last executing test programs: 6m59.762087899s ago: executing program 1 (id=76): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x80800) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x460100, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x2000, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffffffff, 0x10000, 0xc, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x7, 0xff}, {0x40000, 0x8080000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x3, 0x2, 0xfc}, {0x58000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x3f, 0x69, 0xfd, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x1, 0x0, 0x4, 0x10, 0x0, 0x0, 0x3c, 0x7}, {0x100000, 0x0, 0x0, 0x78, 0xa8, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0xc, 0xfc, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x6000, 0xc, 0x8, 0x0, 0x7, 0x8, 0x40, 0x26, 0xfc, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8fffa, 0x0, 0x30000, 0x110, 0x2, 0xfc01, 0xeeee0000, [0x80000000, 0xa1, 0x1, 0x1]}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x7ff, @vifc_lcl_addr=@local, @broadcast}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1=0xe0000300}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402000200000009058102"], 0x0) 6m58.317885589s ago: executing program 1 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000009200000008000300", @ANYRES32=r2], 0x34}}, 0x4000000) (fail_nth: 10) 6m58.252590014s ago: executing program 1 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, r2, 0x0) connect$tipc(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000009200000008000300", @ANYRES32=r3], 0x34}}, 0x4000000) 6m57.753773604s ago: executing program 1 (id=85): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (fail_nth: 10) 6m57.563230647s ago: executing program 1 (id=87): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000740)=ANY=[]) 6m56.576928696s ago: executing program 1 (id=91): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x44040, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) ioctl$TCFLSH(r0, 0x800455c9, 0x9) 6m56.442878889s ago: executing program 32 (id=91): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x44040, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) ioctl$TCFLSH(r0, 0x800455c9, 0x9) 1m29.332239748s ago: executing program 0 (id=2642): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20091}, 0x24004004) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x29614}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x9998, 0x80000001, 0x3, 0x7}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8) (async, rerun: 64) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000003c0)={r0, &(0x7f00000002c0)='{\x00', 0x0, &(0x7f0000000300)={@_ha_fsid={[0x7, 0xfffffffc]}, {0xfff5, 0x6, 0x3, 0x7}}, 0x5, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x6}) (rerun: 64) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, 0x0, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_MASTER={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000540)={0x1, 0x1000, "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"}) (async) statx(r2, &(0x7f0000001580)='./file0\x00', 0x2000, 0x10, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000017c0)={&(0x7f00000016c0), 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x48, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000001}, 0x40) (async) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001800), 0x101000, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000001840)={@broadcast, @loopback, 0x0}, &(0x7f0000001880)=0xc) (async) r6 = memfd_secret(0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000018c0)={'filter\x00', 0x0, 0x0, 0x0, [0x100000000, 0x5, 0x1, 0xe, 0x6, 0x200]}, &(0x7f0000001940)=0x78) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000001980)=0x1) (async, rerun: 32) ioctl$VHOST_VDPA_GET_VQS_COUNT(r4, 0x8004af80, &(0x7f00000019c0)) (async, rerun: 32) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) (async) ioctl$SNDCTL_SEQ_NRSYNTHS(r4, 0x8004510a, &(0x7f0000001a80)) (async) r7 = accept4$bt_l2cap(r4, &(0x7f0000001ac0), &(0x7f0000001b00)=0xe, 0x800) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f0000001b40)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000001b80)=0x28) (async) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000001c00)={0x12, 0x29, &(0x7f0000001bc0)="cdc99240ef143dc0e55f8ad892fd6be9e31d9a0c9ae14bd6454358f39c02a304cfebaf1ad70b9704bf"}) ioctl$XFS_IOC_COMMIT_RANGE(r7, 0x40585883, &(0x7f0000001c40)={r4, 0x0, 0x7, 0x2, 0x8000000000000000, 0x8, [0x5, 0xffffffffffffffff, 0xa, 0x9, 0x1, 0x3b8]}) r8 = syz_open_dev$audion(&(0x7f0000001cc0), 0x5, 0x440800) preadv2(r8, &(0x7f0000001d00), 0x0, 0x1ff, 0x2, 0x12) getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000001d40)=""/234, &(0x7f0000001e40)=0xea) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0xc011) (async) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000003200)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000031c0)={&(0x7f0000002040)={0x1160, 0x12, 0x400, 0x70bd26, 0x25dfdbff, {0x27, 0x1, 0x0, 0xa, {0x4e21, 0x4e21, [0x5, 0x5, 0xb, 0x8], [0xd, 0x4, 0x7, 0x8], r5, [0x9, 0x9]}, 0x3, 0x81}, [@INET_DIAG_REQ_BYTECODE={0x26, 0x1, "861900d8534ce60a93aadd038d618a785e9ac5cb3b5ed129b942f16f2b599575f4f9"}, @INET_DIAG_REQ_BYTECODE={0xe7, 0x1, "69dc5f135c278dbb9edba5de20e2efe56ddcd9f44b67aea0a4cb49f4de809c1fbe474f28e448ece2a81c3f3ef0b1d785a7e064be6f95bc8f975727d1da7679142387dec16df219e0f478a99ba5912e7c1362fa2063c98dd5e6713701d0d58ca39798f0129c4866588ae1c5103709fc91ffe12fd4f74b2ff279a1bbb75a27d9bcfc0e02bc9dfbf4415d499351194f8617eb00ea8ddd4189e6de1cdcb1e10b57e28a8e01fa108c78e3a646c79135dc62f059fc76b0287a173e9aebb8a2bcce664754abc5269d9ffda23cc18f15e51830373eec27acc861e65d6788400dac8cef3c5cc5bf"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1160}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) (async, rerun: 32) setsockopt(r0, 0xc, 0x40e, &(0x7f0000003240)="a1067bd133329c2396a9cd2aeb7d343f82ead9e9ef486d6c1e7639c3f5758cc1c842d9d390cb34722e8d38ceb99cc7878b6297f69e0dc439b7073a28ec6a586f65c31a487a94a5fef3ca6c06fd3c1086ed9e9925e45fc974f4a1dfce559f7e1a471ce3d0d060bd3f5aba42b1da634d267615484d58c9d8448283bca519bf5ce1b5cfcc2d09f980ce5e127130edeace66d3c1656baf4e60ca34a7609b85f9e88b79d9e34fb512ea7d29cf33dd321b5040cd811df89b87cbc4d41f", 0xba) (rerun: 32) 1m29.078274556s ago: executing program 0 (id=2646): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) (fail_nth: 2) 1m25.818561962s ago: executing program 0 (id=2658): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b0b, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) 1m22.342825438s ago: executing program 0 (id=2674): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="23090000000000000000010000000500070000000000080009"], 0x3c}}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=';', 0x1}], 0x1}], 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560f, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4601ff1f02000100000000000003000600ffffff7f9f01000038000000c5020000000400000900200004"], 0xb8) close(r6) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000000)=@req={0x2, 0x8, 0x0, 0x7}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 1m21.819159481s ago: executing program 0 (id=2679): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000003c0)="4673c875ca4d9cb6f1d3", 0xa}, {&(0x7f0000000080)="fc8c1ac5ab1defa59a0319c982d76e3d3ebf98ce2a440c85066e30f172f1e66be7380c0e6a2708033cc7345034f6", 0x2e}], 0x2) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x700, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 1m21.48240837s ago: executing program 0 (id=2682): syz_usb_connect(0x5, 0x2d, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x17, 0x7a, 0x5, 0x10, 0xc72, 0x13, 0x4ef5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x9, 0x40, 0xa, "", [{{0x9, 0x4, 0xfe, 0xe7, 0x1, 0x60, 0x27, 0x47, 0x80, [], [{{0x9, 0x5, 0xd, 0x0, 0x8, 0x3, 0x3d, 0xc4}}]}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = syz_open_dev$audion(&(0x7f0000000200), 0xffffffffffffffff, 0x49a080) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000), 0x4) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de667701a7c93437583b5f0b285a188098c1ac4ebac40b315ff8db6f736992497879a42b95248fed4d4888970573d0e88ceead26d97e172588a3ad30fbd01b7bbeeaa668e835f7ae3113fe2d949bb47bc0b2c62541714cc0538601ae4ba"], 0x18}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f0, &(0x7f0000000000)) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000140)=0x3, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r8, 0x11, 0x66, &(0x7f0000000080)=0x1, 0x4) r9 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m6.130410876s ago: executing program 33 (id=2682): syz_usb_connect(0x5, 0x2d, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x17, 0x7a, 0x5, 0x10, 0xc72, 0x13, 0x4ef5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x9, 0x40, 0xa, "", [{{0x9, 0x4, 0xfe, 0xe7, 0x1, 0x60, 0x27, 0x47, 0x80, [], [{{0x9, 0x5, 0xd, 0x0, 0x8, 0x3, 0x3d, 0xc4}}]}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = syz_open_dev$audion(&(0x7f0000000200), 0xffffffffffffffff, 0x49a080) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000), 0x4) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de667701a7c93437583b5f0b285a188098c1ac4ebac40b315ff8db6f736992497879a42b95248fed4d4888970573d0e88ceead26d97e172588a3ad30fbd01b7bbeeaa668e835f7ae3113fe2d949bb47bc0b2c62541714cc0538601ae4ba"], 0x18}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f0, &(0x7f0000000000)) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000140)=0x3, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r8, 0x11, 0x66, &(0x7f0000000080)=0x1, 0x4) r9 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 6.753797913s ago: executing program 4 (id=3061): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.185510787s ago: executing program 2 (id=3064): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x1200, &(0x7f0000000380)=[{&(0x7f0000000080)="ba57cb7fb6", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="e869b4c8de", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000200)="0f812ed6a7f2a3a76c196cbd8e7bdee0c3f61bc5a31e9483f6cad55ab536d2ffae7a72f5f0ca19394a5210b00560d560df167616e756286d14bef0e1b4e4835889d525f1756a62cedb7e3dcae43360b7434338ebdb859ea346faa83d564651a516849524932a5011162d3bd40a6c2279bda58ef479a98bbe14434384ea4e5227a1ffb86eba95f46fb279ace73a334e74f08830449f2382cb2c60", 0x9a}, {&(0x7f00000002c0)="540aa3d5e1a861b02ea392d351655e89091a33c5447ec796a214172785ffe0dfab", 0x21}, {&(0x7f0000000300)="8bb303bb5bf1f4943da21c402f544de0a5f772f0d8c06a5f60b8a18ecaf906571caefe89e7a332", 0x27}, {&(0x7f0000000580)="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", 0x4c1}], 0x4}}], 0x3, 0x2401c444) 5.077654111s ago: executing program 2 (id=3065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000170a01011c0000001c00000000000008"], 0x14}}, 0x48800) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r7, r6, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10f00, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x10, 0x0, 0x90, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 3.954988232s ago: executing program 5 (id=3073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000100)="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") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)) 3.626465197s ago: executing program 2 (id=3075): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) recvmmsg$unix(r0, &(0x7f0000006000)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)=""/38, 0x26}, {&(0x7f0000000300)=""/135, 0x87}, {&(0x7f00000003c0)=""/183, 0xb7}], 0x3, &(0x7f00000004c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)=""/129, 0x81}, {&(0x7f0000000640)=""/228, 0xffffffffffffffec}], 0x2, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000880)=""/121, 0xffffff95}, {&(0x7f0000000900)=""/45, 0x2d}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/165, 0xa5}, {&(0x7f0000001a00)=""/99, 0x63}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/198, 0xb7}, {&(0x7f0000002b40)=""/62, 0x3e}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/148, 0x67}], 0xa, &(0x7f0000004400)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f00000044c0)=@abs, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000004540)=""/142, 0x8e}, {&(0x7f0000004600)=""/58, 0x3a}, {&(0x7f0000002a80)=""/97}], 0x2, &(0x7f0000004680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30}}], 0x70}}, {{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000004700)=""/238, 0xee}, {&(0x7f0000004800)=""/246, 0xf6}, {&(0x7f0000004900)=""/7, 0x7}, {&(0x7f0000004940)=""/128, 0x80}, {&(0x7f00000049c0)=""/42, 0x2a}, {&(0x7f0000004a00)=""/11, 0xb}, {&(0x7f0000004a40)=""/85, 0x55}], 0x7}}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000004b40)=""/183, 0xb7}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000005cc0), 0x6e, &(0x7f0000005f80)=[{&(0x7f0000005d40)=""/146, 0x92}, {&(0x7f0000005e00)}, {&(0x7f0000005e40)=""/107, 0x6b}, {&(0x7f0000005ec0)=""/180, 0xb4}], 0x4, &(0x7f0000005fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x7, 0x10000, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcffffff1000000008000600000013001800018014000200776c616e30"], 0x34}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) clock_gettime(0x3, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) recvmmsg$unix(r0, &(0x7f0000006000)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)=""/38, 0x26}, {&(0x7f0000000300)=""/135, 0x87}, {&(0x7f00000003c0)=""/183, 0xb7}], 0x3, &(0x7f00000004c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)=""/129, 0x81}, {&(0x7f0000000640)=""/228, 0xffffffffffffffec}], 0x2, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000880)=""/121, 0xffffff95}, {&(0x7f0000000900)=""/45, 0x2d}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/165, 0xa5}, {&(0x7f0000001a00)=""/99, 0x63}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/198, 0xb7}, {&(0x7f0000002b40)=""/62, 0x3e}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/148, 0x67}], 0xa, &(0x7f0000004400)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f00000044c0)=@abs, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000004540)=""/142, 0x8e}, {&(0x7f0000004600)=""/58, 0x3a}, {&(0x7f0000002a80)=""/97}], 0x2, &(0x7f0000004680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30}}], 0x70}}, {{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000004700)=""/238, 0xee}, {&(0x7f0000004800)=""/246, 0xf6}, {&(0x7f0000004900)=""/7, 0x7}, {&(0x7f0000004940)=""/128, 0x80}, {&(0x7f00000049c0)=""/42, 0x2a}, {&(0x7f0000004a00)=""/11, 0xb}, {&(0x7f0000004a40)=""/85, 0x55}], 0x7}}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000004b40)=""/183, 0xb7}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/90, 0x5a}], 0x3}}, {{&(0x7f0000005cc0), 0x6e, &(0x7f0000005f80)=[{&(0x7f0000005d40)=""/146, 0x92}, {&(0x7f0000005e00)}, {&(0x7f0000005e40)=""/107, 0x6b}, {&(0x7f0000005ec0)=""/180, 0xb4}], 0x4, &(0x7f0000005fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x7, 0x10000, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcffffff1000000008000600000013001800018014000200776c616e30"], 0x34}}, 0x0) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) (async) clock_gettime(0x3, &(0x7f0000000000)) (async) 3.620947418s ago: executing program 4 (id=3076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x5, 0x210002) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f00000000c0)={0x2, {"175c4c8d8b4e4898bafe09f2a7eb1e3a", "c2f0bd27340bde7c9075301d14fbdba2", "1d672083c559ba7c6c18863892b7ba5a"}, 0x77a}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000f80)={'tunl0\x00', &(0x7f0000000f40)={'erspan0\x00', 0x0, 0x700, 0x8000, 0xa, 0x1, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x67, 0x0, 0x3, 0x4, 0x0, @broadcast, @local, {[@ra={0x94, 0x4}]}}}}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x100, 0x10, 0x713, 0x70bd2c, 0x0, {{@in6=@remote, @in6=@loopback, 0x4e23, 0x1, 0x2, 0x0, 0xa, 0xa0}, {@in=@local, 0x0, 0x32}, @in6=@private2, {}, {0x3, 0x0, 0x3}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10}, [@replay_val={0x10, 0xa, {0x70bd28, 0x70bd2b, 0xfffffefe}}]}, 0x100}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1a0, 0x0, 0xffffffffffff8000}]}) 3.593333125s ago: executing program 5 (id=3077): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r1, 0x40047459, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x8000006, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x0, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x8, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x892, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0x6, 0x4, 0x100, 0x1000000004, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000980)={0x3, 0x0, 0x9, 0x12, 0xb7, 0x0}) r3 = socket(0x26, 0x1, 0xff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x2, @random="8b6c6ecc61eb", 'ip6gre0\x00'}}, 0x1e) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x33, 0x20, 0x0, @in6={0xa, 0x40, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x1, 0xff, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x70}, 0x1, 0x7}, 0x8000) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902"], 0x0) rt_sigprocmask(0x1, &(0x7f000078b000)={[0x9]}, 0x0, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x7, &(0x7f0000000080)={0xe, 0x0, 0x4}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x5, 0x36, &(0x7f0000000780)=ANY=[], 0x0) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000340)={0xf979e10e54c49671, 0x0, @raw_data}) r8 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1}, {0x0, 0x6, 0x1, 0xb400000000000, 0x4000000, 0xb}, {0x7ffffffe, 0x200000ffffffffe, 0x4053e5, 0x1}, 0x401, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@loopback, 0x4d4, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00', 0x0, 0x1, 0x2, 0x0, 0x6, 0xfffffffd}}, 