last executing test programs: 7m9.018856875s ago: executing program 0 (id=89): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), &(0x7f0000000440)=@v3={0x3000000, [{0x6, 0x5}, {0xfffffff7}], r1}, 0x18, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'gretap0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000bf000000bf00000007000000040000000600008503000000030000000400000002000000100000000300000038404baf927d090000000500000001000000000001001000000003000000740a00000300000005000000070000000a00000004000000ff07000002000000000000010000000015001f06030000000200000f0300000005000000090000005bf8ffff0500000000000000081000005b28a20900f9ffffff000b05000000090000000000000e0400000001000000010000000000000c02000000080000002900de06000000000000"], &(0x7f00000005c0)=""/4096, 0xdf, 0x1000, 0x0, 0xf, 0x10000}, 0x28) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000bf000000bf00000007000000040000000600008503000000030000000400000002000000100000000300000038404baf927d090000000500000001000000000001001000000003000000740a00000300000005000000070000000a00000004000000ff07000002000000000000010000000015001f06030000000200000f0300000005000000090000005bf8ffff0500000000000000081000005b28a20900f9ffffff000b05000000090000000000000e0400000001000000010000000000000c02000000080000002900de06000000000000"], &(0x7f00000005c0)=""/4096, 0xdf, 0x1000, 0x0, 0xf, 0x10000}, 0x28) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) getdents64(r4, &(0x7f0000000480)=""/121, 0x79) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@bloom_filter={0x1e, 0x1, 0x4, 0x3, 0x10008, 0xffffffffffffffff, 0x800, '\x00', r2, r3, 0x4, 0x2, 0x2, 0xa, @void, @value, @value=r4}, 0x50) write$cgroup_int(r4, &(0x7f0000000180)=0x5, 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) fsopen(&(0x7f0000000300)='ceph\x00', 0x1) (async) r5 = fsopen(&(0x7f0000000300)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r5], 0xfe33) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r5], 0xfe33) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x400480, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 7m8.843060052s ago: executing program 0 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000a006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00002000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000611810000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f0000000300)={0x8}, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000040)=0x58bdcccb) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r4, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 7m7.497192894s ago: executing program 0 (id=91): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="2000005e416c7a00000044ea7c57f68c0c14eb57f3dd2c3a064aed20bbacacebb3f0e4c3426b693c044ad18be29060f31caaad371cad4ac1d7e5a3eb399cc9851129ba86a81bcd7ac89e3cdb515a513475745749b0367b7e7ddf04", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x19}, 0x2c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0) ppoll(&(0x7f0000000080)=[{r7, 0x5004}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000001040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa39080048fa00340066000004069078ac1414bbac1e010144042e8183036889039700004e254e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) dup(r8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r9, &(0x7f00000014c0)=""/102396, 0x18ffc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)=0x8) 7m2.771673883s ago: executing program 0 (id=105): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 7m0.442392551s ago: executing program 0 (id=115): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m59.848643234s ago: executing program 0 (id=120): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0x9, 0x4, 0x1, 0x23, 0x24, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0xf, 0x0, [{0x6, 0x7, "80c014fe52"}, {0x2, 0x2}]}]}}}}}) r0 = syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYRES16], 0x0) (rerun: 64) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) (async) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7799ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x4924924924924b1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0x3ff, 0x1, 0x2826}, 0x10) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100}}, 0x1c}}, 0x990) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 6m44.466181428s ago: executing program 32 (id=120): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0x9, 0x4, 0x1, 0x23, 0x24, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0xf, 0x0, [{0x6, 0x7, "80c014fe52"}, {0x2, 0x2}]}]}}}}}) r0 = syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYRES16], 0x0) (rerun: 64) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) (async) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7799ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x4924924924924b1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0x3ff, 0x1, 0x2826}, 0x10) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100}}, 0x1c}}, 0x990) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 1m21.704711282s ago: executing program 1 (id=1340): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000240)={0x1000000, 0xffff, 0x0, 0x1}) 1m21.529633618s ago: executing program 1 (id=1344): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x3}, 0x3fffff}], 0x1, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x4}) epoll_wait(r0, &(0x7f0000000240)=[{}], 0x1, 0x404) close(r1) 1m20.505577551s ago: executing program 1 (id=1346): r0 = socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109b000000000006"], 0x0, 0x8000005}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000340)={0x6, {{0x2, 0x4e22, @multicast2}}}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0xa0040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x10, r2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000a9c000/0x2000)=nil, 0x2000, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40842, 0x21) close(r6) socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x409, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='dvmrp1\x00', 0x10) sendfile(r9, r8, &(0x7f0000002080)=0x58, 0x12) setsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f0000000040), 0x4) 1m19.655959137s ago: executing program 1 (id=1352): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1m19.421825673s ago: executing program 1 (id=1353): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0xd}, 0x94) 1m14.207126343s ago: executing program 1 (id=1375): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1, 0x1000}, 0x50) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) sync_file_range(r0, 0xe, 0x7fffffff, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, 0x1}, 0xc) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r4, &(0x7f0000004500)={0x28, 0x0, r5, {{0x1, 0x7, 0x1, r6}}}, 0x8a) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' '], 0x8840) 9.167138438s ago: executing program 5 (id=1665): socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1097}, 0x94) userfaultfd(0x80001) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) inotify_init1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x5}, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.961893775s ago: executing program 5 (id=1675): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) exit(0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xb0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fanotify_init(0x40, 0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x21}) 7.454608845s ago: executing program 4 (id=1681): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) (fail_nth: 4) 6.938105898s ago: executing program 4 (id=1682): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) 6.85352701s ago: executing program 5 (id=1683): r0 = socket(0x22, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{}, [@ldst={0x7, 0x3, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x2}, 0x90) select(0x40, &(0x7f0000000380)={0x8, 0x8000000000000000, 0xfe00000000000000, 0x3, 0x1000, 0x2, 0x9f3, 0x2040000}, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc3) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r7, 0x0) read(0xffffffffffffffff, &(0x7f0000000340)=""/111, 0x6f) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e0e000000000000006e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x9, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_READV_FIXED={0x3c, 0x0, 0x0, @fd_index, 0x4, &(0x7f0000000700)=[{&(0x7f0000000800)=""/172, 0xac}, {&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/11, 0xb}], 0x4, 0x10, 0x0, {0x2, 0x0, 0x6, '\x00', &(0x7f00000007c0)={0x637, 0x800, 0x43, &(0x7f0000000740)="df85bf9833822851425414f7779ea60d52ed28918225c71db591a575f33152e834178ef647641664ee9449bbbd9146603b411988185307fa8ff81fd37b679b4a23b7e5", 0x100000000}, 0x4}}) io_uring_enter(r1, 0x6a6a, 0x8cd7, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 6.406910329s ago: executing program 4 (id=1685): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x10, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="79104800000000006900320f0000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x500}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000050) socket(0xa, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r1, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x10000000) inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 6.24793613s ago: executing program 5 (id=1686): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0xb4, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x88, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x78, 0x1, [@m_tunnel_key={0x74, 0xf, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x5c, 0x0, 0x305, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x9, 0x80000001, 0xfffffff2, 0x800]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (fail_nth: 3) 6.178874535s ago: executing program 2 (id=1687): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r0, &(0x7f0000000300), 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='!:my_read_msr1 msr/read_msr\n', 0x1c) 5.971552652s ago: executing program 2 (id=1688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009d973ec5f18fb6ba25bfa35134f1ac8166b3890c15b91f5b889b123d67dd9a32cecc7f77f10fa999308a29f10bf118353a61ff9cf0bfc00a2970825a97100c0e434d9f93dac5ae9cd91c4e136a91ab89b372de3f52b353f1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=[@mark={{0x18, 0x1, 0x24, 0x8}}], 0x18}}], 0x1, 0x20000055) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="10005a800c0000800500020048000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 5.584878014s ago: executing program 2 (id=1689): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) (async) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aa0000000060a010400000000000000000a0004050900010073797a310000000074000480500001800a000100696e6e65720000004000028008000440000000171c0005800c0001007061796c6f6164000c0002800800024000000002080003400000000208000240000000b3080001400000000010000180090001006861736800000000100001800a00010072616e67650000000900020073797a32"], 0x324}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delchain={0x24, 0x65, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x5, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x410) 5.14311627s ago: executing program 4 (id=1691): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) gettid() timer_create(0x3, &(0x7f0000000800)={0x0, 0x21, 0x4, @thr={&(0x7f0000000280)="56464755788a921468de1483f17f645c3062a37a7a90122a0c8c587176a5a1eeda66e3624bc09b209e90a0e5b436cd1f0d36b1d12050b0c474406a24738c770812ff09abbcf41c22d0d68b9dc31eda7bd1", &(0x7f00000004c0)="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"}}, &(0x7f0000000000)) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) mlock(&(0x7f000087f000/0x4000)=nil, 0x4000) pread64(r1, &(0x7f0000001000)=""/86, 0x56, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x14, 0x100, 0x70bd31, 0x25dfdbff, {0x28, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47061aefad04000000"}]}, 0xfffffffffffffe35}, 0x1, 0x0, 0x0, 0x24000841}, 0x2400d840) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x1000) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080)=0x21, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102cc2c0008da0b400167f70102030109021b000100000002090431"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4081, 0xff1}], 0x1, 0x3000, 0x0, 0x9) 4.573432982s ago: executing program 5 (id=1694): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6tnl0\x00', r3, 0x4, 0xb, 0x34, 0x6, 0x9, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x10, 0x99cc, 0xfffffffa}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e14"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffb, 0x0, 0x8, 0xfefffffc, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r5, 0x2, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(r2, &(0x7f0000000400)='./file0\x00', 0x220e41, 0x141) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000001340)) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r9, &(0x7f00000002c0)=""/4096, 0x1000) r10 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(r10, 0x400, 0x2) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000001380)={0x80}) setrlimit(0x8, &(0x7f0000000080)={0x5, 0xff2}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000200)=0x1ff, 0x4) 4.423274665s ago: executing program 2 (id=1695): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 4.211477955s ago: executing program 2 (id=1696): prctl$PR_GET_SECCOMP(0x15) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0xef, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x942, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xf8, 0x6, 0xbb}}}}}]}}]}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000040000000280e3486a776fef0c490000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1b4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000fffc0500010007000000050004000000000009d0090000797a310000000018000780050003001f0000000c00018008000140ffffffff05000100070000000500010006000000"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) getpeername$netlink(r1, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r9, 0x1, 0x28, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.895068096s ago: executing program 3 (id=1704): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x10, 0x10, 0x80, 0x8, 0x8, 0x8, 0x7}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x280c0) (async) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000140)=""/144, &(0x7f0000000380)=0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendto(r2, &(0x7f00000003c0)="327d689cee46d26c9469a1f9d0", 0xd, 0x8004, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016000200000006001800"], 0x50}}, 0x4080) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002f0009de26bd7000fd000000040000000c0017000200000000000000289fc83c1cad4dddff7c4d77d445de23b80ef068ed979fbf462cbec01f4c55679fa86853324e5fefeeb9bb880daba9ff18bf7217fc6bf152ead940cda2de1a9b8c25a4a555b0afbd3ce7c91ac23924e75e4982dfa6b6a4421dcfa031b126de0f420a59385ad1f73da9aaa4ac97ec35f628fa20ac8fd9e1dfb26f2aa4aac03b9ecdeb8c5523012a1e8733adaed3d4e249801f099fa394"], 0x20}}, 0x80000) 1.690560564s ago: executing program 5 (id=1705): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x30f2}, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000000840)={&(0x7f00000007c0)=[{&(0x7f0000000480)="636eb65808c69f76ad2a10a30f4b03ca8e590e6ff73ed338403e10900850962923f31a4c6db224eb78dd99fb8d8e4f889a7853f5d7c70ca506e9927c86f00db6072afe20dee4f11d95d19df43cac6bd848e616bdb7f2ca0da5ce185bf9cc9ec3ba6d4dc0c27270557300d5fe2e3b2e52df8c91108e5ec46791b5a4bee4f222f292a4cd021e1c853701d6b3daf501cff9fb5512b3f1931c1848e5da21a0b6a1d99b4c8ff93ec5043a7b69c803bfeb12ab0691adb2d73e821d9b611fa2bed31210b5b425b5bfa6e86b4c504e9c70dff89ffaed59be1c190fad8d3dd1e8d5b9296c5a34cad569469c8156fe181e6b8115589d9b2b849b81c1b5", 0xf8}, {&(0x7f0000000580)="fbcb24e69db0ed19409dedec8a58c35d636a3c1df2a9ba71b62ddee9abd6e75af8284461451cff0b5ad5e282bb6a21f65050fb6de74fccca2318b58ef36f7a351fadedb9952ffbd1627d4d67b27a35899a1930a62b68a8612f8ad7cd566fd9fbe9244a7069a156a19fe7", 0x6a}, {&(0x7f0000000600)="14a6abb47c0c44d2141596c0423ed43368c2f437fd6665122c81ce61efab231319ea8bff6c50a6275cf642937b4cc30a1b6566ff2411ceceadcdae365a2e2f5e4f270d8e4aa198c5e8674e046cd4f2dd833b", 0x52}, {&(0x7f0000000680)="a679d5200f11c546004ef23f1b29c79a8c586b331330fd4cfade1d7b70b9b4e2be0e5ae6134e7c7e11a451cb9b350a8986cd1f0942acbcca1c830ed1e86c3ac524717214ab3feccdf9a38dd345eeb465921d2a589626e5445a830562afa674cb05ade012", 0x64}, {&(0x7f0000000700)="30d67987d33cf399f00d1cd0ddd2d666383ac9793a9443e6fb8d771e7ee8ed238361746d67e27ee96335a06523edfa0e85b161c9f6258e4369962809991e016af6294d7b817f7c0a342715ffc3b0c698ddba7ea7902537b405123568c62f620472662a4d1001be82c64ceeff8b7f77a528fb5129fcab6612ef7a07ad515a1621786d6958dcb95aa3ab90e917b5c38b6528253cd52d6782065be9", 0x9a}], 0x5, 0x7, 0x0, 0x8, 0x3, 0x2, 0x6, 0x4}) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x1) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000400060002000100000008000a0004000100080017"], 0x3c}}, 0x0) 1.598440867s ago: executing program 3 (id=1706): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f00000006c0)={{@local}, {@local}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000000000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44acaa55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000240)={0x0, 0x418, 0x3}) 1.379545916s ago: executing program 3 (id=1707): mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x2}}, 0x18) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = fsmount(0xffffffffffffffff, 0x0, 0xc) (rerun: 64) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001440)={0x1, 0xba, "4cd7e60ecfe53b415b4ec90cc569d55e49421904fcb8507e7f2b8033791bb861f6caa182215d1dc3f1b8601ea6c9a5020c1b15c97ccbc32ca0fcaab094f17df93819e531383a1c94547d38f47f2049b9cdfcc2902c650b40789e08ae60db838ac627fe36ae1411a26e8e89c83c711b04b38c9fccc2a8a9c17e16d1b413e1aca326745e83f7eeb247bb802e81fb6a7a1d50cceb7fc3a567d59d8e86dbf6dfd50de3210665aa56c9c4b038268ae0ad553eefff0f763c51d4196287567487a6c390a9429287f25f2a67fb5a1deed5b9fe73d953e021664e39f2dbaf52f650b18946bc91be"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async, rerun: 32) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x89449a9924390298) (rerun: 32) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1c5d2c761ca936da, 0x8031, 0xffffffffffffffff, 0xbd289000) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async, rerun: 64) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) (rerun: 64) 1.379295958s ago: executing program 4 (id=1708): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x2}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) fcntl$setlease(r3, 0x400, 0x1) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (fail_nth: 4) 1.362675234s ago: executing program 2 (id=1709): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0xd, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000c4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x0) listen(r2, 0x802) socket$netlink(0x10, 0x3, 0x4) dup3(0xffffffffffffffff, r0, 0x80000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x17e) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) 990.484565ms ago: executing program 3 (id=1710): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xd1355000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1, 0x300}) 785.522832ms ago: executing program 3 (id=1711): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)=ANY=[], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setitimer(0x1, &(0x7f0000000000)={{0x77359400}}, 