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3377" name="attr_allow_any_host" dev="configfs" ino=44325 res=0 errno=0 [ 891.944993][ T37] audit: type=1800 audit(1786013336.552:136): pid=15650 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3377" name="addr_adrfam" dev="configfs" ino=44327 res=0 errno=0 [ 892.152368][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.628249][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.633361][T15623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 892.839123][ T36] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 892.951373][T15539] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.951453][T15539] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.951622][T15539] bridge_slave_0: entered allmulticast mode [ 892.953312][T15539] bridge_slave_0: entered promiscuous mode [ 892.972599][T15539] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.972689][T15539] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.972921][T15539] bridge_slave_1: entered allmulticast mode [ 892.974625][T15539] bridge_slave_1: entered promiscuous mode [ 893.054960][ T36] usb 3-1: device descriptor read/64, error -71 [ 893.128176][T15539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.155507][T15539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.308099][T15539] team0: Port device team_slave_0 added [ 893.331305][T15539] team0: Port device team_slave_1 added [ 893.341324][ T36] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 893.477598][ T36] usb 3-1: device descriptor read/64, error -71 [ 893.586788][T15539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.586804][T15539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.586820][T15539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.591738][T15539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.591750][T15539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.591767][T15539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.632289][ T36] usb usb3-port1: attempt power cycle [ 893.735097][ T5599] Bluetooth: hci3: command tx timeout [ 893.839803][T15668] 9p: Could not find request transport: cqport=0x0000000000004e22 [ 893.943725][T15539] hsr_slave_0: entered promiscuous mode [ 893.945608][T15539] hsr_slave_1: entered promiscuous mode [ 894.135026][ T36] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 894.168220][ T36] usb 3-1: device descriptor read/8, error -71 [ 894.287632][ T5702] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 894.526709][ T36] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 894.548482][ T5702] usb 4-1: Using ep0 maxpacket: 16 [ 894.966026][ T36] usb 3-1: device descriptor read/8, error -71 [ 895.010372][ T5702] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 895.010422][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 895.120998][ T5702] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 895.121043][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.121114][ T5702] usb 4-1: Product: syz [ 895.121188][ T5702] usb 4-1: Manufacturer: syz [ 895.121245][ T5702] usb 4-1: SerialNumber: syz [ 895.156901][ T36] usb usb3-port1: unable to enumerate USB device [ 895.396455][ T5702] usb 4-1: config 0 descriptor?? [ 895.635328][ T5702] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 895.635420][ T5702] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 896.955585][ T5702] em28xx 4-1:0.0: chip ID is em2874 [ 897.102410][T15681] FAULT_INJECTION: forcing a failure. [ 897.102410][T15681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.102454][T15681] CPU: 1 UID: 0 PID: 15681 Comm: syz.2.3386 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 897.102486][T15681] Tainted: [L]=SOFTLOCKUP [ 897.102505][T15681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 897.102519][T15681] Call Trace: [ 897.102528][T15681] [ 897.102539][T15681] dump_stack_lvl+0xe8/0x150 [ 897.102581][T15681] should_fail_ex+0x467/0x600 [ 897.102623][T15681] _copy_from_iter+0x1d3/0x1660 [ 897.102650][T15681] ? rcu_is_watching+0x15/0xb0 [ 897.102680][T15681] ? trace_kmem_cache_alloc+0x29/0xe0 [ 897.102714][T15681] ? __pfx__copy_from_iter+0x10/0x10 [ 897.102738][T15681] ? __alloc_skb+0x276/0x7a0 [ 897.102762][T15681] ? __alloc_skb+0x276/0x7a0 [ 897.102801][T15681] ? netlink_sendmsg+0x650/0xb40 [ 897.102830][T15681] ? skb_put+0x112/0x210 [ 897.102856][T15681] netlink_sendmsg+0x6c0/0xb40 [ 897.102905][T15681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.102938][T15681] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 897.102972][T15681] ? __kernel_text_address+0xd/0x30 [ 897.102994][T15681] ? unwind_get_return_address+0x4d/0x90 [ 897.103021][T15681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.103046][T15681] sock_sendmsg_nosec+0x13a/0x180 [ 897.103071][T15681] ____sys_sendmsg+0x565/0x870 [ 897.103098][T15681] ? __might_fault+0xaf/0x130 [ 897.103128][T15681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 897.103164][T15681] ? import_iovec+0x73/0xa0 [ 897.103195][T15681] ___sys_sendmsg+0x2a5/0x360 [ 897.103224][T15681] ? __lock_acquire+0x683/0x2ce0 [ 897.103254][T15681] ? __pfx____sys_sendmsg+0x10/0x10 [ 897.103321][T15681] ? __fget_files+0x2a/0x420 [ 897.103345][T15681] ? __fget_files+0x3a8/0x420 [ 897.103381][T15681] __x64_sys_sendmsg+0x1b7/0x290 [ 897.103413][T15681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 897.103464][T15681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.103490][T15681] do_syscall_64+0x174/0x580 [ 897.103523][T15681] ? clear_bhb_loop+0x40/0x90 [ 897.103551][T15681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.103573][T15681] RIP: 0033:0x7f3c17d8e0d9 [ 897.103595][T15681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.103615][T15681] RSP: 002b:00007f3c15fe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.103640][T15681] RAX: ffffffffffffffda RBX: 00007f3c18015fa0 RCX: 00007f3c17d8e0d9 [ 897.103657][T15681] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 897.103672][T15681] RBP: 00007f3c15fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 897.103686][T15681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.103700][T15681] R13: 00007f3c18016038 R14: 00007f3c18015fa0 R15: 00007ffe235494a8 [ 897.103735][T15681] [ 897.132300][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 897.132372][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 898.697173][ T5702] usb 4-1: USB disconnect, device number 78 [ 898.699399][ T5702] em28xx 4-1:0.0: Disconnecting em28xx [ 898.816676][ T5702] em28xx 4-1:0.0: Freeing device [ 902.571107][T15713] 