last executing test programs: 1m42.29075263s ago: executing program 1 (id=1100): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x24041410) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4080, 0xff0}], 0x1}, 0x40012143) 1m41.709982223s ago: executing program 1 (id=1102): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x0], &(0x7f0000000040)=[0x5], 0x0, 0x20000000000000fc, 0x1}}, 0x40) 1m41.565596892s ago: executing program 1 (id=1104): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff03, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x61ae, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0xf, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fc, 0x1, 0x35315258, 0x3, 0x8, [{0x8, 0xf}, {0x8, 0x8}, {0xa, 0x8}, {0x4000005, 0x8}, {0x0, 0x2003}, {0x7, 0x9}, {0x6, 0xb}, {0x5, 0x1c00000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x0, 0xf0, {0x8, 0xb, 0x2, 0x1, 0x1, 0x27, 0x30, 0x10}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x0, 0x80, {0xa, 0x25, 0x25, 0x9, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x11, 0xa, 0x5, {0xa, 0x25, 0x25, 0x4, 0xe7, 0x6}}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x4, &(0x7f0000000340)=@string={0x4, 0x3, "46d9"}}]}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002240)=@newqdisc={0x118, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xe8, 0x2, {{0xfffffffe, 0x6, 0x40, 0x8, 0xe9, 0x4}, [@TCA_NETEM_LOSS={0x9c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x100, 0x4, 0xca000000}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x6f0, 0x5, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x27f9, 0x7, 0x4, 0x10000}}, @NETEM_LOSS_GE={0x14, 0x2, {0x800, 0x7, 0x6, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffffac7, 0x0, 0x2, 0x3, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0xfffffffc, 0xffffffff, 0x5, 0xffffffff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x6, 0x65, 0xae2}}]}, @TCA_NETEM_CORRUPT={0x4f, 0x4, {0xfff, 0x3}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xbba5, 0x2}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xff}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x118}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x6, @mcast2, 0x3}], 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x4040850) r10 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r10, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000500)={0x20, 0x14, 0xf1, {0xf1, 0xf, "e75bcf47a88a34d2dd23ee24803610da03ce0513e8bec3cd466f00008e1b4bc71fb8df7da78ff882e981b411308f28e88e8923506738a28011b2bd8eac39dd58e49272523c722ce7a0b39f15ee403595aeafd9e23b9002de7e1facf385bc0a1307a430faa1d581b54f2425b9dc7f3244bce4f2f0851ca8cddcfa82dc3507c2a09b7bd33a49437b0ce9b9591565e8a467f1b24273bf4be48bc3aed12b6ff6ad28491e695e3acd979df6f87d593c345000ee0fedff106b21b1d817d620991f5e94115cc0ff2d1a3a9fc43ba099ae7fdf84a7d87fa31ae0ad339128fc7ae96d5d1453c761dfe4c477fd0746df60992280"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m37.693203416s ago: executing program 1 (id=1118): syz_open_dev$vim2m(0x0, 0x1, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feff", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback={0x100000000000000}, 0xfffffffd}}, 0xfffffffc, 0x0, 0x300, 0x0, 0x54, 0x6, 0x1}, 0x9c) 1m37.32209663s ago: executing program 1 (id=1121): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@const={0x3, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x61, 0x2e, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/110, 0x2a, 0x6e, 0x1, 0x81}, 0x28) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) unshare(0xa020480) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000002c0)=0x20) syz_io_uring_setup(0x556a, &(0x7f0000000500)={0x0, 0xebfb, 0x8, 0x2, 0x4f, 0x0, r1}, &(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) syz_ublk_setup_queues(0xffffffffffffffff, r7, &(0x7f0000000640)={0x0, 0x60b1, 0x200, 0x1, 0x10f}, &(0x7f0000001ec0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6af9, 0x200, 0x3, 0xaa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b7e, 0x858a, 0x5, 0x2da}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f72, 0x80, 0x1, 0x3b6, 0x0, r1}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9c7, 0x80000, 0x1, 0x15e, 0x0, r1}}], 0x4, &(0x7f0000001d00)={0x2e, 0x2, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r6, '\x00', {0x3, 0xa62, 0x0, &(0x7f0000000d00)=@buf_1k="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"}}, &(0x7f0000001d80)) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r13 = getpid() syz_ublk_add_dev(r9, r10, r11, r4, &(0x7f0000001e00)={0x2e, 0x2, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, r12, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001dc0)=@any_dev={0x0, 0x924, 0x0, 0x0, 0x1000, 0x0, r13, 0x0, 0x2}}}, &(0x7f0000001e80)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000000)={0x7, "34e60800e80e006a0011b0d10000800000008f2700000100"}) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r15}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x9, 0x0, 0x9, 0x7, 0x80, 0x6, 0x3, 0xc, 0x0, 0x0, 0x4, 0x4, 0x3, 0x80, 0x0, 0x5, [0x6e14407, 0x9]}}) 1m36.258616908s ago: executing program 1 (id=1123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000008000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000000000000000"], 0x50) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @rand_addr=0x64010102}, {0x2, 0x4e21, @private=0xa010102}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1ff, 0xb}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x4000000, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x30c, 0xb, 0xd0e0011, 0x30c, 0xc6, 0x39c, 0x1d8, 0x190, 0x39c, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {0xff}, 0x1}, 0x0, 0x2c4, 0x30c, 0x7000000, {}, [@common=@icmp={{0x24}, {0x0, "0010"}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x8}}}}, {{@ip={@remote, @multicast1, 0x0, 0xffffffff, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x48c) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000100)) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r3, &(0x7f0000000280)=""/79, 0x4f) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=' \x01\x00', @empty, 0x6, 0x8}}) 1m21.154773033s ago: executing program 32 (id=1123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000008000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000000000000000"], 0x50) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @rand_addr=0x64010102}, {0x2, 0x4e21, @private=0xa010102}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1ff, 0xb}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x4000000, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x30c, 0xb, 0xd0e0011, 0x30c, 0xc6, 0x39c, 0x1d8, 0x190, 0x39c, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {0xff}, 0x1}, 0x0, 0x2c4, 0x30c, 0x7000000, {}, [@common=@icmp={{0x24}, {0x0, "0010"}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x8}}}}, {{@ip={@remote, @multicast1, 0x0, 0xffffffff, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x48c) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000100)) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r3, &(0x7f0000000280)=""/79, 0x4f) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=' \x01\x00', @empty, 0x6, 0x8}}) 6.520443265s ago: executing program 0 (id=1559): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001000130400000000fbdbdf258dcf05640101000000000000ffffffffffff00ac1414bb000000000000000000000000000000004e23fffd3807000006", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getspdinfo={0x14, 0x25, 0x4, 0x70bd28, 0x25dfdbff, 0x6, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c000) landlock_restrict_self(r1, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) landlock_restrict_self(r1, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000003c0)=@multiplanar_overlay={0x0, 0x8, 0x4, 0x100, 0xc, {0x0, 0x2710}, {0x5, 0x2, 0x70, 0x2, 0x8, 0x47, "a699909c"}, 0x3, 0x3, {0x0}, 0x103ff}) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 6.39900414s ago: executing program 0 (id=1561): fsmount(0xffffffffffffffff, 0x0, 0x82) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 6.191710229s ago: executing program 0 (id=1562): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, 0x0, 0x38, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) r2 = syz_pidfd_open(r0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0xff04, 0x0) setns(r2, 0x24020000) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x1120, &(0x7f0000000400)={[{0x4b, 0x4e00, "edb8fd7cf2ad9442d23fb81b678ddcace23e746b9674de070203c531aedb5ebd290896cf407cd91e610d2a30271ca37c1602154e24f14e976d09993958150bb521a3cd743bd585133de5d4"}, {0x1000, 0x4e00, "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"}, {0x24, 0x4e00, "0a6e652fdb9c980353231ecfeb41d221adf490b779a76886d2567e5cd6442e6a1f687357"}, {0x9e, 0x4e00, "3f414951bb6cd17f37fd5690c142abe3eaedc6e101dbc8572d86f7f83c01be9a110909b31908b695d605990f221a7849a7202ab391f454207ce3b236e8fc25f0c8e4aac4f94dcab280fc43a3eceede1face3cd7f83a0521cfc54a3f5141f49bd47a9932277ca4c8d79455b0247828aa3c78b5467c47612e860a5c69796c1d5937d16425285fdfef8a66d8578afef728c9ac2b385121ae851d4fa1c29ff00"}]}) syz_clone(0x10230000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.053431764s ago: executing program 4 (id=1563): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000a477000018130000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 6.005323574s ago: executing program 4 (id=1564): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r2, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000000)={0x51, 0xffff, 0x560c, {0x807, 0x5d5}, {0x9a9, 0x2}, @period={0x5d, 0x7ff, 0x1, 0x6, 0x11, {0x2, 0xf, 0xfffa, 0xe}, 0x0, 0x0}}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000180001002cbd70000001800080200040000400050024000008000300", @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4040840}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000100)=0x98b, 0x4) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000700)={0x1, {{0xa, 0x4e1f, 0x8, @mcast1, 0xe5}}, 0x1, 0x1, [{{0xa, 0x4e23, 0x800a807, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}]}, 0x110) 5.79814064s ago: executing program 5 (id=1565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x7ff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (fail_nth: 8) 4.211016685s ago: executing program 5 (id=1566): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000380)=@add_del={0x2, &(0x7f0000000340)='veth0_vlan\x00'}) r3 = syz_open_dev$dri(0x0, 0x4, 0x214002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f00000002c0)={{0x8, 0x2, &(0x7f0000000280)=[{0x8, 0x0, 0x4}, {0xe2, 0x0, 0x2}]}, 0x3, 0x1, 0xfe, 0x1, 0x0, 0x1ff, 0x10, 0x200}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="928e", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0x4) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000200)=[0xc2e], 0x32, 0x0, 0x2, &(0x7f0000000340), &(0x7f00000003c0)=[0x4, 0x2, 0x8000, 0x2, 0x6]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) setpgid(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000008b5f46da000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7, 0x2) r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0x6, 0x10003) poll(&(0x7f00000004c0)=[{r6, 0x3328}, {r7, 0x10c4}, {r4, 0x6240}, {r0, 0xc012}], 0x4, 0x7) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000000500), 0x1001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) 4.120753699s ago: executing program 0 (id=1568): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd8f51000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000006900)=[{{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, &(0x7f0000001580)=""/34, 0x22}, 0xc}, {{&(0x7f00000015c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001640)=""/69, 0x45}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/41, 0x29}, {&(0x7f0000002700)=""/23, 0x17}, {&(0x7f0000002740)=""/65, 0x41}, {&(0x7f00000027c0)=""/230, 0xe6}], 0x6, &(0x7f0000002940)=""/4096, 0x1000}, 0xfc81}, {{&(0x7f0000003940)=@xdp, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000039c0)=""/185, 0xb9}, {&(0x7f0000003a80)=""/27, 0x1b}], 0x2, &(0x7f0000003b00)=""/213, 0xd5}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000003c00)=""/149, 0x95}, {&(0x7f0000003cc0)=""/70, 0x46}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/219, 0xdb}], 0x4, &(0x7f0000004e80)=""/170, 0xaa}, 0x80000001}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000004f40)=""/147, 0x93}, {&(0x7f0000005000)=""/247, 0xf7}, {&(0x7f0000005100)=""/229, 0xe5}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000006200)=""/100, 0x64}], 0x5}, 0x3}, {{&(0x7f0000006300)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000006380), 0x0, &(0x7f00000063c0)=""/33, 0x21}, 0x100}, {{&(0x7f0000006400)=@isdn, 0x80, &(0x7f0000006780)=[{&(0x7f0000006480)}, {&(0x7f00000064c0)=""/113, 0x71}, {&(0x7f0000006540)=""/6, 0x6}, {&(0x7f0000006580)=""/84, 0x54}, {&(0x7f0000006600)=""/50, 0x32}, {&(0x7f0000006640)=""/149, 0x95}, {&(0x7f0000006700)=""/121, 0x79}], 0x7, &(0x7f0000006800)=""/202, 0xca}, 0xfffffffd}], 0x7, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) socket(0x1d, 0x80802, 0x6) clock_getres(0xff5e3eb29a6c9dfb, 0x0) 3.354701455s ago: executing program 4 (id=1571): unshare(0x22020400) r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) copy_file_range(r0, 0x0, r0, 0x0, 0x101, 0x800800000000) 3.268911188s ago: executing program 5 (id=1573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r4, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, &(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r4, r4, 0x1000, 0x0, 0x3ffe}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x87, 0x2, r4}) 3.207540221s ago: executing program 4 (id=1574): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000a477000018130000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 3.052649207s ago: executing program 4 (id=1576): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x38f9, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x1) write(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r7) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xfeb1}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) 2.551971769s ago: executing program 0 (id=1580): socket(0x10, 0x803, 0x2) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f00000003c0)='./file0\x00', 0x10000003) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.537121194s ago: executing program 2 (id=1581): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) close(0x4) unshare(0x6020400) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0x800, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x4, 0x9, 0x6, 0x3ff, 0x9, 0x3, 0x4000, 0x3]}}]}]}, 0x6c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) r5 = io_uring_setup(0x5013, &(0x7f0000000140)={0x0, 0xfffffffc, 0x1000, 0x0, 0x270}) io_uring_enter(r5, 0x5800, 0x9181, 0x4f, 0x0, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000004580)=""/4081, 0xff1}, {&(0x7f0000000300)=""/176, 0xb0}], 0x2}, 0x10100) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f0000001600)=""/46, 0x2e}], 0x2, 0x3, 0x8) fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x200}) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x802, 0x5}) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, 0x0) shutdown(r7, 0x1) connect$bt_rfcomm(r7, &(0x7f0000005dc0)={0x1f, @none, 0x18}, 0xa) 2.299353326s ago: executing program 5 (id=1582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xb, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff978276", 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x1d, 0x2, 0x6) syz_open_dev$ptys(0xc, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280), 0x0) 1.903105319s ago: executing program 2 (id=1583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000181500", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.902666207s ago: executing program 5 (id=1584): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.594441952s ago: executing program 2 (id=1585): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (fail_nth: 1) 1.574237799s ago: executing program 3 (id=1586): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000a477000018130000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000260000009500"], &(0x7f0000000000)='GPL\x00'}, 0x94) 964.243886ms ago: executing program 3 (id=1587): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x101081, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) (fail_nth: 12) 702.818276ms ago: executing program 3 (id=1588): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x6caf, 0x1000, 0x2, 0x240}) r0 = userfaultfd(0x80001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40040) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 675.296471ms ago: executing program 2 (id=1589): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) mount$afs(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x4080, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "cceff5", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfff7}}}}}}}, 0x0) 474.707105ms ago: executing program 4 (id=1590): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd8f51000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000006900)=[{{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, &(0x7f0000001580)=""/34, 0x22}, 0xc}, {{&(0x7f00000015c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001640)=""/69, 0x45}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/41, 0x29}, {&(0x7f0000002700)=""/23, 0x17}, {&(0x7f0000002740)=""/65, 