0x0) 640.785254ms ago: executing program 4 (id=1712): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f000001fb80)=[{{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="4012c769abb66f353016757b2df563d40da1aba29121ffade9b22e77e84a29632b52ca91053706d02eeccc16d34de1f08a157596725e5aedc1154265733275f0d080dd43691638c92a6e3473", 0x4c}, {&(0x7f0000000d00)}], 0x2, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x44001}}, {{&(0x7f0000000e40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005200)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000010c0)="853d6a0ab18e50d2dd70ab9808d386309785c22c85f3086d3bad7b7e1c88488640f97e9cc13a759877abe7d5f3ba591fdec4f1bc7a", 0x35}, {&(0x7f0000004200)}], 0x5, &(0x7f000000a240)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x80}}, {{0x0, 0x0, &(0x7f000000d9c0)=[{&(0x7f000000c740)}, {0x0}], 0x2, 0x0, 0x0, 0x8000}}, {{&(0x7f000000dc80)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f000000f200)=[{&(0x7f000000dd00)="4b72e811b14c3adf0e5aa630b59293ce1bcf13a7f409e36ca90e6d359c9f18ad872f6bc27c5990d4ac4469652fbc58cd4e29ba2541d10fae5e522f5a0237d20206d32497cc388fa14def8dbc9944d54a5f2210d57cc9d462e259e7565df716ee723104b566e5833856531bb11e7a3423bdf2fca6a02e3dd701fff3090df0c2ee82e878ebbf6a7452ccb277782169b6fc73b52bfcb3b860b47e5fc1f75be63994c5259b7eb770f309d6969f0ae0b5a3965e422714215bcc7d84c3d9bfd3a832204354df059e", 0xc5}, {&(0x7f000000de00)="892d6ee025d74612e0e07d63946a7d03865e5a8a4b90e31422a437d4c1c4bfdd1c2f575644a19c68cf778c11a43f956f6857af5673f1cbb22021075ed62403c83be5dcac4bfcf0fcb4b3d51dd52a572803c66a36f426da934d6995820586f748613a672f415f6211b8f4408092060d41a979c1267a326dabfaa04c180dc7fd74123181ab377a4e863043b2fb693f9c74b164e811ce24107f317dedea52dbf7fa3cfd494a375da5f45da5e6721c7810f89e482bbb95ea43c948be26768e791920fb14a232ee23e8944def", 0xca}, {&(0x7f000000df00)="79a0c9fb70e9e89941d8cc3197f2fd6e5a62afe91138c0a9a552c211b5263fa185583edc82ecc1d8bf249d116717c1cc238fab7b43d5e4b052a5473c108b02c14cdf3875f80232559a50310a9cdb5624d6614466fdabfd69f5d0daee5993e0b34b41bb875f7cdb7824990293ca82dc8a94626c349f1830c2ff91edc09062f62f8e004101fff58cdd5198543fecf37eda078f5571b43db0c341b5353e0a337287da9b7d77a66d1d91f945f73344d42f37d540f33ad858bc005464a5d741db372db5ac3f874dd23fa2153f9af819556448a41eabce58959ea462f22c4e4525e2f43647a009a933e6e9500a2c24c96862ccad4dbd3d07", 0xf5}, {&(0x7f000000e000)="edb791f302e468489e2878722a6ea46ac026ef6771864252851bedb8882c822d6e8c38ee426d6ec643bd4408d16795b8c094c4f3166b8d2525beaf92f7330b3c0ce2e1900d0db8ef0afb90ab6e4ce3d57240272fb5fc4a6d359eaceaec70249c0c97c3e736998e0f858ae0a327f407e3a38995008ad84b", 0x77}, {&(0x7f000000e080)="5227695d911cbbf745bbdea3375612e72f0e5fecd9f51fd5419f9600a9c658896f6fdf1b6324637835bd5087e8580a16b3cb3f8840a756d7d975def53647b8b8accffdb2bf2d62156ec055796fcd44a84ae92fccadcb0684c7df9fb15b307de72563fa1d3b9311f44dcd372a8e9fcc2171398f89c47ef53f96e4c72b68eb7ea8db70d974464b61c3216549fa68daeff636fe2e298ee599b2323f1bf22f46133aa9f4d6a51fb9465732196def82eff9cd52a19afba63eedbeb6db2cbf49be3df941521c9ff35db5f16ad9898806361e5cf7bdb3c8f580d52ba0b6849c32092bf7a44da13a07bd068e16a5cff1c40dff991cd4d5096674d8c85bd93307e9713474f2dce89eac35659b4b27c979d1a9e5309a3ee9411cb5bacd5f5d7cabc7c6018d2a05f30f3e7f3c5be6cca2574c89fece8172a235b6b3566e151014755d4a9d71135fc9a97e108244316d5692407802401729ab75d65930f6dff09cdf0ed23a79486319f1cb3fb8c71529d5cf405b727fe61aefd76ed3e851e1404c12321ef53dd6afe952cb79b4344aca564f050469f64f488e6a6e8b429507f69481cfa8cd29cf8fbb2e7df28b70f40d7648a7dc859a887c3379bb5e533f70877eb593a09bc825e83f3f5d996a3c03dbbe21f6915f46a3753805f0fe8adabad23c553654f35b64a5182cb6ad12c82e841fcc3b5a819e2112f20cfb2eac6eff9de82277dffbb72249570277f3adc60bc848fa4aa6b53d465971a15f41fa58b1b6b5ee9f8f587828cd4a264dff974adb6c156cb6c357adfc77e8c8817ea66b11e2170f8dea36e9bbf1973e414d773da5ae9f23fae82a40990867ac4c08a683ce09b8a6399590546780863c91925175b1be94d43620b96988a74ff3e7ea14fa67ab297f9699e5e2efc53653fcd24c1d0e31c8356a3c34a90915382afa22518eaa29bf8c96bebc16c54cfa4d97d1a1b1565d6f034f14511813fe5b69fa8477525093bfd27924c3abfd829a6e0dcd53a10da8b20d555fc10c01b47204be53d90020cb06260c74393ab77cea7e5152c1ab3f04cca530254a2a5a92cea6114f60440749764f124e952b92f8b811c54285df886c8c6a1170ad4d59bd44fd4065b163a2378891b9889ff78f63f964ff143264323a3fbb25beeb5035db9640a6232a37015f094775e1bafbfb9db2f086880cbd11e0d3db1d8c8453bd91fbfeb31a16d317d8b588942f5d1c1c82a714e2b1a3f2ab9883894f1fc62a9351c2a2f24c60b0d22d6a5b9b38aee46e7bb68d722346fac70a0276099568675491faec065241612e22a6268007ae4809d3beb63b7c6683fb00bb000599fed33f71c2d1a6c7c780a1f33d7dd5898e997b2df026a8b34b8c7c2663ff2eeca4a9c5ec5a0842f51e34e159bae42b4a9d97bceb073e7e728824ca761a0c2b756b898345e6580a94e8c9a2d3859c4efd4f1ab915c04c999dc054527e921d2b98e91da7c57273701881f66606221f0aac38d23698fca297aba1b53f60597e2218cf436cc868ea6289eeed376e90750f18194ff64e084dedb8ec59bb202c44a2f77fdc0dedaaad1e32f60c5af9034abb1844a79d149372f160e0219b5fd3002f4a6ca4768e230655dd0954a960872318a897eef8de7710a189963b1de89a201ff2e5aa5b5744380c198f57dcde199061407e2359ecd03c3a7e90e60fcd45a10faa484751707f0abee100358db4a6f59595ee6654c5ad5364f83c783e35c7739d8ff31640ca20d711bcaeb337a6a5f99813ce936ffc4056db8f132c65aa8f252160f4a7acf4150160d000324d8a03b1cae78c31d57d937d2aab453e2711d7d5b19f166219157ebbd010ef11e811500c42ee43e6a041347f41c3b98f9e1813777fccb93a87a89cbaf671abc280458765f35c5386bf5747ba3c24352df10413c09a5a4274e1c5f5199d4efdf4a232703e92372312d5c6ff6ff0a3117e79e66414bb68669e65e212d4d8a3c3835923f18c88cf41fb0770f3221a88413c8fe81bace104f8cdca8e1e1d33ccc0979b26301002d9eee1480d47cac118d6a138b0ba361de5943cb554ea83565051a7bfc556dad16cc765c9f88462bb61d4abce113df6155bc081b716689f9fc4a80fa6a99163ab4c736291f75792fb57b675bd3a1caf8e007b232569e946a91df0414f0cd00f2ccfa9fd7a6baa517ec753fc32098a094ac8bbcba2974f3a45f22ce731648eac5e3f39928f0a3c276f1c9c6c374b117ff8e79709d3fa4a77745ff89be958fd3ec21d6375258ee61b2d7e9576399b52b2db5ee6d6cca6b0514f24eed70177a161beea74fc8aa2118eb75da24f7235509bd77b55cad7473a7088729978859b066ec1f43b9c366284aa7f7a5802e4b2a214a55812aec4705a56ac097579aa1f5d2ac4fb54ee1cd2db0cd61f257cb8c76ad20782b6fccef2bb65fcb825319a3bfb754f628d315148c7dce33772ed0792c586243d113ef4edfeda3fc5b67d0b5534569ead4ab95f2e2709283600c5f840c9b05691f6ceb9d52f63ac8bae9353d7ca7def0d24d410f5a623c53903000f95aedfba7517fa6dfa7569337ffce1b0d8fe209f392f0f904febb332826b6b1df9d82c3b52557a5cafe14de31dd0d412dc45a992c77a060513512606878b5e46787d1e9fb6c510693b9046eb2eb0e2003d4c1c9a678fbb545f23dafd956315e9d84c5201d44c8e11085ee19fa76e8b60c34193891a62f50c0cc67b33420137919812863a7a2ec345d31d7a1b2b3cd8486c189571f9ded2050b2a977be237677dbee0f785076f35b312ec795ad413c8ae2806fd0a2a948bc2ce62ac090e369e18fe50b6deb500f213631d9f7fa7bbcb10f91f4e55663918afe8101962810146652702165b967a14487e4c5ad6e8ce9bec2851cc8a44723fdc01a0f07c822ce7430d0ee8638349d929fa79fd7417e1c3c5656f7f4c82dbe0f3f25d31ca072acbf2edcf137b5fbae626f9ef8b78da921114af5d8479afb4e771b442dda49a928d0e2e8cd4aa0eeaa070ef5afa43f7c9db6b1687aaee48b3407b148c0f0e3e2ae2eb8b4697e555323153a49969cc297c95797885ab913a67db984d30cdfe3c13a5d771423a7a212435f056833bda2cdeea8f8ed7d5a49ef054522cee4af8b0a176749a1ef3f357cfaa78b55c79bc69ba38de1e209ee1f903f9d8c5a1a3d6fd2386feffc4de795ff56cd2fd3eeb1ea287bc3a1e6d11aa1a513655980e9d19d7a99f7db20ec5a66714fd88093ebc23d8faac66c251c611af8597e7248a237afb65876356fb594e4040413298679ca8a2b3c6223e835e4af1b59a22f0d75c34e604e9568beb93bd5dc1cfcef2cc9cf68184362126446dc0c6191a154d0217c278a08a52de60b315707e6dbda118ee68532de665d9ac7be1cfe2fa9517121f3347f7d87019f6421f0543213af17dbf8e0a1fdabbeaabe5d11465c3813f58cceb37949a8e52a5c0fde7b4c38b7a9b13ebce1025821d1bd501f4282a49417d8ac3668a24620cad768b69af5a8fe273d978a893a2b3c1b6b95b8313240a9c905a0f1f7ea3102b7021732e88140237a6404a4589844a3f924ef9db5501789978722d1fda18544da5a88cd9dd970a721229c856b0f20b95487fbe843a1a08b3a1ba9e5a3f786a46bad7ce80e539a9d39de5f78ec413af6a530584e2cc030f944570abdf41cbc573f562134ae4c9fe40905604efb115e275d941f9f67670b7de0c2f1ef7c7e95d233d9f033bda619861a8d90090148cb3a3aaeaf788af5a6f5d919571943b71f474c110ff2ba90cf50e148637140abd3edf9942c4fbe63613982248c6b9d612c88afe27458cfa8cbc70cbd0a67d49a849ebd61e6fb1cf2578ce5740ae7d5c1f540ef1c6e3ec949919a33cc0828c41f53beab69bbf3ea92a6f1cf28118a28b7e2ef9599c0e8eb567c9a3055d838bb4f81b95d6025bda0a20623205a57c5deb60f68c7a0c6f1d104658fcd4539e0c0969a72b2249477c2d2fc3f8bc0bda6acc248c2a893bd68e2fb2d0652d5d2358931d968ae59cd1d17abdfe4a7774e21a14c2137448cc65794e9e004d7f6313329b7bea3384a07c658139610cddaa2dad8f2fc7f03b7fa80ef4ff7af69a2f0718a42eacafea4e4e89d3c185238423d5651778e3aefdf82b38c9e1f3d6fa3a37255b5eaf77d20b01b5c6ccfdcc6b486c3bfe6148297356a085cab429e03518ca4beff7390cf7bfed5ea60fdabf888d4947079c86a99fec8eed1f8dc690bdc093dc64c2f8008ad396c6e72ab02cc370087a64b20f312dd6a10260e41cecdb818c387d4769dadf2ab0745236a6216ff0951725434bc056d3ea109e969afd46f0738c836e7d12627b0098485a88d58797ba28306c7654a2adb2f6d6bd1237d235b46d0d80e543e3e5bfeab33a4e60c03c7da2fca44907ab59ca59e67df5a58bc1b96c9f5f02a5c241a8bb7bc73878c0ad82ed4bf0c990dc10795afc8bab7436a600dea09ac50f70fa04e228fdb21bb0398a46910e756686b8cf34c27c9522087bb19979c7e236b481dbf73bd9763847a61a79f121d1a4d9e556e67ec50c8d2270381e50e0d7226a6c4d16f58292350f531092344c1a76acfbfac8c03f718399891e5dd3bb40309496743d488eeb58252f54cf4d5836ba118aff3fd2dd39c5b2fa851237a391a874f1d18739737c3e35a23b624a45d1670124b6ab000fa771f1166edec06e2f21dec685b9361664f13df46ecfacd77c6fd94668953161fdc4960924fc1d6c572df061ec5c2145d905b8ebd840ec3b793edff27374517cdd53bd43c8319b17391f0a0734d47949affa4a071fa5cc95eb7cb1325fb901d3c30ccc5eba8c57f21bebd9238da78ac084687f1010cd022cc54f4b47883495f863df78d4921d6427985a02578a49f2c0c70c97eb96c65b8c3c2b0319fa29963b27f59c5ad9b6f4dc555545564bd71fdfd2ea38501ec74e18d112a2137a411570782d64176cb4c0e0fb05c4fb84ce8a4563f5a66eef36d5b7693d29bfce3e1f3c65e6935d54b02dfdcf09c6133fc60bcfa9a50d1f36837480cc04ff14779c3c6254b157ffed2a5a8352c926ef835cbbdbcf30ff3b5e767a4718ce0d6db4a447fda722b1d1d0d291a4d807426f0c4fc0e28dc0349e8389ae2d9d840491644c403d32b58744235587551558699067c6abf89d4d44525bed75e6d890f3f418d26a1346f6eabd94a2134aa84ef7b2caa71389a94aa48686eaf9ce47bd998c1964649df7579e347e1e4de86fa9340a313c6ee359231cf5768ec1ad2f44b4cdb071c7e76552ce505735255e32fe6dabd575f1ceb4e7a31f4824a7bd6c3166beb04863cb530890392ebe621428420ca7f6a33ec88b2867ef5dfdc3354682bd942f474a1f686c71580768feb8ed1ebe04b709189575ac8caed645d2fea2a9ef1cf9bd8b185dcc15463e86634ba337714d2b6d1ecf9763056892227774fafec520b7439c2c5e68b91d983231bb78ac6582aafd333256cd5106a01e2ac85ee99142aedf2cf9a740bbb9b1bb2c40d61176d6189ec0bd7c6857c2a76e9a58bc177d1f3b68d5526a8f64b3311c5ca508b75778ae4ee9cf0584eb598d407990b981945f48fc09104e3f54c983a45750fc371f86e93baa3ea2b04276746a59c7274f9ca87f83b84c371766e42712a6fbcd394ce8a129ba76e1af5aedf624cb11dae430cd64d649b4db80455daba017c2a94654f4663b08e834d319a10631ea2763748995dc8b9ca1a804fdf90cc2255c9049d948dd210712", 0xfe0}, {&(0x7f000000f080)="330d8c9f355d454bec8f40dd97fcfc7a711d5202727abefa49ef418800", 0x1d}, {&(0x7f000000f0c0)="a8536ee99bf8a16b33c1c93a9818ea2aa5b7ce1bfad124fdd008baafd69eb560f13c253cf944d526ee725500146ed46844ec01f1ec22e206007cf643a48269cac329ac63757416240b1df54b91f1b755bc2c1ee55197fcf0a1af08de96d182ddd75231d2f4d500c883d32978ddf329f465ccfbbf6f2090df036e2a7b569a7c69c2d29df97e8cc02e64bb0c3d006dcc6dee8f096f7360d296fa747760f3ff8007cc48a46f5e8042d36e58cbd80040d20797bf541a5ad1987ebbd14b6ff5c5c4fa7388ce7054a044168ab9a4086d65fa50af3c45c12838", 0xd6}, {&(0x7f000000f1c0)}], 0x8, 0x0, 0x0, 0x80}}, {{&(0x7f000001e580)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f000001f900)=[{&(0x7f000001e600)="805be0bd61c94f43fa63aa47df08b13a5fdceeec92be658ab3033006b3e35f1f8f96b7b16228b8d19f5a6df2358e40359dfecc9e621ff1f1d1ff0538b67f254b6991bd14a3dd1e76daec282a703bf5cc93b661aace9c6caacc9227cd76995a7195efcbcff56c3fe82c920540d68ae62fd096da2c3a55307848484cbba650f499d0ea3b21c7732bedbf32108c52c70b7cc51b4530c1f83664af65f1c72416e8ffd0d85a6fd83786b916f9c8900ee126a628f8d1d11d7d47ae22cbcd19a0e2f06a8fd5db525f057b86ada214ebdbd9738a7e3b49254944443e5f304f81", 0xdc}, {&(0x7f000001e800)="69a5f3ff6ab0f20847832270660a885b67b862ca60c7b0663f621ccfe6d0128000c4ea6e609c55d87626577fd7d2dd042737affd4b58abefd54141f812f6e760aeb1bbf9153939400d3fbef5075433d0b2578d415f667143b721399bec8f6e25a9e60933cc757a01e306713efd461bd4d3e9bf2e0ecf1c5c41a8c5867a9795bfea1ae29da0275c88dd9055dc59ebc8b4e3d715972049eb8970df9f1719bfb32b82dbef8c40342abb7a9ef9f7fb4d8222f8d137faa97237711835b0eb97310deb720daab761f49149fc24f9097b44e913da634d640bff360ced9bdd75b177fe1ca86567ae33ee7d44a14edd06f1b848ec4747952045f82d97ce79810765d9b62da913bf666d62e7e70e5e03ba01ca9a77ee30181eec2ae302949a4b2ded2c26cd8b28b1982e102ca12d647805ceb6a86df0d9fb702776951e6984077e2600cbafd545b4f7ac6e23780975233163a1ccc3b20eb7367fc2dc4e2be919318086907df6fc9cd17fbe96c0c5357d2a00bbe1ceab3256b31b7dc715901b5fe6cb4f0f421f6e1f1a851b9e8c3468768949915e085b0ea8b6e8741c23de8c3c350b4f8bdd9240e2b920f2a08721837626c91da08313bf98de3c129283c081c548fb46868f234936c836e221fdb065baddc881787a0cbecb45e1c4f5af3330a064764e6a5f5e23409cecea2836a2537a3d4ced0d474dcf1be9d5be62685a39299bf15cffb7fc891f69fd491f2db979db151684ad61b96f83e3f7b1275561f38ede12569059e734c63e68d0ed0ea5147f3076a82abd99ccb1d2834be404e6d9e49a5def2efa96d136c70bb904381589ba109d7a7da3190c3acf9648c2dc2ccfdd1de19e6e3568a50d21e771ca23d24d5a803c09e1f73658c6fc992f25d622e20463fa133ce19295a0b64f71563d3ce89b37b8a853377acf6c6b72300b73ce7560897f30f10cba1607bdef22b42a629d82438a3f203e341f81411f913558a85a1e62b53842496a1cf26554b614758a32bfc38e161b5a79e2784598523e63a576ec34745e406294ee5b6b6d3d4dd23f880dfa4f3f024d3674bb61e5d7749916426a93fcff198f223d5c5c1d007add06533025e9737ff8893484c8dc34bb376369657347236f1f6e6326e4d889fb23795afd0923fc696bbd3598d13e9edcdaa9838931a775c5d323007be4c100908653c4dfd652a5dc76412cf27cc03951d3b1969120ea53a826b6d972a7317d2fd13b2f89dfe87b155d6681c4fa4bca745fbd1d7b47ac62d66c1fe7f0f50cc6d1533a9be7d31aa3802cbb8e05c82de48fbfc14366c2378357297c2fc618da95a914e9f2a7c42b4bf4a41a714d8780cb70e0137cce03c91abc163ad0f10000b651fb8d25851f1e9607ee7cc0d00ee21bcca491e9188b129e593ac898fcfd6036df72cb1cff35c6d2669b703da544df89612c5f7cbe1849db1c958d192ddb53865f951c8c6834b09d832c4ebb1b996fb0843a5ecc9c2c6c6f02a241c0fcbaaafe326b9d1d472ef4bf9e7bdd39a908a9cd382e541abe74588d5cc88efdd184bc66d57f2d24c0d51fb5bc13a33ee950a32368eabf7d60d032525dd8006096f0c5df660a4d8caca7a497b461953abc6a5958d391c4c90e9c3578d5fd912cbf2ccb38d819743d4df1f0d71f6f39d1ba7341f1cbb82c1f3545c3499d17fdf1561182311ca4497b54033cb4277135b7fe5c619c71d5e3c710896399805c49289334f84bef422e6efc0b0cab11f26f01cd8b30268c74dd91897f325a7899831d761f7f3858088c2c20d13466d6d30a34046f2e6baaade82ca57f66b8df21b278fa946693b3c3c9e2bf4857691951b40e5a4c6c89de07f03bef1e6df3e7ed4941206f4f84250e6d1e8f2a4287c97c84b905940ce961d8e28952bc8c3422326a39a51645f6a078b761140eb35bda923c495fb75c3000ebc298b7bdd53844df50009b07511d006f3ef0a24944b14ae70d842872248117ca74b300f4ca14b623c4bc1e95f3557c4cecc2d331989fe493322afdfdcba713829dfd6ff566b6ab4270b4b67b73d1771e7d0cf588ea9fbfdf44ef6e174ad305cd3ada9b3e56e4dade4ba85e30da906ead056da6f80578f7e6de0d22deff6dabad60a9b5a86de31831da60f7da510179c70fc464a422b287332888e6a3040ef8194cf3ef58558b8f5302d04dde05d780939f90f0d0ca5a5cfa9300ff7b60d773c73f98e5896314805322a60f5b02be846c2d755a0eb574e163ad1950028b1c28b6f886aaa2c99bc2921481b766cbeb5c2cf5e1bf198ff3d0926f0f7e849fa622fff4757a5dead0f068ac6925b23dbcc61c782bcc685a5965939a6c990bb7d5585f3bda1c0fb947548ca7093ed37057edb5e7bce1f4b46890945c6ec4c8622c83d067aa362bbff467739003afba64a02740a75dd38eab23c94e815905599edcbc369bdddd28db4878c03fdadf34f6b1de525ae68240d50b4570180812b888ad2233761409db71db7688139d3aee17d8871febae9ba6808d52510294d438cb1dbaa6e6450927eec0c984257e9a68d520b24295a0f62b0c7dfdc50a012dae7b76ad635aaf1a536a4bb7a6232635f8c75019a1353ca3f2347407ef55ef313f818f3361fdb7f58c682e0e65812439cf3be324b5e31958de089f6fccc619f0e5d1759944599a6025d16e14820a6aa4e418536aece2b4bed1c70322a47707b6923b1cc4b658674a3a5c4146afd5bbdbe98fdce3c67ecb055e9682c3d946ad9e4bbcd12fcf3f3a786d29d69bfbce02840abe02a53a327bb9ea869987a4bcefba0beb648cead85f1ba9c7ef031a4f1d6157779f4bfa263e2721da252f8544684c04b50e7b53055adb4c548c2e0a2d379d060d05fa0ef54a45a27b556ea8b3119b06962a5b241d5aa4025c2bd0c306b810480a433b37b3dccef4c7ad9f0d749395e43cdbeeed1d31df4d0fe75b486d6931073fea24b2d100a720cc623295b44605346572fe7a4bebe410d54ca6e14f4cca8341fa564226625c183fef6236ee67c83dde34fd70a8d271ad6998f2719d14f8f5bd510938d54a6b2b802e69a7830ae505bc8c1baa84c83e22e54757444b8662b950bf88f12cb275ffae3ea5f4c925be6605b893db4c286dcffa5915d85afd136a3618fe24b1fe530760f9680a0a4c8624b1e1029ab0acd9a3bb7602330de2a2f8c8b2810415a5c875022c839d86e828182ccfff87d5434de0692eb1d78f823cbd5ba3c3630fe74f8fb5e5218b78f1ffff3390d661b92b750597e2c8ffac62cb00a6bd6b0282f1e94f252579511d0c12af24c679d7159004a93c406ddfe854c88c951a2d49d49f71b559555873508021b9b4611d9ac6dbdc19fb43ea4533ef341c0cec92e928e691649e289ea976238496a0fba13d872f8a4ad8097488b588d09e5e917693119ffd7d2b675dfc72cbc2746c6ab563e7ef9ed67637d58cceb802ad56d62e51e627ba7297ed36ac347cc5e348832186a9213fde2ebda3261802f5f94a296d76f4a406756e6926dcf14be2e5dfcf5d57bf12242476757c7375af319f781ccee44e6f7ea1a7dd1b793bc474de148c68d96c5fdf24b749dc585962d1b8f40f967e53dba1e4632c07f8842ecef88e8b72039d8754786551e0ef8dfdfcbd01d8cb08dd7315fc9f1e8685ef676eb76433a743619d9bb03e2940c86f7e63894f70c1a0153db2dece6cc5b24834597d9a116e33a3afecc641886085abed872fbfae7012e40c7d586f6aeb9e56cef5ca476811af43cce9ed8f6eeba562866c8ed9dc335419562451f87717e91c4b6c0c794c7e93c4f0ec0d6586afcb66a4d3025e901c86648f0f6b39a9cd89d3d3ec681f5450793ccb388fbf3dce86f8ff0006de9ec647e9053a7fce90f3918de140d32d489a15496552700d61dbc4f0ea419f37e80833a22b3da553e01dff7e5bb4ed2b93c652ad8d9164e8fe2267ff9d7dc59d9d7d958ce15f8e635c3ea57e17c9d67088ebe2a6c0aa9c3e780462f5989804118daf2401f08fb571cd5ceb3c1421ad9f04727cb5b617d073a1529468915f3669e637bde92a139dddc2c7c6b1989690594ef796e3631d1b0d8044553584f1b5205e747d1af23ea2ab6313d977aaedbabf9510293e5a11143a3769970022cf9c87b26a93a12c1b0f1309bf08b27436905553b349e51eff61926657ff3de4d70127a696533335a54563bdfa004c875d87637b2be26241a90bae24ee007907f0f954b23d7860ce30d6b75ee645aa7d95a00280dc4e77734f12884318a9195e7f9e64a4dbabb447e37dd86b5e4e8fb35ead0aec4cef224002b4dd286debb780080ac359e4ad7a67ff29511fab57e4c581c649bf2427b7cbc08d4b068357a873101300defee087ad3618056454f6add87d77d46fe56f362615052bee41d19a6db399c96ee9c1ec3358beae8f1a8d59dc6f74c2d2bfa31cc84ecae7b91a202882508ba0efcc4a71854881471478c983037d8040936111056f6ba3f38c53a1d67368ee938b9ded9c5457b033c1bd59ff6ed934cf2ff6cc303cdd5a3853d22e8615fe850016f4c98697fdcecd57189f339761721295da39021ffce7cec343a5eed3b61c36d48e10efdf99187699c244cf6ed137616662814549bcc044a30348cc160c6e7c36d4f5a49bc5488a9f2c34f4866af8ebe3389f9ba15449048837c4f262b5bc3e2673b17f32ab3b5daab240bfa3e8285f14d22079b3f7bf6620a5a356e4cb5f6410060d2df14a8e1e3f981138e8463e5c9af44746", 0xd19}, {&(0x7f000001f800)="10223b6ee77a4d7a72971904f451e5791f67eb92e5f9aa61919524e3f818a572d2cb9d3fcc33d47a34d2fdd754340d901d31846e4aa7159f7370116984aabf6c4ff3c486ad22329c7a5c066be97106c83344b2ea517537cc37d2fe70daa4e6673755c03d216178a32c5b6e552d6b4479ec425b52c6121535a75ec9022a6d76fe69993b3ce9dc8c35368737ce8c62af4135a18567429789ff12d3ce5db483ba7780d0ba72706519069c97cd2c65ec2491341c109c3d778fa0afdf64dbdd9f3aba78cd3d74348f6fa6e86d89bb7c1cde352ea7ddbb21b248d93f0a26bc2aa4", 0xde}], 0x3, 0x0, 0x0, 0x10}}, {{0x0, 0x0, &(0x7f000001fb00)=[{&(0x7f000001f940)="b78c65459edb1344bb54d27f5f03ae101b8c32ac1b067b6f9b85b2a7aad2f79fcf551438eb80fbb364c77f57f0659dd1052fa310bbb409d32a8bc05b19e04f3af1e36affea5a94c9aefd127f4ae818c5007dc2ebde27b6f9bfaba0deb6ecbf5963780bf38be40b747392b9cccb46f54ef1a0bc5cc7467da1795e6b0ed7a4a7a6caa73a041de88c8370", 