last executing test programs: 1m23.205802911s ago: executing program 0 (id=454): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x68000, 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000526) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000140)={0x20, 0x3, &(0x7f00000000c0)="97d65159607d4dac6e443b4c2436241393de4e59023b4f251b216b936ed5407d8c5e908488e289a3fa0b9b99c4120e98", 0x7, 0x8}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) r5 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0xe}, 0x1c) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000080)={0x4000000, 0xf, &(0x7f0000000040)=[0x100006, 0x1b, 0x40005003, 0xffff32eb, 0x100005, 0x67, 0x2d77, 0x40, 0x4, 0x3, 0xfffffff7, 0x3, 0xfe09, 0xd2, 0x7], 0x0, 0x4000003}) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0xfffbfff6, @mcast2, 0xfffff000}, 0x1c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff}, 0x1c) write(r4, &(0x7f0000000440)="58f261509daed737fbd69d84a1bfccea9b6e31141aa08309c0aa0482921533ccfa53b48afe740cbd5cb27ca6f094e6ffc30e10111cd102113d41190bdacb0e63a0f14baf4fcd69aceefe6c97e3f7d84e051bcf998b0a2565bbd98c2545eeb3e73e6f9b3ecf327e6afb698be37019c6d12cbadda2615c0073bd7fdedb4b1a1b3ce7f34ab8bda3228c52918d073392e174a6e4582d5b457180907c31e3f4395f8559feb6ee80e3d41c88d4ea13fe6f9915b544038335714576130ab3ed6393aa3ae0056692d0d6a141bc04ea9ede5c1b7bb1b1e5eb568777a21734df362248cac5882285c41d476fb48f", 0xe9) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r4, 0x0, 0x1000, 0x800000000000000) splice(r2, 0x0, r8, 0x0, 0x80, 0x8) write$tun(r3, &(0x7f00000033c0)=ANY=[], 0x107c) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x80000001}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in=@remote, 0x0, 0x8002, 0x4e21, 0x2, 0xa, 0x0, 0x20, 0x1d}, {@in=@remote, 0xfe, 0x3c}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x1004, 0x7fffffffffffffff, 0x0, 0x5}, {0x27f4}, 0x70bd2e, 0x0, 0x2, 0x4, 0x0, 0x71}}, 0xf0}, 0x1, 0x0, 0x0, 0x4051}, 0x48080) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1m22.502976415s ago: executing program 0 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000001380), &(0x7f0000001400)=0x68) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=@polexpire={0xcc, 0x1b, 0x1, 0xa000000, 0x25dedbfe, {{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x0, 0x20, 0xfffffffffffffffe, 0x0, 0x2, 0xe}, {}, 0xffffffff, 0x0, 0x1, 0x1}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m21.171125407s ago: executing program 0 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000040)='gid_map\x00') exit(0xffff) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x2, 0x9}, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0xc000, 0x111, &(0x7f0000000500)=""/245}]}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf254400ffffffffb423e5768eb39a8b80250300", @ANYRES32=r2, @ANYBLOB="0c00990000800000590000000a0018000303030303030000"], 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) sendmmsg$inet(r7, &(0x7f0000001280)=[{{&(0x7f0000000100)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000040)="d4", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)="a5", 0x1}], 0x1}}], 0x2, 0x20000040) 1m17.747549144s ago: executing program 0 (id=463): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x4, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000080)=0x80000000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x26083, 0x0) ioctl$SNDCTL_TMR_SELECT(r2, 0x40045408) 1m13.322615951s ago: executing program 0 (id=474): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000000c0)={0x20010000750, r1, 0x1}) io_uring_setup(0xc, &(0x7f0000000280)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x2000000000034}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e26}, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_ts_info}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/235, 0xeb}, {&(0x7f0000000a00)=""/109, 0x54}], 0x5, &(0x7f0000000940)}, 0xfffffff8}, {{&(0x7f0000000980)=@phonet, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/155, 0x9b}, {&(0x7f0000000b40)=""/68, 0x44}, {&(0x7f0000000bc0)=""/59, 0x3b}, {&(0x7f0000000f40)=""/231, 0xe3}, {&(0x7f0000000d00)=""/250, 0xfa}], 0x5}, 0x10000}, {{&(0x7f00000022c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002440)=""/176, 0xb0}, 0xffffff46}], 0x3, 0x2, 0x0) syslog(0x4, 0x0, 0x0) sched_setscheduler(r4, 0x5, &(0x7f0000000000)=0x6) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000540)={0x7fffffff, {{0xa, 0x0, 0xfffffffc, @mcast2, 0xb3}}, {{0xa, 0x0, 0x1800, @private1, 0x1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYRES64=r3], 0x5000) r10 = msgget$private(0x0, 0x193) msgsnd(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) r11 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x20000000) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) 1m10.802362312s ago: executing program 0 (id=487): syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40000840524007f000d240f01"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000a29a75ac180000000200000000ddffff00000004010100000000000002"], 0x0, 0x32, 0x0, 0x1}, 0x28) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 55.311666126s ago: executing program 32 (id=487): syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40000840524007f000d240f01"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000a29a75ac180000000200000000ddffff00000004010100000000000002"], 0x0, 0x32, 0x0, 0x1}, 0x28) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 11.005654878s ago: executing program 1 (id=718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) 10.480531747s ago: executing program 5 (id=719): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x68000, 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000526) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000140)={0x20, 0x3, &(0x7f00000000c0)="97d65159607d4dac6e443b4c2436241393de4e59023b4f251b216b936ed5407d8c5e908488e289a3fa0b9b99c4120e98", 0x7, 0x8}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) r5 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0xe}, 0x1c) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff}, 0x1c) write(r4, &(0x7f0000000440)="58f261509daed737fbd69d84a1bfccea9b6e31141aa08309c0aa0482921533ccfa53b48afe740cbd5cb27ca6f094e6ffc30e10111cd102113d41190bdacb0e63a0f14baf4fcd69aceefe6c97e3f7d84e051bcf998b0a2565bbd98c2545eeb3e73e6f9b3ecf327e6afb698be37019c6d12cbadda2615c0073bd7fdedb4b1a1b3ce7f34ab8bda3228c52918d073392e174a6e4582d5b457180907c31e3f4395f8559feb6ee80e3d41c88d4ea13fe6f9915b544038335714576130ab3ed6393aa3ae0056692d0d6a141bc04ea9ede5c1b7bb1b1e5eb568777a21734df362248cac5882285c41d476fb48f", 0xe9) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0x1000, 0x800000000000000) splice(r2, 0x0, r7, 0x0, 0x80, 0x8) write$tun(r3, &(0x7f00000033c0)=ANY=[], 0x107c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in=@remote, 0x0, 0x8002, 0x4e21, 0x2, 0xa, 0x0, 0x20, 0x1d}, {@in=@remote, 0xfe, 0x3c}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x1004, 0x7fffffffffffffff, 0x0, 0x5}, {0x27f4}, 0x70bd2e, 0x0, 0x2, 0x4, 0x0, 0x71}}, 0xf0}, 0x1, 0x0, 0x0, 0x4051}, 0x48080) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 10.3058743s ago: executing program 1 (id=721): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) unshare(0x6020400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) link(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000140)='./file2\x00') pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x2) copy_file_range(r1, &(0x7f0000000000)=0x3ff, r1, 0x0, 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000001000)=""/91) syz_usb_connect(0x3, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0c4071040c03dfe4000000010902b901010000003f0904"], 0x0) 9.951903775s ago: executing program 5 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) timer_create(0x7, &(0x7f0000000080)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}}, &(0x7f0000000780)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5) 8.7329772s ago: executing program 5 (id=726): r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='udf\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cl1/spaces/ls1/nodes/2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/spaces/ls1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/dlm/cl1/spaces/ls1/nodes/2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = syz_clone(0x4060000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r1) ptrace(0x4208, r1) ptrace(0x11, r1) mount(0x0, &(0x7f0000000100)='./config/dlm/cl1/spaces/ls1/nodes/2\x00', &(0x7f00000001c0)='logfs\x00', 0x30c000c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) syz_emit_ethernet(0x46, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1986dd6700000000103aff00000000200000000000ffff060000fa5252570571964a41876ab30aa5000000000000000000000000000000000102009078ffff00010000000000000596bf2fbd21de010dcf25dc3de8f02d563bf62d37035bc6bed4530abb26548c57c3b14866bc883907005df27a04c1b515b6734577e4f3f5d2a646e4c78c8028d40cb2241be0080d8b3d4845f02136c5fe9af75f1b3d4d7fcd1bf28126dbe6ce97e3a8e7e6ef9b2a1561619e31d6abf3808ca2ca705e3c559216ba8ae24a0e155f5547b7fe49ff1a2381092f9f40d52a8087f6effbf0dde26126429a464a"], 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000900)='1\x00', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000040c0)={0x50, 0x0, r4, {0x7, 0x2d, 0x80000000, 0x80, 0x7, 0x4, 0x35db, 0x9, 0x0, 0x0, 0x80}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems/testnqn\x00', 0x2, 0x68) symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00') bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="adcd1a9a3fc36e961ed00fe41b0c5908d558ba9ff721e68f4080ffffffd3e8a11e66699db6ae20479536fb10a9fbbadc12618019754e0000000000000000000000a6cf44be33e9f5a998b417c96a59c1d6c29f701ef9d7c742473897f9993a9869a658d2ad1f11dad9aca43141350b706708003d3a650968ae1bd6fa20c6df03e7671fe4c586995d9ab258b0913275aaa13790bf5174", 0x96) 7.471867512s ago: executing program 3 (id=729): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e25, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000000000000010000", @ANYRES8], 0x18}, 0x40c0) 6.972471871s ago: executing program 3 (id=733): r0 = fsopen(&(0x7f0000000140)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x20040400) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000130000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c00020400000000000000010800040000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x40000811}, 0x0) read$eventfd(r1, &(0x7f0000000380), 0x8) r3 = semget$private(0x0, 0x7, 0x195) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) read(r6, &(0x7f00000002c0)=""/153, 0x99) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$netlink(r4, &(0x7f0000005240)={0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000001c00)={0x10, 0x14, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x40}, 0x20000800) semtimedop(r3, &(0x7f0000000200)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) semop(r3, &(0x7f0000000140)=[{0x4, 0x7, 0x1800}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) 6.539468786s ago: executing program 5 (id=735): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) futex_waitv(&(0x7f000001a900)=[{0xa9, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x8001, 0x0, 0x82}, {0x328, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0xff, 0x0, 0x2}, {0x7fffffff, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x101, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x81, 0x0, 0x82}, {0xfffffffffffffffb, 0x0, 0x2}, {0x1000, 0x0, 0x80}, {0x200000000000101, 0x0, 0x82}, {0x4c, 0x0, 0x2}, {0x7fffffff, 0x0, 0x82}, {0x200, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x100, 0x0, 0x82}, {0x7, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x180000000, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x2800, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x24000, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x80}, {0x9, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x16000000000000, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x7, 0x0, 0x8b887d12622a01ba}, {0x4, 0x0, 0x2}, {0x9, 0x0}, {0x0, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0xef7e, 0x0, 0x82}, {0xa, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0x531f5757, 0x0, 0x2}, {0x5, 0x0, 0x2}], 0x34, 0x0, &(0x7f00000000c0)={0x77359400}, 0x1) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x25, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000000)=0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000c80)={&(0x7f0000000980)=@id={0x1e, 0x3, 0x0, {0xffffffff}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000ffff2dbc7000b7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10900400231a0500340012800e00010069703665727370616e00000020000280060003003000000014000600fe80000000000000000000000000002e04001a800800040008000000"], 0x60}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xe4e0, &(0x7f0000000cc0)=ANY=[@ANYRES64=r0, @ANYBLOB="8967393e6e13780f4b28a008139f21fda7df7082c521796ebf66a3863bbf8f893dabac0bb95d5d6b2e1d3abf6bc195ab5045c8bd715878d9941ed4e12cba3958edf3bf209cb783c75336f84674be9a0ddbdd0254313fb1b896d564d6e1b8d97e708eb9174f4961aac570d4e0351f1ed714", @ANYRES64=r3, @ANYRES16=r1, @ANYRES64=r4, @ANYBLOB="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", @ANYRES8=r2, @ANYRES32=r2]) 6.44730792s ago: executing program 1 (id=736): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$rds(0x15, 0x5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf6c5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) acct(&(0x7f0000000000)='./file0\x00') (fail_nth: 1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.11728653s ago: executing program 4 (id=739): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './file1'}}, {@verity_off}, {@uuid_null}], [{@fowner_gt}, {@dont_measure}, {@context={'context', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, './binderfs/binder0\x00'}}, {@dont_appraise}, {@context={'context', 0x3d, 'system_u'}}, {@seclabel}], 0x2c}) mount$9p_fd(0x0, 0x0, 0x0, 0x2000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c6e6f6465766d61702c76657273696f6e3d3970323030300e4c2c70726976", @ANYRESHEX=0x0, @ANYBLOB=',privport,subj_type=trans=fd,,dirsync,subj_user=[-(']) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x277}, {&(0x7f00000005c0)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b7430be9233c4fcb610439ee8e2414966e88d0b05868fe5aa421397c33560a46fe8cbd9e02fda254d68d3308c0efc3c02c4845691aacc963d04f433dda8b8c0d00d0df4f8d165e0dd9ad1123fa4c2b54b", 0xcf}], 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 5.210818829s ago: executing program 4 (id=741): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x301000, 0x102) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0xb5, 0x3, 0x6, 0x5a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x40, 0x20, 0x100, 0xfff}}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 5.025537093s ago: executing program 1 (id=742): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000580)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000000001}) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) timer_getoverrun(0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r1, 0x0, &(0x7f0000000100)='l', 0x1, 0xfffffffffffffffb}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x8}}]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x4c, 0x0, 0x0, 0xe10}, 0x28) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x1, r1, 0x0, 0x2c81, 0x4}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x20}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xd, 0x3, "adc1cbaa8f301ff616"}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) r5 = dup3(r4, r2, 0x80000) r6 = syz_io_uring_complete(0x0, 0x0) mq_notify(r6, &(0x7f0000001b80)={0x0, 0x3a, 0x4, @thr={&(0x7f0000000240)="da3c8b8b6f4e12cc70d39d8f3ef9e25af585803efdc6832888b791c98c3c3ac35eb74f3e8d23fb6fb4a8554268c7610631a2add0f8a31bbaa61ec412d3fcb6cf91fdb01ee82f8d3cff207ca12e9341cdac23a6bbda9195877b1cfa14a4b55d104cc43b24421e6a598cadf1f08b89d44296d9e936e15e1b8c9942b0bbcf4b407816e769051d7e573151138aeb78e7a68e6d9776841f054f31a924a878d83cfaeb0dba31783541d2d034d2eb3f20807af19f9174ade195074be0571c8513878b59f80dd11871687d87d3f4c17629c24c", &(0x7f0000000b80)="493299fd9fc7d58cead8579da749c926aebfd19dc004bb5ab6d9c51826e573e2f91841233ea2b012ea040f6e4804270b1cc4cad6bd88f7f3a244e7b2a904e46d727606d24ed6bf761edf3ad43623fc79bde70bf086fcadad98fb01762c21709eb8aa1d89158669fadc6a147e78ee7f84df3400bf5d98d9e9ba1b2bb3dcc51e68a19ad336074e2d8d25acd52be740c83b04fb613122c864f9f3e1df8db3b15b8558cce405b630aa8bd82642533cdc07fce03ffbf565ca87615d46c7aacc40df684773c8e80b598e6885d12f30ba78e378ed23a72bde81076aabe27f93f18143da3c67b7968763d636ee9c4f8a6787c70d90c39731bd22232a678f57167603bcb328a20b797cfb051a4b13e028246a337b50fe5e668706969185fe7cc146fa2ae20a524bcda1a6653af4ef1ea8cc6f2f18ed4b29b51e8e80407c531b070fbe91bf2b980485cfcd89dbb95809b447d32b57bcdca174ec001ce71b021d9f430975145b11ebe00610adbb09f76268d31d4befaabd51853a88d1a51bbe84bcba25a4f23b48ea578d3dcf783845e8de82b702aaf310e9e6037821ca1c64a5b886dcc5487a01c2e45aab80f6c3801d1a501268abc4e5f0df756bd900ce41eda4596e7fb5ccd8e316b00be84c7431427d795d3d90862fa355250b790a0ab36571fe669b8a34c7b43db25a9e027f5097dda33e467efe7e8622f01311c7267a2623ccfe60b1437221b2bd5664d3e537db978f8deb25b8452163abcd0f9005c4fb86b69102a9ff7003ae98312b3e0a5e3a77ac53b55c5a3f931d9dd679507a1470999a6b00a4c5cee03100ffe59cc68fdba76108cb63d79d01820da3c14b51e31a55d8c201758a55da403bc18d06c0739fc4e90d3024d32daface4c26b6394ce10894e46ff4507ebe19028ea9bbba92b2dccc1e130c1b7051ea8df853171bc20f792e367257520fae338bcc3ef40aa5638dcdb8256832f86f248e0085818f1c4f74a3bc1b02155e26f0566de66b56ae2c06693d9f25eeacd9841af8af5a267a0e41f4398c5de2b5966aaa453989eb6e0df4cb1c6a19f8595f9d706175491e35fdd4b8fffc49f4ae2843c529a9fe9ed69cd63ffd4fb41f03f67877d45b8c21aade2a7d76ff53299802e2cbc3936946134f5b5fe9a0aefcda79be22fa09cd6208af22cf9ef2df1c312d51a81740c68edc99fd721617891675cff9e5324294d2b1da551ab1dbcf306e3167d7e12bd0d5f320b3fc00b3d5273e9bc6247d25312053d34e6bf14ef3a761ffa515349fc5f53b377dcf87e5fec9031a0001ea82a170fc5323c8a52a05c59bb8aee756961ebcac6d53f650fbfe251c26ecf38d8ab0b42c8f67ce55196b2951b66f8588dc36210542dca6787b05adfa767a98d38848274ee9f7a8b38cb2ea7d525267e7e022ee8507e67d74643b9ef15406923c61eb5035c986529770e1ca047795382860d171201792e5df8aa88843ac2f9a82c9a6d2bdb0e27d17e8ac71ad356179365922df45d2b5c0415007c623cd6543836434048c7a5f31c99243eb681e54e3dcea21b27b867956a406d2c704934c52e923b33e213ec6bd68113bc03890fbdf5b8f80f8506b535df964374392746c24a8da2c3d15ab8c2d0c3b43cc37797549372105d713fb5e03975704a7a093c9828cc9a7673c34d1148f92225bb7162a1ff0444f0a6ea6d934555b677f95b3e979137b5b3cee51cad01678449382c02aa90c6df6b7ee28ddf8915766adf44c74abac3f1583020dd7b1167ccb846c037909328f32eada1bb605bbcf98233c67d05acb0f0bf4ee0e362cefcbb64b4d24dfc2d1306c80c3b3874e