last executing test programs: 7.012870021s ago: executing program 1 (id=580): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) 6.826394401s ago: executing program 1 (id=582): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r1, 0x400, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f0000000440)=0x6e, 0x800) recvmmsg$unix(r4, &(0x7f00000049c0)=[{{&(0x7f0000000540), 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000000780)=""/85, 0x55}, {&(0x7f0000000800)=""/86, 0x56}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/75, 0x4b}, {&(0x7f0000001b40)=""/111, 0x6f}], 0x7, &(0x7f0000001c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000001d80)=""/204, 0xcc}, {&(0x7f0000001e80)=""/170, 0xaa}, {&(0x7f0000001f40)=""/30, 0x1e}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/207, 0xcf}, {&(0x7f0000003240)=""/185, 0xb9}, {&(0x7f0000003300)=""/141, 0x8d}], 0x7, &(0x7f0000003440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000003480)=@abs, 0x6e, &(0x7f0000004600)=[{&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/110, 0x6e}, {&(0x7f0000004580)=""/78, 0x4e}], 0x3, &(0x7f0000004640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000004680)=@abs, 0x6e, &(0x7f0000004840)=[{&(0x7f0000004700)=""/100, 0x64}, {&(0x7f0000004780)=""/132, 0x84}], 0x2, &(0x7f0000004880)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}], 0x4, 0x141, &(0x7f0000004ac0)) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000000"], 0x14}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073"], 0xb0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000080)="00000810", 0x4) recvmmsg(r5, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r9, @ANYBLOB=',group_id=', @ANYRESHEX=r8]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) 6.612269638s ago: executing program 1 (id=584): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x103, 0xb3cf, 0x35314258, 0x0, 0x4, [{0x6}, {0x9, 0x5}, {0x0, 0x20001}, {0x8, 0x9}, {0x3, 0xb68e}, {0x80000003, 0x7ff}, {0x3, 0x1}, {0x3}], 0x9, 0x82, 0x7, 0x2, 0x3}}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000540)={0x40, 0x9}, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001fc0)=ANY=[@ANYRESDEC=r1], 0x224}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r4 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0xa9525000) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000000)={0x3, r3, 0x1}) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5.20844918s ago: executing program 3 (id=590): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) 5.130154693s ago: executing program 3 (id=591): socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f00000012c0), 0x0, 0x820000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r8, r6, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x1f, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0x180, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x1, 0x4, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) 4.451870535s ago: executing program 2 (id=594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x37, 0x1, 0x0}, &(0x7f0000000000)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) 4.370593828s ago: executing program 0 (id=595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0xf5ff}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 4.100478211s ago: executing program 0 (id=596): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x80010, r2, 0x15b77000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x21d0, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) recvfrom(r1, 0x0, 0x22, 0x2120, 0x0, 0xfffffffffffffdb6) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000000)="10b260157612abe9f34ade27c1ab4bface4fcebf92f1cdd230f4afffc046688f", 0x20) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x40, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0x6, 0x2a, [@ssid]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, r5, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x52}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x14f}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xaa, 0xac, "51a4fdec96f31fb11c41de032f18874d752171079596022bb73309bb0f5e2c47bf7849530e607d76baa6c6414c4d1b4f2336ac44b1f90931c1b1eff8330cc519a6e2df58ee96621448d312239d47a8b548d2d8bd955d79588028af30a61feb20af0f4e929655a619e1b6bf89f35fa1afef026cc6ab4885a95f729b891d41b0a5690fe941868cae8dd712b2a2922be62b19c69f0162adc3c9afbeee5d4bb6fbbc05a1f529e573"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xf}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0xec}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 4.041603331s ago: executing program 2 (id=597): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48015}, 0x0) 3.858617083s ago: executing program 2 (id=598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)={0x38, r1, 0x209, 0x70bd2b, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x38}}, 0x0) (fail_nth: 3) 3.574376102s ago: executing program 2 (id=599): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) 3.426834391s ago: executing program 2 (id=600): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0xcf7a}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x7, 0x500, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9d0d}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf8c}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44004}, 0x8000) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x19d8, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x19b8, 0x3, 0x0, 0x1, [{0x14d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}, @NFTA_SET_ELEM_DATA={0x1dc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfa, 0x1, "4013fc563ec28463ea0e7e5766c9bdc53b86271101a34a4feb63b6cd44875cc446555f4ec9574cb584fd89ddb79af09206050f822911587013e49a9571c0a0628121cd78f59bb2eabb7b29e9e0c180ad186c5b776509c521bb060e693f8215a6937742924f9efc03df1983370941326d041bb1d853b614e45d9207271a28d056b1213601237dddcbc70c6be9ee9bced173fbb8e5a0cfc487ec328799c7eb395485ecc5d20a3d357a2dc236e029cea0d705f41c53972cde5295fbc6fed11cb0455d904b02cc04f182f3a7b4d4848d4ce2ae78742ed5e63bb22e991366d3feb21ebf5d72fa9cd795f42811b6d1d9996e8ddd238fbcced0"}, @NFTA_DATA_VALUE={0xd9, 0x1, "6b9466cd51bc12f095e9dbef45ff640de726fb0c20e246d53c46d735bc8b1fb23abbe953759a9ea2d42583a298244629ba30d73f917914351bb6666c503800338b84e555f01f0e45ae87b8fc2dcd21a7d3b2576e20b36f20852f99db1a5e3b093d98f30dd4714857c95511e1eb4bdddc0f7a02081de716619d0d97ed8aecc8eadca46d7d0ad6b2b532c8383d6259d1458984a24359f62f6a604a18f0d3187e278b83041e2473dafd4ebc81f610147542d9ee0539e1910c0fcef4a407efe6d38fe73413fa5bf89e4d91f109d24cbea3bbc3f8f74c3f"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY_END={0x12c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "bbcb7d1c96aedbfac805e742023f2f80f7e59c5647f4d0813357c3d2263e46dc1a9e888d0d4ba898821c0aaee30a9283e999b5a1d2fa5d2f94fc8249fb14a5fd45a11822646b3e495d7c36e0b8e9c21bea13ca8084cd37738219"}, @NFTA_DATA_VALUE={0x4f, 0x1, "21fdef430529e62364276f24051235d46bfc015fe80c311d8a80eb400713dd3cfc1f7eb5c5ee9498b023235caecbf88321721dddd119a118160cd0f104a5d6666453e5bde4934fa96e7551"}, @NFTA_DATA_VALUE={0x8, 0x1, "704f0cf9"}, @NFTA_DATA_VALUE={0x42, 0x1, "270cdf38b68d347ede3570d769daa371903c33d43dc8e541d92bb2f73e0ff0e03af01acb2f780939b8598dfb858a0eb1372be8c079108fc2350160e3ba85"}, @NFTA_DATA_VALUE={0xbd, 0x1, "f749f4c9b5c4c5aea618bb9e757bb0b6916b719c57b5053bb81e57c1b613d401b2755fba07eaaec2213e464758bb012d8cdb7fac6fb40857c97ac8f247f4ba3f4f0f084cf05dbc4ed2ca329e576f7eb73e218ccbd3533babd0c371b252961e561354eb4656046a222792905f07627f87671842a4c2f55d9806d7d447f4549eed5033a6063ef7dc1a068fd2d8b59618f5c987dafb8d30c8f6b280c784c16946b88270e95cfa823e96aceec8c202ba3ce239c035986f4286d6a8"}, @NFTA_DATA_VALUE={0xa, 0x1, "11fbf18398da"}, @NFTA_DATA_VALUE={0x1004, 0x1, "eb8de48dd549cb027757cc3aa9b8fbe7b34084e03bc3239b75280e3ead5336ad3e712cfaec17ed1cc4fcb151da3bd5a27ff5943de0c5df2eed51caaa6418130b70b99274ab66db5f3fff39a9b38c459eba9bd08bb666f21cceaf76ed201045c11cfd2fad5144ec5c9d96bd12a885d0aa6e3e96416a08798bf3c070bf151638868c074ebd6920b3f0ce5f8043779775a3d6ba19d8d973099fa862812e3574d5abb4b491c69f4df8f0418e4ad4ec567e56628545a95ca206a1d0b20e9ef51a23e2832afee722d7e9e948d939540bae02121cd3ca3b153a6aa0fc5ff86e11542fb6a73daa2c62a3963a69e1c7b9b219c647a38a8df4880436af789e9828aa3bcf10c2e5c5bbdb7cf8f3e280e6c11c070b7b1bf2a0c2c9d26849b83d4661d35adc1f43620b7d645c3640794642b057c360079f42160260516bd3d9a88f00fb48b127dd6d16bc16e4362f3ae7af30c6650652337c99cb2b389b593e746f10128e30b72ef6cfa5c97f4c33f6f9616e2b2f0126fc0c17fadcca4d2514f724b997329482e19a2757bb7b983bc0f520537a9b49d768365808b4b2147da693252ee990531418526ad06a44e5a6f65e67bde754cb9761c889937814acb2f72c3d0cf62a9dc6af1e8773353721b21184bb666770e3162977e53e3731df36d9a5958726d5e0a1698b52817a37c635744f9ba43fd4c6e1093e5c003fb68edc906e4beae145aa254f060a155ca047db726efb312f820f17041784b30b0e23ff32d95d00c7abdae331b10b968b51ad63d6e8053d14532160e0ada8c400d446933bfb85d85c458b22095a7ef93c218603421c2f66a89be691d9637327b80867ce09cae62cbb5640f1df17096f14f73b13b10baf19c90d75e3f7b3d70a69ec1bc15b04370fc162dd3f9728060412cae61221c548fff56cd4137776d8071d9ba9868d8a9f856c8ea7ba90fbab036f9012537ddf3cd9bb2f2e0db0e9de21365c61b3556d4c88ce2d15e7959075dbd864704949b53ee591c7d50c054560f27cafc215728244d07da0f7701d78354e5eea22ae9659e90d1e9c78b75b83642bf484d76f97f67ed118147f7a969a04fb4d38a6d06bdb433740609b0dab94b066b76242188d810df14c5264934203fea78af5f76cd86c2d68afc9bdf6b7fbed21d0f5f2aac3cf5717924309c99e8bd90a67960fb07402b537f2228d2fad974e07fe72d0ffa2db44daa178aba9779e1e4ea4b0fc4a4ff08b0233c6d15be480d9d3427c40f351f86d8373a52cb94603303b679f2d94089db48ed321697d81ae2b67557d9ec0bbb1c64348a694b2808d32eeec54cae46e3dbb66ea72e0da3629c6d73c0bea51c8edf04f67ebe65c047f8ea7a0828f57acb7db78b7cf5311f4ac8b51a6258a85406e6fd5182649b7a62c9d1c6d14ea820b93d6bf6cc7775fa77681ea017368c841bb88d29d71b1910ac653cf70d92acdceffb36525e4ace143202e7c10faea9efca8e73a62de264b2c3207e69dd914539c48e7746230698d0b274136d8692bd1126ef3543e8f6a2782097c6758972b67fa5e7496ec58251207fa8c19c0f6739f1fc0ec967c9c48dc35b8acaaa7454e426e9d0d745cb190b0c0fc51295cc8af2f23acf153ad0daa020df0166525efe016dc573681d695060d67efc73110ad3368908d7611d45f4473d700a76789dc81e1dceb186fdf2e376e15f4b5ebf75422d3ae546977bc2a64c0f14099dbce771f9c5c7806b95cddcfde10db89f793bb43eb5ce4c79dda950eea3afbb09d1b8c38ac4b896d6442ed39c12d7f34bab7179b780dab19424d1381085b5279f07a14c7e5a87d944301cc7f617ae8e7892bd18c803b1a8881923acc4172b8fc06e1814434533a8e790137ea2b918c24839560ef87d6e119641559a086064076a021fa18c12afb7b12f1b747c6aae73570eb2f07c35d78308cab6cd2bcad0cf6da5167c6de7a63f82df618a9f371e61e630dea5ddbc37b8f59c7c045d2b3bfa3dc1e5434889b5115a01c6b0461fdfb11e75a1899a4e6346ec8c5e05ea49841f92ec71f5ea86b45c46834628ef10a2507a6d959db23bd21c5bae88ad7af0d3342599bf39e72c43a569d3e8d864840cb14db580e6b7095cafb795e899715e14117f097c14f4c8910729abe441290996563051bba4cf45d11cdb50ad69fba4f606d210e81fb09b5c91103b42eedb731222ab6fb646690d298cdfc2fe82983e00990870cbb29383817934050e54cc0edfd0aa22c6b0785a2c30fa69f4bee91582ea8929880e2fa1baca0852b8cb947fc872a781389c3597cb3cd1984a248518cfeb6a54916fdd6c310dd5571574d15dcdb8907d43c05c287629d5b0b1d63d52579ccbc3d213efa24abf0f289304e50faf5f57b46492546f68ea653308792876b7a626a7f867f93035aca5a20ebf3659e245aba243abf7e6858dc41057c3fc4aab7d0afeb289c4ac1ca95226c783b97ab5f5d9f214b22c21eb58d04aae8909339563039ca392548c7cb4cd20e6597fe04a872279eca29e0d9ff2247fa02b7e99041ccece19c9b29df7580ace44244b4ae044b65753155aa5d1f40cd2e18eedff8cafdf82e1a01c308d85229d9fec6395f6a00234350a6851cffb46dd55fd086bc9e9b262e6417520e10275194d90c1c108de960a933f8f0a634eeee98ad94159a7677a48ddb6e6bd711f7cfe50304c33a7388e277d69739f04b9270903d98bfced8e16a89187159fd15db9f93f648f4624afd621c2ca914db3d10054b2ab75490719516765e0b504172a0970a784d3d6ea0ea4e9a864adc0b33e776c7f3a7a07295feac21eb193ae16185d25aae6fb1aac81add99490360c551245de2b14bee564e3b7cf455d3be143456aa6faf4a8e8e4a3d8b5263dd0c7c369411b26d092f40fed73a47fd7294259e6856aa88f4c20f98e7a646bdc0584aa52f6837bbf152e8f15de75914a419e5b4bc7e5bb4612eaa0ca656079a8b968d0452b0b37114a87b765b98e4939c30968f9a72b2e7ef6aeb1fa4b7e07b587564dcc5312833935b7c7eaef8e1a53caeb9b737a31c8665c637c52c7309f36b4004a40d27b80f87e5cccafb949da10ecf50838be355dcfd86bdd87a0dd6909d131c0dbc7bea8287a1230bdd95e2ff27c4c07cc33c910572b4dcbae9a99f39b787040f8c243a53c9d93b24463465985c0dede98858cd1409847cfb9cd3e927aea09c7fbc91efbe84942a778558ffd844280bb543ae8d310145e44cca81c6199cca4cba8787320236b508f1b5bc12d1f6e1664791b4fda6d2a8549bb9fc75067bdbec01e06dd2ea4d9e79e047d3cee2088222e0c79be172539db145917e327cd7c2cf73b86767eb479a85db46708f2de25262d9d661154b6f1850ed9efa630e73762fb8d7947569d180abb70c86537ba438ebe589a9746de8425fc7e3242a375099cdf98466bb0b655d9135bd5a8e0ab6741956cee6257e48e64fcded3ee444262bcf04f160422663b92559fea972eee2ac24435e5054f79e982e0c6b86c9dbefcdf9af6a5ce9261b0d2a545f77840ea58f99fbdf72283e17034dc407be0bfdd14d598059199566d4d75c5e6625ec5a81abb6781e508838b3e6df27d9a184a9ec20661cba8fd8448691b7796241dfd16ade3ded5292ff803fa555f2404f435cae02144dbd58a8a447453d5347dbe78e415c3c72d43b1c419bf86794bde11cd142cdd3463daa4d2c61aaececc285d4063aebf7261d2816b179d6e4c26698d46d395f88f6eb89ce1f7ab0172828e6f7d6a29914980f811d6a2be118935d524414d3efdd1b4ec06566bfd134bdae3d39ce51354d8978e01a1c390f69378bc5f519a144786b0782573927c35dab66d2d18174bcba6a76a44831904ed9c910de24cb634789e9758784e8531b16dd054d2c0589a984305287e24eec52d257c7696bef4ea933a6229781af23e4ce4858a45f19cc21d1e463aff693ec91b0d76c3cb5896e9db872f309d210dad6f2bcbdbba1ac6dad9c29584c954bf8624ca123027b97596eeec9128de6c95a7bca9b27a6e7a06a9ceb9da68b6db128c340da273102952fdddcf903c4f9a1d6c66fececbdba61f94e8316f5cbdb4e7245f6b76d889f71d187a67fae502a4d6682c8997f7869cb4e9fa61aaae82fa1c8cf4bd0249ded72b18f9bf406e16c6a08a5c160662b344c96f6d0a4b72f33b8037017c53be1b9109121a806f0dfcc62b7beebafa81bf2d76c031d4fcc1dcdc75277b1fca5c9e145f7a47592feec0d1ab13c06e54f645ac9034e2c1293eaf56d2bb3e2fa012f847c9f56a209970d9247ab7e8890b2567421646800028d4816ca9673b1bb873de986459c25c345a6d5594d11eaae81de2a983692e117c3480171a808e35d4386979079665c07854173b05823b6ab18a7112026f26acd3b3acbfdcda73fd15932a3b8edc31c44b63bf141898522a600138b8340e655fa498bfdac87b6ed488e7166a6815f6b3ea5cd0f61e02abf59f84d59094f0e74f811add06af2bb7408e9c2d518cd62ed6372528d76e6062393ab0b2c2ecfee016f302323076270397f4283fd771a693d0e4f045c9562ef5dd94b10e8f3fc8848c62e069146399c8151477c882b36f5f909d89a3c48776aa0d9e29c9f83de0b3d84141c5639fbcacf643894782eb9e16a7ad3f850b43e5f7091373afdd6b2eddf1beab12acc5715b61355a7701566dcd30784e5823d8ef31e178e59be5e4300069c678ed866a826dbfb8da6aa8edfbf7c579f4830548cbfe5e8ab6f8c203afe97ae8e689060022a7b7e15839760ca5a988d64bdeaefe29bf09876b94c70d9bfa880f4adceded3395d8ee3b69df921f95949031b9bd7837a72ab042f1dd4531d89c38b3a1808c32ccbe25c73e4b2783dd88686f8772be6bc579cafd0633fb4b80093eedf04b63a27e04ac4aea15c0cabe7053429c4f9cdd25d253cfce4f7c69d7f32d92a52cedb59a7ca61ea81b97aa207f6175954f7c8013601cab147d6cbdc0fa4f2083c0517c23ac477d00f50137900446680865fdfbc2a36906de00f24898621a906b153255525ac73f04b8ef75af4d0fbb614e18b42c55e2e477fdd19842ca02551acd5b540efc4e16f9eb503b892058875a88aa3ae0c2b5fe76faddd0cd10f4194b55c076fb9e71730ec2c76dd072fbb20b03bde8aba2ed589a5fbc8cb5c25d57a878063935777d5603f910cff82ed26ca061cf0bee8de6d0e4ed38c03101c91058d44e067d7b5329bc0973bb0240f04feea712c7ad8e48a6d940aa4e20a14c152f644d2268eb1ce52895003d1fdb7cfe0218d3c5ccee05d4f32e24262a6319132d64cafbb1beb97a3a3655731dc2500e98b32f99ab29f17baf4d1c8ef9b19a4e7c446b33d0a1fc39fca1439b84082f77f7f220b3b55e6d0a3fedf3f14e930678988e9cf183b6cb98de5fa786297d525069c1443822f70bc5be447163f2122d78cfc4d7d0c940ddab773b6d2128d053b6299243f551ad26080f37dc1403da621dfafa354731244bfd715298e4786a5089149f3bc7800f12115069e1956f8f1e0e6ec0751949e10d6459f0bd89bd3e00a57b7167381abe6d194be8291129bea7bfe31ae43cbb97584179d2e93085aaf64c2591903c54f8325bebcfa95d35eb377945eed9ba8f9ed6822cd5f643c6f6fd1ab41d8e0c3be046a1bc26210ab51f2649dbef4c799ebb197fa4954db9babaa4d2d0a5ac622671f1bb477f783e1f5675f19f24f5fc47d0f13fc6d6d0ea07621111b12aa030ad9b9f027df7fcd3a4c2f61fb36b949eb851a9571ff0b8b261a1e5a2b8355bb2c"}, @NFTA_DATA_VALUE={0xaf, 0x1, "98f89571ff78d5776dea4d905b3e145fe91d36387c2b83c44eb30d5ebf218d3e92e2b7800d7767b1e77a1991a270d106f7c285a427a83e8e5f7fa9a3b19fe63ab3146830abbae56e49e12474e16da3fef90d26f3a8f4c7784a17f2cd585523b890043bf831b72d6c5663458d56704ac23b2418245f2388d45d4ff6185cf4c57a3b65189b431a1e6188bcac67b312ea33d79d021ad427d03c7856d6ce770d1e952ac16245ea592ba46c373b"}]}]}, {0x254, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb3, 0x1, "7758c0e6ced657ecb73dafda71eac19ed899bbdb4bb3a7a8f0f9654a8a1eca37a8087ca707114f19b437730860e5d091bba80b7977e250cbf11b108389721517cce26ac753416d3158ab5031783311d618d51c0c04dcdd751d955a8baace11208a654b500fdc4f8537da204072360158d3d1fe8936c7f7d364ae008c9972ec3d60e935a14f101be0f3ec2daf910ea69beb6330969a5f9c4ae98e3647ce28f17852e1cfc6b4ba3e1a30fe7fa4414584"}, @NFTA_DATA_VALUE={0xf, 0x1, "f6cb1d0a765acbdb6cc270"}]}, @NFTA_SET_ELEM_KEY_END={0x134, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "b19b1cff09f374af1121fd5878d6e086055b688ec43726c7c325102a4a076c4ebf8986e2b5e040a88f9626c3cedc888da1bd55b9ce78510b00c963ddb31b2edd19dba5d85a8b3e5578f63389930387bdd2dc7daf4cda09928f309d61b8bd1e7dc5a648f633ea7541db12c3f8dd0804014303c6aa3646e35e7257f65b34acdb3736ff4e18b1054d3be4145502b542335731bce9060bbe3c133e09ad1fe3269ed87453ac29036990f9923ee3ef120a9ed8829d18edc27dc3e6db01d917df50e4ce881df2e1439d275cf1134655d6add0682bf2b6db12fb57bcfefd8f3b20b8"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x158, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x50, 0x1, "78e323fad16f9d3e1a261979c0737d2b008359894aab8a731b95568b7f4a444ddd2d12b20fd547aa30aecc42c7396ba4413b97ad4568ca0d3832fc1a505718bb07fd831d3c70c058cff25f13"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xa, 0x1, "9220a875c716"}, @NFTA_DATA_VALUE={0xa1, 