last executing test programs: 7m32.144212745s ago: executing program 0 (id=170): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x8408}, 0x18, 0x0) landlock_restrict_self(r1, 0x5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}, {0x14, 0x4, @mcast2}}}]}, @CTA_TIMEOUT={0x8}]}, 0xb0}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[], 0x94}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r8, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9ea}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0}) 7m31.99067265s ago: executing program 0 (id=173): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r1 = dup3(r0, r0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x3258eb8105be83e5) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xff}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x7}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20004015) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000002080)={0xfffffff7, 0x0, @ofdm={0x2, 0x18, 0x6, 0x12, 0x2, 0x8, 0x1}}) 7m31.718052949s ago: executing program 0 (id=175): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000880)="df1dbc02e540c2dc67909bc3e73018f4184c8bb7f167c8703aed59b0947768490f2c33be06a755afe5dd10e5e7a27c0333aa8b77ae6a8bbc48f54b3d250f46847ed74e8c244a825620ab495a69150e468f4ff6bc82855c78066b194b9174c42826", 0x61) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217", 0xa0}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 9) 7m29.944486752s ago: executing program 0 (id=178): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) epoll_create(0xf0) userfaultfd(0x80001) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x21, 0x2, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 7m29.731410332s ago: executing program 0 (id=180): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x52}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x60040090}, 0x40810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_connect$uac3(0x4, 0xa4, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xbf, 0xd8c, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x7, 0x80, 0x5, {0x8, 0xb, 0x2, 0x1, 0x1, 0x26, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xf, 0x56}, [@extension_unit={0x5, 0x24, 0xa, 0x2, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x8d}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf77e, 0x8, 0x10}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x3, 0xff, {0xa, 0x25, 0x25, 0x89, 0xe, 0x6b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0xff, 0xc3, 0x9, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x1, 0x19, {0xa, 0x25, 0x25, 0x3, 0xff, 0x1}}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0xd, 0x2, 0x5, 0x10}, 0x3e, &(0x7f0000000180)={0x5, 0xf, 0x3e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x64, 0x22, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xdf, "88ebb8606ca386337e5411d417fb7b71"}, @ss_container_id={0x14, 0x10, 0x4, 0x32, "0a098bb8b9c0e6ba371355dcf8f41169"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0x9, 0x200}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_connect$uac1(0x5, 0xf7, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x1, 0x4, 0xa3, 0x40, 0xf7}, 0x50, &(0x7f0000000480)={0x5, 0xf, 0x50, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x4, 0x85, 0xd, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0xc, 0x2, 0x4, 0x7f}, @generic={0x27, 0x10, 0x3, "da7c84b791836ac8d389bb8f867c3cbd33ea5c5c746d6466de0dbf922ec0eca44ed8709a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x2, 0x40, 0x2, 0x6}]}, 0x5, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4ff}}, {0x15, &(0x7f00000005c0)=@string={0x15, 0x3, "a658198b8cac4db9ce06bd091cbc764e0e44c5"}}, {0xe3, &(0x7f0000000600)=@string={0xe3, 0x3, "a7bf9ed9a55e55e302dd84ee6e8566359da6279e44ac43166cd3a11857c23a6aae234e1061caab370413e434f3074ff7291274b3d950256e5d1343d7da4ce7b79877f2588559a4e1e6821a51646ac8112ef153c507e3ddca12fad8c602715ffd3b936bf8b94218305d8932cffcebbab9ef98f6b1137ec0c6b61f459ff170491a67c70c5c8ab6e7ef584b58b740999f8ee2ccb0e968b4cc6f9184afb8324ba5050a8fce417c792a67b35fd35feb33b11447a3986b63c1b278727e9373c647805b1ac9b11e47f9cfb40c81c9f9bb1eb6166406b5b048a6c2f5169c43f5eff61d654f"}}]}) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e1"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 7m28.12979529s ago: executing program 0 (id=186): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048cc) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000002740)={&(0x7f0000000000)={0xa, 0x4e24, 0x4, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002780)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x16}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x29}}}], 0x30}, 0x84) (async) sendmsg$inet6(r2, &(0x7f0000002740)={&(0x7f0000000000)={0xa, 0x4e24, 0x4, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002780)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x16}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x29}}}], 0x30}, 0x84) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x40, 0xb, 0x1, "f2"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x40, 0xb, 0x1, "f2"}, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in=@multicast2}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in=@multicast2}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x11480, &(0x7f0000000200)={[], [{@context={'context', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@pcr}, {@pcr={'pcr', 0x3d, 0x4}}]}) 7m13.06454539s ago: executing program 32 (id=186): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048cc) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000002740)={&(0x7f0000000000)={0xa, 0x4e24, 0x4, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002780)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x16}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x29}}}], 0x30}, 0x84) (async) sendmsg$inet6(r2, &(0x7f0000002740)={&(0x7f0000000000)={0xa, 0x4e24, 0x4, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002780)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x16}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x29}}}], 0x30}, 0x84) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x40, 0xb, 0x1, "f2"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x40, 0xb, 0x1, "f2"}, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in=@multicast2}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in=@multicast2}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x11480, &(0x7f0000000200)={[], [{@context={'context', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@pcr}, {@pcr={'pcr', 0x3d, 0x4}}]}) 2m45.832567738s ago: executing program 1 (id=1932): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0x2d, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00003fc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000a6000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000000, 0x10031, 0xffffffffffffffff, 0xbe9f6000) semtimedop(0x0, 0x0, 0x0, &(0x7f00000028c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'bond_slave_1\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x30, 0x1, 0x2, {0xb, @udp_ip4_spec={@multicast2, @empty, 0x4e22, 0x4e24, 0xc}, {0x0, @empty, 0x9, 0xffff, [0x7, 0x7]}, @esp_ip6_spec={@mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x6}, {0x0, @random="3f917701c0a1", 0x3bd, 0x3, [0x9, 0x2]}, 0x8, 0x4c0e408}}}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x1ff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0xffffffffffffffaa, 0x4, 0xfe}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0xfffffffffffffcc1}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 2m45.205838812s ago: executing program 1 (id=1935): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf80", 0x85}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d03001f000000000000130000001c000980070002"], 0x30}}, 0x0) 2m45.068829317s ago: executing program 1 (id=1938): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_async', 0x100102, 0xc) sendfile(r1, r1, 0x0, 0x4) recvmmsg(r0, &(0x7f000000a040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40012032, 0x0) listen(r0, 0x6) 2m44.849984153s ago: executing program 1 (id=1940): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r0, 0xffff0080) setuid(0xee00) mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87\xed2:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x40, 0x80, 0x0) 2m44.373446302s ago: executing program 1 (id=1942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010405000000000000000000deb400060500010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000088}, 0x881) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdc, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x5, 0x6576, 0xc}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m43.5206196s ago: executing program 1 (id=1949): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x80) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 2m28.16226403s ago: executing program 33 (id=1949): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x80) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 1m27.629645813s ago: executing program 2 (id=2436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x800) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000280)={0xa, @capture={0x1000, 0x1, {0xffffff61, 0x2}, 0x23, 0x3}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000000c0)={0x7025, 0x201000, 0x8}) 1m27.102004316s ago: executing program 2 (id=2441): r0 = syz_open_dev$usbfs(0x0, 0x244, 0x21c082) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = fcntl$dupfd(r1, 0x406, r2) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x12, &(0x7f0000000280)=ANY=[@ANYBLOB='transKfd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) prctl$PR_SET_SECUREBITS(0x1c, 0x15) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000100)=0x0) setuid(r6) r7 = socket$inet(0x2, 0x1, 0xfffffffd) pipe2(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400) splice(r7, 0x0, r9, 0x0, 0x7ffff000, 0x3) r10 = socket$kcm(0x29, 0x7, 0x0) preadv(r10, &(0x7f0000001700)=[{&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001900)=""/164, 0xa4}, {&(0x7f00000014c0)=""/69, 0x45}, {&(0x7f0000001540)=""/113, 0x71}, {&(0x7f00000015c0)=""/8, 0x8}, {&(0x7f0000001600)=""/251, 0xfb}], 0x8, 0xf, 0x6) gettid() ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000001780)=0x0) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, r6, &(0x7f0000000140)) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x1120000, 0x800, 0x401, 0x2}, 0x20) fcntl$lock(r0, 0x24, &(0x7f00000017c0)={0x2, 0x3, 0x2, 0x8, r11}) setuid(0xee00) fchmodat(r9, &(0x7f0000000080)='.\x00', 0xfffffee3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd4fdb, 0x103) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001800), 0x71b02, 0x0) r13 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r13, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r14, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d5c3e6bd4ae7ee3551b880c0ac56cb2a5ac83a498a7d4611f01043bbe", r14, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r15, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 1m26.871565966s ago: executing program 2 (id=2445): mlockall(0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000006740)={0x0, 0x0, &(0x7f0000006700)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 1m26.154170515s ago: executing program 2 (id=2455): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0xfffffff9, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x8) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, &(0x7f0000000240)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000140)="02043c00ec07482f0c00eb2b2ff0dac8897cc132810d5a940c6644326b112002faffacff3066090cb60085471d130a66321a54e7df305f80a88161b634c59faa9517cc5e511a", 0x46, 0x8880, 0x0, 0x0) 1m25.287213606s ago: executing program 2 (id=2460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m24.483665494s ago: executing program 2 (id=2465): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}]}, 0x20}}, 0x4040000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="2000000076001f0b4abd0700000000000000000ef000000008000a"], 0x20}], 0x1, 0x0, 0x0, 0x24044814}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sync() sync() 1m9.392940079s ago: executing program 34 (id=2465): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}]}, 0x20}}, 0x4040000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="2000000076001f0b4abd0700000000000000000ef000000008000a"], 0x20}], 0x1, 0x0, 0x0, 0x24044814}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sync() sync() 4.842336251s ago: executing program 5 (id=3052): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a", 0x78, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000880)="df1dbc02e540c2dc67909bc3e73018f4184c8bb7f167c8703aed59b0947768490f2c33be06a755afe5dd10e5e7a27c0333aa8b77ae6a8bbc48f54b3d250f46847ed74e8c244a825620ab495a69150e468f4ff6bc82855c78066b194b9174c428263a9388a8afa9b5301154597611120d428de4972709a73541431640a831feb767fb7023244fa6d542a88b9da3feebfe321af028ee46fe1fd5b5e42747e71f35a0ff045ebf6998ace7e8d0b550611b125edeaca983dd660f485cf0799e93c8a7071297", 0xc3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217", 0xa0}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"8fa5814605e902cc8ffad43c40fc0a000000ab65a29a23546aad0281b3aff5eb", r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x62080) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000200)={'\x00', 0x1, 0x3b05, 0x0, 0x200, 0x5}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 3.716500582s ago: executing program 5 (id=3060): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x40100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000013000/0x2000)=nil) (fail_nth: 3) 3.172988254s ago: executing program 5 (id=3063): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0xeeee8000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b73bbe826d0a9c85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300"}}) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000001600)=@vmx={0x1, 0x0, 0x2080, {0x25000, 0xffffffff, {0x1}, 0x0, 0x8}, {"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", "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"}}) 2.839811785s ago: executing program 5 (id=3069): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000001700)="f2435f0140088000000000850800425a4eb113473a6dea5f3c32392dc30640cc3eb5", 0x22, 0x1, &(0x7f0000000200)={0x11, 0x10, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) (fail_nth: 2) 2.348583734s ago: executing program 4 (id=3073): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="240000001a000100210000c8067896250200fc003a2a5c247b00000008001b803a"], 0x24}], 0x1}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0']) write(r0, &(0x7f00000000c0)="822a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2.282369861s ago: executing program 5 (id=3074): syz_open_dev$video(&(0x7f0000000300), 0x75aeaebc, 0x1a9881) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11004, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x7, 0xe, 0x182e, 0x9, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x100252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x3, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x3, 0x81fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.151482998s ago: executing program 4 (id=3075): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) r3 = syz_open_procfs(r1, &(0x7f0000000080)='net/rt6_stats\x00') open_tree(r3, &(0x7f0000006180)='./mnt\x00', 0x9002) 2.05042373s ago: executing program 6 (id=3076): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="8dc5", 0x2, 0x4040895, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x3000000, 0x4) 1.985890062s ago: executing program 4 (id=3077): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0xeeee8000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b73bbe826d0a9c85000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300"}}) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000001600)=@vmx={0x1, 0x0, 0x2080, {0x25000, 0xffffffff, {0x1}, 0x0, 0x8}, {"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", "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"}}) 1.941251101s ago: executing program 6 (id=3078): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) move_pages(0x0, 0x2, &(0x7f0000000140)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000180)=[0x7, 0x291, 0x4, 0xfffffffa, 0x8, 0x8, 0x1, 0x8000], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x7) 1.834684383s ago: executing program 4 (id=3079): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r1, 0x852dd6c070cd7e4d, 0x0, 0x1, {0x2a, 0x0, 0x2400}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x24}, 0x4, 0x700000000000000}, 0x40000) 1.761893175s ago: executing program 6 (id=3080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fcntl$addseals(r1, 0x409, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x8013, r1, 0x117c0000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r2, 0x611, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ad6add1fdebf56766859574f8f3ebe3b183ee66", 0x2) 1.587792503s ago: executing program 4 (id=3081): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'local', '=static'}}}]}) (fail_nth: 3) 1.181985401s ago: executing program 4 (id=3083): r0 = syz_clone(0xd2900, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0xdc, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x28, 0x7ffffff7}}], 0x1, 0x4040) ptrace(0x10, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r2) socket(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000080)={'wg1\x00', @random="078d00"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000540)={0x0, "365c350403785f5211ca3557f21b5a8f6683ba992b84eae8a9e518173cf8b86f76c6437b1602bb4799a1eaff90cd74e2453ed695e18adbdcffdde8d61ec4de5e", 0x2d}, 0x48, 0xfffffffffffffffb) keyctl$clear(0x7, r5) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=fscache']) r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0x410a00, 0x12) renameat2(r6, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x7) 1.084479961s ago: executing program 5 (id=3084): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, r3, 0x2) clock_gettime(0xfffffffffffffffb, 0x0) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r4, 0x2000000) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) fcntl$addseals(r4, 0x409, 0x7) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x3], [0x0, 0x0, 0x4000000000000000]}) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x202) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000140)={0x1, 0x0, 0x98, &(0x7f0000000080)={0x9e7a, 0x3, 0xd}}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0xc0285628, &(0x7f0000000300)={0x1, 0x1}) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f00000000c0)={0x4b5a9da54893e122, 0x8, 0x1, 0xffff}, 0x8, 0x0, 0x4, 0x0, 0x7fff, 0x3, 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, 0x0) r11 = syz_open_dev$video4linux(&(0x7f0000000080), 0x994, 0x800) ioctl$VIDIOC_SUBDEV_S_FMT(r11, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x1013, 0x0, 0x0, 0x0, 0x3}}) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r12, 0x0, 0x0) recvmsg(r12, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) execveat(r10, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000140)='.\'{\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00']}, &(0x7f0000000600)={[&(0x7f00000002c0)='/dev/dri/card#\x00', &(0x7f0000000340)='&*:\\\\\x00', &(0x7f0000000380)='/dev/udmabuf\x00', &(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='!