last executing test programs: 1m27.12446003s ago: executing program 3 (id=3): r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x80, 0x1, 0x6}}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x20000000}, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0x4, 0x3f8, 0x110, 0x110, 0x200, 0x310, 0x310, 0x310, 0x4, &(0x7f00000000c0), {[{{@arp={@empty, @rand_addr=0x64010101, 0x101ffff00, 0xff000000, 0x1, 0xd, {@mac, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x7, 0x9, 0x0, 0x0, 0x9, 0x9, 'syzkaller0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x0, 0x1a0}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac, @rand_addr=0x64010100, @multicast2, 0x4, 0xffffffff}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffffff, 0x2, 0xd, {@mac=@local, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xb2edca02fa0c9f92]}}, 0x2, 0x8, 0x5, 0x101, 0x7ff, 0x6, 'pim6reg\x00', 'nr0\x00', {0xff}, {}, 0x0, 0x8}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0x1, 0x3, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e7e9a2443f6f", @multicast1, @broadcast, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x9c, 0xa, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20040000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 1m23.893594448s ago: executing program 3 (id=7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000002100)=0xc00) 1m23.815407284s ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0x8, {"77b7cb7d9c4a8c4dc078e5186e5878eb2a4c66c7249cd95fe846e14abfacf66ca7584a26186075be2f6f0f57c6e96e096030bf0d2743671ae99cfd1217d1155f6df84c5d319ba1cbc143338007a959578a6f02b6f71ccdb3c53c887d1dc88f43004c4e2a3f730458798221cb214f6e4a9ddee49e0915bf5fc2d0218565fae733bea8d793eb63de1f0dc73a0ecebecbfc55a9ce41d0638cd3ffd993f6b2ef4031103e6103302c056421bbc500ece3fea7e0c64354e661f62e42658c9d85e7d81c66a345b78103702bb92c4d265115148e2345871be8a79a8d215c6d373c9801dd002cf19b0a0da82e8f73561d151a6e521732b2d26d05157bbc7aaa1c85425d5a2aa0727ee702a1f73694cf2f0ff637ea909b418c461be78e4b3646c12beef1476048250388f2720e353483469196cdea3f338e4cb778009b5e596fb05fa861d9879538a8c575e94a10d775280767f19e77992dd21a47469e995e1052ae29a62c18586d28714d340168597127184062c76d3be77c3584d679472574a098a19efb1e875f23ac16d1732edb57693fc22b04fc601a2623c4f939568d775f84a4e2ffca8f0c5f33d81a347326bb3024d9bd2e16b8a26d21150b39bb0a660b61211f3a312c22af37062298d0a2d6162fe692eb363e988db75429999c1f0792feae2084db70d6c91f333f40b41474fa7a1a97232b656ff9ec473a33d28c74cd5777b8900aab3a64924659d7ccfb02a7a63194d6c998260a85e5f38723f4b6f9c69d67c4f4b8a88852351ade349e4e863b0813eb4a6ab01e5fcd70642c12877b992fdbea27399387ec666542f094648e63e5ade537a75824b41df207f94795427f023469564217c91ca69506177e767eaa2714d0787f2092c54bad1d474aa431d40ead0a20b76200ddab4305e8577c3b8907abfe2cde9487671431ba0f2bed6f3b542299fc49be4bc1c590bb7c8a0e7f09ddfb6d6ecc46037b008bdf70fba4d8f8b41dbd7a65e3e2e1266d85bbdcd5885bcf6bbc1815ca2cc4f765e468f1273b11171a50930ed184f196733660d72ed650caaa762daab1a62cac073e19470b27eabb4ca8618d68a026f2ac5bef988c61b0561f99564e0021c688749c3c5999878e7f4dfb790f4fa80df610adb3701b070edb2b8a097cd39130edc33c3aa1d58a1e3ce614183c06ba2c07fc00d7822f9d950882f31cd90c008d02e122bd9bb0ead0c140d885aa2640275615289cc877a538b7ecc50497cf5de50435e13c5e3fa26d9c6e75199e83a9843759e252cb9136c8a1f9ec3eae031a78dd47a15f5707dce4eae0329465875afd515e42928454f5d72cf399322a1bd893086429198cdcbca8af0913c6dcf4b851b002f439e223bd195b7c8af961e11866b79fb4aa307c6e29f9cb8a4478397742956a93c0c05b67fe3d1c16b0ae34f549ead0cac4d836b27a33c975063a09e57e46e07a65d4783001a7e9636004fb8ab5312b676655a4ed83d09050c579fd3727e821453e1370c96e216a843a129d07fc368fadcdbb031ab62f5f07fae045f3c5702d7751af9c50a5b66011798835f302663bcf8c4c5086154e988c9e573e9e46e6d9ae1ec042561b65970970acb4ab251bde381d52c23d429f7be17dad20229200e26a7f8be47bab8188b8e0c9bde276f49c85f5d9462a65a38b2026d136f080de203836c3e56bc291d018d9ec893c77ef59578927c7d3f70c9649dc49f4387f290f7ba8900b87e3bd808293e66eba04fecd493edd14f7cbc6659c425c62bfc4a9bc870b276c0675d4f8f869d800a08b74507abfad3096bc20d619606ef9f6bbd9a64d54d258409076a038414c3d85e50a26517609ad70e51e6564c843e7dcb022b7e7443cdeffbdef8da96690a5c22f8dcd8936664e81e08871fe920b978e9e706df084fb9253e460a58cb1ac86729fccae46bf5cd6870bf15ec19ee2285be5aec22a6718ae00dd35e7efdb9e780426bb821607b848d1d669611119c055c2a136c991a9385ad1186e2a855e513e5110563c1d0b551603b79195a0f4e684e9ea73f473082477db32e897a8fa32d2c3f26101ded3e7adb62c026a55c2ff2cb1938d18f51f00cdff8ae4d29ae1aca6da3db40a4cdae833782452329921168ff2f15de11f14cf13dc98c5b2a34b4676da9d0b4b1bdf130450f056078c5df032fdf1e9b6e2ff13a208c3b0ba09437b478cfe1f03bfd9318e00f09a8a661436058e35e8ff603399c6c7cc61a95fc5aa5c4d9350d76217c1aa07f88979d1219f08e85899218d4a91ce4dbffc9f22acc700e0796e3b32c8bbae0c87aed5abc6bb9105b88047131b378cd72ff455bfc6996cde8d101629800b0631d16e86ad69d9d6a0ed4700c1297881b6f340ee9b23b6c852f930e3964dac52100078752565a44503c13dcd8dcca8a5bcb917a30e282ad98750254280c058ab8d29cb7535ff38d019a9cc101f9e163ec81cc40cda0277aa52cc71c53548e23e109f06c6504801cf39da201e8ad7be63def9ad0b1263def806e78de3d6f95bfa798024e5d8758136f6b9bd4381dfc57fc6e2c06ee079e72caaed4b40400ac6e79a1459f9965237b4c6b50e9bac50e5b972be701d1d4d83f0098d03313e3d4791928d31fdebbb276920f750d8e38984c720dcf081e3a92240935ca814e03b7b278a6d9615ff91a6bdbcba1fbc900420fb3f8327e617f804417710dfd2bd1dc9a871f694581d03ad751d0144f75b655e0bc4205e17ec3e0e9b052dbad1372778fa623f643f80a7ba4467c267216792df003771a50426d2ec16e5d06f848deaa330b0ae18d941f05186bf35134faa996e5988c211bb50d4783cf7d42ce217d7e6e814327dd5259b57394c8895036f6da2b3577ec98b24a18652df8f173d2adfeec11b708e4d00f9e7c8e27adb01ebfa71362c6117ccdf0b47442958ba9b16688c7cacc94c1630e0a698bf3705406040d7c5717fe7f4db43f912f17ac05a7594835ddec5f10a3e33dd75e2676e22460e5124295740d548323202072c436cb7f78dd4b776e37cded3dc1f327d128b13f4de84eb3a279f597bd833bcdbbedf95c19321ecda0d8efb4dfd9376600f3f0557e49074d3a0f41ec85ffb096dd8a60f1c0f66034d9a2f398c46f6f39f4f481cc8f5c5b95fde87ec48a89bbdd6fd99e92241ec87e54650cbe263f1cf651783a0c5777b5fa503d7a0db5d2f13cf4c3ccfb69fa02af648be2429aa18293fd5ed0c8f589ddb542019f9dc63a9337d6b2c501cc0b3b3cff3eef0c8e78a131d5da50ad384aa7b33139d762bd36e1908bd5cc244a5fe60f8d64dcb17db60eef669d93a2da7559870d52718a88bf86430fd3a89427fe7647745373cdc1333ec11994a3134f862568bd1036d1d2ce45d6f4a441ca108caa44d3d194bca6829bcc56fc54b7d7654b778e4c4f6c500870c7dbd5295d9db78994434bef2912f9ee8ca776a2f7b7b06e05cf82adc7e3e07207a914d7d4de8761ea6d18caf463280f35945bc3093e42f43f4ce7dd95bcdd9539cb32f8398f080334f75de1892056456dd928d9d0a1e8170afcc5e49d023db01af37d5a1696de872f3fe21da4d517b3158c7a8a12dc164c0890e35fc32c4b046e4110c158489bbdc4094a1c0b421ca6c9a9ed3bf301cf82459d41ac0dddfcc5a83a1eb8fae033558930d558ec7b192a42c5767f5319e2ec071b326224454d3351ad980b12016bb871645fbc270e1d781f9336da82cf6d6652e0369d9c32ef3c3034fc42920f513d2e5d9d2fd55e60f5e3871353f8dd8352cbb191c24930e92827660862ed8f9221d038f15a59c5dbfbf12be1e936c9f4df780390f02eca32119a924edffb3d85acbd166375eb9f4206e8e9dd85bcf7212ce5f7c1abee24939ac36c5fdb3be689ca62671ad51b67bff566527c624611cdcba5aefce5af0c5c14014bc284f312c0a5b7d3ec8ab46639a3b10ef3d2d85fae2bc13e81de93a495be80affd7c4b193c5b15bb947c24329b84f952c2ed50b4a431abbc780e9684fdfa06a3388f6001da4dd6baaa0fc24ceaf32710742b0062962db5b6bad30ebf7c562f169261e95d1c8240830d750cc5c7d120a07e5100abdf20fa8303ed8251a1555ec26848969dfaaa5581df432c04d421020a95997aeca7047e5824ffdd0c4ff171b95337ae58b392d0209e53400f4fc89eb509bb4d52e9292f32ba8bd3094c2f0bd4c4761125404c53db775ec151f9033b3f35621f7152fe59dd5d4548a9e5190b8d3b97a639916600b78c8e4270b05fe1cfb117a2a131f148aeb6773513e877d14b8bca0ffdab520ef19e160898fae8bb77feca3cb370c6753a71b46ea4e8414cd5d6c8b15fb18888d9f97631bbb3cb42ec6306ba8e1d7ba80d892a28f1d7c5402c5b0c6c68b7d938f9adf12eecca5bc32f8d19314818d54aac9f3702000d05e6947a8ab1def9c56d97c45fb8266281d29990b54e0fa9252323e2d0a147da36224171d6a9ac59a32a449f1f3f9ef87aff3c0e5b5a56103047a73ded1128ca7c5b20b38089ae42304543b1017ae63692b6f838b6518134cabe1292b2988d32916626c01bbca90b6a9d8efed189f0815bb242af57357e9ba32c8a690391a08e29482771d76170be815bf6fd2293a99fc8a01ee12475398c6d27a289d5bf3b98d7b5fa22ae9734c3023a3a09003d111fd9a3b334b293f4dd2355afe1ccd03aba957b0a57e9f7b2503dece8b06d53b0abd13b2a6b93bfd28ca7805a75d7aad5568737a2b7aeed34487fd2b2e29491d8f74e27bc8e912e3a246d8825ef4d0d8b00dba795a4802bf1edd0b9372753ad4bb3ce04da7742da6ffabaf3ef7668045dd4f321d015ebce8a6abed0b7a007034cdcc388e52ec28b4dedf56f924335942d890f1e37bb6e6d24a3f6eae1a6f02a0c1be19cdf4bb3f31fdbf7f6f026bfc0f73c55a9595a22136e13855dbb879f88606e6341e487c0b79bca05ed917c71333b45d02e2a9b35f53028f1350bcd950865d19023ddc0ecc418853ce970e6ca3ed39b118203569f7d38cc6c8db605d9d4fef4278cbfa56ff1706df244e4b5ec1989302bbe783945e7d43120fedd0eb31ec93de5d4b06c776b5ab0ba0b3a2df90738d9a76e66b211cd51489d6f0cd8c8485b253846f8ba5a402f35912e992a17b87a50c889a3769e9ec98c335f163be7e60863cc43965fd1339cc8631b2aeb95f8958d00a3eba338a29bf88394ed65a823c81927df94d6c079ebf602cc69e1d8f8db121cefe3e18b3b431716ff0d9362226e894c2eab40ecb67609ee937a28b90037020286075a0d92ece5399fcb5fdee633891eff4a0ea821bc9336b9308c38e7529690a4c3bb217d014ef44a8ca0ac003bb6451c3c75e59c0560609862e8eebdc2e23cb0e75e4a9b0648da709a8261b065665209cab9b810b1f37a7f2078ae6717906a5e4cdb6218fcdafb7133b64fec9ad4f26e5dcf7ec473876dbb67d09053acf2760d4697ddf819ec0ca0f85cc1a2a6f189c65f9b374b59be703fe8d287f3e122eb327997418f13216fdb37a96738c853f48bbe661a836bece1d340d30c1290adeec6ab80579393daa54bcb983f569466c82b0f7f631b2f3378de1ac5008d7a4f50ca8733c404c25bd8b5af0e73a1e01939c97e850fc56fa09f3cee4aa0ed233a30d1c32b7ceea456b315cacdc5f4b3f516ed0d5a246d8da7d9190623642ccb26aaff0525dd229c6b73ee59378f75c4162f75d396366f5b06ae968db244c9993ad47cd79ad31a300c5b424f6302ead9b48f0c0cab516a670e3fcaa75a5358fcbb1fab63eccd263437413606cff10", 0x1000}}, 0x1006) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m23.226308221s ago: executing program 3 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m22.813315886s ago: executing program 3 (id=14): bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) 1m22.37455257s ago: executing program 32 (id=14): bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) 1m21.869818193s ago: executing program 1 (id=22): mount(0x0, 0x0, 0x0, 0x10, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x4f) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000080)) 1m21.513142749s ago: executing program 1 (id=25): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000640)={0xa, 0x4e21, 0x200, @local, 0x7}, 0x1c) read$FUSE(r0, &(0x7f00000102c0)={0x2020}, 0x2020) 1m20.584169837s ago: executing program 1 (id=30): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x3, 0xf, 0x0, 0x1, r6}, &(0x7f00000000c0)=0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1m19.246527625s ago: executing program 1 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m18.495939928s ago: executing program 1 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m18.462952505s ago: executing program 1 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m18.146299311s ago: executing program 33 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0x8, {"77b7cb7d9c4a8c4dc078e5186e5878eb2a4c66c7249cd95fe846e14abfacf66ca7584a26186075be2f6f0f57c6e96e096030bf0d2743671ae99cfd1217d1155f6df84c5d319ba1cbc143338007a959578a6f02b6f71ccdb3c53c887d1dc88f43004c4e2a3f730458798221cb214f6e4a9ddee49e0915bf5fc2d0218565fae733bea8d793eb63de1f0dc73a0ecebecbfc55a9ce41d0638cd3ffd993f6b2ef4031103e6103302c056421bbc500ece3fea7e0c64354e661f62e42658c9d85e7d81c66a345b78103702bb92c4d265115148e2345871be8a79a8d215c6d373c9801dd002cf19b0a0da82e8f73561d151a6e521732b2d26d05157bbc7aaa1c85425d5a2aa0727ee702a1f73694cf2f0ff637ea909b418c461be78e4b3646c12beef1476048250388f2720e353483469196cdea3f338e4cb778009b5e596fb05fa861d9879538a8c575e94a10d775280767f19e77992dd21a47469e995e1052ae29a62c18586d28714d340168597127184062c76d3be77c3584d679472574a098a19efb1e875f23ac16d1732edb57693fc22b04fc601a2623c4f939568d775f84a4e2ffca8f0c5f33d81a347326bb3024d9bd2e16b8a26d21150b39bb0a660b61211f3a312c22af37062298d0a2d6162fe692eb363e988db75429999c1f0792feae2084db70d6c91f333f40b41474fa7a1a97232b656ff9ec473a33d28c74cd5777b8900aab3a64924659d7ccfb02a7a63194d6c998260a85e5f38723f4b6f9c69d67c4f4b8a88852351ade349e4e863b0813eb4a6ab01e5fcd70642c12877b992fdbea27399387ec666542f094648e63e5ade537a75824b41df207f94795427f023469564217c91ca69506177e767eaa2714d0787f2092c54bad1d474aa431d40ead0a20b76200ddab4305e8577c3b8907abfe2cde9487671431ba0f2bed6f3b542299fc49be4bc1c590bb7c8a0e7f09ddfb6d6ecc46037b008bdf70fba4d8f8b41dbd7a65e3e2e1266d85bbdcd5885bcf6bbc1815ca2cc4f765e468f1273b11171a50930ed184f196733660d72ed650caaa762daab1a62cac073e19470b27eabb4ca8618d68a026f2ac5bef988c61b0561f99564e0021c688749c3c5999878e7f4dfb790f4fa80df610adb3701b070edb2b8a097cd39130edc33c3aa1d58a1e3ce614183c06ba2c07fc00d7822f9d950882f31cd90c008d02e122bd9bb0ead0c140d885aa2640275615289cc877a538b7ecc50497cf5de50435e13c5e3fa26d9c6e75199e83a9843759e252cb9136c8a1f9ec3eae031a78dd47a15f5707dce4eae0329465875afd515e42928454f5d72cf399322a1bd893086429198cdcbca8af0913c6dcf4b851b002f439e223bd195b7c8af961e11866b79fb4aa307c6e29f9cb8a4478397742956a93c0c05b67fe3d1c16b0ae34f549ead0cac4d836b27a33c975063a09e57e46e07a65d4783001a7e9636004fb8ab5312b676655a4ed83d09050c579fd3727e821453e1370c96e216a843a129d07fc368fadcdbb031ab62f5f07fae045f3c5702d7751af9c50a5b66011798835f302663bcf8c4c5086154e988c9e573e9e46e6d9ae1ec042561b65970970acb4ab251bde381d52c23d429f7be17dad20229200e26a7f8be47bab8188b8e0c9bde276f49c85f5d9462a65a38b2026d136f080de203836c3e56bc291d018d9ec893c77ef59578927c7d3f70c9649dc49f4387f290f7ba8900b87e3bd808293e66eba04fecd493edd14f7cbc6659c425c62bfc4a9bc870b276c0675d4f8f869d800a08b74507abfad3096bc20d619606ef9f6bbd9a64d54d258409076a038414c3d85e50a26517609ad70e51e6564c843e7dcb022b7e7443cdeffbdef8da96690a5c22f8dcd8936664e81e08871fe920b978e9e706df084fb9253e460a58cb1ac86729fccae46bf5cd6870bf15ec19ee2285be5aec22a6718ae00dd35e7efdb9e780426bb821607b848d1d669611119c055c2a136c991a9385ad1186e2a855e513e5110563c1d0b551603b79195a0f4e684e9ea73f473082477db32e897a8fa32d2c3f26101ded3e7adb62c026a55c2ff2cb1938d18f51f00cdff8ae4d29ae1aca6da3db40a4cdae833782452329921168ff2f15de11f14cf13dc98c5b2a34b4676da9d0b4b1bdf130450f056078c5df032fdf1e9b6e2ff13a208c3b0ba09437b478cfe1f03bfd9318e00f09a8a661436058e35e8ff603399c6c7cc61a95fc5aa5c4d9350d76217c1aa07f88979d1219f08e85899218d4a91ce4dbffc9f22acc700e0796e3b32c8bbae0c87aed5abc6bb9105b88047131b378cd72ff455bfc6996cde8d101629800b0631d16e86ad69d9d6a0ed4700c1297881b6f340ee9b23b6c852f930e3964dac52100078752565a44503c13dcd8dcca8a5bcb917a30e282ad98750254280c058ab8d29cb7535ff38d019a9cc101f9e163ec81cc40cda0277aa52cc71c53548e23e109f06c6504801cf39da201e8ad7be63def9ad0b1263def806e78de3d6f95bfa798024e5d8758136f6b9bd4381dfc57fc6e2c06ee079e72caaed4b40400ac6e79a1459f9965237b4c6b50e9bac50e5b972be701d1d4d83f0098d03313e3d4791928d31fdebbb276920f750d8e38984c720dcf081e3a92240935ca814e03b7b278a6d9615ff91a6bdbcba1fbc900420fb3f8327e617f804417710dfd2bd1dc9a871f694581d03ad751d0144f75b655e0bc4205e17ec3e0e9b052dbad1372778fa623f643f80a7ba4467c267216792df003771a50426d2ec16e5d06f848deaa330b0ae18d941f05186bf35134faa996e5988c211bb50d4783cf7d42ce217d7e6e814327dd5259b57394c8895036f6da2b3577ec98b24a18652df8f173d2adfeec11b708e4d00f9e7c8e27adb01ebfa71362c6117ccdf0b47442958ba9b16688c7cacc94c1630e0a698bf3705406040d7c5717fe7f4db43f912f17ac05a7594835ddec5f10a3e33dd75e2676e22460e5124295740d548323202072c436cb7f78dd4b776e37cded3dc1f327d128b13f4de84eb3a279f597bd833bcdbbedf95c19321ecda0d8efb4dfd9376600f3f0557e49074d3a0f41ec85ffb096dd8a60f1c0f66034d9a2f398c46f6f39f4f481cc8f5c5b95fde87ec48a89bbdd6fd99e92241ec87e54650cbe263f1cf651783a0c5777b5fa503d7a0db5d2f13cf4c3ccfb69fa02af648be2429aa18293fd5ed0c8f589ddb542019f9dc63a9337d6b2c501cc0b3b3cff3eef0c8e78a131d5da50ad384aa7b33139d762bd36e1908bd5cc244a5fe60f8d64dcb17db60eef669d93a2da7559870d52718a88bf86430fd3a89427fe7647745373cdc1333ec11994a3134f862568bd1036d1d2ce45d6f4a441ca108caa44d3d194bca6829bcc56fc54b7d7654b778e4c4f6c500870c7dbd5295d9db78994434bef2912f9ee8ca776a2f7b7b06e05cf82adc7e3e07207a914d7d4de8761ea6d18caf463280f35945bc3093e42f43f4ce7dd95bcdd9539cb32f8398f080334f75de1892056456dd928d9d0a1e8170afcc5e49d023db01af37d5a1696de872f3fe21da4d517b3158c7a8a12dc164c0890e35fc32c4b046e4110c158489bbdc4094a1c0b421ca6c9a9ed3bf301cf82459d41ac0dddfcc5a83a1eb8fae033558930d558ec7b192a42c5767f5319e2ec071b326224454d3351ad980b12016bb871645fbc270e1d781f9336da82cf6d6652e0369d9c32ef3c3034fc42920f513d2e5d9d2fd55e60f5e3871353f8dd8352cbb191c24930e92827660862ed8f9221d038f15a59c5dbfbf12be1e936c9f4df780390f02eca32119a924edffb3d85acbd166375eb9f4206e8e9dd85bcf7212ce5f7c1abee24939ac36c5fdb3be689ca62671ad51b67bff566527c624611cdcba5aefce5af0c5c14014bc284f312c0a5b7d3ec8ab46639a3b10ef3d2d85fae2bc13e81de93a495be80affd7c4b193c5b15bb947c24329b84f952c2ed50b4a431abbc780e9684fdfa06a3388f6001da4dd6baaa0fc24ceaf32710742b0062962db5b6bad30ebf7c562f169261e95d1c8240830d750cc5c7d120a07e5100abdf20fa8303ed8251a1555ec26848969dfaaa5581df432c04d421020a95997aeca7047e5824ffdd0c4ff171b95337ae58b392d0209e53400f4fc89eb509bb4d52e9292f32ba8bd3094c2f0bd4c4761125404c53db775ec151f9033b3f35621f7152fe59dd5d4548a9e5190b8d3b97a639916600b78c8e4270b05fe1cfb117a2a131f148aeb6773513e877d14b8bca0ffdab520ef19e160898fae8bb77feca3cb370c6753a71b46ea4e8414cd5d6c8b15fb18888d9f97631bbb3cb42ec6306ba8e1d7ba80d892a28f1d7c5402c5b0c6c68b7d938f9adf12eecca5bc32f8d19314818d54aac9f3702000d05e6947a8ab1def9c56d97c45fb8266281d29990b54e0fa9252323e2d0a147da36224171d6a9ac59a32a449f1f3f9ef87aff3c0e5b5a56103047a73ded1128ca7c5b20b38089ae42304543b1017ae63692b6f838b6518134cabe1292b2988d32916626c01bbca90b6a9d8efed189f0815bb242af57357e9ba32c8a690391a08e29482771d76170be815bf6fd2293a99fc8a01ee12475398c6d27a289d5bf3b98d7b5fa22ae9734c3023a3a09003d111fd9a3b334b293f4dd2355afe1ccd03aba957b0a57e9f7b2503dece8b06d53b0abd13b2a6b93bfd28ca7805a75d7aad5568737a2b7aeed34487fd2b2e29491d8f74e27bc8e912e3a246d8825ef4d0d8b00dba795a4802bf1edd0b9372753ad4bb3ce04da7742da6ffabaf3ef7668045dd4f321d015ebce8a6abed0b7a007034cdcc388e52ec28b4dedf56f924335942d890f1e37bb6e6d24a3f6eae1a6f02a0c1be19cdf4bb3f31fdbf7f6f026bfc0f73c55a9595a22136e13855dbb879f88606e6341e487c0b79bca05ed917c71333b45d02e2a9b35f53028f1350bcd950865d19023ddc0ecc418853ce970e6ca3ed39b118203569f7d38cc6c8db605d9d4fef4278cbfa56ff1706df244e4b5ec1989302bbe783945e7d43120fedd0eb31ec93de5d4b06c776b5ab0ba0b3a2df90738d9a76e66b211cd51489d6f0cd8c8485b253846f8ba5a402f35912e992a17b87a50c889a3769e9ec98c335f163be7e60863cc43965fd1339cc8631b2aeb95f8958d00a3eba338a29bf88394ed65a823c81927df94d6c079ebf602cc69e1d8f8db121cefe3e18b3b431716ff0d9362226e894c2eab40ecb67609ee937a28b90037020286075a0d92ece5399fcb5fdee633891eff4a0ea821bc9336b9308c38e7529690a4c3bb217d014ef44a8ca0ac003bb6451c3c75e59c0560609862e8eebdc2e23cb0e75e4a9b0648da709a8261b065665209cab9b810b1f37a7f2078ae6717906a5e4cdb6218fcdafb7133b64fec9ad4f26e5dcf7ec473876dbb67d09053acf2760d4697ddf819ec0ca0f85cc1a2a6f189c65f9b374b59be703fe8d287f3e122eb327997418f13216fdb37a96738c853f48bbe661a836bece1d340d30c1290adeec6ab80579393daa54bcb983f569466c82b0f7f631b2f3378de1ac5008d7a4f50ca8733c404c25bd8b5af0e73a1e01939c97e850fc56fa09f3cee4aa0ed233a30d1c32b7ceea456b315cacdc5f4b3f516ed0d5a246d8da7d9190623642ccb26aaff0525dd229c6b73ee59378f75c4162f75d396366f5b06ae968db244c9993ad47cd79ad31a300c5b424f6302ead9b48f0c0cab516a670e3fcaa75a5358fcbb1fab63eccd263437413606cff10", 0x1000}}, 0x1006) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 4.623795986s ago: executing program 5 (id=475): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0xf, 0x2, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}) (async, rerun: 64) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0xa0881) (rerun: 64) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x20, 0x1, 0x0, 0x8, 0x0, 0xfffffff7, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x0, 0x24}) r2 = openat$rtc(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x7005, 0x0) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) (async) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) setns(0xc9, 0x0) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) write(r7, &(0x7f0000000100)="a000000024000105010000000000000000000000020000000000ffffffffffff000000000b00010074617072696f00007000028056000100010000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000c80080001000000000008000200dc050000", 0xa0) (async) ioctl$VT_RELDISP(r6, 0x5605) (async) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0xc, 0x4, "ea57bb76"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000940)={0x14, &(0x7f0000000840)={0x40, 0x33, 0x96, {0x96, 