0x41}, {&(0x7f00000027c0)=""/230, 0xe6}], 0x6, &(0x7f0000002940)=""/4096, 0x1000}, 0xfc81}, {{&(0x7f0000003940)=@xdp, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000039c0)=""/185, 0xb9}, {&(0x7f0000003a80)=""/27, 0x1b}], 0x2, &(0x7f0000003b00)=""/213, 0xd5}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000003c00)=""/149, 0x95}, {&(0x7f0000003cc0)=""/70, 0x46}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/219, 0xdb}], 0x4, &(0x7f0000004e80)=""/170, 0xaa}, 0x80000001}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000004f40)=""/147, 0x93}, {&(0x7f0000005000)=""/247, 0xf7}, {&(0x7f0000005100)=""/229, 0xe5}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000006200)=""/100, 0x64}], 0x5}, 0x3}, {{&(0x7f0000006300)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000006380), 0x0, &(0x7f00000063c0)=""/33, 0x21}, 0x100}, {{&(0x7f0000006400)=@isdn, 0x80, &(0x7f0000006780)=[{&(0x7f0000006480)}, {&(0x7f00000064c0)=""/113, 0x71}, {&(0x7f0000006540)=""/6, 0x6}, {&(0x7f0000006580)=""/84, 0x54}, {&(0x7f0000006600)=""/50, 0x32}, {&(0x7f0000006640)=""/149, 0x95}, {&(0x7f0000006700)=""/121, 0x79}], 0x7, &(0x7f0000006800)=""/202, 0xca}, 0xfffffffd}], 0x7, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM(0x4, 0x0, 0x0) clock_getres(0xff5e3eb29a6c9dfb, 0x0) 403.599985ms ago: executing program 3 (id=1591): unshare(0x20000400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010060000000000000000400000014000300ff01000000000000000000000000000114000600776c616e300000000000030000000000140002"], 0x60}, 0x1, 0x0, 0x0, 0x4040801}, 0x400c850) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x2, 0x11, r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000200)=r4, 0x4) 159.681228ms ago: executing program 3 (id=1592): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = openat$kvm(0x0, &(0x7f0000000200), 0x80000, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000180), &(0x7f00000001c0)=@v3={0x3000000, [{0x5}, {0x7, 0xffffffff}]}, 0x18, 0x2) r2 = accept$alg(r0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xff01, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x0, 0x25dfdbfe, {{0x53}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) sendmmsg$alg(r2, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002d00)="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", 0xfff}], 0x1, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20049001) recvmsg(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/4095, 0xfff}], 0x1}, 0x2) 153.6072ms ago: executing program 0 (id=1593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000500)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)="b6", 0x1, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de2802110000000000010902"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x44) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000050) shutdown(r3, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) sendmsg$kcm(r2, &(0x7f0000000980)={&(0x7f0000000480)=@l2={0x1f, 0x2, @none, 0x1, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)="a59fafc6598ff59019ddcab3713f0f4e4c2698c90423a2894e8a558e3dbae510ae11da5649089da29d1420f69815723062376739b7f652fc1a79ed536877ec79e1c5ac26d196278eae55e4efe09715f82740107ee91f1a030268453b82f34152e3b385c59a2d129a9a5169fd2c263b639f135ef58ff750867c7466eb306d7dd401a077c53304cc1541eaeb2f559a57618a1eb41d29c0016f97fa242bcffcdc060526cba97d78b64c1592182eb7e3d1c4402946dfa7e20086b6b14ee4301e34d54fc202dd5ff6cdf0f6d0eedbc1bcbe59944573296b272b3936ba85d0ab1eda0df32651e6c89299df0814f619ec2e24b4e377264efcc1c0", 0xf7}], 0x1, &(0x7f0000000740)=[{0x28, 0x114, 0x29, "d9c912d1baf279cc1906cd1b9fe402d3ec4f4a8f1a"}, {0xd8, 0x84, 0x0, "20254518e226e424d4ad282f98168a38b1666a984d7b33905f02524d4cf18fd7d32b068ff6d22015d9ecf044e8816467b30122ede7e9ab92e8a80a1297c92a1ee8d7a2d53697657f8dc868774a2030965b1a3e383fb4b6cb7e948ddeee3b9282ab6f90d9779b68453172166be6d53df25769b37e5d3cbfb0f95d164b7cbce889280497092816affa3761269973b1107d729de8f4dcf45939b7f15754020653ef167bf862c6a5b798e7cf7c664ccb3889cd58627d42c178ca7dc6a1ed2bf4c4f6b8820a76a9"}, {0x110, 0x116, 0x80, "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"}], 0x210}, 0x24000001) fsmount(0xffffffffffffffff, 0x0, 0x2) mknod(0x0, 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x2, 0x94, {0x94, 0x22, "df555ee2641068a57f3b20857a6f34213d1be7b80748273198b409e804013718bc8f376b5826c43f72bd0bfe6b7518455c78f25cfe5044fc73a6b2d7b772bbe9292d53cb7f03ec0abf8d9a1f6264132325548010a62505e3bed41a10737ae94f8d0178a135daddbd7df16443a73fed77f87b957f367c64738aad450dc704f9050bee54c87151b978d67600353c795c59ba76"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x10, 0xa8, "8e939c8f9596f2421fe905b0e2675eccf5b066129ac7eddf1ceaba279d1b35b492db5932c1707404cb06bbb741e16bfa5e3893c6a30810f5196f8819a0ffb887d2332e20440ad52625676caad0c1ec2b9da5634ccd526d517b4f27338c1b774052fa26015901059997e535c62d2464e7691b52d380a4c2bfe9f29e336bfe43959a901c8bce67644a926e8a44d3f52432a7c661410bff0e858fc1dc0d106e98f8dc10f368b3b7b147"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xc, 0x2, 0xffffffff, 0x47, 0x3, 0x1, 0x7ff, 0x2, 0x4103, 0x5, 0xff}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0xfff7}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) 150.220549ms ago: executing program 5 (id=1594): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x90040, 0x80) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000080)={0x17e}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000904fcff", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000140)={0x17e}) close_range(r0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000004000000020000000400001d31cd0a000300000004000000ff0f000004000000080000000200000003000000080000000600000001000000010000000404000044942d010000000000000f0100000084002e2e00"], &(0x7f0000000100)=""/2, 0x68, 0x2, 0x1}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) read$msr(r9, &(0x7f0000000280)=""/155, 0x9b) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000085a0b56a320e16b80000000a030c0000001b00000000020000000900010073797a31000000003c000000030a0102000000000000000002c9746bbfff5f8a5076c13a39f35ef6fd0000000900030073797a320000000014000480080002400000000408003162613a01480000000208000a400000000015000000110001000000000000000005"], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x10) 35.200602ms ago: executing program 2 (id=1595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000181500", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.926556ms ago: executing program 3 (id=1596): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3ffa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 0s ago: executing program 2 (id=1597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000008000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000000000000000"], 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @rand_addr=0x64010102}, {0x2, 0x4e21, @private=0xa010102}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1ff, 0xb}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r3, &(0x7f0000000200), 0x0, 0x4000000, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x30c, 0xb, 0xd0e0011, 0x30c, 0xc6, 0x39c, 0x1d8, 0x190, 0x39c, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {0xff}, 0x1}, 0x0, 0x2c4, 0x30c, 0x7000000, {}, [@common=@icmp={{0x24}, {0x0, "0010"}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x8}}}}, {{@ip={@remote, @multicast1, 0x0, 0xffffffff, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x48c) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000100)) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r4, &(0x7f0000000280)=""/79, 0x4f) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0'}, 0xb) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=' \x01\x00', @empty, 0x6, 0x8}}) kernel console output (not intermixed with test programs): usb 3-1: Using ep0 maxpacket: 16 [ 318.224779][ T36] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 318.224827][ T36] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 318.224852][ T36] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 318.224880][ T36] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 318.224905][ T36] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 318.224932][ T36] usb 3-1: config 1 interface 0 has no altsetting 0 [ 318.224962][ T36] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 318.224988][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.317283][ T36] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 318.368500][ T9473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.382754][ T9473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.421412][ T60] Bluetooth: hci5: command tx timeout [ 318.464406][ T9562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.464740][ T9562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.467203][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 318.480647][ T10] usb 5-1: device descriptor read/64, error -71 [ 318.506774][ T36] scsi host1: usb-storage 3-1:1.0 [ 318.520852][ T9473] team0: Port device team_slave_0 added [ 318.523137][ T9473] team0: Port device team_slave_1 added [ 318.562271][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.562285][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.562306][ T9473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.563373][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.563384][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.563405][ T9473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.594391][ T10] usb usb5-port1: attempt power cycle [ 318.674087][ T9473] hsr_slave_0: entered promiscuous mode [ 318.674961][ T9473] hsr_slave_1: entered promiscuous mode [ 318.675675][ T9473] debugfs: 'hsr0' already exists in 'hsr' [ 318.675696][ T9473] Cannot create hsr debugfs directory [ 318.676774][ T5607] usb 3-1: USB disconnect, device number 52 [ 319.018613][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 319.041835][ T10] usb 5-1: device descriptor read/8, error -71 [ 319.132673][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 319.430674][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 319.469588][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 319.584628][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 319.584669][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 319.584697][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 319.584724][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.584765][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 319.584791][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.704849][ T10] usb 5-1: device descriptor read/8, error -71 [ 319.810701][ T10] usb usb5-port1: unable to enumerate USB device [ 319.972082][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 319.972126][ T9] usbtmc 4-1:16.0: can't read capabilities [ 319.992048][ T6466] bridge_slave_1: left allmulticast mode [ 319.992086][ T6466] bridge_slave_1: left promiscuous mode [ 319.992272][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.040486][ T5607] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 320.151934][ T6466] bridge_slave_0: left allmulticast mode [ 320.151965][ T6466] bridge_slave_0: left promiscuous mode [ 320.152216][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.184900][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 320.184972][ T9579] usbtmc 4-1:16.0: Unable to send data, error -71 [ 320.194045][ T6288] usb 4-1: USB disconnect, device number 47 [ 320.215717][ T5607] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 320.215771][ T5607] usb 3-1: config 1 interface 0 has no altsetting 0 [ 320.240203][ T5607] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.40 [ 320.240240][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.240263][ T5607] usb 3-1: Product: ␊ [ 320.240288][ T5607] usb 3-1: Manufacturer:   [ 320.240435][ T5607] usb 3-1: SerialNumber: 魲灪鴡ᑜ誹ၭ砗ǝ㎅졡藧荪㤯쎶᮳`厴鞬봱ᒹ꽒隨㮫Ꟗᇛ슅椆衡爪跄픕䨅씱ꚥ㉻䎘㬞_㤟夠図瀔紃ᛔ塟팃砽䄡ꯛ୻䖎⭎㭂ꮃ駈導ⲓ抍ꡡ䑴綤ἣ嵋縜犾዆逽痾璇躒⅃阡厠p뤊Ҷ舰繜㶯낚۔큮㡃Ἠ㙿豆虉抚ᴮ㠇⯊穢ꁶ翏Ĺ [ 320.470684][ T5591] Bluetooth: hci5: command tx timeout [ 320.837843][ T5607] usbhid 3-1:1.0: can't add hid device: -71 [ 320.839489][ T5607] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 320.927681][ T5607] usb 3-1: USB disconnect, device number 53 [ 321.496893][ T9617] binder: 9616:9617 ioctl c0306201 0 returned -14 [ 321.548249][ T9620] binder: 9616:9620 ioctl c0306201 0 returned -14 [ 322.010051][ T9629] FAULT_INJECTION: forcing a failure. [ 322.010051][ T9629] name failslab, interval 1, probability 0, space 0, times 0 [ 322.010101][ T9629] CPU: 1 UID: 0 PID: 9629 Comm: syz.3.1230 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.010132][ T9629] Tainted: [L]=SOFTLOCKUP [ 322.010141][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.010167][ T9629] Call Trace: [ 322.010176][ T9629] [ 322.010185][ T9629] dump_stack_lvl+0xe8/0x150 [ 322.010218][ T9629] should_fail_ex+0x467/0x600 [ 322.010253][ T9629] should_failslab+0xa8/0x100 [ 322.010284][ T9629] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 322.010314][ T9629] ? __kasan_kmalloc+0x93/0xb0 [ 322.010340][ T9629] ? __request_module+0x2ec/0x630 [ 322.010375][ T9629] kstrdup+0x42/0x100 [ 322.010408][ T9629] __request_module+0x2ec/0x630 [ 322.010440][ T9629] ? __pfx_stack_trace_save+0x10/0x10 [ 322.010463][ T9629] ? kasan_save_track+0x4f/0x80 [ 322.010490][ T9629] ? __pfx___request_module+0x10/0x10 [ 322.010525][ T9629] ? rcu_is_watching+0x15/0xb0 [ 322.010560][ T9629] ? bpf_lsm_capable+0x9/0x20 [ 322.010587][ T9629] ? security_capable+0x7e/0x2c0 [ 322.010617][ T9629] ? dev_load+0x21/0x1f0 [ 322.010637][ T9629] dev_load+0x190/0x1f0 [ 322.010658][ T9629] devinet_ioctl+0x126/0x1c50 [ 322.010686][ T9629] ? lock_release+0x4b/0x3c0 [ 322.010712][ T9629] ? __might_fault+0xaf/0x130 [ 322.010740][ T9629] ? __pfx_devinet_ioctl+0x10/0x10 [ 322.010766][ T9629] ? get_user_ifreq+0x12b/0x180 [ 322.010796][ T9629] inet_ioctl+0x391/0x560 [ 322.010828][ T9629] ? __pfx_inet_ioctl+0x10/0x10 [ 322.010862][ T9629] ? lock_release+0x4b/0x3c0 [ 322.010888][ T9629] ? kfree+0x1c5/0x6c0 [ 322.010911][ T9629] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 322.010943][ T9629] ? packet_ioctl+0x166/0x370 [ 322.010973][ T9629] sock_do_ioctl+0x101/0x320 [ 322.011006][ T9629] ? __pfx_sock_do_ioctl+0x10/0x10 [ 322.011037][ T9629] ? hook_file_ioctl+0x1f3/0x600 [ 322.011072][ T9629] ? __asan_memset+0x22/0x50 [ 322.011103][ T9629] ? smack_file_ioctl+0x263/0x360 [ 322.011143][ T9629] sock_ioctl+0x57d/0x7f0 [ 322.011174][ T9629] ? __pfx_sock_ioctl+0x10/0x10 [ 322.011204][ T9629] ? __fget_files+0x2a/0x420 [ 322.011231][ T9629] ? __fget_files+0x3a8/0x420 [ 322.011255][ T9629] ? __fget_files+0x2a/0x420 [ 322.011282][ T9629] ? bpf_lsm_file_ioctl+0x9/0x20 [ 322.011308][ T9629] ? __pfx_sock_ioctl+0x10/0x10 [ 322.011338][ T9629] __se_sys_ioctl+0xff/0x170 [ 322.011374][ T9629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.011399][ T9629] do_syscall_64+0x174/0x580 [ 322.011421][ T9629] ? trace_irq_disable+0x3b/0x140 [ 322.011447][ T9629] ? clear_bhb_loop+0x40/0x90 [ 322.011473][ T9629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.011495][ T9629] RIP: 0033:0x7fe02057ce59 [ 322.011514][ T9629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.011534][ T9629] RSP: 002b:00007fe01e7d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.011558][ T9629] RAX: ffffffffffffffda RBX: 00007fe0207f5fa0 RCX: 00007fe02057ce59 [ 322.011575][ T9629] RDX: 00002000000005c0 RSI: 0000000000008915 RDI: 0000000000000003 [ 322.011591][ T9629] RBP: 00007fe01e7d6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.011605][ T9629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.011619][ T9629] R13: 00007fe0207f6038 R14: 00007fe0207f5fa0 R15: 00007ffc43c92838 [ 322.011645][ T9629] [ 322.170413][ T6466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.357223][ T6466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.385615][ T6466] bond0 (unregistering): Released all slaves [ 322.445893][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 322.521974][ T9638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1232'. [ 322.550461][ T60] Bluetooth: hci5: command tx timeout [ 322.912123][ T6466] tipc: Left network mode [ 322.913088][ T9657] netlink: 'syz.3.1236': attribute type 8 has an invalid length. [ 322.940703][ T9473] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 322.978919][ T9473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.983981][ T9473] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 323.053267][ T9473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.135516][ T9473] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 323.202383][ T36] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 323.228047][ T9473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.229940][ T9473] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 323.273975][ T9668] binder: 9666:9668 ioctl c0306201 0 returned -14 [ 323.291883][ T9473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 323.352077][ T31] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 323.380496][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 323.383001][ T36] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.383035][ T36] usb 5-1: config 0 interface 0 has no altsetting 0 [ 323.386447][ T36] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 323.386477][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.386499][ T36] usb 5-1: Product: syz [ 323.386515][ T36] usb 5-1: Manufacturer: syz [ 323.386531][ T36] usb 5-1: SerialNumber: syz [ 323.389375][ T36] usb 5-1: config 