last executing test programs: 6.234452175s ago: executing program 0 (id=1093): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000040)={0xff5, 0x0, 0x2008, 0x9, 0x6, {0x6, 0x2}}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0xfc, {0xfc, 0xa, "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"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f00000001c0)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x8, 0x44, 0x7, "e3a18ec2", "40771613"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x1, 0x1, 0x1a, 0x1, 0x0, 0x5}}}, &(0x7f0000000880)={0x84, &(0x7f00000002c0)={0x0, 0x31, 0x78, "c66d7df6d56d00aef7d515a7eca96a94ca759e6e0abc93687b095fc798057373a4a1f8035777af85c29191dc8c14a4c86c7b832b54882b826e3da748e57ef831a76464efeb349f6ce2f400d3170c5d8114f6c52ec719b34b288a4296cd382aa81703067c422b6fc60f25092a6ef60655da8c44a2d7b013e2"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x50}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x8, 0x50}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "1499"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000580)={0x40, 0x13, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "b210"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000400)={0x30, 0x6, 0x6, "e9fc82a6eae2"}, 0x0, 0x0, 0x0, 0x0}) 5.333775581s ago: executing program 1 (id=1102): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5ab87f786a04ac52b06a9eb2212e268b486a4563d2fb5509c5c5bb19394423b8083b919f8ac9c93b5e0bb4b335407fb12983c6ea616db6b14c13d11904010e29de70502aad1f7ba21ec80a361b996b28b20ef07f911f5c4e5c96aca46f840c6301c70e3226e67a9b58da48c44ebc7866a3c31320ec40d545d814e8294726bdd6790474ad4e9fcffd3b452a9a66011c592491df3afe0452", 0x97}], 0x1}, 0x45) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)='c', 0x1}], 0x1}, 0x8000) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa00, 0x280, 0x1000, 0x3e, 0x1, 0x4000000, {0x0, 0x9}, {0x8, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x2, 0x0, 0x4}) r6 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=[@wrmsr={0x65, 0x20, {0xc0010020, 0xfffffffe00000}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4b0, 0xd8, 0x1, 0x3}}, @wr_drn={0x68, 0x20, {0x7, 0x10001}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x8d, 0x3, 0x5, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xce, 0x3, 0x737}}], 0xe8}) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000140)={0x3}) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r7, 0x3, 0x11, r6, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r8, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0x0, 0x6}, 0x1c) poll(&(0x7f0000000440)=[{r9, 0x400}], 0x1, 0x9) ioctl$NILFS_IOCTL_RESIZE(r9, 0x40086e8b, &(0x7f0000000080)=0x9) keyctl$set_reqkey_keyring(0xf, 0x6) 4.233725836s ago: executing program 1 (id=1110): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100), 0x4, 0x1) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000180)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 