9p: Could not find request transport: cqport=0x0000000000004e22 [ 902.954686][T15724] program syz.1.3395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 903.006333][ T5702] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 903.195764][ T56] bridge_slave_1: left allmulticast mode [ 903.195812][ T56] bridge_slave_1: left promiscuous mode [ 903.196092][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.255528][ T5588] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 903.311742][ T5702] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 903.311782][ T5702] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 903.315192][ T5702] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 903.315227][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.315248][ T5702] usb 3-1: Product: ᠁ [ 903.315264][ T5702] usb 3-1: Manufacturer: ֮逽齞絇佰骶ꡨⷬ龑ⷤ㮽밶⽮媠䫻⽪瓞饉艌˸韨怋涒䌑䡷葔첚ჟ㗎჎㥙䟍撘뗇䅚졜突㬘ڠ﹘遫쯙戛댳賍აྶ鰼忐Ⱡ関๲޹딌儰蜹䩞㣉賛ᄔ묰㨸仵䫚隒胟䣦䵫寪귽흜⨮핣汃ᗽ嗭Ꞡꐱ兗뤷噮ꋹ泜⫻ṳ뉻ﮪힹ﫸៸ꦑ禙頪追캶 [ 903.315297][ T5702] usb 3-1: SerialNumber: ⥞뎍Ỏ툽羯ᾖꄞꗶ䷜Ꞟ쳥媘䝝ꚽꈨ⣆㤅ࣷ껙濳逬焝氯瓌쭴搻ᔛ门ᗷ㌂Ⱕﳶﶅ춄渌㐗苊ﾴ秨赊뜬鮰楡彾䶅峘賰◞怦ʑ햂ሇ갩춀烏燌퀾渓揍Ⅎ䲎笈䉹·蔴楿ٟ妇뺙鿀첵夞䕭藊丢놅膙혶뙄锛謷 [ 903.417883][ T5588] usb 4-1: Using ep0 maxpacket: 16 [ 903.475274][ T56] bridge_slave_0: left allmulticast mode [ 903.475309][ T56] bridge_slave_0: left promiscuous mode [ 903.475572][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.532397][ T5588] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 903.532431][ T5588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.532454][ T5588] usb 4-1: Product: syz [ 903.532469][ T5588] usb 4-1: Manufacturer: syz [ 903.532485][ T5588] usb 4-1: SerialNumber: syz [ 903.551820][ T5588] usb 4-1: config 0 descriptor?? [ 903.587325][ T5588] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 903.710717][ T5702] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 903.710770][ T5702] cdc_ncm 3-1:1.0: bind() failure [ 903.746483][ T5702] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 903.746538][ T5702] cdc_ncm 3-1:1.1: bind() failure [ 903.955920][ T5702] usb 3-1: USB disconnect, device number 82 [ 904.526919][ T5588] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 904.544535][ T5588] usb 4-1: USB disconnect, device number 79 [ 904.934946][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.003518][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.045158][ T56] bond0 (unregistering): Released all slaves [ 905.052400][ T56] bond1 (unregistering): Released all slaves [ 905.169424][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 905.454309][ T5588] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 905.674110][ T5588] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 905.674150][ T5588] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 905.684401][ T5588] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 905.684437][ T5588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.684460][ T5588] usb 4-1: Product: syz [ 905.684476][ T5588] usb 4-1: Manufacturer: syz [ 905.684491][ T5588] usb 4-1: SerialNumber: syz [ 905.691996][ T5588] usb 4-1: config 0 descriptor?? [ 905.703849][T15737] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 905.703978][T15737] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 908.339886][T15759] 9p: Could not find request transport: cqport=0x0000000000004e22 [ 908.683737][ T5588] dm9601 4-1:0.0: probe with driver dm9601 failed with error -71 [ 908.732073][ T5588] usb 4-1: USB disconnect, device number 80 [ 909.375471][ T5702] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 909.510567][T15780] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3409'. [ 909.567112][ T5702] usb 2-1: config 2 has an invalid interface number: 36 but max is 0 [ 909.567146][ T5702] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 909.567167][ T5702] usb 2-1: config 2 has no interface number 0 [ 909.567331][ T5702] usb 2-1: config 2 interface 36 has no altsetting 0 [ 909.573691][ T5702] usb 2-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a [ 909.573722][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.573742][ T5702] usb 2-1: Product: syz [ 909.573755][ T5702] usb 2-1: Manufacturer: syz [ 909.573770][ T5702] usb 2-1: SerialNumber: syz [ 909.789802][T15773] bond1: option arp_interval: invalid value (18446744073709551615) [ 909.789835][T15773] bond1: option arp_interval: allowed values 0 - 2147483647 [ 909.846751][T15773] bond1 (unregistering): Released all slaves [ 910.224875][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 910.913686][ T6047] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 911.087032][ T6047] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 911.087136][ T6047] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 911.125808][ T6047] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 911.125841][ T6047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.125913][ T6047] usb 3-1: Product: syz [ 911.125927][ T6047] usb 3-1: Manufacturer: syz [ 911.125941][ T6047] usb 3-1: SerialNumber: syz [ 911.183267][ T6047] usb 3-1: config 0 descriptor?? [ 911.191392][T15798] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 911.191519][T15798] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 912.522039][ T5702] usb 2-1: USB disconnect, device number 70 [ 913.177548][ T56] hsr_slave_0: left promiscuous mode [ 913.220864][ T56] hsr_slave_1: left promiscuous mode [ 913.221929][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.221958][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.255120][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.255152][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.900350][ T56] veth1_macvtap: left promiscuous mode [ 913.900471][ T56] veth0_macvtap: left promiscuous mode [ 913.900780][ T56] veth1_vlan: left promiscuous mode [ 913.900946][ T56] veth0_vlan: left promiscuous mode [ 914.645030][ T6047] dm9601 3-1:0.0: probe with driver dm9601 failed with error -71 [ 914.671091][ T6047] usb 3-1: USB disconnect, device number 83 [ 915.096758][ T56] team0 (unregistering): Port device team_slave_1 removed [ 915.157435][ T56] team0 (unregistering): Port device team_slave_0 removed [ 915.163434][T15823] sg_write: data in/out 306688/136 bytes for SCSI command 0x0-- guessing data in; [ 915.163434][T15823] program syz.2.3427 not setting count and/or reply_len properly [ 915.798749][ T5588] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 915.961270][ T5588] usb 3-1: Using ep0 maxpacket: 16 [ 915.967161][ T5588] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 915.967201][ T5588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 