0 descriptor?? [ 323.500498][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 323.507562][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 323.507597][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.507619][ T31] usb 3-1: Product: syz [ 323.507679][ T31] usb 3-1: Manufacturer: syz [ 323.507696][ T31] usb 3-1: SerialNumber: syz [ 323.559995][ T31] usb 3-1: config 0 descriptor?? [ 323.597582][ T31] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 323.597610][ T31] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 323.701320][ T36] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 324.066513][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.083224][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 324.083347][ T36] imon:send_packet: packet tx failed (-71) [ 324.100909][ T36] imon 5-1:0.0: panel buttons/knobs setup failed [ 324.254681][ T31] em28xx 3-1:0.0: chip ID is em2874 [ 324.290689][ T36] rc_core: IR keymap rc-imon-pad not found [ 324.290704][ T36] Registered IR keymap rc-empty [ 324.290837][ T36] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 324.290852][ T36] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 324.291217][ T36] imon:send_packet: packet tx failed (-71) [ 324.322786][ T36] imon 5-1:0.0: remote input dev register failed [ 324.380493][ T5607] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 324.545840][ T36] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 324.910502][ T5607] usb 4-1: Using ep0 maxpacket: 32 [ 325.009461][ T6466] hsr_slave_0: left promiscuous mode [ 325.027194][ T9699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.029545][ T9699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.063086][ T6466] hsr_slave_1: left promiscuous mode [ 325.065081][ T5607] usb 4-1: unable to get BOS descriptor or descriptor too short [ 325.065870][ T5607] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 325.065903][ T5607] usb 4-1: can't read configurations, error -71 [ 325.067008][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.067030][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.133513][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.133539][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.135425][ T36] imon 5-1:0.0: unable to initialize intf0, err 0 [ 325.135447][ T36] imon:imon_probe: failed to initialize context! [ 325.135460][ T36] imon 5-1:0.0: unable to register, err -19 [ 325.176634][ T36] usb 5-1: USB disconnect, device number 45 [ 325.341155][ T6466] veth1_macvtap: left promiscuous mode [ 325.341222][ T6466] veth0_macvtap: left promiscuous mode [ 325.341423][ T6466] veth1_vlan: left promiscuous mode [ 325.342444][ T6466] veth0_vlan: left promiscuous mode [ 326.087023][ T9662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.097948][ T9662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.954698][ T9724] binder: 9723:9724 ioctl c0306201 0 returned -14 [ 327.040849][ T31] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 327.040885][ T31] em28xx 3-1:0.0: board has no eeprom [ 327.160872][ T31] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 327.161001][ T31] em28xx 3-1:0.0: dvb set to bulk mode. [ 327.202688][ T5791] em28xx 3-1:0.0: Binding DVB extension [ 327.625007][ T5704] usb 3-1: USB disconnect, device number 54 [ 327.626367][ T5704] em28xx 3-1:0.0: Disconnecting em28xx [ 327.681364][ T5791] em28xx 3-1:0.0: Registering input extension [ 327.901076][ T5791] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 327.901142][ T5791] Registered IR keymap rc-empty [ 328.167926][ T5791] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 328.187313][ T5791] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input43 [ 328.206744][ T5791] em28xx 3-1:0.0: Input extension successfully initialized [ 328.208531][ T5704] em28xx 3-1:0.0: Closing input extension [ 328.316389][ T5704] em28xx 3-1:0.0: Freeing device [ 329.340441][ T5704] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 329.365237][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 329.379273][ T9768] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input44 [ 329.490746][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 329.492834][ T5704] usb 3-1: unable to get BOS descriptor or descriptor too short [ 329.495526][ T5704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.495569][ T5704] usb 3-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 329.495604][ T5704] usb 3-1: config 1 interface 0 has no altsetting 0 [ 329.497627][ T5704] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 329.497655][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.497675][ T5704] usb 3-1: Product: 껔垺画㫍쪕툕끚秿㕐낪罟▟㒛ڹ疫ￄΆ紈葰엃賮늩职혳絤鮆䓊秝썳蟽뙴੠Ｗ铖᫣꺪᳕㸋줆ڨ岸跙ᢻ爧ڑ㍕剾䭅荎暄୤빗柖媩鏷譭┝걸䳢鏵퐒䷜ᅏ들⤸⠟ꔕ퐞퉼ၒᰇ喈ൻ䞸矛쫠ੈ踣햶概过 [ 329.497709][ T5704] usb 3-1: Manufacturer: ч [ 329.497719][ T5704] usb 3-1: SerialNumber: 㰣蛆蠹⊩䂮磈俽릶Ò풐捎귓ி諈賂衎퓈뤿狟斒ᑹ纒ꑂ떤䆡஛꽄᧽樔雉맪쥭ᄮ㌮졜춈릚ぶ埥ℷ錝齥駌눴䯞᧮窅뚃ݣᶟᢂﱲ﫪鮂쇏䎥糯줐ᔠ牜ក䘏祽쫖䰆장땎력ⵥ薧ꨀ羧⡫ԑ쇍㡡褬㣽 [ 329.747955][ T9473] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.760671][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.762215][ T6456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.773836][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.774179][ T6456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.823019][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 329.823047][ T9772] netlink: 'syz.2.1262': attribute type 3 has an invalid length. [ 329.873510][ T5704] usb 3-1: USB disconnect, device number 55 [ 329.929310][ T9776] binder: 9774:9776 ioctl c0306201 0 returned -14 [ 330.147576][ T9786] bond1: Unable to set down delay as MII monitoring is disabled [ 330.182234][ T9786] bond1 (unregistering): Released all slaves [ 330.300732][ T5607] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 330.450528][ T5607] usb 4-1: Using ep0 maxpacket: 32 [ 330.456732][ T5607] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 330.456764][ T5607] usb 4-1: config 0 has no interface number 0 [ 330.491964][ T5607] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 330.491998][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.492020][ T5607] usb 4-1: Product: syz [ 330.492039][ T5607] usb 4-1: Manufacturer: syz [ 330.492050][ T5607] usb 4-1: SerialNumber: syz [ 330.498362][ T5254] 8021q: adding VLAN 0 to HW filter on device eth3 [ 330.830922][ T5607] usb 4-1: config 0 descriptor?? [ 330.853996][ T5607] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 331.136446][ T5607] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 331.151467][ T5607] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 331.429374][ T9473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.520831][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 331.521642][ T5704] usb 4-1: USB disconnect, device number 50 [ 331.529430][ T5704] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 331.554988][ T5704] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 331.563906][ T5704] quatech2 4-1:0.51: device disconnected [ 333.108364][ T9845] netlink: 'syz.3.1277': attribute type 1 has an invalid length. [ 333.108391][ T9845] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1277'. [ 333.108415][ T9845] netlink: 'syz.3.1277': attribute type 1 has an invalid length. [ 333.494947][ T9473] veth0_vlan: entered promiscuous mode [ 333.536826][ T9473] veth1_vlan: entered promiscuous mode [ 333.693358][ T9473] veth0_macvtap: entered promiscuous mode [ 333.730111][ T9473] veth1_macvtap: entered promiscuous mode [ 333.785478][ T5254] 8021q: adding VLAN 0 to HW filter on device eth4 [ 333.801331][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.839383][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.878909][ T6456] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.892066][ T6456] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.892553][ T6456] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.892579][ T6456] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.110570][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 334.232626][ T6457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.232653][ T6457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.260642][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 334.262310][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 334.262343][ T10] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 334.262359][ T10] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 334.262378][ T10] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 334.262394][ T10] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 334.262411][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 334.262433][ T10] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 334.262450][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.342248][ T10] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 334.444901][ T6458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.444925][ T6458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.511813][ T9860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.517841][ T9860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.553580][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 334.581740][ T10] scsi host1: usb-storage 4-1:1.0 [ 334.765322][ T9872] netlink: 'syz.5.1186': attribute type 1 has an invalid length. [ 334.801660][ T10] usb 4-1: USB disconnect, device number 51 [ 334.838111][ T9872] gtp0: entered allmulticast mode [ 334.854883][ T1025] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 335.327889][ T5704] IPVS: starting estimator thread 0... [ 335.410480][ T9882] IPVS: using max 23 ests per chain, 55200 per kthread [ 335.748029][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 335.900533][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 335.906731][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 335.906781][ T10] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 335.906805][ T10] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 335.906832][ T10] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 335.906855][ T10] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 335.906880][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 335.906911][ T10] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 335.906936][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.959169][ T10] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 336.160181][ T9880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.168546][ T9880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.195112][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1284'. [ 336.223496][ T10] scsi host1: usb-storage 5-1:1.0 [ 336.434283][ T10] usb 5-1: USB disconnect, device number 46 [ 336.678041][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 336.850416][ T5690] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 337.209033][ T9908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.588681][ T9917] FAULT_INJECTION: forcing a failure. [ 337.588681][ T9917] name failslab, interval 1, probability 0, space 0, times 0 [ 337.588739][ T9917] CPU: 1 UID: 0 PID: 9917 Comm: syz.0.1291 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 337.588771][ T9917] Tainted: [L]=SOFTLOCKUP [ 337.588780][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 337.588795][ T9917] Call Trace: [ 337.588803][ T9917] [ 337.588813][ T9917] dump_stack_lvl+0xe8/0x150 [ 337.588844][ T9917] should_fail_ex+0x467/0x600 [ 337.588880][ T9917] should_failslab+0xa8/0x100 [ 337.588912][ T9917] __kmalloc_noprof+0xdf/0x7a0 [ 337.588941][ T9917] ? offload_action_alloc+0x2b/0x160 [ 337.588976][ T9917] offload_action_alloc+0x2b/0x160 [ 337.589010][ T9917] tcf_action_offload_add_ex+0x3b6/0x8e0 [ 337.589050][ T9917] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 337.589107][ T9917] ? __rcu_read_unlock+0x83/0xe0 [ 337.589131][ T9917] ? tcf_action_fill_size+0x1c/0x2e0 [ 337.589167][ T9917] tcf_action_init+0x377/0xb10 [ 337.589205][ T9917] ? __pfx_tcf_action_init+0x10/0x10 [ 337.589253][ T9917] ? __pfx___nla_validate_parse+0x10/0x10 [ 337.589275][ T9917] ? kvm_sched_clock_read+0x11/0x20 [ 337.589326][ T9917] tc_ctl_action+0x43b/0xc70 [ 337.589353][ T9917] ? __pfx_tc_ctl_action+0x10/0x10 [ 337.589372][ T9917] ? sched_clock_cpu+0x74/0x440 [ 337.589403][ T9917] ? finish_task_switch+0x15d/0xbc0 [ 337.589451][ T9917] ? mutex_lock_nested+0x152/0x1d0 [ 337.589479][ T9917] ? rtnetlink_rcv_msg+0x767/0xc00 [ 337.589502][ T9917] ? __pfx_tc_ctl_action+0x10/0x10 [ 337.589523][ T9917] rtnetlink_rcv_msg+0x7b9/0xc00 [ 337.589546][ T9917] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 337.589569][ T9917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.589591][ T9917] ? do_syscall_64+0x174/0x580 [ 337.589616][ T9917] ? rcu_is_watching+0x15/0xb0 [ 337.589653][ T9917] netlink_rcv_skb+0x226/0x4a0 [ 337.589680][ T9917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.589704][ T9917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.589736][ T9917] ? __rcu_read_unlock+0x83/0xe0 [ 337.589759][ T9917] ? net_generic+0x1e/0x240 [ 337.589779][ T9917] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.589808][ T9917] netlink_unicast+0x7f5/0x990 [ 337.589837][ T9917] netlink_sendmsg+0x813/0xb40 [ 337.589868][ T9917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.589902][ T9917] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 337.589935][ T9917] ? __sanitizer_cov_trace_pc+0x17/0x80 [ 337.589961][ T9917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.589995][ T9917] sock_sendmsg_nosec+0x13a/0x180 [ 337.590029][ T9917] ____sys_sendmsg+0x565/0x870 [ 337.590060][ T9917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.590095][ T9917] ? lock_release+0x4b/0x3c0 [ 337.590124][ T9917] ? import_iovec+0x73/0xa0 [ 337.590151][ T9917] ___sys_sendmsg+0x2a5/0x360 [ 337.590180][ T9917] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.590226][ T9917] ? __fget_files+0x2a/0x420 [ 337.590252][ T9917] ? __fget_files+0x3a8/0x420 [ 337.590284][ T9917] __x64_sys_sendmsg+0x1b7/0x290 [ 337.590314][ T9917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.590349][ T9917] ? rcu_is_watching+0x15/0xb0 [ 337.590381][ T9917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.590405][ T9917] do_syscall_64+0x174/0x580 [ 337.590427][ T9917] ? clear_bhb_loop+0x40/0x90 [ 337.590453][ T9917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.590476][ T9917] RIP: 0033:0x7f5a7143ce59 [ 337.590496][ T9917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.590516][ T9917] RSP: 002b:00007f5a6f64c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.590540][ T9917] RAX: ffffffffffffffda RBX: 00007f5a716b6180 RCX: 00007f5a7143ce59 [ 337.590558][ T9917] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 000000000000000e [ 337.590574][ T9917] RBP: 00007f5a6f64c090 R08: 0000000000000000 R09: 0000000000000000 [ 337.590589][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.590604][ T9917] R13: 00007f5a716b6218 R14: 00007f5a716b6180 R15: 00007ffdc2bfc2d8 [ 337.590631][ T9917] [ 338.560799][ T5690] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 338.840467][ T5690] usb 3-1: device descriptor read/64, error -71 [ 338.950733][ T5690] usb usb3-port1: attempt power cycle [ 339.291362][ T5690] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 339.411389][ T5690] usb 3-1: device descriptor read/8, error -71 [ 339.691724][ T5690] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 339.733596][ T5690] usb 3-1: device descriptor read/8, error -71 [ 339.952869][ T5591] Bluetooth: hci4: command 0x1003 tx timeout [ 339.952916][ T60] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 339.960646][ T5690] usb usb3-port1: unable to enumerate USB device [ 340.268743][ T9942] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1301'. [ 341.455705][ T9963] Bluetooth: MGMT ver 1.23 [ 341.595728][ T5791] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 341.880995][ T5791] usb 1-1: Using ep0 maxpacket: 16 [ 341.983491][ T5791] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 341.984728][ T5791] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 341.984848][ T5791] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 341.985559][ T5791] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 341.985697][ T5791] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 341.985879][ T5791] usb 1-1: config 1 interface 0 has no altsetting 0 [ 341.986320][ T5791] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 341.986404][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.277794][ T5791] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 342.340423][ T5704] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 342.474610][ T5704] usb 6-1: device descriptor read/64, error -71 [ 342.877494][ T5690] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 342.921759][ T9955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.924172][ T9955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.949512][ T5791] scsi host1: usb-storage 1-1:1.0 [ 342.961425][ T5704] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 343.052726][ T5690] usb 5-1: Using ep0 maxpacket: 16 [ 343.056817][ T5690] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 343.056851][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.056872][ T5690] usb 5-1: Product: syz [ 343.056888][ T5690] usb 5-1: Manufacturer: syz [ 343.056905][ T5690] usb 5-1: SerialNumber: syz [ 343.059137][ T5690] usb 5-1: config 0 descriptor?? [ 343.065692][ T5690] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 343.070346][ T5690] usb 5-1: Detected FT-X [ 343.104324][ T5704] usb 6-1: device