4.056733565s ago: executing program 1 (id=1112): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) shutdown(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x1, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x2, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x4000, r3, 0x1}) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000080)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)='}', 0x2a028}], 0x1, 0x0, 0x0, 0x4000}, 0x4004015) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x4, 0x2, 0x4, 0x10044002804c4, 0x9, 0x8000000000000000, 0xc597, 0x3, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0x60000, 0x2002d3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r9 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0x36) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0xd2) ioctl$KVM_RUN(r7, 0xae80, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r10, 0x406855c9, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f0000000140)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.393991289s ago: executing program 1 (id=1116): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r1, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff000000000100000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x100040000039) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x100, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x29, 0x0, 0xa, 0x0, 0xbd9], 0x4000, 0x43180}) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000000c0)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0x0, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xffff1000, 0xc, 0xa0, 0xb1, 0x8, 0x3, 0x6, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0xe0040010, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x7, 0x0, [{0xc0010140, 0x0, 0x5}, {0x19b, 0x0, 0x4}, {0xa73, 0x0, 0xfffffffffffffff9}, {0x842, 0x0, 0x6a5}, {0x37c, 0x0, 0x10000}, {0x3f8, 0x0, 0xeb}, {0x338, 0x0, 0x3ff}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.221493769s ago: executing program 0 (id=1118): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 3.107883204s ago: executing program 0 (id=1121): fcntl$setstatus(0xffffffffffffffff, 0x404, 0x26c00) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000cc0)={{0x2, 0x4e22, @private=0xa010102}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, 'veth1_to_batadv\x00'}) write$cgroup_int(0xffffffffffffffff, 0x0, 0xe) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0xfffffffd, {0x7}}, 0x14}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0xa96) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0x90) finit_module(r5, &(0x7f0000000040)='/\x00', 0x3) finit_module(r5, 0x0, 0x2) 2.098949436s ago: executing program 1 (id=1132): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x6}, 0x8) 1.889597662s ago: executing program 1 (id=1134): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000380)={{0x80a0000, 