last executing test programs: 9.826829148s ago: executing program 3 (id=248): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000400)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x98f904, 0x0, '\x00', @string=0x0}}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002100)='ns/pid\x00') ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 9.263767281s ago: executing program 1 (id=249): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x38}, 0x1, 0x0, 0x0, 0x4008051}, 0xc800) 9.210814457s ago: executing program 1 (id=250): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) write$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x30, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x30}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000000)=0x3f, 0x9, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f0000000cc0)={0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$ptp0(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 9.073103191s ago: executing program 3 (id=252): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xd1, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000c80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)={0x200, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xff45}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x94}, {0x6, 0x16, 0xc}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x1}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x9e1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xffff}, {0x5, 0x12, 0x1}}]}, 0x200}, 0x1, 0x0, 0x0, 0x4040001}, 0x4010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="40010000", @ANYRES16, @ANYBLOB="010028bd7000ffdbdf2503000000500001801200010069623a766972745f7769666930000000380004001400010002004e210a0101000000000000000000200002000a00000600000002ff010000000000000000000000000001b8f3ffff1c00038008000300010400000800010059010000080003007f000000c000058008000100657468001c000280080002000500000008000400140b000008000200050000000800010065746800080001006574680014000280080002000000000008000300100000000c00028008000100010000003c00028008000400060000000800020000000000080002000000000008000300070000000800020002"], 0x140}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd80000009602"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000cc0)={'tunl0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x3, 0x69b2bcce, {{0x42, 0x4, 0x3, 0x7, 0x108, 0x64, 0x0, 0xff, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x54, 0x3, 0x2, [{@multicast1, 0xbb}, {@private=0xa010101, 0xfff}, {@remote, 0x8}]}, @ssrr={0x89, 0x23, 0x33, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010100, @loopback, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @generic={0x86, 0x11, "3e1f73a9e2891e3e618beb205c6603"}, @timestamp={0x44, 0x14, 0xa6, 0x0, 0xe, [0x89ae, 0x5, 0x8, 0xfff]}, @cipso={0x86, 0x66, 0x3, [{0x6, 0x8, "66eb05c978b6"}, {0x7, 0x3, "a5"}, {0x7, 0xc, "90cfab055731745d06dc"}, {0x0, 0xc, "3b02dab6e9d752a5bf97"}, {0x1, 0xf, "c2e9b73add636ae584570a44ac"}, {0x1, 0x12, "a474d72a74975a0d5ccd05f1c3a91fe7"}, {0x7, 0x2}, {0x1, 0x10, "c7644aee766a53b68e2832fc6bac"}, {0x2, 0xa, "67f782123eed6746"}]}, @ssrr={0x89, 0x7, 0x63, [@dev={0xac, 0x14, 0x14, 0x3e}]}, @lsrr={0x83, 0x7, 0x19, [@rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x1c, 0x65, 0x1, 0x3, [{@multicast1, 0x3}, {@multicast2, 0x6}, {@multicast2, 0xfd1}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000e00)={'sit0\x00', &(0x7f0000000d00)={'gre0\x00', r4, 0x47, 0x700, 0x401, 0x6, {{0x34, 0x4, 0x2, 0x3, 0xd0, 0x67, 0x0, 0x81, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1f, 0xda, [@dev={0xac, 0x14, 0x14, 0xe}, @loopback, @remote, @broadcast, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}]}, @timestamp_prespec={0x44, 0x24, 0x30, 0x3, 0x5, [{@loopback, 0xc62}, {@empty, 0x6}, {@rand_addr=0x64010102, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp_addr={0x44, 0x24, 0xa8, 0x1, 0x9, [{@private=0xa010102, 0xffff7fff}, {@multicast1, 0xffffffff}, {@local, 0x6}, {@loopback, 0xc9d99f63}]}, @cipso={0x86, 0x52, 0x3, [{0x7, 0x8, "cfb6560c69e8"}, {0x0, 0x3, "90"}, {0x1, 0x5, "1399b3"}, {0x1, 0x2}, {0x0, 0x7, "56af20ce69"}, {0x1, 0xf, "336000ce40ab3928e56e4e1f57"}, {0x7, 0x7, "42b8677587"}, {0x0, 0xb, "6675bd9ba1966099bb"}, {0x2, 0x12, "1266d5e8b03a9b9f609fd5e01fdfcc23"}]}, @end]}}}}}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040804}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x7f}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bind$netrom(r5, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0xffff, 0xb, 0x0, 0x41, 0x2}) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x9, 0xb2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x3e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf00b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x80, 0xf, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x40, 0xb5, 0x1, {0x22, 0xcec}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xda, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x6b, 0x9, 0x67, 0x40, 0x1}, 0x59, &(0x7f0000000140)={0x5, 0xf, 0x59, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x2, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "66994186e9e5dc8ecb92a26757c16cd9"}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x5, 0xff00}, @generic={0x1b, 0x10, 0x2, "adb0679e335f56ee28142c795ef0743b6ba429a7fa97a41f"}, @ssp_cap={0xc, 0x10, 0xa, 0x6f, 0x0, 0x8, 0xf, 0x8000}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc09}}, {0xf8, &(0x7f0000000200)=@string={0xf8, 0x3, "8c56395c040abbe50c17774055c2d884d7ecae754562822c0b87311e322b9a9a4d58413c6be634cee53a3ad98451e8e007130a4502b470a316f09341dc9e15792884d8602fe761400f5c9a3c2842124c8cf3f15194e53a04c2659e290e9d0da52281368bd58c184307a1cd4c4c1966d47c29d6fd11f72599acc974ee7689d57d98bb84f7fcd229404400554fcf2b09f79e0397427776620a6c978c6b98d315d4f9d4468261b3031ae85a3e2d9ae254abb48b42c009d2abeacc8283274acae27f9eda0c89d89b0311e49a147e4933674a8524c694f578903850950714c5e90037e87c8224305621af6765f2eaaf0012c2b6dd53ae96d6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1407}}, {0xb5, &(0x7f0000000340)=@string={0xb5, 0x3, "c4ee868efaa576e0dd8a200d7ec60f8a405cbf01c0b089613dc05cb658dbd813016754455a06e0f90a9e6efa37da2d7f9715b9dd836a3dc37a42e7bc16d33a115d0ebc78c3c360954ea4ec80c752053d40d534a2af7d5ed1974a5c65f190cf4f6c710d22a3338e04c6969e623a42a912dac8e82cc5b1afdb70607df5da848c62d0aee4d75e2c9774cf8b10020b8ddd9793b82585e10383d4ef98e53814c95d99f23efc9f962c3b18ecdcc05e0d7990afc823ee"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41a}}]}) 7.385408191s ago: executing program 3 (id=257): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="001381000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) 5.87759917s ago: executing program 1 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40001) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) syz_usb_connect$uac2(0x0, 0x117, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x105, 0x3, 0x1, 0x7, 0x90, 0xd6, {0x8, 0xb, 0x0, 0x2, 0x1, 0xc, 0x20, 0x19}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x48cc, 0x9, 0x4e, 0x3}, [@sample_rate={0xf, 0x24, 0xd, 0x2, 0x1, 0x2, [0x3, 0x2, 0x0, 0x0]}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x70, 'O'}, @source_unit={0x8, 0x24, 0xa, 0x40, 0x2, 0x1, 0x7f}, @sample_rate={0x9, 0x24, 0xd, 0x4, 0x0, 0x3, [0x0]}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x305, 0x5, 0x2, 0x9, 0xbc3, 0x3}, @effect_unit={0x13, 0x24, 0x7, 0x4, 0x0, 0x2, [0x1, 0x0, 0x2, 0x1, 0x0, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xb, 0x3, 0x1, 0x4, 0x4, 0x5, 0xc}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x80, 0x8, 0x7, 0x7f}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0x5, "91f652", "c45c98"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x2, 0xf, 0xff}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x30, 0xeb, {0x8, 0x25, 0x1, 0x81, 0x18, 0x2, 0xb1c3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x21}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x3, 0x1, 0x6, 0xf, "f6219f", "a458c0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd0, 0x2, 0x3, {0x8, 0x25, 0x1, 0x1, 0xc, 0x9}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x2, 0x6, 0x1, 0x20, 0xf}, 0xf, &(0x7f0000000480)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x81, 0xfff}]}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x405}}]}) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.584569609s ago: executing program 3 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'netpci0\x00', 0x3300}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@empty]}) 3.286208782s ago: executing program 1 (id=264): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x74, 0x86, 0xdd, 0x68, 0x0, 0x209, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x400000000002}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x800, 0x0, 0x35314258, 0x6, 0x2048, 0x1, 0x9, 0x9, 0x1, 0x6, 0x0, 0x5}}) write$eventfd(r2, &(0x7f00000001c0)=0x3, 0x50) 2.949562071s ago: executing program 3 (id=267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88082, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r6, 0x6, 0x1, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x5, 0x0, 0xd}}) socket(0x29, 0x3, 0x6) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x570, 0x0, 0xc000000000}]}) r9 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052400000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d000009058202"], 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0xd8c, 0x22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe, 0x90, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xb8, 0xd, 0x1, {0x22, 0x119}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x9, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0xc, 0x2}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x5, 0x0, 0x0, 0xff, 0x7}, 0xaf, &(0x7f0000000500)={0x5, 0xf, 0xaf, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x4, 0x1f, 0x2}, @generic={0x92, 0x10, 0x3, "97e89855430f4e3d4f7f0b605d15ec6d015e3370d9625e9bcd9b645942cf82b4689ab5a51f8190c36cfbb953a922be6eef0a328ba38421efa687dcf9ad82c9cdb394d233ea54b0aa39758b8a7c8526af6e61aa3e839aeecd6f279f28f18e70c8942f387fba79388d3ea1e04c67a7dfeacf8738b107efbca2a93611bcbfee06a9b39c4ae0469c57fefe9ee189312401"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x1, 0x2, 0x3ff}]}, 0x5, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}, {0xf9, &(0x7f0000000640)=@string={0xf9, 0x3, "f8f7df98d2003a21e696d734509256c9ddfb5e7c2a63b97cb315db465e5392e606dbfab977ab09e2bab89386314dddd631651412cf1ca17f8c27bfeafbb470b3a7c936358c11fa6b897ebc7e0fd1d44485afa2f63343332aac5ea534cc740848726d85cbe6ea8bfdc8ac9cf4e6452390a6c79cb977edca080fe83a8de9f3309bdaa55c07dd64cb8effa78eab120505c1fe8fda61d12cced05099809ae12a1b7b200465dc674a35b8f6289752908d530d127483a00ef04585cbb9c14aff77253581c64289dee0a7890cb88cafc83590947daa5f4c0ae9f7065915a49f203217e2693d69270a49298658bc808979d513c88f87a9b5c15390"}}, {0xcf, &(0x7f0000000740)=@string={0xcf, 0x3, "6b5ffd9f0aeee99d2a1506ccbfd6c60b0ecd756235d667623b392aa342972772e0987d56cb7016797f322037c60d4c49e347cacb00a0c5c8581e559bb52ec7c20f1805992817c20b2700f1f368d29cd830cc85742c4d2f5f9ac22c5401d3198b7cc73853fe241f984bf60cd99f719f778dc13f0ae080ecbb03bdf06073879e18ab463a93abb36ccc7f6321b409386f76616363f1087c563eaea80e2d5bba7179d714d1fd62943f75f9b9c4231360e8beea60367bd835f0d3ddc67da6925887331f2cf2ad50e1f73709a9a5eba5"}}, {0xce, &(0x7f0000000840)=@string={0xce, 0x3, "3178dfa485b178e913322c90da7b564f11894100742dff9fbc2af1aec64ed896bea15eee6418956cf3680af2ab4df8a0753bba1ef87149f18c0f904e9207c20c404a06b2cdd46db14db8d4af9269b444df322224dd1116d8830be9deef25717e7a0687f072f76fa60a14b91edee73cfc70b0e954504698ae6ea42cbd2eaa1b7317346704ff46bbaec74074bf21e7bd86a47e6c0be6025fd5e413ebd908691ed391164f5ca04afc0573c0ef7bb8feca20a746e6da3964670ca0aa18060ed066881d6cf8bfc63be821e2aedbc9"}}]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r11, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xff, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880) syz_usb_connect$cdc_ecm(0x2, 0x72, &(0x7f0000000a40)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x4, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x5, 0x20, 0x4e, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x944, 0x0, 0x9, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0xffff}, @network_terminal={0x7, 0x24, 0xa, 0xf, 0x4, 0x7, 0x40}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0x2, 0xc0}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x42, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0xfec7b7debf60a6d7, 0x4, 0xe, 0x1}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x3, 0xff, 0x6, 0x20, 0x4}, 0xec, &(0x7f0000000400)=ANY=[@ANYBLOB="e3b80e3841a08c2be15120361f53a539715e695b19cae0a5fd5e22934c5d1bd07356f3c2ce6abd63b824df27474abf60813dae8231647f4de55f69290b3f7b14a143b8bd0667f9a85de8785d5794c6ea8661840aa3e4fb2351eb55fb8ec154edcabb06039dd52265df"], 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c2b}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc04}}]}) 2.912880972s ago: executing program 1 (id=268): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="40310100000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.825053663s ago: executing program 2 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'bond0\x00', {'wg1\x00'}, 0x3}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f020000390005", 0x7}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x38, r1, 0x281, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xc, 0x5, 0x15, 0x1, 0x6, 0xf000, 0x9]}}]}]}]}, 0x38}}, 0x40080) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'bond0\x00', {'wg1\x00'}, 0x3}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f020000390005", 0x7}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x38, r1, 0x281, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xc, 0x5, 0x15, 0x1, 0x6, 0xf000, 0x9]}}]}]}]}, 0x38}}, 0x40080) (async) 2.567999016s ago: executing program 3 (id=272): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) pselect6(0x40, &(0x7f0000000000)={0x1, 0x100000001, 0x42d56b54, 0x8, 0x10000000000000, 0x5, 0x5, 0x6f116ad0}, &(0x7f0000000040)={0x3, 0x8c, 0x7ff, 0x82, 0x80, 0x1, 0x80, 0x8}, &(0x7f0000000080)={0x8, 0x6, 0x4, 0x8, 0x4, 0xffffffff, 0x1000, 0xe}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x1]}, 0x8}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x60180, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f00000003c0)) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x9) r3 = syz_usb_connect(0x6, 0x3c, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000b80)={0x1c, &(0x7f0000000200)={0x20}, 0x0, 0x0}) 2.534360257s ago: executing program 2 (id=273): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c07000000003b9b301f0000000000000000009c068a355b29b9b078055f000000000000000000", 0x27) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.360012306s ago: executing program 0 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000000)={0x58, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c095}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r4 = fanotify_init(0x8, 0x400) write$binfmt_elf64(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c462200001c"], 0x40) r5 = syz_open_dev$vim2m(&(0x7f0000000400), 0x400010000000086, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x147042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x4000, r8}) fcntl$setlease(r6, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_PEC(r9, 0x708, 0x7f) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x0, "0097ec0000206f0000a2263397400000060000000000400000aeb2e1e13d00"}}) r10 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r10, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc85]}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000001c0)={0xe, 0x1, 0x0, "8eb8a828e93b07f1dd06d87a41bfeae7800400b159fbba176fb1de26098d68d9"}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0xc0, 0x180, &(0x7f0000000180)=[0x3, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x466c, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0xffffffff, 0x9, 0x0, 0x5, 0x7, 0x4, 0x3, 0x5, 0x10000008892, 0x1, 0x8000000006, 0x43, 0x0, 0x3, 0xa3de, 0x2cc0000000000000, 0x8, 0x5, 0x400, 0x6, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0x1, 0x3, 0xfffffffffffffffa, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffefffffffc, 0x9, 0x400, 0x10001, 0xbbd9, 0xfffffffffffffff6, 0xfffffffffffbfc00, 0x2, 0x7, 0x5e7, 0xe25, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x2004, 0x1, 0xab6, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0x102, 0x6, 0x28000000, 0x80000008, 0x8061d, 0x0, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x3, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x20d2, 0x7, 0x200000000dfd4, 0xfff9, 0x10, 0x40000000000005, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb68e, 0x0, 0x8, 0x1000003]}) 1.812804942s ago: executing program 0 (id=275): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f00000004c0)='net/raw\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 1.537344214s ago: executing program 0 (id=276): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x74, 0x86, 0xdd, 0x68, 0x0, 0x209, 0x0, 0x0, 0x3, 0x5, 0x5, '\x00', 0x1, 0x400000000002}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x800, 0x0, 0x35314258, 0x6, 0x2048, 0x1, 0x9, 0x9, 0x1, 0x6, 0x0, 0x5}}) write$eventfd(r2, &(0x7f00000001c0)=0x3, 0x50) 1.535777902s ago: executing program 2 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xc}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf80b}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x2d8, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5a}}}}, [@NL80211_ATTR_KEYS={0x38, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "205ca1f14abb33df0e3ed48a4d"}]}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0xaa, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x8, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x2, 0x4, 0x0, {0x3ff, 0x7, 0x0, 0x2, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x8, 0x4}}, @NL80211_ATTR_IE={0x232, 0x2a, [@supported_rates={0x1, 0x6, [{0x24, 0x1}, {0xc}, {0x60, 0x1}, {0x30, 0x1}, {0x2, 0x1}, {0x3}]}, @ssid={0x0, 0x6, @default_ap_ssid}, @ht={0x2d, 0x1a, {0x8000, 0x2, 0x3, 0x0, {0x1abad634, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x1, 0x6}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @random={0x44, 0x6b, "8dcb0913557732a4fe812ba0862fee449e08ae45a1e4c83a007878eddeb60e462aa609f9d43951228d5131b2e41460d6df4db453c9e5db89a2b7c4b505fd1e62747cc88616e78e87b18661e2f649d77310ca5e5ab3685970f827290cdde7296704c0e654617484a1734a53"}, @chsw_timing={0x68, 