0x8, "b327ee0c9c72427d29161cf939a38b8692becb0e711653d508ab3537d54445bd769aed1dcb5f5dfa74ea4fd96b87e29a7de5967c2015dea9691a525ef8bba176bb752e73e52c63ba2157824859df6484908d72e2e8c9b9ddf229d11bc905fb11a332e18ed939b98d66090e90235b803be9e17c6923c31c4afbc25d9e771a105a6795a219238dbb89bd36dc0993362d727c4cbfe6"}}, &(0x7f0000000900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x1c, &(0x7f0000000980)={0x40, 0x11, 0x86, "2fddac80acbf96ea0bf5fc50a84b4bfa29d82bf5c9967b3fd4d517ade6746a75457498258e70c898ea29f5c7ae18cb7c7fd7cc1bca989fda39ea92a1dbb8a66072676195799544f5fdf3e725f7271fb93f23afae1baed24709df4022df385f3a945ba3b702360d73d98daadafbb95621a368ef1d9b70f8db970c3c030d49e42923b8b884747c"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x9}}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0xe, 0x5, "3d8647e51c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x4, 0x81, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1054, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x6, 0xa0, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x19}, [@processing_unit={0x7, 0x24, 0x7, 0x4, 0x2, 0x3}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0xd, "f369e2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x7, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x5, 0xf, {0x7, 0x25, 0x1, 0x0, 0x6}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x3, 0x8, 0x1, 0x40, 0xa}, 0x41, &(0x7f0000000100)={0x5, 0xf, 0x41, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x81, 0xf, 0xd, [0x0, 0xff00a0]}, @generic={0x28, 0x10, 0xa, "6172c8da89e1bbcdbbafb824108fd4b9e566a4d1808bb54665d8eb3f659d5c07dbd502ae51"}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x2e, &(0x7f0000000200)=@string={0x2e, 0x3, "cb14e78e26ffcb818b6eb70fd32795b015d1e04209edd01784cc6afdacf8798463880560f30ebfef4e01c550"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x380a}}, {0xba, &(0x7f0000000340)=@string={0xba, 0x3, "6828b454a63e21d8d517fff5c635b3d0afb96be283321f5b14f873c3ace1e4deca9f1cb6cc316d99d15198f48b14561ce66ce526834a3be59dc5fe6bd327af4e3d7876c2f388e59a11a673db85ca96f0ddd4f65210bf604e23427ce8d205d9903f0321492613f4decee236cd1bf83c91b1a0d7c722cdb15977a89347be7ebcd6be5e5ec171882354055e5660252304698bca8552324cf493c98447ca5a22f18374ba3edf3d1a9f59cfce1a23570df2100d7a60a2c9b976bb"}}, {0x65, &(0x7f00000004c0)=@string={0x65, 0x3, "4c4cc0ceeff7f79f3b641cd0833fc55bf71b03e218d0f0066d7b7ae380282e7ab180ef42ca69bd5e9764eda9135d29270cefe7cc31ef3993f47d710e4d7b31692acc0f557f9992e1cb58ed6e042bdc496b0bbfa8071faa20a5a2a72d969bf01d2db818"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x827}}, {0xb4, &(0x7f0000000580)=@string={0xb4, 0x3, "a14867bebf785379edf4a347fbd4f513f640197b39e0d52d19f5224cab1bc844af3fc79092ed2115360d9a101464c45a21ce78a925f8a20d5a5286d3d146194548ec3dff66de5bd70073f408e72198daf4b7743def9b156596408385fe1dde279bad5039a19997740dbc7e11e748ad376c4618b66237206c8c5f9752936b86c68a8a4dbe538b5042493bfedd9e76f17bf1ce634ab0d084292c777fb34d354fbdc017fe594e88b3f8ec212092c63710a374e6"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xf0ff}}]}) 4.160594713s ago: executing program 2 (id=478): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000001e0001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2b, &(0x7f0000000300)=0x40000001, 0x1) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e24, 0x0, @empty, 0x4}, 0x1c) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r2, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x-111111111111111:pn-0x2222222222222222,nqn=n', 0x7d) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, &(0x7f0000000380)={0x1, @in={{0x2, 0x4e22, @multicast1}}, 0xa}, &(0x7f0000000480)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000004c0)={r4, 0x882a, 0x20}, 0xc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000040), 0x4) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001000000108a25330000000000000109022d000100000000090400060103000100092104000e0122280009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\a?'], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x204000, 0x81) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) sendto(r7, &(0x7f0000000000)="64000000420001000200000000000000030100000f0000002e00010000112233445566778899aabb08004500001c000000004011f77dc0a80101c0a8010204d2162e000800000000040002801800038014000380100007000a000001c0a8010211004000", 0x64, 0x0, 0x0, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) recvfrom(r9, &(0x7f0000000100)=""/241, 0xf1, 0x4001a042, &(0x7f0000000240)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x80) 4.011347483s ago: executing program 0 (id=479): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xbde}], 0x1, 0x10004000215f, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r2}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r2, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r2}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000480)={0x48, 0x8, r3, 0x0, 0x9, 0xbc, &(0x7f00000003c0)="0105c41159f78ee3e26954fb19c8d3537c0f2b54fefb8a45bcce6e36001a27ef7294b521d72946b02134b5d728e3f7aad11af2850de2c77321628ad87e1722fc642504af66b5047ab4555b19ba033d966fe1128546df8aab886116d0fa040b62a27e383ddb9a6fea19d3905a19c32d9992f16c00f56e23a67d1b1dd66d477c9d53ed9896cf10a5e77d51f4a9f260596eda4b1140e8de34774609b7de4cf602767f95cebba22a3530c681623837778fdb6e27546848bc01739b820995", 0x3}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000340)={0x18, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000380)={0x8, r2}) close(r0) 3.971537704s ago: executing program 0 (id=480): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000000)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000340)={0x18, r1}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000380)={0x8, r1}) close(r0) 3.889577636s ago: executing program 0 (id=481): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000240)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x8c8e, 0x12) io_setup(0x2, &(0x7f0000000080)=0x0) r4 = eventfd(0x35) io_submit(r3, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r4, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x38}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040001) 2.940965924s ago: executing program 0 (id=483): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="281effe935fdca24ffffff556ea6e5004020000000797a81621071b300000000", 0x20}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}], 0x1, 0x4800) 2.77334657s ago: executing program 0 (id=484): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0416"], 0x9) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.730346227s ago: executing program 5 (id=485): syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xfa, 0xa}, {0x101, 0x7, 0x5, 0x3, 0x5c0b}}}}, 0x17) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000f1b2450c694e27b58fff05bd1b82ece8c24305553793eb1ae5198a8b44c4b349f83df05f9620d07fcd4254a78437ebad5bbb60646edeb7262c3c9a31b99af79d6d7a0c391897dfe9c1aab6f9595ac0aaba8b65ec0350663a24eda03f8e900792d0d0cf1ebc3a3cc34c8914831c5da239022df1e0574de5ed", @ANYRES16, @ANYBLOB="010027bd7000ffdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) 2.316712945s ago: executing program 2 (id=486): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, 0x0) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c8001600120001000a9d0200d1010380"], 0x1b) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xe0}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r5, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000340)=""/184, 0xb8}, {&(0x7f00000005c0)=""/70, 0x46}, {&(0x7f0000000940)=""/4084, 0xff4}, {&(0x7f0000000500)=""/131, 0x83}, {&(0x7f0000000880)=""/180, 0xb4}, {&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000003880)=""/191, 0xbf}, {&(0x7f0000000080)=""/180, 0xb4}], 0x9}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000640)=""/193, 0xc1}, {&(0x7f0000000740)}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/46, 0x2e}], 0x4, &(0x7f0000002ac0)=""/235, 0xeb}, 0x8}, {{&(0x7f0000002bc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c40)=""/1, 0x1}, {&(0x7f0000002c80)=""/50, 0x32}, {&(0x7f0000002cc0)=""/195, 0xc3}, {&(0x7f0000002dc0)=""/22, 0x16}], 0x4, &(0x7f0000002e40)=""/114, 0x72}, 0x3}, {{&(0x7f0000002ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002f40)=""/129, 0x81}, {&(0x7f0000003000)=""/154, 0x9a}, {&(0x7f00000030c0)=""/73, 0x49}], 0x3, &(0x7f0000003180)=""/82, 0x52}, 0x4}], 0x7, 0x0, 0x0) 2.153262753s ago: executing program 0 (id=487): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000140)=""/77, 0x571da, 0x1000) read$FUSE(r6, &(0x7f00000052c0)={0x2020}, 0x2020) r7 = dup(r5) syz_ublk_setup_queues(r7, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.666484275s ago: executing program 2 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000000000000009ffe7070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004804}, 0x24044001) r1 = socket(0x2, 0x3, 0x100000001) setsockopt(r1, 0xff, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b400000000000000006400000000c0a070100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000000a0a0101"], 0x14}, 0x1, 0x0, 0x0, 0x4048014}, 0x4000) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd, 0x0, 0x400}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r3, 0x4b72, &(0x7f00000000c0)={0x1, 0xfffffffe, 0xffffffff, 0xc1c, 0x10, "0060930000efa4890200000000000000008000"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='of', 0x8) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r5 = getpgrp(0x0) move_pages(r5, 0x9, &(0x7f00000000c0)=[&(0x7f00002ae000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, &(0x7f0000b32000/0x4000)=nil, &(0x7f00006ef000/0x3000)=nil, &(0x7f00007d2000/0x1000)=nil, &(0x7f0000289000/0x3000)=nil, &(0x7f0000651000/0x2000)=nil, &(0x7f0000694000/0x2000)=nil, &(0x7f0000ade000/0x1000)=nil], &(0x7f00000001c0)=[0x4, 0x6, 0x4, 0x6, 0x5, 0x1ff, 0x7, 0xf], &(0x7f0000000200)=[0x0, 0x0], 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x9) 1.55693229s ago: executing program 4 (id=490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1e) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1e) write(r1, &(0x7f0000000000)='27', 0x2) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000200)="010000000000220010000900000000010000000000020800450000740001400040063c817f0000017f00000104d204d2", 0x30}, {&(0x7f0000000e40)="0000070000dba7478481709a41e0a947668b2d592773875532f6fddc", 0x1c}], 0x2) (async) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000200)="010000000000220010000900000000010000000000020800450000740001400040063c817f0000017f00000104d204d2", 0x30}, {&(0x7f0000000e40)="0000070000dba7478481709a41e0a947668b2d592773875532f6fddc", 0x1c}], 0x2) 1.510973716s ago: executing program 5 (id=491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4018811}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x2400, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000060008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.444824778s ago: executing program 5 (id=492): mq_open(&(0x7f0000000000)=').{\x00', 0x40, 0x50, &(0x7f0000000080)={0x80000001, 0x7fffffffffffffff, 0x7, 0x8}) 1.261917831s ago: executing program 5 (id=493): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000340)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) r2 = socket(0xa, 0x3, 0x3a) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r4, 0x4, {0x2a00, 0x80010000, 0x0, 0x5, 0x1, 0x0, 0x0, 0x14, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e0dbe108598948234ad54acc7070955397d6b22d0000b405a1a93c527d3d458dd4992861ac0000000000f2b9b60000006b001300000000000000000f00", "f4bd020000000000000000edacf90000000000003493554219b76e0a00", [0x5, 0xffffffff9673e35d]}}) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000080)={0x5, "995e6b0da3c1fdb3742638fb60346cfc7d20aca31babbbb9eb9ce703df3d7c46", 0x1, 0x1}) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x4}, 0xc) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) 1.104885315s ago: executing program 2 (id=494): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000008200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 1.054835381s ago: executing program 4 (id=495): mq_open(&(0x7f0000000000)=').{\x00', 0x40, 0x50, &(0x7f0000000080)={0x80000001, 0x7fffffffffffffff, 0x7, 0x8}) (fail_nth: 3) 1.010481405s ago: executing program 5 (id=496): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xbf, 0xe1, 0xdc, 0x40, 0x2c7c, 0x30a, 0xcfd0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x4, 0x10, 0x6, "", [{{0x9, 0x4, 0x31, 0xe8, 0x2, 0xff, 0x6d, 0x83, 0x3, [], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0xfffffffffffffd8a, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x1) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642", @ANYRES8=r1, @ANYRES64=r2], 0x97) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000500)={0x0, 0xe, 0x102, {0x102, 0x7, "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"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0xe0, 0xb, 0xe0, "f1571e17567d408960a4cf5600772c349b5805a96c64e4383fd9dbbcdf644fe8e3aeb6e22cf528ef0901797998378db6a6cdfec7ef8defc21420840e3a3c3ab6b36c81b5fae225f42a72dfeb1e380e8ee037cbc09f4f6900c40ed29aa08ccb3187b715da74c83783228b9eb9de7eacd9c14c4cd1dfca06ac176c638e6ecba273bf84242b6544a2f1afa3badf005b6e356d5e01a8f1b1c396e0686d02c825bf001ccf6987d93fd1bf4ddda28ee4f9e0e2ce27444c9fbda5e8fd9f1b7844def1c38966b02043bbef360e186c5462346712ca06784d02999fa85f774fc493e3b021"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1e}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x81, 0x2, "d81c"}, &(0x7f0000000340)={0x20, 0x82, 0x2, "c31f"}, &(0x7f0000000380)={0x20, 0x83, 0x3, "494112"}, &(0x7f0000000400)={0x20, 0x84, 0x3, "c0a9f6"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "53c388"}}) 800.469268ms ago: executing program 4 (id=497): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001900000002000000fedbdf25050006006c8000000a000600000000000000000000000000000000000000000000000000000000000800120000000000feffff7f0000000030000000000000000000000000000000020000020000000000000000000000000200000200000000000000000000000005000500002000000a00000000000000fe80000000000000000000000000068bfc1d000400000000050019000000000002004e20e0000002000000000000000002"], 0xc8}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x540) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e25, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000000)="ea", 0x1) write(r4, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x100002, 0xfbffffff}, 0x10) syz_ublk_setup_io_uring(0x177b, &(0x7f0000000600)={0x0, 0xdea, 0x10840, 0x1, 0x23b}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) close(r4) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c980)={&(0x7f000000c7c0)=[0x0, 0x0, &(0x7f0000000280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r5 = socket(0x11, 0x3, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x240000, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="65844100c5dc2f"], 0xdd12}], 0x1}, 0x200488d4) r6 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) close(r6) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080), &(0x7f00000000c0)=0x8) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000180), &(0x7f00000001c0)={'L+'}, 0x16, 0x2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000040)={0x0, 0x3, 0xffffffff, 0x0, 0x0}) getrlimit(0x9810c3cfdbe1bcb5, 0x0) mq_open(&(0x7f0000000000)=').{\x00', 0x40, 0x50, &(0x7f0000000080)={0x80000001, 0x7fffffffffffffff, 0x7, 0x8}) 666.594281ms ago: executing program 4 (id=498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4018811}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000060008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (fail_nth: 5) 586.09028ms ago: executing program 4 (id=499): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0xaa, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000140)="259374c96ee34e45fea1c051c38427c32b5d6357efd5ecde4b59c085aafa49649b67aad4bc8043e29479e4a1a3a37b95bddf5ad3dc28a8dcb89fd81649a27adf804107a5a0c12236ce32c89c2aad6019db232d000000002eb604047661cff32c6a05d8e100e680c6f3bbb620e8e921babbd2a445d16778ddd9f6503b212f98bf5981330f5d460e2b16a46018da9da35b0a81623c2bbfdf4b6f1742c24700"/170, 0x0, 0x0, 0x0, 0x0, 0x0}) 456.610358ms ago: executing program 4 (id=500): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00a961ae8e9f46b5758f99d7829d66708407950529c735904e80b6a32c2dfe0c575d654aa81eb39b10b467e3bd2ae9930834636c1712cac05980f31bcce6ee865c625488155d0abb50e53645416fdf2da5127853646a86e4d2f0c39ea1d47ad3224bb2b57220ab5ba34bb7b7e2beb1ae7d8ba8c0fa7a97fdb3a8e7b65a4f17394279dedd110935b81f827ade51825d8c95e6834ad31153d54e86172406d0b1bc205a51a711d6015f1d9829e97640f8608396ab3d47db0965b32f20c5071ac2e5e5e4906dcf3559289fd3d1a934fb012107884b2ff91d778529ebd5fbcaee0d229d507b8258162838e5ac123d"]) r2 = syz_open_dev$video4linux(&(0x7f0000000380), 0x1, 0x40422) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x4008, 0x29, 0x1002, 0x0, 0x0, 0x2, 0x2, 0x6}}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='disable=', 0x8) prctl$PR_SET_PTRACER(0x59616d61, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)={0x3c, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1d, 0x7ff, 0xc, 0xb5, 0xf6d, 0x9, 0xdb]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r7, @ANYBLOB="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"], 0x21c}}, 0x4000000) 135.511962ms ago: executing program 2 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="966028c32fbaa1d9609fb1cf812476d7df72532af14b73a5c7100085afcf6b0c7f7783a146e9eb57e3ea465337ff0d"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r1, 0x8940, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a31000000000900020073797a3100000000300000000e0a010400000000000000000a0000000900010073797a31000000000900020073797a31"], 0x84}, 0x1, 0x0, 0x0, 0x40091}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000340)="bc4f8b10ede750ac5a930f40414e59294c00b3405121c9ff8d9baebb054499018399c326fb381aff7d1e0690a8a0298c664e005f9299da62b320d5431accb27cf3e4308fc88a97f99e49a69d77a94959a4ca7117abf0c9a4ae1dc27512aa2c5f916e8d9abba4d95d87f92a74a7140007baebc0f903571c3deb6a4056d5de38570bfeb6c1f773c08e860b12365f6e541811c4cbad3eb4ea4e4909d168bd86924bdb58a52d3faddfd7ae47f13ed109ecefc70d6d2b529b3e99d113c8c200da34e166ccf30a5d576cb5c1d579b2abc7daf00b3d187d6d6b31f83594d31e12a3304c0bf653", 0xe3}, {&(0x7f0000000540)="34876910cd78e5138c1f8663353c1ae9ece405145af86231937eeacc5aff6c2e5ff7e94b7581404f7d42be7c18b79814d63a9179183fad7b67e6c93331b803b5c9b5abc4219a20d89b275df3d9aedf2ec0a2773091ee0469cb063549ab0b61202f304a06f92ed92178eaa06e641bcd778a9c6201d163f05bc3efd9bea375080a91bd8191875925ac9135283d292af7568d129add4b33f6f5b6c91d85ed3a24fe9d82edfd96669b0b4856fdf740cead31a3811393b4014dc33fe36bf899410af0c60644b4608df82d77cc6564259a0f0a84955341bd58005acfdd", 0xda}, {&(0x7f0000000680)="446efc48e2ec355ce75d28341e3dbabc61dc85730849e890fb6688841408277783481cf96f60b2a9a1294e7260451f3757d8acde", 0x34}, {&(0x7f00000006c0)="c612fdb0daae65ee213e906029cf8edc6101d5b44c2584e20697b8b6afa7658e5aadc1fc713496fd54b55e01759beea2e9d74e66c7e1a9dcd3bf769b2cfddf9c32fbf7206090b3cd6889c36791e0979433e32563d0f63a705d6c905a385c6f0578", 0x61}, {&(0x7f0000000740)="05353a2b7f52021e24e42f724213b1498510f08dfff497d2091f58304d8c9ebeae15ceec64256212560a30a16df4d41f821d171de580d4ff6151a2c241b1324d873c3a2d860959442b41cab9302bab971ce3aedd0f4432d4947423", 0x5b}, {&(0x7f00000007c0)="38258d093bf3ffe03ee8680b8e7eb6656d00628ac9635f379b8b39344c2d8b32c596803f1cf37bb3d59d14fa135b1fef69baa195d9d4d4b637326b4379321a6728bc9a4eb9eb4c7605b7838c05529f971beaa0a1bbd21a73d9cff9fbe2579e62dc0995b3f178ed64ef256b717cde4005759b", 0x72}], 0x6) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x124, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2ec}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x11}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x70f}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffe2c2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9af7}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x54}, 0x1400c840) write$vga_arbiter(r3, &(0x7f0000000640), 0xf) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4018811}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000060008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 0s ago: executing program 2 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x100, 