915.995458][ T5588] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 915.995495][ T5588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.995526][ T5588] usb 3-1: Product: syz [ 915.995540][ T5588] usb 3-1: Manufacturer: syz [ 915.995555][ T5588] usb 3-1: SerialNumber: syz [ 916.016853][ T5588] usb 3-1: config 0 descriptor?? [ 916.085528][ T5588] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 916.085569][ T5588] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 917.368388][ T5588] em28xx 3-1:0.0: chip ID is em2874 [ 919.177071][ T5588] usb 3-1: USB disconnect, device number 84 [ 919.180316][ T5588] em28xx 3-1:0.0: Disconnecting em28xx [ 919.182673][ T5588] em28xx 3-1:0.0: Freeing device [ 925.324915][T15539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 925.396168][T15539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 925.418413][T15539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 925.533696][T15539] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 925.624286][T15539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 925.681722][T15539] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 925.695439][T15539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 925.748684][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'. [ 925.787798][T15539] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 927.475627][ T5729] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 927.681865][ T5729] usb 4-1: Using ep0 maxpacket: 16 [ 927.684612][ T5729] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 927.684647][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 927.687575][ T5729] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 927.687603][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.687621][ T5729] usb 4-1: Product: syz [ 927.687636][ T5729] usb 4-1: Manufacturer: syz [ 927.687649][ T5729] usb 4-1: SerialNumber: syz [ 927.782402][ T5729] usb 4-1: config 0 descriptor?? [ 927.807460][ T5729] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 927.807501][ T5729] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 928.147473][T15539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.280166][T15539] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.194150][ T5729] em28xx 4-1:0.0: chip ID is em2874 [ 929.456044][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.456176][ T6153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.604744][ T811] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.608107][ T811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.195933][T14329] usb 4-1: USB disconnect, device number 81 [ 931.212131][T14329] em28xx 4-1:0.0: Disconnecting em28xx [ 931.405643][T15947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3451'. [ 932.195394][T14329] em28xx 4-1:0.0: Freeing device [ 932.815646][T14329] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 932.989401][T14329] usb 4-1: Using ep0 maxpacket: 16 [ 932.995176][T14329] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 932.995211][T14329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.995233][T14329] usb 4-1: Product: syz [ 932.995247][T14329] usb 4-1: Manufacturer: syz [ 932.995260][T14329] usb 4-1: SerialNumber: syz [ 933.054566][T14329] usb 4-1: config 0 descriptor?? [ 933.069558][T14329] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 933.292541][T14329] ssu100 4-1:0.0: probe with driver ssu100 failed with error -32 [ 934.121072][T15539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.265987][T15973] netlink: 'syz.3.3452': attribute type 1 has an invalid length. [ 934.431156][T15539] veth0_vlan: entered promiscuous mode [ 935.405534][T15982] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3456'. [ 935.475725][T15539] veth1_vlan: entered promiscuous mode [ 936.734564][ T5702] usb 4-1: USB disconnect, device number 82 [ 937.141521][T15539] veth0_macvtap: entered promiscuous mode [ 937.231519][T15539] veth1_macvtap: entered promiscuous mode [ 938.687691][T15539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 938.745794][T15539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.914697][T15995] FAULT_INJECTION: forcing a failure. [ 938.914697][T15995] name failslab, interval 1, probability 0, space 0, times 0 [ 938.914726][T15995] CPU: 0 UID: 0 PID: 15995 Comm: syz.4.3462 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 938.914744][T15995] Tainted: [L]=SOFTLOCKUP [ 938.914749][T15995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 938.914757][T15995] Call Trace: [ 938.914763][T15995] [ 938.914770][T15995] dump_stack_lvl+0xe8/0x150 [ 938.914800][T15995] should_fail_ex+0x467/0x600 [ 938.914828][T15995] should_failslab+0xa8/0x100 [ 938.914848][T15995] kmem_cache_alloc_node_noprof+0xae/0x670 [ 938.914864][T15995] ? __alloc_skb+0x1d7/0x7a0 [ 938.914882][T15995] ? __alloc_skb+0x1d7/0x7a0 [ 938.914900][T15995] __alloc_skb+0x1d7/0x7a0 [ 938.914916][T15995] alloc_skb_with_frags+0xc6/0x760 [ 938.914954][T15995] ? __lock_acquire+0x683/0x2ce0 [ 938.914975][T15995] sock_alloc_send_pskb+0x884/0x9a0 [ 938.915003][T15995] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 938.915020][T15995] ? __lock_acquire+0x683/0x2ce0 [ 938.915036][T15995] ? smack_socket_sendmsg+0x1a9/0x590 [ 938.915059][T15995] sco_sock_sendmsg+0x26a/0xa90 [ 938.915096][T15995] ? __pfx_sco_sock_sendmsg+0x10/0x10 [ 938.915108][T15995] ? try_to_take_rt_mutex+0x842/0xb00 [ 938.915130][T15995] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 938.915150][T15995] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 938.915166][T15995] ? __pfx_sco_sock_sendmsg+0x10/0x10 [ 938.915178][T15995] sock_sendmsg_nosec+0x13a/0x180 [ 938.915194][T15995] sock_sendmsg+0x1ca/0x2d0 [ 938.915210][T15995] ? __pfx_sock_sendmsg+0x10/0x10 [ 938.915229][T15995] ? __asan_memset+0x22/0x50 [ 938.915248][T15995] ? iov_iter_bvec+0xb8/0x180 [ 938.915265][T15995] splice_to_socket+0xb61/0x12a0 [ 938.915317][T15995] ? __pfx_splice_to_socket+0x10/0x10 [ 938.915349][T15995] ? shmem_file_splice_read+0xa32/0xba0 [ 938.915384][T15995] ? __pfx_splice_to_socket+0x10/0x10 [ 938.915400][T15995] direct_splice_actor+0x104/0x160 [ 938.915417][T15995] splice_direct_to_actor+0x586/0xcc0 [ 938.915443][T15995] ? __pfx_direct_splice_actor+0x10/0x10 [ 938.915479][T15995] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 938.915499][T15995] do_splice_direct+0x19b/0x2a0 [ 938.915516][T15995] ? __pfx_do_splice_direct+0x10/0x10 [ 938.915531][T15995] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 938.915550][T15995] ? bpf_lsm_file_permission+0x9/0x20 [ 