0x4, {0x9b2, 0x1}}, @mesh_chsw={0x76, 0x6, {0x3d, 0x4, 0x3a, 0x2b2}}, @fast_bss_trans={0x37, 0x77, {0x2, 0x3, "03b985b86c5b47a079d38cb9efbb7227", "0adb1f0febeec31beffe5962662bae8cbb18f5c479aed97973b1ff4f50efbeb5", "5858ffb969f984aaf50dd122924cf86b9f55c0d81e7bb374d5dfff02c0e1636c", [{0x4, 0x15, "3192c2597138cbe9a478a63736e6e7381ee2e8da46"}, {0x1}, {0x9, 0xa, "d79e7bab85955cb05f59"}]}}, @fast_bss_trans={0x37, 0x106, {0xef, 0xa, "e06cda99ef3d9a87121fa08d358d7a87", "f05a4f295b14d162a6016609a669d52e0d99723228ad2202c8ceb32e783f9d19", "8077c98ed4c0181ca4a03a8bd908c35b661fef1f217afdcfaaa9f6b6778e796f", [{0x3, 0x13, "d47609f0c889170fbaf97c46ec28e62f361893"}, {0x4, 0xe, "ba704053bcba305c2758352a6ed8"}, {0x2, 0x13, "92d2e8933eb254229269f17696722d4e58b8ff"}, {0x1, 0x11, "78d00a8bf8318f3ca81bec6b3505f3c495"}, {0x1, 0x15, "1d665ff1faae443c66edd65f56e7af3c2353f9cccd"}, {0x2, 0x9, "eb9e043ff32be800d0"}, {0x2, 0x4, "5b4ea883"}, {0x1, 0xe, "80ef7869bfe576ad8f256bfb9feb"}, {0x4, 0x16, "91e07e189fb3da10eba34ad2e1694da7fa7829416ed8"}, {0x1, 0x15, "4aa2b9abe04da9db8913e1017f29dc439dbdc85884"}]}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x40000840}, 0x80) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff8001, 0x2e}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdb}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xfd}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x24}}, 0x880) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x40000) (async) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f00000008c0)) writev(r3, &(0x7f0000000980)=[{&(0x7f0000000900)="a78b051a4e8200700dc89283009ce251c31911458c4bc1e79f39aa8746ca2847f850a51b777d5d8f909089675bf6e99bcee2f26b066442b7453813853fe54d77587572df8ebb03b11e5b558fa8b0b794689b6d88dbf0ebc54a40ca5b8afff290552b729649ac8869", 0x68}], 0x1) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000a00)={0x4, &(0x7f00000009c0)=[{0x9, 0xd, 0x0, 0x8}, {0xfbff, 0x1, 0x0, 0x8000}, {0x3, 0x9, 0x7, 0x8000}, {0x3, 0x96, 0x3, 0x1000}]}) (async) r6 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000a40)={0x20000006}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x94}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8010) (async) close_range(r6, r5, 0x0) (async) ioctl$OCFS2_IOC_RESVSP64(r7, 0x4030582a, &(0x7f0000000bc0)={0x2, 0x1, 0xffffffffffffa145, 0x697, 0x66, 0xd3a}) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c40)={'vxcan1\x00', 0x0}) sendto$packet(r8, &(0x7f0000000c00)="87c564412ac2cc", 0x7, 0x20008846, &(0x7f0000000c80)={0x11, 0x2, r9, 0x1, 0x5, 0x6, @random="1fd385efaa68"}, 0x14) (async) r10 = fcntl$dupfd(r3, 0x406, r7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000d40)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000cc0)="0f52a73a823e984295676bca35c73b2f2a08b5ef165500b65ae30e056a1af95be1a1c47ca3e5bd7ec009812012a8eed7c2fb5cc72833e68342a8721b74adf692ff16df02d3bd08b7ee1bc0", 0x4b, r10}, 0x68) (async) r11 = socket$inet(0x2, 0x1, 0x9) setsockopt(r11, 0x0, 0xffff, &(0x7f0000000dc0)="3f33d59899463615702232ec1d1aad9256a1cf6364a25adc71ddc6e2df78e531208b464f931788e13000b6d80e3d25f41c2ea32c11303ecf61cd1b9f8fd7dd241102cd11c79a18cae6a1bc4e0f727dbd377699905f94f531f40d1e5c87cd84a0b54a3d2b576511711c869d7396c0869aae695533d67ab2dd8904", 0x7a) (async) io_setup(0x8001, &(0x7f0000000e40)=0x0) io_submit(r12, 0x0, &(0x7f0000000e80)) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r13, &(0x7f0000001000)={&(0x7f0000000ec0), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}}, 0x41000) 1.286927599s ago: executing program 2 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r2, 0x40000) 1.179785055s ago: executing program 0 (id=279): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000003c0)={0x2, 0x3, 0x4, 0x1b43}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x41020, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000600)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf, &(0x7f0000000500)="ff6c8aa6a71fbd86193dba596ac20b7eeb585963b59bca496beaf64c93225a04f971f11cf70bc0d5d485df878204098a408ddf536109b1e0f4763f6760467917010a5608f0efeba515dfa69dbd0bb925a713fc35645b7222feb8ec78975f4589ec5ff3c992dc9cab0a748c3bcc0d303eb6290edb6a14dde2874f53d5261cc79369acb07d635a6e47e3407e130e879f20576a31a0cb05264ef2f3f47f9fb6b463ac76eb05a3e0c2accc21801cad50afe7a3b318c07dc4725d66ffdaf04d1e3a58e84ed7a18742b3c6223bb7cb0455915280dc1c50eb5eb04f86fe4b899b536b"}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000002040)={0x48, 0x3, r4, 0x0, 0x7, 0x1000, &(0x7f0000001040)="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"}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000042c0), 0x101041, 0x0) write$vga_arbiter(r5, &(0x7f0000004300)=ANY=[@ANYBLOB="6c6f636b20ee6f6e6500"], 0xa) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mq_open(&(0x7f0000000240)=':.{-((\x00', 0x2, 0x19a, &(0x7f0000000280)={0x81, 0xb0, 0xd8d, 0x4}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000380)=@add_del={0x2, &(0x7f00000002c0)='veth1_virt_wifi\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 961.151182ms ago: executing program 2 (id=280): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r2, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) 829.155344ms ago: executing program 0 (id=281): r0 = dup(0xffffffffffffffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = memfd_create(&(0x7f0000000400)='\xe5e\t\x9f$\x19\x87\xb2]4t\xd8\xaf\x918\xc0y\x01c\x1fnux \xfd\xd7\x8e\x7f\x89\xb8\xc5U\x99A\x1b\x12\x10i\xc2aI\xb3>\xd2\x02\x1a;~\x04\x03~K\xfbP\x8c=\xfa\x81\f\x1e\x05\x00\x00\x00\x00\x00\x00.\x1cb]\xe7d\xac\x00*\xc3\x84;\x1a\x87\x96{\x18\xb2fd&\x9fP\x9cJ\xf2\x87\xed\xbd\"\x13E,\xc7[@\xe9!b\xf4a\x04\a\xff\x8d\x1a\xb5\xd2)i\x157\xabk\x1d\x12bV;\xb6\xdd\xe2|\xe5|M\xae\x1e\xac\xa1~?t\x17O\xb6\x1e\xed\xf5\xff\x11\x89+\xca\b\xc0V$\xb5\x90\xad\xf1\xe4\xeb\x1a\xd1\x9c\x7f\x8f\xdbb?2\x9a\xa0g\xba\x10\xf1\xd2+\x94\xc6\r\xbc\xce\x8c\xbcb\xb1e\xaa.s\x81\xab:\xbf\xe8\x97\x8b}g\xbe\xc0\xe7Y\xca\x876;\xc2\xc9U\x152wq8\x02\x87\x1fpK\xac\xdabx\xcb\xfc\xa5y\xa7\x1f\x9e\xbe]\xa6\x01\xeeN\xfa\xd4P\xaa\x9aN}\x0ea*\\\n\x16\xb0\t/Pi4\xd3\agW9\xb2=\xe0`\x862\x01d\x0ft\xb0\xb5\xe4\xd4X\x99/=\xb4\xf8QW\xa5\xff_`\x93\x1e8\xd1\xe4\x83t+\x8b\xc2#J4\x10k\xc1\xa3\rb`\x7f@\xfb\x90Q\v\xc8\x8e\x93\xbdcX6\xe8_\xef\x96\xd3\xec\f\x04\xc4\xda\x05\xfb\xf0E\xd4?\x88\xa0\xbb', 0x0) (rerun: 64) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) (async, rerun: 64) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) (async) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001e40)=""/104, 0x68}], 0x1}, 0x2}], 0x1, 0x1, 0x0) (async) sendmmsg$inet6(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}], 0x1, 0x20e8086) (async) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)}, 0x41) (async) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x101, 0x0) write$FUSE_DIRENT(r5, 0x0, 0x200001d0) (async) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) (async, rerun: 32) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x64, 0x0, 0x0, 0x0, 0xfffffffffffffccf}, 0x40000121) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r6, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000000080)=""/159, 0x9f}, {&(0x7f0000000680)=""/4099, 0x1003}], 0x3}, 0x4}], 0x1, 0x102, 0x0) (async) write$UHID_INPUT(r0, &(0x7f0000004000)={0xf, {"a2e3ad21ed0d09f90750090987f70906d038e7ff7fc6e5539b0d3d0e8b089b39326d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe59}}, 0xfa) 593.215321ms ago: executing program 0 (id=282): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0) mq_timedreceive(r1, 0x0, 0xffffffffffffff0b, 0x7fffffff, &(0x7f0000000180)={0x77359400}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000900)) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x14) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r8 = getpgid(0x0) capset(&(0x7f0000000100)={0x20080522, r8}, &(0x7f0000000140)={0x44d, 0x10, 0xfffffcbb, 0x5, 0x3, 0x2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB="0582105e", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0xa44}}, 0x40) 469.673677ms ago: executing program 2 (id=283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d00}]}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4800}, 0x11) write(r2, &(0x7f0000000740)="1c", 0x1) 0s ago: executing program 1 (id=284): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x82e, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) kernel console output (not intermixed with test programs): 4: 00007f668fa76090 R15: 00007ffd0d424ee8 [ 125.425595][ T6130] [ 125.852624][ T6133] veth0_macvtap: left promiscuous mode [ 125.960855][ T6133] macvtap0: entered allmulticast mode [ 127.438965][ T6172] FAULT_INJECTION: forcing a failure. [ 127.438965][ T6172] name failslab, interval 1, probability 0, space 0, times 0 [ 127.439000][ T6172] CPU: 1 UID: 0 PID: 6172 Comm: syz.2.73 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.439023][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 127.439035][ T6172] Call Trace: [ 127.439044][ T6172] [ 127.439052][ T6172] dump_stack_lvl+0xe8/0x150 [ 127.439082][ T6172] should_fail_ex+0x46b/0x600 [ 127.439118][ T6172] should_failslab+0xa8/0x100 [ 127.439165][ T6172] __kmalloc_noprof+0xdf/0x7b0 [ 127.439196][ T6172] ? tomoyo_encode+0x28b/0x550 [ 127.439236][ T6172] tomoyo_encode+0x28b/0x550 [ 127.439274][ T6172] tomoyo_realpath_from_path+0x58d/0x5d0 [ 127.439308][ T6172] ? tomoyo_domain+0xd7/0x130 [ 127.439347][ T6172] ? tomoyo_path_number_perm+0x219/0x630 [ 127.439374][ T6172] tomoyo_path_number_perm+0x246/0x630 [ 127.439404][ T6172] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.439436][ T6172] ? do_raw_spin_lock+0x12b/0x2f0 [ 127.439460][ T6172] ? __pfx___schedule+0x10/0x10 [ 127.439524][ T6172] ? security_file_ioctl+0x246/0x2a0 [ 127.439556][ T6172] security_file_ioctl+0xc3/0x2a0 [ 127.439583][ T6172] __se_sys_ioctl+0x47/0x170 [ 127.439615][ T6172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.439639][ T6172] do_syscall_64+0x15f/0xf80 [ 127.439664][ T6172] ? trace_irq_disable+0x3b/0x140 [ 127.439689][ T6172] ? clear_bhb_loop+0x40/0x90 [ 127.439716][ T6172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.439738][ T6172] RIP: 0033:0x7f498e59c819 [ 127.439758][ T6172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.439774][ T6172] RSP: 002b:00007f498c7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.439796][ T6172] RAX: ffffffffffffffda RBX: 00007f498e816090 RCX: 00007f498e59c819 [ 127.439812][ T6172] RDX: 0000200000000000 RSI: 000000000000894b RDI: 0000000000000003 [ 127.439825][ T6172] RBP: 00007f498c7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 127.439837][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.439849][ T6172] R13: 00007f498e816128 R14: 00007f498e816090 R15: 00007ffeeb045e28 [ 127.439882][ T6172] [ 127.439903][ T6172] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.773580][ T6178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.566296][ T6201] FAULT_INJECTION: forcing a failure. [ 128.566296][ T6201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.566322][ T6201] CPU: 1 UID: 0 PID: 6201 Comm: syz.0.80 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.566340][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.566349][ T6201] Call Trace: [ 128.566355][ T6201] [ 128.566361][ T6201] dump_stack_lvl+0xe8/0x150 [ 128.566383][ T6201] should_fail_ex+0x46b/0x600 [ 128.566410][ T6201] strncpy_from_user+0x36/0x2b0 [ 128.566434][ T6201] do_getname+0x77/0x250 [ 128.566452][ T6201] __x64_sys_lgetxattr+0x1fb/0x2b0 [ 128.566478][ T6201] ? __pfx___x64_sys_lgetxattr+0x10/0x10 [ 128.566517][ T6201] ? __pfx_ksys_write+0x10/0x10 [ 128.566546][ T6201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.566563][ T6201] do_syscall_64+0x15f/0xf80 [ 128.566581][ T6201] ? trace_irq_disable+0x3b/0x140 [ 128.566599][ T6201] ? clear_bhb_loop+0x40/0x90 [ 128.566618][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.566634][ T6201] RIP: 0033:0x7f668f7fc819 [ 128.566647][ T6201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.566660][ T6201] RSP: 002b:00007f668da56028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 128.566676][ T6201] RAX: ffffffffffffffda RBX: 00007f668fa75fa0 RCX: 00007f668f7fc819 [ 128.566687][ T6201] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 00002000000002c0 [ 128.566697][ T6201] RBP: 00007f668da56090 R08: 0000000000000000 R09: 0000000000000000 [ 128.566707][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.566715][ T6201] R13: 00007f668fa76038 R14: 00007f668fa75fa0 R15: 00007ffd0d424ee8 [ 128.566739][ T6201] [ 129.043008][ T6213] FAULT_INJECTION: forcing a failure. [ 129.043008][ T6213] name failslab, interval 1, probability 0, space 0, times 0 [ 129.043042][ T6213] CPU: 1 UID: 0 PID: 6213 Comm: syz.1.83 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.043066][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 129.043077][ T6213] Call Trace: [ 129.043085][ T6213] [ 129.043094][ T6213] dump_stack_lvl+0xe8/0x150 [ 129.043123][ T6213] should_fail_ex+0x46b/0x600 [ 129.043160][ T6213] should_failslab+0xa8/0x100 [ 129.043194][ T6213] __kmalloc_cache_noprof+0x84/0x690 [ 129.043226][ T6213] ? __se_sys_mount+0x166/0x420 [ 129.043250][ T6213] ? memdup_user+0x99/0xd0 [ 129.043280][ T6213] __se_sys_mount+0x166/0x420 [ 129.043314][ T6213] ? __pfx___se_sys_mount+0x10/0x10 [ 129.043348][ T6213] ? __x64_sys_mount+0x20/0xc0 [ 129.043373][ T6213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.043397][ T6213] do_syscall_64+0x15f/0xf80 [ 129.043422][ T6213] ? trace_irq_disable+0x3b/0x140 [ 129.043447][ T6213] ? clear_bhb_loop+0x40/0x90 [ 129.043473][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.043494][ T6213] RIP: 0033:0x7fba35a6c819 [ 129.043515][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.043533][ T6213] RSP: 002b:00007fba33cbe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.043555][ T6213] RAX: ffffffffffffffda RBX: 00007fba35ce5fa0 RCX: 00007fba35a6c819 [ 129.043570][ T6213] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 129.043584][ T6213] RBP: 00007fba33cbe090 R08: 0000200000000200 R09: 0000000000000000 [ 129.043597][ T6213] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 129.043610][ T6213] R13: 00007fba35ce6038 R14: 00007fba35ce5fa0 R15: 00007fff0c1dc778 [ 129.043642][ T6213] [ 129.252558][ T5898] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 129.403862][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 129.411773][ T5898] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 129.411800][ T5898] usb 3-1: config 0 has no interface number 0 [ 129.430634][ T5898] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 129.430665][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.430688][ T5898] usb 3-1: Product: syz [ 129.430698][ T5898] usb 3-1: Manufacturer: syz [ 129.430708][ T5898] usb 3-1: SerialNumber: syz [ 129.506558][ T5898] usb 3-1: config 0 descriptor?? [ 129.608353][ T2107] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 129.675673][ T6225] binder: 6224:6225 ioctl c0306201 2000000001c0 returned -22 [ 129.794323][ T5894] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.801710][ T2107] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.801731][ T2107] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.801746][ T2107] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.854161][ T2107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.854193][ T2107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 129.854280][ T2107] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.854325][ T2107] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.854345][ T2107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.959301][ T5898] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 129.959325][ T5898] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 130.022242][ T2107] usb 1-1: config 0 descriptor?? [ 130.029609][ T6218] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 130.056246][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.058435][ T5894] usb 2-1: config 1 has an invalid interface number: 135 but max is 0 [ 130.058455][ T5894] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 130.058468][ T5894] usb 2-1: config 1 has no interface number 0 [ 130.058501][ T5894] usb 2-1: config 1 interface 135 altsetting 9 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 130.059425][ T5894] usb 2-1: config 1 interface 135 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 130.059447][ T5894] usb 2-1: config 1 interface 135 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 130.059466][ T5894] usb 2-1: config 1 interface 135 has no altsetting 0 [ 130.165684][ T5898] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 130.166383][ T5898] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 130.253842][ T5894] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0148, bcdDevice=f8.0b [ 130.253874][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.253895][ T5894] usb 2-1: Product: syz [ 130.253910][ T5894] usb 2-1: Manufacturer: syz [ 130.253924][ T5894] usb 2-1: SerialNumber: syz [ 130.269523][ T5898] usb 3-1: USB disconnect, device number 9 [ 130.352694][ T2107] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 130.642915][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.658845][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.764670][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.796723][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.809500][ C0] usblp0: nonzero read bulk status received: -71 [ 130.821490][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.842937][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.868065][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.869203][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.870737][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.871334][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.034495][ T5898] usb 1-1: USB disconnect, device number 3 [ 131.149747][ T5894] ftdi_sio 2-1:1.135: FTDI USB Serial Device converter detected [ 131.157152][ T5898] usblp0: removed [ 131.211722][ T5894] ftdi_sio ttyUSB0: unknown device type: 0xf80b [ 131.308989][ T5894] usb 2-1: USB disconnect, device number 4 [ 131.357507][ T6240] FAULT_INJECTION: forcing a failure. [ 131.357507][ T6240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.357533][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.3.90 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.357551][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 