0xe4) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) socket(0x2, 0x805, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000040)={[0x3fa5]}, 0x8) syz_usb_connect$uac1(0x2, 0x77, &(0x7f0000000040)=ANY=[@ANYBLOB="120150020000001099041e104000f9c83b4be250b8ad84010203010902650003010f40800904000000010100000a240102000f00020102052404028709040100000102000009040101010102000009050109ff030801810725010c00040009040200000102000009040201010102000009058209ff030b"], 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r9], 0x20}}, 0x0) 3.397674404s ago: executing program 2 (id=3079): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xa}], 0x28}, 0xfc40) syz_usb_connect$uac1(0x5, 0x87, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x4, 0x40, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x1f}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x605, 0x5, 0x4, 0x2}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x0, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x2, 0x7, {0x7, 0x25, 0x1, 0xc, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x2, 0x1, {0x7, 0x25, 0x1, 0x4, 0x9, 0x8}}}}}}}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x28, &(0x7f0000000880)={0x5, 0xf, 0x28, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x9, 0xf, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "e90d35790ea0a754c24618159d8d4ec5"}, @ptm_cap={0x3}]}}) 2.086291469s ago: executing program 5 (id=3083): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) init_module(&(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x9e, 0x2, 0x5, 0x9, 0x2, 0x6, 0x3, 0x1bf, 0x40, 0x353, 0x8, 0x9, 0x38, 0x1, 0x6, 0x7, 0x6}, [{0x60000000, 0x1, 0x4, 0x3, 0x101, 0x6fe9eae3, 0x1}]}, 0xffd57, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r1], 0xfe33) socket$pppl2tp(0x18, 0x1, 0x1) 1.814272422s ago: executing program 5 (id=3085): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x1, 0x374, 0x0, 0x0, 0x1000, 0xad0, 0xffffffffffffffff}}}, &(0x7f00000000c0)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$UBLK_U_CMD_ADD_DEV(r2, 0xc0207504, &(0x7f00000001c0)={0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x20d, 0x0, 0x0, 0x1000, 0x8e35, r4, 0x0, 0x100}}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8000, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) (async) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8000, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x8010, 0xffffffffffffffff, 0x0) (async) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x8010, 0xffffffffffffffff, 0x0) r10 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r10, 0x0) (async) keyctl$set_timeout(0xf, r10, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2204c0a1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100000fffffffffffff200000500000aa4000000060a010400000000000000000a0080010900010073797a3100000000780004807400018008000100636d70"], 0xcc}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000240)={[0x8001, 0x27d, 0x80006, 0x4200000010000e51, 0x102, 0x547a, 0x103d, 0x200000000006, 0xfffffffffffffffd, 0x23aa, 0xfffffffffffff9dc, 0x201, 0x5, 0x40000000009, 0x378, 0xfffffffffffff802], 0x6000, 0x194110}) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x10010, 0xffffffffffffffff, 0x10000000) ioctl$UBLK_U_CMD_START_DEV(r2, 0xc0207506, &(0x7f0000000240)={r3, 0xffff, 0x0, 0x0, r4}) syz_ublk_add_dev(0xffffffffffffffff, r6, r9, r14, &(0x7f0000000300)={0x2e, 0x20, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x1, 0xbdd, 0x0, 0x0, 0x1000, 0x400, r15, 0x0, 0x100}}}, &(0x7f0000000380)) (async) syz_ublk_add_dev(0xffffffffffffffff, r6, r9, r14, &(0x7f0000000300)={0x2e, 0x20, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x1, 0xbdd, 0x0, 0x0, 0x1000, 0x400, r15, 0x0, 0x100}}}, &(0x7f0000000380)) 38.197227ms ago: executing program 5 (id=3100): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x80000001, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r5, 0x0, 0x5, 0x0, &(0x7f0000000180)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000180)={0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 34.591587ms ago: executing program 3 (id=3101): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000300)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x1cc, 0x6, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x0, 0x0, 0x2, 0x2}, @dstopts={0x33, 0x3, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x6b}, @padn, @hao={0xc9, 0x10, @mcast1}]}, @dstopts={0x2f}, @srh={0x2, 0x4, 0x4, 0x2, 0x0, 0x50, 0x273, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x16}]}, @hopopts={0x3b, 0x27, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xfc, 0xe4, "cb9df859086373e0ff161d9119560beb29bd967f0213ef8d0b7e11ea2fa7a9bb2f59ec9daca230840bd850bd27409aff78b472d6e75bd6f00cd0521af7bad4a03c00b38690eaa82c1012397e615a2bce7e4ac11d53bcd4018ec21dd5d15afec2b6ed453a9bbfcc80f2e7d837be12ff9fba129eaa0726418e329421b1f8f0ec50d2af9b6be69da416c770e63ab720a0fb8890f7c1b6fc6305555119f2a5d3f829ba4fbe6fe22ff3fa2d4f98c540aef106590d29871dc2fe969f83f5f711f073be66409d6035845967c9419d1551504cd3df9d8f45f14ff7f84c2bd8e2afdc9bf6b8359239"}, @ra={0x5, 0x2, 0x8d6}, @generic={0xec, 0xb, "4f2021fba94e6926e76902"}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x30, {0x1, 0xa, 0x2, 0x93, [0x3, 0x1, 0x0, 0x8, 0x3]}}, @enc_lim={0x4, 0x1, 0x4}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0x0, 0x4e22, 0x4e24}, 0x0, 0x4}, 0xfffffffd, 0x4}, 0x1}}}}}}}, 0x1f4) 0s ago: executing program 3 (id=3102): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="440300002100010000000000ffdbdf250a0000000000000101620000280318808425e8e0"], 0x344}], 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60044831}, 0x40080) sendmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x24040081}, 0x2404c171) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc0700, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pwritev2(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x8) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000019300)={{r5}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x10000) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sched_getaffinity(r9, 0x8, &(0x7f00000001c0)) r10 = socket(0x2, 0x80805, 0x0) setsockopt$MRT_PIM(r10, 0x0, 0xcf, &(0x7f00000000c0)=0x1, 0x4) fchdir(r1) pipe2$9p(&(0x7f0000000080), 0x80000) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 443.032926][T12987] ? __lock_acquire+0x6b5/0x2d10 [ 443.032954][T12987] ? __lock_acquire+0x6b5/0x2d10 [ 443.032984][T12987] ? sock_sendmsg_nosec+0x13a/0x180 [ 443.033019][T12987] netlink_rcv_skb+0x232/0x4b0 [ 443.033044][T12987] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 443.033069][T12987] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.033104][T12987] ? bpf_lsm_capable+0x9/0x20 [ 443.033204][T12987] ? security_capable+0x7e/0x2c0 [ 443.033241][T12987] nfnetlink_rcv+0x2c0/0x27b0 [ 443.033265][T12987] ? sock_sendmsg_nosec+0x13a/0x180 [ 443.033296][T12987] ? __pfx_snprintf+0x10/0x10 [ 443.033318][T12987] ? unwind_get_return_address+0x4d/0x90 [ 443.033345][T12987] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 443.033411][T12987] ? trim_netdev_trace+0x7ac/0x840 [ 443.033443][T12987] ? __pfx_trim_netdev_trace+0x10/0x10 [ 443.033468][T12987] ? stack_trace_save+0xa9/0x100 [ 443.033494][T12987] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 443.033517][T12987] ? save_netdev_trace_buffer+0x18f/0x5f0 [ 443.033549][T12987] ? save_netdev_trace_buffer+0x4cf/0x5f0 [ 443.033583][T12987] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 443.033609][T12987] ? ref_tracker_free+0x673/0x820 [ 443.033636][T12987] ? __netlink_deliver_tap+0x636/0x8b0 [ 443.033659][T12987] ? netlink_deliver_tap+0x19c/0x1b0 [ 443.033681][T12987] ? netlink_unicast+0x754/0x920 [ 443.033701][T12987] ? netlink_sendmsg+0x813/0xb40 [ 443.033724][T12987] ? sock_sendmsg_nosec+0x13a/0x180 [ 443.033750][T12987] ? ____sys_sendmsg+0x55c/0x870 [ 443.033772][T12987] ? ___sys_sendmsg+0x2a5/0x360 [ 443.033794][T12987] ? __x64_sys_sendmsg+0x1b7/0x290 [ 443.033816][T12987] ? do_syscall_64+0x174/0x580 [ 443.033839][T12987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.033874][T12987] ? skb_clone+0x246/0x3a0 [ 443.033902][T12987] ? __netlink_deliver_tap+0x866/0x8b0 [ 443.033927][T12987] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.033957][T12987] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.033987][T12987] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.034017][T12987] netlink_unicast+0x780/0x920 [ 443.034050][T12987] netlink_sendmsg+0x813/0xb40 [ 443.034084][T12987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.034111][T12987] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 443.034139][T12987] ? aa_sock_msg_perm+0x122/0x200 [ 443.034160][T12987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.034184][T12987] sock_sendmsg_nosec+0x13a/0x180 [ 443.034216][T12987] ____sys_sendmsg+0x55c/0x870 [ 443.034241][T12987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.034267][T12987] ? import_iovec+0x73/0xa0 [ 443.034288][T12987] ___sys_sendmsg+0x2a5/0x360 [ 443.034308][T12987] ? __lock_acquire+0x6b5/0x2d10 [ 443.034333][T12987] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.034375][T12987] ? __fget_files+0x2a/0x420 [ 443.034390][T12987] ? __fget_files+0x3a6/0x420 [ 443.034411][T12987] __x64_sys_sendmsg+0x1b7/0x290 [ 443.034431][T12987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.034461][T12987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.034479][T12987] do_syscall_64+0x174/0x580 [ 443.034496][T12987] ? trace_irq_disable+0x3b/0x140 [ 443.034515][T12987] ? clear_bhb_loop+0x40/0x90 [ 443.034532][T12987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.034547][T12987] RIP: 0033:0x7fd2583cce59 [ 443.034562][T12987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.034575][T12987] RSP: 002b:00007fd25661e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.034592][T12987] RAX: ffffffffffffffda RBX: 00007fd258645fa0 RCX: 00007fd2583cce59 [ 443.034603][T12987] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 443.034613][T12987] RBP: 00007fd25661e090 R08: 0000000000000000 R09: 0000000000000000 [ 443.034622][T12987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.034631][T12987] R13: 00007fd258646038 R14: 00007fd258645fa0 R15: 00007fff777879a8 [ 443.034653][T12987] [ 443.757169][ T5774] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 443.758575][ T928] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 443.782850][ T928] usb 1-1: device descriptor read/8, error -71 [ 443.844432][ T4939] usb 5-1: USB disconnect, device number 122 [ 443.886026][ T928] usb usb1-port1: unable to enumerate USB device [ 443.905496][ T5774] usb 4-1: Using ep0 maxpacket: 32 [ 443.911165][ T5774] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 443.911192][ T5774] usb 4-1: config 0 has no interface number 0 [ 443.911254][ T5774] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 443.911282][ T5774] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 443.956873][ T5774] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 443.956904][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.956926][ T5774] usb 4-1: Product: syz [ 443.956941][ T5774] usb 4-1: Manufacturer: syz [ 443.956957][ T5774] usb 4-1: SerialNumber: syz [ 443.963645][ T5774] usb 4-1: config 0 descriptor?? [ 444.176655][ T5774] radio-si470x 4-1:0.35: this is not a si470x device. [ 444.404566][T12984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.428319][T12984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.445629][ T5774] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 444.473974][ T5774] usb 4-1: USB disconnect, device number 106 [ 444.635068][T12991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2674'. [ 444.650302][T12991] Invalid argument reading file caps for ./file0 [ 445.356480][T13003] Invalid logical block size (1792) [ 446.044938][T13017] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2683'. [ 446.085519][ T4939] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 446.257269][ T4939] usb 1-1: Using ep0 maxpacket: 16 [ 446.265531][ T4939] usb 1-1: unable to get BOS descriptor or descriptor too short [ 446.268979][ T4939] usb 1-1: config 8 has an invalid interface number: 254 but max is 0 [ 446.269006][ T4939] usb 1-1: config 8 has no interface number 0 [ 446.269053][ T4939] usb 1-1: config 8 interface 254 has no altsetting 0 [ 446.320718][ T4939] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=4e.f5 [ 446.320765][ T4939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.320787][ T4939] usb 1-1: Product: syz [ 446.320802][ T4939] usb 1-1: Manufacturer: syz [ 446.320816][ T4939] usb 1-1: SerialNumber: syz [ 453.271256][T13091] Invalid logical block size (2304) [ 459.739150][T13106] sg_write: data in/out 453596/234 bytes for SCSI command 0x0-- guessing data in; [ 459.739150][T13106] program syz.3.2714 not setting count and/or reply_len properly [ 462.184806][T13120] FAULT_INJECTION: forcing a failure. [ 462.184806][T13120] name failslab, interval 1, probability 0, space 0, times 0 [ 462.184839][T13120] CPU: 0 UID: 0 PID: 13120 Comm: syz.4.2718 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 462.184864][T13120] Tainted: [L]=SOFTLOCKUP [ 462.184870][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 462.184882][T13120] Call Trace: [ 462.184890][T13120] [ 462.184898][T13120] dump_stack_lvl+0xe8/0x150 [ 462.184922][T13120] should_fail_ex+0x46b/0x600 [ 462.184952][T13120] should_failslab+0xa8/0x100 [ 462.184974][T13120] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 462.185000][T13120] ? skb_clone+0x212/0x3a0 [ 462.185022][T13120] ? skb_clone+0x212/0x3a0 [ 462.185049][T13120] skb_clone+0x212/0x3a0 [ 462.185075][T13120] __netlink_deliver_tap+0x424/0x8b0 [ 462.185117][T13120] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.185142][T13120] netlink_deliver_tap+0x19c/0x1b0 [ 462.185167][T13120] netlink_unicast+0x754/0x920 [ 462.185198][T13120] netlink_sendmsg+0x813/0xb40 [ 462.185232][T13120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.185258][T13120] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 462.185289][T13120] ? aa_sock_msg_perm+0x122/0x200 [ 462.185309][T13120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.185332][T13120] sock_sendmsg_nosec+0x13a/0x180 [ 462.185360][T13120] ____sys_sendmsg+0x55c/0x870 [ 462.185387][T13120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.185416][T13120] ? import_iovec+0x73/0xa0 [ 462.185419][ T5790] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 462.185440][T13120] ___sys_sendmsg+0x2a5/0x360 [ 462.185462][T13120] ? __lock_acquire+0x6b5/0x2d10 [ 462.185489][T13120] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.185540][T13120] ? __fget_files+0x2a/0x420 [ 462.185559][T13120] ? __fget_files+0x3a6/0x420 [ 462.185587][T13120] __x64_sys_sendmsg+0x1b7/0x290 [ 462.185613][T13120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.185653][T13120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.185673][T13120] do_syscall_64+0x174/0x580 [ 462.185696][T13120] ? trace_irq_disable+0x3b/0x140 [ 462.185720][T13120] ? clear_bhb_loop+0x40/0x90 [ 462.185742][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.185758][T13120] RIP: 0033:0x7f0ed1b5ce59 [ 462.185777][T13120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.185794][T13120] RSP: 002b:00007f0ecfdb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.185814][T13120] RAX: ffffffffffffffda RBX: 00007f0ed1dd5fa0 RCX: 00007f0ed1b5ce59 [ 462.185829][T13120] RDX: 0000000014008010 RSI: 0000200000001e00 RDI: 0000000000000003 [ 462.185842][T13120] RBP: 00007f0ecfdb6090 R08: 0000000000000000 R09: 0000000000000000 [ 462.185853][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.185865][T13120] R13: 00007f0ed1dd6038 R14: 00007f0ed1dd5fa0 R15: 00007ffd01067618 [ 462.185895][T13120] [ 462.256689][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2718'. [ 462.335404][ T5790] usb 4-1: Using ep0 maxpacket: 32 [ 462.337654][ T5790] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 462.337684][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.462958][ T5790] usb 4-1: config 0 descriptor?? [ 462.603725][ T5790] gspca_main: sunplus-2.14.0 probing 041e:400b [ 463.153341][T13127] FAULT_INJECTION: forcing a failure. [ 463.153341][T13127] name failslab, interval 1, probability 0, space 0, times 0 [ 463.153379][T13127] CPU: 0 UID: 0 PID: 13127 Comm: syz.2.2719 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 463.153407][T13127] Tainted: [L]=SOFTLOCKUP [ 463.153415][T13127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 463.153427][T13127] Call Trace: [ 463.153436][T13127] [ 463.153444][T13127] dump_stack_lvl+0xe8/0x150 [ 463.153475][T13127] should_fail_ex+0x46b/0x600 [ 463.153509][T13127] should_failslab+0xa8/0x100 [ 463.153535][T13127] kmem_cache_alloc_lru_noprof+0xa7/0x6b0 [ 463.153568][T13127] ? __d_alloc+0x37/0x6f0 [ 463.153589][T13127] ? __d_alloc+0x37/0x6f0 [ 463.153617][T13127] __d_alloc+0x37/0x6f0 [ 463.153646][T13127] d_alloc_parallel+0xe3/0x1630 [ 463.153683][T13127] ? lookup_slow+0x46/0x70 [ 463.153705][T13127] ? lookup_slow+0x46/0x70 [ 463.153730][T13127] ? __pfx_d_alloc_parallel+0x10/0x10 [ 463.153762][T13127] ? down_read+0x156/0x200 [ 463.153788][T13127] ? __pfx_down_read+0x10/0x10 [ 463.153818][T13127] __lookup_slow+0x82/0x2f0 [ 463.153843][T13127] lookup_slow+0x53/0x70 [ 463.153866][T13127] lookup_one_positive_unlocked+0x26/0xb0 [ 463.153891][T13127] ovl_lookup_index+0x274/0x790 [ 463.153965][T13127] ? rcu_is_watching+0x15/0xb0 [ 463.154032][T13127] ? ovl_lookup_layer+0x377/0x450 [ 463.154052][T13127] ? __pfx_ovl_lookup_index+0x10/0x10 [ 463.154075][T13127] ? ovl_lookup+0x76e/0x1c80 [ 463.154102][T13127] ovl_lookup+0x1411/0x1c80 [ 463.154160][T13127] ? __pfx_ovl_lookup+0x10/0x10 [ 463.154181][T13127] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 463.154210][T13127] ? rt_spin_unlock+0x160/0x200 [ 463.154233][T13127] ? d_alloc+0x144/0x190 [ 