0x0, &(0x7f00000004c0)=""/256}) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x9) kernel console output (not intermixed with test programs): .054289][ T165] vhci_hcd vhci_hcd.0: release socket [ 122.054309][ T165] vhci_hcd vhci_hcd.0: disconnect device [ 122.076574][ T6952] warning: `syz.0.252' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.201073][ T6961] syzkaller1: entered promiscuous mode [ 122.201096][ T6961] syzkaller1: entered allmulticast mode [ 122.315759][ T32] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 122.376233][ T12] IPVS: starting estimator thread 0... [ 122.455046][ T6967] FAULT_INJECTION: forcing a failure. [ 122.455046][ T6967] name failslab, interval 1, probability 0, space 0, times 0 [ 122.455081][ T6967] CPU: 0 UID: 0 PID: 6967 Comm: syz.4.256 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.455106][ T6967] Tainted: [L]=SOFTLOCKUP [ 122.455113][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.455123][ T6967] Call Trace: [ 122.455131][ T6967] [ 122.455139][ T6967] dump_stack_lvl+0xe8/0x150 [ 122.455167][ T6967] should_fail_ex+0x3eb/0x540 [ 122.455189][ T6967] ? __alloc_skb+0x1db/0x7a0 [ 122.455206][ T6967] should_failslab+0xa8/0x100 [ 122.455226][ T6967] ? __alloc_skb+0x1db/0x7a0 [ 122.455241][ T6967] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 122.455260][ T6967] ? __alloc_skb+0x18d/0x7a0 [ 122.455278][ T6967] ? __alloc_skb+0x1db/0x7a0 [ 122.455301][ T6967] __alloc_skb+0x1db/0x7a0 [ 122.455323][ T6967] netlink_ack+0x136/0xb30 [ 122.455340][ T6967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.455362][ T6967] ? irqentry_exit+0x218/0x920 [ 122.455379][ T6967] ? trace_irq_disable+0x3b/0x140 [ 122.455406][ T6967] netlink_rcv_skb+0x2a4/0x4a0 [ 122.455426][ T6967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 122.455445][ T6967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.455478][ T6967] ? down_read+0x2b9/0x320 [ 122.455500][ T6967] genl_rcv+0x28/0x40 [ 122.455516][ T6967] netlink_unicast+0x7bd/0x940 [ 122.455547][ T6967] netlink_sendmsg+0x7c3/0xae0 [ 122.455571][ T6967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.455591][ T6967] ? apparmor_socket_sendmsg+0x98/0x360 [ 122.455609][ T6967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.455624][ T6967] sock_sendmsg_nosec+0x14e/0x190 [ 122.455647][ T6967] __sys_sendto+0x408/0x5a0 [ 122.455671][ T6967] ? __pfx___sys_sendto+0x10/0x10 [ 122.455714][ T6967] ? fd_install+0x95/0x4e0 [ 122.455740][ T6967] __x64_sys_sendto+0xde/0x100 [ 122.455761][ T6967] do_syscall_64+0x166/0x520 [ 122.455778][ T6967] ? trace_irq_disable+0x3b/0x140 [ 122.455794][ T6967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.455813][ T6967] ? clear_bhb_loop+0x70/0xc0 [ 122.455833][ T6967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.455851][ T6967] RIP: 0033:0x7f982975e9ce [ 122.455869][ T6967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.455883][ T6967] RSP: 002b:00007f982a5f2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 122.455902][ T6967] RAX: ffffffffffffffda RBX: 00007f982a5f46c0 RCX: 00007f982975e9ce [ 122.455916][ T6967] RDX: 0000000000000020 RSI: 00007f982a5f3000 RDI: 0000000000000089 [ 122.455927][ T6967] RBP: 0000000000000000 R08: 00007f982a5f2f04 R09: 000000000000000c [ 122.455939][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000089 [ 122.455958][ T6967] R13: 00007f982a5f2f58 R14: 00007f982a5f3000 R15: 0000000000000000 [ 122.455988][ T6967] [ 122.474246][ T6968] IPVS: using max 39 ests per chain, 93600 per kthread [ 122.493123][ T32] usb 1-1: New USB device found: idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 122.557277][ T32] usb 1-1: config 1 has an invalid interface number: 167 but max is 0 [ 122.557305][ T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.557320][ T32] usb 1-1: config 1 has no interface number 0 [ 122.557357][ T32] usb 1-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid wMaxPacketSize 0 [ 122.557377][ T32] usb 1-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.557401][ T32] usb 1-1: config 1 interface 167 has no altsetting 0 [ 122.641091][ T32] usb 1-1: string descriptor 0 read error: -22 [ 122.641231][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.870832][ T32] em28xx 1-1:1.167: New device @ 1.5 Mbps (1b80:e309, interface 167, class 167) [ 122.870879][ T32] em28xx 1-1:1.167: Device initialization failed. [ 122.870892][ T32] em28xx 1-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 123.075240][ T5776] usb 1-1: USB disconnect, device number 12 [ 123.262608][ T887] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 80 failed: -32 [ 123.262669][ T887] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 123.262684][ T887] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 123.262761][ T887] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 123.376170][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.376610][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.386223][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.386627][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.509400][ T887] usb 6-1: USB disconnect, device number 5 [ 123.593876][ T5776] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 123.619873][ T6990] syzkaller1: entered promiscuous mode [ 123.619897][ T6990] syzkaller1: entered allmulticast mode [ 123.753714][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 123.755512][ T5776] usb 3-1: New USB device found: idVendor=3731, idProduct=0116, bcdDevice=88.26 [ 123.756657][ T5776] usb 3-1: config 0 has an invalid interface number: 52 but max is 1 [ 123.756681][ T5776] usb 3-1: config 0 has an invalid interface number: 222 but max is 1 [ 123.756700][ T5776] usb 3-1: config 0 has an invalid interface number: 25 but max is 1 [ 123.756717][ T5776] usb 3-1: config 0 has an invalid interface number: 202 but max is 1 [ 123.756736][ T5776] usb 3-1: config 0 has 4 interfaces, different from the descriptor's value: 2 [ 123.756755][ T5776] usb 3-1: config 0 has no interface number 0 [ 123.756769][ T5776] usb 3-1: config 0 has no interface number 1 [ 123.756784][ T5776] usb 3-1: config 0 has no interface number 2 [ 123.756798][ T5776] usb 3-1: config 0 has no interface number 3 [ 123.756865][ T5776] usb 3-1: config 0 interface 52 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.756889][ T5776] usb 3-1: too many endpoints for config 0 interface 222 altsetting 36: 183, using maximum allowed: 30 [ 123.756926][ T5776] usb 3-1: config 0 interface 222 altsetting 36 bulk endpoint 0x7 has invalid maxpacket 16 [ 123.756948][ T5776] usb 3-1: config 0 interface 222 altsetting 36 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 123.756971][ T5776] usb 3-1: config 0 interface 222 altsetting 36 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 123.756993][ T5776] usb 3-1: config 0 interface 222 altsetting 36 has an invalid descriptor for endpoint zero, skipping [ 123.757012][ T5776] usb 3-1: config 0 interface 222 altsetting 36 endpoint 0x8E has invalid maxpacket 1056, setting to 64 [ 123.757037][ T5776] usb 3-1: config 0 interface 222 altsetting 36 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 123.757060][ T5776] usb 3-1: config 0 interface 222 altsetting 36 has 8 endpoint descriptors, different from the interface descriptor's value: 183 [ 123.757098][ T5776] usb 3-1: config 0 interface 25 altsetting 226 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 123.757121][ T5776] usb 3-1: too many endpoints for config 0 interface 202 altsetting 158: 165, using maximum allowed: 30 [ 123.757153][ T5776] usb 3-1: config 0 interface 202 altsetting 158 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 123.757176][ T5776] usb 3-1: config 0 interface 202 altsetting 158 has a duplicate endpoint with address 0xD, skipping [ 123.757195][ T5776] usb 3-1: config 0 interface 202 altsetting 158 has a duplicate endpoint with address 0xE, skipping [ 123.757215][ T5776] usb 3-1: config 0 interface 202 altsetting 158 has a duplicate endpoint with address 0x6, skipping [ 123.757234][ T5776] usb 3-1: config 0 interface 202 altsetting 158 has an invalid descriptor for endpoint zero, skipping [ 123.757263][ T5776] usb 3-1: config 0 interface 202 altsetting 158 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 123.757286][ T5776] usb 3-1: config 0 interface 202 altsetting 158 has an endpoint descriptor with address 0x35, changing to 0x5 [ 123.757308][ T5776] usb 3-1: config 0 interface 202 altsetting 158 has a duplicate endpoint with address 0x5, skipping [ 123.757327][ T5776] usb 3-1: config 0 interface 202 altsetting 158 has a duplicate endpoint with address 0xD, skipping [ 123.757346][ T5776] usb 3-1: config 0 interface 202 altsetting 158 has an invalid descriptor for endpoint zero, skipping [ 123.757391][ T5776] usb 3-1: config 0 interface 202 altsetting 158 has a duplicate endpoint with address 0x8, skipping [ 123.757410][ T5776] usb 3-1: config 0 interface 202 altsetting 158 has a duplicate endpoint with address 0x2, skipping [ 123.757430][ T5776] usb 3-1: config 0 interface 202 altsetting 158 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 123.757453][ T5776] usb 3-1: config 0 interface 202 altsetting 158 has an invalid descriptor for endpoint zero, skipping [ 123.757472][ T5776] usb 3-1: config 0 interface 202 altsetting 158 has a duplicate endpoint with address 0xD, skipping [ 123.757491][ T5776] usb 3-1: config 0 interface 202 altsetting 158 has 14 endpoint descriptors, different from the interface descriptor's value: 165 [ 123.757515][ T5776] usb 3-1: config 0 interface 52 has no altsetting 0 [ 123.757531][ T5776] usb 3-1: config 0 interface 222 has no altsetting 0 [ 123.757547][ T5776] usb 3-1: config 0 interface 25 has no altsetting 0 [ 123.757563][ T5776] usb 3-1: config 0 interface 202 has no altsetting 0 [ 123.757595][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.770383][ T5776] usb 3-1: config 0 descriptor?? [ 123.933756][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 123.990879][ T5776] usb 3-1: string descriptor 0 read error: -71 [ 123.992352][ T5776] option 3-1:0.52: GSM modem (1-port) converter detected [ 124.108353][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 124.108387][ T9] usb 1-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 124.112674][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.112699][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.112738][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.194193][ T9] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:0825) [ 124.194734][ T9] uvcvideo 1-1:1.0: Failed to create links for entity 32769 [ 124.194761][ T9] uvcvideo 1-1:1.0: Failed to register entities (-22). [ 124.194775][ T9] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 124.197875][ T5776] usb 3-1: USB disconnect, device number 10 [ 124.272001][ T5776] option 3-1:0.52: device disconnected [ 124.387737][ T9] usb 1-1: USB disconnect, device number 13 [ 124.698184][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.5.270'. [ 125.051160][ T7020] syzkaller1: entered promiscuous mode [ 125.051182][ T7020] syzkaller1: entered allmulticast mode [ 125.233121][ T7024] netlink: 92 bytes leftover after parsing attributes in process `syz.4.262'. [ 125.723736][ T5757] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 125.798260][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 125.803727][ T5776] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 125.875804][ T5757] usb 1-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 125.879002][ T5757] usb 1-1: config 58 has an invalid descriptor of length 107, skipping remainder of the config [ 125.879026][ T5757] usb 1-1: config 58 has 0 interfaces, different from the descriptor's value: 1 [ 125.881961][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.881983][ T5757] usb 1-1: Product: syz [ 125.881996][ T5757] usb 1-1: Manufacturer: syz [ 125.882009][ T5757] usb 1-1: SerialNumber: syz [ 125.944309][ T9] usb 3-1: New USB device found: idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 125.945365][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.947512][ T9] usb 3-1: config 0 descriptor?? [ 125.976181][ T5776] usb 6-1: Using ep0 maxpacket: 32 [ 125.980556][ T5776] usb 6-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 125.983405][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.983433][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.983487][ T5776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.989136][ T5776] usb 6-1: config 0 descriptor?? [ 125.997178][ T5776] hub 6-1:0.0: USB hub found [ 126.157584][ T7038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.162755][ T7038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.191824][ T5776] hub 6-1:0.0: 1 port detected [ 126.397794][ T5776] hub 6-1:0.0: config failed, can't get hub status (err -5) [ 126.426015][ T9] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 126.426041][ T9] hackrf 3-1:0.0: Could not detect board [ 126.426084][ T9] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 126.442445][ T9] usb 3-1: USB disconnect, device number 11 [ 126.513352][ T7046] kvm: pic: single mode not supported [ 126.514485][ T7046] kvm: pic: single mode not supported [ 126.514799][ T7046] kvm: pic: single mode not supported [ 126.516330][ T7046] kvm: pic: non byte write [ 126.516435][ T7046] kvm: pic: non byte write [ 126.516569][ T7046] kvm: pic: non byte write [ 126.516684][ T7046] kvm: pic: non byte write [ 126.516814][ T7046] kvm: pic: non byte write [ 126.516926][ T7046] kvm: pic: non byte write [ 126.517006][ T7046] kvm: pic: non byte write [ 126.517127][ T7046] kvm: pic: non byte write [ 126.517248][ T7046] kvm: pic: non byte write [ 126.517359][ T7046] kvm: pic: non byte write [ 126.600185][ T7039] sg_write: data in/out 25564/11647 bytes for SCSI command 0x0-- guessing data in; [ 126.600185][ T7039] program syz.5.278 not setting count and/or reply_len properly [ 126.604331][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.278'. [ 127.164929][ T5776] usbhid 6-1:0.0: can't add hid device: -71 [ 127.165037][ T5776] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 127.231324][ T5776] usb 6-1: USB disconnect, device number 6 [ 127.308719][ T7058] syzkaller1: entered promiscuous mode [ 127.308762][ T7058] syzkaller1: entered allmulticast mode [ 127.610434][ T7069] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 127.623939][ T7062] netlink: 'syz.5.286': attribute type 10 has an invalid length. [ 127.624249][ T7062] veth1_macvtap: left promiscuous mode [ 127.627323][ T7071] netlink: 'syz.5.286': attribute type 10 has an invalid length. [ 127.633458][ T7062] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 127.635909][ T7071] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 127.802386][ T7073] Zero length message leads to an empty skb [ 128.363640][ T5757] usb 1-1: USB disconnect, device number 14 [ 128.538720][ T7085] FAULT_INJECTION: forcing a failure. [ 128.538720][ T7085] name failslab, interval 1, probability 0, space 0, times 0 [ 128.538744][ T7085] CPU: 0 UID: 0 PID: 7085 Comm: syz.5.293 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.538759][ T7085] Tainted: [L]=SOFTLOCKUP [ 128.538763][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.538769][ T7085] Call Trace: [ 128.538774][ T7085] [ 128.538779][ T7085] dump_stack_lvl+0xe8/0x150 [ 128.538796][ T7085] should_fail_ex+0x3eb/0x540 [ 128.538808][ T7085] ? __pfx_sock_alloc_inode+0x10/0x10 [ 128.538818][ T7085] should_failslab+0xa8/0x100 [ 128.538829][ T7085] ? __pfx_sock_alloc_inode+0x10/0x10 [ 128.538838][ T7085] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 128.538850][ T7085] ? sock_alloc_inode+0x2c/0x1a0 [ 128.538859][ T7085] ? sock_alloc_inode+0x2c/0x1a0 [ 128.538868][ T7085] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.538881][ T7085] ? __pfx_sock_alloc_inode+0x10/0x10 [ 128.538897][ T7085] sock_alloc_inode+0x2c/0x1a0 [ 128.538907][ T7085] ? __pfx_sock_alloc_inode+0x10/0x10 [ 128.538915][ T7085] alloc_inode+0x6a/0x1b0 [ 128.538929][ T7085] __sock_create+0x127/0xac0 [ 128.538943][ T7085] __sys_socket+0xd6/0x1b0 [ 128.538955][ T7085] __x64_sys_socket+0x7a/0x90 [ 128.538965][ T7085] do_syscall_64+0x166/0x520 [ 128.538975][ T7085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.538986][ T7085] ? clear_bhb_loop+0x70/0xc0 [ 128.538997][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.539007][ T7085] RIP: 0033:0x7faa96b9e199 [ 128.539018][ T7085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.539026][ T7085] RSP: 002b:00007faa97a30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 128.539037][ T7085] RAX: ffffffffffffffda RBX: 00007faa96e25fa0 RCX: 00007faa96b9e199 [ 128.539044][ T7085] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 128.539051][ T7085] RBP: 00007faa96c35888 R08: 0000000000000000 R09: 0000000000000000 [ 128.539057][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.539063][ T7085] R13: 00007faa96e26038 R14: 00007faa96e25fa0 R15: 00007fff3f05b3b8 [ 128.539078][ T7085] [ 128.539105][ T7085] socket: no more sockets [ 128.590149][ T7086] FAULT_INJECTION: forcing a failure. [ 128.590149][ T7086] name failslab, interval 1, probability 0, space 0, times 0 [ 128.590180][ T7086] CPU: 0 UID: 0 PID: 7086 Comm: syz.0.292 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.590204][ T7086] Tainted: [L]=SOFTLOCKUP [ 128.590210][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.590220][ T7086] Call Trace: [ 128.590228][ T7086] [ 128.590235][ T7086] dump_stack_lvl+0xe8/0x150 [ 128.590261][ T7086] should_fail_ex+0x3eb/0x540 [ 128.590285][ T7086] should_failslab+0xa8/0x100 [ 128.590305][ T7086] __kmalloc_cache_noprof+0x9e/0x600 [ 128.590325][ T7086] ? madvise_vma_behavior+0x13fe/0x5180 [ 128.590342][ T7086] ? madvise_vma_behavior+0x13fe/0x5180 [ 128.590366][ T7086] madvise_vma_behavior+0x13fe/0x5180 [ 128.590391][ T7086] ? lock_acquire+0x115/0x350 [ 128.590409][ T7086] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 128.590440][ T7086] ? process_measurement+0x7b2/0x1c10 [ 128.590463][ T7086] ? up_write+0x19d/0x4a0 [ 128.590486][ T7086] ? __lock_acquire+0x747/0x2de0 [ 128.590511][ T7086] ? __lock_acquire+0x747/0x2de0 [ 128.590542][ T7086] ? lock_acquire+0x115/0x350 [ 128.590570][ T7086] ? __lock_acquire+0x747/0x2de0 [ 128.590607][ T7086] ? mas_prev_slot+0xb76/0xbf0 [ 128.590640][ T7086] ? find_vma_prev+0x123/0x1b0 [ 128.590660][ T7086] ? __pfx_find_vma_prev+0x10/0x10 [ 128.590697][ T7086] madvise_walk_vmas+0x57d/0xb70 [ 128.590727][ T7086] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 128.590750][ T7086] ? blk_start_plug+0x6e/0x1b0 [ 128.590770][ T7086] madvise_do_behavior+0x385/0x540 [ 128.590794][ T7086] ? __pfx_madvise_do_behavior+0x10/0x10 [ 128.590820][ T7086] ? down_read+0x2b9/0x320 [ 128.590837][ T7086] ? ksys_write+0x1e6/0x270 [ 128.590861][ T7086] do_madvise+0x26f/0x330 [ 128.590887][ T7086] ? __pfx_do_madvise+0x10/0x10 [ 128.590916][ T7086] ? __pfx_ksys_write+0x10/0x10 [ 128.590940][ T7086] __x64_sys_madvise+0xa6/0xc0 [ 128.590960][ T7086] do_syscall_64+0x166/0x520 [ 128.590976][ T7086] ? trace_irq_disable+0x3b/0x140 [ 128.590992][ T7086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.591010][ T7086] ? clear_bhb_loop+0x70/0xc0 [ 128.591028][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.591045][ T7086] RIP: 0033:0x7f644519e199 [ 128.591061][ T7086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.591080][ T7086] RSP: 002b:00007f644609f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 128.591097][ T7086] RAX: ffffffffffffffda RBX: 00007f6445426090 RCX: 00007f644519e199 [ 128.591112][ T7086] RDX: 0000000000000019 RSI: 0000000000c00000 RDI: 0000200000000000 [ 128.591123][ T7086] RBP: 00007f644609f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.591134][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.591144][ T7086] R13: 00007f6445426128 R14: 00007f6445426090 R15: 00007fff89f92c58 [ 128.591174][ T7086] [ 128.882804][ T7091] syzkaller1: entered promiscuous mode [ 128.882826][ T7091] syzkaller1: entered allmulticast mode [ 129.093406][ T7093] FAULT_INJECTION: forcing a failure. [ 129.093406][ T7093] name failslab, interval 1, probability 0, space 0, times 0 [ 129.093438][ T7093] CPU: 0 UID: 0 PID: 7093 Comm: syz.5.295 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.093464][ T7093] Tainted: [L]=SOFTLOCKUP [ 129.093471][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.093482][ T7093] Call Trace: [ 129.093489][ T7093] [ 129.093498][ T7093] dump_stack_lvl+0xe8/0x150 [ 129.093523][ T7093] should_fail_ex+0x3eb/0x540 [ 129.093551][ T7093] should_failslab+0xa8/0x100 [ 129.093572][ T7093] __kmalloc_cache_noprof+0x9e/0x600 [ 129.093592][ T7093] ? swnode_register+0x59/0x590 [ 129.093610][ T7093] ? swnode_register+0x59/0x590 [ 129.093634][ T7093] swnode_register+0x59/0x590 [ 129.093659][ T7093] fwnode_create_software_node+0x194/0x1f0 [ 129.093682][ T7093] device_create_managed_software_node+0xce/0x1f0 [ 129.093706][ T7093] iommufd_test+0x38a0/0x6360 [ 129.093733][ T7093] ? __lock_acquire+0x747/0x2de0 [ 129.093752][ T7093] ? __pfx_iommufd_test+0x10/0x10 [ 129.093782][ T7093] ? tomoyo_path_number_perm+0x219/0x5f0 [ 129.093803][ T7093] ? tomoyo_path_number_perm+0x219/0x5f0 [ 129.093833][ T7093] ? lock_acquire+0x115/0x350 [ 129.093864][ T7093] ? __might_fault+0xaf/0x130 [ 129.093889][ T7093] iommufd_fops_ioctl+0x465/0x600 [ 129.093914][ T7093] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 129.093938][ T7093] ? __fget_files+0x2a/0x420 [ 129.093967][ T7093] ? bpf_lsm_file_ioctl+0x9/0x20 [ 129.093986][ T7093] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 129.094005][ T7093] __se_sys_ioctl+0xfc/0x170 [ 129.094027][ T7093] do_syscall_64+0x166/0x520 [ 129.094044][ T7093] ? trace_irq_disable+0x3b/0x140 [ 129.094060][ T7093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.094079][ T7093] ? clear_bhb_loop+0x70/0xc0 [ 129.094100][ T7093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.094119][ T7093] RIP: 0033:0x7faa96b9e199 [ 129.094137][ T7093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.094152][ T7093] RSP: 002b:00007faa97a30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.094171][ T7093] RAX: ffffffffffffffda RBX: 00007faa96e25fa0 RCX: 00007faa96b9e199 [ 129.094185][ T7093] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 129.094196][ T7093] RBP: 00007faa96c35888 R08: 0000000000000000 R09: 0000000000000000 [ 129.094208][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.094219][ T7093] R13: 00007faa96e26038 R14: 00007faa96e25fa0 R15: 00007fff3f05b3b8 [ 129.094249][ T7093] [ 129.095896][ T7093] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 129.464999][ T7105] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.289760][ T5776] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 130.653984][ T5762] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 130.689998][ T7112] FAULT_INJECTION: forcing a failure. [ 130.689998][ T7112] name fail_futex, interval 1, probability 0, space 0, times 0 [ 130.690030][ T7112] CPU: 0 UID: 0 PID: 7112 Comm: syz.4.