0x89}, {&(0x7f000001fa00)="4fe9b31e2459e93b5e8aea4affd15fb56f0f535765c3a5dee174aa8b0371606574270fa2a34cec10f9268d0861a5ad9f4cb781ff9a1acb2f259caf0c27f0a873151eaefd01adce3cafd2edd022d71c7733c873f77d751d82ecbdb46c0c06714611eebd39f50324dce648e514edbe0667ccb0c38ee106b488e9b289760f2f806a97f044d1bff4d8be755358e0da56025cf4b609593d55f8806bd92d861174d2f735ad81e4d3f3e4eabbd8617174f435999dc9f5dbf1ff7e152416532f615036c476dbbcac4e95dcb8fcfb7cd0", 0xcc}], 0x2, &(0x7f000001fb40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}], 0x28, 0x4000}}], 0x6, 0x8000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) readv(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r6 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) clock_gettime(0x3, 0x0) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) clock_settime(0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000102030000000000000000000100005c04180002800c000280050001008800000006000326fa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000640)={'comedi_test\x00', [0x100, 0xf, 0xd0, 0xffff, 0x2, 0x104, 0x3, 0x20000000, 0x9, 0xa, 0x0, 0x7, 0x1, 0x3fe, 0x10001, 0x9, 0x0, 0x6, 0xfe9, 0x2401, 0x7, 0x10001, 0x7, 0x9, 0x48, 0x9, 0x0, 0x4, 0x8, 0x7, 0x8]}) 0s ago: executing program 3 (id=1713): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x82}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x62024, 0x8d85}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0xd1b494822399e567}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x4) mq_open(&(0x7f0000000040)=',\x00', 0x80, 0x13, &(0x7f0000000080)={0xffff, 0x10001, 0x1fffc000, 0xa}) kernel console output (not intermixed with test programs): 503.956522][ T5584] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 503.959660][ T5584] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 503.959688][ T5584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 503.959706][ T5584] usb 6-1: Product: syz [ 503.959719][ T5584] usb 6-1: Manufacturer: syz [ 503.959733][ T5584] usb 6-1: SerialNumber: syz [ 504.020027][T10545] hsr_slave_0: entered promiscuous mode [ 504.037664][T10545] hsr_slave_1: entered promiscuous mode [ 504.049512][T10545] debugfs: 'hsr0' already exists in 'hsr' [ 504.049540][T10545] Cannot create hsr debugfs directory [ 504.129084][ T5584] usb 6-1: config 0 descriptor?? [ 504.244581][T10912] FAULT_INJECTION: forcing a failure. [ 504.244581][T10912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.244612][T10912] CPU: 1 UID: 0 PID: 10912 Comm: syz.3.1481 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 504.244628][T10912] Tainted: [L]=SOFTLOCKUP [ 504.244632][T10912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.244639][T10912] Call Trace: [ 504.244643][T10912] [ 504.244650][T10912] dump_stack_lvl+0xe8/0x150 [ 504.244686][T10912] should_fail_ex+0x467/0x600 [ 504.244722][T10912] _copy_from_user+0x2d/0xb0 [ 504.244747][T10912] memdup_user+0x5e/0xd0 [ 504.244771][T10912] strndup_user+0x68/0xd0 [ 504.244789][T10912] keyctl_pkey_params_get+0xe2/0x4c0 [ 504.244917][T10912] ? __pfx_keyctl_pkey_params_get+0x10/0x10 [ 504.244939][T10912] ? __might_fault+0xaf/0x130 [ 504.244970][T10912] keyctl_pkey_params_get_2+0x1ba/0x4b0 [ 504.244995][T10912] ? __pfx_keyctl_pkey_params_get_2+0x10/0x10 [ 504.245028][T10912] ? __lock_acquire+0x683/0x2ce0 [ 504.245062][T10912] keyctl_pkey_e_d_s+0xce/0x310 [ 504.245093][T10912] ? __pfx_keyctl_pkey_e_d_s+0x10/0x10 [ 504.245114][T10912] ? do_raw_spin_lock+0x12b/0x2f0 [ 504.245134][T10912] __se_sys_keyctl+0x494/0x9d0 [ 504.245148][T10912] ? __pfx___se_sys_keyctl+0x10/0x10 [ 504.245168][T10912] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 504.245193][T10912] ? rt_mutex_slowunlock+0x219/0x460 [ 504.245213][T10912] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 504.245247][T10912] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 504.245276][T10912] ? fput+0xa0/0xd0 [ 504.245296][T10912] ? ksys_write+0x248/0x270 [ 504.245319][T10912] ? __pfx_ksys_write+0x10/0x10 [ 504.245348][T10912] ? __x64_sys_keyctl+0x20/0xc0 [ 504.245371][T10912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.245393][T10912] do_syscall_64+0x174/0x580 [ 504.245419][T10912] ? trace_irq_disable+0x3b/0x140 [ 504.245439][T10912] ? clear_bhb_loop+0x40/0x90 [ 504.245459][T10912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.245469][T10912] RIP: 0033:0x7f5f2b67e019 [ 504.245481][T10912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.245489][T10912] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 504.245502][T10912] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 504.245517][T10912] RDX: 0000200000000600 RSI: 0000200000000580 RDI: 000000000000001a [ 504.245531][T10912] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 504.245544][T10912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.245556][T10912] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 504.245588][T10912] [ 504.264106][T10890] FAULT_INJECTION: forcing a failure. [ 504.264106][T10890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.264141][T10890] CPU: 1 UID: 0 PID: 10890 Comm: syz.4.1471 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 504.264169][T10890] Tainted: [L]=SOFTLOCKUP [ 504.264177][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.264189][T10890] Call Trace: [ 504.264197][T10890] [ 504.264206][T10890] dump_stack_lvl+0xe8/0x150 [ 504.264250][T10890] should_fail_ex+0x467/0x600 [ 504.264285][T10890] _copy_to_user+0x31/0xb0 [ 504.264312][T10890] simple_read_from_buffer+0xe1/0x170 [ 504.264340][T10890] proc_fail_nth_read+0x1be/0x230 [ 504.264362][T10890] ? __local_bh_enable+0x1e1/0x2f0 [ 504.264390][T10890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.264414][T10890] ? rw_verify_area+0x250/0x4d0 [ 504.264440][T10890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.264461][T10890] vfs_read+0x219/0xa90 [ 504.264493][T10890] ? __pfx_vfs_read+0x10/0x10 [ 504.264519][T10890] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 504.264545][T10890] ? lockdep_hardirqs_on+0x7a/0x110 [ 504.264570][T10890] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 504.264597][T10890] ? mutex_lock_nested+0x152/0x1d0 [ 504.264616][T10890] ? fdget_pos+0x252/0x320 [ 504.264645][T10890] ksys_read+0x156/0x270 [ 504.264670][T10890] ? __pfx_ksys_read+0x10/0x10 [ 504.264690][T10890] ? fput+0xa0/0xd0 [ 504.264716][T10890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.264736][T10890] do_syscall_64+0x174/0x580 [ 504.264761][T10890] ? trace_irq_disable+0x3b/0x140 [ 504.264781][T10890] ? clear_bhb_loop+0x40/0x90 [ 504.264805][T10890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.264822][T10890] RIP: 0033:0x7f15119fe84e [ 504.264839][T10890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 504.264856][T10890] RSP: 002b:00007f150fc95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 504.264877][T10890] RAX: ffffffffffffffda RBX: 00007f150fc966c0 RCX: 00007f15119fe84e [ 504.264892][T10890] RDX: 000000000000000f RSI: 00007f150fc960a0 RDI: 0000000000000004 [ 504.264904][T10890] RBP: 00007f150fc96090 R08: 0000000000000000 R09: 0000000000000000 [ 504.264916][T10890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.264928][T10890] R13: 00007f1511cc6038 R14: 00007f1511cc5fa0 R15: 00007fff2f131eb8 [ 504.264959][T10890] [ 504.341499][ T5584] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 504.341525][ T5584] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 504.547076][ T5584] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 504.547187][ T5584] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 504.547208][ T5584] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 504.656574][ T7738] hsr_slave_0: left promiscuous mode [ 504.751621][ T7738] hsr_slave_1: left promiscuous mode [ 504.822962][ T7738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.822990][ T7738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.846960][ T5584] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 504.935518][ T7738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.935546][ T7738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.940552][T10927] FAULT_INJECTION: forcing a failure. [ 504.940552][T10927] name failslab, interval 1, probability 0, space 0, times 0 [ 504.940582][T10927] CPU: 0 UID: 0 PID: 10927 Comm: syz.3.1486 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 504.940602][T10927] Tainted: [L]=SOFTLOCKUP [ 504.940607][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.940616][T10927] Call Trace: [ 504.940623][T10927] [ 504.940630][T10927] dump_stack_lvl+0xe8/0x150 [ 504.940660][T10927] should_fail_ex+0x467/0x600 [ 504.940688][T10927] should_failslab+0xa8/0x100 [ 504.940707][T10927] __kmalloc_noprof+0xfe/0x780 [ 504.940722][T10927] ? __kasan_kmalloc+0x93/0xb0 [ 504.940738][T10927] ? security_shm_alloc+0x48/0x310 [ 504.940854][T10927] ? security_shm_alloc+0x48/0x310 [ 504.940879][T10927] security_shm_alloc+0x48/0x310 [ 504.940900][T10927] newseg+0x35a/0xc90 [ 504.940952][T10927] ? lockdep_hardirqs_on+0x7a/0x110 [ 504.940973][T10927] ? __pfx_newseg+0x10/0x10 [ 504.940989][T10927] ? rwbase_write_lock+0x550/0x720 [ 504.941017][T10927] ipcget+0x1db/0xf30 [ 504.941063][T10927] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 504.941084][T10927] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 504.941102][T10927] ? rt_mutex_slowunlock+0x219/0x460 [ 504.941118][T10927] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 504.941137][T10927] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 504.941153][T10927] ? __pfx_ipcget+0x10/0x10 [ 504.941178][T10927] __x64_sys_shmget+0x140/0x190 [ 504.941200][T10927] ? __pfx___x64_sys_shmget+0x10/0x10 [ 504.941226][T10927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.941242][T10927] do_syscall_64+0x174/0x580 [ 504.941260][T10927] ? trace_irq_disable+0x3b/0x140 [ 504.941275][T10927] ? clear_bhb_loop+0x40/0x90 [ 504.941294][T10927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.941308][T10927] RIP: 0033:0x7f5f2b67e019 [ 504.941323][T10927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.941336][T10927] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 504.941352][T10927] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 504.941363][T10927] RDX: a24fc71e1e2c5a8b RSI: 0000000000004000 RDI: 0000000000000000 [ 504.941372][T10927] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 504.941381][T10927] R10: 0000200000ff9000 R11: 0000000000000246 R12: 0000000000000001 [ 504.941390][T10927] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 504.941413][T10927] [ 505.001613][T10921] ima: policy update failed [ 505.001879][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 505.001892][ T37] audit: type=1802 audit(2000000142.340:1010): pid=10921 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.1483" res=0 errno=0 [ 505.273325][ T5327] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 505.326910][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.327445][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.462380][ T7738] veth1_macvtap: left promiscuous mode [ 505.462630][ T7738] veth1_vlan: left promiscuous mode [ 505.462888][ T7738] veth0_vlan: left promiscuous mode [ 505.503363][ T5327] usb 5-1: Using ep0 maxpacket: 8 [ 505.506126][ T5327] usb 5-1: config 9 has an invalid interface number: 82 but max is 0 [ 505.506155][ T5327] usb 5-1: config 9 has no interface number 0 [ 505.506187][ T5327] usb 5-1: config 9 interface 82 has no altsetting 0 [ 505.513010][ T5327] usb 5-1: New USB device found, idVendor=413c, idProduct=81b1, bcdDevice=f1.8b [ 505.513039][ T5327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.513447][ T5327] usb 5-1: Product: syz [ 505.513464][ T5327] usb 5-1: SerialNumber: syz [ 505.633263][ T5892] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 505.793097][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 505.806703][ T5892] usb 3-1: not running at top speed; connect to a high speed hub [ 505.806764][ T5892] usb 3-1: too many configurations: 193, using maximum allowed: 8 [ 505.808500][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 505.808531][ T5892] usb 3-1: can't read configurations, error -61 [ 505.933566][ T5892] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 506.074439][ T5584] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 506.093852][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.097685][ T5892] usb 3-1: not running at top speed; connect to a high speed hub [ 506.097753][ T5892] usb 3-1: too many configurations: 193, using maximum allowed: 8 [ 506.105262][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 506.105378][ T5892] usb 3-1: can't read configurations, error -61 [ 506.106635][ T5892] usb usb3-port1: attempt power cycle [ 506.174896][ T5584] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 506.454409][ T5892] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 506.481257][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.482054][ T5892] usb 3-1: not running at top speed; connect to a high speed hub [ 506.482197][ T5892] usb 3-1: too many configurations: 193, using maximum allowed: 8 [ 506.507636][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 506.507669][ T5892] usb 3-1: can't read configurations, error -61 [ 506.644467][ T5892] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 506.655020][T10962] FAULT_INJECTION: forcing a failure. [ 506.655020][T10962] name failslab, interval 1, probability 0, space 0, times 0 [ 506.655055][T10962] CPU: 1 UID: 0 PID: 10962 Comm: syz.3.1499 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 506.655082][T10962] Tainted: [L]=SOFTLOCKUP [ 506.655093][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.655105][T10962] Call Trace: [ 506.655113][T10962] [ 506.655121][T10962] dump_stack_lvl+0xe8/0x150 [ 506.655154][T10962] should_fail_ex+0x467/0x600 [ 506.655189][T10962] should_failslab+0xa8/0x100 [ 506.655214][T10962] __kmalloc_noprof+0xfe/0x780 [ 506.655236][T10962] ? iovec_from_user+0x87/0x250 [ 506.655257][T10962] ? iovec_from_user+0x87/0x250 [ 506.655286][T10962] iovec_from_user+0x87/0x250 [ 506.655313][T10962] __import_iovec+0x15e/0x7e0 [ 506.655344][T10962] import_iovec+0x73/0xa0 [ 506.655370][T10962] ___sys_recvmsg+0x4c9/0x5a0 [ 506.655395][T10962] ? ktime_get_ts64+0xa9/0x410 [ 506.655419][T10962] ? __pfx____sys_recvmsg+0x10/0x10 [ 506.655448][T10962] ? __fget_files+0x2a/0x420 [ 506.655485][T10962] ? __fget_files+0x3a8/0x420 [ 506.655514][T10962] do_recvmmsg+0x320/0x7f0 [ 506.655546][T10962] ? __pfx_do_recvmmsg+0x10/0x10 [ 506.655583][T10962] ? get_timespec64+0x119/0x1b0 [ 506.655606][T10962] ? __pfx_get_timespec64+0x10/0x10 [ 506.655637][T10962] __x64_sys_recvmmsg+0x1b7/0x250 [ 506.655665][T10962] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 506.655699][T10962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.655720][T10962] do_syscall_64+0x174/0x580 [ 506.655746][T10962] ? trace_irq_disable+0x3b/0x140 [ 506.655766][T10962] ? clear_bhb_loop+0x40/0x90 [ 506.655789][T10962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.655808][T10962] RIP: 0033:0x7f5f2b67e019 [ 506.655826][T10962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.655843][T10962] RSP: 002b:00007f5f298b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 506.655864][T10962] RAX: ffffffffffffffda RBX: 00007f5f2b906090 RCX: 00007f5f2b67e019 [ 506.655879][T10962] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 506.655892][T10962] RBP: 00007f5f298b5090 R08: 0000200000003700 R09: 0000000000000000 [ 506.655906][T10962] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 506.655918][T10962] R13: 00007f5f2b906128 R14: 00007f5f2b906090 R15: 00007ffdd7476de8 [ 506.655947][T10962] [ 506.671878][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.675631][ T5892] usb 3-1: not running at top speed; connect to a high speed hub [ 506.675700][ T5892] usb 3-1: too many configurations: 193, using maximum allowed: 8 [ 506.680227][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 506.680263][ T5892] usb 3-1: can't read configurations, error -61 [ 506.706956][ T5892] usb usb3-port1: unable to enumerate USB device [ 508.016049][ T7738] team0 (unregistering): Port device team_slave_1 removed [ 508.100527][ T7738] team0 (unregistering): Port device team_slave_0 removed [ 508.210645][ T5327] usb 5-1: USB disconnect, device number 63 [ 508.274023][ T37] audit: type=1400 audit(2000000145.610:1011): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=10970 comm="syz.2.1502" daddr=::ffff:172.20.20.53 dest=20005 [ 508.281571][T10973] FAULT_INJECTION: forcing a failure. [ 508.281571][T10973] name failslab, interval 1, probability 0, space 0, times 0 [ 508.281607][T10973] CPU: 1 UID: 0 PID: 10973 Comm: syz.4.1503 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 508.281635][T10973] Tainted: [L]=SOFTLOCKUP [ 508.281642][T10973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.281654][T10973] Call Trace: [ 508.281662][T10973] [ 508.281670][T10973] dump_stack_lvl+0xe8/0x150 [ 508.281704][T10973] should_fail_ex+0x467/0x600 [ 508.281740][T10973] should_failslab+0xa8/0x100 [ 508.281764][T10973] __kmalloc_cache_noprof+0xa0/0x6b0 [ 508.281787][T10973] ? percpu_ref_init+0xc5/0x350 [ 508.281805][T10973] ? percpu_ref_init+0xc5/0x350 [ 508.281828][T10973] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 508.281848][T10973] percpu_ref_init+0xc5/0x350 [ 508.281869][T10973] io_ring_ctx_alloc+0x33c/0xc60 [ 508.281896][T10973] io_uring_create+0x50/0x990 [ 508.281918][T10973] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 508.281965][T10973] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 508.281995][T10973] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 508.282034][T10973] ? __pfx_ksys_write+0x10/0x10 [ 508.282071][T10973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.282092][T10973] do_syscall_64+0x174/0x580 [ 508.282117][T10973] ? trace_irq_disable+0x3b/0x140 [ 508.282137][T10973] ? clear_bhb_loop+0x40/0x90 [ 508.282159][T10973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.282178][T10973] RIP: 0033:0x7f1511a3e019 [ 508.282196][T10973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.282212][T10973] RSP: 002b:00007f150fc95ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 508.282232][T10973] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f1511a3e019 [ 508.282246][T10973] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000e26 [ 508.282259][T10973] RBP: 0000200000000a80 R08: 0000200000000340 R09: 0000000000000000 [ 508.282273][T10973] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 508.282287][T10973] R13: 0000200000000b10 R14: 00007f150fc95fd8 R15: 0000000000000000 [ 508.282316][T10973] [ 508.288835][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1502'. [ 508.843280][ T5327] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 508.845792][T10977] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1504'. [ 508.975333][ T5909] usb 6-1: USB disconnect, device number 25 [ 509.017735][ T5327] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 509.017777][ T5327] usb 5-1: config 16 interface 0 has no altsetting 0 [ 509.017810][ T5327] usb 5-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 509.017833][ T5327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.268907][T10988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1508'. [ 509.283277][ T5327] usb 5-1: string descriptor 0 read error: -71 [ 509.306354][ T5327] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 509.306482][ T5327] imon 5-1:16.0: unable to initialize intf0, err -19 [ 509.306500][ T5327] imon:imon_probe: failed to initialize context! [ 509.306511][ T5327] imon 5-1:16.0: unable to register, err -19 [ 509.312467][ T5327] usb 5-1: USB disconnect, device number 64 [ 509.368060][T10988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1508'. [ 