463.154258][T13127] lookup_one_qstr_excl+0x12d/0x360 [ 463.154282][T13127] ? lock_two_directories+0x1cc/0x220 [ 463.154308][T13127] __start_renaming+0x186/0x410 [ 463.154341][T13127] filename_renameat2+0x38c/0x9c0 [ 463.154369][T13127] ? __might_fault+0xaf/0x130 [ 463.154391][T13127] ? __might_fault+0xaf/0x130 [ 463.154418][T13127] ? __pfx_filename_renameat2+0x10/0x10 [ 463.154464][T13127] ? do_getname+0x151/0x250 [ 463.154496][T13127] __se_sys_renameat2+0x5a/0x2c0 [ 463.154525][T13127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.154548][T13127] do_syscall_64+0x174/0x580 [ 463.154575][T13127] ? clear_bhb_loop+0x40/0x90 [ 463.154600][T13127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.154620][T13127] RIP: 0033:0x7fd2583cce59 [ 463.154640][T13127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.154656][T13127] RSP: 002b:00007fd2565dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 463.154678][T13127] RAX: ffffffffffffffda RBX: 00007fd258646180 RCX: 00007fd2583cce59 [ 463.154693][T13127] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 463.154708][T13127] RBP: 00007fd2565dc090 R08: 0000000000000000 R09: 0000000000000000 [ 463.154721][T13127] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.154734][T13127] R13: 00007fd258646218 R14: 00007fd258646180 R15: 00007fff777879a8 [ 463.154768][T13127] [ 463.154986][T13127] overlayfs: failed inode index lookup (ino=3022, key=00fb21000114269b4a62ad44aba519d3d3fa01092a57cbf813ce0b000000000000, err=-12); [ 463.154986][T13127] overlayfs: mount with '-o index=off' to disable inodes index. [ 464.650332][ T5790] gspca_sunplus: reg_w_riv err -110 [ 464.650490][ T5790] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 464.858901][ T5790] usb 4-1: USB disconnect, device number 107 [ 465.115939][T13131] netlink: 'syz.4.2722': attribute type 29 has an invalid length. [ 465.936138][ T5790] usb 1-1: USB disconnect, device number 117 [ 466.012852][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 466.154048][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 466.236857][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 466.335581][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.353910][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 466.795798][T13138] 9p: Bad value for 'wfdno' [ 467.744831][T13150] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2727'. [ 467.789625][T13150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.989009][T13164] CIFS: VFS: UNC: path must begin with // or \\ [ 467.989250][T13164] CIFS: VFS: Malformed UNC in devname [ 468.055469][ T4939] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 468.123046][T13128] lo speed is unknown, defaulting to 1000 [ 468.239430][ T4939] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 468.239455][ T4939] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 468.244153][ T4939] usb 3-1: New USB device found, idVendor=1e0e, idProduct=9001, bcdDevice=19.ff [ 468.244184][ T4939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.244201][ T4939] usb 3-1: Product: syz [ 468.244209][ T4939] usb 3-1: Manufacturer: syz [ 468.244217][ T4939] usb 3-1: SerialNumber: syz [ 468.295856][ T5790] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 468.471874][ T5790] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 468.471924][ T5790] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 468.502971][ T60] Bluetooth: hci2: command tx timeout [ 468.510979][ T5790] usb 5-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 468.511008][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.511026][ T5790] usb 5-1: Product: syz [ 468.511039][ T5790] usb 5-1: Manufacturer: syz [ 468.511052][ T5790] usb 5-1: SerialNumber: syz [ 468.586395][ T4939] usb 3-1: USB disconnect, device number 8 [ 468.818814][T13164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.829624][T13164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.848910][ T5790] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 468.848995][ T5790] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 469.022601][ T5790] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 469.058321][ T5790] usb 5-1: USB disconnect, device number 123 [ 469.099661][T13117] udevd[13117]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.700807][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2739'. [ 469.701003][T13196] openvswitch: netlink: Key type 1286 is out of range max 32 [ 469.861306][T13128] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.864713][T13128] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.865092][T13128] bridge_slave_0: entered allmulticast mode [ 469.895595][T13128] bridge_slave_0: entered promiscuous mode [ 470.340398][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 470.412112][T10774] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.575458][ T60] Bluetooth: hci2: command tx timeout [ 470.575654][ T4939] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 470.701582][T13128] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.702027][T13128] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.702493][T13128] bridge_slave_1: entered allmulticast mode [ 470.727483][ T4939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.727548][ T4939] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.729779][ T4939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.729806][ T4939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.729825][ T4939] usb 5-1: Product: syz [ 470.729839][ T4939] usb 5-1: Manufacturer: syz [ 470.729853][ T4939] usb 5-1: SerialNumber: syz [ 470.740122][ T4939] cdc_mbim 5-1:1.0: skipping garbage [ 470.788688][T13128] bridge_slave_1: entered promiscuous mode [ 471.019035][T13239] FAULT_INJECTION: forcing a failure. [ 471.019035][T13239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.019065][T13239] CPU: 1 UID: 0 PID: 13239 Comm: syz.2.2756 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 471.019086][T13239] Tainted: [L]=SOFTLOCKUP [ 471.019092][T13239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.019100][T13239] Call Trace: [ 471.019107][T13239] [ 471.019113][T13239] dump_stack_lvl+0xe8/0x150 [ 471.019136][T13239] should_fail_ex+0x46b/0x600 [ 471.019161][T13239] _copy_from_iter+0x1d3/0x1670 [ 471.019186][T13239] ? rcu_is_watching+0x15/0xb0 [ 471.019215][T13239] ? __pfx__copy_from_iter+0x10/0x10 [ 471.019236][T13239] ? __alloc_skb+0x27d/0x7d0 [ 471.019253][T13239] ? __alloc_skb+0x27d/0x7d0 [ 471.019274][T13239] ? netlink_sendmsg+0x650/0xb40 [ 471.019292][T13239] ? skb_put+0x11b/0x210 [ 471.019312][T13239] netlink_sendmsg+0x6c0/0xb40 [ 471.019338][T13239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.019360][T13239] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 471.019396][T13239] ? aa_sock_msg_perm+0x122/0x200 [ 471.019415][T13239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.019433][T13239] sock_sendmsg_nosec+0x13a/0x180 [ 471.019457][T13239] ____sys_sendmsg+0x55c/0x870 [ 471.019480][T13239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.019504][T13239] ? import_iovec+0x73/0xa0 [ 471.019523][T13239] ___sys_sendmsg+0x2a5/0x360 [ 471.019541][T13239] ? __lock_acquire+0x6b5/0x2d10 [ 471.019563][T13239] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.019605][T13239] ? __fget_files+0x2a/0x420 [ 471.019621][T13239] ? __fget_files+0x3a6/0x420 [ 471.019645][T13239] __x64_sys_sendmsg+0x1b7/0x290 [ 471.019667][T13239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.019700][T13239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.019718][T13239] do_syscall_64+0x174/0x580 [ 471.019740][T13239] ? trace_irq_disable+0x3b/0x140 [ 471.019767][T13239] ? clear_bhb_loop+0x40/0x90 [ 471.019789][T13239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.019808][T13239] RIP: 0033:0x7fd2583cce59 [ 471.019826][T13239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.019843][T13239] RSP: 002b:00007fd25661e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.019863][T13239] RAX: ffffffffffffffda RBX: 00007fd258645fa0 RCX: 00007fd2583cce59 [ 471.019877][T13239] RDX: 0000000004008004 RSI: 0000200000000600 RDI: 0000000000000004 [ 471.019890][T13239] RBP: 00007fd25661e090 R08: 0000000000000000 R09: 0000000000000000 [ 471.019902][T13239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.019914][T13239] R13: 00007fd258646038 R14: 00007fd258645fa0 R15: 00007fff777879a8 [ 471.019942][T13239] [ 471.341845][T13128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.389652][T13128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.610680][T13128] team0: Port device team_slave_0 added [ 471.626901][T13128] team0: Port device team_slave_1 added [ 472.112102][T13259] FAULT_INJECTION: forcing a failure. [ 472.112102][T13259] name failslab, interval 1, probability 0, space 0, times 0 [ 472.112137][T13259] CPU: 1 UID: 0 PID: 13259 Comm: syz.2.2764 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 472.112177][T13259] Tainted: [L]=SOFTLOCKUP [ 472.112184][T13259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 472.112195][T13259] Call Trace: [ 472.112203][T13259] [ 472.112212][T13259] dump_stack_lvl+0xe8/0x150 [ 472.112241][T13259] should_fail_ex+0x46b/0x600 [ 472.112273][T13259] should_failslab+0xa8/0x100 [ 472.112297][T13259] __kvmalloc_node_noprof+0x181/0x910 [ 472.112322][T13259] ? nf_tables_commit+0xc2f/0xa840 [ 472.112398][T13259] ? nf_tables_commit+0xc2f/0xa840 [ 472.112422][T13259] nf_tables_commit+0xc2f/0xa840 [ 472.112441][T13259] ? reacquire_held_locks+0x104/0x190 [ 472.112472][T13259] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 472.112500][T13259] ? rt_spin_unlock+0x160/0x200 [ 472.112519][T13259] ? __free_frozen_pages+0x9cf/0x1190 [ 472.112541][T13259] ? __pfx_nf_tables_commit+0x10/0x10 [ 472.112560][T13259] ? __pfx___free_frozen_pages+0x10/0x10 [ 472.112578][T13259] ? lruvec_stat_mod_folio+0x2f5/0x3e0 [ 472.112653][T13259] ? nf_tables_newrule+0x2590/0x28b0 [ 472.112684][T13259] ? __pfx_nf_tables_newrule+0x10/0x10 [ 472.112707][T13259] ? nfnl_pernet+0x23/0x240 [ 472.112753][T13259] nfnetlink_rcv+0x1c22/0x27b0 [ 472.112805][T13259] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 472.112866][T13259] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 472.112891][T13259] ? ref_tracker_free+0x673/0x820 [ 472.112942][T13259] ? __netlink_deliver_tap+0x866/0x8b0 [ 472.112976][T13259] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.112999][T13259] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.113027][T13259] netlink_unicast+0x780/0x920 [ 472.113059][T13259] netlink_sendmsg+0x813/0xb40 [ 472.113091][T13259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.113129][T13259] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 472.113180][T13259] ? aa_sock_msg_perm+0x122/0x200 [ 472.113202][T13259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.113226][T13259] sock_sendmsg_nosec+0x13a/0x180 [ 472.113256][T13259] ____sys_sendmsg+0x55c/0x870 [ 472.113285][T13259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.113318][T13259] ? import_iovec+0x73/0xa0 [ 472.113341][T13259] ___sys_sendmsg+0x2a5/0x360 [ 472.113433][T13259] ? __lock_acquire+0x6b5/0x2d10 [ 472.113462][T13259] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.113516][T13259] ? __fget_files+0x2a/0x420 [ 472.113536][T13259] ? __fget_files+0x3a6/0x420 [ 472.113565][T13259] __x64_sys_sendmsg+0x1b7/0x290 [ 472.113591][T13259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.113631][T13259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.113651][T13259] do_syscall_64+0x174/0x580 [ 472.113676][T13259] ? trace_irq_disable+0x3b/0x140 [ 472.113705][T13259] ? clear_bhb_loop+0x40/0x90 [ 472.113729][T13259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.113749][T13259] RIP: 0033:0x7fd2583cce59 [ 472.113769][T13259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.113785][T13259] RSP: 002b:00007fd25661e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.113806][T13259] RAX: ffffffffffffffda RBX: 00007fd258645fa0 RCX: 00007fd2583cce59 [ 472.113821][T13259] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 472.113833][T13259] RBP: 00007fd25661e090 R08: 0000000000000000 R09: 0000000000000000 [ 472.113845][T13259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.113855][T13259] R13: 00007fd258646038 R14: 00007fd258645fa0 R15: 00007fff777879a8 [ 472.113887][T13259] [ 472.184037][T10774] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.550056][T13261] 9p: Bad value for 'rfdno' [ 472.655438][ T60] Bluetooth: hci2: command tx timeout [ 472.689473][T13128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.689490][T13128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.689515][T13128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.783691][T13128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.783703][T13128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.783752][T13128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.347552][ T5716] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 473.376214][ T4939] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 473.376454][ T4939] cdc_mbim 5-1:1.0: bind() failure [ 473.440889][ T4939] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 473.440937][ T4939] cdc_ncm 5-1:1.1: bind() failure [ 473.461548][ T4939] usb 5-1: USB disconnect, device number 124 [ 473.535488][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 473.539104][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 473.540318][ T5716] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 473.540346][ T5716] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 473.540369][ T5716] usb 3-1: config 14 has no interface number 0 [ 473.540385][ T5716] usb 3-1: config 14 has no interface number 1 [ 473.540454][ T5716] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 473.540477][ T5716] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 473.540504][ T5716] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 473.540531][ T5716] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 473.540560][ T5716] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 473.540588][ T5716] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.540616][ T5716] usb 3-1: config 14 interface 57 has no altsetting 0 [ 473.540635][ T5716] usb 3-1: config 14 interface 228 has no altsetting 0 [ 473.543669][ T5716] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 473.543702][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.543725][ T5716] usb 3-1: Product: syz [ 473.543740][ T5716] usb 3-1: Manufacturer: syz [ 473.543756][ T5716] usb 3-1: SerialNumber: syz [ 473.713889][T10774] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.882391][T13128] hsr_slave_0: entered promiscuous mode [ 473.884057][T13128] hsr_slave_1: entered promiscuous mode [ 474.010263][T10774] tipc: Resetting bearer [ 474.149500][ T5716] legousbtower 3-1:14.57: interrupt endpoints not found [ 474.467889][ T5790] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 474.526811][T10774] tipc: Disabling bearer [ 474.559533][ T5716] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 474.562383][ T5716] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 474.597910][T10774] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.620220][ T5790] usb 5-1: Using ep0 maxpacket: 8 [ 474.622169][ T5790] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.622202][ T5790] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.622224][ T5790] usb 5-1: config 0 interface 0 has no altsetting 0 [ 474.622255][ T5790] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 474.622277][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.626695][ T928] usb 3-1: USB disconnect, device number 9 [ 474.700069][ T5790] usb 5-1: config 0 descriptor?? [ 474.736237][ T60] Bluetooth: hci2: command tx timeout [ 474.910414][ T928] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 475.202603][ T5790] usbhid 5-1:0.0: can't add hid device: -71 [ 475.202722][ T5790] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 475.228693][ T5790] usb 5-1: USB disconnect, device number 125 [ 475.679056][T13310] sg_write: data in/out 439261/434 bytes for SCSI command 0x0-- guessing data in; [ 475.679056][T13310] program syz.4.2784 not setting count and/or reply_len properly [ 476.193934][T13328] 9p: Bad value for 'rfdno' [ 476.266863][ T5791] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 476.443317][ T5791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.443351][ T5791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.443390][ T5791] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 476.443413][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.506713][ T5791] usb 5-1: config 0 descriptor?? [ 476.535857][T13335] FAULT_INJECTION: forcing a failure. [ 476.535857][T13335] name failslab, interval 1, probability 0, space 0, times 0 [ 476.535909][T13335] CPU: 0 UID: 0 PID: 13335 Comm: syz.2.2795 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 476.535937][T13335] Tainted: [L]=SOFTLOCKUP [ 476.535944][T13335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 476.535960][T13335] Call Trace: [ 476.535968][T13335] [ 476.535977][T13335] dump_stack_lvl+0xe8/0x150 [ 476.536005][T13335] should_fail_ex+0x46b/0x600 [ 476.536037][T13335] should_failslab+0xa8/0x100 [ 476.536062][T13335] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 476.536093][T13335] ? __pmd_alloc+0xa4/0x5e0 [ 476.536109][T13335] ? __pmd_alloc+0xa4/0x5e0 [ 476.536133][T13335] __pmd_alloc+0xa4/0x5e0 [ 476.536153][T13335] handle_mm_fault+0xf4d/0x14d0 [ 476.536176][T13335] ? handle_mm_fault+0xed/0x14d0 [ 476.536199][T13335] ? __pfx_handle_mm_fault+0x10/0x10 [ 476.536231][T13335] ? __lock_acquire+0x6b5/0x2d10 [ 476.536261][T13335] ? lock_mm_and_find_vma+0xa7/0x340 [ 476.536287][T13335] do_user_addr_fault+0x75b/0x1340 [ 476.536325][T13335] exc_page_fault+0x6a/0xc0 [ 476.536351][T13335] asm_exc_page_fault+0x26/0x30 [ 476.536370][T13335] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 