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.690053][ T7112] Tainted: [L]=SOFTLOCKUP [ 130.690059][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.690069][ T7112] Call Trace: [ 130.690076][ T7112] [ 130.690084][ T7112] dump_stack_lvl+0xe8/0x150 [ 130.690110][ T7112] should_fail_ex+0x3eb/0x540 [ 130.690134][ T7112] get_futex_key+0xf12/0x1580 [ 130.690162][ T7112] ? __pfx_get_futex_key+0x10/0x10 [ 130.690192][ T7112] futex_wake+0x119/0x5f0 [ 130.690216][ T7112] ? __pfx_futex_wake+0x10/0x10 [ 130.690238][ T7112] ? mm_exit_exec_release+0x20/0x290 [ 130.690259][ T7112] do_futex+0x458/0x4e0 [ 130.690276][ T7112] ? __pfx_do_futex+0x10/0x10 [ 130.690292][ T7112] ? __might_fault+0xaf/0x130 [ 130.690308][ T7112] mm_exit_exec_release+0x10d/0x290 [ 130.690334][ T7112] exit_mm+0x50/0x240 [ 130.690350][ T7112] do_exit+0x6a8/0x2380 [ 130.690368][ T7112] ? __pfx_do_exit+0x10/0x10 [ 130.690382][ T7112] ? cgroup1_freezing+0x20/0x350 [ 130.690395][ T7112] ? cgroup1_freezing+0x20/0x350 [ 130.690414][ T7112] do_group_exit+0x22d/0x2f0 [ 130.690426][ T7112] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.690443][ T7112] get_signal+0x1216/0x12c0 [ 130.690472][ T7112] arch_do_signal_or_restart+0xbb/0x860 [ 130.690490][ T7112] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 130.690518][ T7112] exit_to_user_mode_loop+0x10e/0x770 [ 130.690531][ T7112] ? rcu_is_watching+0x16/0xb0 [ 130.690548][ T7112] do_syscall_64+0x328/0x520 [ 130.690561][ T7112] ? trace_irq_disable+0x3b/0x140 [ 130.690573][ T7112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.690586][ T7112] ? clear_bhb_loop+0x70/0xc0 [ 130.690601][ T7112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.690615][ T7112] RIP: 0033:0x7f982979e199 [ 130.690629][ T7112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.690640][ T7112] RSP: 002b:00007f982a6150e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.690656][ T7112] RAX: fffffffffffffe00 RBX: 00007f9829a26098 RCX: 00007f982979e199 [ 130.690665][ T7112] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9829a26098 [ 130.690673][ T7112] RBP: 00007f9829a26090 R08: 0000000000000000 R09: 0000000000000000 [ 130.690682][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.690690][ T7112] R13: 00007f9829a26128 R14: 00007fff952ac820 R15: 00007fff952ac908 [ 130.690712][ T7112] [ 130.754377][ T5776] usb 6-1: New USB device found: idVendor=06cb, idProduct=2968, bcdDevice=0.00 [ 130.755923][ T5776] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 130.755952][ T5776] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.755975][ T5776] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.756005][ T5776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.760739][ T5776] usb 6-1: config 0 descriptor?? [ 130.853671][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 131.011431][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 131.011489][ T9] usb 1-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 131.033811][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.033861][ T9] usb 1-1: Product: syz [ 131.033874][ T9] usb 1-1: Manufacturer: syz [ 131.033887][ T9] usb 1-1: SerialNumber: syz [ 131.084165][ T9] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 131.100051][ T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 131.117128][ T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 131.143917][ T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 131.172829][ T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 131.221623][ T5776] itetech 0003:06CB:2968.0001: ignoring exceeding usage max [ 131.296030][ T5754] usb 1-1: USB disconnect, device number 15 [ 131.395378][ T5754] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 131.403396][ T5754] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 131.414458][ T5776] itetech 0003:06CB:2968.0001: hidraw0: USB HID v0.06 Joystick [HID 06cb:2968] on usb-dummy_hcd.5-1/input0 [ 131.451766][ T5754] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 131.469698][ T5754] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 131.483925][ T5754] keyspan 1-1:1.0: device disconnected [ 131.541440][ T5776] usb 6-1: USB disconnect, device number 7 [ 131.642976][ T7125] fido_id[7125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 131.831954][ T7127] syzkaller1: entered promiscuous mode [ 131.831977][ T7127] syzkaller1: entered allmulticast mode [ 131.880064][ T7129] 9p: Bad value for 'port' [ 132.283964][ T5754] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 132.338142][ T7153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.316'. [ 132.338181][ T7153] openvswitch: netlink: Flow actions attr not present in new flow. [ 132.370713][ T7153] FAULT_INJECTION: forcing a failure. [ 132.370713][ T7153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.370743][ T7153] CPU: 1 UID: 0 PID: 7153 Comm: syz.5.316 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.370768][ T7153] Tainted: [L]=SOFTLOCKUP [ 132.370774][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 132.370783][ T7153] Call Trace: [ 132.370790][ T7153] [ 132.370798][ T7153] dump_stack_lvl+0xe8/0x150 [ 132.370823][ T7153] should_fail_ex+0x3eb/0x540 [ 132.370846][ T7153] _copy_from_user+0x2d/0xb0 [ 132.370866][ T7153] memdup_user+0x5e/0xd0 [ 132.370883][ T7153] strndup_user+0x68/0xd0 [ 132.370900][ T7153] __se_sys_mount+0x9d/0x420 [ 132.370918][ T7153] ? ksys_write+0x242/0x270 [ 132.370939][ T7153] ? __pfx___se_sys_mount+0x10/0x10 [ 132.370963][ T7153] ? __x64_sys_mount+0x20/0xc0 [ 132.370980][ T7153] do_syscall_64+0x166/0x520 [ 132.370997][ T7153] ? trace_irq_disable+0x3b/0x140 [ 132.371012][ T7153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.371030][ T7153] ? clear_bhb_loop+0x70/0xc0 [ 132.371049][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.371067][ T7153] RIP: 0033:0x7faa96b9e199 [ 132.371084][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.371098][ T7153] RSP: 002b:00007faa97a30028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 132.371116][ T7153] RAX: ffffffffffffffda RBX: 00007faa96e25fa0 RCX: 00007faa96b9e199 [ 132.371139][ T7153] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 132.371151][ T7153] RBP: 00007faa97a30090 R08: 0000200000000100 R09: 0000000000000000 [ 132.371163][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.371174][ T7153] R13: 00007faa96e26038 R14: 00007faa96e25fa0 R15: 00007fff3f05b3b8 [ 132.371203][ T7153] [ 132.382607][ T7155] syzkaller1: entered promiscuous mode [ 132.382638][ T7155] syzkaller1: entered allmulticast mode [ 132.414469][ T5754] usb 1-1: device descriptor read/64, error -71 [ 132.597054][ T5757] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 132.615767][ T7159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.319'. [ 132.615797][ T7159] openvswitch: netlink: Flow actions attr not present in new flow. [ 132.696675][ T5754] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 132.702285][ T7159] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿþÿÿÿ [ 132.765494][ T5757] usb 5-1: Using ep0 maxpacket: 32 [ 132.766306][ T5757] usb 5-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 132.768636][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.768664][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.768684][ T5757] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 132.768723][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.772548][ T5757] usb 5-1: config 0 descriptor?? [ 132.808782][ T7165] kvm: emulating exchange as write [ 132.808976][ T7165] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.834517][ T5754] usb 1-1: device descriptor read/64, error -71 [ 132.882634][ T7168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.322'. [ 132.882650][ T7168] openvswitch: netlink: Flow actions attr not present in new flow. [ 132.954344][ T5754] usb usb1-port1: attempt power cycle [ 132.964681][ T7168] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿþÿÿÿ| [ 133.100686][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.100765][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.185191][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.185693][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.313732][ T5754] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 133.346734][ T5754] usb 1-1: device descriptor read/8, error -71 [ 133.406133][ T5757] usbhid 5-1:0.0: can't add hid device: -71 [ 133.406249][ T5757] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 133.409689][ T5757] usb 5-1: USB disconnect, device number 9 [ 133.593753][ T5754] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 133.614401][ T5754] usb 1-1: device descriptor read/8, error -71 [ 133.734527][ T5754] usb usb1-port1: unable to enumerate USB device [ 133.850635][ T7186] syzkaller1: entered promiscuous mode [ 133.850658][ T7186] syzkaller1: entered allmulticast mode [ 134.021421][ T7193] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 134.169741][ T5616] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 134.169765][ T5616] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 134.350616][ T7207] FAULT_INJECTION: forcing a failure. [ 134.350616][ T7207] name fail_futex, interval 1, probability 0, space 0, times 0 [ 134.350641][ T7207] CPU: 1 UID: 60928 PID: 7207 Comm: syz.5.336 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.350662][ T7207] Tainted: [L]=SOFTLOCKUP [ 134.350666][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.350672][ T7207] Call Trace: [ 134.350677][ T7207] [ 134.350682][ T7207] dump_stack_lvl+0xe8/0x150 [ 134.350698][ T7207] should_fail_ex+0x3eb/0x540 [ 134.350713][ T7207] get_futex_key+0x1b4/0x1580 [ 134.350730][ T7207] ? __pfx_get_futex_key+0x10/0x10 [ 134.350740][ T7207] ? kasan_save_free_info+0x40/0x50 [ 134.350749][ T7207] ? __kasan_slab_free+0x5c/0x80 [ 134.350758][ T7207] ? kfree+0x1c5/0x650 [ 134.350767][ T7207] ? __se_sys_mount+0x3d6/0x420 [ 134.350777][ T7207] ? do_syscall_64+0x166/0x520 [ 134.350786][ T7207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.350802][ T7207] futex_wake+0x119/0x5f0 [ 134.350815][ T7207] ? __pfx_futex_wake+0x10/0x10 [ 134.350833][ T7207] do_futex+0x458/0x4e0 [ 134.350846][ T7207] ? __pfx_do_futex+0x10/0x10 [ 134.350861][ T7207] __se_sys_futex+0x3a8/0x450 [ 134.350874][ T7207] ? __pfx___se_sys_futex+0x10/0x10 [ 134.350884][ T7207] ? __pfx___se_sys_mount+0x10/0x10 [ 134.350897][ T7207] ? __x64_sys_futex+0x21/0xf0 [ 134.350909][ T7207] do_syscall_64+0x166/0x520 [ 134.350919][ T7207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.350930][ T7207] ? clear_bhb_loop+0x70/0xc0 [ 134.350941][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.350951][ T7207] RIP: 0033:0x7faa96b9e199 [ 134.350962][ T7207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.350970][ T7207] RSP: 002b:00007faa97a300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.350982][ T7207] RAX: ffffffffffffffda RBX: 00007faa96e25fa8 RCX: 00007faa96b9e199 [ 134.350989][ T7207] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faa96e25fac [ 134.350996][ T7207] RBP: 00007faa96e25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 134.351003][ T7207] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 134.351009][ T7207] R13: 00007faa96e26038 R14: 00007fff3f05b2d0 R15: 00007fff3f05b3b8 [ 134.351025][ T7207] [ 134.514579][ T5776] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 134.685546][ T5776] usb 3-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 134.686646][ T5776] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.686669][ T5776] usb 3-1: config 0 has no interface number 0 [ 134.689595][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.689625][ T5776] usb 3-1: Product: syz [ 134.689640][ T5776] usb 3-1: Manufacturer: syz [ 134.689654][ T5776] usb 3-1: SerialNumber: syz [ 134.693071][ T5776] usb 3-1: config 0 descriptor?? [ 134.734363][ T5757] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 134.749657][ T7211] syzkaller1: entered promiscuous mode [ 134.749676][ T7211] syzkaller1: entered allmulticast mode [ 134.783149][ T4927] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 134.904080][ T5757] usb 6-1: Using ep0 maxpacket: 8 [ 134.909203][ T5757] usb 6-1: unable to get BOS descriptor or descriptor too short [ 134.909251][ T5757] usb 6-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 134.911748][ T5757] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 134.911772][ T5757] usb 6-1: Manufacturer: syz [ 134.911786][ T5757] usb 6-1: SerialNumber: syz [ 134.934961][ T5776] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 134.947763][ T5776] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 134.948117][ T5776] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 134.948166][ T5776] usb 3-1: media controller created [ 134.964784][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.151630][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 135.204872][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.205536][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.239776][ T5757] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 135.267993][ T5757] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 135.268616][ T5757] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 135.268662][ T5757] usb 6-1: media controller created [ 135.309810][ T5757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.336673][ T5757] zl10353_read_register: readreg error (reg=127, ret==0) [ 135.396666][ T5757] usb 6-1: USB disconnect, device number 8 [ 135.462304][ T7225] FAULT_INJECTION: forcing a failure. [ 135.462304][ T7225] name failslab, interval 1, probability 0, space 0, times 0 [ 135.462348][ T7225] CPU: 1 UID: 0 PID: 7225 Comm: syz.0.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.462368][ T7225] Tainted: [L]=SOFTLOCKUP [ 135.462373][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.462381][ T7225] Call Trace: [ 135.462387][ T7225] [ 135.462394][ T7225] dump_stack_lvl+0xe8/0x150 [ 135.462415][ T7225] should_fail_ex+0x3eb/0x540 [ 135.462444][ T7225] should_failslab+0xa8/0x100 [ 135.462458][ T7225] ? security_file_alloc+0x34/0x310 [ 135.462472][ T7225] kmem_cache_alloc_noprof+0x9c/0x600 [ 135.462487][ T7225] ? rcu_is_watching+0x16/0xb0 [ 135.462502][ T7225] ? security_file_alloc+0x34/0x310 [ 135.462520][ T7225] security_file_alloc+0x34/0x310 [ 135.462535][ T7225] init_file+0x90/0x2b0 [ 135.462551][ T7225] alloc_empty_file+0x74/0x1d0 [ 135.462569][ T7225] path_openat+0x9d/0x1da0 [ 135.462597][ T7225] do_file_open+0x23e/0x4a0 [ 135.462614][ T7225] ? __pfx_do_file_open+0x10/0x10 [ 135.462644][ T7225] ? _raw_spin_unlock+0x28/0x50 [ 135.462659][ T7225] ? alloc_fd+0x6af/0x760 [ 135.462683][ T7225] do_sys_openat2+0x115/0x200 [ 135.462699][ T7225] ? __pfx_do_sys_openat2+0x10/0x10 [ 135.462716][ T7225] ? do_user_addr_fault+0xd3f/0x1480 [ 135.462732][ T7225] __x64_sys_openat+0x138/0x170 [ 135.462749][ T7225] do_syscall_64+0x166/0x520 [ 135.462761][ T7225] ? trace_irq_disable+0x3b/0x140 [ 135.462773][ T7225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.462788][ T7225] ? clear_bhb_loop+0x70/0xc0 [ 135.462803][ T7225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.462818][ T7225] RIP: 0033:0x7f644515e9ce [ 135.462834][ T7225] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.462846][ T7225] RSP: 002b:00007f64460bdea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.462863][ T7225] RAX: ffffffffffffffda RBX: 00007f64460c06c0 RCX: 00007f644515e9ce [ 135.462873][ T7225] RDX: 0000000000000002 RSI: 00007f6445234c1a RDI: ffffffffffffff9c [ 135.462882][ T7225] RBP: 00007f64460c0090 R08: 0000000000000000 R09: 0000000000000000 [ 135.462891][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 135.462901][ T7225] R13: 0000200000000500 R14: 0000000000000002 R15: 00007fff89f92c58 [ 135.462926][ T7225] [ 135.859097][ T7227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.055413][ T5776] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 136.237010][ T5776] usb 3-1: USB disconnect, device number 13 [ 136.341319][ T7234] syzkaller1: entered promiscuous mode [ 136.341342][ T7234] syzkaller1: entered allmulticast mode [ 136.436668][ T7236] capability: warning: `syz.4.348' uses 32-bit capabilities (legacy support in use) [ 136.813702][ T887] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 136.909859][ T7250] x_tables: duplicate underflow at hook 1 [ 136.964529][ T887] usb 1-1: New USB device found: idVendor=05ac, idProduct=0231, bcdDevice=0.00 [ 136.965978][ T887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 80, setting to 64 [ 136.966023][ T887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.977632][ T887] usb 1-1: config 0 descriptor?? [ 136.978340][ T7240] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.005102][ T887] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 137.184221][ T7240] 9pnet_fd: p9_fd_create_unix (7240): problem connecting socket: ./file0: -111 [ 137.186700][ T4962] bcm5974 1-1:0.0: could not read from device [ 137.197883][ T4962] bcm5974 1-1:0.0: could not read from device [ 137.210619][ T4962] bcm5974 1-1:0.0: could not read from device [ 137.220360][ T887] usb 1-1: USB disconnect, device number 20 [ 137.343861][ T5776] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 137.382900][ T7257] syzkaller1: entered promiscuous mode [ 137.382916][ T7257] syzkaller1: entered allmulticast mode [ 137.495203][ T5776] usb 3-1: Using ep0 maxpacket: 32 [ 137.496468][ T5776] usb 3-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 137.497426][ T5776] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 137.497449][ T5776] usb 3-1: config 0 has no interface number 0 [ 137.497489][ T5776] usb 3-1: config 0 interface 12 has