\'+)+-\x00', &(0x7f00000004c0)='\\\'-$\x00', &(0x7f0000000500)='-:\x00', &(0x7f0000000540)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00']}, 0x800) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r4, 0x1f, 0x0, 0x1000000}) 1.019154065s ago: executing program 6 (id=3085): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 673.232465ms ago: executing program 3 (id=3088): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='maps\x00') read$proc_mixer(r1, &(0x7f0000001340)=""/107, 0x6b) r2 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @multicast1}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000100)}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000280)="8dc5", 0x2, 0x4040895, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0xfffffffffffffe02) 590.190674ms ago: executing program 3 (id=3089): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="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", 0x17c}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)}}, {{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0xc, 0x88, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @lsrr={0x83, 0xb, 0xfd, [@multicast1, @broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5e}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @private=0xa010100, @multicast1]}, @rr={0x7, 0x1b, 0x25, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102, @remote]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6e, 0xffffffffffffffff, [{0x2, 0x10, "9a92bde21d1b0bda2c92c75247d6"}, {0x7, 0xa, "b17ca47e545bd54f"}, {0x5, 0xe, "a90fd586814e77678a4166b0"}, {0x2, 0xf, "917bb1a0ca08419856479d1066"}, {0x1, 0x5, "b34e4c"}, {0x0, 0x2}, {0x7, 0xd, "c7462b6963a7f7b73976c4"}, {0x2, 0xb, "6f410909791312f0eb"}, {0x7, 0x12, "36adc0c4b5a96e5ee4839795417a9300"}]}, @ssrr={0x89, 0x7, 0xd7, [@dev={0xac, 0x14, 0x14, 0x12}]}, @rr={0x7, 0xb, 0x2e, [@local, @empty]}, @ssrr={0x89, 0xb, 0x93, [@empty, @local]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x70, 0x1, 0x8, [{@empty, 0x8}]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@end, @lsrr={0x83, 0xf, 0x28, [@local, @local, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0x53, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@rand_addr=0x64010101, 0x3}, {@multicast2, 0x7}, {@empty}, {@local, 0x80000000}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x78}}], 0x1d8}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000840)="d0ebacfea816e49eaccd9f49aa209f3c8225b8989add57d02b4d52c36fecbb0df27ad43313df24a760e78d17079b48ec92cf47197c4578ea702369caa7cbddaf9f023404a962ed1411b4e5f5e8530ff0149f4c9330b1b3c4b8315be901f92408dcebf1d2209835fa29a316064b641da0457a67165bdc6b31a6ab17324c794f234724065185ae94fdf9c7f7ee00b1f144e6cb13e5c07dc018a6cf665df33ca91638aa3ee726963aa105a2bc5a", 0xac}, {&(0x7f0000000900)="471d2aced4f6b3fc274f0390e79fcf3a2a93d2e0739977fb2437eaf6eea86499fb3c9750d5357fa0919a51b73227eab01583f3881a52f622c4ddeea8a3de7a85ac3945814056e1cf0080910203a32918809d217e97fc25e0ec4a1051cfea058cb30b5ee020b5d54f9633e01071dc7f331de5fcfca7db01e5c493f724a42dcff2509b7cd224a58fb6a9ae71ff5ab29a592a09aeda21460f0dca314750d1e6abadd829507ed982febdc363ecc95af0a20f", 0xb0}, {&(0x7f0000000a00)="52a7a8a87d5d8fb544f40bccfe363fa767fcb6bd29299698d377fc80b620fe", 0x1f}, {0x0}], 0x4, &(0x7f0000000d80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x12, 0x0, 0x7, [0x0]}, @ssrr={0x89, 0xf, 0x8f, [@multicast2, @empty, @multicast2]}, @timestamp={0x44, 0x28, 0x40, 0x0, 0xc, [0x4, 0x69ac, 0x1ff, 0xe, 0x9b, 0x7, 0x0, 0x0, 0x2]}]}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x44, 0xf, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xd}, {@remote, 0x5}, {@multicast1, 0xfffffffc}, {@empty, 0x9}, {@empty, 0x5}, {@multicast2, 0x3}, {@broadcast}]}, @generic={0x89, 0xe, "04eea2748501e640a40f4106"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x158}}], 0x4, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 586.717768ms ago: executing program 6 (id=3090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r4, 0x2000000) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x1f, 0x0, 0x1000000}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, r1, 0xc4fc9e906872338b, 0x70bd2a, 0xfffffffc, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x24000040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) 521.963442ms ago: executing program 3 (id=3091): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) pipe2$9p(0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000100)) 495.730133ms ago: executing program 3 (id=3092): syz_open_dev$video(0x0, 0x75aeaebc, 0x1a9881) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11004, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x7, 0xe, 0x182e, 0x9, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x100252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x3, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x3, 0x81fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 438.057774ms ago: executing program 3 (id=3093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x4004) (fail_nth: 9) 382.105272ms ago: executing program 6 (id=3094): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x170, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x144, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x18, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x18, 0x1000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, "20753d00000055c51b08700c1e0abd5c2a008200120000000000090000f7ff00"}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a79325bd7000fddbcb251f0000000c0006000180000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x20044000) 0s ago: executing program 3 (id=3095): syz_usb_connect$uac3(0x3, 0xf2, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x4650, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x6, 0x0, 0x9b, {0x8, 0xb, 0x2, 0x2, 0x1, 0x21, 0x30, 0x7f}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6724d404d95ee33, 0x33, 0x2}, [@power_domain={0x10, 0x24, 0x10, 0x6, 0x10, 0x0, 0x3, "158552be4a47b3"}, @source_unit={0xc, 0x24, 0xb, 0x80, 0x2, 0xce, 0x1, 0xfffe}, @selector_unit={0xd, 0x24, 0xc, 0x9, 0x8, "7badae07e8ccbfca"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x19, 0x7, 0x81, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x3, 0x8, "b3aa"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xca, 0x43, 0xfd, {0xa, 0x25, 0x25, 0x325, 0x9, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x2}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0x5, 0x5, "afdd7186"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3ff, 0x9e, 0x9, 0x5}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0xfa, 0x2, '\\<.', "da26"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf, 0x2, 0x8, {0xa, 0x25, 0x25, 0xfffffffc, 0x6, 0x40}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x1, 0xd, 0x2, 0x20, 0x6}, 0x36, &(0x7f0000000140)={0x5, 0xf, 0x36, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0x40, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x3, 0xb864}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x4, 0x0, 0x3, [0xf, 0x5f00, 0x18000, 0x0, 0xc000]}]}, 0x1, [{0xe1, &(0x7f0000000180)=@string={0xe1, 0x3, "8653fd2d699017a124c910850eedac08091471a9e9bb3d22a5f51505b17a0a1ba4f4a678514d76b2f0ab06001c7cb4c349fb65a1bc4019aacecc048d9d51775349def2f55e6a05a5fe5b877d4ce08e0ac76e1a9b761842a92993145f2d624746ec7e9b8fc390af1ce85ecc450c4bd29c99b0166cb2ce6e09d2622a0b57cf88284f64f065db7c680c9a19119875c81379bf34f484c5c959cd11bd3f11a32b0b3e4c29e8edc521351e3e89f080acb52b4766deed4f3346c7bd9f154894d0d9bcc0360360f6f76fffb12d66cdc7ae0d682cad918c79a172d7b0f1298e08ac2e35"}}]}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000300)=0x100, 0x3) syz_usb_connect$uac1(0x1, 0xc5, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1055, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x4, 0x60, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x25}, [@extension_unit={0x8, 0x24, 0x8, 0x5, 0x9, 0x4, '2'}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x81, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x404, 0x2, 0x8, 0x3, 0x8, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x1, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x76b4, 0x4bdf, 0x1, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x122, 0x2, 0xa, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x1, 0xd5, {0x7, 0x25, 0x1, 0xc, 0xd5, 0x2b8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8c, 0x3, 0x2, 0x9}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x101, 0x7, 0x3, 'S!'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x20, 0x0, 0xff, 0xdd}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xbf, 0xc, 0x4, {0x7, 0x25, 0x1, 0xc, 0x9, 0x3}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x41, 0xf8, 0xa, 0x8, 0x5}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x1, [{0xb8, &(0x7f00000004c0)=@string={0xb8, 0x3, "ada60eb8a8af2d95baf28c0ab888b49cd3601f7d244d0e5fefc8eff1f7d68089b2b693733f7dded200cf01e09c9fc84b285ddc62bbe385115e89ac5595246ae9886ab775df85919c5271510f9b55774bc2f7d1d878e1d91e33796b4355b27d1f824ca90d85b2b54df7ac8d93ef961317cb9648f52f5f95ebfc6d9819be447d33b70066aa893df007e55557f67f6a514909fc871412e0415f0357f4b61ffa8eeddf97bb3006a47bee3e722b3f32bc86f747995b9db05c"}}]}) ioctl$int_in(r0, 0x5421, &(0x7f00000005c0)=0xfffffffffffffffb) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'macvlan1\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x80) bind$alg(0xffffffffffffffff, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000780)={0x0, 0x57, "300b1ac579c296f4de1b99d60cc1a41ab806dc7c9ad0fdc90e3cf327d975bd44bc42e0c22afbd760c9a4ef65dc0b03fae63f428c7790c18aa804425fe322a7de93123f8379943543dc810fb077dfa00c7ec8e22ddd34ae"}, &(0x7f0000000800)=0x5f) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000840)={r3, 0x1}, &(0x7f0000000880)=0x8) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$l2tp6(r6, &(0x7f0000000900)=""/172, 0xac, 0x40002022, &(0x7f00000009c0)={0xa, 0x0, 0x0, @private1}, 0x20) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000a00)={0x2, [0x8cb, 0x6]}, 0x8) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r6) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x8, 0x3, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000800}, 0x4048880) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000b80)=0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x400100, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000c00)={r4, @in6={{0xa, 0x4e23, 0x588, @mcast2, 0xfff}}}, &(0x7f0000000cc0)=0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000d00)={r3, 0x7}, &(0x7f0000000d40)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000d80)={r8, 0x2}, &(0x7f0000000dc0)=0x8) syz_usb_connect(0x5, 0x52c, &(0x7f0000000e00)={{0x12, 0x1, 0x310, 0x47, 0x95, 0xda, 0x8, 0x5c6, 0x903c, 0xd216, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51a, 0x2, 0x1, 0x1, 0x0, 0x4, "", [{{0x9, 0x4, 0x6, 0x3, 0xd, 0x71, 0xba, 0xd9, 0x8, [], [{{0x9, 0x5, 0x3, 0x0, 0x8, 0x4, 0x24, 0x6}}, {{0x9, 0x5, 0x80, 0x0, 0x43fb7ea248dec88f, 0xb, 0x1, 0x6, [@generic={0x34, 0x22, "01c475bec8a992aaa9c68fd54d7545ce288c0c06cd9fa5455cdca563a06de8f7a88fbddc271172f6a8d5d371805b89715c98"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x3, 0x1, 0x2}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x3, 0x8d, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x72, 0x6f}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xe3}]}}, {{0x9, 0x5, 0x11, 0x0, 0x400, 0x6, 0x8, 0x4, [@generic={0x9a, 0x4, "3f342793c0d81f7ec174fad79b1be2024c8fbbd5d56234b82c66f2372ff11fc1000259bbfb3e7d9f6201729749fa9a8638e0f3c97fe520cb1485ab3cb4347c38617fd2efdf5a1e5298747781390b2daecb170d95626f22322137063066955e80cae894fc366514e8b7414f16c89e6c6ef5b872cdfe22a9c317233c824ba27b4984029b4388f96f4e02dd04c8fe8855373ef2c210b5b758cc"}, @generic={0x36, 0x22, "c9aef99b219031eed5285eeca879ffe8c9935f797ce703418070608d406163a857320fc033d0aa9d9ee01bfb858966e588e77dbf"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x3ff, 0xb, 0x3, 0x2, [@generic={0x76, 0xf, "053b599dc899aeffedd6c310ffc7237ff053956afb6f915005ce708a6a142965ae0b34f7ab576b5de1bc90226c3bb6e3fbf5864b324aa1780318f41d381b90a4e76b3ff6834466baaeb452b85f14d70d45ce73b3cc6f2e7f3c8c87215ecb577bb53cd51fb89bec97355e0da385e0ab5eabcb5ea1"}, @generic={0xee, 0x10, "b7ec499d1183d36b17c9415e80746998934305cc248ea7a8c032c85a4c76d263cf8ed83e1492e78004212d0c5892dc5990a9b4a23ac7cd293558834610665e597be22e2b8c4dbf5cc56ff600e665dfabd03e4c889eb3580c7e2aa4901bbd420736b2cc7b2b00ccb9a096deb4f80897ee4bdb234f7e8b32d0350f5976b4467879288bc542ea5da907db7d1c81f9c0493990cca209ee2ab96f23a600979b47078ffd7077dc83b619dee18e7e828cb660828a8babbb51942cc4ecf56fc4c7cfcf9b43cee1409913d237147f07164072514b26b8ebb5c409586ba2261998286204f4cbdf80c43d5adeb2e7f302ee"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x3, 0x0, 0x0, [@generic={0x81, 0x21, "0c4c0b92c144a1407e1e3e7fb901a1c708289222a8b56bc86ad8470f124a4240b29712b7907c7bc5fe9196da1b3899489811c955baac254f169bcaf8f7caf9bcb415373cf4229028f6ce0dc0982b19fcdc0f196d2d898b0c44e43a7acb0380370aac62a7946b50d4cce4256d5873fdfbfc7f2fab7a06e6344ea186786dbcea"}, @generic={0x12, 0x30, "01c9aaf059e36b52d310a13266346746"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x0, 0x1, 0x4, [@generic={0xc7, 0x21, "201eee5668c50b53a17c5b8055932c75e7984a9df0f11da621045026076feb7204bcee5f7118d3c4da22794307bcc8e5745dc0bd50fecb8fea791ad0517e8a8b8475c15a13d0d616bfa845cd5ce0a668c9ac12cd6cfdd7a38d50b2c541759759a092f54bc4877455937757115e343c8d26352fc2c54e2061f84d83aaecef891e4ade3df585e6973a4435dd3d23acdaa60702e4680a7a9d64d47e5696bc698c28bb3ad3d9e427d2c2bc0fd774baa35cefdcd3bd798f5deb003c2cd96f002648aa647598c8a8"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x4, 0x3, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x4, 0xa, 0xa}}, {{0x9, 0x5, 0x0, 0x1a, 0x40, 0x8, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfd, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x79}]}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0xb6, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x56, 0x4}, @generic={0x11, 0xa, "585e8d42116cbe45a45607c329c1f7"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0xfe, 0x5, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}, @generic={0x5a, 0x23, "974ee36aec7beb463cfb4fb4004168d938fbabbc22e1317bda7a29c77cfd78315c431e865e6d273f76dfc78fa31193a06d6aa8724c0efeee3256d3079817343c4fa0e1387e9759c737c3151e05c9f7e27aa72d80c20cacb6"}]}}]}}, {{0x9, 0x4, 0xe4, 0x1, 0x0, 0x84, 0xd3, 0x5c, 0x7f, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "1ebfdeeeba"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x223, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x8}, [@obex={0x5, 0x24, 0x15, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}]}]}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x300, 0x3a, 0x0, 0x6, 0xff, 0xae}, 0x5, &(0x7f0000001380)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x446}}]}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000001440)={r8, 0xb5f}, 0x8) r9 = syz_usb_connect$uac3(0x4, 0xf1, &(0x7f0000001480)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0x9, 0x0, 0x39, {0x8, 0xb, 0x1, 0x0, 0x1, 0x25, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x4b, 0x6}, [@multiply_unit={0xb, 0x24, 0xd, 0x8, 0xb2, 0x5}, @multiply_unit={0xb, 0x24, 0xd, 0x8, 0x6f, 0x1, 0x9}, @multiply_unit={0xb, 0x24, 0xd, 0x2, 0x0, 0x0, 0x4}, @feature_unit={0x11, 0x24, 0x7, 0x4, 0x5, [0x3, 0xf, 0x8]}, @selector_unit={0x6, 0x24, 0xc, 0xc, 0x1, '5'}, @mixer_unit={0x9, 0x24, 0x5, 0x2, 0x7, "3be73f4c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x2, "321055b1"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0x1, 0xf, "", "07fe"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x6, 0x3, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x93, 0x1, 0xfb, {0xa, 0x25, 0x25, 0x4, 0xb6, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x4, 0x85, 0x8, "21b0bf4c94fb5c4a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x6, 0x7f, 0x8, {0xa, 0x25, 0x25, 0x4, 0x6, 0x1}}}}}}}}]}}, &(0x7f0000001a80)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x300, 0x9, 0x5a, 0x3, 0x20, 0x5}, 0x103, &(0x7f00000015c0)={0x5, 0xf, 0x103, 0x6, [@wireless={0xb, 0x10, 0x1, 0x0, 0x84, 0x5, 0x7, 0x3, 0xf}, @ss_container_id={0x14, 0x10, 0x4, 0x68, "8b921e69e36e86cca3f44e3e10d3ab11"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x81, 0x4}, @generic={0x27, 0x10, 0xa, "b4182f546db1fdd01040ab37bd3f86436235a0d6686e0d8646f1a735cb2a81bcc0cfd34f"}, @generic={0xab, 0x10, 0x4, "3a61f522e26f3fba23cd07ed72ae14267b518b402c7cad8742bb15af7fec67f8aabc43d9be76d2135828f1e3941a22b0ece20e27a30200707a6f3a156bbde24ddd7767990ccbb81bee71f77f32f7ab611f2479532f405bb1a33e52cb22e6ba4363e886d14a8237bdb5f0f63d46e081214d88ec99d1ee8901fcb3bc05a97775ab923aa6d109e9b1d0b35fd8bb608ffe651192d4942d2b66342567d19ad4cd2463874689acdaffbb6a"}]}, 0x7, [{0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x843}}, {0xf3, &(0x7f0000001740)=@string={0xf3, 0x3, "dda21fb2c5f944c4652d4ad774fe71e8a2a95fac6d57019c1f061bdba1b9d50433a7205211c57797c25c72d4e8215633d77b68703853479dd56e58db207b6d83aeb23c979ac2937ac1d169e1d0380c65ab816d90aa7bf65abc18990984155f79897a13ec3422b8cc029a2458077b1db07bfb2340f9427c3a2df0f76276d7e29f232567096026ceac4412f04e68592631708acbb96e5b0f263fd72054899dab9cb62b564150abbb774f89e1862db1d398ccfc82ef4aa60334271c9e2c2aac99fe0b4cedf64fe7d41a79b81454f2d9ac38b2b392897e2182034d3708df955b5691557dac2dfe6c5675ed148b63b7b2feb810"}}, {0x57, &(0x7f0000001840)=@string={0x57, 0x3, "0bf871e4eef3870de15909bdc6c0cae20565e4934fc2f7e091717db2c3aededcad80e90e93e4d93815be13d7f741f5a990167444f151ff4797671d50f6e7a491fe3948d23d388968ffe16cab2d2518a2a9048878b8"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x816}}, {0xf2, &(0x7f0000001900)=@string={0xf2, 0x3, "e08be901a34d6de2f751aabe9cc6b4933ce1b4e7b75b22a51e3f6b068a214954ed33b3bd2654504d3405d82f35e0d068d43eca53bde565ad36e8ba39173ff98ed516e66dc05479dd1bcf2419f504c014c9a0152bc9753b118249ab801bdb704f23483d1d698b760532126ede5046533e3e04fa25f09b20c75b70036b10d11ea516e8327bee3c2aa5f7621a7dae38232e02c3938d3fe69b1580462e67224a716b1e247d9f4e204e34afdd0be23e14c208e551842ddf2c2751dc0edf2cdb417a7bb1c01f4c4565b49d4ae47a636007b4bf619be256f85eb9251e7f091ea7c4a8aba0cd65f0a673a902e3d4dcc49283841b"}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x200a}}, {0x5, &(0x7f0000001a40)=@string={0x5, 0x3, "1315da"}}]}) syz_usb_control_io$uac3(r9, &(0x7f0000001c00)={0x14, &(0x7f0000001b00)={0x20, 0x3, 0x9f, {0x9f, 0x0, "10e645d9cfad67d1984456f5c393614625600093e35106be77fe47d814703932429c65b2aa4a8083c62535555c0c07b14941a0278668292c3e40ceb1563de8ca7b902898aa602f91be5bad54db89c4777150bf45976fe8e10f459597a8250996ef5c8446010a2004b0cf0cae2f1e5a4b69943881813452e092823e3253a28e353828053db6dfc0002d780d50894bed3803dc9c5dd3bacc1707ef9e1ef2"}}, &(0x7f0000001bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000001f00)={0x44, &(0x7f0000001c40)={0x40, 0xa, 0xd0, "cb547c89a7dd38282f71cb989439c5fe7909902490b21614993d3e831de5a42f6799ba79d69a732471d6a90d24daddbafe0dba95d295d4f82a83d4596e9db7f461bdd2606c1f97a8e8e098634da25a0ef94f315d1cbe0684a2eec3f259b9bcfab5717c6bb4d76b59871b0a90aa5795f80f7646de3f31c03019e72d64ebf31dbdbb4f8e3537c8b835d661e34a2c0ee0e28821af0d96a82e1d495b1c119a4eae9c73b5ad58127850790aae31742c4fcb0a872e85019e324753eadc903703285e7051e4d4e5dd64ff2bb43dd303d43e1ab8"}, &(0x7f0000001d40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001d80)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000001dc0)={0x20, 0x81, 0x3, "de4948"}, &(0x7f0000001e00)={0x20, 0x82, 0x2, "ad4d"}, &(0x7f0000001e40)={0x20, 0x83, 0x3, "9c3008"}, &(0x7f0000001e80)={0x20, 0x84, 0x3, "9e0da6"}, &(0x7f0000001ec0)={0x20, 0x85, 0x3, "f9e749"}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001f80)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001fc0)=0x18) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000002040)={0x3, 0x0, &(0x7f0000002000)=[0x0, 0x0, 0x0]}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000020c0)={0x2, &(0x7f0000002080)=[{0x4, 0x40, 0xff, 0x9}, {0x5, 0xf, 0x4, 0xffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, &(0x7f0000002180)={0x0, 0x0, r6, 0x9, 0x80000}) kernel console output (not intermixed with test programs): Tainted: [L]=SOFTLOCKUP [ 553.099837][T13662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 553.099851][T13662] Call Trace: [ 553.099859][T13662] [ 553.099867][T13662] dump_stack_lvl+0xe8/0x150 [ 553.099895][T13662] should_fail_ex+0x46b/0x600 [ 553.099927][T13662] should_failslab+0xa8/0x100 [ 553.099954][T13662] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 553.099979][T13662] ? __d_alloc+0x37/0x6f0 [ 553.100009][T13662] __d_alloc+0x37/0x6f0 [ 553.100041][T13662] d_alloc_parallel+0xe6/0x1610 [ 553.100071][T13662] ? __d_lookup+0x66/0x780 [ 553.100100][T13662] ? __d_lookup+0x66/0x780 [ 553.100131][T13662] ? __d_lookup+0x66/0x780 [ 553.100164][T13662] ? __pfx_d_alloc_parallel+0x10/0x10 [ 553.100191][T13662] ? d_lookup+0x1f/0xc0 [ 553.100218][T13662] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 553.100255][T13662] path_openat+0xccb/0x3960 [ 553.100307][T13662] ? __pfx_path_openat+0x10/0x10 [ 553.100344][T13662] ? do_raw_spin_lock+0x12b/0x2f0 [ 553.100369][T13662] do_file_open+0x23e/0x4a0 [ 553.100393][T13662] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 553.100432][T13662] ? __pfx_do_file_open+0x10/0x10 [ 553.100454][T13662] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 553.100494][T13662] ? alloc_fd+0x679/0x6f0 [ 553.100524][T13662] do_sys_openat2+0x115/0x200 [ 553.100548][T13662] ? __pfx_do_sys_openat2+0x10/0x10 [ 553.100571][T13662] ? ksys_write+0x248/0x270 [ 553.100599][T13662] ? __pfx_ksys_write+0x10/0x10 [ 553.100625][T13662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.100644][T13662] __x64_sys_creat+0x8f/0xc0 [ 553.100667][T13662] do_syscall_64+0x174/0x580 [ 553.100696][T13662] ? clear_bhb_loop+0x40/0x90 [ 553.100719][T13662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.100737][T13662] RIP: 0033:0x7f8ae319ce59 [ 553.100755][T13662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.100772][T13662] RSP: 002b:00007f8ae13ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 553.100792][T13662] RAX: ffffffffffffffda RBX: 00007f8ae3415fa0 RCX: 00007f8ae319ce59 [ 553.100807][T13662] RDX: 0000000000000000 RSI: 00000000000001be RDI: 00002000000024c0 [ 553.100820][T13662] RBP: 00007f8ae13ee090 R08: 0000000000000000 R09: 0000000000000000 [ 553.100832][T13662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.100843][T13662] R13: 00007f8ae3416038 R14: 00007f8ae3415fa0 