0x1000, 0x4, 0xa, 0x0, 0x81, 0x90, 0x9, 0x2, 0xd1, 0xb, 0xf9}, {0x2000, 0x0, 0xb, 0xfe, 0x7, 0x9, 0x5, 0x1, 0x0, 0x8, 0x2, 0x5}, {0x30000, 0x71004, 0x0, 0x80, 0x3, 0x9, 0x7, 0x7, 0x7, 0xa, 0x6, 0x7}, {0xeeee8000, 0x26000, 0x8, 0xe, 0x5b, 0x8, 0xd, 0x0, 0x8, 0x6, 0x1, 0x11}, {0xeeef0000, 0xd000, 0xe, 0x42, 0x5, 0xf4, 0x76, 0x4, 0x53, 0x0, 0x9, 0xe}, {0xdddd1000, 0x80a0000, 0x4, 0xb, 0xfd, 0xf, 0xfa, 0x30, 0x3, 0x7, 0x96}, {0xa000, 0x2, 0x8, 0x3, 0x9, 0x9, 0x2, 0x7, 0x8, 0x3, 0x7, 0x80}, {0x5f000, 0xffffffff, 0x3b45c10ed23ae1d1, 0x7, 0x9, 0x62, 0x8, 0x5, 0x13, 0x7, 0x8, 0x2}, {0xdddd0000, 0x7}, {0x5000, 0xff}, 0x6, 0x0, 0x80f7000, 0x200114, 0xb, 0x800, 0xddda1004, [0x0, 0x5, 0x5, 0x10001]}) io_setup(0x7f, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0xc562, 0x13090, 0x0, 0x71}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_getevents(r0, 0x3, 0x3, &(0x7f0000000580)=[{}, {}, {}], 0x0) poll(&(0x7f0000000f00)=[{r1}], 0x1, 0xc) r2 = syz_usb_connect(0x2, 0x1a2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000180)={0x40, 0x7}, 0x0, 0x0, &(0x7f0000000500), &(0x7f00000005c0)=ANY=[]}) 1.617017547s ago: executing program 2 (id=1135): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x5) (fail_nth: 2) 1.23711255s ago: executing program 2 (id=1136): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x101) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 962.184305ms ago: executing program 2 (id=1138): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x1, 0x2}}) 961.471757ms ago: executing program 3 (id=1139): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x76cd000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) 850.949376ms ago: executing program 3 (id=1140): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{0xffffffffffffffff, &(0x7f0000000000)='..}+#.Y{-]\x02@}//{^{)\x00', 0x301000, &(0x7f0000000040)={@_ha_fsid={[0xd, 0x3]}, {0x3, 0x9, 0x9, 0x96b3}}, 0x1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x1}, {[0x9, 0x6, 0x7, 0xfffffe01]}, 0x5, 0x1b, &(0x7f0000000100)=""/27}) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000001c0)) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000200)={0x1c, "2784efba30d7a3580cbb08ee108c1eef790b21eff32b5440f462d3121a09da03eb11aa353633c0b3f56a3a82a802f24141f8fe0f4675fa94acfa5826d32d2044b31179706402317d421556602f3c82e5dcedbc1f977e80ed508f1840019ea49ab4fccc82851816185afd7c6615b00deab064287238e3f0f9a38b356123dbb631"}) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_256={{0x505}, "22deaa417ed095ba", "0ad92caad3a830d8335b3dc679e9cc149c0721dc15c4ccbc4bfff696c3842f6f", "77ba4210", "582b535445b921e2"}, 0x38) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000300)=@usbdevfs_disconnect={0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f0000000340)={{@local, 0x1}, 0x3, 0xee}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000500)={0x401, 0x0, 0x0, 0x14, 0x4}) socket$pppoe(0x18, 