476.536388][T13335] Code: c4 10 e9 54 2a 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 476.536404][T13335] RSP: 0018:ffffc9000629fcb8 EFLAGS: 00050202 [ 476.536421][T13335] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 476.536434][T13335] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffc9000629fd70 [ 476.536446][T13335] RBP: ffffc9000629fe68 R08: 0000000000000003 R09: 0000000000000004 [ 476.536458][T13335] R10: dffffc0000000000 R11: fffff52000c53fae R12: 1ffff92000c53fa4 [ 476.536471][T13335] R13: 0000200000000200 R14: ffffc9000629fd70 R15: 0000200000000200 [ 476.536500][T13335] _copy_from_user+0x7a/0xb0 [ 476.536521][T13335] do_sock_getsockopt+0x200/0x7e0 [ 476.536556][T13335] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 476.536594][T13335] ? __fget_files+0x3a6/0x420 [ 476.536612][T13335] ? __fget_files+0x2a/0x420 [ 476.536635][T13335] __x64_sys_getsockopt+0x1aa/0x250 [ 476.536661][T13335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.536681][T13335] do_syscall_64+0x174/0x580 [ 476.536701][T13335] ? trace_irq_disable+0x3b/0x140 [ 476.536725][T13335] ? clear_bhb_loop+0x40/0x90 [ 476.536748][T13335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.536767][T13335] RIP: 0033:0x7fd2583cce59 [ 476.536785][T13335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.536800][T13335] RSP: 002b:00007fd25661e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 476.536819][T13335] RAX: ffffffffffffffda RBX: 00007fd258645fa0 RCX: 00007fd2583cce59 [ 476.536832][T13335] RDX: 0000000000000024 RSI: 0000000000000029 RDI: 0000000000000005 [ 476.536841][T13335] RBP: 00007fd25661e090 R08: 0000200000000200 R09: 0000000000000000 [ 476.536851][T13335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.536859][T13335] R13: 00007fd258646038 R14: 00007fd258645fa0 R15: 00007fff777879a8 [ 476.536882][T13335] [ 477.488417][ T5791] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 477.488547][ T5791] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 477.658909][ T5791] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0014/input/input36 [ 477.802691][ T5791] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 477.964346][ T5790] usb 5-1: USB disconnect, device number 126 [ 478.126412][T13368] netlink: 'syz.3.2804': attribute type 28 has an invalid length. [ 478.126982][T13368] comedi comedi1: 8255: I/O base address not correctly aligned [ 478.177301][T13365] fido_id[13365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 478.314127][T13370] FAULT_INJECTION: forcing a failure. [ 478.314127][T13370] name failslab, interval 1, probability 0, space 0, times 0 [ 478.314161][T13370] CPU: 0 UID: 0 PID: 13370 Comm: syz.2.2805 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 478.314189][T13370] Tainted: [L]=SOFTLOCKUP [ 478.314196][T13370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 478.314208][T13370] Call Trace: [ 478.314216][T13370] [ 478.314224][T13370] dump_stack_lvl+0xe8/0x150 [ 478.314253][T13370] should_fail_ex+0x46b/0x600 [ 478.314286][T13370] should_failslab+0xa8/0x100 [ 478.314310][T13370] __kmalloc_node_track_caller_noprof+0xfe/0x820 [ 478.314334][T13370] ? __kernfs_new_node+0xac/0xa70 [ 478.314354][T13370] ? __kernfs_new_node+0xac/0xa70 [ 478.314379][T13370] kstrdup+0x42/0x100 [ 478.314407][T13370] __kernfs_new_node+0xac/0xa70 [ 478.314436][T13370] ? __pfx___kernfs_new_node+0x10/0x10 [ 478.314456][T13370] ? kernfs_root+0x1c/0x230 [ 478.314481][T13370] ? kernfs_root+0x1c/0x230 [ 478.314500][T13370] ? kernfs_root+0x1c/0x230 [ 478.314523][T13370] kernfs_new_node+0xea/0x140 [ 478.314549][T13370] kernfs_create_link+0xa7/0x200 [ 478.314578][T13370] sysfs_do_create_link_sd+0x83/0x110 [ 478.314611][T13370] device_add_class_symlinks+0x1d2/0x240 [ 478.314638][T13370] device_add+0x475/0xb90 [ 478.314665][T13370] input_register_device+0x9a3/0x1130 [ 478.314698][T13370] ? input_ff_create+0x235/0x300 [ 478.314725][T13370] uinput_create_device+0x422/0x680 [ 478.314760][T13370] uinput_ioctl_handler+0x41a/0x14a0 [ 478.314790][T13370] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 478.314824][T13370] ? __fget_files+0x2a/0x420 [ 478.314850][T13370] ? __fget_files+0x3a6/0x420 [ 478.314875][T13370] ? bpf_lsm_file_ioctl+0x9/0x20 [ 478.314899][T13370] ? __pfx_uinput_ioctl+0x10/0x10 [ 478.314922][T13370] __se_sys_ioctl+0xff/0x170 [ 478.314947][T13370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.314969][T13370] do_syscall_64+0x174/0x580 [ 478.314993][T13370] ? trace_irq_disable+0x3b/0x140 [ 478.315015][T13370] ? clear_bhb_loop+0x40/0x90 [ 478.315038][T13370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.315056][T13370] RIP: 0033:0x7fd2583cce59 [ 478.315073][T13370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.315088][T13370] RSP: 002b:00007fd25661e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.315108][T13370] RAX: ffffffffffffffda RBX: 00007fd258645fa0 RCX: 00007fd2583cce59 [ 478.315120][T13370] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 478.315132][T13370] RBP: 00007fd25661e090 R08: 0000000000000000 R09: 0000000000000000 [ 478.315144][T13370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.315156][T13370] R13: 00007fd258646038 R14: 00007fd258645fa0 R15: 00007fff777879a8 [ 478.315187][T13370] [ 478.415790][ T5791] usb 4-1: new low-speed USB device number 108 using dummy_hcd [ 478.585458][ T5791] usb 4-1: device descriptor read/64, error -71 [ 478.704261][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 478.828171][ T5791] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 478.955752][ T5791] usb 4-1: device descriptor read/64, error -71 [ 478.980208][T13386] FAULT_INJECTION: forcing a failure. [ 478.980208][T13386] name failslab, interval 1, probability 0, space 0, times 0 [ 478.980246][T13386] CPU: 1 UID: 0 PID: 13386 Comm: syz.2.2810 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 478.980274][T13386] Tainted: [L]=SOFTLOCKUP [ 478.980281][T13386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 478.980300][T13386] Call Trace: [ 478.980308][T13386] [ 478.980317][T13386] dump_stack_lvl+0xe8/0x150 [ 478.980347][T13386] should_fail_ex+0x46b/0x600 [ 478.980380][T13386] should_failslab+0xa8/0x100 [ 478.980404][T13386] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 478.980435][T13386] ? do_getname+0x2e/0x250 [ 478.980461][T13386] ? do_getname+0x2e/0x250 [ 478.980494][T13386] do_getname+0x2e/0x250 [ 478.980520][T13386] ? user_path_at+0x1e/0x160 [ 478.980544][T13386] user_path_at+0x2a/0x160 [ 478.980568][T13386] __se_sys_mount+0x2dc/0x420 [ 478.980593][T13386] ? __pfx___se_sys_mount+0x10/0x10 [ 478.980616][T13386] ? __x64_sys_mount+0x20/0xc0 [ 478.980633][T13386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.980653][T13386] do_syscall_64+0x174/0x580 [ 478.980678][T13386] ? trace_irq_disable+0x3b/0x140 [ 478.980702][T13386] ? clear_bhb_loop+0x40/0x90 [ 478.980726][T13386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.980746][T13386] RIP: 0033:0x7fd2583cce59 [ 478.980764][T13386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.980781][T13386] RSP: 002b:00007fd25661e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 478.980802][T13386] RAX: ffffffffffffffda RBX: 00007fd258645fa0 RCX: 00007fd2583cce59 [ 478.980816][T13386] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 478.980830][T13386] RBP: 00007fd25661e090 R08: 0000200000000100 R09: 0000000000000000 [ 478.980843][T13386] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000001 [ 478.980856][T13386] R13: 00007fd258646038 R14: 00007fd258645fa0 R15: 00007fff777879a8 [ 478.980886][T13386] [ 479.155416][ T5791] usb usb4-port1: attempt power cycle [ 479.285554][T10774] bridge_slave_1: left allmulticast mode [ 479.285588][T10774] bridge_slave_1: left promiscuous mode [ 479.285843][T10774] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.499901][T10774] bridge_slave_0: left allmulticast mode [ 479.499934][T10774] bridge_slave_0: left promiscuous mode [ 479.500235][T10774] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.545685][ T5791] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 479.567333][ T5791] usb 4-1: device descriptor read/8, error -71 [ 479.809759][ T5791] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 479.828362][ T5791] usb 4-1: device descriptor read/8, error -71 [ 479.944290][ T5791] usb usb4-port1: unable to enumerate USB device [ 480.097183][T13423] FAULT_INJECTION: forcing a failure. [ 480.097183][T13423] name failslab, interval 1, probability 0, space 0, times 0 [ 480.097213][T13423] CPU: 1 UID: 0 PID: 13423 Comm: syz.2.2825 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 480.097229][T13423] Tainted: [L]=SOFTLOCKUP [ 480.097234][T13423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 480.097240][T13423] Call Trace: [ 480.097245][T13423] [ 480.097250][T13423] dump_stack_lvl+0xe8/0x150 [ 480.097268][T13423] should_fail_ex+0x46b/0x600 [ 480.097286][T13423] should_failslab+0xa8/0x100 [ 480.097299][T13423] __kvmalloc_node_noprof+0x181/0x910 [ 480.097313][T13423] ? io_alloc_cache_init+0x42/0x140 [ 480.097395][T13423] ? io_alloc_cache_init+0x42/0x140 [ 480.097410][T13423] io_alloc_cache_init+0x42/0x140 [ 480.097423][T13423] io_ring_ctx_alloc+0x55a/0xd20 [ 480.097488][T13423] io_uring_create+0x50/0x9a0 [ 480.097506][T13423] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 480.097541][T13423] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 480.097552][T13423] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 480.097573][T13423] ? __pfx_ksys_write+0x10/0x10 [ 480.097591][T13423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.097602][T13423] do_syscall_64+0x174/0x580 [ 480.097616][T13423] ? trace_irq_disable+0x3b/0x140 [ 480.097630][T13423] ? clear_bhb_loop+0x40/0x90 [ 480.097642][T13423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.097653][T13423] RIP: 0033:0x7fd2583cce59 [ 480.097663][T13423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.097673][T13423] RSP: 002b:00007fd25661dee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 480.097686][T13423] RAX: ffffffffffffffda RBX: 0000200000000488 RCX: 00007fd2583cce59 [ 480.097693][T13423] RDX: 0000200000000508 RSI: 0000200000000488 RDI: 000000000000001c [ 480.097701][T13423] RBP: 0000200000000480 R08: 0000200000001540 R09: 0000000000000000 [ 480.097708][T13423] R10: 0000200000000510 R11: 0000000000000206 R12: 0000200000000508 [ 480.097715][T13423] R13: 0000200000000510 R14: 00007fd25661dfd8 R15: 0000000000000000 [ 480.097730][T13423] [ 481.120063][T10774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.196256][T10774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.237425][T10774] bond0 (unregistering): Released all slaves [ 481.290913][T13467] 9pnet_fd: Insufficient options for proto=fd [ 481.372303][T13469] FAULT_INJECTION: forcing a failure. [ 481.372303][T13469] name failslab, interval 1, probability 0, space 0, times 0 [ 481.372338][T13469] CPU: 0 UID: 0 PID: 13469 Comm: syz.2.2845 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 481.372365][T13469] Tainted: [L]=SOFTLOCKUP [ 481.372372][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 481.372383][T13469] Call Trace: [ 481.372391][T13469] [ 481.372400][T13469] dump_stack_lvl+0xe8/0x150 [ 481.372427][T13469] should_fail_ex+0x46b/0x600 [ 481.372460][T13469] should_failslab+0xa8/0x100 [ 481.372483][T13469] __kmalloc_cache_noprof+0xa0/0x6d0 [ 481.372504][T13469] ? alloc_fs_context+0x64/0xd50 [ 481.372644][T13469] ? alloc_fs_context+0x64/0xd50 [ 481.372671][T13469] alloc_fs_context+0x64/0xd50 [ 481.372702][T13469] ? security_capable+0x7e/0x2c0 [ 481.372734][T13469] path_mount+0xcd5/0x10e0 [ 481.372756][T13469] ? user_path_at+0xd4/0x160 [ 481.372779][T13469] __se_sys_mount+0x31d/0x420 [ 481.372804][T13469] ? __pfx___se_sys_mount+0x10/0x10 [ 481.372827][T13469] ? __x64_sys_mount+0x20/0xc0 [ 481.372843][T13469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.372863][T13469] do_syscall_64+0x174/0x580 [ 481.372886][T13469] ? trace_irq_disable+0x3b/0x140 [ 481.372909][T13469] ? clear_bhb_loop+0x40/0x90 [ 481.372934][T13469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.372954][T13469] RIP: 0033:0x7fd2583cce59 [ 481.372973][T13469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.372989][T13469] RSP: 002b:00007fd25661e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 481.373010][T13469] RAX: ffffffffffffffda RBX: 00007fd258645fa0 RCX: 00007fd2583cce59 [ 481.373024][T13469] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 481.373036][T13469] RBP: 00007fd25661e090 R08: 0000200000000180 R09: 0000000000000000 [ 481.373050][T13469] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 481.373062][T13469] R13: 00007fd258646038 R14: 00007fd258645fa0 R15: 00007fff777879a8 [ 481.373092][T13469] [ 481.684815][T13475] FAULT_INJECTION: forcing a failure. [ 481.684815][T13475] name failslab, interval 1, probability 0, space 0, times 0 [ 481.684847][T13475] CPU: 1 UID: 0 PID: 13475 Comm: syz.2.2847 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 481.684869][T13475] Tainted: [L]=SOFTLOCKUP [ 481.684874][T13475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 481.684884][T13475] Call Trace: [ 481.684891][T13475] [ 481.684898][T13475] dump_stack_lvl+0xe8/0x150 [ 481.684925][T13475] should_fail_ex+0x46b/0x600 [ 481.684951][T13475] should_failslab+0xa8/0x100 [ 481.684971][T13475] kmem_cache_alloc_node_noprof+0xae/0x710 [ 481.684996][T13475] ? __alloc_skb+0x1d0/0x7d0 [ 481.685012][T13475] ? __alloc_skb+0x1d0/0x7d0 [ 481.685034][T13475] __alloc_skb+0x1d0/0x7d0 [ 481.685053][T13475] pfkey_send_policy_notify+0x145/0x990 [ 481.685074][T13475] ? __pfx_pfkey_send_policy_notify+0x10/0x10 [ 481.685091][T13475] km_policy_notify+0x121/0x200 [ 481.685115][T13475] ? km_policy_notify+0x28/0x200 [ 481.685141][T13475] xfrm_add_policy+0x4bf/0x6c0 [ 481.685168][T13475] ? __pfx_xfrm_add_policy+0x10/0x10 [ 481.685189][T13475] ? apparmor_capable+0x126/0x170 [ 481.685216][T13475] ? __nla_parse+0x40/0x60 [ 481.685233][T13475] xfrm_user_rcv_msg+0x7cb/0xfc0 [ 481.685257][T13475] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 481.685305][T13475] ? __lock_acquire+0x6b5/0x2d10 [ 481.685328][T13475] ? netlink_deliver_tap+0x19c/0x1b0 [ 481.685345][T13475] ? netlink_unicast+0x754/0x920 [ 481.685358][T13475] ? netlink_sendmsg+0x813/0xb40 [ 481.685374][T13475] ? sock_sendmsg_nosec+0x13a/0x180 [ 481.685393][T13475] ? ____sys_sendmsg+0x55c/0x870 [ 481.685409][T13475] ? ___sys_sendmsg+0x2a5/0x360 [ 481.685425][T13475] ? __x64_sys_sendmsg+0x1b7/0x290 [ 481.685447][T13475] netlink_rcv_skb+0x232/0x4b0 [ 481.685473][T13475] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 481.685500][T13475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.685531][T13475] ? lockdep_hardirqs_on+0x7a/0x110 [ 481.685555][T13475] ? mutex_lock_nested+0x152/0x1d0 [ 481.685579][T13475] ? xfrm_netlink_rcv+0x6a/0x90 [ 481.685603][T13475] xfrm_netlink_rcv+0x79/0x90 [ 481.685623][T13475] netlink_unicast+0x780/0x920 [ 481.685647][T13475] netlink_sendmsg+0x813/0xb40 [ 481.685670][T13475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.685690][T13475] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 481.685721][T13475] ? aa_sock_msg_perm+0x122/0x200 [ 481.685737][T13475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.685755][T13475] sock_sendmsg_nosec+0x13a/0x180 [ 481.685780][T13475] ____sys_sendmsg+0x55c/0x870 [ 481.685803][T13475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.685829][T13475] ? import_iovec+0x73/0xa0 [ 481.685848][T13475] ___sys_sendmsg+0x2a5/0x360 [ 481.685866][T13475] ? __lock_acquire+0x6b5/0x2d10 [ 481.685889][T13475] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.685935][T13475] ? __fget_files+0x2a/0x420 [ 481.685951][T13475] ? __fget_files+0x3a6/0x420 [ 481.685976][T13475] __x64_sys_sendmsg+0x1b7/0x290 [ 481.685998][T13475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.686035][T13475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.686054][T13475] do_syscall_64+0x174/0x580 [ 481.686072][T13475] ? trace_irq_disable+0x3b/0x140 [ 481.686092][T13475] ? clear_bhb_loop+0x40/0x90 [ 481.686112][T13475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.686127][T13475] RIP: 0033:0x7fd2583cce59 [ 481.686145][T13475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.686158][T13475] RSP: 002b:00007fd25661e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.686176][T13475] RAX: ffffffffffffffda RBX: 00007fd258645fa0 RCX: 00007fd2583cce59 [ 481.686187][T13475] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 481.686197][T13475] RBP: 00007fd25661e090 R08: 0000000000000000 R09: 0000000000000000 [ 481.686208][T13475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.686217][T13475] R13: 00007fd258646038 R14: 00007fd258645fa0 R15: 00007fff777879a8 [ 481.686245][T13475] [ 481.714166][T10774] tipc: Left network mode [ 481.863006][T13477] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 482.031472][T13477] IPv6: Can't replace route, no match found [ 482.262884][T13128] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 482.372161][T13128] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.382577][T13128] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 482.531960][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'. [ 482.531986][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'. [ 482.542438][T13128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.565792][T13492] FAULT_INJECTION: forcing a failure. [ 482.565792][T13492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.565829][T13492] CPU: 1 UID: 0 PID: 13492 Comm: syz.2.2850 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 482.565856][T13492] Tainted: [L]=SOFTLOCKUP [ 482.565863][T13492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 482.565874][T13492] Call Trace: [ 482.565882][T13492] [ 482.565891][T13492] dump_stack_lvl+0xe8/0x150 [ 482.565920][T13492] should_fail_ex+0x46b/0x600 [ 