R15: 00007ffef58ebab8 [ 553.100873][T13662] [ 553.345461][ T5712] usb 6-1: config 0 descriptor?? [ 554.127029][ T5712] hid_parser_main: 261 callbacks suppressed [ 554.127057][ T5712] megaworld 0003:07B5:0312.0008: unknown main item tag 0x0 [ 554.127089][ T5712] megaworld 0003:07B5:0312.0008: unknown main item tag 0x0 [ 554.127117][ T5712] megaworld 0003:07B5:0312.0008: unknown main item tag 0x0 [ 554.127144][ T5712] megaworld 0003:07B5:0312.0008: unknown main item tag 0x0 [ 554.127173][ T5712] megaworld 0003:07B5:0312.0008: unknown main item tag 0x0 [ 554.127201][ T5712] megaworld 0003:07B5:0312.0008: unknown main item tag 0x0 [ 554.127231][ T5712] megaworld 0003:07B5:0312.0008: unknown main item tag 0x0 [ 554.127261][ T5712] megaworld 0003:07B5:0312.0008: unknown main item tag 0x0 [ 554.127290][ T5712] megaworld 0003:07B5:0312.0008: unknown main item tag 0x0 [ 554.127440][ T5712] megaworld 0003:07B5:0312.0008: unknown main item tag 0x0 [ 554.128092][ T5712] megaworld 0003:07B5:0312.0008: item fetching failed at offset 80/81 [ 554.130470][ T5712] megaworld 0003:07B5:0312.0008: parse failed [ 554.130553][ T5712] megaworld 0003:07B5:0312.0008: probe with driver megaworld failed with error -22 [ 554.445964][ T5712] usb 6-1: USB disconnect, device number 17 [ 554.503332][ T5820] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 554.697167][ T5820] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 554.697200][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.697223][ T5820] usb 5-1: Product: syz [ 554.697240][ T5820] usb 5-1: Manufacturer: syz [ 554.697257][ T5820] usb 5-1: SerialNumber: syz [ 554.740398][ T5820] usb 5-1: config 0 descriptor?? [ 554.761365][ T5820] hub 5-1:0.0: bad descriptor, ignoring hub [ 554.761408][ T5820] hub 5-1:0.0: probe with driver hub failed with error -5 [ 554.953937][T13684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.957767][T13684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.990610][ T5820] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 554.991974][ T5820] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 554.992006][ T5820] dib0700: firmware download failed at 7 with -22 [ 555.056170][ T5820] usb 5-1: USB disconnect, device number 69 [ 555.438012][T13712] FAULT_INJECTION: forcing a failure. [ 555.438012][T13712] name failslab, interval 1, probability 0, space 0, times 0 [ 555.438051][T13712] CPU: 1 UID: 0 PID: 13712 Comm: syz.3.2708 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 555.438083][T13712] Tainted: [L]=SOFTLOCKUP [ 555.438092][T13712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.438106][T13712] Call Trace: [ 555.438115][T13712] [ 555.438126][T13712] dump_stack_lvl+0xe8/0x150 [ 555.438166][T13712] should_fail_ex+0x46b/0x600 [ 555.438206][T13712] should_failslab+0xa8/0x100 [ 555.438238][T13712] __kmalloc_noprof+0xdf/0x7b0 [ 555.438267][T13712] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 555.438301][T13712] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 555.438337][T13712] genl_family_rcv_msg_doit+0xd9/0x330 [ 555.438372][T13712] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 555.438408][T13712] ? apparmor_capable+0x126/0x170 [ 555.438440][T13712] ? bpf_lsm_capable+0x9/0x20 [ 555.438460][T13712] ? security_capable+0x7e/0x2c0 [ 555.438504][T13712] genl_rcv_msg+0x61c/0x7a0 [ 555.438537][T13712] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.438561][T13712] ? ref_tracker_free+0x673/0x820 [ 555.438592][T13712] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 555.438615][T13712] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 555.438649][T13712] ? __pfx_nl80211_post_doit+0x10/0x10 [ 555.438674][T13712] ? ____sys_sendmsg+0x55c/0x870 [ 555.438706][T13712] ? ___sys_sendmsg+0x2a5/0x360 [ 555.438736][T13712] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 555.438766][T13712] ? do_syscall_64+0x174/0x580 [ 555.438797][T13712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.438829][T13712] netlink_rcv_skb+0x232/0x4b0 [ 555.438863][T13712] ? __pfx_genl_rcv_msg+0x10/0x10 [ 555.438891][T13712] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 555.438939][T13712] ? netlink_deliver_tap+0x2e/0x1b0 [ 555.438974][T13712] ? netlink_deliver_tap+0x2e/0x1b0 [ 555.439013][T13712] genl_rcv+0x28/0x40 [ 555.439037][T13712] netlink_unicast+0x780/0x920 [ 555.439078][T13712] netlink_sendmsg+0x813/0xb40 [ 555.439123][T13712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.439168][T13712] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 555.439202][T13712] ? aa_sock_msg_perm+0x122/0x200 [ 555.439227][T13712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.439261][T13712] sock_sendmsg_nosec+0x13a/0x180 [ 555.439290][T13712] ____sys_sendmsg+0x55c/0x870 [ 555.439329][T13712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.439373][T13712] ? import_iovec+0x73/0xa0 [ 555.439402][T13712] ___sys_sendmsg+0x2a5/0x360 [ 555.439434][T13712] ? __lock_acquire+0x6b5/0x2d10 [ 555.439465][T13712] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.439533][T13712] ? __fget_files+0x2a/0x420 [ 555.439559][T13712] ? __fget_files+0x3a6/0x420 [ 555.439596][T13712] __x64_sys_sendmsg+0x1c3/0x2a0 [ 555.439633][T13712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 555.439678][T13712] ? __pfx_ksys_write+0x10/0x10 [ 555.439718][T13712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.439743][T13712] do_syscall_64+0x174/0x580 [ 555.439776][T13712] ? trace_irq_disable+0x3b/0x140 [ 555.439802][T13712] ? clear_bhb_loop+0x40/0x90 [ 555.439831][T13712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.439855][T13712] RIP: 0033:0x7f3afcc9ce59 [ 555.439876][T13712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.439897][T13712] RSP: 002b:00007f3afaeee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.439922][T13712] RAX: ffffffffffffffda RBX: 00007f3afcf15fa0 RCX: 00007f3afcc9ce59 [ 555.439940][T13712] RDX: 0000000000028000 RSI: 0000200000000080 RDI: 0000000000000003 [ 555.439955][T13712] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 555.439971][T13712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.439986][T13712] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 555.440020][T13712] [ 555.991148][T13718] FAULT_INJECTION: forcing a failure. [ 555.991148][T13718] name fail_futex, interval 1, probability 0, space 0, times 1 [ 555.991192][T13718] CPU: 0 UID: 0 PID: 13718 Comm: syz.4.2710 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 555.991222][T13718] Tainted: [L]=SOFTLOCKUP [ 555.991231][T13718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.991245][T13718] Call Trace: [ 555.991254][T13718] [ 555.991264][T13718] dump_stack_lvl+0xe8/0x150 [ 555.991297][T13718] should_fail_ex+0x46b/0x600 [ 555.991334][T13718] get_futex_key+0x8d1/0x1590 [ 555.991376][T13718] ? __pfx_get_futex_key+0x10/0x10 [ 555.991402][T13718] ? futex_private_hash+0x97/0x370 [ 555.991435][T13718] ? futex_private_hash+0x357/0x370 [ 555.991469][T13718] futex_wait_multiple_setup+0x103/0x6d0 [ 555.991497][T13718] ? __asan_memcpy+0x40/0x70 [ 555.991525][T13718] ? __pfx_futex_wake_mark+0x10/0x10 [ 555.991553][T13718] futex_wait_multiple+0xaf/0x3a0 [ 555.991588][T13718] __se_sys_futex_waitv+0x20d/0x2c0 [ 555.991624][T13718] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 555.991674][T13718] ? __x64_sys_futex_waitv+0x20/0xc0 [ 555.991707][T13718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.991733][T13718] do_syscall_64+0x174/0x580 [ 555.991766][T13718] ? trace_irq_disable+0x3b/0x140 [ 555.991791][T13718] ? clear_bhb_loop+0x40/0x90 [ 555.991819][T13718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.991846][T13718] RIP: 0033:0x7f081743ce59 [ 555.991875][T13718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.991895][T13718] RSP: 002b:00007f0815696028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 555.991919][T13718] RAX: ffffffffffffffda RBX: 00007f08176b5fa0 RCX: 00007f081743ce59 [ 555.991936][T13718] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000180 [ 555.991951][T13718] RBP: 00007f0815696090 R08: 0000000000000000 R09: 0000000000000000 [ 555.991966][T13718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.991980][T13718] R13: 00007f08176b6038 R14: 00007f08176b5fa0 R15: 00007fffe0ab3f18 [ 555.992015][T13718] [ 556.519493][T13733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2716'. [ 556.522717][T13733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2716'. [ 556.614422][ T60] Bluetooth: hci4: ACL packet too small [ 557.188464][T13758] FAULT_INJECTION: forcing a failure. [ 557.188464][T13758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.188511][T13758] CPU: 0 UID: 0 PID: 13758 Comm: syz.3.2726 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 557.188542][T13758] Tainted: [L]=SOFTLOCKUP [ 557.188552][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 557.188566][T13758] Call Trace: [ 557.188576][T13758] [ 557.188586][T13758] dump_stack_lvl+0xe8/0x150 [ 557.188620][T13758] should_fail_ex+0x46b/0x600 [ 557.188658][T13758] _copy_from_user+0x2d/0xb0 [ 557.188685][T13758] kstrtouint_from_user+0xd6/0x180 [ 557.188723][T13758] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 557.188783][T13758] proc_fail_nth_write+0x8e/0x210 [ 557.188811][T13758] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 557.188843][T13758] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 557.188871][T13758] vfs_write+0x2a3/0xba0 [ 557.188911][T13758] ? __pfx_vfs_write+0x10/0x10 [ 557.188944][T13758] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 557.188976][T13758] ? lockdep_hardirqs_on+0x7a/0x110 [ 557.189007][T13758] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 557.189040][T13758] ? mutex_lock_nested+0x152/0x1d0 [ 557.189063][T13758] ? fdget_pos+0x252/0x320 [ 557.189100][T13758] ksys_write+0x156/0x270 [ 557.189138][T13758] ? __pfx_ksys_write+0x10/0x10 [ 557.189179][T13758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.189204][T13758] do_syscall_64+0x174/0x580 [ 557.189235][T13758] ? trace_irq_disable+0x3b/0x140 [ 557.189261][T13758] ? clear_bhb_loop+0x40/0x90 [ 557.189290][T13758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.189312][T13758] RIP: 0033:0x7f3afcc5d68e [ 557.189333][T13758] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 557.189353][T13758] RSP: 002b:00007f3afaeedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 557.189376][T13758] RAX: ffffffffffffffda RBX: 00007f3afaeee6c0 RCX: 00007f3afcc5d68e [ 557.189394][T13758] RDX: 0000000000000001 RSI: 00007f3afaeee0a0 RDI: 0000000000000003 [ 557.189410][T13758] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 557.189425][T13758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.189439][T13758] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 557.189476][T13758] [ 557.598973][T13764] GUP no longer grows the stack in syz.5.2728 (13764): 200000007000-200000008000 (200000004000) [ 557.599017][T13764] CPU: 0 UID: 0 PID: 13764 Comm: syz.5.2728 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 557.599049][T13764] Tainted: [L]=SOFTLOCKUP [ 557.599059][T13764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 557.599073][T13764] Call Trace: [ 557.599083][T13764] [ 557.599094][T13764] dump_stack_lvl+0xe8/0x150 [ 557.599129][T13764] __get_user_pages+0x2273/0x2620 [ 557.599190][T13764] __gup_longterm_locked+0x3db/0x1630 [ 557.599239][T13764] ? __pfx_down_read+0x10/0x10 [ 557.599281][T13764] pin_user_pages+0x9d/0xd0 [ 557.599313][T13764] xdp_umem_pin_pages+0x11b/0x340 [ 557.599351][T13764] xdp_umem_create+0x631/0x8b0 [ 557.599401][T13764] xsk_setsockopt+0x860/0x990 [ 557.599433][T13764] ? __pfx_xsk_setsockopt+0x10/0x10 [ 557.599474][T13764] ? aa_sock_opt_perm+0x131/0x1f0 [ 557.599509][T13764] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 557.599539][T13764] ? __pfx_xsk_setsockopt+0x10/0x10 [ 557.599571][T13764] do_sock_setsockopt+0x17c/0x1b0 [ 557.599609][T13764] __x64_sys_setsockopt+0x143/0x1b0 [ 557.599646][T13764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.599672][T13764] do_syscall_64+0x174/0x580 [ 557.599706][T13764] ? trace_irq_disable+0x3b/0x140 [ 557.599733][T13764] ? clear_bhb_loop+0x40/0x90 [ 557.599763][T13764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.599787][T13764] RIP: 0033:0x7f3a0bdece59 [ 557.599809][T13764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.599829][T13764] RSP: 002b:00007f3a0a03e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 557.599854][T13764] RAX: ffffffffffffffda RBX: 00007f3a0c065fa0 RCX: 00007f3a0bdece59 [ 557.599872][T13764] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 557.599886][T13764] RBP: 00007f3a0be82d6f R08: 0000000000000020 R09: 0000000000000000 [ 557.599902][T13764] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 557.599917][T13764] R13: 00007f3a0c066038 R14: 00007f3a0c065fa0 R15: 00007ffe5cdcdf18 [ 557.599962][T13764] [ 559.494969][ T32] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 559.673867][ T32] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 559.673900][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.673922][ T32] usb 7-1: Product: syz [ 559.673938][ T32] usb 7-1: Manufacturer: syz [ 559.673954][ T32] usb 7-1: SerialNumber: syz [ 559.688956][ T32] usb 7-1: config 0 descriptor?? [ 559.782679][ T32] hub 7-1:0.0: bad descriptor, ignoring hub [ 559.782713][ T32] hub 7-1:0.0: probe with driver hub failed with error -5 [ 559.918098][T13814] FAULT_INJECTION: forcing a failure. [ 559.918098][T13814] name failslab, interval 1, probability 0, space 0, times 0 [ 559.918139][T13814] CPU: 0 UID: 0 PID: 13814 Comm: syz.3.2746 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 559.918170][T13814] Tainted: [L]=SOFTLOCKUP [ 559.918180][T13814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 559.918194][T13814] Call Trace: [ 559.918204][T13814] [ 559.918214][T13814] dump_stack_lvl+0xe8/0x150 [ 559.918249][T13814] should_fail_ex+0x46b/0x600 [ 559.918288][T13814] should_failslab+0xa8/0x100 [ 559.918320][T13814] __kvmalloc_node_noprof+0x170/0x8e0 [ 559.918351][T13814] ? io_alloc_cache_init+0x42/0x140 [ 559.918386][T13814] io_alloc_cache_init+0x42/0x140 [ 559.918419][T13814] io_ring_ctx_alloc+0x4e1/0xd20 [ 559.918462][T13814] io_uring_create+0x50/0x9a0 [ 559.918500][T13814] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 559.918532][T13814] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 559.918575][T13814] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 559.918625][T13814] ? __pfx_ksys_write+0x10/0x10 [ 559.918665][T13814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.918691][T13814] do_syscall_64+0x174/0x580 [ 559.918723][T13814] ? trace_irq_disable+0x3b/0x140 [ 559.918750][T13814] ? clear_bhb_loop+0x40/0x90 [ 559.918780][T13814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.918802][T13814] RIP: 0033:0x7f3afcc9ce59 [ 559.918823][T13814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.918844][T13814] RSP: 002b:00007f3afaeedee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 559.918870][T13814] RAX: ffffffffffffffda RBX: 0000200000000488 RCX: 00007f3afcc9ce59 [ 559.918890][T13814] RDX: 0000200000000508 RSI: 0000200000000488 RDI: 000000000000001c [ 559.918906][T13814] RBP: 0000200000000480 R08: 0000200000001540 R09: 0000000000000101 [ 559.918922][T13814] R10: 0000200000000510 R11: 0000000000000206 R12: 0000200000000508 [ 559.918939][T13814] R13: 0000200000000510 R14: 00007f3afaeedfd8 R15: 0000000000000000 [ 559.918974][T13814] [ 560.218962][T13800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.231479][T13800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.309964][ T32] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 560.342743][ T32] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 560.342781][ T32] dib0700: firmware download failed at 7 with -22 [ 560.456824][ T32] usb 7-1: USB disconnect, device number 2 [ 561.112783][T13824] netlink: 'syz.4.2748': attribute type 1 has an invalid length. [ 561.112807][T13824] netlink: 'syz.4.2748': attribute type 4 has an invalid length. [ 561.113059][T13824] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2748'. [ 561.114861][T13841] FAULT_INJECTION: forcing a failure. [ 561.114861][T13841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.114901][T13841] CPU: 1 UID: 0 PID: 13841 Comm: syz.3.2756 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 561.114938][T13841] Tainted: [L]=SOFTLOCKUP [ 561.114948][T13841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 561.114962][T13841] Call Trace: [ 561.114971][T13841] [ 561.114980][T13841] dump_stack_lvl+0xe8/0x150 [ 561.115013][T13841] should_fail_ex+0x46b/0x600 [ 561.115049][T13841] _copy_from_user+0x2d/0xb0 [ 561.115074][T13841] __copy_msghdr+0x3c5/0x5b0 [ 561.115113][T13841] ___sys_sendmsg+0x213/0x360 [ 561.115143][T13841] ? __lock_acquire+0x6b5/0x2d10 [ 561.115176][T13841] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.115214][T13841] ? kstrtouint+0x6e/0xe0 [ 561.115271][T13841] ? __fget_files+0x2a/0x420 [ 561.115301][T13841] ? __fget_files+0x3a6/0x420 [ 561.115337][T13841] __sys_sendmmsg+0x282/0x4e0 [ 561.115378][T13841] ? __pfx___sys_sendmmsg+0x10/0x10 [ 561.115420][T13841] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 561.115506][T13841] ? ksys_write+0x248/0x270 [ 561.115539][T13841] ? __pfx_ksys_write+0x10/0x10 [ 561.115578][T13841] __x64_sys_sendmmsg+0xa0/0xc0 [ 561.115610][T13841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.115634][T13841] do_syscall_64+0x174/0x580 [ 561.115665][T13841] ? trace_irq_disable+0x3b/0x140 [ 561.115691][T13841] ? clear_bhb_loop+0x40/0x90 [ 561.115718][T13841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.115740][T13841] RIP: 0033:0x7f3afcc9ce59 [ 561.115761][T13841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.115781][T13841] RSP: 002b:00007f3afaeee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 561.115804][T13841] RAX: ffffffffffffffda RBX: 00007f3afcf15fa0 RCX: 00007f3afcc9ce59 [ 561.115822][T13841] RDX: 0000000000000002 RSI: 0000200000001c80 RDI: 0000000000000003 [ 561.115837][T13841] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 561.115852][T13841] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.115867][T13841] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 561.115902][T13841] [ 561.578548][T13848] FAULT_INJECTION: forcing a failure. [ 561.578548][T13848] name failslab, interval 1, probability 0, space 0, times 0 [ 561.578578][T13848] CPU: 0 UID: 0 PID: 13848 Comm: syz.3.2758 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 561.578601][T13848] Tainted: [L]=SOFTLOCKUP [ 561.578608][T13848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 561.578618][T13848] Call Trace: [ 561.578625][T13848] [ 561.578632][T13848] dump_stack_lvl+0xe8/0x150 [ 561.578661][T13848] should_fail_ex+0x46b/0x600 [ 561.578688][T13848] should_failslab+0xa8/0x100 [ 561.578710][T13848] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 561.578730][T13848] ? __alloc_skb+0x1d0/0x7d0 [ 561.578749][T13848] ? lockdep_hardirqs_on+0x7a/0x110 [ 561.578777][T13848] __alloc_skb+0x1d0/0x7d0 [ 561.578797][T13848] ? netlink_ack_tlv_len+0x6c/0x210 [ 561.578824][T13848] netlink_ack+0x146/0xa50 [ 561.578845][T13848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.578862][T13848] ? ref_tracker_free+0x673/0x820 [ 561.578885][T13848] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 561.578901][T13848] ? __pfx_nl80211_post_doit+0x10/0x10 [ 561.578919][T13848] ? ____sys_sendmsg+0x55c/0x870 [ 561.578941][T13848] ? ___sys_sendmsg+0x2a5/0x360 [ 561.578963][T13848] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 561.578986][T13848] ? do_syscall_64+0x174/0x580 [ 561.579008][T13848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.579062][T13848] netlink_rcv_skb+0x2b6/0x4b0 [ 561.579097][T13848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.579125][T13848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.579173][T13848] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.579211][T13848] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.579238][T13848] genl_rcv+0x28/0x40 [ 561.579253][T13848] netlink_unicast+0x780/0x920 [ 561.579282][T13848] netlink_sendmsg+0x813/0xb40 [ 561.579312][T13848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.579338][T13848] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 561.579360][T13848] ? aa_sock_msg_perm+0x122/0x200 [ 561.579378][T13848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.579403][T13848] sock_sendmsg_nosec+0x13a/0x180 [ 561.579423][T13848] ____sys_sendmsg+0x55c/0x870 [ 561.579452][T13848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.579482][T13848] ? import_iovec+0x73/0xa0 [ 561.579502][T13848] ___sys_sendmsg+0x2a5/0x360 [ 561.579526][T13848] ? __lock_acquire+0x6b5/0x2d10 [ 561.579549][T13848] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.579599][T13848] ? __fget_files+0x2a/0x420 [ 561.579617][T13848] ? __fget_files+0x3a6/0x420 [ 561.579648][T13848] __x64_sys_sendmsg+0x1c3/0x2a0 [ 561.579675][T13848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.579707][T13848] ? __pfx_ksys_write+0x10/0x10 [ 