last executing test programs: 13m12.835079943s ago: executing program 0 (id=76): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000140)={0xb, 0x2, 0x1402, 0x105}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025747a31000000000900010073797a3000000000080005400000001c"], 0xe8}, 0x1, 0x0, 0x0, 0x40c0004}, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x0, 0x4006, 0x2000, &(0x7f0000ff6000/0x2000)=nil}) r7 = io_uring_setup(0x3566, &(0x7f0000000240)={0x0, 0xca5c, 0x2000, 0x3, 0x12f}) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000001f40)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x10, 0x140d, 0x300, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4004040) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_FW_DOWNLOAD(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r10, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, @local}]}) 13m8.995446242s ago: executing program 0 (id=82): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x3) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x100) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0xfff) r5 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 13m8.730045785s ago: executing program 0 (id=84): write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) gettid() syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000000060e05f25d3303f94d20d86bf2e074f74010829bd00"/36, @ANYRES32=0x0, @ANYBLOB="910400002411010008001b00"], 0x30}}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='memory'}, {@xattr}]}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@multicast1, @multicast1, 0x0}, 0x0) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xf5, r5, 0xb07d}, 0xc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) 13m4.936410923s ago: executing program 0 (id=92): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x45, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x30000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'team0\x00', {0x600}, 0x8001}) 13m3.323148195s ago: executing program 0 (id=100): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x50) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001380)="bc263d7f455169251dc0ac2707d978a06fffc49727783f1a8f7bc38262c61dd060fbfb2a86865578be93be281bb71fd035896c85e9179a87deaced2a55ecb9217cfa7c3b41b7f7b2c726933e601290c97b9984fb7d6ef6ff2bdfc1ad457199e99d7170b5322bd085aeaa786e365ed06082e58ccda390fd046d907dc982517001636335d7dfa35262cde7f2b76e48c0b2b4411235b8b8ec9a566d2f75a4611a2244460b7ca85a3cefe43ba6ef2a60ddb86917fe6a60d3008e226ccaba38a6aa23d2b3631a7a9180f5ba459bcb5169f71888ea04eb18448e91057e7f81ea37dd6ce155b2bf1fc8e3404fcf22d89367d7cef2c25e862fa8f4728a7114d5a40cfee57991a0947001d0da71e9655db1902543dc809b17ec87e64b64903dcf7cc4ae863804f717ab9503ddb1e5e02afb25e394dbac3cef0a4f115bd179b06493c44c16d957cf1c34eccfbfc8c6227c89e8b93ffdca5f8c1ed36d6a4963ed8d8dbbb1a72e8ebd9a6901022940c3370b3a7d553e888be3a4c657af30669c389040afac5000b9af28581ac89538c04a925a3caf66962a74d4100a6f6f7d97b21044ae2676b1188934b080269df35b83e1bbe1aa4ea6246332d3bc9f1550fd9d373ec196a5309f91990f201ba8e1afd05c52eb8d7f8ad2fac0a60df98563fbcecf8f4af32392df213fe9956fe7950a629c15c20a579198eea5dcdfa415309107ad8ee9819981e655a7fca8be1e7b83c51255b1cb83e10a2ae9c0ddb9d970429681e85da618aeb7b0860f84fb7782e8c28c44e87b99062186750731cd1810d306723b7c1106550246474a767aaa69c88c4c65dc842dd6cd6031ca62a4817ceae30f752dd876653a49a4dd88f88a2bf68bf466065b21a6f226e413a91b92a4044699d1574db63a83b66a2b1cd06dc425c45348607fe1da6c3e983ff2a2a74225eb9f7e145d2b601265b58c08bd369511d61322d478a210361306a3a67f517cb409c95255cb47bf16d9965da3414dbfc86bd3950f22188bbc6c352a0c2489385e7953aec2edf0e3c0a9da64f870c76c55b23c174ffca865a415d9f7d62fc555c57f07fd30e54f9e9c1496ff19ce8950d781310d6ca2ebb17f51b57afc37e18a453efeb8ffd59e374425a47b40d3741e0b0de8eadf752e02b3a3c9cb9d1501f6026aacc422555defb9e1a63eeb721ce833ab9ad9134b03c9b38875ef3ee8051c7e9e305964c2fdbf7661d0329a3d166ae148949f9b70b4f70052352bc4d45d1b69c508b9148c94269e0ad17a1686cd77852e41bfb5ec29627673c0ba3c78a1e77489571894765939a98972850eb26b6d64a1758838535af6c09e8489fa73069a839e63ced47ba730cdd17d08a5cfc015b4c04347a89453d3a3bb9fee0dd4a8eaf859ac83425f22d13ae4c550f3a25c4a82f0d4905d29831b5794bae5d367ee5e1f65f6eb3ec6", 0x3ff}], 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000740)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) r5 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='|', 0x1}], 0x1) write$sequencer(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="fd"], 0x10) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0xfbb26c781d102d1b, 0xb}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m0.105727193s ago: executing program 0 (id=108): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 12m44.496521193s ago: executing program 32 (id=108): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 11m38.8214475s ago: executing program 2 (id=344): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x7) landlock_restrict_self(r0, 0x9) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB='m'], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={r4, 0x2}, 0x8) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 11m34.907973875s ago: executing program 2 (id=359): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'geneve0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x9], [0x8, 0x400, 0x10, 0x1]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 11m33.608337109s ago: executing program 2 (id=363): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8000, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40087446, &(0x7f00000002c0)={0x5, &(0x7f0000000140)=[{0x7, 0x8, 0xe, 0x8}, {0x1, 0x2, 0x9, 0x5}, {0x1, 0x2, 0x8, 0x7}, {0xa, 0x8, 0x9, 0x13}, {0xfe00, 0x3, 0x4, 0x10000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 11m29.434576778s ago: executing program 2 (id=386): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r1}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setresuid(0xee00, 0xee01, 0x0) setreuid(0xee01, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010102}], 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}], 0x2c) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r6, @ANYBLOB="05072bbd7000ffdbdf2501000000800002807c0001800800010000000000080001000300000008000100030000003c00018008000100050000000800010080000000b8ff01000400000008000100070000000800010005000000080001000600000000000000000000002400018008000100030000ee0700010001000000080001000100000008000100020000000400030018000180140002006c6f"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000016c0), 0x101040, 0x0) r10 = epoll_create1(0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x5}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004811}, 0x4000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020", 0x39}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0xfe33) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000001980)={0x1c}) setsockopt$RDS_GET_MR(r9, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000140)=""/238, 0xee}, &(0x7f00000002c0), 0x22}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000030500ea4f000331510000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e002000028008000100100000000a000400c279c1f793a10000080003000100000008000500", @ANYRES32=r8, @ANYBLOB], 0x58}}, 0x0) 11m26.89413251s ago: executing program 2 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) 11m25.561872553s ago: executing program 2 (id=395): r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0xda6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000680)={0x5, 0x3, 0x1, {0x1, @sliced={0x7fff, [0x1, 0x5, 0x4c5, 0x1ff, 0x8, 0x2, 0x6, 0x16c2, 0xad, 0xfff8, 0x4, 0x1000, 0xc, 0x400, 0x3, 0x10, 0x3, 0x7fff, 0x2, 0x0, 0x80, 0x5, 0x8001, 0x6, 0x8004, 0xcf0, 0x98c4, 0x7, 0x1, 0x8, 0x34, 0x388, 0xb, 0xe3c0, 0x200, 0x2, 0x9, 0x1, 0x0, 0x1, 0x6, 0xfb, 0xfffe, 0x0, 0x4, 0x4, 0x8, 0x3c8], 0x321}}, 0xb8}) ppoll(&(0x7f00000007c0)=[{0xffffffffffffffff, 0x4000}, {r0, 0x22c0}, {0xffffffffffffffff, 0x8000}], 0x3, 0x0, &(0x7f0000000840)={[0x8]}, 0x8) 11m10.201173005s ago: executing program 33 (id=395): r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0xda6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000680)={0x5, 0x3, 0x1, {0x1, @sliced={0x7fff, [0x1, 0x5, 0x4c5, 0x1ff, 0x8, 0x2, 0x6, 0x16c2, 0xad, 0xfff8, 0x4, 0x1000, 0xc, 0x400, 0x3, 0x10, 0x3, 0x7fff, 0x2, 0x0, 0x80, 0x5, 0x8001, 0x6, 0x8004, 0xcf0, 0x98c4, 0x7, 0x1, 0x8, 0x34, 0x388, 0xb, 0xe3c0, 0x200, 0x2, 0x9, 0x1, 0x0, 0x1, 0x6, 0xfb, 0xfffe, 0x0, 0x4, 0x4, 0x8, 0x3c8], 0x321}}, 0xb8}) ppoll(&(0x7f00000007c0)=[{0xffffffffffffffff, 0x4000}, {r0, 0x22c0}, {0xffffffffffffffff, 0x8000}], 0x3, 0x0, &(0x7f0000000840)={[0x8]}, 0x8) 8m26.369055934s ago: executing program 6 (id=1506): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x2b, '\x00', @data=0x10, 0x7a7ce1c2}]}) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x140, 0x11) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf2b9, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000640)={0x8e, [[0x9, 0x649, 0x8, 0x7, 0x1, 0x8, 0x1, 0x7], [0x2, 0x3, 0xeead, 0x0, 0x4, 0x3, 0x2, 0x8], [0x2, 0x3ff, 0x6, 0x1ff, 0x4, 0x7, 0x1, 0x7]], '\x00', [{0x2, 0x3, 0x1, 0x0, 0x1}, {0xc1d, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x10000, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x401, 0x1ff, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x0, 0x1, 0x1, 0x1}, {0x10, 0x7, 0x0, 0x1, 0x1}, {0x4, 0x7}, {0x80, 0x7}, {0xfffffff8, 0x100, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x1000, 0x32d1, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x401}) 8m25.775161633s ago: executing program 6 (id=1508): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x803cfa, 0x40, 0x0, 0x5a}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x3}}) syz_io_uring_setup(0x26e, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac0000002100010028bd7000fcdbdf25e0000002000000000000000000000000ac14142a0000000000000000000000004e2000084e200000020080802e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b56b6e000000000050001100fc"], 0xac}, 0x1, 0x0, 0x0, 0x8048044}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xff}}, 0x1c) shutdown(r2, 0x1) sched_setscheduler(r1, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, &(0x7f0000000280)) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) write$P9_ROPEN(r5, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x1, 0x0, 0x5}, 0xc}}, 0x18) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x3ff, [0x3, 0x1], 0x2}, 0x10) 8m23.936119332s ago: executing program 6 (id=1510): socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x80003, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x4100, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) 8m22.07982058s ago: executing program 6 (id=1516): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@verity_off}], [], 0x2c}) mount(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='binfmt_misc\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) socket(0x1a, 0x3, 0x5) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r3, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, 0x9, 0x1e}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x6}}}, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000200)={r5, 0x8}, &(0x7f0000000280)=0x8) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/17, 0x14}}], 0x1, 0x2000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@empty, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x2b}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0xfffffffffffffffe}, {0x0, 0x200000, 0x1}, {0x40000, 0xeffffffd, 0xae8}, 0x0, 0x3504, 0xa, 0x0, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="008000"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="20056ae18b30"], 0x0, 0x0}) 8m18.887825849s ago: executing program 6 (id=1531): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x2, '\x00', 0x8}}, 0x2a) 8m17.942982666s ago: executing program 6 (id=1535): socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x80003, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) (fail_nth: 7) 8m17.448023627s ago: executing program 34 (id=1535): socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x80003, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) (fail_nth: 7) 1m15.665996691s ago: executing program 4 (id=3637): gettid() timer_create(0x0, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) unlink(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)='f', 0x1}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x26004885) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) 1m15.31567146s ago: executing program 4 (id=3640): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) read$hidraw(r2, &(0x7f0000000080)=""/4097, 0x1001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="0c0023b6c5e6f84a80063b12838006000300e700000093b1beabf6ed01258548415941d19607b2a51c10a43f88255679c7cc328505ded55ff4699fffd1675e8e22019d27d9b8e5c5c10be513c7a090d5dff0b5a7a5173403fc7f011cd18d2c58de530f76db42d1408c6bfabeb73ad24336cd8c1ea9601fdaf739bfadf0af8f871feca705a746fcf46ff079562a6cbea0f8404b3ad85e02b9109f1e64879e6df1bdb7ed9c1044489c09a3e8a8"], 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$kcm(0x10, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000040)=r6) close(r7) 1m14.999902904s ago: executing program 4 (id=3642): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20045808}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0xc, 0xed, 0x6be8, 0x48, @rand_addr=' \x01\x00', @private0, 0x7, 0x10, 0x8, 0x2}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401", 0x30}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x7, [@enum={0x5}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0x67, 0xa0, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}}, 0xc000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m14.454921899s ago: executing program 4 (id=3645): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000280)='.\x00', r1, &(0x7f0000000300)='./file0\x00', 0x0) symlink(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000740)='./file0\x00') readlink(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)=""/28, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x494}}, 0x0) 1m13.993610813s ago: executing program 4 (id=3647): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x3, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) sigaltstack(&(0x7f0000000200)={0x0, 0x0, 0xfffffca4}, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000000000000290000000800000005000000000000002400000000000000290000003200000000000000000000000000ffff"], 0x40}, 0x20044084) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x40}, 0x10) 1m9.032037616s ago: executing program 4 (id=3662): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002440)=@delchain={0x34, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000041400042cbd72e7fedbdf25080001000000000008000100020000000500010002000000"], 0x28}}, 0x24000005) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m7.784750635s ago: executing program 35 (id=3662): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002440)=@delchain={0x34, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000041400042cbd72e7fedbdf25080001000000000008000100020000000500010002000000"], 0x28}}, 0x24000005) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 26.594486901s ago: executing program 3 (id=3877): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x0, 0x9, 0x40, 0x8, 0x5a, 0x0, 0xff, 0x9, 0x0, 0x0, 0x9}, 0xe) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x1, 0x10100, 0x0) 26.240000478s ago: executing program 3 (id=3884): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x2, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaa0f9ae3c200000088a80200810021"], 0x0) 25.795426104s ago: executing program 3 (id=3890): prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000840)={0x2, 0xffffffff, 0xfffff7ff}) rt_tgsigqueueinfo(r1, r0, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) 25.189026176s ago: executing program 3 (id=3893): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) gettid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000600)}], 0x1, 0x5, 0x45) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@deltaction={0x3c, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 24.479336906s ago: executing program 3 (id=3900): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) 23.407839724s ago: executing program 3 (id=3916): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002140), 0x8004, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x20, 0xfffd, 0x20, 0x81, 0x4000}}, 0x50) getxattr(&(0x7f00000056c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0xe0, 0x0, 0x6, {0x3, 0x0, 0x207fffffff, 0x4d3e8000, 0x800003fc, 0x9, {0x1, 0x9, 0x8, 0x1, 0x10001, 0x5241, 0x8, 0x103, 0x6, 0xa000, 0x0, r2, r3, 0xfffffffb, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.194371991s ago: executing program 5 (id=4034): io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random="79cfaf0bf3ce", @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x2, 0x7, 0x34, 0x67, 0x0, 0xb, 0x6, 0x0, @remote, @remote, {[@timestamp={0x44, 0xc, 0x6, 0x0, 0x5, [0x2c1, 0x1]}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 8.957758521s ago: executing program 5 (id=4037): socket$inet6_udp(0xa, 0x2, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x800000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3fffff) 7.730630417s ago: executing program 5 (id=4045): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sched_getaffinity(r3, 0x8, &(0x7f0000000180)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) unshare(0x2a020400) unshare(0x2a020400) 6.782619127s ago: executing program 8 (id=4055): unshare(0x20000400) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0xb702, 0x0) 6.616002745s ago: executing program 5 (id=4057): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/229, 0xe5}, 0xffffab9d}], 0x1, 0x10022, 0x0) 6.111920643s ago: executing program 8 (id=4064): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) 5.668372387s ago: executing program 5 (id=4070): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) 5.577861558s ago: executing program 8 (id=4071): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000380), &(0x7f0000000580)=r1}, 0x20) syz_emit_ethernet(0xfed0, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x4e20, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b0eb591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "00802000003211817ada1e97297a54f5"}}}}}}}, 0x0) 5.255655991s ago: executing program 5 (id=4073): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 5.043877747s ago: executing program 1 (id=4075): socket$inet6_udp(0xa, 0x2, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x800000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f00000000c0)=""/104, 0x12) sendfile(0xffffffffffffffff, r3, 0x0, 0x3fffff) 4.966326342s ago: executing program 8 (id=4076): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) 4.554162058s ago: executing program 8 (id=4078): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4, &(0x7f0000002400)={0x2, 0xfffe, @multicast2}, 0x10) 3.575654591s ago: executing program 1 (id=4079): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/229, 0xe5}, 0xffffab9d}], 0x1, 0x10022, 0x0) 3.108086865s ago: executing program 8 (id=4083): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2.960036739s ago: executing program 1 (id=4084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(r2, 0x0, 0x8, 0x0) wait4(r2, 0x0, 0xa, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, &(0x7f00000002c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') 2.034411243s ago: executing program 1 (id=4091): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) 1.900022974s ago: executing program 1 (id=4093): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x102}) 1.820468398s ago: executing program 1 (id=4095): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r0}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000380), &(0x7f0000000580)=r2}, 0x20) syz_emit_ethernet(0xfed0, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x4e20, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b0eb591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "00802000003211817ada1e97297a54f5"}}}}}}}, 0x0) 612.846416ms ago: executing program 7 (id=4105): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 531.294062ms ago: executing program 7 (id=4106): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 379.999039ms ago: executing program 7 (id=4107): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x3c}}, 0x400c044) 295.654916ms ago: executing program 7 (id=4108): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1a, 0x1, 0x0, "1c13ebdaf203006b26b1d750185fd75a206da058e85b21972ab1439b1cc200"}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="50000000080211000001080211000000505050505050000000000000000000006400010000060202020202020101840406"], 0x5f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 145.089583ms ago: executing program 7 (id=4109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 0s ago: executing program 7 (id=4110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r2, 0xd, 0x0, @void}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): d vhci_hcd.3: stop threads [ 742.921046][ T4478] vhci_hcd vhci_hcd.3: release socket [ 742.921102][ T4478] vhci_hcd vhci_hcd.3: disconnect device [ 742.925907][ T53] usb 40-1: enqueue for inactive port 0 [ 743.585333][ T53] usb usb40-port1: attempt power cycle [ 744.694447][ T5865] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 745.282369][ T5865] usb 5-1: device descriptor read/64, error -71 [ 745.465539][ T53] usb usb40-port1: unable to enumerate USB device [ 745.542577][ T5865] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 745.564403][T15698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.564986][T15698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.672599][ T5865] usb 5-1: device descriptor read/64, error -71 [ 745.741738][T15704] fuse: Bad value for 'user_id' [ 745.741763][T15704] fuse: Bad value for 'user_id' [ 745.782611][ T5865] usb usb5-port1: attempt power cycle [ 746.133753][ T5865] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 746.153939][ T5865] usb 5-1: device descriptor read/8, error -71 [ 746.391971][ T5865] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 747.631521][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.766474][ T5865] usb 5-1: device descriptor read/8, error -71 [ 747.871532][ T5865] usb usb5-port1: unable to enumerate USB device [ 748.871370][T15734] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3327'. [ 748.880955][ T5926] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 748.926007][T15736] fuse: Bad value for 'fd' [ 749.005670][T15739] FAULT_INJECTION: forcing a failure. [ 749.005670][T15739] name failslab, interval 1, probability 0, space 0, times 0 [ 749.005712][T15739] CPU: 1 UID: 0 PID: 15739 Comm: syz.7.3330 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 749.005742][T15739] Tainted: [L]=SOFTLOCKUP [ 749.005751][T15739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 749.005764][T15739] Call Trace: [ 749.005774][T15739] [ 749.005784][T15739] dump_stack_lvl+0xe8/0x150 [ 749.005824][T15739] should_fail_ex+0x46b/0x600 [ 749.005865][T15739] should_failslab+0xa8/0x100 [ 749.005902][T15739] kmem_cache_alloc_noprof+0x87/0x680 [ 749.005933][T15739] ? do_getname+0x2e/0x250 [ 749.005962][T15739] do_getname+0x2e/0x250 [ 749.005982][T15739] ? user_path_at+0x1e/0x160 [ 749.006012][T15739] user_path_at+0x2a/0x160 [ 749.006043][T15739] __se_sys_mount+0x2dc/0x420 [ 749.006076][T15739] ? __pfx___se_sys_mount+0x10/0x10 [ 749.006110][T15739] ? __x64_sys_mount+0x20/0xc0 [ 749.006144][T15739] do_syscall_64+0x14d/0xf80 [ 749.006181][T15739] ? trace_irq_disable+0x3b/0x150 [ 749.006207][T15739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.006230][T15739] ? clear_bhb_loop+0x40/0x90 [ 749.006259][T15739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.006281][T15739] RIP: 0033:0x7fe5f079c799 [ 749.006303][T15739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.006322][T15739] RSP: 002b:00007fe5ee9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 749.006348][T15739] RAX: ffffffffffffffda RBX: 00007fe5f0a15fa0 RCX: 00007fe5f079c799 [ 749.006364][T15739] RDX: 0000200000000200 RSI: 0000200000000000 RDI: 0000000000000000 [ 749.006380][T15739] RBP: 00007fe5ee9f6090 R08: 0000200000000340 R09: 0000000000000000 [ 749.006394][T15739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.006407][T15739] R13: 00007fe5f0a16038 R14: 00007fe5f0a15fa0 R15: 00007fff6fc6de88 [ 749.006442][T15739] [ 749.042407][ T5926] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 749.042446][ T5926] usb 4-1: config 150 has no interface number 0 [ 749.042492][ T5926] usb 4-1: config 150 interface 204 has no altsetting 0 [ 749.042510][ T5926] usb 4-1: config 150 interface 1 has no altsetting 0 [ 749.044836][ T5926] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 749.044862][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.044881][ T5926] usb 4-1: Product: syz [ 749.044896][ T5926] usb 4-1: Manufacturer: syz [ 749.044910][ T5926] usb 4-1: SerialNumber: syz [ 749.269540][ T5926] xr_serial 4-1:150.204: xr_serial converter detected [ 749.817818][T15729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.818450][T15729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.822290][ T5926] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 749.822362][ T5926] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 750.468253][ T5850] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 750.501059][ T5926] usb 4-1: USB disconnect, device number 87 [ 750.504381][ T5926] xr_serial 4-1:150.204: device disconnected [ 750.592720][ T5886] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 750.619465][ T5850] usb 2-1: Using ep0 maxpacket: 16 [ 750.623884][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 750.626544][ T5850] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 750.626577][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.626600][ T5850] usb 2-1: Product: syz [ 750.626616][ T5850] usb 2-1: Manufacturer: syz [ 750.626626][ T5850] usb 2-1: SerialNumber: syz [ 750.663604][ T5850] usb 2-1: config 0 descriptor?? [ 750.694987][ T5850] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 750.695027][ T5850] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 750.773331][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 750.776398][ T5886] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 750.776443][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.809884][ T5886] usb 5-1: config 0 descriptor?? [ 750.841831][ T5886] gspca_main: sunplus-2.14.0 probing 041e:400b [ 751.901230][ T5850] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 752.469492][ T5886] gspca_sunplus: reg_w_riv err -71 [ 752.469561][ T5886] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 753.589480][T15771] FAULT_INJECTION: forcing a failure. [ 753.589480][T15771] name failslab, interval 1, probability 0, space 0, times 0 [ 753.589507][T15771] CPU: 0 UID: 0 PID: 15771 Comm: syz.7.3341 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 753.589525][T15771] Tainted: [L]=SOFTLOCKUP [ 753.589530][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 753.589538][T15771] Call Trace: [ 753.589543][T15771] [ 753.589549][T15771] dump_stack_lvl+0xe8/0x150 [ 753.589573][T15771] should_fail_ex+0x46b/0x600 [ 753.589596][T15771] should_failslab+0xa8/0x100 [ 753.589616][T15771] __kmalloc_noprof+0xdf/0x7b0 [ 753.589634][T15771] ? tomoyo_encode+0x28b/0x550 [ 753.589656][T15771] tomoyo_encode+0x28b/0x550 [ 753.589677][T15771] tomoyo_realpath_from_path+0x58d/0x5d0 [ 753.589702][T15771] ? tomoyo_path_number_perm+0x219/0x630 [ 753.589719][T15771] tomoyo_path_number_perm+0x246/0x630 [ 753.589736][T15771] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 753.589754][T15771] ? __lock_acquire+0x6b5/0x2cf0 [ 753.589787][T15771] ? __fget_files+0x2a/0x420 [ 753.589804][T15771] ? __fget_files+0x2a/0x420 [ 753.589817][T15771] ? __fget_files+0x3a6/0x420 [ 753.589830][T15771] ? __fget_files+0x2a/0x420 [ 753.589847][T15771] security_file_ioctl+0xc3/0x2a0 [ 753.589865][T15771] __se_sys_ioctl+0x47/0x170 [ 753.589885][T15771] do_syscall_64+0x14d/0xf80 [ 753.589902][T15771] ? trace_irq_disable+0x3b/0x150 [ 753.589916][T15771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.589929][T15771] ? clear_bhb_loop+0x40/0x90 [ 753.589944][T15771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.589957][T15771] RIP: 0033:0x7fe5f079c799 [ 753.589970][T15771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.589981][T15771] RSP: 002b:00007fe5ee9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 753.589997][T15771] RAX: ffffffffffffffda RBX: 00007fe5f0a16090 RCX: 00007fe5f079c799 [ 753.590006][T15771] RDX: 00002000000001c0 RSI: 00000000c0205647 RDI: 0000000000000006 [ 753.590015][T15771] RBP: 00007fe5ee9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 753.590023][T15771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.590031][T15771] R13: 00007fe5f0a16128 R14: 00007fe5f0a16090 R15: 00007fff6fc6de88 [ 753.590050][T15771] [ 753.590062][T15771] ERROR: Out of memory at tomoyo_realpath_from_path. [ 753.944897][ T5886] usb 5-1: USB disconnect, device number 67 [ 754.025990][ T5850] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 754.026015][ T5850] em28xx 2-1:0.0: board has no eeprom [ 754.092574][T15774] fuse: Bad value for 'fd' [ 754.128385][ T5850] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 754.128407][ T5850] em28xx 2-1:0.0: dvb set to bulk mode. [ 754.129518][ T809] em28xx 2-1:0.0: Binding DVB extension [ 754.601723][ T5850] usb 2-1: USB disconnect, device number 42 [ 754.603187][ T5850] em28xx 2-1:0.0: Disconnecting em28xx [ 755.556353][ T809] em28xx 2-1:0.0: Registering input extension [ 755.570399][ T5850] em28xx 2-1:0.0: Closing input extension [ 757.156519][ T5850] em28xx 2-1:0.0: Freeing device [ 757.671080][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3353'. [ 758.267386][T15815] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3353'. [ 759.044172][T15817] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3352'. [ 759.315073][ T5926] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 759.474646][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 760.109681][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 762.108422][ T5926] usb 5-1: string descriptor 0 read error: -71 [ 762.108581][ T5926] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 762.108607][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.121176][ T5926] usb 5-1: config 0 descriptor?? [ 762.150310][ T5926] usb 5-1: can't set config #0, error -71 [ 762.231319][ T5926] usb 5-1: USB disconnect, device number 68 [ 762.292476][T15824] fuse: Bad value for 'fd' [ 765.198704][T15839] sctp: [Deprecated]: syz.5.3363 (pid 15839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 765.198704][T15839] Use struct sctp_sack_info instead [ 765.578284][T15858] FAULT_INJECTION: forcing a failure. [ 765.578284][T15858] name failslab, interval 1, probability 0, space 0, times 0 [ 765.578335][T15858] CPU: 0 UID: 0 PID: 15858 Comm: syz.4.3369 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 765.578365][T15858] Tainted: [L]=SOFTLOCKUP [ 765.578373][T15858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 765.578386][T15858] Call Trace: [ 765.578395][T15858] [ 765.578405][T15858] dump_stack_lvl+0xe8/0x150 [ 765.578443][T15858] should_fail_ex+0x46b/0x600 [ 765.578485][T15858] should_failslab+0xa8/0x100 [ 765.578522][T15858] __kmalloc_noprof+0xdf/0x7b0 [ 765.578553][T15858] ? kfree+0x4d/0x6c0 [ 765.578579][T15858] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 765.578621][T15858] tomoyo_realpath_from_path+0xe3/0x5d0 [ 765.578668][T15858] ? tomoyo_path_number_perm+0x219/0x630 [ 765.578697][T15858] tomoyo_path_number_perm+0x246/0x630 [ 765.578729][T15858] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 765.578762][T15858] ? __lock_acquire+0x6b5/0x2cf0 [ 765.578825][T15858] ? __fget_files+0x2a/0x420 [ 765.578855][T15858] ? __fget_files+0x2a/0x420 [ 765.578880][T15858] ? __fget_files+0x3a6/0x420 [ 765.578904][T15858] ? __fget_files+0x2a/0x420 [ 765.578935][T15858] security_file_ioctl+0xc3/0x2a0 [ 765.578963][T15858] __se_sys_ioctl+0x47/0x170 [ 765.578997][T15858] do_syscall_64+0x14d/0xf80 [ 765.579024][T15858] ? trace_irq_disable+0x3b/0x150 [ 765.579048][T15858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.579068][T15858] ? clear_bhb_loop+0x40/0x90 [ 765.579095][T15858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.579116][T15858] RIP: 0033:0x7f3eaa17c799 [ 765.579138][T15858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.579158][T15858] RSP: 002b:00007f3ea83d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.579184][T15858] RAX: ffffffffffffffda RBX: 00007f3eaa3f5fa0 RCX: 00007f3eaa17c799 [ 765.579201][T15858] RDX: 0000200000001600 RSI: 00000000c0d05604 RDI: 0000000000000003 [ 765.579216][T15858] RBP: 00007f3ea83d6090 R08: 0000000000000000 R09: 0000000000000000 [ 765.579231][T15858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.579245][T15858] R13: 00007f3eaa3f6038 R14: 00007f3eaa3f5fa0 R15: 00007ffdc3d5f328 [ 765.579282][T15858] [ 765.579302][T15858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 765.901127][T15863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3371'. [ 765.939132][T15864] FAULT_INJECTION: forcing a failure. [ 765.939132][T15864] name failslab, interval 1, probability 0, space 0, times 0 [ 765.939185][T15864] CPU: 1 UID: 0 PID: 15864 Comm: syz.1.3368 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 765.939218][T15864] Tainted: [L]=SOFTLOCKUP [ 765.939227][T15864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 765.939240][T15864] Call Trace: [ 765.939250][T15864] [ 765.939260][T15864] dump_stack_lvl+0xe8/0x150 [ 765.939301][T15864] should_fail_ex+0x46b/0x600 [ 765.939344][T15864] should_failslab+0xa8/0x100 [ 765.939382][T15864] __kmalloc_cache_noprof+0x84/0x690 [ 765.939415][T15864] ? ima_d_path+0xd4/0x230 [ 765.939453][T15864] ima_d_path+0xd4/0x230 [ 765.939491][T15864] ? __pfx_ima_d_path+0x10/0x10 [ 765.939522][T15864] ? lockdep_hardirqs_on+0x7a/0x110 [ 765.939555][T15864] ? rwbase_write_lock+0x568/0x730 [ 765.939603][T15864] process_measurement+0x756/0x1c90 [ 765.939655][T15864] ? __pfx_process_measurement+0x10/0x10 [ 765.939687][T15864] ? smack_log+0xf5/0x3f0 [ 765.939713][T15864] ? __pfx_smack_log+0x10/0x10 [ 765.939733][T15864] ? tomoyo_check_open_permission+0x1d3/0x470 [ 765.939792][T15864] ? __pfx_smack_file_open+0x10/0x10 [ 765.939835][T15864] ? tomoyo_file_open+0x167/0x220 [ 765.939863][T15864] ima_file_check+0xe1/0x130 [ 765.939894][T15864] ? do_dentry_open+0xd5a/0x13e0 [ 765.939922][T15864] ? __pfx_ima_file_check+0x10/0x10 [ 765.939965][T15864] security_file_post_open+0xb3/0x260 [ 765.939999][T15864] path_openat+0x2e88/0x38a0 [ 765.940071][T15864] ? __pfx_path_openat+0x10/0x10 [ 765.940104][T15864] ? __lock_acquire+0x6b5/0x2cf0 [ 765.940130][T15864] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 765.940180][T15864] ? do_raw_spin_lock+0x12b/0x2f0 [ 765.940223][T15864] do_file_open+0x23e/0x4a0 [ 765.940254][T15864] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 765.940289][T15864] ? __pfx_do_file_open+0x10/0x10 [ 765.940319][T15864] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 765.940371][T15864] ? alloc_fd+0x64e/0x6c0 [ 765.940409][T15864] do_sys_openat2+0x113/0x200 [ 765.940438][T15864] ? __pfx_do_sys_openat2+0x10/0x10 [ 765.940465][T15864] ? ksys_write+0x248/0x270 [ 765.940499][T15864] ? __pfx_ksys_write+0x10/0x10 [ 765.940535][T15864] __x64_sys_openat+0x138/0x170 [ 765.940569][T15864] do_syscall_64+0x14d/0xf80 [ 765.940597][T15864] ? trace_irq_disable+0x3b/0x150 [ 765.940623][T15864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.940647][T15864] ? clear_bhb_loop+0x40/0x90 [ 765.940676][T15864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.940699][T15864] RIP: 0033:0x7fea4fbbc799 [ 765.940720][T15864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.940738][T15864] RSP: 002b:00007fea4de0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 765.940767][T15864] RAX: ffffffffffffffda RBX: 00007fea4fe35fa0 RCX: 00007fea4fbbc799 [ 765.940783][T15864] RDX: 0000000000060840 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 765.940799][T15864] RBP: 00007fea4de0e090 R08: 0000000000000000 R09: 0000000000000000 [ 765.940813][T15864] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 765.940826][T15864] R13: 00007fea4fe36038 R14: 00007fea4fe35fa0 R15: 00007ffdea8dc488 [ 765.940862][T15864] [ 766.103688][T15868] fuse: Bad value for 'fd' [ 766.176381][ T36] kauditd_printk_skb: 109 callbacks suppressed [ 766.176401][ T36] audit: type=1804 audit(1772361309.596:547): pid=15864 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.3368" name="file1" dev="ramfs" ino=52315 res=1 errno=0 [ 766.730615][ T53] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 766.893732][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.893772][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.893799][ T53] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 766.893847][ T53] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 766.893873][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.996969][ T53] usb 4-1: config 0 descriptor?? [ 767.015178][T15889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3379'. [ 767.921304][ T53] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 768.141420][ T53] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 768.299722][ T53] usb 2-1: device descriptor read/64, error -71 [ 768.358335][ T9] usb 4-1: USB disconnect, device number 88 [ 768.549807][ T53] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 768.681207][ T53] usb 2-1: device descriptor read/64, error -71 [ 768.789818][ T53] usb usb2-port1: attempt power cycle [ 769.508962][ T53] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 769.536077][ T53] usb 2-1: device descriptor read/8, error -71 [ 769.546510][T15915] fuse: Bad value for 'fd' [ 769.781905][ T53] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 769.809978][ T53] usb 2-1: device descriptor read/8, error -71 [ 769.900219][ T36] audit: type=1326 audit(1772361313.489:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15921 comm="syz.5.3387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd61b24c799 code=0x0 [ 769.919232][ T53] usb usb2-port1: unable to enumerate USB device [ 770.007696][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3387'. [ 770.007713][T15925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3387'. [ 770.976854][T15939] ref_ctr_offset mismatch. inode: 0xa79 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000002a00 [ 771.162474][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3392'. [ 771.166298][T15948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.159814][T15948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.214448][T15958] program syz.5.3394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 772.477957][ T53] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 773.483521][ T53] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 773.483559][ T53] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 773.483587][ T53] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 773.529243][ T53] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 773.529277][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.529299][ T53] usb 2-1: Product: syz [ 773.529315][ T53] usb 2-1: Manufacturer: syz [ 773.529330][ T53] usb 2-1: SerialNumber: syz [ 773.609603][ T53] usb 2-1: config 0 descriptor?? [ 773.612863][T15952] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 773.615524][T15952] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 773.646699][ T53] usb 2-1: ucan: probing device on interface #0 [ 773.734060][T15973] fuse: Bad value for 'fd' [ 774.712552][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3401'. [ 774.743930][ T53] ucan 2-1:0.0 can0: registered device [ 774.757727][ T53] ucan 2-1:0.0 can0: firmware string: unknown [ 774.773217][ T53] usb 2-1: USB disconnect, device number 47 [ 776.822859][T16016] fuse: Invalid rootmode [ 776.894818][T11706] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 777.002574][ T53] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 777.076842][T11706] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 777.076917][T11706] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 777.076973][T11706] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 777.077112][T11706] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 777.077176][T11706] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 777.112102][T11706] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 777.112149][T11706] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 777.112212][T11706] usb 4-1: Product: syz [ 777.112294][T11706] usb 4-1: Manufacturer: syz [ 777.155309][ T53] usb 5-1: device descriptor read/64, error -71 [ 777.246548][T11706] cdc_wdm 4-1:1.0: skipping garbage [ 777.246564][T11706] cdc_wdm 4-1:1.0: skipping garbage [ 777.291514][T11706] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 777.291541][T11706] cdc_wdm 4-1:1.0: Unknown control protocol [ 777.404536][ T53] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 777.534511][ T53] usb 5-1: device descriptor read/64, error -71 [ 777.654827][ T53] usb usb5-port1: attempt power cycle [ 777.714488][T16011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.717917][T16011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.733437][T16011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.734861][T16011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.738288][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 777.738318][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 777.738579][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 777.738599][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 777.738834][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 777.738854][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 777.738949][ T5850] usb 4-1: USB disconnect, device number 89 [ 777.739093][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 777.739114][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 777.739138][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 777.934488][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 778.088786][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.088827][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.088853][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 778.088900][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 778.088927][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.150046][ T53] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 778.166576][ T53] usb 5-1: device descriptor read/8, error -71 [ 778.269797][ T9] usb 2-1: config 0 descriptor?? [ 778.574848][ T53] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 778.604675][ T53] usb 5-1: device descriptor read/8, error -71 [ 778.724267][ T53] usb usb5-port1: unable to enumerate USB device [ 779.520185][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 779.520325][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 779.546824][ T9] usb 2-1: USB disconnect, device number 48 [ 779.728811][T16049] tmpfs: Bad value for 'mpol' [ 779.776616][T16050] fuse: Invalid rootmode [ 779.941291][T16056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.941900][T16056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.193296][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 780.322036][T16065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3430'. [ 780.322104][T16065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3430'. [ 780.363124][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 780.396609][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 780.396684][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.781553][ T9] usb 5-1: config 0 descriptor?? [ 781.159370][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 781.282432][ T5850] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 781.557681][ T5850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.568577][ T5850] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 781.568682][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.568706][ T5850] usb 2-1: Product: syz [ 781.568723][ T5850] usb 2-1: Manufacturer: syz [ 781.568740][ T5850] usb 2-1: SerialNumber: syz [ 781.581828][ T5850] usb 2-1: config 0 descriptor?? [ 781.607615][ T5850] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22 [ 781.779277][ T9] gspca_sunplus: reg_r err -71 [ 781.779395][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 781.785230][ T9] usb 5-1: USB disconnect, device number 73 [ 781.837351][ T5850] usb 2-1: USB disconnect, device number 49 [ 781.997811][T16082] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3432'. [ 782.450209][T16090] fuse: Invalid rootmode [ 782.698813][T16094] FAULT_INJECTION: forcing a failure. [ 782.698813][T16094] name failslab, interval 1, probability 0, space 0, times 0 [ 782.698888][T16094] CPU: 0 UID: 0 PID: 16094 Comm: syz.7.3435 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 782.698920][T16094] Tainted: [L]=SOFTLOCKUP [ 782.698928][T16094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 782.698942][T16094] Call Trace: [ 782.698952][T16094] [ 782.698962][T16094] dump_stack_lvl+0xe8/0x150 [ 782.699002][T16094] should_fail_ex+0x46b/0x600 [ 782.699051][T16094] should_failslab+0xa8/0x100 [ 782.699088][T16094] __kmalloc_cache_noprof+0x84/0x690 [ 782.699122][T16094] ? __vmalloc_noprof+0xd2/0x120 [ 782.699151][T16094] ? bpf_prog_alloc_no_stats+0xdb/0x4f0 [ 782.699186][T16094] bpf_prog_alloc_no_stats+0xdb/0x4f0 [ 782.699228][T16094] bpf_prog_alloc+0x3c/0x1a0 [ 782.699260][T16094] __get_filter+0xff/0x400 [ 782.699300][T16094] sk_attach_filter+0x24/0x140 [ 782.699336][T16094] sk_setsockopt+0x1dad/0x2bb0 [ 782.699375][T16094] ? __pfx_sk_setsockopt+0x10/0x10 [ 782.699409][T16094] ? irqentry_exit+0x59e/0x620 [ 782.699455][T16094] ? __fget_files+0x2a/0x420 [ 782.699486][T16094] ? __fget_files+0x2a/0x420 [ 782.699511][T16094] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 782.699547][T16094] do_sock_setsockopt+0x11b/0x1b0 [ 782.699582][T16094] __x64_sys_setsockopt+0x143/0x1b0 [ 782.699618][T16094] do_syscall_64+0x14d/0xf80 [ 782.699648][T16094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.699671][T16094] ? clear_bhb_loop+0x40/0x90 [ 782.699699][T16094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.699721][T16094] RIP: 0033:0x7fe5f079c799 [ 782.699743][T16094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.699762][T16094] RSP: 002b:00007fe5ee9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 782.699787][T16094] RAX: ffffffffffffffda RBX: 00007fe5f0a16180 RCX: 00007fe5f079c799 [ 782.699804][T16094] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 782.699817][T16094] RBP: 00007fe5ee9b4090 R08: 0000000000000010 R09: 0000000000000000 [ 782.699832][T16094] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000002 [ 782.699847][T16094] R13: 00007fe5f0a16218 R14: 00007fe5f0a16180 R15: 00007fff6fc6de88 [ 782.699883][T16094] [ 783.686859][T16096] qnx4: unable to read the superblock [ 783.904706][T16107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.905289][T16107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.966138][T16109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.966784][T16109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.012733][ T5850] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 784.150762][ T53] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 784.170554][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.170588][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.170603][ T5850] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 784.205154][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 784.205698][ T5850] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 784.205715][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.239820][ T5850] usb 4-1: config 0 descriptor?? [ 784.308081][ T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.308145][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 784.308175][ T53] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 784.308268][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 784.308297][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 784.308323][ T53] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 784.309813][ T53] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 784.309842][ T53] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 784.309862][ T53] usb 5-1: Manufacturer: syz [ 784.323320][ T53] usb 5-1: config 0 descriptor?? [ 784.350949][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 784.358116][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 784.358209][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 784.365306][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 784.365397][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.365420][ T9] usb 2-1: Product: syz [ 784.365436][ T9] usb 2-1: Manufacturer: syz [ 784.365452][ T9] usb 2-1: SerialNumber: syz [ 784.476617][ T9] usb 2-1: config 0 descriptor?? [ 784.504618][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 784.504715][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 784.566426][ T10] usb 5-1: USB disconnect, device number 74 [ 784.970858][ T5850] usbhid 4-1:0.0: can't add hid device: -71 [ 784.970990][ T5850] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 785.001628][ T5850] usb 4-1: USB disconnect, device number 90 [ 785.017646][ T9] em28xx 2-1:0.0: chip ID is em2874 [ 785.325808][ T5850] usb 2-1: USB disconnect, device number 50 [ 785.327388][ T5850] em28xx 2-1:0.0: Disconnecting em28xx [ 785.348068][ T5850] em28xx 2-1:0.0: Freeing device [ 787.379239][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 787.382256][T16141] netlink: 4924 bytes leftover after parsing attributes in process `syz.5.3453'. [ 787.508983][ T10] usb 4-1: device descriptor read/64, error -71 [ 788.117093][T16158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3458'. [ 788.144084][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3458'. [ 788.158917][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 788.288544][ T10] usb 4-1: device descriptor read/64, error -71 [ 788.399000][ T10] usb usb4-port1: attempt power cycle [ 788.418422][ T53] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 788.558418][ T53] usb 2-1: device descriptor read/64, error -71 [ 788.632093][ T5926] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 788.758376][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 788.779286][ T10] usb 4-1: device descriptor read/8, error -71 [ 788.788369][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 788.790859][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 788.790890][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 788.808216][ T53] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 788.832692][ T5926] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 788.832725][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.832748][ T5926] usb 5-1: Product: syz [ 788.832764][ T5926] usb 5-1: Manufacturer: syz [ 788.832780][ T5926] usb 5-1: SerialNumber: syz [ 788.845710][ T5926] usb 5-1: config 0 descriptor?? [ 788.898396][ T5926] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 788.978113][ T53] usb 2-1: device descriptor read/64, error -71 [ 789.018347][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 789.135772][T16181] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3465'. [ 789.205520][ T53] usb usb2-port1: attempt power cycle [ 789.678358][ T53] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 789.719884][ T53] usb 2-1: device descriptor read/8, error -71 [ 790.081824][ T12] usb 5-1: Failed to submit usb control message: -71 [ 790.081869][ T12] usb 5-1: unable to send the bmi data to the device: -71 [ 790.081947][ T12] usb 5-1: unable to get target info from device [ 790.081966][ T12] usb 5-1: could not get target info (-71) [ 790.083887][ T12] usb 5-1: could not probe fw (-71) [ 790.171887][ T53] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 