131.357560][ T6240] Call Trace: [ 131.357566][ T6240] [ 131.357572][ T6240] dump_stack_lvl+0xe8/0x150 [ 131.357594][ T6240] should_fail_ex+0x46b/0x600 [ 131.357621][ T6240] _copy_to_user+0x31/0xb0 [ 131.357637][ T6240] simple_read_from_buffer+0xe1/0x170 [ 131.357660][ T6240] proc_fail_nth_read+0x1be/0x230 [ 131.357683][ T6240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.357705][ T6240] ? rw_verify_area+0x2ac/0x4e0 [ 131.357727][ T6240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.357747][ T6240] vfs_read+0x212/0xa80 [ 131.357776][ T6240] ? __pfx_vfs_read+0x10/0x10 [ 131.357800][ T6240] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 131.357819][ T6240] ? lockdep_hardirqs_on+0x7a/0x110 [ 131.357838][ T6240] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 131.357857][ T6240] ? mutex_lock_nested+0x152/0x1d0 [ 131.357880][ T6240] ? fdget_pos+0x252/0x320 [ 131.357906][ T6240] ksys_read+0x156/0x270 [ 131.357930][ T6240] ? __pfx_ksys_read+0x10/0x10 [ 131.357958][ T6240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.357975][ T6240] do_syscall_64+0x15f/0xf80 [ 131.358023][ T6240] ? trace_irq_disable+0x3b/0x140 [ 131.358041][ T6240] ? clear_bhb_loop+0x40/0x90 [ 131.358061][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.358076][ T6240] RIP: 0033:0x7efe8091d04e [ 131.358090][ T6240] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.358102][ T6240] RSP: 002b:00007efe7eb8cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.358118][ T6240] RAX: ffffffffffffffda RBX: 00007efe7eb8d6c0 RCX: 00007efe8091d04e [ 131.358130][ T6240] RDX: 000000000000000f RSI: 00007efe7eb8d0a0 RDI: 0000000000000005 [ 131.358139][ T6240] RBP: 00007efe7eb8d090 R08: 0000000000000000 R09: 0000000000000000 [ 131.358149][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.358158][ T6240] R13: 00007efe80bd6128 R14: 00007efe80bd6090 R15: 00007ffdcc75e0d8 [ 131.358181][ T6240] [ 131.573959][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 131.625278][ T5894] ftdi_sio 2-1:1.135: device disconnected [ 131.760963][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.761018][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB [ 131.761054][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 131.761082][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 50562, setting to 64 [ 131.761109][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD9, changing to 0x89 [ 131.761134][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 131.761156][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 131.763461][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 131.763489][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.763510][ T9] usb 3-1: Manufacturer: syz [ 131.893578][ T9] usb 3-1: config 0 descriptor?? [ 131.905832][ T6237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.948544][ T9] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed! [ 131.948598][ T9] mceusb 3-1:0.0: probe with driver mceusb failed with error -12 [ 132.130962][ T2107] usb 3-1: USB disconnect, device number 10 [ 132.401215][ T6254] overlayfs: statfs failed on './file0' [ 132.553973][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.625285][ T38] audit: type=1326 audit(1776881974.839:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.1.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba35a6c819 code=0x7fc00000 [ 132.705080][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 132.726755][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 132.726785][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.727726][ T9] usb 4-1: Product: syz [ 132.727748][ T9] usb 4-1: Manufacturer: syz [ 132.728001][ T9] usb 4-1: SerialNumber: syz [ 132.801874][ T9] usb 4-1: config 0 descriptor?? [ 132.868984][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 133.015944][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.016077][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.180512][ T6265] process 'syz.2.96' launched './file0' with NULL argv: empty string added [ 133.459910][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.480608][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.520999][ T6264] random: crng reseeded on system resumption [ 133.676549][ T6269] fuse: Bad value for 'fd' [ 133.782941][ T9] gspca_sonixj: reg_r err -110 [ 133.783044][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 133.888190][ T9] usb 4-1: USB disconnect, device number 3 [ 134.230501][ T6276] FAULT_INJECTION: forcing a failure. [ 134.230501][ T6276] name failslab, interval 1, probability 0, space 0, times 0 [ 134.230527][ T6276] CPU: 1 UID: 0 PID: 6276 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.230544][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 134.230554][ T6276] Call Trace: [ 134.230559][ T6276] [ 134.230566][ T6276] dump_stack_lvl+0xe8/0x150 [ 134.230588][ T6276] should_fail_ex+0x46b/0x600 [ 134.230615][ T6276] should_failslab+0xa8/0x100 [ 134.230641][ T6276] __kmalloc_cache_noprof+0x84/0x690 [ 134.230664][ T6276] ? vhost_task_create+0x123/0x380 [ 134.230689][ T6276] vhost_task_create+0x123/0x380 [ 134.230711][ T6276] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 134.230733][ T6276] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 134.230756][ T6276] ? __pfx_vhost_task_create+0x10/0x10 [ 134.230783][ T6276] ? __pfx_vhost_task_fn+0x10/0x10 [ 134.230808][ T6276] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.230828][ T6276] ? lockdep_hardirqs_on+0x7a/0x110 [ 134.230863][ T6276] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 134.230882][ T6276] ? mutex_lock_nested+0x152/0x1d0 [ 134.230905][ T6276] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 134.230932][ T6276] kvm_mmu_post_init_vm+0x147/0x2d0 [ 134.230958][ T6276] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 134.230995][ T6276] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 134.231024][ T6276] ? do_raw_spin_lock+0x12b/0x2f0 [ 134.231050][ T6276] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.231070][ T6276] ? lockdep_hardirqs_on+0x7a/0x110 [ 134.231088][ T6276] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 134.231107][ T6276] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 134.231126][ T6276] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 134.231153][ T6276] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.231172][ T6276] ? lockdep_hardirqs_on+0x7a/0x110 [ 134.231190][ T6276] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 134.231209][ T6276] ? rt_write_unlock+0x190/0x230 [ 134.231226][ T6276] kvm_vcpu_ioctl+0xa65/0xfe0 [ 134.231253][ T6276] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 134.231289][ T6276] ? __fget_files+0x2a/0x420 [ 134.231311][ T6276] ? __fget_files+0x2a/0x420 [ 134.231329][ T6276] ? __fget_files+0x3a6/0x420 [ 134.231346][ T6276] ? __fget_files+0x2a/0x420 [ 134.231368][ T6276] ? bpf_lsm_file_ioctl+0x9/0x20 [ 134.231386][ T6276] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 134.231408][ T6276] __se_sys_ioctl+0xff/0x170 [ 134.231432][ T6276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.231449][ T6276] do_syscall_64+0x15f/0xf80 [ 134.231467][ T6276] ? trace_irq_disable+0x3b/0x140 [ 134.231486][ T6276] ? clear_bhb_loop+0x40/0x90 [ 134.231505][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.231521][ T6276] RIP: 0033:0x7efe8095c819 [ 134.231535][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.231547][ T6276] RSP: 002b:00007efe7eb8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.231563][ T6276] RAX: ffffffffffffffda RBX: 00007efe80bd6090 RCX: 00007efe8095c819 [ 134.231574][ T6276] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 134.231583][ T6276] RBP: 00007efe7eb8d090 R08: 0000000000000000 R09: 0000000000000000 [ 134.231593][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.231601][ T6276] R13: 00007efe80bd6128 R14: 00007efe80bd6090 R15: 00007ffdcc75e0d8 [ 134.231625][ T6276] [ 134.245387][ T6285] FAULT_INJECTION: forcing a failure. [ 134.245387][ T6285] name failslab, interval 1, probability 0, space 0, times 0 [ 134.249562][ T6285] CPU: 0 UID: 0 PID: 6285 Comm: syz.1.98 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.249650][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 134.249686][ T6285] Call Trace: [ 134.249718][ T6285] [ 134.249741][ T6285] dump_stack_lvl+0xe8/0x150 [ 134.249820][ T6285] should_fail_ex+0x46b/0x600 [ 134.249900][ T6285] should_failslab+0xa8/0x100 [ 134.249991][ T6285] kmem_cache_alloc_noprof+0x87/0x680 [ 134.250078][ T6285] ? alloc_empty_file+0x5b/0x1d0 [ 134.250159][ T6285] alloc_empty_file+0x5b/0x1d0 [ 134.250231][ T6285] path_openat+0x11b/0x38a0 [ 134.250319][ T6285] ? unwind_next_frame+0xa6/0x2550 [ 134.250404][ T6285] ? unwind_next_frame+0xa6/0x2550 [ 134.250471][ T6285] ? is_bpf_text_address+0x26/0x2b0 [ 134.250599][ T6285] ? __pfx_path_openat+0x10/0x10 [ 134.250685][ T6285] ? is_bpf_text_address+0x292/0x2b0 [ 134.250785][ T6285] ? is_bpf_text_address+0x26/0x2b0 [ 134.250877][ T6285] ? kernel_text_address+0xa5/0xe0 [ 134.250959][ T6285] ? __kernel_text_address+0xd/0x30 [ 134.251045][ T6285] ? unwind_get_return_address+0x4d/0x90 [ 134.251115][ T6285] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.251183][ T6285] ? arch_stack_walk+0xfb/0x150 [ 134.251292][ T6285] do_file_open+0x23e/0x4a0 [ 134.251387][ T6285] ? __pfx_stack_trace_save+0x10/0x10 [ 134.251458][ T6285] ? __pfx_do_file_open+0x10/0x10 [ 134.251687][ T6285] ? do_open_execat+0xad/0x590 [ 134.251777][ T6285] do_open_execat+0x12b/0x590 [ 134.251870][ T6285] ? __pfx_do_open_execat+0x10/0x10 [ 134.251983][ T6285] alloc_bprm+0x28/0x5c0 [ 134.252073][ T6285] do_execveat_common+0x175/0x690 [ 134.252196][ T6285] ? do_getname+0x151/0x250 [ 134.252276][ T6285] __x64_sys_execveat+0xc7/0xf0 [ 134.252364][ T6285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.252430][ T6285] do_syscall_64+0x15f/0xf80 [ 134.252499][ T6285] ? trace_irq_disable+0x3b/0x140 [ 134.252568][ T6285] ? clear_bhb_loop+0x40/0x90 [ 134.252655][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.252711][ T6285] RIP: 0033:0x7fba35a6c819 [ 134.252767][ T6285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.252813][ T6285] RSP: 002b:00007fba33c7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 134.252863][ T6285] RAX: ffffffffffffffda RBX: 00007fba35ce6180 RCX: 00007fba35a6c819 [ 134.252900][ T6285] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 134.252942][ T6285] RBP: 00007fba33c7c090 R08: 1f00000000000000 R09: 0000000000000000 [ 134.252979][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.253013][ T6285] R13: 00007fba35ce6218 R14: 00007fba35ce6180 R15: 00007fff0c1dc778 [ 134.253096][ T6285] [ 134.939883][ T38] audit: type=1800 audit(1776881977.139:3): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.100" name="/" dev="fuse" ino=4 res=0 errno=0 [ 134.952094][ T6288] netlink: 'syz.2.102': attribute type 21 has an invalid length. [ 134.952200][ T6288] netlink: 156 bytes leftover after parsing attributes in process `syz.2.102'. [ 136.381275][ T6311] netlink: 220 bytes leftover after parsing attributes in process `syz.1.108'. [ 136.392202][ T6311] unsupported nla_type 224 [ 136.424563][ T6316] netlink: 'syz.3.109': attribute type 28 has an invalid length. [ 136.653971][ T32] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.821347][ T6320] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 136.821855][ T6319] overlayfs: conflicting lowerdir path [ 136.823959][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 136.860798][ T32] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.860826][ T32] usb 2-1: config 0 has no interface number 0 [ 136.860872][ T32] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 136.860893][ T32] usb 2-1: config 0 interface 1 has no altsetting 0 [ 136.897173][ T32] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 136.897202][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.897221][ T32] usb 2-1: Product: syz [ 136.897235][ T32] usb 2-1: Manufacturer: syz [ 136.897248][ T32] usb 2-1: SerialNumber: syz [ 136.945635][ T32] usb 2-1: config 0 descriptor?? [ 137.160918][ T60] Bluetooth: hci0: unexpected cc 0x041a length: 1 < 7 [ 137.160943][ T60] Bluetooth: hci0: unexpected event for opcode 0x041a [ 137.552650][ T32] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 137.552675][ T32] cx231xx 2-1:0.1: Not found matching IAD interface [ 137.616774][ T32] usb 2-1: USB disconnect, device number 5 [ 137.732541][ T6336] FAULT_INJECTION: forcing a failure. [ 137.732541][ T6336] name failslab, interval 1, probability 0, space 0, times 0 [ 137.732576][ T6336] CPU: 1 UID: 0 PID: 6336 Comm: syz.3.114 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 137.732599][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.732612][ T6336] Call Trace: [ 137.732620][ T6336] [ 137.732633][ T6336] dump_stack_lvl+0xe8/0x150 [ 137.732663][ T6336] should_fail_ex+0x46b/0x600 [ 137.732700][ T6336] should_failslab+0xa8/0x100 [ 137.732735][ T6336] __kmalloc_cache_noprof+0x84/0x690 [ 137.732768][ T6336] ? vhost_task_create+0x123/0x380 [ 137.732803][ T6336] vhost_task_create+0x123/0x380 [ 137.732834][ T6336] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 137.732863][ T6336] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 137.732893][ T6336] ? __pfx_vhost_task_create+0x10/0x10 [ 137.732933][ T6336] ? __pfx_vhost_task_fn+0x10/0x10 [ 137.732967][ T6336] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.732994][ T6336] ? lockdep_hardirqs_on+0x7a/0x110 [ 137.733019][ T6336] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 137.733045][ T6336] ? mutex_lock_nested+0x152/0x1d0 [ 137.733077][ T6336] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 137.733112][ T6336] kvm_mmu_post_init_vm+0x147/0x2d0 [ 137.733148][ T6336] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 137.733199][ T6336] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 137.733239][ T6336] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.733276][ T6336] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.733304][ T6336] ? lockdep_hardirqs_on+0x7a/0x110 [ 137.733330][ T6336] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 137.733357][ T6336] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 137.733385][ T6336] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 137.733421][ T6336] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.733456][ T6336] ? lockdep_hardirqs_on+0x7a/0x110 [ 137.733482][ T6336] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 137.733509][ T6336] ? rt_write_unlock+0x190/0x230 [ 137.733533][ T6336] kvm_vcpu_ioctl+0xa65/0xfe0 [ 137.733571][ T6336] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 137.733625][ T6336] ? __fget_files+0x2a/0x420 [ 137.733655][ T6336] ? __fget_files+0x2a/0x420 [ 137.733680][ T6336] ? __fget_files+0x3a6/0x420 [ 137.733705][ T6336] ? __fget_files+0x2a/0x420 [ 137.733733][ T6336] ? bpf_lsm_file_ioctl+0x9/0x20 [ 137.733758][ T6336] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 137.733789][ T6336] __se_sys_ioctl+0xff/0x170 [ 137.733821][ T6336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.733844][ T6336] do_syscall_64+0x15f/0xf80 [ 137.733869][ T6336] ? trace_irq_disable+0x3b/0x140 [ 137.733893][ T6336] ? clear_bhb_loop+0x40/0x90 [ 137.733921][ T6336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.733942][ T6336] RIP: 0033:0x7efe8095c819 [ 137.733963][ T6336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.733980][ T6336] RSP: 002b:00007efe7eb8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.734003][ T6336] RAX: ffffffffffffffda RBX: 00007efe80bd6090 RCX: 00007efe8095c819 [ 137.734018][ T6336] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 137.734031][ T6336] RBP: 00007efe7eb8d090 R08: 0000000000000000 R09: 0000000000000000 [ 137.734043][ T6336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.734055][ T6336] R13: 00007efe80bd6128 R14: 00007efe80bd6090 R15: 00007ffdcc75e0d8 [ 137.734089][ T6336] [ 138.118798][ T6338] netlink: 132 bytes leftover after parsing attributes in process `syz.2.115'. [ 138.375710][ T6342] tipc: Enabling of bearer rejected, failed to enable media [ 138.434828][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'. [ 138.609345][ T5894] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 138.640710][ T6344] FAULT_INJECTION: forcing a failure. [ 138.640710][ T6344] name failslab, interval 1, probability 0, space 0, times 0 [ 138.640736][ T6344] CPU: 0 UID: 0 PID: 6344 Comm: syz.1.118 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.640754][ T6344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 138.640763][ T6344] Call Trace: [ 138.640769][ T6344] [ 138.640775][ T6344] dump_stack_lvl+0xe8/0x150 [ 138.640797][ T6344] should_fail_ex+0x46b/0x600 [ 138.640824][ T6344] should_failslab+0xa8/0x100 [ 138.640849][ T6344] __kmalloc_cache_noprof+0x84/0x690 [ 138.640873][ T6344] ? fuse_direct_IO+0x2c7/0x1280 [ 138.640899][ T6344] fuse_direct_IO+0x2c7/0x1280 [ 138.640915][ T6344] ? __lock_acquire+0x6b5/0x2cf0 [ 138.640954][ T6344] ? __pfx_fuse_direct_IO+0x10/0x10 [ 138.640969][ T6344] ? do_raw_spin_lock+0x12b/0x2f0 [ 138.641004][ T6344] ? generic_write_checks+0xc8/0x110 [ 138.641024][ T6344] fuse_file_write_iter+0x6c0/0x1130 [ 138.641044][ T6344] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 138.641059][ T6344] ? stack_trace_save+0xa9/0x100 [ 138.641087][ T6344] ? io_submit_one+0x7bb/0x14c0 [ 138.641120][ T6344] ? aio_write+0x559/0x880 [ 138.641137][ T6344] aio_write+0x5df/0x880 [ 138.641155][ T6344] ? __pfx_aio_write+0x10/0x10 [ 138.641180][ T6344] ? __might_fault+0xaf/0x130 [ 138.641217][ T6344] io_submit_one+0x7bb/0x14c0 [ 138.641244][ T6344] ? irqentry_exit+0x218/0x730 [ 138.641270][ T6344] ? __pfx_io_submit_one+0x10/0x10 [ 138.641296][ T6344] ? __might_fault+0xaf/0x130 [ 138.641357][ T6344] ? __might_fault+0xaf/0x130 [ 138.641392][ T6344] __se_sys_io_submit+0x195/0x340 [ 138.641440][ T6344] ? __pfx___se_sys_io_submit+0x10/0x10 [ 138.641463][ T6344] ? ksys_write+0x248/0x270 [ 138.641496][ T6344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.641513][ T6344] do_syscall_64+0x15f/0xf80 [ 138.641531][ T6344] ? trace_irq_disable+0x3b/0x140 [ 138.641549][ T6344] ? clear_bhb_loop+0x40/0x90 [ 138.641568][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.641583][ T6344] RIP: 0033:0x7fba35a6c819 [ 138.641597][ T6344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.641610][ T6344] RSP: 002b:00007fba33cbe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 138.641626][ T6344] RAX: ffffffffffffffda RBX: 00007fba35ce5fa0 RCX: 00007fba35a6c819 [ 