561.579735][T13848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.579753][T13848] do_syscall_64+0x174/0x580 [ 561.579775][T13848] ? trace_irq_disable+0x3b/0x140 [ 561.579793][T13848] ? clear_bhb_loop+0x40/0x90 [ 561.579813][T13848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.579830][T13848] RIP: 0033:0x7f3afcc9ce59 [ 561.579845][T13848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.579859][T13848] RSP: 002b:00007f3afaeee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.579876][T13848] RAX: ffffffffffffffda RBX: 00007f3afcf15fa0 RCX: 00007f3afcc9ce59 [ 561.579889][T13848] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 561.579899][T13848] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 561.579909][T13848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.579919][T13848] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 561.579943][T13848] [ 562.485943][T13864] FAULT_INJECTION: forcing a failure. [ 562.485943][T13864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.485982][T13864] CPU: 0 UID: 0 PID: 13864 Comm: syz.4.2765 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 562.486012][T13864] Tainted: [L]=SOFTLOCKUP [ 562.486025][T13864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 562.486039][T13864] Call Trace: [ 562.486049][T13864] [ 562.486058][T13864] dump_stack_lvl+0xe8/0x150 [ 562.486092][T13864] should_fail_ex+0x46b/0x600 [ 562.486129][T13864] _copy_to_user+0x31/0xb0 [ 562.486157][T13864] simple_read_from_buffer+0xe1/0x170 [ 562.486191][T13864] proc_fail_nth_read+0x1be/0x230 [ 562.486221][T13864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.486249][T13864] ? rw_verify_area+0x2ac/0x4e0 [ 562.486278][T13864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 562.486317][T13864] vfs_read+0x212/0xa80 [ 562.486355][T13864] ? __pfx_vfs_read+0x10/0x10 [ 562.486388][T13864] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 562.486420][T13864] ? lockdep_hardirqs_on+0x7a/0x110 [ 562.486454][T13864] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 562.486487][T13864] ? mutex_lock_nested+0x152/0x1d0 [ 562.486511][T13864] ? fdget_pos+0x252/0x320 [ 562.486546][T13864] ksys_read+0x156/0x270 [ 562.486579][T13864] ? __pfx_ksys_read+0x10/0x10 [ 562.486619][T13864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.486645][T13864] do_syscall_64+0x174/0x580 [ 562.486677][T13864] ? trace_irq_disable+0x3b/0x140 [ 562.486703][T13864] ? clear_bhb_loop+0x40/0x90 [ 562.486731][T13864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.486754][T13864] RIP: 0033:0x7f08173fd68e [ 562.486775][T13864] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 562.486796][T13864] RSP: 002b:00007f0815695fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 562.486821][T13864] RAX: ffffffffffffffda RBX: 00007f08156966c0 RCX: 00007f08173fd68e [ 562.486838][T13864] RDX: 000000000000000f RSI: 00007f08156960a0 RDI: 0000000000000004 [ 562.486852][T13864] RBP: 00007f0815696090 R08: 0000000000000000 R09: 0000000000000000 [ 562.486866][T13864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.486879][T13864] R13: 00007f08176b6038 R14: 00007f08176b5fa0 R15: 00007fffe0ab3f18 [ 562.486917][T13864] [ 562.785998][ T5753] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 562.911844][ T64] block nbd1: Possible stuck request ffff888027807000: control (read@0,4096B). Runtime 120 seconds [ 562.952172][ T5753] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 562.952207][ T5753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.952229][ T5753] usb 6-1: Product: syz [ 562.952245][ T5753] usb 6-1: Manufacturer: syz [ 562.952262][ T5753] usb 6-1: SerialNumber: syz [ 563.000179][ T5753] usb 6-1: config 0 descriptor?? [ 563.017982][ T5753] hub 6-1:0.0: bad descriptor, ignoring hub [ 563.018016][ T5753] hub 6-1:0.0: probe with driver hub failed with error -5 [ 563.249762][T13860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.251646][T13860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.272762][ T5753] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 563.290455][ T5753] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 563.291209][ T5753] dib0700: firmware download failed at 7 with -22 [ 563.341215][ T5753] usb 6-1: USB disconnect, device number 18 [ 563.518325][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.518418][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.673641][T13890] fuse: Bad value for 'fd' [ 564.463921][T13919] FAULT_INJECTION: forcing a failure. [ 564.463921][T13919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.463962][T13919] CPU: 0 UID: 0 PID: 13919 Comm: syz.3.2790 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 564.463992][T13919] Tainted: [L]=SOFTLOCKUP [ 564.464001][T13919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 564.464016][T13919] Call Trace: [ 564.464026][T13919] [ 564.464035][T13919] dump_stack_lvl+0xe8/0x150 [ 564.464068][T13919] should_fail_ex+0x46b/0x600 [ 564.464112][T13919] _copy_to_user+0x31/0xb0 [ 564.464139][T13919] simple_read_from_buffer+0xe1/0x170 [ 564.464174][T13919] proc_fail_nth_read+0x1be/0x230 [ 564.464213][T13919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.464243][T13919] ? rw_verify_area+0x2ac/0x4e0 [ 564.464274][T13919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.464302][T13919] vfs_read+0x212/0xa80 [ 564.464341][T13919] ? __pfx_vfs_read+0x10/0x10 [ 564.464374][T13919] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 564.464407][T13919] ? lockdep_hardirqs_on+0x7a/0x110 [ 564.464446][T13919] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 564.464478][T13919] ? mutex_lock_nested+0x152/0x1d0 [ 564.464502][T13919] ? fdget_pos+0x252/0x320 [ 564.464538][T13919] ksys_read+0x156/0x270 [ 564.464573][T13919] ? __pfx_ksys_read+0x10/0x10 [ 564.464609][T13919] ? __secure_computing+0xe1/0x2a0 [ 564.464639][T13919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.464663][T13919] do_syscall_64+0x174/0x580 [ 564.464694][T13919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.464718][T13919] ? clear_bhb_loop+0x40/0x90 [ 564.464746][T13919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.464769][T13919] RIP: 0033:0x7f3afcc5d68e [ 564.464789][T13919] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 564.464809][T13919] RSP: 002b:00007f3afaeedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.464832][T13919] RAX: ffffffffffffffda RBX: 00007f3afaeee6c0 RCX: 00007f3afcc5d68e [ 564.464849][T13919] RDX: 000000000000000f RSI: 00007f3afaeee0a0 RDI: 0000000000000007 [ 564.464864][T13919] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 564.464878][T13919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.464892][T13919] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 564.464928][T13919] [ 565.498639][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2803'. [ 565.537090][ T37] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 565.699212][ T37] usb 7-1: Using ep0 maxpacket: 32 [ 565.701912][ T37] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.701947][ T37] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 565.701971][ T37] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 565.701995][ T37] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 565.702022][ T37] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 565.702045][ T37] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 565.702071][ T37] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 565.704999][ T37] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 565.705028][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 565.705050][ T37] usb 7-1: SerialNumber: syz [ 565.831391][ T37] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 566.031953][ T37] usb 7-1: USB disconnect, device number 3 [ 566.317506][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 566.477523][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 566.481235][ T10] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 566.481270][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 566.481320][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 566.481345][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.533058][ T10] usb 4-1: config 0 descriptor?? [ 566.949504][ T37] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 566.951919][ T10] hid_parser_main: 52 callbacks suppressed [ 566.951943][ T10] corsair-psu 0003:1B1C:1C09.0009: unknown main item tag 0x0 [ 566.951977][ T10] corsair-psu 0003:1B1C:1C09.0009: unknown main item tag 0x0 [ 566.952007][ T10] corsair-psu 0003:1B1C:1C09.0009: unknown main item tag 0x0 [ 566.952035][ T10] corsair-psu 0003:1B1C:1C09.0009: unknown main item tag 0x0 [ 566.952063][ T10] corsair-psu 0003:1B1C:1C09.0009: unknown main item tag 0x0 [ 567.041454][ T10] corsair-psu 0003:1B1C:1C09.0009: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 567.116937][ T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 567.116971][ T37] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 567.116998][ T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 567.117021][ T37] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 567.117063][ T37] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 567.117090][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.183399][ T37] usb 7-1: config 0 descriptor?? [ 567.359358][ T10] corsair-psu 0003:1B1C:1C09.0009: unable to initialize device (-71) [ 567.379979][ T10] corsair-psu 0003:1B1C:1C09.0009: probe with driver corsair-psu failed with error -71 [ 567.399085][ T10] usb 4-1: USB disconnect, device number 66 [ 567.501783][T13972] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2812'. [ 567.504753][ T37] hdpvr 7-1:0.0: unexpected answer of status request, len -71 [ 567.504777][ T37] hdpvr 7-1:0.0: device init failed [ 567.504875][ T37] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 567.558017][ T37] usb 7-1: USB disconnect, device number 4 [ 568.076378][T13987] netlink: 'syz.3.2816': attribute type 21 has an invalid length. [ 568.076419][T13987] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2816'. [ 568.076525][T13987] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2816'. [ 568.338449][ T32] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 568.511422][ T32] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 568.511457][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.511479][ T32] usb 4-1: Product: syz [ 568.511495][ T32] usb 4-1: Manufacturer: syz [ 568.511512][ T32] usb 4-1: SerialNumber: syz [ 568.765138][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 568.765203][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 568.765228][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 568.821256][ T32] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 569.174453][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 569.174473][ T38] audit: type=1326 audit(1779988024.572:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.4.2822" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f081743ce59 code=0x0 [ 569.514146][T14021] kAFS: No cell specified [ 569.525215][T14021] kAFS: No cell specified [ 569.584044][ T32] usb 4-1: USB disconnect, device number 67 [ 570.749338][ T5820] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 570.907681][ T5820] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 570.907715][ T5820] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 570.907743][ T5820] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 570.921927][ T5820] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 570.923944][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.924019][ T5820] usb 6-1: Product: syz [ 570.924114][ T5820] usb 6-1: Manufacturer: syz [ 570.924158][ T5820] usb 6-1: SerialNumber: syz [ 570.997501][ T5820] usb 6-1: config 0 descriptor?? [ 571.007183][T14056] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 571.007332][T14056] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 571.027532][ T5820] usb 6-1: ucan: probing device on interface #0 [ 571.417326][ T5820] ucan 6-1:0.0: probe with driver ucan failed with error -71 [ 571.462132][ T5820] usb 6-1: USB disconnect, device number 19 [ 572.010798][ T5820] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 572.012541][T14098] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2855'. [ 572.041647][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2855'. [ 572.186158][ T5820] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 572.186191][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 572.186214][ T5820] usb 5-1: Product: syz [ 572.186230][ T5820] usb 5-1: SerialNumber: syz [ 572.258154][ T5820] usb 5-1: config 0 descriptor?? [ 572.372664][T14107] netlink: 'syz.3.2858': attribute type 21 has an invalid length. [ 572.372688][T14107] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2858'. [ 572.404689][ T37] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 572.531142][ T5820] hso 5-1:0.0: Failed to find BULK eps [ 572.573599][ T37] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 572.573630][ T37] usb 7-1: config 0 has no interface number 0 [ 572.573675][ T37] usb 7-1: config 0 interface 41 has no altsetting 0 [ 572.576376][ T37] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 572.576408][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.576432][ T37] usb 7-1: Product: syz [ 572.576443][ T37] usb 7-1: Manufacturer: syz [ 572.576455][ T37] usb 7-1: SerialNumber: syz [ 572.626263][ T37] usb 7-1: config 0 descriptor?? [ 573.259133][ T37] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 573.306891][ T37] usb 7-1: USB disconnect, device number 5 [ 574.561162][ T5820] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 574.617087][ T38] audit: type=1326 audit(1779988030.010:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.3.2866" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afcc9ce59 code=0x7ffc0000 [ 574.617689][ T38] audit: type=1326 audit(1779988030.010:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.3.2866" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afcc9ce59 code=0x7ffc0000 [ 574.618068][ T38] audit: type=1326 audit(1779988030.010:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.3.2866" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f3afcc9ce59 code=0x7ffc0000 [ 574.676828][T14133] FAULT_INJECTION: forcing a failure. [ 574.676828][T14133] name failslab, interval 1, probability 0, space 0, times 0 [ 574.676927][T14133] CPU: 1 UID: 0 PID: 14133 Comm: syz.3.2866 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 574.677013][T14133] Tainted: [L]=SOFTLOCKUP [ 574.677035][T14133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 574.677078][T14133] Call Trace: [ 574.677101][T14133] [ 574.677124][T14133] dump_stack_lvl+0xe8/0x150 [ 574.677210][T14133] should_fail_ex+0x46b/0x600 [ 574.677322][T14133] should_failslab+0xa8/0x100 [ 574.677408][T14133] __kmalloc_cache_noprof+0x84/0x690 [ 574.677494][T14133] ? __vmalloc_noprof+0xd2/0x120 [ 574.677532][T14133] ? bpf_prog_alloc_no_stats+0xdb/0x4f0 [ 574.677600][T14133] bpf_prog_alloc_no_stats+0xdb/0x4f0 [ 574.677715][T14133] bpf_prog_alloc+0x3c/0x1a0 [ 574.677792][T14133] bpf_prog_create_from_user+0xa7/0x440 [ 574.677865][T14133] ? __pfx_seccomp_check_filter+0x10/0x10 [ 574.677959][T14133] do_seccomp+0x776/0xd30 [ 574.678054][T14133] ? __pfx_do_seccomp+0x10/0x10 [ 574.678131][T14133] ? ksys_write+0x248/0x270 [ 574.678216][T14133] ? __pfx_ksys_write+0x10/0x10 [ 574.678312][T14133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.678385][T14133] do_syscall_64+0x174/0x580 [ 574.678470][T14133] ? trace_irq_disable+0x3b/0x140 [ 574.678535][T14133] ? clear_bhb_loop+0x40/0x90 [ 574.678609][T14133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.678665][T14133] RIP: 0033:0x7f3afcc9ce59 [ 574.678720][T14133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.678773][T14133] RSP: 002b:00007f3afaecd028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 574.678838][T14133] RAX: ffffffffffffffda RBX: 00007f3afcf16090 RCX: 00007f3afcc9ce59 [ 574.678882][T14133] RDX: 0000200000000100 RSI: 0000000000000007 RDI: 0000000000000001 [ 574.678925][T14133] RBP: 00007f3afaecd090 R08: 0000000000000000 R09: 0000000000000000 [ 574.678979][T14133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 574.679014][T14133] R13: 00007f3afcf16128 R14: 00007f3afcf16090 R15: 00007ffeca55b7b8 [ 574.679090][T14133] [ 574.929709][ T5820] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 574.929753][ T5820] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 574.929771][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.998322][ T5820] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 575.026248][ T5699] usb 5-1: USB disconnect, device number 70 [ 575.151917][T14135] overlayfs: failed to resolve 'hash': -2 [ 575.567419][T14153] FAULT_INJECTION: forcing a failure. [ 575.567419][T14153] name failslab, interval 1, probability 0, space 0, times 0 [ 575.567547][T14153] CPU: 1 UID: 0 PID: 14153 Comm: syz.3.2872 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 575.567580][T14153] Tainted: [L]=SOFTLOCKUP [ 575.567589][T14153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.567604][T14153] Call Trace: [ 575.567613][T14153] [ 575.567624][T14153] dump_stack_lvl+0xe8/0x150 [ 575.567657][T14153] should_fail_ex+0x46b/0x600 [ 575.567694][T14153] should_failslab+0xa8/0x100 [ 575.567725][T14153] __kmalloc_noprof+0xdf/0x7b0 [ 575.567751][T14153] ? kfree+0x4d/0x6c0 [ 575.567771][T14153] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 575.567803][T14153] tomoyo_realpath_from_path+0xe3/0x5d0 [ 575.567833][T14153] ? tomoyo_domain+0xd7/0x130 [ 575.567866][T14153] ? tomoyo_path_number_perm+0x219/0x630 [ 575.567902][T14153] tomoyo_path_number_perm+0x246/0x630 [ 575.567940][T14153] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 575.567973][T14153] ? __lock_acquire+0x6b5/0x2d10 [ 575.568002][T14153] ? do_raw_spin_lock+0x12b/0x2f0 [ 575.568057][T14153] ? __fget_files+0x2a/0x420 [ 575.568086][T14153] ? __fget_files+0x2a/0x420 [ 575.568110][T14153] ? __fget_files+0x3a6/0x420 [ 575.568135][T14153] ? __fget_files+0x2a/0x420 [ 575.568164][T14153] security_file_ioctl+0xc3/0x2a0 [ 575.568209][T14153] __se_sys_ioctl+0x47/0x170 [ 575.568243][T14153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.568270][T14153] do_syscall_64+0x174/0x580 [ 575.568308][T14153] ? trace_irq_disable+0x3b/0x140 [ 575.568334][T14153] ? clear_bhb_loop+0x40/0x90 [ 575.568364][T14153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.568387][T14153] RIP: 0033:0x7f3afcc9ce59 [ 575.568408][T14153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.568429][T14153] RSP: 002b:00007f3afaeee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.568453][T14153] RAX: ffffffffffffffda RBX: 00007f3afcf15fa0 RCX: 00007f3afcc9ce59 [ 575.568470][T14153] RDX: 00002000000001c0 RSI: 00000000c02c563a RDI: 0000000000000003 [ 575.568484][T14153] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 575.568499][T14153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.568513][T14153] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 575.568548][T14153] [ 575.568628][T14153] ERROR: Out of memory at tomoyo_realpath_from_path. [ 575.894847][T14158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.927680][T14158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.186446][ T5820] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 576.186475][ T5820] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 576.214987][ T5820] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 576.215010][ T5820] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 576.426424][T14174] FAULT_INJECTION: forcing a failure. [ 576.426424][T14174] name failslab, interval 1, probability 0, space 0, times 0 [ 576.426464][T14174] CPU: 0 UID: 0 PID: 14174 Comm: syz.3.2883 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 576.426495][T14174] Tainted: [L]=SOFTLOCKUP [ 576.426503][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.426518][T14174] Call Trace: [ 576.426527][T14174] [ 576.426536][T14174] dump_stack_lvl+0xe8/0x150 [ 576.426567][T14174] should_fail_ex+0x46b/0x600 [ 576.426604][T14174] should_failslab+0xa8/0x100 [ 576.426635][T14174] __kmalloc_noprof+0xdf/0x7b0 [ 576.426663][T14174] ? ethnl_default_notify+0x1f5/0xbf0 [ 576.426692][T14174] ethnl_default_notify+0x1f5/0xbf0 [ 576.426725][T14174] ? __pfx_ethnl_default_notify+0x10/0x10 [ 576.426761][T14174] ? kmemdup_noprof+0x55/0x70 [ 576.426801][T14174] ? rtnl_is_locked+0x9/0x20 [ 576.426839][T14174] ethnl_default_set_doit+0x6ad/0xae0 [ 576.426876][T14174] genl_family_rcv_msg_doit+0x22a/0x330 [ 576.426904][T14174] ? __asan_memcpy+0x40/0x70 [ 576.426931][T14174] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 576.426973][T14174] ? bpf_lsm_capable+0x9/0x20 [ 576.426992][T14174] ? security_capable+0x7e/0x2c0 [ 576.427040][T14174] genl_rcv_msg+0x61c/0x7a0 [ 576.427073][T14174] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.427097][T14174] ? ref_tracker_free+0x673/0x820 [ 576.427130][T14174] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 