87ffa3ea293905a5bdb9fffdb094cb4ef0e19ff6af33f29d80fe20550eb41a200c4dd7495b31505a28808facdd87d6ef5caf32cd6c9e77aa7d1d5fa21281357b9bd39aad3af59eb669160867a0403f6942fdfb80ff4868760cd7c299daf76ec40d1c303fb6b108c02ae7b12bc68ae8da5d4c9ddf5675403fc812204f8c610b75cdbb282e35e5ac7f52f4930e7636cafd06766345d4f24bd0c3534873f139a6e73c18a8981bb0fb6c52952700e4c3c18b10149bc5b10d8bcaa4e4414e5d925dcb93eb9f832f48e497ce3d8e4a9b2c84cf47950ec8ada961a94b622440ba8fdd6f971545ce9e7c05638be3f02f4dfde45b3fb18533ebdb4f26e0d9bbb86231f48718dde0d2623a186d5d81e499002b71dc67f318f5a088be8e71f3daf5408d4b33ba068f8a7d29dcd615d9157f4ef66cddaccf28549bad99383a5b6f14a4b3f54b53883e34116330b40c586d856b98e3ccec8dadaf24c03dc7174a87287f33361ee3fb764f2d2ee2fb3fb3ba704abd7476bca99ddd75283a4f295db6f70e7c4b2a2a5512b19ccbc8c3940c26acc9eb92c5181196903c9ad9795974b70e94ff9d7f03d94d67e911552504868169a2c7f71f0867d8e139178046fbe38d777c3811baff57682e3a2d3234a4d12166f9e9cf59f6e7b7c70c94922bc8d404a245f9302c164c4caf6c673bee62e2d960759b945d01c9610ce4c88c05b7daee6ed6273239b6a7312ae7d55462923c06aa1a2d121aff5d7163a29cd324cb5449c2b1de241333cea11d4215346acd8776ecf3284e61b0758afb8df6230f6558c3ef9af50c189d44f254bc6bf8644736505d12eae0e50709d38b68f13601e468e92138f2d76bcc8077c6d82a65eb81173837cd3a8236f083f215831fcc73e96018b93464dd70c493f2e90ec57252cfb8fa847ed56b97c96d127f40146645d0e3ae393dff573ea8a2bed195db41328f61dc575ec458e06cff6a4cb05187620cc7105c61018bf42b38a79f9241e7bb3ead0f53f255127f078d26bea38a5cfa46c510add7f56f8d152f05fdbca903e5106bd28ad900e636a289921191a847ff31bb56ca9a2c72d065ba618cbdd034ee9adeebd322a7b2425e526ce23863a00956e38a644c67e8a6069ee090bc8734a152599ee4ff46ad6bb832874ec6a3ce8fcce1d8316cc097e577064429679369aee3658801ed7f504bda2278ee300b92e93e02feb29f1761f9b2f7ec45b5816e8383c901e95cbadf3f5ed586185f86b8e7ef5c0c88c5087e3c3d800e6f3f5ff5d24cfedf57bfa1328a3ffce89e96a80dbcae3ecdaf487410cf2007a133d270c8729e4e6919d211cc33bc4641e3a1c392687d169a5b9a94e34cdbd34e876b934cc725c7476b19e58838adb9062cb7dc810108e5a41dd04d8f3cc41a4ec37a7c4de0f67d71da897aba779eabbf428886226d69c76a777a768fea1feff17b32f6dd5c75c3250982913b7b484e9b9a944e2720c21856681b3452a1a9b670a71f6a9844da785a844e0bc1ef8dbe55ed354eb2fd75670be4de3f72c3b7f4d1f3b5f292316296524ddd012d99aed80328e1f3991189d1c45e291fb916e31b5d60b3946e252544ad08dfa1226157346b8ed298a639d7dd9bc3c770de02fe0ff2d83d93e1767f6648ffa1036a3ea1b87b9c55625f5b3b00ee6a4ccbb9cfcf3251a50a9f0c54f2fe8bd08a295927c903830a250882aceb876fa20ca97d88c4340d1a0e17bf137fb55e57961ccbd3d0cdf8c1a7380726373e708bcff7564ccc90a204f23a2f50b9f36a12e34be558a9e6899ed7e0b22ed494a6afd9d0b9531a5d7d451dd9c8b1cf362ec94bd356ece97a3ca1ccca68ea13962f960b0e8556b3ffde3ddc7bf955ddd16c58cd2db36a3ec06524216c64ef19fb163279ad88d71e83ac12964933c35957e1d4f5c466154d4a1673abfde1d3ecc960fc7a4fe183440054b0f916d223f075a4e705db620769500d85d4539db518bfb8f960c85738f037d51816073a089376b28b0a64ec8645854eb98bfc13be6847a7a5c038e8d134e5d1d32fbf0142b0b312cbe9ad1793f2381081a09d884a57e1a11ae7ec131c2fb549388b939c0665ed70bc5cebe8dc6e5a4c6ca0c6ff9e7f7c3e13501448f953ef2d38219d0a54250686302d02719649b53f38acffe6dd8f7792a296f40b15504b2a6c1f9053506d3dbe78b1961465a96c311f18b03245c85991c95e2f2022c02801983509818ea16af1397b9347331fba1c960a6d8d023b71ef4c964c5a87748d83ef907f5d5b5c8bc5afad34252772cdd634a8b8a69d9ac3cf6c5b75be86054ec5497a894a679701d2e38da5cb39d1efaaf8ff2047a44c46ddc02b588d1bbde9f71cf06ca8682d6333f6f522b7e4e756150a66c904bf6f9f5b80ca8d28947b2778f4ac1e2d8654ba9574b6edc297b9481eb3d6c8d09b2475114beb92b40abf4fa8c4260ec2ad8f04ea80cc1a4d6a408b342bc131cd63e401a1383d2aeed6ec512279f0823d7f04b87bef26ba52faa1df7b829a80f845650370d30be6d230c89b5a39d7b954e9dc1b581cdbf02bd418e3454f74924d4ed7dcdfcb223f2ed8a9a6764f26c7c3b20b16a137d629f2f0e0c8f9a8c04c3fb8bd21f6c120c1e013d3b1cf0ed039be46f5a594d2887b95046e0e1c6bd0429e21f0033baf8056974f74f012e40e616a75d3c99d0b3fa252980031e08203d3636dfdc697edf2130c8f29b01d7774f8861575a89f9aeddec2bbdc231e1889555bb2534395bda48df9c6789368ab539a9c6e1751744145309275ee819b14f29df20a5fb5b71fc4987116981e0917daa8ecc100d95c17275daa2d5abcd57d17c3c3db5d380e4b4913534d9215934a330b3a50da969cbbad19b1346c2b0aae76044095c6ac6e3c181f8b87e083b2ab41abc3a8f877df5a70138ac478d92cfad75ff3bccb8d264008ff0c4b89622bd0d300a8b32c48893ca70b1b8d22e61327062666433e4939f14c2f1356d01df11b45da9054cf436213d3926829c902fa7c0eb7073dce98582bd68390f54f886a3c0c23a30b6fae8bfd4594cc30aba60f2ba440b732df6582fb3a6fd522c001da259b855214d8fef0137149462c49464627e4f1fac18764f525e7485637396012ae87d6a0b83e28f342e1d9a57c844ed801640a383731d6bdcfb6f3b6a7b4a3db159e4d05891c22a934c59fc242f633070838124d2907ee99877fa469680741d9c5e9c03bf14e913ef37df1084a93b7200a1337ca99e036175738c5be2c5bd52fb6cc939a95506c112519eaa744dfff4789641246e82e09b3bafd341e3a1411ad43099a0d72c1b60df25a56595cc6bd9ded12a0748cb4dd70c66785e1f7de456003a933956b0baa2860bb9f19c5265ba09b9c3e10056830166dfaa5d330b5134cd22553a0e34916b5241bf257b9d894d7eede49627ad83f69be2c646d65e721f535f367f2b25980ad59152d60c5ebc9aaaa71cb4e1f46cfb020d5515d19ee085516519348f0671c377da18c4cc44555dbe2f125f8a0cb69d873a989191a6c9732d672de700bf0cee1fd62199bb6d9a525dee901baf34fb400ab47d21efbf313ba8bf0be37c2d1a77977563260459b256a531b35729f44e44ee37167b770ddfc6273a4afa5d1fb54876c87db4b9cbde6fa2254beadea4b177be5cd9af14f52d907122250e347c18a20db18975168e6e98ec516cd756abac0015715ad93fb726a07c0f84cf14f2341892dd018ba4e22e8f3e617e9d96c0779e6407047270a48d906e2476fe7187d378a9681757a4c09d21e143219106c607f56be23283dd11bf475baef770c9eb3617c00c947f1905bfa48fb6c59bb20fb8381e988387430d3ecd4f08512201d52a8d393c34d8b262ce88453dd68d10788cf480df132718c5cbf81d8169431584f47571e0865b9c4c07bc2d7272a014f7173ca1c6d374c6bc8b3cab1644b1683f24fc771f49dfe5832493b9"}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r1}) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 4.969273147s ago: executing program 3 (id=744): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000580)="f3", 0x1}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x1005, 0xffff2d37, 0xffffff01, 0x6, 0x10000003, 0x5, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xb, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0x1000, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x5, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xffffffd3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2be, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x26, 0x3, 0xa7e, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000045, 0x5f31, 0x1000d, 0x4e0, 0x1, 0x4, 0x3, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x8], [0x5, 0x408, 0xe, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x80005, 0x8, 0x1ef, 0x22, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0xc, 0x2, 0x2, 0x3, 0x2000000b, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x6, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x4002, 0x3, 0x7fe, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x40000007, 0x20000b, 0x5, 0x938, 0xfffffbff, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x54, 0x5, 0x3, 0x101, 0x10000, 0x5, 0x7fff, 0xfffe, 0xa620, 0x1, 0x78b, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0xa55, 0x9602, 0x7, 0xab, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0xfffffffd, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x3c, r5, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 4.732800083s ago: executing program 4 (id=745): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x2}], 0x20, 0x2003, 0x0) 4.055610395s ago: executing program 1 (id=748): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3a, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28) 3.409629164s ago: executing program 5 (id=749): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f00000001c0), &(0x7f00000003c0)='%-5lx \x00'}, 0x20) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002f00090024bd70000000000005"], 0x28}}, 0x84) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="20e81e0000004d61501d0100000000000000f4ffffffffff7f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x22, 0xf3, {0xf3, 0x22, "8d0c9b78b037e67739830c65e4d37321eae69ba23bbb8fc26174fda071134cfcc776b1091da015481b8ce8aaf293980d3f3800da939cc67f56d7bb3fd493ead6dce56eb148342de16a2452289d4c4459bb6f8966e510c38704aea5062cbdb756d7e0c75e07e5cf794f6b9986f4b53baf43c5661e483dc3a815ed5bfdc8bb9a5f20263a3a0401cb4d2fc3c26ad1396d99db12a9cb1c9c7a3c48123bf002d36ce945ac7e777558e939d98f449f7bae1dd1f9275688deb2c46297132e7b5e69b7d97a8a91bbd08e854aedc28bfb3072532b7e28261d15a5de3f04ab6dfb61e8fa542d08dc3059abbfa61c2d182f421bbb2426"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}}, &(0x7f00000006c0)={0x1c, &(0x7f00000001c0)={0x40, 0x18, 0x62, "88063ef15c90b5df58de1e76e355fb628b5418cd715f6e9d45fa5c4c364e628f39cb1f6005f19f71a2c1a211b105229e151ade81baa37827cf8bbdbb801408b8b45c6cefa4f583618530184bb884219d655b0f9067eb96ad472ca3bf1b9c1ff667e0"}, &(0x7f0000000240)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000680)={0x21, 0x0, 0x1, "03"}}) 3.409227659s ago: executing program 4 (id=750): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000580)='memory.swap.current\x00', 0x0, 0x0) io_setup(0x1, &(0x7f0000000500)=0x0) io_submit(r3, 0x0, &(0x7f0000000740)) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x0, 0xbffffffd, @mcast2, 0x1e0}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="a13317de1ef5751f755a5065472369f35650c0eebef05b85afc3ece720a805410293e722f69e231fc09152377bd9bd616b2b45fe7c744e6e4c26e4c88596659d0a5406d52439e080293e1d3495cfd29ea2d95504e3073997ae42d2b332a3fa7c56309bc82517e6f62379dbef2e0e1f134b969211fcb7a14172f63bd47792e90654b18b19cedd83ac8a6cc013a6c43eb821ff37d0096584f2482164c3bca2b4d7beb9f7e89161e811a14cd4a87e4d128c52fc6ab8e4829c4eacc9c830bd1400b128221397b9", 0xc5}], 0x1}}], 0x1, 0x4) shutdown(r0, 0x1) memfd_secret(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdc00, {{}, {}, {0x18, 0x17, {0x0, 0x2, @l2={'eth', 0x3a, 'ip_vti0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 3.403882335s ago: executing program 1 (id=751): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(0x0, 0x2, 0x0) 3.03836017s ago: executing program 3 (id=753): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202"], 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4e540) ioctl$BLKFINISHZONE(r1, 0x40101288, &(0x7f0000000080)={0x7, 0x3}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="c02896"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000340)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.644073023s ago: executing program 2 (id=754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcc47}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x59}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='attr/current\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000000)=""/144, 0x90}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/151, 0x97}], 0x7, 0x2, 0xfffffefc) 2.64239992s ago: executing program 4 (id=755): r0 = fsopen(&(0x7f0000000140)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) timerfd_create(0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000130000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c00020400000000000000010800040000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x40000811}, 0x0) read$eventfd(r1, &(0x7f0000000380), 0x8) r3 = semget$private(0x0, 0x7, 0x195) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) read(r6, &(0x7f00000002c0)=""/153, 0x99) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$netlink(r4, &(0x7f0000005240)={0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000001c00)={0x10, 0x14, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x40}, 0x20000800) semtimedop(r3, &(0x7f0000000200)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) semop(r3, &(0x7f0000000140)=[{0x4, 0x7, 0x1800}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) 2.153719335s ago: executing program 2 (id=756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x62}, 0x94) mprotect(&(0x7f00001a5000/0x14000)=nil, 0x14000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.777288259s ago: executing program 2 (id=757): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x301000, 0x102) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0xb5, 0x3, 0x6, 0x5a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x40, 0x20, 0x100, 0xfff}}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 1.559978874s ago: executing program 2 (id=758): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000a) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000040)=0x2000000, 0x4) 1.437892422s ago: executing program 2 (id=759): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000a) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) (fail_nth: 1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000040)=0x2000000, 0x4) 1.254199796s ago: executing program 4 (id=760): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$cec(&(0x7f0000002880), 0x0, 0x40000) ioctl$CEC_ADAP_G_CAPS(r1, 0xc04c6100, &(0x7f00000028c0)) write$UHID_INPUT(r0, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x8e2) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20040084) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00090000000905", @ANYBLOB="84d3"], 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000240)={0x3017, 0x20, [0x1, 0x3, 0x7, 0x7], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r3, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r4, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000a) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0x3) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0x541b, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r7, 0x8004af70, &(0x7f0000000180)) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x8, &(0x7f0000000040)=0x2000000, 0x4) 476.837037ms ago: executing program 3 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="36117466f33388b96480baccd45fc472652ef55b316f7f311e37be43dc048f1f8deb220e9e41abe70b9f588502eb825e56371f24f7db7aab0bfdb7b990e40251630d49b21857376c05a7fcda61cd9575a310d9bc0c5178631635d005e507049d8dc3cf43af67464a0634c3091e4df05fc855a03ebd6fa206fab3da26d18fb1cfd828c80a7b8f7381e59a08afb4e0b4d6cbf7ffbdb12ac60a", @ANYRES8=r1, @ANYBLOB="7fe9cc064dbfdc01513e82c266d3d6f09487e17a4ddb49104edb7ca08e4065a05f05dc763aed69e9b6578222a38ec1333aad62885e1a6911643816f5b614f384590ae66225d8f85f"], 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) socket$kcm(0xa, 0x2, 0x73) (async) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e21, @empty}, 0x10, 0x0}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e21, @empty}, 0x10, 0x0}, 0x0) 101.375023ms ago: executing program 2 (id=762): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0fe0000000071102800000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, 0x0, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x54) 69.794675ms ago: executing program 5 (id=763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xd80, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000effc3f00000000000004000000850000009600000085000000a0000000950000000000000039265596976c2a15f3ba0bab6ebbafc1905ee2380fd1d67ef3dde5e3e0f5d2e52fbd2cbf46c881b0b9d0b69622016a38073590c973da8042d48f232f7c3cd70913f1f901849896c150ab5f2509387f234c3cda1037c0b4cb79ef2f5477c0ddfe0d798bcdde87b460ae68af470bd8a0b7e6302805b20f8835ff1f1fa87db929746b416a282f8095da8f18089dc43ea3a7dd658909d9c2e980bff93df2545f58089535eb9a39d70dad7d91b1fc6f7b7073b474"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="000000000000000051ad97cb3e2b", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) write$vhost_msg(r4, &(0x7f0000000380)={0x1, {&(0x7f0000000280)=""/96, 0xfffffffffffffcaa, &(0x7f0000000040)=""/31, 0x0, 0x2}}, 0x48) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r2, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) r6 = mq_open(&(0x7f0000000780)='&\x00', 0x40, 0x101, 0x0) mq_notify(r6, &(0x7f00000001c0)={0x0, 0x3b, 0x1, @thr={0x0, 0x0}}) read(r6, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 0s ago: executing program 3 (id=764): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './file1'}}, {@verity_off}, {@uuid_null}], [{@fowner_gt}, {@dont_measure}, {@context={'context', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, './binderfs/binder0\x00'}}, {@dont_appraise}, {@context={'context', 0x3d, 'system_u'}}, {@seclabel}], 0x2c}) mount$9p_fd(0x0, 0x0, 0x0, 0x2000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c6e6f6465766d61702c76657273696f6e3d3970323030300e4c2c70726976706f72742c63616368657461673d73", @ANYRESHEX=0x0, @ANYBLOB=',privport,subj_type=trans=fd,,dirsync,subj_user=[-(']) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x277}, {&(0x7f00000005c0)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b7430be9233c4fcb610439ee8e2414966e88d0b05868fe5aa421397c33560a46fe8cbd9e02fda254d68d3308c0efc3c02c4845691aacc963d04f433dda8b8c0d00d0df4f8d165e0dd9ad1123fa4c2b54b", 0xcf}], 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): e0d9 [ 224.453956][ T6790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.453973][ T6790] RSP: 002b:00007fa61bd56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 224.453994][ T6790] RAX: ffffffffffffffda RBX: 00007fa61dd85fa0 RCX: 00007fa61dafe0d9 [ 224.454009][ T6790] RDX: 0000200000000280 RSI: 0000000000000026 RDI: 0000000000000003 [ 224.454023][ T6790] RBP: 00007fa61bd56090 R08: 0000000000000000 R09: 0000000000000000 [ 224.454036][ T6790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.454049][ T6790] R13: 00007fa61dd86038 R14: 00007fa61dd85fa0 R15: 00007ffd02578a38 [ 224.454082][ T6790] [ 224.713127][ T6775] capability: warning: `syz.1.283' uses 32-bit capabilities (legacy support in use) [ 224.726717][ T36] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 224.808807][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.292'. [ 224.848000][ T6793] tipc: Enabling of bearer rejected, already enabled [ 224.893935][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.292'. [ 224.907450][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 224.911913][ T36] usb 5-1: not running at top speed; connect to a high speed hub [ 224.911959][ T36] usb 5-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 224.949097][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.949129][ T36] usb 5-1: Product: syz [ 224.949147][ T36] usb 5-1: Manufacturer: syz [ 224.949163][ T36] usb 5-1: SerialNumber: syz [ 225.088004][ T36] usb 5-1: BAAD GENERIC IO: no channels? [ 225.191178][ T5927] usb 2-1: USB disconnect, device number 7 [ 225.411294][ T6802] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 226.280547][ T6786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.519111][ T6786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.545456][ T6786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.567599][ T6786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.692823][ T6786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.693486][ T6786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.266027][ T5927] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 227.432452][ T5927] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 227.437896][ T5927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.437995][ T5927] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 227.438154][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.956260][ T6847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'. [ 228.010156][ T6847] tipc: Started in network mode [ 228.010189][ T6847] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 228.010382][ T6847] tipc: Enabled bearer , priority 10 [ 228.150673][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.304'. [ 228.184315][ T5713] usb 3-1: USB disconnect, device number 9 [ 228.649374][ T6859] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 229.515838][ T5713] tipc: Node number set to 10136234 [ 229.565076][ T36] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 229.598638][ T36] usb 5-1: USB disconnect, device number 14 [ 229.740788][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.935937][ T5592] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 230.695976][ T5592] usb 1-1: Using ep0 maxpacket: 32 [ 230.697007][ T5592] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 230.700084][ T5592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.700117][ T5592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.700155][ T5592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.817745][ T5592] usb 1-1: config 0 descriptor?? [ 230.834024][ T5592] hub 1-1:0.0: USB hub found [ 231.073062][ T5592] hub 1-1:0.0: 26 ports detected [ 231.083122][ T5592] hub 1-1:0.0: insufficient power available to use all downstream ports [ 231.137485][ T6881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.316'. [ 231.367653][ T6858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.307'. [ 231.386472][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 231.447436][ T5592] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 231.447464][ T5592] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 231.498804][ T5592] usbhid 1-1:0.0: can't add hid device: -71 [ 231.498958][ T5592] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 231.652090][ T6890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.319'. [ 231.728919][ T6890] tipc: Enabling of bearer rejected, already enabled [ 231.732501][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.319'. [ 231.781441][ T5592] usb 1-1: USB disconnect, device number 5 [ 232.182990][ T6900] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 233.452523][ T6912] tipc: Enabled bearer , priority 0 [ 233.479079][ T6905] gfs2: path_lookup on /dev/loop# returned error -2 [ 233.556003][ T5720] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 233.596036][ T37] kauditd_printk_skb: 43 callbacks suppressed [ 233.596056][ T37] audit: type=1326 audit(1787512733.884:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6916 comm="syz.4.328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 233.596948][ T37] audit: type=1326 audit(1787512733.894:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6916 comm="syz.4.328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 233.597021][ T37] audit: type=1326 audit(1787512733.894:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6916 comm="syz.4.328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3ed378a52c code=0x7ffc0000 [ 233.604995][ T37] audit: type=1326 audit(1787512733.894:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6916 comm="syz.4.328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3ed378a58e code=0x7ffc0000 [ 233.605065][ T37] audit: type=1326 audit(1787512733.894:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6916 comm="syz.4.328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 233.605115][ T37] audit: type=1326 audit(1787512733.894:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6916 comm="syz.4.328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 233.605166][ T37] audit: type=1326 audit(1787512733.894:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6916 comm="syz.4.328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 233.642881][ T37] audit: type=1326 audit(1787512733.924:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6916 comm="syz.4.328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 233.643054][ T37] audit: type=1326 audit(1787512733.934:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6916 comm="syz.4.328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 233.658450][ T37] audit: type=1326 audit(1787512733.944:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6916 comm="syz.4.328" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 233.816289][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 233.827281][ T5720] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 233.882079][ T5720] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 233.900822][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 233.900874][ T5720] usb 1-1: Product: syz [ 233.900891][ T5720] usb 1-1: Manufacturer: syz [ 233.900907][ T5720] usb 1-1: SerialNumber: syz [ 233.933197][ T5720] usb 1-1: config 0 descriptor?? [ 233.935167][ T6908] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 233.950462][ T5720] hub 1-1:0.0: bad descriptor, ignoring hub [ 233.950502][ T5720] hub 1-1:0.0: probe with driver hub failed with error -5 [ 234.055398][ T6924] FAULT_INJECTION: forcing a failure. [ 234.055398][ T6924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.055450][ T6924] CPU: 0 UID: 0 PID: 6924 Comm: syz.2.329 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 234.055483][ T6924] Tainted: [L]=SOFTLOCKUP [ 234.055491][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.055504][ T6924] Call Trace: [ 234.055513][ T6924] [ 234.055523][ T6924] dump_stack_lvl+0xe8/0x150 [ 234.055565][ T6924] should_fail_ex+0x46b/0x600 [ 234.055610][ T6924] _copy_from_user+0x2d/0xb0 [ 234.055636][ T6924] __se_sys_epoll_ctl+0xbd/0x230 [ 234.055680][ T6924] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 234.055731][ T6924] do_syscall_64+0x166/0x520 [ 234.055767][ T6924] ? trace_irq_disable+0x3b/0x140 [ 234.055793][ T6924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.055818][ T6924] ? clear_bhb_loop+0x70/0xc0 [ 234.055849][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.055873][ T6924] RIP: 0033:0x7fa61dafe0d9 [ 234.055895][ T6924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.055916][ T6924] RSP: 002b:00007fa61bd56028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 234.055941][ T6924] RAX: ffffffffffffffda RBX: 00007fa61dd85fa0 RCX: 00007fa61dafe0d9 [ 234.055958][ T6924] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 234.055971][ T6924] RBP: 00007fa61bd56090 R08: 0000000000000000 R09: 0000000000000000 [ 234.055985][ T6924] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 234.056000][ T6924] R13: 00007fa61dd86038 R14: 00007fa61dd85fa0 R15: 00007ffd02578a38 [ 234.056037][ T6924] [ 234.685222][ T6938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.334'. [ 234.730029][ T6938] tipc: Enabling of bearer rejected, already enabled [ 234.751878][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 234.861656][ T6940] binder: 6939:6940 ioctl c0306201 200000000480 returned -14 [ 235.207516][ T6951] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 236.300728][ T6908] capability: warning: `syz.0.326' uses deprecated v2 capabilities in a way that may be insecure [ 236.319051][ T6908] vers=2.0 not permitted when mounting with smb3 [ 236.319051][ T6908] [ 236.322745][ T6908] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 236.446104][ T1287] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 236.533967][ T6961] tipc: Enabling of bearer rejected, already enabled [ 236.557347][ T5720] usb 1-1: USB disconnect, device number 6 [ 236.595868][ T1287] usb 4-1: Using ep0 maxpacket: 16 [ 236.598166][ T1287] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.615970][ T1287] usb 4-1: config index 0 descriptor too short (expected 19183, got 202) [ 236.616000][ T1287] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 236.616023][ T1287] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 236.616044][ T1287] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 236.665181][ T1287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.665209][ T1287] usb 4-1: Product: syz [ 236.665225][ T1287] usb 4-1: Manufacturer: syz [ 236.665239][ T1287] usb 4-1: SerialNumber: syz [ 236.821704][ T1287] usb 4-1: 0:2 : does not exist [ 236.883869][ T6970] FAULT_INJECTION: forcing a failure. [ 236.883869][ T6970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.883909][ T6970] CPU: 0 UID: 0 PID: 6970 Comm: syz.4.344 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 236.883939][ T6970] Tainted: [L]=SOFTLOCKUP [ 236.883947][ T6970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.883959][ T6970] Call Trace: [ 236.883967][ T6970] [ 236.883977][ T6970] dump_stack_lvl+0xe8/0x150 [ 236.884015][ T6970] should_fail_ex+0x46b/0x600 [ 236.884056][ T6970] _copy_to_user+0x31/0xb0 [ 236.884083][ T6970] simple_read_from_buffer+0xe1/0x170 [ 236.884119][ T6970] proc_fail_nth_read+0x1be/0x230 [ 236.884156][ T6970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.884193][ T6970] ? rw_verify_area+0x250/0x4d0 [ 236.884226][ T6970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.884259][ T6970] vfs_read+0x219/0xa90 [ 236.884299][ T6970] ? __pfx_vfs_read+0x10/0x10 [ 236.884334][ T6970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 236.884370][ T6970] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 236.884399][ T6970] ? mutex_lock_nested+0x152/0x1d0 [ 236.884420][ T6970] ? fdget_pos+0x252/0x320 [ 236.884458][ T6970] ksys_read+0x156/0x270 [ 236.884492][ T6970] ? __pfx_ksys_read+0x10/0x10 [ 236.884536][ T6970] do_syscall_64+0x166/0x520 [ 236.884563][ T6970] ? trace_irq_disable+0x3b/0x140 [ 236.884587][ T6970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.884611][ T6970] ? clear_bhb_loop+0x70/0xc0 [ 236.884639][ T6970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.884662][ T6970] RIP: 0033:0x7f3ed378e90e [ 236.884682][ T6970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.884700][ T6970] RSP: 002b:00007f3ed1a25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.884730][ T6970] RAX: ffffffffffffffda RBX: 00007f3ed1a266c0 RCX: 00007f3ed378e90e [ 236.884746][ T6970] RDX: 000000000000000f RSI: 00007f3ed1a260a0 RDI: 0000000000000005 [ 236.884760][ T6970] RBP: 00007f3ed1a26090 R08: 0000000000000000 R09: 0000000000000000 [ 236.884773][ T6970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.884786][ T6970] R13: 00007f3ed3a56038 R14: 00007f3ed3a55fa0 R15: 00007ffc7708b338 [ 236.884821][ T6970] [ 237.126909][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 237.435190][ T6979] usbcore.quirks: string doesn't fit in 127 chars. [ 237.695993][ T1287] usb 4-1: USB disconnect, device number 20 [ 237.706454][ T5592] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 237.865664][ T5592] usb 3-1: Using ep0 maxpacket: 32 [ 237.871428][ T5720] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 237.891728][ T5592] usb 3-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.40 [ 237.893421][ T5592] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 183, changing to 11 [ 237.893459][ T5592] usb 3-1: config 1 interface 0 has no altsetting 0 [ 237.927906][ T5592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.927935][ T5592] usb 3-1: Product: ⛨짰ç’꽸垠⩣ᆨ죯ꧤ▔軎駔↨ףå¡é…‰Ð­ã¼´ã˜‚ሢ털饷 [ 237.927955][ T5592] usb 3-1: Manufacturer: á ‰ [ 237.927971][ T5592] usb 3-1: SerialNumber: ｙ汉〾à·è­±ë±€ì¡ä ¿ä¡ï»ªê¦´ìšŒé¨á’­îƒ¿ê“¬êŸ§ï°¡â¶µé¢»ï’­î¹€î…žÈ‹é³¼ã›Šá¨î²ë¤îª­è ˜î€³íš´åª†à¦ì„©é»ë‚¼å´šîº­ã˜€å»–䴯喫äµå»žï¡ªèœ¹æ¿¨ç½·à²­î”³á¼é‘•è¼šé¬ºæ·´æœ‰åµšê£ ë¿‰ã””ᒞ䵮綉窑蕂敎餗îšê‚›ï±Ÿç¼’턚㡨 [ 238.041199][ T5592] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 238.041220][ T5592] usb 3-1: no configuration chosen from 1 choice [ 238.055997][ T5927] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 238.074268][ T5720] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 238.078129][ T5720] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.078191][ T5720] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 238.078228][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.206386][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 238.207149][ T5927] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 238.209715][ T5927] usb 5-1: config 0 has an invalid interface number: 47 but max is 0 [ 238.209740][ T5927] usb 5-1: config 0 has no interface number 0 [ 238.209772][ T5927] usb 5-1: too many endpoints for config 0 interface 47 altsetting 235: 75, using maximum allowed: 30 [ 238.209811][ T5927] usb 5-1: config 0 interface 47 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 75 [ 238.209840][ T5927] usb 5-1: config 0 interface 47 has no altsetting 0 [ 238.217129][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.217157][ T5927] usb 5-1: Product: syz [ 238.217173][ T5927] usb 5-1: Manufacturer: syz [ 238.217188][ T5927] usb 5-1: SerialNumber: syz [ 238.334139][ T5927] usb 5-1: config 0 descriptor?? [ 238.445184][ T5592] usb 2-1: USB disconnect, device number 8 [ 238.533658][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.125919][ T5592] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 239.189302][ T5927] usb 5-1: USB disconnect, device number 15 [ 239.191248][ T6996] tipc: Enabling of bearer rejected, already enabled [ 239.285903][ T5592] usb 1-1: Using ep0 maxpacket: 32 [ 239.287247][ T5592] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 240.336920][ T5592] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 240.336950][ T5592] usb 1-1: config 0 has no interface number 0 [ 240.336990][ T5592] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 240.390292][ T5592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.390322][ T5592] usb 1-1: Product: syz [ 240.390337][ T5592] usb 1-1: Manufacturer: syz [ 240.390352][ T5592] usb 1-1: SerialNumber: syz [ 240.440433][ T5592] usb 1-1: config 0 descriptor?? [ 240.449891][ T6992] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 240.631509][ T36] usb 3-1: USB disconnect, device number 10 [ 240.674821][ T6992] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 240.912202][ T6992] openvswitch: netlink: Missing valid actions attribute. [ 240.912233][ T6992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.053667][ T7015] FAULT_INJECTION: forcing a failure. [ 241.053667][ T7015] name failslab, interval 1, probability 0, space 0, times 0 [ 241.053707][ T7015] CPU: 0 UID: 0 PID: 7015 Comm: syz.1.361 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 241.053740][ T7015] Tainted: [L]=SOFTLOCKUP [ 241.053747][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.053760][ T7015] Call Trace: [ 241.053768][ T7015] [ 241.053777][ T7015] dump_stack_lvl+0xe8/0x150 [ 241.053815][ T7015] should_fail_ex+0x46b/0x600 [ 241.053856][ T7015] should_failslab+0xa8/0x100 [ 241.053884][ T7015] kmem_cache_alloc_noprof+0xa4/0x660 [ 241.053921][ T7015] ? do_getname+0x2e/0x250 [ 241.053945][ T7015] ? do_getname+0x2e/0x250 [ 241.053970][ T7015] ? rt_mutex_slowunlock+0x219/0x460 [ 241.053998][ T7015] do_getname+0x2e/0x250 [ 241.054021][ T7015] ? getname_flags+0x11/0x20 [ 241.054048][ T7015] do_sys_openat2+0xcc/0x200 [ 241.054077][ T7015] ? __pfx_do_sys_openat2+0x10/0x10 [ 241.054103][ T7015] ? ksys_write+0x248/0x270 [ 241.054138][ T7015] ? __pfx_ksys_write+0x10/0x10 [ 241.054182][ T7015] __x64_sys_openat+0x138/0x170 [ 241.054215][ T7015] do_syscall_64+0x166/0x520 [ 241.054243][ T7015] ? trace_irq_disable+0x3b/0x140 [ 241.054265][ T7015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.054288][ T7015] ? clear_bhb_loop+0x70/0xc0 [ 241.054315][ T7015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.054336][ T7015] RIP: 0033:0x7fd237a7e0d9 [ 241.054356][ T7015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.054374][ T7015] RSP: 002b:00007fd235cd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 241.054397][ T7015] RAX: ffffffffffffffda RBX: 00007fd237d05fa0 RCX: 00007fd237a7e0d9 [ 241.054412][ T7015] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 241.054426][ T7015] RBP: 00007fd235cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 241.054439][ T7015] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000001 [ 241.054451][ T7015] R13: 00007fd237d06038 R14: 00007fd237d05fa0 R15: 00007ffd3885fc48 [ 241.054484][ T7015] [ 241.375911][ T36] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 241.382688][ T5592] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 241.382984][ T5592] asix 1-1:0.188: probe with driver asix failed with error -71 [ 241.415232][ T1287] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 242.592021][ T5592] usb 1-1: USB disconnect, device number 7 [ 243.085923][ T36] usb 3-1: not running at top speed; connect to a high speed hub [ 243.085961][ T36] usb 3-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 243.135336][ T36] usb 3-1: config index 0 descriptor too short (expected 43, got 25) [ 243.156676][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 243.156706][ T36] usb 3-1: Product: syz [ 243.156722][ T36] usb 3-1: Manufacturer: syz [ 243.191040][ T1287] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 243.197670][ T1287] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 243.197696][ T1287] usb 5-1: Product: syz [ 243.197711][ T1287] usb 5-1: SerialNumber: syz [ 243.876142][ T1287] usb 5-1: config 0 descriptor?? [ 244.090661][ T1287] usb 5-1: can't set config #0, error -71 [ 244.141756][ T1287] usb 5-1: USB disconnect, device number 16 [ 247.051965][ T7037] tipc: Enabled bearer , priority 0 [ 247.337594][ T7036] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 247.337623][ T7036] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 247.443199][ T7045] qrtr: Invalid version 46 [ 247.443326][ T7045] qrtr: Invalid version 46 [ 247.443413][ T7045] qrtr: Invalid version 46 [ 247.443497][ T7045] qrtr: Invalid version 46 [ 247.443581][ T7045] qrtr: Invalid version 46 [ 247.443664][ T7045] qrtr: Invalid version 46 [ 247.443746][ T7045] qrtr: Invalid version 46 [ 247.443831][ T7045] qrtr: Invalid version 46 [ 247.443916][ T7045] qrtr: Invalid version 46 [ 247.443999][ T7045] qrtr: Invalid version 46 [ 247.444091][ T7045] qrtr: Invalid version 46 [ 247.444176][ T7045] qrtr: Invalid version 46 [ 247.444257][ T7045] qrtr: Invalid version 46 [ 247.444340][ T7045] qrtr: Invalid version 46 [ 247.444422][ T7045] qrtr: Invalid version 46 [ 247.444506][ T7045] qrtr: Invalid version 46 [ 247.459382][ T7045] qrtr: Invalid version 46 [ 247.459688][ T7045] qrtr: Invalid version 46 [ 247.459934][ T7045] qrtr: Invalid