482.565951][T13492] _copy_to_user+0x31/0xb0 [ 482.565975][T13492] simple_read_from_buffer+0xe1/0x170 [ 482.566010][T13492] proc_fail_nth_read+0x1be/0x230 [ 482.566034][T13492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.566057][T13492] ? rw_verify_area+0x2ac/0x4e0 [ 482.566080][T13492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.566101][T13492] vfs_read+0x212/0xa80 [ 482.566131][T13492] ? __pfx_vfs_read+0x10/0x10 [ 482.566154][T13492] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 482.566180][T13492] ? lockdep_hardirqs_on+0x7a/0x110 [ 482.566204][T13492] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 482.566227][T13492] ? mutex_lock_nested+0x152/0x1d0 [ 482.566252][T13492] ? fdget_pos+0x252/0x320 [ 482.566279][T13492] ksys_read+0x156/0x270 [ 482.566304][T13492] ? __pfx_ksys_read+0x10/0x10 [ 482.566335][T13492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.566354][T13492] do_syscall_64+0x174/0x580 [ 482.566375][T13492] ? trace_irq_disable+0x3b/0x140 [ 482.566396][T13492] ? clear_bhb_loop+0x40/0x90 [ 482.566419][T13492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.566438][T13492] RIP: 0033:0x7fd25838d68e [ 482.566456][T13492] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 482.566472][T13492] RSP: 002b:00007fd25661dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 482.566503][T13492] RAX: ffffffffffffffda RBX: 00007fd25661e6c0 RCX: 00007fd25838d68e [ 482.566518][T13492] RDX: 000000000000000f RSI: 00007fd25661e0a0 RDI: 0000000000000004 [ 482.566528][T13492] RBP: 00007fd25661e090 R08: 0000000000000000 R09: 0000000000000000 [ 482.566541][T13492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.566551][T13492] R13: 00007fd258646038 R14: 00007fd258645fa0 R15: 00007fff777879a8 [ 482.566580][T13492] [ 483.150504][T13508] FAULT_INJECTION: forcing a failure. [ 483.150504][T13508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.150539][T13508] CPU: 1 UID: 0 PID: 13508 Comm: syz.2.2856 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 483.150566][T13508] Tainted: [L]=SOFTLOCKUP [ 483.150574][T13508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 483.150585][T13508] Call Trace: [ 483.150593][T13508] [ 483.150602][T13508] dump_stack_lvl+0xe8/0x150 [ 483.150636][T13508] should_fail_ex+0x46b/0x600 [ 483.150669][T13508] _copy_from_user+0x2d/0xb0 [ 483.150692][T13508] kstrtouint_from_user+0xd6/0x180 [ 483.150723][T13508] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 483.150766][T13508] proc_fail_nth_write+0x8e/0x210 [ 483.150789][T13508] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 483.150815][T13508] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 483.150837][T13508] vfs_write+0x2a3/0xba0 [ 483.150869][T13508] ? __pfx_vfs_write+0x10/0x10 [ 483.150894][T13508] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 483.150919][T13508] ? lockdep_hardirqs_on+0x7a/0x110 [ 483.150942][T13508] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 483.150966][T13508] ? mutex_lock_nested+0x152/0x1d0 [ 483.150999][T13508] ? fdget_pos+0x252/0x320 [ 483.151028][T13508] ksys_write+0x156/0x270 [ 483.151055][T13508] ? __pfx_ksys_write+0x10/0x10 [ 483.151076][T13508] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 483.151176][T13508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.151197][T13508] do_syscall_64+0x174/0x580 [ 483.151221][T13508] ? clear_bhb_loop+0x40/0x90 [ 483.151244][T13508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.151262][T13508] RIP: 0033:0x7fd25838d68e [ 483.151280][T13508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 483.151296][T13508] RSP: 002b:00007fd25661dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 483.151316][T13508] RAX: ffffffffffffffda RBX: 00007fd25661e6c0 RCX: 00007fd25838d68e [ 483.151332][T13508] RDX: 0000000000000001 RSI: 00007fd25661e0a0 RDI: 0000000000000004 [ 483.151345][T13508] RBP: 00007fd25661e090 R08: 0000000000000000 R09: 0000000000000000 [ 483.151357][T13508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.151370][T13508] R13: 00007fd258646038 R14: 00007fd258645fa0 R15: 00007fff777879a8 [ 483.151400][T13508] [ 483.447957][T13128] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 483.449475][T13517] FAULT_INJECTION: forcing a failure. [ 483.449475][T13517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.449507][T13517] CPU: 0 UID: 0 PID: 13517 Comm: syz.2.2860 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 483.449534][T13517] Tainted: [L]=SOFTLOCKUP [ 483.449541][T13517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 483.449552][T13517] Call Trace: [ 483.449560][T13517] [ 483.449569][T13517] dump_stack_lvl+0xe8/0x150 [ 483.449597][T13517] should_fail_ex+0x46b/0x600 [ 483.449629][T13517] _copy_from_iter+0x1d3/0x1670 [ 483.449662][T13517] ? rcu_is_watching+0x15/0xb0 [ 483.449697][T13517] ? __pfx__copy_from_iter+0x10/0x10 [ 483.449725][T13517] ? __alloc_skb+0x27d/0x7d0 [ 483.449745][T13517] ? __alloc_skb+0x27d/0x7d0 [ 483.449771][T13517] ? netlink_sendmsg+0x650/0xb40 [ 483.449793][T13517] ? skb_put+0x11b/0x210 [ 483.449818][T13517] netlink_sendmsg+0x6c0/0xb40 [ 483.449849][T13517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.449874][T13517] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 483.449900][T13517] ? aa_sock_msg_perm+0x122/0x200 [ 483.449921][T13517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.449943][T13517] sock_sendmsg_nosec+0x13a/0x180 [ 483.449973][T13517] ____sys_sendmsg+0x55c/0x870 [ 483.450001][T13517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.450032][T13517] ? import_iovec+0x73/0xa0 [ 483.450053][T13517] ___sys_sendmsg+0x2a5/0x360 [ 483.450073][T13517] ? __lock_acquire+0x6b5/0x2d10 [ 483.450105][T13517] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.450154][T13517] ? __fget_files+0x2a/0x420 [ 483.450178][T13517] ? __fget_files+0x3a6/0x420 [ 483.450204][T13517] __x64_sys_sendmsg+0x1b7/0x290 [ 483.450228][T13517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.450266][T13517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.450286][T13517] do_syscall_64+0x174/0x580 [ 483.450307][T13517] ? trace_irq_disable+0x3b/0x140 [ 483.450329][T13517] ? clear_bhb_loop+0x40/0x90 [ 483.450351][T13517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.450368][T13517] RIP: 0033:0x7fd2583cce59 [ 483.450386][T13517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.450400][T13517] RSP: 002b:00007fd25661e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.450419][T13517] RAX: ffffffffffffffda RBX: 00007fd258645fa0 RCX: 00007fd2583cce59 [ 483.450433][T13517] RDX: 0000000004008094 RSI: 0000200000000000 RDI: 0000000000000003 [ 483.450446][T13517] RBP: 00007fd25661e090 R08: 0000000000000000 R09: 0000000000000000 [ 483.450466][T13517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.450478][T13517] R13: 00007fd258646038 R14: 00007fd258645fa0 R15: 00007fff777879a8 [ 483.450505][T13517] [ 483.820527][T13128] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 483.836020][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 483.949905][T13522] syzkaller1: entered allmulticast mode [ 483.954015][T13128] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 484.020807][T13128] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.333326][T10774] hsr_slave_0: left promiscuous mode [ 485.368050][T10774] hsr_slave_1: left promiscuous mode [ 485.369397][T10774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.369423][T10774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.422855][T10774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.422884][T10774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.574286][T10774] veth1_macvtap: left promiscuous mode [ 485.574402][T10774] veth0_macvtap: left promiscuous mode [ 485.574725][T10774] veth1_vlan: left promiscuous mode [ 485.574924][T10774] veth0_vlan: left promiscuous mode [ 485.736864][T13597] sg_write: data in/out 445405/458 bytes for SCSI command 0x0-- guessing data in; [ 485.736864][T13597] program syz.3.2885 not setting count and/or reply_len properly [ 485.958609][T13605] FAULT_INJECTION: forcing a failure. [ 485.958609][T13605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.958645][T13605] CPU: 1 UID: 0 PID: 13605 Comm: syz.2.2888 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 485.958672][T13605] Tainted: [L]=SOFTLOCKUP [ 485.958678][T13605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 485.958690][T13605] Call Trace: [ 485.958698][T13605] [ 485.958706][T13605] dump_stack_lvl+0xe8/0x150 [ 485.958734][T13605] should_fail_ex+0x46b/0x600 [ 485.958765][T13605] _copy_from_user+0x2d/0xb0 [ 485.958797][T13605] __sys_sendto+0x292/0x5a0 [ 485.958822][T13605] ? __pfx___sys_sendto+0x10/0x10 [ 485.958866][T13605] ? do_user_addr_fault+0xc6f/0x1340 [ 485.958895][T13605] __x64_sys_sendto+0xde/0x100 [ 485.958923][T13605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.958944][T13605] do_syscall_64+0x174/0x580 [ 485.958965][T13605] ? trace_irq_disable+0x3b/0x140 [ 485.958988][T13605] ? clear_bhb_loop+0x40/0x90 [ 485.959010][T13605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.959028][T13605] RIP: 0033:0x7fd25838d68e [ 485.959046][T13605] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 485.959063][T13605] RSP: 002b:00007fd25661ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 485.959083][T13605] RAX: ffffffffffffffda RBX: 00007fd25661e6c0 RCX: 00007fd25838d68e [ 485.959098][T13605] RDX: 0000000000000020 RSI: 00007fd25661d000 RDI: 0000000000000005 [ 485.959110][T13605] RBP: 0000000000000000 R08: 00007fd25661cf04 R09: 000000000000000c [ 485.959122][T13605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 485.959133][T13605] R13: 00007fd25661cf58 R14: 00007fd25661d000 R15: 0000000000000000 [ 485.959161][T13605] [ 486.677507][T13623] sg_write: data in/out 445405/458 bytes for SCSI command 0x0-- guessing data in; [ 486.677507][T13623] program syz.3.2894 not setting count and/or reply_len properly [ 487.176669][T13644] syz.2.2903 (13644): drop_caches: 4 [ 487.256893][T10774] team0 (unregistering): Port device team_slave_1 removed [ 487.316543][T10774] team0 (unregistering): Port device team_slave_0 removed [ 487.415604][ T32] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 487.565434][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 487.567299][ T32] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 487.567328][ T32] usb 3-1: config 0 has no interface number 0 [ 487.569828][ T32] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 487.569857][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.569877][ T32] usb 3-1: Product: syz [ 487.569893][ T32] usb 3-1: Manufacturer: syz [ 487.569907][ T32] usb 3-1: SerialNumber: syz [ 487.581674][ T32] usb 3-1: config 0 descriptor?? [ 487.823978][ T32] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 487.824156][ T32] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized! [ 487.835792][ T32] usb 3-1: USB disconnect, device number 10 [ 487.934595][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 488.458463][T13651] sg_write: data in/out 445405/458 bytes for SCSI command 0x0-- guessing data in; [ 488.458463][T13651] program syz.4.2905 not setting count and/or reply_len properly [ 488.535234][T13128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.566185][T13128] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.669124][T10776] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.724795][T10776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.735044][T10776] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.779241][T13665] FAULT_INJECTION: forcing a failure. [ 488.779241][T13665] name failslab, interval 1, probability 0, space 0, times 0 [ 488.779268][T13665] CPU: 1 UID: 0 PID: 13665 Comm: syz.2.2909 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 488.779284][T13665] Tainted: [L]=SOFTLOCKUP [ 488.779287][T13665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.779294][T13665] Call Trace: [ 488.779299][T13665] [ 488.779304][T13665] dump_stack_lvl+0xe8/0x150 [ 488.779322][T13665] should_fail_ex+0x46b/0x600 [ 488.779340][T13665] should_failslab+0xa8/0x100 [ 488.779354][T13665] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 488.779371][T13665] ? prepare_creds+0x30/0x820 [ 488.779385][T13665] ? prepare_creds+0x30/0x820 [ 488.779405][T13665] prepare_creds+0x30/0x820 [ 488.779421][T13665] copy_creds+0x10e/0xa30 [ 488.779434][T13665] ? __raw_spin_lock_init+0x45/0x100 [ 488.779448][T13665] copy_process+0xd31/0x42e0 [ 488.779470][T13665] ? kstrtouint+0x6e/0xe0 [ 488.779486][T13665] ? get_pid_task+0x20/0x1f0 [ 488.779501][T13665] ? __pfx_copy_process+0x10/0x10 [ 488.779517][T13665] ? get_pid_task+0x20/0x1f0 [ 488.779527][T13665] ? get_pid_task+0x20/0x1f0 [ 488.779541][T13665] kernel_clone+0x2d7/0x940 [ 488.779554][T13665] ? __pfx_kernel_clone+0x10/0x10 [ 488.779563][T13665] ? do_raw_spin_lock+0x12b/0x2f0 [ 488.779583][T13665] __x64_sys_clone+0x1b6/0x230 [ 488.779594][T13665] ? __pfx___x64_sys_clone+0x10/0x10 [ 488.779612][T13665] ? __pfx_ksys_write+0x10/0x10 [ 488.779629][T13665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.779641][T13665] do_syscall_64+0x174/0x580 [ 488.779654][T13665] ? trace_irq_disable+0x3b/0x140 [ 488.779668][T13665] ? clear_bhb_loop+0x40/0x90 [ 488.779681][T13665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.779692][T13665] RIP: 0033:0x7fd2583cce59 [ 488.779702][T13665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.779712][T13665] RSP: 002b:00007fd25661dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 488.779724][T13665] RAX: ffffffffffffffda RBX: 00007fd258645fa0 RCX: 00007fd2583cce59 [ 488.779732][T13665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000a8000 [ 488.779739][T13665] RBP: 00007fd25661e090 R08: 0000000000000000 R09: 0000000000000000 [ 488.779752][T13665] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 488.779758][T13665] R13: 00007fd258646038 R14: 00007fd258645fa0 R15: 00007fff777879a8 [ 488.779774][T13665] [ 488.870230][T10776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.105713][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2910'. [ 489.106118][T13673] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 489.135062][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2910'. [ 489.263856][T13673] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2910'. [ 490.157926][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 490.321591][T13705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2918'. [ 490.432633][T13701] netlink: 'syz.4.2916': attribute type 13 has an invalid length. [ 490.452843][T10774] IPVS: stop unused estimator thread 0... [ 490.517486][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 491.173133][T13745] sg_write: data in/out 445405/458 bytes for SCSI command 0x0-- guessing data in; [ 491.173133][T13745] program syz.3.2926 not setting count and/or reply_len properly [ 491.814239][T13128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.824375][T13765] sg_write: data in/out 168924/146 bytes for SCSI command 0x0-- guessing data in; [ 491.824375][T13765] program syz.3.2932 not setting count and/or reply_len properly [ 491.875494][T13765] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 491.875520][T13765] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 491.875609][T13765] vhci_hcd vhci_hcd.0: Device attached [ 491.877450][T13767] usbip_core: unknown command [ 491.877463][T13767] vhci_hcd: unknown pdu 1666845506 [ 491.877484][T13767] usbip_core: unknown command [ 491.916931][T13765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2932'. [ 491.938475][T10890] vhci_hcd vhci_hcd.3: stop threads [ 491.938503][T10890] vhci_hcd vhci_hcd.3: release socket [ 491.938537][T10890] vhci_hcd vhci_hcd.3: disconnect device [ 492.061592][T13775] FAULT_INJECTION: forcing a failure. [ 492.061592][T13775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.061629][T13775] CPU: 1 UID: 0 PID: 13775 Comm: syz.2.2934 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 492.061660][T13775] Tainted: [L]=SOFTLOCKUP [ 492.061668][T13775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.061680][T13775] Call Trace: [ 492.061688][T13775] [ 492.061696][T13775] dump_stack_lvl+0xe8/0x150 [ 492.061726][T13775] should_fail_ex+0x46b/0x600 [ 492.061759][T13775] _copy_from_user+0x2d/0xb0 [ 492.061781][T13775] csum_and_copy_from_iter_full+0x684/0x1f00 [ 492.061897][T13775] ? bpf_lsm_capable+0x9/0x20 [ 492.061922][T13775] ? security_capable+0x7e/0x2c0 [ 492.061951][T13775] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 492.061984][T13775] ? capable+0x88/0xe0 [ 492.062014][T13775] ? mm_account_pinned_pages+0xa6/0x430 [ 492.062041][T13775] ? __pfx_mm_account_pinned_pages+0x10/0x10 [ 492.062069][T13775] ip_generic_getfrag+0x149/0x2d0 [ 492.062093][T13775] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 492.062113][T13775] ? skb_page_frag_refill+0x217/0x460 [ 492.062147][T13775] __ip6_append_data+0x211c/0x3f60 [ 492.062191][T13775] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 492.062231][T13775] ? __pfx___ip6_append_data+0x10/0x10 [ 492.062264][T13775] ip6_append_data+0x10f/0x2a0 [ 492.062291][T13775] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 492.062313][T13775] udpv6_sendmsg+0xcf2/0x25c0 [ 492.062352][T13775] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 492.062382][T13775] ? __lock_acquire+0x6b5/0x2d10 [ 492.062423][T13775] ? aa_sk_perm+0x703/0x950 [ 492.062462][T13775] ? inet_send_prepare+0x5c/0x270 [ 492.062486][T13775] ? inet6_sendmsg+0xe4/0x120 [ 492.062515][T13775] ? __pfx_inet6_sendmsg+0x10/0x10 [ 492.062542][T13775] sock_sendmsg_nosec+0x90/0x180 [ 492.062575][T13775] ____sys_sendmsg+0x55c/0x870 [ 492.062606][T13775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.062639][T13775] ? import_iovec+0x73/0xa0 [ 492.062664][T13775] ___sys_sendmsg+0x2a5/0x360 [ 492.062687][T13775] ? __lock_acquire+0x6b5/0x2d10 [ 492.062716][T13775] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.062738][T13775] ? __lock_acquire+0x6b5/0x2d10 [ 492.062768][T13775] ? kstrtouint+0x6e/0xe0 [ 492.062831][T13775] __sys_sendmmsg+0x279/0x4d0 [ 492.062862][T13775] ? __pfx___sys_sendmmsg+0x10/0x10 [ 492.062896][T13775] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 492.062929][T13775] ? ksys_write+0x248/0x270 [ 492.062957][T13775] ? __pfx_ksys_write+0x10/0x10 [ 492.062992][T13775] __x64_sys_sendmmsg+0xa0/0xc0 [ 492.063017][T13775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.063038][T13775] do_syscall_64+0x174/0x580 [ 492.063062][T13775] ? trace_irq_disable+0x3b/0x140 [ 492.063087][T13775] ? clear_bhb_loop+0x40/0x90 [ 492.063112][T13775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.063133][T13775] RIP: 0033:0x7fd2583cce59 [ 492.063152][T13775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.063169][T13775] RSP: 002b:00007fd25661e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 492.063191][T13775] RAX: ffffffffffffffda RBX: 00007fd258645fa0 RCX: 00007fd2583cce59 [ 492.063207][T13775] RDX: 0000000000000003 RSI: 0000200000001840 RDI: 0000000000000003 [ 492.063220][T13775] RBP: 00007fd25661e090 R08: 0000000000000000 R09: 0000000000000000 [ 492.063233][T13775] R10: 000000002401c444 R11: 0000000000000246 R12: 0000000000000002 [ 492.063246][T13775] R13: 00007fd258646038 R14: 00007fd258645fa0 R15: 00007fff777879a8 [ 492.063277][T13775] [ 492.324860][T13780] sg_write: data in/out 445405/458 bytes for SCSI command 0x0-- guessing data in; [ 492.324860][T13780] program syz.4.2935 not setting count and/or reply_len properly [ 492.764190][T13799] FAULT_INJECTION: forcing a failure. [ 492.764190][T13799] name failslab, interval 1, probability 0, space 0, times 0 [ 492.764214][T13799] CPU: 1 UID: 0 PID: 13799 Comm: syz.4.2941 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 492.764230][T13799] Tainted: [L]=SOFTLOCKUP [ 492.764234][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.764242][T13799] Call Trace: [ 492.764247][T13799] [ 492.764252][T13799] dump_stack_lvl+0xe8/0x150 [ 492.764270][T13799] should_fail_ex+0x46b/0x600 [ 492.764291][T13799] should_failslab+0xa8/0x100 [ 492.764305][T13799] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 492.764323][T13799] ? mas_alloc_nodes+0x291/0x350 [ 492.764336][T13799] ? mas_alloc_nodes+0x291/0x350 [ 492.764351][T13799] mas_alloc_nodes+0x291/0x350 [ 492.764366][T13799] mas_preallocate+0x2d6/0x640 [ 492.764382][T13799] ? __pfx_mas_preallocate+0x10/0x10 [ 492.764401][T13799] ? __mas_set_range+0x12f/0x3c0 [ 492.764496][T13799] __split_vma+0x33d/0xa40 [ 492.764516][T13799] ? __pfx___split_vma+0x10/0x10 [ 492.764540][T13799] vms_gather_munmap_vmas+0x32d/0x1380 [ 492.764553][T13799] ? __mt_destroy+0x1d2/0x280 [ 492.764568][T13799] ? vms_complete_munmap_vmas+0xa0b/0xc60 [ 492.764588][T13799] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 492.764610][T13799] do_vmi_align_munmap+0x2c7/0x4d0 [ 492.764632][T13799] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 492.764652][T13799] ? mtree_range_walk+0x6fc/0x8b0 [ 492.764678][T13799] do_vmi_munmap+0x252/0x2d0 [ 492.764694][T13799] __vm_munmap+0x22c/0x3d0 [ 492.764709][T13799] ? __pfx___vm_munmap+0x10/0x10 [ 492.764722][T13799] ? vm_mmap_pgoff+0x3b4/0x4f0 [ 492.764747][T13799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.764758][T13799] __x64_sys_munmap+0x60/0x70 [ 492.764770][T13799] do_syscall_64+0x174/0x580 [ 492.764784][T13799] ? trace_irq_disable+0x3b/0x140 [ 492.764797][T13799] ? clear_bhb_loop+0x40/0x90 [ 492.764810][T13799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.764821][T13799] RIP: 0033:0x7f0ed1b5cc87 [ 492.764832][T13799] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.764842][T13799] RSP: 002b:00007f0ecfdb4d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 492.764854][T13799] RAX: ffffffffffffffda RBX: 00007f0ec8000000 RCX: 00007f0ed1b5cc87 [ 492.764862][T13799] RDX: 0000000000000000 RSI: 0000000003d96000 RDI: 00007f0ecc000000 [ 492.764869][T13799] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 492.764876][T13799] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 492.764882][T13799] R13: 0000000000001000 R14: 00007f0ecc000000 R15: 000000000026a000 [ 492.764898][T13799] [ 493.444918][T13128] veth0_vlan: entered promiscuous mode [ 493.496107][T13128] veth1_vlan: entered promiscuous mode [ 493.599840][T13828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2951'. [ 493.639354][T13128] veth0_macvtap: entered promiscuous mode [ 493.741854][T13128] veth1_macvtap: entered promiscuous mode [ 493.774001][T13833] sg_write: data in/out 443357/450 bytes for SCSI command 0x0-- guessing data in; [ 493.774001][T13833] program syz.4.2953 not setting count and/or reply_len properly [ 493.849755][T13128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.905055][T13128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.939512][ T5791] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 493.977036][ T1290] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.977290][ T1290] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.977329][ T1290] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.977363][ T1290] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.105664][ T5791] usb 3-1: device descriptor read/64, error -71 [ 494.345497][ T5791] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 494.535388][ T5791] usb 3-1: device descriptor read/64, error -71 [ 494.652787][ T5791] usb usb3-port1: attempt power cycle [ 495.098603][ T5791] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 495.126096][ T5791] usb 3-1: device descriptor read/8, error -71 [ 495.402752][ T6397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.402774][ T6397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.435413][ T5791] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 495.464144][ T5791] usb 3-1: device descriptor read/8, error -71 [ 495.572371][ T5791] usb usb3-port1: unable to enumerate USB device [ 495.583027][T13858] netlink: 'syz.3.2958': attribute type 1 has an invalid length. [ 495.583047][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2958'. [ 495.633438][T13858] FAULT_INJECTION: forcing a failure. [ 495.633438][T13858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.633472][T13858] CPU: 1 UID: 0 PID: 13858 Comm: syz.3.2958 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 495.633500][T13858] Tainted: [L]=SOFTLOCKUP [ 495.633507][T13858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 495.633517][T13858] Call Trace: [ 495.633526][T13858] [ 495.633534][T13858] dump_stack_lvl+0xe8/0x150 [ 495.633564][T13858] should_fail_ex+0x46b/0x600 [ 495.633598][T13858] _copy_from_user+0x2d/0xb0 [ 495.633620][T13858] kstrtouint_from_user+0xd6/0x180 [ 495.633650][T13858] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 495.633695][T13858] proc_fail_nth_write+0x8e/0x210 [ 495.633716][T13858] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 495.633742][T13858] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 495.633763][T13858] vfs_write+0x2a3/0xba0 [ 495.633796][T13858] ? __pfx_vfs_write+0x10/0x10 [ 495.633822][T13858] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 495.633847][T13858] ? lockdep_hardirqs_on+0x7a/0x110 [ 495.633872][T13858] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 495.633896][T13858] ? mutex_lock_nested+0x152/0x1d0 [ 495.633923][T13858] ? fdget_pos+0x252/0x320 [ 495.633952][T13858] ksys_write+0x156/0x270 [ 495.633978][T13858] ? __pfx_ksys_write+0x10/0x10 [ 495.634010][T13858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.634031][T13858] do_syscall_64+0x174/0x580 [ 495.634054][T13858] ? trace_irq_disable+0x3b/0x140 [ 495.634078][T13858] ? clear_bhb_loop+0x40/0x90 [ 495.634102][T13858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.634122][T13858] RIP: 0033:0x7f87324ed68e [ 495.634149][T13858] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 495.634166][T13858] RSP: 002b:00007f8730785fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 495.634186][T13858] RAX: ffffffffffffffda RBX: 00007f87307866c0 RCX: 00007f87324ed68e [ 495.634200][T13858] RDX: 0000000000000001 RSI: 00007f87307860a0 RDI: 0000000000000004 [ 495.634214][T13858] RBP: 00007f8730786090 R08: 0000000000000000 R09: 0000000000000000 [ 495.634226][T13858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 495.634238][T13858] R13: 00007f87327a6038 R14: 00007f87327a5fa0 R15: 00007ffccf6b17e8 [ 495.634270][T13858] [ 495.674915][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.674935][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.963963][T13869] sg_write: data in/out 443357/450 bytes for SCSI command 0x0-- guessing data in; [ 495.963963][T13869] program syz.3.2961 not setting count and/or reply_len properly [ 496.234135][T13880] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2964'. [ 496.296945][ T5791] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 496.460979][ T5791] usb 4-1: Using ep0 maxpacket: 32 [ 496.472858][ T5791] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 496.472888][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.472907][ T5791] usb 4-1: Product: syz [ 496.472922][ T5791] usb 4-1: Manufacturer: syz [ 496.472937][ T5791] usb 4-1: SerialNumber: syz [ 496.492271][ T5791] usb 4-1: config 0 descriptor?? [ 496.645435][ T10] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 496.807218][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 496.824516][ T10] usb 5-1: config 28 has an invalid interface number: 245 but max is 3 [ 496.824543][ T10] usb 5-1: config 28 has an invalid interface number: 41 but max is 3 [ 496.824565][ T10] usb 5-1: config 28 has an invalid interface number: 128 but max is 3 [ 496.824584][ T10] usb 5-1: config 28 has an invalid interface number: 88 but max is 3 [ 496.824605][ T10] usb 5-1: config 28 has no interface number 0 [ 496.824622][ T10] usb 5-1: config 28 has no interface number 1 [ 496.824638][ T10] usb 5-1: config 28 has no interface number 2 [ 496.824652][ T10] usb 5-1: config 28 has no interface number 3 [ 496.824724][ T10] usb 5-1: config 28 interface 245 altsetting 144 has an invalid descriptor for endpoint zero, skipping [ 496.824769][ T10] usb 5-1: config 28 interface 41 altsetting 84 endpoint 0x9 has invalid wMaxPacketSize 0 [ 496.824794][ T10] usb 5-1: config 28 interface 41 altsetting 84 has a duplicate endpoint with address 0x2, skipping [ 496.824847][ T10] usb 5-1: config 28 interface 128 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 496.824876][ T10] usb 5-1: config 28 interface 128 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 496.824899][ T10] usb 5-1: config 28 interface 128 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 496.824923][ T10] usb 5-1: config 28 interface 128 altsetting 5 endpoint 0xB has invalid maxpacket 959, setting to 64 [ 496.824951][ T10] usb 5-1: config 28 interface 128 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 496.824973][ T10] usb 5-1: config 28 interface 128 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 496.824994][ T10] usb 5-1: config 28 interface 128 altsetting 5 endpoint 0xC has an invalid bInterval 64, changing to 10 [ 496.825022][ T10] usb 5-1: config 28 interface 128 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 496.825044][ T10] usb 5-1: config 28 interface 128 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 496.825068][ T10] usb 5-1: config 28 interface 128 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 496.825091][ T10] usb 5-1: config 28 interface 128 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 496.825113][ T10] usb 5-1: config 28 interface 128 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 496.825137][ T10] usb 5-1: config 28 interface 128 altsetting 5 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 496.825177][ T10] usb 5-1: config 28 interface 88 altsetting 14 has a duplicate endpoint with address 0xD, skipping [ 496.825200][ T10] usb 5-1: config 28 interface 88 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 496.825222][ T10] usb 5-1: config 28 interface 88 altsetting 14 endpoint 0xA has an invalid bInterval 131, changing to 7 [ 496.825249][ T10] usb 5-1: config 28 interface 88 altsetting 14 has a duplicate endpoint with address 0xA, skipping [ 496.861803][ T10] usb 5-1: config 28 interface 88 altsetting 14 has a duplicate endpoint with address 0xC, skipping [ 496.861833][ T10] usb 5-1: config 28 interface 88 altsetting 14 has a duplicate endpoint with address 0xA, skipping [ 496.861857][ T10] usb 5-1: config 28 interface 88 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 496.861880][ T10] usb 5-1: config 28 interface 88 altsetting 14 has a duplicate endpoint with address 0xA, skipping [ 496.861902][ T10] usb 5-1: config 28 interface 88 altsetting 14 has a duplicate endpoint with address 0xE, skipping [ 496.861923][ T10] usb 5-1: config 28 interface 88 altsetting 14 has a duplicate endpoint with address 0x7, skipping [ 496.861950][ T10] usb 5-1: config 28 interface 88 altsetting 14 has a duplicate endpoint with address 0x6, skipping [ 496.861974][ T10] usb 5-1: config 28 interface 88 altsetting 14 has a duplicate endpoint with address 0xA, skipping [ 496.861998][ T10] usb 5-1: config 28 interface 88 altsetting 14 has a duplicate endpoint with address 0xC, skipping [ 496.862023][ T10] usb 5-1: config 28 interface 245 has no altsetting 0 [ 496.862042][ T10] usb 5-1: config 28 interface 41 has no altsetting 0 [ 496.862060][ T10] usb 5-1: config 28 interface 128 has no altsetting 0 [ 496.862079][ T10] usb 5-1: config 28 interface 88 has no altsetting 0 [ 496.968980][ T10] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a0d, bcdDevice=43.16 [ 496.969012][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.969032][ T10] usb 5-1: Product: ᰁ [ 496.969047][ T10] usb 5-1: Manufacturer: 稺ᷩꇒ籊࿤⧨⟌ك릭ঔݵ氻綆ቡ瞣ᙑ⦭蘅敶Ὠ褺캀謝罀⧢翫뉪蔸寮敵棄䷪붔끗Ⴋ॓譄篇뗇㢱ሃ [ 496.969070][ T10] usb 5-1: SerialNumber: 㰁 [ 497.023668][ T5791] airspy 4-1:0.0: Board ID: 00 [ 497.023690][ T5791] airspy 4-1:0.0: Firmware version: [ 497.525900][ T5791] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 497.597058][ T5791] airspy 4-1:0.0: Registered as swradio24 [ 497.597082][ T5791] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 497.628508][ T5791] usb 4-1: USB disconnect, device number 112 [ 497.811714][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 497.946557][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.960708][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.009087][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 498.026870][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.956349][ T10] cdc_ether 5-1:28.128: skipping garbage [ 498.956374][ T10] usb 5-1: No union descriptors [ 498.990602][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2971'. [ 499.035076][ T10] usb 5-1: USB disconnect, device number 127 [ 499.630073][ T10] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 499.717202][T13906] lo speed is unknown, defaulting to 1000 [ 499.777913][ T10] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 499.777941][ T10] usb 4-1: config 0 has no interface number 1 [ 499.777988][ T10] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 499.778022][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 499.779052][ T10] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 499.779078][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 499.779097][ T10] usb 4-1: SerialNumber: syz [ 499.783726][ T10] usb 4-1: config 0 descriptor?? [ 500.007048][ T10] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 500.007081][ T10] uvcvideo 4-1:0.199: No valid video chain found. [ 500.214817][ T10] usb 4-1: USB disconnect, device number 113 [ 500.230964][T10774] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.255590][ T5619] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 500.445562][ T5619] usb 5-1: Using ep0 maxpacket: 32 [ 500.460940][ T5619] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 500.460966][ T5619] usb 5-1: config 0 has no interface number 0 [ 500.511321][ T5619] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 500.511353][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.511374][ T5619] usb 5-1: Product: syz [ 500.511389][ T5619] usb 5-1: Manufacturer: syz [ 500.511404][ T5619] usb 5-1: SerialNumber: syz [ 500.552331][ T5619] usb 5-1: config 0 descriptor?? [ 500.575504][ T60] Bluetooth: hci1: command tx timeout [ 500.873103][T13943] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 500.873129][T13943] overlayfs: failed to set xattr on upper [ 500.873137][T13943] overlayfs: ...falling back to redirect_dir=nofollow. [ 500.873145][T13943] overlayfs: ...falling back to index=off. [ 500.873152][T13943] overlayfs: ...falling back to uuid=null. [ 500.937861][T13945] FAULT_INJECTION: forcing a failure. [ 500.937861][T13945] name failslab, interval 1, probability 0, space 0, times 0 [ 500.937898][T13945] CPU: 1 UID: 0 PID: 13945 Comm: syz.3.2977 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 500.937925][T13945] Tainted: [L]=SOFTLOCKUP [ 500.937933][T13945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.937945][T13945] Call Trace: [ 500.937952][T13945] [ 500.937961][T13945] dump_stack_lvl+0xe8/0x150 [ 500.937991][T13945] should_fail_ex+0x46b/0x600 [ 500.938023][T13945] should_failslab+0xa8/0x100 [ 500.938047][T13945] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 500.938078][T13945] ? do_getname+0x2e/0x250 [ 500.938105][T13945] ? do_getname+0x2e/0x250 [ 500.938137][T13945] do_getname+0x2e/0x250 [ 500.938162][T13945] ? user_path_at+0x1e/0x160 [ 500.938185][T13945] user_path_at+0x2a/0x160 [ 500.938207][T13945] __se_sys_mount+0x2dc/0x420 [ 500.938260][T13945] ? __pfx___se_sys_mount+0x10/0x10 [ 500.938285][T13945] ? __x64_sys_mount+0x20/0xc0 [ 500.938304][T13945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.938326][T13945] do_syscall_64+0x174/0x580 [ 500.938351][T13945] ? trace_irq_disable+0x3b/0x140 [ 