last executing test programs: 2m8.275985858s ago: executing program 3 (id=2261): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2b80bab3ee8c35d6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 2m8.166697466s ago: executing program 3 (id=2263): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x75e7, &(0x7f0000000480)={0x0, 0x7210, 0x2, 0x1, 0x1cb}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit$UBLK(0x0, r0, r2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r1, &(0x7f0000000180)={0x0, 0x9878, 0x0, 0x1, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040081, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m7.203529332s ago: executing program 3 (id=2268): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x28d00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x6c) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYBLOB="010025bd7000fedade2531", @ANYRESDEC=r0, @ANYRESHEX=r2], 0x34}, 0x1, 0x0, 0x0, 0x28000}, 0x2400c894) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) 2m4.5934228s ago: executing program 3 (id=2278): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_gettime(r2, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x467c94eb88da86b, 0x6) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x24}, 0x94) r3 = syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000c00)={0x201ff, 0x200, 0x2, {0x6, @sdr={0xa0363159, 0x9}}, 0x9}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6d", 0x8}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r5, 0x80186e84, &(0x7f0000001080)={&(0x7f0000001000)=[{0x4, 0x8}, {0xf62, 0x8}, {0x1e02833b, 0x2}, {0x69, 0x4}, {0x6, 0xb}, {0x8, 0x80000001}, {0x4, 0x8, 0x2}], 0x7, 0x10, 0x1, 0x800}) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7573656d656d6f72792e8676656e74732e6c6f63636c0043a100a9b7d595f476ebba32614addda8adf75c09820c2713afcbdd623cce9f69e12f489b1f2ecb613aa2f179ddfab055ae9a921314cdb8cb21ee1abbd569c790b54b9ff13fcce0ecd04820513986d5a640ef35d25dd082513e3c9"]) 2m3.434108866s ago: executing program 3 (id=2287): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2b80bab3ee8c35d6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 2m2.472426996s ago: executing program 3 (id=2291): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x40c0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 2m2.196615586s ago: executing program 32 (id=2291): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x40c0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1m39.002900885s ago: executing program 0 (id=2378): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="66696c65203f7269766572732f6869642f6869642d636f72652e63206c696e6520329d3838202b", 0x27) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x8001af85, &(0x7f0000000000)) 1m36.436014092s ago: executing program 0 (id=2380): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) 1m36.079250619s ago: executing program 0 (id=2382): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="66696c65203f7269766572732f6869642f6869642d636f72652e63206c696e6520329d3838202b", 0x27) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x8001af85, &(0x7f0000000000)) 1m35.871101101s ago: executing program 0 (id=2385): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) lremovexattr(&(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)=@random={'osx.', 'tracefs\x00'}) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x267) 1m34.360171382s ago: executing program 0 (id=2386): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05070b20"], 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000010c0)={0x1c, &(0x7f0000000300)={0x40, 0xa, 0x3, 'HTs'}, 0x0, 0x0}) 1m29.32388109s ago: executing program 0 (id=2394): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="66696c65203f7269766572732f6869642f6869642d636f72652e63206c696e6520329d3838202b", 0x27) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x8001af85, &(0x7f0000000000)) 1m28.604603619s ago: executing program 33 (id=2394): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="66696c65203f7269766572732f6869642f6869642d636f72652e63206c696e6520329d3838202b", 0x27) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x8001af85, &(0x7f0000000000)) 22.307741745s ago: executing program 5 (id=2562): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x40c0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 22.166946512s ago: executing program 5 (id=2564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="13020000fb0080ff00ff010000002f8d4aa1992dd15e0000a11100000095000200aadaddd9bd5711e7573fc5608bf42db351529bfb8119f7f8abe45d51b3b98730f49ad4dee94e7433ae956b2123acf5c1ddad264e5194f6d2a0540da96979ec62efa4a8331a652d50fb7b95059d02380841a49cf4a470c1702933671462"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff7a) r1 = add_key$fscrypt_v1(&(0x7f00000008c0), 0x0, &(0x7f0000000140)={0x0, "a8c4ebbdc852a01a5bb1aa623ab776367ba9801e4029664c1b7c56739c490b941ab94b9780dac9f93dc53eec6f742255178730103087c2780076b0f5a3cb6751", 0x28}, 0x48, 0xfffffffffffffffe) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x1000) keyctl$clear(0x7, 0x0) keyctl$link(0x8, r1, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 21.995945954s ago: executing program 1 (id=2565): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000802, 0xfffffffffffffffe}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'wg2\x00', &(0x7f0000000140)=@ethtool_ts_info}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r5, 0x1) prlimit64(r0, 0x6, &(0x7f0000000240)={0x1, 0xb56}, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 20.001949193s ago: executing program 5 (id=2567): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab70102030109021200010000000009040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.913098534s ago: executing program 2 (id=2568): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x75e7, &(0x7f0000000480)={0x0, 0x7210, 0x2, 0x1, 0x1cb}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit$UBLK(0x0, r0, r2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r1, &(0x7f0000000180)={0x0, 0x9878, 0x0, 0x1, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040081, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 19.406252262s ago: executing program 2 (id=2571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 19.11544479s ago: executing program 2 (id=2572): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 18.894471274s ago: executing program 2 (id=2573): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[], 0x0) 18.784296193s ago: executing program 1 (id=2574): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'dummy0\x00', &(0x7f00000003c0)=@ethtool_ringparam={0x11, 0x5, 0x5, 0x8001, 0x961, 0x2483602a, 0x3, 0x0, 0xffffffff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002a80)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, r4}, @generic={0x3d, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 18.783772883s ago: executing program 6 (id=2575): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0xb4, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r3, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 17.471284041s ago: executing program 6 (id=2576): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 16.76108977s ago: executing program 1 (id=2577): sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x40c0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 16.743220809s ago: executing program 4 (id=2578): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 16.656256601s ago: executing program 5 (id=2579): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x1) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000004ec0)=""/4063, 0xfdf}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000003dc0)=""/203, 0xcb}, {&(0x7f0000001c00)=""/173, 0xad}, {&(0x7f0000001cc0)=""/77, 0x4d}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x9}, 0x20) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) mlockall(0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r5, 0x0, 0x0, 0x8000c61) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) 16.54342322s ago: executing program 1 (id=2580): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05070b20"], 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000010c0)={0x1c, &(0x7f0000000300)={0x40, 0xa}, 0x0, 0x0}) 16.503046032s ago: executing program 4 (id=2581): openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(0x0, 0x0, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_pidfd_open(r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newqdisc={0x110, 0x24, 0x480, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x5, 0xfff1}, {0x7, 0xd}, {0xffff, 0x1}}, [@q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x19}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7f}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x27}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000070}, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r5, &(0x7f0000000e00)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r6, &(0x7f0000000700)='1', 0x1) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) 16.272263083s ago: executing program 4 (id=2582): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='file ?river', 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x8001af85, &(0x7f0000000000)) 14.883827261s ago: executing program 2 (id=2583): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x449, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x9}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x3, 0x1, 0x4, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getpeername$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x32, 0x0, 0x2}, 0x28) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'hsr0\x00'}) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/111, 0x6f}], 0x2, 0x401, 0x1) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000080)) 14.840752317s ago: executing program 6 (id=2584): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 14.599855409s ago: executing program 4 (id=2585): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000010c0)={0x1c, &(0x7f0000000300)={0x40, 0xa, 0x3, 'HTs'}, 0x0, 0x0}) 14.506846938s ago: executing program 6 (id=2586): sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 14.331105995s ago: executing program 6 (id=2587): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'dummy0\x00', &(0x7f00000003c0)=@ethtool_ringparam={0x11, 0x5, 0x5, 0x8001, 0x961, 0x2483602a, 0x3, 0x0, 0xffffffff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, r4}, @generic={0x3d, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r6, 0x8100587e, &(0x7f00000001c0)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x44, 0x1a, 0x1, 0x70bd2d, 0x4000800, {0xa, 0x0, 0x0, 0x0, 0x80, 0x8, 0x36eb47deb9f71e09}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x0, 0x0, 0x1}}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) 13.464621791s ago: executing program 5 (id=2588): add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x4a, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (fail_nth: 1) 13.210431513s ago: executing program 2 (id=2589): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000010c0)={0x1c, &(0x7f0000000300)={0x40, 0xa, 0x3, 'HTs'}, 0x0, 0x0}) 12.252708025s ago: executing program 1 (id=2590): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40c0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 11.959903846s ago: executing program 5 (id=2591): add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r3 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@any_dev={0x4, 0x194, 0x0, 0x0, 0x1000, 0x0, r3, 0x0, 0xa8}}}, &(0x7f0000000840)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ad5ce39667bde4014c9745573838", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x4a, &(0x7f0000000240)=0x2) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/12, 0xc}, 0xaba}], 0x1, 0x40000003, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000100)=0x7, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000003700)=[{{&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, &(0x7f0000003580), 0x0, &(0x7f0000003600)=""/198}, 0x7}], 0x4000000000002c7, 0x6c6a24ca9f8b8e, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 10.46499747s ago: executing program 4 (id=2592): openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(0x0, 0x0, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_pidfd_open(r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@newqdisc={0x110, 0x24, 0x480, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x5, 0xfff1}, {0x7, 0xd}, {0xffff, 0x1}}, [@q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x19}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7f}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x27}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000070}, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r5, &(0x7f0000000e00)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r6, &(0x7f0000000700)='1', 0x1) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) 8.667891859s ago: executing program 1 (id=2593): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[], 0x0) 4.980526202s ago: executing program 4 (id=2594): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x8001af85, &(0x7f0000000000)) 0s ago: executing program 6 (id=2595): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='file ?river', 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x8001af85, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ing dummy_hcd [ 660.212849][ T5607] usb 3-1: Using ep0 maxpacket: 32 [ 660.216573][ T5607] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 660.217997][T12571] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 660.219904][T12571] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 660.221019][ T5607] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.221043][ T5607] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 660.221081][ T5607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.227940][T12571] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 660.241954][T12571] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 660.242008][T12571] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 660.273563][ T5607] usb 3-1: config 0 descriptor?? [ 660.324832][ T5728] usb 5-1: USB disconnect, device number 46 [ 660.376786][ T5728] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 660.380204][ T5728] pl2303 5-1:1.0: device disconnected [ 660.497898][ T5726] usb 3-1: USB disconnect, device number 47 [ 660.732386][ T5727] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 660.880971][T12607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2135'. [ 660.881015][T12607] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2135'. [ 660.957134][ T5727] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 661.105438][ T5727] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.106324][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 661.106531][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 661.106787][ T5727] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 661.107069][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.504434][ T5718] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 661.734309][T12596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 661.734476][T12596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 661.776327][ T5727] pl2303 2-1:1.0: required interrupt-in endpoint missing [ 661.815569][ T5718] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 661.848032][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 661.848064][ T5718] usb 4-1: Product: syz [ 661.848080][ T5718] usb 4-1: SerialNumber: syz [ 661.889014][ T5718] usb 4-1: config 0 descriptor?? [ 661.977627][T12596] 9p: Bad value for 'rfdno' [ 662.076636][ T5727] usb 2-1: USB disconnect, device number 47 [ 662.100416][T12612] zonefs (nullb1) ERROR: Not a zoned block device [ 662.111521][ T5718] hso 4-1:0.0: Failed to find INT IN ep [ 662.289309][T12621] FAULT_INJECTION: forcing a failure. [ 662.289309][T12621] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 662.289350][T12621] CPU: 1 UID: 0 PID: 12621 Comm: syz.0.2140 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 662.289372][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 662.289387][T12621] Call Trace: [ 662.289455][T12621] [ 662.289467][T12621] dump_stack_lvl+0xe8/0x150 [ 662.289602][T12621] should_fail_ex+0x46b/0x600 [ 662.289649][T12621] _copy_from_user+0x2d/0xb0 [ 662.289681][T12621] ___sys_recvmsg+0x173/0x5a0 [ 662.289764][T12621] ? __pfx____sys_recvmsg+0x10/0x10 [ 662.289795][T12621] ? __fget_files+0x2a/0x420 [ 662.289844][T12621] ? __fget_files+0x3a8/0x420 [ 662.289871][T12621] __x64_sys_recvmsg+0x1b4/0x290 [ 662.289897][T12621] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 662.289935][T12621] do_syscall_64+0x166/0x520 [ 662.289995][T12621] ? trace_irq_disable+0x3b/0x140 [ 662.290028][T12621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.290053][T12621] ? clear_bhb_loop+0x70/0xc0 [ 662.290072][T12621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.290091][T12621] RIP: 0033:0x7f0ece70e0d9 [ 662.290129][T12621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.290142][T12621] RSP: 