version 46 [ 247.460059][ T7045] qrtr: Invalid version 46 [ 247.460247][ T7045] qrtr: Invalid version 46 [ 247.460454][ T7045] qrtr: Invalid version 46 [ 247.460619][ T7045] qrtr: Invalid version 46 [ 247.460836][ T7045] qrtr: Invalid version 46 [ 247.490709][ T7045] qrtr: Invalid version 46 [ 247.490945][ T7045] qrtr: Invalid version 46 [ 247.491194][ T7045] qrtr: Invalid version 46 [ 247.491400][ T7045] qrtr: Invalid version 46 [ 247.491633][ T7045] qrtr: Invalid version 46 [ 247.491912][ T7045] qrtr: Invalid version 46 [ 247.532123][ T7045] qrtr: Invalid version 46 [ 247.532431][ T7045] qrtr: Invalid version 46 [ 247.532685][ T7045] qrtr: Invalid version 46 [ 247.532937][ T7045] qrtr: Invalid version 46 [ 247.533087][ T7045] qrtr: Invalid version 46 [ 247.533275][ T7045] qrtr: Invalid version 46 [ 247.549121][ T7045] qrtr: Invalid version 46 [ 247.689486][ T7036] vhci_hcd vhci_hcd.0: Device attached [ 247.703963][ T7041] vhci_hcd: connection closed [ 247.710089][ T12] vhci_hcd vhci_hcd.2: stop threads [ 247.711042][ T12] vhci_hcd vhci_hcd.2: release socket [ 247.773819][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 247.829757][ T5927] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 248.182192][ T36] msi2500 3-1:1.0: Registered as swradio24 [ 248.182218][ T36] msi2500 3-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 248.217835][ T36] usb 3-1: USB disconnect, device number 11 [ 251.033327][ T5927] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 251.182657][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 251.183231][ T5927] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 251.184459][ T5927] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 251.184478][ T5927] usb 2-1: config 0 has no interface number 0 [ 251.184509][ T5927] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 251.187786][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.187805][ T5927] usb 2-1: Product: syz [ 251.187815][ T5927] usb 2-1: Manufacturer: syz [ 251.187826][ T5927] usb 2-1: SerialNumber: syz [ 251.338456][ T7070] netlink: 'syz.2.376': attribute type 7 has an invalid length. [ 251.460789][ T5927] usb 2-1: config 0 descriptor?? [ 251.462128][ T7063] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.849952][ T7063] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.873953][ T5720] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 253.736044][ T5720] usb 5-1: Using ep0 maxpacket: 8 [ 253.744856][ T5720] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 253.746977][ T5720] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.747011][ T5720] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 253.747041][ T5720] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.747070][ T5720] usb 5-1: config 0 interface 0 has no altsetting 0 [ 253.747105][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.027769][ T5927] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 254.028017][ T5927] asix 2-1:0.188: probe with driver asix failed with error -71 [ 254.077660][ T5720] usb 5-1: config 0 descriptor?? [ 254.095206][ T7075] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 254.115648][ T5592] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 254.138726][ T5927] usb 2-1: USB disconnect, device number 9 [ 254.296503][ T5592] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 254.298076][ T5592] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.298147][ T5592] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 254.298172][ T5592] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 254.359029][ T5592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.359467][ T5592] usb 1-1: Product: syz [ 254.359487][ T5592] usb 1-1: Manufacturer: syz [ 254.359503][ T5592] usb 1-1: SerialNumber: syz [ 254.929634][ T5720] usbhid 5-1:0.0: can't add hid device: -71 [ 254.929769][ T5720] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 254.976146][ T5720] usb 5-1: USB disconnect, device number 17 [ 254.993101][ T5592] sisusb 1-1:1.0: Invalid USB2VGA device [ 254.993138][ T5592] sisusb 1-1:1.0: probe with driver sisusb failed with error -22 [ 255.773258][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.773333][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.495271][ T7101] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 256.495303][ T7101] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 256.509468][ T7101] vhci_hcd vhci_hcd.0: Device attached [ 256.530481][ T5927] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 256.552061][ T7102] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 256.660035][ T57] vhci_hcd vhci_hcd.3: stop threads [ 256.660063][ T57] vhci_hcd vhci_hcd.3: release socket [ 256.662498][ T57] vhci_hcd vhci_hcd.3: disconnect device [ 256.676098][ T5927] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 256.677395][ T5927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.677441][ T5927] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 256.677463][ T5927] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 256.747326][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.747349][ T5927] usb 2-1: Product: syz [ 256.747359][ T5927] usb 2-1: Manufacturer: syz [ 256.747370][ T5927] usb 2-1: SerialNumber: syz [ 256.831093][ T5686] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 256.937813][ T5927] sisusb 2-1:1.0: Invalid USB2VGA device [ 256.937853][ T5927] sisusb 2-1:1.0: probe with driver sisusb failed with error -22 [ 257.086398][ T36] usb 1-1: USB disconnect, device number 8 [ 257.270510][ T7111] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 257.270554][ T7111] CIFS mount error: No usable UNC path provided in device string! [ 257.270554][ T7111] [ 257.270566][ T7111] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 257.528039][ T5927] usb 2-1: USB disconnect, device number 10 [ 257.774313][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.763686][ T7150] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 260.763718][ T7150] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 260.763825][ T7150] vhci_hcd vhci_hcd.0: Device attached [ 260.788653][ T1287] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 260.828301][ T7151] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 260.860363][ T67] vhci_hcd vhci_hcd.1: stop threads [ 260.860392][ T67] vhci_hcd vhci_hcd.1: release socket [ 260.860433][ T67] vhci_hcd vhci_hcd.1: disconnect device [ 260.925837][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.403'. [ 260.925905][ T7155] FAULT_INJECTION: forcing a failure. [ 260.925905][ T7155] name failslab, interval 1, probability 0, space 0, times 0 [ 260.925939][ T7155] CPU: 0 UID: 0 PID: 7155 Comm: syz.2.403 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 260.925970][ T7155] Tainted: [L]=SOFTLOCKUP [ 260.925978][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.925991][ T7155] Call Trace: [ 260.925999][ T7155] [ 260.926008][ T7155] dump_stack_lvl+0xe8/0x150 [ 260.926047][ T7155] should_fail_ex+0x46b/0x600 [ 260.926089][ T7155] should_failslab+0xa8/0x100 [ 260.926119][ T7155] kmem_cache_alloc_node_noprof+0xae/0x670 [ 260.926144][ T7155] ? __alloc_skb+0x1db/0x7a0 [ 260.926177][ T7155] ? __alloc_skb+0x1db/0x7a0 [ 260.926219][ T7155] __alloc_skb+0x1db/0x7a0 [ 260.926258][ T7155] netlink_ack+0x136/0xb30 [ 260.926280][ T7155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.926330][ T7155] netlink_rcv_skb+0x2a4/0x4a0 [ 260.926357][ T7155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.926390][ T7155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.926430][ T7155] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.926454][ T7155] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.926484][ T7155] genl_rcv+0x28/0x40 [ 260.926513][ T7155] netlink_unicast+0x7f5/0x990 [ 260.926546][ T7155] netlink_sendmsg+0x813/0xb40 [ 260.926581][ T7155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.926617][ T7155] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 260.926644][ T7155] ? __kernel_text_address+0xd/0x30 [ 260.926667][ T7155] ? unwind_get_return_address+0x4d/0x90 [ 260.926686][ T7155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.926703][ T7155] sock_sendmsg_nosec+0x13a/0x180 [ 260.926726][ T7155] ____sys_sendmsg+0x565/0x870 [ 260.926742][ T7155] ? __might_fault+0xaf/0x130 [ 260.926762][ T7155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.926785][ T7155] ? import_iovec+0x73/0xa0 [ 260.926804][ T7155] ___sys_sendmsg+0x2a5/0x360 [ 260.926819][ T7155] ? __lock_acquire+0x683/0x2ce0 [ 260.926839][ T7155] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.926882][ T7155] ? __fget_files+0x2a/0x420 [ 260.926902][ T7155] ? __fget_files+0x3a8/0x420 [ 260.926929][ T7155] __x64_sys_sendmsg+0x1b7/0x290 [ 260.926948][ T7155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.926980][ T7155] do_syscall_64+0x166/0x520 [ 260.927001][ T7155] ? trace_irq_disable+0x3b/0x140 [ 260.927017][ T7155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.927033][ T7155] ? clear_bhb_loop+0x70/0xc0 [ 260.927052][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.927068][ T7155] RIP: 0033:0x7fa61dafe0d9 [ 260.927083][ T7155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.927096][ T7155] RSP: 002b:00007fa61bd56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.927116][ T7155] RAX: ffffffffffffffda RBX: 00007fa61dd85fa0 RCX: 00007fa61dafe0d9 [ 260.927130][ T7155] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000004 [ 260.927148][ T7155] RBP: 00007fa61bd56090 R08: 0000000000000000 R09: 0000000000000000 [ 260.927159][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.927170][ T7155] R13: 00007fa61dd86038 R14: 00007fa61dd85fa0 R15: 00007ffd02578a38 [ 260.927198][ T7155] [ 260.953934][ T1287] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 260.957479][ T1287] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.957540][ T1287] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 260.957562][ T1287] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 261.012682][ T1287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.012711][ T1287] usb 1-1: Product: syz [ 261.012727][ T1287] usb 1-1: Manufacturer: syz [ 261.012743][ T1287] usb 1-1: SerialNumber: syz [ 261.424282][ T1287] sisusb 1-1:1.0: Invalid USB2VGA device [ 261.424321][ T1287] sisusb 1-1:1.0: probe with driver sisusb failed with error -22 [ 261.552960][ T7157] netlink: 'syz.4.405': attribute type 9 has an invalid length. [ 261.810912][ T1287] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 261.959592][ T1287] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 261.960785][ T1287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.960826][ T1287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.960844][ T1287] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 261.960863][ T1287] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.960897][ T1287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.566219][ T36] usb 1-1: USB disconnect, device number 9 [ 263.607284][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 263.666236][ T1287] gud 5-1:1.0: USB-1: Failed to add properties (ret=-5) [ 263.666274][ T1287] gud 5-1:1.0: Failed to get connectors (error=-5) [ 263.666300][ T1287] gud 5-1:1.0: probe with driver gud failed with error -5 [ 263.776610][ T31] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 263.797074][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.797132][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 263.797149][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 263.839073][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.839104][ T31] usb 2-1: Product: syz [ 263.839119][ T31] usb 2-1: Manufacturer: syz [ 263.839135][ T31] usb 2-1: SerialNumber: syz [ 263.918017][ T1287] usb 5-1: USB disconnect, device number 18 [ 263.973586][ T31] sisusb 2-1:1.0: Invalid USB2VGA device [ 263.973611][ T31] sisusb 2-1:1.0: probe with driver sisusb failed with error -22 [ 264.053361][ T7178] kAFS: bad VL server IP address [ 264.723797][ T5720] usb 2-1: USB disconnect, device number 11 [ 265.519189][ T37] kauditd_printk_skb: 42 callbacks suppressed [ 265.519210][ T37] audit: type=1326 audit(1787512766.139:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.4.414" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 265.519262][ T37] audit: type=1326 audit(1787512766.139:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.4.414" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 265.521701][ T37] audit: type=1326 audit(1787512766.139:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.4.414" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 265.521743][ T37] audit: type=1326 audit(1787512766.139:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.4.414" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 265.521778][ T37] audit: type=1326 audit(1787512766.139:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.4.414" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 265.521810][ T37] audit: type=1326 audit(1787512766.139:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.4.414" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 265.521842][ T37] audit: type=1326 audit(1787512766.139:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.4.414" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 265.521875][ T37] audit: type=1326 audit(1787512766.139:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.4.414" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 265.521907][ T37] audit: type=1326 audit(1787512766.139:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.4.414" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 265.521939][ T37] audit: type=1326 audit(1787512766.139:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.4.414" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 266.143840][ T36] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 266.208557][ T31] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 266.249384][ T7224] tipc: Enabling of bearer rejected, already enabled [ 266.326627][ T36] usb 5-1: device descriptor read/64, error -71 [ 266.367677][ T31] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 266.371765][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 266.371800][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 266.371847][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.643276][ T36] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 266.811812][ T36] usb 5-1: device descriptor read/64, error -71 [ 266.931038][ T36] usb usb5-port1: attempt power cycle [ 267.122653][ T5592] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 267.296813][ T5592] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 267.305073][ T5592] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.305135][ T5592] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 267.305160][ T5592] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 267.305547][ T36] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 267.391274][ T5592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.391304][ T5592] usb 4-1: Product: syz [ 267.391320][ T5592] usb 4-1: Manufacturer: syz [ 267.391515][ T5592] usb 4-1: SerialNumber: syz [ 267.464119][ T5592] sisusb 4-1:1.0: Invalid USB2VGA device [ 267.464159][ T5592] sisusb 4-1:1.0: probe with driver sisusb failed with error -22 [ 267.490880][ T36] usb 5-1: device descriptor read/8, error -71 [ 267.938425][ T36] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 268.779124][ T31] pegasus 2-1:1.0: probe with driver pegasus failed with error -110 [ 269.188572][ T36] usb 5-1: device descriptor read/8, error -71 [ 269.198576][ T31] usb 2-1: USB disconnect, device number 12 [ 269.332109][ T36] usb usb5-port1: unable to enumerate USB device [ 269.439960][ T7244] netlink: 236 bytes leftover after parsing attributes in process `syz.1.425'. [ 269.709935][ T7246] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.773389][ T5592] usb 4-1: USB disconnect, device number 21 [ 273.997553][ T7270] JFS: discard option not supported on device [ 274.166141][ T7270] Mount JFS Failure: -5 [ 274.166160][ T7270] jfs_mount failed w/return code = -5 [ 274.908401][ T6311] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.909146][ T6311] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.909199][ T6311] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.909240][ T6311] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.738730][ T7288] netlink: 104 bytes leftover after parsing attributes in process `syz.3.440'. [ 275.780756][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 275.780771][ T37] audit: type=1326 audit(1787512776.481:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7294 comm="syz.4.441" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x0 [ 276.775389][ T5720] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 276.958797][ T5720] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 276.959877][ T5720] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.959913][ T5720] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 276.959930][ T5720] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 276.976437][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.976469][ T5720] usb 4-1: Product: syz [ 276.976485][ T5720] usb 4-1: Manufacturer: syz [ 276.976501][ T5720] usb 4-1: SerialNumber: syz [ 277.116148][ T5720] sisusb 4-1:1.0: Invalid USB2VGA device [ 277.116187][ T5720] sisusb 4-1:1.0: probe with driver sisusb failed with error -22 [ 277.429119][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 277.574510][ T7320] syz.1.448 (7320): attempted to duplicate a private mapping with mremap. This is not supported. [ 277.583614][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 277.607597][ T31] usb 5-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=9b.b6 [ 277.627656][ T31] usb 5-1: config 3 has an invalid interface number: 135 but max is 0 [ 277.627691][ T31] usb 5-1: config 3 has no interface number 0 [ 277.627746][ T31] usb 5-1: config 3 interface 135 altsetting 1 endpoint 0xB has invalid maxpacket 520, setting to 64 [ 277.627779][ T31] usb 5-1: config 3 interface 135 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 277.627806][ T31] usb 5-1: config 3 interface 135 has no altsetting 0 [ 277.706329][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.706362][ T31] usb 5-1: Product: Њ [ 277.706379][ T31] usb 5-1: Manufacturer: ﱒ誶ụï¥ï«²â”•ê¦¤ëˆ¿á•¡ã £à¥²á—©ï›ºé˜ºì¥î½šâµŽà¯â…é±ëŠ»æµ¹à´Žá«žç‹¯à°Ÿâ¾çŸ”䄯젧éžä±‹ì®¶è“‰â ¡à¸¼áŠá„‘䘊譣즵娬젷ㅰì á ¨ë·‘ᵑ寭掚첷곤홻ꋺ錀蒜フᢼ渿焲꒤㉖뛋狴飒඀䦰୷鹨鹙㔂ᨊ쮨쉓ë·áŽŽç®¼ç«’㥎 [ 277.706413][ T31] usb 5-1: SerialNumber: ㉠[ 278.071996][ T31] quatech2 5-1:3.135: Quatech 2nd gen USB to Serial Driver converter detected [ 278.072514][ T31] usb 5-1: qt2_attach - failed to power on unit: -71 [ 278.072651][ T31] quatech2 5-1:3.135: probe with driver quatech2 failed with error -71 [ 278.145917][ T31] usb 5-1: USB disconnect, device number 23 [ 278.200633][ T7320] team0: Port device vlan0 added [ 278.826027][ T7331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.451'. [ 279.500696][ T5686] usb 4-1: USB disconnect, device number 22 [ 281.475569][ T7357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.459'. [ 281.847691][ T7357] binder: 7354:7357 ioctl c0306201 200000000640 returned -22 [ 281.873120][ T7357] vivid-000: ================= START STATUS ================= [ 281.873239][ T7357] vivid-000: Test Pattern: 75% Colorbar [ 281.873277][ T7357] vivid-000: Fill Percentage of Frame: 100 [ 281.873301][ T7357] vivid-000: Horizontal Movement: No Movement [ 281.873325][ T7357] vivid-000: Vertical Movement: No Movement [ 281.873348][ T7357] vivid-000: OSD Text Mode: All [ 281.873369][ T7357] vivid-000: Show Border: false [ 281.873391][ T7357] vivid-000: Show Square: false [ 281.875064][ T7357] vivid-000: Sensor Flipped Horizontally: false [ 281.883436][ T7357] vivid-000: Sensor Flipped Vertically: false [ 281.883505][ T7357] vivid-000: Insert SAV Code in Image: false [ 281.883573][ T7357] vivid-000: Insert EAV Code in Image: false [ 281.883908][ T7357] vivid-000: Insert Video Guard Band: false [ 281.883977][ T7357] vivid-000: Reduced Framerate: false [ 281.884035][ T7357] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 281.884103][ T7357] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 281.884164][ T7357] vivid-000: Enable Capture Cropping: true [ 281.884224][ T7357] vivid-000: Enable Capture Composing: true [ 281.884289][ T7357] vivid-000: Enable Capture Scaler: true [ 281.884356][ T7357] vivid-000: Timestamp Source: End of Frame [ 281.884421][ T7357] vivid-000: Colorspace: sRGB [ 281.884465][ T7357] vivid-000: Transfer Function: Default [ 281.884522][ T7357] vivid-000: Y'CbCr Encoding: Default [ 281.884580][ T7357] vivid-000: HSV Encoding: Hue 0-179 [ 281.885430][ T7357] vivid-000: Quantization: Default [ 281.885499][ T7357] vivid-000: Apply Alpha To Red Only: false [ 281.885557][ T7357] vivid-000: Standard Aspect Ratio: 4x3 [ 281.885866][ T7357] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 281.885941][ T7357] vivid-000: DV Timings: 640x480p59 inactive [ 281.886008][ T7357] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 281.886043][ T7357] vivid-000: Maximum EDID Blocks: 2 [ 281.886101][ T7357] vivid-000: Limited RGB Range (16-235): false [ 281.886159][ T7357] vivid-000: Rx RGB Quantization Range: Automatic [ 281.886211][ T7357] vivid-000: Power Present: 0x00000001 [ 281.886252][ T7357] tpg source WxH: 1280x720 (R'G'B) [ 281.886291][ T7357] tpg field: 1 [ 281.886314][ T7357] tpg crop: (0,0)/1280x720 [ 281.886358][ T7357] tpg compose: (0,0)/1280x720 [ 281.886395][ T7357] tpg colorspace: 8 [ 281.886418][ T7357] tpg transfer function: 0/0 [ 281.886444][ T7357] tpg quantization: 0/0 [ 281.886468][ T7357] tpg RGB range: 0/2 [ 281.886493][ T7357] vivid-000: ================== END STATUS ================== [ 284.620634][ T7368] macsec1: entered promiscuous mode [ 284.894393][ T5720] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 285.048076][ T5720] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 285.049571][ T5720] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.049625][ T5720] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 285.049651][ T5720] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 285.094195][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.094225][ T5720] usb 5-1: Product: syz [ 285.094241][ T5720] usb 5-1: Manufacturer: syz [ 285.094255][ T5720] usb 5-1: SerialNumber: syz [ 285.151510][ T5720] sisusb 5-1:1.0: Invalid USB2VGA device [ 285.151547][ T5720] sisusb 5-1:1.0: probe with driver sisusb failed with error -22 [ 288.432286][ T5934] usb 5-1: USB disconnect, device number 24 [ 289.247047][ T7412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.469'. [ 289.416059][ T7415] Bluetooth: MGMT ver 1.23 [ 289.416109][ T7415] Bluetooth: hci0: unsupported parameter 4354 [ 289.416124][ T7415] Bluetooth: hci0: unsupported parameter 8192 [ 289.416142][ T7415] Bluetooth: hci0: unsupported parameter 4354 [ 289.416156][ T7415] Bluetooth: hci0: unsupported parameter 8192 [ 290.841290][ T37] audit: type=1326 audit(1787512791.605:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7434 comm="syz.4.484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 290.841356][ T37] audit: type=1326 audit(1787512791.605:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7434 comm="syz.4.484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 290.841405][ T37] audit: type=1326 audit(1787512791.605:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7434 comm="syz.4.484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 290.841454][ T37] audit: type=1326 audit(1787512791.605:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7434 comm="syz.4.484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 290.841501][ T37] audit: type=1326 audit(1787512791.605:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7434 comm="syz.4.484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 290.841553][ T37] audit: type=1326 audit(1787512791.605:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7434 comm="syz.4.484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 290.841965][ T37] audit: type=1326 audit(1787512791.605:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7434 comm="syz.4.484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 290.842014][ T37] audit: type=1326 audit(1787512791.605:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7434 comm="syz.4.484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 290.842061][ T37] audit: type=1326 audit(1787512791.605:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7434 comm="syz.4.484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 290.842109][ T37] audit: type=1326 audit(1787512791.605:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7434 comm="syz.4.484" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed37ce0d9 code=0x7ffc0000 [ 291.260817][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 291.593247][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 291.786982][ T5934] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 291.959053][ T5934] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 291.962670][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.011466][ T5934] usb 4-1: config 0 descriptor?? [ 292.038808][ T5934] cp210x 4-1:0.0: cp210x converter detected [ 292.142907][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.489'. [ 292.230265][ T7460] program syz.4.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.275357][ T7457] bridge1: entered promiscuous mode [ 292.275432][ T7457] bridge1: entered allmulticast mode [ 292.629865][ T7436] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 292.693490][ T7436] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 293.376872][ T5934] usb 4-1: cp210x converter now attached to ttyUSB0 [ 293.481504][ T5934] usb 4-1: USB disconnect, device number 23 [ 293.553048][ T5934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 293.747041][ T5934] cp210x 4-1:0.0: device disconnected [ 294.483804][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.498'. [ 294.548846][ T7489] tipc: Enabling of bearer rejected, already enabled [ 294.619808][ T5601] Bluetooth: hci1: unexpected cc 0x200b length: 2 > 1 [ 294.619863][ T5601] Bluetooth: hci1: unexpected event for opcode 0x200b [ 294.669413][ T7492] tmpfs: Bad value for 'mpol' [ 294.714523][ T7492] sd 0:0:1:0: PR command failed: 1026 [ 294.714604][ T7492] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 294.714653][ T7492] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 295.220790][ T5934] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 295.376128][ T5934] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.376199][ T5934] usb 2-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 295.378994][ T5934] usb 2-1: config 0 has an invalid interface number: 86 but max is 0 [ 295.379024][ T5934] usb 2-1: config 0 has no interface number 0 [ 295.379070][ T5934] usb 2-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 295.379101][ T5934] usb 2-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 295.379118][ T5934] usb 2-1: config 0 interface 86 has no altsetting 0 [ 295.468472][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.468504][ T5934] usb 2-1: Product: syz [ 295.468520][ T5934] usb 2-1: Manufacturer: syz [ 295.468536][ T5934] usb 2-1: SerialNumber: syz [ 295.880115][ T5934] usb 2-1: config 0 descriptor?? [ 295.886370][ T7495] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.886502][ T7495] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 296.219814][ T5934] omninet 2-1:0.86: ZyXEL - omni.net usb converter detected [ 296.312294][ T5934] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 296.357411][ T5934] usb 2-1: USB disconnect, device number 13 [ 296.388809][ T5934] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 296.389875][ T5934] omninet 2-1:0.86: device disconnected [ 298.575765][ T7508] vivid-002: disconnect [ 298.599854][ T7507] vivid-002: reconnect [ 298.895214][ T7517] tipc: Enabling of bearer rejected, already enabled [ 299.244427][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 299.534780][ T1287] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 299.714534][ T5592] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 299.745409][ T1287] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 299.747217][ T1287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.747295][ T1287] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 299.747320][ T1287] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 299.747345][ T1287] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.750070][ T1287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 299.750096][ T1287] usb 4-1: Product: syz [ 299.750111][ T1287] usb 4-1: Manufacturer: syz [ 299.850818][ T1287] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 299.877461][ T1287] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 299.896218][ T1287] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 299.915158][ T5592] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 299.916707][ T5592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.945280][ T5592] usb 2-1: config 0 descriptor?? [ 299.953448][ T5592] cp210x 2-1:0.0: cp210x converter detected [ 300.183291][ T5934] usb 4-1: USB disconnect, device number 24 [ 300.193054][ T7523] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 300.264261][ T5934] garmin_gps 4-1:1.0: device disconnected [ 300.321295][ T7523] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 300.405370][ T5592] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 300.405406][ T5592] cp210x 2-1:0.0: querying part number failed [ 300.468906][ T5592] usb 2-1: cp210x converter now attached to ttyUSB0 [ 300.492515][ T5592] usb 2-1: USB disconnect, device number 14 [ 300.498400][ T5686] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 300.533401][ T5592] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 300.534576][ T5592] cp210x 2-1:0.0: device disconnected [ 300.602417][ T7527] kvm: kvm [7526]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000080 [ 300.623814][ T7527] kvm: kvm [7526]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000000 [ 300.623915][ T7527] kvm: kvm [7526]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 300.626040][ T7527] kvm: kvm [7526]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x100000080 [ 300.628210][ T7527] kvm: kvm [7526]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000000 [ 300.628303][ T7527] kvm: kvm [7526]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 300.685220][ T7527] kvm: kvm [7526]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x100000000 [ 300.695769][ T5686] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 300.763625][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 300.763660][ T5686] usb 3-1: Product: syz [ 300.763679][ T5686] usb 3-1: SerialNumber: syz [ 300.903715][ T5686] usb 3-1: config 0 descriptor?? [ 303.188971][ T5686] hso 3-1:0.0: Failed to find BULK eps [ 303.374051][ T5686] usb 3-1: USB disconnect, device number 12 [ 304.091759][ T5927] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 304.282387][ T5927] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 304.285784][ T5927] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.285866][ T5927] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 304.285896][ T5927] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 304.417448][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.417481][ T5927] usb 5-1: Product: syz [ 304.417498][ T5927] usb 5-1: Manufacturer: syz [ 304.417515][ T5927] usb 5-1: SerialNumber: syz [ 304.476100][ T5927] sisusb 5-1:1.0: Invalid USB2VGA device [ 304.476141][ T5927] sisusb 5-1:1.0: probe with driver sisusb failed with error -22 [ 305.576225][ T7566] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 305.873953][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 306.033488][ T7574] overlayfs: missing 'lowerdir' [ 306.180386][ T5720] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 306.978377][ T5720] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 306.980204][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.985618][ T5934] usb 5-1: USB disconnect, device number 25 [ 307.122924][ T7579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.155849][ T7579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.198518][ T5720] usb 4-1: config 0 descriptor?? [ 307.222648][ T7579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.243886][ T7579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.300150][ T5927] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 307.302600][ T5720] cp210x 4-1:0.0: cp210x converter detected [ 307.303343][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.304041][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.405289][ T7579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.419369][ T7579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.447191][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 307.454955][ T7571] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 307.695656][ T5927] usb 3-1: device descriptor read/all, error -71 [ 307.800289][ T5720] usb 4-1: cp210x converter now attached to ttyUSB0 [ 307.949521][ T10] usb 4-1: USB disconnect, device number 25 [ 308.059843][ T7598] netlink: 248 bytes leftover after parsing attributes in process `syz.1.535'. [ 308.059886][ T7598] netlink: 52 bytes leftover after parsing attributes in process `syz.1.535'. [ 308.247925][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 308.385791][ T5585] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.444075][ T5585] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.477248][ T5585] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.500653][ T5585] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.510997][ T5585] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.812020][ T10] cp210x 4-1:0.0: device disconnected [ 308.816306][ T5927] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 308.987432][ T5927] usb 3-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 308.999240][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.999270][ T5927] usb 3-1: Product: syz [ 308.999285][ T5927] usb 3-1: Manufacturer: syz [ 308.999300][ T5927] usb 3-1: SerialNumber: syz [ 310.917868][ T5585] Bluetooth: hci5: command tx timeout [ 311.110534][ T5927] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 311.186477][ T5927] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 311.964670][ T5686] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 312.152740][ T5686] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 312.167928][ T5686] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.167990][ T5686] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 312.168016][ T5686] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 312.205431][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.542'. [ 312.227340][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.227372][ T5686] usb 4-1: Product: syz [ 312.227388][ T5686] usb 4-1: Manufacturer: syz [ 312.227404][ T5686] usb 4-1: SerialNumber: syz [ 312.370957][ T5686] sisusb 4-1:1.0: Invalid USB2VGA device [ 312.370987][ T5686] sisusb 4-1:1.0: probe with driver sisusb failed with error -22 [ 312.451242][ T5927] usb 3-1: USB disconnect, device number 14 [ 312.770786][ T5699] udevd[5699]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.902133][ T7636] netlink: 'syz.1.544': attribute type 2 has an invalid length. [ 312.925533][ T5585] Bluetooth: hci5: command tx timeout [ 314.010576][ T37] kauditd_printk_skb: 507 callbacks suppressed [ 314.010598][ T37] audit: type=1107 audit(1787512814.730:675): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='Œ¿¡Ï•qÝÓoQhZ«LÄv‚,¹a…ߎTÎu¦!Y*\ëB ' [ 314.303315][ T7654] netlink: 100 bytes leftover after parsing attributes in process `syz.4.549'. [ 314.393103][ T5592] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 314.451728][ T7654] could not allocate digest TFM handle [ 314.523342][ T5592] usb 3-1: device descriptor read/64, error -71 [ 314.690915][ T7663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.552'. [ 314.738544][ T5927] usb 4-1: USB disconnect, device number 26 [ 314.763048][ T5592] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 314.812577][ T7665] tipc: Enabling of bearer rejected, already enabled [ 314.892875][ T5592] usb 3-1: device descriptor read/64, error -71 [ 315.005489][ T5585] Bluetooth: hci5: command tx timeout [ 315.005939][ T5592] usb usb3-port1: attempt power cycle [ 315.096157][ T7678] syz.4.555 (7678): /proc/7677/oom_adj is deprecated, please use /proc/7677/oom_score_adj instead. [ 315.122119][ T7678] fuse: Unknown parameter 'rootm§¹-`vs*Ìaä0000È`fdÅðþœL  [ 315.122119][ T7678] ÿç†?0000-/[00000000000000000000' [ 315.323111][ T5927] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 315.367387][ T5592] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 315.493524][ T5592] usb 3-1: device descriptor read/8, error -71 [ 316.262331][ T5592] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 316.285464][ T5592] usb 3-1: device descriptor read/8, error -71 [ 316.429136][ T5592] usb usb3-port1: unable to enumerate USB device [ 316.593907][ T5927] usb 2-1: New USB device found, idVendor=1e2d, idProduct=00b7, bcdDevice= 1.00 [ 316.596500][ T5927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.596567][ T5927] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.596596][ T5927] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 316.601072][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 316.601103][ T5927] usb 2-1: Product: syz [ 316.601118][ T5927] usb 2-1: Manufacturer: syz [ 316.687171][ T5927] qmi_wwan 2-1:1.0: probe with driver qmi_wwan failed with error -22 [ 316.847180][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.847249][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.010037][ T5592] usb 2-1: USB disconnect, device number 15 [ 317.084318][ T5585] Bluetooth: hci5: command tx timeout [ 317.190819][ T7708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.564'. [ 317.297444][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.297650][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.297856][ T7599] bridge_slave_0: entered allmulticast mode [ 317.340140][ T7599] bridge_slave_0: entered promiscuous mode [ 317.383583][ T7709] tipc: Enabling of bearer rejected, already enabled [ 317.393341][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.393744][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.394340][ T7599] bridge_slave_1: entered allmulticast mode [ 317.426797][ T7599] bridge_slave_1: entered promiscuous mode [ 317.501825][ T5592] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 317.653843][ T5592] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 317.657595][ T5592] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.657819][ T5592] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 317.657847][ T5592] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 317.669494][ T5592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.669526][ T5592] usb 2-1: Product: syz [ 317.669542][ T5592] usb 2-1: Manufacturer: syz [ 317.669558][ T5592] usb 2-1: SerialNumber: syz [ 317.762928][ T5592] sisusb 2-1:1.0: Invalid USB2VGA device [ 317.762965][ T5592] sisusb 2-1:1.0: probe with driver sisusb failed with error -22 [ 317.857366][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 317.875039][ T7599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.880187][ T7599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.910729][ T7719] 9p: Bad value for 'wfdno' [ 320.391170][ T7732] FAULT_INJECTION: forcing a failure. [ 320.391170][ T7732] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 320.391259][ T7732] CPU: 0 UID: 0 PID: 7732 Comm: syz.2.570 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 320.391291][ T7732] Tainted: [L]=SOFTLOCKUP [ 320.391298][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.391320][ T7732] Call Trace: [ 320.391326][ T7732] [ 320.391333][ T7732] dump_stack_lvl+0xe8/0x150 [ 320.391362][ T7732] should_fail_ex+0x46b/0x600 [ 320.391390][ T7732] prepare_alloc_pages+0x223/0x650 [ 320.391411][ T7732] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 320.391433][ T7732] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 320.391454][ T7732] ? __pfx_policy_nodemask+0x10/0x10 [ 320.391472][ T7732] ? preempt_schedule_common+0x7f/0xd0 [ 320.391493][ T7732] ? preempt_schedule_thunk+0x16/0x40 [ 320.391515][ T7732] alloc_pages_mpol+0xd4/0x280 [ 320.391537][ T7732] alloc_pages_noprof+0xd2/0x2f0 [ 320.391558][ T7732] get_free_pages_noprof+0xf/0x80 [ 320.391576][ T7732] __kasan_populate_vmalloc+0x38/0x1c0 [ 320.391610][ T7732] alloc_vmap_area+0xd1a/0x1420 [ 320.391644][ T7732] ? __pfx_alloc_vmap_area+0x10/0x10 [ 320.391669][ T7732] ? __get_vm_area_node+0x155/0x2f0 [ 320.391696][ T7732] __get_vm_area_node+0x200/0x2f0 [ 320.391725][ T7732] __vmalloc_node_range_noprof+0x34e/0x1560 [ 320.391751][ T7732] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 320.391775][ T7732] ? __pfx___schedule+0x10/0x10 [ 320.391802][ T7732] ? irqentry_exit+0x218/0x910 [ 320.391824][ T7732] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 320.391856][ T7732] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 320.391873][ T7732] __vmalloc_noprof+0xd2/0x120 [ 320.391898][ T7732] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 320.391918][ T7732] bpf_prog_alloc_no_stats+0x47/0x560 [ 320.391950][ T7732] ? bpf_prog_alloc+0x2a/0x1a0 [ 320.391971][ T7732] bpf_prog_alloc+0x3c/0x1a0 [ 320.391991][ T7732] bpf_prog_load+0x7f8/0x1c20 [ 320.392018][ T7732] ? __pfx_bpf_prog_load+0x10/0x10 [ 320.392049][ T7732] ? __pfx_bpf_lsm_bpf+0x10/0x10 [ 320.392079][ T7732] __sys_bpf+0xd0d/0xd90 [ 320.392105][ T7732] ? __pfx___sys_bpf+0x10/0x10 [ 320.392155][ T7732] __x64_sys_bpf+0xba/0xd0 [ 320.392173][ T7732] do_syscall_64+0x166/0x520 [ 320.392194][ T7732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.392210][ T7732] ? clear_bhb_loop+0x70/0xc0 [ 320.392229][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.392245][ T7732] RIP: 0033:0x7fa61dafe0d9 [ 320.392259][ T7732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.392273][ T7732] RSP: 002b:00007fa61bd35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 320.392289][ T7732] RAX: ffffffffffffffda RBX: 00007fa61dd86090 RCX: 00007fa61dafe0d9 [ 320.392301][ T7732] RDX: 0000000000000037 RSI: 0000200000000340 RDI: 0000000000000005 [ 320.392312][ T7732] RBP: 00007fa61bd35090 R08: 0000000000000000 R09: 0000000000000000 [ 320.392321][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.392331][ T7732] R13: 00007fa61dd86128 R14: 00007fa61dd86090 R15: 00007ffd02578a38 [ 320.392354][ T7732] [ 320.393467][ T7732] syz.2.570: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 320.396418][ T7732] CPU: 0 UID: 0 PID: 7732 Comm: syz.2.570 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 320.396455][ T7732] Tainted: [L]=SOFTLOCKUP [ 320.396462][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.396478][ T7732] Call Trace: [ 320.396486][ T7732] [ 320.396492][ T7732] dump_stack_lvl+0xe8/0x150 [ 320.396520][ T7732] warn_alloc+0x24d/0x270 [ 320.396538][ T7732] ? lockdep_hardirqs_on+0x7b/0x110 [ 320.396560][ T7732] ? __pfx_warn_alloc+0x10/0x10 [ 320.396576][ T7732] ? kfree+0x1c5/0x6d0 [ 320.396609][ T7732] ? __get_vm_area_node+0x219/0x2f0 [ 320.396639][ T7732] __vmalloc_node_range_noprof+0x376/0x1560 [ 320.396670][ T7732] ? __pfx___schedule+0x10/0x10 [ 320.396697][ T7732] ? irqentry_exit+0x218/0x910 [ 320.396719][ T7732] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 320.396751][ T7732] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 320.396770][ T7732] __vmalloc_noprof+0xd2/0x120 [ 320.396794][ T7732] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 320.396815][ T7732] bpf_prog_alloc_no_stats+0x47/0x560 [ 320.396833][ T7732] ? bpf_prog_alloc+0x2a/0x1a0 [ 320.396853][ T7732] bpf_prog_alloc+0x3c/0x1a0 [ 320.396873][ T7732] bpf_prog_load+0x7f8/0x1c20 [ 320.396900][ T7732] ? __pfx_bpf_prog_load+0x10/0x10 [ 320.396931][ T7732] ? __pfx_bpf_lsm_bpf+0x10/0x10 [ 320.396961][ T7732] __sys_bpf+0xd0d/0xd90 [ 320.396985][ T7732] ? __pfx___sys_bpf+0x10/0x10 [ 320.397035][ T7732] __x64_sys_bpf+0xba/0xd0 [ 320.397053][ T7732] do_syscall_64+0x166/0x520 [ 320.397073][ T7732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.397089][ T7732] ? clear_bhb_loop+0x70/0xc0 [ 320.397108][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.397124][ T7732] RIP: 0033:0x7fa61dafe0d9 [ 320.397138][ T7732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.397152][ T7732] RSP: 002b:00007fa61bd35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 320.397168][ T7732] RAX: ffffffffffffffda RBX: 00007fa61dd86090 RCX: 00007fa61dafe0d9 [ 320.397179][ T7732] RDX: 0000000000000037 RSI: 0000200000000340 RDI: 0000000000000005 [ 320.397189][ T7732] RBP: 00007fa61bd35090 R08: 0000000000000000 R09: 0000000000000000 [ 320.397199][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.397208][ T7732] R13: 00007fa61dd86128 R14: 00007fa61dd86090 R15: 00007ffd02578a38 [ 320.397232][ T7732] [ 320.397316][ T7732] Mem-Info: [ 320.397502][ T7732] active_anon:186 inactive_anon:14565 isolated_anon:0 [ 320.397502][ T7732] active_file:23129 inactive_file:42293 isolated_file:0 [ 320.397502][ T7732] unevictable:0 dirty:173 writeback:0 [ 320.397502][ T7732] slab_reclaimable:11803 slab_unreclaimable:100696 [ 320.397502][ T7732] mapped:38831 shmem:8924 pagetables:1284 [ 320.397502][ T7732] sec_pagetables:0 bounce:0 [ 320.397502][ T7732] kernel_misc_reclaimable:0 [ 320.397502][ T7732] free:1297191 free_pcp:3955 free_cma:0 [ 320.397668][ T7732] Node 0 active_anon:744kB inactive_anon:58260kB active_file:92308kB inactive_file:169172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:155324kB dirty:692kB writeback:0kB shmem:35696kB kernel_stack:13372kB pagetables:4956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 320.397745][ T7732] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 320.397824][ T7732] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.397966][ T7732] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 320.398258][ T7732] Node 0 DMA32 free:1238772kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:744kB inactive_anon:58260kB active_file:92308kB inactive_file:169172kB unevictable:0kB writepending:692kB zspages:0kB present:3129332kB managed:2559328kB mlocked:0kB bounce:0kB free_pcp:15812kB local_pcp:1996kB free_cma:0kB [ 320.398403][ T7732] lowmem_reserve[]: 0 0 1 1 1 [ 320.398728][ T7732] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1832kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 320.398868][ T7732] lowmem_reserve[]: 0 0 0 0 0 [ 320.399094][ T7732] Node 1 Normal free:3934632kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.399181][ T7732] lowmem_reserve[]: 0 0 0 0 0 [ 320.399377][ T7732] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 320.400432][ T7732] Node 0 DMA32: 2*4kB (UM) 994*8kB (UM) 385*16kB (UM) 434*32kB (UM) 363*64kB (UME) 203*128kB (UME) 141*256kB (UME) 54*512kB (UME) 22*1024kB (UM) 13*2048kB (UME) 256*4096kB (UM) = 1238696kB [ 320.401634][ T7732] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 320.402538][ T7732] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 4*16kB (UM) 8*32kB (UM) 9*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 959*4096kB (M) = 3934632kB [ 320.403875][ T7732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.403917][ T7732] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 320.403958][ T7732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.404000][ T7732] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 320.404041][ T7732] 74343 total pagecache pages [ 320.404146][ T7732] 0 pages in swap cache [ 320.404209][ T7732] Free swap = 124996kB [ 320.404240][ T7732] Total swap = 124996kB [ 320.404309][ T7732] 2097051 pages RAM [ 320.404339][ T7732] 0 pages HighMem/MovableOnly [ 320.404377][ T7732] 425146 pages reserved [ 320.404408][ T7732] 0 pages cma reserved [ 322.643732][ T7599] team0: Port device team_slave_0 added [ 322.679546][ T7599] team0: Port device team_slave_1 added [ 322.957479][ T5592] usb 2-1: USB disconnect, device number 16 [ 322.965483][ T7738] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 323.270092][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.270111][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.270141][ T7599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.272651][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.272666][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.272694][ T7599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.349225][ T7599] hsr_slave_0: entered promiscuous mode [ 323.351331][ T7599] hsr_slave_1: entered promiscuous mode [ 323.352308][ T7599] debugfs: 'hsr0' already exists in 'hsr' [ 323.352333][ T7599] Cannot create hsr debugfs directory [ 323.828262][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 323.927212][ T7754] FAULT_INJECTION: forcing a failure. [ 323.927212][ T7754] name failslab, interval 1, probability 0, space 0, times 0 [ 323.927253][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.1.576 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 323.927283][ T7754] Tainted: [L]=SOFTLOCKUP [ 323.927291][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.927305][ T7754] Call Trace: [ 323.927314][ T7754] [ 323.927324][ T7754] dump_stack_lvl+0xe8/0x150 [ 323.927361][ T7754] should_fail_ex+0x46b/0x600 [ 323.927403][ T7754] should_failslab+0xa8/0x100 [ 323.927433][ T7754] __kmalloc_noprof+0xfe/0x780 [ 323.927457][ T7754] ? tomoyo_encode+0x2ad/0x570 [ 323.927481][ T7754] ? tomoyo_encode+0x2ad/0x570 [ 323.927512][ T7754] tomoyo_encode+0x2ad/0x570 [ 323.927544][ T7754] tomoyo_realpath_from_path+0x5fa/0x640 [ 323.927582][ T7754] ? tomoyo_path_number_perm+0x219/0x5f0 [ 323.927617][ T7754] tomoyo_path_number_perm+0x246/0x5f0 [ 323.927654][ T7754] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 323.927688][ T7754] ? __lock_acquire+0x683/0x2ce0 [ 323.927730][ T7754] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 323.927758][ T7754] ? hook_file_ioctl+0x1f5/0x610 [ 323.927803][ T7754] ? __fget_files+0x2a/0x420 [ 323.927832][ T7754] ? __fget_files+0x2a/0x420 [ 323.927858][ T7754] ? __fget_files+0x3a8/0x420 [ 323.927883][ T7754] ? __fget_files+0x2a/0x420 [ 323.927913][ T7754] security_file_ioctl+0xc3/0x2a0 [ 323.927949][ T7754] __se_sys_ioctl+0x47/0x170 [ 323.927972][ T7754] do_syscall_64+0x166/0x520 [ 323.927999][ T7754] ? trace_irq_disable+0x3b/0x140 [ 323.928021][ T7754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.928043][ T7754] ? clear_bhb_loop+0x70/0xc0 [ 323.928069][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.928091][ T7754] RIP: 0033:0x7fd237a7e0d9 [ 323.928111][ T7754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.928130][ T7754] RSP: 002b:00007fd235c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.928153][ T7754] RAX: ffffffffffffffda RBX: 00007fd237d06180 RCX: 00007fd237a7e0d9 [ 323.928178][ T7754] RDX: 0000200000001e80 RSI: 000000004188aec6 RDI: 0000000000000004 [ 323.928193][ T7754] RBP: 00007fd235c94090 R08: 0000000000000000 R09: 0000000000000000 [ 323.928207][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.928220][ T7754] R13: 00007fd237d06218 R14: 00007fd237d06180 R15: 00007ffd3885fc48 [ 323.928254][ T7754] [ 324.167243][ T7754] ERROR: Out of memory at tomoyo_realpath_from_path. [ 324.383232][ T7752] tipc: Enabling of bearer rejected, already enabled [ 324.435422][ T7761] overlayfs: missing 'lowerdir' [ 324.729811][ T7767] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 324.729832][ T7767] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 324.755910][ T7767] vhci_hcd vhci_hcd.0: Device attached [ 324.759295][ T7769] vhci_hcd: connection closed [ 324.795564][ T6312] vhci_hcd vhci_hcd.2: stop threads [ 324.795596][ T6312] vhci_hcd vhci_hcd.2: release socket [ 324.795639][ T6312] vhci_hcd vhci_hcd.2: disconnect device [ 325.289668][ T5927] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 325.391113][ T31] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 325.439994][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 325.445602][ T5927] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.448926][ T5927] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 325.448960][ T5927] usb 2-1: config 1 interface 0 has no altsetting 0 [ 325.492457][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.492487][ T5927] usb 2-1: Product: syz [ 325.492502][ T5927] usb 2-1: Manufacturer: syz [ 325.492516][ T5927] usb 2-1: SerialNumber: syz [ 325.545473][ T7599] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 325.563706][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 325.563772][ T31] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 325.569224][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.569873][ T31] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 325.608754][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.608785][ T31] usb 5-1: Product: syz [ 325.608801][ T31] usb 5-1: Manufacturer: syz [ 325.608817][ T31] usb 5-1: SerialNumber: syz [ 325.646467][ T7775] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 325.685992][ T7599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.697827][ T31] usb 5-1: config 0 descriptor?? [ 325.711542][ T7599] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 325.744355][ T7599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.745553][ T7599] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 325.884757][ T7599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.886323][ T7599] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 325.958166][ T5927] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 325.967858][ T5592] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 325.986838][ T7599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.009675][ T5927] usb 2-1: USB disconnect, device number 17 [ 326.133405][ T5592] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 326.153900][ T36] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 326.163575][ T5592] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 326.163604][ T5592] usb 3-1: Product: syz [ 326.163619][ T5592] usb 3-1: SerialNumber: syz [ 326.213272][ T5592] usb 3-1: config 0 descriptor?? [ 326.392922][ T36] usb 4-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 326.410173][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.421778][ T5927] usb 5-1: USB disconnect, device number 26 [ 326.448032][ T5592] hso 3-1:0.0: Failed to find BULK eps [ 326.473220][ T36] usb 4-1: config 0 descriptor?? [ 326.519960][ T7599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.616398][ T7599] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.617602][ T36] gspca_main: spca505-2.14.0 probing 0733:0430 [ 326.662084][ T10] usb 3-1: USB disconnect, device number 19 [ 326.715795][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.715945][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.806855][ T36] gspca_spca505: reg write: error -71 [ 326.806955][ T36] spca505 4-1:0.0: probe with driver spca505 failed with error -5 [ 326.852463][ T36] usb 4-1: USB disconnect, device number 27 [ 326.897024][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.897160][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.344872][ T7799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.588'. [ 327.360738][ T7801] tipc: Enabling of bearer rejected, already enabled [ 327.503553][ T7799] tipc: Enabling of bearer rejected, already enabled [ 327.748748][ T7809] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 327.832861][ T7809] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 327.833010][ T7809] vhci_hcd vhci_hcd.0: Device attached [ 327.856558][ T7810] vhci_hcd: connection closed [ 327.868894][ T1184] vhci_hcd vhci_hcd.4: stop threads [ 327.868922][ T1184] vhci_hcd vhci_hcd.4: release socket [ 327.868964][ T1184] vhci_hcd vhci_hcd.4: disconnect device [ 328.054024][ T7822] FAULT_INJECTION: forcing a failure. [ 328.054024][ T7822] name failslab, interval 1, probability 0, space 0, times 0 [ 328.054064][ T7822] CPU: 1 UID: 0 PID: 7822 Comm: syz.2.592 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 328.054094][ T7822] Tainted: [L]=SOFTLOCKUP [ 328.054102][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.054115][ T7822] Call Trace: [ 328.054123][ T7822] [ 328.054133][ T7822] dump_stack_lvl+0xe8/0x150 [ 328.054171][ T7822] should_fail_ex+0x46b/0x600 [ 328.054212][ T7822] should_failslab+0xa8/0x100 [ 328.054241][ T7822] __kmalloc_noprof+0xfe/0x780 [ 328.054265][ T7822] ? stack_depot_save_flags+0x33/0x7f0 [ 328.054300][ T7822] ? fib6_info_alloc+0x30/0xf0 [ 328.054331][ T7822] ? fib6_info_alloc+0x30/0xf0 [ 328.054370][ T7822] fib6_info_alloc+0x30/0xf0 [ 328.054402][ T7822] ip6_route_info_create+0x149/0x890 [ 328.054431][ T7822] ip6_route_add+0x49/0x1d0 [ 328.054463][ T7822] ipv6_route_ioctl+0x393/0x4e0 [ 328.054494][ T7822] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 328.054549][ T7822] inet6_ioctl+0x246/0x2e0 [ 328.054578][ T7822] ? __pfx_inet6_ioctl+0x10/0x10 [ 328.054606][ T7822] ? tomoyo_path_number_perm+0x219/0x5f0 [ 328.054650][ T7822] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 328.054681][ T7822] sock_do_ioctl+0x101/0x320 [ 328.054713][ T7822] ? __pfx_sock_do_ioctl+0x10/0x10 [ 328.054739][ T7822] ? hook_file_ioctl+0x1f5/0x610 [ 328.054778][ T7822] ? __asan_memset+0x22/0x50 [ 328.054811][ T7822] ? smack_file_ioctl+0x265/0x370 [ 328.054849][ T7822] sock_ioctl+0x57d/0x7f0 [ 328.054879][ T7822] ? __pfx_sock_ioctl+0x10/0x10 [ 328.054908][ T7822] ? __fget_files+0x2a/0x420 [ 328.054936][ T7822] ? __fget_files+0x3a8/0x420 [ 328.054964][ T7822] ? __fget_files+0x2a/0x420 [ 328.054997][ T7822] ? bpf_lsm_file_ioctl+0x9/0x20 [ 328.055028][ T7822] ? __pfx_sock_ioctl+0x10/0x10 [ 328.055055][ T7822] __se_sys_ioctl+0xff/0x170 [ 328.055080][ T7822] do_syscall_64+0x166/0x520 [ 328.055108][ T7822] ? trace_irq_disable+0x3b/0x140 [ 328.055131][ T7822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.055155][ T7822] ? clear_bhb_loop+0x70/0xc0 [ 328.055182][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.055205][ T7822] RIP: 0033:0x7fa61dafe0d9 [ 328.055229][ T7822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.055249][ T7822] RSP: 002b:00007fa61bd35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.055273][ T7822] RAX: ffffffffffffffda RBX: 00007fa61dd86090 RCX: 00007fa61dafe0d9 [ 328.055289][ T7822] RDX: 0000200000000980 RSI: 000000000000890b RDI: 0000000000000003 [ 328.055304][ T7822] RBP: 00007fa61bd35090 R08: 0000000000000000 R09: 0000000000000000 [ 328.055317][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.055331][ T7822] R13: 00007fa61dd86128 R14: 00007fa61dd86090 R15: 00007ffd02578a38 [ 328.055365][ T7822] [ 328.470526][ T7827] jffs2: notice: (7827) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 328.971585][ T7846] netlink: 28 bytes leftover after parsing attributes in process `syz.4.598'. [ 329.094869][ T7833] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 329.258077][ T7853] tipc: Enabling of bearer rejected, already enabled [ 329.385110][ T7599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.509205][ T7857] netlink: 44 bytes leftover after parsing attributes in process `syz.1.602'. [ 329.679826][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.603'. [ 329.685415][ T7863] tipc: Enabling of bearer rejected, already enabled [ 329.858542][ T5686] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 329.991495][ T5686] usb 4-1: device descriptor read/64, error -71 [ 330.236100][ T5686] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 330.390491][ T5686] usb 4-1: device descriptor read/64, error -71 [ 330.467228][ T7599] veth0_vlan: entered promiscuous mode [ 330.510045][ T5686] usb usb4-port1: attempt power cycle [ 330.685198][ T7599] veth1_vlan: entered promiscuous mode [ 330.853093][ T7599] veth0_macvtap: entered promiscuous mode [ 330.875377][ T7599] veth1_macvtap: entered promiscuous mode [ 330.908394][ T5686] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 330.918177][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.935344][ T5686] usb 4-1: device descriptor read/8, error -71 [ 330.956239][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.188849][ T5686] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 331.222000][ T5686] usb 4-1: device descriptor read/8, error -71 [ 331.356990][ T5686] usb usb4-port1: unable to enumerate USB device [ 331.720936][ T6312] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.722013][ T6312] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.722418][ T6312] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.722699][ T6312] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.937832][ T7890] tipc: Enabling of bearer rejected, already enabled [ 331.970239][ T7200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.970261][ T7200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.567328][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.613'. [ 332.693099][ T7901] tipc: Enabling of bearer rejected, already enabled [ 332.693204][ T6312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.693222][ T6312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.223789][ T7914] tipc: Enabling of bearer rejected, already enabled [ 333.830017][ T5590] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 333.957994][ T5590] usb 4-1: device descriptor read/64, error -71 [ 334.218184][ T5590] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 334.278121][ T5601] Bluetooth: hci4: command 0x0406 tx timeout [ 334.357903][ T5590] usb 4-1: device descriptor read/64, error -71 [ 334.468371][ T5590] usb usb4-port1: attempt power cycle [ 334.657384][ T7954] FAULT_INJECTION: forcing a failure. [ 334.657384][ T7954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 334.657419][ T7954] CPU: 0 UID: 0 PID: 7954 Comm: syz.2.640 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 334.657445][ T7954] Tainted: [L]=SOFTLOCKUP [ 334.657451][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.657463][ T7954] Call Trace: [ 334.657469][ T7954] [ 334.657477][ T7954] dump_stack_lvl+0xe8/0x150 [ 334.657508][ T7954] should_fail_ex+0x46b/0x600 [ 334.657542][ T7954] prepare_alloc_pages+0x223/0x650 [ 334.657568][ T7954] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 334.657592][ T7954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 334.657614][ T7954] ? __alloc_frozen_pages_noprof+0x2b7/0x5c0 [ 334.657641][ T7954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 334.657671][ T7954] ? __pfx_policy_nodemask+0x10/0x10 [ 334.657706][ T7954] __alloc_pages_noprof+0x10/0x100 [ 334.657731][ T7954] alloc_pages_bulk_noprof+0x683/0x890 [ 334.657758][ T7954] ? alloc_pages_mpol+0x11b/0x280 [ 334.657789][ T7954] ? alloc_pages_noprof+0x161/0x2f0 [ 334.657820][ T7954] __kasan_populate_vmalloc+0xb7/0x1c0 [ 334.657857][ T7954] ? rt_spin_unlock+0x165/0x200 [ 334.657880][ T7954] alloc_vmap_area+0xd1a/0x1420 [ 334.657927][ T7954] ? __pfx_alloc_vmap_area+0x10/0x10 [ 334.657964][ T7954] ? __get_vm_area_node+0x155/0x2f0 [ 334.658001][ T7954] __get_vm_area_node+0x200/0x2f0 [ 334.658042][ T7954] __vmalloc_node_range_noprof+0x34e/0x1560 [ 334.658078][ T7954] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 334.658119][ T7954] ? __lock_acquire+0x683/0x2ce0 [ 334.658152][ T7954] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 334.658198][ T7954] ? kernel_text_address+0xa5/0xe0 [ 334.658226][ T7954] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 334.658252][ T7954] __vmalloc_noprof+0xd2/0x120 [ 334.658285][ T7954] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 334.658316][ T7954] bpf_prog_alloc_no_stats+0x47/0x560 [ 334.658342][ T7954] ? bpf_prog_alloc+0x2a/0x1a0 [ 334.658371][ T7954] bpf_prog_alloc+0x3c/0x1a0 [ 334.658401][ T7954] bpf_prog_load+0x7f8/0x1c20 [ 334.658441][ T7954] ? __pfx_bpf_prog_load+0x10/0x10 [ 334.658492][ T7954] __sys_bpf+0xd0d/0xd90 [ 334.658527][ T7954] ? __pfx___sys_bpf+0x10/0x10 [ 334.658555][ T7954] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 334.658589][ T7954] ? rt_mutex_slowunlock+0x219/0x460 [ 334.658631][ T7954] ? ksys_write+0x248/0x270 [ 334.658666][ T7954] ? __pfx_ksys_write+0x10/0x10 [ 334.658703][ T7954] __x64_sys_bpf+0xba/0xd0 [ 334.658729][ T7954] do_syscall_64+0x166/0x520 [ 334.658758][ T7954] ? trace_irq_disable+0x3b/0x140 [ 334.658781][ T7954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.658805][ T7954] ? clear_bhb_loop+0x70/0xc0 [ 334.658833][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.658857][ T7954] RIP: 0033:0x7fa61dafe0d9 [ 334.658878][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.658897][ T7954] RSP: 002b:00007fa61bd56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.658921][ T7954] RAX: ffffffffffffffda RBX: 00007fa61dd85fa0 RCX: 00007fa61dafe0d9 [ 334.658937][ T7954] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 334.658951][ T7954] RBP: 00007fa61bd56090 R08: 0000000000000000 R09: 0000000000000000 [ 334.658964][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.658977][ T7954] R13: 00007fa61dd86038 R14: 00007fa61dd85fa0 R15: 00007ffd02578a38 [ 334.659011][ T7954] [ 334.957844][ T5590] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 334.983600][ T5590] usb 4-1: device descriptor read/8, error -71 [ 335.004874][ T7954] syz.2.640: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 335.091917][ T7954] CPU: 1 UID: 0 PID: 7954 Comm: syz.2.640 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 335.091944][ T7954] Tainted: [L]=SOFTLOCKUP [ 335.091949][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.091960][ T7954] Call Trace: [ 335.091966][ T7954] [ 335.091974][ T7954] dump_stack_lvl+0xe8/0x150 [ 335.092005][ T7954] warn_alloc+0x24d/0x270 [ 335.092025][ T7954] ? lockdep_hardirqs_on+0x7b/0x110 [ 335.092050][ T7954] ? __pfx_warn_alloc+0x10/0x10 [ 335.092067][ T7954] ? kfree+0x1c5/0x6d0 [ 335.092098][ T7954] ? __get_vm_area_node+0x219/0x2f0 [ 335.092131][ T7954] __vmalloc_node_range_noprof+0x376/0x1560 [ 335.092176][ T7954] ? __lock_acquire+0x683/0x2ce0 [ 335.092207][ T7954] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 335.092234][ T7954] ? kernel_text_address+0xa5/0xe0 [ 335.092256][ T7954] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 335.092275][ T7954] __vmalloc_noprof+0xd2/0x120 [ 335.092302][ T7954] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 335.092326][ T7954] bpf_prog_alloc_no_stats+0x47/0x560 [ 335.092346][ T7954] ? bpf_prog_alloc+0x2a/0x1a0 [ 335.092370][ T7954] bpf_prog_alloc+0x3c/0x1a0 [ 335.092399][ T7954] bpf_prog_load+0x7f8/0x1c20 [ 335.092432][ T7954] ? __pfx_bpf_prog_load+0x10/0x10 [ 335.092476][ T7954] __sys_bpf+0xd0d/0xd90 [ 335.092507][ T7954] ? __pfx___sys_bpf+0x10/0x10 [ 335.092531][ T7954] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 335.092563][ T7954] ? rt_mutex_slowunlock+0x219/0x460 [ 335.092601][ T7954] ? ksys_write+0x248/0x270 [ 335.092631][ T7954] ? __pfx_ksys_write+0x10/0x10 [ 335.092673][ T7954] __x64_sys_bpf+0xba/0xd0 [ 335.092696][ T7954] do_syscall_64+0x166/0x520 [ 335.092720][ T7954] ? trace_irq_disable+0x3b/0x140 [ 335.092743][ T7954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.092762][ T7954] ? clear_bhb_loop+0x70/0xc0 [ 335.092782][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.092799][ T7954] RIP: 0033:0x7fa61dafe0d9 [ 335.092815][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.092830][ T7954] RSP: 002b:00007fa61bd56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.092848][ T7954] RAX: ffffffffffffffda RBX: 00007fa61dd85fa0 RCX: 00007fa61dafe0d9 [ 335.092860][ T7954] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 335.092871][ T7954] RBP: 00007fa61bd56090 R08: 0000000000000000 R09: 0000000000000000 [ 335.092881][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.092891][ T7954] R13: 00007fa61dd86038 R14: 00007fa61dd85fa0 R15: 00007ffd02578a38 [ 335.092917][ T7954] [ 335.095795][ T7954] Mem-Info: [ 335.095809][ T7954] active_anon:186 inactive_anon:9119 isolated_anon:0 [ 335.095809][ T7954] active_file:23137 inactive_file:42376 isolated_file:0 [ 335.095809][ T7954] unevictable:0 dirty:349 writeback:0 [ 335.095809][ T7954] slab_reclaimable:11929 slab_unreclaimable:102880 [ 335.095809][ T7954] mapped:34966 shmem:3381 pagetables:1273 [ 335.095809][ T7954] sec_pagetables:0 bounce:0 [ 335.095809][ T7954] kernel_misc_reclaimable:0 [ 335.095809][ T7954] free:1299941 free_pcp:4060 free_cma:0 [ 335.095857][ T7954] Node 0 active_anon:744kB inactive_anon:36476kB active_file:92340kB inactive_file:169504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139864kB dirty:1396kB writeback:0kB shmem:13524kB kernel_stack:13844kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 335.095904][ T7954] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 335.095946][ T7954] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.096001][ T7954] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 335.096033][ T7954] Node 0 DMA32 free:1249788kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:744kB inactive_anon:36476kB active_file:92340kB inactive_file:169504kB unevictable:0kB writepending:1396kB zspages:0kB present:3129332kB managed:2559328kB mlocked:0kB bounce:0kB free_pcp:16232kB local_pcp:12796kB free_cma:0kB [ 335.096091][ T7954] lowmem_reserve[]: 0 0 1 1 1 [ 335.096125][ T7954] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1832kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 335.096176][ T7954] lowmem_reserve[]: 0 0 0 0 0 [ 335.096203][ T7954] Node 1 Normal free:3934616kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.096253][ T7954] lowmem_reserve[]: 0 0 0 0 0 [ 335.096281][ T7954] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 335.096392][ T7954] Node 0 DMA32: 3*4kB (UME) 534*8kB (UE) 666*16kB (UME) 709*32kB (UM) 414*64kB (UME) 169*128kB (UME) 141*256kB (UME) 57*512kB (UME) 23*1024kB (UM) 13*2048kB (UME) 256*4096kB (UM) = 1249788kB [ 335.096566][ T7954] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 335.096695][ T7954] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 3*16kB (UM) 8*32kB (UM) 9*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 959*4096kB (M) = 3934616kB [ 335.096825][ T7954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.096839][ T7954] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.096851][ T7954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.096865][ T7954] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.096878][ T7954] 68890 total pagecache pages [ 335.096884][ T7954] 0 pages in swap cache [ 335.096890][ T7954] Free swap = 124996kB [ 335.096897][ T7954] Total swap = 124996kB [ 335.096903][ T7954] 2097051 pages RAM [ 335.096909][ T7954] 0 pages HighMem/MovableOnly [ 335.096915][ T7954] 425146 pages reserved [ 335.096921][ T7954] 0 pages cma reserved [ 335.897739][ T5590] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 335.920885][ T5590] usb 4-1: device descriptor read/8, error -71 [ 336.039139][ T5590] usb usb4-port1: unable to enumerate USB device [ 336.176176][ T7964] netlink: 16 bytes leftover after parsing attributes in process `syz.5.642'. [ 336.340529][ T7965] tipc: Started in network mode [ 336.340561][ T7965] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 336.340728][ T7965] tipc: Enabled bearer , priority 10 [ 339.826619][ T5590] tipc: Node number set to 10136234 [ 340.055318][ T7985] netlink: 32 bytes leftover after parsing attributes in process `syz.5.646'. [ 342.191264][ T8009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.657'. [ 342.218153][ T8009] tipc: Enabling of bearer rejected, already enabled [ 343.352684][ T8042] tipc: Enabling of bearer rejected, already enabled [ 346.052121][ T8071] FAULT_INJECTION: forcing a failure. [ 346.052121][ T8071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.052169][ T8071] CPU: 0 UID: 0 PID: 8071 Comm: syz.2.680 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.052200][ T8071] Tainted: [L]=SOFTLOCKUP [ 346.052207][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.052221][ T8071] Call Trace: [ 346.052230][ T8071] [ 346.052240][ T8071] dump_stack_lvl+0xe8/0x150 [ 346.052278][ T8071] should_fail_ex+0x46b/0x600 [ 346.052319][ T8071] _copy_from_user+0x2d/0xb0 [ 346.052344][ T8071] tiocswinsz+0x8e/0x160 [ 346.052373][ T8071] ? __pfx_tiocswinsz+0x10/0x10 [ 346.052407][ T8071] ? __fget_files+0x2a/0x420 [ 346.052436][ T8071] ? __fget_files+0x3a8/0x420 [ 346.052463][ T8071] ? __fget_files+0x2a/0x420 [ 346.052503][ T8071] tty_ioctl+0x228/0xde0 [ 346.052531][ T8071] ? __pfx_tty_ioctl+0x10/0x10 [ 346.052561][ T8071] __se_sys_ioctl+0xff/0x170 [ 346.052585][ T8071] do_syscall_64+0x166/0x520 [ 346.052615][ T8071] ? trace_irq_disable+0x3b/0x140 [ 346.052638][ T8071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.052661][ T8071] ? clear_bhb_loop+0x70/0xc0 [ 346.052689][ T8071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.052713][ T8071] RIP: 0033:0x7fa61dafe0d9 [ 346.052734][ T8071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.052755][ T8071] RSP: 002b:00007fa61bd35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.052777][ T8071] RAX: ffffffffffffffda RBX: 00007fa61dd86090 RCX: 00007fa61dafe0d9 [ 346.052793][ T8071] RDX: 0000200000000040 RSI: 0000000000005414 RDI: 0000000000000007 [ 346.052807][ T8071] RBP: 00007fa61bd35090 R08: 0000000000000000 R09: 0000000000000000 [ 346.052821][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.052833][ T8071] R13: 00007fa61dd86128 R14: 00007fa61dd86090 R15: 00007ffd02578a38 [ 346.052868][ T8071] [ 346.313443][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.682'. [ 346.352706][ T8077] tipc: Enabling of bearer rejected, already enabled [ 346.709723][ T8082] netlink: 'syz.3.684': attribute type 10 has an invalid length. [ 346.858766][ T8082] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 346.968343][ T8086] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 347.276820][ T5590] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 347.427776][ T5590] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 347.458750][ T5590] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.458781][ T5590] usb 6-1: Product: syz [ 347.458808][ T5590] usb 6-1: Manufacturer: syz [ 347.458819][ T5590] usb 6-1: SerialNumber: syz [ 347.493226][ T5590] usb 6-1: config 0 descriptor?? [ 347.528367][ T5590] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 348.512642][ T5590] gspca_sunplus: reg_w_riv err -71 [ 348.512826][ T5590] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 348.544732][ T5590] usb 6-1: USB disconnect, device number 2 [ 349.837669][ T8135] FAULT_INJECTION: forcing a failure. [ 349.837669][ T8135] name failslab, interval 1, probability 0, space 0, times 0 [ 349.837710][ T8135] CPU: 1 UID: 0 PID: 8135 Comm: syz.5.703 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 349.837741][ T8135] Tainted: [L]=SOFTLOCKUP [ 