0x1, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001840)={&(0x7f0000000580)={0x12b4, 0x0, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0xf}, 0xe2, 0xb8, 0x6, 0x5, 0x3, 'syz1\x00', "58f4274c7166dff943814ec3eca56d8d84bb13b9f2840b155d46059466b12371", "7908b2ad187a03c0302aa269b4b401fe5b040a722680c8a6ceb9b97a40e08fa9", [{0x8ca5, 0x5, {0x0, 0x4}}, {0x200, 0x25, {0x3, 0x3}}, {0x3, 0x0, {0x3, 0x1ff}}, {0xcaf7, 0x8, {0x0, 0xc}}, {0xd4a, 0x5, {0x3, 0x1000}}, {0xffff, 0x7fff, {0x1, 0x1}}, {0x5, 0xe1, {0x0, 0xa88}}, {0x7, 0x1ff, {0x1, 0x8001}}, {0x8508, 0x0, {0x5, 0x3}}, {0x9, 0xd, {0x3, 0x9b7a}}, {0x7, 0x1dae, {0x2, 0x4}}, {0xd4e, 0x1984, {0x0, 0x79}}, {0x2, 0x0, {0x1, 0xffff}}, {0x10, 0x3, {0x1, 0x61c}}, {0x0, 0x2, {0x2, 0xb}}, {0x2, 0x3, {0x2, 0x7}}, {0x0, 0x5, {0x2, 0x8}}, {0xffee, 0x9, {0x0, 0xfffffffe}}, {0x1, 0x6fe, {0x2, 0x9}}, {0x7ff, 0x60, {0x3}}, {0x99, 0xfa8, {0x1}}, {0x8, 0x5, {0x3, 0x8}}, {0x7, 0xea, {0x1, 0x6}}, {0x80, 0xfffc, {0x0, 0x145e}}, {0xff80, 0x5, {0x2, 0x7cd}}, {0x9, 0x0, {0x3, 0x7}}, {0x1, 0x7f, {0x8e09b3a82632c819, 0xeaf7}}, {0xffff, 0x27, {0x0, 0x7ff}}, {0xa, 0x1, {0x3, 0x2}}, {0x0, 0x6f, {0x1, 0x3}}, {0x81, 0xf0f9, {0x1, 0x7}}, {0x1, 0x5, {0x0, 0xd2}}, {0x7, 0x9, {0x3, 0x772c}}, {0x4, 0x3, {0x1, 0x80000000}}, {0x8, 0xcd23, {0x1, 0x4}}, {0x1, 0xa4f, {0x2, 0x81}}, {0x6, 0x3, {0x2, 0x2}}, {0x8, 0x4, {0x0, 0xff}}, {0x60, 0x4, {0x2, 0x3}}, {0x8000, 0x3, {0x2, 0x7fff}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0xfc, 0x6, 0x101, 0xc, 0x0, 'syz1\x00', "446b05969e11f59a347475aab251dc0f23580adf7cb543fcf2182a66d01fcf6e", "264b17e2fe52f861ba035d701add0323d2c4bd36681073b5abce2ff0c082e650", [{0xd34, 0x5, {0x1, 0xe39}}, {0x101, 0x4, {0x0, 0x80000000}}, {0x5, 0xfffe, {0x1, 0x2}}, {0x8000, 0x7, {0x1, 0x6}}, {0x5, 0xa5bd, {0x0, 0xfffffff7}}, {0xfff, 0x2, {0x0, 0x5}}, {0xa, 0x6, {0x1, 0xfffffffd}}, {0x10, 0x7, {0x0, 0xc2}}, {0x4, 0xa3, {0x0, 0x2}}, {0x9, 0x2, {0x0, 0xa}}, {0x0, 0x9, {0x2, 0x7}}, {0x167b, 0x1, {0x2, 0x1}}, {0xc, 0xec4b, {0x1, 0x8}}, {0x0, 0x1, {0x3}}, {0x8, 0x1, {0x2, 0x9}}, {0x1, 0x6, {0x2, 0xfffffff8}}, {0x0, 0x7f, {0x0, 0x2}}, {0x7, 0x0, {0x3, 0x8}}, {0x7fff, 0x1, {0x0, 0xacb8}}, {0xffff, 0x2, {0x1, 0x9}}, {0x7, 0x1, {0x0, 0x3}}, {0xc7f, 0x7, {0x2, 0x6}}, {0x40, 0x5, {0x2, 0x5}}, {0x7, 0x3, {0x0, 0xaa}}, {0x5, 0x2, {0x1, 0x9}}, {0x8, 0xffff, {0x0, 0x9}}, {0x93b, 0x3, {0x3, 0xfffffffc}}, {0x8001, 0x9, {0x3, 0x200}}, {0x8, 0x7, {0x0, 0xfff}}, {0x7, 0x7f, {0x1, 0x3}}, {0x100, 0x7, {0x2, 0x4969}}, {0xfff9, 0x4100, {0x3, 0x8001}}, {0x0, 0x1, {0x2, 0x8}}, {0x8, 0x8000, {0x2, 0x80000001}}, {0x2, 0x8, {0x0, 0x1}}, {0x7, 0x0, {0x0, 0x86}}, {0x2, 0x1000, {0x0, 0x9}}, {0x42c0, 0x7e, {0x1, 0x7}}, {0x9, 0x5, {0x2, 0x3}}, {0x3, 0x3, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x2, 0xff, 0x9, 0x8, 0x7, 'syz1\x00', "d0315d78ffa6ee80cb5266951ad90b5e9fda571e7637e815b63086fa81c3ff1b", "3320694b8fab9b1280606de4745f36fd970bc196d9c869b5bf99415e4db0ca74", [{0x5, 0x8, {0x0, 0x4}}, {0x3, 