no altsetting 0 [ 137.499290][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.499308][ T5776] usb 3-1: Product: syz [ 137.499315][ T5776] usb 3-1: Manufacturer: syz [ 137.499323][ T5776] usb 3-1: SerialNumber: syz [ 137.501170][ T5776] usb 3-1: config 0 descriptor?? [ 137.544008][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 137.686089][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 137.686544][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 137.686573][ T9] usb 6-1: New USB device found: idVendor=1b3d, idProduct=0110, bcdDevice=9a.bb [ 137.687519][ T9] usb 6-1: config 6 has an invalid interface number: 63 but max is 0 [ 137.687541][ T9] usb 6-1: config 6 has no interface number 0 [ 137.687577][ T9] usb 6-1: config 6 interface 63 altsetting 19 has an invalid endpoint descriptor of length 5, skipping [ 137.687589][ T9] usb 6-1: config 6 interface 63 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.687604][ T9] usb 6-1: config 6 interface 63 has no altsetting 0 [ 137.689653][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.689699][ T9] usb 6-1: Product: syz [ 137.689713][ T9] usb 6-1: Manufacturer: syz [ 137.689725][ T9] usb 6-1: SerialNumber: syz [ 137.709666][ T7255] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 137.737131][ T887] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 137.816675][ T7261] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 137.816701][ T7261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.885098][ T887] usb 5-1: New USB device found: idVendor=1943, idProduct=2255, bcdDevice=d7.fb [ 137.886181][ T887] usb 5-1: config 255 has an invalid interface number: 133 but max is 0 [ 137.886204][ T887] usb 5-1: config 255 has no interface number 0 [ 137.886242][ T887] usb 5-1: config 255 interface 133 has no altsetting 0 [ 137.888130][ T887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.888145][ T887] usb 5-1: Product: syz [ 137.888153][ T887] usb 5-1: Manufacturer: syz [ 137.888160][ T887] usb 5-1: SerialNumber: syz [ 138.014085][ T7255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.016395][ T7255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.025253][ T9] ftdi_sio 6-1:6.63: FTDI USB Serial Device converter detected [ 138.031731][ T9] ftdi_sio ttyUSB0: unknown device type: 0x9abb [ 138.041961][ T9] usb 6-1: USB disconnect, device number 9 [ 138.048787][ T9] ftdi_sio 6-1:6.63: device disconnected [ 138.100616][ T887] s2255 5-1:255.133: Could not find bulk-in endpoint [ 138.100676][ T887] Sensoray 2255 driver load failed: 0xfffffff4 [ 138.100687][ T887] s2255 5-1:255.133: probe with driver s2255 failed with error -12 [ 138.101030][ T887] usbhid 5-1:255.133: couldn't find an input interrupt endpoint [ 138.102866][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 138.108767][ T887] usb 5-1: USB disconnect, device number 10 [ 138.730320][ T7272] kvm: pic: non byte read [ 138.730682][ T7272] kvm: pic: single mode not supported [ 138.730910][ T7272] kvm: pic: level sensitive irq not supported [ 138.730988][ T7272] kvm: pic: non byte read [ 138.731245][ T7272] kvm: pic: single mode not supported [ 138.731254][ T7272] kvm: pic: level sensitive irq not supported [ 138.731307][ T7272] kvm: pic: non byte read [ 138.731551][ T7272] kvm: pic: level sensitive irq not supported [ 138.731604][ T7272] kvm: pic: non byte read [ 138.789067][ T7272] kvm: pic: non byte read [ 138.789409][ T7272] kvm: pic: non byte read [ 138.789929][ T7272] kvm: pic: level sensitive irq not supported [ 138.789992][ T7272] kvm: pic: non byte read [ 138.790245][ T7272] kvm: pic: single mode not supported [ 138.790254][ T7272] kvm: pic: level sensitive irq not supported [ 138.790310][ T7272] kvm: pic: non byte read [ 138.814073][ T5776] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 138.814126][ T5776] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 138.814142][ T5776] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 138.814226][ T5776] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 138.826642][ T5776] usb 3-1: USB disconnect, device number 14 [ 138.827235][ T7272] kvm: pic: non byte read [ 139.024626][ T887] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 139.114862][ T7282] syzkaller1: entered promiscuous mode [ 139.114877][ T7282] syzkaller1: entered allmulticast mode [ 139.176243][ T887] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 139.177882][ T887] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 139.180018][ T887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.180040][ T887] usb 1-1: Product: syz [ 139.180053][ T887] usb 1-1: Manufacturer: syz [ 139.180073][ T887] usb 1-1: SerialNumber: syz [ 139.233190][ T887] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.366953][ T33] kauditd_printk_skb: 19 callbacks suppressed [ 139.367007][ T33] audit: type=1326 audit(1791486806.078:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.2.369" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83a479e199 code=0x0 [ 139.453121][ T7290] FAULT_INJECTION: forcing a failure. [ 139.453121][ T7290] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 139.453146][ T7290] CPU: 1 UID: 0 PID: 7290 Comm: syz.2.370 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.453162][ T7290] Tainted: [L]=SOFTLOCKUP [ 139.453166][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.453172][ T7290] Call Trace: [ 139.453177][ T7290] [ 139.453182][ T7290] dump_stack_lvl+0xe8/0x150 [ 139.453207][ T7290] should_fail_ex+0x3eb/0x540 [ 139.453231][ T7290] prepare_alloc_pages+0x21e/0x5f0 [ 139.453270][ T7290] __alloc_frozen_pages_noprof+0x17a/0x400 [ 139.453293][ T7290] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.453315][ T7290] ? policy_nodemask+0x2cc/0x8e0 [ 139.453326][ T7290] ? __lock_acquire+0x747/0x2de0 [ 139.453338][ T7290] alloc_pages_mpol+0x21e/0x390 [ 139.453351][ T7290] folio_alloc_mpol_noprof+0x39/0x160 [ 139.453362][ T7290] vma_alloc_folio_noprof+0xe1/0x1e0 [ 139.453382][ T7290] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 139.453414][ T7290] ? vma_has_anon_rmap+0x95/0x270 [ 139.453435][ T7290] do_pte_missing+0x16d4/0x3570 [ 139.453472][ T7290] handle_mm_fault+0x1a53/0x3750 [ 139.453489][ T7290] ? handle_mm_fault+0xf1/0x3750 [ 139.453505][ T7290] ? __pfx_handle_mm_fault+0x10/0x10 [ 139.453526][ T7290] ? __lock_acquire+0x747/0x2de0 [ 139.453546][ T7290] ? lock_mm_and_find_vma+0xa7/0x340 [ 139.453564][ T7290] do_user_addr_fault+0x7f6/0x1480 [ 139.453595][ T7290] exc_page_fault+0x6a/0xc0 [ 139.453613][ T7290] asm_exc_page_fault+0x26/0x30 [ 139.453629][ T7290] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 139.453649][ T7290] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 3f 82 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 139.453663][ T7290] RSP: 0018:ffffc90005277b48 EFLAGS: 00050206 [ 139.453678][ T7290] RAX: ffffffff84eee601 RBX: 0000000000001000 RCX: 0000000000000248 [ 139.453690][ T7290] RDX: 0000000000000000 RSI: ffff888033ee0db8 RDI: 0000200000002000 [ 139.453701][ T7290] RBP: ffffc90005277c90 R08: ffff888033ee0fff R09: 1ffff110067dc1ff [ 139.453713][ T7290] R10: dffffc0000000000 R11: ffffed10067dc200 R12: 0000200000002248 [ 139.453725][ T7290] R13: 00007ffffffff000 R14: ffff888033ee0000 R15: 0000200000001248 [ 139.453746][ T7290] ? _copy_from_user+0x51/0xb0 [ 139.453772][ T7290] _copy_to_user+0x8a/0xb0 [ 139.453791][ T7290] pagemap_read+0x4dc/0x7c0 [ 139.453819][ T7290] ? __pfx_pagemap_read+0x10/0x10 [ 139.453844][ T7290] ? rw_verify_area+0x24a/0x4c0 [ 139.453864][ T7290] ? __pfx_pagemap_read+0x10/0x10 [ 139.453886][ T7290] vfs_read+0x213/0xa80 [ 139.453905][ T7290] ? __pfx_vfs_read+0x10/0x10 [ 139.453915][ T7290] ? __fget_files+0x2a/0x420 [ 139.453926][ T7290] ? __fget_files+0x2a/0x420 [ 139.453935][ T7290] ? __fget_files+0x3a2/0x420 [ 139.453943][ T7290] ? __fget_files+0x2a/0x420 [ 139.453957][ T7290] ? fdget+0x1ac/0x250 [ 139.453976][ T7290] __x64_sys_pread64+0x196/0x220 [ 139.453998][ T7290] ? __pfx___x64_sys_pread64+0x10/0x10 [ 139.454029][ T7290] do_syscall_64+0x166/0x520 [ 139.454047][ T7290] ? trace_irq_disable+0x3b/0x140 [ 139.454063][ T7290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.454077][ T7290] ? clear_bhb_loop+0x70/0xc0 [ 139.454089][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.454099][ T7290] RIP: 0033:0x7f83a479e199 [ 139.454109][ T7290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.454124][ T7290] RSP: 002b:00007f83a5700028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 139.454139][ T7290] RAX: ffffffffffffffda RBX: 00007f83a4a25fa0 RCX: 00007f83a479e199 [ 139.454153][ T7290] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000004 [ 139.454166][ T7290] RBP: 00007f83a5700090 R08: 0000000000000000 R09: 0000000000000000 [ 139.454177][ T7290] R10: 0000000ffffffff8 R11: 0000000000000246 R12: 0000000000000001 [ 139.454189][ T7290] R13: 00007f83a4a26038 R14: 00007f83a4a25fa0 R15: 00007ffeb6bf8638 [ 139.454220][ T7290] [ 139.547896][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.571776][ T7292] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 139.709603][ T5762] usb 1-1: USB disconnect, device number 21 [ 139.726627][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 139.729307][ T9] usb 5-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 139.750227][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.750259][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.755851][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 139.755877][ T9] usb 5-1: Product: syz [ 139.755891][ T9] usb 5-1: Manufacturer: syz [ 139.800564][ T9] hub 5-1:4.0: USB hub found [ 139.973780][ T4927] Bluetooth: hci1: command tx timeout [ 139.991139][ T9] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 140.024429][ T9] usb 5-1: USB disconnect, device number 11 [ 140.081712][ T7303] syzkaller1: entered promiscuous mode [ 140.081727][ T7303] syzkaller1: entered allmulticast mode [ 140.183729][ T5609] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 140.186130][ T7305] FAULT_INJECTION: forcing a failure. [ 140.186130][ T7305] name failslab, interval 1, probability 0, space 0, times 0 [ 140.186153][ T7305] CPU: 1 UID: 0 PID: 7305 Comm: syz.2.376 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.186168][ T7305] Tainted: [L]=SOFTLOCKUP [ 140.186172][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.186178][ T7305] Call Trace: [ 140.186183][ T7305] [ 140.186188][ T7305] dump_stack_lvl+0xe8/0x150 [ 140.186205][ T7305] should_fail_ex+0x3eb/0x540 [ 140.186219][ T7305] should_failslab+0xa8/0x100 [ 140.186231][ T7305] __kmalloc_noprof+0xf9/0x710 [ 140.186241][ T7305] ? prepare_creds+0x30/0x820 [ 140.186252][ T7305] ? security_prepare_creds+0x52/0x360 [ 140.186263][ T7305] ? security_prepare_creds+0x52/0x360 [ 140.186273][ T7305] ? kmem_cache_alloc_noprof+0x151/0x600 [ 140.186286][ T7305] security_prepare_creds+0x52/0x360 [ 140.186298][ T7305] prepare_creds+0x57d/0x820 [ 140.186311][ T7305] lookup_user_key+0x39b/0x1360 [ 140.186326][ T7305] ? __pfx_lookup_user_key+0x10/0x10 [ 140.186339][ T7305] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 140.186352][ T7305] ? futex_wait+0x2a2/0x390 [ 140.186364][ T7305] ? __pfx_futex_wait+0x10/0x10 [ 140.186377][ T7305] keyctl_session_to_parent+0x28/0xa20 [ 140.186392][ T7305] __se_sys_keyctl+0x827/0xbc0 [ 140.186403][ T7305] ? __pfx___se_sys_keyctl+0x10/0x10 [ 140.186415][ T7305] ? __pfx_do_futex+0x10/0x10 [ 140.186429][ T7305] ? __se_sys_futex+0x3a8/0x450 [ 140.186442][ T7305] ? __pfx___se_sys_futex+0x10/0x10 [ 140.186456][ T7305] ? __x64_sys_keyctl+0x20/0xc0 [ 140.186467][ T7305] do_syscall_64+0x166/0x520 [ 140.186477][ T7305] ? trace_irq_disable+0x3b/0x140 [ 140.186486][ T7305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.186501][ T7305] ? clear_bhb_loop+0x70/0xc0 [ 140.186520][ T7305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.186540][ T7305] RIP: 0033:0x7f83a479e199 [ 140.186558][ T7305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.186567][ T7305] RSP: 002b:00007f83a5700028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 140.186582][ T7305] RAX: ffffffffffffffda RBX: 00007f83a4a25fa0 RCX: 00007f83a479e199 [ 140.186590][ T7305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 140.186597][ T7305] RBP: 00007f83a4835888 R08: 0000000000000000 R09: 0000000000000000 [ 140.186604][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.186610][ T7305] R13: 00007f83a4a26038 R14: 00007f83a4a25fa0 R15: 00007ffeb6bf8638 [ 140.186627][ T7305] [ 140.187523][ T7305] fuse: Unknown parameter '�öë ‚O-„“?1ƒùqÕCž‘†)ÙŠ�ÔÇ£F”(S•¯' [ 140.297483][ T887] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 140.297661][ T887] ath9k_htc: Failed to initialize the device [ 140.298453][ T5762] usb 1-1: ath9k_htc: USB layer deinitialized [ 140.333754][ T5609] usb 6-1: Using ep0 maxpacket: 8 [ 140.342707][ T5609] usb 6-1: unable to get BOS descriptor or descriptor too short [ 140.342753][ T5609] usb 6-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 140.352205][ T5609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.352231][ T5609] usb 6-1: Product: syz [ 140.352245][ T5609] usb 6-1: Manufacturer: syz [ 140.352258][ T5609] usb 6-1: SerialNumber: syz [ 140.494128][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 140.561636][ T7311] FAULT_INJECTION: forcing a failure. [ 140.561636][ T7311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.561657][ T7311] CPU: 1 UID: 0 PID: 7311 Comm: syz.2.378 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.561679][ T7311] Tainted: [L]=SOFTLOCKUP [ 140.561686][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.561697][ T7311] Call Trace: [ 140.561705][ T7311] [ 140.561713][ T7311] dump_stack_lvl+0xe8/0x150 [ 140.561737][ T7311] should_fail_ex+0x3eb/0x540 [ 140.561759][ T7311] _copy_to_user+0x31/0xb0 [ 140.561772][ T7311] simple_read_from_buffer+0xe1/0x170 [ 140.561786][ T7311] proc_fail_nth_read+0x1bb/0x230 [ 140.561798][ T7311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.561811][ T7311] ? rw_verify_area+0x24a/0x4c0 [ 140.561828][ T7311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.561846][ T7311] vfs_read+0x213/0xa80 [ 140.561870][ T7311] ? __pfx___mutex_lock+0x10/0x10 [ 140.561889][ T7311] ? __pfx_vfs_read+0x10/0x10 [ 140.561907][ T7311] ? __fget_files+0x2a/0x420 [ 140.561918][ T7311] ? __fget_files+0x3a2/0x420 [ 140.561927][ T7311] ? __fget_files+0x2a/0x420 [ 140.561938][ T7311] ? fdget+0x1ac/0x250 [ 140.561951][ T7311] ksys_read+0x150/0x270 [ 140.561962][ T7311] ? __pfx_ksys_read+0x10/0x10 [ 140.562002][ T7311] do_syscall_64+0x166/0x520 [ 140.562018][ T7311] ? trace_irq_disable+0x3b/0x140 [ 140.562035][ T7311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.562055][ T7311] ? clear_bhb_loop+0x70/0xc0 [ 140.562068][ T7311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.562079][ T7311] RIP: 0033:0x7f83a475e9ce [ 140.562089][ T7311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.562098][ T7311] RSP: 002b:00007f83a56fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.562110][ T7311] RAX: ffffffffffffffda RBX: 00007f83a57006c0 RCX: 00007f83a475e9ce [ 140.562118][ T7311] RDX: 000000000000000f RSI: 00007f83a57000a0 RDI: 0000000000000004 [ 140.562129][ T7311] RBP: 00007f83a5700090 R08: 0000000000000000 R09: 0000000000000000 [ 140.562141][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.562152][ T7311] R13: 00007f83a4a26038 R14: 00007f83a4a25fa0 R15: 00007ffeb6bf8638 [ 140.562183][ T7311] [ 140.644492][ T9] usb 5-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 140.645709][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.645737][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.648104][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 140.648127][ T9] usb 5-1: Product: syz [ 140.648141][ T9] usb 5-1: Manufacturer: syz [ 140.669431][ T9] hub 5-1:4.0: USB hub found [ 140.734804][ T5762] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 140.788875][ T7300] FAULT_INJECTION: forcing a failure. [ 140.788875][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 140.788907][ T7300] CPU: 1 UID: 0 PID: 7300 Comm: syz.5.374 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.788931][ T7300] Tainted: [L]=SOFTLOCKUP [ 140.788938][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.788949][ T7300] Call Trace: [ 140.788956][ T7300] [ 140.788963][ T7300] dump_stack_lvl+0xe8/0x150 [ 140.788993][ T7300] should_fail_ex+0x3eb/0x540 [ 140.789017][ T7300] should_failslab+0xa8/0x100 [ 140.789037][ T7300] __kmalloc_noprof+0xf9/0x710 [ 140.789055][ T7300] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 140.789074][ T7300] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 140.789101][ T7300] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 140.789128][ T7300] genl_family_rcv_msg_doit+0xda/0x340 [ 140.789152][ T7300] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.789178][ T7300] ? apparmor_capable+0x126/0x170 [ 140.789199][ T7300] ? bpf_lsm_capable+0x9/0x20 [ 140.789217][ T7300] ? security_capable+0x7e/0x2c0 [ 140.789242][ T7300] genl_rcv_msg+0x614/0x7a0 [ 140.789267][ T7300] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.789283][ T7300] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 140.789307][ T7300] ? __asan_memcpy+0x40/0x70 [ 140.789331][ T7300] netlink_rcv_skb+0x226/0x4a0 [ 140.789352][ T7300] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.789372][ T7300] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.789404][ T7300] ? down_read+0x2b9/0x320 [ 140.789426][ T7300] genl_rcv+0x28/0x40 [ 140.789442][ T7300] netlink_unicast+0x7bd/0x940 [ 140.789471][ T7300] netlink_sendmsg+0x7c3/0xae0 [ 140.789494][ T7300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.789520][ T7300] ? apparmor_socket_sendmsg+0x98/0x360 [ 140.789542][ T7300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.789558][ T7300] sock_sendmsg_nosec+0x14e/0x190 [ 140.789581][ T7300] ____sys_sendmsg+0x54e/0x850 [ 140.789604][ T7300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.789639][ T7300] ? import_iovec+0x73/0xa0 [ 140.789661][ T7300] ___sys_sendmsg+0x2a5/0x360 [ 140.789677][ T7300] ? __lock_acquire+0x747/0x2de0 [ 140.789700][ T7300] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.789754][ T7300] ? __fget_files+0x3a2/0x420 [ 140.789771][ T7300] ? __fget_files+0x2a/0x420 [ 140.789796][ T7300] __x64_sys_sendmsg+0x1b1/0x290 [ 140.789817][ T7300] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.789858][ T7300] do_syscall_64+0x166/0x520 [ 140.789874][ T7300] ? trace_irq_disable+0x3b/0x140 [ 140.789890][ T7300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.789909][ T7300] ? clear_bhb_loop+0x70/0xc0 [ 140.789930][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.789948][ T7300] RIP: 0033:0x7faa96b9e199 [ 140.789966][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.789980][ T7300] RSP: 002b:00007faa97a30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.790000][ T7300] RAX: ffffffffffffffda RBX: 00007faa96e25fa0 RCX: 00007faa96b9e199 [ 140.790013][ T7300] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 000000000000000b [ 140.790025][ T7300] RBP: 00007faa97a30090 R08: 0000000000000000 R09: 0000000000000000 [ 140.790036][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.790047][ T7300] R13: 00007faa96e26038 R14: 00007faa96e25fa0 R15: 00007fff3f05b3b8 [ 140.790078][ T7300] [ 140.849331][ T5609] usb 6-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 140.849362][ T5609] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 140.850212][ T5609] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 140.868508][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.871979][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.881323][ T9] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 140.914691][ T5762] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 140.916747][ T9] usb 5-1: USB disconnect, device number 12 [ 140.920550][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.920573][ T5762] usb 1-1: Product: syz [ 140.920587][ T5762] usb 1-1: Manufacturer: syz [ 140.920600][ T5762] usb 1-1: SerialNumber: syz [ 140.931368][ T5762] usb 1-1: config 0 descriptor?? [ 140.966418][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 141.007787][ T5609] usb 6-1: USB disconnect, device number 10 [ 141.101514][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.127261][ T10] usb 