576.427155][T14174] ? ____sys_sendmsg+0x55c/0x870 [ 576.427186][T14174] ? ___sys_sendmsg+0x2a5/0x360 [ 576.427216][T14174] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 576.427248][T14174] ? do_syscall_64+0x174/0x580 [ 576.427278][T14174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.427311][T14174] netlink_rcv_skb+0x232/0x4b0 [ 576.427346][T14174] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.427380][T14174] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 576.427427][T14174] ? netlink_deliver_tap+0x2e/0x1b0 [ 576.427460][T14174] ? netlink_deliver_tap+0x2e/0x1b0 [ 576.427497][T14174] genl_rcv+0x28/0x40 [ 576.427520][T14174] netlink_unicast+0x780/0x920 [ 576.427563][T14174] netlink_sendmsg+0x813/0xb40 [ 576.427608][T14174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.427644][T14174] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 576.427677][T14174] ? aa_sock_msg_perm+0x122/0x200 [ 576.427702][T14174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.427737][T14174] sock_sendmsg_nosec+0x13a/0x180 [ 576.427765][T14174] ____sys_sendmsg+0x55c/0x870 [ 576.427805][T14174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.427848][T14174] ? import_iovec+0x73/0xa0 [ 576.427876][T14174] ___sys_sendmsg+0x2a5/0x360 [ 576.427909][T14174] ? __lock_acquire+0x6b5/0x2d10 [ 576.427942][T14174] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.428015][T14174] ? __fget_files+0x2a/0x420 [ 576.428039][T14174] ? __fget_files+0x3a6/0x420 [ 576.428076][T14174] __x64_sys_sendmsg+0x1c3/0x2a0 [ 576.428112][T14174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 576.428159][T14174] ? __pfx_ksys_write+0x10/0x10 [ 576.428199][T14174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.428224][T14174] do_syscall_64+0x174/0x580 [ 576.428255][T14174] ? trace_irq_disable+0x3b/0x140 [ 576.428280][T14174] ? clear_bhb_loop+0x40/0x90 [ 576.428308][T14174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.428331][T14174] RIP: 0033:0x7f3afcc9ce59 [ 576.428351][T14174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.428369][T14174] RSP: 002b:00007f3afaeee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.428399][T14174] RAX: ffffffffffffffda RBX: 00007f3afcf15fa0 RCX: 00007f3afcc9ce59 [ 576.428415][T14174] RDX: 00000000040040c0 RSI: 0000200000000200 RDI: 0000000000000003 [ 576.428431][T14174] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 576.428446][T14174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.428460][T14174] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 576.428498][T14174] [ 577.356465][ T37] usb 7-1: USB disconnect, device number 6 [ 577.483514][ T824] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 577.625383][ T824] usb 6-1: device descriptor read/64, error -71 [ 577.785023][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2896'. [ 577.863664][ T824] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 577.994371][ T824] usb 6-1: device descriptor read/64, error -71 [ 578.043520][ T5794] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 578.104081][ T824] usb usb6-port1: attempt power cycle [ 578.153403][T14203] FAULT_INJECTION: forcing a failure. [ 578.153403][T14203] name failslab, interval 1, probability 0, space 0, times 0 [ 578.153443][T14203] CPU: 0 UID: 0 PID: 14203 Comm: syz.6.2895 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 578.153474][T14203] Tainted: [L]=SOFTLOCKUP [ 578.153483][T14203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 578.153497][T14203] Call Trace: [ 578.153506][T14203] [ 578.153516][T14203] dump_stack_lvl+0xe8/0x150 [ 578.153546][T14203] should_fail_ex+0x46b/0x600 [ 578.153583][T14203] should_failslab+0xa8/0x100 [ 578.153613][T14203] kmem_cache_alloc_noprof+0x87/0x680 [ 578.153639][T14203] ? rcu_is_watching+0x15/0xb0 [ 578.153669][T14203] ? security_file_alloc+0x34/0x310 [ 578.153711][T14203] security_file_alloc+0x34/0x310 [ 578.153748][T14203] init_file+0x96/0x2d0 [ 578.153776][T14203] alloc_empty_file+0x74/0x1d0 [ 578.153802][T14203] path_openat+0x11b/0x3960 [ 578.153842][T14203] ? try_to_take_rt_mutex+0x840/0xb00 [ 578.153870][T14203] ? arch_stack_walk+0xfb/0x150 [ 578.153912][T14203] ? __lock_acquire+0x6b5/0x2d10 [ 578.153956][T14203] ? __pfx_path_openat+0x10/0x10 [ 578.153991][T14203] ? kasan_save_track+0x4f/0x80 [ 578.154014][T14203] ? kasan_save_track+0x3e/0x80 [ 578.154036][T14203] ? __kasan_slab_alloc+0x6c/0x80 [ 578.154075][T14203] ? do_raw_spin_lock+0x12b/0x2f0 [ 578.154107][T14203] do_file_open+0x23e/0x4a0 [ 578.154136][T14203] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 578.154180][T14203] ? __pfx_do_file_open+0x10/0x10 [ 578.154209][T14203] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 578.154257][T14203] ? alloc_fd+0x679/0x6f0 [ 578.154294][T14203] do_sys_openat2+0x115/0x200 [ 578.154322][T14203] ? __pfx_do_sys_openat2+0x10/0x10 [ 578.154350][T14203] ? ksys_write+0x202/0x270 [ 578.154382][T14203] ? __pfx_ksys_write+0x10/0x10 [ 578.154419][T14203] __x64_sys_openat+0x138/0x170 [ 578.154447][T14203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.154473][T14203] do_syscall_64+0x174/0x580 [ 578.154504][T14203] ? trace_irq_disable+0x3b/0x140 [ 578.154528][T14203] ? clear_bhb_loop+0x40/0x90 [ 578.154555][T14203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.154578][T14203] RIP: 0033:0x7f8ae315d68e [ 578.154598][T14203] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 578.154618][T14203] RSP: 002b:00007f8ae13edf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 578.154642][T14203] RAX: ffffffffffffffda RBX: 00007f8ae13ee6c0 RCX: 00007f8ae315d68e [ 578.154660][T14203] RDX: 0000000000000000 RSI: 00007f8ae32324aa RDI: ffffffffffffff9c [ 578.154676][T14203] RBP: 00007f8ae13ee090 R08: 0000000000000000 R09: 0000000000000000 [ 578.154691][T14203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.154705][T14203] R13: 00007f8ae3416038 R14: 00007f8ae3415fa0 R15: 00007ffef58ebab8 [ 578.154741][T14203] [ 578.192345][ T5794] usb 4-1: Using ep0 maxpacket: 32 [ 578.284783][ T5794] usb 4-1: unable to get BOS descriptor or descriptor too short [ 578.309556][ T5794] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 578.309593][ T5794] usb 4-1: can't read configurations, error -71 [ 578.503860][ T824] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 578.523878][ T824] usb 6-1: device descriptor read/8, error -71 [ 578.774881][ T824] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 578.811031][ T824] usb 6-1: device descriptor read/8, error -71 [ 578.956684][ T824] usb usb6-port1: unable to enumerate USB device [ 579.237722][T14225] FAULT_INJECTION: forcing a failure. [ 579.237722][T14225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.237757][T14225] CPU: 0 UID: 0 PID: 14225 Comm: syz.3.2901 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 579.237783][T14225] Tainted: [L]=SOFTLOCKUP [ 579.237791][T14225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 579.237802][T14225] Call Trace: [ 579.237810][T14225] [ 579.237818][T14225] dump_stack_lvl+0xe8/0x150 [ 579.237846][T14225] should_fail_ex+0x46b/0x600 [ 579.237889][T14225] _copy_from_user+0x2d/0xb0 [ 579.237910][T14225] input_event_from_user+0xb1/0x290 [ 579.237938][T14225] ? __pfx_input_event_from_user+0x10/0x10 [ 579.237970][T14225] ? rt_spin_unlock+0x160/0x200 [ 579.237994][T14225] evdev_write+0x2ca/0x4c0 [ 579.238018][T14225] ? __lock_acquire+0x6b5/0x2d10 [ 579.238044][T14225] ? __pfx_evdev_write+0x10/0x10 [ 579.238074][T14225] ? rw_verify_area+0x25b/0x4e0 [ 579.238098][T14225] ? __pfx_evdev_write+0x10/0x10 [ 579.238126][T14225] vfs_write+0x2a3/0xba0 [ 579.238158][T14225] ? __pfx_vfs_write+0x10/0x10 [ 579.238184][T14225] ? __fget_files+0x2a/0x420 [ 579.238208][T14225] ? __fget_files+0x2a/0x420 [ 579.238227][T14225] ? __fget_files+0x3a6/0x420 [ 579.238246][T14225] ? __fget_files+0x2a/0x420 [ 579.238275][T14225] ksys_write+0x156/0x270 [ 579.238302][T14225] ? __pfx_ksys_write+0x10/0x10 [ 579.238340][T14225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.238360][T14225] do_syscall_64+0x174/0x580 [ 579.238391][T14225] ? trace_irq_disable+0x3b/0x140 [ 579.238412][T14225] ? clear_bhb_loop+0x40/0x90 [ 579.238434][T14225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.238452][T14225] RIP: 0033:0x7f3afcc9ce59 [ 579.238470][T14225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.238485][T14225] RSP: 002b:00007f3afaeee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 579.238504][T14225] RAX: ffffffffffffffda RBX: 00007f3afcf15fa0 RCX: 00007f3afcc9ce59 [ 579.238518][T14225] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 579.238530][T14225] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 579.238542][T14225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.238553][T14225] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 579.238581][T14225] [ 579.303330][ T5699] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 579.462899][ T5699] usb 7-1: Using ep0 maxpacket: 32 [ 579.468800][ T5699] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 579.468829][ T5699] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.468858][ T5699] usb 7-1: config 0 has no interface number 0 [ 579.468906][ T5699] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 579.468933][ T5699] usb 7-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.550654][ T5699] usb 7-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 579.550685][ T5699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.550707][ T5699] usb 7-1: Product: syz [ 579.550723][ T5699] usb 7-1: Manufacturer: syz [ 579.550739][ T5699] usb 7-1: SerialNumber: syz [ 579.674903][ T5699] usb 7-1: config 0 descriptor?? [ 579.695511][ T5699] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 579.891739][ T5794] usb 7-1: USB disconnect, device number 7 [ 580.011271][T14231] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 580.018575][ T5712] IPVS: starting estimator thread 0... [ 580.192264][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.235163][T14234] IPVS: using max 7 ests per chain, 16800 per kthread [ 580.672481][T14248] raw_sendmsg: syz.4.2910 forgot to set AF_INET. Fix it! [ 580.724225][ T5794] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 580.853593][ T5794] usb 7-1: device descriptor read/64, error -71 [ 580.943628][ T5820] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 581.047030][T13117] Bluetooth: hci2: command 0x0406 tx timeout [ 581.126032][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 581.141038][ T5820] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 581.141070][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.141092][ T5820] usb 4-1: Product: syz [ 581.141108][ T5820] usb 4-1: Manufacturer: syz [ 581.141123][ T5820] usb 4-1: SerialNumber: syz [ 581.156952][ T5794] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 581.187255][ T5820] usb 4-1: config 0 descriptor?? [ 581.199597][ T5820] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 581.375379][ T5794] usb 7-1: device descriptor read/64, error -71 [ 581.447856][T14245] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.484306][ T5794] usb usb7-port1: attempt power cycle [ 581.818609][T14250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.819822][T14250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.849786][T14250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.854592][ T5794] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 581.864820][T14250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.914740][ T5820] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 581.934611][ T5820] usb 4-1: USB disconnect, device number 70 [ 582.066073][ T5794] usb 7-1: device not accepting address 10, error -71 [ 582.116942][T14245] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.150734][T14261] binder: 14260:14261 ioctl 4601 200000000080 returned -22 [ 582.151203][T14261] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2914'. [ 582.565523][T14245] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.135420][T14245] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.426414][T14291] FAULT_INJECTION: forcing a failure. [ 583.426414][T14291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.426443][T14291] CPU: 0 UID: 0 PID: 14291 Comm: syz.3.2927 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 583.426466][T14291] Tainted: [L]=SOFTLOCKUP [ 583.426476][T14291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.426487][T14291] Call Trace: [ 583.426493][T14291] [ 583.426500][T14291] dump_stack_lvl+0xe8/0x150 [ 583.426524][T14291] should_fail_ex+0x46b/0x600 [ 583.426557][T14291] _copy_to_user+0x31/0xb0 [ 583.426576][T14291] simple_read_from_buffer+0xe1/0x170 [ 583.426600][T14291] proc_fail_nth_read+0x1be/0x230 [ 583.426621][T14291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.426643][T14291] ? rw_verify_area+0x2ac/0x4e0 [ 583.426664][T14291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.426684][T14291] vfs_read+0x212/0xa80 [ 583.426711][T14291] ? __pfx_vfs_read+0x10/0x10 [ 583.426735][T14291] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 583.426759][T14291] ? lockdep_hardirqs_on+0x7a/0x110 [ 583.426782][T14291] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 583.426808][T14291] ? mutex_lock_nested+0x152/0x1d0 [ 583.426824][T14291] ? fdget_pos+0x252/0x320 [ 583.426850][T14291] ksys_read+0x156/0x270 [ 583.426873][T14291] ? __pfx_ksys_read+0x10/0x10 [ 583.426901][T14291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.426919][T14291] do_syscall_64+0x174/0x580 [ 583.426942][T14291] ? trace_irq_disable+0x3b/0x140 [ 583.426960][T14291] ? clear_bhb_loop+0x40/0x90 [ 583.426980][T14291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.426996][T14291] RIP: 0033:0x7f3afcc5d68e [ 583.427011][T14291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 583.427026][T14291] RSP: 002b:00007f3afaeedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 583.427043][T14291] RAX: ffffffffffffffda RBX: 00007f3afaeee6c0 RCX: 00007f3afcc5d68e [ 583.427055][T14291] RDX: 000000000000000f RSI: 00007f3afaeee0a0 RDI: 0000000000000005 [ 583.427066][T14291] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 583.427076][T14291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 583.427086][T14291] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 583.427111][T14291] [ 584.284141][T14304] FAULT_INJECTION: forcing a failure. [ 584.284141][T14304] name failslab, interval 1, probability 0, space 0, times 0 [ 584.284196][T14304] CPU: 1 UID: 0 PID: 14304 Comm: syz.3.2932 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 584.284226][T14304] Tainted: [L]=SOFTLOCKUP [ 584.284234][T14304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 584.284248][T14304] Call Trace: [ 584.284257][T14304] [ 584.284266][T14304] dump_stack_lvl+0xe8/0x150 [ 584.284300][T14304] should_fail_ex+0x46b/0x600 [ 584.284342][T14304] should_failslab+0xa8/0x100 [ 584.284373][T14304] __kmalloc_noprof+0xdf/0x7b0 [ 584.284414][T14304] ? tomoyo_encode+0x28b/0x550 [ 584.284456][T14304] tomoyo_encode+0x28b/0x550 [ 584.284488][T14304] tomoyo_realpath_from_path+0x58d/0x5d0 [ 584.284517][T14304] ? tomoyo_domain+0xd7/0x130 [ 584.284549][T14304] ? tomoyo_path_number_perm+0x219/0x630 [ 584.284585][T14304] tomoyo_path_number_perm+0x246/0x630 [ 584.284623][T14304] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 584.284656][T14304] ? __lock_acquire+0x6b5/0x2d10 [ 584.284684][T14304] ? do_raw_spin_lock+0x12b/0x2f0 [ 584.284739][T14304] ? __fget_files+0x2a/0x420 [ 584.284770][T14304] ? __fget_files+0x2a/0x420 [ 584.284795][T14304] ? __fget_files+0x3a6/0x420 [ 584.284821][T14304] ? __fget_files+0x2a/0x420 [ 584.284851][T14304] security_file_ioctl+0xc3/0x2a0 [ 584.284886][T14304] __se_sys_ioctl+0x47/0x170 [ 584.284918][T14304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.284943][T14304] do_syscall_64+0x174/0x580 [ 584.284975][T14304] ? trace_irq_disable+0x3b/0x140 [ 584.285001][T14304] ? clear_bhb_loop+0x40/0x90 [ 584.285029][T14304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.285052][T14304] RIP: 0033:0x7f3afcc9ce59 [ 584.285074][T14304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.285094][T14304] RSP: 002b:00007f3afaeee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.285118][T14304] RAX: ffffffffffffffda RBX: 00007f3afcf15fa0 RCX: 00007f3afcc9ce59 [ 584.285135][T14304] RDX: 0000000000000000 RSI: 0000000000002275 RDI: 0000000000000003 [ 584.285149][T14304] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 584.285164][T14304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.285178][T14304] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 584.285215][T14304] [ 584.285590][T14304] ERROR: Out of memory at tomoyo_realpath_from_path. [ 584.815859][T12177] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.938009][T12098] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.087531][T12177] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.260347][T12098] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.549751][T14334] FAULT_INJECTION: forcing a failure. [ 585.549751][T14334] name failslab, interval 1, probability 0, space 0, times 0 [ 585.549787][T14334] CPU: 0 UID: 0 PID: 14334 Comm: syz.5.2944 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 585.549813][T14334] Tainted: [L]=SOFTLOCKUP [ 585.549821][T14334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.549835][T14334] Call Trace: [ 585.549843][T14334] [ 585.549851][T14334] dump_stack_lvl+0xe8/0x150 [ 585.549878][T14334] should_fail_ex+0x46b/0x600 [ 585.549907][T14334] should_failslab+0xa8/0x100 [ 585.549931][T14334] __kmalloc_noprof+0xdf/0x7b0 [ 585.549952][T14334] ? kfree+0x4d/0x6c0 [ 585.549968][T14334] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 585.549994][T14334] tomoyo_realpath_from_path+0xe3/0x5d0 [ 585.550015][T14334] ? tomoyo_domain+0xd7/0x130 [ 585.550041][T14334] ? tomoyo_path_number_perm+0x219/0x630 [ 585.550069][T14334] tomoyo_path_number_perm+0x246/0x630 [ 585.550100][T14334] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 585.550127][T14334] ? __lock_acquire+0x6b5/0x2d10 [ 585.550153][T14334] ? do_raw_spin_lock+0x12b/0x2f0 [ 585.550200][T14334] ? __fget_files+0x2a/0x420 [ 585.550223][T14334] ? __fget_files+0x2a/0x420 [ 585.550241][T14334] ? __fget_files+0x3a6/0x420 [ 585.550260][T14334] ? __fget_files+0x2a/0x420 [ 585.550284][T14334] security_file_ioctl+0xc3/0x2a0 [ 585.550316][T14334] __se_sys_ioctl+0x47/0x170 [ 585.550342][T14334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.550364][T14334] do_syscall_64+0x174/0x580 [ 585.550392][T14334] ? trace_irq_disable+0x3b/0x140 [ 585.550414][T14334] ? clear_bhb_loop+0x40/0x90 [ 585.550438][T14334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.550457][T14334] RIP: 0033:0x7f3a0bdece59 [ 585.550475][T14334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.550492][T14334] RSP: 002b:00007f3a0a03e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.550513][T14334] RAX: ffffffffffffffda RBX: 00007f3a0c065fa0 RCX: 00007f3a0bdece59 [ 585.550529][T14334] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 585.550551][T14334] RBP: 00007f3a0a03e090 R08: 0000000000000000 R09: 0000000000000000 [ 585.550565][T14334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.550577][T14334] R13: 00007f3a0c066038 R14: 00007f3a0c065fa0 R15: 00007ffe5cdcdf18 [ 585.550611][T14334] [ 585.550620][T14334] ERROR: Out of memory at tomoyo_realpath_from_path. [ 586.067463][T14343] zonefs (nbd3) ERROR: Not a zoned block device [ 586.215741][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 586.393003][ T10] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 586.393039][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.393062][ T10] usb 6-1: Product: syz [ 586.393079][ T10] usb 6-1: Manufacturer: syz [ 586.393096][ T10] usb 6-1: SerialNumber: syz [ 586.433922][ T10] usb 6-1: config 0 descriptor?? [ 586.448163][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 586.448208][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 586.654888][T14341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.667014][T14341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.689029][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 586.737632][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 586.737685][ T10] dib0700: firmware download failed at 7 with -22 [ 586.779236][ T10] usb 6-1: USB disconnect, device number 24 [ 586.879535][T14364] FAULT_INJECTION: forcing a failure. [ 586.879535][T14364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.879569][T14364] CPU: 0 UID: 0 PID: 14364 Comm: syz.3.2956 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 586.879594][T14364] Tainted: [L]=SOFTLOCKUP [ 586.879601][T14364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.879612][T14364] Call Trace: [ 586.879619][T14364] [ 586.879627][T14364] dump_stack_lvl+0xe8/0x150 [ 586.879653][T14364] should_fail_ex+0x46b/0x600 [ 586.879684][T14364] _copy_to_user+0x31/0xb0 [ 586.879705][T14364] simple_read_from_buffer+0xe1/0x170 [ 586.879731][T14364] proc_fail_nth_read+0x1be/0x230 [ 