938.915570][T15995] ? security_file_permission+0x75/0x260 [ 938.915598][T15995] ? rw_verify_area+0x209/0x4d0 [ 938.915618][T15995] do_sendfile+0x540/0x7e0 [ 938.915629][T15995] ? lockdep_hardirqs_on+0x7a/0x110 [ 938.915650][T15995] ? __pfx_do_sendfile+0x10/0x10 [ 938.915669][T15995] __se_sys_sendfile64+0x144/0x1a0 [ 938.915690][T15995] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 938.915714][T15995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.915728][T15995] do_syscall_64+0x174/0x580 [ 938.915746][T15995] ? trace_irq_disable+0x3b/0x140 [ 938.915760][T15995] ? clear_bhb_loop+0x40/0x90 [ 938.915782][T15995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.915803][T15995] RIP: 0033:0x7fbecb7ee0d9 [ 938.915824][T15995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.915835][T15995] RSP: 002b:00007fbec9a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 938.915851][T15995] RAX: ffffffffffffffda RBX: 00007fbecba75fa0 RCX: 00007fbecb7ee0d9 [ 938.915860][T15995] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 938.915867][T15995] RBP: 00007fbec9a46090 R08: 0000000000000000 R09: 0000000000000000 [ 938.915878][T15995] R10: 0000000000009799 R11: 0000000000000246 R12: 0000000000000001 [ 938.915886][T15995] R13: 00007fbecba76038 R14: 00007fbecba75fa0 R15: 00007ffc2f0559a8 [ 938.915904][T15995] [ 938.948267][ T6047] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 939.163078][ T6047] usb 4-1: Using ep0 maxpacket: 16 [ 939.198335][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.205872][ T6153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.206657][ T6153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.206972][ T6153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.522307][ T6047] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 939.522340][ T6047] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 939.605691][ T6047] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 939.605727][ T6047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.605749][ T6047] usb 4-1: Product: syz [ 939.605765][ T6047] usb 4-1: Manufacturer: syz [ 939.605782][ T6047] usb 4-1: SerialNumber: syz [ 939.663968][ T6047] usb 4-1: config 0 descriptor?? [ 939.677698][ T6047] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 939.677737][ T6047] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 939.908923][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3463'. [ 941.441865][ T6047] em28xx 4-1:0.0: chip ID is em2874 [ 942.081340][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.081364][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.108572][T16003] FAULT_INJECTION: forcing a failure. [ 942.108572][T16003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.108608][T16003] CPU: 1 UID: 0 PID: 16003 Comm: syz.1.3459 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 942.108639][T16003] Tainted: [L]=SOFTLOCKUP [ 942.108645][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 942.108656][T16003] Call Trace: [ 942.108663][T16003] [ 942.108671][T16003] dump_stack_lvl+0xe8/0x150 [ 942.108705][T16003] should_fail_ex+0x467/0x600 [ 942.108739][T16003] _copy_from_iter+0x1d3/0x1660 [ 942.108761][T16003] ? rcu_is_watching+0x15/0xb0 [ 942.108785][T16003] ? trace_kmem_cache_alloc+0x29/0xe0 [ 942.108808][T16003] ? __pfx__copy_from_iter+0x10/0x10 [ 942.108825][T16003] ? __alloc_skb+0x276/0x7a0 [ 942.108844][T16003] ? __alloc_skb+0x276/0x7a0 [ 942.108869][T16003] ? netlink_sendmsg+0x650/0xb40 [ 942.108893][T16003] ? skb_put+0x112/0x210 [ 942.108917][T16003] netlink_sendmsg+0x6c0/0xb40 [ 942.108960][T16003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 942.108985][T16003] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 942.109014][T16003] ? __kernel_text_address+0xd/0x30 [ 942.109035][T16003] ? unwind_get_return_address+0x4d/0x90 [ 942.109060][T16003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 942.109082][T16003] sock_sendmsg_nosec+0x13a/0x180 [ 942.109102][T16003] ____sys_sendmsg+0x565/0x870 [ 942.109125][T16003] ? __might_fault+0xaf/0x130 [ 942.109151][T16003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 942.109184][T16003] ? import_iovec+0x73/0xa0 [ 942.109208][T16003] ___sys_sendmsg+0x2a5/0x360 [ 942.109231][T16003] ? __lock_acquire+0x683/0x2ce0 [ 942.109256][T16003] ? __pfx____sys_sendmsg+0x10/0x10 [ 942.109315][T16003] ? __fget_files+0x2a/0x420 [ 942.109333][T16003] ? __fget_files+0x3a8/0x420 [ 942.109362][T16003] __x64_sys_sendmsg+0x1b7/0x290 [ 942.109388][T16003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 942.109428][T16003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.109449][T16003] do_syscall_64+0x174/0x580 [ 942.109473][T16003] ? trace_irq_disable+0x3b/0x140 [ 942.109492][T16003] ? clear_bhb_loop+0x40/0x90 [ 942.109514][T16003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.109533][T16003] RIP: 0033:0x7fe5a4a9e0d9 [ 942.109553][T16003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.109569][T16003] RSP: 002b:00007fe5a2cf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.109590][T16003] RAX: ffffffffffffffda RBX: 00007fe5a4d25fa0 RCX: 00007fe5a4a9e0d9 [ 942.109604][T16003] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 942.109616][T16003] RBP: 00007fe5a2cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 942.109629][T16003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.109640][T16003] R13: 00007fe5a4d26038 R14: 00007fe5a4d25fa0 R15: 00007fff16d03528 [ 942.109670][T16003] [ 942.543238][ T3280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.543266][ T3280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.983649][ T6046] usb 4-1: USB disconnect, device number 83 [ 942.992170][ T6046] em28xx 4-1:0.0: Disconnecting em28xx [ 943.013056][ T6046] em28xx 4-1:0.0: Freeing device [ 943.193843][T16012] netlink: 'syz.1.3466': attribute type 1 has an invalid length. [ 943.193866][T16012] netlink: 'syz.1.3466': attribute type 3 has an invalid length. [ 943.193880][T16012] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3466'. [ 943.593397][ T6046] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 943.645581][T16025] FAULT_INJECTION: forcing a failure. [ 943.645581][T16025] name failslab, interval 1, probability 0, space 0, times 0 [ 943.645622][T16025] CPU: 1 UID: 0 PID: 16025 Comm: syz.2.3470 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 943.645654][T16025] Tainted: [L]=SOFTLOCKUP [ 943.645662][T16025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 943.645676][T16025] Call Trace: [ 943.645685][T16025] [ 943.645695][T16025] dump_stack_lvl+0xe8/0x150 [ 943.645738][T16025] should_fail_ex+0x467/0x600 [ 943.645782][T16025] should_failslab+0xa8/0x100 [ 943.645813][T16025] kmem_cache_alloc_noprof+0xa4/0x650 [ 943.645838][T16025] ? sctp_get_port_local+0x749/0x17a0 [ 943.645869][T16025] ? sctp_get_port_local+0x749/0x17a0 [ 943.645918][T16025] sctp_get_port_local+0x749/0x17a0 [ 943.645960][T16025] ? sctp_get_port_local+0x50c/0x17a0 [ 943.645991][T16025] ? __pfx_sctp_get_port_local+0x10/0x10 [ 943.646017][T16025] ? sctp_bind_addr_match+0x30/0x2b0 [ 943.646036][T16025] ? sctp_bind_addr_match+0x28b/0x2b0 [ 943.646063][T16025] sctp_do_bind+0x4d9/0x9a0 [ 943.646115][T16025] sctp_connect_new_asoc+0x270/0x6b0 [ 943.646149][T16025] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 943.646180][T16025] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 943.646275][T16025] ? lockdep_hardirqs_on+0x7a/0x110 [ 943.646304][T16025] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 943.646338][T16025] ? security_sctp_bind_connect+0x7e/0x2c0 [ 943.646396][T16025] sctp_sendmsg+0x1506/0x2a50 [ 943.646446][T16025] ? __pfx_sctp_sendmsg+0x10/0x10 [ 943.646471][T16025] ? smack_socket_sendmsg+0x48c/0x590 [ 943.646505][T16025] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 943.646539][T16025] ? __lock_acquire+0x683/0x2ce0 [ 943.646572][T16025] ? __lock_acquire+0x683/0x2ce0 [ 943.646601][T16025] ? sock_rps_record_flow+0x19/0x350 [ 943.646632][T16025] ? inet_sendmsg+0x298/0x320 [ 943.646665][T16025] ? __pfx_inet_sendmsg+0x10/0x10 [ 943.646686][T16025] sock_sendmsg_nosec+0x10e/0x180 [ 943.646714][T16025] ____sys_sendmsg+0x565/0x870 [ 943.646757][T16025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 943.646800][T16025] ? import_iovec+0x73/0xa0 [ 943.646834][T16025] ___sys_sendmsg+0x2a5/0x360 [ 943.646863][T16025] ? __lock_acquire+0x683/0x2ce0 [ 943.646904][T16025] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.646981][T16025] ? __fget_files+0x2a/0x420 [ 943.647004][T16025] ? __fget_files+0x3a8/0x420 [ 943.647042][T16025] __x64_sys_sendmsg+0x1b7/0x290 [ 943.647077][T16025] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 943.647131][T16025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.647157][T16025] do_syscall_64+0x174/0x580 [ 943.647187][T16025] ? trace_irq_disable+0x3b/0x140 [ 943.647214][T16025] ? clear_bhb_loop+0x40/0x90 [ 943.647243][T16025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.647265][T16025] RIP: 0033:0x7f3c17d8e0d9 [ 943.647287][T16025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.647306][T16025] RSP: 002b:00007f3c15fe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.647331][T16025] RAX: ffffffffffffffda RBX: 00007f3c18015fa0 RCX: 00007f3c17d8e0d9 [ 943.647347][T16025] RDX: 0000000020044040 RSI: 0000200000006740 RDI: 0000000000000003 [ 943.647361][T16025] RBP: 00007f3c15fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 943.647373][T16025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.647386][T16025] R13: 00007f3c18016038 R14: 00007f3c18015fa0 R15: 00007ffe235494a8 [ 943.647422][T16025] [ 943.885811][ T5826] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 943.886037][ T6046] usb 4-1: Using ep0 maxpacket: 16 [ 943.961643][ T5824] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 943.983278][ T6046] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 943.983312][ T6046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.983334][ T6046] usb 4-1: Product: syz [ 943.983349][ T6046] usb 4-1: Manufacturer: syz [ 943.983365][ T6046] usb 4-1: SerialNumber: syz [ 944.053595][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 944.053631][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58011, setting to 1024 [ 944.053674][ T5826] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 944.053696][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.126153][ T5826] usb 2-1: config 0 descriptor?? [ 944.126691][ T5824] usb 1-1: Using ep0 maxpacket: 16 [ 944.145206][ T5824] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 944.145236][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.145255][ T5824] usb 1-1: Product: syz [ 944.145270][ T5824] usb 1-1: Manufacturer: syz [ 944.145284][ T5824] usb 1-1: SerialNumber: syz [ 944.173831][ T5824] usb 1-1: config 0 descriptor?? [ 944.212456][ T6046] usb 4-1: config 0 descriptor?? [ 944.235493][ T6046] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 944.240865][ T5824] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 944.441489][ T6046] ssu100 4-1:0.0: probe with driver ssu100 failed with error -32 [ 944.624808][ T5826] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 944.625210][ T5826] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 944.625228][ T5826] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 944.625243][ T5826] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 944.625259][ T5826] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 944.648798][ T5588] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 944.756684][ T5826] playstation 0003:054C:0DF2.0013: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 944.829625][T16023] playstation 0003:054C:0DF2.0013: pid 16023 passed too short report [ 944.843128][ T5588] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 944.843158][ T5588] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 944.843178][ T5588] usb 3-1: config 220 has no interface number 2 [ 944.843311][ T5588] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 944.843339][ T5588] usb 3-1: config 220 interface 0 has no altsetting 0 [ 944.843428][ T5588] usb 3-1: config 220 interface 76 has no altsetting 0 [ 944.843446][ T5588] usb 3-1: config 220 interface 1 has no altsetting 0 [ 944.882014][ T5826] playstation 0003:054C:0DF2.0013: Failed to retrieve feature with reportID 9: -71 [ 944.882106][ T5826] playstation 0003:054C:0DF2.0013: Failed to retrieve DualSense pairing info: -71 [ 944.882162][ T5826] playstation 0003:054C:0DF2.0013: Failed to get MAC address from DualSense [ 944.886682][ T5588] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 944.886714][ T5588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.886732][ T5588] usb 3-1: Product: syz [ 944.886810][ T5588] usb 3-1: Manufacturer: syz [ 944.886825][ T5588] usb 3-1: SerialNumber: syz [ 944.902753][ T5826] playstation 0003:054C:0DF2.0013: Failed to create dualsense. [ 945.003835][ T5826] playstation 0003:054C:0DF2.0013: probe with driver playstation failed with error -71 [ 945.031615][ T5826] usb 2-1: USB disconnect, device number 71 [ 945.136617][ T5824] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 