790.172781][ T5928] usb 5-1: USB disconnect, device number 75 [ 790.191761][ T53] usb 2-1: device descriptor read/8, error -71 [ 790.211316][ T10] usb 4-1: device descriptor read/8, error -71 [ 790.298253][ T53] usb usb2-port1: unable to enumerate USB device [ 790.309836][T16183] FAULT_INJECTION: forcing a failure. [ 790.309836][T16183] name failslab, interval 1, probability 0, space 0, times 0 [ 790.309872][T16183] CPU: 0 UID: 0 PID: 16183 Comm: syz.5.3466 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 790.309900][T16183] Tainted: [L]=SOFTLOCKUP [ 790.309908][T16183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 790.309920][T16183] Call Trace: [ 790.309928][T16183] [ 790.309937][T16183] dump_stack_lvl+0xe8/0x150 [ 790.309970][T16183] should_fail_ex+0x46b/0x600 [ 790.310014][T16183] should_failslab+0xa8/0x100 [ 790.310045][T16183] __kvmalloc_node_noprof+0x170/0x8e0 [ 790.310073][T16183] ? __fget_files+0x2a/0x420 [ 790.310096][T16183] ? map_get_next_key+0x23a/0x630 [ 790.310127][T16183] map_get_next_key+0x23a/0x630 [ 790.310153][T16183] ? bpf_lsm_bpf+0x9/0x20 [ 790.310176][T16183] __sys_bpf+0x768/0x950 [ 790.310201][T16183] ? __pfx___sys_bpf+0x10/0x10 [ 790.310221][T16183] ? rt_mutex_slowunlock+0x1cb/0x300 [ 790.310259][T16183] ? ksys_write+0x248/0x270 [ 790.310288][T16183] ? __pfx_ksys_write+0x10/0x10 [ 790.310321][T16183] __x64_sys_bpf+0x7c/0x90 [ 790.310343][T16183] do_syscall_64+0x14d/0xf80 [ 790.310368][T16183] ? trace_irq_disable+0x3b/0x150 [ 790.310389][T16183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.310409][T16183] ? clear_bhb_loop+0x40/0x90 [ 790.310434][T16183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.310452][T16183] RIP: 0033:0x7fd61b24c799 [ 790.310471][T16183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.310488][T16183] RSP: 002b:00007fd6194a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 790.310510][T16183] RAX: ffffffffffffffda RBX: 00007fd61b4c5fa0 RCX: 00007fd61b24c799 [ 790.310524][T16183] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004 [ 790.310537][T16183] RBP: 00007fd6194a6090 R08: 0000000000000000 R09: 0000000000000000 [ 790.310550][T16183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.310561][T16183] R13: 00007fd61b4c6038 R14: 00007fd61b4c5fa0 R15: 00007ffd421e0238 [ 790.310592][T16183] [ 790.336189][ T10] usb usb4-port1: unable to enumerate USB device [ 790.797398][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 790.947220][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 790.949310][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 790.951951][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 790.951970][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.951983][ T10] usb 4-1: Product: syz [ 790.951992][ T10] usb 4-1: Manufacturer: syz [ 790.952000][ T10] usb 4-1: SerialNumber: syz [ 790.955255][ T10] usb 4-1: config 0 descriptor?? [ 791.015707][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 791.015731][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 791.561755][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 791.636614][ T5865] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 791.872897][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.872944][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 791.872958][ T5865] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 791.872972][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.873000][ T5865] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 791.873014][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.250794][ T5865] usb 5-1: config 0 descriptor?? [ 793.269229][ T5865] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 793.269284][ T5865] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 793.505797][ T10] em28xx 4-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 793.505835][ T10] em28xx 4-1:0.0: failed to read eeprom (err=-5) [ 793.505884][ T10] em28xx 4-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 793.579746][T16205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.580079][T16205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.605868][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 793.605902][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 793.607496][ T5928] em28xx 4-1:0.0: Binding DVB extension [ 793.643323][ T10] usb 4-1: USB disconnect, device number 95 [ 793.667536][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 793.759296][ T5783] usb 5-1: USB disconnect, device number 76 [ 793.981679][ T5928] em28xx 4-1:0.0: Registering input extension [ 793.992522][ T10] em28xx 4-1:0.0: Closing input extension [ 794.074111][ T10] em28xx 4-1:0.0: Freeing device [ 794.252134][ T5794] udevd[5794]: setting mode of /dev/bus/usb/004/095 to 020664 failed: No such file or directory [ 794.252348][ T5794] udevd[5794]: setting owner of /dev/bus/usb/004/095 to uid=0, gid=0 failed: No such file or directory [ 795.060752][T16225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3479'. [ 795.920136][ T5928] IPVS: starting estimator thread 0... [ 796.250429][T16245] IPVS: using max 13 ests per chain, 31200 per kthread [ 798.568048][T16256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.568378][T16256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.569719][T16256] tmpfs: Bad value for 'nr_inodes' [ 798.585051][T16256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.585401][T16256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.742719][ T5783] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 798.982626][ T5783] usb 5-1: Using ep0 maxpacket: 16 [ 798.984753][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 798.986616][ T5783] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 798.986635][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.986647][ T5783] usb 5-1: Product: syz [ 798.986656][ T5783] usb 5-1: Manufacturer: syz [ 798.986665][ T5783] usb 5-1: SerialNumber: syz [ 798.990034][ T5783] usb 5-1: config 0 descriptor?? [ 798.996185][ T5783] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 798.996219][ T5783] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 799.097797][ T5805] Bluetooth: hci1: unexpected event 0x3e length: 833 > 260 [ 799.097828][ T5805] Bluetooth: hci1: unexpected subevent 0x0d length: 832 > 260 [ 799.098085][ T5805] Bluetooth: hci1: adv larger than maximum supported [ 799.098269][ T5805] Bluetooth: hci1: adv larger than maximum supported [ 799.594931][ T5783] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 801.290587][ T5783] em28xx 5-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 801.290624][ T5783] em28xx 5-1:0.0: failed to read eeprom (err=-5) [ 801.290671][ T5783] em28xx 5-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 801.361343][ T5783] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 801.361376][ T5783] em28xx 5-1:0.0: dvb set to bulk mode. [ 801.363708][ T53] em28xx 5-1:0.0: Binding DVB extension [ 801.404227][ T5783] usb 5-1: USB disconnect, device number 77 [ 801.406917][ T5783] em28xx 5-1:0.0: Disconnecting em28xx [ 801.651364][ T53] em28xx 5-1:0.0: Registering input extension [ 801.651673][ T5783] em28xx 5-1:0.0: Closing input extension [ 801.748194][ T5783] em28xx 5-1:0.0: Freeing device [ 804.839261][ T53] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 804.998772][ T53] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.998839][ T53] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 804.998868][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.058040][ T53] usb 2-1: config 0 descriptor?? [ 805.101053][ T53] pwc: Askey VC010 type 2 USB webcam detected. [ 805.854674][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3510'. [ 805.870443][T16322] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3510'. [ 806.025130][ T53] pwc: recv_control_msg error -32 req 02 val 2b00 [ 806.037216][ T53] pwc: recv_control_msg error -32 req 02 val 2700 [ 806.038312][ T53] pwc: recv_control_msg error -32 req 02 val 2c00 [ 806.038661][ T5928] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 806.060877][ T53] pwc: recv_control_msg error -32 req 04 val 1000 [ 806.061787][ T53] pwc: recv_control_msg error -32 req 04 val 1300 [ 806.085970][ T53] pwc: recv_control_msg error -32 req 04 val 1400 [ 806.095247][ T53] pwc: recv_control_msg error -32 req 02 val 2000 [ 806.096169][ T53] pwc: recv_control_msg error -32 req 02 val 2100 [ 806.131175][T16324] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3511'. [ 806.131204][T16324] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3511'. [ 806.131223][T16324] netlink: 'syz.4.3511': attribute type 5 has an invalid length. [ 806.131238][T16324] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3511'. [ 806.204925][ T5928] usb 4-1: device descriptor read/64, error -71 [ 806.448968][ T5928] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 807.118031][ T5928] usb 4-1: device descriptor read/64, error -71 [ 807.209668][ T53] pwc: recv_control_msg error -71 req 02 val 2500 [ 807.210240][ T53] pwc: recv_control_msg error -71 req 02 val 2400 [ 807.210958][ T53] pwc: recv_control_msg error -71 req 02 val 2600 [ 807.211472][ T53] pwc: recv_control_msg error -71 req 02 val 2900 [ 807.211990][ T53] pwc: recv_control_msg error -71 req 02 val 2800 [ 807.212878][ T53] pwc: recv_control_msg error -71 req 04 val 1100 [ 807.213389][ T53] pwc: recv_control_msg error -71 req 04 val 1200 [ 807.266164][ T53] pwc: Registered as video103. [ 807.278003][ T53] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45 [ 807.302450][ T5928] usb usb4-port1: attempt power cycle [ 807.373103][ T53] usb 2-1: USB disconnect, device number 55 [ 808.076813][T16342] ref_ctr_offset mismatch. inode: 0x121 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000002a00 [ 808.714099][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.441270][ T36] audit: type=1326 audit(1772361354.051:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16384 comm="syz.5.3527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd61b24c799 code=0x0 [ 812.639930][T16403] FAULT_INJECTION: forcing a failure. [ 812.639930][T16403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.640053][T16403] CPU: 1 UID: 0 PID: 16403 Comm: syz.4.3530 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 812.640084][T16403] Tainted: [L]=SOFTLOCKUP [ 812.640092][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 812.640107][T16403] Call Trace: [ 812.640115][T16403] [ 812.640124][T16403] dump_stack_lvl+0xe8/0x150 [ 812.640161][T16403] should_fail_ex+0x46b/0x600 [ 812.640201][T16403] _copy_from_user+0x2d/0xb0 [ 812.640228][T16403] ___sys_sendmsg+0x1c6/0x360 [ 812.640263][T16403] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.640298][T16403] ? finish_task_switch+0x240/0x920 [ 812.640323][T16403] ? lockdep_hardirqs_on+0x7a/0x110 [ 812.640379][T16403] ? __fget_files+0x2a/0x420 [ 812.640403][T16403] ? __fget_files+0x3a6/0x420 [ 812.640439][T16403] __x64_sys_sendmsg+0x1c3/0x2a0 [ 812.640470][T16403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 812.640511][T16403] ? rcu_is_watching+0x15/0xb0 [ 812.640548][T16403] do_syscall_64+0x14d/0xf80 [ 812.640577][T16403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.640600][T16403] ? clear_bhb_loop+0x40/0x90 [ 812.640627][T16403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.640650][T16403] RIP: 0033:0x7f3eaa17c799 [ 812.640671][T16403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.640688][T16403] RSP: 002b:00007f3ea83d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.640712][T16403] RAX: ffffffffffffffda RBX: 00007f3eaa3f5fa0 RCX: 00007f3eaa17c799 [ 812.640729][T16403] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003 [ 812.640742][T16403] RBP: 00007f3ea83d6090 R08: 0000000000000000 R09: 0000000000000000 [ 812.640757][T16403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.640770][T16403] R13: 00007f3eaa3f6038 R14: 00007f3eaa3f5fa0 R15: 00007ffdc3d5f328 [ 812.640805][T16403] [ 812.758503][T16400] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 816.178760][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3541'. [ 816.180051][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3541'. [ 816.431467][T16433] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3543'. [ 816.431497][T16433] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3543'. [ 816.431515][T16433] netlink: 'syz.5.3543': attribute type 5 has an invalid length. [ 816.431531][T16433] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3543'. [ 817.362389][ T53] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 817.540064][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 817.548561][ T53] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.548601][ T53] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 817.548616][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.607795][ T53] usb 2-1: config 0 descriptor?? [ 817.633739][ T53] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 817.696636][T16450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.696963][T16450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.976819][T11706] usb 2-1: USB disconnect, device number 56 [ 819.306243][T16468] FAULT_INJECTION: forcing a failure. [ 819.306243][T16468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.306284][T16468] CPU: 0 UID: 0 PID: 16468 Comm: syz.4.3555 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 819.306315][T16468] Tainted: [L]=SOFTLOCKUP [ 819.306323][T16468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 819.306336][T16468] Call Trace: [ 819.306346][T16468] [ 819.306356][T16468] dump_stack_lvl+0xe8/0x150 [ 819.306395][T16468] should_fail_ex+0x46b/0x600 [ 819.306438][T16468] _copy_from_user+0x2d/0xb0 [ 819.306467][T16468] kstrtouint_from_user+0xd6/0x180 [ 819.306507][T16468] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 819.306548][T16468] ? __lock_acquire+0x6b5/0x2cf0 [ 819.306582][T16468] proc_fail_nth_write+0x8e/0x210 [ 819.306608][T16468] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 819.306641][T16468] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 819.306668][T16468] vfs_write+0x2a3/0xba0 [ 819.306710][T16468] ? __pfx_vfs_write+0x10/0x10 [ 819.306745][T16468] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 819.306778][T16468] ? lockdep_hardirqs_on+0x7a/0x110 [ 819.306808][T16468] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 819.306839][T16468] ? mutex_lock_nested+0x152/0x1d0 [ 819.306861][T16468] ? fdget_pos+0x252/0x320 [ 819.306898][T16468] ksys_write+0x156/0x270 [ 819.306933][T16468] ? __pfx_ksys_write+0x10/0x10 [ 819.306964][T16468] ? __pfx_tty_ioctl+0x10/0x10 [ 819.307001][T16468] do_syscall_64+0x14d/0xf80 [ 819.307030][T16468] ? trace_irq_disable+0x3b/0x150 [ 819.307055][T16468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.307078][T16468] ? clear_bhb_loop+0x40/0x90 [ 819.307107][T16468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.307136][T16468] RIP: 0033:0x7f3eaa13cfce [ 819.307158][T16468] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 819.307178][T16468] RSP: 002b:00007f3ea83d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 819.307202][T16468] RAX: ffffffffffffffda RBX: 00007f3ea83d66c0 RCX: 00007f3eaa13cfce [ 819.307219][T16468] RDX: 0000000000000001 RSI: 00007f3ea83d60a0 RDI: 0000000000000004 [ 819.307234][T16468] RBP: 00007f3ea83d6090 R08: 0000000000000000 R09: 0000000000000000 [ 819.307248][T16468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.307262][T16468] R13: 00007f3eaa3f6038 R14: 00007f3eaa3f5fa0 R15: 00007ffdc3d5f328 [ 819.307301][T16468] [ 819.633854][T16470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.634466][T16470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.640152][T16470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.640750][T16470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.891829][ T5928] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 820.017643][T16480] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3557'. [ 820.017663][T16480] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3557'. [ 820.017696][T16480] netlink: 'syz.4.3557': attribute type 5 has an invalid length. [ 820.017705][T16480] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3557'. [ 820.050782][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 820.161559][T16467] openvswitch: netlink: Missing valid actions attribute. [ 820.161597][T16467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.169711][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 820.194896][ T5928] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 820.194944][ T5928] usb 4-1: can't read configurations, error -71 [ 821.792333][T16496] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 823.588075][T16522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3569'. [ 824.021791][T16529] netlink: 'syz.3.3571': attribute type 11 has an invalid length. [ 824.937588][T16522] bridge2: port 1(veth3) entered blocking state [ 824.937765][T16522] bridge2: port 1(veth3) entered disabled state [ 824.938054][T16522] veth3: entered allmulticast mode [ 824.941201][T16522] veth3: entered promiscuous mode [ 825.012732][T16528] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3572'. [ 825.012764][T16528] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3572'. [ 825.012781][T16528] netlink: 'syz.5.3572': attribute type 5 has an invalid length. [ 825.012795][T16528] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3572'. [ 