586.879754][T14364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.879777][T14364] ? rw_verify_area+0x2ac/0x4e0 [ 586.879800][T14364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.879821][T14364] vfs_read+0x212/0xa80 [ 586.879856][T14364] ? __pfx_vfs_read+0x10/0x10 [ 586.879881][T14364] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 586.879908][T14364] ? lockdep_hardirqs_on+0x7a/0x110 [ 586.879933][T14364] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 586.879958][T14364] ? mutex_lock_nested+0x152/0x1d0 [ 586.879976][T14364] ? fdget_pos+0x252/0x320 [ 586.880003][T14364] ksys_read+0x156/0x270 [ 586.880029][T14364] ? __pfx_ksys_read+0x10/0x10 [ 586.880052][T14364] ? __pfx_sync_file_ioctl+0x10/0x10 [ 586.880078][T14364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.880098][T14364] do_syscall_64+0x174/0x580 [ 586.880123][T14364] ? trace_irq_disable+0x3b/0x140 [ 586.880144][T14364] ? clear_bhb_loop+0x40/0x90 [ 586.880167][T14364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.880185][T14364] RIP: 0033:0x7f3afcc5d68e [ 586.880202][T14364] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 586.880227][T14364] RSP: 002b:00007f3afaeedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 586.880246][T14364] RAX: ffffffffffffffda RBX: 00007f3afaeee6c0 RCX: 00007f3afcc5d68e [ 586.880260][T14364] RDX: 000000000000000f RSI: 00007f3afaeee0a0 RDI: 0000000000000007 [ 586.880271][T14364] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 586.880283][T14364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.880293][T14364] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 586.880319][T14364] [ 587.329744][T14368] FAULT_INJECTION: forcing a failure. [ 587.329744][T14368] name failslab, interval 1, probability 0, space 0, times 0 [ 587.329784][T14368] CPU: 1 UID: 0 PID: 14368 Comm: syz.5.2958 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 587.329816][T14368] Tainted: [L]=SOFTLOCKUP [ 587.329825][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 587.329839][T14368] Call Trace: [ 587.329848][T14368] [ 587.329858][T14368] dump_stack_lvl+0xe8/0x150 [ 587.329892][T14368] should_fail_ex+0x46b/0x600 [ 587.329929][T14368] should_failslab+0xa8/0x100 [ 587.329961][T14368] __kmalloc_noprof+0xdf/0x7b0 [ 587.329992][T14368] ? tomoyo_encode+0x28b/0x550 [ 587.330024][T14368] tomoyo_encode+0x28b/0x550 [ 587.330055][T14368] tomoyo_realpath_from_path+0x58d/0x5d0 [ 587.330094][T14368] ? tomoyo_path_number_perm+0x219/0x630 [ 587.330129][T14368] tomoyo_path_number_perm+0x246/0x630 [ 587.330167][T14368] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 587.330201][T14368] ? __lock_acquire+0x6b5/0x2d10 [ 587.330230][T14368] ? do_raw_spin_lock+0x12b/0x2f0 [ 587.330288][T14368] ? __fget_files+0x2a/0x420 [ 587.330318][T14368] ? __fget_files+0x2a/0x420 [ 587.330342][T14368] ? __fget_files+0x3a6/0x420 [ 587.330367][T14368] ? __fget_files+0x2a/0x420 [ 587.330405][T14368] security_file_ioctl+0xc3/0x2a0 [ 587.330441][T14368] __se_sys_ioctl+0x47/0x170 [ 587.330473][T14368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.330498][T14368] do_syscall_64+0x174/0x580 [ 587.330531][T14368] ? trace_irq_disable+0x3b/0x140 [ 587.330556][T14368] ? clear_bhb_loop+0x40/0x90 [ 587.330585][T14368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.330609][T14368] RIP: 0033:0x7f3a0bdece59 [ 587.330630][T14368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.330651][T14368] RSP: 002b:00007f3a0a03e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.330676][T14368] RAX: ffffffffffffffda RBX: 00007f3a0c065fa0 RCX: 00007f3a0bdece59 [ 587.330693][T14368] RDX: 0000200000000040 RSI: 0000000080045005 RDI: 0000000000000003 [ 587.330709][T14368] RBP: 00007f3a0a03e090 R08: 0000000000000000 R09: 0000000000000000 [ 587.330724][T14368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.330738][T14368] R13: 00007f3a0c066038 R14: 00007f3a0c065fa0 R15: 00007ffe5cdcdf18 [ 587.330774][T14368] [ 587.330826][T14368] ERROR: Out of memory at tomoyo_realpath_from_path. [ 587.352167][ T5699] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 587.664891][ T5699] usb 7-1: Using ep0 maxpacket: 8 [ 587.671761][ T5699] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 587.671791][ T5699] usb 7-1: config 179 has no interface number 0 [ 587.671839][ T5699] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 587.671869][ T5699] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 587.671899][ T5699] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 587.671927][ T5699] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 587.671956][ T5699] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 587.672001][ T5699] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 587.672025][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.849113][T14359] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 588.052088][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2955'. [ 588.179322][T14384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.184007][T14384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.308313][T14359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.308960][T14359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.400020][ T5820] usb 7-1: USB disconnect, device number 12 [ 588.400024][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 588.400089][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 588.406397][ T824] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 588.441795][ T37] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 588.566419][ T824] usb 4-1: Using ep0 maxpacket: 32 [ 588.571500][ T824] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 588.571544][ T824] usb 4-1: can't read configurations, error -61 [ 588.642148][ T37] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 588.642172][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.642188][ T37] usb 6-1: Product: syz [ 588.642204][ T37] usb 6-1: Manufacturer: syz [ 588.642248][ T37] usb 6-1: SerialNumber: syz [ 588.679605][ T37] usb 6-1: config 0 descriptor?? [ 588.696892][ T824] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 588.698446][ T37] hub 6-1:0.0: bad descriptor, ignoring hub [ 588.698472][ T37] hub 6-1:0.0: probe with driver hub failed with error -5 [ 588.866548][ T824] usb 4-1: Using ep0 maxpacket: 32 [ 588.869977][ T824] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 588.870014][ T824] usb 4-1: can't read configurations, error -61 [ 588.870655][ T824] usb usb4-port1: attempt power cycle [ 588.910199][T14382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.911557][T14382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.920856][ T37] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 588.929768][ T37] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 588.929857][ T37] dib0700: firmware download failed at 7 with -22 [ 588.995371][ T37] usb 6-1: USB disconnect, device number 25 [ 589.239181][ T824] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 589.257334][ T824] usb 4-1: Using ep0 maxpacket: 32 [ 589.259992][ T824] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 589.260031][ T824] usb 4-1: can't read configurations, error -61 [ 589.440921][ T824] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 589.460197][ T824] usb 4-1: Using ep0 maxpacket: 32 [ 589.472061][ T824] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 589.472099][ T824] usb 4-1: can't read configurations, error -61 [ 589.474455][ T824] usb usb4-port1: unable to enumerate USB device [ 590.054769][T14409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.478649][T13642] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 590.490128][T14418] FAULT_INJECTION: forcing a failure. [ 590.490128][T14418] name failslab, interval 1, probability 0, space 0, times 0 [ 590.490167][T14418] CPU: 1 UID: 0 PID: 14418 Comm: syz.5.2978 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 590.490197][T14418] Tainted: [L]=SOFTLOCKUP [ 590.490207][T14418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 590.490222][T14418] Call Trace: [ 590.490230][T14418] [ 590.490240][T14418] dump_stack_lvl+0xe8/0x150 [ 590.490273][T14418] should_fail_ex+0x46b/0x600 [ 590.490312][T14418] should_failslab+0xa8/0x100 [ 590.490344][T14418] __kmalloc_noprof+0xdf/0x7b0 [ 590.490372][T14418] ? tomoyo_encode+0x28b/0x550 [ 590.490408][T14418] tomoyo_encode+0x28b/0x550 [ 590.490439][T14418] tomoyo_realpath_from_path+0x58d/0x5d0 [ 590.490478][T14418] ? tomoyo_path_number_perm+0x219/0x630 [ 590.490513][T14418] tomoyo_path_number_perm+0x246/0x630 [ 590.490588][T14418] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 590.490693][T14418] ? __lock_acquire+0x6b5/0x2d10 [ 590.490757][T14418] ? do_raw_spin_lock+0x12b/0x2f0 [ 590.490814][T14418] ? __fget_files+0x2a/0x420 [ 590.490845][T14418] ? __fget_files+0x2a/0x420 [ 590.490892][T14418] ? __fget_files+0x3a6/0x420 [ 590.490965][T14418] ? __fget_files+0x2a/0x420 [ 590.491042][T14418] security_file_ioctl+0xc3/0x2a0 [ 590.491137][T14418] __se_sys_ioctl+0x47/0x170 [ 590.491226][T14418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.491285][T14418] do_syscall_64+0x174/0x580 [ 590.491370][T14418] ? trace_irq_disable+0x3b/0x140 [ 590.491435][T14418] ? clear_bhb_loop+0x40/0x90 [ 590.491509][T14418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.491571][T14418] RIP: 0033:0x7f3a0bdece59 [ 590.491593][T14418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.491613][T14418] RSP: 002b:00007f3a0a03e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.491637][T14418] RAX: ffffffffffffffda RBX: 00007f3a0c065fa0 RCX: 00007f3a0bdece59 [ 590.491655][T14418] RDX: 0000000000000000 RSI: 0000000000004161 RDI: 0000000000000003 [ 590.491677][T14418] RBP: 00007f3a0a03e090 R08: 0000000000000000 R09: 0000000000000000 [ 590.491719][T14418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.491753][T14418] R13: 00007f3a0c066038 R14: 00007f3a0c065fa0 R15: 00007ffe5cdcdf18 [ 590.491861][T14418] [ 590.492250][T14418] ERROR: Out of memory at tomoyo_realpath_from_path. [ 590.763190][T13642] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 590.763225][T13642] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.763248][T13642] usb 5-1: Product: syz [ 590.763265][T13642] usb 5-1: Manufacturer: syz [ 590.763282][T13642] usb 5-1: SerialNumber: syz [ 590.805199][T13642] usb 5-1: config 0 descriptor?? [ 590.817349][T13642] hub 5-1:0.0: bad descriptor, ignoring hub [ 590.817391][T13642] hub 5-1:0.0: probe with driver hub failed with error -5 [ 590.960887][T14423] FAULT_INJECTION: forcing a failure. [ 590.960887][T14423] name failslab, interval 1, probability 0, space 0, times 0 [ 590.960928][T14423] CPU: 1 UID: 0 PID: 14423 Comm: syz.6.2980 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 590.960968][T14423] Tainted: [L]=SOFTLOCKUP [ 590.960976][T14423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 590.960991][T14423] Call Trace: [ 590.961000][T14423] [ 590.961010][T14423] dump_stack_lvl+0xe8/0x150 [ 590.961043][T14423] should_fail_ex+0x46b/0x600 [ 590.961081][T14423] should_failslab+0xa8/0x100 [ 590.961112][T14423] __kmalloc_cache_noprof+0x84/0x690 [ 590.961141][T14423] ? nft_trans_table_add+0x56/0x430 [ 590.961178][T14423] nft_trans_table_add+0x56/0x430 [ 590.961217][T14423] nf_tables_newtable+0xcea/0x1910 [ 590.961272][T14423] nfnetlink_rcv+0x1247/0x27b0 [ 590.961340][T14423] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 590.961390][T14423] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 590.961415][T14423] ? ref_tracker_free+0x673/0x820 [ 590.961477][T14423] ? __netlink_deliver_tap+0x866/0x8b0 [ 590.961521][T14423] ? netlink_deliver_tap+0x2e/0x1b0 [ 590.961561][T14423] ? netlink_deliver_tap+0x2e/0x1b0 [ 590.961601][T14423] netlink_unicast+0x780/0x920 [ 590.961644][T14423] netlink_sendmsg+0x813/0xb40 [ 590.961689][T14423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.961727][T14423] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 590.961760][T14423] ? aa_sock_msg_perm+0x122/0x200 [ 590.961785][T14423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.961820][T14423] sock_sendmsg_nosec+0x13a/0x180 [ 590.961849][T14423] ____sys_sendmsg+0x55c/0x870 [ 590.961891][T14423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.961941][T14423] ? import_iovec+0x73/0xa0 [ 590.961971][T14423] ___sys_sendmsg+0x2a5/0x360 [ 590.962011][T14423] ? __lock_acquire+0x6b5/0x2d10 [ 590.962045][T14423] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.962115][T14423] ? __fget_files+0x2a/0x420 [ 590.962141][T14423] ? __fget_files+0x3a6/0x420 [ 590.962183][T14423] __x64_sys_sendmsg+0x1c3/0x2a0 [ 590.962222][T14423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 590.962268][T14423] ? __pfx_ksys_write+0x10/0x10 [ 590.962308][T14423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.962334][T14423] do_syscall_64+0x174/0x580 [ 590.962366][T14423] ? trace_irq_disable+0x3b/0x140 [ 590.962391][T14423] ? clear_bhb_loop+0x40/0x90 [ 590.962417][T14423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.962441][T14423] RIP: 0033:0x7f8ae319ce59 [ 590.962463][T14423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.962482][T14423] RSP: 002b:00007f8ae13ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.962507][T14423] RAX: ffffffffffffffda RBX: 00007f8ae3415fa0 RCX: 00007f8ae319ce59 [ 590.962524][T14423] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 590.962539][T14423] RBP: 00007f8ae13ee090 R08: 0000000000000000 R09: 0000000000000000 [ 590.962553][T14423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 590.962566][T14423] R13: 00007f8ae3416038 R14: 00007f8ae3415fa0 R15: 00007ffef58ebab8 [ 590.962602][T14423] [ 591.065746][T14415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.084942][T14415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.118334][T13642] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 591.293366][T13642] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 591.293417][T13642] dib0700: firmware download failed at 7 with -22 [ 591.358946][T13642] usb 5-1: USB disconnect, device number 71 [ 592.009422][ T5699] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 592.181939][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.182167][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.182216][ T5699] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 592.182241][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.245848][ T5699] usb 4-1: config 0 descriptor?? [ 592.653023][ T5699] usbhid 4-1:0.0: can't add hid device: -71 [ 592.653157][ T5699] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 592.688375][ T5699] usb 4-1: USB disconnect, device number 75 [ 592.776627][T14463] FAULT_INJECTION: forcing a failure. [ 592.776627][T14463] name failslab, interval 1, probability 0, space 0, times 0 [ 592.776663][T14463] CPU: 1 UID: 0 PID: 14463 Comm: syz.6.2995 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 592.776702][T14463] Tainted: [L]=SOFTLOCKUP [ 592.776710][T14463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.776722][T14463] Call Trace: [ 592.776731][T14463] [ 592.776739][T14463] dump_stack_lvl+0xe8/0x150 [ 592.776770][T14463] should_fail_ex+0x46b/0x600 [ 592.776804][T14463] should_failslab+0xa8/0x100 [ 592.776831][T14463] __kmalloc_cache_noprof+0x84/0x690 [ 592.776857][T14463] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 592.776891][T14463] ? __request_module+0x2d0/0x630 [ 592.776919][T14463] __request_module+0x2d0/0x630 [ 592.776951][T14463] ? __pfx___request_module+0x10/0x10 [ 592.776983][T14463] ? crypto_alg_lookup+0x3d3/0x450 [ 592.777015][T14463] ? up_read+0x23/0x40 [ 592.777045][T14463] crypto_alg_mod_lookup+0xeb/0x5f0 [ 592.777079][T14463] crypto_has_alg+0x26/0x190 [ 592.777111][T14463] xfrm_calg_get_byname+0x155/0x280 [ 592.777145][T14463] xfrm_add_sa+0x28b4/0x4230 [ 592.777173][T14463] ? __pfx_xfrm_add_sa+0x10/0x10 [ 592.777191][T14463] ? apparmor_capable+0x126/0x170 [ 592.777220][T14463] ? __nla_parse+0x40/0x60 [ 592.777242][T14463] xfrm_user_rcv_msg+0x7ae/0xc40 [ 592.777269][T14463] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 592.777329][T14463] ? __lock_acquire+0x6b5/0x2d10 [ 592.777356][T14463] ? netlink_deliver_tap+0x19c/0x1b0 [ 592.777382][T14463] ? netlink_unicast+0x754/0x920 [ 592.777403][T14463] ? netlink_sendmsg+0x813/0xb40 [ 592.777428][T14463] ? sock_sendmsg_nosec+0x13a/0x180 [ 592.777446][T14463] ? ____sys_sendmsg+0x55c/0x870 [ 592.777471][T14463] ? ___sys_sendmsg+0x2a5/0x360 [ 592.777495][T14463] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 592.777526][T14463] netlink_rcv_skb+0x232/0x4b0 [ 592.777554][T14463] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 592.777575][T14463] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 592.777610][T14463] ? lockdep_hardirqs_on+0x7a/0x110 [ 592.777638][T14463] ? mutex_lock_nested+0x152/0x1d0 [ 592.777657][T14463] ? xfrm_netlink_rcv+0x6a/0x90 [ 592.777691][T14463] xfrm_netlink_rcv+0x79/0x90 [ 592.777711][T14463] netlink_unicast+0x780/0x920 [ 592.777747][T14463] netlink_sendmsg+0x813/0xb40 [ 592.777782][T14463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.777820][T14463] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 592.777848][T14463] ? aa_sock_msg_perm+0x122/0x200 [ 592.777869][T14463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.777898][T14463] sock_sendmsg_nosec+0x13a/0x180 [ 592.777922][T14463] ____sys_sendmsg+0x55c/0x870 [ 592.777958][T14463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.777995][T14463] ? import_iovec+0x73/0xa0 [ 592.778018][T14463] ___sys_sendmsg+0x2a5/0x360 [ 592.778047][T14463] ? __lock_acquire+0x6b5/0x2d10 [ 592.778075][T14463] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.778135][T14463] ? __fget_files+0x2a/0x420 [ 592.778154][T14463] ? __fget_files+0x3a6/0x420 [ 592.778182][T14463] __x64_sys_sendmsg+0x1c3/0x2a0 [ 592.778211][T14463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 592.778246][T14463] ? __pfx_ksys_write+0x10/0x10 [ 592.778279][T14463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.778302][T14463] do_syscall_64+0x174/0x580 [ 592.778329][T14463] ? trace_irq_disable+0x3b/0x140 [ 592.778352][T14463] ? clear_bhb_loop+0x40/0x90 [ 592.778375][T14463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.778394][T14463] RIP: 0033:0x7f8ae319ce59 [ 592.778414][T14463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.778432][T14463] RSP: 002b:00007f8ae13ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.778456][T14463] RAX: ffffffffffffffda RBX: 00007f8ae3415fa0 RCX: 00007f8ae319ce59 [ 592.778471][T14463] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000003 [ 592.778486][T14463] RBP: 00007f8ae13ee090 R08: 0000000000000000 R09: 0000000000000000 [ 592.778499][T14463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.778513][T14463] R13: 00007f8ae3416038 R14: 00007f8ae3415fa0 R15: 00007ffef58ebab8 [ 592.778548][T14463] [ 592.999718][ T64] block nbd1: Possible stuck request ffff888027807000: control (read@0,4096B). Runtime 150 seconds [ 593.289517][ T60] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 593.538391][ T5699] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 593.588206][ T5794] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 593.706800][ T5699] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 593.706835][ T5699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.706864][ T5699] usb 6-1: Product: syz [ 593.706881][ T5699] usb 6-1: Manufacturer: syz [ 593.706897][ T5699] usb 6-1: SerialNumber: syz [ 593.747605][ T5699] usb 6-1: config 0 descriptor?? [ 593.765821][ T5794] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 593.765863][ T5794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.765885][ T5794] usb 7-1: Product: syz [ 593.765901][ T5794] usb 7-1: Manufacturer: syz [ 593.765916][ T5794] usb 7-1: SerialNumber: syz [ 593.851114][ T5794] usb 7-1: config 0 descriptor?? [ 593.855523][ T5794] hub 7-1:0.0: bad descriptor, ignoring hub [ 593.855640][ T5794] hub 7-1:0.0: probe with driver hub failed with error -5 [ 593.952145][ T5699] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 594.065121][ T5794] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 594.140079][ T5794] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 594.140192][ T5794] dib0700: firmware download failed at 7 with -22 [ 594.211481][ T5794] usb 7-1: USB disconnect, device number 13 [ 594.666187][T14502] FAULT_INJECTION: forcing a failure. [ 594.666187][T14502] name failslab, interval 1, probability 0, space 0, times 0 [ 594.666650][T14502] CPU: 0 UID: 0 PID: 14502 Comm: syz.3.3012 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 594.666682][T14502] Tainted: [L]=SOFTLOCKUP [ 594.666692][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.666705][T14502] Call Trace: [ 594.666714][T14502] [ 594.666725][T14502] dump_stack_lvl+0xe8/0x150 [ 594.666799][T14502] should_fail_ex+0x46b/0x600 [ 594.666849][T14502] should_failslab+0xa8/0x100 [ 594.666872][T14502] kmem_cache_alloc_noprof+0x87/0x680 [ 594.666890][T14502] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 594.666917][T14502] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 