3-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 141.147499][ T5762] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 141.160649][ T10] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 141.160701][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.180434][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 141.441459][ T7318] FAULT_INJECTION: forcing a failure. [ 141.441459][ T7318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.441491][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: syz.4.381 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.441519][ T7318] Tainted: [L]=SOFTLOCKUP [ 141.441526][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.441536][ T7318] Call Trace: [ 141.441544][ T7318] [ 141.441552][ T7318] dump_stack_lvl+0xe8/0x150 [ 141.441586][ T7318] should_fail_ex+0x3eb/0x540 [ 141.441609][ T7318] _copy_from_user+0x2d/0xb0 [ 141.441630][ T7318] memdup_user+0x5e/0xd0 [ 141.441648][ T7318] __se_sys_kexec_load+0x109/0x160 [ 141.441669][ T7318] do_syscall_64+0x166/0x520 [ 141.441688][ T7318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.441708][ T7318] ? clear_bhb_loop+0x70/0xc0 [ 141.441728][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.441746][ T7318] RIP: 0033:0x7f982979e199 [ 141.441764][ T7318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.441778][ T7318] RSP: 002b:00007f982a636028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 141.441798][ T7318] RAX: ffffffffffffffda RBX: 00007f9829a25fa0 RCX: 00007f982979e199 [ 141.441811][ T7318] RDX: 0000200000000480 RSI: 0000000000000001 RDI: 000000000000ff0f [ 141.441824][ T7318] RBP: 00007f982a636090 R08: 0000000000000000 R09: 0000000000000000 [ 141.441835][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.441847][ T7318] R13: 00007f9829a26038 R14: 00007f9829a25fa0 R15: 00007fff952ac908 [ 141.441878][ T7318] [ 141.615202][ T7320] netlink: 4548 bytes leftover after parsing attributes in process `syz.5.382'. [ 141.624546][ T7320] binder: Write failure EINVAL in pid:260 [ 141.702334][ T7324] syzkaller1: entered promiscuous mode [ 141.702357][ T7324] syzkaller1: entered allmulticast mode [ 141.835732][ T5762] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 141.986027][ T5609] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 142.005963][ T7337] IPVS: length: 4096 != 24 [ 142.009807][ T7337] CIFS: Attempting to mount //127.0.0.1/share [ 142.041844][ T7337] CIFS: VFS: cifs_mount failed w/return code = -112 [ 142.135400][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 142.135500][ T5609] usb 5-1: Using ep0 maxpacket: 16 [ 142.137252][ T5609] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 142.138790][ T5609] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 142.138820][ T5609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 142.141810][ T5609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.141832][ T5609] usb 5-1: Product: syz [ 142.141854][ T5609] usb 5-1: Manufacturer: syz [ 142.141865][ T5609] usb 5-1: SerialNumber: syz [ 142.214953][ T10] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 142.221637][ T5609] usb 5-1: config 0 descriptor?? [ 142.237533][ T5609] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 142.237555][ T5609] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 142.415797][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 142.415815][ T10] stv0680 3-1:4.0: last error: 86, command = 0x58 [ 142.420061][ T10] usb 3-1: USB disconnect, device number 15 [ 142.544181][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 142.598879][ T7343] FAULT_INJECTION: forcing a failure. [ 142.598879][ T7343] name failslab, interval 1, probability 0, space 0, times 0 [ 142.598907][ T7343] CPU: 0 UID: 0 PID: 7343 Comm: syz.5.390 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.598951][ T7343] Tainted: [L]=SOFTLOCKUP [ 142.598957][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.598968][ T7343] Call Trace: [ 142.598978][ T7343] [ 142.598985][ T7343] dump_stack_lvl+0xe8/0x150 [ 142.599012][ T7343] should_fail_ex+0x3eb/0x540 [ 142.599032][ T7343] ? dup_task_struct+0x52/0xa00 [ 142.599049][ T7343] should_failslab+0xa8/0x100 [ 142.599066][ T7343] ? dup_task_struct+0x52/0xa00 [ 142.599080][ T7343] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 142.599096][ T7343] ? cgroup1_freezing+0x20/0x350 [ 142.599112][ T7343] ? cgroup1_freezing+0x20/0x350 [ 142.599128][ T7343] ? cgroup1_freezing+0x20/0x350 [ 142.599141][ T7343] ? dup_task_struct+0x52/0xa00 [ 142.599162][ T7343] dup_task_struct+0x52/0xa00 [ 142.599181][ T7343] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.599203][ T7343] copy_process+0x7db/0x4430 [ 142.599248][ T7343] ? rcu_is_watching+0x16/0xb0 [ 142.599270][ T7343] ? __pfx_copy_process+0x10/0x10 [ 142.599297][ T7343] ? mutex_init_lockdep+0xdf/0x110 [ 142.599318][ T7343] vhost_task_create+0x1f9/0x380 [ 142.599336][ T7343] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 142.599353][ T7343] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 142.599372][ T7343] ? __pfx_vhost_task_create+0x10/0x10 [ 142.599385][ T7343] ? register_lock_class+0x31/0x2e0 [ 142.599411][ T7343] ? __pfx_vhost_task_fn+0x10/0x10 [ 142.599446][ T7343] kvm_mmu_post_init_vm+0x147/0x2b0 [ 142.599467][ T7343] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 142.599491][ T7343] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 142.599513][ T7343] kvm_vcpu_ioctl+0xa61/0xfd0 [ 142.599534][ T7343] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 142.599555][ T7343] ? __fget_files+0x2a/0x420 [ 142.599567][ T7343] ? __fget_files+0x2a/0x420 [ 142.599577][ T7343] ? __fget_files+0x2a/0x420 [ 142.599588][ T7343] ? bpf_lsm_file_ioctl+0x9/0x20 [ 142.599599][ T7343] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 142.599609][ T7343] __se_sys_ioctl+0xfc/0x170 [ 142.599621][ T7343] do_syscall_64+0x166/0x520 [ 142.599632][ T7343] ? trace_irq_disable+0x3b/0x140 [ 142.599641][ T7343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.599652][ T7343] ? clear_bhb_loop+0x70/0xc0 [ 142.599664][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.599675][ T7343] RIP: 0033:0x7faa96b9e199 [ 142.599686][ T7343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.599695][ T7343] RSP: 002b:00007faa97a30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.599707][ T7343] RAX: ffffffffffffffda RBX: 00007faa96e25fa0 RCX: 00007faa96b9e199 [ 142.599715][ T7343] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 142.599721][ T7343] RBP: 00007faa97a30090 R08: 0000000000000000 R09: 0000000000000000 [ 142.599727][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.599734][ T7343] R13: 00007faa96e26038 R14: 00007faa96e25fa0 R15: 00007fff3f05b3b8 [ 142.599751][ T7343] [ 142.721601][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.391'. [ 142.721631][ T7345] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 142.866054][ T5609] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 142.928210][ T5609] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 143.039550][ T7352] syzkaller1: entered promiscuous mode [ 143.039565][ T7352] syzkaller1: entered allmulticast mode [ 143.045928][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 143.129858][ T5609] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 143.129873][ T5609] em28xx 5-1:0.0: No AC97 audio processor [ 143.178359][ T7354] FAULT_INJECTION: forcing a failure. [ 143.178359][ T7354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.178388][ T7354] CPU: 1 UID: 0 PID: 7354 Comm: syz.2.395 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.178403][ T7354] Tainted: [L]=SOFTLOCKUP [ 143.178407][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.178414][ T7354] Call Trace: [ 143.178418][ T7354] [ 143.178423][ T7354] dump_stack_lvl+0xe8/0x150 [ 143.178440][ T7354] should_fail_ex+0x3eb/0x540 [ 143.178454][ T7354] _copy_from_user+0x2d/0xb0 [ 143.178469][ T7354] __copy_msghdr+0x390/0x590 [ 143.178483][ T7354] ___sys_sendmsg+0x213/0x360 [ 143.178492][ T7354] ? __lock_acquire+0x747/0x2de0 [ 143.178505][ T7354] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.178517][ T7354] ? kstrtouint+0x6e/0xe0 [ 143.178540][ T7354] ? __fget_files+0x3a2/0x420 [ 143.178550][ T7354] ? __fget_files+0x2a/0x420 [ 143.178564][ T7354] __sys_sendmmsg+0x273/0x4d0 [ 143.178577][ T7354] ? __pfx___sys_sendmmsg+0x10/0x10 [ 143.178599][ T7354] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.178632][ T7354] ? ksys_write+0x242/0x270 [ 143.178652][ T7354] ? __pfx_ksys_write+0x10/0x10 [ 143.178675][ T7354] __x64_sys_sendmmsg+0xa0/0xc0 [ 143.178688][ T7354] do_syscall_64+0x166/0x520 [ 143.178697][ T7354] ? trace_irq_disable+0x3b/0x140 [ 143.178707][ T7354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.178718][ T7354] ? clear_bhb_loop+0x70/0xc0 [ 143.178729][ T7354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.178740][ T7354] RIP: 0033:0x7f83a479e199 [ 143.178750][ T7354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.178759][ T7354] RSP: 002b:00007f83a5700028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 143.178771][ T7354] RAX: ffffffffffffffda RBX: 00007f83a4a25fa0 RCX: 00007f83a479e199 [ 143.178779][ T7354] RDX: 0000000000000001 RSI: 0000200000002c80 RDI: 0000000000000004 [ 143.178785][ T7354] RBP: 00007f83a5700090 R08: 0000000000000000 R09: 0000000000000000 [ 143.178792][ T7354] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 143.178798][ T7354] R13: 00007f83a4a26038 R14: 00007f83a4a25fa0 R15: 00007ffeb6bf8638 [ 143.178814][ T7354] [ 143.194753][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 143.196722][ T10] usb 6-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 143.198132][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.212941][ T10] usb 6-1: config 0 descriptor?? [ 143.219311][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 143.314929][ T7357] FAULT_INJECTION: forcing a failure. [ 143.314929][ T7357] name fail_futex, interval 1, probability 0, space 0, times 0 [ 143.314963][ T7357] CPU: 0 UID: 0 PID: 7357 Comm: syz.2.396 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.314991][ T7357] Tainted: [L]=SOFTLOCKUP [ 143.314998][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.315010][ T7357] Call Trace: [ 143.315019][ T7357] [ 143.315026][ T7357] dump_stack_lvl+0xe8/0x150 [ 143.315055][ T7357] should_fail_ex+0x3eb/0x540 [ 143.315081][ T7357] get_futex_key+0x1b4/0x1580 [ 143.315112][ T7357] ? __pfx_get_futex_key+0x10/0x10 [ 143.315133][ T7357] ? __lock_acquire+0x747/0x2de0 [ 143.315160][ T7357] futex_wake+0x119/0x5f0 [ 143.315186][ T7357] ? __pfx_futex_wake+0x10/0x10 [ 143.315202][ T7357] ? lock_acquire+0x115/0x350 [ 143.315229][ T7357] ? ktime_get+0x45/0x220 [ 143.315250][ T7357] do_futex+0x458/0x4e0 [ 143.315266][ T7357] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 143.315291][ T7357] ? __pfx_do_futex+0x10/0x10 [ 143.315306][ T7357] ? sched_clock_cpu+0x74/0x440 [ 143.315342][ T7357] __se_sys_futex+0x3a8/0x450 [ 143.315366][ T7357] ? __pfx___se_sys_futex+0x10/0x10 [ 143.315384][ T7357] ? lockdep_softirqs_on+0x11e/0x190 [ 143.315409][ T7357] ? __x64_sys_futex+0x21/0xf0 [ 143.315431][ T7357] do_syscall_64+0x166/0x520 [ 143.315450][ T7357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.315471][ T7357] ? clear_bhb_loop+0x70/0xc0 [ 143.315492][ T7357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.315513][ T7357] RIP: 0033:0x7f83a479e199 [ 143.315533][ T7357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.315550][ T7357] RSP: 002b:00007f83a57000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 143.315570][ T7357] RAX: ffffffffffffffda RBX: 00007f83a4a25fa8 RCX: 00007f83a479e199 [ 143.315585][ T7357] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f83a4a25fac [ 143.315599][ T7357] RBP: 00007f83a4a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 143.315613][ T7357] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 143.315626][ T7357] R13: 00007f83a4a26038 R14: 00007ffeb6bf8550 R15: 00007ffeb6bf8638 [ 143.315657][ T7357] [ 143.521006][ T7362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.712039][ T5609] usb 1-1: USB disconnect, device number 22 [ 143.725840][ T10] gspca_vc032x: reg_r err -110 [ 143.725863][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725874][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725883][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725891][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725899][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725908][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725916][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725924][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725933][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725941][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725949][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725957][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725965][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725973][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725982][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725990][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.725998][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.726006][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.726014][ T10] gspca_vc032x: Unknown sensor... [ 143.726087][ T10] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 144.165677][ T7370] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 144.321420][ T7374] 0x000000000000-0x000000010000 : "" [ 144.345226][ T7374] ftl_cs: FTL header not found. [ 144.414513][ T5609] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 144.417958][ T7377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.402'. [ 144.418032][ T7377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.402'. [ 144.420121][ T7379] netlink: 44 bytes leftover after parsing attributes in process `syz.2.402'. [ 144.420177][ T7379] netlink: 44 bytes leftover after parsing attributes in process `syz.2.402'. [ 144.506742][ T7381] syzkaller1: entered promiscuous mode [ 144.506766][ T7381] syzkaller1: entered allmulticast mode [ 144.563688][ T5609] usb 1-1: Using ep0 maxpacket: 32 [ 144.566293][ T5609] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.566326][ T5609] usb 1-1: New USB device found: idVendor=0763, idProduct=0150, bcdDevice=0.40 [ 144.568269][ T5609] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 144.568305][ T5609] usb 1-1: can't read configurations, error -61 [ 144.693697][ T5609] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 144.769945][ T887] usb 5-1: USB disconnect, device number 13 [ 144.770894][ T887] em28xx 5-1:0.0: Disconnecting em28xx [ 144.807244][ T887] em28xx: Freeing device [ 144.828994][ T7390] netlink: 'syz.4.406': attribute type 9 has an invalid length. [ 144.829134][ T7391] netlink: 'syz.4.406': attribute type 9 has an invalid length. [ 144.843694][ T5609] usb 1-1: Using ep0 maxpacket: 32 [ 144.863685][ T5609] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.863737][ T5609] usb 1-1: New USB device found: idVendor=0763, idProduct=0150, bcdDevice=0.40 [ 144.866386][ T5609] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 144.866421][ T5609] usb 1-1: can't read configurations, error -61 [ 144.866719][ T5609] usb usb1-port1: attempt power cycle [ 144.889769][ T7394] netlink: 72 bytes leftover after parsing attributes in process `syz.4.407'. [ 145.203845][ T5609] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 145.224389][ T5609] usb 1-1: Using ep0 maxpacket: 32 [ 145.226596][ T5609] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.226627][ T5609] usb 1-1: New USB device found: idVendor=0763, idProduct=0150, bcdDevice=0.40 [ 145.227809][ T5609] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 145.227829][ T5609] usb 1-1: can't read configurations, error -61 [ 145.353707][ T5609] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 145.374212][ T5609] usb 1-1: Using ep0 maxpacket: 32 [ 145.376186][ T5609] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.376244][ T5609] usb 1-1: New USB device found: idVendor=0763, idProduct=0150, bcdDevice=0.40 [ 145.377711][ T5609] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 145.377743][ T5609] usb 1-1: can't read configurations, error -61 [ 145.380005][ T5609] usb usb1-port1: unable to enumerate USB device [ 145.809885][ T7404] FAULT_INJECTION: forcing a failure. [ 145.809885][ T7404] name failslab, interval 1, probability 0, space 0, times 0 [ 145.809917][ T7404] CPU: 0 UID: 0 PID: 7404 Comm: syz.4.410 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.809943][ T7404] Tainted: [L]=SOFTLOCKUP [ 145.809950][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.809961][ T7404] Call Trace: [ 145.809968][ T7404] [ 145.809977][ T7404] dump_stack_lvl+0xe8/0x150 [ 145.810002][ T7404] should_fail_ex+0x3eb/0x540 [ 145.810025][ T7404] ? __alloc_skb+0x1db/0x7a0 [ 145.810043][ T7404] should_failslab+0xa8/0x100 [ 145.810063][ T7404] ? __alloc_skb+0x1db/0x7a0 [ 145.810079][ T7404] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 145.810099][ T7404] ? __alloc_skb+0x18d/0x7a0 [ 145.810117][ T7404] ? __alloc_skb+0x1db/0x7a0 [ 145.810150][ T7404] __alloc_skb+0x1db/0x7a0 [ 145.810173][ T7404] netlink_dump+0x1e7/0xee0 [ 145.810191][ T7404] ? __netlink_lookup+0xc6/0x8b0 [ 145.810221][ T7404] ? __pfx_netlink_dump+0x10/0x10 [ 145.810251][ T7404] ? netlink_lookup+0x30/0x200 [ 145.810268][ T7404] ? netlink_lookup+0x30/0x200 [ 145.810294][ T7404] __netlink_dump_start+0x589/0x7b0 [ 145.810321][ T7404] rdma_nl_rcv+0x7a8/0xa40 [ 145.810353][ T7404] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 145.810370][ T7404] ? __pfx_nldev_frmr_pools_get_dumpit+0x10/0x10 [ 145.810412][ T7404] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.810431][ T7404] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.810455][ T7404] netlink_unicast+0x7bd/0x940 [ 145.810486][ T7404] netlink_sendmsg+0x7c3/0xae0 [ 145.810511][ T7404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.810537][ T7404] ? apparmor_socket_sendmsg+0x98/0x360 [ 145.810559][ T7404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.810576][ T7404] sock_sendmsg_nosec+0x14e/0x190 [ 145.810597][ T7404] ____sys_sendmsg+0x54e/0x850 [ 145.810621][ T7404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.810646][ T7404] ? import_iovec+0x73/0xa0 [ 145.810669][ T7404] ___sys_sendmsg+0x2a5/0x360 [ 145.810685][ T7404] ? __lock_acquire+0x747/0x2de0 [ 145.810710][ T7404] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.810767][ T7404] ? __fget_files+0x3a2/0x420 [ 145.810785][ T7404] ? __fget_files+0x2a/0x420 [ 145.810816][ T7404] __x64_sys_sendmsg+0x1b1/0x290 [ 145.810838][ T7404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.810880][ T7404] do_syscall_64+0x166/0x520 [ 145.810898][ T7404] ? trace_irq_disable+0x3b/0x140 [ 145.810914][ T7404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.810934][ T7404] ? clear_bhb_loop+0x70/0xc0 [ 145.810956][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.810975][ T7404] RIP: 0033:0x7f982979e199 [ 145.810992][ T7404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.811008][ T7404] RSP: 002b:00007f982a636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.811028][ T7404] RAX: ffffffffffffffda RBX: 00007f9829a25fa0 RCX: 00007f982979e199 [ 145.811042][ T7404] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 145.811055][ T7404] RBP: 00007f982a636090 R08: 0000000000000000 R09: 0000000000000000 [ 145.811066][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.811078][ T7404] R13: 00007f9829a26038 R14: 00007f9829a25fa0 R15: 00007fff952ac908 [ 145.811110][ T7404] [ 145.853823][ T5754] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 145.937152][ T5757] usb 6-1: USB disconnect, device number 11 [ 146.025271][ T5754] usb 3-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.026225][ T5754] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.026251][ T5754] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 146.026271][ T5754] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.029201][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.029228][ T5754] usb 3-1: Product: syz [ 146.029241][ T5754] usb 3-1: Manufacturer: syz [ 146.029254][ T5754] usb 3-1: SerialNumber: syz [ 146.075658][ T5754] usb 3-1: config 0 descriptor?? [ 146.098767][ T5754] usb 3-1: selecting invalid altsetting 