138.641637][ T6344] RDX: 0000200000000780 RSI: 0000000000000020 RDI: 00007fba33c74000 [ 138.641647][ T6344] RBP: 00007fba33cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 138.641657][ T6344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.641666][ T6344] R13: 00007fba35ce6038 R14: 00007fba35ce5fa0 R15: 00007fff0c1dc778 [ 138.641690][ T6344] [ 138.940493][ T5894] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 138.940515][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.940529][ T5894] usb 1-1: Product: syz [ 138.940539][ T5894] usb 1-1: Manufacturer: syz [ 138.940549][ T5894] usb 1-1: SerialNumber: syz [ 139.012207][ T5894] usb 1-1: config 0 descriptor?? [ 139.224290][ T5894] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 139.795110][ T37] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.953995][ T37] usb 2-1: Using ep0 maxpacket: 8 [ 139.959959][ T37] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 139.959991][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.960011][ T37] usb 2-1: Product: syz [ 139.960025][ T37] usb 2-1: Manufacturer: syz [ 139.960051][ T37] usb 2-1: SerialNumber: syz [ 140.003237][ T37] usb 2-1: config 0 descriptor?? [ 140.022352][ T37] gspca_main: se401-2.14.0 probing 047d:5003 [ 140.421898][ T37] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 140.421992][ T37] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 140.460966][ T37] usb 2-1: USB disconnect, device number 6 [ 140.841270][ T5894] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 140.887505][ T5894] usb 1-1: USB disconnect, device number 4 [ 141.208569][ T6376] overlayfs: failed to resolve './file0': -2 [ 141.340654][ T6376] netlink: 'syz.1.127': attribute type 5 has an invalid length. [ 141.400377][ T6383] FAULT_INJECTION: forcing a failure. [ 141.400377][ T6383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.400411][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.0.129 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.400434][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 141.400447][ T6383] Call Trace: [ 141.400454][ T6383] [ 141.400463][ T6383] dump_stack_lvl+0xe8/0x150 [ 141.400493][ T6383] should_fail_ex+0x46b/0x600 [ 141.400531][ T6383] _copy_to_user+0x31/0xb0 [ 141.400554][ T6383] simple_read_from_buffer+0xe1/0x170 [ 141.400588][ T6383] proc_fail_nth_read+0x1be/0x230 [ 141.400618][ T6383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.400649][ T6383] ? rw_verify_area+0x2ac/0x4e0 [ 141.400678][ T6383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.400707][ T6383] vfs_read+0x212/0xa80 [ 141.400746][ T6383] ? __pfx_vfs_read+0x10/0x10 [ 141.400779][ T6383] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 141.400807][ T6383] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.400832][ T6383] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.400858][ T6383] ? mutex_lock_nested+0x152/0x1d0 [ 141.400900][ T6383] ? fdget_pos+0x252/0x320 [ 141.400935][ T6383] ksys_read+0x156/0x270 [ 141.400970][ T6383] ? __pfx_ksys_read+0x10/0x10 [ 141.401011][ T6383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.401034][ T6383] do_syscall_64+0x15f/0xf80 [ 141.401058][ T6383] ? trace_irq_disable+0x3b/0x140 [ 141.401083][ T6383] ? clear_bhb_loop+0x40/0x90 [ 141.401110][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.401132][ T6383] RIP: 0033:0x7f668f7bd04e [ 141.401151][ T6383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.401168][ T6383] RSP: 002b:00007f668da55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.401190][ T6383] RAX: ffffffffffffffda RBX: 00007f668da566c0 RCX: 00007f668f7bd04e [ 141.401205][ T6383] RDX: 000000000000000f RSI: 00007f668da560a0 RDI: 0000000000000007 [ 141.401218][ T6383] RBP: 00007f668da56090 R08: 0000000000000000 R09: 0000000000000000 [ 141.401238][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.401251][ T6383] R13: 00007f668fa76038 R14: 00007f668fa75fa0 R15: 00007ffd0d424ee8 [ 141.401286][ T6383] [ 141.439508][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 141.817796][ T6388] QAT: failed to copy from user cfg_data. [ 141.953897][ T37] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 142.063895][ T5894] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 142.083886][ T37] usb 3-1: device descriptor read/64, error -71 [ 142.204046][ T5894] usb 2-1: device descriptor read/64, error -71 [ 142.334137][ T37] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 142.445892][ T5894] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 142.464564][ T37] usb 3-1: device descriptor read/64, error -71 [ 142.574625][ T37] usb usb3-port1: attempt power cycle [ 142.583964][ T5894] usb 2-1: device descriptor read/64, error -71 [ 142.695499][ T5894] usb usb2-port1: attempt power cycle [ 142.913954][ T37] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 142.947389][ T37] usb 3-1: device descriptor read/8, error -71 [ 143.033960][ T5894] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.054917][ T5894] usb 2-1: device descriptor read/8, error -71 [ 143.183916][ T37] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 143.206011][ T37] usb 3-1: device descriptor read/8, error -71 [ 143.315972][ T5894] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 143.317211][ T37] usb usb3-port1: unable to enumerate USB device [ 143.343495][ T5894] usb 2-1: device descriptor read/8, error -71 [ 143.444763][ T5894] usb usb2-port1: unable to enumerate USB device [ 143.883619][ T6411] binder: 6404:6411 unknown command 0 [ 143.883635][ T6411] binder: 6404:6411 ioctl c0306201 200000000080 returned -22 [ 143.899998][ T6411] binder: 6404:6411 ioctl c0306201 200000000040 returned -22 [ 143.997450][ T6412] FAULT_INJECTION: forcing a failure. [ 143.997450][ T6412] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 143.997489][ T6412] CPU: 0 UID: 0 PID: 6412 Comm: syz.0.137 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.997513][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 143.997525][ T6412] Call Trace: [ 143.997534][ T6412] [ 143.997543][ T6412] dump_stack_lvl+0xe8/0x150 [ 143.997575][ T6412] should_fail_ex+0x46b/0x600 [ 143.997613][ T6412] prepare_alloc_pages+0x22a/0x6b0 [ 143.997658][ T6412] __alloc_frozen_pages_noprof+0x12f/0x380 [ 143.997699][ T6412] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 143.997740][ T6412] ? __pfx_policy_nodemask+0x10/0x10 [ 143.997777][ T6412] ? xas_start+0x3da/0x780 [ 143.997805][ T6412] alloc_pages_mpol+0xd1/0x380 [ 143.997844][ T6412] alloc_pages_noprof+0xd2/0x2f0 [ 143.997888][ T6412] folio_alloc_noprof+0x22/0xc0 [ 143.997924][ T6412] filemap_alloc_folio_noprof+0x111/0x4d0 [ 143.997966][ T6412] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 143.998005][ T6412] ? lockdep_hardirqs_on+0x7a/0x110 [ 143.998036][ T6412] __filemap_get_folio_mpol+0x34a/0xa50 [ 143.998066][ T6412] iomap_write_begin+0x6a9/0x14f0 [ 143.998126][ T6412] iomap_file_buffered_write+0x45c/0xaf0 [ 143.998177][ T6412] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 143.998206][ T6412] ? file_remove_privs_flags+0x4e9/0x640 [ 143.998260][ T6412] ? generic_write_checks_count+0x449/0x550 [ 143.998293][ T6412] ? file_update_time_flags+0x229/0x4b0 [ 143.998329][ T6412] ? kiocb_modified+0x80/0xb0 [ 143.998363][ T6412] fuse_file_write_iter+0xc6a/0x1130 [ 143.998395][ T6412] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 143.998415][ T6412] ? aa_file_perm+0x192/0x15f0 [ 143.998446][ T6412] ? look_up_lock_class+0x57/0x110 [ 143.998472][ T6412] ? register_lock_class+0x31/0x2e0 [ 143.998505][ T6412] ? __lock_acquire+0x6b5/0x2cf0 [ 143.998538][ T6412] ? __pfx_aa_file_perm+0x10/0x10 [ 143.998572][ T6412] ? kstrtoull+0x12f/0x1d0 [ 143.998613][ T6412] do_iter_readv_writev+0x62b/0x8d0 [ 143.998652][ T6412] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 143.998704][ T6412] vfs_writev+0x345/0x9a0 [ 143.998738][ T6412] ? __pfx_vfs_writev+0x10/0x10 [ 143.998780][ T6412] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 143.998813][ T6412] ? mutex_lock_nested+0x152/0x1d0 [ 143.998845][ T6412] ? fdget_pos+0x252/0x320 [ 143.998888][ T6412] do_writev+0x15a/0x2e0 [ 143.998914][ T6412] ? __pfx_do_writev+0x10/0x10 [ 143.998949][ T6412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.998973][ T6412] do_syscall_64+0x15f/0xf80 [ 143.998997][ T6412] ? trace_irq_disable+0x3b/0x140 [ 143.999022][ T6412] ? clear_bhb_loop+0x40/0x90 [ 143.999050][ T6412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.999072][ T6412] RIP: 0033:0x7f668f7fc819 [ 143.999093][ T6412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.999110][ T6412] RSP: 002b:00007f668da14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 143.999132][ T6412] RAX: ffffffffffffffda RBX: 00007f668fa76180 RCX: 00007f668f7fc819 [ 143.999147][ T6412] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000005 [ 143.999160][ T6412] RBP: 00007f668da14090 R08: 0000000000000000 R09: 0000000000000000 [ 143.999173][ T6412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.999185][ T6412] R13: 00007f668fa76218 R14: 00007f668fa76180 R15: 00007ffd0d424ee8 [ 143.999220][ T6412] [ 144.774697][ T6419] fuse: Bad value for 'group_id' [ 144.774713][ T6419] fuse: Bad value for 'group_id' [ 145.017152][ T6424] binder: 6420:6424 ioctl c0306201 2000000001c0 returned -14 [ 145.296065][ T6426] FAULT_INJECTION: forcing a failure. [ 145.296065][ T6426] name failslab, interval 1, probability 0, space 0, times 0 [ 145.296092][ T6426] CPU: 1 UID: 0 PID: 6426 Comm: syz.3.143 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.296110][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 145.296119][ T6426] Call Trace: [ 145.296125][ T6426] [ 145.296131][ T6426] dump_stack_lvl+0xe8/0x150 [ 145.296153][ T6426] should_fail_ex+0x46b/0x600 [ 145.296179][ T6426] should_failslab+0xa8/0x100 [ 145.296203][ T6426] kmem_cache_alloc_noprof+0x87/0x680 [ 145.296224][ T6426] ? alloc_empty_file+0x5b/0x1d0 [ 145.296244][ T6426] alloc_empty_file+0x5b/0x1d0 [ 145.296262][ T6426] path_openat+0x11b/0x38a0 [ 145.296291][ T6426] ? try_to_take_rt_mutex+0x840/0xb00 [ 145.296311][ T6426] ? arch_stack_walk+0xfb/0x150 [ 145.296372][ T6426] ? __lock_acquire+0x6b5/0x2cf0 [ 145.296407][ T6426] ? __pfx_path_openat+0x10/0x10 [ 145.296442][ T6426] ? kasan_save_track+0x4f/0x80 [ 145.296473][ T6426] ? kasan_save_track+0x3e/0x80 [ 145.296493][ T6426] ? __kasan_slab_alloc+0x6c/0x80 [ 145.296513][ T6426] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 145.296546][ T6426] ? do_raw_spin_lock+0x12b/0x2f0 [ 145.296570][ T6426] do_file_open+0x23e/0x4a0 [ 145.296593][ T6426] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 145.296615][ T6426] ? __pfx_do_file_open+0x10/0x10 [ 145.296637][ T6426] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 145.296667][ T6426] ? alloc_fd+0x64e/0x6c0 [ 145.296692][ T6426] do_sys_openat2+0x113/0x200 [ 145.296712][ T6426] ? __pfx_do_sys_openat2+0x10/0x10 [ 145.296731][ T6426] ? ksys_write+0x248/0x270 [ 145.296755][ T6426] ? __pfx_ksys_write+0x10/0x10 [ 145.296779][ T6426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.296798][ T6426] __x64_sys_creat+0x8f/0xc0 [ 145.296818][ T6426] do_syscall_64+0x15f/0xf80 [ 145.296836][ T6426] ? trace_irq_disable+0x3b/0x140 [ 145.296853][ T6426] ? clear_bhb_loop+0x40/0x90 [ 145.296872][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.296887][ T6426] RIP: 0033:0x7efe8095c819 [ 145.296901][ T6426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.296913][ T6426] RSP: 002b:00007efe7ebae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 145.296929][ T6426] RAX: ffffffffffffffda RBX: 00007efe80bd5fa0 RCX: 00007efe8095c819 [ 145.296939][ T6426] RDX: 0000000000000000 RSI: 0000000000000034 RDI: 0000200000000140 [ 145.296949][ T6426] RBP: 00007efe7ebae090 R08: 0000000000000000 R09: 0000000000000000 [ 145.296958][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.296966][ T6426] R13: 00007efe80bd6038 R14: 00007efe80bd5fa0 R15: 00007ffdcc75e0d8 [ 145.296989][ T6426] [ 145.872597][ T6433] FAULT_INJECTION: forcing a failure. [ 145.872597][ T6433] name failslab, interval 1, probability 0, space 0, times 0 [ 145.872623][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: syz.3.144 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.872641][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 145.872651][ T6433] Call Trace: [ 145.872656][ T6433] [ 145.872663][ T6433] dump_stack_lvl+0xe8/0x150 [ 145.872683][ T6433] should_fail_ex+0x46b/0x600 [ 145.872709][ T6433] should_failslab+0xa8/0x100 [ 145.872733][ T6433] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 145.872754][ T6433] ? __alloc_skb+0x1d0/0x7d0 [ 145.872773][ T6433] ? lockdep_hardirqs_on+0x7a/0x110 [ 145.872795][ T6433] __alloc_skb+0x1d0/0x7d0 [ 145.872818][ T6433] _sctp_make_chunk+0x59/0x290 [ 145.872840][ T6433] sctp_make_heartbeat+0xc5/0x4c0 [ 145.872878][ T6433] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 145.872897][ T6433] ? is_bpf_text_address+0x26/0x2b0 [ 145.872947][ T6433] ? is_bpf_text_address+0x292/0x2b0 [ 145.872981][ T6433] ? is_bpf_text_address+0x26/0x2b0 [ 145.873004][ T6433] sctp_sf_do_prm_requestheartbeat+0x32/0x280 [ 145.873033][ T6433] sctp_do_sm+0x238/0x5cf0 [ 145.873056][ T6433] ? __pfx_sctp_pname+0x10/0x10 [ 145.873081][ T6433] ? try_to_take_rt_mutex+0x840/0xb00 [ 145.873104][ T6433] ? __pfx_sctp_do_sm+0x10/0x10 [ 145.873129][ T6433] ? __lock_acquire+0x6b5/0x2cf0 [ 145.873178][ T6433] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 145.873201][ T6433] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 145.873226][ T6433] sctp_apply_peer_addr_params+0xdf/0x1880 [ 145.873262][ T6433] sctp_setsockopt_peer_addr_params+0x46f/0x6b0 [ 145.873291][ T6433] sctp_setsockopt+0x752/0x12c0 [ 145.873310][ T6433] ? sock_common_setsockopt+0x36/0xc0 [ 145.873327][ T6433] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 145.873346][ T6433] do_sock_setsockopt+0x17c/0x1b0 [ 145.873373][ T6433] __x64_sys_setsockopt+0x143/0x1b0 [ 145.873396][ T6433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.873413][ T6433] do_syscall_64+0x15f/0xf80 [ 145.873431][ T6433] ? trace_irq_disable+0x3b/0x140 [ 145.873449][ T6433] ? clear_bhb_loop+0x40/0x90 [ 145.873473][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.873489][ T6433] RIP: 0033:0x7efe8095c819 [ 145.873503][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.873515][ T6433] RSP: 002b:00007efe7eb8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.873531][ T6433] RAX: ffffffffffffffda RBX: 00007efe80bd6090 RCX: 00007efe8095c819 [ 145.873543][ T6433] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 145.873552][ T6433] RBP: 00007efe7eb8d090 R08: 000000000000009c R09: 0000000000000000 [ 145.873561][ T6433] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 145.873576][ T6433] R13: 00007efe80bd6128 R14: 00007efe80bd6090 R15: 00007ffdcc75e0d8 [ 145.873599][ T6433] [ 146.588286][ T6437] FAULT_INJECTION: forcing a failure. [ 146.588286][ T6437] name failslab, interval 1, probability 0, space 0, times 0 [ 146.588318][ T6437] CPU: 0 UID: 0 PID: 6437 Comm: syz.1.146 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 146.588339][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 146.588351][ T6437] Call Trace: [ 146.588358][ T6437] [ 146.588367][ T6437] dump_stack_lvl+0xe8/0x150 [ 146.588394][ T6437] should_fail_ex+0x46b/0x600 [ 146.588475][ T6437] should_failslab+0xa8/0x100 [ 146.588503][ T6437] __kmalloc_cache_noprof+0x84/0x690 [ 146.588529][ T6437] ? vhost_task_create+0x123/0x380 [ 146.588557][ T6437] vhost_task_create+0x123/0x380 [ 146.588583][ T6437] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 146.588610][ T6437] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 146.588639][ T6437] ? __pfx_vhost_task_create+0x10/0x10 [ 146.588674][ T6437] ? __pfx_vhost_task_fn+0x10/0x10 [ 146.588703][ T6437] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 146.588729][ T6437] ? lockdep_hardirqs_on+0x7a/0x110 [ 146.588754][ T6437] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 146.588781][ T6437] ? mutex_lock_nested+0x152/0x1d0 [ 146.588812][ T6437] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 146.588845][ T6437] kvm_mmu_post_init_vm+0x147/0x2d0 [ 146.588877][ T6437] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 146.588929][ T6437] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 146.588969][ T6437] ? do_raw_spin_lock+0x12b/0x2f0 [ 146.589008][ T6437] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 146.589033][ T6437] ? lockdep_hardirqs_on+0x7a/0x110 [ 146.589057][ T6437] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 146.589083][ T6437] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 146.589108][ T6437] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 146.589148][ T6437] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 146.589172][ T6437] ? lockdep_hardirqs_on+0x7a/0x110 [ 146.589196][ T6437] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 146.589222][ T6437] ? rt_write_unlock+0x190/0x230 [ 146.589246][ T6437] kvm_vcpu_ioctl+0xa65/0xfe0 [ 146.589282][ T6437] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 146.589325][ T6437] ? __fget_files+0x2a/0x420 [ 146.589354][ T6437] ? __fget_files+0x2a/0x420 [ 146.589378][ T6437] ? __fget_files+0x3a6/0x420 [ 146.589411][ T6437] ? __fget_files+0x2a/0x420 [ 146.589441][ T6437] ? bpf_lsm_file_ioctl+0x9/0x20 [ 146.589466][ T6437] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 146.589498][ T6437] __se_sys_ioctl+0xff/0x170 [ 146.589529][ T6437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.589551][ T6437] do_syscall_64+0x15f/0xf80 [ 146.589574][ T6437] ? trace_irq_disable+0x3b/0x140 [ 146.589596][ T6437] ? clear_bhb_loop+0x40/0x90 [ 146.589619][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.589637][ T6437] RIP: 0033:0x7fba35a6c819 [ 146.589658][ T6437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.589674][ T6437] RSP: 002b:00007fba33cbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.589696][ T6437] RAX: ffffffffffffffda RBX: 00007fba35ce5fa0 RCX: 00007fba35a6c819 [ 146.589712][ T6437] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 146.589724][ T6437] RBP: 00007fba33cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 146.589737][ T6437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.589757][ T6437] R13: 00007fba35ce6038 R14: 00007fba35ce5fa0 R15: 00007fff0c1dc778 [ 146.589796][ T6437] [ 147.461572][ T6454] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.151'. [ 147.543916][ T5894] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 147.697915][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.697946][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.697973][ T5894] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 147.697990][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.703594][ T5894] usb 3-1: config 0 descriptor?? [ 148.151142][ T5894] elan 0003:04F3:0755.0002: reserved main item tag 0xd [ 148.178930][ T5894] elan 0003:04F3:0755.0002: failed to start in urb: -90 [ 148.269798][ T5894] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 148.347518][ T6448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.351491][ T6448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.416573][ T37] usb 3-1: USB disconnect, device number 15 [ 148.573416][ T6463] fido_id[6463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 148.903976][ T5894] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 149.054908][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 149.057091][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.057145][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.057178][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 149.057193][ T5894] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 149.057212][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.058562][ T5894] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 149.058589][ T5894] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 149.058613][ T5894] usb 2-1: Manufacturer: syz [ 149.100754][ T5894] usb 2-1: config 0 descriptor?? [ 149.207032][ T6473] FAULT_INJECTION: forcing a failure. [ 149.207032][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 149.207074][ T6473] CPU: 0 UID: 0 PID: 6473 Comm: syz.2.156 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 149.207095][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 149.207104][ T6473] Call Trace: [ 149.207110][ T6473] [ 149.207117][ T6473] dump_stack_lvl+0xe8/0x150 [ 149.207138][ T6473] should_fail_ex+0x46b/0x600 [ 149.207166][ T6473] should_failslab+0xa8/0x100 [ 149.207191][ T6473] __kmalloc_noprof+0xdf/0x7b0 [ 149.207216][ T6473] ? tomoyo_encode+0x28b/0x550 [ 149.207244][ T6473] tomoyo_encode+0x28b/0x550 [ 149.207271][ T6473] tomoyo_realpath_from_path+0x58d/0x5d0 [ 149.207297][ T6473] ? tomoyo_domain+0xd7/0x130 [ 149.207325][ T6473] ? tomoyo_path_number_perm+0x219/0x630 [ 149.207345][ T6473] tomoyo_path_number_perm+0x246/0x630 [ 149.207366][ T6473] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 149.207385][ T6473] ? __lock_acquire+0x6b5/0x2cf0 [ 149.207408][ T6473] ? do_raw_spin_lock+0x12b/0x2f0 [ 149.207448][ T6473] ? __fget_files+0x2a/0x420 [ 149.207478][ T6473] ? __fget_files+0x2a/0x420 [ 149.207496][ T6473] ? __fget_files+0x3a6/0x420 [ 149.207514][ T6473] ? __fget_files+0x2a/0x420 [ 149.207536][ T6473] security_file_ioctl+0xc3/0x2a0 [ 149.207556][ T6473] __se_sys_ioctl+0x47/0x170 [ 149.207579][ T6473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.207596][ T6473] do_syscall_64+0x15f/0xf80 [ 149.207615][ T6473] ? trace_irq_disable+0x3b/0x140 [ 149.207633][ T6473] ? clear_bhb_loop+0x40/0x90 [ 149.207653][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.207669][ T6473] RIP: 0033:0x7f498e59c819 [ 149.207683][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.207696][ T6473] RSP: 002b:00007f498c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.207712][ T6473] RAX: ffffffffffffffda RBX: 00007f498e815fa0 RCX: 00007f498e59c819 [ 149.207723][ T6473] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 149.207732][ T6473] RBP: 00007f498c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.207741][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.207750][ T6473] R13: 00007f498e816038 R14: 00007f498e815fa0 R15: 00007ffeeb045e28 [ 149.207774][ T6473] [ 149.208069][ T6473] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.566621][ T5894] rc_core: IR keymap rc-hauppauge not found [ 149.566643][ T5894] Registered IR keymap rc-empty [ 149.567296][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.584124][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.621311][ T5894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 149.654986][ T5894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 149.707123][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.707744][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.793293][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.804868][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.825685][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.844346][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.867535][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.892348][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.905000][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.905076][ T6483] warning: `syz.3.158' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.924899][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.943938][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.963949][ T5894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.986906][ T5894] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 149.986924][ T5894] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 150.018456][ T5894] usb 2-1: USB disconnect, device number 11 [ 150.507371][ T6494] FAULT_INJECTION: forcing a failure. [ 150.507371][ T6494] name failslab, interval 1, probability 0, space 0, times 0 [ 150.507399][ T6494] CPU: 0 UID: 0 PID: 6494 Comm: syz.2.161 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 150.507420][ T6494] Tainted: [L]=SOFTLOCKUP [ 150.507425][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 150.507435][ T6494] Call Trace: [ 150.507440][ T6494] [ 150.507446][ T6494] dump_stack_lvl+0xe8/0x150 [ 150.507501][ T6494] should_fail_ex+0x46b/0x600 [ 150.507538][ T6494] should_failslab+0xa8/0x100 [ 150.507572][ T6494] __kmalloc_cache_noprof+0x84/0x690 [ 150.507613][ T6494] ? vhost_task_create+0x123/0x380 [ 150.507640][ T6494] vhost_task_create+0x123/0x380 [ 150.507661][ T6494] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 150.507684][ T6494] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 150.507707][ T6494] ? __pfx_vhost_task_create+0x10/0x10 [ 150.507735][ T6494] ? __pfx_vhost_task_fn+0x10/0x10 [ 150.507759][ T6494] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 150.507779][ T6494] ? lockdep_hardirqs_on+0x7a/0x110 [ 150.507798][ T6494] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 150.507817][ T6494] ? mutex_lock_nested+0x152/0x1d0 [ 150.507841][ T6494] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 150.507867][ T6494] kvm_mmu_post_init_vm+0x147/0x2d0 [ 150.507893][ T6494] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 150.507931][ T6494] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 150.507959][ T6494] ? do_raw_spin_lock+0x12b/0x2f0 [ 150.507986][ T6494] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 150.508005][ T6494] ? lockdep_hardirqs_on+0x7a/0x110 [ 150.508023][ T6494] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 150.508042][ T6494] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 150.508061][ T6494] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 150.508087][ T6494] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 150.508107][ T6494] ? lockdep_hardirqs_on+0x7a/0x110 [ 150.508125][ T6494] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 150.508144][ T6494] ? rt_write_unlock+0x190/0x230 [ 150.508161][ T6494] kvm_vcpu_ioctl+0xa65/0xfe0 [ 150.508187][ T6494] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 150.508224][ T6494] ? __fget_files+0x2a/0x420 [ 150.508245][ T6494] ? __fget_files+0x2a/0x420 [ 150.508263][ T6494] ? __fget_files+0x3a6/0x420 [ 150.508281][ T6494] ? __fget_files+0x2a/0x420 [ 150.508303][ T6494] ? bpf_lsm_file_ioctl+0x9/0x20 [ 150.508321][ T6494] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 150.508349][ T6494] __se_sys_ioctl+0xff/0x170 [ 150.508373][ T6494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.508391][ T6494] do_syscall_64+0x15f/0xf80 [ 150.508409][ T6494] ? trace_irq_disable+0x3b/0x140 [ 150.508427][ T6494] ? clear_bhb_loop+0x40/0x90 [ 150.508446][ T6494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.508462][ T6494] RIP: 0033:0x7f498e59c819 [ 150.508476][ T6494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.508489][ T6494] RSP: 002b:00007f498c7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.508505][ T6494] RAX: ffffffffffffffda RBX: 00007f498e816090 RCX: 00007f498e59c819 [ 150.508517][ T6494] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 150.508526][ T6494] RBP: 00007f498c7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 150.508535][ T6494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.508544][ T6494] R13: 00007f498e816128 R14: 00007f498e816090 R15: 00007ffeeb045e28 [ 150.508568][ T6494] [ 150.856114][ T5894] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 150.993899][ T5894] usb 2-1: device descriptor read/64, error -71 [ 151.233948][ T5894] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 151.370741][ T5894] usb 2-1: device descriptor read/64, error -71 [ 151.475582][ T5894] usb usb2-port1: attempt power cycle [ 151.708314][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.709047][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.751140][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.751793][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.769279][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.771375][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.816798][ T5894] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 151.846234][ T5894] usb 2-1: device descriptor read/8, error -71 [ 151.869856][ T6516] FAULT_INJECTION: forcing a failure. [ 151.869856][ T6516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.869883][ T6516] CPU: 0 UID: 0 PID: 6516 Comm: syz.3.168 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 151.869905][ T6516] Tainted: [L]=SOFTLOCKUP [ 151.869910][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 151.869919][ T6516] Call Trace: [ 151.869925][ T6516] [ 151.869931][ T6516] dump_stack_lvl+0xe8/0x150 [ 151.869953][ T6516] should_fail_ex+0x46b/0x600 [ 151.869980][ T6516] prepare_alloc_pages+0x22a/0x6b0 [ 151.870018][ T6516] __alloc_frozen_pages_noprof+0x12f/0x380 [ 151.870047][ T6516] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 151.870077][ T6516] ? __pfx_policy_nodemask+0x10/0x10 [ 151.870102][ T6516] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 151.870122][ T6516] ? lockdep_hardirqs_on+0x7a/0x110 [ 151.870140][ T6516] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 151.870162][ T6516] alloc_pages_mpol+0xd1/0x380 [ 151.870190][ T6516] alloc_pages_noprof+0xd2/0x2f0 [ 151.870216][ T6516] get_free_pages_noprof+0xf/0x80 [ 151.870231][ T6516] __pollwait+0x263/0x430 [ 151.870249][ T6516] ? __pfx___pollwait+0x10/0x10 [ 151.870266][ T6516] n_hdlc_tty_poll+0xbf/0x1e0 [ 151.870282][ T6516] ? __pfx_n_hdlc_tty_poll+0x10/0x10 [ 151.870298][ T6516] tty_poll+0xc1/0x170 [ 151.870316][ T6516] ? __pfx_tty_poll+0x10/0x10 [ 151.870335][ T6516] do_select+0x101e/0x15c0 [ 151.870358][ T6516] ? do_select+0x821/0x15c0 [ 151.870386][ T6516] ? __pfx_do_select+0x10/0x10 [ 151.870400][ T6516] ? unwind_next_frame+0xa6/0x2550 [ 151.870425][ T6516] ? __pfx___pollwait+0x10/0x10 [ 151.870443][ T6516] ? __pfx_pollwake+0x10/0x10 [ 151.870463][ T6516] ? __pfx_pollwake+0x10/0x10 [ 151.870482][ T6516] ? __pfx_pollwake+0x10/0x10 [ 151.870501][ T6516] ? __pfx_pollwake+0x10/0x10 [ 151.870520][ T6516] ? __pfx_pollwake+0x10/0x10 [ 151.870539][ T6516] ? __pfx_pollwake+0x10/0x10 [ 151.870558][ T6516] ? __pfx_pollwake+0x10/0x10 [ 151.870577][ T6516] ? __pfx_pollwake+0x10/0x10 [ 151.870596][ T6516] ? __pfx_pollwake+0x10/0x10 [ 151.870629][ T6516] core_sys_select+0x898/0xc30 [ 151.870658][ T6516] ? __pfx_core_sys_select+0x10/0x10 [ 151.870692][ T6516] ? __pfx_set_user_sigmask+0x10/0x10 [ 151.870708][ T6516] ? rt_mutex_slowunlock+0x1cb/0x300 [ 151.870733][ T6516] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 151.870763][ T6516] __se_sys_pselect6+0x267/0x320 [ 151.870803][ T6516] ? __pfx___se_sys_pselect6+0x10/0x10 [ 151.870828][ T6516] ? __pfx_ksys_write+0x10/0x10 [ 151.870865][ T6516] ? __x64_sys_pselect6+0x21/0xf0 [ 151.870889][ T6516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.870917][ T6516] do_syscall_64+0x15f/0xf80 [ 151.870935][ T6516] ? trace_irq_disable+0x3b/0x140 [ 151.870954][ T6516] ? clear_bhb_loop+0x40/0x90 [ 151.870973][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.870989][ T6516] RIP: 0033:0x7efe8095c819 [ 151.871009][ T6516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.871021][ T6516] RSP: 002b:00007efe7ebae028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 151.871037][ T6516] RAX: ffffffffffffffda RBX: 00007efe80bd5fa0 RCX: 00007efe8095c819 [ 151.871049][ T6516] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 151.871058][ T6516] RBP: 00007efe7ebae090 R08: 0000000000000000 R09: 0000000000000000 [ 151.871068][ T6516] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 151.871079][ T6516] R13: 00007efe80bd6038 R14: 00007efe80bd5fa0 R15: 00007ffdcc75e0d8 [ 151.871103][ T6516] [ 151.924270][ T5898] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.979387][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.981630][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.084286][ T5898] usb 1-1: device descriptor read/64, error -71 [ 152.104082][ T5894] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 152.129180][ T5894] usb 2-1: device descriptor read/8, error -71 [ 152.252572][ T5894] usb usb2-port1: unable to enumerate USB device [ 152.333897][ T5898] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.463953][ T5898] usb 1-1: device descriptor read/64, error -71 [ 152.578199][ T5898] usb usb1-port1: attempt power cycle [ 152.886661][ T60] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 152.902659][ T6523] netlink: 188 bytes leftover after parsing attributes in process `syz.2.170'. [ 152.924634][ T5898] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.949620][ T5898] usb 1-1: device descriptor read/8, error -71 [ 153.183972][ T5898] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 153.208003][ T5898] usb 1-1: device descriptor read/8, error -71 [ 153.315457][ T5898] usb usb1-port1: unable to enumerate USB device [ 154.489041][ T37] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 154.659120][ T37] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 154.659181][ T37] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.659211][ T37] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 154.663055][ T37] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.663086][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 154.663107][ T37] usb 3-1: SerialNumber: syz [ 155.178122][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 155.324285][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 155.330265][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 155.330294][ T9] usb 2-1: config 0 has no interface number 0 [ 155.330342][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 155.356488][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 155.356520][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.356540][ T9] usb 2-1: Product: syz [ 155.356556][ T9] usb 2-1: Manufacturer: syz [ 155.356600][ T9] usb 2-1: SerialNumber: syz [ 155.431263][ T9] usb 2-1: config 0 descriptor?? [ 155.637137][ T37] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 155.643331][ T37] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 155.754641][ T37] usb 3-1: USB disconnect, device number 16 [ 156.085832][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 156.085864][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 156.997657][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 156.997689][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 156.997709][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 156.998280][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 157.070307][ T6581] 9p: Bad value for 'source' [ 157.113583][ T9] usb 2-1: USB disconnect, device number 16 [ 157.472549][ T6591] FAULT_INJECTION: forcing a failure. [ 157.472549][ T6591] name failslab, interval 1, probability 0, space 0, times 0 [ 157.472576][ T6591] CPU: 0 UID: 0 PID: 6591 Comm: syz.0.183 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 157.472598][ T6591] Tainted: [L]=SOFTLOCKUP [ 157.472604][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.472613][ T6591] Call Trace: [ 157.472618][ T6591] [ 157.472625][ T6591] dump_stack_lvl+0xe8/0x150 [ 157.472648][ T6591] should_fail_ex+0x46b/0x600 [ 157.472674][ T6591] should_failslab+0xa8/0x100 [ 157.472700][ T6591] __kmalloc_cache_noprof+0x84/0x690 [ 157.472727][ T6591] ? vhost_task_create+0x123/0x380 [ 157.472752][ T6591] vhost_task_create+0x123/0x380 [ 157.472773][ T6591] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 157.472796][ T6591] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 157.472820][ T6591] ? __pfx_vhost_task_create+0x10/0x10 [ 157.472848][ T6591] ? __pfx_vhost_task_fn+0x10/0x10 [ 157.472872][ T6591] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 157.472892][ T6591] ? lockdep_hardirqs_on+0x7a/0x110 [ 157.472911][ T6591] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 157.472930][ T6591] ? mutex_lock_nested+0x152/0x1d0 [ 157.472953][ T6591] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 157.472980][ T6591] kvm_mmu_post_init_vm+0x147/0x2d0 [ 157.473006][ T6591] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 157.473044][ T6591] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 157.473073][ T6591] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.473099][ T6591] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 157.473123][ T6591] ? lockdep_hardirqs_on+0x7a/0x110 [ 157.473142][ T6591] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 157.473161][ T6591] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 157.473181][ T6591] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 157.473208][ T6591] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 157.473227][ T6591] ? lockdep_hardirqs_on+0x7a/0x110 [ 157.473246][ T6591] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 157.473266][ T6591] ? rt_write_unlock+0x190/0x230 [ 157.473283][ T6591] kvm_vcpu_ioctl+0xa65/0xfe0 [ 157.473310][ T6591] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 157.473347][ T6591] ? __fget_files+0x2a/0x420 [ 157.473369][ T6591] ? __fget_files+0x2a/0x420 [ 157.473387][ T6591] ? __fget_files+0x3a6/0x420 [ 157.473405][ T6591] ? __fget_files+0x2a/0x420 [ 157.473427][ T6591] ? bpf_lsm_file_ioctl+0x9/0x20 [ 157.473446][ T6591] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 157.473473][ T6591] __se_sys_ioctl+0xff/0x170 [ 157.473498][ T6591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.473520][ T6591] do_syscall_64+0x15f/0xf80 [ 157.473542][ T6591] ? trace_irq_disable+0x3b/0x140 [ 157.473560][ T6591] ? clear_bhb_loop+0x40/0x90 [ 157.473580][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.473596][ T6591] RIP: 0033:0x7f668f7fc819 [ 157.473610][ T6591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.473623][ T6591] RSP: 002b:00007f668da35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.473639][ T6591] RAX: ffffffffffffffda RBX: 00007f668fa76090 RCX: 00007f668f7fc819 [ 157.473651][ T6591] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 157.473660][ T6591] RBP: 00007f668da35090 R08: 0000000000000000 R09: 0000000000000000 [ 157.473670][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.473679][ T6591] R13: 00007f668fa76128 R14: 00007f668fa76090 R15: 00007ffd0d424ee8 [ 157.473739][ T6591] [ 157.664255][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 157.927523][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 157.928917][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 157.931648][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 157.931669][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.931685][ T9] usb 4-1: Product: syz [ 157.931696][ T9] usb 4-1: Manufacturer: syz [ 157.931707][ T9] usb 4-1: SerialNumber: syz [ 158.222638][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 158.408246][ T9] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 158.408276][ T9] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 158.516607][ T6602] ======================================================= [ 158.516607][ T6602] WARNING: The mand mount option has been deprecated and [ 158.516607][ T6602] and is ignored by this kernel. Remove the mand [ 158.516607][ T6602] option from the mount to silence this warning. [ 158.516607][ T6602] ======================================================= [ 158.926945][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.189'. [ 158.931349][ T6608] pvfs2: Unknown parameter 'measure' [ 158.968220][ T9] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 158.968253][ T9] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 159.332180][ T9] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 159.489862][ T9] usb 4-1: USB disconnect, device number 4 [ 159.691255][ T6069] udevd[6069]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.480038][ T6665] FAULT_INJECTION: forcing a failure. [ 161.480038][ T6665] name failslab, interval 1, probability 0, space 0, times 0 [ 161.480772][ T6665] CPU: 1 UID: 0 PID: 6665 Comm: syz.2.203 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 161.480803][ T6665] Tainted: [L]=SOFTLOCKUP [ 161.480810][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 161.480822][ T6665] Call Trace: [ 161.480831][ T6665] [ 161.480839][ T6665] dump_stack_lvl+0xe8/0x150 [ 161.480869][ T6665] should_fail_ex+0x46b/0x600 [ 161.480905][ T6665] should_failslab+0xa8/0x100 [ 161.480939][ T6665] __kmalloc_cache_noprof+0x84/0x690 [ 161.480971][ T6665] ? vhost_task_create+0x123/0x380 [ 161.481006][ T6665] vhost_task_create+0x123/0x380 [ 161.481033][ T6665] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 161.481060][ T6665] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 161.481101][ T6665] ? __pfx_vhost_task_create+0x10/0x10 [ 161.481137][ T6665] ? __pfx_vhost_task_fn+0x10/0x10 [ 161.481171][ T6665] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 161.481198][ T6665] ? lockdep_hardirqs_on+0x7a/0x110 [ 161.481224][ T6665] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 161.481249][ T6665] ? mutex_lock_nested+0x152/0x1d0 [ 161.481280][ T6665] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 161.481315][ T6665] kvm_mmu_post_init_vm+0x147/0x2d0 [ 161.481357][ T6665] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 161.481409][ T6665] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 161.481447][ T6665] ? do_raw_spin_lock+0x12b/0x2f0 [ 161.481483][ T6665] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 161.481509][ T6665] ? lockdep_hardirqs_on+0x7a/0x110 [ 161.481534][ T6665] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 161.481563][ T6665] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 161.481589][ T6665] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 161.481626][ T6665] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 161.481653][ T6665] ? lockdep_hardirqs_on+0x7a/0x110 [ 161.481678][ T6665] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 161.481705][ T6665] ? rt_write_unlock+0x190/0x230 [ 161.481730][ T6665] kvm_vcpu_ioctl+0xa65/0xfe0 [ 161.481767][ T6665] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 161.481817][ T6665] ? __fget_files+0x2a/0x420 [ 161.481846][ T6665] ? __fget_files+0x2a/0x420 [ 161.481870][ T6665] ? __fget_files+0x3a6/0x420 [ 161.481894][ T6665] ? __fget_files+0x2a/0x420 [ 161.481923][ T6665] ? bpf_lsm_file_ioctl+0x9/0x20 [ 161.481947][ T6665] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 161.481977][ T6665] __se_sys_ioctl+0xff/0x170 [ 161.482009][ T6665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.482030][ T6665] do_syscall_64+0x15f/0xf80 [ 161.482054][ T6665] ? trace_irq_disable+0x3b/0x140 [ 161.482087][ T6665] ? clear_bhb_loop+0x40/0x90 [ 161.482113][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.482135][ T6665] RIP: 0033:0x7f498e59c819 [ 161.482155][ T6665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.482173][ T6665] RSP: 002b:00007f498c7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.482196][ T6665] RAX: ffffffffffffffda RBX: 00007f498e816090 RCX: 00007f498e59c819 [ 161.482213][ T6665] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 161.482226][ T6665] RBP: 00007f498c7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 161.482240][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.482252][ T6665] R13: 00007f498e816128 R14: 00007f498e816090 R15: 00007ffeeb045e28 [ 161.482288][ T6665] [ 162.137828][ T6673] sg_write: data in/out 237535/136 bytes for SCSI command 0x0-- guessing data in; [ 162.137828][ T6673] program syz.0.206 not setting count and/or reply_len properly [ 162.161737][ T6675] sg_write: data in/out 237535/136 bytes for SCSI command 0x0-- guessing data in; [ 162.161737][ T6675] program syz.0.206 not setting count and/or reply_len properly [ 162.446930][ T6682] FAULT_INJECTION: forcing a failure. [ 162.446930][ T6682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.446968][ T6682] CPU: 0 UID: 0 PID: 6682 Comm: syz.1.208 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 162.446997][ T6682] Tainted: [L]=SOFTLOCKUP [ 162.447004][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 162.447016][ T6682] Call Trace: [ 162.447025][ T6682] [ 162.447034][ T6682] dump_stack_lvl+0xe8/0x150 [ 162.447074][ T6682] should_fail_ex+0x46b/0x600 [ 162.447111][ T6682] _copy_from_user+0x2d/0xb0 [ 162.447146][ T6682] ___sys_sendmsg+0x1c6/0x360 [ 162.447177][ T6682] ? __lock_acquire+0x6b5/0x2cf0 [ 162.447209][ T6682] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.447276][ T6682] ? __fget_files+0x2a/0x420 [ 162.447308][ T6682] ? __fget_files+0x3a6/0x420 [ 162.447352][ T6682] __x64_sys_sendmsg+0x1c3/0x2a0 [ 162.447391][ T6682] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.447432][ T6682] ? __pfx_ksys_write+0x10/0x10 [ 162.447472][ T6682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.447496][ T6682] do_syscall_64+0x15f/0xf80 [ 162.447522][ T6682] ? trace_irq_disable+0x3b/0x140 [ 162.447546][ T6682] ? clear_bhb_loop+0x40/0x90 [ 162.447572][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.447595][ T6682] RIP: 0033:0x7fba35a6c819 [ 162.447620][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.447647][ T6682] RSP: 002b:00007fba33cbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.447670][ T6682] RAX: ffffffffffffffda RBX: 00007fba35ce5fa0 RCX: 00007fba35a6c819 [ 162.447686][ T6682] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000000000000004 [ 162.447699][ T6682] RBP: 00007fba33cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 162.447712][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.447724][ T6682] R13: 00007fba35ce6038 R14: 00007fba35ce5fa0 R15: 00007fff0c1dc778 [ 162.447758][ T6682] [ 163.480797][ T6700] FAULT_INJECTION: forcing a failure. [ 163.480797][ T6700] name failslab, interval 1, probability 0, space 0, times 0 [ 163.480835][ T6700] CPU: 1 UID: 0 PID: 6700 Comm: syz.3.211 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 163.480864][ T6700] Tainted: [L]=SOFTLOCKUP [ 163.480872][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 163.480884][ T6700] Call Trace: [ 163.480892][ T6700] [ 163.480901][ T6700] dump_stack_lvl+0xe8/0x150 [ 163.480942][ T6700] should_fail_ex+0x46b/0x600 [ 163.480979][ T6700] should_failslab+0xa8/0x100 [ 163.481009][ T6700] __kmalloc_cache_noprof+0x84/0x690 [ 163.481035][ T6700] ? vhost_task_create+0x123/0x380 [ 163.481068][ T6700] vhost_task_create+0x123/0x380 [ 163.481092][ T6700] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 163.481118][ T6700] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 163.481144][ T6700] ? __pfx_vhost_task_create+0x10/0x10 [ 163.481177][ T6700] ? __pfx_vhost_task_fn+0x10/0x10 [ 163.481205][ T6700] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 163.481227][ T6700] ? lockdep_hardirqs_on+0x7a/0x110 [ 163.481248][ T6700] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 163.481270][ T6700] ? mutex_lock_nested+0x152/0x1d0 [ 163.481297][ T6700] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 163.481327][ T6700] kvm_mmu_post_init_vm+0x147/0x2d0 [ 163.481357][ T6700] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 163.481399][ T6700] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 163.481431][ T6700] ? do_raw_spin_lock+0x12b/0x2f0 [ 163.481461][ T6700] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 163.481483][ T6700] ? lockdep_hardirqs_on+0x7a/0x110 [ 163.481503][ T6700] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 163.481525][ T6700] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 163.481547][ T6700] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 163.481577][ T6700] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 163.481599][ T6700] ? lockdep_hardirqs_on+0x7a/0x110 [ 163.481620][ T6700] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 163.481641][ T6700] ? rt_write_unlock+0x190/0x230 [ 163.481666][ T6700] kvm_vcpu_ioctl+0xa65/0xfe0 [ 163.481697][ T6700] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 163.481738][ T6700] ? __fget_files+0x2a/0x420 [ 163.481762][ T6700] ? __fget_files+0x2a/0x420 [ 163.481782][ T6700] ? __fget_files+0x3a6/0x420 [ 163.481803][ T6700] ? __fget_files+0x2a/0x420 [ 163.481826][ T6700] ? bpf_lsm_file_ioctl+0x9/0x20 [ 163.481848][ T6700] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 163.481872][ T6700] __se_sys_ioctl+0xff/0x170 [ 163.481900][ T6700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.481925][ T6700] do_syscall_64+0x15f/0xf80 [ 163.481946][ T6700] ? trace_irq_disable+0x3b/0x140 [ 163.481967][ T6700] ? clear_bhb_loop+0x40/0x90 [ 163.481989][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.482007][ T6700] RIP: 0033:0x7efe8095c819 [ 163.482024][ T6700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.482039][ T6700] RSP: 002b:00007efe7eb8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.482062][ T6700] RAX: ffffffffffffffda RBX: 00007efe80bd6090 RCX: 00007efe8095c819 [ 163.482074][ T6700] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 163.482085][ T6700] RBP: 00007efe7eb8d090 R08: 0000000000000000 R09: 0000000000000000 [ 163.482096][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.482107][ T6700] R13: 00007efe80bd6128 R14: 00007efe80bd6090 R15: 00007ffdcc75e0d8 [ 163.482134][ T6700] [ 164.306496][ T6708] sctp: [Deprecated]: syz.3.213 (pid 6708) Use of int in max_burst socket option. [ 164.306496][ T6708] Use struct sctp_assoc_value instead [ 164.849049][ T6712] FAULT_INJECTION: forcing a failure. [ 164.849049][ T6712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.849089][ T6712] CPU: 0 UID: 0 PID: 6712 Comm: syz.0.214 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 164.849117][ T6712] Tainted: [L]=SOFTLOCKUP [ 164.849125][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.849139][ T6712] Call Trace: [ 164.849148][ T6712] [ 164.849157][ T6712] dump_stack_lvl+0xe8/0x150 [ 164.849187][ T6712] should_fail_ex+0x46b/0x600 [ 164.849225][ T6712] _copy_to_user+0x31/0xb0 [ 164.849248][ T6712] simple_read_from_buffer+0xe1/0x170 [ 164.849282][ T6712] proc_fail_nth_read+0x1be/0x230 [ 164.849312][ T6712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.849341][ T6712] ? rw_verify_area+0x2ac/0x4e0 [ 164.849372][ T6712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.849406][ T6712] vfs_read+0x212/0xa80 [ 164.849445][ T6712] ? __pfx_vfs_read+0x10/0x10 [ 164.849478][ T6712] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 164.849506][ T6712] ? lockdep_hardirqs_on+0x7a/0x110 [ 164.849531][ T6712] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 164.849558][ T6712] ? mutex_lock_nested+0x152/0x1d0 [ 164.849591][ T6712] ? fdget_pos+0x252/0x320 [ 164.849627][ T6712] ksys_read+0x156/0x270 [ 164.849660][ T6712] ? __pfx_ksys_read+0x10/0x10 [ 164.849691][ T6712] ? __pfx_tty_ioctl+0x10/0x10 [ 164.849720][ T6712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.849745][ T6712] do_syscall_64+0x15f/0xf80 [ 164.849771][ T6712] ? trace_irq_disable+0x3b/0x140 [ 164.849796][ T6712] ? clear_bhb_loop+0x40/0x90 [ 164.849825][ T6712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.849847][ T6712] RIP: 0033:0x7f668f7bd04e [ 164.849868][ T6712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.849884][ T6712] RSP: 002b:00007f668da34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.849916][ T6712] RAX: ffffffffffffffda RBX: 00007f668da356c0 RCX: 00007f668f7bd04e [ 164.849932][ T6712] RDX: 000000000000000f RSI: 00007f668da350a0 RDI: 0000000000000004 [ 164.849946][ T6712] RBP: 00007f668da35090 R08: 0000000000000000 R09: 0000000000000000 [ 164.849959][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.849972][ T6712] R13: 00007f668fa76128 R14: 00007f668fa76090 R15: 00007ffd0d424ee8 [ 164.850007][ T6712] [ 166.434824][ T2107] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 166.587290][ T2107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.587344][ T2107] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 166.587378][ T2107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.751995][ T2107] usb 2-1: config 0 descriptor?? [ 167.232175][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.257131][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.238870][ T2107] usbhid 2-1:0.0: can't add hid device: -71 [ 168.238966][ T2107] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 168.283156][ T2107] usb 2-1: USB disconnect, device number 17 [ 169.684310][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 169.835420][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 169.839303][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 169.842032][ T9] usb 2-1: config 3 has an invalid interface number: 44 but max is 0 [ 169.842061][ T9] usb 2-1: config 3 has no interface number 0 [ 169.842094][ T9] usb 2-1: config 3 interface 44 has no altsetting 0 [ 169.893547][ T9] usb 2-1: New USB device found, idVendor=0408, idProduct=4035, bcdDevice=e8.de [ 169.893580][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.893601][ T9] usb 2-1: Product: syz [ 169.893616][ T9] usb 2-1: Manufacturer: syz [ 169.893632][ T9] usb 2-1: SerialNumber: syz [ 170.593470][ T6773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.226'. [ 170.718640][ T9] uvcvideo 2-1:3.44: Found UVC 0.00 device syz (0408:4035) [ 170.718673][ T9] uvcvideo 2-1:3.44: Forcing UVC version to 1.0a [ 170.718703][ T9] uvcvideo 2-1:3.44: No valid video chain found. [ 170.891012][ T9] usb 2-1: USB disconnect, device number 18 [ 170.983917][ T5894] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 171.149461][ T5894] usb 4-1: config 0 has no interfaces? [ 171.153903][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 171.153985][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 171.154081][ T5894] usb 4-1: Product: syz [ 171.154129][ T5894] usb 4-1: Manufacturer: syz [ 171.154192][ T5894] usb 4-1: SerialNumber: syz [ 171.279864][ T5894] usb 4-1: config 0 descriptor?? [ 171.535190][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.226'. [ 171.578735][ T6785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.228'. [ 171.660788][ T9] usb 4-1: USB disconnect, device number 5 [ 171.729070][ T6794] FAULT_INJECTION: forcing a failure. [ 171.729070][ T6794] name failslab, interval 1, probability 0, space 0, times 0 [ 171.729108][ T6794] CPU: 0 UID: 0 PID: 6794 Comm: syz.2.230 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 171.729137][ T6794] Tainted: [L]=SOFTLOCKUP [ 171.729145][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 171.729164][ T6794] Call Trace: [ 171.729171][ T6794] [ 171.729177][ T6794] dump_stack_lvl+0xe8/0x150 [ 171.729200][ T6794] should_fail_ex+0x46b/0x600 [ 171.729228][ T6794] should_failslab+0xa8/0x100 [ 171.729252][ T6794] kmem_cache_alloc_noprof+0x87/0x680 [ 171.729272][ T6794] ? rcu_is_watching+0x15/0xb0 [ 171.729294][ T6794] ? security_file_alloc+0x34/0x310 [ 171.729314][ T6794] security_file_alloc+0x34/0x310 [ 171.729332][ T6794] init_file+0x96/0x2d0 [ 171.729351][ T6794] alloc_empty_file+0x74/0x1d0 [ 171.729368][ T6794] path_openat+0x11b/0x38a0 [ 171.729397][ T6794] ? try_to_take_rt_mutex+0x840/0xb00 [ 171.729412][ T6794] ? arch_stack_walk+0xfb/0x150 [ 171.729440][ T6794] ? __lock_acquire+0x6b5/0x2cf0 [ 171.729472][ T6794] ? __pfx_path_openat+0x10/0x10 [ 171.729497][ T6794] ? kasan_save_track+0x4f/0x80 [ 171.729517][ T6794] ? kasan_save_track+0x3e/0x80 [ 171.729536][ T6794] ? __kasan_slab_alloc+0x6c/0x80 [ 171.729556][ T6794] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 171.729583][ T6794] ? do_raw_spin_lock+0x12b/0x2f0 [ 171.729607][ T6794] do_file_open+0x23e/0x4a0 [ 171.729629][ T6794] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 171.729652][ T6794] ? __pfx_do_file_open+0x10/0x10 [ 171.729673][ T6794] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 171.729703][ T6794] ? alloc_fd+0x64e/0x6c0 [ 171.729729][ T6794] do_sys_openat2+0x113/0x200 [ 171.729751][ T6794] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.729770][ T6794] ? ksys_write+0x248/0x270 [ 171.729794][ T6794] ? __pfx_ksys_write+0x10/0x10 [ 171.729817][ T6794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.729834][ T6794] __x64_sys_open+0x11e/0x150 [ 171.729856][ T6794] do_syscall_64+0x15f/0xf80 [ 171.729875][ T6794] ? trace_irq_disable+0x3b/0x140 [ 171.729893][ T6794] ? clear_bhb_loop+0x40/0x90 [ 171.729912][ T6794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.729928][ T6794] RIP: 0033:0x7f498e59c819 [ 171.729942][ T6794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.729956][ T6794] RSP: 002b:00007f498c7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 171.729972][ T6794] RAX: ffffffffffffffda RBX: 00007f498e815fa0 RCX: 00007f498e59c819 [ 171.729984][ T6794] RDX: 0000000000000000 RSI: 0000000001000000 RDI: 0000200000000000 [ 171.729994][ T6794] RBP: 00007f498c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.730004][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.730013][ T6794] R13: 00007f498e816038 R14: 00007f498e815fa0 R15: 00007ffeeb045e28 [ 171.730037][ T6794] [ 172.552577][ T32] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 172.553581][ T6812] FAULT_INJECTION: forcing a failure. [ 172.553581][ T6812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.553607][ T6812] CPU: 1 UID: 0 PID: 6812 Comm: syz.0.237 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 172.553629][ T6812] Tainted: [L]=SOFTLOCKUP [ 172.553635][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.553645][ T6812] Call Trace: [ 172.553651][ T6812] [ 172.553657][ T6812] dump_stack_lvl+0xe8/0x150 [ 172.553678][ T6812] should_fail_ex+0x46b/0x600 [ 172.553737][ T6812] _copy_from_iter+0x1d3/0x1670 [ 172.553773][ T6812] ? rcu_is_watching+0x15/0xb0 [ 172.553808][ T6812] ? __pfx__copy_from_iter+0x10/0x10 [ 172.553837][ T6812] ? __kmalloc_node_track_caller_noprof+0x390/0x7e0 [ 172.553879][ T6812] ? netlink_sendmsg+0x650/0xb40 [ 172.553906][ T6812] ? skb_put+0x11b/0x210 [ 172.553938][ T6812] netlink_sendmsg+0x6c0/0xb40 [ 172.553975][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.554012][ T6812] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 172.554041][ T6812] ? aa_sock_msg_perm+0x122/0x200 [ 172.554064][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.554085][ T6812] sock_sendmsg_nosec+0x112/0x150 [ 172.554103][ T6812] ____sys_sendmsg+0x55c/0x870 [ 172.554132][ T6812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.554161][ T6812] ? import_iovec+0x73/0xa0 [ 172.554188][ T6812] ___sys_sendmsg+0x2a5/0x360 [ 172.554210][ T6812] ? __lock_acquire+0x6b5/0x2cf0 [ 172.554233][ T6812] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.554280][ T6812] ? __fget_files+0x2a/0x420 [ 172.554299][ T6812] ? __fget_files+0x3a6/0x420 [ 172.554325][ T6812] __x64_sys_sendmsg+0x1c3/0x2a0 [ 172.554350][ T6812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.554386][ T6812] ? __pfx_ksys_write+0x10/0x10 [ 172.554415][ T6812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.554432][ T6812] do_syscall_64+0x15f/0xf80 [ 172.554451][ T6812] ? trace_irq_disable+0x3b/0x140 [ 172.554473][ T6812] ? clear_bhb_loop+0x40/0x90 [ 172.554492][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.554508][ T6812] RIP: 0033:0x7f668f7fc819 [ 172.554523][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.554536][ T6812] RSP: 002b:00007f668da56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.554553][ T6812] RAX: ffffffffffffffda RBX: 00007f668fa75fa0 RCX: 00007f668f7fc819 [ 172.554565][ T6812] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 172.554575][ T6812] RBP: 00007f668da56090 R08: 0000000000000000 R09: 0000000000000000 [ 172.554585][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.554594][ T6812] R13: 00007f668fa76038 R14: 00007f668fa75fa0 R15: 00007ffd0d424ee8 [ 172.554617][ T6812] [ 172.680798][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.722363][ T32] usb 2-1: config 4 interface 0 has no altsetting 0 [ 172.775394][ T32] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 172.775496][ T32] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 172.775553][ T32] usb 2-1: Product: syz [ 172.775596][ T32] usb 2-1: Manufacturer: syz [ 172.775639][ T32] usb 2-1: SerialNumber: syz [ 172.912538][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 172.912572][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.912594][ T9] usb 4-1: Product: syz [ 172.912609][ T9] usb 4-1: Manufacturer: syz [ 172.912625][ T9] usb 4-1: SerialNumber: syz [ 173.063496][ T32] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 173.289355][ T6818] FAULT_INJECTION: forcing a failure. [ 173.289355][ T6818] name failslab, interval 1, probability 0, space 0, times 0 [ 173.289401][ T6818] CPU: 0 UID: 0 PID: 6818 Comm: syz.0.239 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 173.289430][ T6818] Tainted: [L]=SOFTLOCKUP [ 173.289438][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 173.289451][ T6818] Call Trace: [ 173.289460][ T6818] [ 173.289470][ T6818] dump_stack_lvl+0xe8/0x150 [ 173.289500][ T6818] should_fail_ex+0x46b/0x600 [ 173.289539][ T6818] should_failslab+0xa8/0x100 [ 173.289576][ T6818] __kmalloc_cache_noprof+0x84/0x690 [ 173.289608][ T6818] ? vhost_task_create+0x123/0x380 [ 173.289644][ T6818] vhost_task_create+0x123/0x380 [ 173.289673][ T6818] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 173.289704][ T6818] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 173.289737][ T6818] ? __pfx_vhost_task_create+0x10/0x10 [ 173.289778][ T6818] ? __pfx_vhost_task_fn+0x10/0x10 [ 173.289813][ T6818] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 173.289841][ T6818] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.289868][ T6818] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 173.289895][ T6818] ? mutex_lock_nested+0x152/0x1d0 [ 173.289930][ T6818] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 173.289966][ T6818] kvm_mmu_post_init_vm+0x147/0x2d0 [ 173.290002][ T6818] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 173.290055][ T6818] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 173.290097][ T6818] ? do_raw_spin_lock+0x12b/0x2f0 [ 173.290132][ T6818] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 173.290157][ T6818] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.290182][ T6818] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 173.290209][ T6818] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 173.290237][ T6818] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 173.290274][ T6818] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 173.290309][ T6818] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.290335][ T6818] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 173.290363][ T6818] ? rt_write_unlock+0x190/0x230 [ 173.290388][ T6818] kvm_vcpu_ioctl+0xa65/0xfe0 [ 173.290427][ T6818] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 173.290481][ T6818] ? __fget_files+0x2a/0x420 [ 173.290512][ T6818] ? __fget_files+0x2a/0x420 [ 173.290537][ T6818] ? __fget_files+0x3a6/0x420 [ 173.290562][ T6818] ? __fget_files+0x2a/0x420 [ 173.290594][ T6818] ? bpf_lsm_file_ioctl+0x9/0x20 [ 173.290621][ T6818] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 173.290651][ T6818] __se_sys_ioctl+0xff/0x170 [ 173.290683][ T6818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.290708][ T6818] do_syscall_64+0x15f/0xf80 [ 173.290736][ T6818] ? clear_bhb_loop+0x40/0x90 [ 173.290764][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.290786][ T6818] RIP: 0033:0x7f668f7fc819 [ 173.290807][ T6818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.290826][ T6818] RSP: 002b:00007f668da35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.290849][ T6818] RAX: ffffffffffffffda RBX: 00007f668fa76090 RCX: 00007f668f7fc819 [ 173.290865][ T6818] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 173.290878][ T6818] RBP: 00007f668da35090 R08: 0000000000000000 R09: 0000000000000000 [ 173.290891][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.290904][ T6818] R13: 00007f668fa76128 R14: 00007f668fa76090 R15: 00007ffd0d424ee8 [ 173.290939][ T6818] [ 173.674190][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 173.674245][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 174.558986][ T6833] vivid-000: disconnect [ 174.633908][ T6830] vivid-000: reconnect [ 174.860194][ T6837] FAULT_INJECTION: forcing a failure. [ 174.860194][ T6837] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.860254][ T6837] CPU: 0 UID: 0 PID: 6837 Comm: syz.2.243 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 174.860291][ T6837] Tainted: [L]=SOFTLOCKUP [ 174.860297][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 174.860307][ T6837] Call Trace: [ 174.860313][ T6837] [ 174.860321][ T6837] dump_stack_lvl+0xe8/0x150 [ 174.860376][ T6837] should_fail_ex+0x46b/0x600 [ 174.860414][ T6837] prepare_alloc_pages+0x22a/0x6b0 [ 174.860455][ T6837] __alloc_frozen_pages_noprof+0x12f/0x380 [ 174.860494][ T6837] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 174.860544][ T6837] ? __pfx_policy_nodemask+0x10/0x10 [ 174.860581][ T6837] ? __lock_acquire+0x6b5/0x2cf0 [ 174.860618][ T6837] alloc_pages_mpol+0xd1/0x380 [ 174.860658][ T6837] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 174.860686][ T6837] vma_alloc_folio_noprof+0xe1/0x1e0 [ 174.860737][ T6837] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 174.860774][ T6837] ? __pte_offset_map+0x29/0x200 [ 174.860809][ T6837] do_pte_missing+0x822/0x2950 [ 174.860856][ T6837] handle_mm_fault+0xdb5/0x14c0 [ 174.860901][ T6837] ? handle_mm_fault+0xed/0x14c0 [ 174.860938][ T6837] ? __pfx_handle_mm_fault+0x10/0x10 [ 174.860983][ T6837] ? __lock_acquire+0x6b5/0x2cf0 [ 174.861017][ T6837] ? lock_mm_and_find_vma+0xa7/0x340 [ 174.861046][ T6837] do_user_addr_fault+0x75b/0x1340 [ 174.861100][ T6837] exc_page_fault+0x6a/0xc0 [ 174.861129][ T6837] asm_exc_page_fault+0x26/0x30 [ 174.861292][ T6837] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 174.861329][ T6837] Code: 28 05 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 174.861348][ T6837] RSP: 0018:ffffc9000813f638 EFLAGS: 00050202 [ 174.861367][ T6837] RAX: ffffffff84b24c01 RBX: ffff888060058000 RCX: 0000000000000e94 [ 174.861382][ T6837] RDX: 0000000000000000 RSI: ffff888060058000 RDI: 0000200000005700 [ 174.861396][ T6837] RBP: ffffc9000813f7b0 R08: ffff888060058e93 R09: 1ffff1100c00b1d2 [ 174.861411][ T6837] R10: dffffc0000000000 R11: ffffed100c00b1d3 R12: dffffc0000000000 [ 174.861426][ T6837] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e94 [ 174.861451][ T6837] ? _copy_to_iter+0x461/0x17d0 [ 174.861504][ T6837] _copy_to_iter+0x493/0x17d0 [ 174.861551][ T6837] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 174.861571][ T6837] ? __pfx__copy_to_iter+0x10/0x10 [ 174.861598][ T6837] ? rt_spin_lock+0x1e0/0x400 [ 174.861634][ T6837] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 174.861692][ T6837] __skb_datagram_iter+0xf8/0x980 [ 174.861730][ T6837] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 174.861772][ T6837] skb_copy_datagram_iter+0xb5/0x240 [ 174.861810][ T6837] netlink_recvmsg+0x2c3/0xa50 [ 174.861855][ T6837] ? __pfx_netlink_recvmsg+0x10/0x10 [ 174.861890][ T6837] ? __pfx_aa_sk_perm+0x10/0x10 [ 174.861925][ T6837] ? aa_sock_msg_perm+0x122/0x200 [ 174.861955][ T6837] ? __pfx_netlink_recvmsg+0x10/0x10 [ 174.861987][ T6837] sock_recvmsg_nosec+0x10c/0x140 [ 174.862027][ T6837] ____sys_recvmsg+0x23d/0x4f0 [ 174.862070][ T6837] ? __pfx_____sys_recvmsg+0x10/0x10 [ 174.862119][ T6837] ? import_iovec+0x73/0xa0 [ 174.862159][ T6837] ___sys_recvmsg+0x215/0x590 [ 174.862179][ T6837] ? get_pid_task+0x20/0x1f0 [ 174.862224][ T6837] ? __pfx____sys_recvmsg+0x10/0x10 [ 174.862262][ T6837] ? __fget_files+0x2a/0x420 [ 174.862306][ T6837] ? __fget_files+0x3a6/0x420 [ 174.862344][ T6837] __x64_sys_recvmsg+0x1c0/0x2a0 [ 174.862371][ T6837] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 174.862428][ T6837] ? __pfx_ksys_write+0x10/0x10 [ 174.862471][ T6837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.862495][ T6837] do_syscall_64+0x15f/0xf80 [ 174.862522][ T6837] ? trace_irq_disable+0x3b/0x140 [ 174.862540][ T6837] ? clear_bhb_loop+0x40/0x90 [ 174.862577][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.862601][ T6837] RIP: 0033:0x7f498e59c819 [ 174.862622][ T6837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.862639][ T6837] RSP: 002b:00007f498c7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 174.862660][ T6837] RAX: ffffffffffffffda RBX: 00007f498e816090 RCX: 00007f498e59c819 [ 174.862675][ T6837] RDX: 0000000000032120 RSI: 0000200000000040 RDI: 0000000000000003 [ 174.862692][ T6837] RBP: 00007f498c7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 174.862702][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.862711][ T6837] R13: 00007f498e816128 R14: 00007f498e816090 R15: 00007ffeeb045e28 [ 174.862754][ T6837] [ 174.885219][ T5946] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 174.988690][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 174.992495][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 175.002342][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 175.002454][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 175.139128][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 175.335129][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 175.450132][ T32] vp7045: USB control message 'out' went wrong. [ 175.450164][ T32] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 175.450202][ T32] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 175.524557][ T32] usb 2-1: USB disconnect, device number 19 [ 175.578976][ T9] usb 4-1: USB disconnect, device number 6 [ 175.598859][ T5946] usb 1-1: unable to get BOS descriptor or descriptor too short [ 175.599510][ T5946] usb 1-1: not running at top speed; connect to a high speed hub [ 175.620068][ T5946] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 175.640481][ T5946] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 175.640514][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.640534][ T5946] usb 1-1: Product: syz [ 175.640548][ T5946] usb 1-1: Manufacturer: syz [ 175.640563][ T5946] usb 1-1: SerialNumber: syz [ 175.933096][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.940258][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.188044][ T6850] binder: BINDER_SET_CONTEXT_MGR already set [ 176.188060][ T6850] binder: 6849:6850 ioctl 4018620d 200000004a80 returned -16 [ 176.211411][ T5946] qmi_wwan 1-1:251.0: probe with driver qmi_wwan failed with error -22 [ 176.233861][ T5946] usb 1-1: USB disconnect, device number 9 [ 176.261885][ T6853] FAULT_INJECTION: forcing a failure. [ 176.261885][ T6853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.261914][ T6853] CPU: 0 UID: 0 PID: 6853 Comm: syz.2.247 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 176.261936][ T6853] Tainted: [L]=SOFTLOCKUP [ 176.261942][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 176.261951][ T6853] Call Trace: [ 176.261957][ T6853] [ 176.261968][ T6853] dump_stack_lvl+0xe8/0x150 [ 176.261990][ T6853] should_fail_ex+0x46b/0x600 [ 176.262017][ T6853] _copy_from_user+0x2d/0xb0 [ 176.262043][ T6853] binder_ioctl_write_read+0x167/0xa490 [ 176.262066][ T6853] ? kernel_text_address+0xa5/0xe0 [ 176.262090][ T6853] ? __kernel_text_address+0xd/0x30 [ 176.262114][ T6853] ? unwind_get_return_address+0x4d/0x90 [ 176.262140][ T6853] ? try_to_take_rt_mutex+0x840/0xb00 [ 176.262165][ T6853] ? __lock_acquire+0x6b5/0x2cf0 [ 176.262190][ T6853] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 176.262212][ T6853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.262236][ T6853] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.262261][ T6853] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 176.262280][ T6853] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.262298][ T6853] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 176.262317][ T6853] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 176.262331][ T6853] ? reacquire_held_locks+0x104/0x190 [ 176.262354][ T6853] ? rt_spin_lock+0x1e0/0x400 [ 176.262378][ T6853] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 176.262405][ T6853] ? rt_spin_unlock+0x14f/0x200 [ 176.262435][ T6853] ? binder_get_thread+0x595/0x6d0 [ 176.262458][ T6853] binder_ioctl+0x426/0x1b10 [ 176.262478][ T6853] ? tomoyo_path_number_perm+0x219/0x630 [ 176.262498][ T6853] ? tomoyo_path_number_perm+0x219/0x630 [ 176.262520][ T6853] ? do_vfs_ioctl+0x117b/0x1540 [ 176.262543][ T6853] ? __pfx_binder_ioctl+0x10/0x10 [ 176.262563][ T6853] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 176.262610][ T6853] ? __fget_files+0x2a/0x420 [ 176.262631][ T6853] ? __fget_files+0x2a/0x420 [ 176.262648][ T6853] ? __fget_files+0x3a6/0x420 [ 176.262665][ T6853] ? __fget_files+0x2a/0x420 [ 176.262686][ T6853] ? bpf_lsm_file_ioctl+0x9/0x20 [ 176.262704][ T6853] ? __pfx_binder_ioctl+0x10/0x10 [ 176.262724][ T6853] __se_sys_ioctl+0xff/0x170 [ 176.262746][ T6853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.262763][ T6853] do_syscall_64+0x15f/0xf80 [ 176.262781][ T6853] ? trace_irq_disable+0x3b/0x140 [ 176.262799][ T6853] ? clear_bhb_loop+0x40/0x90 [ 176.262818][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.262833][ T6853] RIP: 0033:0x7f498e59c819 [ 176.262847][ T6853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.262866][ T6853] RSP: 002b:00007f498c7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.262883][ T6853] RAX: ffffffffffffffda RBX: 00007f498e816090 RCX: 00007f498e59c819 [ 176.262894][ T6853] RDX: 0000200000000200 RSI: 00000000c0306201 RDI: 0000000000000006 [ 176.262905][ T6853] RBP: 00007f498c7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 176.262914][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.262923][ T6853] R13: 00007f498e816128 R14: 00007f498e816090 R15: 00007ffeeb045e28 [ 176.262947][ T6853] [ 176.282373][ T6853] binder: 6849:6853 ioctl c0306201 200000000200 returned -14 [ 176.900204][ T6862] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 176.900221][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 176.900244][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 176.900254][ T6862] netlink: 'syz.3.252': attribute type 2 has an invalid length. [ 176.900264][ T6862] netlink: 'syz.3.252': attribute type 2 has an invalid length. [ 176.900274][ T6862] netlink: 'syz.3.252': attribute type 2 has an invalid length. [ 176.902188][ T38] audit: type=1326 