594.666947][T14502] mmu_topup_memory_caches+0x21/0x170 [ 594.666970][T14502] kvm_mmu_load+0x9d/0x2320 [ 594.666992][T14502] ? kvm_msr_allowed+0x9a/0x490 [ 594.667017][T14502] ? kvm_msr_allowed+0x9a/0x490 [ 594.667040][T14502] ? kvm_msr_allowed+0x3f4/0x490 [ 594.667064][T14502] ? kvm_msr_allowed+0x9a/0x490 [ 594.667089][T14502] ? kvm_apic_has_interrupt+0x73c/0x770 [ 594.667116][T14502] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 594.667149][T14502] vcpu_run+0x5c68/0x7830 [ 594.667176][T14502] ? finish_task_switch+0x4de/0xbe0 [ 594.667211][T14502] ? ___ratelimit+0x1ea/0x8d0 [ 594.667257][T14502] ? __pfx_vcpu_run+0x10/0x10 [ 594.667272][T14502] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 594.667290][T14502] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 594.667318][T14502] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 594.667344][T14502] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 594.667362][T14502] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 594.667378][T14502] ? irqentry_exit+0x218/0x8b0 [ 594.667406][T14502] ? preempt_schedule_thunk+0x16/0x40 [ 594.667434][T14502] ? preempt_schedule_common+0x82/0xd0 [ 594.667456][T14502] ? preempt_schedule_thunk+0x16/0x40 [ 594.667486][T14502] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 594.667509][T14502] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 594.667533][T14502] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 594.667553][T14502] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 594.667578][T14502] ? lockdep_hardirqs_on+0x7a/0x110 [ 594.667600][T14502] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 594.667622][T14502] ? rt_write_unlock+0x190/0x230 [ 594.667643][T14502] kvm_vcpu_ioctl+0xa65/0xfe0 [ 594.667671][T14502] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 594.667710][T14502] ? __fget_files+0x2a/0x420 [ 594.667731][T14502] ? __fget_files+0x2a/0x420 [ 594.667748][T14502] ? __fget_files+0x3a6/0x420 [ 594.667765][T14502] ? __fget_files+0x2a/0x420 [ 594.667786][T14502] ? bpf_lsm_file_ioctl+0x9/0x20 [ 594.667826][T14502] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 594.667850][T14502] __se_sys_ioctl+0xff/0x170 [ 594.667874][T14502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.667893][T14502] do_syscall_64+0x174/0x580 [ 594.667916][T14502] ? trace_irq_disable+0x3b/0x140 [ 594.667934][T14502] ? clear_bhb_loop+0x40/0x90 [ 594.667954][T14502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.667970][T14502] RIP: 0033:0x7f3afcc9ce59 [ 594.667985][T14502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.667999][T14502] RSP: 002b:00007f3afaecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.668016][T14502] RAX: ffffffffffffffda RBX: 00007f3afcf16090 RCX: 00007f3afcc9ce59 [ 594.668029][T14502] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 594.668039][T14502] RBP: 00007f3afaecd090 R08: 0000000000000000 R09: 0000000000000000 [ 594.668049][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 594.668059][T14502] R13: 00007f3afcf16128 R14: 00007f3afcf16090 R15: 00007ffeca55b7b8 [ 594.668085][T14502] [ 595.377780][ T5699] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 595.401487][ T5699] usb 6-1: USB disconnect, device number 26 [ 595.480639][T14511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3015'. [ 595.522758][T14511] netlink: 'syz.4.3015': attribute type 4 has an invalid length. [ 596.043097][T14532] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3024'. [ 596.043148][T14532] netlink: 'syz.5.3024': attribute type 4 has an invalid length. [ 596.069907][T14532] FAULT_INJECTION: forcing a failure. [ 596.069907][T14532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.069965][T14532] CPU: 1 UID: 0 PID: 14532 Comm: syz.5.3024 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 596.069998][T14532] Tainted: [L]=SOFTLOCKUP [ 596.070007][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.070023][T14532] Call Trace: [ 596.070032][T14532] [ 596.070042][T14532] dump_stack_lvl+0xe8/0x150 [ 596.070076][T14532] should_fail_ex+0x46b/0x600 [ 596.070116][T14532] _copy_to_user+0x31/0xb0 [ 596.070144][T14532] simple_read_from_buffer+0xe1/0x170 [ 596.070178][T14532] proc_fail_nth_read+0x1be/0x230 [ 596.070209][T14532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.070240][T14532] ? rw_verify_area+0x2ac/0x4e0 [ 596.070270][T14532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.070298][T14532] vfs_read+0x212/0xa80 [ 596.070337][T14532] ? __pfx_vfs_read+0x10/0x10 [ 596.070370][T14532] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 596.070404][T14532] ? lockdep_hardirqs_on+0x7a/0x110 [ 596.070436][T14532] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 596.070468][T14532] ? mutex_lock_nested+0x152/0x1d0 [ 596.070492][T14532] ? fdget_pos+0x252/0x320 [ 596.070528][T14532] ksys_read+0x156/0x270 [ 596.070561][T14532] ? __pfx_ksys_read+0x10/0x10 [ 596.070601][T14532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.070627][T14532] do_syscall_64+0x174/0x580 [ 596.070666][T14532] ? trace_irq_disable+0x3b/0x140 [ 596.070692][T14532] ? clear_bhb_loop+0x40/0x90 [ 596.070720][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.070744][T14532] RIP: 0033:0x7f3a0bdad68e [ 596.070765][T14532] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 596.070786][T14532] RSP: 002b:00007f3a0a03dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 596.070810][T14532] RAX: ffffffffffffffda RBX: 00007f3a0a03e6c0 RCX: 00007f3a0bdad68e [ 596.070827][T14532] RDX: 000000000000000f RSI: 00007f3a0a03e0a0 RDI: 0000000000000004 [ 596.070842][T14532] RBP: 00007f3a0a03e090 R08: 0000000000000000 R09: 0000000000000000 [ 596.070857][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 596.070872][T14532] R13: 00007f3a0c066038 R14: 00007f3a0c065fa0 R15: 00007ffe5cdcdf18 [ 596.070908][T14532] [ 596.139105][T13642] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 596.356475][T13642] usb 4-1: not running at top speed; connect to a high speed hub [ 596.376429][T13642] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 624, setting to 64 [ 596.376467][T13642] usb 4-1: config 1 interface 0 has no altsetting 0 [ 596.407526][T13642] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 596.407557][T13642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.407582][T13642] usb 4-1: Product: syz [ 596.407594][T13642] usb 4-1: Manufacturer: syz [ 596.407605][T13642] usb 4-1: SerialNumber: syz [ 596.478910][T14527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 596.706381][T13642] usblp0: Disabling reads from problematic bidirectional printer [ 596.714970][T13642] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 4 proto 1 vid 0x03F0 pid 0x0004 [ 596.735821][T13642] usb 4-1: USB disconnect, device number 76 [ 596.804698][T13642] usblp0: removed [ 597.400307][T13642] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 597.577685][T13642] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 597.577721][T13642] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.577735][T13642] usb 7-1: Product: syz [ 597.577746][T13642] usb 7-1: Manufacturer: syz [ 597.577758][T13642] usb 7-1: SerialNumber: syz [ 597.616292][T13642] usb 7-1: config 0 descriptor?? [ 597.630612][T13642] hub 7-1:0.0: bad descriptor, ignoring hub [ 597.630652][T13642] hub 7-1:0.0: probe with driver hub failed with error -5 [ 597.826645][T13642] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 597.832888][T13642] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 597.832939][T13642] dib0700: firmware download failed at 7 with -22 [ 597.881625][T13642] usb 7-1: USB disconnect, device number 14 [ 597.956458][T14577] FAULT_INJECTION: forcing a failure. [ 597.956458][T14577] name failslab, interval 1, probability 0, space 0, times 0 [ 597.956487][T14577] CPU: 1 UID: 0 PID: 14577 Comm: syz.3.3038 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 597.956512][T14577] Tainted: [L]=SOFTLOCKUP [ 597.956519][T14577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 597.956530][T14577] Call Trace: [ 597.956536][T14577] [ 597.956543][T14577] dump_stack_lvl+0xe8/0x150 [ 597.956566][T14577] should_fail_ex+0x46b/0x600 [ 597.956594][T14577] should_failslab+0xa8/0x100 [ 597.956616][T14577] __kmalloc_cache_noprof+0x84/0x690 [ 597.956637][T14577] ? nft_trans_rule_add+0x59/0x440 [ 597.956659][T14577] ? nft_parse_register_load+0x31e/0x3b0 [ 597.956679][T14577] nft_trans_rule_add+0x59/0x440 [ 597.956706][T14577] nf_tables_newrule+0x1b72/0x28b0 [ 597.956737][T14577] ? __pfx_nf_tables_newrule+0x10/0x10 [ 597.956756][T14577] ? nfnl_pernet+0x23/0x240 [ 597.956778][T14577] ? nfnl_pernet+0x23/0x240 [ 597.956806][T14577] ? __nla_parse+0x40/0x60 [ 597.956824][T14577] nfnetlink_rcv+0x1247/0x27b0 [ 597.956870][T14577] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 597.956903][T14577] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 597.956921][T14577] ? ref_tracker_free+0x673/0x820 [ 597.956965][T14577] ? __netlink_deliver_tap+0x866/0x8b0 [ 597.956997][T14577] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.957021][T14577] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.957049][T14577] netlink_unicast+0x780/0x920 [ 597.957079][T14577] netlink_sendmsg+0x813/0xb40 [ 597.957111][T14577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.957137][T14577] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 597.957161][T14577] ? aa_sock_msg_perm+0x122/0x200 [ 597.957179][T14577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.957203][T14577] sock_sendmsg_nosec+0x13a/0x180 [ 597.957223][T14577] ____sys_sendmsg+0x55c/0x870 [ 597.957257][T14577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.957288][T14577] ? import_iovec+0x73/0xa0 [ 597.957308][T14577] ___sys_sendmsg+0x2a5/0x360 [ 597.957331][T14577] ? __lock_acquire+0x6b5/0x2d10 [ 597.957354][T14577] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.957404][T14577] ? __fget_files+0x2a/0x420 [ 597.957422][T14577] ? __fget_files+0x3a6/0x420 [ 597.957448][T14577] __x64_sys_sendmsg+0x1c3/0x2a0 [ 597.957475][T14577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.957506][T14577] ? __pfx_ksys_write+0x10/0x10 [ 597.957535][T14577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.957553][T14577] do_syscall_64+0x174/0x580 [ 597.957577][T14577] ? trace_irq_disable+0x3b/0x140 [ 597.957595][T14577] ? clear_bhb_loop+0x40/0x90 [ 597.957615][T14577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.957631][T14577] RIP: 0033:0x7f3afcc9ce59 [ 597.957646][T14577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.957660][T14577] RSP: 002b:00007f3afaeee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.957678][T14577] RAX: ffffffffffffffda RBX: 00007f3afcf15fa0 RCX: 00007f3afcc9ce59 [ 597.957690][T14577] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 597.957701][T14577] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 597.957711][T14577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.957721][T14577] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 597.957746][T14577] [ 598.607679][T14588] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3043'. [ 598.714358][T14595] FAULT_INJECTION: forcing a failure. [ 598.714358][T14595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.714387][T14595] CPU: 0 UID: 0 PID: 14595 Comm: syz.3.3046 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 598.714410][T14595] Tainted: [L]=SOFTLOCKUP [ 598.714416][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.714427][T14595] Call Trace: [ 598.714433][T14595] [ 598.714441][T14595] dump_stack_lvl+0xe8/0x150 [ 598.714467][T14595] should_fail_ex+0x46b/0x600 [ 598.714502][T14595] _copy_to_user+0x31/0xb0 [ 598.714522][T14595] simple_read_from_buffer+0xe1/0x170 [ 598.714546][T14595] proc_fail_nth_read+0x1be/0x230 [ 598.714572][T14595] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.714593][T14595] ? rw_verify_area+0x2ac/0x4e0 [ 598.714615][T14595] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.714634][T14595] vfs_read+0x212/0xa80 [ 598.714662][T14595] ? __pfx_vfs_read+0x10/0x10 [ 598.714685][T14595] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 598.714709][T14595] ? lockdep_hardirqs_on+0x7a/0x110 [ 598.714733][T14595] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 598.714756][T14595] ? mutex_lock_nested+0x152/0x1d0 [ 598.714773][T14595] ? fdget_pos+0x252/0x320 [ 598.714798][T14595] ksys_read+0x156/0x270 [ 598.714822][T14595] ? __pfx_ksys_read+0x10/0x10 [ 598.714843][T14595] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 598.714868][T14595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.714885][T14595] do_syscall_64+0x174/0x580 [ 598.714909][T14595] ? trace_irq_disable+0x3b/0x140 [ 598.714927][T14595] ? clear_bhb_loop+0x40/0x90 [ 598.714947][T14595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.714964][T14595] RIP: 0033:0x7f3afcc5d68e [ 598.714979][T14595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 598.714993][T14595] RSP: 002b:00007f3afaeedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 598.715010][T14595] RAX: ffffffffffffffda RBX: 00007f3afaeee6c0 RCX: 00007f3afcc5d68e [ 598.715022][T14595] RDX: 000000000000000f RSI: 00007f3afaeee0a0 RDI: 0000000000000005 [ 598.715032][T14595] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 598.715043][T14595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.715052][T14595] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 598.715077][T14595] [ 599.104317][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.137254][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.366359][ T5820] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 599.535090][ T5820] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 599.535126][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.561690][ T5820] usb 4-1: config 0 descriptor?? [ 599.569018][ T5820] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 599.766354][ T5820] gp8psk: usb in 128 operation failed. [ 599.769416][ T5820] gp8psk: usb in 137 operation failed. [ 599.769437][ T5820] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 599.769478][ T5820] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 599.793530][T13820] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 599.814350][ T5820] usb 4-1: USB disconnect, device number 77 [ 599.964397][T13820] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 599.964452][T13820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 599.964474][T13820] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 599.964506][T13820] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 599.964523][T13820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.027881][T13820] usb 5-1: config 0 descriptor?? [ 600.029534][T14610] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 600.559450][T14622] tmpfs: Unsupported parameter 'huge' [ 600.645165][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3057'. [ 600.665983][T13820] hid-multitouch 0003:1FD2:6007.000A: unknown main item tag 0x1 [ 600.666025][T13820] hid-multitouch 0003:1FD2:6007.000A: unknown main item tag 0x0 [ 600.666055][T13820] hid-multitouch 0003:1FD2:6007.000A: item fetching failed at offset 30/40 [ 600.666927][T13820] hid-multitouch 0003:1FD2:6007.000A: probe with driver hid-multitouch failed with error -22 [ 600.693651][T14625] netlink: 388 bytes leftover after parsing attributes in process `syz.6.3057'. [ 600.811525][T14629] FAULT_INJECTION: forcing a failure. [ 600.811525][T14629] name failslab, interval 1, probability 0, space 0, times 0 [ 600.811565][T14629] CPU: 1 UID: 0 PID: 14629 Comm: syz.5.3060 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 600.811595][T14629] Tainted: [L]=SOFTLOCKUP [ 600.811604][T14629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 600.811616][T14629] Call Trace: [ 600.811625][T14629] [ 600.811636][T14629] dump_stack_lvl+0xe8/0x150 [ 600.811670][T14629] should_fail_ex+0x46b/0x600 [ 600.811709][T14629] should_failslab+0xa8/0x100 [ 600.811740][T14629] __kmalloc_noprof+0xdf/0x7b0 [ 600.811768][T14629] ? __lock_acquire+0x6b5/0x2d10 [ 600.811793][T14629] ? kvm_arch_vcpu_ioctl+0x9b6/0x2ff0 [ 600.811826][T14629] kvm_arch_vcpu_ioctl+0x9b6/0x2ff0 [ 600.811859][T14629] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 600.811893][T14629] ? unwind_next_frame+0xa6/0x2550 [ 600.811927][T14629] ? is_bpf_text_address+0x26/0x2b0 [ 600.811968][T14629] ? is_bpf_text_address+0x26/0x2b0 [ 600.812001][T14629] ? is_bpf_text_address+0x292/0x2b0 [ 600.812028][T14629] ? is_bpf_text_address+0x26/0x2b0 [ 600.812060][T14629] ? kernel_text_address+0xa5/0xe0 [ 600.812088][T14629] ? __kernel_text_address+0xd/0x30 [ 600.812113][T14629] ? unwind_get_return_address+0x4d/0x90 [ 600.812139][T14629] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 600.812192][T14629] ? arch_stack_walk+0xfb/0x150 [ 600.812235][T14629] ? stack_trace_save+0xa9/0x100 [ 600.812266][T14629] ? __pfx_stack_trace_save+0x10/0x10 [ 600.812287][T14629] ? kasan_save_free_info+0x46/0x50 [ 600.812323][T14629] ? stack_depot_save_flags+0x33/0x810 [ 600.812362][T14629] ? kasan_save_track+0x4f/0x80 [ 600.812385][T14629] ? kasan_save_track+0x3e/0x80 [ 600.812407][T14629] ? kasan_save_free_info+0x46/0x50 [ 600.812440][T14629] ? __kasan_slab_free+0x5c/0x80 [ 600.812463][T14629] ? kfree+0x1c5/0x6c0 [ 600.812484][T14629] ? tomoyo_path_number_perm+0x501/0x630 [ 600.812516][T14629] ? security_file_ioctl+0xc3/0x2a0 [ 600.812545][T14629] ? __se_sys_ioctl+0x47/0x170 [ 600.812574][T14629] ? do_syscall_64+0x174/0x580 [ 600.812605][T14629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.812649][T14629] ? __lock_acquire+0x6b5/0x2d10 [ 600.812717][T14629] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 600.812751][T14629] ? lockdep_hardirqs_on+0x7a/0x110 [ 600.812782][T14629] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 600.812814][T14629] ? _mutex_lock_killable+0x152/0x1d0 [ 600.812840][T14629] ? kvm_vcpu_ioctl+0x283/0xfe0 [ 600.812877][T14629] kvm_vcpu_ioctl+0x7e7/0xfe0 [ 600.812916][T14629] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 600.812970][T14629] ? __fget_files+0x2a/0x420 [ 600.812999][T14629] ? __fget_files+0x2a/0x420 [ 600.813024][T14629] ? __fget_files+0x3a6/0x420 [ 600.813049][T14629] ? __fget_files+0x2a/0x420 [ 600.813078][T14629] ? bpf_lsm_file_ioctl+0x9/0x20 [ 600.813110][T14629] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 600.813144][T14629] __se_sys_ioctl+0xff/0x170 [ 600.813177][T14629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.813202][T14629] do_syscall_64+0x174/0x580 [ 600.813232][T14629] ? trace_irq_disable+0x3b/0x140 [ 600.813275][T14629] ? clear_bhb_loop+0x40/0x90 [ 600.813304][T14629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.813328][T14629] RIP: 0033:0x7f3a0bdece59 [ 600.813349][T14629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.813369][T14629] RSP: 002b:00007f3a0a03e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.813393][T14629] RAX: ffffffffffffffda RBX: 00007f3a0c065fa0 RCX: 00007f3a0bdece59 [ 600.813411][T14629] RDX: 0000200000013000 RSI: 000000009000aecf RDI: 0000000000000005 [ 600.813426][T14629] RBP: 00007f3a0a03e090 R08: 0000000000000000 R09: 0000000000000000 [ 600.813441][T14629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.813455][T14629] R13: 00007f3a0c066038 R14: 00007f3a0c065fa0 R15: 00007ffe5cdcdf18 [ 600.813490][T14629] [ 601.192013][ T5699] usb 5-1: USB disconnect, device number 72 [ 601.773363][T14653] FAULT_INJECTION: forcing a failure. [ 601.773363][T14653] name failslab, interval 1, probability 0, space 0, times 0 [ 601.773392][T14653] CPU: 0 UID: 0 PID: 14653 Comm: syz.5.3069 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 601.773452][T14653] Tainted: [L]=SOFTLOCKUP [ 601.773460][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 601.773470][T14653] Call Trace: [ 601.773477][T14653] [ 601.773483][T14653] dump_stack_lvl+0xe8/0x150 [ 601.773506][T14653] should_fail_ex+0x46b/0x600 [ 601.773533][T14653] should_failslab+0xa8/0x100 [ 601.773555][T14653] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 601.773574][T14653] ? __alloc_skb+0x1d0/0x7d0 [ 601.773594][T14653] ? lockdep_hardirqs_on+0x7a/0x110 [ 601.773622][T14653] __alloc_skb+0x1d0/0x7d0 [ 601.773646][T14653] alloc_skb_with_frags+0xc8/0x760 [ 601.773669][T14653] ? rt_spin_unlock+0x160/0x200 [ 601.773689][T14653] ? save_netdev_trace_buffer+0x4ba/0x5f0 [ 601.773710][T14653] sock_alloc_send_pskb+0x884/0x9a0 [ 601.773741][T14653] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 601.773772][T14653] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 601.773802][T14653] ? dev_get_by_index+0x22/0x2f0 [ 601.773818][T14653] ? dev_get_by_index+0x22/0x2f0 [ 601.773838][T14653] packet_sendmsg+0x3167/0x4fd0 [ 601.773857][T14653] ? aa_label_sk_perm+0x532/0x6e0 [ 601.773890][T14653] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 601.773918][T14653] ? __lock_acquire+0x6b5/0x2d10 [ 601.773943][T14653] ? __lock_acquire+0x6b5/0x2d10 [ 601.773972][T14653] ? __pfx_packet_sendmsg+0x10/0x10 [ 601.773992][T14653] ? aa_sk_perm+0x703/0x950 [ 601.774022][T14653] ? __pfx_aa_sk_perm+0x10/0x10 [ 601.774047][T14653] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 601.774069][T14653] ? aa_sock_msg_perm+0x122/0x200 [ 601.774087][T14653] ? __pfx_packet_sendmsg+0x10/0x10 [ 601.774102][T14653] sock_sendmsg_nosec+0x13a/0x180 [ 601.774122][T14653] __sys_sendto+0x402/0x590 [ 601.774147][T14653] ? __pfx___sys_sendto+0x10/0x10 [ 601.774187][T14653] ? ksys_write+0x248/0x270 [ 601.774210][T14653] ? __pfx_ksys_write+0x10/0x10 [ 601.774236][T14653] __x64_sys_sendto+0xde/0x100 [ 601.774263][T14653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.774282][T14653] do_syscall_64+0x174/0x580 [ 601.774304][T14653] ? trace_irq_disable+0x3b/0x140 [ 601.774322][T14653] ? clear_bhb_loop+0x40/0x90 [ 601.774342][T14653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.774358][T14653] RIP: 0033:0x7f3a0bdece59 [ 601.774377][T14653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.774391][T14653] RSP: 002b:00007f3a0a03e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 601.774409][T14653] RAX: ffffffffffffffda RBX: 00007f3a0c065fa0 RCX: 00007f3a0bdece59 [ 601.774421][T14653] RDX: 0000000000000022 RSI: 0000200000001700 RDI: 0000000000000003 [ 601.774431][T14653] RBP: 00007f3a0a03e090 R08: 0000200000000200 R09: 0000000000000014 [ 601.774443][T14653] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 601.774456][T14653] R13: 00007f3a0c066038 R14: 00007f3a0c065fa0 R15: 00007ffe5cdcdf18 [ 601.774481][T14653] [ 602.205419][T14659] netlink: 'syz.4.3073': attribute type 27 has an invalid length. [ 602.229815][T14659] fuse: Invalid rootmode [ 602.380744][T14664] No control pipe specified [ 602.381282][ T5699] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 602.541294][ T5699] usb 4-1: Using ep0 maxpacket: 32 [ 602.543833][ T5699] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 602.543863][ T5699] usb 4-1: config 0 has no interface number 0 [ 602.543914][ T5699] usb 4-1: config 0 interface 184 has no altsetting 0 [ 602.547990][ T5699] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 602.548021][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.548043][ T5699] usb 4-1: Product: syz [ 602.548059][ T5699] usb 4-1: Manufacturer: syz [ 602.548075][ T5699] usb 4-1: SerialNumber: syz [ 602.632874][ T5699] usb 4-1: config 0 descriptor?? [ 602.920167][ T5699] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 602.920204][ T5699] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 602.920226][ T5699] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 602.920538][ T5699] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 603.005192][T14681] FAULT_INJECTION: forcing a failure. [ 603.005192][T14681] name failslab, interval 1, probability 0, space 0, times 0 [ 603.005224][T14681] CPU: 1 UID: 0 PID: 14681 Comm: syz.4.3081 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 603.005249][T14681] Tainted: [L]=SOFTLOCKUP [ 603.005256][T14681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 603.005267][T14681] Call Trace: [ 603.005274][T14681] [ 603.005281][T14681] dump_stack_lvl+0xe8/0x150 [ 603.005306][T14681] should_fail_ex+0x46b/0x600 [ 603.005336][T14681] should_failslab+0xa8/0x100 [ 603.005361][T14681] __kmalloc_cache_noprof+0x84/0x690 [ 603.005383][T14681] ? __se_sys_mount+0x166/0x420 [ 603.005402][T14681] ? memdup_user+0x99/0xd0 [ 603.005421][T14681] __se_sys_mount+0x166/0x420 [ 603.005445][T14681] ? __pfx___se_sys_mount+0x10/0x10 [ 603.005470][T14681] ? __x64_sys_mount+0x20/0xc0 [ 603.005489][T14681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.005507][T14681] do_syscall_64+0x174/0x580 [ 603.005533][T14681] ? trace_irq_disable+0x3b/0x140 [ 603.005552][T14681] ? clear_bhb_loop+0x40/0x90 [ 603.005574][T14681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.005592][T14681] RIP: 0033:0x7f081743ce59 [ 603.005608][T14681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.005624][T14681] RSP: 002b:00007f0815696028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 603.005643][T14681] RAX: ffffffffffffffda RBX: 00007f08176b5fa0 RCX: 00007f081743ce59 [ 603.005656][T14681] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 603.005669][T14681] RBP: 00007f0815696090 R08: 0000200000000100 R09: 0000000000000000 [ 603.005681][T14681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.005692][T14681] R13: 00007f08176b6038 R14: 00007f08176b5fa0 R15: 00007fffe0ab3f18 [ 603.005719][T14681] [ 603.034991][ T5699] usb 4-1: USB disconnect, device number 78 [ 603.489939][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3084'. [ 604.080581][T14714] FAULT_INJECTION: forcing a failure. [ 604.080581][T14714] name failslab, interval 1, probability 0, space 0, times 0 [ 604.080621][T14714] CPU: 0 UID: 0 PID: 14714 Comm: syz.3.3093 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 604.080653][T14714] Tainted: [L]=SOFTLOCKUP [ 604.080662][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 604.080675][T14714] Call Trace: [ 604.080684][T14714] [ 604.080695][T14714] dump_stack_lvl+0xe8/0x150 [ 604.080726][T14714] should_fail_ex+0x46b/0x600 [ 604.080764][T14714] should_failslab+0xa8/0x100 [ 604.080796][T14714] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 604.080823][T14714] ? __alloc_skb+0x1d0/0x7d0 [ 604.080852][T14714] ? lockdep_hardirqs_on+0x7a/0x110 [ 604.080890][T14714] __alloc_skb+0x1d0/0x7d0 [ 604.080919][T14714] ? netlink_ack_tlv_len+0x6c/0x210 [ 604.080969][T14714] netlink_ack+0x146/0xa50 [ 604.081000][T14714] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.081023][T14714] ? ref_tracker_free+0x673/0x820 [ 604.081058][T14714] ? ____sys_sendmsg+0x55c/0x870 [ 604.081089][T14714] ? ___sys_sendmsg+0x2a5/0x360 [ 604.081120][T14714] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 604.081152][T14714] ? do_syscall_64+0x174/0x580 [ 604.081182][T14714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.081215][T14714] netlink_rcv_skb+0x2b6/0x4b0 [ 604.081250][T14714] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.081279][T14714] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.081327][T14714] ? netlink_deliver_tap+0x2e/0x1b0 [ 604.081361][T14714] ? netlink_deliver_tap+0x2e/0x1b0 [ 604.081399][T14714] genl_rcv+0x28/0x40 [ 604.081423][T14714] netlink_unicast+0x780/0x920 [ 604.081466][T14714] netlink_sendmsg+0x813/0xb40 [ 604.081511][T14714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.081547][T14714] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 604.081580][T14714] ? aa_sock_msg_perm+0x122/0x200 [ 604.081606][T14714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.081641][T14714] sock_sendmsg_nosec+0x13a/0x180 [ 604.081669][T14714] ____sys_sendmsg+0x55c/0x870 [ 604.081710][T14714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.081756][T14714] ? import_iovec+0x73/0xa0 [ 604.081784][T14714] ___sys_sendmsg+0x2a5/0x360 [ 604.081816][T14714] ? __lock_acquire+0x6b5/0x2d10 [ 604.081848][T14714] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.081921][T14714] ? __fget_files+0x2a/0x420 [ 604.081954][T14714] ? __fget_files+0x3a6/0x420 [ 604.081993][T14714] __x64_sys_sendmsg+0x1c3/0x2a0 [ 604.082030][T14714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.082075][T14714] ? __pfx_ksys_write+0x10/0x10 [ 604.082116][T14714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.082140][T14714] do_syscall_64+0x174/0x580 [ 604.082171][T14714] ? trace_irq_disable+0x3b/0x140 [ 604.082196][T14714] ? clear_bhb_loop+0x40/0x90 [ 604.082225][T14714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.082247][T14714] RIP: 0033:0x7f3afcc9ce59 [ 604.082268][T14714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.082287][T14714] RSP: 002b:00007f3afaeee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.082312][T14714] RAX: ffffffffffffffda RBX: 00007f3afcf15fa0 RCX: 00007f3afcc9ce59 [ 604.082328][T14714] RDX: 0000000000004004 RSI: 0000200000000640 RDI: 0000000000000003 [ 604.082344][T14714] RBP: 00007f3afaeee090 R08: 0000000000000000 R09: 0000000000000000 [ 604.082358][T14714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.082373][T14714] R13: 00007f3afcf16038 R14: 00007f3afcf15fa0 R15: 00007ffeca55b7b8 [ 604.082408][T14714] [ 604.496265][ T39] INFO: task syz.1.1949:11584 blocked for more than 143 seconds. [ 604.496297][ T39] Tainted: G L syzkaller #0 [ 604.496311][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.496323][ T39] task:syz.1.1949 state:D stack:24824 pid:11584 tgid:11584 ppid:5609 task_flags:0x400040 flags:0x00080002 [ 604.496391][ T39] Call Trace: [ 604.496400][ T39] [ 604.496415][ T39] __schedule+0x16f9/0x5500 [ 604.496469][ T39] ? arch_scale_cpu_capacity+0x18/0xb0 [ 604.496514][ T39] ? __pfx___schedule+0x10/0x10 [ 604.496543][ T39] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 604.496585][ T39] rt_mutex_schedule+0x76/0xf0 [ 604.496617][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 604.496656][ T39] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 604.496683][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 604.496712][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 604.496739][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 604.496776][ T39] ? bdev_release+0x1af/0x660 [ 604.496825][ T39] ? bdev_release+0x1af/0x660 [ 604.496856][ T39] mutex_lock_nested+0x168/0x1d0 [ 604.496881][ T39] ? __pfx___fsnotify_parent+0x10/0x10 [ 604.496924][ T39] bdev_release+0x1af/0x660 [ 604.496967][ T39] ? __pfx_blkdev_release+0x10/0x10 [ 604.497009][ T39] blkdev_release+0x15/0x20 [ 604.497031][ T39] __fput+0x461/0xa70 [ 604.497068][ T39] task_work_run+0x1d9/0x270 [ 604.497100][ T39] ? __pfx_task_work_run+0x[ 604.497100][ T39] ? __pfx_task_work_run+0x10/0x10 [ 604.497139][ T39] exit_to_user_mode_loop+0x193/0x680 [ 604.497165][ T39] ? rcu_is_watching+0x15/0xb0 [ 604.497197][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.497223][ T39] do_syscall_64+0x353/0x580 [ 604.497254][ T39] ? trace_irq_disable+0x3b/0x140 [ 604.497280][ T39] ? clear_bhb_loop+0x40/0x90 [ 604.497309][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.497333][ T39] RIP: 0033:0x7f66b6e3ce59 [ 604.497353][ T39] RSP: 002b:00007ffda60178e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 604.497377][ T39] RAX: 0000000000000000 RBX: 00007f66b70b7da0 RCX: 00007f66b6e3ce59 [ 604.497393][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 604.497408][ T39] RBP: 00007f66b70b7da0 R08: 00007f66b70b6128 R09: 0000000000000000 [ 604.497424][ T39] R10: 00000000003ff2d8 R11: 0000000000000246 R12: 000000000006bb66 [ 604.497440][ T39] R13: 00007f66b70b618c R14: 000000000006b8db R15: 00007f66b70b6180 [ 604.497476][ T39] [ 604.497537][ T39] [ 604.497537][ T39] Showing all locks held in the system: [ 604.497551][ T39] 1 lock held by khungtaskd/39: [ 604.497564][ T39] #0: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 604.497662][ T39] 2 locks held by kworker/u9:1/4925: [ 604.497676][ T39] #0: ffff8880276aa938 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 604.497740][ T39] #1: ffffc90008cc7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 604.497803][ T39] 2 locks held by udevd/4976: [ 604.497817][ T39] #0: ffffffff8e9009b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 604.497881][ T39] #1: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 604.497950][ T39] 2 locks held by getty/5363: [ 604.497962][ T39] #0: ffff8880367140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 604.504475][ T39] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 604.504664][ T39] 4 locks held by kworker/0:4/5699: [ 604.504691][ T39] #0: ffff88813fe17938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 604.504858][ T39] #1: ffffc90005b1fc40 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 604.505070][ T39] #2: ffff8880b863cf58 ((lock)#5){+.+.}-{3:3}, at: trylock_stock+0x103/0x350 [ 604.505224][ T39] #3: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 604.505382][ T39] 1 lock held by udevd/5778: [ 604.505422][ T39] #0: ffff8880276134c8 (&disk->open_mutex#5){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 604.505656][ T39] 10 locks held by syz-executor/10830: [ 604.505683][ T39] #0: ffffffff8e29d2f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 604.505832][ T39] #1: ffff888060f862b0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x184/0x1d70 [ 604.505890][ T39] #2: ffff88803b9b1f30 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x272/0x1d70 [ 604.506040][ T39] #3: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 604.534552][ T39] #4: ffff888036b3b598 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 604.534726][ T39] #5: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 604.534875][ T39] #6: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 604.535023][ T39] #7: ffff88803f9a7658 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x5ae/0x5550 [ 604.535195][ T39] #8: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1de/0x3f0 [ 604.535347][ T39] #9: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: page_table_check_set+0x126/0x510 [ 604.535516][ T39] 1 lock held by syz.1.1949/11584: [ 604.535549][ T39] #0: ffff8880276134c8 (&disk->open_mutex#5){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 604.535764][ T39] 4 locks held by kworker/u8:44/12098: [ 604.535810][ T39] #0: ffff888032ff2938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 604.536009][ T39] #1: ffffc900047dfc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 604.552077][ T39] #2: ffffffff8e061400 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 604.552142][ T39] #3: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 604.552325][ T39] 2 locks held by kworker/u8:56/12214: [ 604.552359][ T39] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 604.552521][ T39] #1: ffffc90003e9fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 604.552696][ T39] 1 lock held by syz.2.2465/13086: [ 604.552736][ T39] #0: ffff8880276134c8 (&disk->open_mutex#5){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 [ 604.552934][ T39] 1 lock held by syz.2.2465/13091: [ 604.552974][ T39] #0: ffff8880276134c8 (&disk->open_mutex#5){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 [ 604.553171][ T39] 3 locks held by kworker/u8:63/14010: [ 604.553210][ T39] #0: ffff888039e36938 ((wq_completion)krds_cp_wq#5/4){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 604.553346][ T39] #1: ffffc90007e2fc40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 604.553477][ T39] #2: ffff88806a014088 (&cp->cp_lock){+.+.}-{3:3}, at: rds_send_xmit+0x67b/0x2910 [ 604.576678][ T39] 3 locks held by kworker/u8:64/14011: [ 604.576732][ T39] #0: ffff888039e35138 ((wq_completion)krds_cp_wq#5/5){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 604.576931][ T39] #1: ffffc90007e4fc40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 604.577093][ T39] #2: ffff88806a014088 (&cp->cp_lock){+.+.}-{3:3}, at: rds_send_xmit+0x67b/0x2910 [ 604.577237][ T39] 5 locks held by syz.4.3083/14688: [ 604.577251][ T39] #0: ffff88813fe38430 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 604.577479][ T39] #1: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 604.577622][ T39] #2: ffff88803f458d18 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 604.577789][ T39] #3: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 604.577943][ T39] #4: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: page_table_check_clear+0x124/0x4f0 [ 604.578091][ T39] 3 locks held by syz.5.3084/14694: [ 604.578124][ T39] #0: ffff88813fe391b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 604.600594][ T39] #1: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 604.600772][ T39] #2: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 604.600944][ T39] 7 locks held by syz.6.3094/14715: [ 604.600978][ T39] #0: ffff88803ba4e808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 604.601136][ T39] #1: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x12b5/0x2940 [ 604.601289][ T39] #2: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1db/0x1c50 [ 604.601464][ T39] #3: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 604.601605][ T39] #4: ffff888029008418 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 604.601846][ T39] #5: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 604.601898][ T39] #6: ffffffff8e1caca0 (rcu_read_lock){....}-{1:3}, at: page_table_check_set+0x126/0x510 [ 604.601962][ T39] [ 604.601968][ T39] ============================================= [ 604.601968][ T39] [ 604.601988][ T39] NMI backtrace for cpu 0 [ 604.602011][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 604.602063][ T39] Tainted: [L]=SOFTLOCKUP [ 604.602072][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 604.602085][ T39] Call Trace: [ 604.602095][ T39] [ 604.602104][ T39] dump_stack_lvl+0xe8/0x150 [ 604.602134][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 604.602161][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 604.602238][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 604.602393][ T39] sys_info+0x135/0x170 [ 604.602457][ T39] watchdog+0xfd3/0x1030 [ 604.602541][ T39] ? watchdog+0x1c9/0x1030 [ 604.602617][ T39] kthread+0x388/0x470 [ 604.602668][ T39] ? __pfx_watchdog+0x10/0x10 [ 604.602686][ T39] ? __pfx_kthread+0x10/0x10 [ 604.602731][ T39] ret_from_fork+0x514/0xb70 [ 604.602807][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 604.602873][ T39] ? __switch_to+0xc79/0x1410 [ 604.602956][ T39] ? __pfx_kthread+0x10/0x10 [ 604.603023][ T39] ret_from_fork_asm+0x1a/0x30 [ 604.603140][ T39] [ 604.603207][ T39] Sending NMI from CPU 0 to CPUs 1: [ 604.603257][ C1] NMI backtrace for cpu 1 [ 604.603275][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 604.603302][ C1] Tainted: [L]=SOFTLOCKUP [ 604.603309][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 604.603321][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 604.603348][ C1] Code: e8 8e 71 7a fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5f 0a e5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a c2 f2 05 cc 44 89 f9 80 e1 07 [ 604.603365][ C1] RSP: 0018:ffffc900001679f0 EFLAGS: 00000202 [ 604.603382][ C1] RAX: 1ffffffff33c1c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 604.603396][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 604.603408][ C1] RBP: ffffffff99e0e290 R08: 0000000000000000 R09: 0000000000000000 [ 604.603420][ C1] R10: dffffc0000000000 R11: ffffffff854b2a10 R12: dffffc0000000000 [ 604.603435][ C1] R13: 0000000000000000 R14: ffffffff99e0e000 R15: 0000000000000000 [ 604.603448][ C1] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 604.603464][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 604.603477][ C1] CR2: 00007f3afda456b8 CR3: 000000003248e000 CR4: 00000000003526f0 [ 604.603499][ C1] Call Trace: [ 604.603506][ C1] [ 604.603515][ C1] wait_for_lsr+0x1aa/0x2f0 [ 604.603542][ C1] serial8250_console_write+0x114b/0x1b50 [ 604.603573][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 604.603597][ C1] ? console_flush_one_record+0xfa/0xb90 [ 604.603622][ C1] ? console_flush_one_record+0x48f/0xb90 [ 604.603646][ C1] console_flush_one_record+0x68b/0xb90 [ 604.603677][ C1] ? console_flush_one_record+0xfa/0xb90 [ 604.603701][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 604.603723][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 604.603754][ C1] legacy_kthread_func+0x1b6/0x250 [ 604.603776][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 604.603796][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 604.603817][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 604.603851][ C1] kthread+0x388/0x470 [ 604.603871][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 604.603890][ C1] ? __pfx_kthread+0x10/0x10 [ 604.603912][ C1] ret_from_fork+0x514/0xb70 [ 604.603935][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 604.603957][ C1] ? __switch_to+0xc79/0x1410 [ 604.603976][ C1] ? __pfx_kthread+0x10/0x10 [ 604.603996][ C1] ret_from_fork_asm+0x1a/0x30 [ 604.604030][ C1] [ 604.642964][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 604.643040][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 604.643125][ T39] Tainted: [L]=SOFTLOCKUP [ 604.643155][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 604.643200][ T39] Call Trace: [ 604.643231][ T39] [ 604.643255][ T39] vpanic+0x56c/0xa60 [ 604.643358][ T39] ? __pfx___schedule+0x10/0x10 [ 604.643435][ T39] ? __pfx_vpanic+0x10/0x10 [ 604.643549][ T39] panic+0xc5/0xd0 [ 604.643635][ T39] ? __pfx_panic+0x10/0x10 [ 604.643710][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 604.643854][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 604.643934][ T39] watchdog+0x102c/0x1030 [ 604.644000][ T39] ? watchdog+0x1c9/0x1030 [ 604.644079][ T39] kthread+0x388/0x470 [ 604.644151][ T39] ? __pfx_watchdog+0x10/0x10 [ 604.644206][ T39] ? __pfx_kthread+0x10/0x10 [ 604.644278][ T39] ret_from_fork+0x514/0xb70 [ 604.644353][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 604.644425][ T39] ? __switch_to+0xc79/0x1410 [ 604.644489][ T39] ? __pfx_kthread+0x10/0x10 [ 604.644561][ T39] ret_from_fork_asm+0x1a/0x30 [ 604.644671][ T39] [ 604.644866][ T39] Kernel Offset: disabled