945.160584][ T5824] usb 1-1: USB disconnect, device number 97 [ 945.242874][ T5588] usb 3-1: selecting invalid altsetting 0 [ 945.248216][ T5588] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 945.248253][ T5588] uvcvideo 3-1:220.0: No valid video chain found. [ 945.300266][ T5588] usb 3-1: selecting invalid altsetting 0 [ 945.300306][ T5588] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 945.351716][ T5588] usb 3-1: USB disconnect, device number 85 [ 945.374429][T16032] netlink: 'syz.3.3467': attribute type 1 has an invalid length. [ 947.269678][ T5702] usb 4-1: USB disconnect, device number 84 [ 948.660259][T16061] FAULT_INJECTION: forcing a failure. [ 948.660259][T16061] name failslab, interval 1, probability 0, space 0, times 0 [ 948.660301][T16061] CPU: 1 UID: 0 PID: 16061 Comm: syz.2.3483 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 948.660331][T16061] Tainted: [L]=SOFTLOCKUP [ 948.660339][T16061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 948.660352][T16061] Call Trace: [ 948.660361][T16061] [ 948.660370][T16061] dump_stack_lvl+0xe8/0x150 [ 948.660410][T16061] should_fail_ex+0x467/0x600 [ 948.660451][T16061] should_failslab+0xa8/0x100 [ 948.660481][T16061] __kmalloc_noprof+0xfe/0x780 [ 948.660504][T16061] ? rcu_is_watching+0x15/0xb0 [ 948.660534][T16061] ? tomoyo_realpath_from_path+0xef/0x640 [ 948.660563][T16061] ? tomoyo_realpath_from_path+0xef/0x640 [ 948.660602][T16061] tomoyo_realpath_from_path+0xef/0x640 [ 948.660645][T16061] ? tomoyo_path_number_perm+0x219/0x5f0 [ 948.660672][T16061] tomoyo_path_number_perm+0x246/0x5f0 [ 948.660702][T16061] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 948.660727][T16061] ? __lock_acquire+0x683/0x2ce0 [ 948.660768][T16061] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 948.660799][T16061] ? hook_file_ioctl+0x1f3/0x600 [ 948.660820][T16061] ? lockdep_hardirqs_on+0x7a/0x110 [ 948.660872][T16061] ? __fget_files+0x2a/0x420 [ 948.660900][T16061] ? __fget_files+0x2a/0x420 [ 948.660923][T16061] ? __fget_files+0x3a8/0x420 [ 948.660946][T16061] ? __fget_files+0x2a/0x420 [ 948.660976][T16061] security_file_ioctl+0xc3/0x2a0 [ 948.661006][T16061] __se_sys_ioctl+0x47/0x170 [ 948.661037][T16061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.661062][T16061] do_syscall_64+0x174/0x580 [ 948.661093][T16061] ? trace_irq_disable+0x3b/0x140 [ 948.661126][T16061] ? clear_bhb_loop+0x40/0x90 [ 948.661154][T16061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.661178][T16061] RIP: 0033:0x7f3c17d8e0d9 [ 948.661199][T16061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.661226][T16061] RSP: 002b:00007f3c15fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 948.661251][T16061] RAX: ffffffffffffffda RBX: 00007f3c18015fa0 RCX: 00007f3c17d8e0d9 [ 948.661268][T16061] RDX: 0000000000000000 RSI: 000000004004510d RDI: 0000000000000003 [ 948.661282][T16061] RBP: 00007f3c15fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 948.661297][T16061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.661311][T16061] R13: 00007f3c18016038 R14: 00007f3c18015fa0 R15: 00007ffe235494a8 [ 948.661348][T16061] [ 948.661357][T16061] ERROR: Out of memory at tomoyo_realpath_from_path. [ 949.257979][T16064] dyndbg: bad flag-op 7, at start of 7ηkPn_WY4\QBw,ơcg`^C]&D [ 949.258004][T16064] dyndbg: flags parse failed [ 949.617521][ T5588] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 949.770495][ T6046] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 949.783017][ T5588] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 949.783050][ T5588] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 949.783070][ T5588] usb 3-1: config 220 has no interface number 2 [ 949.783137][ T5588] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 949.783165][ T5588] usb 3-1: config 220 interface 0 has no altsetting 0 [ 949.783184][ T5588] usb 3-1: config 220 interface 76 has no altsetting 0 [ 949.783213][ T5588] usb 3-1: config 220 interface 1 has no altsetting 0 [ 949.798593][ T5588] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 949.798627][ T5588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.798687][ T5588] usb 3-1: Product: syz [ 949.798702][ T5588] usb 3-1: Manufacturer: syz [ 949.798716][ T5588] usb 3-1: SerialNumber: syz [ 949.987012][ T6046] usb 1-1: Using ep0 maxpacket: 16 [ 950.004152][ T6046] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 950.004189][ T6046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.004213][ T6046] usb 1-1: Product: syz [ 950.004229][ T6046] usb 1-1: Manufacturer: syz [ 950.004245][ T6046] usb 1-1: SerialNumber: syz [ 950.160924][ T6046] usb 1-1: config 0 descriptor?? [ 950.243701][ T6046] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 950.340766][ T5588] usb 3-1: selecting invalid altsetting 0 [ 950.341289][ T5588] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 950.341322][ T5588] uvcvideo 3-1:220.0: No valid video chain found. [ 950.424835][ T5588] usb 3-1: selecting invalid altsetting 0 [ 950.424895][ T5588] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 950.466345][ T5588] usb 3-1: USB disconnect, device number 86 [ 950.550927][ T6046] usb 1-1: clie_3_5_startup: get config number failed: -32 [ 950.551169][ T6046] visor 1-1:0.0: probe with driver visor failed with error -32 [ 950.948331][T16095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.951361][T16095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.709040][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3496'. [ 952.073556][ T5702] usb 1-1: USB disconnect, device number 98 [ 952.799961][ T9593] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 953.202953][ T9593] usb 3-1: Using ep0 maxpacket: 16 [ 953.208796][ T9593] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 953.208832][ T9593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.208855][ T9593] usb 3-1: Product: syz [ 953.208871][ T9593] usb 3-1: Manufacturer: syz [ 953.208887][ T9593] usb 3-1: SerialNumber: syz [ 953.259159][ T9593] usb 3-1: config 0 descriptor?? [ 953.285498][ T9593] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 953.500022][ T9593] ssu100 3-1:0.0: probe with driver ssu100 failed with error -32 [ 954.002955][ T5588] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 955.240326][T16150] netlink: 'syz.2.3499': attribute type 1 has an invalid length. [ 955.355095][T16154] : renamed from vlan0 (while UP) [ 955.378593][ T9593] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 955.405039][ T5588] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 