0x1, "a454fe2fc075230f4f73ec9b3a6be9cd643c6d25d902723d309da58734690047c5367a66f06cc5c1744ba2735144c2485444ddef354a1b52b928fea93aecd00edfcd56f0dbf7c442ae43dc190ebe595e91688a0d2d99c705e3509eff36d0363913b2bd6a7fe8e22e3326ecffdc09e7e12675f40e899a11d018796c44fa4405df2bf68fc147347e0d6c20f1bf82d2c7e34aa6b2383f112fce1da11550ad"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffffffffcc66}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x22, 0x1, "895ec03de31248688f1a1c83fe32f2dbd363f476e3531c4eee1c61032bc9"}]}, @NFTA_SET_ELEM_KEY_END={0x40, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7000000}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1a00}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) 3.392092374s ago: executing program 0 (id=601): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0x0, 0x6f, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xb, 0x5, 0xc4}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x9, 0xfa}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xff, 0x6, 0x0, 0x10, 0x81}, 0x43, &(0x7f00000001c0)={0x5, 0xf, 0x43, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x1}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x8, 0xf0f, 0xe6b2, [0xff00c0, 0xf, 0xff000f, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0xe, 0x2051}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "dad936ef6f482a76bd5c0ada098499b1"}]}, 0x8, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x411}}, {0xa0, &(0x7f0000000380)=ANY=[@ANYBLOB="a003aab816600de0e8fba59a15652a10a8bcbadd55b224b7b957cdf17a6cbac34269137bc581e4dc73e7143689fa27cb545901d8c4a21af78067e8dcc41983c2e465e625469deceeae0aeb957806b359568bab0b428264318e7448f6f19533adf0a210d4150fe11927a308280d1471be760250b9feceeda5c1d2f0d3e3ddb504666862caf4eac0c5da07f4281c4bc6ad2b2a6efbc6a63bc17e92f740868c6f60"]}, {0x45, &(0x7f0000000440)=@string={0x45, 0x3, "b66b673f2d01231ed224b88266fae6cfe3bffb22ba8108f6148c2c6ddd817fe1b4be347c873e4a926fe7f94a9edb12c62b9dd37cdfc91065bf268947fb2abd402e60d1"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x70, &(0x7f0000000540)=@string={0x70, 0x3, "89fe4dc269b89101123673b41518f8becae65371549369cec5aa3c7ee784aceb87e9824ef287c4e47ff6ab61b47e61c1ffa7d0de0ae320a51f01ddb5e35765f4e04e5e89f100646afe8b27ce1aa96e1c1fd057f5f44ad360a8ca604e886a3f38a34d51d31043aa6c1834f2f4dd83"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x804}}]}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.164264458s ago: executing program 3 (id=602): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120008000000000904"], 0x0) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)={0x6, 0x0, [{0x31d, 0x0, 0x6}, {0x8d6, 0x0, 0x7}, {0x3f1, 0x0, 0x5}, {0xb6a, 0x0, 0x5}, {0xcdc, 0x0, 0x6}, {0xb84, 0x0, 0x7ff}]}) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="08000000000000000000000000000000010000000500010000000000"], 0x1c}}, 0x8001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0xa4) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0]) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0xb1}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x38, r6, 0xd55319eec59dfa33, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x20082090) 2.118181695s ago: executing program 1 (id=603): setpriority(0x1, 0xffffffffffffffff, 0x3) r0 = syz_ublk_setup_io_uring(0x1a64, &(0x7f0000000340)={0x0, 0x2, 0x400, 0x2, 0x1e5}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34ff0000", @ANYRES16=r4, @ANYBLOB="010029bd7000beffffff0200000008000300", @ANYRES32=r6, @ANYRESHEX=0x0], 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_FUTEX_WAITV={0x35, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[{0x1, 0x0, 0x2}], 0x1, 0x0, 0x1}) socket$inet(0x2, 0x80000, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000500050000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_GET_SYSNAME(r11, 0x8040552c, 0x0) r12 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x90000) fsmount(r12, 0x0, 0x5) 1.302175286s ago: executing program 0 (id=604): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x14, r2, 0x701, 0x76bd2b, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004070}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x200, "7476524e4bee4fd108358919032d3daf8049de06fc7cd8fc1ea1bc412ad1e35a", 0xffffffffffffffff}) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10, 0x0}, 0x41) splice(r6, &(0x7f0000000180)=0x3, r7, &(0x7f0000000340)=0x10, 0xcc77, 0x5) 964.458565ms ago: executing program 3 (id=605): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x30, 0x3, 0x0, 0x0, 0x63, 0x0, 0x64, 0x66]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba30001000000000000bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa000000ffffffffffff"}, 0x48, 0xfffffffffffffffe) 963.674528ms ago: executing program 1 (id=606): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1, 0x0, 0x0, 0xfe80}}], 0x1, 0x4c040) 769.765126ms ago: executing program 1 (id=607): openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r7, r6, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0xfffffffd, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x199}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10f00, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x10, 0x0, 0x90, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 756.874002ms ago: executing program 3 (id=608): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) 624.281146ms ago: executing program 0 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x11) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000480), 0x2, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getgroups(0x0, &(0x7f0000000100)) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x800, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0xc0, 0x0, 0x1de}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x18d, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000500)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, r7, '\x00', {0xfff9, 0x6, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) setfsgid(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r13 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) close(0x3) r14 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r14, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r14, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB="2c776664066f3d", @ANYRESHEX=r13, @ANYBLOB=',\x00']) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r11, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f00000016c0)={&(0x7f00000006c0)=""/4096, 0x1000, 0x81, 0x7fff}) 542.585353ms ago: executing program 2 (id=610): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x110, r0, 0xb7ffd000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00001ea000/0x400000)=nil) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x854bc6e, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000080)={0x6, 'ipvlan1\x00', {0x3}, 0x4}) 451.961889ms ago: executing program 3 (id=611): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x7ffb) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 0s ago: executing program 0 (id=612): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0x0, 0x6f, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xb, 0x5, 0xc4}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x9, 0xfa}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xff, 0x6, 0x0, 0x10, 0x81}, 0x43, &(0x7f00000001c0)={0x5, 0xf, 0x43, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x1}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x8, 0xf0f, 0xe6b2, [0xff00c0, 0xf, 0xff000f, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0xe, 0x2051}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "dad936ef6f482a76bd5c0ada098499b1"}]}, 0x8, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x411}}, {0xa0, &(0x7f0000000380)=ANY=[@ANYBLOB="a003aab816600de0e8fba59a15652a10a8bcbadd55b224b7b957cdf17a6cbac34269137bc581e4dc73e7143689fa27cb545901d8c4a21af78067e8dcc41983c2e465e625469deceeae0aeb957806b359568bab0b428264318e7448f6f19533adf0a210d4150fe11927a308280d1471be760250b9feceeda5c1d2f0d3e3ddb504666862caf4eac0c5da07f4281c4bc6ad2b2a6efbc6a63bc17e92f740868c6f60"]}, {0x45, &(0x7f0000000440)=@string={0x45, 0x3, "b66b673f2d01231ed224b88266fae6cfe3bffb22ba8108f6148c2c6ddd817fe1b4be347c873e4a926fe7f94a9edb12c62b9dd37cdfc91065bf268947fb2abd402e60d1"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x70, &(0x7f0000000540)=@string={0x70, 0x3, "89fe4dc269b89101123673b41518f8becae65371549369cec5aa3c7ee784aceb87e9824ef287c4e47ff6ab61b47e61c1ffa7d0de0ae320a51f01ddb5e35765f4e04e5e89f100646afe8b27ce1aa96e1c1fd057f5f44ad360a8ca604e886a3f38a34d51d31043aa6c1834f2f4dd83"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x804}}]}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): [ 153.371364][ T6511] __anon_inode_getfile+0x129/0x210 [ 153.371401][ T6511] io_uring_create+0x595/0x9a0 [ 153.371443][ T6511] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 153.371475][ T6511] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 153.371499][ T6511] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 153.371546][ T6511] ? __pfx_ksys_write+0x10/0x10 [ 153.371596][ T6511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.371636][ T6511] do_syscall_64+0x174/0x580 [ 153.371669][ T6511] ? trace_irq_disable+0x3b/0x140 [ 153.371704][ T6511] ? clear_bhb_loop+0x40/0x90 [ 153.371733][ T6511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.371760][ T6511] RIP: 0033:0x7fd750efce59 [ 153.371781][ T6511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.371800][ T6511] RSP: 002b:00007fd74f14dee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 153.371823][ T6511] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007fd750efce59 [ 153.371841][ T6511] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000e2a [ 153.371856][ T6511] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 153.371872][ T6511] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 153.371887][ T6511] R13: 0000200000000890 R14: 00007fd74f14dfd8 R15: 0000000000000000 [ 153.371921][ T6511] [ 153.473236][ T6513] netlink: 'syz.3.196': attribute type 27 has an invalid length. [ 153.716423][ T6517] capability: warning: `syz.3.196' uses deprecated v2 capabilities in a way that may be insecure [ 153.772231][ T5620] Bluetooth: hci1: hcon ffff8880395a0000 sent 1 < count 9 [ 153.935837][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802c27b000: rx timeout, send abort [ 153.936476][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802c27b000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 154.175203][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 154.338868][ T9] usb 1-1: device descriptor read/64, error -71 [ 154.350351][ T5790] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 154.484074][ T5790] usb 2-1: device descriptor read/64, error -71 [ 154.584087][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 154.715516][ T9] usb 1-1: device descriptor read/64, error -71 [ 154.739836][ T5790] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.824238][ T9] usb usb1-port1: attempt power cycle [ 154.903883][ T5790] usb 2-1: device descriptor read/64, error -71 [ 155.017866][ T5790] usb usb2-port1: attempt power cycle [ 155.176537][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 155.194689][ T9] usb 1-1: device descriptor read/8, error -71 [ 155.373968][ T5790] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.399651][ T5790] usb 2-1: device descriptor read/8, error -71 [ 155.434281][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 155.456838][ T9] usb 1-1: device descriptor read/8, error -71 [ 155.564048][ T9] usb usb1-port1: unable to enumerate USB device [ 155.643741][ T5790] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.665802][ T5714] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 155.666194][ T5790] usb 2-1: device descriptor read/8, error -71 [ 155.784693][ T5790] usb usb2-port1: unable to enumerate USB device [ 155.813974][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 155.822548][ T5714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.822587][ T5714] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 155.822615][ T5714] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 155.822641][ T5714] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.843700][ T5714] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.843732][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.843755][ T5714] usb 4-1: SerialNumber: syz [ 155.902792][ T6544] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 155.902924][ T6544] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 155.927553][ T5714] hub 4-1:1.0: bad descriptor, ignoring hub [ 155.927593][ T5714] hub 4-1:1.0: probe with driver hub failed with error -5 [ 156.116683][ T6544] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 156.116881][ T6544] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 156.323246][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.327335][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.436836][ T5714] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 156.483507][ T5714] usb 4-1: USB disconnect, device number 9 [ 156.885592][ T6552] FAULT_INJECTION: forcing a failure. [ 156.885592][ T6552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.885634][ T6552] CPU: 0 UID: 0 PID: 6552 Comm: syz.0.209 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 156.885657][ T6552] Tainted: [L]=SOFTLOCKUP [ 156.885662][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.885672][ T6552] Call Trace: [ 156.885678][ T6552] [ 156.885684][ T6552] dump_stack_lvl+0xe8/0x150 [ 156.885709][ T6552] should_fail_ex+0x46b/0x600 [ 156.885736][ T6552] _copy_from_user+0x2d/0xb0 [ 156.885755][ T6552] input_event_from_user+0xb1/0x290 [ 156.885773][ T6552] ? __pfx_input_event_from_user+0x10/0x10 [ 156.885795][ T6552] ? rt_spin_unlock+0x160/0x200 [ 156.885813][ T6552] evdev_write+0x2ca/0x4c0 [ 156.885828][ T6552] ? __lock_acquire+0x6b5/0x2d10 [ 156.885852][ T6552] ? __pfx_evdev_write+0x10/0x10 [ 156.885872][ T6552] ? rw_verify_area+0x25b/0x4e0 [ 156.885891][ T6552] ? __pfx_evdev_write+0x10/0x10 [ 156.885907][ T6552] vfs_write+0x2a3/0xba0 [ 156.885933][ T6552] ? __pfx_vfs_write+0x10/0x10 [ 156.885953][ T6552] ? __fget_files+0x2a/0x420 [ 156.885971][ T6552] ? __fget_files+0x2a/0x420 [ 156.885986][ T6552] ? __fget_files+0x3a6/0x420 [ 156.886001][ T6552] ? __fget_files+0x2a/0x420 [ 156.886023][ T6552] ksys_write+0x156/0x270 [ 156.886044][ T6552] ? __pfx_ksys_write+0x10/0x10 [ 156.886069][ T6552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.886087][ T6552] do_syscall_64+0x174/0x580 [ 156.886107][ T6552] ? trace_irq_disable+0x3b/0x140 [ 156.886126][ T6552] ? clear_bhb_loop+0x40/0x90 [ 156.886146][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.886162][ T6552] RIP: 0033:0x7fd750efce59 [ 156.886176][ T6552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.886189][ T6552] RSP: 002b:00007fd74f14e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.886205][ T6552] RAX: ffffffffffffffda RBX: 00007fd751175fa0 RCX: 00007fd750efce59 [ 156.886217][ T6552] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000005 [ 156.886227][ T6552] RBP: 00007fd74f14e090 R08: 0000000000000000 R09: 0000000000000000 [ 156.886237][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.886246][ T6552] R13: 00007fd751176038 R14: 00007fd751175fa0 R15: 00007ffdce9fcf58 [ 156.886270][ T6552] [ 157.513358][ T5714] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 157.653257][ T5714] usb 4-1: device descriptor read/64, error -71 [ 157.893353][ T5714] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 157.900173][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804f4bac00: rx timeout, send abort [ 157.900919][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804f4bac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 158.023363][ T5714] usb 4-1: device descriptor read/64, error -71 [ 158.123111][ T5790] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 158.141311][ T5714] usb usb4-port1: attempt power cycle [ 158.253094][ T5790] usb 1-1: device descriptor read/64, error -71 [ 158.483189][ T5714] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 158.503152][ T5790] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 158.507181][ T5714] usb 4-1: device descriptor read/8, error -71 [ 158.565589][ T6579] netlink: 'syz.1.220': attribute type 4 has an invalid length. [ 158.565606][ T6579] netlink: 152 bytes leftover after parsing attributes in process `syz.1.220'. [ 158.643208][ T5790] usb 1-1: device descriptor read/64, error -71 [ 158.683183][ T37] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 158.763343][ T5790] usb usb1-port1: attempt power cycle [ 158.775155][ T5714] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 158.796053][ T5714] usb 4-1: device descriptor read/8, error -71 [ 158.872967][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 158.875102][ T37] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.875139][ T37] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 158.875166][ T37] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 158.875191][ T37] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 158.876763][ T37] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.876793][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 158.876815][ T37] usb 3-1: SerialNumber: syz [ 158.939580][ T5714] usb usb4-port1: unable to enumerate USB device [ 158.969580][ T6577] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 158.969706][ T6577] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 158.993524][ T37] hub 3-1:1.0: bad descriptor, ignoring hub [ 158.993560][ T37] hub 3-1:1.0: probe with driver hub failed with error -5 [ 159.123122][ T5790] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 159.144390][ T5790] usb 1-1: device descriptor read/8, error -71 [ 159.178471][ T6577] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 159.178655][ T6577] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 159.380827][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.381529][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.434470][ T5790] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 159.467579][ T5620] Bluetooth: Unexpected continuation frame (len 98) [ 159.470397][ T5790] usb 1-1: device descriptor read/8, error -71 [ 159.509153][ T37] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 159.564317][ T37] usb 3-1: USB disconnect, device number 12 [ 159.599397][ T5790] usb usb1-port1: unable to enumerate USB device [ 160.072302][ T6593] netlink: 244 bytes leftover after parsing attributes in process `syz.2.227'. [ 161.047450][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804e944000: rx timeout, send abort [ 161.047818][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804e944000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.262429][ T5703] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 162.423333][ T5703] usb 4-1: Using ep0 maxpacket: 16 [ 162.429670][ T5703] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.429711][ T5703] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 162.429738][ T5703] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 162.429763][ T5703] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 162.451020][ T5703] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.451053][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.451075][ T5703] usb 4-1: SerialNumber: syz [ 162.496327][ T6598] kexec: Could not allocate control_code_buffer [ 162.528872][ T6619] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.529014][ T6619] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.564935][ T5703] hub 4-1:1.0: bad descriptor, ignoring hub [ 162.564976][ T5703] hub 4-1:1.0: probe with driver hub failed with error -5 [ 162.749140][ T6619] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.749317][ T6619] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.985933][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.986575][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.053931][ T5790] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 163.162665][ T5703] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 163.196184][ T5790] usb 3-1: device descriptor read/64, error -71 [ 163.216437][ T5703] usb 4-1: USB disconnect, device number 14 [ 163.432464][ T5790] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 163.572041][ T5790] usb 3-1: device descriptor read/64, error -71 [ 163.682291][ T5790] usb usb3-port1: attempt power cycle [ 163.832079][ T37] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 163.991912][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 163.999306][ T37] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 163.999338][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.999353][ T37] usb 1-1: Product: syz [ 163.999364][ T37] usb 1-1: Manufacturer: syz [ 163.999374][ T37] usb 1-1: SerialNumber: syz [ 164.029658][ T37] usb 1-1: config 0 descriptor?? [ 164.041982][ T5790] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 164.079398][ T5790] usb 3-1: device descriptor read/8, error -71 [ 164.100188][ T37] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 164.148931][ T37] usb 1-1: Detected FT-X [ 164.333284][ T5790] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 164.353817][ T5790] usb 3-1: device descriptor read/8, error -71 [ 164.406570][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805eea5000: rx timeout, send abort [ 164.406893][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805eea5000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 164.472404][ T5790] usb usb3-port1: unable to enumerate USB device [ 164.654620][ T6650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.655400][ T6650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.882292][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 165.041854][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 165.044459][ T10] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 165.044524][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 165.044554][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 165.044582][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 165.048996][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 165.049026][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.049049][ T10] usb 2-1: Product: syz [ 165.049065][ T10] usb 2-1: Manufacturer: syz [ 165.049089][ T10] usb 2-1: SerialNumber: syz [ 165.105452][ T10] usb 2-1: config 0 descriptor?? [ 165.426125][ T10] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 165.440632][ T10] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 165.487539][ T10] usb 2-1: USB disconnect, device number 10 [ 166.531628][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 166.634261][ T37] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 166.634749][ T37] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 166.637236][ T37] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 166.662990][ T37] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 166.683873][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 166.688342][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 166.688371][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.722613][ T37] usb 1-1: USB disconnect, device number 23 [ 166.767768][ T10] usb 2-1: config 0 descriptor?? [ 166.823152][ T37] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 166.824448][ T37] ftdi_sio 1-1:0.0: device disconnected [ 166.978454][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 167.118353][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.120085][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 167.120165][ T10] usb 2-1: media controller created [ 167.348895][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.460472][ T6680] FAULT_INJECTION: forcing a failure. [ 167.460472][ T6680] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 167.460502][ T6680] CPU: 0 UID: 0 PID: 6680 Comm: syz.2.256 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 167.460525][ T6680] Tainted: [L]=SOFTLOCKUP [ 167.460530][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.460540][ T6680] Call Trace: [ 167.460546][ T6680] [ 167.460553][ T6680] dump_stack_lvl+0xe8/0x150 [ 167.460577][ T6680] should_fail_ex+0x46b/0x600 [ 167.460604][ T6680] prepare_alloc_pages+0x22a/0x6b0 [ 167.460628][ T6680] __alloc_frozen_pages_noprof+0x12f/0x380 [ 167.460650][ T6680] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 167.460680][ T6680] __alloc_pages_noprof+0x10/0x100 [ 167.460705][ T6680] alloc_pages_bulk_noprof+0x67e/0x890 [ 167.460726][ T6680] ? copy_splice_read+0x16f/0xab0 [ 167.460742][ T6680] ? copy_splice_read+0x16f/0xab0 [ 167.460763][ T6680] copy_splice_read+0x19f/0xab0 [ 167.460789][ T6680] ? __pfx_copy_splice_read+0x10/0x10 [ 167.460809][ T6680] ? register_lock_class+0x31/0x2e0 [ 167.460833][ T6680] ? file_end_write+0xdb/0x250 [ 167.460852][ T6680] ? direct_splice_actor+0x10f/0x160 [ 167.460871][ T6680] ? __pfx_copy_splice_read+0x10/0x10 [ 167.460887][ T6680] splice_direct_to_actor+0x483/0xc80 [ 167.460912][ T6680] ? __pfx_direct_splice_actor+0x10/0x10 [ 167.460936][ T6680] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 167.460961][ T6680] do_splice_direct+0x19b/0x2a0 [ 167.460981][ T6680] ? __pfx_do_splice_direct+0x10/0x10 [ 167.461001][ T6680] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 167.461025][ T6680] ? rw_verify_area+0x25b/0x4e0 [ 167.461046][ T6680] do_sendfile+0x547/0x7e0 [ 167.461102][ T6680] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 167.461138][ T6680] ? __pfx_do_sendfile+0x10/0x10 [ 167.461186][ T6680] __se_sys_sendfile64+0x144/0x1a0 [ 167.461229][ T6680] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 167.461259][ T6680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.461277][ T6680] do_syscall_64+0x174/0x580 [ 167.461297][ T6680] ? trace_irq_disable+0x3b/0x140 [ 167.461317][ T6680] ? clear_bhb_loop+0x40/0x90 [ 167.461336][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.461353][ T6680] RIP: 0033:0x7f6c743dce59 [ 167.461367][ T6680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.461380][ T6680] RSP: 002b:00007f6c7262e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 167.461397][ T6680] RAX: ffffffffffffffda RBX: 00007f6c74655fa0 RCX: 00007f6c743dce59 [ 167.461408][ T6680] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 167.461417][ T6680] RBP: 00007f6c7262e090 R08: 0000000000000000 R09: 0000000000000000 [ 167.461427][ T6680] R10: 7fffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 167.461437][ T6680] R13: 00007f6c74656038 R14: 00007f6c74655fa0 R15: 00007ffe9c627408 [ 167.461460][ T6680] [ 168.071103][ T5790] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 168.191271][ T5776] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 168.216232][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802e9eb000: rx timeout, send abort [ 168.216473][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802e9eb000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 168.231103][ T5790] usb 4-1: Using ep0 maxpacket: 16 [ 168.289296][ T5790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.289353][ T5790] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 168.318754][ T5790] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.318777][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 168.318808][ T5790] usb 4-1: SerialNumber: syz [ 168.371900][ T5776] usb 3-1: Using ep0 maxpacket: 32 [ 168.372305][ T5790] hub 4-1:1.0: bad descriptor, ignoring hub [ 168.372355][ T5790] hub 4-1:1.0: probe with driver hub failed with error -5 [ 168.417453][ T5776] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.417481][ T5776] usb 3-1: config 0 has no interfaces? [ 168.438539][ T5790] cdc_ether 4-1:1.0: missing cdc header ether descriptor [ 168.453954][ T5776] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 168.454045][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.454068][ T5776] usb 3-1: Product: syz [ 168.454084][ T5776] usb 3-1: Manufacturer: syz [ 168.454100][ T5776] usb 3-1: SerialNumber: syz [ 168.530042][ T5776] usb 3-1: config 0 descriptor?? [ 168.592089][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.592748][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.752922][ T5790] usb 3-1: USB disconnect, device number 17 [ 168.972028][ T37] usb 4-1: USB disconnect, device number 15 [ 169.212765][ T10] az6027: usb out operation failed. (-71) [ 169.212788][ T10] stb0899_attach: Driver disabled by Kconfig [ 169.212800][ T10] az6027: no front-end attached [ 169.212800][ T10] [ 169.213221][ T10] az6027: usb out operation failed. (-71) [ 169.213236][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 169.277619][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 169.351467][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 169.351492][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 169.370195][ T10] usb 2-1: USB disconnect, device number 11 [ 169.771004][ T5703] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 169.922556][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 169.967208][ T5703] usb 3-1: config 1 has an invalid interface number: 5 but max is 2 [ 169.967239][ T5703] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 169.967261][ T5703] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 169.967284][ T5703] usb 3-1: config 1 has no interface number 3 [ 169.967369][ T5703] usb 3-1: config 1 interface 5 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 169.967411][ T5703] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.967553][ T5703] usb 3-1: config 1 interface 5 has no altsetting 0 [ 169.988746][ T5703] usb 3-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice= 0.40 [ 169.989056][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.989118][ T5703] usb 3-1: Product: syz [ 169.989165][ T5703] usb 3-1: Manufacturer: syz [ 169.989201][ T5703] usb 3-1: SerialNumber: syz [ 170.265586][ T6708] syzkaller1: entered promiscuous mode [ 170.265613][ T6708] syzkaller1: entered allmulticast mode [ 170.358128][ T5703] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 170.406575][ T6712] netlink: 516 bytes leftover after parsing attributes in process `syz.3.266'. [ 170.480021][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 170.560550][ T5703] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 170.602104][ T5703] snd-usb-audio 3-1:1.5: probe with driver snd-usb-audio failed with error -22 [ 170.849822][ T5703] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 170.864877][ T5703] usb 3-1: USB disconnect, device number 18 [ 170.873309][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 170.929564][ T6720] smc: net device hsr0 applied user defined pnetid SYZ2 [ 170.938789][ T6720] netlink: 44 bytes leftover after parsing attributes in process `syz.2.268'. [ 171.002390][ T10] usb 2-1: device descriptor read/64, error -71 [ 171.006543][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.241069][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 171.371068][ T10] usb 2-1: device descriptor read/64, error -71 [ 171.481563][ T10] usb usb2-port1: attempt power cycle [ 171.590992][ T5623] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 171.750943][ T5623] usb 3-1: Using ep0 maxpacket: 8 [ 171.753911][ T5623] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.753965][ T5623] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.753996][ T5623] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.756437][ T5623] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 171.756471][ T5623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.756486][ T5623] usb 3-1: Product: syz [ 171.756496][ T5623] usb 3-1: Manufacturer: syz [ 171.756507][ T5623] usb 3-1: SerialNumber: syz [ 171.829590][ T5623] usb 3-1: config 0 descriptor?? [ 171.849265][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 171.861774][ T10] usb 2-1: device descriptor read/8, error -71 [ 171.865800][ T5623] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 171.900725][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888036958400: rx timeout, send abort [ 171.902049][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888036958400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.042700][ T6732] syzkaller1: entered promiscuous mode [ 172.042726][ T6732] syzkaller1: entered allmulticast mode [ 172.067196][ T5623] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 172.067631][ T5623] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 172.069367][ T5623] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 172.101014][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 172.125871][ T10] usb 2-1: device descriptor read/8, error -71 [ 172.232747][ T10] usb usb2-port1: unable to enumerate USB device [ 172.288524][ T10] usb 3-1: USB disconnect, device number 19 [ 172.740970][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 172.867058][ T6745] FAULT_INJECTION: forcing a failure. [ 172.867058][ T6745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.867087][ T6745] CPU: 0 UID: 0 PID: 6745 Comm: syz.2.279 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 172.867109][ T6745] Tainted: [L]=SOFTLOCKUP [ 172.867115][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.867124][ T6745] Call Trace: [ 172.867130][ T6745] [ 172.867136][ T6745] dump_stack_lvl+0xe8/0x150 [ 172.867160][ T6745] should_fail_ex+0x46b/0x600 [ 172.867187][ T6745] _copy_from_user+0x2d/0xb0 [ 172.867205][ T6745] copy_folio_from_user+0x1e3/0x320 [ 172.867226][ T6745] mfill_atomic_copy+0xf37/0x15b0 [ 172.867270][ T6745] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 172.867310][ T6745] userfaultfd_ioctl+0x257a/0x86c0 [ 172.867336][ T6745] ? stack_depot_save_flags+0x33/0x810 [ 172.867363][ T6745] ? kasan_save_track+0x4f/0x80 [ 172.867377][ T6745] ? kasan_save_track+0x3e/0x80 [ 172.867390][ T6745] ? kasan_save_free_info+0x46/0x50 [ 172.867411][ T6745] ? __kasan_slab_free+0x5c/0x80 [ 172.867426][ T6745] ? kfree+0x1c5/0x6c0 [ 172.867447][ T6745] ? tomoyo_path_number_perm+0x501/0x630 [ 172.867471][ T6745] ? security_file_ioctl+0xc3/0x2a0 [ 172.867493][ T6745] ? __se_sys_ioctl+0x47/0x170 [ 172.867513][ T6745] ? do_syscall_64+0x174/0x580 [ 172.867533][ T6745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.867551][ T6745] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 172.867597][ T6745] ? kasan_quarantine_put+0xbb/0x1f0 [ 172.867628][ T6745] ? tomoyo_path_number_perm+0x219/0x630 [ 172.867658][ T6745] ? do_vfs_ioctl+0x117b/0x1540 [ 172.867681][ T6745] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 172.867726][ T6745] ? __fget_files+0x2a/0x420 [ 172.867744][ T6745] ? __fget_files+0x2a/0x420 [ 172.867759][ T6745] ? __fget_files+0x3a6/0x420 [ 172.867774][ T6745] ? __fget_files+0x2a/0x420 [ 172.867792][ T6745] ? bpf_lsm_file_ioctl+0x9/0x20 [ 172.867811][ T6745] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 172.867831][ T6745] __se_sys_ioctl+0xff/0x170 [ 172.867852][ T6745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.867869][ T6745] do_syscall_64+0x174/0x580 [ 172.867888][ T6745] ? trace_irq_disable+0x3b/0x140 [ 172.867909][ T6745] ? clear_bhb_loop+0x40/0x90 [ 172.867928][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.867944][ T6745] RIP: 0033:0x7f6c743dce59 [ 172.867959][ T6745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.867972][ T6745] RSP: 002b:00007f6c7262e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.867988][ T6745] RAX: ffffffffffffffda RBX: 00007f6c74655fa0 RCX: 00007f6c743dce59 [ 172.868000][ T6745] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 172.868010][ T6745] RBP: 00007f6c7262e090 R08: 0000000000000000 R09: 0000000000000000 [ 172.868020][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.868030][ T6745] R13: 00007f6c74656038 R14: 00007f6c74655fa0 R15: 00007ffe9c627408 [ 172.868054][ T6745] [ 172.891038][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 