002b:00007f0ecc966028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 662.290181][T12621] RAX: ffffffffffffffda RBX: 00007f0ece995fa0 RCX: 00007f0ece70e0d9 [ 662.290192][T12621] RDX: 0000000000010000 RSI: 0000200000000840 RDI: 0000000000000003 [ 662.290204][T12621] RBP: 00007f0ecc966090 R08: 0000000000000000 R09: 0000000000000000 [ 662.290215][T12621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.290224][T12621] R13: 00007f0ece996038 R14: 00007f0ece995fa0 R15: 00007ffd64598638 [ 662.290248][T12621] [ 662.433613][T12602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.439736][T12602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.489699][ T5728] usb 4-1: USB disconnect, device number 56 [ 663.882183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 663.902196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 663.912183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 663.922163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 663.932175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 663.942172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 663.952176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 664.562939][T12653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2148'. [ 664.563010][T12653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2148'. [ 665.935874][T12667] netlink: 'syz.2.2155': attribute type 21 has an invalid length. [ 665.962441][ T5727] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 666.123113][ T5718] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 666.306271][ T5727] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 666.711656][ T5727] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 666.983745][ T5727] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 666.988432][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.988461][ T5727] usb 2-1: Product: syz [ 666.988539][ T5727] usb 2-1: Manufacturer: syz [ 666.988556][ T5727] usb 2-1: SerialNumber: syz [ 667.086047][ T5727] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 667.093718][ T5727] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 667.119262][ T5727] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 667.182242][ T5728] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 667.251428][ T5718] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 667.268134][ T5718] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 667.285937][ T5718] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 667.314581][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.314611][ T5718] usb 4-1: Product: syz [ 667.314627][ T5718] usb 4-1: Manufacturer: syz [ 667.314643][ T5718] usb 4-1: SerialNumber: syz [ 667.346820][ T5728] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 667.347655][ T5718] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 667.371554][ T5718] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 667.375114][ T5728] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 667.394777][ T5728] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 667.431604][ T5718] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 667.433104][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.433176][ T5728] usb 5-1: Product: syz [ 667.433218][ T5728] usb 5-1: Manufacturer: syz [ 667.433269][ T5728] usb 5-1: SerialNumber: syz [ 667.501437][T12660] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 667.537980][ T5718] usb 2-1: USB disconnect, device number 48 [ 667.612744][ T5728] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 667.657470][ T5718] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 667.684235][ T5728] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB4 [ 667.695805][ T5711] usb 4-1: USB disconnect, device number 57 [ 667.707965][ T5718] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 667.724685][ T5718] ti_usb_3410_5052 2-1:2.0: device disconnected [ 667.817547][ T5728] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB5 [ 667.927704][ T5711] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 667.944694][ T5728] usb 5-1: USB disconnect, device number 47 [ 667.978350][ T5711] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 667.993924][ T5711] ti_usb_3410_5052 4-1:2.0: device disconnected [ 668.100302][ T5728] ti_usb_3410_5052_2 ttyUSB4: TI USB 5052 2 port adapter converter now disconnected from ttyUSB4 [ 668.160814][ T5728] ti_usb_3410_5052_2 ttyUSB5: TI USB 5052 2 port adapter converter now disconnected from ttyUSB5 [ 668.174993][ T5728] ti_usb_3410_5052 5-1:2.0: device disconnected [ 668.497052][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2159'. [ 668.497248][T12688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2159'. [ 669.754183][ T5718] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 669.762607][ T5728] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 669.904198][ T5718] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 669.905528][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 669.905552][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 669.905570][ T5718] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 669.905589][ T5718] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 669.905616][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.929585][ T5728] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 670.001674][T12692] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 670.002055][T12692] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 670.022426][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.022457][ T5728] usb 3-1: Product: syz [ 670.022472][ T5728] usb 3-1: Manufacturer: syz [ 670.022488][ T5728] usb 3-1: SerialNumber: syz [ 670.036255][ T5718] pl2303 4-1:1.0: pl2303 converter detected [ 670.120106][ T5728] usb 3-1: config 0 descriptor?? [ 670.120873][ T5718] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 670.157176][T12701] tipc: Started in network mode [ 670.157213][T12701] tipc: Node identity 366be1a65028, cluster identity 4711 [ 670.157794][T12701] tipc: Enabled bearer , priority 10 [ 670.267760][ T5718] usb 4-1: USB disconnect, device number 58 [ 670.319258][ T5718] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 670.330746][ T5718] pl2303 4-1:1.0: device disconnected [ 670.513222][ T5610] Bluetooth: hci2: unexpected cc 0x200b length: 2 > 1 [ 670.513265][ T5610] Bluetooth: hci2: unexpected event for opcode 0x200b [ 670.731482][ T5728] usb 3-1: Firmware version (0.0) predates our first public release. [ 670.731512][ T5728] usb 3-1: Please update to version 0.2 or newer [ 670.971170][ T5728] usb 3-1: USB disconnect, device number 48 [ 671.045315][T12713] FAULT_INJECTION: forcing a failure. [ 671.045315][T12713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.045353][T12713] CPU: 0 UID: 0 PID: 12713 Comm: syz.1.2165 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 671.045378][T12713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 671.045392][T12713] Call Trace: [ 671.045401][T12713] [ 671.045410][T12713] dump_stack_lvl+0xe8/0x150 [ 671.045452][T12713] should_fail_ex+0x46b/0x600 [ 671.045487][T12713] _copy_from_user+0x2d/0xb0 [ 671.045521][T12713] __sys_bpf+0x2e7/0xd90 [ 671.045558][T12713] ? __pfx___sys_bpf+0x10/0x10 [ 671.045587][T12713] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 671.045721][T12713] ? rt_mutex_slowunlock+0x219/0x460 [ 671.045772][T12713] ? ksys_write+0x248/0x270 [ 671.045816][T12713] ? __pfx_ksys_write+0x10/0x10 [ 671.045854][T12713] __x64_sys_bpf+0xba/0xd0 [ 671.045882][T12713] do_syscall_64+0x166/0x520 [ 671.045905][T12713] ? trace_irq_disable+0x3b/0x140 [ 671.045929][T12713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.045953][T12713] ? clear_bhb_loop+0x70/0xc0 [ 671.045980][T12713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.046003][T12713] RIP: 0033:0x7f3ecefee0d9 [ 671.046028][T12713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.046047][T12713] RSP: 002b:00007f3ecd246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 671.046071][T12713] RAX: ffffffffffffffda RBX: 00007f3ecf275fa0 RCX: 00007f3ecefee0d9 [ 671.046088][T12713] RDX: 0000000000000008 RSI: 0000200000000280 RDI: 0000000000000021 [ 671.046101][T12713] RBP: 00007f3ecd246090 R08: 0000000000000000 R09: 0000000000000000 [ 671.046115][T12713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.046129][T12713] R13: 00007f3ecf276038 R14: 00007f3ecf275fa0 R15: 00007ffd6a39ea18 [ 671.046163][T12713] [ 671.319306][ T5727] tipc: Node number set to 1715724710 [ 673.068630][T12742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2174'. [ 673.068679][T12742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2174'. [ 673.887742][ T5711] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 673.894570][T12745] FAULT_INJECTION: forcing a failure. [ 673.894570][T12745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.894598][T12745] CPU: 1 UID: 0 PID: 12745 Comm: syz.1.2176 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 673.894616][T12745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.894626][T12745] Call Trace: [ 673.894632][T12745] [ 673.894639][T12745] dump_stack_lvl+0xe8/0x150 [ 673.894682][T12745] should_fail_ex+0x46b/0x600 [ 673.894705][T12745] _copy_from_user+0x2d/0xb0 [ 673.894727][T12745] __x64_sys_signalfd4+0x117/0x1a0 [ 673.894780][T12745] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 673.894808][T12745] do_syscall_64+0x166/0x520 [ 673.894824][T12745] ? trace_irq_disable+0x3b/0x140 [ 673.894841][T12745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.894857][T12745] ? clear_bhb_loop+0x70/0xc0 [ 673.894876][T12745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.894891][T12745] RIP: 0033:0x7f3ecefee0d9 [ 673.894906][T12745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.894920][T12745] RSP: 002b:00007f3ecd246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 673.894936][T12745] RAX: ffffffffffffffda RBX: 00007f3ecf275fa0 RCX: 00007f3ecefee0d9 [ 673.894947][T12745] RDX: 0000000000000008 RSI: 0000200000002140 RDI: ffffffffffffffff [ 673.894958][T12745] RBP: 00007f3ecd246090 R08: 0000000000000000 R09: 0000000000000000 [ 673.894967][T12745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.894976][T12745] R13: 00007f3ecf276038 R14: 00007f3ecf275fa0 R15: 00007ffd6a39ea18 [ 673.894999][T12745] [ 674.162280][ T5728] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 674.253457][ T5711] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 674.255060][ T5711] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 674.255097][ T5711] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 674.256596][ T5711] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 674.256630][ T5711] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 674.315772][ T5728] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 674.317797][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.317951][ T5711] usb 4-1: Product: syz [ 674.317969][ T5711] usb 4-1: Manufacturer: syz [ 674.317985][ T5711] usb 4-1: SerialNumber: syz [ 674.322734][ T5728] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.322884][ T5728] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 674.322945][ T5728] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 674.323017][ T5728] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.323129][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.432785][T12738] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 674.434907][T12738] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 674.468365][ T5711] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 674.484853][ T5728] pl2303 5-1:1.0: required interrupt-in endpoint missing [ 674.529932][ T5711] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 674.550576][ T5711] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 674.670624][T12738] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 674.706861][T12734] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 674.729092][ T5711] usb 4-1: USB disconnect, device number 59 [ 674.731083][T12738] 9p: Bad value for 'rfdno' [ 674.795988][ T5711] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 674.855011][ T5711] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 674.859087][ T5711] ti_usb_3410_5052 4-1:2.0: device disconnected [ 674.887007][ T5728] usb 5-1: USB disconnect, device number 48 [ 676.182367][ T5607] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 676.333017][ T5607] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 676.335444][ T5607] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 676.335480][ T5607] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 676.376306][ T5607] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 676.376346][ T5607] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 676.384925][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.385008][ T5607] usb 3-1: Product: syz [ 676.385052][ T5607] usb 3-1: Manufacturer: syz [ 676.385094][ T5607] usb 3-1: SerialNumber: syz [ 676.480999][ T5607] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 676.541257][ T5607] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 676.565187][ T5607] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 676.600215][T12765] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2182'. [ 676.797339][T12755] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 677.282548][ T5727] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 677.464882][ T5727] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 677.485529][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.485560][ T5727] usb 5-1: Product: syz [ 677.485577][ T5727] usb 5-1: Manufacturer: syz [ 677.485592][ T5727] usb 5-1: SerialNumber: syz [ 677.529138][ T5727] usb 5-1: config 0 descriptor?? [ 678.003479][ T37] audit: type=1800 audit(1787620599.324:134): pid=12794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2192" name="memory_backed" dev="configfs" ino=76900 res=0 errno=0 [ 678.004966][ T37] audit: type=1800 audit(1787620599.324:135): pid=12794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2192" name="zone_nr_conv" dev="configfs" ino=76901 res=0 errno=0 [ 678.005025][ T37] audit: type=1800 audit(1787620599.324:136): pid=12794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2192" name="power" dev="configfs" ino=76902 res=0 errno=0 [ 678.145100][ T5607] usb 3-1: USB disconnect, device number 49 [ 678.199379][ T5607] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 678.246315][ T5607] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 678.253561][ T5607] ti_usb_3410_5052 3-1:2.0: device disconnected [ 680.105859][ T5727] usb 5-1: USB disconnect, device number 49 [ 680.461246][ T37] audit: type=1800 audit(1787620601.774:137): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2203" name="memory_backed" dev="configfs" ino=77837 res=0 errno=0 [ 680.468599][ T37] audit: type=1800 audit(1787620601.784:138): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2203" name="zone_nr_conv" dev="configfs" ino=77838 res=0 errno=0 [ 680.468654][ T37] audit: type=1800 audit(1787620601.784:139): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2203" name="power" dev="configfs" ino=77839 res=0 errno=0 [ 680.654041][ T5727] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 680.893867][ T5727] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 681.124372][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.124413][ T5727] usb 5-1: Product: syz [ 681.124428][ T5727] usb 5-1: Manufacturer: syz [ 681.130820][ T5727] usb 5-1: SerialNumber: syz [ 681.464531][ T5727] usb 5-1: config 0 descriptor?? [ 681.898436][ T5610] Bluetooth: hci4: unexpected cc 0x200b length: 2 > 1 [ 681.898534][ T5610] Bluetooth: hci4: unexpected event for opcode 0x200b [ 682.117856][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 682.118042][ T5727] usb 5-1: Firmware version (0.0) predates our first public release. [ 682.118064][ T5727] usb 5-1: Please update to version 0.2 or newer [ 682.345145][ T5727] usb 5-1: USB disconnect, device number 50 [ 682.932262][ T5607] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 683.080541][T12865] rnbd_client L127: Can't parse path ip: -93 [ 683.105214][ T5607] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 683.110206][ T5607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.110235][ T5607] usb 2-1: Product: syz [ 683.110252][ T5607] usb 2-1: Manufacturer: syz [ 683.110268][ T5607] usb 2-1: SerialNumber: syz [ 683.163759][ T5607] usb 2-1: config 0 descriptor?? [ 684.317934][T12898] FAULT_INJECTION: forcing a failure. [ 684.317934][T12898] name failslab, interval 1, probability 0, space 0, times 1 [ 684.317972][T12898] CPU: 0 UID: 0 PID: 12898 Comm: syz.2.2226 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 684.317998][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 684.318012][T12898] Call Trace: [ 684.318020][T12898] [ 684.318029][T12898] dump_stack_lvl+0xe8/0x150 [ 684.318068][T12898] should_fail_ex+0x46b/0x600 [ 684.318103][T12898] should_failslab+0xa8/0x100 [ 684.318164][T12898] __kmalloc_noprof+0xfe/0x780 [ 684.318193][T12898] ? rcu_is_watching+0x16/0xb0 [ 684.318242][T12898] ? tomoyo_realpath_from_path+0xef/0x640 [ 