509.529115][T10988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1508'. [ 509.567199][T10988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1508'. [ 509.615000][T10988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1508'. [ 509.723600][T10988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1508'. [ 509.846920][T10988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1508'. [ 509.847833][T10988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1508'. [ 509.856520][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 510.044783][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 510.047261][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.047313][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.047340][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 510.047362][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 510.047384][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.048685][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 510.048711][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 510.048731][ T10] usb 6-1: Manufacturer: syz [ 510.060145][ T10] usb 6-1: config 0 descriptor?? [ 510.466997][ T10] rc_core: IR keymap rc-hauppauge not found [ 510.467018][ T10] Registered IR keymap rc-empty [ 510.467468][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 510.484176][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 510.525844][ T5256] 8021q: adding VLAN 0 to HW filter on device eth7 [ 510.671320][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 510.677663][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input42 [ 510.765786][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 510.786266][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 510.803511][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 510.881706][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 510.896862][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 510.903032][ T37] audit: type=1400 audit(2000000148.220:1012): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=10990 comm="syz.5.1509" daddr=::ffff:172.20.20.53 dest=20005 [ 510.913803][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 510.944080][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 510.963351][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 511.050257][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 511.084676][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 511.138441][ T10] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 511.138467][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 511.577732][T11030] FAULT_INJECTION: forcing a failure. [ 511.577732][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 511.577765][T11030] CPU: 1 UID: 0 PID: 11030 Comm: syz.3.1518 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 511.577787][T11030] Tainted: [L]=SOFTLOCKUP [ 511.577793][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 511.577803][T11030] Call Trace: [ 511.577809][T11030] [ 511.577817][T11030] dump_stack_lvl+0xe8/0x150 [ 511.577848][T11030] should_fail_ex+0x467/0x600 [ 511.577877][T11030] should_failslab+0xa8/0x100 [ 511.577899][T11030] kmem_cache_alloc_noprof+0xa4/0x650 [ 511.577916][T11030] ? security_file_alloc+0x34/0x310 [ 511.577938][T11030] ? security_file_alloc+0x34/0x310 [ 511.577961][T11030] security_file_alloc+0x34/0x310 [ 511.577982][T11030] init_file+0x96/0x2d0 [ 511.578002][T11030] alloc_empty_file+0x74/0x1d0 [ 511.578021][T11030] path_openat+0x8f/0x3850 [ 511.578085][T11030] ? kasan_save_track+0x3e/0x80 [ 511.578101][T11030] ? __kasan_slab_alloc+0x6c/0x80 [ 511.578117][T11030] ? kmem_cache_alloc_noprof+0x355/0x650 [ 511.578132][T11030] ? do_getname+0x2e/0x250 [ 511.578154][T11030] ? do_sys_openat2+0xcc/0x200 [ 511.578168][T11030] ? __x64_sys_openat+0x138/0x170 [ 511.578183][T11030] ? do_syscall_64+0x174/0x580 [ 511.578206][T11030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.578236][T11030] do_file_open+0x23e/0x4a0 [ 511.578254][T11030] ? lockdep_hardirqs_on+0x7a/0x110 [ 511.578276][T11030] ? __pfx_do_file_open+0x10/0x10 [ 511.578311][T11030] ? alloc_fd+0x654/0x6d0 [ 511.578332][T11030] do_sys_openat2+0x115/0x200 [ 511.578349][T11030] ? __pfx_do_sys_openat2+0x10/0x10 [ 511.578365][T11030] ? ksys_write+0x248/0x270 [ 511.578385][T11030] ? __pfx_ksys_write+0x10/0x10 [ 511.578406][T11030] __x64_sys_openat+0x138/0x170 [ 511.578423][T11030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.578438][T11030] do_syscall_64+0x174/0x580 [ 511.578458][T11030] ? trace_irq_disable+0x3b/0x140 [ 511.578474][T11030] ? clear_bhb_loop+0x40/0x90 [ 511.578495][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.578511][T11030] RIP: 0033:0x7f5f2b67e019 [ 511.578528][T11030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.578543][T11030] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 511.578562][T11030] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 511.578574][T11030] RDX: 0000000000002003 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 511.578584][T11030] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 511.578593][T11030] R10: 0000000000000106 R11: 0000000000000246 R12: 0000000000000001 [ 511.578602][T11030] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 511.578624][T11030] [ 512.585568][T10251] usb 6-1: USB disconnect, device number 26 [ 512.779148][T11018] bond0: option resend_igmp: invalid value (43207) [ 512.779171][T11018] bond0: option resend_igmp: allowed values 0 - 255 [ 512.896089][T11018] bond0 (unregistering): Released all slaves [ 512.916685][T11050] FAULT_INJECTION: forcing a failure. [ 512.916685][T11050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.916709][T11050] CPU: 0 UID: 0 PID: 11050 Comm: syz.4.1528 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 512.916725][T11050] Tainted: [L]=SOFTLOCKUP [ 512.916729][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.916736][T11050] Call Trace: [ 512.916740][T11050] [ 512.916746][T11050] dump_stack_lvl+0xe8/0x150 [ 512.916768][T11050] should_fail_ex+0x467/0x600 [ 512.916788][T11050] _copy_from_iter+0x1d3/0x1660 [ 512.916801][T11050] ? rcu_is_watching+0x15/0xb0 [ 512.916816][T11050] ? trace_kmem_cache_alloc+0x29/0xe0 [ 512.916829][T11050] ? __pfx__copy_from_iter+0x10/0x10 [ 512.916840][T11050] ? __alloc_skb+0x276/0x7a0 [ 512.916852][T11050] ? __alloc_skb+0x276/0x7a0 [ 512.916866][T11050] ? netlink_sendmsg+0x650/0xb40 [ 512.916880][T11050] ? skb_put+0x112/0x210 [ 512.916894][T11050] netlink_sendmsg+0x6c0/0xb40 [ 512.916911][T11050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.916926][T11050] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 512.916942][T11050] ? __kernel_text_address+0xd/0x30 [ 512.916953][T11050] ? unwind_get_return_address+0x4d/0x90 [ 512.916967][T11050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.916980][T11050] sock_sendmsg_nosec+0x13a/0x180 [ 512.917002][T11050] ____sys_sendmsg+0x565/0x870 [ 512.917015][T11050] ? __might_fault+0xaf/0x130 [ 512.917029][T11050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.917049][T11050] ? import_iovec+0x73/0xa0 [ 512.917064][T11050] ___sys_sendmsg+0x2a5/0x360 [ 512.917076][T11050] ? __lock_acquire+0x683/0x2ce0 [ 512.917090][T11050] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.917119][T11050] ? __fget_files+0x2a/0x420 [ 512.917130][T11050] ? __fget_files+0x3a8/0x420 [ 512.917146][T11050] __x64_sys_sendmsg+0x1b7/0x290 [ 512.917161][T11050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.917185][T11050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.917196][T11050] do_syscall_64+0x174/0x580 [ 512.917210][T11050] ? trace_irq_disable+0x3b/0x140 [ 512.917221][T11050] ? clear_bhb_loop+0x40/0x90 [ 512.917234][T11050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.917244][T11050] RIP: 0033:0x7f1511a3e019 [ 512.917258][T11050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.917267][T11050] RSP: 002b:00007f150fc96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.917279][T11050] RAX: ffffffffffffffda RBX: 00007f1511cc5fa0 RCX: 00007f1511a3e019 [ 512.917286][T11050] RDX: 0000000024040040 RSI: 0000200000000000 RDI: 0000000000000009 [ 512.917293][T11050] RBP: 00007f150fc96090 R08: 0000000000000000 R09: 0000000000000000 [ 512.917300][T11050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.917306][T11050] R13: 00007f1511cc6038 R14: 00007f1511cc5fa0 R15: 00007fff2f131eb8 [ 512.917321][T11050] [ 513.570333][ T7738] IPVS: stop unused estimator thread 0... [ 514.328331][T11088] FAULT_INJECTION: forcing a failure. [ 514.328331][T11088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.328378][T11088] CPU: 1 UID: 0 PID: 11088 Comm: syz.2.1540 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 514.328408][T11088] Tainted: [L]=SOFTLOCKUP [ 514.328415][T11088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.328428][T11088] Call Trace: [ 514.328436][T11088] [ 514.328446][T11088] dump_stack_lvl+0xe8/0x150 [ 514.328478][T11088] should_fail_ex+0x467/0x600 [ 514.328513][T11088] _copy_from_iter+0x1d3/0x1660 [ 514.328536][T11088] ? rcu_is_watching+0x15/0xb0 [ 514.328558][T11088] ? trace_kmem_cache_alloc+0x29/0xe0 [ 514.328577][T11088] ? __pfx__copy_from_iter+0x10/0x10 [ 514.328594][T11088] ? __alloc_skb+0x276/0x7a0 [ 514.328612][T11088] ? __alloc_skb+0x276/0x7a0 [ 514.328634][T11088] ? netlink_sendmsg+0x650/0xb40 [ 514.328657][T11088] ? skb_put+0x112/0x210 [ 514.328682][T11088] netlink_sendmsg+0x6c0/0xb40 [ 514.328711][T11088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.328734][T11088] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 514.328765][T11088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.328787][T11088] sock_sendmsg_nosec+0x13a/0x180 [ 514.328817][T11088] ____sys_sendmsg+0x565/0x870 [ 514.328840][T11088] ? __might_fault+0xaf/0x130 [ 514.328867][T11088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.328897][T11088] ? import_iovec+0x73/0xa0 [ 514.328922][T11088] ___sys_sendmsg+0x2a5/0x360 [ 514.328945][T11088] ? __lock_acquire+0x683/0x2ce0 [ 514.328970][T11088] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.328995][T11088] ? kstrtouint+0x6e/0xe0 [ 514.329024][T11088] ? __fget_files+0x2a/0x420 [ 514.329034][T11088] ? __fget_files+0x3a8/0x420 [ 514.329050][T11088] __sys_sendmmsg+0x279/0x4d0 [ 514.329066][T11088] ? __pfx___sys_sendmmsg+0x10/0x10 [ 514.329083][T11088] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 514.329102][T11088] ? ksys_write+0x248/0x270 [ 514.329117][T11088] ? __pfx_ksys_write+0x10/0x10 [ 514.329132][T11088] __x64_sys_sendmmsg+0xa0/0xc0 [ 514.329146][T11088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.329157][T11088] do_syscall_64+0x174/0x580 [ 514.329172][T11088] ? trace_irq_disable+0x3b/0x140 [ 514.329183][T11088] ? clear_bhb_loop+0x40/0x90 [ 514.329196][T11088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.329206][T11088] RIP: 0033:0x7fdb1deae019 [ 514.329218][T11088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.329227][T11088] RSP: 002b:00007fdb1c106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 514.329239][T11088] RAX: ffffffffffffffda RBX: 00007fdb1e135fa0 RCX: 00007fdb1deae019 [ 514.329247][T11088] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000004 [ 514.329254][T11088] RBP: 00007fdb1c106090 R08: 0000000000000000 R09: 0000000000000000 [ 514.329260][T11088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.329266][T11088] R13: 00007fdb1e136038 R14: 00007fdb1e135fa0 R15: 00007ffe63234688 [ 514.329281][T11088] [ 515.068545][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 515.233826][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 515.236000][ T10] usb 6-1: config 0 has an invalid interface number: 131 but max is 0 [ 515.236029][ T10] usb 6-1: config 0 has no interface number 0 [ 515.236057][ T10] usb 6-1: config 0 interface 131 has no altsetting 0 [ 515.238161][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= a.10 [ 515.238190][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.238211][ T10] usb 6-1: Product: syz [ 515.238226][ T10] usb 6-1: Manufacturer: syz [ 515.238240][ T10] usb 6-1: SerialNumber: syz [ 515.319680][ T10] usb 6-1: config 0 descriptor?? [ 515.549777][ T10] ims_pcu 6-1:0.131: Zero length descriptor [ 515.549841][ T10] ims_pcu 6-1:0.131: probe with driver ims_pcu failed with error -22 [ 515.557585][ T10] usb 6-1: USB disconnect, device number 27 [ 515.915498][T11097] binder: 11094:11097 ioctl c0046209 0 returned -22 [ 516.155995][T11121] kernel profiling enabled (shift: 7) [ 516.156545][T11121] FAULT_INJECTION: forcing a failure. [ 516.156545][T11121] name failslab, interval 1, probability 0, space 0, times 0 [ 516.156568][T11121] CPU: 1 UID: 0 PID: 11121 Comm: syz.3.1550 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 516.156598][T11121] Tainted: [L]=SOFTLOCKUP [ 516.156605][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.156617][T11121] Call Trace: [ 516.156624][T11121] [ 516.156632][T11121] dump_stack_lvl+0xe8/0x150 [ 516.156655][T11121] should_fail_ex+0x467/0x600 [ 516.156682][T11121] should_failslab+0xa8/0x100 [ 516.156697][T11121] kmem_cache_alloc_node_noprof+0xae/0x670 [ 516.156710][T11121] ? alloc_vmap_area+0x21c/0x1420 [ 516.156726][T11121] ? alloc_vmap_area+0x21c/0x1420 [ 516.156745][T11121] alloc_vmap_area+0x21c/0x1420 [ 516.156771][T11121] ? rcu_is_watching+0x15/0xb0 [ 516.156788][T11121] ? __pfx_alloc_vmap_area+0x10/0x10 [ 516.156804][T11121] ? __kmalloc_cache_node_noprof+0x47b/0x6a0 [ 516.156816][T11121] ? __get_vm_area_node+0x136/0x300 [ 516.156831][T11121] ? __get_vm_area_node+0x136/0x300 [ 516.156849][T11121] __get_vm_area_node+0x1f2/0x300 [ 516.156868][T11121] __vmalloc_node_range_noprof+0x358/0x1730 [ 516.156879][T11121] ? profile_init+0xb4/0x100 [ 516.156895][T11121] ? __asan_memset+0x22/0x50 [ 516.156919][T11121] ? __pfx_policy_nodemask+0x10/0x10 [ 516.156934][T11121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 516.156944][T11121] ? rcu_is_watching+0x15/0xb0 [ 516.156962][T11121] ? profile_init+0xb4/0x100 [ 516.156973][T11121] vzalloc_noprof+0xb2/0xe0 [ 516.156983][T11121] ? profile_init+0xb4/0x100 [ 516.156995][T11121] profile_init+0xb4/0x100 [ 516.157006][T11121] profiling_store+0x6c/0xf0 [ 516.157016][T11121] ? __pfx_sysfs_kf_write+0x10/0x10 [ 516.157096][T11121] kernfs_fop_write_iter+0x3a5/0x540 [ 516.157136][T11121] vfs_write+0x61e/0xbb0 [ 516.157155][T11121] ? __pfx_vfs_write+0x10/0x10 [ 516.157172][T11121] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 516.157187][T11121] ? lockdep_hardirqs_on+0x7a/0x110 [ 516.157203][T11121] ? mutex_lock_nested+0x152/0x1d0 [ 516.157213][T11121] ? fdget_pos+0x252/0x320 [ 516.157229][T11121] ksys_write+0x156/0x270 [ 516.157244][T11121] ? __pfx_ksys_write+0x10/0x10 [ 516.157262][T11121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.157273][T11121] do_syscall_64+0x174/0x580 [ 516.157287][T11121] ? trace_irq_disable+0x3b/0x140 [ 516.157298][T11121] ? clear_bhb_loop+0x40/0x90 [ 516.157311][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.157322][T11121] RIP: 0033:0x7f5f2b67e019 [ 516.157334][T11121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.157343][T11121] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.157355][T11121] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 516.157363][T11121] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000007 [ 516.157370][T11121] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 516.157376][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.157383][T11121] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 516.157401][T11121] [ 516.157436][T11121] syz.3.1550: vmalloc error: size 5391836, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 516.157517][T11121] CPU: 1 UID: 0 PID: 11121 Comm: syz.3.1550 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 516.157531][T11121] Tainted: [L]=SOFTLOCKUP [ 516.157535][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.157541][T11121] Call Trace: [ 516.157545][T11121] [ 516.157549][T11121] dump_stack_lvl+0xe8/0x150 [ 516.157566][T11121] warn_alloc+0x24c/0x270 [ 516.157578][T11121] ? kasan_quarantine_put+0xbb/0x1f0 [ 516.157590][T11121] ? __pfx_warn_alloc+0x10/0x10 [ 516.157602][T11121] ? __get_vm_area_node+0x20b/0x300 [ 516.157621][T11121] ? __get_vm_area_node+0x20b/0x300 [ 516.157640][T11121] __vmalloc_node_range_noprof+0x37d/0x1730 [ 516.157655][T11121] ? __asan_memset+0x22/0x50 [ 516.157686][T11121] ? __pfx_policy_nodemask+0x10/0x10 [ 516.157700][T11121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 516.157711][T11121] ? rcu_is_watching+0x15/0xb0 [ 516.157729][T11121] ? profile_init+0xb4/0x100 [ 516.157740][T11121] vzalloc_noprof+0xb2/0xe0 [ 516.157750][T11121] ? profile_init+0xb4/0x100 [ 516.157762][T11121] profile_init+0xb4/0x100 [ 516.157772][T11121] profiling_store+0x6c/0xf0 [ 516.157782][T11121] ? __pfx_sysfs_kf_write+0x10/0x10 [ 516.157791][T11121] kernfs_fop_write_iter+0x3a5/0x540 [ 516.157808][T11121] vfs_write+0x61e/0xbb0 [ 516.157826][T11121] ? __pfx_vfs_write+0x10/0x10 [ 516.157840][T11121] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 516.157854][T11121] ? lockdep_hardirqs_on+0x7a/0x110 [ 516.157868][T11121] ? mutex_lock_nested+0x152/0x1d0 [ 516.157878][T11121] ? fdget_pos+0x252/0x320 [ 516.157894][T11121] ksys_write+0x156/0x270 [ 516.157908][T11121] ? __pfx_ksys_write+0x10/0x10 [ 516.157926][T11121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.157937][T11121] do_syscall_64+0x174/0x580 [ 516.157950][T11121] ? trace_irq_disable+0x3b/0x140 [ 516.157961][T11121] ? clear_bhb_loop+0x40/0x90 [ 516.157973][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.157983][T11121] RIP: 0033:0x7f5f2b67e019 [ 516.157992][T11121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.158001][T11121] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.158010][T11121] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 516.158018][T11121] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000007 [ 516.158024][T11121] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 516.158030][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.158036][T11121] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 516.158053][T11121] [ 516.158057][T11121] Mem-Info: [ 516.158064][T11121] active_anon:192 inactive_anon:7124 isolated_anon:0 [ 516.158064][T11121] active_file:24576 inactive_file:38935 isolated_file:0 [ 516.158064][T11121] unevictable:768 dirty:122 writeback:0 [ 516.158064][T11121] slab_reclaimable:11953 slab_unreclaimable:101164 [ 516.158064][T11121] mapped:31574 shmem:1307 pagetables:1560 [ 516.158064][T11121] sec_pagetables:0 bounce:0 [ 516.158064][T11121] kernel_misc_reclaimable:0 [ 516.158064][T11121] free:1298392 free_pcp:6874 free_cma:0 [ 516.158091][T11121] Node 0 active_anon:768kB inactive_anon:28496kB active_file:98108kB inactive_file:155740kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126296kB dirty:480kB writeback:0kB shmem:3692kB kernel_stack:14924kB pagetables:6100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 516.158117][T11121] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 516.158140][T11121] Node 0 DMA free:15328kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 516.158173][T11121] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 516.158190][T11121] Node 0 DMA32 free:1233404kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:768kB inactive_anon:28496kB active_file:98108kB inactive_file:155740kB unevictable:1536kB writepending:480kB zspages:0kB present:3129332kB managed:2560556kB mlocked:0kB bounce:0kB free_pcp:27488kB local_pcp:8416kB free_cma:0kB [ 516.158221][T11121] lowmem_reserve[]: 0 0 1 1 1 [ 