172.891771][ T5703] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 172.964647][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 172.964728][ T10] usb 4-1: config 0 has no interface number 0 [ 172.966301][ T10] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 172.966380][ T10] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.966445][ T10] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 172.966520][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 173.022924][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 173.022956][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.022978][ T10] usb 4-1: Product: syz [ 173.022993][ T10] usb 4-1: Manufacturer: syz [ 173.023009][ T10] usb 4-1: SerialNumber: syz [ 173.285690][ T10] usb 4-1: config 0 descriptor?? [ 173.287195][ T6738] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.308968][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 173.309011][ T5703] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 173.309037][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.405173][ T5703] usb 1-1: config 0 descriptor?? [ 173.617707][ T5623] hid (null): invalid report_count 746579510 [ 173.617733][ T5623] hid (null): global environment stack underflow [ 173.618664][ T5623] hid (null): unknown global tag 0xe [ 173.651562][ T5703] usbhid 1-1:0.0: can't add hid device: -71 [ 173.651854][ T5703] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 173.691117][ T10] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 173.691375][ T10] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 173.725609][ T5623] hid-generic 093A:8000:0008.0001: invalid report_count 746579510 [ 173.725634][ T5623] hid-generic 093A:8000:0008.0001: item 0 4 1 9 parsing failed [ 173.726642][ T5623] hid-generic 093A:8000:0008.0001: probe with driver hid-generic failed with error -22 [ 173.801663][ T5703] usb 1-1: USB disconnect, device number 24 [ 174.098932][ T6755] syzkaller1: entered promiscuous mode [ 174.098953][ T6755] syzkaller1: entered allmulticast mode [ 174.284743][ T6759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.366843][ T6763] FAULT_INJECTION: forcing a failure. [ 174.366843][ T6763] name failslab, interval 1, probability 0, space 0, times 0 [ 174.366872][ T6763] CPU: 0 UID: 0 PID: 6763 Comm: syz.0.285 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 174.366894][ T6763] Tainted: [L]=SOFTLOCKUP [ 174.366900][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.366909][ T6763] Call Trace: [ 174.366915][ T6763] [ 174.366922][ T6763] dump_stack_lvl+0xe8/0x150 [ 174.366951][ T6763] should_fail_ex+0x46b/0x600 [ 174.366978][ T6763] should_failslab+0xa8/0x100 [ 174.366997][ T6763] __kmalloc_node_track_caller_noprof+0xfe/0x820 [ 174.367015][ T6763] ? lockdep_hardirqs_on+0x7a/0x110 [ 174.367036][ T6763] ? vfs_parse_monolithic_sep+0x21d/0x360 [ 174.367055][ T6763] ? vfs_parse_monolithic_sep+0x21d/0x360 [ 174.367079][ T6763] kmemdup_nul+0x36/0xf0 [ 174.367102][ T6763] vfs_parse_monolithic_sep+0x21d/0x360 [ 174.367122][ T6763] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 174.367142][ T6763] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 174.367167][ T6763] ? alloc_fs_context+0x9e9/0xd50 [ 174.367195][ T6763] do_new_mount+0x304/0xd30 [ 174.367210][ T6763] ? apparmor_capable+0x126/0x170 [ 174.367233][ T6763] ? security_capable+0x7e/0x2c0 [ 174.367262][ T6763] ? __pfx_do_new_mount+0x10/0x10 [ 174.367277][ T6763] ? ns_capable+0x89/0xe0 [ 174.367307][ T6763] ? path_mount+0x690/0x10e0 [ 174.367325][ T6763] ? user_path_at+0xd4/0x160 [ 174.367346][ T6763] ? user_path_at+0xd4/0x160 [ 174.367365][ T6763] __se_sys_mount+0x31d/0x420 [ 174.367385][ T6763] ? __pfx___se_sys_mount+0x10/0x10 [ 174.367405][ T6763] ? __x64_sys_mount+0x20/0xc0 [ 174.367420][ T6763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.367437][ T6763] do_syscall_64+0x174/0x580 [ 174.367457][ T6763] ? trace_irq_disable+0x3b/0x140 [ 174.367477][ T6763] ? clear_bhb_loop+0x40/0x90 [ 174.367497][ T6763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.367512][ T6763] RIP: 0033:0x7fd750efce59 [ 174.367526][ T6763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.367539][ T6763] RSP: 002b:00007fd74f14e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 174.367556][ T6763] RAX: ffffffffffffffda RBX: 00007fd751175fa0 RCX: 00007fd750efce59 [ 174.367567][ T6763] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 174.367577][ T6763] RBP: 00007fd74f14e090 R08: 0000200000002140 R09: 0000000000000000 [ 174.367588][ T6763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.367597][ T6763] R13: 00007fd751176038 R14: 00007fd751175fa0 R15: 00007ffdce9fcf58 [ 174.367620][ T6763] [ 175.050739][ T6773] comedi: No check for data length of config insn id 5 is implemented [ 175.050758][ T6773] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 175.050772][ T6773] comedi: Assuming n=4734 is correct [ 175.277575][ T6777] FAULT_INJECTION: forcing a failure. [ 175.277575][ T6777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.277607][ T6777] CPU: 0 UID: 0 PID: 6777 Comm: syz.1.292 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 175.277631][ T6777] Tainted: [L]=SOFTLOCKUP [ 175.277637][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.277648][ T6777] Call Trace: [ 175.277654][ T6777] [ 175.277662][ T6777] dump_stack_lvl+0xe8/0x150 [ 175.277688][ T6777] should_fail_ex+0x46b/0x600 [ 175.277722][ T6777] _copy_from_user+0x2d/0xb0 [ 175.277743][ T6777] get_user_ifreq+0x6b/0x180 [ 175.277772][ T6777] sock_ioctl+0x707/0x7f0 [ 175.277802][ T6777] ? __pfx_sock_ioctl+0x10/0x10 [ 175.277832][ T6777] ? __fget_files+0x3a6/0x420 [ 175.277898][ T6777] ? __fget_files+0x2a/0x420 [ 175.277919][ T6777] ? bpf_lsm_file_ioctl+0x9/0x20 [ 175.277942][ T6777] ? __pfx_sock_ioctl+0x10/0x10 [ 175.277969][ T6777] __se_sys_ioctl+0xff/0x170 [ 175.277993][ T6777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.278012][ T6777] do_syscall_64+0x174/0x580 [ 175.278056][ T6777] ? trace_irq_disable+0x3b/0x140 [ 175.278084][ T6777] ? clear_bhb_loop+0x40/0x90 [ 175.278134][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.278156][ T6777] RIP: 0033:0x7f88c97cce59 [ 175.278175][ T6777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.278193][ T6777] RSP: 002b:00007f88c7a1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.278215][ T6777] RAX: ffffffffffffffda RBX: 00007f88c9a45fa0 RCX: 00007f88c97cce59 [ 175.278231][ T6777] RDX: 0000200000000000 RSI: 00000000000089f3 RDI: 0000000000000004 [ 175.278245][ T6777] RBP: 00007f88c7a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 175.278257][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.278268][ T6777] R13: 00007f88c9a46038 R14: 00007f88c9a45fa0 R15: 00007ffea2f64288 [ 175.278298][ T6777] [ 175.278396][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804f5b4400: rx timeout, send abort [ 175.278914][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804f5b4400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 175.326545][ T5790] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 175.624013][ T5790] usb 1-1: Using ep0 maxpacket: 8 [ 175.626738][ T5790] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 175.626764][ T5790] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 175.626782][ T5790] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.626800][ T5790] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.626830][ T5790] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.626847][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.913493][ T5790] usb 1-1: GET_CAPABILITIES returned 0 [ 175.913544][ T5790] usbtmc 1-1:16.0: can't read capabilities [ 176.018369][ T6791] FAULT_INJECTION: forcing a failure. [ 176.018369][ T6791] name failslab, interval 1, probability 0, space 0, times 0 [ 176.018407][ T6791] CPU: 0 UID: 0 PID: 6791 Comm: syz.2.296 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 176.018437][ T6791] Tainted: [L]=SOFTLOCKUP [ 176.018444][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 176.018456][ T6791] Call Trace: [ 176.018464][ T6791] [ 176.018473][ T6791] dump_stack_lvl+0xe8/0x150 [ 176.018501][ T6791] should_fail_ex+0x46b/0x600 [ 176.018538][ T6791] should_failslab+0xa8/0x100 [ 176.018564][ T6791] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 176.018603][ T6791] ? skb_clone+0x212/0x3a0 [ 176.018626][ T6791] ? skb_clone+0x212/0x3a0 [ 176.018659][ T6791] skb_clone+0x212/0x3a0 [ 176.018691][ T6791] __netlink_deliver_tap+0x424/0x8b0 [ 176.018730][ T6791] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.018760][ T6791] netlink_deliver_tap+0x19c/0x1b0 [ 176.018789][ T6791] netlink_unicast+0x754/0x920 [ 176.018824][ T6791] netlink_sendmsg+0x813/0xb40 [ 176.018871][ T6791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.018909][ T6791] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 176.018943][ T6791] ? aa_sock_msg_perm+0x122/0x200 [ 176.018966][ T6791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.018994][ T6791] sock_sendmsg_nosec+0x13a/0x180 [ 176.019032][ T6791] ____sys_sendmsg+0x55c/0x870 [ 176.019065][ T6791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.019104][ T6791] ? import_iovec+0x73/0xa0 [ 176.019132][ T6791] ___sys_sendmsg+0x2a5/0x360 [ 176.019159][ T6791] ? __lock_acquire+0x6b5/0x2d10 [ 176.019193][ T6791] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.019257][ T6791] ? __fget_files+0x2a/0x420 [ 176.019279][ T6791] ? __fget_files+0x3a6/0x420 [ 176.019313][ T6791] __x64_sys_sendmsg+0x1b7/0x290 [ 176.019345][ T6791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.019395][ T6791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.019420][ T6791] do_syscall_64+0x174/0x580 [ 176.019447][ T6791] ? trace_irq_disable+0x3b/0x140 [ 176.019474][ T6791] ? clear_bhb_loop+0x40/0x90 [ 176.019502][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.019525][ T6791] RIP: 0033:0x7f6c743dce59 [ 176.019546][ T6791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.019564][ T6791] RSP: 002b:00007f6c7262e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.019588][ T6791] RAX: ffffffffffffffda RBX: 00007f6c74655fa0 RCX: 00007f6c743dce59 [ 176.019604][ T6791] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 176.019618][ T6791] RBP: 00007f6c7262e090 R08: 0000000000000000 R09: 0000000000000000 [ 176.019630][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.019643][ T6791] R13: 00007f6c74656038 R14: 00007f6c74655fa0 R15: 00007ffe9c627408 [ 176.019677][ T6791] [ 176.054737][ T5623] usb 4-1: USB disconnect, device number 16 [ 176.076620][ T6788] syzkaller1: entered promiscuous mode [ 176.076696][ T6788] syzkaller1: entered allmulticast mode [ 176.442845][ T5790] usb 1-1: USB disconnect, device number 25 [ 176.911139][ T5623] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 177.070991][ T5623] usb 4-1: Using ep0 maxpacket: 8 [ 177.088528][ T5623] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.088561][ T5623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.088584][ T5623] usb 4-1: Product: syz [ 177.088599][ T5623] usb 4-1: Manufacturer: syz [ 177.088615][ T5623] usb 4-1: SerialNumber: syz [ 177.359703][ T5623] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 177.377467][ T5623] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 177.467468][ T5623] usb 4-1: USB disconnect, device number 17 [ 177.612749][ T6238] udevd[6238]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.200229][ T6837] syzkaller1: left promiscuous mode [ 178.200256][ T6837] syzkaller1: left allmulticast mode [ 178.223172][ T6837] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.306'. [ 178.308103][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803b8d5c00: rx timeout, send abort [ 178.308374][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803b8d5c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 178.379448][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 178.999574][ T6856] netlink: 'syz.2.314': attribute type 2 has an invalid length. [ 179.082604][ T6858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.316'. [ 179.696230][ T5703] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 179.842371][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 179.852539][ T5703] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.855951][ T5703] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 179.855981][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.856003][ T5703] usb 3-1: Product: syz [ 179.856019][ T5703] usb 3-1: Manufacturer: syz [ 179.856034][ T5703] usb 3-1: SerialNumber: syz [ 179.922079][ T5703] usb 3-1: config 0 descriptor?? [ 179.949530][ T5703] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 179.949675][ T5703] usb 3-1: selecting invalid altsetting 1 [ 180.125392][ T5703] gspca_stk014: init reg: 0x00 [ 180.125487][ T5703] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 180.328376][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 180.383553][ T6879] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.430948][ T5703] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 180.525373][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888032b20400: rx timeout, send abort [ 180.525901][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888032b20400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 180.630934][ T5703] usb 2-1: Using ep0 maxpacket: 8 [ 180.634302][ T5703] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.634330][ T5703] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.682375][ T5703] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 180.682408][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.682431][ T5703] usb 2-1: Product: syz [ 180.682448][ T5703] usb 2-1: Manufacturer: syz [ 180.682464][ T5703] usb 2-1: SerialNumber: syz [ 180.742565][ T5703] usb 2-1: config 0 descriptor?? [ 181.077857][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.078501][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.149423][ T10] usb 3-1: USB disconnect, device number 20 [ 181.190971][ T5623] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 181.205916][ T6897] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 181.274819][ T6897] kvm: pic: non byte read [ 181.275131][ T6897] kvm: pic: non byte read [ 181.275812][ T6897] kvm: pic: non byte read [ 181.285515][ T6897] kvm: pic: non byte read [ 181.315608][ T6897] kvm: pic: single mode not supported [ 181.315844][ T6897] kvm: pic: level sensitive irq not supported [ 181.316064][ T6897] kvm: pic: non byte read [ 181.316506][ T6897] kvm: pic: non byte read [ 181.316871][ T6897] kvm: pic: non byte read [ 181.371009][ T5623] usb 4-1: Using ep0 maxpacket: 32 [ 181.373752][ T5623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.373783][ T5623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.373818][ T5623] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.373842][ T5623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.427600][ T5623] usb 4-1: config 0 descriptor?? [ 181.488486][ T5623] hub 4-1:0.0: USB hub found [ 181.649438][ T5623] hub 4-1:0.0: 1 port detected [ 182.278008][ T6895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.279562][ T6895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.298735][ T5790] hub 4-1:0.0: activate --> -90 [ 183.219438][ T37] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 183.229771][ T10] usb 4-1: USB disconnect, device number 18 [ 183.253674][ T6139] usb 4-1: Failed to suspend device, error -19 [ 183.379128][ T37] usb 2-1: USB disconnect, device number 16 [ 183.936372][ T6930] FAULT_INJECTION: forcing a failure. [ 183.936372][ T6930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.936410][ T6930] CPU: 1 UID: 0 PID: 6930 Comm: syz.0.341 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 183.936439][ T6930] Tainted: [L]=SOFTLOCKUP [ 183.936447][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.936466][ T6930] Call Trace: [ 183.936474][ T6930] [ 183.936483][ T6930] dump_stack_lvl+0xe8/0x150 [ 183.936516][ T6930] should_fail_ex+0x46b/0x600 [ 183.936552][ T6930] _copy_to_user+0x31/0xb0 [ 183.936578][ T6930] video_usercopy+0xcda/0x1450 [ 183.936619][ T6930] ? __pfx___video_do_ioctl+0x10/0x10 [ 183.936655][ T6930] ? __pfx_video_usercopy+0x10/0x10 [ 183.936697][ T6930] ? __fget_files+0x2a/0x420 [ 183.936722][ T6930] ? __fget_files+0x2a/0x420 [ 183.936742][ T6930] ? __fget_files+0x3a6/0x420 [ 183.936786][ T6930] v4l2_ioctl+0x190/0x1e0 [ 183.936820][ T6930] ? __pfx_v4l2_ioctl+0x10/0x10 [ 183.936853][ T6930] __se_sys_ioctl+0xff/0x170 [ 183.936883][ T6930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.936909][ T6930] do_syscall_64+0x174/0x580 [ 183.936937][ T6930] ? trace_irq_disable+0x3b/0x140 [ 183.936965][ T6930] ? clear_bhb_loop+0x40/0x90 [ 183.936993][ T6930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.937015][ T6930] RIP: 0033:0x7fd750efce59 [ 183.937035][ T6930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.937054][ T6930] RSP: 002b:00007fd74f14e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.937077][ T6930] RAX: ffffffffffffffda RBX: 00007fd751175fa0 RCX: 00007fd750efce59 [ 183.937094][ T6930] RDX: 0000200000000180 RSI: 00000000c0285628 RDI: 0000000000000003 [ 183.937108][ T6930] RBP: 00007fd74f14e090 R08: 0000000000000000 R09: 0000000000000000 [ 183.937122][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.937139][ T6930] R13: 00007fd751176038 R14: 00007fd751175fa0 R15: 00007ffdce9fcf58 [ 183.937174][ T6930] [ 184.306959][ T6935] IPVS: set_ctl: invalid protocol: 0 172.20.20.32:20000 [ 184.335392][ T6936] gretap0: refused to change device tx_queue_len [ 184.340078][ T6936] binder: 6934:6936 ioctl c0306201 2000000003c0 returned -14 [ 184.526205][ T37] IPVS: starting estimator thread 0... [ 184.563971][ T6944] netlink: 'syz.3.347': attribute type 29 has an invalid length. [ 184.566694][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888035576000: rx timeout, send abort [ 184.566977][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888035576000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 184.588814][ T6944] netlink: 'syz.3.347': attribute type 29 has an invalid length. [ 184.651048][ T6942] IPVS: using max 7 ests per chain, 16800 per kthread [ 184.914376][ T6954] netlink: 'syz.2.351': attribute type 7 has an invalid length. [ 185.045487][ T5776] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 185.215731][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 185.215780][ T5776] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 185.215801][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.264224][ T5776] usb 1-1: config 0 descriptor?? [ 185.301307][ T6946] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.383658][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 185.532456][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 185.551137][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.551173][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 185.600963][ T10] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 185.600995][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.601017][ T10] usb 4-1: Product: syz [ 185.601252][ T10] usb 4-1: Manufacturer: syz [ 185.601271][ T10] usb 4-1: SerialNumber: syz [ 185.633240][ T10] usb 4-1: config 0 descriptor?? [ 185.773618][ T5776] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 185.773659][ T5776] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 185.773690][ T5776] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 185.773718][ T5776] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 185.773746][ T5776] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 185.773775][ T5776] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 185.773803][ T5776] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 185.773830][ T5776] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 185.773857][ T5776] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 185.773893][ T5776] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 185.822895][ T5776] logitech-djreceiver 0003:046D:C71F.0002: collection stack underflow [ 185.822928][ T5776] logitech-djreceiver 0003:046D:C71F.0002: item 0 0 0 12 parsing failed [ 185.836798][ T5776] logitech-djreceiver 0003:046D:C71F.0002: logi_dj_probe: parse failed [ 185.837210][ T5776] logitech-djreceiver 0003:046D:C71F.0002: probe with driver logitech-djreceiver failed with error -22 [ 185.976382][ T5776] usb 1-1: USB disconnect, device number 26 [ 186.245917][ T6959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.246551][ T6959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.702351][ T5776] usb 4-1: USB disconnect, device number 19 [ 187.071767][ T5717] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 187.254493][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 187.269583][ T5717] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 187.269613][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.269635][ T5717] usb 2-1: Product: syz [ 187.269651][ T5717] usb 2-1: Manufacturer: syz [ 187.269667][ T5717] usb 2-1: SerialNumber: syz [ 187.310164][ T5717] usb 2-1: config 0 descriptor?? [ 187.541756][ T5776] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 187.546895][ T5717] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 187.693130][ T5776] usb 1-1: Using ep0 maxpacket: 8 [ 187.704025][ T5776] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 187.704073][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.704096][ T5776] usb 1-1: Product: syz [ 187.704142][ T5776] usb 1-1: Manufacturer: syz [ 187.704192][ T5776] usb 1-1: SerialNumber: syz [ 187.747934][ T5776] usb 1-1: config 0 descriptor?? [ 187.971624][ T5776] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 188.784633][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.791396][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.854172][ T7025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.369'. [ 188.972938][ T5717] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 188.987775][ T5717] usb 2-1: USB disconnect, device number 17 [ 189.340999][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 189.441167][ T37] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 189.490994][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 189.493905][ T10] usb 3-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 189.493960][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 189.494234][ T10] usb 3-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 189.494260][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.575855][ T10] usb 3-1: config 0 descriptor?? [ 189.591007][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 189.620735][ T37] usb 4-1: unable to get BOS descriptor or descriptor too short [ 189.642449][ T37] usb 4-1: config 7 has an invalid interface number: 219 but max is 0 [ 189.642480][ T37] usb 4-1: config 7 has no interface number 0 [ 189.642516][ T37] usb 4-1: config 7 interface 219 has no altsetting 0 [ 189.648227][ T37] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=ed.31 [ 189.648266][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.648293][ T37] usb 4-1: Product: syz [ 189.648310][ T37] usb 4-1: Manufacturer: syz [ 189.648327][ T37] usb 4-1: SerialNumber: syz [ 189.757915][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 189.847639][ T5776] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 189.872220][ T5776] usb 1-1: USB disconnect, device number 27 [ 189.906404][ T10] usb 3-1: USB disconnect, device number 21 [ 189.970149][ T37] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 190.106300][ T37] usb 4-1: USB disconnect, device number 20 [ 190.151505][ T5623] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 190.311999][ T5623] usb 2-1: Using ep0 maxpacket: 16 [ 190.321044][ T5623] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 7 [ 190.321094][ T5623] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 210, changing to 7 [ 190.323767][ T5623] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 190.323798][ T5623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.323813][ T5623] usb 2-1: Product: ဇ [ 190.323824][ T5623] usb 2-1: Manufacturer: К [ 190.323835][ T5623] usb 2-1: SerialNumber: ﳿ [ 190.571050][ T5623] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 190.694911][ T7040] syzkaller1: entered promiscuous mode [ 190.694940][ T7040] syzkaller1: entered allmulticast mode [ 190.704944][ T5623] usb 2-1: USB disconnect, device number 18 [ 191.030682][ T7050] netlink: 'syz.3.376': attribute type 11 has an invalid length. [ 191.055798][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'. [ 191.055823][ T7051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.377'. [ 191.125966][ T7049] binder: 7048:7049 ioctl 89f8 200000000280 returned -22 [ 191.211171][ T7050] input: syz1 as /devices/virtual/input/input8 [ 192.099558][ T7068] syzkaller1: entered promiscuous mode [ 192.099586][ T7068] syzkaller1: entered allmulticast mode [ 192.281005][ T5623] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 192.401251][ T7071] team0: entered allmulticast mode [ 192.401268][ T7071] team_slave_0: entered allmulticast mode [ 192.401288][ T7071] team_slave_1: entered allmulticast mode [ 192.441091][ T5623] usb 2-1: Using ep0 maxpacket: 8 [ 192.444525][ T5623] usb 2-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 192.444605][ T5623] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 192.444652][ T5623] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 192.444678][ T5623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.499166][ T5623] usb 2-1: config 0 descriptor?? [ 192.518076][ T5623] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 192.911134][ T37] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 192.930641][ T7076] Set syz1 is full, maxelem 6117 reached [ 193.063434][ T37] usb 4-1: config 0 has no interfaces? [ 193.063532][ T37] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.063559][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.103856][ T37] usb 4-1: config 0 descriptor?? [ 193.309780][ T7078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.314581][ T7078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.425707][ T5790] usb 4-1: USB disconnect, device number 21 [ 193.997786][ T7097] random: crng reseeded on system resumption [ 194.098595][ T7100] syzkaller1: entered promiscuous mode [ 194.098623][ T7100] syzkaller1: entered allmulticast mode [ 194.131925][ T5623] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 194.293753][ T5623] usb 1-1: unable to get BOS descriptor or descriptor too short [ 194.295006][ T5623] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 194.295033][ T5623] usb 1-1: config 7 has no interface number 0 [ 194.295067][ T5623] usb 1-1: config 7 interface 128 has no altsetting 0 [ 194.299345][ T5623] usb 1-1: New USB device found, idVendor=a262, idProduct=355a, bcdDevice=f6.b7 [ 194.299374][ T5623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.299396][ T5623] usb 1-1: Product: syz [ 194.299415][ T5623] usb 1-1: Manufacturer: syz [ 194.299425][ T5623] usb 1-1: SerialNumber: syz [ 194.430915][ T5790] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 194.455458][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.455569][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.581162][ T5623] cdc_acm 1-1:7.128: Zero length descriptor references [ 194.581211][ T5623] cdc_acm 1-1:7.128: probe with driver cdc_acm failed with error -22 [ 194.604248][ T5790] usb 4-1: Using ep0 maxpacket: 16 [ 194.614845][ T5623] usb 1-1: USB disconnect, device number 28 [ 194.616355][ T5790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.616379][ T5790] usb 4-1: config 0 has no interfaces? [ 194.624218][ T5790] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.624248][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 194.624269][ T5790] usb 4-1: SerialNumber: syz [ 194.680934][ T5717] usb 2-1: USB disconnect, device number 19 [ 194.733948][ T5790] usb 4-1: config 0 descriptor?? [ 195.005422][ T7106] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 195.067109][ T5703] usb 4-1: USB disconnect, device number 22 [ 195.173085][ T7109] FAULT_INJECTION: forcing a failure. [ 195.173085][ T7109] name failslab, interval 1, probability 0, space 0, times 0 [ 195.173125][ T7109] CPU: 1 UID: 0 PID: 7109 Comm: syz.0.398 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 195.173157][ T7109] Tainted: [L]=SOFTLOCKUP [ 195.173165][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.173179][ T7109] Call Trace: [ 195.173188][ T7109] [ 195.173197][ T7109] dump_stack_lvl+0xe8/0x150 [ 195.173230][ T7109] should_fail_ex+0x46b/0x600 [ 195.173269][ T7109] should_failslab+0xa8/0x100 [ 195.173297][ T7109] __kmalloc_noprof+0xfe/0x7e0 [ 195.173319][ T7109] ? trace_kmem_cache_alloc+0x29/0xe0 [ 195.173353][ T7109] ? security_prepare_creds+0x52/0x360 [ 195.173386][ T7109] ? security_prepare_creds+0x52/0x360 [ 195.173439][ T7109] security_prepare_creds+0x52/0x360 [ 195.173478][ T7109] prepare_creds+0x57d/0x820 [ 195.173512][ T7109] copy_creds+0x10e/0xa30 [ 195.173543][ T7109] ? __raw_spin_lock_init+0x45/0x100 [ 195.173571][ T7109] copy_process+0xd31/0x42e0 [ 195.173620][ T7109] ? kstrtouint+0x6e/0xe0 [ 195.173654][ T7109] ? get_pid_task+0x20/0x1f0 [ 195.173686][ T7109] ? __pfx_copy_process+0x10/0x10 [ 195.173719][ T7109] ? get_pid_task+0x20/0x1f0 [ 195.173741][ T7109] ? get_pid_task+0x20/0x1f0 [ 195.173772][ T7109] kernel_clone+0x2d7/0x940 [ 195.173800][ T7109] ? __pfx_kernel_clone+0x10/0x10 [ 195.173819][ T7109] ? do_raw_spin_lock+0x12b/0x2f0 [ 195.173861][ T7109] __x64_sys_clone+0x1b6/0x230 [ 195.173884][ T7109] ? __pfx___x64_sys_clone+0x10/0x10 [ 195.173917][ T7109] ? __pfx_ksys_write+0x10/0x10 [ 195.173953][ T7109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.173977][ T7109] do_syscall_64+0x174/0x580 [ 195.174006][ T7109] ? trace_irq_disable+0x3b/0x140 [ 195.174034][ T7109] ? clear_bhb_loop+0x40/0x90 [ 195.174061][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.174082][ T7109] RIP: 0033:0x7fd750efce59 [ 195.174102][ T7109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.174122][ T7109] RSP: 002b:00007fd74f14dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 195.174145][ T7109] RAX: ffffffffffffffda RBX: 00007fd751175fa0 RCX: 00007fd750efce59 [ 195.174163][ T7109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 195.174176][ T7109] RBP: 00007fd74f14e090 R08: 0000000000000000 R09: 0000000000000000 [ 195.174190][ T7109] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 195.174247][ T7109] R13: 00007fd751176038 R14: 00007fd751175fa0 R15: 00007ffdce9fcf58 [ 195.174278][ T7109] [ 195.589426][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 195.991000][ T5703] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 196.034060][ T7124] comedi: No check for data length of config insn id 5 is implemented [ 196.034078][ T7124] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 196.034091][ T7124] comedi: Assuming n=4729 is correct [ 196.121114][ T5790] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 196.121545][ T5703] usb 2-1: device descriptor read/64, error -71 [ 196.296685][ T5790] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.296716][ T5790] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 196.299253][ T5790] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 196.299286][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 196.299308][ T5790] usb 1-1: SerialNumber: syz [ 196.371045][ T5703] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 196.382681][ T7131] loop8: detected capacity change from 0 to 7 [ 196.514694][ T5703] usb 2-1: device descriptor read/64, error -71 [ 196.613987][ T7131] Dev loop8: unable to read RDB block 7 [ 196.614034][ T7131] loop8: unable to read partition table [ 196.614587][ T7131] loop8: partition table beyond EOD, truncated [ 196.614628][ T7131] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 196.654417][ T5703] usb usb2-port1: attempt power cycle [ 197.001216][ T5703] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 197.026280][ T5703] usb 2-1: device descriptor read/8, error -71 [ 197.259911][ T5790] usb 1-1: USB disconnect, device number 29 [ 197.261796][ T5703] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 197.283908][ T5703] usb 2-1: device descriptor read/8, error -71 [ 197.399917][ T5703] usb usb2-port1: unable to enumerate USB device [ 197.940329][ T7144] FAULT_INJECTION: forcing a failure. [ 197.940329][ T7144] name failslab, interval 1, probability 0, space 0, times 0 [ 197.940370][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.3.413 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 197.940397][ T7144] Tainted: [L]=SOFTLOCKUP [ 197.940404][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.940416][ T7144] Call Trace: [ 197.940423][ T7144] [ 197.940431][ T7144] dump_stack_lvl+0xe8/0x150 [ 197.940466][ T7144] should_fail_ex+0x46b/0x600 [ 197.940498][ T7144] should_failslab+0xa8/0x100 [ 197.940520][ T7144] __kmalloc_cache_noprof+0xa0/0x6d0 [ 197.940540][ T7144] ? sha256_init+0x21/0x60 [ 197.940556][ T7144] ? ima_calc_file_hash+0x41b/0x870 [ 197.940581][ T7144] ? ima_calc_file_hash+0x41b/0x870 [ 197.940612][ T7144] ima_calc_file_hash+0x41b/0x870 [ 197.940647][ T7144] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 197.940718][ T7144] ima_collect_measurement+0x523/0x9d0 [ 197.940753][ T7144] ? __pfx_ima_collect_measurement+0x10/0x10 [ 197.940790][ T7144] ? do_raw_spin_lock+0x12b/0x2f0 [ 197.940841][ T7144] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 197.940872][ T7144] process_measurement+0x12d9/0x1c90 [ 197.940910][ T7144] ? __pfx_process_measurement+0x10/0x10 [ 197.940964][ T7144] ? tomoyo_find_next_domain+0x1732/0x1aa0 [ 197.941006][ T7144] ima_bprm_check+0x121/0x180 [ 197.941032][ T7144] ? __pfx_ima_bprm_check+0x10/0x10 [ 197.941054][ T7144] ? tomoyo_bprm_check_security+0xf0/0x180 [ 197.941079][ T7144] ? tomoyo_bprm_check_security+0xf0/0x180 [ 197.941101][ T7144] ? tomoyo_bprm_check_security+0xf0/0x180 [ 197.941122][ T7144] ? tomoyo_bprm_check_security+0x162/0x180 [ 197.941148][ T7144] security_bprm_check+0xcd/0x240 [ 197.941167][ T7144] bprm_execve+0x8a4/0x1510 [ 197.941208][ T7144] ? __pfx_bprm_execve+0x10/0x10 [ 197.941229][ T7144] ? rt_spin_unlock+0x160/0x200 [ 197.941250][ T7144] ? alloc_bprm+0x5ab/0x660 [ 197.941275][ T7144] do_execveat_common+0x510/0x690 [ 197.941307][ T7144] __x64_sys_execveat+0xc7/0xf0 [ 197.941329][ T7144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.941350][ T7144] do_syscall_64+0x174/0x580 [ 197.941372][ T7144] ? trace_irq_disable+0x3b/0x140 [ 197.941395][ T7144] ? clear_bhb_loop+0x40/0x90 [ 197.941418][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.941436][ T7144] RIP: 0033:0x7fec4235ce59 [ 197.941458][ T7144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.941474][ T7144] RSP: 002b:00007fec405b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 197.941494][ T7144] RAX: ffffffffffffffda RBX: 00007fec425d5fa0 RCX: 00007fec4235ce59 [ 197.941509][ T7144] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 197.941523][ T7144] RBP: 00007fec405b6090 R08: 0000000000001000 R09: 0000000000000000 [ 197.941534][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.941545][ T7144] R13: 00007fec425d6038 R14: 00007fec425d5fa0 R15: 00007fffcc12b418 [ 197.941572][ T7144] [ 198.201136][ T38] audit: type=1800 audit(1782194270.992:3): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.413" name=6D656D66643A2D42D54E49C56A9A707070F00884A26D dev="tmpfs" ino=46 res=0 errno=0 [ 198.471765][ T7150] syzkaller1: entered promiscuous mode [ 198.471794][ T7150] syzkaller1: entered allmulticast mode [ 198.517740][ T5776] IPVS: starting estimator thread 0... [ 198.601047][ T7156] IPVS: using max 10 ests per chain, 24000 per kthread [ 198.700941][ T5790] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 198.863294][ T5790] usb 4-1: Using ep0 maxpacket: 16 [ 198.878574][ T5790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.878602][ T5790] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.904799][ T5790] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.904831][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.904853][ T5790] usb 4-1: Product: syz [ 198.904868][ T5790] usb 4-1: Manufacturer: syz [ 198.904884][ T5790] usb 4-1: SerialNumber: syz [ 198.958317][ T5790] usb 4-1: 0:2 : does not exist [ 199.164990][ T5790] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 199.275136][ T5790] usb 4-1: USB disconnect, device number 23 [ 199.373507][ T6238] udevd[6238]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.888347][ T7178] comedi: No check for data length of config insn id 5 is implemented [ 199.888369][ T7178] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 199.888384][ T7178] comedi: Assuming n=4727 is correct [ 199.948820][ T7167] overlay: Unknown parameter '\' [ 200.020021][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 200.153184][ T7184] FAULT_INJECTION: forcing a failure. [ 200.153184][ T7184] name failslab, interval 1, probability 0, space 0, times 0 [ 200.153214][ T7184] CPU: 0 UID: 0 PID: 7184 Comm: syz.3.426 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 200.153237][ T7184] Tainted: [L]=SOFTLOCKUP [ 200.153243][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.153253][ T7184] Call Trace: [ 200.153259][ T7184] [ 200.153266][ T7184] dump_stack_lvl+0xe8/0x150 [ 200.153291][ T7184] should_fail_ex+0x46b/0x600 [ 200.153317][ T7184] should_failslab+0xa8/0x100 [ 200.153337][ T7184] __kmalloc_noprof+0xfe/0x7e0 [ 200.153359][ T7184] ? rcu_is_watching+0x15/0xb0 [ 200.153383][ T7184] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 200.153401][ T7184] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 200.153425][ T7184] tomoyo_realpath_from_path+0xe3/0x5d0 [ 200.153445][ T7184] ? tomoyo_domain+0xd7/0x130 [ 200.153467][ T7184] ? tomoyo_path_number_perm+0x219/0x630 [ 200.153492][ T7184] tomoyo_path_number_perm+0x246/0x630 [ 200.153519][ T7184] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 200.153547][ T7184] ? __lock_acquire+0x6b5/0x2d10 [ 200.153570][ T7184] ? do_raw_spin_lock+0x12b/0x2f0 [ 200.153610][ T7184] ? __fget_files+0x2a/0x420 [ 200.153629][ T7184] ? __fget_files+0x2a/0x420 [ 200.153644][ T7184] ? __fget_files+0x3a6/0x420 [ 200.153659][ T7184] ? __fget_files+0x2a/0x420 [ 200.153677][ T7184] security_file_ioctl+0xc3/0x2a0 [ 200.153703][ T7184] __se_sys_ioctl+0x47/0x170 [ 200.153724][ T7184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.153742][ T7184] do_syscall_64+0x174/0x580 [ 200.153765][ T7184] ? clear_bhb_loop+0x40/0x90 [ 200.153785][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.153801][ T7184] RIP: 0033:0x7fec4235ce59 [ 200.153816][ T7184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.153830][ T7184] RSP: 002b:00007fec405b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.153847][ T7184] RAX: ffffffffffffffda RBX: 00007fec425d5fa0 RCX: 00007fec4235ce59 [ 200.153859][ T7184] RDX: 0000200000000140 RSI: 000000004400ae8f RDI: 0000000000000005 [ 200.153869][ T7184] RBP: 00007fec405b6090 R08: 0000000000000000 R09: 0000000000000000 [ 200.153879][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.153889][ T7184] R13: 00007fec425d6038 R14: 00007fec425d5fa0 R15: 00007fffcc12b418 [ 200.153913][ T7184] [ 200.157620][ T7184] ERROR: Out of memory at tomoyo_realpath_from_path. [ 200.375981][ T7184] kvm: vcpu 0: requested 354 ns lapic timer period limited to 200000 ns [ 200.686300][ T7192] syzkaller1: entered promiscuous mode [ 200.686331][ T7192] syzkaller1: entered allmulticast mode [ 201.161096][ T5717] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 201.334169][ T5717] usb 4-1: Invalid ep0 maxpacket: 64 [ 201.372060][ T7210] netlink: 32 bytes leftover after parsing attributes in process `syz.0.434'. [ 201.391076][ T5790] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 201.510966][ T5717] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 201.543139][ T5790] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 201.543171][ T5790] usb 2-1: config 0 has no interface number 0 [ 201.543215][ T5790] usb 2-1: config 0 interface 41 has no altsetting 0 [ 201.545916][ T5790] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 201.545950][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.545966][ T5790] usb 2-1: Product: syz [ 201.545976][ T5790] usb 2-1: Manufacturer: syz [ 201.545987][ T5790] usb 2-1: SerialNumber: syz [ 201.552797][ T5790] usb 2-1: config 0 descriptor?? [ 201.691150][ T5717] usb 4-1: Invalid ep0 maxpacket: 64 [ 201.697502][ T5717] usb usb4-port1: attempt power cycle [ 202.090933][ T5776] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 202.090942][ T5717] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 202.116985][ T5717] usb 4-1: Invalid ep0 maxpacket: 64 [ 202.241067][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 202.248201][ T5776] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 202.248234][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.248258][ T5776] usb 3-1: Product: syz [ 202.248273][ T5776] usb 3-1: Manufacturer: syz [ 202.248289][ T5776] usb 3-1: SerialNumber: syz [ 202.262456][ T5717] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 202.294413][ T5717] usb 4-1: Invalid ep0 maxpacket: 64 [ 202.297448][ T5717] usb usb4-port1: unable to enumerate USB device [ 202.319313][ T5776] usb 3-1: config 0 descriptor?? [ 202.504053][ T5790] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 202.541230][ T5776] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 202.811585][ T5703] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 202.970963][ T5703] usb 1-1: Using ep0 maxpacket: 16 [ 202.974923][ T5703] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.974949][ T5703] usb 1-1: config 0 has no interface number 0 [ 202.974992][ T5703] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.975011][ T5703] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.975229][ T5703] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 202.975245][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.060154][ T5703] usb 1-1: config 0 descriptor?? [ 203.468890][ T7218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.469511][ T7218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.709061][ T5703] usb 1-1: USB disconnect, device number 30 [ 203.795115][ T5790] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 203.795145][ T5790] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 203.795432][ T5790] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 203.856991][ T5790] usb 2-1: USB disconnect, device number 24 [ 203.991337][ T7221] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 204.033579][ T5776] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 204.046299][ T5776] usb 3-1: USB disconnect, device number 22 [ 204.868059][ T5714] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 204.896375][ T7243] syzkaller1: entered promiscuous mode [ 204.896395][ T7243] syzkaller1: entered allmulticast mode [ 204.931615][ T5717] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 205.021619][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 205.029015][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.029044][ T5714] usb 4-1: config 0 has no interfaces? [ 205.030220][ T5714] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.030249][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.030272][ T5714] usb 4-1: SerialNumber: syz [ 205.074421][ T5714] usb 4-1: config 0 descriptor?? [ 205.101022][ T5717] usb 3-1: Using ep0 maxpacket: 16 [ 205.104181][ T5717] usb 3-1: config 3 has an invalid interface number: 38 but max is 1 [ 205.104209][ T5717] usb 3-1: config 3 has no interface number 1 [ 205.104313][ T5717] usb 3-1: config 3 interface 0 has no altsetting 0 [ 205.104335][ T5717] usb 3-1: config 3 interface 38 has no altsetting 0 [ 205.106950][ T5717] usb 3-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=c7.6b [ 205.106982][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.107006][ T5717] usb 3-1: Product: syz [ 205.107022][ T5717] usb 3-1: Manufacturer: syz [ 205.107038][ T5717] usb 3-1: SerialNumber: syz [ 205.285191][ T7236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.285794][ T7236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.389457][ T5776] usb 4-1: USB disconnect, device number 28 [ 205.444177][ T5717] gspca_main: pac7311-2.14.0 probing 093a:260e [ 205.446003][ T5717] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 205.446070][ T5717] pac7311 3-1:3.0: probe with driver pac7311 failed with error -71 [ 205.477245][ T5717] usb 3-1: USB disconnect, device number 23 [ 205.570972][ T5623] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 205.676525][ T7249] comedi: No check for data length of config insn id 5 is implemented [ 205.676539][ T7249] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 205.676549][ T7249] comedi: Assuming n=4725 is correct [ 205.721526][ T5623] usb 1-1: Using ep0 maxpacket: 8 [ 205.725135][ T5623] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 205.725163][ T5623] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 205.725187][ T5623] usb 1-1: config 179 has no interface number 0 [ 205.725247][ T5623] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 205.725278][ T5623] usb 1-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 205.725325][ T5623] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 205.725351][ T5623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.443724][ T10] usb 1-1: USB disconnect, device number 31 [ 206.893243][ T7266] syzkaller1: entered promiscuous mode [ 206.893262][ T7266] syzkaller1: entered allmulticast mode [ 207.131229][ T7268] sg_write: data in/out 856028/136 bytes for SCSI command 0x0-- guessing data in; [ 207.131229][ T7268] program syz.0.458 not setting count and/or reply_len properly [ 207.239572][ T7272] fuse: blksize only supported for fuseblk [ 207.621047][ T5703] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 207.671029][ T5776] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 207.719035][ T38] audit: type=1326 audit(1782194280.712:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.1.465" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88c97cce59 code=0x0 [ 207.771033][ T5703] usb 1-1: Using ep0 maxpacket: 16 [ 207.773201][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.773262][ T5703] usb 1-1: config 0 has no interfaces? [ 207.774438][ T5703] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.774467][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 207.774489][ T5703] usb 1-1: SerialNumber: syz [ 207.778779][ T5703] usb 1-1: config 0 descriptor?? [ 207.839045][ T5776] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.839108][ T5776] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 207.839135][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.875493][ T5776] usb 4-1: config 0 descriptor?? [ 207.910142][ T5776] pwc: Askey VC010 type 2 USB webcam detected. [ 208.003219][ T7278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.003885][ T7278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.304896][ T5703] usb 1-1: USB disconnect, device number 32 [ 208.319450][ T5776] pwc: recv_control_msg error -32 req 02 val 2b00 [ 208.335510][ T5776] pwc: recv_control_msg error -32 req 02 val 2700 [ 208.336551][ T5776] pwc: recv_control_msg error -32 req 02 val 2c00 [ 208.337539][ T5776] pwc: recv_control_msg error -32 req 04 val 1000 [ 208.338733][ T5776] pwc: recv_control_msg error -32 req 04 val 1300 [ 208.438473][ T5776] pwc: recv_control_msg error -32 req 04 val 1400 [ 208.462548][ T5776] pwc: recv_control_msg error -32 req 02 val 2000 [ 208.511310][ T5776] pwc: recv_control_msg error -32 req 02 val 2100 [ 208.512347][ T5776] pwc: recv_control_msg error -32 req 04 val 1500 [ 208.515990][ T5776] pwc: recv_control_msg error -32 req 02 val 2500 [ 208.730076][ T5776] pwc: recv_control_msg error -32 req 02 val 2600 [ 208.944333][ T5776] pwc: recv_control_msg error -71 req 02 val 2800 [ 208.946998][ T5776] pwc: recv_control_msg error -71 req 04 val 1100 [ 208.947495][ T5776] pwc: recv_control_msg error -71 req 04 val 1200 [ 209.086970][ T5776] pwc: Registered as video103. [ 209.133438][ T5776] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 209.196097][ T5776] usb 4-1: USB disconnect, device number 29 [ 210.171081][ T5776] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 210.324988][ T5776] usb 4-1: Using ep0 maxpacket: 8 [ 210.349525][ T5776] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 210.349558][ T5776] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 210.349580][ T5776] usb 4-1: Product: syz [ 210.349596][ T5776] usb 4-1: Manufacturer: syz [ 210.349612][ T5776] usb 4-1: SerialNumber: syz [ 210.430448][ T5776] usb 4-1: config 0 descriptor?? [ 210.448681][ T5776] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 210.661087][ T5703] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 210.816110][ T5703] usb 1-1: Using ep0 maxpacket: 16 [ 210.838049][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.838078][ T5703] usb 1-1: config 0 has no interfaces? [ 210.839839][ T5703] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.839871][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.839952][ T5703] usb 1-1: SerialNumber: syz [ 210.914199][ T5703] usb 1-1: config 0 descriptor?? [ 211.144314][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.144960][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.263557][ T5717] usb 1-1: USB disconnect, device number 33 [ 211.382914][ T5776] gspca_zc3xx: reg_w_i err -110 [ 211.383016][ T5776] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 211.785249][ T5717] usb 4-1: USB disconnect, device number 30 [ 212.299378][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 212.459980][ T7353] FAULT_INJECTION: forcing a failure. [ 212.459980][ T7353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.460014][ T7353] CPU: 1 UID: 0 PID: 7353 Comm: syz.1.486 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 212.460039][ T7353] Tainted: [L]=SOFTLOCKUP [ 212.460046][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.460057][ T7353] Call Trace: [ 212.460064][ T7353] [ 212.460072][ T7353] dump_stack_lvl+0xe8/0x150 [ 212.460099][ T7353] should_fail_ex+0x46b/0x600 [ 212.460129][ T7353] _copy_from_user+0x2d/0xb0 [ 212.460150][ T7353] do_sock_getsockopt+0x200/0x7e0 [ 212.460179][ T7353] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 212.460228][ T7353] ? __fget_files+0x3a6/0x420 [ 212.460246][ T7353] ? __fget_files+0x2a/0x420 [ 212.460268][ T7353] __x64_sys_getsockopt+0x1aa/0x250 [ 212.460295][ T7353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.460314][ T7353] do_syscall_64+0x174/0x580 [ 212.460336][ T7353] ? trace_irq_disable+0x3b/0x140 [ 212.460359][ T7353] ? clear_bhb_loop+0x40/0x90 [ 212.460380][ T7353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.460398][ T7353] RIP: 0033:0x7f88c97cce59 [ 212.460414][ T7353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.460430][ T7353] RSP: 002b:00007f88c79dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 212.460449][ T7353] RAX: ffffffffffffffda RBX: 00007f88c9a46180 RCX: 00007f88c97cce59 [ 212.460465][ T7353] RDX: 000000000000003d RSI: 0000000000000029 RDI: 0000000000000003 [ 212.460476][ T7353] RBP: 00007f88c79dc090 R08: 0000200000000580 R09: 0000000000000000 [ 212.460488][ T7353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.460499][ T7353] R13: 00007f88c9a46218 R14: 00007f88c9a46180 R15: 00007ffea2f64288 [ 212.460526][ T7353] [ 212.765425][ T7349] syz.1.486 (7349) used greatest stack depth: 19200 bytes left [ 213.084775][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 213.374286][ T5776] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 213.521148][ T5776] usb 4-1: Using ep0 maxpacket: 16 [ 213.523414][ T5776] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.523440][ T5776] usb 4-1: config 0 has no interfaces? [ 213.533794][ T5776] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.533884][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 213.533941][ T5776] usb 4-1: SerialNumber: syz [ 213.579613][ T5776] usb 4-1: config 0 descriptor?? [ 213.814139][ T7366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.814749][ T7366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.936034][ T9] usb 4-1: USB disconnect, device number 31 [ 214.080988][ T5776] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 214.221041][ T5703] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 214.231216][ T5776] usb 3-1: Using ep0 maxpacket: 16 [ 214.250642][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.250680][ T5776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.250705][ T5776] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.255842][ T5776] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 214.256142][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.305860][ T5776] usb 3-1: config 0 descriptor?? [ 214.410935][ T5703] usb 1-1: Using ep0 maxpacket: 16 [ 214.414955][ T5703] usb 1-1: config index 0 descriptor too short (expected 4495, got 71) [ 214.414984][ T5703] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 214.415007][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.415027][ T5703] usb 1-1: config 0 has no interface number 0 [ 214.419553][ T5703] usb 1-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 214.419582][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.419670][ T5703] usb 1-1: Product: syz [ 214.419686][ T5703] usb 1-1: Manufacturer: syz [ 214.419757][ T5703] usb 1-1: SerialNumber: syz [ 214.563958][ T5703] usb 1-1: config 0 descriptor?? [ 214.630077][ T5703] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 214.630125][ T5703] uvcvideo 1-1:0.105: No valid video chain found. [ 214.784189][ T7379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.784925][ T7379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.788314][ T7379] netlink: 76 bytes leftover after parsing attributes in process `syz.0.496'. [ 214.825889][ T7379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.839873][ T7379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.975948][ T5776] usbhid 3-1:0.0: can't add hid device: -71 [ 214.976038][ T5776] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 215.029690][ T5776] usb 3-1: USB disconnect, device number 24 [ 215.076967][ T5717] usb 1-1: USB disconnect, device number 34 [ 215.430948][ T5714] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 215.561096][ T5714] usb 4-1: device descriptor read/64, error -71 [ 215.800912][ T5714] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 215.933204][ T5714] usb 4-1: device descriptor read/64, error -71 [ 216.051812][ T5714] usb usb4-port1: attempt power cycle [ 216.160982][ T1009] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 216.281204][ T5703] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 216.310909][ T1009] usb 1-1: Using ep0 maxpacket: 16 [ 216.313012][ T1009] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 7 [ 216.313047][ T1009] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 210, changing to 7 [ 216.315799][ T1009] usb 1-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 216.315828][ T1009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.315843][ T1009] usb 1-1: Product: ဇ [ 216.315854][ T1009] usb 1-1: Manufacturer: К [ 216.315865][ T1009] usb 1-1: SerialNumber: ﳿ [ 216.442205][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 216.451802][ T5714] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 216.453701][ T5703] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 216.453914][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.453973][ T5703] usb 3-1: Product: syz [ 216.454168][ T5703] usb 3-1: Manufacturer: syz [ 216.454216][ T5703] usb 3-1: SerialNumber: syz [ 216.474377][ T5714] usb 4-1: device descriptor read/8, error -71 [ 216.549900][ T5703] usb 3-1: config 0 descriptor?? [ 216.609257][ T1009] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 216.648929][ T1009] usb 1-1: USB disconnect, device number 35 [ 216.710960][ T5714] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 216.731925][ T5714] usb 4-1: device descriptor read/8, error -71 [ 216.763316][ T5703] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 216.771568][ T5776] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 216.843464][ T5714] usb usb4-port1: unable to enumerate USB device [ 216.920942][ T5776] usb 2-1: Using ep0 maxpacket: 16 [ 216.922981][ T5776] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.923008][ T5776] usb 2-1: config 0 has no interfaces? [ 216.924258][ T5776] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.924285][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 216.924344][ T5776] usb 2-1: SerialNumber: syz [ 216.978256][ T5776] usb 2-1: config 0 descriptor?? [ 217.209151][ T7399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.232267][ T7399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.295174][ T7401] netlink: 104 bytes leftover after parsing attributes in process `syz.0.506'. [ 217.315019][ T5714] usb 2-1: USB disconnect, device number 25 [ 217.771860][ T7405] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.997110][ T5703] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 218.015238][ T5703] usb 3-1: USB disconnect, device number 25 [ 218.410641][ T7417] fuse: blksize only supported for fuseblk [ 218.532677][ T7423] netlink: 14 bytes leftover after parsing attributes in process `syz.3.516'. [ 218.840747][ T5714] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 219.001826][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 219.005973][ T5714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.006000][ T5714] usb 3-1: config 0 has no interfaces? [ 219.032041][ T5714] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.032074][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 219.032096][ T5714] usb 3-1: SerialNumber: syz [ 219.080038][ T5714] usb 3-1: config 0 descriptor?? [ 219.281849][ T7437] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 219.282026][ T7437] block device autoloading is deprecated and will be removed. [ 219.325442][ T5776] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 219.332118][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.332908][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.440491][ T1009] usb 3-1: USB disconnect, device number 26 [ 219.470963][ T5776] usb 4-1: Using ep0 maxpacket: 8 [ 219.475398][ T5776] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 219.475430][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.475445][ T5776] usb 4-1: Product: syz [ 219.475456][ T5776] usb 4-1: Manufacturer: syz [ 219.475467][ T5776] usb 4-1: SerialNumber: syz [ 219.495413][ T5776] usb 4-1: config 0 descriptor?? [ 219.505390][ T5714] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 219.643387][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888032b30400: rx timeout, send abort [ 219.643715][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888032b30400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 219.700941][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 219.704357][ T5714] usb 2-1: config 9 has an invalid interface number: 61 but max is 0 [ 219.704403][ T5714] usb 2-1: config 9 has no interface number 0 [ 219.704438][ T5714] usb 2-1: config 9 interface 61 has no altsetting 0 [ 219.709248][ T5714] usb 2-1: New USB device found, idVendor=2dee, idProduct=4d41, bcdDevice=85.a6 [ 219.709278][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.709302][ T5714] usb 2-1: Product: syz [ 219.709318][ T5714] usb 2-1: Manufacturer: syz [ 219.709335][ T5714] usb 2-1: SerialNumber: syz [ 219.802763][ T5776] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 219.991895][ T7437] netlink: 'syz.1.522': attribute type 19 has an invalid length. [ 220.012955][ T5714] rndis_host 2-1:9.61: ACM capabilities 06, not really RNDIS? [ 220.124650][ T5714] usb 2-1: USB disconnect, device number 26 [ 220.230321][ T7442] fuse: blksize only supported for fuseblk [ 220.380483][ T7446] 9p: Bad value for 'rfdno' [ 220.386935][ T7446] dummy0: entered allmulticast mode [ 220.590992][ T5703] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 220.641125][ T1009] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 220.740936][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 220.748341][ T5703] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 220.748424][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.748440][ T5703] usb 3-1: Product: syz [ 220.748451][ T5703] usb 3-1: Manufacturer: syz [ 220.748462][ T5703] usb 3-1: SerialNumber: syz [ 220.795063][ T5703] usb 3-1: config 0 descriptor?? [ 220.802294][ T1009] usb 1-1: Using ep0 maxpacket: 32 [ 220.819147][ T1009] usb 1-1: unable to get BOS descriptor or descriptor too short [ 220.820655][ T1009] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 220.855042][ T1009] usb 1-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=9d.17 [ 220.855125][ T1009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.855144][ T1009] usb 1-1: Product: syz [ 220.855158][ T1009] usb 1-1: Manufacturer: syz [ 220.855172][ T1009] usb 1-1: SerialNumber: syz [ 220.883895][ T5714] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 221.002708][ T5703] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 221.026285][ T5776] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 221.050708][ T5714] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 221.050741][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.083001][ T5714] usb 2-1: config 0 descriptor?? [ 221.138871][ T7446] netlink: 'syz.0.526': attribute type 39 has an invalid length. [ 221.224892][ T5776] usb 4-1: USB disconnect, device number 36 [ 221.301362][ T7448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.343336][ T7448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.356515][ T5714] usb 2-1: Cannot read MAC address [ 221.356823][ T5714] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 221.395544][ T5714] usb 2-1: USB disconnect, device number 27 [ 221.970615][ T1009] s2255 1-1:7.0: Could not find bulk-in endpoint [ 221.973018][ T1009] Sensoray 2255 driver load failed: 0xfffffff4 [ 221.973208][ T1009] s2255 1-1:7.0: probe with driver s2255 failed with error -12 [ 221.993004][ T7445] dummy0: left allmulticast mode [ 222.054878][ T1009] usb 1-1: USB disconnect, device number 36 [ 222.146459][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 222.146504][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 222.211045][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 222.233782][ T5703] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 222.258168][ T5703] usb 3-1: USB disconnect, device number 27 [ 222.760974][ T1009] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 222.902950][ T7463] fuse: blksize only supported for fuseblk [ 222.911253][ T1009] usb 2-1: Using ep0 maxpacket: 16 [ 222.921084][ T1009] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.921185][ T1009] usb 2-1: config 0 has no interfaces? [ 222.939347][ T1009] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.939370][ T1009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 222.939385][ T1009] usb 2-1: SerialNumber: syz [ 222.976639][ T1009] usb 2-1: config 0 descriptor?? [ 223.040988][ T5703] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 223.185635][ T7459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.189058][ T7459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.208635][ T5703] usb 3-1: config 252 has an invalid interface number: 43 but max is 0 [ 223.208667][ T5703] usb 3-1: config 252 has no interface number 0 [ 223.208717][ T5703] usb 3-1: config 252 interface 43 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 223.208741][ T5703] usb 3-1: config 252 interface 43 altsetting 6 endpoint 0x9 has invalid maxpacket 1032, setting to 64 [ 223.208771][ T5703] usb 3-1: config 252 interface 43 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 223.208796][ T5703] usb 3-1: config 252 interface 43 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 223.208822][ T5703] usb 3-1: config 252 interface 43 altsetting 6 bulk endpoint 0x8E has invalid maxpacket 64 [ 223.208848][ T5703] usb 3-1: config 252 interface 43 altsetting 6 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 223.208877][ T5703] usb 3-1: config 252 interface 43 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 223.208902][ T5703] usb 3-1: config 252 interface 43 has no altsetting 0 [ 223.239310][ T5703] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=ff.e4 [ 223.239406][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.239461][ T5703] usb 3-1: Product: ⅀됚枻ី鎠Ѥ铃ꯦ䫡眼衄㬜鐊姬宩겿㟑画黱沺漾ꓤ龞责Ώ읆㿝췠ꠅᒦ逮褧㐨䮪霈齛䳻柔⽛뾨꟔ꌗ﫧䨡쉳틲膹질缨栋䩜Īဍꗯ䅉뱬檮䤿ర䴠쪀繍䙐鞸네飴⯥蹸鞤쎦暈ᬓ鄽瞵᳖湧唰ꚯ㰆満虜⟼൨넿찌睨 [ 223.239564][ T5703] usb 3-1: Manufacturer: ф [ 223.239581][ T5703] usb 3-1: SerialNumber: ⮲櫭⁧פּ뷸鿟Ꮉ䲞䏿㉾ᝦی盩幪钡罍ꟕᨧꋜ쬑꛹㾚鍘㽁䡇䡪Ȣ⸞爤몯㤴瘭聒廖햙쿜鱾 [ 223.396120][ T7461] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 223.468574][ T1009] usb 2-1: USB disconnect, device number 28 [ 223.659926][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804f5a5400: rx timeout, send abort [ 223.660276][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804f5a5400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 223.691257][ T5714] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 223.709245][ T5703] usbsevseg 3-1:252.43: USB 7 Segment device now attached [ 223.750634][ T5703] usb 3-1: USB disconnect, device number 28 [ 223.781367][ T5703] usbsevseg 3-1:252.43: USB 7 Segment now disconnected [ 223.841093][ T5714] usb 1-1: Using ep0 maxpacket: 32 [ 223.842944][ T5714] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 223.842972][ T5714] usb 1-1: config 0 has no interface number 0 [ 223.843021][ T5714] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 223.843043][ T5714] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 223.843059][ T5714] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 223.843078][ T5714] usb 1-1: config 0 interface 196 has no altsetting 0 [ 223.845843][ T5714] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 223.845865][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.845880][ T5714] usb 1-1: Product: syz [ 223.845891][ T5714] usb 1-1: Manufacturer: syz [ 223.845901][ T5714] usb 1-1: SerialNumber: syz [ 223.853741][ T5714] usb 1-1: config 0 descriptor?? [ 223.904935][ T7469] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 224.091038][ T1009] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 224.144269][ T7473] syzkaller1: entered promiscuous mode [ 224.144288][ T7473] syzkaller1: entered allmulticast mode [ 224.220981][ T1009] usb 4-1: device descriptor read/64, error -71 [ 224.470948][ T1009] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 224.537783][ T5714] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 224.611084][ T1009] usb 4-1: device descriptor read/64, error -71 [ 224.618100][ T5714] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 224.721444][ T1009] usb usb4-port1: attempt power cycle [ 224.824434][ T5703] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 224.903714][ T9] usb 1-1: USB disconnect, device number 37 [ 224.971856][ T5703] usb 2-1: Using ep0 maxpacket: 8 [ 224.990333][ T5703] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 224.990367][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.990390][ T5703] usb 2-1: Product: syz [ 224.990406][ T5703] usb 2-1: Manufacturer: syz [ 224.990422][ T5703] usb 2-1: SerialNumber: syz [ 225.048015][ T7483] fuse: blksize only supported for fuseblk [ 225.069938][ T5703] usb 2-1: config 0 descriptor?? [ 225.101316][ T1009] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 225.125131][ T1009] usb 4-1: device descriptor read/8, error -71 [ 225.163064][ T9] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 225.293023][ T5703] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 225.372737][ T1009] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 225.405930][ T1009] usb 4-1: device descriptor read/8, error -71 [ 225.512551][ T1009] usb usb4-port1: unable to enumerate USB device [ 226.070943][ T5714] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 226.220874][ T5714] usb 3-1: Using ep0 maxpacket: 16 [ 226.228316][ T5714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.228346][ T5714] usb 3-1: config 0 has no interfaces? [ 226.241272][ T5714] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.241314][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 226.241336][ T5714] usb 3-1: SerialNumber: syz [ 226.281274][ T5714] usb 3-1: config 0 descriptor?? [ 226.505432][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.507973][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.511470][ T5703] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 226.555810][ T5703] usb 2-1: USB disconnect, device number 29 [ 226.697982][ T1009] usb 3-1: USB disconnect, device number 29 [ 226.932453][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888025558000: rx timeout, send abort [ 226.932774][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888025558000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 227.222413][ T5703] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 227.357988][ T7531] fuse: blksize only supported for fuseblk [ 227.370984][ T1009] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 227.387132][ T5703] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 227.387177][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.387201][ T5703] usb 4-1: Product: syz [ 227.387218][ T5703] usb 4-1: Manufacturer: syz [ 227.387235][ T5703] usb 4-1: SerialNumber: syz [ 227.524055][ T1009] usb 2-1: not running at top speed; connect to a high speed hub [ 227.526997][ T1009] usb 2-1: config 88 has an invalid interface number: 11 but max is 0 [ 227.527027][ T1009] usb 2-1: config 88 has no interface number 0 [ 227.527051][ T1009] usb 2-1: config 88 interface 11 has no altsetting 0 [ 227.530212][ T1009] usb 2-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 227.530233][ T1009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.530249][ T1009] usb 2-1: Product: syz [ 227.530260][ T1009] usb 2-1: Manufacturer: syz [ 227.530270][ T1009] usb 2-1: SerialNumber: syz [ 227.854365][ T5703] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 227.854413][ T5703] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 227.936953][ T1009] usb 2-1: USB disconnect, device number 30 [ 228.040973][ T5623] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 228.100941][ T5790] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 228.196983][ T5623] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 228.197018][ T5623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.197042][ T5623] usb 1-1: Product: syz [ 228.197067][ T5623] usb 1-1: Manufacturer: syz [ 228.197083][ T5623] usb 1-1: SerialNumber: syz [ 228.210239][ T5623] usb 1-1: config 0 descriptor?? [ 228.251094][ T5790] usb 3-1: Using ep0 maxpacket: 16 [ 228.257405][ T5790] usb 3-1: config index 0 descriptor too short (expected 4495, got 71) [ 228.257436][ T5790] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 228.257459][ T5790] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.257540][ T5790] usb 3-1: config 0 has no interface number 0 [ 228.263611][ T5790] usb 3-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 