684.318284][T12898] ? tomoyo_realpath_from_path+0xef/0x640 [ 684.318325][T12898] tomoyo_realpath_from_path+0xef/0x640 [ 684.318368][T12898] ? tomoyo_path_number_perm+0x219/0x5f0 [ 684.318396][T12898] tomoyo_path_number_perm+0x246/0x5f0 [ 684.318427][T12898] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 684.318462][T12898] ? __lock_acquire+0x683/0x2ce0 [ 684.318514][T12898] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 684.318537][T12898] ? hook_file_ioctl+0x1f5/0x610 [ 684.318585][T12898] ? __fget_files+0x2a/0x420 [ 684.318618][T12898] ? __fget_files+0x2a/0x420 [ 684.318650][T12898] ? __fget_files+0x3a8/0x420 [ 684.318677][T12898] ? __fget_files+0x2a/0x420 [ 684.318711][T12898] security_file_ioctl+0xc3/0x2a0 [ 684.318742][T12898] __se_sys_ioctl+0x47/0x170 [ 684.318768][T12898] do_syscall_64+0x166/0x520 [ 684.318791][T12898] ? trace_irq_disable+0x3b/0x140 [ 684.318815][T12898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.318838][T12898] ? clear_bhb_loop+0x70/0xc0 [ 684.318865][T12898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.318889][T12898] RIP: 0033:0x7fb22dc0e0d9 [ 684.318909][T12898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.318928][T12898] RSP: 002b:00007fb22be66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 684.318951][T12898] RAX: ffffffffffffffda RBX: 00007fb22de95fa0 RCX: 00007fb22dc0e0d9 [ 684.318967][T12898] RDX: 0000200000000240 RSI: 00000000402c542b RDI: 0000000000000003 [ 684.318981][T12898] RBP: 00007fb22be66090 R08: 0000000000000000 R09: 0000000000000000 [ 684.318994][T12898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.319006][T12898] R13: 00007fb22de96038 R14: 00007fb22de95fa0 R15: 00007fff7aab17d8 [ 684.319041][T12898] [ 684.319155][T12898] ERROR: Out of memory at tomoyo_realpath_from_path. [ 684.612302][ T5607] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 684.760308][T12907] netlink: 'syz.0.2230': attribute type 16 has an invalid length. [ 684.760334][T12907] netlink: 'syz.0.2230': attribute type 3 has an invalid length. [ 684.760351][T12907] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2230'. [ 684.803232][ T5607] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 684.804583][ T5607] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.804656][ T5607] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 684.804690][ T5607] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 684.804791][ T5607] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.804842][ T5607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.859456][T12896] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 684.859614][T12896] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 684.885547][ T5607] pl2303 4-1:1.0: required interrupt-in endpoint missing [ 684.918332][T12909] FAULT_INJECTION: forcing a failure. [ 684.918332][T12909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.918369][T12909] CPU: 1 UID: 0 PID: 12909 Comm: syz.4.2231 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 684.918395][T12909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 684.918409][T12909] Call Trace: [ 684.918417][T12909] [ 684.918427][T12909] dump_stack_lvl+0xe8/0x150 [ 684.918466][T12909] should_fail_ex+0x46b/0x600 [ 684.918501][T12909] _copy_from_user+0x2d/0xb0 [ 684.918542][T12909] ___sys_sendmsg+0x1c6/0x360 [ 684.918576][T12909] ? __lock_acquire+0x683/0x2ce0 [ 684.918607][T12909] ? __pfx____sys_sendmsg+0x10/0x10 [ 684.918675][T12909] ? __fget_files+0x2a/0x420 [ 684.918704][T12909] ? __fget_files+0x3a8/0x420 [ 684.918744][T12909] __x64_sys_sendmsg+0x1b7/0x290 [ 684.918780][T12909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 684.918834][T12909] do_syscall_64+0x166/0x520 [ 684.918857][T12909] ? trace_irq_disable+0x3b/0x140 [ 684.918880][T12909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.918904][T12909] ? clear_bhb_loop+0x70/0xc0 [ 684.918931][T12909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.918953][T12909] RIP: 0033:0x7f177d5be0d9 [ 684.918974][T12909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.918994][T12909] RSP: 002b:00007f177b816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.919017][T12909] RAX: ffffffffffffffda RBX: 00007f177d845fa0 RCX: 00007f177d5be0d9 [ 684.919035][T12909] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 684.919049][T12909] RBP: 00007f177b816090 R08: 0000000000000000 R09: 0000000000000000 [ 684.919063][T12909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.919080][T12909] R13: 00007f177d846038 R14: 00007f177d845fa0 R15: 00007fffeab62fa8 [ 684.919114][T12909] [ 685.211196][ T5727] usb 4-1: USB disconnect, device number 60 [ 685.477087][T12922] zonefs (nullb1) ERROR: Not a zoned block device [ 685.502381][ T5718] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 685.630018][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2237'. [ 685.631003][ T5727] usb 2-1: USB disconnect, device number 49 [ 685.652304][ T5718] usb 5-1: device descriptor read/64, error -71 [ 685.885757][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.885871][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.906037][ T5718] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 685.975954][T12937] process 'syz.1.2243' launched './file0' with NULL argv: empty string added [ 686.052284][ T5718] usb 5-1: device descriptor read/64, error -71 [ 686.138577][T12943] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 686.138607][T12943] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 686.141776][T12943] vhci_hcd vhci_hcd.0: Device attached [ 686.172598][ T5718] usb usb5-port1: attempt power cycle [ 686.220824][ T5610] Bluetooth: hci1: Malformed LE Event: 0x0f [ 686.431711][T12953] FAULT_INJECTION: forcing a failure. [ 686.431711][T12953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.431748][T12953] CPU: 0 UID: 0 PID: 12953 Comm: syz.2.2247 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 686.431774][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 686.431788][T12953] Call Trace: [ 686.431796][T12953] [ 686.431806][T12953] dump_stack_lvl+0xe8/0x150 [ 686.431846][T12953] should_fail_ex+0x46b/0x600 [ 686.431882][T12953] _copy_from_user+0x2d/0xb0 [ 686.431915][T12953] do_ipv6_setsockopt+0x249/0x3180 [ 686.432078][T12953] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 686.432114][T12953] ? get_pid_task+0x20/0x1f0 [ 686.432169][T12953] ? __lock_acquire+0x683/0x2ce0 [ 686.432199][T12953] ? get_pid_task+0x20/0x1f0 [ 686.432232][T12953] ? get_pid_task+0x20/0x1f0 [ 686.432270][T12953] ? get_pid_task+0x20/0x1f0 [ 686.432314][T12953] ? __lock_acquire+0x683/0x2ce0 [ 686.432356][T12953] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 686.432391][T12953] ipv6_setsockopt+0x59/0x170 [ 686.432429][T12953] rawv6_setsockopt+0x276/0x5e0 [ 686.432497][T12953] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 686.432534][T12953] ? sock_common_setsockopt+0x36/0xc0 [ 686.432605][T12953] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 686.432635][T12953] do_sock_setsockopt+0x17c/0x1b0 [ 686.432672][T12953] __x64_sys_setsockopt+0x143/0x1b0 [ 686.432710][T12953] do_syscall_64+0x166/0x520 [ 686.432733][T12953] ? trace_irq_disable+0x3b/0x140 [ 686.432758][T12953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.432782][T12953] ? clear_bhb_loop+0x70/0xc0 [ 686.432810][T12953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.432833][T12953] RIP: 0033:0x7fb22dc0e0d9 [ 686.432855][T12953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.432874][T12953] RSP: 002b:00007fb22be66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 686.432898][T12953] RAX: ffffffffffffffda RBX: 00007fb22de95fa0 RCX: 00007fb22dc0e0d9 [ 686.432915][T12953] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000003 [ 686.432930][T12953] RBP: 00007fb22be66090 R08: 0000000000000004 R09: 0000000000000000 [ 686.432944][T12953] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 686.432959][T12953] R13: 00007fb22de96038 R14: 00007fb22de95fa0 R15: 00007fff7aab17d8 [ 686.432994][T12953] [ 686.672837][ T5718] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 686.692880][ T5718] usb 5-1: device descriptor read/8, error -71 [ 686.850399][T12955] netlink: 'syz.2.2248': attribute type 2 has an invalid length. [ 686.850425][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2248'. [ 686.868552][ T5607] usb 34-1: SetAddress Request (2) to port 0 [ 686.869870][ T5607] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 686.895546][T12946] vhci_hcd: connection closed [ 686.942423][ T5718] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 686.956969][ T5830] vhci_hcd vhci_hcd.0: stop threads [ 686.968871][ T5718] usb 5-1: device descriptor read/8, error -71 [ 686.969954][ T5830] vhci_hcd vhci_hcd.0: release socket [ 687.029218][ T5830] vhci_hcd vhci_hcd.0: disconnect device [ 687.072561][ T5718] usb usb5-port1: unable to enumerate USB device [ 687.532341][ T5728] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 687.723458][ T5728] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 687.726682][ T5728] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.726742][ T5728] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 687.726771][ T5728] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 687.726796][ T5728] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.726842][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.782575][ T5718] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 687.806017][T12966] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 687.806190][T12966] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 687.810731][ T5728] pl2303 2-1:1.0: required interrupt-in endpoint missing [ 687.953118][ T5718] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 687.958256][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.958286][ T5718] usb 3-1: Product: syz [ 687.958306][ T5718] usb 3-1: Manufacturer: syz [ 687.958316][ T5718] usb 3-1: SerialNumber: syz [ 687.999995][ T5718] usb 3-1: config 0 descriptor?? [ 688.019977][ T5728] usb 2-1: USB disconnect, device number 50 [ 689.482396][T12982] FAULT_INJECTION: forcing a failure. [ 689.482396][T12982] name failslab, interval 1, probability 0, space 0, times 0 [ 689.482435][T12982] CPU: 0 UID: 0 PID: 12982 Comm: syz.4.2255 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 689.482461][T12982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 689.482475][T12982] Call Trace: [ 689.482484][T12982] [ 689.482493][T12982] dump_stack_lvl+0xe8/0x150 [ 689.482534][T12982] should_fail_ex+0x46b/0x600 [ 689.482570][T12982] should_failslab+0xa8/0x100 [ 689.482599][T12982] __kmalloc_noprof+0xfe/0x780 [ 689.482622][T12982] ? rcu_is_watching+0x16/0xb0 [ 689.482654][T12982] ? tomoyo_realpath_from_path+0xef/0x640 [ 689.482686][T12982] ? tomoyo_realpath_from_path+0xef/0x640 [ 689.482728][T12982] tomoyo_realpath_from_path+0xef/0x640 [ 689.482777][T12982] ? tomoyo_path_number_perm+0x219/0x5f0 [ 689.482805][T12982] tomoyo_path_number_perm+0x246/0x5f0 [ 689.482836][T12982] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 689.482863][T12982] ? __lock_acquire+0x683/0x2ce0 [ 689.482905][T12982] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 689.482935][T12982] ? hook_file_ioctl+0x1f5/0x610 [ 689.482979][T12982] ? __fget_files+0x2a/0x420 [ 689.483013][T12982] ? __fget_files+0x2a/0x420 [ 689.483042][T12982] ? __fget_files+0x3a8/0x420 [ 689.483069][T12982] ? __fget_files+0x2a/0x420 [ 689.483104][T12982] security_file_ioctl+0xc3/0x2a0 [ 689.483136][T12982] __se_sys_ioctl+0x47/0x170 [ 689.483162][T12982] do_syscall_64+0x166/0x520 [ 689.483186][T12982] ? trace_irq_disable+0x3b/0x140 [ 689.483210][T12982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.483233][T12982] ? clear_bhb_loop+0x70/0xc0 [ 689.483261][T12982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.483284][T12982] RIP: 0033:0x7f177d5be0d9 [ 689.483305][T12982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.483324][T12982] RSP: 002b:00007f177b816028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.483347][T12982] RAX: ffffffffffffffda RBX: 00007f177d845fa0 RCX: 00007f177d5be0d9 [ 689.483363][T12982] RDX: 0000200000000180 RSI: 00000000c0105512 RDI: 0000000000000003 [ 689.483377][T12982] RBP: 00007f177b816090 R08: 0000000000000000 R09: 0000000000000000 [ 689.483391][T12982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.483403][T12982] R13: 00007f177d846038 R14: 00007f177d845fa0 R15: 00007fffeab62fa8 [ 689.483438][T12982] [ 689.487432][T12982] ERROR: Out of memory at tomoyo_realpath_from_path. [ 690.112232][ T5718] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 690.226694][ T5727] usb 3-1: USB disconnect, device number 50 [ 690.263121][ T5718] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 690.267200][ T5718] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 690.290035][ T5718] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 690.319907][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.319937][ T5718] usb 5-1: Product: syz [ 690.319955][ T5718] usb 5-1: Manufacturer: syz [ 690.319970][ T5718] usb 5-1: SerialNumber: syz [ 690.374192][ T5718] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 690.395664][ T5718] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 690.418299][ T5718] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 690.448049][T12997] netlink: 'syz.2.2260': attribute type 2 has an invalid length. [ 690.448071][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'. [ 690.585396][ T5718] usb 5-1: USB disconnect, device number 55 [ 690.643860][ T5718] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 690.707117][ T5718] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 690.744730][ T5718] ti_usb_3410_5052 5-1:2.0: device disconnected [ 691.951900][ T37] audit: type=1326 audit(1787620613.254:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13010 comm="syz.1.2265" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ecefee0d9 code=0x7ffc0000 [ 692.143499][T13027] fuse: Bad value for 'rootmode' [ 692.249953][ T37] audit: type=1326 audit(1787620613.364:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13011 comm="syz.0.2266" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ece70e0d9 code=0x7ffc0000 [ 692.303415][ T37] audit: type=1326 audit(1787620613.364:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13011 comm="syz.0.2266" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ece70e0d9 code=0x7ffc0000 [ 692.305461][ T37] audit: type=1326 audit(1787620613.374:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13011 comm="syz.0.2266" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0ece6ce90e code=0x7ffc0000 [ 692.306650][ T37] audit: type=1326 audit(1787620613.374:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13011 comm="syz.0.2266" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ece70e0d9 code=0x7ffc0000 [ 692.307876][ T37] audit: type=1326 audit(1787620613.374:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13011 comm="syz.0.2266" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ece70e0d9 code=0x7ffc0000 [ 692.309065][ T37] audit: type=1326 audit(1787620613.384:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13011 comm="syz.0.2266" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ece70e0d9 code=0x7ffc0000 [ 692.310891][ T37] audit: type=1326 audit(1787620613.384:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13011 comm="syz.0.2266" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ece70e0d9 code=0x7ffc0000 [ 692.321034][ T37] audit: type=1326 audit(1787620613.384:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13011 comm="syz.0.2266" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ece70e0d9 code=0x7ffc0000 [ 692.324847][ T37] audit: type=1326 audit(1787620613.384:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13011 comm="syz.0.2266" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ece70e0d9 code=0x7ffc0000 [ 693.102356][ T5726] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 693.119182][ T5607] usb 34-1: device descriptor read/8, error -110 [ 693.343030][ T5726] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 693.344566][ T5726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.344624][ T5726] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 693.344653][ T5726] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 693.344677][ T5726] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.344720][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.415685][T13025] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 693.416982][T13025] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 693.460058][ T5726] pl2303 4-1:1.0: required interrupt-in endpoint missing [ 693.529478][ T5607] usb usb34-port1: attempt power cycle [ 693.585182][T13033] netlink: 'syz.1.2272': attribute type 2 has an invalid length. [ 693.585206][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2272'. [ 693.657048][ T5726] usb 4-1: USB disconnect, device number 61 [ 694.102294][ T5727] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 694.147718][ T5607] usb usb34-port1: unable to enumerate USB device [ 694.263288][ T5727] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 694.265451][ T5727] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 694.267325][ T5727] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 694.271091][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.271117][ T5727] usb 2-1: Product: syz [ 694.271133][ T5727] usb 2-1: Manufacturer: syz [ 694.271149][ T5727] usb 2-1: SerialNumber: syz [ 694.343173][ T5727] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 694.364262][ T5727] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 694.383390][ T5727] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 694.547497][ T5727] usb 2-1: USB disconnect, device number 51 [ 694.602709][ T5727] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 694.612069][ T5727] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 694.614805][ T5727] ti_usb_3410_5052 2-1:2.0: device disconnected [ 695.362492][ T5607] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 695.492298][ T5607] usb 5-1: device descriptor read/64, error -71 [ 695.702355][ T5711] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 695.732256][ T5607] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 695.864058][ T5711] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 695.865059][ T5711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.865099][ T5711] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 695.865118][ T5711] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 695.865135][ T5711] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.865164][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.901348][ T5607] usb 5-1: device descriptor read/64, error -71 [ 695.940086][T13069] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 695.940226][T13069] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 695.958391][ T5711] pl2303 3-1:1.0: required interrupt-in endpoint missing [ 696.002587][ T5607] usb usb5-port1: attempt power cycle [ 696.004128][T13049] bond0: (slave syz_tun): Releasing backup interface [ 696.032505][ T5727] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 696.162780][ T5711] usb 3-1: USB disconnect, device number 51 [ 696.163473][ T5727] usb 2-1: device descriptor read/64, error -71 [ 696.342262][ T5607] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 696.366484][ T5607] usb 5-1: device descriptor read/8, error -71 [ 696.402289][ T5727] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 696.534282][ T5727] usb 2-1: device descriptor read/64, error -71 [ 696.602325][ T5607] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 696.623333][ T5607] usb 5-1: device descriptor read/8, error -71 [ 696.643342][ T5727] usb usb2-port1: attempt power cycle [ 696.734331][ T5607] usb usb5-port1: unable to enumerate USB device [ 696.910478][T13078] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 696.910510][T13078] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 696.910645][T13078] vhci_hcd vhci_hcd.0: Device attached [ 696.926447][T13080] vhci_hcd: connection closed [ 696.972913][ T156] vhci_hcd vhci_hcd.2: stop threads [ 696.972938][ T156] vhci_hcd vhci_hcd.2: release socket [ 696.973002][ T156] vhci_hcd vhci_hcd.2: disconnect device [ 696.992668][ T5727] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 697.020416][ T5727] usb 2-1: device descriptor read/8, error -71 [ 697.081735][ T4905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 697.105363][ T4905] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 697.108220][ T4905] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 697.111077][ T4905] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 697.125665][ T4905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 697.302336][ T5727] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 697.334127][ T5727] usb 2-1: device descriptor read/8, error -71 [ 697.443450][ T5727] usb usb2-port1: unable to enumerate USB device [ 698.147057][T13101] FAULT_INJECTION: forcing a failure. [ 698.147057][T13101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.147095][T13101] CPU: 0 UID: 0 PID: 13101 Comm: syz.2.2299 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 698.147122][T13101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.147135][T13101] Call Trace: [ 698.147144][T13101] [ 698.147153][T13101] dump_stack_lvl+0xe8/0x150 [ 698.147194][T13101] should_fail_ex+0x46b/0x600 [ 698.147227][T13101] _copy_from_user+0x2d/0xb0 [ 698.147265][T13101] ___sys_sendmsg+0x1c6/0x360 [ 698.147298][T13101] ? __lock_acquire+0x683/0x2ce0 [ 698.147328][T13101] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.147365][T13101] ? kstrtouint+0x6e/0xe0 [ 698.147419][T13101] ? __fget_files+0x2a/0x420 [ 698.147455][T13101] ? __fget_files+0x3a8/0x420 [ 698.147495][T13101] __sys_sendmmsg+0x279/0x4d0 [ 698.147534][T13101] ? __pfx___sys_sendmmsg+0x10/0x10 [ 698.147577][T13101] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 698.147623][T13101] ? ksys_write+0x248/0x270 [ 698.147658][T13101] ? __pfx_ksys_write+0x10/0x10 [ 698.147698][T13101] __x64_sys_sendmmsg+0xa0/0xc0 [ 698.147733][T13101] do_syscall_64+0x166/0x520 [ 698.147756][T13101] ? trace_irq_disable+0x3b/0x140 [ 698.147780][T13101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.147803][T13101] ? clear_bhb_loop+0x70/0xc0 [ 698.147832][T13101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.147854][T13101] RIP: 0033:0x7fb22dc0e0d9 [ 698.147874][T13101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.147894][T13101] RSP: 002b:00007fb22be66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 698.147918][T13101] RAX: ffffffffffffffda RBX: 00007fb22de95fa0 RCX: 00007fb22dc0e0d9 [ 698.147934][T13101] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 698.147949][T13101] RBP: 00007fb22be66090 R08: 0000000000000000 R09: 0000000000000000 [ 698.147963][T13101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.147976][T13101] R13: 00007fb22de96038 R14: 00007fb22de95fa0 R15: 00007fff7aab17d8 [ 698.148010][T13101] [ 698.682389][ T5607] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 698.834207][ T5607] usb 3-1: Using ep0 maxpacket: 8 [ 698.835653][ T5607] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 698.864844][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.864873][ T5607] usb 3-1: Product: syz [ 698.864888][ T5607] usb 3-1: Manufacturer: syz [ 698.864904][ T5607] usb 3-1: SerialNumber: syz [ 698.901902][ T5607] usb 3-1: config 0 descriptor?? [ 698.932854][ T5607] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 699.242346][ T5610] Bluetooth: hci3: command tx timeout [ 699.550263][T13105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.550846][T13105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.957429][T13129] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 699.957459][T13129] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 700.129933][T13129] vhci_hcd vhci_hcd.0: Device attached [ 700.144784][T13130] vhci_hcd: connection closed [ 700.146727][ T13] vhci_hcd vhci_hcd.0: stop threads [ 700.146749][ T13] vhci_hcd vhci_hcd.0: release socket [ 700.160093][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 700.549811][T13142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2308'. [ 700.582332][ T57] bond0 (unregistering): left promiscuous mode [ 700.582355][ T57] bond_slave_0: left promiscuous mode [ 700.582842][ T57] bond_slave_1: left promiscuous mode [ 700.635990][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.796678][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.861990][T13150] FAULT_INJECTION: forcing a failure. [ 700.861990][T13150] name failslab, interval 1, probability 0, space 0, times 0 [ 700.862028][T13150] CPU: 1 UID: 0 PID: 13150 Comm: syz.1.2311 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 700.862054][T13150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.862068][T13150] Call Trace: [ 700.862076][T13150] [ 700.862090][T13150] dump_stack_lvl+0xe8/0x150 [ 700.862129][T13150] should_fail_ex+0x46b/0x600 [ 700.862164][T13150] should_failslab+0xa8/0x100 [ 700.862194][T13150] __kmalloc_noprof+0xfe/0x780 [ 700.862215][T13150] ? rcu_is_watching+0x16/0xb0 [ 700.862244][T13150] ? tomoyo_realpath_from_path+0xef/0x640 [ 700.862276][T13150] ? tomoyo_realpath_from_path+0xef/0x640 [ 700.862316][T13150] tomoyo_realpath_from_path+0xef/0x640 [ 700.862359][T13150] ? tomoyo_path_number_perm+0x219/0x5f0 [ 700.862386][T13150] tomoyo_path_number_perm+0x246/0x5f0 [ 700.862430][T13150] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 700.862457][T13150] ? __lock_acquire+0x683/0x2ce0 [ 700.862499][T13150] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 700.862524][T13150] ? hook_file_ioctl+0x1f5/0x610 [ 700.862569][T13150] ? __fget_files+0x2a/0x420 [ 700.862603][T13150] ? __fget_files+0x2a/0x420 [ 700.862632][T13150] ? __fget_files+0x3a8/0x420 [ 700.862661][T13150] ? __fget_files+0x2a/0x420 [ 700.862695][T13150] security_file_ioctl+0xc3/0x2a0 [ 700.862726][T13150] __se_sys_ioctl+0x47/0x170 [ 700.862752][T13150] do_syscall_64+0x166/0x520 [ 700.862776][T13150] ? trace_irq_disable+0x3b/0x140 [ 700.862800][T13150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.862823][T13150] ? clear_bhb_loop+0x70/0xc0 [ 700.862852][T13150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.862875][T13150] RIP: 0033:0x7f3ecefee0d9 [ 700.862895][T13150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.862915][T13150] RSP: 002b:00007f3ecd246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 700.862938][T13150] RAX: ffffffffffffffda RBX: 00007f3ecf275fa0 RCX: 00007f3ecefee0d9 [ 700.862954][T13150] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 700.862978][T13150] RBP: 00007f3ecd246090 R08: 0000000000000000 R09: 0000000000000000 [ 700.862991][T13150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.863005][T13150] R13: 00007f3ecf276038 R14: 00007f3ecf275fa0 R15: 00007ffd6a39ea18 [ 700.863041][T13150] [ 701.110219][T13150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 701.140829][ T57] bond0 (unregistering): Released all slaves [ 701.292536][ T5607] gspca_sonixj: reg_r err -110 [ 701.323805][ T5610] Bluetooth: hci3: command tx timeout [ 701.336354][ T5607] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 701.355967][ T57] bond1 (unregistering): Released all slaves [ 701.528433][ T5251] 8021q: adding VLAN 0 to HW filter on device eth1 [ 701.570064][ T5607] usb 3-1: USB disconnect, device number 52 [ 702.222295][ T5607] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 702.374785][ T5607] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 702.394254][ T5607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.394284][ T5607] usb 5-1: Product: syz [ 702.394300][ T5607] usb 5-1: Manufacturer: syz [ 702.394315][ T5607] usb 5-1: SerialNumber: syz [ 702.747808][ T5607] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 703.116561][T13179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.117232][T13179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.402249][ T5610] Bluetooth: hci3: command tx timeout [ 704.928981][ T37] kauditd_printk_skb: 120 callbacks suppressed [ 704.929001][ T37] audit: type=1800 audit(1787620626.234:270): pid=13191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2318" name="memory_backed" dev="configfs" ino=79911 res=0 errno=0 [ 704.929050][ T37] audit: type=1800 audit(1787620626.244:271): pid=13191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2318" name="zone_nr_conv" dev="configfs" ino=79912 res=0 errno=0 [ 704.929321][ T37] audit: type=1800 audit(1787620626.244:272): pid=13191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2318" name="power" dev="configfs" ino=79913 res=0 errno=0 [ 705.333168][ T5251] 8021q: adding VLAN 0 to HW filter on device eth2 [ 705.482330][ T5610] Bluetooth: hci3: command tx timeout [ 705.746619][T13079] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.746857][T13079] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.747061][T13079] bridge_slave_0: entered allmulticast mode [ 705.782299][T13079] bridge_slave_0: entered promiscuous mode [ 705.807227][T13079] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.810595][T13079] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.810817][T13079] bridge_slave_1: entered allmulticast mode [ 705.841835][T13079] bridge_slave_1: entered promiscuous mode [ 705.907919][ T5607] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 706.051471][ T5607] usb 5-1: USB disconnect, device number 60 [ 706.227028][T13079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.267173][T13079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.306630][ T8617] udevd[8617]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.677325][ T5711] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 707.124601][T13079] team0: Port device team_slave_0 added [ 707.124742][ T5711] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 707.128577][ T5711] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 707.128610][ T5711] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 707.128654][ T5711] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 707.128682][ T5711] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 707.128724][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.211574][T13218] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 707.211724][T13218] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 707.238198][ T5711] pl2303 2-1:1.0: pl2303 converter detected [ 707.270356][ T5711] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 707.347633][T13079] team0: Port device team_slave_1 added [ 707.377038][ T57] batadv0: left promiscuous mode [ 707.501629][T13224] 9p: Bad value for 'rfdno' [ 707.523362][ T37] audit: type=1800 audit(1787620628.814:273): pid=13223 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2328" name="memory_backed" dev="configfs" ino=79838 res=0 errno=0 [ 707.523426][ T37] audit: type=1800 audit(1787620628.824:274): pid=13222 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2328" name="zone_nr_conv" dev="configfs" ino=79843 res=0 errno=0 [ 707.523472][ T37] audit: type=1800 audit(1787620628.824:275): pid=13222 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2328" name="power" dev="configfs" ino=79844 res=0 errno=0 [ 707.579719][T13218] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 707.589974][T13218] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 707.593805][T13218] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 707.609878][T13218] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 707.610008][T13218] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 707.696781][ T5711] usb 2-1: USB disconnect, device number 56 [ 707.786006][ T5711] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 707.828228][ T5711] pl2303 2-1:1.0: device disconnected [ 707.852562][ T57] hsr_slave_0: left promiscuous mode [ 707.904026][ T57] hsr_slave_1: left promiscuous mode [ 707.910189][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.953075][T13234] sd 0:0:1:0: device reset [ 708.030599][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.379417][T13246] FAULT_INJECTION: forcing a failure. [ 708.379417][T13246] name failslab, interval 1, probability 0, space 0, times 0 [ 708.379455][T13246] CPU: 1 UID: 0 PID: 13246 Comm: syz.2.2334 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 708.379480][T13246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.379493][T13246] Call Trace: [ 708.379501][T13246] [ 708.379511][T13246] dump_stack_lvl+0xe8/0x150 [ 708.379551][T13246] should_fail_ex+0x46b/0x600 [ 708.379586][T13246] should_failslab+0xa8/0x100 [ 708.379617][T13246] __kvmalloc_node_noprof+0x17a/0x8a0 [ 708.379648][T13246] ? seq_read_iter+0x1eb/0xcb0 [ 708.379671][T13246] ? seq_read_iter+0x1eb/0xcb0 [ 708.379703][T13246] ? seq_read_iter+0xa5/0xcb0 [ 708.379733][T13246] seq_read_iter+0x1eb/0xcb0 [ 708.379774][T13246] seq_read+0x36a/0x490 [ 708.379807][T13246] ? __pfx_seq_read+0x10/0x10 [ 708.379844][T13246] ? rw_verify_area+0x250/0x4d0 [ 708.379878][T13246] ? __pfx_seq_read+0x10/0x10 [ 708.379900][T13246] vfs_read+0x219/0xa90 [ 708.379940][T13246] ? __pfx_vfs_read+0x10/0x10 [ 708.379973][T13246] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 708.380001][T13246] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 708.380025][T13246] ? mutex_lock_nested+0x152/0x1d0 [ 708.380055][T13246] ? fdget_pos+0x252/0x320 [ 708.380095][T13246] ksys_read+0x156/0x270 [ 708.380130][T13246] ? __pfx_ksys_read+0x10/0x10 [ 708.380174][T13246] do_syscall_64+0x166/0x520 [ 708.380198][T13246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.380222][T13246] ? clear_bhb_loop+0x70/0xc0 [ 708.380250][T13246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.380278][T13246] RIP: 0033:0x7fb22dc0e0d9 [ 708.380298][T13246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.380317][T13246] RSP: 002b:00007fb22be66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.380340][T13246] RAX: ffffffffffffffda RBX: 00007fb22de95fa0 RCX: 00007fb22dc0e0d9 [ 708.380355][T13246] RDX: 0000000000002020 RSI: 00002000000005c0 RDI: 0000000000000003 [ 708.380369][T13246] RBP: 00007fb22be66090 R08: 0000000000000000 R09: 0000000000000000 [ 708.380382][T13246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.380395][T13246] R13: 00007fb22de96038 R14: 