500.938374][T13945] ? clear_bhb_loop+0x40/0x90 [ 500.938396][T13945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.938415][T13945] RIP: 0033:0x7f873252ce59 [ 500.938433][T13945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.938450][T13945] RSP: 002b:00007f8730765028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 500.938471][T13945] RAX: ffffffffffffffda RBX: 00007f87327a6090 RCX: 00007f873252ce59 [ 500.938486][T13945] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 500.938499][T13945] RBP: 00007f8730765090 R08: 0000200000000440 R09: 0000000000000000 [ 500.938513][T13945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.938524][T13945] R13: 00007f87327a6128 R14: 00007f87327a6090 R15: 00007ffccf6b17e8 [ 500.938543][T13945] [ 500.992325][ T5619] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 500.992354][ T5619] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 501.230811][ T5619] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 501.231125][ T5619] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 501.344479][T13951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2979'. [ 501.382086][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2979'. [ 501.397710][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.429773][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.445150][T13950] netlink: 'syz.3.2979': attribute type 10 has an invalid length. [ 501.445173][T13950] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2979'. [ 501.717851][T10774] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.810964][T13950] bond0: entered promiscuous mode [ 501.810987][T13950] bond_slave_0: entered promiscuous mode [ 501.811434][T13950] bond_slave_1: entered promiscuous mode [ 501.829382][T13950] bridge0: port 3(bond0) entered blocking state [ 501.829625][T13950] bridge0: port 3(bond0) entered disabled state [ 501.830105][T13950] bond0: entered allmulticast mode [ 501.830122][T13950] bond_slave_0: entered allmulticast mode [ 501.830148][T13950] bond_slave_1: entered allmulticast mode [ 501.882950][T13950] bridge0: port 3(bond0) entered blocking state [ 501.883052][T13950] bridge0: port 3(bond0) entered forwarding state [ 502.062005][T13960] loop9: detected capacity change from 0 to 1 [ 502.072897][T13960] Dev loop9: unable to read RDB block 1 [ 502.072939][T13960] loop9: unable to read partition table [ 502.073113][T13960] loop9: partition table beyond EOD, truncated [ 502.073155][T13960] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 502.218205][ T5695] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 502.354110][T10774] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.400425][ T5695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.400459][ T5695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.400491][ T5695] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 502.400504][ T5695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.453441][ T5695] usb 6-1: config 0 descriptor?? [ 502.670693][ T60] Bluetooth: hci1: command tx timeout [ 502.871231][ T5695] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 502.871267][ T5695] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 502.871292][ T5695] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 502.871315][ T5695] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 502.871336][ T5695] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 502.908261][ T5695] playstation 0003:054C:0DF2.0015: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 503.052467][ T5619] usb 5-1: USB disconnect, device number 2 [ 503.086929][ T5695] playstation 0003:054C:0DF2.0015: Invalid byte count transferred, expected 20 got 0 [ 503.086984][ T5695] playstation 0003:054C:0DF2.0015: Failed to retrieve DualSense pairing info: -22 [ 503.087036][ T5695] playstation 0003:054C:0DF2.0015: Failed to get MAC address from DualSense [ 503.087078][ T5695] playstation 0003:054C:0DF2.0015: Failed to create dualsense. [ 503.223739][T13986] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 503.275088][T13958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2980'. [ 503.290852][ T5695] playstation 0003:054C:0DF2.0015: probe with driver playstation failed with error -22 [ 503.344076][T13979] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 503.344098][T13979] overlayfs: failed to set xattr on upper [ 503.344104][T13979] overlayfs: ...falling back to redirect_dir=nofollow. [ 503.344109][T13979] overlayfs: ...falling back to index=off. [ 503.344114][T13979] overlayfs: ...falling back to uuid=null. [ 503.486188][T10774] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.810682][T13906] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.811053][T13906] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.811330][T13906] bridge_slave_0: entered allmulticast mode [ 503.814896][T13906] bridge_slave_0: entered promiscuous mode [ 503.850985][T13906] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.852712][T13906] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.852920][T13906] bridge_slave_1: entered allmulticast mode [ 503.871232][T13906] bridge_slave_1: entered promiscuous mode [ 504.047759][T13906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.066709][T13906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.225613][T13906] team0: Port device team_slave_0 added [ 504.247006][T13906] team0: Port device team_slave_1 added [ 504.352807][T13906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.352824][T13906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.352850][T13906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.403548][T13906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.403565][T13906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.403591][T13906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.465987][T14007] netlink: 'syz.3.2988': attribute type 16 has an invalid length. [ 504.466007][T14007] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2988'. [ 504.743782][ T60] Bluetooth: hci1: command tx timeout [ 504.774092][T13906] hsr_slave_0: entered promiscuous mode [ 504.778736][T13906] hsr_slave_1: entered promiscuous mode [ 504.784512][T13906] debugfs: 'hsr0' already exists in 'hsr' [ 504.784538][T13906] Cannot create hsr debugfs directory [ 505.330523][ T5619] usb 6-1: USB disconnect, device number 2 [ 505.370812][T14032] FAULT_INJECTION: forcing a failure. [ 505.370812][T14032] name failslab, interval 1, probability 0, space 0, times 0 [ 505.370844][T14032] CPU: 1 UID: 0 PID: 14032 Comm: syz.4.2994 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 505.370864][T14032] Tainted: [L]=SOFTLOCKUP [ 505.370869][T14032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 505.370878][T14032] Call Trace: [ 505.370884][T14032] [ 505.370891][T14032] dump_stack_lvl+0xe8/0x150 [ 505.370915][T14032] should_fail_ex+0x46b/0x600 [ 505.370940][T14032] should_failslab+0xa8/0x100 [ 505.370958][T14032] __kmalloc_noprof+0xfe/0x7e0 [ 505.370973][T14032] ? rcu_is_watching+0x15/0xb0 [ 505.370995][T14032] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 505.371014][T14032] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 505.371036][T14032] tomoyo_realpath_from_path+0xe3/0x5d0 [ 505.371055][T14032] ? tomoyo_domain+0xd7/0x130 [ 505.371157][T14032] ? tomoyo_path_number_perm+0x219/0x630 [ 505.371180][T14032] tomoyo_path_number_perm+0x246/0x630 [ 505.371205][T14032] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.371226][T14032] ? __lock_acquire+0x6b5/0x2d10 [ 505.371251][T14032] ? do_raw_spin_lock+0x12b/0x2f0 [ 505.371294][T14032] ? __fget_files+0x2a/0x420 [ 505.371314][T14032] ? __fget_files+0x2a/0x420 [ 505.371330][T14032] ? __fget_files+0x3a6/0x420 [ 505.371344][T14032] ? __fget_files+0x2a/0x420 [ 505.371366][T14032] security_file_ioctl+0xc3/0x2a0 [ 505.371391][T14032] __se_sys_ioctl+0x47/0x170 [ 505.371411][T14032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.371428][T14032] do_syscall_64+0x174/0x580 [ 505.371448][T14032] ? trace_irq_disable+0x3b/0x140 [ 505.371468][T14032] ? clear_bhb_loop+0x40/0x90 [ 505.371486][T14032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.371511][T14032] RIP: 0033:0x7f0ed1b5ce59 [ 505.371526][T14032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.371541][T14032] RSP: 002b:00007f0ecfdb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.371559][T14032] RAX: ffffffffffffffda RBX: 00007f0ed1dd5fa0 RCX: 00007f0ed1b5ce59 [ 505.371569][T14032] RDX: 0000200000000900 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 505.371579][T14032] RBP: 00007f0ecfdb6090 R08: 0000000000000000 R09: 0000000000000000 [ 505.371587][T14032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.371595][T14032] R13: 00007f0ed1dd6038 R14: 00007f0ed1dd5fa0 R15: 00007ffd01067618 [ 505.371617][T14032] [ 505.371640][T14032] ERROR: Out of memory at tomoyo_realpath_from_path. [ 505.377147][ T928] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 505.657347][ T928] usb 4-1: Using ep0 maxpacket: 16 [ 505.684968][ T928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 505.687470][ T928] usb 4-1: config 0 has an invalid interface number: 172 but max is 1 [ 505.687496][ T928] usb 4-1: config 0 has an invalid interface number: 181 but max is 1 [ 505.687516][ T928] usb 4-1: config 0 has no interface number 0 [ 505.687532][ T928] usb 4-1: config 0 has no interface number 1 [ 505.687573][ T928] usb 4-1: config 0 interface 172 has no altsetting 0 [ 505.687590][ T928] usb 4-1: config 0 interface 181 has no altsetting 0 [ 505.737991][ T928] usb 4-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=f1.7f [ 505.738020][ T928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.738041][ T928] usb 4-1: Product: syz [ 505.738055][ T928] usb 4-1: Manufacturer: syz [ 505.738069][ T928] usb 4-1: SerialNumber: syz [ 505.862143][ T928] usb 4-1: config 0 descriptor?? [ 505.948556][T12329] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 506.050847][T14037] comedi comedi3: comedi_config --init_data is deprecated [ 506.135213][T12329] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 64, setting to 8 [ 506.156585][T12329] usb 5-1: string descriptor 0 read error: -22 [ 506.156777][T12329] usb 5-1: New USB device found, idVendor=0499, idProduct=103a, bcdDevice= 0.40 [ 506.156805][T12329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.229547][T12329] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 506.817149][ T60] Bluetooth: hci1: command tx timeout [ 507.102514][T12329] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 507.132956][T12329] usb 5-1: USB disconnect, device number 3 [ 507.720231][T10774] bridge_slave_1: left allmulticast mode [ 507.720263][T10774] bridge_slave_1: left promiscuous mode [ 507.720702][T10774] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.947460][T10774] bridge_slave_0: left allmulticast mode [ 507.947495][T10774] bridge_slave_0: left promiscuous mode [ 507.947779][T10774] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.022607][T14065] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3001'. [ 508.509967][ T928] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 508.512453][ T928] usb 4-1: selecting invalid altsetting 0 [ 508.526273][ T928] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 508.526714][ T928] usb 4-1: selecting invalid altsetting 0 [ 508.546123][ T928] usb 4-1: USB disconnect, device number 114 [ 508.551926][ T928] pvrusb2: Device being rendered inoperable [ 508.595163][ T928] pvrusb2: Device being rendered inoperable [ 509.656970][T10774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.716047][T10774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.776555][T10774] bond0 (unregistering): (slave team0): Releasing backup interface [ 509.829034][T10774] bond0 (unregistering): Released all slaves [ 510.958110][T14118] binder: 14117:14118 ioctl c0306201 200000000000 returned -14 [ 511.651840][T14079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.515549][ T5695] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 512.670688][ T5695] usb 5-1: Using ep0 maxpacket: 16 [ 512.672711][ T5695] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.672734][ T5695] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.674892][ T5695] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.674919][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.674940][ T5695] usb 5-1: Product: syz [ 512.674953][ T5695] usb 5-1: Manufacturer: syz [ 512.674962][ T5695] usb 5-1: SerialNumber: syz [ 512.749318][ T5695] usb 5-1: 0:2 : does not exist [ 512.954582][T10774] hsr_slave_0: left promiscuous mode [ 512.962736][ T5695] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 513.005706][T10774] hsr_slave_1: left promiscuous mode [ 513.006785][T10774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.006809][T10774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.081575][T10774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.081604][T10774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.107710][ T5695] usb 5-1: USB disconnect, device number 4 [ 513.260904][T13117] udevd[13117]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.280046][T10774] veth1_macvtap: left promiscuous mode [ 513.280149][T10774] veth0_macvtap: left promiscuous mode [ 513.280417][T10774] veth1_vlan: left promiscuous mode [ 513.280595][T10774] veth0_vlan: left promiscuous mode [ 513.511371][ T38] audit: type=1800 audit(1781592029.934:7): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3019" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 513.560291][ T38] audit: type=1800 audit(1781592030.044:8): pid=14182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3020" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 513.732730][T14185] fuse: Invalid rootmode [ 514.261119][T14210] 9pnet_fd: Insufficient options for proto=fd [ 514.506119][T10774] team0 (unregistering): Port device vlan0 removed [ 514.625408][T12329] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 514.716103][T10774] team0 (unregistering): Port device team_slave_1 removed [ 514.785597][T12329] usb 6-1: Using ep0 maxpacket: 16 [ 514.788201][T10774] team0 (unregistering): Port device team_slave_0 removed [ 514.803598][T12329] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.803622][T12329] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.831981][T12329] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.832015][T12329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.832035][T12329] usb 6-1: Product: syz [ 514.832048][T12329] usb 6-1: Manufacturer: syz [ 514.832062][T12329] usb 6-1: SerialNumber: syz [ 514.884647][T12329] usb 6-1: 0:2 : does not exist [ 515.095653][T12329] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 515.204908][T12329] usb 6-1: USB disconnect, device number 3 [ 515.405151][T13117] udevd[13117]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.439652][T14227] netlink: 'syz.3.3036': attribute type 1 has an invalid length. [ 515.439675][T14227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3036'. [ 515.806798][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 515.818011][T14234] 9pnet_fd: Insufficient options for proto=fd [ 515.985541][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 515.989358][T14239] 9p: Unknown access argument ߐi}Lc(h00000000000000016384: -22 [ 516.003340][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.003366][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.006204][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.006242][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.006262][ T10] usb 5-1: Product: syz [ 516.006277][ T10] usb 5-1: Manufacturer: syz [ 516.006291][ T10] usb 5-1: SerialNumber: syz [ 516.146678][ T10] usb 5-1: 0:2 : does not exist [ 516.389176][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 516.470845][ T10] usb 5-1: USB disconnect, device number 5 [ 516.520447][T13117] udevd[13117]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.834947][T14252] loop9: detected capacity change from 0 to 524287999 [ 517.515159][T13906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 517.590577][T13906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.592407][T13906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 517.622285][T13906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.627739][T13906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 517.819194][T13906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.820697][T13906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 517.872669][T13906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.003670][T14273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3047'. [ 518.232867][T14280] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 518.232894][T14280] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 518.235095][T14280] vhci_hcd vhci_hcd.0: Device attached [ 518.266262][T14282] usbip_core: unknown command [ 518.266276][T14282] vhci_hcd: unknown pdu 795108726 [ 518.266287][T14282] usbip_core: unknown command [ 518.269370][T10778] vhci_hcd vhci_hcd.4: stop threads [ 518.269391][T10778] vhci_hcd vhci_hcd.4: release socket [ 518.269427][T10778] vhci_hcd vhci_hcd.4: disconnect device [ 518.275175][T13906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.304568][T13906] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.322038][T10778] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.322189][T10778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.348248][ T5716] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 518.353649][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.353788][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.538643][ T5716] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 518.538673][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.538693][ T5716] usb 6-1: Product: syz [ 518.538707][ T5716] usb 6-1: Manufacturer: syz [ 518.538722][ T5716] usb 6-1: SerialNumber: syz [ 