descriptor read/64, error -71 [ 343.168458][ T36] usb 1-1: USB disconnect, device number 25 [ 343.217933][ T5791] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 343.218118][ T5704] usb usb6-port1: attempt power cycle [ 343.249624][ T9987] FAULT_INJECTION: forcing a failure. [ 343.249624][ T9987] name failslab, interval 1, probability 0, space 0, times 0 [ 343.249668][ T9987] CPU: 0 UID: 0 PID: 9987 Comm: syz.3.1313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 343.249701][ T9987] Tainted: [L]=SOFTLOCKUP [ 343.249710][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 343.249722][ T9987] Call Trace: [ 343.249730][ T9987] [ 343.249739][ T9987] dump_stack_lvl+0xe8/0x150 [ 343.249770][ T9987] should_fail_ex+0x467/0x600 [ 343.249805][ T9987] should_failslab+0xa8/0x100 [ 343.249837][ T9987] kmem_cache_alloc_noprof+0x87/0x680 [ 343.249865][ T9987] ? skb_clone+0x212/0x3a0 [ 343.249895][ T9987] skb_clone+0x212/0x3a0 [ 343.249925][ T9987] __netlink_deliver_tap+0x413/0x860 [ 343.249958][ T9987] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.249990][ T9987] netlink_deliver_tap+0x19c/0x1b0 [ 343.250019][ T9987] netlink_sendskb+0x68/0x140 [ 343.250041][ T9987] nfnetlink_rcv+0x2613/0x28d0 [ 343.250082][ T9987] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 343.250112][ T9987] ? ref_tracker_free+0x668/0x820 [ 343.250166][ T9987] ? skb_clone+0x246/0x3a0 [ 343.250195][ T9987] ? __netlink_deliver_tap+0x811/0x860 [ 343.250221][ T9987] ? rcu_is_watching+0x15/0xb0 [ 343.250252][ T9987] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.250276][ T9987] ? lock_release+0x4b/0x3c0 [ 343.250305][ T9987] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.250334][ T9987] netlink_unicast+0x7f5/0x990 [ 343.250362][ T9987] netlink_sendmsg+0x813/0xb40 [ 343.250389][ T9987] ? lock_release+0x4b/0x3c0 [ 343.250414][ T9987] ? lock_release+0x4b/0x3c0 [ 343.250444][ T9987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.250474][ T9987] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 343.250506][ T9987] ? __kernel_text_address+0xd/0x30 [ 343.250534][ T9987] ? unwind_get_return_address+0x4d/0x90 [ 343.250565][ T9987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.250591][ T9987] sock_sendmsg_nosec+0x13a/0x180 [ 343.250628][ T9987] ____sys_sendmsg+0x565/0x870 [ 343.250660][ T9987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.250689][ T9987] ? lock_release+0x4b/0x3c0 [ 343.250718][ T9987] ? import_iovec+0x73/0xa0 [ 343.250744][ T9987] ___sys_sendmsg+0x2a5/0x360 [ 343.250771][ T9987] ? rcu_is_watching+0x15/0xb0 [ 343.250802][ T9987] ? get_pid_task+0x20/0x1f0 [ 343.250826][ T9987] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.250855][ T9987] ? rcu_is_watching+0x15/0xb0 [ 343.250902][ T9987] ? __fget_files+0x2a/0x420 [ 343.250928][ T9987] ? __fget_files+0x3a8/0x420 [ 343.250960][ T9987] __x64_sys_sendmsg+0x1b7/0x290 [ 343.250988][ T9987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.251022][ T9987] ? rcu_is_watching+0x15/0xb0 [ 343.251055][ T9987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.251080][ T9987] do_syscall_64+0x174/0x580 [ 343.251102][ T9987] ? trace_irq_disable+0x3b/0x140 [ 343.251129][ T9987] ? clear_bhb_loop+0x40/0x90 [ 343.251155][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.251185][ T9987] RIP: 0033:0x7fe02057ce59 [ 343.251206][ T9987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.251227][ T9987] RSP: 002b:00007fe01e7d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.251253][ T9987] RAX: ffffffffffffffda RBX: 00007fe0207f5fa0 RCX: 00007fe02057ce59 [ 343.251272][ T9987] RDX: 0000000000004014 RSI: 0000200000000000 RDI: 0000000000000003 [ 343.251288][ T9987] RBP: 00007fe01e7d6090 R08: 0000000000000000 R09: 0000000000000000 [ 343.251303][ T9987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.251317][ T9987] R13: 00007fe0207f6038 R14: 00007fe0207f5fa0 R15: 00007ffc43c92838 [ 343.251344][ T9987] [ 343.323930][ T5690] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 343.325589][ T5690] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 343.326362][ T5690] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 343.334774][ T5690] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 343.401463][ T5690] usb 5-1: USB disconnect, device number 47 [ 343.519766][ T5690] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 343.550104][ T5690] ftdi_sio 5-1:0.0: device disconnected [ 343.674378][ T5704] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 343.703208][ T5704] usb 6-1: device descriptor read/8, error -71 [ 343.929312][ T9989] overlay: filesystem on ./file0 is read-only [ 343.949563][ T5704] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 343.971058][ T5704] usb 6-1: device descriptor read/8, error -71 [ 343.973492][ T60] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 344.053130][ T36] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 344.083632][ T5704] usb usb6-port1: unable to enumerate USB device [ 344.207577][ T9999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.289557][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 344.291408][ T36] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 344.291430][ T36] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 344.291446][ T36] usb 1-1: config 3 has no interface number 0 [ 344.291473][ T36] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.291496][ T36] usb 1-1: config 3 interface 45 has no altsetting 0 [ 344.293849][ T36] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 344.293873][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.293891][ T36] usb 1-1: Product: syz [ 344.293903][ T36] usb 1-1: Manufacturer: syz [ 344.293916][ T36] usb 1-1: SerialNumber: syz [ 345.113737][ T36] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.147004][ T36] usb 1-1: USB disconnect, device number 26 [ 345.320775][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.179000][T10024] FAULT_INJECTION: forcing a failure. [ 346.179000][T10024] name failslab, interval 1, probability 0, space 0, times 0 [ 346.179044][T10024] CPU: 0 UID: 0 PID: 10024 Comm: syz.5.1324 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.179076][T10024] Tainted: [L]=SOFTLOCKUP [ 346.179085][T10024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.179100][T10024] Call Trace: [ 346.179177][T10024] [ 346.179245][T10024] dump_stack_lvl+0xe8/0x150 [ 346.179383][T10024] should_fail_ex+0x467/0x600 [ 346.179485][T10024] should_failslab+0xa8/0x100 [ 346.179568][T10024] kmem_cache_alloc_node_noprof+0x8f/0x710 [ 346.179625][T10024] ? __alloc_skb+0x1d7/0x7a0 [ 346.179736][T10024] __alloc_skb+0x1d7/0x7a0 [ 346.179760][T10024] batadv_netlink_set_mesh+0xb7c/0x1080 [ 346.179867][T10024] genl_family_rcv_msg_doit+0x233/0x340 [ 346.179966][T10024] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 346.180006][T10024] ? bpf_lsm_capable+0x9/0x20 [ 346.180082][T10024] ? security_capable+0x7e/0x2c0 [ 346.180157][T10024] genl_rcv_msg+0x614/0x7a0 [ 346.180196][T10024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.180228][T10024] ? ref_tracker_free+0x668/0x820 [ 346.180291][T10024] ? __pfx_batadv_pre_doit+0x10/0x10 [ 346.180319][T10024] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 346.180351][T10024] ? __pfx_batadv_post_doit+0x10/0x10 [ 346.180381][T10024] ? __pfx_ref_tracker_free+0x10/0x10 [ 346.180415][T10024] ? __asan_memcpy+0x40/0x70 [ 346.180437][T10024] ? __skb_clone+0x5c/0x6c0 [ 346.180466][T10024] netlink_rcv_skb+0x226/0x4a0 [ 346.180492][T10024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.180526][T10024] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.180559][T10024] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.180586][T10024] genl_rcv+0x28/0x40 [ 346.180615][T10024] netlink_unicast+0x7f5/0x990 [ 346.180642][T10024] netlink_sendmsg+0x813/0xb40 [ 346.180669][T10024] ? lock_release+0x4b/0x3c0 [ 346.180758][T10024] ? lock_release+0x4b/0x3c0 [ 346.180795][T10024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.180823][T10024] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 346.180876][T10024] ? __kernel_text_address+0xd/0x30 [ 346.180936][T10024] ? unwind_get_return_address+0x4d/0x90 [ 346.181015][T10024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.181043][T10024] sock_sendmsg_nosec+0x13a/0x180 [ 346.181119][T10024] ____sys_sendmsg+0x565/0x870 [ 346.181150][T10024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.181178][T10024] ? lock_release+0x4b/0x3c0 [ 346.181206][T10024] ? import_iovec+0x73/0xa0 [ 346.181286][T10024] ___sys_sendmsg+0x2a5/0x360 [ 346.181312][T10024] ? rcu_is_watching+0x15/0xb0 [ 346.181390][T10024] ? get_pid_task+0x20/0x1f0 [ 346.181413][T10024] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.181442][T10024] ? rcu_is_watching+0x15/0xb0 [ 346.181486][T10024] ? __fget_files+0x2a/0x420 [ 346.181566][T10024] ? __fget_files+0x3a8/0x420 [ 346.181598][T10024] __x64_sys_sendmsg+0x1b7/0x290 [ 346.181628][T10024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.181663][T10024] ? rcu_is_watching+0x15/0xb0 [ 346.181696][T10024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.181767][T10024] do_syscall_64+0x174/0x580 [ 346.181828][T10024] ? trace_irq_disable+0x3b/0x140 [ 346.181890][T10024] ? clear_bhb_loop+0x40/0x90 [ 346.181917][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.181940][T10024] RIP: 0033:0x7f7a3231ce59 [ 346.181987][T10024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.182035][T10024] RSP: 002b:00007f7a30576028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.182086][T10024] RAX: ffffffffffffffda RBX: 00007f7a32595fa0 RCX: 00007f7a3231ce59 [ 346.182104][T10024] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 346.182120][T10024] RBP: 00007f7a30576090 R08: 0000000000000000 R09: 0000000000000000 [ 346.182135][T10024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.182149][T10024] R13: 00007f7a32596038 R14: 00007f7a32595fa0 R15: 00007ffddc991928 [ 346.182176][T10024] [ 346.716314][T10036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1326'. [ 348.969739][T10065] FAULT_INJECTION: forcing a failure. [ 348.969739][T10065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.969779][T10065] CPU: 0 UID: 0 PID: 10065 Comm: syz.2.1335 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.969811][T10065] Tainted: [L]=SOFTLOCKUP [ 348.969821][T10065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.969835][T10065] Call Trace: [ 348.969844][T10065] [ 348.969854][T10065] dump_stack_lvl+0xe8/0x150 [ 348.969885][T10065] should_fail_ex+0x467/0x600 [ 348.969923][T10065] _copy_to_user+0x31/0xb0 [ 348.969951][T10065] simple_read_from_buffer+0xe1/0x170 [ 348.970075][T10065] proc_fail_nth_read+0x1be/0x230 [ 348.970148][T10065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.970177][T10065] ? rw_verify_area+0x250/0x4d0 [ 348.970254][T10065] ? rcu_is_watching+0x15/0xb0 [ 348.970289][T10065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.970316][T10065] vfs_read+0x219/0xa90 [ 348.970350][T10065] ? __pfx_vfs_read+0x10/0x10 [ 348.970380][T10065] ? rcu_is_watching+0x15/0xb0 [ 348.970412][T10065] ? trace_irq_enable+0x3b/0x140 [ 348.970449][T10065] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 348.970548][T10065] ? mutex_lock_nested+0x152/0x1d0 [ 348.970577][T10065] ? fdget_pos+0x252/0x320 [ 348.970608][T10065] ksys_read+0x156/0x270 [ 348.970640][T10065] ? __pfx_ksys_read+0x10/0x10 [ 348.970673][T10065] ? rcu_is_watching+0x15/0xb0 [ 348.970706][T10065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.970731][T10065] do_syscall_64+0x174/0x580 [ 348.970752][T10065] ? trace_irq_disable+0x3b/0x140 [ 348.970779][T10065] ? clear_bhb_loop+0x40/0x90 [ 348.970805][T10065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.970828][T10065] RIP: 0033:0x7f7c8240d68e [ 348.970849][T10065] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.970869][T10065] RSP: 002b:00007f7c8069dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.970893][T10065] RAX: ffffffffffffffda RBX: 00007f7c8069e6c0 RCX: 00007f7c8240d68e [ 348.970910][T10065] RDX: 000000000000000f RSI: 00007f7c8069e0a0 RDI: 0000000000000009 [ 348.970925][T10065] RBP: 00007f7c8069e090 R08: 0000000000000000 R09: 0000000000000000 [ 348.970939][T10065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.970952][T10065] R13: 00007f7c826c6038 R14: 00007f7c826c5fa0 R15: 00007ffc73d6b118 [ 348.970978][T10065] [ 350.159425][T10078] overlayfs: failed to resolve './file1': -2 [ 350.832575][ T6288] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 350.877058][T10124] netlink: 'syz.5.1344': attribute type 1 has an invalid length. [ 350.958756][T10133] syzkaller1: entered promiscuous mode [ 350.958783][T10133] syzkaller1: entered allmulticast mode [ 350.997278][ T6288] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.997309][ T6288] usb 4-1: config 0 has no interface number 0 [ 350.997337][ T6288] usb 4-1: config 0 interface 1 has no altsetting 0 [ 350.999561][ T6288] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 350.999594][ T6288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.999615][ T6288] usb 4-1: Product: syz [ 350.999632][ T6288] usb 4-1: Manufacturer: syz [ 350.999648][ T6288] usb 4-1: SerialNumber: syz [ 351.003262][ T6288] usb 4-1: config 0 descriptor?? [ 351.077194][ T5690] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 351.231636][ T5690] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 351.231672][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.235513][ T5690] usb 3-1: config 0 descriptor?? [ 351.309123][ T6288] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 351.327362][ T6288] usb 4-1: USB disconnect, device number 53 [ 351.489220][T10146] overlayfs: failed to resolve './file1': -2 [ 351.623721][ T37] audit: type=1326 audit(1782537174.061:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.5.1352" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3231ce59 code=0x7ffc0000 [ 351.623771][ T37] audit: type=1326 audit(1782537174.061:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.5.1352" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3231ce59 code=0x7ffc0000 [ 351.623813][ T37] audit: type=1326 audit(1782537174.061:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.5.1352" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3231ce59 code=0x7ffc0000 [ 351.624129][ T37] audit: type=1326 audit(1782537174.061:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.5.1352" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3231ce59 code=0x7ffc0000 [ 351.625761][ T37] audit: type=1326 audit(1782537174.061:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.5.1352" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a3231ce59 code=0x7ffc0000 [ 351.626070][ T37] audit: type=1326 audit(1782537174.061:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.5.1352" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3231ce59 code=0x7ffc0000 [ 351.626141][ T37] audit: type=1326 audit(1782537174.061:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.5.1352" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3231ce59 code=0x7ffc0000 [ 351.633630][ T37] audit: type=1326 audit(1782537174.061:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.5.1352" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3231ce59 code=0x7ffc0000 [ 351.633825][ T37] audit: type=1326 audit(1782537174.071:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.5.1352" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3231ce59 code=0x7ffc0000 [ 351.678734][ T37] audit: type=1326 audit(1782537174.120:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10155 comm="syz.5.1352" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a3231ce59 code=0x7ffc0000 [ 351.841129][ T36] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 351.993816][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 352.002215][ T36] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 352.002261][ T36] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 352.002283][ T36] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 352.002346][ T36] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 352.002371][ T36] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 352.002398][ T36] usb 1-1: config 1 interface 0 has no altsetting 0 [ 352.002429][ T36] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 352.003155][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.108732][ T36] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 352.322992][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.323641][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.324859][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1351'. [ 352.336146][ T36] scsi host1: usb-storage 1-1:1.0 [ 352.342442][ T5690] usb 3-1: Cannot set autoneg [ 352.342611][ T5690] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 352.362021][ T5690] usb 3-1: USB disconnect, device number 60 [ 352.402164][T10173] IPv6: addrconf: prefix option has invalid lifetime [ 352.472276][T10173] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 352.509612][T10029] Bluetooth: hci4: Frame reassembly failed (-84) [ 352.544752][ T5791] usb 1-1: USB disconnect, device number 27 [ 352.810787][T10181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1357'. [ 352.810819][T10181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1357'. [ 352.990150][T10187] FAULT_INJECTION: forcing a failure. [ 352.990150][T10187] name failslab, interval 1, probability 0, space 0, times 0 [ 352.990190][T10187] CPU: 1 UID: 0 PID: 10187 Comm: syz.2.1358 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 