0x8, {0x1, 0x4d8ea735}}, {0x91b, 0x3, {0x2}}, {0xb, 0x5, {0x0, 0x3}}, {0x7, 0x0, {0x3, 0x9}}, {0x80, 0x6, {0x3, 0x8}}, {0x2, 0x1, {0x0, 0x7fff}}, {0xffff, 0x81, {0x0, 0x9}}, {0x0, 0xd42, {0x3, 0xc}}, {0xffff, 0x424, {0x2, 0x9}}, {0x9, 0x7fff, {0x2, 0x4}}, {0x0, 0x66, {0x3, 0x8}}, {0xbed, 0x3a7c, {0x2, 0x5}}, {0xe6, 0x9, {0x1, 0x6}}, {0x5, 0x4, {0x1, 0xfffffffc}}, {0x1, 0x3, {0x1, 0xd}}, {0x320d, 0x2, {0x1, 0x824}}, {0x7ff, 0x87, {0x2, 0x7}}, {0x6, 0x2, {0x1, 0xb6}}, {0xffff, 0x0, {0x1, 0x6bb6}}, {0xd1b, 0x9, {0xf403d3d8495e1d12, 0x359}}, {0x2, 0x400, {0x3, 0x4}}, {0x800, 0x2, {0x3, 0x7}}, {0x1000, 0x3118, {0x3, 0x4}}, {0xe06, 0x8, {0x1, 0x80}}, {0x1, 0xa000, {0x2, 0xd7}}, {0x296, 0x4, {0x3, 0x40000000}}, {0x0, 0xacb3, {0x0, 0x7fffffff}}, {0x3, 0x8, {0x2, 0x5}}, {0x6e, 0x5, {0x2, 0x3}}, {0x6, 0x2, {0x0, 0x7ff}}, {0xee, 0xfff8, {0x2, 0x2}}, {0x6, 0x4, {0x1, 0xfffffffd}}, {0x3, 0x24, {0x0, 0x4}}, {0x1, 0x2, {0x1, 0x5cc0}}, {0xadf8, 0xb5, {0x0, 0x88}}, {0x1ff, 0xdcf, {0x3, 0x8}}, {0x9, 0xf0, {0x2, 0xff}}, {0xffff, 0x0, {0x3, 0xd8}}, {0x7, 0x9, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x7, 0x1, 0x0, 0x9, 0x16, 'syz1\x00', "6c79e2f58fa28866dff68a4dbb66c448521f20062537456aa4e17c9ecbe00a21", "aacb734279b36efaf4be23bc112e87c5bf51b2c1078d33724f945a3704297089", [{0x6, 0xf6ce, {0x3, 0x6}}, {0x3, 0x2, {0x3, 0x4}}, {0x4, 0x1, {0x1, 0x2}}, {0x0, 0x2, {0x1, 0x80}}, {0x1d, 0xd, {0x3, 0x8}}, {0x6, 0x2, {0x2, 0x5}}, {0x1, 0x9, {0x2, 0x80000001}}, {0x8, 0x3, {0x1, 0x9e2}}, {0x7, 0x7, {0x0, 0x3be}}, {0xc, 0xf24, {0x1, 0x4}}, {0xfff7, 0x10, {0x2, 0x1}}, {0x13, 0x7fff, {0x3, 0x3}}, {0x3d9, 0x0, {0x1, 0x8000}}, {0x9, 0xa91, {0x2, 0xfffffff8}}, {0x8, 0x3ff, {0x0, 0x9}}, {0x4, 0x0, {0x3, 0x6}}, {0x2c02, 0x0, {0x85a899747a116e3c, 0x1}}, {0xc, 0xaad, {0x0, 0x6}}, {0x1, 0x9, {0x1, 0xe}}, {0x0, 0x3, {0x3, 0x791a}}, {0x4, 0xffff, {0x3, 0x4}}, {0x4, 0x803, {0x2, 0x4}}, {0x8, 0xc17a, {0x1, 0x6}}, {0xf958, 0x40, {0x0, 0x200}}, {0xf, 0x4, {0x0, 0x3}}, {0x7, 0x3, {0x0, 0x4}}, {0xfffe, 0x1839, {0x1, 0x3}}, {0x0, 0x9, {0x3, 0xe1}}, {0x0, 0x200, {0x3, 0x87}}, {0x100, 0x1, {0x2, 0x80}}, {0x7058, 0x3, {0x0, 0x749}}, {0x200, 0x6, {0x1, 0xd}}, {0x101, 0x7f, {0x1, 0x5}}, {0x1, 0x4, {0x0, 0x1}}, {0x2, 0x3, {0x1, 0x1}}, {0x4, 0x2, {0x3, 0x3}}, {0xd2, 0x6, {0x1, 0x1}}, {0xb, 0x6, {0x0, 0x400}}, {0xfff, 0x7, {0x3, 0x7}}, {0x335, 0x40, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x9, 0x2, 0x3, 0x9, 0x22, 'syz0\x00', "0a510726191ea506c7a6a4f70ce1b0c290475b49bd91b97c36499f0674988a46", "3ba632c98413c35d4af1635fbb9630b3b6826f22d9f54cccc089b140fe30914c", [{0x3ff, 0xd, {0x2, 0x2}}, {0x0, 0x2, {0x1, 0x2400}}, {0x4, 0xfc6f, {0x2, 0x101}}, {0x7fff, 0x4, {0x3, 0x2}}, {0x9, 0x8, {0x1, 0xe}}, {0x81, 0x7f, {0x2, 0x384d}}, {0xfffa, 0x0, {0x1, 0x1}}, {0x3, 0x3, {0x1, 0xfffff5b9}}, {0x5, 0x0, {0x1}}, {0x40, 0x8001, {0x0, 0x1000}}, {0x7, 0x6, {0x2, 0x9}}, {0xe, 0x4, {0x3, 0x29ae}}, {0x9, 0x0, {0x0, 0x3ff}}, {0x81, 0x5, {0x0, 0x3}}, {0x200, 