0 [ 146.417274][ T5754] usb 3-1: USB disconnect, device number 16 [ 146.603708][ T887] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 146.753662][ T887] usb 6-1: Using ep0 maxpacket: 8 [ 146.760640][ T887] usb 6-1: unable to get BOS descriptor or descriptor too short [ 146.760671][ T887] usb 6-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 146.763280][ T887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.763303][ T887] usb 6-1: Product: syz [ 146.763317][ T887] usb 6-1: Manufacturer: syz [ 146.763330][ T887] usb 6-1: SerialNumber: syz [ 147.126297][ T7431] comedi comedi1: 8255: I/O base address not correctly aligned [ 147.129131][ T7431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 147.129879][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 147.208173][ T7415] netlink: 'syz.5.414': attribute type 2 has an invalid length. [ 147.208216][ T7415] netlink: 'syz.5.414': attribute type 2 has an invalid length. [ 147.250213][ T7433] FAULT_INJECTION: forcing a failure. [ 147.250213][ T7433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.250244][ T7433] CPU: 0 UID: 0 PID: 7433 Comm: syz.2.420 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.250273][ T7433] Tainted: [L]=SOFTLOCKUP [ 147.250279][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.250290][ T7433] Call Trace: [ 147.250297][ T7433] [ 147.250306][ T7433] dump_stack_lvl+0xe8/0x150 [ 147.250330][ T7433] should_fail_ex+0x3eb/0x540 [ 147.250352][ T7433] _copy_from_iter+0x1d3/0x1890 [ 147.250374][ T7433] ? __alloc_skb+0x27a/0x7a0 [ 147.250394][ T7433] ? __alloc_skb+0x27a/0x7a0 [ 147.250412][ T7433] ? __alloc_skb+0x27a/0x7a0 [ 147.250429][ T7433] ? __pfx__copy_from_iter+0x10/0x10 [ 147.250445][ T7433] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 147.250464][ T7433] ? __alloc_skb+0x27a/0x7a0 [ 147.250497][ T7433] ? __alloc_skb+0x27a/0x7a0 [ 147.250518][ T7433] ? netlink_sendmsg+0x5fa/0xae0 [ 147.250544][ T7433] ? skb_put+0x112/0x210 [ 147.250564][ T7433] netlink_sendmsg+0x667/0xae0 [ 147.250588][ T7433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.250615][ T7433] ? apparmor_socket_sendmsg+0x98/0x360 [ 147.250637][ T7433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.250654][ T7433] sock_sendmsg_nosec+0x14e/0x190 [ 147.250676][ T7433] ____sys_sendmsg+0x54e/0x850 [ 147.250699][ T7433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.250724][ T7433] ? import_iovec+0x73/0xa0 [ 147.250743][ T7433] ___sys_sendmsg+0x2a5/0x360 [ 147.250759][ T7433] ? __lock_acquire+0x747/0x2de0 [ 147.250781][ T7433] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.250833][ T7433] ? __fget_files+0x3a2/0x420 [ 147.250849][ T7433] ? __fget_files+0x2a/0x420 [ 147.250874][ T7433] __x64_sys_sendmsg+0x1b1/0x290 [ 147.250895][ T7433] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.250934][ T7433] do_syscall_64+0x166/0x520 [ 147.250950][ T7433] ? trace_irq_disable+0x3b/0x140 [ 147.250964][ T7433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.250982][ T7433] ? clear_bhb_loop+0x70/0xc0 [ 147.251001][ T7433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.251018][ T7433] RIP: 0033:0x7f83a479e199 [ 147.251035][ T7433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.251050][ T7433] RSP: 002b:00007f83a5700028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.251069][ T7433] RAX: ffffffffffffffda RBX: 00007f83a4a25fa0 RCX: 00007f83a479e199 [ 147.251082][ T7433] RDX: 0000000000008004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 147.251092][ T7433] RBP: 00007f83a5700090 R08: 0000000000000000 R09: 0000000000000000 [ 147.251103][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.251114][ T7433] R13: 00007f83a4a26038 R14: 00007f83a4a25fa0 R15: 00007ffeb6bf8638 [ 147.251141][ T7433] [ 147.254513][ T887] usb 6-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 147.254549][ T887] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 147.256556][ T887] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 147.357518][ T5754] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 147.390977][ T887] usb 6-1: USB disconnect, device number 12 [ 147.489236][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.601652][ T5754] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 147.602657][ T5754] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x5 has invalid maxpacket 61 [ 147.602681][ T5754] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.632248][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 147.632275][ T5754] usb 5-1: Product: syz [ 147.632289][ T5754] usb 5-1: Manufacturer: syz [ 147.632302][ T5754] usb 5-1: SerialNumber: syz [ 147.660416][ T5754] usb 5-1: config 0 descriptor?? [ 147.661295][ T7428] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.682395][ T5754] usb 5-1: selecting invalid altsetting 0 [ 147.967384][ T5609] usb 5-1: USB disconnect, device number 14 [ 148.059375][ T7456] FAULT_INJECTION: forcing a failure. [ 148.059375][ T7456] name fail_futex, interval 1, probability 0, space 0, times 0 [ 148.059416][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: syz.5.429 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.059441][ T7456] Tainted: [L]=SOFTLOCKUP [ 148.059448][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.059460][ T7456] Call Trace: [ 148.059468][ T7456] [ 148.059476][ T7456] dump_stack_lvl+0xe8/0x150 [ 148.059502][ T7456] should_fail_ex+0x3eb/0x540 [ 148.059525][ T7456] get_futex_key+0x1b4/0x1580 [ 148.059556][ T7456] ? __pfx_get_futex_key+0x10/0x10 [ 148.059587][ T7456] futex_wake+0x119/0x5f0 [ 148.059632][ T7456] ? __pfx_futex_wake+0x10/0x10 [ 148.059664][ T7456] ? __raw_spin_lock_init+0x45/0x100 [ 148.059691][ T7456] do_futex+0x458/0x4e0 [ 148.059708][ T7456] ? __asan_memcpy+0x40/0x70 [ 148.059731][ T7456] ? __pfx_do_futex+0x10/0x10 [ 148.059758][ T7456] __se_sys_futex+0x3a8/0x450 [ 148.059780][ T7456] ? fd_install+0x39e/0x4e0 [ 148.059799][ T7456] ? __pfx___se_sys_futex+0x10/0x10 [ 148.059814][ T7456] ? fd_install+0x95/0x4e0 [ 148.059835][ T7456] ? __x64_sys_futex+0x21/0xf0 [ 148.059855][ T7456] do_syscall_64+0x166/0x520 [ 148.059872][ T7456] ? trace_irq_disable+0x3b/0x140 [ 148.059888][ T7456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.059907][ T7456] ? clear_bhb_loop+0x70/0xc0 [ 148.059926][ T7456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.059944][ T7456] RIP: 0033:0x7faa96b9e199 [ 148.059962][ T7456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.059978][ T7456] RSP: 002b:00007faa97a300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.059999][ T7456] RAX: ffffffffffffffda RBX: 00007faa96e25fa8 RCX: 00007faa96b9e199 [ 148.060014][ T7456] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faa96e25fac [ 148.060028][ T7456] RBP: 00007faa96e25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 148.060041][ T7456] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000 [ 148.060052][ T7456] R13: 00007faa96e26038 R14: 00007fff3f05b2d0 R15: 00007fff3f05b3b8 [ 148.060080][ T7456] [ 148.083739][ T887] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 148.119903][ T7456] 0x000000000000-0x000000010000 : "" [ 148.207412][ T7456] ftl_cs: FTL header not found. [ 148.386663][ T887] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.386715][ T887] usb 3-1: New USB device found: idVendor=17cc, idProduct=1011, bcdDevice=0.40 [ 148.393054][ T887] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 148.393079][ T887] usb 3-1: can't read configurations, error -71 [ 148.675312][ T7473] FAULT_INJECTION: forcing a failure. [ 148.675312][ T7473] name failslab, interval 1, probability 0, space 0, times 0 [ 148.675351][ T7473] CPU: 0 UID: 0 PID: 7473 Comm: syz.4.434 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.675376][ T7473] Tainted: [L]=SOFTLOCKUP [ 148.675382][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.675395][ T7473] Call Trace: [ 148.675403][ T7473] [ 148.675410][ T7473] dump_stack_lvl+0xe8/0x150 [ 148.675431][ T7473] should_fail_ex+0x3eb/0x540 [ 148.675448][ T7473] ? __pfx_sock_alloc_inode+0x10/0x10 [ 148.675462][ T7473] should_failslab+0xa8/0x100 [ 148.675477][ T7473] ? __pfx_sock_alloc_inode+0x10/0x10 [ 148.675489][ T7473] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 148.675504][ T7473] ? lock_vma_under_rcu+0x45a/0x500 [ 148.675517][ T7473] ? sock_alloc_inode+0x2c/0x1a0 [ 148.675529][ T7473] ? sock_alloc_inode+0x2c/0x1a0 [ 148.675545][ T7473] ? __pfx_sock_alloc_inode+0x10/0x10 [ 148.675558][ T7473] sock_alloc_inode+0x2c/0x1a0 [ 148.675571][ T7473] ? __pfx_sock_alloc_inode+0x10/0x10 [ 148.675584][ T7473] alloc_inode+0x6a/0x1b0 [ 148.675599][ T7473] __sock_create+0x127/0xac0 [ 148.675612][ T7473] ? exc_page_fault+0x6a/0xc0 [ 148.675631][ T7473] __sys_socket+0xd6/0x1b0 [ 148.675648][ T7473] __x64_sys_socket+0x7a/0x90 [ 148.675662][ T7473] do_syscall_64+0x166/0x520 [ 148.675675][ T7473] ? trace_irq_disable+0x3b/0x140 [ 148.675688][ T7473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.675703][ T7473] ? clear_bhb_loop+0x70/0xc0 [ 148.675719][ T7473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.675734][ T7473] RIP: 0033:0x7f982979fa07 [ 148.675750][ T7473] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.675762][ T7473] RSP: 002b:00007f982a5a2f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 148.675779][ T7473] RAX: ffffffffffffffda RBX: 00007f9829a26090 RCX: 00007f982979fa07 [ 148.675791][ T7473] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 148.675800][ T7473] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 148.675808][ T7473] R10: 0000200000000bc0 R11: 0000000000000286 R12: 0000000000000001 [ 148.675817][ T7473] R13: 00007f9829a26128 R14: 00007f9829a26090 R15: 00007fff952ac908 [ 148.675841][ T7473] [ 148.677429][ T7473] socket: no more sockets [ 148.924383][ T5754] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 149.084706][ T5754] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 149.086836][ T5754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.118068][ T5754] usb 1-1: config 0 descriptor?? [ 149.321026][ T5754] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 149.569533][ T5754] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 149.569562][ T5754] [drm] Initialized udl on minor 1 [ 150.424264][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'. [ 150.426087][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'. [ 150.459640][ T7524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.460123][ T7524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.665617][ T5757] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 150.805260][ T5757] usb 5-1: device descriptor read/64, error -71 [ 151.043694][ T5757] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 151.183617][ T5757] usb 5-1: device descriptor read/64, error -71 [ 151.295432][ T5757] usb usb5-port1: attempt power cycle [ 151.633769][ T5757] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 151.666083][ T5757] usb 5-1: device descriptor read/8, error -71 [ 151.904711][ T5757] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 151.930611][ T5757] usb 5-1: device descriptor read/8, error -71 [ 152.035526][ T5757] usb usb5-port1: unable to enumerate USB device [ 152.405297][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 152.536373][ T33] audit: type=1326 audit(1791486819.248:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.5.448" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa96b9e199 code=0x0 [ 152.574219][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 152.574985][ T9] usb 3-1: New USB device found: idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 152.576001][ T9] usb 3-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 152.576023][ T9] usb 3-1: config 218 has an invalid descriptor of length 0, skipping remainder of the config [ 152.576042][ T9] usb 3-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 152.576062][ T9] usb 3-1: config 218 has no interface number 0 [ 152.576100][ T9] usb 3-1: config 218 interface 95 altsetting 96 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.576120][ T9] usb 3-1: config 218 interface 95 altsetting 96 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.576133][ T9] usb 3-1: config 218 interface 95 altsetting 96 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.576147][ T9] usb 3-1: config 218 interface 95 has no altsetting 0 [ 152.578396][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.578419][ T9] usb 3-1: Product: syz [ 152.578432][ T9] usb 3-1: Manufacturer: syz [ 152.578445][ T9] usb 3-1: SerialNumber: syz [ 152.804681][ T9] usb 3-1: USB disconnect, device number 19 [ 153.416245][ T7567] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 153.679089][ T7581] FAULT_INJECTION: forcing a failure. [ 153.679089][ T7581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.679122][ T7581] CPU: 0 UID: 0 PID: 7581 Comm: syz.4.455 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.679145][ T7581] Tainted: [L]=SOFTLOCKUP [ 153.679149][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 153.679155][ T7581] Call Trace: [ 153.679160][ T7581] [ 153.679166][ T7581] dump_stack_lvl+0xe8/0x150 [ 153.679182][ T7581] should_fail_ex+0x3eb/0x540 [ 153.679222][ T7581] _copy_to_user+0x31/0xb0 [ 153.679243][ T7581] tomoyo_flush+0x16a/0x5d0 [ 153.679269][ T7581] tomoyo_read_domain2+0x360a/0x4d30 [ 153.679299][ T7581] ? __might_fault+0xaf/0x130 [ 153.679312][ T7581] ? _copy_to_user+0x8a/0xb0 [ 153.679330][ T7581] ? __pfx_tomoyo_read_domain2+0x10/0x10 [ 153.679342][ T7581] ? __might_fault+0xaf/0x130 [ 153.679354][ T7581] ? _copy_to_user+0x8a/0xb0 [ 153.679372][ T7581] ? tomoyo_flush+0x534/0x5d0 [ 153.679397][ T7581] tomoyo_read_domain+0x6df/0xda0 [ 153.679429][ T7581] tomoyo_read_control+0x2cf/0x4e0 [ 153.679446][ T7581] ? tomoyo_read_control+0x10c/0x4e0 [ 153.679462][ T7581] vfs_readv+0x57c/0x850 [ 153.679473][ T7581] ? __pfx_tomoyo_read+0x10/0x10 [ 153.679485][ T7581] ? __pfx_vfs_readv+0x10/0x10 [ 153.679511][ T7581] ? __fget_files+0x3a2/0x420 [ 153.679528][ T7581] ? __fget_files+0x2a/0x420 [ 153.679550][ T7581] ? fdget+0x1ac/0x250 [ 153.679570][ T7581] __x64_sys_preadv+0x19c/0x2b0 [ 153.679591][ T7581] ? __pfx___x64_sys_preadv+0x10/0x10 [ 153.679611][ T7581] do_syscall_64+0x166/0x520 [ 153.679621][ T7581] ? trace_irq_disable+0x3b/0x140 [ 153.679631][ T7581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.679641][ T7581] ? clear_bhb_loop+0x70/0xc0 [ 153.679653][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.679668][ T7581] RIP: 0033:0x7f982979e199 [ 153.679686][ T7581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.679702][ T7581] RSP: 002b:00007f982a636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 153.679722][ T7581] RAX: ffffffffffffffda RBX: 00007f9829a25fa0 RCX: 00007f982979e199 [ 153.679737][ T7581] RDX: 0000000000000003 RSI: 00002000000029c0 RDI: 0000000000000003 [ 153.679748][ T7581] RBP: 00007f982a636090 R08: 0000000000000805 R09: 0000000000000000 [ 153.679754][ T7581] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 153.679761][ T7581] R13: 00007f9829a26038 R14: 00007f9829a25fa0 R15: 00007fff952ac908 [ 153.679777][ T7581] [ 154.017556][ T7591] netlink: 'syz.2.457': attribute type 10 has an invalid length. [ 154.075988][ T7592] netlink: 'syz.2.457': attribute type 10 has an invalid length. [ 154.095097][ T7591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.119673][ T7591] team0: Port device netdevsim1 added [ 154.153439][ T7592] team0: Port device netdevsim1 removed [ 154.185510][ T7592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.197737][ T7592] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 154.600963][ T7605] futex_wake_op: syz.2.460 tries to shift op by 32; fix this program [ 154.631967][ T5754] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 154.661051][ T5754] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 154.690819][ T5754] usb 1-1: USB disconnect, device number 27 [ 155.007725][ T7617] sg_write: data in/out 421312/136 bytes for SCSI command 0x0-- guessing data in; [ 155.007725][ T7617] program syz.4.462 not setting count and/or reply_len properly [ 155.127326][ T5754] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 155.127914][ T33] audit: type=1326 audit(1791486821.838:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.4.464" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f982979e199 code=0x0 [ 155.276070][ T5754] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 155.277213][ T5754] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.277276][ T5754] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.277298][ T5754] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.277320][ T5754] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.277358][ T5754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.649576][ T7640] netlink: 'syz.2.466': attribute type 61 has an invalid length. [ 156.341091][ T5754] gud 1-1:1.0: Failed to get connectors (error=-71) [ 156.341123][ T5754] gud 1-1:1.0: probe with driver gud failed with error -71 [ 156.397396][ T5754] usb 1-1: USB disconnect, device number 28 [ 156.653674][ T5609] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 156.824887][ T5609] usb 3-1: Using ep0 maxpacket: 8 [ 156.826840][ T5609] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.826890][ T5609] usb 3-1: New USB device found: idVendor=0763, idProduct=2003, bcdDevice=0.40 [ 156.832017][ T5609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.832034][ T5609] usb 3-1: Product: syz [ 156.832042][ T5609] usb 3-1: Manufacturer: syz [ 156.832049][ T5609] usb 3-1: SerialNumber: syz [ 156.972461][ T7676] FAULT_INJECTION: forcing a failure. [ 156.972461][ T7676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.972494][ T7676] CPU: 0 UID: 0 PID: 7676 Comm: syz.4.