516.158237][T11121] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 516.158264][T11121] lowmem_reserve[]: 0 0 0 0 0 [ 516.158280][T11121] Node 1 Normal free:3944836kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 516.158309][T11121] lowmem_reserve[]: 0 0 0 0 0 [ 516.158325][T11121] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 516.158888][T11121] Node 0 DMA32: 838*4kB (UME) 399*8kB (UME) 165*16kB (UME) 552*32kB (UME) 307*64kB (UME) 139*128kB (UME) 65*256kB (UME) 25*512kB (UME) 17*1024kB (UME) 10*2048kB (UME) 269*4096kB (UM) = 1233440kB [ 516.158971][T11121] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 516.159020][T11121] Node 1 Normal: 5*4kB (UM) 2*8kB (UM) 10*16kB (UM) 6*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (M) 1*512kB (M) 2*1024kB (UM) 2*2048kB (M) 961*4096kB (M) = 3944836kB [ 516.159101][T11121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.159110][T11121] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 516.159118][T11121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.159126][T11121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 516.159134][T11121] 64796 total pagecache pages [ 516.159138][T11121] 0 pages in swap cache [ 516.159142][T11121] Free swap = 124996kB [ 516.159146][T11121] Total swap = 124996kB [ 516.159150][T11121] 2097051 pages RAM [ 516.159154][T11121] 0 pages HighMem/MovableOnly [ 516.159158][T11121] 424834 pages reserved [ 516.159161][T11121] 0 pages cma reserved [ 517.061819][ T37] audit: type=1400 audit(2000000154.400:1013): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=11136 comm="syz.4.1557" daddr=::ffff:172.20.20.170 [ 517.711119][T11154] FAULT_INJECTION: forcing a failure. [ 517.711119][T11154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.711152][T11154] CPU: 1 UID: 0 PID: 11154 Comm: syz.3.1563 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 517.711174][T11154] Tainted: [L]=SOFTLOCKUP [ 517.711181][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 517.711191][T11154] Call Trace: [ 517.711197][T11154] [ 517.711205][T11154] dump_stack_lvl+0xe8/0x150 [ 517.711240][T11154] should_fail_ex+0x467/0x600 [ 517.711272][T11154] _copy_from_iter+0x1d3/0x1660 [ 517.711290][T11154] ? rcu_is_watching+0x15/0xb0 [ 517.711313][T11154] ? trace_kmem_cache_alloc+0x29/0xe0 [ 517.711333][T11154] ? __pfx__copy_from_iter+0x10/0x10 [ 517.711351][T11154] ? __alloc_skb+0x276/0x7a0 [ 517.711373][T11154] ? __alloc_skb+0x276/0x7a0 [ 517.711398][T11154] ? netlink_sendmsg+0x650/0xb40 [ 517.711418][T11154] ? skb_put+0x112/0x210 [ 517.711436][T11154] netlink_sendmsg+0x6c0/0xb40 [ 517.711467][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.711486][T11154] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 517.711509][T11154] ? __kernel_text_address+0xd/0x30 [ 517.711529][T11154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.711546][T11154] sock_sendmsg_nosec+0x13a/0x180 [ 517.711572][T11154] ____sys_sendmsg+0x565/0x870 [ 517.711591][T11154] ? __might_fault+0xaf/0x130 [ 517.711612][T11154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.711638][T11154] ? import_iovec+0x73/0xa0 [ 517.711658][T11154] ___sys_sendmsg+0x2a5/0x360 [ 517.711676][T11154] ? __lock_acquire+0x683/0x2ce0 [ 517.711696][T11154] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.711741][T11154] ? __fget_files+0x2a/0x420 [ 517.711757][T11154] ? __fget_files+0x3a8/0x420 [ 517.711782][T11154] __x64_sys_sendmsg+0x1b7/0x290 [ 517.711805][T11154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 517.711840][T11154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.711856][T11154] do_syscall_64+0x174/0x580 [ 517.711879][T11154] ? trace_irq_disable+0x3b/0x140 [ 517.711897][T11154] ? clear_bhb_loop+0x40/0x90 [ 517.711918][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.711935][T11154] RIP: 0033:0x7f5f2b67e019 [ 517.711953][T11154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.711966][T11154] RSP: 002b:00007f5f298b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.711982][T11154] RAX: ffffffffffffffda RBX: 00007f5f2b906090 RCX: 00007f5f2b67e019 [ 517.711994][T11154] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000004 [ 517.712004][T11154] RBP: 00007f5f298b5090 R08: 0000000000000000 R09: 0000000000000000 [ 517.712013][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.712034][T11154] R13: 00007f5f2b906128 R14: 00007f5f2b906090 R15: 00007ffdd7476de8 [ 517.712058][T11154] [ 517.734303][T10251] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 517.916356][T10251] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 517.916383][T10251] usb 3-1: config 0 has no interface number 0 [ 517.919388][T10251] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 517.919415][T10251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.919434][T10251] usb 3-1: Product: syz [ 517.919448][T10251] usb 3-1: Manufacturer: syz [ 517.919463][T10251] usb 3-1: SerialNumber: syz [ 517.947889][T10251] usb 3-1: config 0 descriptor?? [ 518.169885][ T37] audit: type=1807 audit(2000000155.490:1014): action=measure res=1 [ 518.313279][ T5702] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 518.391205][T10251] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 518.391237][T10251] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 518.391522][T10251] asix 3-1:0.251: probe with driver asix failed with error -5 [ 518.509062][ T5702] usb 6-1: unable to get BOS descriptor or descriptor too short [ 518.512661][ T5702] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.512688][ T5702] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 518.512748][ T5702] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 518.550502][ T5702] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 518.550532][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.550551][ T5702] usb 6-1: Product: syz [ 518.550566][ T5702] usb 6-1: Manufacturer: syz [ 518.550580][ T5702] usb 6-1: SerialNumber: syz [ 518.924470][T11159] ima: policy update completed [ 518.925440][ T37] audit: type=1802 audit(2000000156.270:1015): pid=11159 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=completed comm="syz.4.1565" res=1 errno=0 [ 518.972679][ T5702] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 519.290315][ T5702] usb 6-1: USB disconnect, device number 28 [ 519.548853][ T37] audit: type=1800 audit(2000000156.880:1016): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 519.953452][T11190] FAULT_INJECTION: forcing a failure. [ 519.953452][T11190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.953490][T11190] CPU: 0 UID: 0 PID: 11190 Comm: syz.3.1571 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 519.953519][T11190] Tainted: [L]=SOFTLOCKUP [ 519.953526][T11190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.953537][T11190] Call Trace: [ 519.953544][T11190] [ 519.953551][T11190] dump_stack_lvl+0xe8/0x150 [ 519.953586][T11190] should_fail_ex+0x467/0x600 [ 519.953619][T11190] _copy_from_iter+0x1d3/0x1660 [ 519.953643][T11190] ? rcu_is_watching+0x15/0xb0 [ 519.953673][T11190] ? trace_kmem_cache_alloc+0x29/0xe0 [ 519.953695][T11190] ? __pfx__copy_from_iter+0x10/0x10 [ 519.953715][T11190] ? __alloc_skb+0x276/0x7a0 [ 519.953734][T11190] ? __alloc_skb+0x276/0x7a0 [ 519.953758][T11190] ? netlink_sendmsg+0x650/0xb40 [ 519.953783][T11190] ? skb_put+0x112/0x210 [ 519.953817][T11190] netlink_sendmsg+0x6c0/0xb40 [ 519.953851][T11190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.953878][T11190] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 519.953911][T11190] ? __lock_acquire+0x683/0x2ce0 [ 519.953933][T11190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.953958][T11190] sock_sendmsg_nosec+0x13a/0x180 [ 519.953992][T11190] ____sys_sendmsg+0x565/0x870 [ 519.954017][T11190] ? __might_fault+0xaf/0x130 [ 519.954044][T11190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.954078][T11190] ? import_iovec+0x73/0xa0 [ 519.954104][T11190] ___sys_sendmsg+0x2a5/0x360 [ 519.954129][T11190] ? __lock_acquire+0x683/0x2ce0 [ 519.954153][T11190] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.954210][T11190] ? __fget_files+0x2a/0x420 [ 519.954230][T11190] ? __fget_files+0x3a8/0x420 [ 519.954259][T11190] __x64_sys_sendmsg+0x1b7/0x290 [ 519.954288][T11190] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.954328][T11190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.954350][T11190] do_syscall_64+0x174/0x580 [ 519.954378][T11190] ? clear_bhb_loop+0x40/0x90 [ 519.954401][T11190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.954421][T11190] RIP: 0033:0x7f5f2b67e019 [ 519.954439][T11190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.954455][T11190] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.954476][T11190] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 519.954491][T11190] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 519.954503][T11190] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 519.954515][T11190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.954527][T11190] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 519.954557][T11190] [ 520.593361][ T37] audit: type=1800 audit(2000000157.660:1017): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 520.594941][ T37] audit: type=1800 audit(2000000157.940:1018): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=148325 res=0 errno=0 [ 520.635385][ T37] audit: type=1800 audit(2000000157.980:1019): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 520.642933][ T37] audit: type=1800 audit(2000000157.980:1020): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 520.644135][ T37] audit: type=1800 audit(2000000157.990:1021): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15756 res=0 errno=0 [ 520.649970][ T37] audit: type=1800 audit(2000000157.990:1022): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15756 res=0 errno=0 [ 520.702122][ T5909] usb 3-1: USB disconnect, device number 42 [ 521.436476][ T6232] udevd[6232]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.949259][T11213] __nla_validate_parse: 10 callbacks suppressed [ 521.949280][T11213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1577'. [ 522.014400][T11201] binder: 11199:11201 ioctl c0046209 0 returned -22 [ 522.101485][T11219] sch_tbf: burst 7 is lower than device bond_slave_1 mtu (1514) ! [ 522.124853][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 522.124872][ T37] audit: type=1800 audit(2000000159.460:1031): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 522.268345][ T37] audit: type=1800 audit(2000000159.610:1032): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24752 res=0 errno=0 [ 522.435962][ T37] audit: type=1800 audit(2000000159.770:1033): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15756 res=0 errno=0 [ 522.439240][ T37] audit: type=1800 audit(2000000159.780:1034): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148757 res=0 errno=0 [ 522.546145][ T37] audit: type=1800 audit(2000000159.890:1035): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 522.592749][ T37] audit: type=1800 audit(2000000159.930:1036): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 522.702597][ T37] audit: type=1800 audit(2000000160.040:1037): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31578 res=0 errno=0 [ 522.756993][ T37] audit: type=1800 audit(2000000160.100:1038): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31601 res=0 errno=0 [ 522.800468][ T37] audit: type=1800 audit(2000000160.130:1039): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 522.878048][T11237] FAULT_INJECTION: forcing a failure. [ 522.878048][T11237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.878102][T11237] CPU: 1 UID: 0 PID: 11237 Comm: syz.3.1584 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 522.878131][T11237] Tainted: [L]=SOFTLOCKUP [ 522.878139][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 522.878165][T11237] Call Trace: [ 522.878184][T11237] [ 522.878193][T11237] dump_stack_lvl+0xe8/0x150 [ 522.878230][T11237] should_fail_ex+0x467/0x600 [ 522.878284][T11237] _copy_from_iter+0x1d3/0x1660 [ 522.878327][T11237] ? rcu_is_watching+0x15/0xb0 [ 522.878383][T11237] ? trace_kmem_cache_alloc+0x29/0xe0 [ 522.878433][T11237] ? __pfx__copy_from_iter+0x10/0x10 [ 522.878467][T11237] ? __alloc_skb+0x276/0x7a0 [ 522.878553][T11237] ? __alloc_skb+0x276/0x7a0 [ 522.878589][T11237] ? netlink_sendmsg+0x650/0xb40 [ 522.878639][T11237] ? skb_put+0x112/0x210 [ 522.878666][T11237] netlink_sendmsg+0x6c0/0xb40 [ 522.878699][T11237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.878738][T11237] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 522.878772][T11237] ? __kernel_text_address+0xd/0x30 [ 522.878804][T11237] ? unwind_get_return_address+0x4d/0x90 [ 522.878830][T11237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.878856][T11237] sock_sendmsg_nosec+0x13a/0x180 [ 522.878890][T11237] ____sys_sendmsg+0x565/0x870 [ 522.878917][T11237] ? __might_fault+0xaf/0x130 [ 522.878968][T11237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.879010][T11237] ? import_iovec+0x73/0xa0 [ 522.879050][T11237] ___sys_sendmsg+0x2a5/0x360 [ 522.879074][T11237] ? __lock_acquire+0x683/0x2ce0 [ 522.879111][T11237] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.879183][T11237] ? __fget_files+0x2a/0x420 [ 522.879210][T11237] ? __fget_files+0x3a8/0x420 [ 522.879267][T11237] __x64_sys_sendmsg+0x1b7/0x290 [ 522.879297][T11237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 522.879340][T11237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.879363][T11237] do_syscall_64+0x174/0x580 [ 522.879392][T11237] ? clear_bhb_loop+0x40/0x90 [ 522.879416][T11237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.879436][T11237] RIP: 0033:0x7f5f2b67e019 [ 522.879455][T11237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.879483][T11237] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.879518][T11237] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 522.879533][T11237] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 522.879546][T11237] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 522.879559][T11237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.879570][T11237] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 522.879602][T11237] [ 522.993359][ T5909] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 523.149734][ T37] audit: type=1800 audit(2000000160.490:1040): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 523.213343][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 523.216302][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.216334][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.216372][ T5909] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 523.216395][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.279671][ T5909] usb 5-1: config 0 descriptor?? [ 523.282175][ T5909] hub 5-1:0.0: USB hub found [ 523.702734][T11252] FAULT_INJECTION: forcing a failure. [ 523.702734][T11252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.702770][T11252] CPU: 1 UID: 0 PID: 11252 Comm: syz.3.1587 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 523.702799][T11252] Tainted: [L]=SOFTLOCKUP [ 523.702806][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 523.702818][T11252] Call Trace: [ 523.702826][T11252] [ 523.702834][T11252] dump_stack_lvl+0xe8/0x150 [ 523.702869][T11252] should_fail_ex+0x467/0x600 [ 523.702904][T11252] _copy_from_user+0x2d/0xb0 [ 523.702927][T11252] ___sys_sendmsg+0x1c6/0x360 [ 523.702952][T11252] ? __lock_acquire+0x683/0x2ce0 [ 523.702977][T11252] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.703033][T11252] ? __fget_files+0x2a/0x420 [ 523.703054][T11252] ? __fget_files+0x3a8/0x420 [ 523.703084][T11252] __x64_sys_sendmsg+0x1b7/0x290 [ 523.703112][T11252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 523.703154][T11252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.703175][T11252] do_syscall_64+0x174/0x580 [ 523.703199][T11252] ? trace_irq_disable+0x3b/0x140 [ 523.703218][T11252] ? clear_bhb_loop+0x40/0x90 [ 523.703241][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.703261][T11252] RIP: 0033:0x7f5f2b67e019 [ 523.703280][T11252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.703295][T11252] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.703315][T11252] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 523.703330][T11252] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 523.703342][T11252] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 523.703355][T11252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.703366][T11252] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 523.703396][T11252] [ 524.396052][ T5604] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 524.421666][T11266] FAULT_INJECTION: forcing a failure. [ 524.421666][T11266] name failslab, interval 1, probability 0, space 0, times 0 [ 524.421690][T11266] CPU: 1 UID: 0 PID: 11266 Comm: syz.3.1590 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 524.421707][T11266] Tainted: [L]=SOFTLOCKUP [ 524.421713][T11266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.421725][T11266] Call Trace: [ 524.421733][T11266] [ 524.421742][T11266] dump_stack_lvl+0xe8/0x150 [ 524.421778][T11266] should_fail_ex+0x467/0x600 [ 524.421815][T11266] should_failslab+0xa8/0x100 [ 524.421839][T11266] kmem_cache_alloc_node_noprof+0xae/0x670 [ 524.421871][T11266] ? __alloc_skb+0x1d7/0x7a0 [ 524.421893][T11266] ? __alloc_skb+0x1d7/0x7a0 [ 524.421924][T11266] __alloc_skb+0x1d7/0x7a0 [ 524.421951][T11266] hci_mgmt_cmd+0x1c1/0xfc0 [ 524.422046][T11266] ? __kvm_handle_async_pf+0x60/0x90 [ 524.422073][T11266] ? mutex_lock_nested+0x152/0x1d0 [ 524.422098][T11266] hci_sock_sendmsg+0x6e1/0xf50 [ 524.422126][T11266] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 524.422150][T11266] ? get_pid_task+0x20/0x1f0 [ 524.422176][T11266] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 524.422186][T11266] sock_sendmsg_nosec+0x13a/0x180 [ 524.422205][T11266] sock_write_iter+0x2e4/0x3f0 [ 524.422228][T11266] ? __pfx_sock_write_iter+0x10/0x10 [ 524.422264][T11266] ? bpf_lsm_file_permission+0x9/0x20 [ 524.422329][T11266] ? security_file_permission+0x75/0x260 [ 524.422358][T11266] vfs_write+0x61e/0xbb0 [ 524.422390][T11266] ? __pfx_vfs_write+0x10/0x10 [ 524.422423][T11266] ? __fget_files+0x2a/0x420 [ 524.422454][T11266] ksys_write+0x156/0x270 [ 524.422482][T11266] ? __pfx_ksys_write+0x10/0x10 [ 524.422512][T11266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.422524][T11266] do_syscall_64+0x174/0x580 [ 524.422538][T11266] ? trace_irq_disable+0x3b/0x140 [ 524.422549][T11266] ? clear_bhb_loop+0x40/0x90 [ 524.422569][T11266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.422589][T11266] RIP: 0033:0x7f5f2b67e019 [ 524.422608][T11266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.422624][T11266] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 524.422645][T11266] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 524.422660][T11266] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 524.422673][T11266] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 524.422683][T11266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.422689][T11266] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 524.422706][T11266] [ 524.425831][T11266] Bluetooth: MGMT ver 1.23 [ 524.545707][ T5604] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 524.545854][ T5604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.635821][ T5604] usb 3-1: config 0 descriptor?? [ 524.680746][ T5604] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 525.213490][ T5604] gspca_sunplus: reg_w_riv err -110 [ 525.213569][ T5604] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 525.863908][T10545] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 526.126553][T10545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.445117][ T5327] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 526.576596][ T5327] usb 4-1: device descriptor read/64, error -71 [ 526.635480][T11283] VFS: file-max limit 9 reached [ 526.740857][T10545] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 526.789272][ T5909] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 526.830931][ T5327] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 526.852093][ T5909] usbhid 5-1:0.0: can't add hid device: -71 [ 526.852215][ T5909] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 526.894682][ T5909] usb 5-1: USB disconnect, device number 65 [ 526.922945][T10545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.930801][T10545] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 526.973397][ T5327] usb 4-1: device descriptor read/64, error -71 [ 527.102266][ T5604] usb 3-1: USB disconnect, device number 43 [ 527.103115][ T5327] usb usb4-port1: attempt power cycle [ 527.154908][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 527.154926][ T37] audit: type=1800 audit(2000000164.490:1065): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15756 res=0 errno=0 [ 527.213514][T10545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 527.215302][T10545] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 527.303441][ T37] audit: type=1800 audit(2000000164.640:1066): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 527.307229][T10545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 527.370992][ T37] audit: type=1107 audit(2000000164.710:1067): pid=11295 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 527.473235][ T5327] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 527.475875][ T37] audit: type=1800 audit(2000000164.810:1068): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15756 res=0 errno=0 [ 527.484139][ T5327] usb 4-1: device descriptor read/8, error -71 [ 527.743291][ T5327] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 527.782014][ T5327] usb 4-1: device descriptor read/8, error -71 [ 527.883602][ T5327] usb usb4-port1: unable to enumerate USB device [ 527.930076][ T37] audit: type=1800 audit(2000000165.270:1069): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 528.078145][ T37] audit: type=1800 audit(2000000165.420:1070): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15756 res=0 errno=0 [ 528.283281][ T5602] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 528.336098][ T37] audit: type=1800 audit(2000000165.670:1071): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15756 res=0 errno=0 [ 528.373911][T11318] binder: 11316:11318 ioctl c0046209 0 returned -22 [ 528.433443][ T5602] usb 5-1: Using ep0 maxpacket: 32 [ 528.437446][ T5602] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 528.437473][ T5602] usb 5-1: config 0 has no interface number 0 [ 528.437516][ T5602] usb 5-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 528.437540][ T5602] usb 5-1: config 0 interface 184 has no altsetting 0 [ 528.457106][T11328] 9p: Bad value for 'rfdno' [ 528.458858][ T5602] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 528.458886][ T5602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.458905][ T5602] usb 5-1: Product: syz [ 528.458919][ T5602] usb 5-1: Manufacturer: syz [ 528.458933][ T5602] usb 5-1: SerialNumber: syz [ 528.497621][ T5602] usb 5-1: config 0 descriptor?? [ 528.499275][T11320] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 528.507023][ T37] audit: type=1800 audit(2000000165.850:1072): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=149496 res=0 errno=0 [ 528.527342][ T37] audit: type=1800 audit(2000000165.870:1073): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=149528 res=0 errno=0 [ 528.532901][ T37] audit: type=1800 audit(2000000165.870:1074): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=149503 res=0 errno=0 [ 528.763321][T11320] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 529.111921][T10545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.163323][ T5327] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 529.183547][ T5602] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 529.183580][ T5602] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 529.350093][ T5327] usb 6-1: Using ep0 maxpacket: 32 [ 529.352162][ T5327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.352193][ T5327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.352229][ T5327] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 529.352253][ T5327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.397937][ T5909] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 529.416802][ T5327] usb 6-1: config 0 descriptor?? [ 529.447692][ T5327] hub 6-1:0.0: USB hub found [ 529.491996][T10545] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.553553][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 529.562438][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short [ 529.579111][ T5909] usb 3-1: config index 0 descriptor too short (expected 4329, got 233) [ 529.579139][ T5909] usb 3-1: config 1 has an invalid descriptor of length 195, skipping remainder of the config [ 529.579159][ T5909] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.643571][ T5909] usb 3-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 529.643603][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.643639][ T5909] usb 3-1: Product: syz [ 529.643653][ T5909] usb 3-1: Manufacturer: syz [ 529.643723][ T5909] usb 3-1: SerialNumber: syz [ 529.840884][T10639] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.841094][T10639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.996084][T11361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'. [ 530.003109][ T5602] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 530.003333][ T5602] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 530.003355][ T5602] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 530.003627][ T5602] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 530.025528][ T5602] usb 5-1: USB disconnect, device number 66 [ 530.134303][T10639] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.134431][T10639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.263965][ T5892] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 531.518600][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 531.527970][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.527998][ T5892] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 531.528112][ T5892] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.534947][ T5892] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 531.535178][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.535216][ T5892] usb 5-1: Product: syz [ 531.535230][ T5892] usb 5-1: Manufacturer: syz [ 531.535245][ T5892] usb 5-1: SerialNumber: syz [ 532.530135][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 532.530154][ T37] audit: type=1800 audit(2000000169.870:1104): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 532.722286][T11393] netlink: 'syz.2.1619': attribute type 16 has an invalid length. [ 532.722536][T11393] netlink: 'syz.2.1619': attribute type 17 has an invalid length. [ 532.834491][ T37] audit: type=1800 audit(2000000170.180:1105): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 532.884649][ T37] audit: type=1800 audit(2000000170.220:1106): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 533.200655][T11401] Invalid ELF header magic: != ELF [ 533.203401][T11401] FAULT_INJECTION: forcing a failure. [ 533.203401][T11401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.203432][T11401] CPU: 1 UID: 0 PID: 11401 Comm: syz.3.1621 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 533.203447][T11401] Tainted: [L]=SOFTLOCKUP [ 533.203451][T11401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.203458][T11401] Call Trace: [ 533.203463][T11401] [ 533.203468][T11401] dump_stack_lvl+0xe8/0x150 [ 533.203504][T11401] should_fail_ex+0x467/0x600 [ 533.203540][T11401] _copy_from_iter+0x1d3/0x1660 [ 533.203564][T11401] ? rcu_is_watching+0x15/0xb0 [ 533.203589][T11401] ? trace_kmem_cache_alloc+0x29/0xe0 [ 533.203602][T11401] ? __pfx__copy_from_iter+0x10/0x10 [ 533.203613][T11401] ? __alloc_skb+0x276/0x7a0 [ 533.203625][T11401] ? __alloc_skb+0x276/0x7a0 [ 533.203642][T11401] ? __alloc_skb+0x4cc/0x7a0 [ 533.203661][T11401] ? skb_put+0x112/0x210 [ 533.203686][T11401] pfkey_sendmsg+0x25f/0x11d0 [ 533.203790][T11401] ? unwind_next_frame+0x8f/0x2550 [ 533.203808][T11401] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 533.203830][T11401] ? smack_socket_sendmsg+0x1a9/0x590 [ 533.203858][T11401] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 533.203887][T11401] ? __lock_acquire+0x683/0x2ce0 [ 533.203912][T11401] ? __lock_acquire+0x683/0x2ce0 [ 533.203931][T11401] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 533.203948][T11401] ? __kernel_text_address+0xd/0x30 [ 533.203959][T11401] ? unwind_get_return_address+0x4d/0x90 [ 533.203972][T11401] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 533.203993][T11401] sock_sendmsg_nosec+0x13a/0x180 [ 533.204027][T11401] ____sys_sendmsg+0x565/0x870 [ 533.204051][T11401] ? __might_fault+0xaf/0x130 [ 533.204079][T11401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.204103][T11401] ? import_iovec+0x73/0xa0 [ 533.204117][T11401] ___sys_sendmsg+0x2a5/0x360 [ 533.204129][T11401] ? __lock_acquire+0x683/0x2ce0 [ 533.204145][T11401] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.204201][T11401] ? __fget_files+0x2a/0x420 [ 533.204221][T11401] ? __fget_files+0x3a8/0x420 [ 533.204251][T11401] __x64_sys_sendmsg+0x1b7/0x290 [ 533.204269][T11401] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.204290][T11401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.204302][T11401] do_syscall_64+0x174/0x580 [ 533.204325][T11401] ? trace_irq_disable+0x3b/0x140 [ 533.204346][T11401] ? clear_bhb_loop+0x40/0x90 [ 533.204370][T11401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.204397][T11401] RIP: 0033:0x7f5f2b67e019 [ 533.204415][T11401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.204429][T11401] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.204441][T11401] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 533.204448][T11401] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 533.204455][T11401] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 533.204461][T11401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.204467][T11401] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 533.204493][T11401] [ 533.619399][ T37] audit: type=1800 audit(2000000170.960:1107): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 533.826512][ T5327] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 533.885975][ T37] audit: type=1800 audit(2000000171.230:1108): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 533.928092][ T5327] usbhid 6-1:0.0: can't add hid device: -71 [ 533.928206][ T5327] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 533.952010][ T5327] usb 6-1: USB disconnect, device number 29 [ 534.002414][ T37] audit: type=1800 audit(2000000171.340:1109): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 534.004068][ T5892] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 534.072365][ T37] audit: type=1800 audit(2000000171.410:1110): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=149880 res=0 errno=0 [ 534.141225][ T5892] usb 5-1: USB disconnect, device number 67 [ 534.162561][ T37] audit: type=1800 audit(2000000171.500:1111): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 534.182052][ T37] audit: type=1800 audit(2000000171.520:1112): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=149881 res=0 errno=0 [ 534.196562][ T37] audit: type=1800 audit(2000000171.540:1113): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=149860 res=0 errno=0 [ 534.381106][T11423] FAULT_INJECTION: forcing a failure. [ 534.381106][T11423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.381142][T11423] CPU: 0 UID: 0 PID: 11423 Comm: syz.3.1628 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 534.381169][T11423] Tainted: [L]=SOFTLOCKUP [ 534.381176][T11423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.381189][T11423] Call Trace: [ 534.381197][T11423] [ 534.381206][T11423] dump_stack_lvl+0xe8/0x150 [ 534.381242][T11423] should_fail_ex+0x467/0x600 [ 534.381292][T11423] _copy_to_user+0x31/0xb0 [ 534.381319][T11423] simple_read_from_buffer+0xe1/0x170 [ 534.381346][T11423] proc_fail_nth_read+0x1be/0x230 [ 534.381372][T11423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.381397][T11423] ? rw_verify_area+0x250/0x4d0 [ 534.381424][T11423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.381445][T11423] vfs_read+0x219/0xa90 [ 534.381477][T11423] ? __pfx_vfs_read+0x10/0x10 [ 534.381503][T11423] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 534.381530][T11423] ? lockdep_hardirqs_on+0x7a/0x110 [ 534.381553][T11423] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 534.381578][T11423] ? mutex_lock_nested+0x152/0x1d0 [ 534.381596][T11423] ? fdget_pos+0x252/0x320 [ 534.381624][T11423] ksys_read+0x156/0x270 [ 534.381649][T11423] ? __pfx_ksys_read+0x10/0x10 [ 534.381681][T11423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.381702][T11423] do_syscall_64+0x174/0x580 [ 534.381728][T11423] ? trace_irq_disable+0x3b/0x140 [ 534.381749][T11423] ? clear_bhb_loop+0x40/0x90 [ 534.381773][T11423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.381791][T11423] RIP: 0033:0x7f5f2b63e84e [ 534.381808][T11423] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 534.381826][T11423] RSP: 002b:00007f5f298d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 534.381848][T11423] RAX: ffffffffffffffda RBX: 00007f5f298d66c0 RCX: 00007f5f2b63e84e [ 534.381864][T11423] RDX: 000000000000000f RSI: 00007f5f298d60a0 RDI: 0000000000000004 [ 534.381883][T11423] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 534.381896][T11423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.381909][T11423] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 534.381941][T11423] [ 534.669451][ T5909] usb 3-1: USB disconnect, device number 44 [ 535.004035][ T5909] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 535.190103][T11435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.202908][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.202953][ T5909] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 535.202973][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.262904][ T5909] usb 3-1: config 0 descriptor?? [ 535.433255][T10251] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 535.449223][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.583699][T10251] usb 5-1: Using ep0 maxpacket: 16 [ 535.584536][T10251] usb 5-1: no configurations [ 535.584553][T10251] usb 5-1: can't read configurations, error -22 [ 535.587958][ T6259] udevd[6259]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.724886][T10251] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 535.811612][ T5909] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 535.811651][ T5909] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 535.811676][ T5909] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 535.811813][ T5909] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 535.811838][ T5909] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 535.869138][ T5909] playstation 0003:054C:0DF2.0010: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 535.893269][T10251] usb 5-1: Using ep0 maxpacket: 16 [ 535.895116][T10251] usb 5-1: no configurations [ 535.895135][T10251] usb 5-1: can't read configurations, error -22 [ 535.900805][T10251] usb usb5-port1: attempt power cycle [ 535.985293][ T5909] playstation 0003:054C:0DF2.0010: Invalid reportID received, expected 9 got 0 [ 535.985378][ T5909] playstation 0003:054C:0DF2.0010: Failed to retrieve DualSense pairing info: -22 [ 535.985426][ T5909] playstation 0003:054C:0DF2.0010: Failed to get MAC address from DualSense [ 535.985440][ T5909] playstation 0003:054C:0DF2.0010: Failed to create dualsense. [ 536.036962][ T5909] playstation 0003:054C:0DF2.0010: probe with driver playstation failed with error -22 [ 536.263353][T10251] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 536.283991][T10251] usb 5-1: Using ep0 maxpacket: 16 [ 536.284780][T10251] usb 5-1: no configurations [ 536.284798][T10251] usb 5-1: can't read configurations, error -22 [ 536.433315][T10251] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 536.454029][T10251] usb 5-1: Using ep0 maxpacket: 16 [ 536.454841][T10251] usb 5-1: no configurations [ 536.454857][T10251] usb 5-1: can't read configurations, error -22 [ 536.455493][T10251] usb usb5-port1: unable to enumerate USB device [ 536.596388][T11466] FAULT_INJECTION: forcing a failure. [ 536.596388][T11466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.597934][T11466] CPU: 0 UID: 0 PID: 11466 Comm: syz.3.1639 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 536.597967][T11466] Tainted: [L]=SOFTLOCKUP [ 536.597974][T11466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.597987][T11466] Call Trace: [ 536.597995][T11466] [ 536.598003][T11466] dump_stack_lvl+0xe8/0x150 [ 536.598040][T11466] should_fail_ex+0x467/0x600 [ 536.598083][T11466] _copy_from_iter+0x1d3/0x1660 [ 536.598108][T11466] ? rcu_is_watching+0x15/0xb0 [ 536.598134][T11466] ? trace_kmem_cache_alloc+0x29/0xe0 [ 536.598157][T11466] ? __pfx__copy_from_iter+0x10/0x10 [ 536.598178][T11466] ? __alloc_skb+0x276/0x7a0 [ 536.598198][T11466] ? __alloc_skb+0x276/0x7a0 [ 536.598224][T11466] ? netlink_sendmsg+0x650/0xb40 [ 536.598249][T11466] ? skb_put+0x112/0x210 [ 536.598274][T11466] netlink_sendmsg+0x6c0/0xb40 [ 536.598309][T11466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.598336][T11466] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 536.598368][T11466] ? __kernel_text_address+0xd/0x30 [ 536.598388][T11466] ? unwind_get_return_address+0x4d/0x90 [ 536.598414][T11466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.598439][T11466] sock_sendmsg_nosec+0x13a/0x180 [ 536.598474][T11466] ____sys_sendmsg+0x565/0x870 [ 536.598499][T11466] ? __might_fault+0xaf/0x130 [ 536.598527][T11466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.598558][T11466] ? import_iovec+0x73/0xa0 [ 536.598581][T11466] ___sys_sendmsg+0x2a5/0x360 [ 536.598604][T11466] ? __lock_acquire+0x683/0x2ce0 [ 536.598629][T11466] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.598684][T11466] ? __fget_files+0x2a/0x420 [ 536.598704][T11466] ? __fget_files+0x3a8/0x420 [ 536.598730][T11466] __x64_sys_sendmsg+0x1b7/0x290 [ 536.598755][T11466] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.598794][T11466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.598814][T11466] do_syscall_64+0x174/0x580 [ 536.598838][T11466] ? trace_irq_disable+0x3b/0x140 [ 536.598858][T11466] ? clear_bhb_loop+0x40/0x90 [ 536.598882][T11466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.598900][T11466] RIP: 0033:0x7f5f2b67e019 [ 536.598918][T11466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.598933][T11466] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.598954][T11466] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 536.598967][T11466] RDX: 0000000000040080 RSI: 0000200000000b00 RDI: 0000000000000004 [ 536.598980][T11466] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 536.598990][T11466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.599002][T11466] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 