518.843086][T14293] FAULT_INJECTION: forcing a failure. [ 518.843086][T14293] name failslab, interval 1, probability 0, space 0, times 0 [ 518.843114][T14293] CPU: 0 UID: 0 PID: 14293 Comm: syz.4.3052 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 518.843135][T14293] Tainted: [L]=SOFTLOCKUP [ 518.843140][T14293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.843150][T14293] Call Trace: [ 518.843156][T14293] [ 518.843165][T14293] dump_stack_lvl+0xe8/0x150 [ 518.843186][T14293] should_fail_ex+0x46b/0x600 [ 518.843210][T14293] should_failslab+0xa8/0x100 [ 518.843228][T14293] kmem_cache_alloc_node_noprof+0xae/0x710 [ 518.843251][T14293] ? __alloc_skb+0x1d0/0x7d0 [ 518.843266][T14293] ? __alloc_skb+0x1d0/0x7d0 [ 518.843285][T14293] __alloc_skb+0x1d0/0x7d0 [ 518.843299][T14293] ? __might_fault+0xaf/0x130 [ 518.843316][T14293] alloc_skb_with_frags+0xc8/0x760 [ 518.843340][T14293] sock_alloc_send_pskb+0x884/0x9a0 [ 518.843363][T14293] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 518.843391][T14293] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 518.843412][T14293] ? packet_cached_dev_get+0x1c/0x2c0 [ 518.843426][T14293] ? packet_cached_dev_get+0x1c/0x2c0 [ 518.843444][T14293] packet_sendmsg+0x3167/0x4fd0 [ 518.843466][T14293] ? aa_label_sk_perm+0x532/0x6e0 [ 518.843495][T14293] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 518.843521][T14293] ? unwind_next_frame+0xa6/0x2550 [ 518.843546][T14293] ? __lock_acquire+0x6b5/0x2d10 [ 518.843570][T14293] ? __pfx_packet_sendmsg+0x10/0x10 [ 518.843593][T14293] ? aa_sk_perm+0x703/0x950 [ 518.843619][T14293] ? __pfx_aa_sk_perm+0x10/0x10 [ 518.843638][T14293] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 518.843669][T14293] ? aa_sock_msg_perm+0x122/0x200 [ 518.843685][T14293] ? __pfx_packet_sendmsg+0x10/0x10 [ 518.843705][T14293] sock_sendmsg_nosec+0x13a/0x180 [ 518.843730][T14293] ____sys_sendmsg+0x55c/0x870 [ 518.843752][T14293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.843778][T14293] ? import_iovec+0x73/0xa0 [ 518.843796][T14293] ___sys_sendmsg+0x2a5/0x360 [ 518.843814][T14293] ? __lock_acquire+0x6b5/0x2d10 [ 518.843835][T14293] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.843875][T14293] ? __fget_files+0x2a/0x420 [ 518.843891][T14293] ? __fget_files+0x3a6/0x420 [ 518.843911][T14293] __x64_sys_sendmsg+0x1b7/0x290 [ 518.843931][T14293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.843961][T14293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.843977][T14293] do_syscall_64+0x174/0x580 [ 518.843995][T14293] ? trace_irq_disable+0x3b/0x140 [ 518.844013][T14293] ? clear_bhb_loop+0x40/0x90 [ 518.844031][T14293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.844047][T14293] RIP: 0033:0x7f0ed1b5ce59 [ 518.844062][T14293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.844075][T14293] RSP: 002b:00007f0ecfdb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.844092][T14293] RAX: ffffffffffffffda RBX: 00007f0ed1dd5fa0 RCX: 00007f0ed1b5ce59 [ 518.844103][T14293] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000005 [ 518.844113][T14293] RBP: 00007f0ecfdb6090 R08: 0000000000000000 R09: 0000000000000000 [ 518.844122][T14293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.844133][T14293] R13: 00007f0ed1dd6038 R14: 00007f0ed1dd5fa0 R15: 00007ffd01067618 [ 518.844157][T14293] [ 519.023899][ T5716] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 519.023956][ T5716] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 519.424532][T13906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.772955][T14309] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3056'. [ 519.921889][T13906] veth0_vlan: entered promiscuous mode [ 520.023478][T13906] veth1_vlan: entered promiscuous mode [ 520.082150][ T5716] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 520.082184][ T5716] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 520.097422][ T5716] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 520.127890][T13906] veth0_macvtap: entered promiscuous mode [ 520.137075][ T5716] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 520.140964][T13906] veth1_macvtap: entered promiscuous mode [ 520.197358][T13906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.239907][T13906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.267719][T10778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.268334][T10778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.268372][T10778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.268405][T10778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.502640][T12329] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 520.740312][T12329] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 520.740339][T12329] usb 5-1: config 0 has no interface number 0 [ 520.740381][T12329] usb 5-1: config 0 interface 41 has no altsetting 0 [ 520.834243][T12329] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 520.834271][T12329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.834291][T12329] usb 5-1: Product: syz [ 520.834305][T12329] usb 5-1: Manufacturer: syz [ 520.834319][T12329] usb 5-1: SerialNumber: syz [ 520.881960][T12329] usb 5-1: config 0 descriptor?? [ 521.020399][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.020421][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.231668][T14322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.232175][T14322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.539523][T12329] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 521.567051][T14324] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3063'. [ 521.606277][ T6390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.606296][ T6390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.793777][T14326] sg_write: data in/out 445405/458 bytes for SCSI command 0x0-- guessing data in; [ 521.793777][T14326] program syz.2.2969 not setting count and/or reply_len properly [ 522.309556][T12329] usb 6-1: USB disconnect, device number 4 [ 522.508915][T14339] binder: Bad value for 'max' [ 522.658665][T14342] FAULT_INJECTION: forcing a failure. [ 522.658665][T14342] name failslab, interval 1, probability 0, space 0, times 0 [ 522.658703][T14342] CPU: 1 UID: 0 PID: 14342 Comm: syz.5.3070 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 522.658730][T14342] Tainted: [L]=SOFTLOCKUP [ 522.658738][T14342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 522.658750][T14342] Call Trace: [ 522.658758][T14342] [ 522.658767][T14342] dump_stack_lvl+0xe8/0x150 [ 522.658795][T14342] should_fail_ex+0x46b/0x600 [ 522.658837][T14342] should_failslab+0xa8/0x100 [ 522.658861][T14342] __kvmalloc_node_noprof+0x181/0x910 [ 522.658885][T14342] ? io_alloc_cache_init+0x42/0x140 [ 522.658907][T14342] ? io_alloc_cache_init+0x42/0x140 [ 522.658935][T14342] io_alloc_cache_init+0x42/0x140 [ 522.658960][T14342] io_ring_ctx_alloc+0x523/0xd20 [ 522.658994][T14342] io_uring_create+0x50/0x9a0 [ 522.659027][T14342] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 522.659053][T14342] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 522.659076][T14342] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 522.659116][T14342] ? __pfx_ksys_write+0x10/0x10 [ 522.659149][T14342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.659171][T14342] do_syscall_64+0x174/0x580 [ 522.659196][T14342] ? trace_irq_disable+0x3b/0x140 [ 522.659221][T14342] ? clear_bhb_loop+0x40/0x90 [ 522.659245][T14342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.659265][T14342] RIP: 0033:0x7f4da6b0ce59 [ 522.659284][T14342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.659303][T14342] RSP: 002b:00007f4da4cfaee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 522.659325][T14342] RAX: ffffffffffffffda RBX: 0000200000000d48 RCX: 00007f4da6b0ce59 [ 522.659340][T14342] RDX: 0000200000000dc8 RSI: 0000200000000d48 RDI: 000000000000001c [ 522.659354][T14342] RBP: 0000200000000d40 R08: 0000200000001540 R09: 0000000000000000 [ 522.659368][T14342] R10: 0000200000000dd0 R11: 0000000000000206 R12: 0000200000000dc8 [ 522.659382][T14342] R13: 0000200000000dd0 R14: 00007f4da4cfafd8 R15: 0000000000000000 [ 522.659413][T14342] [ 522.997410][T14346] sg_write: data in/out 445405/458 bytes for SCSI command 0x0-- guessing data in; [ 522.997410][T14346] program syz.5.3072 not setting count and/or reply_len properly [ 523.370268][ T928] usb 5-1: USB disconnect, device number 6 [ 523.495789][T14364] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3075'. [ 523.547439][T14368] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3075'. [ 523.825429][T12329] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 523.875469][ T5716] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 523.905478][ T928] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 523.979528][T12329] usb 6-1: config 0 has no interfaces? [ 523.981687][T12329] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 523.981717][T12329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.981737][T12329] usb 6-1: Product: syz [ 523.981752][T12329] usb 6-1: Manufacturer: syz [ 523.981760][T12329] usb 6-1: SerialNumber: syz [ 524.022520][T12329] usb 6-1: config 0 descriptor?? [ 524.050230][ T5716] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 524.050457][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.050480][ T5716] usb 3-1: Product: syz [ 524.050494][ T5716] usb 3-1: Manufacturer: syz [ 524.050509][ T5716] usb 3-1: SerialNumber: syz [ 524.079275][ T928] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 524.079304][ T928] usb 5-1: config 0 has no interface number 0 [ 524.079314][ T5716] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 524.079358][ T928] usb 5-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 524.086504][ T928] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 524.086534][ T928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.086554][ T928] usb 5-1: Product: syz [ 524.086570][ T928] usb 5-1: Manufacturer: syz [ 524.086584][ T928] usb 5-1: SerialNumber: syz [ 524.167775][ T928] usb 5-1: config 0 descriptor?? [ 524.169027][T14366] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 524.223005][ T928] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, a2:ee:6a:92:04:fd [ 524.253937][T14362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.259552][T14362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.322559][ T5716] usb 6-1: USB disconnect, device number 5 [ 524.431879][ T928] usb 5-1: USB disconnect, device number 7 [ 524.445750][ T928] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 524.537222][ T5791] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 525.040558][T14394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.059669][T14394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.095659][ T928] usb 3-1: USB disconnect, device number 15 [ 525.129156][T14396] Invalid ELF header type: 2 != 1 [ 525.140211][T14396] netlink: 'syz.5.3083': attribute type 2 has an invalid length. [ 525.140232][T14396] netlink: 11910 bytes leftover after parsing attributes in process `syz.5.3083'. [ 525.374302][T14413] "syz.3.3087" (14413) uses obsolete ecb(arc4) skcipher [ 525.442766][T14418] team_slave_1: entered allmulticast mode [ 525.475393][ T5790] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 525.625456][ T5790] usb 6-1: Using ep0 maxpacket: 8 [ 525.631939][ T5790] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 525.631971][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.631992][ T5790] usb 6-1: Product: syz [ 525.632006][ T5790] usb 6-1: Manufacturer: syz [ 525.632020][ T5790] usb 6-1: SerialNumber: syz [ 525.679807][ T5790] usb 6-1: config 0 descriptor?? [ 525.775751][ T5791] usb 3-1: Service connection timeout for: 256 [ 525.775787][ T5791] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 525.902417][ T5790] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 526.008606][ T5791] ath9k_htc: Failed to initialize the device [ 526.012949][ T928] usb 3-1: ath9k_htc: USB layer deinitialized [ 526.322621][ T5790] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 526.344943][ T5790] usb 6-1: USB disconnect, device number 6 [ 526.345438][ T928] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 526.495814][ T928] usb 3-1: Using ep0 maxpacket: 8 [ 526.500303][ T928] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 526.500374][ T928] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 526.500397][ T928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 526.500422][ T928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 526.500447][ T928] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.500488][ T928] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 526.500510][ T928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.774016][ T928] usb 3-1: usb_control_msg returned -32 [ 526.774066][ T928] usbtmc 3-1:16.0: can't read capabilities [ 526.809225][ T928] usb 3-1: USB disconnect, device number 16 [ 527.038545][T14454] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 527.046310][ T0] ------------[ cut here ]------------ [ 527.046322][ T0] rq->clock_update_flags < RQCF_ACT_SKIP [ 527.046333][ T0] WARNING: kernel/sched/sched.h:1792 at update_curr_idle+0x1cf/0x260, CPU#1: swapper/1/0 [ 527.046375][ T0] Modules linked in: [ 527.046392][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 527.046412][ T0] Tainted: [L]=SOFTLOCKUP [ 527.046418][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.046428][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 527.046450][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 3a 98 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 4c [ 527.046463][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 527.046476][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 527.046487][ T0] RDX: ffff888035c28000 RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80 [ 527.046497][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 527.046508][ T0] R10: ffff8880b873c910 R11: ffffffff819a0020 R12: dffffc0000000000 [ 527.046519][ T0] R13: ffffffff8dc14a58 R14: ffff88801e295d00 R15: ffff8880b873c620 [ 527.046529][ T0] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 527.046542][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.046552][ T0] CR2: 00007f8732517cc0 CR3: 000000003c874000 CR4: 00000000003526f0 [ 527.046566][ T0] Call Trace: [ 527.046573][ T0] [ 527.046583][ T0] put_prev_task_idle+0xd/0x20 [ 527.046605][ T0] __schedule+0x3da0/0x5550 [ 527.046637][ T0] ? trace_irq_disable+0x3b/0x140 [ 527.046658][ T0] ? __pfx___schedule+0x10/0x10 [ 527.046672][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 527.046697][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 527.046810][ T0] schedule_idle+0x51/0x90 [ 527.046827][ T0] do_idle+0x4a6/0x540 [ 527.046849][ T0] ? __pfx_do_idle+0x10/0x10 [ 527.046877][ T0] ? do_idle+0x4ca/0x540 [ 527.046900][ T0] cpu_startup_entry+0x43/0x60 [ 527.046920][ T0] start_secondary+0x101/0x110 [ 527.046959][ T0] common_startup_64+0x13e/0x157 [ 527.047021][ T0] [ 527.047034][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 527.047050][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 527.047068][ T0] Tainted: [L]=SOFTLOCKUP [ 527.047073][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.047078][ T0] Call Trace: [ 527.047083][ T0] [ 527.047087][ T0] vpanic+0x56c/0xa60 [ 527.047127][ T0] ? __pfx__printk+0x10/0x10 [ 527.047138][ T0] ? __pfx_vpanic+0x10/0x10 [ 527.047151][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 527.047167][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 527.047185][ T0] panic+0xc5/0xd0 [ 527.047199][ T0] ? __pfx_panic+0x10/0x10 [ 527.047218][ T0] ? common_startup_64+0x13e/0x157 [ 527.047235][ T0] __warn+0x315/0x4c0 [ 527.047249][ T0] ? update_curr_idle+0x1cf/0x260 [ 527.047265][ T0] ? update_curr_idle+0x1cf/0x260 [ 527.047280][ T0] __report_bug+0x339/0x540 [ 527.047322][ T0] ? update_curr_idle+0x1cf/0x260 [ 527.047337][ T0] ? __pfx___report_bug+0x10/0x10 [ 527.047355][ T0] ? pick_task_fair+0x21a/0x1410 [ 527.047376][ T0] ? update_curr_idle+0x1cf/0x260 [ 527.047390][ T0] report_bug+0x16a/0x220 [ 527.047404][ T0] ? update_curr_idle+0x1cf/0x260 [ 527.047418][ T0] ? update_curr_idle+0x1d1/0x260 [ 527.047432][ T0] handle_bug+0x9c/0x200 [ 527.047448][ T0] exc_invalid_op+0x1a/0x50 [ 527.047463][ T0] asm_exc_invalid_op+0x1a/0x20 [ 527.047474][ T0] RIP: 0010:update_curr_idle+0x1cf/0x260 [ 527.047490][ T0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 3a 98 97 00 48 8b 3b 4c 89 f6 4c 89 fa 5b 41 5c 41 5d 41 5e 41 5f 5d e9 52 38 01 00 90 <0f> 0b 90 e9 01 ff ff ff 90 0f 0b 90 e9 d3 fe ff ff 48 c7 c1 40 4c [ 527.047499][ T0] RSP: 0018:ffffc900001e7bf8 EFLAGS: 00010097 [ 527.047508][ T0] RAX: 0000000000000000 RBX: ffff8880b873ba40 RCX: 0000000000000002 [ 527.047516][ T0] RDX: ffff888035c28000 RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80 [ 527.047524][ T0] RBP: ffffc900001e7e30 R08: ffff8880b873c91f R09: 0000000000000000 [ 527.047531][ T0] R10: ffff8880b873c910 R11: ffffffff819a0020 R12: dffffc0000000000 [ 527.047539][ T0] R13: ffffffff8dc14a58 R14: ffff88801e295d00 R15: ffff8880b873c620 [ 527.047551][ T0] ? __pfx_put_prev_task_idle+0x10/0x10 [ 527.047570][ T0] ? update_curr_idle+0xab/0x260 [ 527.047587][ T0] put_prev_task_idle+0xd/0x20 [ 527.047601][ T0] __schedule+0x3da0/0x5550 [ 527.047622][ T0] ? trace_irq_disable+0x3b/0x140 [ 527.047636][ T0] ? __pfx___schedule+0x10/0x10 [ 527.047647][ T0] ? lockdep_hardirqs_on+0x7a/0x110 [ 527.047664][ T0] ? tick_nohz_idle_exit+0x2a6/0x370 [ 527.047679][ T0] schedule_idle+0x51/0x90 [ 527.047691][ T0] do_idle+0x4a6/0x540 [ 527.047706][ T0] ? __pfx_do_idle+0x10/0x10 [ 527.047721][ T0] ? do_idle+0x4ca/0x540 [ 527.047737][ T0] cpu_startup_entry+0x43/0x60 [ 527.047752][ T0] start_secondary+0x101/0x110 [ 527.047763][ T0] common_startup_64+0x13e/0x157 [ 527.047785][ T0] [ 528.119955][ T0] Shutting down cpus with NMI [ 528.120287][ T0] Kernel Offset: disabled