00007fb22de95fa0 R15: 00007fff7aab17d8 [ 708.380432][T13246] [ 709.511341][ T57] team0 (unregistering): Port device team_slave_1 removed [ 709.564713][ T57] team0 (unregistering): Port device team_slave_0 removed [ 709.898238][ T5251] 8021q: adding VLAN 0 to HW filter on device eth3 [ 710.193459][T13279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2344'. [ 710.215443][T13079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.215456][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.215477][T13079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.374875][T13279] bond5: entered promiscuous mode [ 710.377107][T13279] 8021q: adding VLAN 0 to HW filter on device bond5 [ 710.388761][T13079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.388776][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.388799][T13079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.612650][T13079] hsr_slave_0: entered promiscuous mode [ 710.619119][T13079] hsr_slave_1: entered promiscuous mode [ 710.620126][T13079] debugfs: 'hsr0' already exists in 'hsr' [ 710.620150][T13079] Cannot create hsr debugfs directory [ 710.952417][ T5726] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 711.125835][ T5726] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 711.127078][ T5726] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 711.128282][ T5726] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 711.152925][ T5727] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 711.164062][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.164142][ T5726] usb 2-1: Product: syz [ 711.164185][ T5726] usb 2-1: Manufacturer: syz [ 711.164234][ T5726] usb 2-1: SerialNumber: syz [ 711.248957][ T5726] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 711.259043][ T5726] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 711.264349][ T5726] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 711.317050][ T5727] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 711.318323][ T5727] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.318378][ T5727] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 711.318412][ T5727] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 711.318429][ T5727] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.318460][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.395189][T13292] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 711.395320][T13292] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 711.435558][ T5727] pl2303 5-1:1.0: required interrupt-in endpoint missing [ 712.453937][T13313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2351'. [ 712.634778][T13313] bond3: entered promiscuous mode [ 712.638225][T13313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 713.138443][ T5251] 8021q: adding VLAN 0 to HW filter on device eth4 [ 713.330043][ T57] IPVS: stop unused estimator thread 0... [ 713.620575][T13328] FAULT_INJECTION: forcing a failure. [ 713.620575][T13328] name failslab, interval 1, probability 0, space 0, times 0 [ 713.620675][T13328] CPU: 0 UID: 0 PID: 13328 Comm: syz.2.2354 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 713.620702][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.620717][T13328] Call Trace: [ 713.620725][T13328] [ 713.620735][T13328] dump_stack_lvl+0xe8/0x150 [ 713.620777][T13328] should_fail_ex+0x46b/0x600 [ 713.620814][T13328] should_failslab+0xa8/0x100 [ 713.620844][T13328] kmem_cache_alloc_noprof+0xa4/0x660 [ 713.620868][T13328] ? do_getname+0x2e/0x250 [ 713.620893][T13328] ? do_getname+0x2e/0x250 [ 713.620919][T13328] ? rt_mutex_slowunlock+0x219/0x460 [ 713.620957][T13328] do_getname+0x2e/0x250 [ 713.620981][T13328] ? getname_uflags+0x11/0x30 [ 713.621021][T13328] __se_sys_name_to_handle_at+0x1ad/0x9e0 [ 713.621054][T13328] ? fput+0xa0/0xd0 [ 713.621078][T13328] ? __pfx___se_sys_name_to_handle_at+0x10/0x10 [ 713.621104][T13328] ? ksys_write+0x248/0x270 [ 713.621147][T13328] ? __x64_sys_name_to_handle_at+0x20/0xc0 [ 713.621178][T13328] do_syscall_64+0x166/0x520 [ 713.621200][T13328] ? trace_irq_disable+0x3b/0x140 [ 713.621223][T13328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.621247][T13328] ? clear_bhb_loop+0x70/0xc0 [ 713.621273][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.621295][T13328] RIP: 0033:0x7fb22dc0e0d9 [ 713.621315][T13328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.621334][T13328] RSP: 002b:00007fb22be45028 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 713.621356][T13328] RAX: ffffffffffffffda RBX: 00007fb22de96090 RCX: 00007fb22dc0e0d9 [ 713.621372][T13328] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 713.621386][T13328] RBP: 00007fb22be45090 R08: 0000000000000000 R09: 0000000000000000 [ 713.621400][T13328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.621412][T13328] R13: 00007fb22de96128 R14: 00007fb22de96090 R15: 00007fff7aab17d8 [ 713.621446][T13328] [ 713.720571][ T37] audit: type=1800 audit(1787620634.974:276): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2355" name="memory_backed" dev="configfs" ino=80576 res=0 errno=0 [ 713.720637][ T37] audit: type=1800 audit(1787620634.984:277): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2355" name="zone_nr_conv" dev="configfs" ino=80577 res=0 errno=0 [ 713.720739][ T37] audit: type=1800 audit(1787620634.984:278): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2355" name="power" dev="configfs" ino=80578 res=0 errno=0 [ 713.730216][ T5727] usb 5-1: USB disconnect, device number 61 [ 714.247940][T13079] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 714.389363][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 714.420479][T13079] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 714.577150][T13343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2358'. [ 714.635517][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 714.675928][T13079] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 714.987931][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.002697][T13287] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 715.003203][T13287] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 715.004191][T13079] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 715.157628][ T5718] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 716.053689][ T5711] usb 2-1: USB disconnect, device number 57 [ 716.079239][T13079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 716.202607][ T5718] usb 5-1: Using ep0 maxpacket: 16 [ 716.203512][ T5718] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 716.206306][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 111, changing to 10 [ 716.206340][ T5718] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 57798, setting to 1024 [ 716.206371][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 716.209625][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.209651][ T5718] usb 5-1: Product: syz [ 716.209667][ T5718] usb 5-1: Manufacturer: syz [ 716.209682][ T5718] usb 5-1: SerialNumber: syz [ 716.308200][ T5718] usb 5-1: config 0 descriptor?? [ 716.318231][ T5711] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 716.379125][ T5711] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 716.411851][ T5711] ti_usb_3410_5052 2-1:2.0: device disconnected [ 716.644207][ T5718] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 716.705571][T13364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2362'. [ 716.795608][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 716.850967][ T5718] imon:send_packet: packet tx failed (-71) [ 716.872254][ T5718] imon 5-1:0.0: panel buttons/knobs setup failed [ 716.992839][ T5718] rc_core: IR keymap rc-imon-pad not found [ 716.992862][ T5718] Registered IR keymap rc-empty [ 716.993024][ T5718] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 716.993046][ T5718] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 716.994955][ T5718] imon:send_packet: packet tx failed (-71) [ 717.023778][ T5718] imon 5-1:0.0: remote input dev register failed [ 717.023958][ T5718] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 717.108292][T13364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2362'. [ 717.218290][T13079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.485908][T13079] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.556115][ T5718] imon 5-1:0.0: unable to initialize intf0, err 0 [ 717.556139][ T5718] imon:imon_probe: failed to initialize context! [ 717.556153][ T5718] imon 5-1:0.0: unable to register, err -19 [ 717.605330][ T5718] usb 5-1: USB disconnect, device number 62 [ 717.700123][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.736890][T13388] futex_wake_op: syz.0.2365 tries to shift op by 144; fix this program [ 717.792770][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.849920][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.850550][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.695016][T13418] bridge0: entered promiscuous mode [ 719.695127][T13418] bridge0: entered allmulticast mode [ 720.042939][T13418] team0: Port device bridge0 added [ 720.062549][T13420] bridge0: port 1(team0) entered blocking state [ 720.062700][T13420] bridge0: port 1(team0) entered disabled state [ 720.822380][T13420] team0: entered allmulticast mode [ 720.822406][T13420] team_slave_0: entered allmulticast mode [ 720.871943][T13420] team_slave_1: entered allmulticast mode [ 722.543354][T13420] team0: left allmulticast mode [ 722.543378][T13420] team_slave_0: left allmulticast mode [ 722.543406][T13420] team_slave_1: left allmulticast mode [ 722.732307][ T5718] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 722.894619][ T5718] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 722.898184][ T5718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 722.898223][ T5718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 722.898251][ T5718] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 722.898279][ T5718] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 722.898319][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.985229][T13436] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 722.985528][T13436] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 723.016169][ T5718] pl2303 2-1:1.0: pl2303 converter detected [ 723.038230][ T5718] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 724.297437][T13436] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 724.298218][T13436] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 724.298568][T13436] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 724.298929][T13436] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 724.298983][T13436] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 724.574124][T13436] 9p: Bad value for 'rfdno' [ 724.742974][ T5718] usb 2-1: USB disconnect, device number 58 [ 724.811126][ T5718] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 724.823782][ T5718] pl2303 2-1:1.0: device disconnected [ 725.009133][T13446] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 725.110093][T13079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.413274][T13474] Bluetooth: MGMT ver 1.23 [ 726.562771][T13477] xt_hashlimit: size too large, truncated to 1048576 [ 726.562991][T13477] xt_hashlimit: max too large, truncated to 1048576 [ 726.563179][T13477] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 727.335362][ T5594] bond0: (slave syz_tun): Releasing backup interface [ 727.402540][T13474] ªªªªªªÿÿ: renamed from vlan0 [ 729.217625][T13489] netlink: 'syz.4.2390': attribute type 3 has an invalid length. [ 729.432280][ T5727] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 729.583266][ T5727] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 729.589356][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.589387][ T5727] usb 3-1: Product: syz [ 729.589404][ T5727] usb 3-1: Manufacturer: syz [ 729.589418][ T5727] usb 3-1: SerialNumber: syz [ 729.628806][ T5727] usb 3-1: config 0 descriptor?? [ 730.070849][ T5727] usb 3-1: Firmware version (0.0) predates our first public release. [ 730.070880][ T5727] usb 3-1: Please update to version 0.2 or newer [ 730.071203][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 730.243557][ T5727] usb 3-1: USB disconnect, device number 53 [ 730.857546][ T4905] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 730.931961][ T4905] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 730.956832][ T4905] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 730.982329][ T4905] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 730.983173][ T4905] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 731.793024][T13079] veth0_vlan: entered promiscuous mode [ 732.717812][T13079] veth1_vlan: entered promiscuous mode [ 732.922445][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 733.068233][T13079] veth0_macvtap: entered promiscuous mode [ 733.078976][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 733.094366][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.094394][ T10] usb 2-1: Product: syz [ 733.094409][ T10] usb 2-1: Manufacturer: syz [ 733.094423][ T10] usb 2-1: SerialNumber: syz [ 733.135764][ T10] usb 2-1: config 0 descriptor?? [ 733.163917][ T5610] Bluetooth: hci1: command tx timeout [ 733.209712][T13079] veth1_macvtap: entered promiscuous mode [ 733.364048][ T5610] Bluetooth: hci0: unexpected cc 0x200b length: 2 > 1 [ 733.364082][ T5610] Bluetooth: hci0: unexpected event for opcode 0x200b [ 733.601956][T13079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.692513][ T5727] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 733.852274][ T5727] usb 5-1: Using ep0 maxpacket: 8 [ 733.853146][ T5727] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 733.861235][ T5727] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.861297][ T5727] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.881481][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.881962][ T5727] usb 5-1: Product: syz [ 733.881980][ T5727] usb 5-1: Manufacturer: syz [ 733.881996][ T5727] usb 5-1: SerialNumber: syz [ 733.966080][ T5727] usb 5-1: No union descriptors [ 733.980186][ T5727] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 733.980232][ T10] usb 2-1: Firmware: major: 72, minor: 84, hardware type: UNKNOWN (115) [ 733.980283][ T5727] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 734.109211][T13079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.137274][ T5718] usb 5-1: USB disconnect, device number 63 [ 734.190128][ T10] usb 2-1: failed to fetch extended address, random address set [ 734.190161][ T10] usb 2-1: atusb_probe: initialization failed, error = -524 [ 734.190412][ T10] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 734.249169][ T10] usb 2-1: USB disconnect, device number 59 [ 734.366063][ T3410] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.880817][ T3410] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.881218][ T3410] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.254290][ T5610] Bluetooth: hci1: command tx timeout [ 735.682308][ T31] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 735.843384][ T31] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 735.844952][ T31] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 735.844986][ T31] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 735.846440][ T31] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 735.846475][ T31] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 735.849943][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.849970][ T31] usb 2-1: Product: syz [ 735.849987][ T31] usb 2-1: Manufacturer: syz [ 735.850003][ T31] usb 2-1: SerialNumber: syz [ 736.029225][ T31] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 736.100880][ T31] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 736.152957][ T31] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 736.236992][ T31] usb 2-1: USB disconnect, device number 60 [ 736.447107][ T3400] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.533597][ T31] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 736.581684][ T31] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 736.592549][ T31] ti_usb_3410_5052 2-1:2.0: device disconnected [ 736.717175][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.717196][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.341432][ T5610] Bluetooth: hci1: command tx timeout [ 738.160826][T13605] rnbd_client L127: Can't parse path i: -93 [ 738.471901][ T5830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.471926][ T5830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.487588][ T31] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 738.635174][ T31] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 738.656225][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.656250][ T31] usb 5-1: Product: syz [ 738.656263][ T31] usb 5-1: Manufacturer: syz [ 738.656275][ T31] usb 5-1: SerialNumber: syz [ 738.685397][ T31] usb 5-1: config 0 descriptor?? [ 739.113812][ T31] usb 5-1: Firmware version (0.0) predates our first public release. [ 739.113842][ T31] usb 5-1: Please update to version 0.2 or newer [ 739.315173][ T31] usb 5-1: Firmware: build HTs [ 739.443967][ T5610] Bluetooth: hci1: command tx timeout [ 