228.264698][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.265893][ T5790] usb 3-1: Product: syz [ 228.265954][ T5790] usb 3-1: Manufacturer: syz [ 228.265976][ T5790] usb 3-1: SerialNumber: syz [ 228.345012][ T5790] usb 3-1: config 0 descriptor?? [ 228.388507][ T5790] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 228.388678][ T5790] uvcvideo 3-1:0.105: No valid video chain found. [ 228.625585][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.626613][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.642376][ T7538] netlink: 76 bytes leftover after parsing attributes in process `syz.2.555'. [ 228.661836][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.664227][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.725871][ T5703] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 228.725945][ T5703] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 228.730333][ T5703] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 228.767623][ T5703] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 228.804436][ T5703] usb 4-1: USB disconnect, device number 41 [ 228.852988][ T7536] netlink: 80 bytes leftover after parsing attributes in process `syz.0.554'. [ 228.880607][ T7536] tmpfs: Unknown parameter 'nr_blocks53e' [ 228.902173][ T5623] usb 1-1: Firmware version (0.0) predates our first public release. [ 228.902202][ T5623] usb 1-1: Please update to version 0.2 or newer [ 228.992273][ T5776] usb 3-1: USB disconnect, device number 30 [ 229.118457][ T5623] usb 1-1: USB disconnect, device number 38 [ 229.607835][ T7555] fuse: blksize only supported for fuseblk [ 229.663675][ T7558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.721098][ T5776] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 229.873943][ T5776] usb 4-1: Using ep0 maxpacket: 8 [ 229.887983][ T5776] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 229.888014][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.888035][ T5776] usb 4-1: Product: syz [ 229.888051][ T5776] usb 4-1: Manufacturer: syz [ 229.888067][ T5776] usb 4-1: SerialNumber: syz [ 229.926740][ T7566] FAULT_INJECTION: forcing a failure. [ 229.926740][ T7566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.926812][ T7566] CPU: 1 UID: 0 PID: 7566 Comm: syz.2.564 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 229.926859][ T7566] Tainted: [L]=SOFTLOCKUP [ 229.926897][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.926944][ T7566] Call Trace: [ 229.926965][ T7566] [ 229.926988][ T7566] dump_stack_lvl+0xe8/0x150 [ 229.927096][ T7566] should_fail_ex+0x46b/0x600 [ 229.927192][ T7566] _copy_from_user+0x2d/0xb0 [ 229.927264][ T7566] ___sys_sendmsg+0x1c6/0x360 [ 229.927341][ T7566] ? __lock_acquire+0x6b5/0x2d10 [ 229.927434][ T7566] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.927521][ T7566] ? kstrtouint+0x6e/0xe0 [ 229.927605][ T7566] ? __fget_files+0x2a/0x420 [ 229.927669][ T7566] ? __fget_files+0x3a6/0x420 [ 229.927761][ T7566] __sys_sendmmsg+0x279/0x4d0 [ 229.927850][ T7566] ? __pfx___sys_sendmmsg+0x10/0x10 [ 229.927946][ T7566] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 229.928051][ T7566] ? ksys_write+0x248/0x270 [ 229.928127][ T7566] ? __pfx_ksys_write+0x10/0x10 [ 229.928219][ T7566] __x64_sys_sendmmsg+0xa0/0xc0 [ 229.928288][ T7566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.928371][ T7566] do_syscall_64+0x174/0x580 [ 229.928457][ T7566] ? trace_irq_disable+0x3b/0x140 [ 229.928533][ T7566] ? clear_bhb_loop+0x40/0x90 [ 229.928606][ T7566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.928669][ T7566] RIP: 0033:0x7f6c743dce59 [ 229.928723][ T7566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.928775][ T7566] RSP: 002b:00007f6c7260d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 229.928838][ T7566] RAX: ffffffffffffffda RBX: 00007f6c74656090 RCX: 00007f6c743dce59 [ 229.928876][ T7566] RDX: 0000000000000002 RSI: 00002000000060c0 RDI: 0000000000000004 [ 229.928918][ T7566] RBP: 00007f6c7260d090 R08: 0000000000000000 R09: 0000000000000000 [ 229.928952][ T7566] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 229.928994][ T7566] R13: 00007f6c74656128 R14: 00007f6c74656090 R15: 00007ffe9c627408 [ 229.929063][ T7566] [ 230.164719][ T5776] usb 4-1: config 0 descriptor?? [ 230.408238][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.408793][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.439182][ T5776] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 231.606897][ T7583] openvswitch: netlink: Actions may not be safe on all matching packets [ 231.627111][ T7583] netlink: 188 bytes leftover after parsing attributes in process `syz.2.570'. [ 231.791824][ T7585] fuse: blksize only supported for fuseblk [ 232.365567][ T5776] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 232.391321][ T5776] usb 4-1: USB disconnect, device number 42 [ 232.728322][ T7606] FAULT_INJECTION: forcing a failure. [ 232.728322][ T7606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.728362][ T7606] CPU: 0 UID: 0 PID: 7606 Comm: syz.1.579 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 232.728395][ T7606] Tainted: [L]=SOFTLOCKUP [ 232.728403][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 232.728418][ T7606] Call Trace: [ 232.728427][ T7606] [ 232.728436][ T7606] dump_stack_lvl+0xe8/0x150 [ 232.728470][ T7606] should_fail_ex+0x46b/0x600 [ 232.728508][ T7606] _copy_from_iter+0x1d3/0x1670 [ 232.728557][ T7606] ? __pfx__copy_from_iter+0x10/0x10 [ 232.728598][ T7606] ? file_tty_write+0x2b3/0x990 [ 232.728625][ T7606] ? rcu_is_watching+0x15/0xb0 [ 232.728669][ T7606] file_tty_write+0x494/0x990 [ 232.728704][ T7606] vfs_write+0x629/0xba0 [ 232.728742][ T7606] ? __pfx_vfs_write+0x10/0x10 [ 232.728882][ T7606] ? __fget_files+0x2a/0x420 [ 232.728926][ T7606] ksys_write+0x156/0x270 [ 232.728959][ T7606] ? __pfx_ksys_write+0x10/0x10 [ 232.728994][ T7606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.729019][ T7606] do_syscall_64+0x174/0x580 [ 232.729048][ T7606] ? trace_irq_disable+0x3b/0x140 [ 232.729078][ T7606] ? clear_bhb_loop+0x40/0x90 [ 232.729107][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.729131][ T7606] RIP: 0033:0x7f88c97cce59 [ 232.729153][ T7606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.729173][ T7606] RSP: 002b:00007f88c7a1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.729198][ T7606] RAX: ffffffffffffffda RBX: 00007f88c9a45fa0 RCX: 00007f88c97cce59 [ 232.729216][ T7606] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000004 [ 232.729230][ T7606] RBP: 00007f88c7a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 232.729245][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.729260][ T7606] R13: 00007f88c9a46038 R14: 00007f88c9a45fa0 R15: 00007ffea2f64288 [ 232.729297][ T7606] [ 232.875317][ T5776] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 233.042388][ T7608] fuse: blksize only supported for fuseblk [ 233.060955][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 233.064552][ T5776] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 233.086547][ T5776] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 233.086581][ T5776] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 233.086605][ T5776] usb 3-1: Product: syz [ 233.086621][ T5776] usb 3-1: Manufacturer: syz [ 233.086637][ T5776] usb 3-1: SerialNumber: syz [ 233.354835][ T5776] usb 3-1: Invalid connection information received from device [ 233.565528][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.580922][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.591148][ T5717] usb 3-1: USB disconnect, device number 31 [ 233.733390][ T7622] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 233.733522][ T7622] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 233.747320][ T7622] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 233.747456][ T7622] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 234.001266][ T5790] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 234.023150][ T7626] usb usb8: usbfs: process 7626 (syz.3.587) did not claim interface 0 before use [ 234.142883][ T5703] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 234.168030][ T5790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.183249][ T5790] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 234.183281][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.183302][ T5790] usb 1-1: Product: syz [ 234.183316][ T5790] usb 1-1: Manufacturer: syz [ 234.183332][ T5790] usb 1-1: SerialNumber: syz [ 234.229469][ T5790] usb 1-1: config 0 descriptor?? [ 234.242473][ T7629] netlink: 'syz.2.588': attribute type 10 has an invalid length. [ 234.245078][ T5790] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 234.294168][ T5703] usb 2-1: Using ep0 maxpacket: 8 [ 234.311699][ T5703] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 234.311722][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.311737][ T5703] usb 2-1: Product: syz [ 234.311755][ T5703] usb 2-1: Manufacturer: syz [ 234.311765][ T5703] usb 2-1: SerialNumber: syz [ 234.324216][ T5703] usb 2-1: config 0 descriptor?? [ 234.396714][ T7629] team0: Device wg2 is of different type [ 234.440425][ T5790] usb 1-1: USB disconnect, device number 39 [ 234.553164][ T5703] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 234.850380][ T7635] fuse: blksize only supported for fuseblk [ 236.109296][ T7653] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 7653 comm: syz.0.596) [ 236.202196][ T38] audit: type=1800 audit(1782194309.122:5): pid=7653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.596" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=19395 res=0 errno=0 [ 236.381381][ T5703] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 236.509963][ T7660] fuse: blksize only supported for fuseblk [ 236.550059][ T5703] usb 2-1: USB disconnect, device number 31 [ 236.927263][ T7669] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 236.927293][ T7669] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.948873][ T5776] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 236.991993][ T7669] vhci_hcd vhci_hcd.0: Device attached [ 237.111006][ T5776] usb 1-1: Using ep0 maxpacket: 16 [ 237.119539][ T5776] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.119578][ T5776] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 237.119606][ T5776] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 237.119633][ T5776] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 237.164956][ T5776] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.164990][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 237.165013][ T5776] usb 1-1: SerialNumber: syz [ 237.195427][ T5790] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 237.250467][ T7663] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.250606][ T7663] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.267070][ T1009] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 237.282128][ T5776] hub 1-1:1.0: bad descriptor, ignoring hub [ 237.282240][ T5776] hub 1-1:1.0: probe with driver hub failed with error -5 [ 237.416999][ T5790] usb 4-1: Using ep0 maxpacket: 16 [ 237.425020][ T5790] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 237.441986][ T5790] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 237.442017][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.442039][ T5790] usb 4-1: Product: syz [ 237.442054][ T5790] usb 4-1: Manufacturer: syz [ 237.442069][ T5790] usb 4-1: SerialNumber: syz [ 237.449618][ T5790] usb 4-1: config 0 descriptor?? [ 237.497526][ T5790] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 237.499931][ T5790] usb 4-1: Detected FT232B [ 237.546927][ T7663] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.548453][ T7663] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.766726][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.770610][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.039984][ T5776] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 238.152396][ T5776] usb 1-1: USB disconnect, device number 40 [ 238.344888][ T5790] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 238.345504][ T5790] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 238.400272][ T5790] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 238.411506][ T7670] usb 39-1: recv xbuf, 0 [ 238.431787][ T5790] usb 4-1: USB disconnect, device number 43 [ 238.467763][ T5790] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 238.477257][ T5790] ftdi_sio 4-1:0.0: device disconnected [ 238.513377][ T6149] vhci_hcd vhci_hcd.3: stop threads [ 238.531409][ T6149] vhci_hcd vhci_hcd.3: release socket [ 238.568576][ T1009] usb 39-1: device descriptor read/64, error -71 [ 238.617335][ T6149] vhci_hcd vhci_hcd.3: disconnect device [ 238.743140][ T1009] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 239.696975][ T7706] 9p: Bad value for 'rfdno' [ 240.112593][ T30] ------------[ cut here ]------------ [ 240.112606][ T30] task_rq(p) != rq [ 240.112617][ T30] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#1: ktimers/1/30 [ 240.112657][ T30] Modules linked in: [ 240.112679][ T30] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 240.112704][ T30] Tainted: [L]=SOFTLOCKUP [ 240.112710][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.112722][ T30] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 240.112747][ T30] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 240.112762][ T30] RSP: 0018:ffffc90000a4faa0 EFLAGS: 00010006 [ 240.112777][ T30] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 240.112791][ T30] RDX: 0000000000000000 RSI: ffff88802e089f00 RDI: ffff8880b873ba40 [ 240.112803][ T30] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 240.112816][ T30] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 240.112829][ T30] R13: 1ffff110170e78d6 R14: ffff88802e089f00 R15: ffffffff8dc257d0 [ 240.112847][ T30] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 240.112862][ T30] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.112874][ T30] CR2: 00007fd750ee5fc0 CR3: 000000002736c000 CR4: 00000000003526f0 [ 240.112889][ T30] Call Trace: [ 240.112896][ T30] [ 240.112906][ T30] set_next_task_fair+0xa68/0xce0 [ 240.112933][ T30] __schedule+0x3e03/0x5550 [ 240.112974][ T30] ? __pfx___schedule+0x10/0x10 [ 240.112993][ T30] ? schedule+0x90/0x360 [ 240.113019][ T30] ? schedule+0x90/0x360 [ 240.113041][ T30] schedule+0x164/0x360 [ 240.113061][ T30] ? smpboot_thread_fn+0x4d/0xa50 [ 240.113079][ T30] smpboot_thread_fn+0x5bc/0xa50 [ 240.113098][ T30] ? smpboot_thread_fn+0x4d/0xa50 [ 240.113158][ T30] kthread+0x388/0x470 [ 240.113179][ T30] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 240.113196][ T30] ? __pfx_kthread+0x10/0x10 [ 240.113217][ T30] ret_from_fork+0x514/0xb70 [ 240.113241][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 240.113269][ T30] ? __switch_to+0xc79/0x1410 [ 240.113289][ T30] ? __pfx_kthread+0x10/0x10 [ 240.113311][ T30] ret_from_fork_asm+0x1a/0x30 [ 240.113347][ T30] [ 240.113356][ T30] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.113371][ T30] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 240.113395][ T30] Tainted: [L]=SOFTLOCKUP [ 240.113402][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.113412][ T30] Call Trace: [ 240.113419][ T30] [ 240.113425][ T30] vpanic+0x56c/0xa60 [ 240.113452][ T30] ? __pfx__printk+0x10/0x10 [ 240.113471][ T30] ? __pfx_vpanic+0x10/0x10 [ 240.113495][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 240.113522][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 240.113554][ T30] panic+0xc5/0xd0 [ 240.113579][ T30] ? __pfx_panic+0x10/0x10 [ 240.113612][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 240.113640][ T30] __warn+0x315/0x4c0 [ 240.113665][ T30] ? hrtick_start_fair+0x196/0x1f0 [ 240.113691][ T30] ? hrtick_start_fair+0x196/0x1f0 [ 240.113716][ T30] __report_bug+0x339/0x540 [ 240.113757][ T30] ? hrtick_start_fair+0x196/0x1f0 [ 240.113780][ T30] ? __pfx___report_bug+0x10/0x10 [ 240.113803][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 240.113832][ T30] ? hrtick_start_fair+0x196/0x1f0 [ 240.113855][ T30] report_bug+0x16a/0x220 [ 240.113878][ T30] ? hrtick_start_fair+0x196/0x1f0 [ 240.113899][ T30] ? hrtick_start_fair+0x198/0x1f0 [ 240.113921][ T30] handle_bug+0x9c/0x200 [ 240.113947][ T30] exc_invalid_op+0x1a/0x50 [ 240.113972][ T30] asm_exc_invalid_op+0x1a/0x20 [ 240.113989][ T30] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 240.114013][ T30] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 240.114029][ T30] RSP: 0018:ffffc90000a4faa0 EFLAGS: 00010006 [ 240.114043][ T30] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 240.114057][ T30] RDX: 0000000000000000 RSI: ffff88802e089f00 RDI: ffff8880b873ba40 [ 240.114069][ T30] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 240.114082][ T30] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 240.114095][ T30] R13: 1ffff110170e78d6 R14: ffff88802e089f00 R15: ffffffff8dc257d0 [ 240.114114][ T30] ? set_next_task_fair+0xa4e/0xce0 [ 240.114139][ T30] set_next_task_fair+0xa68/0xce0 [ 240.114164][ T30] __schedule+0x3e03/0x5550 [ 240.114203][ T30] ? __pfx___schedule+0x10/0x10 [ 240.114221][ T30] ? schedule+0x90/0x360 [ 240.114247][ T30] ? schedule+0x90/0x360 [ 240.114275][ T30] schedule+0x164/0x360 [ 240.114294][ T30] ? smpboot_thread_fn+0x4d/0xa50 [ 240.114311][ T30] smpboot_thread_fn+0x5bc/0xa50 [ 240.114329][ T30] ? smpboot_thread_fn+0x4d/0xa50 [ 240.114352][ T30] kthread+0x388/0x470 [ 240.114372][ T30] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 240.114387][ T30] ? __pfx_kthread+0x10/0x10 [ 240.114408][ T30] ret_from_fork+0x514/0xb70 [ 240.114449][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 240.114471][ T30] ? __switch_to+0xc79/0x1410 [ 240.114493][ T30] ? __pfx_kthread+0x10/0x10 [ 240.114520][ T30] ret_from_fork_asm+0x1a/0x30 [ 240.114558][ T30] [ 241.237605][ T30] Shutting down cpus with NMI [ 241.238281][ T30] Kernel Offset: disabled