825.447100][T16524] bridge2: port 2(veth0_to_bond) entered blocking state [ 825.447258][T16524] bridge2: port 2(veth0_to_bond) entered disabled state [ 825.447492][T16524] veth0_to_bond: entered allmulticast mode [ 825.485549][T16524] veth0_to_bond: entered promiscuous mode [ 826.277617][ T10] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 826.922478][ T10] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 826.922513][ T10] usb 2-1: config 150 has no interface number 0 [ 826.922560][ T10] usb 2-1: config 150 interface 204 has no altsetting 0 [ 826.926763][ T10] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 826.926791][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.926803][ T10] usb 2-1: Product: syz [ 826.926811][ T10] usb 2-1: Manufacturer: syz [ 826.987427][ T10] usb 2-1: SerialNumber: syz [ 828.251668][T16551] FAULT_INJECTION: forcing a failure. [ 828.251668][T16551] name failslab, interval 1, probability 0, space 0, times 0 [ 828.251711][T16551] CPU: 1 UID: 0 PID: 16551 Comm: syz.7.3579 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 828.251743][T16551] Tainted: [L]=SOFTLOCKUP [ 828.251751][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 828.251765][T16551] Call Trace: [ 828.251775][T16551] [ 828.251785][T16551] dump_stack_lvl+0xe8/0x150 [ 828.251824][T16551] should_fail_ex+0x46b/0x600 [ 828.251865][T16551] should_failslab+0xa8/0x100 [ 828.251912][T16551] kmem_cache_alloc_noprof+0x87/0x680 [ 828.251946][T16551] ? sk_prot_alloc+0x57/0x210 [ 828.251980][T16551] sk_prot_alloc+0x57/0x210 [ 828.252004][T16551] ? sk_alloc+0x27/0x390 [ 828.252034][T16551] sk_alloc+0x3a/0x390 [ 828.252067][T16551] inet6_create+0x7f0/0x1270 [ 828.252094][T16551] ? inet6_create+0x83/0x1270 [ 828.252128][T16551] __sock_create+0x4b2/0x9d0 [ 828.252161][T16551] l2tp_tunnel_register+0x3b8/0x14d0 [ 828.252190][T16551] ? l2tp_tunnel_register+0x142/0x14d0 [ 828.252227][T16551] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 828.252288][T16551] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 828.252318][T16551] ? lockdep_hardirqs_on+0x7a/0x110 [ 828.252350][T16551] ? l2tp_tunnel_create+0x278/0x410 [ 828.252372][T16551] ? l2tp_tunnel_create+0x302/0x410 [ 828.252403][T16551] l2tp_nl_cmd_tunnel_create+0x347/0x970 [ 828.252446][T16551] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 828.252482][T16551] ? __nla_parse+0x40/0x60 [ 828.252513][T16551] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 828.252553][T16551] genl_family_rcv_msg_doit+0x22a/0x330 [ 828.252592][T16551] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 828.252622][T16551] ? rcu_is_watching+0x15/0xb0 [ 828.252659][T16551] ? bpf_lsm_capable+0x9/0x20 [ 828.252682][T16551] ? security_capable+0x7e/0x2c0 [ 828.252724][T16551] genl_rcv_msg+0x61c/0x7a0 [ 828.252762][T16551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 828.252792][T16551] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 828.252828][T16551] ? __pfx_ref_tracker_free+0x10/0x10 [ 828.252861][T16551] netlink_rcv_skb+0x232/0x4b0 [ 828.252895][T16551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 828.252926][T16551] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 828.252967][T16551] ? netlink_deliver_tap+0x2e/0x1b0 [ 828.252990][T16551] ? netlink_deliver_tap+0x2e/0x1b0 [ 828.253019][T16551] genl_rcv+0x28/0x40 [ 828.253046][T16551] netlink_unicast+0x831/0x9f0 [ 828.253093][T16551] ? __pfx_netlink_unicast+0x10/0x10 [ 828.253128][T16551] ? netlink_sendmsg+0x650/0xb40 [ 828.253148][T16551] ? skb_put+0x11b/0x210 [ 828.253180][T16551] netlink_sendmsg+0x813/0xb40 [ 828.253216][T16551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.253249][T16551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 828.253281][T16551] ____sys_sendmsg+0xa4e/0xac0 [ 828.253319][T16551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 828.253360][T16551] ? import_iovec+0x73/0xa0 [ 828.253392][T16551] ___sys_sendmsg+0x2a5/0x360 [ 828.253429][T16551] ? __pfx____sys_sendmsg+0x10/0x10 [ 828.253501][T16551] ? __fget_files+0x2a/0x420 [ 828.253528][T16551] ? __fget_files+0x3a6/0x420 [ 828.253568][T16551] __x64_sys_sendmsg+0x1c3/0x2a0 [ 828.253602][T16551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 828.253643][T16551] ? __pfx_ksys_write+0x10/0x10 [ 828.253689][T16551] do_syscall_64+0x14d/0xf80 [ 828.253718][T16551] ? trace_irq_disable+0x3b/0x150 [ 828.253744][T16551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.253767][T16551] ? clear_bhb_loop+0x40/0x90 [ 828.253795][T16551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.253818][T16551] RIP: 0033:0x7fe5f079c799 [ 828.253840][T16551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.253859][T16551] RSP: 002b:00007fe5ee9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.253893][T16551] RAX: ffffffffffffffda RBX: 00007fe5f0a15fa0 RCX: 00007fe5f079c799 [ 828.253909][T16551] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 828.253925][T16551] RBP: 00007fe5ee9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 828.253939][T16551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 828.253953][T16551] R13: 00007fe5f0a16038 R14: 00007fe5f0a15fa0 R15: 00007fff6fc6de88 [ 828.253989][T16551] [ 828.742028][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3580'. [ 828.970598][ T10] usb 2-1: can't set config #150, error -71 [ 828.993575][ T10] usb 2-1: USB disconnect, device number 57 [ 829.374907][T16569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.378110][T16569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.771414][T16576] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3588'. [ 829.771446][T16576] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3588'. [ 829.771465][T16576] netlink: 'syz.3.3588': attribute type 5 has an invalid length. [ 829.771480][T16576] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3588'. [ 832.284758][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 832.444035][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 832.449375][ T5783] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 832.475535][ T9] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 832.475569][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.475591][ T9] usb 4-1: config 0 has no interface number 0 [ 832.475644][ T9] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 255 [ 832.475672][ T9] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.482297][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 832.482331][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.482354][ T9] usb 4-1: Product: syz [ 832.482370][ T9] usb 4-1: Manufacturer: syz [ 832.482386][ T9] usb 4-1: SerialNumber: syz [ 832.577157][ T9] usb 4-1: config 0 descriptor?? [ 832.577971][T16592] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 832.601395][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 832.616923][ T5783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.616954][ T5783] usb 2-1: config 0 has no interfaces? [ 832.620641][ T5783] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 832.620673][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.620695][ T5783] usb 2-1: Product: syz [ 832.620711][ T5783] usb 2-1: Manufacturer: syz [ 832.620727][ T5783] usb 2-1: SerialNumber: syz [ 832.634324][ T5783] usb 2-1: config 0 descriptor?? [ 832.879824][T16597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.880216][T16589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.881195][T16597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.881609][T16589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.961766][ T5783] usb 4-1: USB disconnect, device number 101 [ 833.082769][ T5865] usb 2-1: USB disconnect, device number 58 [ 833.287353][T16607] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 835.212657][ T5783] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 835.686188][ T5783] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 835.686286][ T5783] usb 4-1: config 150 has no interface number 0 [ 835.686670][ T5783] usb 4-1: config 150 interface 204 has no altsetting 0 [ 835.707742][ T5783] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 835.707921][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.708011][ T5783] usb 4-1: Product: syz [ 835.708092][ T5783] usb 4-1: Manufacturer: syz [ 835.708174][ T5783] usb 4-1: SerialNumber: syz [ 836.601797][ T5926] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 836.643420][ T5783] xr_serial 4-1:150.204: xr_serial converter detected [ 836.751563][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 836.753828][ T5926] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 836.753860][ T5926] usb 2-1: config 0 has no interface number 0 [ 836.753929][ T5926] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 836.753957][ T5926] usb 2-1: config 0 interface 196 has no altsetting 0 [ 836.760942][ T5926] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 836.760975][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.760996][ T5926] usb 2-1: Product: syz [ 836.761011][ T5926] usb 2-1: Manufacturer: syz [ 836.761026][ T5926] usb 2-1: SerialNumber: syz [ 836.853983][ T5926] usb 2-1: config 0 descriptor?? [ 836.854764][T16659] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 836.915035][T16668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3602'. [ 837.037741][T16652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.038239][T16652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.061689][ T5783] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 837.061753][ T5783] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 837.121432][ T5783] usb 4-1: USB disconnect, device number 102 [ 837.124858][ T5783] xr_serial 4-1:150.204: device disconnected [ 837.309888][ T5926] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 837.310230][ T5926] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 837.356254][ T5926] usb 2-1: USB disconnect, device number 59 [ 838.160863][ T5783] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 838.320631][ T5783] usb 5-1: Using ep0 maxpacket: 32 [ 838.323205][ T5783] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 838.323241][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 838.323271][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 838.323296][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 838.323324][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 838.327580][ T5783] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 838.327611][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.327634][ T5783] usb 5-1: Product: syz [ 838.327650][ T5783] usb 5-1: Manufacturer: syz [ 838.327666][ T5783] usb 5-1: SerialNumber: syz [ 838.443227][ T5783] usb 5-1: config 0 descriptor?? [ 838.513847][T16692] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3610'. [ 838.513870][T16692] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3610'. [ 838.513881][T16692] netlink: 'syz.1.3610': attribute type 5 has an invalid length. [ 838.513895][T16692] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3610'. [ 839.841311][ T5783] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 839.841374][ T5783] input input46: Device does not respond to id packet M [ 839.842067][ T5783] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 839.842118][ T5783] input input46: Device does not respond to id packet P [ 839.843400][ T5783] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 839.843452][ T5783] input input46: Device does not respond to id packet B [ 841.051106][ T5783] iforce 5-1:0.0: usb_submit_urb failed: -110 [ 841.051166][ T5783] input input46: Device does not respond to id packet N [ 841.051905][ T5783] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 841.052442][ T5783] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 841.052925][ T5783] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 841.053426][ T5783] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 841.892028][ T5783] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input46 [ 842.210965][ T5783] usb 5-1: USB disconnect, device number 78 [ 842.970454][ T5783] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 843.108711][ T5783] usb 2-1: device descriptor read/64, error -71 [ 843.667774][ T5783] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 843.807582][ T5783] usb 2-1: device descriptor read/64, error -71 [ 843.932748][ T5783] usb usb2-port1: attempt power cycle [ 844.407232][ T5783] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 844.430170][ T5783] usb 2-1: device descriptor read/8, error -71 [ 844.678714][ T5783] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 844.698852][ T5783] usb 2-1: device descriptor read/8, error -71 [ 844.807514][ T5783] usb usb2-port1: unable to enumerate USB device [ 845.428641][T16775] sock: sock_timestamping_bind_phc: sock not bind to device [ 847.008439][T16798] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3649'. [ 847.008461][T16798] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3649'. [ 847.008471][T16798] netlink: 'syz.7.3649': attribute type 5 has an invalid length. [ 847.008479][T16798] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3649'. [ 847.907638][T16803] loop5: detected capacity change from 0 to 7 [ 847.935961][T16803] Dev loop5: unable to read RDB block 7 [ 847.936023][T16803] loop5: unable to read partition table [ 847.936282][T16803] loop5: partition table beyond EOD, truncated [ 847.936322][T16803] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 848.083529][ T5163] Dev loop5: unable to read RDB block 7 [ 848.083581][ T5163] loop5: unable to read partition table [ 848.083833][ T5163] loop5: partition table beyond EOD, truncated [ 848.158455][T16810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.158784][T16810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.285131][ T5886] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 848.425202][ T5886] usb 2-1: device descriptor read/64, error -71 [ 848.667649][ T5886] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 848.904882][ T5886] usb 2-1: device descriptor read/64, error -71 [ 849.020137][ T5886] usb usb2-port1: attempt power cycle [ 850.015203][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3658'. [ 850.204226][ T5886] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 850.234925][ T5886] usb 2-1: device descriptor read/8, error -71 [ 850.326146][ T5783] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 851.173584][ T5886] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 851.285450][ T5886] usb 2-1: device descriptor read/8, error -71 [ 851.346188][ T5783] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 851.346227][ T5783] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 851.346257][ T5783] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 851.384411][T16828] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3660'. [ 851.384439][T16828] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3660'. [ 851.384456][T16828] netlink: 'syz.5.3660': attribute type 5 has an invalid length. [ 851.384471][T16828] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3660'. [ 851.426555][ T5783] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 851.426590][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.426613][ T5783] usb 4-1: Product: syz [ 851.426630][ T5783] usb 4-1: Manufacturer: syz [ 851.426646][ T5783] usb 4-1: SerialNumber: syz [ 851.430814][ T5886] usb usb2-port1: unable to enumerate USB device [ 851.477523][ T5783] usb 4-1: config 0 descriptor?? [ 851.656701][T16822] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 851.657196][T16822] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 851.679844][ T5783] usb 4-1: ucan: probing device on interface #0 [ 852.905655][ T5783] ucan 4-1:0.0 can0: registered device [ 853.101111][ T5783] ucan 4-1:0.0 can0: firmware string: unknown [ 853.143893][ T5783] usb 4-1: USB disconnect, device number 103 [ 853.214352][T16849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 853.239753][T16849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 853.247183][T16849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 853.254878][T16849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 853.259595][T16849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 854.040572][ T142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.102361][T16857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3669'. [ 855.390510][ T5805] Bluetooth: hci2: command tx timeout [ 855.767894][ T142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.206274][ T142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.341254][T16884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.341857][T16884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.502305][T16887] FAULT_INJECTION: forcing a failure. [ 856.502305][T16887] name failslab, interval 1, probability 0, space 0, times 0 [ 856.502349][T16887] CPU: 0 UID: 0 PID: 16887 Comm: syz.5.3680 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 856.502380][T16887] Tainted: [L]=SOFTLOCKUP [ 856.502388][T16887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 856.502401][T16887] Call Trace: [ 856.502410][T16887] [ 856.502420][T16887] dump_stack_lvl+0xe8/0x150 [ 856.502458][T16887] should_fail_ex+0x46b/0x600 [ 856.502500][T16887] should_failslab+0xa8/0x100 [ 856.502533][T16887] __kmalloc_noprof+0xdf/0x7b0 [ 856.502564][T16887] ? percpu_ref_get_many+0x21/0x1e0 [ 856.502590][T16887] ? io_cache_alloc_new+0x40/0x100 [ 856.502622][T16887] io_cache_alloc_new+0x40/0x100 [ 856.502650][T16887] __io_prep_rw+0x2bd/0xed0 [ 856.502701][T16887] ? __pfx___io_prep_rw+0x10/0x10 [ 856.502731][T16887] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 856.502777][T16887] io_prep_read+0x33/0x110 [ 856.502803][T16887] ? io_task_refs_refill+0xba/0x180 [ 856.502834][T16887] io_submit_sqes+0xb35/0x2370 [ 856.502902][T16887] __se_sys_io_uring_enter+0x2d2/0x18c0 [ 856.502930][T16887] ? lockdep_hardirqs_on+0x7a/0x110 [ 856.502965][T16887] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 856.502998][T16887] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 856.503030][T16887] ? fput+0xa0/0xd0 [ 856.503057][T16887] ? ksys_write+0x248/0x270 [ 856.503091][T16887] ? __pfx_ksys_write+0x10/0x10 [ 856.503128][T16887] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 856.503162][T16887] do_syscall_64+0x14d/0xf80 [ 856.503190][T16887] ? trace_irq_disable+0x3b/0x150 [ 856.503214][T16887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.503237][T16887] ? clear_bhb_loop+0x40/0x90 [ 856.503265][T16887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.503286][T16887] RIP: 0033:0x7fd61b24c799 [ 856.503307][T16887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.503326][T16887] RSP: 002b:00007fd6194a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 856.503351][T16887] RAX: ffffffffffffffda RBX: 00007fd61b4c5fa0 RCX: 00007fd61b24c799 [ 856.503367][T16887] RDX: 0000000000000000 RSI: 00000000000048e9 RDI: 0000000000000004 [ 856.503382][T16887] RBP: 00007fd6194a6090 R08: 0000000000000000 R09: 0000000000000000 [ 856.503396][T16887] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 856.503409][T16887] R13: 00007fd61b4c6038 R14: 00007fd61b4c5fa0 R15: 00007ffd421e0238 [ 856.503445][T16887] [ 856.657743][T16892] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3679'. [ 856.657769][T16892] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3679'. [ 856.657784][T16892] netlink: 'syz.3.3679': attribute type 5 has an invalid length. [ 856.657797][T16892] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3679'. [ 856.823955][T16897] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3683'. [ 857.179091][ T142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.724170][ T5805] Bluetooth: hci2: command tx timeout [ 857.927866][T16906] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3685'. [ 857.927896][T16906] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3685'. [ 857.927913][T16906] netlink: 'syz.7.3685': attribute type 5 has an invalid length. [ 857.927928][T16906] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3685'. [ 858.284966][T16848] chnl_net:caif_netlink_parms(): no params data found [ 858.601758][T16917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.602387][T16917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.985841][T16848] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.985981][T16848] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.986189][T16848] bridge_slave_0: entered allmulticast mode [ 859.006848][T16848] bridge_slave_0: entered promiscuous mode [ 859.025015][T16848] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.025162][T16848] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.025421][T16848] bridge_slave_1: entered allmulticast mode [ 859.043103][T16848] bridge_slave_1: entered promiscuous mode [ 859.988613][ T5805] Bluetooth: hci2: command tx timeout [ 860.238633][T16942] FAULT_INJECTION: forcing a failure. [ 860.238633][T16942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.238676][T16942] CPU: 1 UID: 0 PID: 16942 Comm: syz.1.3696 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 860.238706][T16942] Tainted: [L]=SOFTLOCKUP [ 860.238714][T16942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.238727][T16942] Call Trace: [ 860.238736][T16942] [ 860.238756][T16942] dump_stack_lvl+0xe8/0x150 [ 860.238796][T16942] should_fail_ex+0x46b/0x600 [ 860.238838][T16942] _copy_to_user+0x31/0xb0 [ 860.238868][T16942] simple_read_from_buffer+0xe1/0x170 [ 860.238899][T16942] proc_fail_nth_read+0x1be/0x230 [ 860.238929][T16942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 860.238957][T16942] ? rw_verify_area+0x2ac/0x4e0 [ 860.238987][T16942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 860.239012][T16942] vfs_read+0x212/0xa80 [ 860.239058][T16942] ? __pfx_vfs_read+0x10/0x10 [ 860.239091][T16942] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 860.239122][T16942] ? lockdep_hardirqs_on+0x7a/0x110 [ 860.239152][T16942] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 860.239182][T16942] ? mutex_lock_nested+0x152/0x1d0 [ 860.239204][T16942] ? fdget_pos+0x252/0x320 [ 860.239242][T16942] ksys_read+0x156/0x270 [ 860.239275][T16942] ? __pfx_ksys_read+0x10/0x10 [ 860.239319][T16942] do_syscall_64+0x14d/0xf80 [ 860.239348][T16942] ? trace_irq_disable+0x3b/0x150 [ 860.239374][T16942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.239398][T16942] ? clear_bhb_loop+0x40/0x90 [ 860.239427][T16942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.239450][T16942] RIP: 0033:0x7fea4fb7cfce [ 860.239472][T16942] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 860.239492][T16942] RSP: 002b:00007fea4de0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 860.239517][T16942] RAX: ffffffffffffffda RBX: 00007fea4de0e6c0 RCX: 00007fea4fb7cfce [ 860.239535][T16942] RDX: 000000000000000f RSI: 00007fea4de0e0a0 RDI: 0000000000000009 [ 860.239549][T16942] RBP: 00007fea4de0e090 R08: 0000000000000000 R09: 0000000000000000 [ 860.239563][T16942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.239578][T16942] R13: 00007fea4fe36038 R14: 00007fea4fe35fa0 R15: 00007ffdea8dc488 [ 860.239614][T16942] [ 860.380369][T16848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.384867][T16848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.429054][T16848] team0: Port device team_slave_0 added [ 860.432619][T16848] team0: Port device team_slave_1 added [ 860.490717][T16848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.490735][T16848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.490771][T16848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.493091][T16848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.493104][T16848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.493130][T16848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.601888][T16848] hsr_slave_0: entered promiscuous mode [ 860.603253][T16848] hsr_slave_1: entered promiscuous mode [ 860.604197][T16848] debugfs: 'hsr0' already exists in 'hsr' [ 860.604221][T16848] Cannot create hsr debugfs directory [ 860.650894][T16945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.682435][T16945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.764466][ T142] bridge_slave_0: left allmulticast mode [ 860.764498][ T142] bridge_slave_0: left promiscuous mode [ 860.764761][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.892903][ T142] veth0_to_bond: left allmulticast mode [ 860.892935][ T142] veth0_to_bond: left promiscuous mode [ 860.893229][ T142] bridge2: port 2(veth0_to_bond) entered disabled state [ 861.429444][ T142] veth3: left allmulticast mode [ 861.429477][ T142] veth3: left promiscuous mode [ 861.429745][ T142] bridge2: port 1(veth3) entered disabled state [ 861.572748][T16965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.596807][T16965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.032392][ T5805] Bluetooth: hci2: command tx timeout [ 862.401126][T16981] FAULT_INJECTION: forcing a failure. [ 862.401126][T16981] name failslab, interval 1, probability 0, space 0, times 0 [ 862.401184][T16981] CPU: 0 UID: 0 PID: 16981 Comm: syz.1.3704 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 862.401216][T16981] Tainted: [L]=SOFTLOCKUP [ 862.401223][T16981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 862.401236][T16981] Call Trace: [ 862.401241][T16981] [ 862.401247][T16981] dump_stack_lvl+0xe8/0x150 [ 862.401273][T16981] should_fail_ex+0x46b/0x600 [ 862.401298][T16981] should_failslab+0xa8/0x100 [ 862.401318][T16981] __kmalloc_noprof+0xdf/0x7b0 [ 862.401335][T16981] ? kfree+0x4d/0x6c0 [ 862.401350][T16981] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 862.401369][T16981] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 862.401387][T16981] tomoyo_realpath_from_path+0xe3/0x5d0 [ 862.401414][T16981] tomoyo_check_open_permission+0x229/0x470 [ 862.401431][T16981] ? tomoyo_check_open_permission+0x1d3/0x470 [ 862.401447][T16981] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 862.401483][T16981] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 862.401499][T16981] ? tomoyo_file_open+0x167/0x220 [ 862.401515][T16981] security_file_open+0xa9/0x240 [ 862.401533][T16981] do_dentry_open+0x4c0/0x13e0 [ 862.401550][T16981] ? vfs_open+0x31/0x350 [ 862.401566][T16981] vfs_open+0x3b/0x350 [ 862.401577][T16981] ? path_openat+0x2e2b/0x38a0 [ 862.401597][T16981] path_openat+0x2e43/0x38a0 [ 862.401635][T16981] ? __pfx_path_openat+0x10/0x10 [ 862.401652][T16981] ? __lock_acquire+0x6b5/0x2cf0 [ 862.401666][T16981] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 862.401689][T16981] ? do_raw_spin_lock+0x12b/0x2f0 [ 862.401724][T16981] do_file_open+0x23e/0x4a0 [ 862.401757][T16981] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 862.401776][T16981] ? __pfx_do_file_open+0x10/0x10 [ 862.401792][T16981] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 862.401820][T16981] ? alloc_fd+0x64e/0x6c0 [ 862.401841][T16981] do_sys_openat2+0x113/0x200 [ 862.401855][T16981] ? lockdep_hardirqs_on+0x7a/0x110 [ 862.401871][T16981] ? __pfx_do_sys_openat2+0x10/0x10 [ 862.401894][T16981] __x64_sys_openat+0x138/0x170 [ 862.401912][T16981] do_syscall_64+0x14d/0xf80 [ 862.401928][T16981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.401941][T16981] ? clear_bhb_loop+0x40/0x90 [ 862.401957][T16981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.401977][T16981] RIP: 0033:0x7fea4fbbc799 [ 862.401990][T16981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.402001][T16981] RSP: 002b:00007fea4ddcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 862.402015][T16981] RAX: ffffffffffffffda RBX: 00007fea4fe36180 RCX: 00007fea4fbbc799 [ 862.402025][T16981] RDX: 0000000000000100 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 862.402034][T16981] RBP: 00007fea4ddcc090 R08: 0000000000000000 R09: 0000000000000000 [ 862.402042][T16981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.402050][T16981] R13: 00007fea4fe36218 R14: 00007fea4fe36180 R15: 00007ffdea8dc488 [ 862.402070][T16981] [ 862.402092][T16981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 863.310477][T16983] FAULT_INJECTION: forcing a failure. [ 863.310477][T16983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 863.310521][T16983] CPU: 1 UID: 0 PID: 16983 Comm: syz.5.3708 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 863.310552][T16983] Tainted: [L]=SOFTLOCKUP [ 863.310560][T16983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 863.310574][T16983] Call Trace: [ 863.310583][T16983] [ 863.310592][T16983] dump_stack_lvl+0xe8/0x150 [ 863.310632][T16983] should_fail_ex+0x46b/0x600 [ 863.310672][T16983] prepare_alloc_pages+0x22a/0x6b0 [ 863.310725][T16983] __alloc_frozen_pages_noprof+0x12f/0x380 [ 863.310752][T16983] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 863.310780][T16983] ? __pfx_policy_nodemask+0x10/0x10 [ 863.310812][T16983] ? __lock_acquire+0x6b5/0x2cf0 [ 863.310843][T16983] alloc_pages_mpol+0xd1/0x380 [ 863.310880][T16983] vma_alloc_folio_noprof+0xea/0x290 [ 863.310917][T16983] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 863.310961][T16983] do_pte_missing+0x810/0x2d30 [ 863.311000][T16983] handle_mm_fault+0xd0a/0x13c0 [ 863.311032][T16983] ? handle_mm_fault+0xe7/0x13c0 [ 863.311052][T16983] ? __pfx_handle_mm_fault+0x10/0x10 [ 863.311080][T16983] ? lock_mm_and_find_vma+0xa7/0x340 [ 863.311095][T16983] do_user_addr_fault+0x75b/0x1340 [ 863.311122][T16983] exc_page_fault+0x6a/0xc0 [ 863.311140][T16983] asm_exc_page_fault+0x26/0x30 [ 863.311152][T16983] RIP: 0010:put_cmsg+0x315/0x5d0 [ 863.311173][T16983] Code: e8 70 31 d3 f8 48 83 fd 03 76 4e 4c 89 fb 49 83 c7 04 48 83 c5 fc 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 75 1d 41 8b 47 fc <41> 89 45 00 48 83 fd 03 76 2c 49 83 c5 04 e8 d8 2b d3 f8 48 83 c3 [ 863.311185][T16983] RSP: 0018:ffffc9001663f780 EFLAGS: 00050246 [ 863.311198][T16983] RAX: 000000001233441d RBX: ffff88802a8af3c8 RCX: ffff888030be9e40 [ 863.311208][T16983] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 863.311215][T16983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 863.311222][T16983] R10: ffffc9001663f860 R11: fffff52002cc7f0d R12: dffffc0000000000 [ 863.311231][T16983] R13: 0000200000004000 R14: 00000000000002d4 R15: ffff88802a8af3cc [ 863.311258][T16983] tipc_sk_anc_data_recv+0x37f/0x6b0 [ 863.311274][T16983] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 863.311293][T16983] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 863.311313][T16983] ? lockdep_hardirqs_on+0x7a/0x110 [ 863.311332][T16983] tipc_recvstream+0x692/0xe70 [ 863.311356][T16983] ? __pfx_tipc_recvstream+0x10/0x10 [ 863.311376][T16983] sock_recvmsg+0x22c/0x270 [ 863.311393][T16983] ____sys_recvmsg+0x1f2/0x4b0 [ 863.311416][T16983] ? __pfx_____sys_recvmsg+0x10/0x10 [ 863.311443][T16983] ? import_iovec+0x73/0xa0 [ 863.311461][T16983] ___sys_recvmsg+0x215/0x590 [ 863.311482][T16983] ? __pfx____sys_recvmsg+0x10/0x10 [ 863.311516][T16983] ? __fget_files+0x3a6/0x420 [ 863.311540][T16983] __x64_sys_recvmsg+0x1c0/0x2a0 [ 863.311561][T16983] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 863.311588][T16983] ? __pfx_ksys_write+0x10/0x10 [ 863.311613][T16983] do_syscall_64+0x14d/0xf80 [ 863.311628][T16983] ? trace_irq_disable+0x3b/0x150 [ 863.311642][T16983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.311655][T16983] ? clear_bhb_loop+0x40/0x90 [ 863.311670][T16983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.311683][T16983] RIP: 0033:0x7fd61b24c799 [ 863.311703][T16983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.311714][T16983] RSP: 002b:00007fd6194a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 863.311726][T16983] RAX: ffffffffffffffda RBX: 00007fd61b4c5fa0 RCX: 00007fd61b24c799 [ 863.311735][T16983] RDX: 0000000020000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 863.311743][T16983] RBP: 00007fd6194a6090 R08: 0000000000000000 R09: 0000000000000000 [ 863.311751][T16983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.311759][T16983] R13: 00007fd61b4c6038 R14: 00007fd61b4c5fa0 R15: 00007ffd421e0238 [ 863.311780][T16983] [ 863.850484][T16988] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3710'. [ 863.850512][T16988] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3710'. [ 863.850530][T16988] netlink: 'syz.5.3710': attribute type 5 has an invalid length. [ 863.850545][T16988] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3710'. [ 865.125891][ T5783] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 865.309461][T16999] netlink: zone id is out of range [ 865.354000][T16999] netlink: set zone limit has 4 unknown bytes [ 865.517873][ T5783] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 865.517897][ T5783] usb 4-1: config 0 has no interface number 0 [ 865.517935][ T5783] usb 4-1: config 0 interface 41 has no altsetting 0 [ 865.519775][ T5783] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 865.519793][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.519804][ T5783] usb 4-1: Product: syz [ 865.519813][ T5783] usb 4-1: Manufacturer: syz [ 865.519822][ T5783] usb 4-1: SerialNumber: syz [ 865.530277][ T5783] usb 4-1: config 0 descriptor?? [ 865.677212][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.756391][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.761895][T17007] EXT4-fs: Conflicting test_dummy_encryption options [ 865.790019][ T142] bond0 (unregistering): Released all slaves [ 865.801100][ T142] bond1 (unregistering): Released all slaves [ 866.025349][ T5783] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 866.025658][ T5783] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 866.055606][ T5783] usb 4-1: USB disconnect, device number 104 [ 867.630054][T17030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.631830][T17030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.344167][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.506987][T17068] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3730'. [ 870.507016][T17068] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3730'. [ 870.507033][T17068] netlink: 'syz.5.3730': attribute type 5 has an invalid length. [ 870.507047][T17068] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3730'. [ 870.557270][T17070] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3731'. [ 870.557301][T17070] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3731'. [ 870.557319][T17070] netlink: 'syz.1.3731': attribute type 5 has an invalid length. [ 870.557333][T17070] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3731'. [ 870.592883][ T9] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 871.765348][ T9] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 871.765382][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 871.981372][ T9] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 871.981408][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.981431][ T9] usb 4-1: Product: syz [ 871.981447][ T9] usb 4-1: Manufacturer: syz [ 