739.542297][ T3301] bond0 (unregistering): left promiscuous mode [ 739.542318][ T3301] bond_slave_0: left promiscuous mode [ 739.542508][ T3301] bond_slave_1: left promiscuous mode [ 739.780665][ T3301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.213028][ T3301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.268039][ T3301] bond0 (unregistering): Released all slaves [ 741.311101][ T3301] bond1 (unregistering): Released all slaves [ 741.350992][ T3301] bond2 (unregistering): Released all slaves [ 741.405624][ T3301] bond3 (unregistering): Released all slaves [ 741.450483][ T3301] bond4 (unregistering): Released all slaves [ 741.489565][ T3301] bond5 (unregistering): Released all slaves [ 741.618990][T13651] rnbd_client L127: Can't parse path i: -93 [ 741.832661][ T31] usb 5-1: USB disconnect, device number 64 [ 742.136329][ T5607] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 742.353446][ T5607] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 742.355001][ T5607] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 742.355035][ T5607] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 742.355076][ T5607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.655152][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 743.252253][ T31] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 743.461868][T13685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2434'. [ 743.462304][T13685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2434'. [ 743.625082][ T31] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 744.396263][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.396295][ T31] usb 5-1: Product: syz [ 744.396311][ T31] usb 5-1: Manufacturer: syz [ 744.396327][ T31] usb 5-1: SerialNumber: syz [ 744.504446][ T31] usb 5-1: config 0 descriptor?? [ 744.943526][ T31] usb 5-1: Firmware version (0.0) predates our first public release. [ 744.943555][ T31] usb 5-1: Please update to version 0.2 or newer [ 744.958443][ T5607] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 744.979383][ T5607] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input18 [ 745.065049][ T5607] input: failed to attach handler kbd to device input18, error: -5 [ 745.144992][ T31] usb 5-1: Firmware: build HTs [ 745.159049][T13695] FAULT_INJECTION: forcing a failure. [ 745.159049][T13695] name failslab, interval 1, probability 0, space 0, times 0 [ 745.159076][T13695] CPU: 0 UID: 0 PID: 13695 Comm: syz.2.2437 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 745.159094][T13695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 745.159104][T13695] Call Trace: [ 745.159110][T13695] [ 745.159117][T13695] dump_stack_lvl+0xe8/0x150 [ 745.159147][T13695] should_fail_ex+0x46b/0x600 [ 745.159171][T13695] should_failslab+0xa8/0x100 [ 745.159192][T13695] __kmalloc_noprof+0xfe/0x780 [ 745.159208][T13695] ? rcu_is_watching+0x16/0xb0 [ 745.159229][T13695] ? tomoyo_realpath_from_path+0xef/0x640 [ 745.159251][T13695] ? tomoyo_realpath_from_path+0xef/0x640 [ 745.159278][T13695] tomoyo_realpath_from_path+0xef/0x640 [ 745.159308][T13695] ? tomoyo_path_number_perm+0x219/0x5f0 [ 745.159327][T13695] tomoyo_path_number_perm+0x246/0x5f0 [ 745.159355][T13695] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 745.159374][T13695] ? __lock_acquire+0x683/0x2ce0 [ 745.159401][T13695] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 745.159418][T13695] ? hook_file_ioctl+0x1f5/0x610 [ 745.159448][T13695] ? __fget_files+0x2a/0x420 [ 745.159471][T13695] ? __fget_files+0x2a/0x420 [ 745.159490][T13695] ? __fget_files+0x3a8/0x420 [ 745.159510][T13695] ? __fget_files+0x2a/0x420 [ 745.159533][T13695] security_file_ioctl+0xc3/0x2a0 [ 745.159555][T13695] __se_sys_ioctl+0x47/0x170 [ 745.159574][T13695] do_syscall_64+0x166/0x520 [ 745.159616][T13695] ? trace_irq_disable+0x3b/0x140 [ 745.159639][T13695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.159662][T13695] ? clear_bhb_loop+0x70/0xc0 [ 745.159690][T13695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.159713][T13695] RIP: 0033:0x7fb22dc0e0d9 [ 745.159733][T13695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.159752][T13695] RSP: 002b:00007fb22be66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.159774][T13695] RAX: ffffffffffffffda RBX: 00007fb22de95fa0 RCX: 00007fb22dc0e0d9 [ 745.159791][T13695] RDX: 00002000000008c0 RSI: 00000000000089f9 RDI: 0000000000000003 [ 745.159806][T13695] RBP: 00007fb22be66090 R08: 0000000000000000 R09: 0000000000000000 [ 745.159819][T13695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.159838][T13695] R13: 00007fb22de96038 R14: 00007fb22de95fa0 R15: 00007fff7aab17d8 [ 745.159866][T13695] [ 745.176255][T13695] ERROR: Out of memory at tomoyo_realpath_from_path. [ 745.578620][ T5607] usb 2-1: USB disconnect, device number 61 [ 746.144006][ T5728] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 746.258266][ T31] usb 5-1: USB disconnect, device number 65 [ 746.293195][ T5728] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 746.294917][ T5728] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 746.294958][ T5728] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 746.296520][ T5728] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 746.296558][ T5728] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 746.300174][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.300204][ T5728] usb 3-1: Product: syz [ 746.300222][ T5728] usb 3-1: Manufacturer: syz [ 746.300239][ T5728] usb 3-1: SerialNumber: syz [ 746.415028][ T5728] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 746.983416][ T5728] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 747.005987][ T5728] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 747.033797][ T5728] usb 3-1: USB disconnect, device number 54 [ 747.067316][ T5728] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 747.105053][ T5728] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 747.108352][ T5728] ti_usb_3410_5052 3-1:2.0: device disconnected [ 747.330610][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.330682][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.445881][ T5251] 8021q: adding VLAN 0 to HW filter on device eth5 [ 747.571973][ T3301] batadv0: left promiscuous mode [ 747.841700][ T3301] hsr_slave_0: left promiscuous mode [ 747.893519][ T3301] hsr_slave_1: left promiscuous mode [ 747.894854][ T3301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.945238][ T3301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.994576][T13735] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 748.882326][ T9421] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 749.012265][ T5728] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 749.036672][ T9421] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 749.041654][ T9421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.041683][ T9421] usb 6-1: Product: syz [ 749.041698][ T9421] usb 6-1: Manufacturer: syz [ 749.041714][ T9421] usb 6-1: SerialNumber: syz [ 749.140805][ T9421] usb 6-1: config 0 descriptor?? [ 749.193136][ T5728] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 749.194646][ T5728] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 749.194702][ T5728] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 749.194748][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.363579][ T3301] team0 (unregistering): Port device team_slave_1 removed [ 749.455157][ T3301] team0 (unregistering): Port device team_slave_0 removed [ 749.488275][ T5728] usb 2-1: string descriptor 0 read error: -71 [ 749.502923][ T5728] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 749.555141][ T5728] usb 2-1: USB disconnect, device number 62 [ 749.600340][ T9421] usb 6-1: Firmware version (0.0) predates our first public release. [ 749.600369][ T9421] usb 6-1: Please update to version 0.2 or newer [ 749.800088][ T9421] usb 6-1: Firmware: build HTs [ 750.293863][ T5728] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 750.317688][T13505] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.317821][T13505] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.318015][T13505] bridge_slave_0: entered allmulticast mode [ 750.321934][T13505] bridge_slave_0: entered promiscuous mode [ 750.397886][ T9421] usb 6-1: USB disconnect, device number 2 [ 750.443268][ T5728] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 750.464339][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.464369][ T5728] usb 2-1: Product: syz [ 750.464384][ T5728] usb 2-1: Manufacturer: syz [ 750.464399][ T5728] usb 2-1: SerialNumber: syz [ 750.524700][ T5728] usb 2-1: config 0 descriptor?? [ 750.562268][ T31] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 750.734542][T13505] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.734676][T13505] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.734883][T13505] bridge_slave_1: entered allmulticast mode [ 750.771438][T13505] bridge_slave_1: entered promiscuous mode [ 751.140451][T13505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.158770][T13761] FAULT_INJECTION: forcing a failure. [ 751.158770][T13761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.158808][T13761] CPU: 0 UID: 0 PID: 13761 Comm: syz.2.2456 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 751.158835][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 751.158857][T13761] Call Trace: [ 751.158866][T13761] [ 751.158875][T13761] dump_stack_lvl+0xe8/0x150 [ 751.158916][T13761] should_fail_ex+0x46b/0x600 [ 751.158951][T13761] _copy_to_user+0x31/0xb0 [ 751.158986][T13761] simple_read_from_buffer+0xe1/0x170 [ 751.159022][T13761] proc_fail_nth_read+0x1be/0x230 [ 751.159105][T13761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.159143][T13761] ? rw_verify_area+0x250/0x4d0 [ 751.159177][T13761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.159210][T13761] vfs_read+0x219/0xa90 [ 751.159252][T13761] ? __pfx_vfs_read+0x10/0x10 [ 751.159287][T13761] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 751.159315][T13761] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 751.159339][T13761] ? mutex_lock_nested+0x152/0x1d0 [ 751.159369][T13761] ? fdget_pos+0x252/0x320 [ 751.159409][T13761] ksys_read+0x156/0x270 [ 751.159449][T13761] ? __pfx_ksys_read+0x10/0x10 [ 751.159495][T13761] do_syscall_64+0x166/0x520 [ 751.159519][T13761] ? trace_irq_disable+0x3b/0x140 [ 751.159543][T13761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.159566][T13761] ? clear_bhb_loop+0x70/0xc0 [ 751.159593][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.159614][T13761] RIP: 0033:0x7fb22dbce90e [ 751.159635][T13761] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 751.159654][T13761] RSP: 002b:00007fb22be44fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 751.159677][T13761] RAX: ffffffffffffffda RBX: 00007fb22be456c0 RCX: 00007fb22dbce90e [ 751.159693][T13761] RDX: 000000000000000f RSI: 00007fb22be450a0 RDI: 0000000000000003 [ 751.159707][T13761] RBP: 00007fb22be45090 R08: 0000000000000000 R09: 0000000000000000 [ 751.159720][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.159733][T13761] R13: 00007fb22de96128 R14: 00007fb22de96090 R15: 00007fff7aab17d8 [ 751.159764][T13761] [ 751.390058][T13505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.732680][T13505] team0: Port device team_slave_0 added [ 751.756415][T13505] team0: Port device team_slave_1 added [ 752.065797][T13505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.065817][T13505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.065847][T13505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.086580][T13505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.086600][T13505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.086631][T13505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.712388][ T5607] usb 2-1: USB disconnect, device number 63 [ 753.933783][ T5728] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 753.960925][ T3301] IPVS: stop unused estimator thread 0... [ 754.243101][ T5728] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 754.244715][ T5728] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 754.244749][ T5728] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 754.244777][ T5728] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 754.244806][ T5728] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 754.244846][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.751602][T13784] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 754.759917][T13784] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 754.773144][ T5728] pl2303 6-1:1.0: pl2303 converter detected [ 754.778647][ T5728] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 754.834046][T13505] hsr_slave_0: entered promiscuous mode [ 754.841515][T13505] hsr_slave_1: entered promiscuous mode [ 754.856272][T13505] debugfs: 'hsr0' already exists in 'hsr' [ 754.856301][T13505] Cannot create hsr debugfs directory [ 755.174583][T13784] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 755.180194][T13784] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 755.182318][T13784] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 755.189614][T13784] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 755.189800][T13784] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 755.317339][ T5251] 8021q: adding VLAN 0 to HW filter on device eth6 [ 755.318390][T13784] 9p: Bad value for 'rfdno' [ 755.384659][ T5607] usb 6-1: USB disconnect, device number 3 [ 755.402343][ T5607] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 755.403309][ T5607] pl2303 6-1:1.0: device disconnected [ 755.482734][ T37] audit: type=1800 audit(1787620676.794:279): pid=13813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2470" name="memory_backed" dev="configfs" ino=85069 res=0 errno=0 [ 755.483155][ T37] audit: type=1800 audit(1787620676.804:280): pid=13813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2470" name="zone_nr_conv" dev="configfs" ino=83911 res=0 errno=0 [ 755.484750][ T37] audit: type=1800 audit(1787620676.804:281): pid=13813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2470" name="power" dev="configfs" ino=85070 res=0 errno=0 [ 755.564993][T13814] 9p: Bad value for 'rfdno' [ 756.853323][T13811] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 756.930946][T13824] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 756.930977][T13824] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 756.931086][T13824] vhci_hcd vhci_hcd.0: Device attached [ 756.978734][ T5610] Bluetooth: hci4: Malformed LE Event: 0x0f [ 757.175465][T13828] vhci_hcd: connection closed [ 757.217899][ T12] vhci_hcd vhci_hcd.4: stop threads [ 757.217927][ T12] vhci_hcd vhci_hcd.4: release socket [ 757.217996][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 757.272345][ T5728] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 758.215508][ T5728] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 758.241912][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.241944][ T5728] usb 2-1: Product: syz [ 758.241959][ T5728] usb 2-1: Manufacturer: syz [ 758.241976][ T5728] usb 2-1: SerialNumber: syz [ 758.290275][ T5728] usb 2-1: config 0 descriptor?? [ 758.889835][T13505] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 758.920648][T13505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 758.935223][ T5718] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 758.972773][T13505] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 759.037503][T13505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 759.040596][T13505] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 759.082217][ T5718] usb 6-1: Using ep0 maxpacket: 8 [ 759.083192][ T5718] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 759.084917][ T5718] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 759.084983][ T5718] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 759.085013][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 759.085041][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 759.090531][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.090556][ T5718] usb 6-1: Product: syz [ 759.090569][ T5718] usb 6-1: Manufacturer: syz [ 759.090583][ T5718] usb 6-1: SerialNumber: syz [ 759.140144][ T5718] usb 6-1: config 0 descriptor?? [ 759.168346][T13848] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 759.263759][T13505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 759.296137][T13505] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 759.397718][ T5718] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 759.560729][T13505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 759.639796][ T5251] 8021q: adding VLAN 0 to HW filter on device eth7 [ 759.646475][ T5718] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20 [ 760.058888][T13578] usb 2-1: USB disconnect, device number 64 [ 760.084959][ C1] powermate: config urb returned -71 [ 760.087548][ T5711] usb 6-1: USB disconnect, device number 4 [ 760.088496][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 760.088559][ C1] powermate: config urb returned -71 [ 760.088574][ C1] powermate: usb_submit_urb(config) failed [ 761.939718][T13889] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2487'. [ 