536.599030][T11466] [ 536.607930][T11434] binder: 11432:11434 ioctl c0046209 0 returned -22 [ 536.850076][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 536.933945][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 536.939839][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 536.943052][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 536.948220][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 537.031506][ T10] usb 3-1: USB disconnect, device number 45 [ 537.617107][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 537.617127][ T37] audit: type=1800 audit(2000000174.950:1154): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15756 res=0 errno=0 [ 537.699241][ T37] audit: type=1800 audit(2000000175.040:1155): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 537.862223][ T37] audit: type=1800 audit(2000000175.200:1156): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 538.043280][ T5604] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 538.068225][ T37] audit: type=1800 audit(2000000175.390:1157): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 538.262642][ T37] audit: type=1800 audit(2000000175.600:1158): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 538.285176][ T5604] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 538.285201][ T5604] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 538.285221][ T5604] usb 3-1: config 0 has no interface number 0 [ 538.289420][ T5604] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 538.289446][ T5604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.289466][ T5604] usb 3-1: Product: syz [ 538.289480][ T5604] usb 3-1: Manufacturer: syz [ 538.289494][ T5604] usb 3-1: SerialNumber: syz [ 538.327153][ T5604] usb 3-1: config 0 descriptor?? [ 538.443419][ T5604] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 538.445028][ T37] audit: type=1800 audit(2000000175.790:1159): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 538.529811][ T37] audit: type=1800 audit(2000000175.870:1160): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15756 res=0 errno=0 [ 538.567301][ T37] audit: type=1800 audit(2000000175.910:1161): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 538.678864][ T37] audit: type=1800 audit(2000000176.020:1162): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150411 res=0 errno=0 [ 538.697282][ T37] audit: type=1800 audit(2000000176.040:1163): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=150443 res=0 errno=0 [ 538.814160][ T5602] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 538.985265][ T5602] usb 5-1: Using ep0 maxpacket: 8 [ 538.987393][ T5602] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 538.987419][ T5602] usb 5-1: config 0 has no interface number 0 [ 538.987464][ T5602] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 538.987484][ T5602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.990350][ T5602] usb 5-1: config 0 descriptor?? [ 539.143934][ T5602] viperboard 5-1:0.143: version 0.00 found at bus 005 address 072 [ 539.153632][ T5605] Bluetooth: hci3: command tx timeout [ 539.286087][T11525] WARNING! power/level is deprecated; use power/control instead [ 539.957545][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.993925][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.211343][ T5909] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 540.253082][T11552] netlink: 860 bytes leftover after parsing attributes in process `syz.4.1664'. [ 540.429862][ T5602] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 540.429892][ T5602] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 540.503998][ T5602] usb 5-1: USB disconnect, device number 72 [ 540.888880][ T10] usb 3-1: USB disconnect, device number 46 [ 541.106069][ T5605] Bluetooth: hci2: unexpected event for opcode 0x0c57 [ 541.233317][ T5605] Bluetooth: hci3: command tx timeout [ 541.445065][T10251] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 541.621968][T10251] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 541.621997][T10251] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.622017][T10251] usb 3-1: config 0 has no interface number 0 [ 541.623970][T10251] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 541.623997][T10251] usb 3-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 541.624018][T10251] usb 3-1: Product: syz [ 541.624032][T10251] usb 3-1: SerialNumber: syz [ 541.648820][T10251] usb 3-1: config 0 descriptor?? [ 541.670566][T10251] ftdi_sio 3-1:0.117: FTDI USB Serial Device converter detected [ 541.690171][T10251] usb 3-1: Detected SIO [ 541.778727][T10251] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 541.867363][ T5891] usb 3-1: USB disconnect, device number 47 [ 541.950805][ T5891] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 541.954290][ T5891] ftdi_sio 3-1:0.117: device disconnected [ 542.168538][T11607] FAULT_INJECTION: forcing a failure. [ 542.168538][T11607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.168574][T11607] CPU: 0 UID: 0 PID: 11607 Comm: syz.4.1681 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 542.168601][T11607] Tainted: [L]=SOFTLOCKUP [ 542.168609][T11607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 542.168622][T11607] Call Trace: [ 542.168630][T11607] [ 542.168638][T11607] dump_stack_lvl+0xe8/0x150 [ 542.168673][T11607] should_fail_ex+0x467/0x600 [ 542.168710][T11607] strncpy_from_user+0x36/0x2c0 [ 542.168742][T11607] do_getname+0x77/0x250 [ 542.168772][T11607] __se_sys_renameat2+0x43/0x2c0 [ 542.168791][T11607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.168813][T11607] do_syscall_64+0x174/0x580 [ 542.168838][T11607] ? trace_irq_disable+0x3b/0x140 [ 542.168857][T11607] ? clear_bhb_loop+0x40/0x90 [ 542.168881][T11607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.168899][T11607] RIP: 0033:0x7f1511a3e019 [ 542.168917][T11607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.168933][T11607] RSP: 002b:00007f150fc75028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 542.168953][T11607] RAX: ffffffffffffffda RBX: 00007f1511cc6090 RCX: 00007f1511a3e019 [ 542.168967][T11607] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 542.168981][T11607] RBP: 00007f150fc75090 R08: 0000000000000000 R09: 0000000000000000 [ 542.168993][T11607] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.169005][T11607] R13: 00007f1511cc6128 R14: 00007f1511cc6090 R15: 00007fff2f131eb8 [ 542.169035][T11607] [ 542.652694][ T37] kauditd_printk_skb: 53 callbacks suppressed [ 542.652714][ T37] audit: type=1800 audit(2000000179.990:1217): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 542.961145][ T37] audit: type=1804 audit(2000000180.220:1218): pid=11623 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1684" name="/newroot/325/file0" dev="tmpfs" ino=1741 res=1 errno=0 [ 542.966829][ T37] audit: type=1800 audit(2000000180.310:1219): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 543.050616][T11623] FAULT_INJECTION: forcing a failure. [ 543.050616][T11623] name failslab, interval 1, probability 0, space 0, times 0 [ 543.050651][T11623] CPU: 1 UID: 0 PID: 11623 Comm: syz.2.1684 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 543.050677][T11623] Tainted: [L]=SOFTLOCKUP [ 543.050685][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 543.050696][T11623] Call Trace: [ 543.050704][T11623] [ 543.050713][T11623] dump_stack_lvl+0xe8/0x150 [ 543.050747][T11623] should_fail_ex+0x467/0x600 [ 543.050783][T11623] should_failslab+0xa8/0x100 [ 543.050810][T11623] kmem_cache_alloc_noprof+0xa4/0x650 [ 543.050831][T11623] ? do_getname+0x2e/0x250 [ 543.050859][T11623] ? do_getname+0x2e/0x250 [ 543.050893][T11623] do_getname+0x2e/0x250 [ 543.050920][T11623] ? user_path_at+0x1e/0x160 [ 543.050943][T11623] user_path_at+0x2a/0x160 [ 543.050968][T11623] bpf_uprobe_multi_link_attach+0x490/0x11b0 [ 543.051122][T11623] ? __fget_files+0x2a/0x420 [ 543.051153][T11623] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 543.051176][T11623] ? __fget_files+0x2a/0x420 [ 543.051198][T11623] ? __fget_files+0x2a/0x420 [ 543.051218][T11623] ? __fget_files+0x2a/0x420 [ 543.051242][T11623] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 543.051272][T11623] link_create+0x62a/0x850 [ 543.051299][T11623] __sys_bpf+0x760/0xd90 [ 543.051328][T11623] ? __pfx___sys_bpf+0x10/0x10 [ 543.051354][T11623] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 543.051384][T11623] ? rt_mutex_slowunlock+0x219/0x460 [ 543.051421][T11623] ? ksys_write+0x248/0x270 [ 543.051454][T11623] ? __pfx_ksys_write+0x10/0x10 [ 543.051481][T11623] __x64_sys_bpf+0xba/0xd0 [ 543.051509][T11623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.051530][T11623] do_syscall_64+0x174/0x580 [ 543.051563][T11623] ? trace_irq_disable+0x3b/0x140 [ 543.051582][T11623] ? clear_bhb_loop+0x40/0x90 [ 543.051607][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.051627][T11623] RIP: 0033:0x7fdb1deae019 [ 543.051644][T11623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.051660][T11623] RSP: 002b:00007fdb1c106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 543.051680][T11623] RAX: ffffffffffffffda RBX: 00007fdb1e135fa0 RCX: 00007fdb1deae019 [ 543.051694][T11623] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 543.051708][T11623] RBP: 00007fdb1c106090 R08: 0000000000000000 R09: 0000000000000000 [ 543.051720][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.051732][T11623] R13: 00007fdb1e136038 R14: 00007fdb1e135fa0 R15: 00007ffe63234688 [ 543.051763][T11623] [ 543.162577][ T37] audit: type=1800 audit(2000000180.500:1220): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15756 res=0 errno=0 [ 543.251143][T11633] FAULT_INJECTION: forcing a failure. [ 543.251143][T11633] name failslab, interval 1, probability 0, space 0, times 0 [ 543.251183][T11633] CPU: 1 UID: 0 PID: 11633 Comm: syz.5.1686 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 543.251216][T11633] Tainted: [L]=SOFTLOCKUP [ 543.251223][T11633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 543.251238][T11633] Call Trace: [ 543.251247][T11633] [ 543.251255][T11633] dump_stack_lvl+0xe8/0x150 [ 543.251292][T11633] should_fail_ex+0x467/0x600 [ 543.251328][T11633] should_failslab+0xa8/0x100 [ 543.251353][T11633] __kmalloc_noprof+0xfe/0x780 [ 543.251375][T11633] ? iovec_from_user+0x87/0x250 [ 543.251396][T11633] ? iovec_from_user+0x87/0x250 [ 543.251425][T11633] iovec_from_user+0x87/0x250 [ 543.251452][T11633] __import_iovec+0x15e/0x7e0 [ 543.251483][T11633] import_iovec+0x73/0xa0 [ 543.251561][T11633] ___sys_recvmsg+0x4c9/0x5a0 [ 543.251587][T11633] ? ktime_get_ts64+0xa9/0x410 [ 543.251611][T11633] ? __pfx____sys_recvmsg+0x10/0x10 [ 543.251641][T11633] ? __fget_files+0x2a/0x420 [ 543.251676][T11633] ? __fget_files+0x3a8/0x420 [ 543.251705][T11633] do_recvmmsg+0x320/0x7f0 [ 543.251738][T11633] ? __pfx_do_recvmmsg+0x10/0x10 [ 543.251775][T11633] ? get_timespec64+0x119/0x1b0 [ 543.251797][T11633] ? __pfx_get_timespec64+0x10/0x10 [ 543.251828][T11633] __x64_sys_recvmmsg+0x1b7/0x250 [ 543.251856][T11633] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 543.251890][T11633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.251911][T11633] do_syscall_64+0x174/0x580 [ 543.251936][T11633] ? trace_irq_disable+0x3b/0x140 [ 543.251956][T11633] ? clear_bhb_loop+0x40/0x90 [ 543.251981][T11633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.251999][T11633] RIP: 0033:0x7fb28b1ce019 [ 543.252019][T11633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.252035][T11633] RSP: 002b:00007fb289405028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 543.252056][T11633] RAX: ffffffffffffffda RBX: 00007fb28b456090 RCX: 00007fb28b1ce019 [ 543.252071][T11633] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 543.252084][T11633] RBP: 00007fb289405090 R08: 0000200000003700 R09: 0000000000000000 [ 543.252097][T11633] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 543.252109][T11633] R13: 00007fb28b456128 R14: 00007fb28b456090 R15: 00007ffe4e53ba18 [ 543.252139][T11633] [ 543.313313][ T5605] Bluetooth: hci3: command tx timeout [ 543.963191][ T37] audit: type=1800 audit(2000000181.300:1221): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 544.054106][T11648] FAULT_INJECTION: forcing a failure. [ 544.054106][T11648] name failslab, interval 1, probability 0, space 0, times 0 [ 544.054144][T11648] CPU: 1 UID: 0 PID: 11648 Comm: syz.3.1690 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 544.054171][T11648] Tainted: [L]=SOFTLOCKUP [ 544.054178][T11648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 544.054190][T11648] Call Trace: [ 544.054197][T11648] [ 544.054206][T11648] dump_stack_lvl+0xe8/0x150 [ 544.054239][T11648] should_fail_ex+0x467/0x600 [ 544.054273][T11648] should_failslab+0xa8/0x100 [ 544.054298][T11648] __kmalloc_noprof+0xfe/0x780 [ 544.054318][T11648] ? argv_split+0x18d/0x400 [ 544.054342][T11648] ? argv_split+0x18d/0x400 [ 544.054373][T11648] argv_split+0x18d/0x400 [ 544.054400][T11648] ? __pfx___trace_eprobe_create+0x10/0x10 [ 544.054426][T11648] trace_probe_create+0x94/0x130 [ 544.054457][T11648] ? __pfx_trace_probe_create+0x10/0x10 [ 544.054483][T11648] ? lockdep_hardirqs_on+0x7a/0x110 [ 544.054509][T11648] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 544.054535][T11648] ? mutex_lock_nested+0x152/0x1d0 [ 544.054555][T11648] ? create_dyn_event+0x7d/0x160 [ 544.054585][T11648] create_dyn_event+0xb3/0x160 [ 544.054611][T11648] trace_parse_run_command+0x1f3/0x380 [ 544.054714][T11648] ? __pfx_create_dyn_event+0x10/0x10 [ 544.054738][T11648] ? __pfx_dyn_event_write+0x10/0x10 [ 544.054762][T11648] vfs_write+0x29f/0xbb0 [ 544.054796][T11648] ? __pfx_vfs_write+0x10/0x10 [ 544.054824][T11648] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 544.054857][T11648] ? lockdep_hardirqs_on+0x7a/0x110 [ 544.054883][T11648] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 544.054909][T11648] ? mutex_lock_nested+0x152/0x1d0 [ 544.054928][T11648] ? fdget_pos+0x252/0x320 [ 544.054958][T11648] ksys_write+0x156/0x270 [ 544.054983][T11648] ? __pfx_ksys_write+0x10/0x10 [ 544.055015][T11648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.055037][T11648] do_syscall_64+0x174/0x580 [ 544.055062][T11648] ? trace_irq_disable+0x3b/0x140 [ 544.055081][T11648] ? clear_bhb_loop+0x40/0x90 [ 544.055106][T11648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.055127][T11648] RIP: 0033:0x7f5f2b67e019 [ 544.055146][T11648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.055162][T11648] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 544.055184][T11648] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 544.055198][T11648] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 544.055210][T11648] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 544.055223][T11648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.055235][T11648] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 544.055268][T11648] [ 544.187454][ T37] audit: type=1800 audit(2000000181.530:1222): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 544.468408][ T37] audit: type=1800 audit(2000000181.810:1223): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 544.568593][ T37] audit: type=1800 audit(2000000181.910:1224): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 544.816791][ T37] audit: type=1800 audit(2000000182.150:1225): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15756 res=0 errno=0 [ 544.846238][T11666] fuse: Unknown parameter 'wg2' [ 545.083385][ T5602] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 545.181584][ T5605] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 545.181862][ T5605] Bluetooth: hci2: Injecting HCI hardware error event [ 545.186441][ T5605] Bluetooth: hci2: hardware error 0x00 [ 545.243407][ T5891] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 545.267344][ T5602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.267377][ T5602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.267411][ T5602] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 545.267435][ T5602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.270451][ T5602] usb 6-1: config 0 descriptor?? [ 545.272155][ T37] audit: type=1800 audit(2000000182.610:1226): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151360 res=0 errno=0 [ 545.394303][ T59] Bluetooth: hci3: command tx timeout [ 545.394347][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 545.396865][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 545.399208][ T5891] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 545.399224][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.399235][ T5891] usb 5-1: config 0 has no interface number 0 [ 545.401354][ T5891] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 545.401370][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.401380][ T5891] usb 5-1: Product: syz [ 545.401388][ T5891] usb 5-1: Manufacturer: syz [ 545.401395][ T5891] usb 5-1: SerialNumber: syz [ 545.425699][ T5891] usb 5-1: config 0 descriptor?? [ 545.456019][T10251] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 545.631519][ T5891] rtsx_usb 5-1:0.49: probe with driver rtsx_usb failed with error -22 [ 545.688003][T11679] FAULT_INJECTION: forcing a failure. [ 545.688003][T11679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.688041][T11679] CPU: 1 UID: 0 PID: 11679 Comm: syz.3.1697 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 545.688069][T11679] Tainted: [L]=SOFTLOCKUP [ 545.688077][T11679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.688090][T11679] Call Trace: [ 545.688097][T11679] [ 545.688106][T11679] dump_stack_lvl+0xe8/0x150 [ 545.688139][T11679] should_fail_ex+0x467/0x600 [ 545.688175][T11679] _copy_to_user+0x31/0xb0 [ 545.688202][T11679] video_usercopy+0xdf4/0x1430 [ 545.688241][T11679] ? __pfx___video_do_ioctl+0x10/0x10 [ 545.688273][T11679] ? __pfx_video_usercopy+0x10/0x10 [ 545.688300][T11679] ? smack_file_ioctl+0x2c2/0x360 [ 545.688335][T11679] ? __fget_files+0x2a/0x420 [ 545.688356][T11679] ? __fget_files+0x3a8/0x420 [ 545.688380][T11679] v4l2_ioctl+0x190/0x1e0 [ 545.688409][T11679] ? __pfx_v4l2_ioctl+0x10/0x10 [ 545.688440][T11679] __se_sys_ioctl+0xff/0x170 [ 545.688468][T11679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.688489][T11679] do_syscall_64+0x174/0x580 [ 545.688516][T11679] ? trace_irq_disable+0x3b/0x140 [ 545.688536][T11679] ? clear_bhb_loop+0x40/0x90 [ 545.688561][T11679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.688581][T11679] RIP: 0033:0x7f5f2b67e019 [ 545.688600][T11679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.688617][T11679] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.688644][T11679] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 545.688659][T11679] RDX: 0000200000000940 RSI: 00000000c040565f RDI: 0000000000000003 [ 545.688671][T11679] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 545.688683][T11679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.688694][T11679] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 545.688724][T11679] [ 545.743365][T10251] usb 3-1: Using ep0 maxpacket: 16 [ 545.745803][T10251] usb 3-1: config 0 interface 0 altsetting 239 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 545.745836][T10251] usb 3-1: config 0 interface 0 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.745863][T10251] usb 3-1: config 0 interface 0 has no altsetting 0 [ 545.745893][T10251] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 545.745915][T10251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.763915][ T5602] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 