audit(1776882019.119:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.0.251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f668f7fc819 code=0x0 [ 177.034008][ T5946] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 177.196135][ T5946] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.196167][ T5946] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 177.196188][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.196239][ T5946] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 177.196267][ T5946] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 177.199710][ T5946] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.199742][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.199763][ T5946] usb 2-1: Product: syz [ 177.199778][ T5946] usb 2-1: Manufacturer: syz [ 177.214350][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.337448][ T5946] cdc_wdm 2-1:1.0: skipping garbage [ 177.337467][ T5946] cdc_wdm 2-1:1.0: skipping garbage [ 177.363415][ T5946] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 177.363449][ T5946] cdc_wdm 2-1:1.0: Unknown control protocol [ 177.453902][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 177.456920][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 177.461134][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 177.461166][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.461201][ T9] usb 4-1: Product: syz [ 177.461217][ T9] usb 4-1: Manufacturer: syz [ 177.461232][ T9] usb 4-1: SerialNumber: syz [ 177.683917][ T5985] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 177.713202][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.721173][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.767969][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 177.876446][ T5985] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 177.876481][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.876496][ T5985] usb 3-1: Product: syz [ 177.876507][ T5985] usb 3-1: Manufacturer: syz [ 177.876517][ T5985] usb 3-1: SerialNumber: syz [ 177.917097][ T6875] tipc: Enabling of bearer rejected, failed to enable media [ 178.491421][ T5985] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 178.491487][ T5985] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 179.581686][ T9] usb 4-1: USB disconnect, device number 7 [ 179.715067][ T5985] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 179.717924][ T5985] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 179.718528][ T5985] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 179.718589][ T5985] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 179.760713][ T5985] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 179.870918][ T5985] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 179.943932][ T5985] usb 3-1: USB disconnect, device number 17 [ 179.985715][ T5894] usb 2-1: USB disconnect, device number 20 [ 180.338835][ T6751] udevd[6751]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.429557][ T6890] netlink: 1016 bytes leftover after parsing attributes in process `syz.2.260'. [ 180.583907][ T5894] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 180.604102][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.703835][ T5946] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 180.733852][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 180.752983][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.753017][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.753055][ T5894] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 180.753079][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.799320][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 180.799352][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.806030][ T5894] usb 2-1: config 0 descriptor?? [ 180.883883][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 180.899641][ T5946] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 180.899671][ T5946] usb 3-1: config 0 has no interface number 0 [ 180.956699][ T5946] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 180.956733][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.956754][ T5946] usb 3-1: Product: syz [ 180.956769][ T5946] usb 3-1: Manufacturer: syz [ 180.956784][ T5946] usb 3-1: SerialNumber: syz [ 181.029296][ T5946] usb 3-1: config 0 descriptor?? [ 181.032997][ T9] usb 4-1: config 0 descriptor?? [ 181.134943][ T6886] syz.0.258 (6886) used greatest stack depth: 17864 bytes left [ 181.280355][ T9] hackrf 4-1:0.0: Board ID: 00 [ 181.280378][ T9] hackrf 4-1:0.0: Firmware version: [ 181.317809][ T5894] hid_parser_main: 246 callbacks suppressed [ 181.317833][ T5894] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 181.317868][ T5894] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 181.440232][ T5946] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 181.440263][ T5946] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 181.648159][ T6893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.671900][ T9] hackrf 4-1:0.0: Registered as swradio24 [ 181.671932][ T9] videodev: could not get a free minor [ 181.672014][ T9] hackrf 4-1:0.0: Failed to register as video device (-23) [ 181.699442][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.730264][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.741042][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.756178][ T5894] ft260 0003:0403:6030.0003: failed to retrieve chip version [ 181.756644][ T5894] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -5 [ 181.765481][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.829935][ T9] hackrf 4-1:0.0: probe with driver hackrf failed with error -23 [ 181.847436][ T9] usb 4-1: USB disconnect, device number 8 [ 181.980937][ T5894] usb 2-1: USB disconnect, device number 21 [ 182.022506][ T5946] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 182.022832][ T5946] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 182.231805][ T5894] usb 3-1: USB disconnect, device number 18 [ 182.440556][ T6901] FAULT_INJECTION: forcing a failure. [ 182.440556][ T6901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.440587][ T6901] CPU: 0 UID: 0 PID: 6901 Comm: syz.0.262 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 182.440609][ T6901] Tainted: [L]=SOFTLOCKUP [ 182.440615][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 182.440629][ T6901] Call Trace: [ 182.440635][ T6901] [ 182.440642][ T6901] dump_stack_lvl+0xe8/0x150 [ 182.440664][ T6901] should_fail_ex+0x46b/0x600 [ 182.440691][ T6901] _copy_from_iter+0x1d3/0x1670 [ 182.440714][ T6901] ? __pfx_policy_nodemask+0x10/0x10 [ 182.440738][ T6901] ? irqentry_exit+0x218/0x730 [ 182.440763][ T6901] ? __pfx__copy_from_iter+0x10/0x10 [ 182.440792][ T6901] ? __sk_mem_schedule+0x7f/0xf0 [ 182.440816][ T6901] ? skb_page_frag_refill+0x119/0x460 [ 182.440843][ T6901] mptcp_sendmsg+0xe2a/0x1dc0 [ 182.440884][ T6901] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 182.440903][ T6901] ? __pfx_aa_sk_perm+0x10/0x10 [ 182.440922][ T6901] ? sock_rps_record_flow+0x19/0x350 [ 182.440948][ T6901] ? inet_sendmsg+0x2f4/0x370 [ 182.440973][ T6901] ? __pfx_inet_sendmsg+0x10/0x10 [ 182.440995][ T6901] sock_sendmsg_nosec+0xf9/0x150 [ 182.441013][ T6901] __sys_sendto+0x402/0x590 [ 182.441037][ T6901] ? __pfx___sys_sendto+0x10/0x10 [ 182.441076][ T6901] ? ksys_write+0x248/0x270 [ 182.441100][ T6901] ? __pfx_ksys_write+0x10/0x10 [ 182.441132][ T6901] __x64_sys_sendto+0xde/0x100 [ 182.441152][ T6901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.441170][ T6901] do_syscall_64+0x15f/0xf80 [ 182.441189][ T6901] ? trace_irq_disable+0x3b/0x140 [ 182.441207][ T6901] ? clear_bhb_loop+0x40/0x90 [ 182.441228][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.441245][ T6901] RIP: 0033:0x7f668f7fc819 [ 182.441264][ T6901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.441277][ T6901] RSP: 002b:00007f668da35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 182.441294][ T6901] RAX: ffffffffffffffda RBX: 00007f668fa76090 RCX: 00007f668f7fc819 [ 182.441305][ T6901] RDX: 0000000000010002 RSI: 00002000000000c0 RDI: 0000000000000004 [ 182.441316][ T6901] RBP: 00007f668da35090 R08: 0000000000000000 R09: 0000000000000000 [ 182.441325][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.441335][ T6901] R13: 00007f668fa76128 R14: 00007f668fa76090 R15: 00007ffd0d424ee8 [ 182.441359][ T6901] [ 182.934085][ T38] audit: type=1326 audit(1776882025.139:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6904 comm="syz.2.265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f498e59c819 code=0x0 [ 182.936394][ T6907] netlink: 'syz.0.266': attribute type 27 has an invalid length. [ 183.270028][ T6920] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.270'. [ 183.465464][ T32] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 183.631942][ T32] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 183.631965][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.631980][ T32] usb 2-1: Product: syz [ 183.631990][ T32] usb 2-1: Manufacturer: syz [ 183.632001][ T32] usb 2-1: SerialNumber: syz [ 183.734022][ T5814] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 183.896379][ T5814] usb 4-1: Using ep0 maxpacket: 8 [ 183.910678][ T5814] usb 4-1: unable to get BOS descriptor or descriptor too short [ 183.924358][ T5814] usb 4-1: config 140 has an invalid interface number: 182 but max is 1 [ 183.924388][ T5814] usb 4-1: config 140 has no interface number 1 [ 183.924497][ T5814] usb 4-1: config 140 interface 182 has no altsetting 0 [ 183.961314][ T5814] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 183.961347][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.961448][ T5814] usb 4-1: Product: syz [ 183.961464][ T5814] usb 4-1: Manufacturer: syz [ 183.961480][ T5814] usb 4-1: SerialNumber: syz [ 184.088822][ T32] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 184.088892][ T32] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 184.268036][ T5814] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 184.831547][ T6946] binder: BINDER_SET_CONTEXT_MGR already set [ 184.831564][ T6946] binder: 6945:6946 ioctl 4018620d 200000004a80 returned -16 [ 184.931687][ T5814] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 185.286039][ T5814] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.356245][ T32] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 185.356738][ T32] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 185.357220][ T32] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 185.357274][ T32] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 185.360704][ T32] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 185.386146][ T5814] usb 4-1: device firmware changed [ 185.435299][ T32] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 185.514931][ T5814] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 185.515004][ T5814] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 185.563548][ T32] usb 2-1: USB disconnect, device number 22 [ 185.613627][ T5814] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 185.613664][ T5814] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 185.615461][ T5814] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 185.712814][ T5814] usb 4-1: USB disconnect, device number 9 [ 185.843595][ T5814] usb 4-1: [ueagle-atm] ADSL device removed [ 185.864697][ T5946] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 185.864718][ T5946] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 185.970375][ T5946] ------------[ cut here ]------------ [ 185.970386][ T5946] !atomic_read(&kn->count) [ 185.970396][ T5946] WARNING: fs/kernfs/dir.c:560 at kernfs_get+0x72/0x90, CPU#1: kworker/1:7/5946 [ 185.970465][ T5946] Modules linked in: [ 185.970487][ T5946] CPU: 1 UID: 0 PID: 5946 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 185.970516][ T5946] Tainted: [L]=SOFTLOCKUP [ 185.970524][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.970539][ T5946] Workqueue: events request_firmware_work_func [ 185.970573][ T5946] RIP: 0010:kernfs_get+0x72/0x90 [ 185.970593][ T5946] Code: e8 93 7b 5c ff 48 89 df be 04 00 00 00 e8 f6 f6 c5 ff f0 ff 03 eb 05 e8 7c 7b 5c ff 5b 5d c3 cc cc cc cc cc e8 6f 7b 5c ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 f5 [ 185.970607][ T5946] RSP: 0018:ffffc9000546f6c0 EFLAGS: 00010293 [ 185.970622][ T5946] RAX: ffffffff826886c1 RBX: ffff888035e643c0 RCX: ffff88803a7f5c40 [ 185.970641][ T5946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.970650][ T5946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.970659][ T5946] R10: dffffc0000000000 R11: ffffed1006bcc879 R12: ffff88801eaeb828 [ 185.970671][ T5946] R13: 1ffff11003d5d706 R14: ffff88801eaeb830 R15: ffff88801eaeb818 [ 185.970683][ T5946] FS: 0000000000000000(0000) GS:ffff888125b5e000(0000) knlGS:0000000000000000 [ 185.970696][ T5946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.970706][ T5946] CR2: 00007f498c7d4ff8 CR3: 00000000353b2000 CR4: 00000000003526f0 [ 185.970720][ T5946] Call Trace: [ 185.970727][ T5946] [ 185.970736][ T5946] kobject_add_internal+0x6c4/0xd10 [ 185.970768][ T5946] kobject_add+0x163/0x240 [ 185.970794][ T5946] ? __pfx_kobject_add+0x10/0x10 [ 185.970820][ T5946] ? kobject_init+0x83/0x1e0 [ 185.970844][ T5946] get_device_parent+0x31d/0x3a0 [ 185.970873][ T5946] device_add+0x2e1/0xbb0 [ 185.970937][ T5946] firmware_fallback_sysfs+0x2e4/0xa30 [ 185.970964][ T5946] ? kfree+0x1c5/0x6c0 [ 185.970989][ T5946] _request_firmware+0x1052/0x1780 [ 185.971024][ T5946] ? __pfx__request_firmware+0x10/0x10 [ 185.971047][ T5946] ? process_one_work+0x8b7/0x1710 [ 185.971064][ T5946] ? process_one_work+0x8b7/0x1710 [ 185.971083][ T5946] request_firmware_work_func+0xaf/0x1c0 [ 185.971110][ T5946] ? process_one_work+0x8b7/0x1710 [ 185.971125][ T5946] process_one_work+0x9a3/0x1710 [ 185.971159][ T5946] ? __pfx_process_one_work+0x10/0x10 [ 185.971174][ T5946] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.971204][ T5946] worker_thread+0xba8/0x11e0 [ 185.971229][ T5946] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 185.971251][ T5946] ? __kthread_parkme+0x7a/0x1f0 [ 185.971269][ T5946] ? __kthread_parkme+0x19c/0x1f0 [ 185.971292][ T5946] kthread+0x388/0x470 [ 185.971318][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 185.971334][ T5946] ? __pfx_kthread+0x10/0x10 [ 185.971356][ T5946] ret_from_fork+0x514/0xb70 [ 185.971375][ T5946] ? __pfx_ret_from_fork+0x10/0x10 [ 185.971393][ T5946] ? __switch_to+0xc79/0x1410 [ 185.971419][ T5946] ? __pfx_kthread+0x10/0x10 [ 185.971441][ T5946] ret_from_fork_asm+0x1a/0x30 [ 185.971474][ T5946] [ 185.971482][ T5946] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 185.971495][ T5946] CPU: 1 UID: 0 PID: 5946 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 185.971515][ T5946] Tainted: [L]=SOFTLOCKUP [ 185.971521][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.971531][ T5946] Workqueue: events request_firmware_work_func [ 185.971553][ T5946] Call Trace: [ 185.971559][ T5946] [ 185.971565][ T5946] vpanic+0x56c/0xa60 [ 185.971614][ T5946] ? __pfx__printk+0x10/0x10 [ 185.971646][ T5946] ? __pfx_vpanic+0x10/0x10 [ 185.971672][ T5946] ? is_bpf_text_address+0x292/0x2b0 [ 185.971707][ T5946] ? is_bpf_text_address+0x26/0x2b0 [ 185.971734][ T5946] panic+0xc5/0xd0 [ 185.971753][ T5946] ? __pfx_panic+0x10/0x10 [ 185.971780][ T5946] ? ret_from_fork_asm+0x1a/0x30 [ 185.971804][ T5946] __warn+0x315/0x4c0 [ 185.971827][ T5946] ? kernfs_get+0x72/0x90 [ 185.971848][ T5946] ? kernfs_get+0x72/0x90 [ 185.971869][ T5946] __report_bug+0x29a/0x540 [ 185.971887][ T5946] ? lockdep_hardirqs_on+0x7a/0x110 [ 185.971915][ T5946] ? kernfs_get+0x72/0x90 [ 185.971935][ T5946] ? __pfx___report_bug+0x10/0x10 [ 185.971953][ T5946] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 185.971982][ T5946] ? lockdep_hardirqs_on+0x7a/0x110 [ 185.972000][ T5946] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 185.972022][ T5946] ? kernfs_get+0x72/0x90 [ 185.972041][ T5946] report_bug+0x16a/0x220 [ 185.972064][ T5946] ? kernfs_get+0x72/0x90 [ 185.972082][ T5946] ? kernfs_get+0x74/0x90 [ 185.972101][ T5946] handle_bug+0x9c/0x200 [ 185.972124][ T5946] exc_invalid_op+0x1a/0x50 [ 185.972146][ T5946] asm_exc_invalid_op+0x1a/0x20 [ 185.972163][ T5946] RIP: 0010:kernfs_get+0x72/0x90 [ 185.972182][ T5946] Code: e8 93 7b 5c ff 48 89 df be 04 00 00 00 e8 f6 f6 c5 ff f0 ff 03 eb 05 e8 7c 7b 5c ff 5b 5d c3 cc cc cc cc cc e8 6f 7b 5c ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 f5 [ 185.972195][ T5946] RSP: 0018:ffffc9000546f6c0 EFLAGS: 00010293 [ 185.972207][ T5946] RAX: ffffffff826886c1 RBX: ffff888035e643c0 RCX: ffff88803a7f5c40 [ 185.972219][ T5946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.972228][ T5946] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.972236][ T5946] R10: dffffc0000000000 R11: ffffed1006bcc879 R12: ffff88801eaeb828 [ 185.972248][ T5946] R13: 1ffff11003d5d706 R14: ffff88801eaeb830 R15: ffff88801eaeb818 [ 185.972266][ T5946] ? kernfs_get+0x71/0x90 [ 185.972290][ T5946] kobject_add_internal+0x6c4/0xd10 [ 185.972318][ T5946] kobject_add+0x163/0x240 [ 185.972343][ T5946] ? __pfx_kobject_add+0x10/0x10 [ 185.972368][ T5946] ? kobject_init+0x83/0x1e0 [ 185.972412][ T5946] get_device_parent+0x31d/0x3a0 [ 185.972441][ T5946] device_add+0x2e1/0xbb0 [ 185.972468][ T5946] firmware_fallback_sysfs+0x2e4/0xa30 [ 185.972495][ T5946] ? kfree+0x1c5/0x6c0 [ 185.972522][ T5946] _request_firmware+0x1052/0x1780 [ 185.972557][ T5946] ? __pfx__request_firmware+0x10/0x10 [ 185.972580][ T5946] ? process_one_work+0x8b7/0x1710 [ 185.972597][ T5946] ? process_one_work+0x8b7/0x1710 [ 185.972616][ T5946] request_firmware_work_func+0xaf/0x1c0 [ 185.972643][ T5946] ? process_one_work+0x8b7/0x1710 [ 185.972659][ T5946] process_one_work+0x9a3/0x1710 [ 185.972690][ T5946] ? __pfx_process_one_work+0x10/0x10 [ 185.972705][ T5946] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.972760][ T5946] worker_thread+0xba8/0x11e0 [ 185.972795][ T5946] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 185.972825][ T5946] ? __kthread_parkme+0x7a/0x1f0 [ 185.972855][ T5946] ? __kthread_parkme+0x19c/0x1f0 [ 185.972878][ T5946] kthread+0x388/0x470 [ 185.972904][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 185.972920][ T5946] ? __pfx_kthread+0x10/0x10 [ 185.972942][ T5946] ret_from_fork+0x514/0xb70 [ 185.972962][ T5946] ? __pfx_ret_from_fork+0x10/0x10 [ 185.972979][ T5946] ? __switch_to+0xc79/0x1410 [ 185.973006][ T5946] ? __pfx_kthread+0x10/0x10 [ 185.973028][ T5946] ret_from_fork_asm+0x1a/0x30 [ 185.973081][ T5946] [ 185.973833][ T5946] Kernel Offset: disabled