762.350902][T13505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.551145][ T37] audit: type=1800 audit(1787620683.864:282): pid=13900 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2490" name="memory_backed" dev="configfs" ino=85419 res=0 errno=0 [ 762.551202][ T37] audit: type=1800 audit(1787620683.864:283): pid=13900 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2490" name="zone_nr_conv" dev="configfs" ino=86188 res=0 errno=0 [ 762.551245][ T37] audit: type=1800 audit(1787620683.864:284): pid=13900 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2490" name="power" dev="configfs" ino=85420 res=0 errno=0 [ 762.711830][T13505] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.799833][ T3400] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.800590][ T3400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.881162][ T3410] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.881275][ T3410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.004761][ T37] audit: type=1800 audit(1787620684.314:285): pid=13907 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2492" name="memory_backed" dev="configfs" ino=86211 res=0 errno=0 [ 763.004820][ T37] audit: type=1800 audit(1787620684.314:286): pid=13907 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2492" name="zone_nr_conv" dev="configfs" ino=86212 res=0 errno=0 [ 763.004863][ T37] audit: type=1800 audit(1787620684.314:287): pid=13907 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2492" name="power" dev="configfs" ino=86213 res=0 errno=0 [ 763.159197][T13908] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 763.159231][T13908] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 763.159360][T13908] vhci_hcd vhci_hcd.0: Device attached [ 763.206878][ T5610] Bluetooth: hci2: Malformed LE Event: 0x0f [ 763.463163][T13909] vhci_hcd: connection closed [ 763.493086][ T3410] vhci_hcd vhci_hcd.2: stop threads [ 763.493114][ T3410] vhci_hcd vhci_hcd.2: release socket [ 763.493221][ T3410] vhci_hcd vhci_hcd.2: disconnect device [ 763.682365][ T9421] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 763.853108][ T9421] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 763.856563][ T9421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.856583][ T9421] usb 5-1: Product: syz [ 763.856594][ T9421] usb 5-1: Manufacturer: syz [ 763.856604][ T9421] usb 5-1: SerialNumber: syz [ 763.907849][ T9421] usb 5-1: config 0 descriptor?? [ 765.505928][T13898] netlink: 'syz.5.2491': attribute type 3 has an invalid length. [ 766.493428][ T5251] 8021q: adding VLAN 0 to HW filter on device eth8 [ 766.686549][ T9421] usb 5-1: USB disconnect, device number 67 [ 766.734037][T13943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2498'. [ 767.079204][ T37] audit: type=1800 audit(1787620688.394:288): pid=13952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2502" name="memory_backed" dev="configfs" ino=85521 res=0 errno=0 [ 767.080776][ T37] audit: type=1800 audit(1787620688.394:289): pid=13952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2502" name="zone_nr_conv" dev="configfs" ino=85522 res=0 errno=0 [ 767.082022][ T37] audit: type=1800 audit(1787620688.394:290): pid=13952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2502" name="power" dev="configfs" ino=85523 res=0 errno=0 [ 767.504535][T13505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.582390][T13968] netlink: 'syz.4.2507': attribute type 3 has an invalid length. [ 773.006972][T13994] rnbd_client L203: map_device: Unknown parameter or missing value 'device_pa' [ 773.100113][T13505] veth0_vlan: entered promiscuous mode [ 773.180184][T13505] veth1_vlan: entered promiscuous mode [ 773.346058][T13997] zonefs (nullb1) ERROR: Not a zoned block device [ 773.475164][T13505] veth0_macvtap: entered promiscuous mode [ 773.509362][T13505] veth1_macvtap: entered promiscuous mode [ 773.540712][T13505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.568909][T13505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.703826][ T991] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.704444][ T991] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.710268][T14003] rnbd_client L610: Mapping device /dev/ra on session s+, (access_mode: rw, nr_poll_queues: 0) [ 773.710375][T14003] rnbd_client L1256: Session s+ not found, and path parameter not given [ 773.764349][T13131] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.765687][T13131] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.125110][ T5607] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 774.278451][ T5607] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 774.321795][ T5607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.321827][ T5607] usb 5-1: Product: syz [ 774.321843][ T5607] usb 5-1: Manufacturer: syz [ 774.321859][ T5607] usb 5-1: SerialNumber: syz [ 774.425832][ T5607] usb 5-1: config 0 descriptor?? [ 774.906194][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.906220][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.772397][T14022] netlink: 'syz.1.2519': attribute type 3 has an invalid length. [ 777.042246][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 777.118194][ T3301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.118218][ T3301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.149559][ T5718] usb 5-1: USB disconnect, device number 68 [ 777.194713][ T10] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 777.196266][ T10] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 777.196301][ T10] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 777.198592][ T10] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 777.198625][ T10] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 777.227472][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.227502][ T10] usb 3-1: Product: syz [ 777.227517][ T10] usb 3-1: Manufacturer: syz [ 777.227532][ T10] usb 3-1: SerialNumber: syz [ 777.320823][ T10] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 777.338944][ T10] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 777.499314][ T10] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 777.612998][ T9421] usb 3-1: USB disconnect, device number 55 [ 777.713402][ T9421] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 777.754336][ T9421] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 777.766099][ T9421] ti_usb_3410_5052 3-1:2.0: device disconnected [ 779.992601][T14051] rnbd_client L610: Mapping device /dev/ra on session s+, (access_mode: rw, nr_poll_queues: 0) [ 779.992692][T14051] rnbd_client L1256: Session s+ not found, and path parameter not given [ 780.872249][ T9421] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 781.033650][ T9421] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 781.056762][ T9421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.056794][ T9421] usb 7-1: Product: syz [ 781.056809][ T9421] usb 7-1: Manufacturer: syz [ 781.056825][ T9421] usb 7-1: SerialNumber: syz [ 781.105523][ T9421] usb 7-1: config 0 descriptor?? [ 782.243010][T14082] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2532'. [ 784.066314][ T31] usb 7-1: USB disconnect, device number 2 [ 784.240185][T14103] FAULT_INJECTION: forcing a failure. [ 784.240185][T14103] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 784.240225][T14103] CPU: 1 UID: 0 PID: 14103 Comm: syz.5.2536 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 784.240251][T14103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 784.240264][T14103] Call Trace: [ 784.240273][T14103] [ 784.240284][T14103] dump_stack_lvl+0xe8/0x150 [ 784.240325][T14103] should_fail_ex+0x46b/0x600 [ 784.240361][T14103] prepare_alloc_pages+0x223/0x650 [ 784.240395][T14103] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 784.240429][T14103] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 784.240463][T14103] ? __pfx_policy_nodemask+0x10/0x10 [ 784.240526][T14103] ? filemap_get_entry+0x374/0x3f0 [ 784.240570][T14103] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 784.240608][T14103] ? __pfx_filemap_get_entry+0x10/0x10 [ 784.240644][T14103] alloc_pages_mpol+0xd4/0x280 [ 784.240679][T14103] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 784.240713][T14103] shmem_get_folio_gfp+0x6ee/0x1c40 [ 784.240778][T14103] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 784.240826][T14103] shmem_write_begin+0x166/0x320 [ 784.240856][T14103] generic_perform_write+0x2ad/0x8b0 [ 784.240930][T14103] ? __pfx_generic_perform_write+0x10/0x10 [ 784.240972][T14103] ? mnt_put_write_access_file+0xc9/0x100 [ 784.240998][T14103] ? file_update_time_flags+0x3b1/0x450 [ 784.241038][T14103] shmem_file_write_iter+0xfb/0x120 [ 784.241076][T14103] vfs_write+0x61e/0xbb0 [ 784.241119][T14103] ? __pfx_vfs_write+0x10/0x10 [ 784.241155][T14103] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 784.241186][T14103] ? mutex_lock_nested+0x152/0x1d0 [ 784.241215][T14103] ? fdget_pos+0x252/0x320 [ 784.241255][T14103] ksys_write+0x156/0x270 [ 784.241291][T14103] ? __pfx_ksys_write+0x10/0x10 [ 784.241338][T14103] do_syscall_64+0x166/0x520 [ 784.241362][T14103] ? trace_irq_disable+0x3b/0x140 [ 784.241386][T14103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.241410][T14103] ? clear_bhb_loop+0x70/0xc0 [ 784.241439][T14103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.241462][T14103] RIP: 0033:0x7f5df530e0d9 [ 784.241484][T14103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.241504][T14103] RSP: 002b:00007f5df3566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 784.241533][T14103] RAX: ffffffffffffffda RBX: 00007f5df5595fa0 RCX: 00007f5df530e0d9 [ 784.241551][T14103] RDX: 000000003af4701e RSI: 0000200000000240 RDI: 0000000000000003 [ 784.241566][T14103] RBP: 00007f5df3566090 R08: 0000000000000000 R09: 0000000000000000 [ 784.241581][T14103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.241594][T14103] R13: 00007f5df5596038 R14: 00007f5df5595fa0 R15: 00007fff32b5e6f8 [ 784.241631][T14103] [ 785.552372][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 785.713036][ T31] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 785.715647][ T31] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 785.715685][ T31] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 785.715714][ T31] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 785.715742][ T31] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 785.715782][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.800941][T14115] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 785.801147][T14115] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 785.832353][ T31] pl2303 7-1:1.0: pl2303 converter detected [ 785.857823][ T31] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 786.033753][ T37] audit: type=1800 audit(1787620707.264:291): pid=14134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2540" name="memory_backed" dev="configfs" ino=85893 res=0 errno=0 [ 786.033820][ T37] audit: type=1800 audit(1787620707.274:292): pid=14134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2540" name="zone_nr_conv" dev="configfs" ino=86757 res=0 errno=0 [ 786.033866][ T37] audit: type=1800 audit(1787620707.274:293): pid=14134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2540" name="power" dev="configfs" ino=86758 res=0 errno=0 [ 786.582971][T14110] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 786.591009][T14110] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 786.609476][T14110] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 786.611735][T14110] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 786.611798][T14110] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 786.663900][T14110] 9p: Bad value for 'rfdno' [ 788.293659][T14140] netlink: 'syz.5.2543': attribute type 3 has an invalid length. [ 788.562245][ T9421] usb 7-1: USB disconnect, device number 3 [ 788.562503][ T5728] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 788.628802][ T9421] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 788.653473][ T9421] pl2303 7-1:1.0: device disconnected [ 788.713601][ T5728] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 788.715187][ T5728] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 788.715223][ T5728] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 788.715256][ T5728] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 788.715293][ T5728] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 788.715334][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.786441][T14143] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 788.791836][T14143] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 788.840467][ T5728] pl2303 5-1:1.0: pl2303 converter detected [ 788.872778][ T5728] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 789.181197][T14143] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 789.189255][T14143] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 789.191326][T14143] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 789.192235][T14143] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 789.192295][T14143] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 789.291152][T14143] 9p: Bad value for 'rfdno' [ 792.289595][T13408] usb 5-1: USB disconnect, device number 69 [ 792.350321][T13408] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 792.355012][T13408] pl2303 5-1:1.0: device disconnected [ 793.582469][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 793.733207][ T31] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 793.752318][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.752348][ T31] usb 7-1: Product: syz [ 793.752364][ T31] usb 7-1: Manufacturer: syz [ 793.752380][ T31] usb 7-1: SerialNumber: syz [ 793.791348][ T31] usb 7-1: config 0 descriptor?? [ 794.229089][ T31] usb 7-1: Firmware version (0.0) predates our first public release. [ 794.229118][ T31] usb 7-1: Please update to version 0.2 or newer [ 795.947117][ T31] usb 7-1: USB disconnect, device number 4 [ 796.760342][T14216] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 796.760373][T14216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 796.760507][T14216] vhci_hcd vhci_hcd.0: Device attached [ 796.991034][T14219] vhci_hcd: connection closed [ 797.011925][T13131] vhci_hcd vhci_hcd.6: stop threads [ 797.011954][T13131] vhci_hcd vhci_hcd.6: release socket [ 797.012027][T13131] vhci_hcd vhci_hcd.6: disconnect device [ 797.016166][T13578] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 797.182871][T13578] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 797.184166][T13578] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.215273][T13578] usb 6-1: config 0 descriptor?? [ 797.235932][T13578] cp210x 6-1:0.0: cp210x converter detected [ 797.713222][T13578] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 797.713333][T13578] cp210x 6-1:0.0: querying part number failed [ 798.553386][T13578] usb 6-1: cp210x converter now attached to ttyUSB0 [ 798.594145][T13578] usb 6-1: USB disconnect, device number 5 [ 798.612677][T13578] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 798.617674][T13578] cp210x 6-1:0.0: device disconnected [ 799.132254][T13578] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 799.283068][T13578] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 799.291821][T13578] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.291852][T13578] usb 6-1: Product: syz [ 799.291869][T13578] usb 6-1: Manufacturer: syz [ 799.291886][T13578] usb 6-1: SerialNumber: syz [ 799.337834][T13578] usb 6-1: config 0 descriptor?? [ 802.118333][ T5607] usb 6-1: USB disconnect, device number 6 [ 802.202227][ T9421] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 802.332368][ T9421] usb 3-1: device descriptor read/64, error -71 [ 802.459590][ T37] audit: type=1800 audit(1787620723.734:294): pid=14274 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2581" name="memory_backed" dev="configfs" ino=88135 res=0 errno=0 [ 802.459653][ T37] audit: type=1800 audit(1787620723.734:295): pid=14274 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2581" name="zone_nr_conv" dev="configfs" ino=88136 res=0 errno=0 [ 802.459700][ T37] audit: type=1800 audit(1787620723.734:296): pid=14274 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2581" name="power" dev="configfs" ino=88137 res=0 errno=0 [ 802.657783][ T9421] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 802.672200][ T5607] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 803.660138][ T5607] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 803.800324][ T9421] usb 3-1: device descriptor read/64, error -71 [ 803.809774][ T5607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.809803][ T5607] usb 2-1: Product: syz [ 803.809821][ T5607] usb 2-1: Manufacturer: syz [ 803.809838][ T5607] usb 2-1: SerialNumber: syz [ 803.857202][ T5607] usb 2-1: config 0 descriptor?? [ 803.907858][ T9421] usb usb3-port1: attempt power cycle [ 804.132708][ T5610] Bluetooth: hci0: unexpected cc 0x200b length: 2 > 1 [ 804.132810][ T5610] Bluetooth: hci0: unexpected event for opcode 0x200b [ 805.574914][ T5607] usb 2-1: Firmware version (0.0) predates our first public release. [ 805.574944][ T5607] usb 2-1: Please update to