545.763953][ T5602] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 545.763979][ T5602] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 545.764005][ T5602] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 545.764031][ T5602] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 545.951313][ T5602] playstation 0003:054C:0DF2.0011: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 545.967390][T10251] usb 3-1: config 0 descriptor?? [ 546.271131][ T5602] playstation 0003:054C:0DF2.0011: Invalid reportID received, expected 9 got 0 [ 546.271224][ T5602] playstation 0003:054C:0DF2.0011: Failed to retrieve DualSense pairing info: -22 [ 546.271270][ T5602] playstation 0003:054C:0DF2.0011: Failed to get MAC address from DualSense [ 546.271285][ T5602] playstation 0003:054C:0DF2.0011: Failed to create dualsense. [ 546.290860][T11688] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1696'. [ 546.464197][T11697] FAULT_INJECTION: forcing a failure. [ 546.464197][T11697] name failslab, interval 1, probability 0, space 0, times 0 [ 546.464236][T11697] CPU: 0 UID: 0 PID: 11697 Comm: syz.3.1701 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 546.464257][T11697] Tainted: [L]=SOFTLOCKUP [ 546.464262][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 546.464271][T11697] Call Trace: [ 546.464277][T11697] [ 546.464284][T11697] dump_stack_lvl+0xe8/0x150 [ 546.464314][T11697] should_fail_ex+0x467/0x600 [ 546.464344][T11697] should_failslab+0xa8/0x100 [ 546.464364][T11697] kmem_cache_alloc_noprof+0xa4/0x650 [ 546.464380][T11697] ? alloc_empty_file+0x5b/0x1d0 [ 546.464394][T11697] ? alloc_empty_file+0x5b/0x1d0 [ 546.464413][T11697] alloc_empty_file+0x5b/0x1d0 [ 546.464429][T11697] alloc_file_pseudo+0x115/0x1e0 [ 546.464447][T11697] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 546.464462][T11697] ? security_inode_alloc+0xd5/0x310 [ 546.464493][T11697] ? inode_init_always_gfp+0x999/0xd40 [ 546.464513][T11697] sock_alloc_file+0xb8/0x2f0 [ 546.464630][T11697] do_accept+0x3ab/0x760 [ 546.464651][T11697] ? __pfx_do_accept+0x10/0x10 [ 546.464682][T11697] __sys_accept4+0x139/0x230 [ 546.464700][T11697] ? __pfx___sys_accept4+0x10/0x10 [ 546.464718][T11697] ? __pfx_ksys_write+0x10/0x10 [ 546.464742][T11697] __x64_sys_accept4+0x9a/0xb0 [ 546.464759][T11697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.464776][T11697] do_syscall_64+0x174/0x580 [ 546.464798][T11697] ? trace_irq_disable+0x3b/0x140 [ 546.464813][T11697] ? clear_bhb_loop+0x40/0x90 [ 546.464831][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.464847][T11697] RIP: 0033:0x7f5f2b67e019 [ 546.464864][T11697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.464877][T11697] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 546.464895][T11697] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 546.464908][T11697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 546.464917][T11697] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 546.464927][T11697] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 546.464937][T11697] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 546.464961][T11697] [ 546.644590][ T5602] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -22 [ 546.922755][ T5327] usb 6-1: USB disconnect, device number 31 [ 547.096943][T11704] FAULT_INJECTION: forcing a failure. [ 547.096943][T11704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.096980][T11704] CPU: 1 UID: 0 PID: 11704 Comm: syz.3.1702 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 547.097009][T11704] Tainted: [L]=SOFTLOCKUP [ 547.097017][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.097029][T11704] Call Trace: [ 547.097036][T11704] [ 547.097044][T11704] dump_stack_lvl+0xe8/0x150 [ 547.097082][T11704] should_fail_ex+0x467/0x600 [ 547.097118][T11704] _copy_from_iter+0x1d3/0x1660 [ 547.097144][T11704] ? rcu_is_watching+0x15/0xb0 [ 547.097168][T11704] ? trace_kmem_cache_alloc+0x29/0xe0 [ 547.097192][T11704] ? __pfx__copy_from_iter+0x10/0x10 [ 547.097212][T11704] ? __alloc_skb+0x276/0x7a0 [ 547.097234][T11704] ? __alloc_skb+0x276/0x7a0 [ 547.097262][T11704] ? netlink_sendmsg+0x650/0xb40 [ 547.097288][T11704] ? skb_put+0x112/0x210 [ 547.097314][T11704] netlink_sendmsg+0x6c0/0xb40 [ 547.097348][T11704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.097375][T11704] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 547.097407][T11704] ? __schedule+0x16f2/0x5500 [ 547.097434][T11704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.097458][T11704] sock_sendmsg_nosec+0x13a/0x180 [ 547.097497][T11704] ____sys_sendmsg+0x565/0x870 [ 547.097521][T11704] ? __might_fault+0xaf/0x130 [ 547.097548][T11704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.097581][T11704] ? import_iovec+0x73/0xa0 [ 547.097608][T11704] ___sys_sendmsg+0x2a5/0x360 [ 547.097638][T11704] ? __lock_acquire+0x683/0x2ce0 [ 547.097663][T11704] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.097686][T11704] ? irqentry_exit+0x218/0x8f0 [ 547.097744][T11704] ? __fget_files+0x2a/0x420 [ 547.097765][T11704] ? __fget_files+0x3a8/0x420 [ 547.097796][T11704] __x64_sys_sendmsg+0x1b7/0x290 [ 547.097825][T11704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 547.097867][T11704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.097887][T11704] do_syscall_64+0x174/0x580 [ 547.097911][T11704] ? trace_irq_disable+0x3b/0x140 [ 547.097929][T11704] ? clear_bhb_loop+0x40/0x90 [ 547.097951][T11704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.097968][T11704] RIP: 0033:0x7f5f2b67e019 [ 547.097988][T11704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.098005][T11704] RSP: 002b:00007f5f298d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.098027][T11704] RAX: ffffffffffffffda RBX: 00007f5f2b905fa0 RCX: 00007f5f2b67e019 [ 547.098042][T11704] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 547.098056][T11704] RBP: 00007f5f298d6090 R08: 0000000000000000 R09: 0000000000000000 [ 547.098069][T11704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.098081][T11704] R13: 00007f5f2b906038 R14: 00007f5f2b905fa0 R15: 00007ffdd7476de8 [ 547.098111][T11704] [ 547.313259][ T5605] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 547.328279][T10251] usbhid 3-1:0.0: can't add hid device: -71 [ 547.328404][T10251] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 547.519299][T10251] usb 3-1: USB disconnect, device number 48 [ 547.519745][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 547.719154][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 547.719174][ T37] audit: type=1800 audit(2000000185.060:1256): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15756 res=0 errno=0 [ 547.826835][T10251] usb 5-1: USB disconnect, device number 73 [ 547.827956][ T37] audit: type=1800 audit(2000000185.150:1257): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 548.078890][ T37] audit: type=1800 audit(2000000185.410:1258): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 548.146712][ T37] audit: type=1800 audit(2000000185.490:1259): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 548.184317][T11735] binder: 11727:11735 ioctl 4018620d 0 returned -22 [ 548.246781][T11728] FAULT_INJECTION: forcing a failure. [ 548.246781][T11728] name failslab, interval 1, probability 0, space 0, times 0 [ 548.246806][T11728] CPU: 0 UID: 0 PID: 11728 Comm: syz.4.1708 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 548.246823][T11728] Tainted: [L]=SOFTLOCKUP [ 548.246826][T11728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 548.246833][T11728] Call Trace: [ 548.246837][T11728] [ 548.246842][T11728] dump_stack_lvl+0xe8/0x150 [ 548.246882][T11728] should_fail_ex+0x467/0x600 [ 548.246902][T11728] should_failslab+0xa8/0x100 [ 548.246917][T11728] kmem_cache_alloc_noprof+0xa4/0x650 [ 548.246929][T11728] ? security_file_alloc+0x34/0x310 [ 548.246941][T11728] ? security_file_alloc+0x34/0x310 [ 548.246955][T11728] security_file_alloc+0x34/0x310 [ 548.246967][T11728] init_file+0x96/0x2d0 [ 548.246979][T11728] alloc_empty_file+0x74/0x1d0 [ 548.246990][T11728] path_openat+0x8f/0x3850 [ 548.247003][T11728] ? is_bpf_text_address+0x292/0x2b0 [ 548.247016][T11728] ? is_bpf_text_address+0x26/0x2b0 [ 548.247032][T11728] ? kernel_text_address+0xa5/0xe0 [ 548.247045][T11728] ? __kernel_text_address+0xd/0x30 [ 548.247054][T11728] ? unwind_get_return_address+0x4d/0x90 [ 548.247067][T11728] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 548.247077][T11728] ? arch_stack_walk+0xfb/0x150 [ 548.247201][T11728] do_file_open+0x23e/0x4a0 [ 548.247221][T11728] ? stack_depot_save_flags+0x33/0x800 [ 548.247257][T11728] ? __pfx_do_file_open+0x10/0x10 [ 548.247271][T11728] ? kasan_save_track+0x4f/0x80 [ 548.247295][T11728] ? do_open_execat+0xad/0x590 [ 548.247309][T11728] do_open_execat+0x12b/0x590 [ 548.247322][T11728] ? __pfx_do_open_execat+0x10/0x10 [ 548.247340][T11728] alloc_bprm+0x24/0x640 [ 548.247355][T11728] do_execveat_common+0x172/0x670 [ 548.247370][T11728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.247381][T11728] __x64_sys_execve+0x97/0xc0 [ 548.247395][T11728] do_syscall_64+0x174/0x580 [ 548.247410][T11728] ? trace_irq_disable+0x3b/0x140 [ 548.247420][T11728] ? clear_bhb_loop+0x40/0x90 [ 548.247433][T11728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.247443][T11728] RIP: 0033:0x7f1511a3e019 [ 548.247455][T11728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.247464][T11728] RSP: 002b:00007f150fc96028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 548.247476][T11728] RAX: ffffffffffffffda RBX: 00007f1511cc5fa0 RCX: 00007f1511a3e019 [ 548.247484][T11728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 548.247491][T11728] RBP: 00007f150fc96090 R08: 0000000000000000 R09: 0000000000000000 [ 548.247497][T11728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.247503][T11728] R13: 00007f1511cc6038 R14: 00007f1511cc5fa0 R15: 00007fff2f131eb8 [ 548.247526][T11728] [ 548.328024][T11735] CIFS: Attempting to mount //127.0.0.1/share [ 548.403535][T10251] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 548.626638][ T37] audit: type=1800 audit(2000000185.970:1260): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 548.763280][T10251] usb 6-1: Using ep0 maxpacket: 32 [ 548.768943][T10251] usb 6-1: config 4 has an invalid interface number: 8 but max is 0 [ 548.768969][T10251] usb 6-1: config 4 has no interface number 0 [ 548.769012][T10251] usb 6-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 548.769034][T10251] usb 6-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 548.769057][T10251] usb 6-1: config 4 interface 8 has no altsetting 0 [ 548.788667][ T37] audit: type=1800 audit(2000000186.110:1261): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15510 res=0 errno=0 [ 548.833367][T10251] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 548.833411][T10251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.833428][T10251] usb 6-1: Product: syz [ 548.833440][T10251] usb 6-1: Manufacturer: syz [ 548.833452][T10251] usb 6-1: SerialNumber: syz [ 548.900012][ T37] audit: type=1800 audit(2000000186.240:1262): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15633 res=0 errno=0 [ 549.189494][ T37] audit: type=1800 audit(2000000186.440:1263): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152490 res=0 errno=0 [ 549.189549][ T37] audit: type=1800 audit(2000000186.450:1264): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=152548 res=0 errno=0 [ 549.189648][ T37] audit: type=1800 audit(2000000186.470:1265): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=152500 res=0 errno=0 [ 549.325563][T11748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1712'. [ 549.421432][T11735] CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server [ 549.699046][T11743] ------------[ cut here ]------------ [ 549.699060][T11743] server->in_flight == 0 [ 549.699076][T11743] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x125b/0x2b90, CPU#0: cifsd/11743 [ 549.699211][T11743] Modules linked in: [ 549.699231][T11743] CPU: 0 UID: 0 PID: 11743 Comm: cifsd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.699267][T11743] Tainted: [L]=SOFTLOCKUP [ 549.699275][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.699288][T11743] RIP: 0010:smb2_add_credits+0x125b/0x2b90 [ 549.699312][T11743] Code: de 83 e6 01 31 ff e8 04 17 c7 fe f6 c3 01 75 0a e8 4a 12 c7 fe e9 22 13 00 00 0f 1f 44 00 00 e8 3b 12 c7 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d a9 80 9a 0c 01 0f 85 9e 03 00 00 e8 20 12 c7 fe 49 [ 549.699329][T11743] RSP: 0018:ffffc9000525f458 EFLAGS: 00010246 [ 549.699346][T11743] RAX: ffffffff82febb1e RBX: 1ffff1100a1f4889 RCX: ffff888063251f00 [ 549.699362][T11743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 549.699375][T11743] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 549.699386][T11743] R10: 0000000000000000 R11: ffffffff82fee890 R12: ffff888050fa4448 [ 549.699400][T11743] R13: ffffc9000525f520 R14: ffff888050fa4000 R15: 0000000000000000 [ 549.699415][T11743] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 549.699431][T11743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 549.699446][T11743] CR2: 00007f5f2b6e8658 CR3: 0000000032bd4000 CR4: 00000000003526f0 [ 549.699464][T11743] Call Trace: [ 549.699472][T11743] [ 549.699483][T11743] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 549.699514][T11743] cifs_compound_last_callback+0x181/0x2d0 [ 549.699581][T11743] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 549.699610][T11743] ? rt_spin_unlock+0x157/0x200 [ 549.699636][T11743] ? rt_spin_unlock+0x163/0x200 [ 549.699654][T11743] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 549.699684][T11743] cifs_abort_connection+0x949/0xf60 [ 549.699779][T11743] ? __pfx_cifs_abort_connection+0x10/0x10 [ 549.699807][T11743] ? rt_spin_unlock+0x157/0x200 [ 549.699832][T11743] ? rt_spin_unlock+0x163/0x200 [ 549.699856][T11743] _cifs_reconnect+0xbba/0x1670 [ 549.699885][T11743] ? lockdep_hardirqs_on+0x7a/0x110 [ 549.699911][T11743] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 549.699937][T11743] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 549.699961][T11743] ? reacquire_held_locks+0x104/0x190 [ 549.701372][T11743] ? __pfx__cifs_reconnect+0x10/0x10 [ 549.701410][T11743] ? rt_spin_unlock+0x157/0x200 [ 549.701437][T11743] ? rt_spin_unlock+0x163/0x200 [ 549.701460][T11743] cifs_readv_from_socket+0x78b/0x8e0 [ 549.701507][T11743] cifs_demultiplex_thread+0x53d/0x3310 [ 549.701567][T11743] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 549.701602][T11743] ? do_raw_spin_lock+0x12b/0x2f0 [ 549.701643][T11743] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 549.701682][T11743] ? __lock_acquire+0x683/0x2ce0 [ 549.701747][T11743] ? __kthread_parkme+0x196/0x1f0 [ 549.701838][T11743] kthread+0x388/0x470 [ 549.701866][T11743] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 549.701892][T11743] ? __pfx_kthread+0x10/0x10 [ 549.701922][T11743] ret_from_fork+0x514/0xb70 [ 549.701954][T11743] ? __pfx_ret_from_fork+0x10/0x10 [ 549.701984][T11743] ? __switch_to+0xc89/0x1420 [ 549.702020][T11743] ? __pfx_kthread+0x10/0x10 [ 549.702051][T11743] ret_from_fork_asm+0x1a/0x30 [ 549.702087][T11743] [ 549.702098][T11743] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 549.702117][T11743] CPU: 0 UID: 0 PID: 11743 Comm: cifsd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.702145][T11743] Tainted: [L]=SOFTLOCKUP [ 549.702153][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.702164][T11743] Call Trace: [ 549.702172][T11743] [ 549.702180][T11743] vpanic+0x56c/0xa60 [ 549.702201][T11743] ? __pfx__printk+0x10/0x10 [ 549.702225][T11743] ? __pfx_vpanic+0x10/0x10 [ 549.702242][T11743] ? is_bpf_text_address+0x292/0x2b0 [ 549.702275][T11743] ? is_bpf_text_address+0x26/0x2b0 [ 549.702306][T11743] panic+0xc5/0xd0 [ 549.702325][T11743] ? __pfx_panic+0x10/0x10 [ 549.702353][T11743] ? ret_from_fork_asm+0x1a/0x30 [ 549.702378][T11743] __warn+0x315/0x4c0 [ 549.702396][T11743] ? smb2_add_credits+0x125b/0x2b90 [ 549.702423][T11743] ? smb2_add_credits+0x125b/0x2b90 [ 549.702446][T11743] __report_bug+0x276/0x570 [ 549.702476][T11743] ? smb2_add_credits+0x125b/0x2b90 [ 549.702501][T11743] ? __pfx___report_bug+0x10/0x10 [ 549.702530][T11743] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 549.702553][T11743] ? rt_spin_lock+0x1e0/0x400 [ 549.702574][T11743] ? rt_spin_lock+0x1e0/0x400 [ 549.702591][T11743] ? smb2_add_credits+0x125b/0x2b90 [ 549.702611][T11743] report_bug+0x16a/0x220 [ 549.702636][T11743] ? smb2_add_credits+0x125b/0x2b90 [ 549.702656][T11743] ? smb2_add_credits+0x125d/0x2b90 [ 549.702679][T11743] handle_bug+0x9c/0x200 [ 549.702707][T11743] exc_invalid_op+0x1a/0x50 [ 549.702733][T11743] asm_exc_invalid_op+0x1a/0x20 [ 549.702752][T11743] RIP: 0010:smb2_add_credits+0x125b/0x2b90 [ 549.702776][T11743] Code: de 83 e6 01 31 ff e8 04 17 c7 fe f6 c3 01 75 0a e8 4a 12 c7 fe e9 22 13 00 00 0f 1f 44 00 00 e8 3b 12 c7 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d a9 80 9a 0c 01 0f 85 9e 03 00 00 e8 20 12 c7 fe 49 [ 549.702791][T11743] RSP: 0018:ffffc9000525f458 EFLAGS: 00010246 [ 549.702809][T11743] RAX: ffffffff82febb1e RBX: 1ffff1100a1f4889 RCX: ffff888063251f00 [ 549.702825][T11743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 549.702838][T11743] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 549.702850][T11743] R10: 0000000000000000 R11: ffffffff82fee890 R12: ffff888050fa4448 [ 549.702864][T11743] R13: ffffc9000525f520 R14: ffff888050fa4000 R15: 0000000000000000 [ 549.702882][T11743] ? __pfx_smb2_get_credits_field+0x10/0x10 [ 549.702905][T11743] ? smb2_add_credits+0x3fe/0x2b90 [ 549.702933][T11743] ? smb2_add_credits+0x3fe/0x2b90 [ 549.702956][T11743] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 549.702982][T11743] cifs_compound_last_callback+0x181/0x2d0 [ 549.703014][T11743] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 549.703041][T11743] ? rt_spin_unlock+0x157/0x200 [ 549.703065][T11743] ? rt_spin_unlock+0x163/0x200 [ 549.703082][T11743] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 549.703109][T11743] cifs_abort_connection+0x949/0xf60 [ 549.703147][T11743] ? __pfx_cifs_abort_connection+0x10/0x10 [ 549.703174][T11743] ? rt_spin_unlock+0x157/0x200 [ 549.703196][T11743] ? rt_spin_unlock+0x163/0x200 [ 549.703218][T11743] _cifs_reconnect+0xbba/0x1670 [ 549.703243][T11743] ? lockdep_hardirqs_on+0x7a/0x110 [ 549.703277][T11743] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 549.703302][T11743] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 549.703324][T11743] ? reacquire_held_locks+0x104/0x190 [ 549.703351][T11743] ? __pfx__cifs_reconnect+0x10/0x10 [ 549.703379][T11743] ? rt_spin_unlock+0x157/0x200 [ 549.703404][T11743] ? rt_spin_unlock+0x163/0x200 [ 549.703428][T11743] cifs_readv_from_socket+0x78b/0x8e0 [ 549.703472][T11743] cifs_demultiplex_thread+0x53d/0x3310 [ 549.703527][T11743] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 549.703561][T11743] ? do_raw_spin_lock+0x12b/0x2f0 [ 549.703593][T11743] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 549.703626][T11743] ? __lock_acquire+0x683/0x2ce0 [ 549.703688][T11743] ? __kthread_parkme+0x196/0x1f0 [ 549.703721][T11743] kthread+0x388/0x470 [ 549.703750][T11743] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 549.703775][T11743] ? __pfx_kthread+0x10/0x10 [ 549.703804][T11743] ret_from_fork+0x514/0xb70 [ 549.703837][T11743] ? __pfx_ret_from_fork+0x10/0x10 [ 549.703867][T11743] ? __switch_to+0xc89/0x1420 [ 549.703896][T11743] ? __pfx_kthread+0x10/0x10 [ 549.703925][T11743] ret_from_fork_asm+0x1a/0x30 [ 549.703958][T11743] [ 549.704400][T11743] Kernel Offset: disabled