352.990222][T10187] Tainted: [L]=SOFTLOCKUP [ 352.990230][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.990245][T10187] Call Trace: [ 352.990253][T10187] [ 352.990263][T10187] dump_stack_lvl+0xe8/0x150 [ 352.990295][T10187] should_fail_ex+0x467/0x600 [ 352.990330][T10187] should_failslab+0xa8/0x100 [ 352.990362][T10187] kmem_cache_alloc_noprof+0x87/0x680 [ 352.990389][T10187] ? skb_clone+0x212/0x3a0 [ 352.990419][T10187] skb_clone+0x212/0x3a0 [ 352.990448][T10187] __netlink_deliver_tap+0x413/0x860 [ 352.990481][T10187] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.990508][T10187] netlink_deliver_tap+0x19c/0x1b0 [ 352.990535][T10187] netlink_unicast+0x7b8/0x990 [ 352.990567][T10187] netlink_sendmsg+0x813/0xb40 [ 352.990604][T10187] ? lock_release+0x4b/0x3c0 [ 352.990630][T10187] ? lock_release+0x4b/0x3c0 [ 352.990661][T10187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.990689][T10187] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 352.990721][T10187] ? __kernel_text_address+0xd/0x30 [ 352.990748][T10187] ? unwind_get_return_address+0x4d/0x90 [ 352.990780][T10187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.990806][T10187] sock_sendmsg_nosec+0x13a/0x180 [ 352.990839][T10187] ____sys_sendmsg+0x565/0x870 [ 352.990869][T10187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.990898][T10187] ? lock_release+0x4b/0x3c0 [ 352.990927][T10187] ? import_iovec+0x73/0xa0 [ 352.990953][T10187] ___sys_sendmsg+0x2a5/0x360 [ 352.990979][T10187] ? rcu_is_watching+0x15/0xb0 [ 352.991009][T10187] ? get_pid_task+0x20/0x1f0 [ 352.991033][T10187] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.991062][T10187] ? rcu_is_watching+0x15/0xb0 [ 352.991113][T10187] ? __fget_files+0x2a/0x420 [ 352.991139][T10187] ? __fget_files+0x3a8/0x420 [ 352.991170][T10187] __x64_sys_sendmsg+0x1b7/0x290 [ 352.991198][T10187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.991232][T10187] ? rcu_is_watching+0x15/0xb0 [ 352.991263][T10187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.991288][T10187] do_syscall_64+0x174/0x580 [ 352.991310][T10187] ? trace_irq_disable+0x3b/0x140 [ 352.991335][T10187] ? clear_bhb_loop+0x40/0x90 [ 352.991360][T10187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.991382][T10187] RIP: 0033:0x7f7c8244ce59 [ 352.991402][T10187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.991422][T10187] RSP: 002b:00007f7c8069e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.991446][T10187] RAX: ffffffffffffffda RBX: 00007f7c826c5fa0 RCX: 00007f7c8244ce59 [ 352.991463][T10187] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 352.991478][T10187] RBP: 00007f7c8069e090 R08: 0000000000000000 R09: 0000000000000000 [ 352.991492][T10187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.991506][T10187] R13: 00007f7c826c6038 R14: 00007f7c826c5fa0 R15: 00007ffc73d6b118 [ 352.991531][T10187] [ 354.504712][ T5591] Bluetooth: hci4: command 0x1003 tx timeout [ 354.571102][ T60] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 354.736003][T10204] overlayfs: failed to resolve './file1': -2 [ 356.165835][T10227] FAULT_INJECTION: forcing a failure. [ 356.165835][T10227] name failslab, interval 1, probability 0, space 0, times 0 [ 356.165877][T10227] CPU: 0 UID: 0 PID: 10227 Comm: syz.3.1368 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 356.165909][T10227] Tainted: [L]=SOFTLOCKUP [ 356.165918][T10227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.165933][T10227] Call Trace: [ 356.165941][T10227] [ 356.165951][T10227] dump_stack_lvl+0xe8/0x150 [ 356.166018][T10227] should_fail_ex+0x467/0x600 [ 356.166057][T10227] should_failslab+0xa8/0x100 [ 356.166090][T10227] __kmalloc_cache_noprof+0x84/0x690 [ 356.166203][T10227] ? rtnl_newlink+0x136/0x1bd0 [ 356.166265][T10227] rtnl_newlink+0x136/0x1bd0 [ 356.166288][T10227] ? kasan_save_track+0x4f/0x80 [ 356.166337][T10227] ? kasan_save_track+0x3e/0x80 [ 356.166362][T10227] ? kasan_save_free_info+0x40/0x50 [ 356.166396][T10227] ? __kasan_slab_free+0x5c/0x80 [ 356.166422][T10227] ? kmem_cache_free+0x187/0x6c0 [ 356.166450][T10227] ? dev_hard_start_xmit+0x2df/0x870 [ 356.166533][T10227] ? __netlink_deliver_tap+0x5b4/0x860 [ 356.166561][T10227] ? netlink_deliver_tap+0x19c/0x1b0 [ 356.166586][T10227] ? netlink_unicast+0x7b8/0x990 [ 356.166608][T10227] ? netlink_sendmsg+0x813/0xb40 [ 356.166636][T10227] ? __pfx_rtnl_newlink+0x10/0x10 [ 356.166657][T10227] ? do_syscall_64+0x174/0x580 [ 356.166681][T10227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.166720][T10227] ? rcu_is_watching+0x15/0xb0 [ 356.166757][T10227] ? trace_irq_enable+0x3b/0x140 [ 356.166787][T10227] ? nlmon_xmit+0xb0/0x100 [ 356.166882][T10227] ? kmem_cache_free+0x187/0x6c0 [ 356.166908][T10227] ? nlmon_xmit+0xb0/0x100 [ 356.166941][T10227] ? rcu_is_watching+0x15/0xb0 [ 356.166971][T10227] ? lock_release+0x4b/0x3c0 [ 356.167007][T10227] ? rcu_is_watching+0x15/0xb0 [ 356.167039][T10227] ? rcu_is_watching+0x15/0xb0 [ 356.167071][T10227] ? trace_irq_enable+0x3b/0x140 [ 356.167098][T10227] ? __dev_queue_xmit+0x291/0x3890 [ 356.167128][T10227] ? __dev_queue_xmit+0x1f31/0x3890 [ 356.167159][T10227] ? rcu_is_watching+0x15/0xb0 [ 356.167190][T10227] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 356.167211][T10227] ? rcu_is_watching+0x15/0xb0 [ 356.167243][T10227] ? __pfx_rtnl_newlink+0x10/0x10 [ 356.167263][T10227] ? rcu_is_watching+0x15/0xb0 [ 356.167295][T10227] ? __pfx_rtnl_newlink+0x10/0x10 [ 356.167315][T10227] ? lock_release+0x4b/0x3c0 [ 356.167340][T10227] ? bpf_lsm_capable+0x9/0x20 [ 356.167368][T10227] ? security_capable+0x7e/0x2c0 [ 356.167399][T10227] ? __pfx_rtnl_newlink+0x10/0x10 [ 356.167420][T10227] rtnetlink_rcv_msg+0x802/0xc00 [ 356.167444][T10227] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 356.167465][T10227] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 356.167485][T10227] ? ref_tracker_free+0x668/0x820 [ 356.167521][T10227] ? __pfx_ref_tracker_free+0x10/0x10 [ 356.167555][T10227] ? __asan_memcpy+0x40/0x70 [ 356.167576][T10227] ? __skb_clone+0x5c/0x6c0 [ 356.167604][T10227] netlink_rcv_skb+0x226/0x4a0 [ 356.167630][T10227] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 356.167654][T10227] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.167686][T10227] ? netlink_deliver_tap+0x2e/0x1b0 [ 356.167714][T10227] netlink_unicast+0x7f5/0x990 [ 356.167742][T10227] netlink_sendmsg+0x813/0xb40 [ 356.167767][T10227] ? lock_release+0x4b/0x3c0 [ 356.167803][T10227] ? lock_release+0x4b/0x3c0 [ 356.167833][T10227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.167862][T10227] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 356.167894][T10227] ? __kernel_text_address+0xd/0x30 [ 356.167921][T10227] ? unwind_get_return_address+0x4d/0x90 [ 356.167953][T10227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.167979][T10227] sock_sendmsg_nosec+0x13a/0x180 [ 356.168020][T10227] ____sys_sendmsg+0x565/0x870 [ 356.168050][T10227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.168077][T10227] ? lock_release+0x4b/0x3c0 [ 356.168105][T10227] ? import_iovec+0x73/0xa0 [ 356.168130][T10227] ___sys_sendmsg+0x2a5/0x360 [ 356.168155][T10227] ? rcu_is_watching+0x15/0xb0 [ 356.168185][T10227] ? get_pid_task+0x20/0x1f0 [ 356.168209][T10227] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.168238][T10227] ? rcu_is_watching+0x15/0xb0 [ 356.168282][T10227] ? __fget_files+0x2a/0x420 [ 356.168309][T10227] ? __fget_files+0x3a8/0x420 [ 356.168341][T10227] __x64_sys_sendmsg+0x1b7/0x290 [ 356.168370][T10227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.168405][T10227] ? rcu_is_watching+0x15/0xb0 [ 356.168438][T10227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.168463][T10227] do_syscall_64+0x174/0x580 [ 356.168484][T10227] ? trace_irq_disable+0x3b/0x140 [ 356.168512][T10227] ? clear_bhb_loop+0x40/0x90 [ 356.168538][T10227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.168561][T10227] RIP: 0033:0x7fe02057ce59 [ 356.168582][T10227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.168603][T10227] RSP: 002b:00007fe01e7d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.168627][T10227] RAX: ffffffffffffffda RBX: 00007fe0207f5fa0 RCX: 00007fe02057ce59 [ 356.168645][T10227] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 356.168660][T10227] RBP: 00007fe01e7d6090 R08: 0000000000000000 R09: 0000000000000000 [ 356.168675][T10227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.168689][T10227] R13: 00007fe0207f6038 R14: 00007fe0207f5fa0 R15: 00007ffc43c92838 [ 356.168715][T10227] [ 356.259417][ T5704] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 356.425147][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 356.450129][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.450257][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.450373][ T5704] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 356.450450][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.557789][ T5704] usb 5-1: config 0 descriptor?? [ 356.657640][ T5704] hub 5-1:0.0: USB hub found [ 357.101802][ T5704] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 357.127608][ T5704] usbhid 5-1:0.0: can't add hid device: -71 [ 357.127709][ T5704] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 357.180586][ T5704] usb 5-1: USB disconnect, device number 48 [ 357.204595][T10240] 9p: Bad value for 'rfdno' [ 357.512710][T10254] overlayfs: failed to resolve './file1': -2 [ 357.635151][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 357.635172][ T37] audit: type=1326 audit(1782537179.981:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.3.1378" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 357.635691][ T37] audit: type=1326 audit(1782537179.981:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.3.1378" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 357.635746][ T37] audit: type=1326 audit(1782537179.981:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.3.1378" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 357.635971][ T37] audit: type=1326 audit(1782537179.981:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.3.1378" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 357.636372][ T37] audit: type=1326 audit(1782537179.981:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.3.1378" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 357.636382][T10263] bridge0: port 3(syz_tun) entered blocking state [ 357.636896][ T37] audit: type=1326 audit(1782537179.981:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.3.1378" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 357.636941][ T37] audit: type=1326 audit(1782537179.981:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.3.1378" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 357.639091][T10263] bridge0: port 3(syz_tun) entered disabled state [ 357.642988][T10263] syz_tun: entered allmulticast mode [ 357.661149][T10263] syz_tun: entered promiscuous mode [ 357.669824][T10263] bridge0: port 3(syz_tun) entered blocking state [ 357.669907][T10263] bridge0: port 3(syz_tun) entered forwarding state [ 357.700817][ T37] audit: type=1326 audit(1782537180.040:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.3.1378" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 357.747295][ T60] Bluetooth: hci0: ISO packet for unknown connection handle 3840 [ 357.751120][ T37] audit: type=1326 audit(1782537180.100:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.3.1378" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 357.751252][ T37] audit: type=1326 audit(1782537180.100:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10260 comm="syz.3.1378" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe02057cbc2 code=0x7ffc0000 [ 358.244407][ T5704] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 358.912954][T10285] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 359.012244][T10289] overlayfs: failed to resolve './file1': -2 [ 359.033300][T10285] bond3 (unregistering): Released all slaves [ 359.427938][ T5791] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 359.580312][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 359.583773][ T5791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.584226][ T5791] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.589146][ T5791] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 359.589177][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.589198][ T5791] usb 5-1: Product: syz [ 359.589208][ T5791] usb 5-1: Manufacturer: syz [ 359.589219][ T5791] usb 5-1: SerialNumber: syz [ 359.660586][ T5791] usb 5-1: config 0 descriptor?? [ 359.870111][ T5791] usb 5-1: USB disconnect, device number 49 [ 360.500605][ T5791] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 360.650765][ T5791] usb 1-1: Using ep0 maxpacket: 16 [ 360.652731][ T5791] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 360.652779][ T5791] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 360.652805][ T5791] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 360.652833][ T5791] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 360.652857][ T5791] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 360.652883][ T5791] usb 1-1: config 1 interface 0 has no altsetting 0 [ 360.652914][ T5791] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 360.652938][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.741248][ T5791] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 361.004313][ T5791] scsi host1: usb-storage 1-1:1.0 [ 361.220691][T10333] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.221287][T10333] bridge0: port 2(bridge_slave_1) entered listening state [ 361.223175][T10333] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.223742][T10333] bridge0: port 1(bridge_slave_0) entered listening state [ 361.628916][T10333] geneve2: left promiscuous mode [ 361.628943][T10333] geneve2: left allmulticast mode [ 361.629548][T10333] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 361.704637][ T5791] usb 1-1: USB disconnect, device number 28 [ 361.719265][ T5607] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 361.872676][ T5607] usb 4-1: Using ep0 maxpacket: 16 [ 361.876100][ T5607] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 361.876150][ T5607] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 361.876175][ T5607] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 361.876202][ T5607] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 361.876225][ T5607] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 361.876251][ T5607] usb 4-1: config 1 interface 0 has no altsetting 0 [ 361.876282][ T5607] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 361.876306][ T5607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.890681][ T5607] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 362.065974][T10307] syz.2.1394 (10307): drop_caches: 2 [ 362.141307][T10328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.141650][T10328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.175705][ T5607] scsi host2: usb-storage 4-1:1.0 [ 362.184817][T10342] FAULT_INJECTION: forcing a failure. [ 362.184817][T10342] name failslab, interval 1, probability 0, space 0, times 0 [ 362.184857][T10342] CPU: 1 UID: 0 PID: 10342 Comm: syz.5.1405 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 362.184887][T10342] Tainted: [L]=SOFTLOCKUP [ 362.184896][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.184910][T10342] Call Trace: [ 362.184919][T10342] [ 362.184928][T10342] dump_stack_lvl+0xe8/0x150 [ 362.184959][T10342] should_fail_ex+0x467/0x600 [ 362.184995][T10342] should_failslab+0xa8/0x100 [ 362.185026][T10342] __kmalloc_noprof+0xdf/0x7a0 [ 362.185051][T10342] ? __kasan_kmalloc+0x93/0xb0 [ 362.185076][T10342] ? nla_strdup+0x9d/0x140 [ 362.185101][T10342] nla_strdup+0x9d/0x140 [ 362.185124][T10342] nf_tables_newtable+0x49a/0x1950 [ 362.185291][T10342] nfnetlink_rcv+0x1291/0x28d0 [ 362.185380][T10342] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 362.185413][T10342] ? ref_tracker_free+0x668/0x820 [ 362.185457][T10342] ? skb_clone+0x246/0x3a0 [ 362.185486][T10342] ? __netlink_deliver_tap+0x811/0x860 [ 362.185514][T10342] ? rcu_is_watching+0x15/0xb0 [ 362.185546][T10342] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.185573][T10342] ? lock_release+0x4b/0x3c0 [ 362.185601][T10342] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.185630][T10342] netlink_unicast+0x7f5/0x990 [ 362.185658][T10342] netlink_sendmsg+0x813/0xb40 [ 362.185684][T10342] ? lock_release+0x4b/0x3c0 [ 362.185709][T10342] ? lock_release+0x4b/0x3c0 [ 362.185739][T10342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.185765][T10342] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 362.185797][T10342] ? __kernel_text_address+0xd/0x30 [ 362.185824][T10342] ? unwind_get_return_address+0x4d/0x90 [ 362.185856][T10342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.185880][T10342] sock_sendmsg_nosec+0x13a/0x180 [ 362.185913][T10342] ____sys_sendmsg+0x565/0x870 [ 362.185943][T10342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.185970][T10342] ? lock_release+0x4b/0x3c0 [ 362.185999][T10342] ? import_iovec+0x73/0xa0 [ 362.186025][T10342] ___sys_sendmsg+0x2a5/0x360 [ 362.186051][T10342] ? rcu_is_watching+0x15/0xb0 [ 362.186082][T10342] ? get_pid_task+0x20/0x1f0 [ 362.186105][T10342] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.186135][T10342] ? rcu_is_watching+0x15/0xb0 [ 362.186180][T10342] ? __fget_files+0x2a/0x420 [ 362.186207][T10342] ? __fget_files+0x3a8/0x420 [ 362.186247][T10342] __x64_sys_sendmsg+0x1b7/0x290 [ 