version 0.2 or newer [ 805.999861][T14298] FAULT_INJECTION: forcing a failure. [ 805.999861][T14298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.999924][T14298] CPU: 1 UID: 0 PID: 14298 Comm: syz.5.2588 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 805.999953][T14298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 805.999968][T14298] Call Trace: [ 805.999978][T14298] [ 805.999988][T14298] dump_stack_lvl+0xe8/0x150 [ 806.000031][T14298] should_fail_ex+0x46b/0x600 [ 806.000068][T14298] _copy_from_user+0x2d/0xb0 [ 806.000102][T14298] ___sys_sendmsg+0x1c6/0x360 [ 806.000140][T14298] ? __lock_acquire+0x683/0x2ce0 [ 806.000172][T14298] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.000211][T14298] ? __schedule+0x16ef/0x5700 [ 806.000371][T14298] ? __fget_files+0x2a/0x420 [ 806.000402][T14298] ? __fget_files+0x3a8/0x420 [ 806.000449][T14298] __x64_sys_sendmsg+0x1b7/0x290 [ 806.000487][T14298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 806.000544][T14298] do_syscall_64+0x166/0x520 [ 806.000569][T14298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.000595][T14298] ? clear_bhb_loop+0x70/0xc0 [ 806.000623][T14298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.000647][T14298] RIP: 0033:0x7f5df530e0d9 [ 806.000670][T14298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.000690][T14298] RSP: 002b:00007f5df3524028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 806.000715][T14298] RAX: ffffffffffffffda RBX: 00007f5df5596180 RCX: 00007f5df530e0d9 [ 806.000732][T14298] RDX: 000000002400c800 RSI: 0000200000000b00 RDI: 0000000000000005 [ 806.000749][T14298] RBP: 00007f5df3524090 R08: 0000000000000000 R09: 0000000000000000 [ 806.000763][T14298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.000777][T14298] R13: 00007f5df5596218 R14: 00007f5df5596180 R15: 00007fff32b5e6f8 [ 806.000814][T14298] [ 806.358439][T13578] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 806.790961][T13578] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 806.823508][T13578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.823543][T13578] usb 5-1: Product: syz [ 806.823554][T13578] usb 5-1: Manufacturer: syz [ 806.823565][T13578] usb 5-1: SerialNumber: syz [ 806.927089][T13578] usb 5-1: config 0 descriptor?? [ 806.962423][ T5726] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 808.295442][ T5607] usb 2-1: USB disconnect, device number 65 [ 813.752224][ T37] audit: type=1800 audit(1787620734.994:297): pid=14309 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2592" name="memory_backed" dev="configfs" ino=88168 res=0 errno=0 [ 813.752277][ T37] audit: type=1800 audit(1787620734.994:298): pid=14309 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2592" name="zone_nr_conv" dev="configfs" ino=88169 res=0 errno=0 [ 813.752310][ T37] audit: type=1800 audit(1787620734.994:299): pid=14309 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2592" name="power" dev="configfs" ino=88170 res=0 errno=0 [ 821.085739][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 863.642116][ C1] sched: DL replenish lagged too much [ 868.351658][ T4956] udevd[4956]: worker [8733] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 955.963106][ T38] INFO: task kworker/1:6:5726 blocked for more than 143 seconds. [ 955.963136][ T38] Not tainted syzkaller #0 [ 955.963150][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 955.963162][ T38] task:kworker/1:6 state:D stack:21328 pid:5726 tgid:5726 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 955.963229][ T38] Workqueue: usb_hub_wq hub_event [ 955.963370][ T38] Call Trace: [ 955.963380][ T38] [ 955.963397][ T38] __schedule+0x16d9/0x5700 [ 955.963535][ T38] ? __pfx___schedule+0x10/0x10 [ 955.963584][ T38] ? schedule+0x90/0x2b0 [ 955.963624][ T38] schedule+0x164/0x2b0 [ 955.963829][ T38] schedule_timeout+0x152/0x2c0 [ 955.963869][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 955.963906][ T38] ? __pfx_process_timeout+0x10/0x10 [ 955.963945][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 955.963974][ T38] wait_for_completion_timeout+0x2cf/0x610 [ 955.964016][ T38] ? wait_for_completion_timeout+0x265/0x610 [ 955.964045][ T38] ? __pfx_wait_for_completion_timeout+0x10/0x10 [ 955.964086][ T38] usb_start_wait_urb+0x1e9/0x5b0 [ 955.964151][ T38] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 955.964202][ T38] usb_control_msg+0x234/0x3e0 [ 955.964240][ T38] usb_get_descriptor+0xb1/0x3e0 [ 955.964279][ T38] usb_get_device_descriptor+0x6d/0xd0 [ 955.964318][ T38] hub_port_init+0x15f9/0x28b0 [ 955.964372][ T38] hub_event+0x24e2/0x4cf0 [ 955.964459][ T38] ? __pfx_hub_event+0x10/0x10 [ 955.964491][ T38] ? process_scheduled_works+0x97a/0x1630 [ 955.964528][ T38] ? rcu_is_watching+0x16/0xb0 [ 955.964561][ T38] ? process_scheduled_works+0x97a/0x1630 [ 955.964590][ T38] process_scheduled_works+0xc3d/0x1630 [ 955.964655][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 955.964691][ T38] ? assign_work+0x3cf/0x5d0 [ 955.964726][ T38] worker_thread+0xa47/0xfb0 [ 955.964771][ T38] ? __kthread_parkme+0x71/0x1f0 [ 955.964814][ T38] kthread+0x38b/0x470 [ 955.964850][ T38] ? __pfx_worker_thread+0x10/0x10 [ 955.964876][ T38] ? __pfx_kthread+0x10/0x10 [ 955.964913][ T38] ret_from_fork+0x514/0xb70 [ 955.964971][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 955.965006][ T38] ? __switch_to+0xc89/0x1420 [ 955.965040][ T38] ? __pfx_kthread+0x10/0x10 [ 955.965076][ T38] ret_from_fork_asm+0x1a/0x30 [ 955.965118][ T38] [ 955.965247][ T38] INFO: task kworker/1:2:13578 blocked for more than 143 seconds. [ 955.965266][ T38] Not tainted syzkaller #0 [ 955.965278][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 955.965289][ T38] task:kworker/1:2 state:D stack:22496 pid:13578 tgid:13578 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 955.965362][ T38] Workqueue: usb_hub_wq hub_event [ 955.965392][ T38] Call Trace: [ 955.965401][ T38] [ 955.965415][ T38] __schedule+0x16d9/0x5700 [ 955.965483][ T38] ? __pfx___schedule+0x10/0x10 [ 955.965530][ T38] ? schedule+0x90/0x2b0 [ 955.965570][ T38] schedule+0x164/0x2b0 [ 955.965608][ T38] schedule_timeout+0x152/0x2c0 [ 955.965644][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 955.965681][ T38] ? __pfx_process_timeout+0x10/0x10 [ 955.965716][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 955.965744][ T38] wait_for_completion_timeout+0x2cf/0x610 [ 955.965779][ T38] ? wait_for_completion_timeout+0x265/0x610 [ 955.965806][ T38] ? __pfx_wait_for_completion_timeout+0x10/0x10 [ 955.965847][ T38] usb_start_wait_urb+0x1e9/0x5b0 [ 955.965884][ T38] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 955.965936][ T38] usb_control_msg+0x234/0x3e0 [ 955.965972][ T38] usb_control_msg_send+0xc4/0x120 [ 955.966009][ T38] atusb_probe+0x5e7/0x2180 [ 955.966147][ T38] ? __pfx_atusb_probe+0x10/0x10 [ 955.966182][ T38] ? rt_spin_unlock+0x159/0x200 [ 955.966219][ T38] ? rt_spin_unlock+0x165/0x200 [ 955.966255][ T38] ? __pm_runtime_set_status+0x977/0xc40 [ 955.966370][ T38] usb_probe_interface+0x653/0xc60 [ 955.966417][ T38] ? __pfx_usb_probe_interface+0x10/0x10 [ 955.966451][ T38] really_probe+0x254/0xae0 [ 955.966533][ T38] __driver_probe_device+0x1e8/0x360 [ 955.966571][ T38] driver_probe_device+0x4f/0x240 [ 955.966608][ T38] __device_attach_driver+0x270/0x410 [ 955.966648][ T38] bus_for_each_drv+0x25b/0x2f0 [ 955.966675][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 955.966709][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 955.966734][ T38] ? rt_spin_unlock+0x165/0x200 [ 955.966775][ T38] __device_attach+0x2c7/0x450 [ 955.966805][ T38] ? rt_spin_unlock+0x159/0x200 [ 955.966840][ T38] ? __pfx___device_attach+0x10/0x10 [ 955.966882][ T38] device_initial_probe+0xa1/0xd0 [ 955.966917][ T38] bus_probe_device+0x12d/0x220 [ 955.966947][ T38] device_add+0x7d7/0xb80 [ 955.966988][ T38] usb_set_configuration+0x1ad8/0x2180 [ 955.967052][ T38] usb_generic_driver_probe+0x8d/0x150 [ 955.967142][ T38] usb_probe_device+0x1c3/0x3b0 [ 955.967181][ T38] ? __pfx_usb_probe_device+0x10/0x10 [ 955.967213][ T38] really_probe+0x254/0xae0 [ 955.967252][ T38] __driver_probe_device+0x1e8/0x360 [ 955.967288][ T38] driver_probe_device+0x4f/0x240 [ 955.967331][ T38] __device_attach_driver+0x270/0x410 [ 955.967370][ T38] bus_for_each_drv+0x25b/0x2f0 [ 955.967396][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 955.967429][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 955.967455][ T38] ? rt_spin_unlock+0x165/0x200 [ 955.967495][ T38] __device_attach+0x2c7/0x450 [ 955.967530][ T38] ? __pfx___device_attach+0x10/0x10 [ 955.967576][ T38] device_initial_probe+0xa1/0xd0 [ 955.967610][ T38] bus_probe_device+0x12d/0x220 [ 955.967639][ T38] device_add+0x7d7/0xb80 [ 955.967671][ T38] usb_new_device+0x99a/0x1680 [ 955.967697][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 955.967732][ T38] ? __pfx_usb_new_device+0x10/0x10 [ 955.967772][ T38] hub_event+0x28cf/0x4cf0 [ 955.967802][ T38] ? __lock_acquire+0x683/0x2ce0 [ 955.967885][ T38] ? __pfx_hub_event+0x10/0x10 [ 955.967915][ T38] ? process_scheduled_works+0x97a/0x1630 [ 955.967951][ T38] ? rcu_is_watching+0x16/0xb0 [ 955.967984][ T38] ? process_scheduled_works+0x97a/0x1630 [ 955.968013][ T38] process_scheduled_works+0xc3d/0x1630 [ 955.968077][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 955.968118][ T38] ? assign_work+0x3cf/0x5d0 [ 955.968153][ T38] worker_thread+0xa47/0xfb0 [ 955.968198][ T38] ? __kthread_parkme+0x71/0x1f0 [ 955.968240][ T38] kthread+0x38b/0x470 [ 955.968275][ T38] ? __pfx_worker_thread+0x10/0x10 [ 955.968309][ T38] ? __pfx_kthread+0x10/0x10 [ 955.968345][ T38] ret_from_fork+0x514/0xb70 [ 955.968384][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 955.968419][ T38] ? __switch_to+0xc89/0x1420 [ 955.968453][ T38] ? __pfx_kthread+0x10/0x10 [ 955.968489][ T38] ret_from_fork_asm+0x1a/0x30 [ 955.968530][ T38] [ 955.968559][ T38] [ 955.968559][ T38] Showing all locks held in the system: [ 955.968577][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 955.968632][ T38] #0: ffffffff8e1c3800 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 955.968730][ T38] locks held by getty/5340: 2, on CPU#1: [ 955.968746][ T38] #0: ffff888036a600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 955.968843][ T38] #1: ffffc900044ce2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 955.968935][ T38] locks held by kworker/1:6/5726: 5, on CPU#1: [ 955.968951][ T38] #0: ffff88801e2c0d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 955.969009][ T38] #1: ffffc9000583fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 955.969067][ T38] #2: ffff888029cde210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 955.969133][ T38] #3: ffff888029cb6658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0 [ 955.969193][ T38] #4: ffff88801f7f1858 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0 [ 955.969257][ T38] locks held by udevd/8733: 4, on CPU#0: [ 955.969274][ T38] #0: ffff88805c7afc98 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 955.969336][ T38] #1: ffff8880374c8c78 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 955.969407][ T38] #2: ffff88803623e008 (kn->active#13){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 955.969470][ T38] #3: ffff88803cd4a210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 955.969532][ T38] locks held by kworker/1:2/13578: 5, on CPU#1: [ 955.969549][ T38] #0: ffff88801e2c0d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 955.969608][ T38] #1: ffffc90007af7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 955.969667][ T38] #2: ffff888029dbc210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 955.969727][ T38] #3: ffff88803cd4a210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 955.969787][ T38] #4: ffff88806260a1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 955.969848][ T38] locks held by syz.5.2591/14305: 1, last CPU#1: [ 955.969865][ T38] #0: ffffffff8e1c3800 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 955.969972][ T38] [ 955.969978][ T38] ============================================= [ 955.969978][ T38] [ 955.969995][ T38] NMI backtrace for cpu 0 [ 955.970016][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 955.970066][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 955.970092][ T38] Call Trace: [ 955.970109][ T38] [ 955.970128][ T38] dump_stack_lvl+0xe8/0x150 [ 955.970191][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 955.970251][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 955.970295][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 955.970337][ T38] sys_info+0x135/0x170 [ 955.970389][ T38] watchdog+0xfd7/0x1030 [ 955.970429][ T38] ? watchdog+0x1c7/0x1030 [ 955.970461][ T38] kthread+0x38b/0x470 [ 955.970496][ T38] ? __pfx_watchdog+0x10/0x10 [ 955.970518][ T38] ? __pfx_kthread+0x10/0x10 [ 955.970553][ T38] ret_from_fork+0x514/0xb70 [ 955.970591][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 955.970624][ T38] ? __switch_to+0xc89/0x1420 [ 955.970657][ T38] ? __pfx_kthread+0x10/0x10 [ 955.970692][ T38] ret_from_fork_asm+0x1a/0x30 [ 955.970731][ T38] [ 955.970741][ T38] Sending NMI from CPU 0 to CPUs 1: [ 955.970775][ C1] NMI backtrace for cpu 1 [ 955.970795][ C1] CPU: 1 UID: 0 PID: 14305 Comm: syz.5.2591 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 955.970821][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 955.970833][ C1] RIP: 0010:lock_release+0x31/0x3c0 [ 955.970855][ C1] Code: 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 68 f0 01 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 67 f0 01 11 <83> f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 54 3e 10 0e 73 0d e8 [ 955.970871][ C1] RSP: 0018:ffffc90005f1f748 EFLAGS: 00000086 [ 955.970887][ C1] RAX: 0000000000000001 RBX: ffff8880321204c0 RCX: 8000000000000001 [ 955.970900][ C1] RDX: 0000000000000000 RSI: ffffffff818868c3 RDI: ffffffff8e1c3800 [ 955.970913][ C1] RBP: 0000000000000001 R08: ffffffff8fb1ae3f R09: 1ffffffff1f635c7 [ 955.970926][ C1] R10: dffffc0000000000 R11: fffffbfff1f635c8 R12: ffff888032120000 [ 955.970940][ C1] R13: ffffffff818868c3 R14: ffffffff8e1c3800 R15: dffffc0000000000 [ 955.970955][ C1] FS: 00007f5df35666c0(0000) GS:ffff888125cea000(0000) knlGS:0000000000000000 [ 955.970970][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 955.970982][ C1] CR2: 00005555592499f8 CR3: 000000005e110000 CR4: 00000000003526f0 [ 955.970998][ C1] Call Trace: [ 955.971006][ C1] [ 955.971018][ C1] __local_bh_enable+0x1ef/0x2f0 [ 955.971043][ C1] __local_bh_enable_ip+0x19f/0x2b0 [ 955.971065][ C1] ? bpf_test_run+0x1d1/0x830 [ 955.971091][ C1] bpf_test_run+0x3a8/0x830 [ 955.971129][ C1] ? __pfx_bpf_test_run+0x10/0x10 [ 955.971164][ C1] ? __kasan_krealloc+0xec/0x110 [ 955.971191][ C1] ? convert___skb_to_skb+0x3d/0x5b0 [ 955.971219][ C1] bpf_prog_test_run_skb+0xe35/0x2230 [ 955.971257][ C1] ? __fget_files+0x3a8/0x420 [ 955.971280][ C1] ? __fget_files+0x2a/0x420 [ 955.971306][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 955.971334][ C1] bpf_prog_test_run+0x2cb/0x340 [ 955.971359][ C1] __sys_bpf+0xa22/0xd90 [ 955.971384][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 955.971407][ C1] ? do_futex+0x3e7/0x4e0 [ 955.971458][ C1] ? rcu_is_watching+0x16/0xb0 [ 955.971484][ C1] __x64_sys_bpf+0xba/0xd0 [ 955.971504][ C1] do_syscall_64+0x166/0x520 [ 955.971523][ C1] ? trace_irq_disable+0x3b/0x140 [ 955.971542][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.971561][ C1] ? clear_bhb_loop+0x70/0xc0 [ 955.971582][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.971607][ C1] RIP: 0033:0x7f5df530e0d9 [ 955.971624][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.971638][ C1] RSP: 002b:00007f5df3566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 955.971655][ C1] RAX: ffffffffffffffda RBX: 00007f5df5595fa0 RCX: 00007f5df530e0d9 [ 955.971668][ C1] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 955.971679][ C1] RBP: 00007f5df53a5024 R08: 0000000000000000 R09: 0000000000000000 [ 955.971690][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 955.971701][ C1] R13: 00007f5df5596038 R14: 00007f5df5595fa0 R15: 00007fff32b5e6f8 [ 955.971724][ C1] [ 955.971780][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 955.971797][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 955.971824][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 955.971838][ T38] Call Trace: [ 955.971848][ T38] [ 955.971857][ T38] vpanic+0x56d/0xa60 [ 955.971883][ T38] ? __pfx_vpanic+0x10/0x10 [ 955.971930][ T38] panic+0xc5/0xd0 [ 955.971964][ T38] ? __pfx_panic+0x10/0x10 [ 955.972003][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 955.972029][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 955.972068][ T38] watchdog+0x1030/0x1030 [ 955.972101][ T38] ? watchdog+0x1c7/0x1030 [ 955.972134][ T38] kthread+0x38b/0x470 [ 955.972168][ T38] ? __pfx_watchdog+0x10/0x10 [ 955.972190][ T38] ? __pfx_kthread+0x10/0x10 [ 955.972225][ T38] ret_from_fork+0x514/0xb70 [ 955.972263][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 955.972296][ T38] ? __switch_to+0xc89/0x1420 [ 955.972335][ T38] ? __pfx_kthread+0x10/0x10 [ 955.972371][ T38] ret_from_fork_asm+0x1a/0x30 [ 955.972411][ T38] [ 955.973016][ T38] Kernel Offset: disabled