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.972518][ T7676] Tainted: [L]=SOFTLOCKUP [ 156.972524][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 156.972538][ T7676] Call Trace: [ 156.972545][ T7676] [ 156.972553][ T7676] dump_stack_lvl+0xe8/0x150 [ 156.972579][ T7676] should_fail_ex+0x3eb/0x540 [ 156.972603][ T7676] _copy_from_user+0x2d/0xb0 [ 156.972623][ T7676] ___sys_recvmsg+0x173/0x5a0 [ 156.972648][ T7676] ? __pfx____sys_recvmsg+0x10/0x10 [ 156.972671][ T7676] ? lock_acquire+0x115/0x350 [ 156.972718][ T7676] do_recvmmsg+0x31a/0x7f0 [ 156.972743][ T7676] ? __pfx_do_recvmmsg+0x10/0x10 [ 156.972773][ T7676] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.972797][ T7676] ? fdget+0x1ac/0x250 [ 156.972822][ T7676] __x64_sys_recvmmsg+0x198/0x250 [ 156.972851][ T7676] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 156.972898][ T7676] do_syscall_64+0x166/0x520 [ 156.972915][ T7676] ? trace_irq_disable+0x3b/0x140 [ 156.972932][ T7676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.972952][ T7676] ? clear_bhb_loop+0x70/0xc0 [ 156.972973][ T7676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.972993][ T7676] RIP: 0033:0x7f982979e199 [ 156.973011][ T7676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.973027][ T7676] RSP: 002b:00007f982a636028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 156.973048][ T7676] RAX: ffffffffffffffda RBX: 00007f9829a25fa0 RCX: 00007f982979e199 [ 156.973062][ T7676] RDX: 0000000000000004 RSI: 0000200000001940 RDI: 0000000000000003 [ 156.973074][ T7676] RBP: 00007f982a636090 R08: 0000000000000000 R09: 0000000000000000 [ 156.973086][ T7676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.973098][ T7676] R13: 00007f9829a26038 R14: 00007f9829a25fa0 R15: 00007fff952ac908 [ 156.973128][ T7676] [ 157.091880][ T7666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.101111][ T7666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.206881][ T5609] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 157.206910][ T5609] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 157.209146][ T5609] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 157.307654][ T5609] usb 3-1: USB disconnect, device number 20 [ 157.361976][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.401786][ T7685] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.513647][ T5757] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 157.663638][ T5757] usb 6-1: Using ep0 maxpacket: 32 [ 157.664376][ T5757] usb 6-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 157.665502][ T5757] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 157.665526][ T5757] usb 6-1: config 0 has no interface number 0 [ 157.667583][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.667607][ T5757] usb 6-1: Product: syz [ 157.667620][ T5757] usb 6-1: Manufacturer: syz [ 157.667634][ T5757] usb 6-1: SerialNumber: syz [ 157.672972][ T5757] usb 6-1: config 0 descriptor?? [ 157.718800][ T7687] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 157.964207][ T5754] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 158.135654][ T5754] usb 3-1: Using ep0 maxpacket: 16 [ 158.136604][ T5754] usb 3-1: New USB device found: idVendor=258a, idProduct=0033, bcdDevice=0.00 [ 158.137576][ T5754] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.137620][ T5754] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.137643][ T5754] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.137662][ T5754] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.137701][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.139755][ T5754] usb 3-1: config 0 descriptor?? [ 158.315120][ T5757] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 158.315141][ T5757] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 158.493682][ T5609] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 158.517913][ T5757] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 158.518229][ T5757] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 158.527500][ T5757] usb 6-1: USB disconnect, device number 13 [ 158.570077][ T5754] glorious 0003:258A:0033.0002: unknown main item tag 0x0 [ 158.570131][ T5754] glorious 0003:258A:0033.0002: unknown main item tag 0x0 [ 158.570158][ T5754] glorious 0003:258A:0033.0002: unknown main item tag 0x0 [ 158.570177][ T5754] glorious 0003:258A:0033.0002: unknown main item tag 0x0 [ 158.570192][ T5754] glorious 0003:258A:0033.0002: unknown main item tag 0x0 [ 158.570207][ T5754] glorious 0003:258A:0033.0002: unknown main item tag 0x0 [ 158.570222][ T5754] glorious 0003:258A:0033.0002: unknown main item tag 0x0 [ 158.570236][ T5754] glorious 0003:258A:0033.0002: unknown main item tag 0x0 [ 158.570251][ T5754] glorious 0003:258A:0033.0002: unknown main item tag 0x0 [ 158.570266][ T5754] glorious 0003:258A:0033.0002: unknown main item tag 0x0 [ 158.581775][ T5754] glorious 0003:258A:0033.0002: hidraw0: USB HID v0.04 Device [Glorious Model D] on usb-dummy_hcd.2-1/input0 [ 158.674385][ T5609] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.675400][ T5609] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.675425][ T5609] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.675462][ T5609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.754441][ T7695] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 158.891709][ T5609] usb 5-1: usb_control_msg returned -32 [ 158.891758][ T5609] usbtmc 5-1:16.0: can't read capabilities [ 158.981600][ T5609] usb 3-1: USB disconnect, device number 21 [ 159.046253][ T7709] process 'syz.0.484' launched './file0' with NULL argv: empty string added [ 159.373807][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 159.524389][ T9] usb 6-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 159.525945][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.526156][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.556662][ T4927] Bluetooth: hci2: link tx timeout [ 159.556680][ T4927] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 159.593521][ T9] as10x_usb: device has been detected [ 159.594786][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 159.622230][ T9] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 159.731168][ T9] as10x_usb: error during firmware upload part1 [ 159.731762][ T9] Registered device Abilis Systems DVB-Titan [ 159.756743][ T27] usb 6-1: USB disconnect, device number 14 [ 159.784039][ T27] Unregistered device Abilis Systems DVB-Titan [ 159.789788][ T27] as10x_usb: device has been disconnected [ 159.983964][ T4927] Bluetooth: hci0: command 0x0c24 tx timeout [ 160.298310][ T7722] 0x000000000000-0x000000010000 : "" [ 160.298364][ T7722] FAULT_INJECTION: forcing a failure. [ 160.298364][ T7722] name failslab, interval 1, probability 0, space 0, times 0 [ 160.298390][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.4.490 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.298415][ T7722] Tainted: [L]=SOFTLOCKUP [ 160.298422][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.298433][ T7722] Call Trace: [ 160.298441][ T7722] [ 160.298449][ T7722] dump_stack_lvl+0xe8/0x150 [ 160.298475][ T7722] should_fail_ex+0x3eb/0x540 [ 160.298499][ T7722] should_failslab+0xa8/0x100 [ 160.298521][ T7722] __kmalloc_cache_noprof+0x9e/0x600 [ 160.298541][ T7722] ? device_add+0xb6/0xb80 [ 160.298558][ T7722] ? device_add+0xb6/0xb80 [ 160.298581][ T7722] device_add+0xb6/0xb80 [ 160.298603][ T7722] add_mtd_device+0xda9/0x17b0 [ 160.298636][ T7722] ? __pfx_add_mtd_device+0x10/0x10 [ 160.298655][ T7722] ? mtd_add_partition+0x37b/0x590 [ 160.298679][ T7722] ? __mutex_unlock_slowpath+0x731/0x900 [ 160.298726][ T7722] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 160.298760][ T7722] mtd_add_partition+0x388/0x590 [ 160.298784][ T7722] ? __pfx_mtd_add_partition+0x10/0x10 [ 160.298809][ T7722] ? __might_fault+0xaf/0x130 [ 160.298833][ T7722] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 160.298856][ T7722] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 160.298895][ T7722] ? __might_fault+0xaf/0x130 [ 160.298920][ T7722] mtdchar_ioctl+0x14f7/0x1bc0 [ 160.298946][ T7722] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 160.298976][ T7722] ? __lock_acquire+0x747/0x2de0 [ 160.299012][ T7722] ? tomoyo_path_number_perm+0x219/0x5f0 [ 160.299041][ T7722] ? __mutex_trylock_common+0x15f/0x270 [ 160.299068][ T7722] ? __pfx___mutex_trylock_common+0x10/0x10 [ 160.299098][ T7722] ? rcu_is_watching+0x16/0xb0 [ 160.299122][ T7722] ? trace_contention_end+0x3d/0x140 [ 160.299142][ T7722] ? __mutex_lock+0x305/0x15a0 [ 160.299161][ T7722] ? do_futex+0x458/0x4e0 [ 160.299186][ T7722] ? mtdchar_unlocked_ioctl+0xa1/0xd0 [ 160.299207][ T7722] ? __pfx___mutex_lock+0x10/0x10 [ 160.299235][ T7722] ? __fget_files+0x2a/0x420 [ 160.299253][ T7722] ? __fget_files+0x2a/0x420 [ 160.299275][ T7722] mtdchar_unlocked_ioctl+0xae/0xd0 [ 160.299294][ T7722] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 160.299316][ T7722] __se_sys_ioctl+0xfc/0x170 [ 160.299338][ T7722] do_syscall_64+0x166/0x520 [ 160.299355][ T7722] ? trace_irq_disable+0x3b/0x140 [ 160.299371][ T7722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.299392][ T7722] ? clear_bhb_loop+0x70/0xc0 [ 160.299413][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.299432][ T7722] RIP: 0033:0x7f982979e199 [ 160.299449][ T7722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.299464][ T7722] RSP: 002b:00007f982a636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.299485][ T7722] RAX: ffffffffffffffda RBX: 00007f9829a25fa0 RCX: 00007f982979e199 [ 160.299499][ T7722] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000006 [ 160.299511][ T7722] RBP: 00007f9829835888 R08: 0000000000000000 R09: 0000000000000000 [ 160.299523][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.299535][ T7722] R13: 00007f9829a26038 R14: 00007f9829a25fa0 R15: 00007fff952ac908 [ 160.299565][ T7722] [ 160.708974][ T7729] pim6reg: entered allmulticast mode [ 160.894508][ T7736] FAULT_INJECTION: forcing a failure. [ 160.894508][ T7736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.894541][ T7736] CPU: 1 UID: 0 PID: 7736 Comm: syz.4.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.894566][ T7736] Tainted: [L]=SOFTLOCKUP [ 160.894573][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.894583][ T7736] Call Trace: [ 160.894590][ T7736] [ 160.894598][ T7736] dump_stack_lvl+0xe8/0x150 [ 160.894628][ T7736] should_fail_ex+0x3eb/0x540 [ 160.894649][ T7736] strncpy_from_user+0x36/0x2c0 [ 160.894669][ T7736] do_getname+0x77/0x250 [ 160.894688][ T7736] do_mq_open+0x190/0x7a0 [ 160.894707][ T7736] ? __pfx_do_mq_open+0x10/0x10 [ 160.894728][ T7736] ? __might_fault+0xaf/0x130 [ 160.894752][ T7736] __x64_sys_mq_open+0x185/0x1e0 [ 160.894772][ T7736] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 160.894789][ T7736] ? ksys_write+0x242/0x270 [ 160.894824][ T7736] do_syscall_64+0x166/0x520 [ 160.894842][ T7736] ? trace_irq_disable+0x3b/0x140 [ 160.894859][ T7736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.894878][ T7736] ? clear_bhb_loop+0x70/0xc0 [ 160.894899][ T7736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.894918][ T7736] RIP: 0033:0x7f982979e199 [ 160.894935][ T7736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.894950][ T7736] RSP: 002b:00007f982a636028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 160.894970][ T7736] RAX: ffffffffffffffda RBX: 00007f9829a25fa0 RCX: 00007f982979e199 [ 160.895001][ T7736] RDX: 0000000000000050 RSI: 0000000000000040 RDI: 0000200000000000 [ 160.895013][ T7736] RBP: 00007f982a636090 R08: 0000000000000000 R09: 0000000000000000 [ 160.895025][ T7736] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 160.895037][ T7736] R13: 00007f9829a26038 R14: 00007f9829a25fa0 R15: 00007fff952ac908 [ 160.895067][ T7736] [ 161.134361][ T27] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 161.197077][ T7740] FAULT_INJECTION: forcing a failure. [ 161.197077][ T7740] name failslab, interval 1, probability 0, space 0, times 0 [ 161.197108][ T7740] CPU: 1 UID: 0 PID: 7740 Comm: syz.4.498 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.197134][ T7740] Tainted: [L]=SOFTLOCKUP [ 161.197141][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.197152][ T7740] Call Trace: [ 161.197159][ T7740] [ 161.197167][ T7740] dump_stack_lvl+0xe8/0x150 [ 161.197193][ T7740] should_fail_ex+0x3eb/0x540 [ 161.197217][ T7740] should_failslab+0xa8/0x100 [ 161.197236][ T7740] ? skb_clone+0x212/0x3a0 [ 161.197254][ T7740] kmem_cache_alloc_noprof+0x9c/0x600 [ 161.197277][ T7740] ? skb_clone+0x212/0x3a0 [ 161.197301][ T7740] skb_clone+0x212/0x3a0 [ 161.197322][ T7740] __netlink_deliver_tap+0x355/0x6e0 [ 161.197353][ T7740] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.197374][ T7740] netlink_deliver_tap+0x19c/0x1b0 [ 161.197394][ T7740] netlink_unicast+0x781/0x940 [ 161.197423][ T7740] netlink_sendmsg+0x7c3/0xae0 [ 161.197447][ T7740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.197474][ T7740] ? apparmor_socket_sendmsg+0x18b/0x360 [ 161.197497][ T7740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.197514][ T7740] sock_sendmsg_nosec+0x14e/0x190 [ 161.197539][ T7740] ____sys_sendmsg+0x54e/0x850 [ 161.197563][ T7740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.197591][ T7740] ? import_iovec+0x73/0xa0 [ 161.197614][ T7740] ___sys_sendmsg+0x2a5/0x360 [ 161.197631][ T7740] ? __lock_acquire+0x747/0x2de0 [ 161.197654][ T7740] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.197710][ T7740] ? __fget_files+0x3a2/0x420 [ 161.197726][ T7740] ? __fget_files+0x2a/0x420 [ 161.197753][ T7740] __x64_sys_sendmsg+0x1b1/0x290 [ 161.197775][ T7740] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.197813][ T7740] do_syscall_64+0x166/0x520 [ 161.197831][ T7740] ? trace_irq_disable+0x3b/0x140 [ 161.197846][ T7740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.197866][ T7740] ? clear_bhb_loop+0x70/0xc0 [ 161.197886][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.197904][ T7740] RIP: 0033:0x7f982979e199 [ 161.197922][ T7740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.197938][ T7740] RSP: 002b:00007f982a636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.197958][ T7740] RAX: ffffffffffffffda RBX: 00007f9829a25fa0 RCX: 00007f982979e199 [ 161.197972][ T7740] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 161.197985][ T7740] RBP: 00007f982a636090 R08: 0000000000000000 R09: 0000000000000000 [ 161.197997][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.198008][ T7740] R13: 00007f9829a26038 R14: 00007f9829a25fa0 R15: 00007fff952ac908 [ 161.198047][ T7740] [ 161.198431][ T7740] Cannot find set identified by id 0 to match [ 161.288998][ T27] usb 6-1: unable to get BOS descriptor or descriptor too short [ 161.289054][ T27] usb 6-1: New USB device found: idVendor=2c7c, idProduct=030a, bcdDevice=cf.d0 [ 161.290318][ T27] usb 6-1: config 114 has an invalid interface number: 49 but max is 0 [ 161.290342][ T27] usb 6-1: config 114 has no interface number 0 [ 161.290378][ T27] usb 6-1: config 114 interface 49 altsetting 232 bulk endpoint 0x2 has invalid maxpacket 1023 [ 161.290402][ T27] usb 6-1: config 114 interface 49 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 161.290424][ T27] usb 6-1: config 114 interface 49 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 161.290447][ T27] usb 6-1: config 114 interface 49 has no altsetting 0 [ 161.293430][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.293454][ T27] usb 6-1: Product: syz [ 161.293467][ T27] usb 6-1: Manufacturer: syz [ 161.293481][ T27] usb 6-1: SerialNumber: syz [ 161.304690][ T7735] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 161.305824][ T7735] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 161.548435][ T7744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.550904][ T7744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.575316][ T4927] Bluetooth: hci2: command 0x0406 tx timeout [ 161.607670][ T7744] ======================================================= [ 161.607670][ T7744] WARNING: The mand mount option has been deprecated and [ 161.607670][ T7744] and is ignored by this kernel. Remove the mand [ 161.607670][ T7744] option from the mount to silence this warning. [ 161.607670][ T7744] ======================================================= [ 161.771484][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'. [ 161.998157][ T7753] [ 162.000551][ T7753] ====================================================== [ 162.007578][ T7753] WARNING: possible circular locking dependency detected [ 162.014715][ T7753] syzkaller #0 Tainted: G L [ 162.020784][ T7753] ------------------------------------------------------ [ 162.027815][ T7753] syz.2.502/7753 is trying to acquire lock: [ 162.033730][ T7753] ffff88803752c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 162.042458][ T7753] [ 162.042458][ T7753] but task is already holding lock: [ 162.049866][ T7753] ffff88807764e440 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 162.059721][ T7753] [ 162.059721][ T7753] which lock already depends on the new lock. [ 162.059721][ T7753] [ 162.070180][ T7753] [ 162.070180][ T7753] the existing dependency chain (in reverse order) is: [ 162.079211][ T7753] [ 162.079211][ T7753] -> #2 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 162.087048][ T7753] __d_alloc_parallel+0xc32/0x1700 [ 162.092724][ T7753] __lookup_slow+0x82/0x2f0 [ 162.097779][ T7753] lookup_slow+0x59/0x80 [ 162.102571][ T7753] link_path_walk+0xd22/0x1910 [ 162.107964][ T7753] __filename_parentat+0x287/0x6f0 [ 162.113627][ T7753] filename_unlinkat+0x104/0x610 [ 162.119107][ T7753] __se_sys_unlink+0x2e/0x140 [ 162.124333][ T7753] do_syscall_64+0x166/0x520 [ 162.129472][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.135905][ T7753] [ 162.135905][ T7753] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 162.144419][ T7753] down_write+0x91/0x200 [ 162.149205][ T7753] lookup_open+0x246/0x1970 [ 162.154248][ T7753] path_openat+0x673/0x1da0 [ 162.159381][ T7753] do_file_open+0x23e/0x4a0 [ 162.164472][ T7753] do_sys_openat2+0x115/0x200 [ 162.169689][ T7753] __x64_sys_openat+0x138/0x170 [ 162.175085][ T7753] do_syscall_64+0x166/0x520 [ 162.180258][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.186713][ T7753] [ 162.186713][ T7753] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 162.194132][ T7753] __lock_acquire+0x164c/0x2de0 [ 162.199530][ T7753] lock_acquire+0x115/0x350 [ 162.204654][ T7753] sb_start_write+0x48/0x1c0 [ 162.209790][ T7753] mnt_want_write+0x41/0x90 [ 162.214839][ T7753] ovl_lookup+0xb93/0x1c80 [ 162.219793][ T7753] lookup_open+0x94b/0x1970 [ 162.224834][ T7753] path_openat+0x673/0x1da0 [ 162.229922][ T7753] do_file_open+0x23e/0x4a0 [ 162.234967][ T7753] do_sys_openat2+0x115/0x200 [ 162.240186][ T7753] __x64_sys_openat+0x138/0x170 [ 162.245582][ T7753] do_syscall_64+0x166/0x520 [ 162.250717][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.257156][ T7753] [ 162.257156][ T7753] other info that might help us debug this: [ 162.257156][ T7753] [ 162.267437][ T7753] Chain exists of: [ 162.267437][ T7753] sb_writers#5 --> &type->i_mutex_dir_key#5 --> DCACHE_PAR_LOOKUP [ 162.267437][ T7753] [ 162.281308][ T7753] Possible unsafe locking scenario: [ 162.281308][ T7753] [ 162.288763][ T7753] CPU0 CPU1 [ 162.294122][ T7753] ---- ---- [ 162.299506][ T7753] lock(DCACHE_PAR_LOOKUP); [ 162.304111][ T7753] lock(&type->i_mutex_dir_key#5); [ 162.311833][ T7753] lock(DCACHE_PAR_LOOKUP); [ 162.318951][ T7753] rlock(sb_writers#5); [ 162.323196][ T7753] [ 162.323196][ T7753] *** DEADLOCK *** [ 162.323196][ T7753] [ 162.331351][ T7753] locks held by syz.2.502/7753: 2, last CPU#0: [ 162.337505][ T7753] #0: ffff88807a0c0160 (&ovl_i_mutex_dir_key[depth]){.+.+}-{4:4}, at: lookup_open+0x221/0x1970 [ 162.348682][ T7753] #1: ffff88807764e440 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 162.358871][ T7753] [ 162.358871][ T7753] stack backtrace: [ 162.364863][ T7753] CPU: 0 UID: 0 PID: 7753 Comm: syz.2.502 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.375713][ T7753] Tainted: [L]=SOFTLOCKUP [ 162.380034][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.390088][ T7753] Call Trace: [ 162.393365][ T7753] [ 162.396292][ T7753] dump_stack_lvl+0xe8/0x150 [ 162.400889][ T7753] print_circular_bug+0x2e2/0x300 [ 162.405922][ T7753] check_noncircular+0x12f/0x150 [ 162.410866][ T7753] __lock_acquire+0x164c/0x2de0 [ 162.415717][ T7753] ? do_raw_spin_unlock+0xf5/0x200 [ 162.420833][ T7753] lock_acquire+0x115/0x350 [ 162.425335][ T7753] ? mnt_want_write+0x41/0x90 [ 162.430014][ T7753] sb_start_write+0x48/0x1c0 [ 162.434606][ T7753] ? mnt_want_write+0x41/0x90 [ 162.439280][ T7753] mnt_want_write+0x41/0x90 [ 162.443779][ T7753] ovl_lookup+0xb93/0x1c80 [ 162.448192][ T7753] ? lock_acquire+0x115/0x350 [ 162.452879][ T7753] ? __pfx_ovl_lookup+0x10/0x10 [ 162.457731][ T7753] ? __d_lookup+0x66/0x790 [ 162.462149][ T7753] ? __pfx___d_alloc_parallel+0x10/0x10 [ 162.467698][ T7753] ? __d_lookup+0x6f3/0x790 [ 162.472217][ T7753] ? d_lookup+0x1f/0xa0 [ 162.476368][ T7753] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 162.482616][ T7753] ? lockdep_hardirqs_on+0x7b/0x110 [ 162.487826][ T7753] lookup_open+0x94b/0x1970 [ 162.492341][ T7753] path_openat+0x673/0x1da0 [ 162.496850][ T7753] do_file_open+0x23e/0x4a0 [ 162.501374][ T7753] ? __pfx_do_file_open+0x10/0x10 [ 162.506407][ T7753] ? _raw_spin_unlock+0x28/0x50 [ 162.511614][ T7753] ? alloc_fd+0x6af/0x760 [ 162.515947][ T7753] do_sys_openat2+0x115/0x200 [ 162.520655][ T7753] ? __se_sys_futex+0x3a8/0x450 [ 162.525511][ T7753] ? __pfx_do_sys_openat2+0x10/0x10 [ 162.530736][ T7753] ? rcu_is_watching+0x16/0xb0 [ 162.535591][ T7753] __x64_sys_openat+0x138/0x170 [ 162.540448][ T7753] do_syscall_64+0x166/0x520 [ 162.545125][ T7753] ? trace_irq_disable+0x3b/0x140 [ 162.550256][ T7753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.556327][ T7753] ? clear_bhb_loop+0x70/0xc0 [ 162.561006][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.566907][ T7753] RIP: 0033:0x7f83a479e199 [ 162.571333][ T7753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.590940][ T7753] RSP: 002b:00007f83a5700028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.599447][ T7753] RAX: ffffffffffffffda RBX: 00007f83a4a25fa0 RCX: 00007f83a479e199 [ 162.607423][ T7753] RDX: 0000000000000400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 162.615428][ T7753] RBP: 00007f83a4835888 R08: 0000000000000000 R09: 0000000000000000 [ 162.623434][ T7753] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 162.631410][ T7753] R13: 00007f83a4a26038 R14: 00007f83a4a25fa0 R15: 00007ffeb6bf8638 [ 162.639401][ T7753] [ 162.687006][ T27] option 6-1:114.49: GSM modem (1-port) converter detected [ 162.695720][ T27] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 162.708984][ T27] usb 6-1: USB disconnect, device number 15 [ 162.738934][ T27] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 162.739335][ T27] option 6-1:114.49: device disconnected