871.981463][ T9] usb 4-1: SerialNumber: syz [ 872.010208][ T9] usb 4-1: config 0 descriptor?? [ 872.643355][ T142] hsr_slave_0: left promiscuous mode [ 872.690200][ T142] hsr_slave_1: left promiscuous mode [ 872.705315][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.705350][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.747904][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.747935][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.876314][ T142] veth1_macvtap: left promiscuous mode [ 872.876439][ T142] veth0_macvtap: left promiscuous mode [ 872.876726][ T142] veth1_vlan: left promiscuous mode [ 872.876950][ T142] veth0_vlan: left promiscuous mode [ 873.307981][ T9] mos7840 4-1:0.0: required endpoints missing [ 873.331161][ T9] usb 4-1: USB disconnect, device number 105 [ 873.396697][T17110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.397457][T17110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.451288][ T5926] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 873.601200][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 873.604194][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.610127][ T5926] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 873.610163][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.610185][ T5926] usb 2-1: Product: syz [ 873.610201][ T5926] usb 2-1: Manufacturer: syz [ 873.610216][ T5926] usb 2-1: SerialNumber: syz [ 873.699026][ T5926] usb 2-1: config 0 descriptor?? [ 874.100822][ T5783] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 874.261993][ T5783] usb 4-1: Using ep0 maxpacket: 16 [ 874.264673][ T5783] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 874.264703][ T5783] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 874.264726][ T5783] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 874.264747][ T5783] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 874.311360][ T5783] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 874.311393][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.311413][ T5783] usb 4-1: Product: syz [ 874.311427][ T5783] usb 4-1: Manufacturer: syz [ 874.311441][ T5783] usb 4-1: SerialNumber: syz [ 874.629415][T17114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.657993][T17114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.700542][ T5783] usb 4-1: 0:2 : does not exist [ 874.721041][ T5783] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 874.914241][ T5783] usb 4-1: USB disconnect, device number 106 [ 875.115829][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.257705][T17143] random: crng reseeded on system resumption [ 875.337502][T17141] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 875.337535][T17141] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 875.337649][T17141] vhci_hcd vhci_hcd.0: Device attached [ 875.722404][T17142] vhci_hcd: connection closed [ 875.753807][ T57] vhci_hcd vhci_hcd.5: stop threads [ 875.753847][ T57] vhci_hcd vhci_hcd.5: release socket [ 875.753890][ T57] vhci_hcd vhci_hcd.5: disconnect device [ 876.300214][ T142] team0 (unregistering): Port device team_slave_1 removed [ 876.365613][T11706] usb 2-1: USB disconnect, device number 68 [ 876.384794][ T142] team0 (unregistering): Port device team_slave_0 removed [ 876.535464][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 876.559785][T17149] binder: 17148:17149 ioctl d000943e 200000116cc0 returned -22 [ 876.704961][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.704996][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 876.705033][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 876.705048][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.723263][ T9] usb 4-1: config 0 descriptor?? [ 876.800433][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 877.134775][T16848] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 877.174591][T16848] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 877.229126][T16848] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 877.287298][T17154] FAULT_INJECTION: forcing a failure. [ 877.287298][T17154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.287345][T17154] CPU: 1 UID: 0 PID: 17154 Comm: syz.5.3755 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 877.287377][T17154] Tainted: [L]=SOFTLOCKUP [ 877.287385][T17154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 877.287399][T17154] Call Trace: [ 877.287408][T17154] [ 877.287418][T17154] dump_stack_lvl+0xe8/0x150 [ 877.287456][T17154] should_fail_ex+0x46b/0x600 [ 877.287497][T17154] _copy_from_user+0x2d/0xb0 [ 877.287525][T17154] video_usercopy+0x36f/0x14b0 [ 877.287554][T17154] ? smk_tskacc+0x311/0x3a0 [ 877.287578][T17154] ? __pfx___video_do_ioctl+0x10/0x10 [ 877.287614][T17154] ? __pfx_video_usercopy+0x10/0x10 [ 877.287635][T17154] ? smack_file_ioctl+0x2c2/0x360 [ 877.287678][T17154] ? __fget_files+0x2a/0x420 [ 877.287703][T17154] ? __fget_files+0x3a6/0x420 [ 877.287732][T17154] v4l2_ioctl+0x190/0x1e0 [ 877.287755][T17154] ? __pfx_v4l2_ioctl+0x10/0x10 [ 877.287776][T17154] __se_sys_ioctl+0xff/0x170 [ 877.287812][T17154] do_syscall_64+0x14d/0xf80 [ 877.287840][T17154] ? trace_irq_disable+0x3b/0x150 [ 877.287865][T17154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.287887][T17154] ? clear_bhb_loop+0x40/0x90 [ 877.287915][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.287935][T17154] RIP: 0033:0x7fd61b24c799 [ 877.287953][T17154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.287967][T17154] RSP: 002b:00007fd6194a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 877.287989][T17154] RAX: ffffffffffffffda RBX: 00007fd61b4c5fa0 RCX: 00007fd61b24c799 [ 877.288004][T17154] RDX: 0000200000000040 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 877.288019][T17154] RBP: 00007fd6194a6090 R08: 0000000000000000 R09: 0000000000000000 [ 877.288034][T17154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.288048][T17154] R13: 00007fd61b4c6038 R14: 00007fd61b4c5fa0 R15: 00007ffd421e0238 [ 877.288082][T17154] [ 877.378042][T16848] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 877.503773][T17158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.505000][T17158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.000310][T16848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.115440][T16848] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.161652][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.161799][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.237765][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.239202][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.436066][T17182] FAULT_INJECTION: forcing a failure. [ 878.436066][T17182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 878.436110][T17182] CPU: 1 UID: 0 PID: 17182 Comm: syz.1.3757 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 878.436142][T17182] Tainted: [L]=SOFTLOCKUP [ 878.436151][T17182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 878.436163][T17182] Call Trace: [ 878.436173][T17182] [ 878.436183][T17182] dump_stack_lvl+0xe8/0x150 [ 878.436222][T17182] should_fail_ex+0x46b/0x600 [ 878.436264][T17182] prepare_alloc_pages+0x22a/0x6b0 [ 878.436310][T17182] __alloc_frozen_pages_noprof+0x12f/0x380 [ 878.436339][T17182] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 878.436367][T17182] ? __pfx_policy_nodemask+0x10/0x10 [ 878.436406][T17182] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 878.436434][T17182] ? lockdep_hardirqs_on+0x7a/0x110 [ 878.436464][T17182] alloc_pages_mpol+0xd1/0x380 [ 878.436498][T17182] alloc_pages_noprof+0xce/0x1e0 [ 878.436532][T17182] get_free_pages_noprof+0xf/0x80 [ 878.436555][T17182] __kasan_populate_vmalloc+0x38/0x1d0 [ 878.436585][T17182] ? rt_spin_unlock+0x160/0x200 [ 878.436611][T17182] alloc_vmap_area+0xd73/0x14b0 [ 878.436657][T17182] ? __pfx_alloc_vmap_area+0x10/0x10 [ 878.436687][T17182] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 878.436722][T17182] ? __get_vm_area_node+0x171/0x350 [ 878.436749][T17182] ? vb2_vmalloc_alloc+0xef/0x360 [ 878.436772][T17182] __get_vm_area_node+0x226/0x350 [ 878.436809][T17182] __vmalloc_node_range_noprof+0x372/0x1730 [ 878.436840][T17182] ? vb2_vmalloc_alloc+0xef/0x360 [ 878.436895][T17182] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 878.436935][T17182] ? rcu_is_watching+0x15/0xb0 [ 878.436962][T17182] ? __kasan_kmalloc+0x93/0xb0 [ 878.436997][T17182] vmalloc_user_noprof+0xad/0xe0 [ 878.437033][T17182] ? vb2_vmalloc_alloc+0xef/0x360 [ 878.437055][T17182] vb2_vmalloc_alloc+0xef/0x360 [ 878.437078][T17182] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 878.437101][T17182] __vb2_queue_alloc+0x9c5/0x15a0 [ 878.437161][T17182] vb2_core_reqbufs+0xc1f/0x1410 [ 878.437212][T17182] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 878.437251][T17182] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 878.437293][T17182] ? __vb2_init_fileio+0x1e8/0xff0 [ 878.437322][T17182] __vb2_init_fileio+0x318/0xff0 [ 878.437347][T17182] ? kstrtoull+0x12f/0x1d0 [ 878.437383][T17182] ? do_raw_spin_lock+0x12b/0x2f0 [ 878.437443][T17182] __vb2_perform_fileio+0x282/0x1620 [ 878.437475][T17182] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 878.437498][T17182] ? vb2_fop_read+0x101/0x360 [ 878.437524][T17182] vb2_fop_read+0x27c/0x360 [ 878.437553][T17182] v4l2_read+0x19f/0x2c0 [ 878.437577][T17182] ? __pfx_v4l2_read+0x10/0x10 [ 878.437600][T17182] vfs_read+0x212/0xa80 [ 878.437642][T17182] ? __pfx_vfs_read+0x10/0x10 [ 878.437672][T17182] ? __fget_files+0x2a/0x420 [ 878.437701][T17182] ? __fget_files+0x2a/0x420 [ 878.437724][T17182] ? __fget_files+0x3a6/0x420 [ 878.437747][T17182] ? __fget_files+0x2a/0x420 [ 878.437782][T17182] ksys_read+0x156/0x270 [ 878.437813][T17182] ? __pfx_ksys_read+0x10/0x10 [ 878.437855][T17182] do_syscall_64+0x14d/0xf80 [ 878.437884][T17182] ? trace_irq_disable+0x3b/0x150 [ 878.437909][T17182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.437941][T17182] ? clear_bhb_loop+0x40/0x90 [ 878.437970][T17182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.437992][T17182] RIP: 0033:0x7fea4fbbc799 [ 878.438015][T17182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.438035][T17182] RSP: 002b:00007fea4de0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 878.438060][T17182] RAX: ffffffffffffffda RBX: 00007fea4fe35fa0 RCX: 00007fea4fbbc799 [ 878.438076][T17182] RDX: 0000000000002020 RSI: 00002000000026c0 RDI: 0000000000000003 [ 878.438089][T17182] RBP: 00007fea4de0e090 R08: 0000000000000000 R09: 0000000000000000 [ 878.438102][T17182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.438115][T17182] R13: 00007fea4fe36038 R14: 00007fea4fe35fa0 R15: 00007ffdea8dc488 [ 878.438150][T17182] [ 878.450163][T17182] syz.1.3757: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 878.450293][T17182] CPU: 0 UID: 0 PID: 17182 Comm: syz.1.3757 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 878.450321][T17182] Tainted: [L]=SOFTLOCKUP [ 878.450328][T17182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 878.450340][T17182] Call Trace: [ 878.450348][T17182] [ 878.450356][T17182] dump_stack_lvl+0xe8/0x150 [ 878.450391][T17182] warn_alloc+0x263/0x3e0 [ 878.450423][T17182] ? kasan_quarantine_put+0xbb/0x1f0 [ 878.450454][T17182] ? __pfx_warn_alloc+0x10/0x10 [ 878.450484][T17182] ? __get_vm_area_node+0x23f/0x350 [ 878.450508][T17182] ? __get_vm_area_node+0x171/0x350 [ 878.450533][T17182] ? vb2_vmalloc_alloc+0xef/0x360 [ 878.450557][T17182] ? __get_vm_area_node+0x23f/0x350 [ 878.450589][T17182] __vmalloc_node_range_noprof+0x397/0x1730 [ 878.450648][T17182] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 878.450686][T17182] ? rcu_is_watching+0x15/0xb0 [ 878.450710][T17182] ? __kasan_kmalloc+0x93/0xb0 [ 878.450742][T17182] vmalloc_user_noprof+0xad/0xe0 [ 878.450769][T17182] ? vb2_vmalloc_alloc+0xef/0x360 [ 878.450790][T17182] vb2_vmalloc_alloc+0xef/0x360 [ 878.450810][T17182] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 878.450831][T17182] __vb2_queue_alloc+0x9c5/0x15a0 [ 878.450889][T17182] vb2_core_reqbufs+0xc1f/0x1410 [ 878.450942][T17182] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 878.450979][T17182] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 878.451008][T17182] ? __vb2_init_fileio+0x1e8/0xff0 [ 878.451033][T17182] __vb2_init_fileio+0x318/0xff0 [ 878.451056][T17182] ? kstrtoull+0x12f/0x1d0 [ 878.451086][T17182] ? do_raw_spin_lock+0x12b/0x2f0 [ 878.451120][T17182] __vb2_perform_fileio+0x282/0x1620 [ 878.451151][T17182] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 878.451173][T17182] ? vb2_fop_read+0x101/0x360 [ 878.451197][T17182] vb2_fop_read+0x27c/0x360 [ 878.451224][T17182] v4l2_read+0x19f/0x2c0 [ 878.451244][T17182] ? __pfx_v4l2_read+0x10/0x10 [ 878.451265][T17182] vfs_read+0x212/0xa80 [ 878.451300][T17182] ? __pfx_vfs_read+0x10/0x10 [ 878.451327][T17182] ? __fget_files+0x2a/0x420 [ 878.451352][T17182] ? __fget_files+0x2a/0x420 [ 878.451373][T17182] ? __fget_files+0x3a6/0x420 [ 878.451395][T17182] ? __fget_files+0x2a/0x420 [ 878.451426][T17182] ksys_read+0x156/0x270 [ 878.451455][T17182] ? __pfx_ksys_read+0x10/0x10 [ 878.451492][T17182] do_syscall_64+0x14d/0xf80 [ 878.451518][T17182] ? trace_irq_disable+0x3b/0x150 [ 878.451540][T17182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.451560][T17182] ? clear_bhb_loop+0x40/0x90 [ 878.451585][T17182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.451604][T17182] RIP: 0033:0x7fea4fbbc799 [ 878.451625][T17182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.451642][T17182] RSP: 002b:00007fea4de0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 878.451670][T17182] RAX: ffffffffffffffda RBX: 00007fea4fe35fa0 RCX: 00007fea4fbbc799 [ 878.451684][T17182] RDX: 0000000000002020 RSI: 00002000000026c0 RDI: 0000000000000003 [ 878.451697][T17182] RBP: 00007fea4de0e090 R08: 0000000000000000 R09: 0000000000000000 [ 878.451710][T17182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.451722][T17182] R13: 00007fea4fe36038 R14: 00007fea4fe35fa0 R15: 00007ffdea8dc488 [ 878.451755][T17182] [ 878.451763][T17182] Mem-Info: [ 878.451772][T17182] active_anon:294 inactive_anon:27531 isolated_anon:0 [ 878.451772][T17182] active_file:25978 inactive_file:38352 isolated_file:0 [ 878.451772][T17182] unevictable:768 dirty:187 writeback:0 [ 878.451772][T17182] slab_reclaimable:12764 slab_unreclaimable:106112 [ 878.451772][T17182] mapped:32048 shmem:20686 pagetables:1893 [ 878.451772][T17182] sec_pagetables:0 bounce:0 [ 878.451772][T17182] kernel_misc_reclaimable:0 [ 878.451772][T17182] free:1270726 free_pcp:2727 free_cma:0 [ 878.451822][T17182] Node 0 active_anon:1176kB inactive_anon:110124kB active_file:103704kB inactive_file:153408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128192kB dirty:744kB writeback:0kB shmem:81208kB kernel_stack:14296kB pagetables:7392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 878.451865][T17182] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 878.451908][T17182] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 878.451966][T17182] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 878.452000][T17182] Node 0 DMA32 free:1138032kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1176kB inactive_anon:110124kB active_file:103704kB inactive_file:153408kB unevictable:1536kB writepending:744kB zspages:0kB present:3129332kB managed:2566628kB mlocked:0kB bounce:0kB free_pcp:10908kB local_pcp:5840kB free_cma:0kB [ 878.452066][T17182] lowmem_reserve[]: 0 0 0 0 0 [ 878.452101][T17182] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 878.452154][T17182] lowmem_reserve[]: 0 0 0 0 0 [ 878.452186][T17182] Node 1 Normal free:3929512kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 878.452240][T17182] lowmem_reserve[]: 0 0 0 0 0 [ 878.452272][T17182] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 878.452384][T17182] Node 0 DMA32: 2153*4kB (UME) 3409*8kB (UME) 2436*16kB (UME) 520*32kB (UME) 354*64kB (UME) 245*128kB (UME) 241*256kB (UME) 148*512kB (UM) 95*1024kB (UME) 10*2048kB (UM) 180*4096kB (UM) = 1138028kB [ 878.452536][T17182] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 878.452630][T17182] Node 1 Normal: 2*4kB (UE) 6*8kB (UME) 17*16kB (UME) 13*32kB (UME) 11*64kB (UME) 8*128kB (UM) 6*256kB (UM) 5*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 955*4096kB (UM) = 3929512kB [ 878.452787][T17182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 878.452804][T17182] Node 0 hugepages_total=6 hugepages_free=2 hugepages_surp=4 hugepages_size=2048kB [ 878.452819][T17182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 878.452834][T17182] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 878.452849][T17182] 85012 total pagecache pages [ 878.452857][T17182] 0 pages in swap cache [ 878.452865][T17182] Free swap = 124996kB [ 878.452872][T17182] Total swap = 124996kB [ 878.452881][T17182] 2097051 pages RAM [ 878.452888][T17182] 0 pages HighMem/MovableOnly [ 878.452896][T17182] 423674 pages reserved [ 878.452903][T17182] 0 pages cma reserved [ 878.957251][ T5928] usb 4-1: USB disconnect, device number 107 [ 879.555787][ T142] IPVS: stop unused estimator thread 0... [ 879.957724][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 880.092795][ T5850] hid_parser_main: 5 callbacks suppressed [ 880.092830][ T5850] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 880.107630][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 880.109983][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.113837][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 