362.186275][T10342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.186311][T10342] ? rcu_is_watching+0x15/0xb0 [ 362.186343][T10342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.186368][T10342] do_syscall_64+0x174/0x580 [ 362.186390][T10342] ? trace_irq_disable+0x3b/0x140 [ 362.186418][T10342] ? clear_bhb_loop+0x40/0x90 [ 362.186443][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.186465][T10342] RIP: 0033:0x7f7a3231ce59 [ 362.186485][T10342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.186505][T10342] RSP: 002b:00007f7a30576028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.186529][T10342] RAX: ffffffffffffffda RBX: 00007f7a32595fa0 RCX: 00007f7a3231ce59 [ 362.186546][T10342] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 362.186561][T10342] RBP: 00007f7a30576090 R08: 0000000000000000 R09: 0000000000000000 [ 362.186575][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.186590][T10342] R13: 00007f7a32596038 R14: 00007f7a32595fa0 R15: 00007ffddc991928 [ 362.186615][T10342] [ 362.197035][ T12] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 362.211929][ T12] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 362.234048][ T10] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 362.894418][ T36] usb 4-1: USB disconnect, device number 54 [ 362.898683][ T5704] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 363.052899][ T10] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 363.415803][T10358] hsr0: left promiscuous mode [ 363.452976][T10358] erspan1: left promiscuous mode [ 363.467573][T10357] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1410'. [ 363.467616][T10357] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1410'. [ 363.467652][T10357] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1410'. [ 363.628674][ T5704] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 363.802560][ T5704] usb 6-1: Using ep0 maxpacket: 8 [ 363.806554][ T5704] usb 6-1: config 3 has an invalid interface number: 45 but max is 0 [ 363.806599][ T5704] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 363.806625][ T5704] usb 6-1: config 3 has no interface number 0 [ 363.806667][ T5704] usb 6-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 363.806701][ T5704] usb 6-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.806733][ T5704] usb 6-1: config 3 interface 45 has no altsetting 0 [ 363.845620][ T5704] usb 6-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 363.845715][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.845799][ T5704] usb 6-1: Product: syz [ 363.845856][ T5704] usb 6-1: Manufacturer: syz [ 363.845898][ T5704] usb 6-1: SerialNumber: syz [ 364.532137][ T5704] usb 6-1: USB disconnect, device number 7 [ 364.547558][ T5595] udevd[5595]: setting mode of /dev/bus/usb/006/007 to 020664 failed: No such file or directory [ 364.547715][ T5595] udevd[5595]: setting owner of /dev/bus/usb/006/007 to uid=0, gid=0 failed: No such file or directory [ 364.604839][ T5593] udevd[5593]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.888179][ T60] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 366.470021][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 366.605306][T10413] FAULT_INJECTION: forcing a failure. [ 366.605306][T10413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.605347][T10413] CPU: 1 UID: 0 PID: 10413 Comm: syz.2.1429 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 366.605380][T10413] Tainted: [L]=SOFTLOCKUP [ 366.605388][T10413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 366.605403][T10413] Call Trace: [ 366.605412][T10413] [ 366.605421][T10413] dump_stack_lvl+0xe8/0x150 [ 366.605454][T10413] should_fail_ex+0x467/0x600 [ 366.605489][T10413] _copy_to_user+0x31/0xb0 [ 366.605516][T10413] drm_mode_getconnector+0xc72/0x1400 [ 366.605621][T10413] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 366.605652][T10413] ? lock_release+0x4b/0x3c0 [ 366.605684][T10413] drm_ioctl_kernel+0x2e2/0x3b0 [ 366.605764][T10413] ? lock_acquire+0x5f/0x350 [ 366.605792][T10413] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 366.605821][T10413] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 366.605850][T10413] ? __might_fault+0xcb/0x130 [ 366.605915][T10413] drm_ioctl+0x713/0xba0 [ 366.605948][T10413] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 366.605986][T10413] ? __pfx_drm_ioctl+0x10/0x10 [ 366.606024][T10413] ? __fget_files+0x2a/0x420 [ 366.606054][T10413] ? bpf_lsm_file_ioctl+0x9/0x20 [ 366.606104][T10413] ? __pfx_drm_ioctl+0x10/0x10 [ 366.606131][T10413] __se_sys_ioctl+0xff/0x170 [ 366.606208][T10413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.606233][T10413] do_syscall_64+0x174/0x580 [ 366.606254][T10413] ? trace_irq_disable+0x3b/0x140 [ 366.606280][T10413] ? clear_bhb_loop+0x40/0x90 [ 366.606305][T10413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.606328][T10413] RIP: 0033:0x7f7c8244ce59 [ 366.606348][T10413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.606368][T10413] RSP: 002b:00007f7c8069e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.606393][T10413] RAX: ffffffffffffffda RBX: 00007f7c826c5fa0 RCX: 00007f7c8244ce59 [ 366.606410][T10413] RDX: 0000200000000680 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 366.606424][T10413] RBP: 00007f7c8069e090 R08: 0000000000000000 R09: 0000000000000000 [ 366.606439][T10413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.606454][T10413] R13: 00007f7c826c6038 R14: 00007f7c826c5fa0 R15: 00007ffc73d6b118 [ 366.606479][T10413] [ 366.857789][ T5791] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 367.136163][ T5791] usb 1-1: Using ep0 maxpacket: 32 [ 367.166647][ T5791] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 367.197884][ T5791] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 367.197921][ T5791] usb 1-1: can't read configurations, error -61 [ 367.310306][T10430] 9p: Bad value for 'wfdno' [ 367.325810][ T5791] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 367.325924][ T36] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 367.476787][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 367.476896][ T5791] usb 1-1: Using ep0 maxpacket: 32 [ 367.477641][ T5791] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 367.480621][ T36] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 367.480668][ T36] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 367.480693][ T36] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 367.480765][ T36] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 367.480790][ T36] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 367.480816][ T36] usb 5-1: config 1 interface 0 has no altsetting 0 [ 367.480849][ T36] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 367.480920][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.481743][ T5791] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 367.481774][ T5791] usb 1-1: can't read configurations, error -61 [ 367.482698][ T5791] usb usb1-port1: attempt power cycle [ 367.618992][ T36] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 367.852924][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.853906][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.875370][ T5791] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 367.885723][ T36] scsi host1: usb-storage 5-1:1.0 [ 367.900700][ T5791] usb 1-1: Using ep0 maxpacket: 32 [ 367.901212][ T5791] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 367.902978][ T5791] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 367.903011][ T5791] usb 1-1: can't read configurations, error -61 [ 368.004232][ T6288] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 368.030378][ T5791] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 368.050930][ T5791] usb 1-1: Using ep0 maxpacket: 32 [ 368.052267][ T5791] usb 1-1: too many configurations: 128, using maximum allowed: 8 [ 368.053665][ T5791] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 368.053717][ T5791] usb 1-1: can't read configurations, error -61 [ 368.053963][ T5791] usb usb1-port1: unable to enumerate USB device [ 368.093367][ T5704] usb 5-1: USB disconnect, device number 50 [ 368.161692][ T6288] usb 4-1: Using ep0 maxpacket: 32 [ 368.163716][ T6288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.163751][ T6288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.163789][ T6288] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 368.163814][ T6288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.167089][ T6288] usb 4-1: config 0 descriptor?? [ 368.170587][ T6288] hub 4-1:0.0: USB hub found [ 368.261782][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 368.731406][ T6288] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 368.735079][ T10] usb 6-1: device descriptor read/64, error -71 [ 368.976130][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 369.016548][ T6288] usbhid 4-1:0.0: can't add hid device: -71 [ 369.016655][ T6288] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 369.044400][ T6288] usb 4-1: USB disconnect, device number 55 [ 369.117232][ T10] usb 6-1: device descriptor read/64, error -71 [ 369.177277][ T5704] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 369.197471][ T5791] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 369.227954][ T10] usb usb6-port1: attempt power cycle [ 369.338322][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 369.340094][ T5704] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 369.340125][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.340145][ T5704] usb 3-1: config 0 has no interface number 0 [ 369.340178][ T5704] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 369.340195][ T5704] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 369.340216][ T5704] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 369.342203][ T5704] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 369.342235][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.342256][ T5704] usb 3-1: Product: syz [ 369.342271][ T5704] usb 3-1: Manufacturer: syz [ 369.342286][ T5704] usb 3-1: SerialNumber: syz [ 369.345184][ T5704] usb 3-1: config 0 descriptor?? [ 369.353389][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 369.355209][ T5704] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 369.452257][ T5791] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 369.452292][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.452315][ T5791] usb 5-1: Product: syz [ 369.452331][ T5791] usb 5-1: Manufacturer: syz [ 369.452347][ T5791] usb 5-1: SerialNumber: syz [ 369.569546][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 369.590377][ T10] usb 6-1: device descriptor read/8, error -71 [ 369.841195][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 369.874814][ T10] usb 6-1: device descriptor read/8, error -71 [ 369.990478][ T10] usb usb6-port1: unable to enumerate USB device [ 370.860368][ T6288] usb 3-1: USB disconnect, device number 61 [ 371.191226][T10488] random: crng reseeded on system resumption [ 371.349368][T10495] kAFS: unparsable volume name [ 372.096517][T10502] netlink: 'syz.3.1461': attribute type 9 has an invalid length. [ 372.294918][ T5791] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 372.298715][ T5791] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 372.394070][ T5791] usb 5-1: USB disconnect, device number 51 [ 372.486253][ T5593] udevd[5593]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.753311][ T5791] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 372.912168][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 372.950152][ T5791] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 372.950281][ T5791] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 372.950388][ T5791] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 372.950532][ T5791] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.951417][ T5791] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 372.951909][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.951966][ T5579] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 373.311663][ T5579] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.311711][ T5579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.311741][ T5579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.312140][ T5579] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 373.312168][ T5579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.370250][ T5579] usb 4-1: config 0 descriptor?? [ 373.521649][ T5791] usb 5-1: GET_CAPABILITIES returned 0 [ 373.521701][ T5791] usbtmc 5-1:16.0: can't read capabilities [ 373.619670][T10523] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1469'. [ 373.683871][ T5607] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 373.919151][T10511] FAULT_INJECTION: forcing a failure. [ 373.919151][T10511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.919191][T10511] CPU: 0 UID: 0 PID: 10511 Comm: syz.4.1463 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 373.919222][T10511] Tainted: [L]=SOFTLOCKUP [ 373.919230][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.919250][T10511] Call Trace: [ 373.919257][T10511] [ 373.919263][T10511] dump_stack_lvl+0xe8/0x150 [ 373.919286][T10511] should_fail_ex+0x467/0x600 [ 373.919337][T10511] _copy_from_user+0x2d/0xb0 [ 373.919364][T10511] kstrtouint_from_user+0xd6/0x180 [ 373.919488][T10511] ? __might_fault+0xaf/0x130 [ 373.919517][T10511] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 373.919554][T10511] ? write_and_queue_folio+0x20/0x4b0 [ 373.919623][T10511] ? vfs_write+0x231/0xbb0 [ 373.919654][T10511] ? rcu_is_watching+0x15/0xb0 [ 373.919690][T10511] proc_fail_nth_write+0x8e/0x210 [ 373.919726][T10511] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 373.919761][T10511] ? preempt_count_add+0x91/0x190 [ 373.919848][T10511] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 373.919877][T10511] vfs_write+0x29f/0xbb0 [ 373.919908][T10511] ? rcu_is_watching+0x15/0xb0 [ 373.919943][T10511] ? __pfx_vfs_write+0x10/0x10 [ 373.919966][T10511] ? do_sys_openat2+0x14e/0x200 [ 373.920005][T10511] ? kmem_cache_free+0x187/0x6c0 [ 373.920035][T10511] ? do_sys_openat2+0x14e/0x200 [ 373.920066][T10511] ksys_write+0x156/0x270 [ 373.920102][T10511] ? __pfx_ksys_write+0x10/0x10 [ 373.920127][T10511] ? rcu_is_watching+0x15/0xb0 [ 373.920170][T10511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.920195][T10511] do_syscall_64+0x174/0x580 [ 373.920219][T10511] ? clear_bhb_loop+0x40/0x90 [ 373.920244][T10511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.920271][T10511] RIP: 0033:0x7fc3ecdfd68e [ 373.920286][T10511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 373.920301][T10511] RSP: 002b:00007fc3eb08dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.920338][T10511] RAX: ffffffffffffffda RBX: 00007fc3eb08e6c0 RCX: 00007fc3ecdfd68e [ 373.920357][T10511] RDX: 0000000000000001 RSI: 00007fc3eb08e0a0 RDI: 0000000000000004 [ 373.920372][T10511] RBP: 00007fc3eb08e090 R08: 0000000000000000 R09: 0000000000000000 [ 373.920385][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.920398][T10511] R13: 00007fc3ed0b6038 R14: 00007fc3ed0b5fa0 R15: 00007ffd7bddc5d8 [ 373.920422][T10511] [ 374.095009][ T5607] usb 6-1: Using ep0 maxpacket: 32 [ 374.098570][ T5607] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 374.098651][ T5607] usb 6-1: config 0 has no interface number 0 [ 374.102600][ T5607] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 374.102665][ T5607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.102702][ T5607] usb 6-1: Product: syz [ 374.102739][ T5607] usb 6-1: Manufacturer: syz [ 374.102756][ T5607] usb 6-1: SerialNumber: syz [ 374.177415][ T5607] usb 6-1: config 0 descriptor?? [ 374.238443][ T5579] hid-rmi 0003:0461:4E72.001C: unknown global tag 0xe [ 374.238473][ T5579] hid-rmi 0003:0461:4E72.001C: item 0 4 1 14 parsing failed [ 374.255301][ T5579] hid-rmi 0003:0461:4E72.001C: parse failed [ 374.255389][ T5579] hid-rmi 0003:0461:4E72.001C: probe with driver hid-rmi failed with error -22 [ 374.276812][ T5607] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 374.277859][ T6288] usb 5-1: USB disconnect, device number 52 [ 374.423214][ T5607] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 374.461683][ T5607] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 374.492185][ T5607] usb 4-1: USB disconnect, device number 56 [ 374.853380][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 374.862160][ T5607] usb 6-1: USB disconnect, device number 12 [ 374.885018][ T5607] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 374.909678][ T5607] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 374.913665][ T5607] quatech2 6-1:0.51: device disconnected [ 375.328825][ T60] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 375.382280][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 376.786671][T10569] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1482'. [ 377.753905][ T5834] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 377.907719][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 377.909376][ T5834] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.909412][ T5834] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 377.909441][ T5834] usb 3-1: config 0 interface 0 has no altsetting 0 [ 377.909472][ T5834] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 377.909497][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.912161][ T5834] usb 3-1: config 0 descriptor?? [ 377.928233][ T5579] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 378.081745][ T5579] usb 6-1: Using ep0 maxpacket: 32 [ 378.083523][ T5579] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 378.083543][ T5579] usb 6-1: config 0 has no interface number 0 [ 378.085932][ T5579] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 378.085959][ T5579] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.085975][ T5579] usb 6-1: Product: syz [ 378.085986][ T5579] usb 6-1: Manufacturer: syz [ 378.085997][ T5579] usb 6-1: SerialNumber: syz [ 378.145268][ T5579] usb 6-1: config 0 descriptor?? [ 378.168734][ T5579] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 378.375856][ T5834] hid_parser_main: 35 callbacks suppressed [ 378.375935][ T5834] uclogic 0003:5543:0005.001D: unknown main item tag 0x7 [ 378.376410][ T5834] uclogic 0003:5543:0005.001D: unknown main item tag 0x0 [ 378.377439][ T5834] uclogic 0003:5543:0005.001D: unknown main item tag 0x1 [ 378.377476][ T5834] uclogic 0003:5543:0005.001D: reserved main item tag 0xd [ 378.422699][ T5579] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 378.440843][ T5834] uclogic 0003:5543:0005.001D: hidraw0: USB HID v0.77 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0 [ 378.469241][ T5579] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 378.561546][ T5607] usb 3-1: USB disconnect, device number 62 [ 378.791048][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 378.792432][ T5607] usb 6-1: USB disconnect, device number 13 [ 378.812029][ T5607] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 378.834564][ T5607] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 378.835072][ T5607] quatech2 6-1:0.51: device disconnected [ 379.003198][ T5579] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 379.156916][ T5579] usb 4-1: Using ep0 maxpacket: 8 [ 379.326931][ T1348] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.385283][ T5579] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 379.386655][ T5579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.387389][ T5579] usb 4-1: Product: syz [ 379.388123][ T5579] usb 4-1: Manufacturer: syz [ 379.388819][ T5579] usb 4-1: SerialNumber: syz [ 380.158433][ T36] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 380.358351][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 380.371395][ T5579] usb 4-1: clock source 0 is not valid, cannot use [ 380.411061][ T36] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 380.411113][ T36] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 380.411337][ T36] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 380.411367][ T36] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 380.411391][ T36] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 380.411417][ T36] usb 6-1: config 1 interface 0 has no altsetting 0 [ 380.411651][ T36] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 380.411680][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.495167][ T36] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 380.567356][ T5579] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 380.568131][ T5579] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 380.573388][ T5579] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 380.573415][ T5579] usb 4-1: clock source 0 is not valid, cannot use [ 380.574160][ T5579] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 380.574769][ T5579] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 380.733768][T10603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.739455][T10603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.744907][ T5579] usb 4-1: USB disconnect, device number 57 [ 380.764140][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1497'. [ 380.839597][ T36] scsi host1: usb-storage 6-1:1.0 [ 380.886906][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.044870][ T5834] usb 6-1: USB disconnect, device number 14 [ 381.667702][ T5579] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 381.820579][ T5579] usb 4-1: Using ep0 maxpacket: 32 [ 381.826574][ T5579] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.826611][ T5579] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 381.826640][ T5579] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.826674][ T5579] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 381.826700][ T5579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.841133][ T5579] usb 4-1: config 0 descriptor?? [ 382.315763][ T5579] uclogic 0003:5543:0005.001E: unknown main item tag 0x7 [ 382.315803][ T5579] uclogic 0003:5543:0005.001E: unknown main item tag 0x0 [ 382.315863][ T5579] uclogic 0003:5543:0005.001E: unknown main item tag 0x1 [ 382.315891][ T5579] uclogic 0003:5543:0005.001E: reserved main item tag 0xd [ 382.327276][ T5579] uclogic 0003:5543:0005.001E: hidraw0: USB HID v0.77 Device [HID 5543:0005] on usb-dummy_hcd.3-1/input0 [ 382.372996][ T6288] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 382.480614][T10655] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1515'. [ 382.526500][ T5704] usb 4-1: USB disconnect, device number 58 [ 382.539697][ T6288] usb 6-1: Using ep0 maxpacket: 16 [ 382.545968][ T6288] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 382.546015][ T6288] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 382.546041][ T6288] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 382.546067][ T6288] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 382.546091][ T6288] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 382.546115][ T6288] usb 6-1: config 1 interface 0 has no altsetting 0 [ 382.546145][ T6288] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 382.546169][ T6288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.631557][ T6288] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 382.838105][T10646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.838920][T10646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.859573][ T6288] scsi host1: usb-storage 6-1:1.0 [ 382.870010][ T5579] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 383.024642][ T5579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.024686][ T5579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.024725][ T5579] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 383.024750][ T5579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.032023][ T5579] usb 1-1: config 0 descriptor?? [ 383.085382][ T5834] usb 6-1: USB disconnect, device number 15 [ 383.163571][T10682] XFS (nbd3): SB validate failed with error -5. [ 383.698062][T10707] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 383.700422][ T5579] hid-led 0003:27B8:01ED.001F: probe with driver hid-led failed with error -71 [ 383.704137][ T5579] usb 1-1: USB disconnect, device number 33 [ 383.978977][ T5834] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 384.137589][ T5834] usb 6-1: Using ep0 maxpacket: 32 [ 384.219116][ T5834] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.219157][ T5834] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 384.219187][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 384.219220][ T5834] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 384.219245][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.221901][ T5834] usb 6-1: config 0 descriptor?? [ 384.273265][ T5704] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 384.415552][ T5704] usb 3-1: device descriptor read/64, error -71 [ 384.960398][ T5704] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 385.021072][ T5834] uclogic 0003:5543:0005.0020: unknown main item tag 0x7 [ 385.021115][ T5834] uclogic 0003:5543:0005.0020: unknown main item tag 0x0 [ 385.021174][ T5834] uclogic 0003:5543:0005.0020: unknown main item tag 0x1 [ 385.021202][ T5834] uclogic 0003:5543:0005.0020: reserved main item tag 0xd [ 385.057632][ T5834] uclogic 0003:5543:0005.0020: hidraw0: USB HID v0.77 Device [HID 5543:0005] on usb-dummy_hcd.5-1/input0 [ 385.064863][ T5834] usb 6-1: USB disconnect, device number 16 [ 385.096351][ T5704] usb 3-1: device descriptor read/64, error -71 [ 385.148517][ T37] kauditd_printk_skb: 71 callbacks suppressed [ 385.148541][ T37] audit: type=1326 audit(1783061495.091:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10730 comm="syz.3.1543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe02057ce59 code=0x0 [ 385.208546][ T5704] usb usb3-port1: attempt power cycle [ 385.244049][T10734] fido_id[10734]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 385.345057][T10737] syzkaller1: entered promiscuous mode [ 385.345075][T10737] syzkaller1: entered allmulticast mode [ 385.735787][ T5704] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 385.767032][ T5704] usb 3-1: device descriptor read/8, error -71 [ 385.793798][ T37] audit: type=1326 audit(1783061495.731:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.3.1547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 385.793835][ T37] audit: type=1326 audit(1783061495.731:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.3.1547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 385.795492][ T37] audit: type=1326 audit(1783061495.731:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.3.1547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 385.795765][ T37] audit: type=1326 audit(1783061495.731:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.3.1547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 385.802133][ T37] audit: type=1326 audit(1783061495.741:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.3.1547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 385.802275][ T37] audit: type=1326 audit(1783061495.741:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.3.1547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 385.802860][ T37] audit: type=1326 audit(1783061495.741:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.3.1547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 385.804016][ T37] audit: type=1326 audit(1783061495.741:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.3.1547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 385.804126][ T37] audit: type=1326 audit(1783061495.741:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10745 comm="syz.3.1547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02057ce59 code=0x7ffc0000 [ 386.020267][ T5704] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 386.050990][ T5704] usb 3-1: device descriptor read/8, error -71 [ 386.162596][ T5704] usb usb3-port1: unable to enumerate USB device [ 386.306416][T10755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.466389][ T5704] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 386.627214][ T5704] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.627268][ T5704] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.628300][ T5704] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 386.628321][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 386.628336][ T5704] usb 6-1: SerialNumber: syz [ 386.760946][T10755] netlink: 'syz.3.1551': attribute type 1 has an invalid length. [ 386.761538][T10755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.735400][ T5607] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 387.755563][T10751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.755870][T10751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.905325][ T5704] usb 6-1: 0:2 : does not exist [ 387.908387][ T5607] usb 4-1: Using ep0 maxpacket: 16 [ 387.916753][ T5607] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 387.916803][ T5607] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 387.916828][ T5607] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 387.916855][ T5607] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 387.916879][ T5607] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 387.916905][ T5607] usb 4-1: config 1 interface 0 has no altsetting 0 [ 387.916938][ T5607] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 387.916963][ T5607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.964093][ T5607] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 388.029447][ T5704] usb 6-1: USB disconnect, device number 17 [ 388.059808][ T5593] udevd[5593]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.159124][ T31] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 388.160418][ T5607] scsi host1: usb-storage 4-1:1.0 [ 388.311056][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 388.312584][ T31] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.312619][ T31] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 388.312647][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 388.312681][ T31] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 388.312699][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.316058][ T31] usb 3-1: config 0 descriptor?? [ 388.413469][ T5607] usb 4-1: USB disconnect, device number 59 [ 388.582663][T10791] FAULT_INJECTION: forcing a failure. [ 388.582663][T10791] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 388.582704][T10791] CPU: 0 UID: 0 PID: 10791 Comm: syz.5.1565 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 388.582728][T10791] Tainted: [L]=SOFTLOCKUP [ 388.582749][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.582765][T10791] Call Trace: [ 388.582774][T10791] [ 388.582784][T10791] dump_stack_lvl+0xe8/0x150 [ 388.582816][T10791] should_fail_ex+0x467/0x600 [ 388.582857][T10791] prepare_alloc_pages+0x223/0x690 [ 388.582971][T10791] __alloc_frozen_pages_noprof+0x12f/0x380 [ 388.583005][T10791] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 388.583036][T10791] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 388.583070][T10791] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 388.583094][T10791] ? __pfx_policy_nodemask+0x10/0x10 [ 388.583156][T10791] __alloc_pages_noprof+0x10/0x100 [ 388.583188][T10791] alloc_pages_bulk_noprof+0x67e/0x890 [ 388.583218][T10791] ? alloc_pages_mpol+0x115/0x280 [ 388.583251][T10791] ? alloc_pages_noprof+0x161/0x2f0 [ 388.583291][T10791] __kasan_populate_vmalloc+0xb7/0x1c0 [ 388.583317][T10791] ? rt_spin_unlock+0x160/0x200 [ 388.583348][T10791] alloc_vmap_area+0xd1a/0x1420 [ 388.583379][T10791] ? __pfx_alloc_vmap_area+0x10/0x10 [ 388.583405][T10791] ? __kasan_kmalloc+0x93/0xb0 [ 388.583442][T10791] ? __kmalloc_cache_node_noprof+0x279/0x6f0 [ 388.583473][T10791] ? __get_vm_area_node+0x136/0x300 [ 388.583499][T10791] __get_vm_area_node+0x1f2/0x300 [ 388.583525][T10791] __vmalloc_node_range_noprof+0x358/0x1730 [ 388.583554][T10791] ? kvm_arch_prepare_memory_region+0x335/0x1010 [ 388.583581][T10791] ? stack_depot_save_flags+0x33/0x800 [ 388.583616][T10791] ? kasan_save_track+0x4f/0x80 [ 388.583644][T10791] ? __se_sys_ioctl+0xff/0x170 [ 388.583683][T10791] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 388.583718][T10791] ? do_raw_spin_lock+0x12b/0x2f0 [ 388.583737][T10791] ? kvm_arch_prepare_memory_region+0x335/0x1010 [ 388.583756][T10791] __vmalloc_noprof+0xd2/0x120 [ 388.583797][T10791] ? kvm_arch_prepare_memory_region+0x335/0x1010 [ 388.583828][T10791] kvm_arch_prepare_memory_region+0x335/0x1010 [ 388.583855][T10791] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 388.583892][T10791] ? mutex_lock_nested+0x152/0x1d0 [ 388.583912][T10791] ? kvm_set_memslot+0x3c/0x1320 [ 388.583951][T10791] kvm_set_memslot+0x581/0x1320 [ 388.583978][T10791] ? __kmalloc_cache_noprof+0x3a2/0x690 [ 388.584007][T10791] ? kvm_set_memory_region+0x6da/0xb80 [ 388.584037][T10791] kvm_set_memory_region+0x93d/0xb80 [ 388.584072][T10791] kvm_vm_ioctl_set_memory_region+0x72/0xa0 [ 388.584094][T10791] kvm_vm_ioctl+0xb98/0xd30 [ 388.584136][T10791] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 388.584177][T10791] ? lock_release+0x4b/0x3c0 [ 388.584202][T10791] ? kfree+0x1c5/0x6c0 [ 388.584223][T10791] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 388.584246][T10791] ? tomoyo_path_number_perm+0x219/0x5f0 [ 388.584271][T10791] ? do_vfs_ioctl+0x1184/0x1550 [ 388.584305][T10791] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 388.584338][T10791] ? rcu_is_watching+0x15/0xb0 [ 388.584373][T10791] ? trace_irq_enable+0x3b/0x140 [ 388.584397][T10791] ? hook_file_ioctl+0x1f3/0x600 [ 388.584493][T10791] ? __asan_memset+0x22/0x50 [ 388.584515][T10791] ? smack_file_ioctl+0x331/0x360 [ 388.584601][T10791] ? __pfx_smack_file_ioctl+0x10/0x10 [ 388.584642][T10791] ? __fget_files+0x2a/0x420 [ 388.584668][T10791] ? __fget_files+0x3a8/0x420 [ 388.584694][T10791] ? __fget_files+0x2a/0x420 [ 388.584724][T10791] ? bpf_lsm_file_ioctl+0x9/0x20 [ 388.584749][T10791] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 388.584775][T10791] __se_sys_ioctl+0xff/0x170 [ 388.584808][T10791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.584831][T10791] do_syscall_64+0x174/0x580 [ 388.584853][T10791] ? trace_irq_disable+0x3b/0x140 [ 388.584878][T10791] ? clear_bhb_loop+0x40/0x90 [ 388.584900][T10791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.584922][T10791] RIP: 0033:0x7f7a3231ce59 [ 388.584942][T10791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.584960][T10791] RSP: 002b:00007f7a30576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.584985][T10791] RAX: ffffffffffffffda RBX: 00007f7a32595fa0 RCX: 00007f7a3231ce59 [ 388.585002][T10791] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000004 [ 388.585019][T10791] RBP: 00007f7a30576090 R08: 0000000000000000 R09: 0000000000000000 [ 388.585033][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.585046][T10791] R13: 00007f7a32596038 R14: 00007f7a32595fa0 R15: 00007ffddc991928 [ 388.585070][T10791] [ 388.601303][T10791] syz.5.1565: vmalloc error: size 4, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 388.601500][T10791] CPU: 