955.405066][ T5588] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 955.408177][ T5588] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 955.408197][ T5588] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.408209][ T5588] usb 1-1: Product: ᠁ [ 955.408218][ T5588] usb 1-1: Manufacturer: ֮逽齞絇佰骶ꡨⷬ龑ⷤ㮽밶⽮媠䫻⽪瓞饉艌˸韨怋涒䌑䡷葔첚ჟ㗎჎㥙䟍撘뗇䅚졜突㬘ڠ﹘遫쯙戛댳賍აྶ鰼忐Ⱡ関๲޹딌儰蜹䩞㣉賛ᄔ묰㨸仵䫚隒胟䣦䵫寪귽흜⨮핣汃ᗽ嗭Ꞡꐱ兗뤷噮ꋹ泜⫻ṳ뉻ﮪힹ﫸៸ꦑ禙頪追캶 [ 955.408236][ T5588] usb 1-1: SerialNumber: ⥞뎍Ỏ툽羯ᾖꄞꗶ䷜Ꞟ쳥媘䝝ꚽꈨ⣆㤅ࣷ껙濳逬焝氯瓌쭴搻ᔛ门ᗷ㌂Ⱕﳶﶅ춄渌㐗苊ﾴ秨赊뜬鮰楡彾䶅峘賰◞怦ʑ햂ሇ갩춀烏燌퀾渓揍Ⅎ䲎笈䉹·蔴楿ٟ妇뺙鿀첵夞䕭藊丢놅膙혶뙄锛謷 [ 955.568709][ T9593] usb 4-1: Using ep0 maxpacket: 16 [ 955.572183][ T9593] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 955.572219][ T9593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 955.583374][ T9593] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 955.583406][ T9593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.583427][ T9593] usb 4-1: Product: syz [ 955.583442][ T9593] usb 4-1: Manufacturer: syz [ 955.583456][ T9593] usb 4-1: SerialNumber: syz [ 955.595887][ T9593] usb 4-1: config 0 descriptor?? [ 955.617371][ T9593] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 955.617408][ T9593] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 955.752241][ T5588] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 955.752280][ T5588] cdc_ncm 1-1:1.0: bind() failure [ 955.773897][ T5588] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 955.773930][ T5588] cdc_ncm 1-1:1.1: bind() failure [ 955.800969][ T5702] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 956.005046][ T5588] usb 1-1: USB disconnect, device number 99 [ 957.187477][ T5702] usb 2-1: Using ep0 maxpacket: 16 [ 957.190195][ T5702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.190224][ T5702] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 957.192759][ T5702] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 957.192793][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.192816][ T5702] usb 2-1: Product: syz [ 957.192832][ T5702] usb 2-1: Manufacturer: syz [ 957.192847][ T5702] usb 2-1: SerialNumber: syz [ 957.228894][ T9593] em28xx 4-1:0.0: chip ID is em2874 [ 957.268021][ T6047] usb 3-1: USB disconnect, device number 87 [ 958.019014][ T5702] usb 2-1: 0:2 : does not exist [ 958.019230][ T5702] usb 2-1: unit 9 not found! [ 958.569382][ T5702] usb 2-1: USB disconnect, device number 72 [ 958.781085][ T9593] usb 4-1: USB disconnect, device number 85 [ 958.782830][ T9593] em28xx 4-1:0.0: Disconnecting em28xx [ 958.789002][ T9593] em28xx 4-1:0.0: Freeing device [ 959.581741][T16184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 960.081905][T16191] CIFS: Attempting to mount //127.0.0.1/share [ 960.309063][T16177] batman_adv: batadv0: Adding interface: veth0 [ 960.309082][T16177] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.309117][T16177] batman_adv: batadv0: Interface activated: veth0 [ 960.338773][T16186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.338805][T16186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.475573][T16184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 960.568317][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3526'. [ 960.568356][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3526'. [ 960.657118][T16186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.657139][T16186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.142293][T16186] batman_adv: batadv0: Interface deactivated: veth0 [ 961.142324][T16186] batman_adv: batadv0: Removing interface: veth0 [ 961.752574][ T5702] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 961.811823][T16191] CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server [ 961.892475][T16191] ------------[ cut here ]------------ [ 961.892488][T16191] server->in_flight == 0 [ 961.892496][T16191] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x125b/0x2b90, CPU#1: syz.0.3522/16191 [ 961.892597][T16191] Modules linked in: [ 961.892613][T16191] CPU: 1 UID: 0 PID: 16191 Comm: syz.0.3522 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 961.892632][T16191] Tainted: [L]=SOFTLOCKUP [ 961.892637][T16191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 961.892645][T16191] RIP: 0010:smb2_add_credits+0x125b/0x2b90 [ 961.892661][T16191] Code: de 83 e6 01 31 ff e8 c4 15 c7 fe f6 c3 01 75 0a e8 0a 11 c7 fe e9 22 13 00 00 0f 1f 44 00 00 e8 fb 10 c7 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d 39 82 9a 0c 01 0f 85 9e 03 00 00 e8 e0 10 c7 fe 49 [ 961.892672][T16191] RSP: 0018:ffffc90005e67238 EFLAGS: 00010246 [ 961.892683][T16191] RAX: ffffffff82feba0e RBX: 1ffff110076fb089 RCX: ffff88801ebcbe00 [ 961.892694][T16191] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 961.892702][T16191] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 961.892710][T16191] R10: 0000000000000000 R11: ffffffff82fee780 R12: ffff88803b7d8448 [ 961.892719][T16191] R13: ffffc90005e67450 R14: ffff88803b7d8000 R15: 0000000000000000 [ 961.892729][T16191] FS: 00007fc0e17a66c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 961.892740][T16191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.892749][T16191] CR2: 00007f1289ffb75d CR3: 00000000340d6000 CR4: 00000000003526f0 [ 961.892762][T16191] Call Trace: [ 961.892769][T16191] [ 961.892782][T16191] compound_send_recv+0x13ba/0x2b90 [ 961.892831][T16191] ? __pfx_compound_send_recv+0x10/0x10 [ 961.892848][T16191] ? do_raw_spin_lock+0x12b/0x2f0 [ 961.892890][T16191] ? rt_spin_unlock+0x157/0x200 [ 961.892908][T16191] ? rt_spin_unlock+0x163/0x200 [ 961.892924][T16191] cifs_send_recv+0x42/0x60 [ 961.892944][T16191] SMB2_negotiate+0x164d/0x4030 [ 961.892982][T16191] ? lockdep_hardirqs_on+0x7a/0x110 [ 961.893002][T16191] ? __pfx_SMB2_negotiate+0x10/0x10 [ 961.893025][T16191] ? rt_spin_unlock+0x157/0x200 [ 961.893047][T16191] cifs_negotiate_protocol+0x286/0x680 [ 961.893096][T16191] cifs_get_smb_ses+0x1104/0x1ff0 [ 961.893122][T16191] cifs_mount_get_session+0xf1/0x450 [ 961.893144][T16191] dfs_mount_share+0x22e/0x9a0 [ 961.893181][T16191] cifs_mount+0xcc/0xc00 [ 961.893202][T16191] ? rt_spin_unlock+0x157/0x200 [ 961.893225][T16191] ? __pfx_cifs_mount+0x10/0x10 [ 961.893246][T16191] ? smb3_update_mnt_flags+0x2e8/0x420 [ 961.893266][T16191] ? cifs_setup_cifs_sb+0x5ef/0x910 [ 961.893286][T16191] cifs_smb3_do_mount+0x2e2/0x8c0 [ 961.893325][T16191] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 961.893346][T16191] ? lockdep_hardirqs_on+0x7a/0x110 [ 961.893364][T16191] ? mutex_lock_nested+0x152/0x1d0 [ 961.893377][T16191] ? smb3_get_tree+0x2bf/0x400 [ 961.893395][T16191] smb3_get_tree+0x2dd/0x400 [ 961.893414][T16191] vfs_get_tree+0x92/0x2a0 [ 961.893434][T16191] do_new_mount+0x319/0xdc0 [ 961.893466][T16191] ? cap_capable+0x123/0x460 [ 961.893499][T16191] ? __pfx_do_new_mount+0x10/0x10 [ 961.893515][T16191] ? ns_capable+0x89/0xe0 [ 961.893535][T16191] ? path_mount+0x647/0x1040 [ 961.893550][T16191] ? user_path_at+0xd4/0x160 [ 961.893568][T16191] __se_sys_mount+0x31d/0x420 [ 961.893586][T16191] ? __pfx___se_sys_mount+0x10/0x10 [ 961.893604][T16191] ? __x64_sys_mount+0x20/0xc0 [ 961.893617][T16191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.893632][T16191] do_syscall_64+0x174/0x580 [ 961.893651][T16191] ? clear_bhb_loop+0x40/0x90 [ 961.893666][T16191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.893679][T16191] RIP: 0033:0x7fc0e354e0d9 [ 961.893692][T16191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.893702][T16191] RSP: 002b:00007fc0e17a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 961.893716][T16191] RAX: ffffffffffffffda RBX: 00007fc0e37d5fa0 RCX: 00007fc0e354e0d9 [ 961.893724][T16191] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 961.893733][T16191] RBP: 00007fc0e35e5024 R08: 00002000000000c0 R09: 0000000000000000 [ 961.893742][T16191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.893749][T16191] R13: 00007fc0e37d6038 R14: 00007fc0e37d5fa0 R15: 00007ffcd4f70398 [ 961.893769][T16191] [ 961.893776][T16191] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 961.893787][T16191] CPU: 1 UID: 0 PID: 16191 Comm: syz.0.3522 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 961.893804][T16191] Tainted: [L]=SOFTLOCKUP [ 961.893808][T16191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 961.893816][T16191] Call Trace: [ 961.893822][T16191] [ 961.893827][T16191] vpanic+0x56c/0xa60 [ 961.893842][T16191] ? __pfx__printk+0x10/0x10 [ 961.893857][T16191] ? __pfx_vpanic+0x10/0x10 [ 961.893868][T16191] ? is_bpf_text_address+0x292/0x2b0 [ 961.893884][T16191] ? is_bpf_text_address+0x26/0x2b0 [ 961.893904][T16191] panic+0xc5/0xd0 [ 961.893916][T16191] ? __pfx_panic+0x10/0x10 [ 961.893938][T16191] __warn+0x315/0x4c0 [ 961.893949][T16191] ? smb2_add_credits+0x125b/0x2b90 [ 961.893967][T16191] ? smb2_add_credits+0x125b/0x2b90 [ 961.893983][T16191] __report_bug+0x276/0x570 [ 961.894042][T16191] ? smb2_add_credits+0x125b/0x2b90 [ 961.894059][T16191] ? __pfx___report_bug+0x10/0x10 [ 961.894079][T16191] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 961.894097][T16191] ? rt_spin_lock+0x1e0/0x400 [ 961.894112][T16191] ? rt_spin_lock+0x1e0/0x400 [ 961.894126][T16191] ? smb2_add_credits+0x125b/0x2b90 [ 961.894140][T16191] report_bug+0x16a/0x220 [ 961.894159][T16191] ? smb2_add_credits+0x125b/0x2b90 [ 961.894172][T16191] ? smb2_add_credits+0x125d/0x2b90 [ 961.894186][T16191] handle_bug+0x9c/0x200 [ 961.894213][T16191] exc_invalid_op+0x1a/0x50 [ 961.894232][T16191] asm_exc_invalid_op+0x1a/0x20 [ 961.894244][T16191] RIP: 0010:smb2_add_credits+0x125b/0x2b90 [ 961.894260][T16191] Code: de 83 e6 01 31 ff e8 c4 15 c7 fe f6 c3 01 75 0a e8 0a 11 c7 fe e9 22 13 00 00 0f 1f 44 00 00 e8 fb 10 c7 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d 39 82 9a 0c 01 0f 85 9e 03 00 00 e8 e0 10 c7 fe 49 [ 961.894271][T16191] RSP: 0018:ffffc90005e67238 EFLAGS: 00010246 [ 961.894281][T16191] RAX: ffffffff82feba0e RBX: 1ffff110076fb089 RCX: ffff88801ebcbe00 [ 961.894291][T16191] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 961.894298][T16191] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 961.894306][T16191] R10: 0000000000000000 R11: ffffffff82fee780 R12: ffff88803b7d8448 [ 961.894315][T16191] R13: ffffc90005e67450 R14: ffff88803b7d8000 R15: 0000000000000000 [ 961.894326][T16191] ? __pfx_smb2_get_credits_field+0x10/0x10 [ 961.894342][T16191] ? smb2_add_credits+0x3fe/0x2b90 [ 961.894361][T16191] ? smb2_add_credits+0x3fe/0x2b90 [ 961.894382][T16191] compound_send_recv+0x13ba/0x2b90 [ 961.894413][T16191] ? __pfx_compound_send_recv+0x10/0x10 [ 961.894429][T16191] ? do_raw_spin_lock+0x12b/0x2f0 [ 961.894471][T16191] ? rt_spin_unlock+0x157/0x200 [ 961.894487][T16191] ? rt_spin_unlock+0x163/0x200 [ 961.894502][T16191] cifs_send_recv+0x42/0x60 [ 961.894522][T16191] SMB2_negotiate+0x164d/0x4030 [ 961.894543][T16191] ? lockdep_hardirqs_on+0x7a/0x110 [ 961.894563][T16191] ? __pfx_SMB2_negotiate+0x10/0x10 [ 961.894585][T16191] ? rt_spin_unlock+0x157/0x200 [ 961.894606][T16191] cifs_negotiate_protocol+0x286/0x680 [ 961.894629][T16191] cifs_get_smb_ses+0x1104/0x1ff0 [ 961.894658][T16191] cifs_mount_get_session+0xf1/0x450 [ 961.894679][T16191] dfs_mount_share+0x22e/0x9a0 [ 961.894698][T16191] cifs_mount+0xcc/0xc00 [ 961.894719][T16191] ? rt_spin_unlock+0x157/0x200 [ 961.894734][T16191] ? __pfx_cifs_mount+0x10/0x10 [ 961.894754][T16191] ? smb3_update_mnt_flags+0x2e8/0x420 [ 961.894775][T16191] ? cifs_setup_cifs_sb+0x5ef/0x910 [ 961.894795][T16191] cifs_smb3_do_mount+0x2e2/0x8c0 [ 961.894819][T16191] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 961.894839][T16191] ? lockdep_hardirqs_on+0x7a/0x110 [ 961.894857][T16191] ? mutex_lock_nested+0x152/0x1d0 [ 961.894870][T16191] ? smb3_get_tree+0x2bf/0x400 [ 961.894888][T16191] smb3_get_tree+0x2dd/0x400 [ 961.894907][T16191] vfs_get_tree+0x92/0x2a0 [ 961.894929][T16191] do_new_mount+0x319/0xdc0 [ 961.894950][T16191] ? cap_capable+0x123/0x460 [ 961.894971][T16191] ? __pfx_do_new_mount+0x10/0x10 [ 961.894986][T16191] ? ns_capable+0x89/0xe0 [ 961.895004][T16191] ? path_mount+0x647/0x1040 [ 961.895019][T16191] ? user_path_at+0xd4/0x160 [ 961.895038][T16191] __se_sys_mount+0x31d/0x420 [ 961.895055][T16191] ? __pfx___se_sys_mount+0x10/0x10 [ 961.895073][T16191] ? __x64_sys_mount+0x20/0xc0 [ 961.895086][T16191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.895101][T16191] do_syscall_64+0x174/0x580 [ 961.895120][T16191] ? clear_bhb_loop+0x40/0x90 [ 961.895137][T16191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.895149][T16191] RIP: 0033:0x7fc0e354e0d9 [ 961.895161][T16191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.895171][T16191] RSP: 002b:00007fc0e17a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 961.895184][T16191] RAX: ffffffffffffffda RBX: 00007fc0e37d5fa0 RCX: 00007fc0e354e0d9 [ 961.895193][T16191] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 961.895201][T16191] RBP: 00007fc0e35e5024 R08: 00002000000000c0 R09: 0000000000000000 [ 961.895216][T16191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.895224][T16191] R13: 00007fc0e37d6038 R14: 00007fc0e37d5fa0 R15: 00007ffcd4f70398 [ 961.895243][T16191] [ 961.895414][T16191] Kernel Offset: disabled