349.837749][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.837762][ T8135] Call Trace: [ 349.837847][ T8135] [ 349.837891][ T8135] dump_stack_lvl+0xe8/0x150 [ 349.838049][ T8135] should_fail_ex+0x46b/0x600 [ 349.838126][ T8135] should_failslab+0xa8/0x100 [ 349.838191][ T8135] __kmalloc_cache_noprof+0xa0/0x6b0 [ 349.838227][ T8135] ? vgem_gem_create_object+0x4c/0xb0 [ 349.838341][ T8135] ? vgem_gem_create_object+0x4c/0xb0 [ 349.838378][ T8135] vgem_gem_create_object+0x4c/0xb0 [ 349.838412][ T8135] __drm_gem_shmem_create+0x7e/0x2e0 [ 349.838502][ T8135] drm_gem_shmem_dumb_create+0x72/0x120 [ 349.838528][ T8135] drm_mode_create_dumb_ioctl+0x214/0x2a0 [ 349.838597][ T8135] drm_ioctl_kernel+0x2e2/0x3b0 [ 349.838680][ T8135] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 349.838707][ T8135] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 349.838752][ T8135] drm_ioctl+0x713/0xba0 [ 349.838794][ T8135] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 349.838821][ T8135] ? __pfx_drm_ioctl+0x10/0x10 [ 349.838868][ T8135] ? __fget_files+0x2a/0x420 [ 349.838913][ T8135] ? bpf_lsm_file_ioctl+0x9/0x20 [ 349.838979][ T8135] ? __pfx_drm_ioctl+0x10/0x10 [ 349.839013][ T8135] __se_sys_ioctl+0xff/0x170 [ 349.839037][ T8135] do_syscall_64+0x166/0x520 [ 349.839143][ T8135] ? trace_irq_disable+0x3b/0x140 [ 349.839177][ T8135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.839218][ T8135] ? clear_bhb_loop+0x70/0xc0 [ 349.839246][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.839269][ T8135] RIP: 0033:0x7fddec45e0d9 [ 349.839318][ T8135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.839336][ T8135] RSP: 002b:00007fddea6b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.839384][ T8135] RAX: ffffffffffffffda RBX: 00007fddec6e5fa0 RCX: 00007fddec45e0d9 [ 349.839400][ T8135] RDX: 00002000000001c0 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 349.839414][ T8135] RBP: 00007fddea6b6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.839427][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.839439][ T8135] R13: 00007fddec6e6038 R14: 00007fddec6e5fa0 R15: 00007ffd1a742cd8 [ 349.839470][ T8135] [ 351.285972][ T8162] FAULT_INJECTION: forcing a failure. [ 351.285972][ T8162] name failslab, interval 1, probability 0, space 0, times 0 [ 351.286003][ T8162] CPU: 0 UID: 0 PID: 8162 Comm: syz.5.717 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 351.286026][ T8162] Tainted: [L]=SOFTLOCKUP [ 351.286031][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.286041][ T8162] Call Trace: [ 351.286047][ T8162] [ 351.286053][ T8162] dump_stack_lvl+0xe8/0x150 [ 351.286082][ T8162] should_fail_ex+0x46b/0x600 [ 351.286111][ T8162] should_failslab+0xa8/0x100 [ 351.286132][ T8162] kmem_cache_alloc_noprof+0xa4/0x660 [ 351.286158][ T8162] ? __pmd_alloc+0xa4/0x5e0 [ 351.286171][ T8162] ? __pmd_alloc+0xa4/0x5e0 [ 351.286189][ T8162] __pmd_alloc+0xa4/0x5e0 [ 351.286207][ T8162] handle_mm_fault+0x1fc2/0x2690 [ 351.286234][ T8162] ? lock_vma_under_rcu+0x1d1/0x500 [ 351.286252][ T8162] ? handle_mm_fault+0xed/0x2690 [ 351.286284][ T8162] ? __pfx_handle_mm_fault+0x10/0x10 [ 351.286307][ T8162] ? lock_vma_under_rcu+0x45a/0x500 [ 351.286324][ T8162] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 351.286492][ T8162] do_user_addr_fault+0xa4f/0x1340 [ 351.286560][ T8162] ? trace_page_fault_user+0x84/0x1e0 [ 351.286599][ T8162] exc_page_fault+0x6a/0xc0 [ 351.286642][ T8162] asm_exc_page_fault+0x26/0x30 [ 351.286657][ T8162] RIP: 0033:0x7fddec3171b6 [ 351.286672][ T8162] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 5c da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 351.286685][ T8162] RSP: 002b:00007fddea6b5f60 EFLAGS: 00010206 [ 351.286700][ T8162] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 351.286711][ T8162] RDX: 00000000000025f5 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 351.286722][ T8162] RBP: 00007fddec514660 R08: 0000000000000000 R09: ffffffffffffffff [ 351.286732][ T8162] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 351.286743][ T8162] R13: 0000200000c00000 R14: 00007fddec6e5fa0 R15: 0000000000000000 [ 351.286766][ T8162] [ 351.380558][ T8162] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 352.354731][ T8181] tmpfs: Unknown parameter 'obj_role' [ 353.468348][ T5590] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 354.205008][ T5590] usb 2-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df [ 354.232524][ T5590] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.232599][ T5590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.291442][ T5590] usb 2-1: config 0 descriptor?? [ 354.391753][ T5590] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 354.728260][ T8189] openvswitch: netlink: Duplicate or invalid key (type 0). [ 354.780905][ T8189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.900027][ T37] audit: type=1326 audit(1787512855.692:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8186 comm="syz.5.726" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fddec45e0d9 code=0x0 [ 355.487731][ T5590] pwc: send_video_command error -71 [ 355.487855][ T5590] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 355.488200][ T5590] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 355.548627][ T5590] usb 2-1: USB disconnect, device number 18 [ 355.697078][ T8205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.732'. [ 355.745536][ T8205] tipc: Enabling of bearer rejected, already enabled [ 355.844299][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 356.680523][ T8226] FAULT_INJECTION: forcing a failure. [ 356.680523][ T8226] name failslab, interval 1, probability 0, space 0, times 0 [ 356.680568][ T8226] CPU: 0 UID: 0 PID: 8226 Comm: syz.1.736 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 356.680599][ T8226] Tainted: [L]=SOFTLOCKUP [ 356.680606][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.680621][ T8226] Call Trace: [ 356.680629][ T8226] [ 356.680638][ T8226] dump_stack_lvl+0xe8/0x150 [ 356.680678][ T8226] should_fail_ex+0x46b/0x600 [ 356.680719][ T8226] should_failslab+0xa8/0x100 [ 356.680747][ T8226] kmem_cache_alloc_noprof+0xa4/0x660 [ 356.680785][ T8226] ? do_getname+0x2e/0x250 [ 356.680808][ T8226] ? do_getname+0x2e/0x250 [ 356.680839][ T8226] do_getname+0x2e/0x250 [ 356.680863][ T8226] ? getname_flags+0x11/0x20 [ 356.680889][ T8226] __se_sys_acct+0xde/0x9e0 [ 356.680992][ T8226] ? __pfx___se_sys_acct+0x10/0x10 [ 356.681039][ T8226] do_syscall_64+0x166/0x520 [ 356.681067][ T8226] ? trace_irq_disable+0x3b/0x140 [ 356.681094][ T8226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.681119][ T8226] ? clear_bhb_loop+0x70/0xc0 [ 356.681148][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.681171][ T8226] RIP: 0033:0x7fd237a7e0d9 [ 356.681192][ T8226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.681211][ T8226] RSP: 002b:00007fd235c94028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 356.681235][ T8226] RAX: ffffffffffffffda RBX: 00007fd237d06180 RCX: 00007fd237a7e0d9 [ 356.681251][ T8226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 356.681265][ T8226] RBP: 00007fd235c94090 R08: 0000000000000000 R09: 0000000000000000 [ 356.681278][ T8226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.681291][ T8226] R13: 00007fd237d06218 R14: 00007fd237d06180 R15: 00007ffd3885fc48 [ 356.681328][ T8226] [ 357.511772][ T8234] x_tables: (null)_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 16 [ 357.927689][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 357.927792][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 359.196693][ T8259] tipc: Enabling of bearer rejected, already enabled [ 359.268705][ T5686] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 359.416763][ T5686] usb 6-1: device descriptor read/64, error -71 [ 359.615409][ T5772] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 359.656743][ T5686] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 359.788013][ T5772] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 359.789302][ T5772] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 359.789353][ T5772] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 359.789383][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.806848][ T5686] usb 6-1: device descriptor read/64, error -71 [ 359.917199][ T5686] usb usb6-port1: attempt power cycle [ 360.466747][ T5686] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 360.601053][ T5686] usb 6-1: device descriptor read/8, error -71 [ 360.798740][ T5772] gud 4-1:1.0: Failed to get connectors (error=-71) [ 360.798802][ T5772] gud 4-1:1.0: probe with driver gud failed with error -71 [ 360.862428][ T5686] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 360.886604][ T5686] usb 6-1: device descriptor read/8, error -71 [ 360.958739][ T5772] usb 4-1: USB disconnect, device number 36 [ 361.000436][ T5686] usb usb6-port1: unable to enumerate USB device [ 361.091300][ T8278] FAULT_INJECTION: forcing a failure. [ 361.091300][ T8278] name failslab, interval 1, probability 0, space 0, times 0 [ 361.092958][ T8278] CPU: 0 UID: 0 PID: 8278 Comm: syz.2.759 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 361.092994][ T8278] Tainted: [L]=SOFTLOCKUP [ 361.093002][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.093020][ T8278] Call Trace: [ 361.093029][ T8278] [ 361.093038][ T8278] dump_stack_lvl+0xe8/0x150 [ 361.093081][ T8278] should_fail_ex+0x46b/0x600 [ 361.093123][ T8278] should_failslab+0xa8/0x100 [ 361.093155][ T8278] __kmalloc_noprof+0xfe/0x780 [ 361.093178][ T8278] ? rcu_is_watching+0x16/0xb0 [ 361.093233][ T8278] ? tomoyo_realpath_from_path+0xef/0x640 [ 361.093279][ T8278] ? tomoyo_realpath_from_path+0xef/0x640 [ 361.093313][ T8278] tomoyo_realpath_from_path+0xef/0x640 [ 361.093350][ T8278] ? tomoyo_path_number_perm+0x219/0x5f0 [ 361.093386][ T8278] tomoyo_path_number_perm+0x246/0x5f0 [ 361.093423][ T8278] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 361.093457][ T8278] ? __lock_acquire+0x683/0x2ce0 [ 361.093506][ T8278] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 361.093592][ T8278] ? hook_file_ioctl+0x1f5/0x610 [ 361.093700][ T8278] ? __fget_files+0x2a/0x420 [ 361.093779][ T8278] ? __fget_files+0x2a/0x420 [ 361.093831][ T8278] ? __fget_files+0x3a8/0x420 [ 361.093891][ T8278] ? __fget_files+0x2a/0x420 [ 361.093955][ T8278] security_file_ioctl+0xc3/0x2a0 [ 361.094039][ T8278] __se_sys_ioctl+0x47/0x170 [ 361.094097][ T8278] do_syscall_64+0x166/0x520 [ 361.094159][ T8278] ? trace_irq_disable+0x3b/0x140 [ 361.094210][ T8278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.094260][ T8278] ? clear_bhb_loop+0x70/0xc0 [ 361.094306][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.094364][ T8278] RIP: 0033:0x7fa61dafe0d9 [ 361.094413][ T8278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.094452][ T8278] RSP: 002b:00007fa61bd35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.094509][ T8278] RAX: ffffffffffffffda RBX: 00007fa61dd86090 RCX: 00007fa61dafe0d9 [ 361.094545][ T8278] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000006 [ 361.094572][ T8278] RBP: 00007fa61bd35090 R08: 0000000000000000 R09: 0000000000000000 [ 361.094598][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.094625][ T8278] R13: 00007fa61dd86128 R14: 00007fa61dd86090 R15: 00007ffd02578a38 [ 361.094700][ T8278] [ 361.099138][ T8278] ERROR: Out of memory at tomoyo_realpath_from_path. [ 361.476747][ T5590] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 361.632267][ T5590] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 361.635838][ T5590] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 361.635880][ T5590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 361.635914][ T5590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 361.635945][ T5590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 361.742478][ T5590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.742509][ T5590] usb 5-1: Product: syz [ 361.742524][ T5590] usb 5-1: Manufacturer: syz [ 361.742546][ T5590] usb 5-1: SerialNumber: syz [ 361.760383][ T5590] usb 5-1: config 0 descriptor?? [ 361.830795][ T5590] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 361.949126][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.761'. [ 362.216875][ T5927] ------------[ cut here ]------------ [ 362.216891][ T5927] in_task() && kcov_mode_enabled(mode) [ 362.216913][ T5927] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5d6/0x710, CPU#1: kworker/1:7/5927 [ 362.217042][ T5927] Modules linked in: [ 362.217071][ T5927] CPU: 1 UID: 0 PID: 5927 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 362.217102][ T5927] Tainted: [L]=SOFTLOCKUP [ 362.217111][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.217126][ T5927] Workqueue: usb_hub_wq hub_event [ 362.217208][ T5927] RIP: 0010:kcov_remote_start+0x5d6/0x710 [ 362.217232][ T5927] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 11 f7 02 03 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 ab fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 0c b8 8a 09 89 c0 48 c7 c7 c0 52 a3 [ 362.217253][ T5927] RSP: 0018:ffffc90005f2f7c8 EFLAGS: 00010202 [ 362.217272][ T5927] RAX: 0000000000000000 RBX: ffff88801ffadd00 RCX: 8000000000000001 [ 362.217289][ T5927] RDX: 0000000000000000 RSI: ffffffff8bcbc060 RDI: ffffffff8bcbc020 [ 362.217305][ T5927] RBP: ffffc90005f2fad0 R08: ffffffff8b52ee52 R09: 0000000000000000 [ 362.217322][ T5927] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: dffffc0000000000 [ 362.217338][ T5927] R13: dffffc0000000000 R14: 0100000000000006 R15: ffff88802a825000 [ 362.217356][ T5927] FS: 0000000000000000(0000) GS:ffff888125cf4000(0000) knlGS:0000000000000000 [ 362.217374][ T5927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.217390][ T5927] CR2: 00007fa61db0ed40 CR3: 000000003b2bc000 CR4: 00000000003526f0 [ 362.217411][ T5927] Call Trace: [ 362.217420][ T5927] [ 362.217435][ T5927] hub_event+0x15d/0x4cf0 [ 362.217462][ T5927] ? rt_spin_unlock+0x165/0x200 [ 362.217492][ T5927] ? __lock_acquire+0x683/0x2ce0 [ 362.217522][ T5927] ? register_lock_class+0x31/0x2e0 [ 362.217553][ T5927] ? __lock_acquire+0x683/0x2ce0 [ 362.217595][ T5927] ? do_raw_spin_lock+0x12b/0x2f0 [ 362.217643][ T5927] ? __pfx_hub_event+0x10/0x10 [ 362.217665][ T5927] ? process_scheduled_works+0x97a/0x1630 [ 362.217717][ T5927] ? rcu_is_watching+0x16/0xb0 [ 362.217749][ T5927] ? process_scheduled_works+0x97a/0x1630 [ 362.217777][ T5927] process_scheduled_works+0xc3d/0x1630 [ 362.217842][ T5927] ? __pfx_process_scheduled_works+0x10/0x10 [ 362.217885][ T5927] ? assign_work+0x3cf/0x5d0 [ 362.217918][ T5927] worker_thread+0xa47/0xfb0 [ 362.217963][ T5927] ? __kthread_parkme+0x71/0x1f0 [ 362.218006][ T5927] kthread+0x38b/0x470 [ 362.218040][ T5927] ? __pfx_worker_thread+0x10/0x10 [ 362.218091][ T5927] ? __pfx_kthread+0x10/0x10 [ 362.218127][ T5927] ret_from_fork+0x514/0xb70 [ 362.218181][ T5927] ? __pfx_ret_from_fork+0x10/0x10 [ 362.218215][ T5927] ? __switch_to+0xc89/0x1420 [ 362.218248][ T5927] ? __pfx_kthread+0x10/0x10 [ 362.218284][ T5927] ret_from_fork_asm+0x1a/0x30 [ 362.218326][ T5927] [ 362.218342][ T5927] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 362.218362][ T5927] CPU: 1 UID: 0 PID: 5927 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 362.218394][ T5927] Tainted: [L]=SOFTLOCKUP [ 362.218403][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.218418][ T5927] Workqueue: usb_hub_wq hub_event [ 362.218440][ T5927] Call Trace: [ 362.218449][ T5927] [ 362.218458][ T5927] vpanic+0x56d/0xa60 [ 362.218493][ T5927] ? __pfx__printk+0x10/0x10 [ 362.218518][ T5927] ? __pfx_vpanic+0x10/0x10 [ 362.218550][ T5927] ? is_bpf_text_address+0x292/0x2b0 [ 362.218594][ T5927] ? is_bpf_text_address+0x26/0x2b0 [ 362.218635][ T5927] panic+0xc5/0xd0 [ 362.218669][ T5927] ? __pfx_panic+0x10/0x10 [ 362.218716][ T5927] ? ret_from_fork_asm+0x1a/0x30 [ 362.218744][ T5927] __warn+0x315/0x4c0 [ 362.218764][ T5927] ? kcov_remote_start+0x5d6/0x710 [ 362.218790][ T5927] ? kcov_remote_start+0x5d6/0x710 [ 362.218812][ T5927] __report_bug+0x276/0x570 [ 362.218940][ T5927] ? kcov_remote_start+0x5d6/0x710 [ 362.218967][ T5927] ? __pfx___report_bug+0x10/0x10 [ 362.219000][ T5927] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 362.219029][ T5927] ? rt_spin_lock+0x1e2/0x400 [ 362.219053][ T5927] ? rt_spin_lock+0x1e2/0x400 [ 362.219078][ T5927] ? kcov_remote_start+0x5d6/0x710 [ 362.219100][ T5927] report_bug+0x16b/0x220 [ 362.219130][ T5927] ? kcov_remote_start+0x5d6/0x710 [ 362.219150][ T5927] ? kcov_remote_start+0x5d8/0x710 [ 362.219171][ T5927] handle_bug+0x9c/0x200 [ 362.219205][ T5927] exc_invalid_op+0x1a/0x50 [ 362.219239][ T5927] asm_exc_invalid_op+0x1a/0x20 [ 362.219261][ T5927] RIP: 0010:kcov_remote_start+0x5d6/0x710 [ 362.219284][ T5927] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 11 f7 02 03 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 ab fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 0c b8 8a 09 89 c0 48 c7 c7 c0 52 a3 [ 362.219304][ T5927] RSP: 0018:ffffc90005f2f7c8 EFLAGS: 00010202 [ 362.219324][ T5927] RAX: 0000000000000000 RBX: ffff88801ffadd00 RCX: 8000000000000001 [ 362.219341][ T5927] RDX: 0000000000000000 RSI: ffffffff8bcbc060 RDI: ffffffff8bcbc020 [ 362.219357][ T5927] RBP: ffffc90005f2fad0 R08: ffffffff8b52ee52 R09: 0000000000000000 [ 362.219373][ T5927] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: dffffc0000000000 [ 362.219388][ T5927] R13: dffffc0000000000 R14: 0100000000000006 R15: ffff88802a825000 [ 362.219415][ T5927] ? rt_spin_lock+0x1e2/0x400 [ 362.219446][ T5927] ? kcov_remote_start+0xeb/0x710 [ 362.219473][ T5927] hub_event+0x15d/0x4cf0 [ 362.219497][ T5927] ? rt_spin_unlock+0x165/0x200 [ 362.219522][ T5927] ? __lock_acquire+0x683/0x2ce0 [ 362.219551][ T5927] ? register_lock_class+0x31/0x2e0 [ 362.219581][ T5927] ? __lock_acquire+0x683/0x2ce0 [ 362.219621][ T5927] ? do_raw_spin_lock+0x12b/0x2f0 [ 362.219666][ T5927] ? __pfx_hub_event+0x10/0x10 [ 362.219687][ T5927] ? process_scheduled_works+0x97a/0x1630 [ 362.219720][ T5927] ? rcu_is_watching+0x16/0xb0 [ 362.219752][ T5927] ? process_scheduled_works+0x97a/0x1630 [ 362.219779][ T5927] process_scheduled_works+0xc3d/0x1630 [ 362.219841][ T5927] ? __pfx_process_scheduled_works+0x10/0x10 [ 362.219888][ T5927] ? assign_work+0x3cf/0x5d0 [ 362.219922][ T5927] worker_thread+0xa47/0xfb0 [ 362.219966][ T5927] ? __kthread_parkme+0x71/0x1f0 [ 362.220007][ T5927] kthread+0x38b/0x470 [ 362.220040][ T5927] ? __pfx_worker_thread+0x10/0x10 [ 362.220066][ T5927] ? __pfx_kthread+0x10/0x10 [ 362.220102][ T5927] ret_from_fork+0x514/0xb70 [ 362.220138][ T5927] ? __pfx_ret_from_fork+0x10/0x10 [ 362.220171][ T5927] ? __switch_to+0xc89/0x1420 [ 362.220202][ T5927] ? __pfx_kthread+0x10/0x10 [ 362.220238][ T5927] ret_from_fork_asm+0x1a/0x30 [ 362.220278][ T5927] [ 362.220498][ T5927] Kernel Offset: disabled