0 UID: 0 PID: 10791 Comm: syz.5.1565 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 388.601553][T10791] Tainted: [L]=SOFTLOCKUP [ 388.601583][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.601622][T10791] Call Trace: [ 388.601638][T10791] [ 388.601648][T10791] dump_stack_lvl+0xe8/0x150 [ 388.601679][T10791] warn_alloc+0x24c/0x270 [ 388.601750][T10791] ? trace_irq_enable+0x3b/0x140 [ 388.601812][T10791] ? __pfx_warn_alloc+0x10/0x10 [ 388.601841][T10791] ? __get_vm_area_node+0x20b/0x300 [ 388.601916][T10791] ? __get_vm_area_node+0x20b/0x300 [ 388.601963][T10791] __vmalloc_node_range_noprof+0x37d/0x1730 [ 388.602000][T10791] ? stack_depot_save_flags+0x33/0x800 [ 388.602071][T10791] ? kasan_save_track+0x4f/0x80 [ 388.602121][T10791] ? __se_sys_ioctl+0xff/0x170 [ 388.602195][T10791] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 388.602265][T10791] ? do_raw_spin_lock+0x12b/0x2f0 [ 388.602293][T10791] ? kvm_arch_prepare_memory_region+0x335/0x1010 [ 388.602354][T10791] __vmalloc_noprof+0xd2/0x120 [ 388.602419][T10791] ? kvm_arch_prepare_memory_region+0x335/0x1010 [ 388.602457][T10791] kvm_arch_prepare_memory_region+0x335/0x1010 [ 388.602525][T10791] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 388.602597][T10791] ? mutex_lock_nested+0x152/0x1d0 [ 388.602646][T10791] ? kvm_set_memslot+0x3c/0x1320 [ 388.602713][T10791] kvm_set_memslot+0x581/0x1320 [ 388.602753][T10791] ? __kmalloc_cache_noprof+0x3a2/0x690 [ 388.602819][T10791] ? kvm_set_memory_region+0x6da/0xb80 [ 388.602899][T10791] kvm_set_memory_region+0x93d/0xb80 [ 388.602935][T10791] kvm_vm_ioctl_set_memory_region+0x72/0xa0 [ 388.602964][T10791] kvm_vm_ioctl+0xb98/0xd30 [ 388.603043][T10791] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 388.603092][T10791] ? lock_release+0x4b/0x3c0 [ 388.603165][T10791] ? kfree+0x1c5/0x6c0 [ 388.603208][T10791] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 388.603234][T10791] ? tomoyo_path_number_perm+0x219/0x5f0 [ 388.603300][T10791] ? do_vfs_ioctl+0x1184/0x1550 [ 388.603368][T10791] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 388.603435][T10791] ? rcu_is_watching+0x15/0xb0 [ 388.603515][T10791] ? trace_irq_enable+0x3b/0x140 [ 388.603541][T10791] ? hook_file_ioctl+0x1f3/0x600 [ 388.603630][T10791] ? __asan_memset+0x22/0x50 [ 388.603673][T10791] ? smack_file_ioctl+0x331/0x360 [ 388.603719][T10791] ? __pfx_smack_file_ioctl+0x10/0x10 [ 388.603817][T10791] ? __fget_files+0x2a/0x420 [ 388.603845][T10791] ? __fget_files+0x3a8/0x420 [ 388.603905][T10791] ? __fget_files+0x2a/0x420 [ 388.603971][T10791] ? bpf_lsm_file_ioctl+0x9/0x20 [ 388.603998][T10791] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 388.604056][T10791] __se_sys_ioctl+0xff/0x170 [ 388.604128][T10791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.604154][T10791] do_syscall_64+0x174/0x580 [ 388.604224][T10791] ? trace_irq_disable+0x3b/0x140 [ 388.604283][T10791] ? clear_bhb_loop+0x40/0x90 [ 388.604318][T10791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.604388][T10791] RIP: 0033:0x7f7a3231ce59 [ 388.604436][T10791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.604464][T10791] RSP: 002b:00007f7a30576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.604487][T10791] RAX: ffffffffffffffda RBX: 00007f7a32595fa0 RCX: 00007f7a3231ce59 [ 388.604503][T10791] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000004 [ 388.604519][T10791] RBP: 00007f7a30576090 R08: 0000000000000000 R09: 0000000000000000 [ 388.604533][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.604546][T10791] R13: 00007f7a32596038 R14: 00007f7a32595fa0 R15: 00007ffddc991928 [ 388.604572][T10791] [ 388.615441][T10791] Mem-Info: [ 388.615491][T10791] active_anon:193 inactive_anon:45691 isolated_anon:0 [ 388.615491][T10791] active_file:15827 inactive_file:43343 isolated_file:0 [ 388.615491][T10791] unevictable:768 dirty:297 writeback:0 [ 388.615491][T10791] slab_reclaimable:10492 slab_unreclaimable:102746 [ 388.615491][T10791] mapped:30929 shmem:40127 pagetables:1597 [ 388.615491][T10791] sec_pagetables:0 bounce:0 [ 388.615491][T10791] kernel_misc_reclaimable:0 [ 388.615491][T10791] free:1266150 free_pcp:2020 free_cma:0 [ 388.615585][T10791] Node 0 active_anon:772kB inactive_anon:182764kB active_file:63048kB inactive_file:173372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123676kB dirty:1188kB writeback:0kB shmem:158972kB kernel_stack:15244kB pagetables:6260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 388.615693][T10791] Node 1 active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 388.615832][T10791] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.615976][T10791] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 388.616098][T10791] Node 0 DMA32 free:1121356kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:772kB inactive_anon:182764kB active_file:63048kB inactive_file:173372kB unevictable:1536kB writepending:1188kB zspages:0kB present:3129332kB managed:2566024kB mlocked:0kB bounce:0kB free_pcp:8080kB local_pcp:1468kB free_cma:0kB [ 388.616236][T10791] lowmem_reserve[]: 0 0 0 0 0 [ 388.616295][T10791] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.616440][T10791] lowmem_reserve[]: 0 0 0 0 0 [ 388.616498][T10791] Node 1 Normal free:3927884kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.616623][T10791] lowmem_reserve[]: 0 0 0 0 0 [ 388.616718][T10791] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 388.619400][T10791] Node 0 DMA32: 729*4kB (UME) 875*8kB (UME) 417*16kB (UME) 283*32kB (UME) 177*64kB (UME) 103*128kB (UME) 32*256kB (UME) 22*512kB (UME) 15*1024kB (UM) 4*2048kB (UME) 251*4096kB (UM) = 1121260kB [ 388.619735][T10791] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 388.619964][T10791] Node 1 Normal: 1*4kB (U) 3*8kB (U) 9*16kB (UM) 11*32kB (U) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 957*4096kB (M) = 3927884kB [ 388.620291][T10791] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 388.620335][T10791] Node 0 hugepages_total=7 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 388.620355][T10791] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 388.620448][T10791] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 388.620491][T10791] 99293 total pagecache pages [ 388.620506][T10791] 0 pages in swap cache [ 388.620515][T10791] Free swap = 124996kB [ 388.620534][T10791] Total swap = 124996kB [ 388.620543][T10791] 2097051 pages RAM [ 388.620552][T10791] 0 pages HighMem/MovableOnly [ 388.620574][T10791] 423882 pages reserved [ 388.620604][T10791] 0 pages cma reserved [ 388.665352][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 388.827654][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 388.832791][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 388.832872][ T9] usb 5-1: config 179 has no interface number 0 [ 388.832969][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 388.833053][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 388.833130][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 388.833213][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 388.833289][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 388.833431][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 388.833507][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.861079][T10789] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 388.997116][ T31] uclogic 0003:5543:0005.0021: unknown main item tag 0x7 [ 388.997161][ T31] uclogic 0003:5543:0005.0021: unknown main item tag 0x0 [ 388.997222][ T31] uclogic 0003:5543:0005.0021: unknown main item tag 0x1 [ 388.997251][ T31] uclogic 0003:5543:0005.0021: reserved main item tag 0xd [ 389.208876][ T31] uclogic 0003:5543:0005.0021: hidraw0: USB HID v0.77 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0 [ 390.024799][ T5607] usb 3-1: USB disconnect, device number 67 [ 390.105706][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input47 [ 390.174377][T10793] fido_id[10793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 390.212956][ T5579] usb 5-1: USB disconnect, device number 53 [ 390.212964][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 390.213010][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 391.669500][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 391.669618][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 391.820760][ T5579] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 392.032968][ T5579] usb 4-1: Using ep0 maxpacket: 32 [ 392.037557][ T5579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.037596][ T5579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.037621][ T5579] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 392.037663][ T5579] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 392.037690][ T5579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.100173][ T5579] usb 4-1: config 0 descriptor?? [ 392.926874][T10854] FAULT_INJECTION: forcing a failure. [ 392.926874][T10854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.926916][T10854] CPU: 0 UID: 0 PID: 10854 Comm: syz.2.1585 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 392.926962][T10854] Tainted: [L]=SOFTLOCKUP [ 392.926972][T10854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.926988][T10854] Call Trace: [ 392.926997][T10854] [ 392.927006][T10854] dump_stack_lvl+0xe8/0x150 [ 392.927038][T10854] should_fail_ex+0x467/0x600 [ 392.927074][T10854] _copy_from_user+0x2d/0xb0 [ 392.927101][T10854] ___sys_recvmsg+0x173/0x5a0 [ 392.927130][T10854] ? __pfx___schedule+0x10/0x10 [ 392.927164][T10854] ? __pfx____sys_recvmsg+0x10/0x10 [ 392.927194][T10854] ? rcu_is_watching+0x15/0xb0 [ 392.927240][T10854] do_recvmmsg+0x320/0x7f0 [ 392.927274][T10854] ? __pfx_do_recvmmsg+0x10/0x10 [ 392.927301][T10854] ? trace_irq_enable+0x3b/0x140 [ 392.927330][T10854] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 392.927367][T10854] __x64_sys_recvmmsg+0x198/0x250 [ 392.927398][T10854] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 392.927430][T10854] ? rcu_is_watching+0x15/0xb0 [ 392.927461][T10854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.927481][T10854] do_syscall_64+0x174/0x580 [ 392.927502][T10854] ? trace_irq_disable+0x3b/0x140 [ 392.927526][T10854] ? clear_bhb_loop+0x40/0x90 [ 392.927552][T10854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.927576][T10854] RIP: 0033:0x7f7c8244ce59 [ 392.927596][T10854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.927616][T10854] RSP: 002b:00007f7c8067d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 392.927641][T10854] RAX: ffffffffffffffda RBX: 00007f7c826c6090 RCX: 00007f7c8244ce59 [ 392.927658][T10854] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000003 [ 392.927673][T10854] RBP: 00007f7c8067d090 R08: 0000000000000000 R09: 0000000000000000 [ 392.927688][T10854] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 392.927704][T10854] R13: 00007f7c826c6128 R14: 00007f7c826c6090 R15: 00007ffc73d6b118 [ 392.927732][T10854] [ 393.073101][ T5579] usbhid 4-1:0.0: can't add hid device: -71 [ 393.073201][ T5579] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 393.190076][ T5579] usb 4-1: USB disconnect, device number 60 [ 393.607954][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 393.846989][T10865] bond0: entered promiscuous mode [ 393.847015][T10865] bond_slave_0: entered promiscuous mode [ 393.849256][T10865] bond_slave_1: entered promiscuous mode [ 393.901957][T10865] bond0: left promiscuous mode [ 393.901984][T10865] bond_slave_0: left promiscuous mode [ 393.902164][T10865] bond_slave_1: left promiscuous mode [ 393.935035][T10868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1591'. [ 394.173119][ T5591] Bluetooth: hci5: command 0x0405 tx timeout [ 394.442987][ T6447] ------------[ cut here ]------------ [ 394.443006][ T6447] in_task() && kcov_mode_enabled(mode) [ 394.443021][ T6447] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5bb/0x6f0, CPU#1: kworker/u8:19/6447 [ 394.443135][ T6447] Modules linked in: [ 394.443161][ T6447] CPU: 1 UID: 0 PID: 6447 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 394.443200][ T6447] Tainted: [L]=SOFTLOCKUP [ 394.443209][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 394.443227][ T6447] Workqueue: events_unbound cfg80211_wiphy_work [ 394.443342][ T6447] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 394.443374][ T6447] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc 96 e1 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 87 47 5c 09 89 c0 48 c7 c7 c0 52 6e [ 394.443396][ T6447] RSP: 0018:ffffc9000703f9f8 EFLAGS: 00010202 [ 394.443417][ T6447] RAX: 0000000000000000 RBX: ffff888026979f00 RCX: 0000000080000001 [ 394.443436][ T6447] RDX: 0000000000000000 RSI: ffffffff8ba7f080 RDI: ffffffff8ba7f040 [ 394.443455][ T6447] RBP: ffff88803a29a3c0 R08: 0000000000000000 R09: 0000000000000000 [ 394.443473][ T6447] R10: dffffc0000000000 R11: fffffbfff1f1375f R12: dffffc0000000000 [ 394.443493][ T6447] R13: ffff888039f05f58 R14: 0000000000000000 R15: ffff888061781180 [ 394.443513][ T6447] FS: 0000000000000000(0000) GS:ffff888126244000(0000) knlGS:0000000000000000 [ 394.443535][ T6447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.443553][ T6447] CR2: 00007fd603c58e9c CR3: 0000000028b0c000 CR4: 00000000003526f0 [ 394.443576][ T6447] Call Trace: [ 394.443586][ T6447] [ 394.443600][ T6447] ieee80211_iface_work+0x20c/0x1010 [ 394.443669][ T6447] cfg80211_wiphy_work+0x29e/0x420 [ 394.443732][ T6447] ? process_scheduled_works+0xa20/0x14e0 [ 394.443802][ T6447] process_scheduled_works+0xa8e/0x14e0 [ 394.443865][ T6447] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.443901][ T6447] ? do_raw_spin_lock+0x12b/0x2f0 [ 394.443932][ T6447] ? assign_work+0x3cf/0x5d0 [ 394.443970][ T6447] worker_thread+0xa47/0xfb0 [ 394.444022][ T6447] kthread+0x388/0x470 [ 394.444084][ T6447] ? __pfx_worker_thread+0x10/0x10 [ 394.444121][ T6447] ? __pfx_kthread+0x10/0x10 [ 394.444151][ T6447] ret_from_fork+0x514/0xb70 [ 394.444201][ T6447] ? __pfx_ret_from_fork+0x10/0x10 [ 394.444232][ T6447] ? __switch_to+0xc89/0x1420 [ 394.444275][ T6447] ? __pfx_kthread+0x10/0x10 [ 394.444304][ T6447] ret_from_fork_asm+0x1a/0x30 [ 394.444347][ T6447] [ 394.444367][ T6447] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 394.444391][ T6447] CPU: 1 UID: 0 PID: 6447 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 394.444428][ T6447] Tainted: [L]=SOFTLOCKUP [ 394.444439][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 394.444456][ T6447] Workqueue: events_unbound cfg80211_wiphy_work [ 394.444493][ T6447] Call Trace: [ 394.444503][ T6447] [ 394.444513][ T6447] vpanic+0x56c/0xa60 [ 394.444560][ T6447] ? __pfx__printk+0x10/0x10 [ 394.444597][ T6447] ? __pfx_vpanic+0x10/0x10 [ 394.444628][ T6447] ? is_bpf_text_address+0x292/0x2b0 [ 394.444664][ T6447] ? is_bpf_text_address+0x26/0x2b0 [ 394.444704][ T6447] panic+0xc5/0xd0 [ 394.444735][ T6447] ? __pfx_panic+0x10/0x10 [ 394.444772][ T6447] ? ret_from_fork_asm+0x1a/0x30 [ 394.444809][ T6447] __warn+0x315/0x4c0 [ 394.444848][ T6447] ? kcov_remote_start+0x5bb/0x6f0 [ 394.444878][ T6447] ? kcov_remote_start+0x5bb/0x6f0 [ 394.444905][ T6447] __report_bug+0x331/0x530 [ 394.444975][ T6447] ? kcov_remote_start+0x5bb/0x6f0 [ 394.445004][ T6447] ? __pfx___report_bug+0x10/0x10 [ 394.445031][ T6447] ? do_raw_spin_lock+0x12b/0x2f0 [ 394.445057][ T6447] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 394.445096][ T6447] ? rt_spin_lock+0x1e0/0x400 [ 394.445127][ T6447] ? rcu_is_watching+0x15/0xb0 [ 394.445164][ T6447] ? lock_acquire+0x5f/0x350 [ 394.445194][ T6447] ? kcov_remote_start+0x5bb/0x6f0 [ 394.445222][ T6447] report_bug+0x16a/0x220 [ 394.445249][ T6447] ? kcov_remote_start+0x5bb/0x6f0 [ 394.445274][ T6447] ? kcov_remote_start+0x5bd/0x6f0 [ 394.445301][ T6447] handle_bug+0x9c/0x200 [ 394.445329][ T6447] exc_invalid_op+0x1a/0x50 [ 394.445359][ T6447] asm_exc_invalid_op+0x1a/0x20 [ 394.445384][ T6447] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 394.445414][ T6447] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc 96 e1 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 87 47 5c 09 89 c0 48 c7 c7 c0 52 6e [ 394.445437][ T6447] RSP: 0018:ffffc9000703f9f8 EFLAGS: 00010202 [ 394.445459][ T6447] RAX: 0000000000000000 RBX: ffff888026979f00 RCX: 0000000080000001 [ 394.445475][ T6447] RDX: 0000000000000000 RSI: ffffffff8ba7f080 RDI: ffffffff8ba7f040 [ 394.445494][ T6447] RBP: ffff88803a29a3c0 R08: 0000000000000000 R09: 0000000000000000 [ 394.445511][ T6447] R10: dffffc0000000000 R11: fffffbfff1f1375f R12: dffffc0000000000 [ 394.445530][ T6447] R13: ffff888039f05f58 R14: 0000000000000000 R15: ffff888061781180 [ 394.445557][ T6447] ? kcov_remote_start+0xda/0x6f0 [ 394.445586][ T6447] ieee80211_iface_work+0x20c/0x1010 [ 394.445622][ T6447] cfg80211_wiphy_work+0x29e/0x420 [ 394.445667][ T6447] ? process_scheduled_works+0xa20/0x14e0 [ 394.445705][ T6447] process_scheduled_works+0xa8e/0x14e0 [ 394.445757][ T6447] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.445791][ T6447] ? do_raw_spin_lock+0x12b/0x2f0 [ 394.445822][ T6447] ? assign_work+0x3cf/0x5d0 [ 394.445870][ T6447] worker_thread+0xa47/0xfb0 [ 394.445922][ T6447] kthread+0x388/0x470 [ 394.445949][ T6447] ? __pfx_worker_thread+0x10/0x10 [ 394.445985][ T6447] ? __pfx_kthread+0x10/0x10 [ 394.446013][ T6447] ret_from_fork+0x514/0xb70 [ 394.446043][ T6447] ? __pfx_ret_from_fork+0x10/0x10 [ 394.446072][ T6447] ? __switch_to+0xc89/0x1420 [ 394.446113][ T6447] ? __pfx_kthread+0x10/0x10 [ 394.446142][ T6447] ret_from_fork_asm+0x1a/0x30 [ 394.446184][ T6447] [ 394.446801][ T6447] Kernel Offset: disabled