880.113865][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.113885][ T9] usb 4-1: Product: syz [ 880.113906][ T9] usb 4-1: Manufacturer: syz [ 880.113920][ T9] usb 4-1: SerialNumber: syz [ 880.122458][ T9] usb 4-1: config 0 descriptor?? [ 880.173599][T16848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.192237][T17194] FAULT_INJECTION: forcing a failure. [ 880.192237][T17194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.192278][T17194] CPU: 0 UID: 0 PID: 17194 Comm: syz.5.3762 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 880.192309][T17194] Tainted: [L]=SOFTLOCKUP [ 880.192317][T17194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 880.192331][T17194] Call Trace: [ 880.192339][T17194] [ 880.192349][T17194] dump_stack_lvl+0xe8/0x150 [ 880.192385][T17194] should_fail_ex+0x46b/0x600 [ 880.192426][T17194] _copy_to_user+0x31/0xb0 [ 880.192454][T17194] simple_read_from_buffer+0xe1/0x170 [ 880.192485][T17194] proc_fail_nth_read+0x1be/0x230 [ 880.192511][T17194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 880.192538][T17194] ? rw_verify_area+0x2ac/0x4e0 [ 880.192566][T17194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 880.192591][T17194] vfs_read+0x212/0xa80 [ 880.192630][T17194] ? __pfx_vfs_read+0x10/0x10 [ 880.192663][T17194] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 880.192694][T17194] ? lockdep_hardirqs_on+0x7a/0x110 [ 880.192723][T17194] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 880.192752][T17194] ? mutex_lock_nested+0x152/0x1d0 [ 880.192774][T17194] ? fdget_pos+0x252/0x320 [ 880.192810][T17194] ksys_read+0x156/0x270 [ 880.192853][T17194] ? __pfx_ksys_read+0x10/0x10 [ 880.192894][T17194] do_syscall_64+0x14d/0xf80 [ 880.192923][T17194] ? trace_irq_disable+0x3b/0x150 [ 880.192947][T17194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.192969][T17194] ? clear_bhb_loop+0x40/0x90 [ 880.192997][T17194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.193019][T17194] RIP: 0033:0x7fd61b20cfce [ 880.193041][T17194] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 880.193060][T17194] RSP: 002b:00007fd6194a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 880.193085][T17194] RAX: ffffffffffffffda RBX: 00007fd6194a66c0 RCX: 00007fd61b20cfce [ 880.193101][T17194] RDX: 000000000000000f RSI: 00007fd6194a60a0 RDI: 0000000000000005 [ 880.193116][T17194] RBP: 00007fd6194a6090 R08: 0000000000000000 R09: 0000000000000000 [ 880.193130][T17194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.193144][T17194] R13: 00007fd61b4c6038 R14: 00007fd61b4c5fa0 R15: 00007ffd421e0238 [ 880.193180][T17194] [ 880.477219][ T5850] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 880.795639][ T9] usb 4-1: USB disconnect, device number 108 [ 880.810000][T17211] fido_id[17211]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 881.706789][T17222] netlink: 'syz.3.3766': attribute type 4 has an invalid length. [ 881.706807][T17222] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3766'. [ 882.406480][ T5926] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 882.513323][T17234] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3769'. [ 882.513351][T17234] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3769'. [ 882.513369][T17234] netlink: 'syz.5.3769': attribute type 5 has an invalid length. [ 882.513382][T17234] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3769'. [ 882.575322][ T5926] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 882.575357][ T5926] usb 2-1: config 150 has no interface number 0 [ 882.575407][ T5926] usb 2-1: config 150 interface 204 has no altsetting 0 [ 882.594581][ T5926] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 882.594614][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.594633][ T5926] usb 2-1: Product: syz [ 882.594647][ T5926] usb 2-1: Manufacturer: syz [ 882.594661][ T5926] usb 2-1: SerialNumber: syz [ 883.632131][T17243] 9p: Bad value for 'rfdno' [ 883.772472][ T5926] usb 2-1: can't set config #150, error -71 [ 883.816456][ T5926] usb 2-1: USB disconnect, device number 69 [ 884.176837][T16848] veth0_vlan: entered promiscuous mode [ 884.201932][T16848] veth1_vlan: entered promiscuous mode [ 884.330700][T16848] veth0_macvtap: entered promiscuous mode [ 884.356751][T17256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.357347][T17256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.386606][T16848] veth1_macvtap: entered promiscuous mode [ 884.456716][T16848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.541318][T16848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.605300][T15821] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.608567][T15821] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.609090][T15821] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.609180][T15821] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.499899][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.499926][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.830772][T15822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.830798][T15822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.905752][T17359] bridge1: entered allmulticast mode [ 888.043105][T17368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3817'. [ 888.333723][T17377] vlan2: entered promiscuous mode [ 888.333750][T17377] bond0: entered promiscuous mode [ 888.333766][T17377] bond_slave_0: entered promiscuous mode [ 888.334026][T17377] bond_slave_1: entered promiscuous mode [ 891.506413][T17436] netlink: 'syz.1.3844': attribute type 1 has an invalid length. [ 892.405786][T17467] ip6tnl1: entered allmulticast mode [ 892.721773][T16849] Bluetooth: hci0: command 0x0406 tx timeout [ 894.325781][T17531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 895.830313][T17556] IPv6: NLM_F_CREATE should be specified when creating new route [ 898.281393][T16849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 898.318431][T16849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 898.323627][T16849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 898.334420][T16849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 898.347407][T16849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 898.876847][ T9107] bridge0: port 1(syz_tun) entered disabled state [ 899.270858][ T9107] syz_tun (unregistering): left allmulticast mode [ 899.271115][ T9107] bridge0: port 1(syz_tun) entered disabled state [ 899.814252][T17673] IPv6: NLM_F_CREATE should be specified when creating new route [ 900.416351][T16849] Bluetooth: hci4: command tx timeout [ 901.020420][T17634] chnl_net:caif_netlink_parms(): no params data found [ 902.259897][T17634] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.261077][T17634] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.261363][T17634] bridge_slave_0: entered allmulticast mode [ 902.308529][T17634] bridge_slave_0: entered promiscuous mode [ 902.318392][T17634] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.329674][T17634] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.329952][T17634] bridge_slave_1: entered allmulticast mode [ 902.342329][T17634] bridge_slave_1: entered promiscuous mode [ 902.474994][T16849] Bluetooth: hci4: command tx timeout [ 902.698857][T17634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.704005][T17634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.066279][T17634] team0: Port device team_slave_0 added [ 903.081603][T17634] team0: Port device team_slave_1 added [ 903.796965][T17634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.796986][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.797017][T17634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.799857][T17634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.799875][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.799903][T17634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.422404][T17634] hsr_slave_0: entered promiscuous mode [ 904.434214][T17634] hsr_slave_1: entered promiscuous mode [ 904.435421][T17634] debugfs: 'hsr0' already exists in 'hsr' [ 904.435445][T17634] Cannot create hsr debugfs directory [ 904.575737][T16849] Bluetooth: hci4: command tx timeout [ 906.632679][T16849] Bluetooth: hci4: command tx timeout [ 907.965685][T17634] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.965727][T17634] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.697306][T17634] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.697348][T17634] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.505881][T17634] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.505922][T17634] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.471504][T17634] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 910.471558][T17634] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.380404][T17936] trusted_key: encrypted_key: keyword '˜Ùdate' not recognized [ 911.965844][T17634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 912.847130][T17634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 912.990699][T17634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 913.053418][T17634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 913.537616][T17634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.606326][T17634] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.635559][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.635709][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.701012][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.701169][ T6864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.531105][T17634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.697522][T17634] veth0_vlan: entered promiscuous mode [ 914.742058][T17634] veth1_vlan: entered promiscuous mode [ 914.883114][T17634] veth0_macvtap: entered promiscuous mode [ 914.904901][T17634] veth1_macvtap: entered promiscuous mode [ 915.044164][T17634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.071958][T17634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.164716][T15822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.170551][T15822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.181670][T15822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.182593][T15822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.091090][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.091113][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.595230][ T6058] ------------[ cut here ]------------ [ 920.595248][ T6058] kcov->t != t [ 920.595266][ T6058] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: udevd/6058 [ 920.595312][ T6058] Modules linked in: [ 920.595336][ T6058] CPU: 1 UID: 0 PID: 6058 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 920.595366][ T6058] Tainted: [L]=SOFTLOCKUP [ 920.595376][ T6058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 920.595391][ T6058] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 920.595418][ T6058] Code: 10 00 00 48 8b bb 90 00 00 00 e8 e6 4a 54 00 48 89 df 5b 41 5e 41 5f e9 09 22 5a 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 8b f0 5f 09 48 89 df be 03 00 [ 920.595439][ T6058] RSP: 0018:ffffc900052dfd20 EFLAGS: 00010287 [ 920.595460][ T6058] RAX: 91cf4822a15a9100 RBX: ffff888035bfcb00 RCX: 0000000000000000 [ 920.595477][ T6058] RDX: 00000000d492317c RSI: ffffffff8ba64760 RDI: 00000000ffffffff [ 920.595493][ T6058] RBP: ffffc900052dfe78 R08: ffffffff8b244250 R09: ffffffff8ddcd780 [ 920.595512][ T6058] R10: dffffc0000000000 R11: fffffbfff1ed4617 R12: 1ffff11006b27e2d [ 920.595529][ T6058] R13: 0000000000000000 R14: ffff888035bfcb08 R15: ffff8880370e0000 [ 920.595546][ T6058] FS: 00007f30fbadd880(0000) GS:ffff888126440000(0000) knlGS:0000000000000000 [ 920.595566][ T6058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 920.595582][ T6058] CR2: 000055d24ad1ed88 CR3: 000000005b8e0000 CR4: 00000000003526f0 [ 920.595604][ T6058] DR0: 0000000040000005 DR1: 0000000100000000 DR2: 0000000000000898 [ 920.595620][ T6058] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 920.595636][ T6058] Call Trace: [ 920.595646][ T6058] [ 920.595660][ T6058] do_exit+0xd8/0x2320 [ 920.595685][ T6058] ? lockdep_hardirqs_on+0x7a/0x110 [ 920.595718][ T6058] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 920.595759][ T6058] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 920.595785][ T6058] ? reacquire_held_locks+0x104/0x190 [ 920.595811][ T6058] ? rt_spin_lock+0x1e0/0x400 [ 920.595836][ T6058] ? __pfx_do_exit+0x10/0x10 [ 920.595861][ T6058] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 920.595898][ T6058] ? rt_spin_unlock+0x160/0x200 [ 920.595927][ T6058] do_group_exit+0x21b/0x2d0 [ 920.595960][ T6058] __x64_sys_exit_group+0x3f/0x40 [ 920.595987][ T6058] x64_sys_call+0x221a/0x2240 [ 920.596009][ T6058] do_syscall_64+0x14d/0xf80 [ 920.596040][ T6058] ? trace_irq_disable+0x3b/0x150 [ 920.596066][ T6058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.596091][ T6058] ? clear_bhb_loop+0x40/0x90 [ 920.596122][ T6058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.596145][ T6058] RIP: 0033:0x7f30fbc156c5 [ 920.596166][ T6058] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 920.596186][ T6058] RSP: 002b:00007ffd33084ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 920.596209][ T6058] RAX: ffffffffffffffda RBX: 000055d24ae0eca0 RCX: 00007f30fbc156c5 [ 920.596226][ T6058] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 920.596242][ T6058] RBP: 000055d24acf7910 R08: 0000000000000000 R09: 0000000000000000 [ 920.596257][ T6058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.596271][ T6058] R13: 00007ffd33084f30 R14: 0000000000000000 R15: 0000000000000000 [ 920.596309][ T6058] [ 920.596321][ T6058] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 920.596340][ T6058] CPU: 1 UID: 0 PID: 6058 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 920.596369][ T6058] Tainted: [L]=SOFTLOCKUP [ 920.596378][ T6058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 920.596391][ T6058] Call Trace: [ 920.596400][ T6058] [ 920.596410][ T6058] vpanic+0x56c/0xa60 [ 920.596443][ T6058] ? __pfx__printk+0x10/0x10 [ 920.596466][ T6058] ? __pfx_vpanic+0x10/0x10 [ 920.596497][ T6058] ? is_bpf_text_address+0x292/0x2b0 [ 920.596528][ T6058] ? is_bpf_text_address+0x26/0x2b0 [ 920.596569][ T6058] panic+0xc5/0xd0 [ 920.596600][ T6058] ? __pfx_panic+0x10/0x10 [ 920.596655][ T6058] __warn+0x315/0x4f0 [ 920.596689][ T6058] ? kcov_task_exit+0xf5/0x160 [ 920.596717][ T6058] ? kcov_task_exit+0xf5/0x160 [ 920.596754][ T6058] __report_bug+0x29a/0x540 [ 920.596792][ T6058] ? kcov_task_exit+0xf5/0x160 [ 920.596817][ T6058] ? __pfx___report_bug+0x10/0x10 [ 920.596849][ T6058] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 920.596875][ T6058] ? do_raw_spin_lock+0x12b/0x2f0 [ 920.596913][ T6058] ? kcov_task_exit+0xf5/0x160 [ 920.596937][ T6058] report_bug+0x16a/0x220 [ 920.596965][ T6058] ? kcov_task_exit+0xf5/0x160 [ 920.596989][ T6058] ? kcov_task_exit+0xf7/0x160 [ 920.597012][ T6058] handle_bug+0x98/0x200 [ 920.597046][ T6058] exc_invalid_op+0x1a/0x50 [ 920.597078][ T6058] asm_exc_invalid_op+0x1a/0x20 [ 920.597099][ T6058] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 920.597123][ T6058] Code: 10 00 00 48 8b bb 90 00 00 00 e8 e6 4a 54 00 48 89 df 5b 41 5e 41 5f e9 09 22 5a 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 8b f0 5f 09 48 89 df be 03 00 [ 920.597142][ T6058] RSP: 0018:ffffc900052dfd20 EFLAGS: 00010287 [ 920.597160][ T6058] RAX: 91cf4822a15a9100 RBX: ffff888035bfcb00 RCX: 0000000000000000 [ 920.597175][ T6058] RDX: 00000000d492317c RSI: ffffffff8ba64760 RDI: 00000000ffffffff [ 920.597189][ T6058] RBP: ffffc900052dfe78 R08: ffffffff8b244250 R09: ffffffff8ddcd780 [ 920.597206][ T6058] R10: dffffc0000000000 R11: fffffbfff1ed4617 R12: 1ffff11006b27e2d [ 920.597223][ T6058] R13: 0000000000000000 R14: ffff888035bfcb08 R15: ffff8880370e0000 [ 920.597270][ T6058] ? rt_spin_lock+0x1e0/0x400 [ 920.597306][ T6058] do_exit+0xd8/0x2320 [ 920.597330][ T6058] ? lockdep_hardirqs_on+0x7a/0x110 [ 920.597362][ T6058] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 920.597394][ T6058] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 920.597419][ T6058] ? reacquire_held_locks+0x104/0x190 [ 920.597443][ T6058] ? rt_spin_lock+0x1e0/0x400 [ 920.597467][ T6058] ? __pfx_do_exit+0x10/0x10 [ 920.597489][ T6058] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 920.597525][ T6058] ? rt_spin_unlock+0x160/0x200 [ 920.597554][ T6058] do_group_exit+0x21b/0x2d0 [ 920.597587][ T6058] __x64_sys_exit_group+0x3f/0x40 [ 920.597614][ T6058] x64_sys_call+0x221a/0x2240 [ 920.597636][ T6058] do_syscall_64+0x14d/0xf80 [ 920.597667][ T6058] ? trace_irq_disable+0x3b/0x150 [ 920.597694][ T6058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.597718][ T6058] ? clear_bhb_loop+0x40/0x90 [ 920.597757][ T6058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.597781][ T6058] RIP: 0033:0x7f30fbc156c5 [ 920.597802][ T6058] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 920.597822][ T6058] RSP: 002b:00007ffd33084ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 920.597844][ T6058] RAX: ffffffffffffffda RBX: 000055d24ae0eca0 RCX: 00007f30fbc156c5 [ 920.597861][ T6058] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 920.597877][ T6058] RBP: 000055d24acf7910 R08: 0000000000000000 R09: 0000000000000000 [ 920.597891][ T6058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.597905][ T6058] R13: 00007ffd33084f30 R14: 0000000000000000 R15: 0000000000000000 [ 920.597942][ T6058] [ 920.598481][ T6058] Kernel Offset: disabled