0x0, {0x1, 0x5}}, {0x3, 0x6, {0x0, 0x9}}, {0x5, 0x4, {0x1, 0x2}}, {0x7, 0x5110, {0x0, 0x6}}, {0x7, 0xaf22, {0x0, 0x80000000}}, {0x4, 0x6, {0x3, 0x40}}, {0x9ca1, 0x800, {0x1, 0x7f}}, {0x9, 0xffff, {0x3, 0x4}}, {0x5, 0x1000, {0x1, 0x3}}, {0x7a5, 0x7c, {0x3, 0x4}}, {0x200, 0xd, {0x3, 0x7fffffff}}, {0x8000, 0x5885, {0x3, 0x2}}, {0x1, 0x3ff, {0x2, 0xc}}, {0x2, 0x7, {0x3, 0x3}}, {0x6, 0x7, {0xc33c145b823527f6, 0x7fff}}, {0x40, 0x4e, {0x3, 0x6}}, {0x8000, 0xdbf, {0x0, 0x523}}, {0xd, 0x7ff, {0x1}}, {0xf, 0x6, {0x2, 0x7}}, {0x9, 0xfffd, {0x3, 0x5}}, {0x5cfb, 0x7, {0x2, 0xa}}, {0xfffc, 0xb, {0x0, 0x9}}, {0xcb38, 0x4, {0x3, 0xf}}, {0x0, 0xfff9, {0x4a4df0da4985ca2a, 0x1ff}}, {0x0, 0xf, {0x0, 0x10}}, {0x8000, 0xb9f, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x3, 0x10, 0x3, 0x9, 0x24, 'syz0\x00', "ea50da6f7a87b4f25e57dc8fa16ec1754db2c6d2e0f42d707d332ab635b32964", "bdb8e9c8138ec5128341e8e86ac6e359d8b6c93f1551f0cd476d543359ce4f89", [{0xe, 0x9, {0x2, 0x8}}, {0xfe00, 0x1, {0x1, 0x2}}, {0x400, 0x5, {0x0, 0x7}}, {0x5, 0xa0, {0x2, 0x618}}, {0x6, 0x6a, {0x1, 0xb3}}, {0x101, 0x7, {0x3, 0x2}}, {0x331a, 0x2, {0x1, 0x6}}, {0x1, 0x0, {0x3, 0x1}}, {0x101, 0x6, {0x0, 0xa64}}, {0x81, 0x3, {0x0, 0x1}}, {0x8, 0x8, {0x2, 0x7}}, {0x2, 0x80, {0x0, 0x81}}, {0xc, 0x0, {0x3, 0x1}}, {0x800, 0x7, {0x2, 0x38d4}}, {0x1, 0x6, {0x2, 0x8001}}, {0x40, 0x9a2, {0x1, 0x19}}, {0xf, 0x9, {0x2, 0x10001}}, {0x6, 0x6, {0x1, 0x2}}, {0x3, 0xffff, {0x1, 0x5}}, {0x6, 0xc000, {0x0, 0x2}}, {0x80, 0x8001, {0x3afd4172c139489b, 0x63af}}, {0x1, 0x8000, {0x1, 0x3}}, {0x7, 0x1, {0x3, 0x100}}, {0xba46, 0xb, {0x2, 0x6}}, {0x5, 0x0, {0x0, 0x6}}, {0x5, 0x7ff, {0x1, 0x4}}, {0x30, 0x9, {0x3, 0xbb3}}, {0x1, 0x3, {0x2, 0x3ff}}, {0x1b, 0x7, {0x1, 0x6}}, {0xffff, 0xe0, {0x3, 0x6}}, {0x0, 0x7fff, {0x3, 0x5}}, {0x1, 0xff12, {0x2, 0x9}}, {0x8, 0x5, {0x0, 0x7}}, {0x7, 0x4, {0x2, 0x5}}, {0x0, 0x81, {0x0, 0x5}}, {0x800, 0x1, {0x2, 0x400}}, {0xfff, 0x5, {0x2, 0xffffff7f}}, {0x3, 0x400, {0x0, 0x6}}, {0x1, 0x0, {0x2, 0xb}}, {0x80, 0x7, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0xffff}, 0x1, 0xab, 0x2, 0x3, 0x18, 'syz0\x00', "49f3653efd55f5209f4a6e5f3f4dbb07f946320d3da444cde40bb6c2383365a7", "a0e3b9eb65d26d34e6520325fbc2adffca65272dbfd978fa0956afa8064be72a", [{0xd, 0x8, {0x3, 0x4}}, {0x7, 0xff, {0x2, 0x7}}, {0x1, 0xd, {0x1, 0x10}}, {0x5, 0xee6d, {0x2, 0xba}}, {0xfffe, 0xff, {0x1}}, {0x4, 0xfffb, {0x3, 0x9}}, {0x451, 0x1000, {0x0, 0x3d29}}, {0x2, 0x6, {0x1}}, {0x9, 0x0, {0x2, 0x80000001}}, {0x8, 0xfff, {0x0, 0xffffffff}}, {0x52, 0x7, {0x2, 0x8}}, {0x6, 0xe525, {0x2, 0x1}}, {0x6, 0xfff, {0x2, 0x5}}, {0x8001, 0x1, {0x3, 0x34e3}}, {0x3, 0x3, {0x0, 0x9}}, {0xda2b, 0x3, {0x2, 0x8001}}, {0x8001, 0x7, {0x2, 0x1e1}}, {0xb, 0x3, {0x3, 0x9fdc}}, {0x9, 0x7, {0x2, 0x8}}, {0x80, 0x9b, {0x3, 0x200}}, {0x9, 0x400, {0x1, 0x4}}, {0x7, 0x3, {0x3, 0x2}}, {0xb245, 0x202, {0x0, 0x9}}, {0xd98, 0x1, {0x1, 0x7}}, {0xafcf, 0x80, {0x3, 0x10}}, {0x4, 0x6, {0x0, 0x80}}, {0x401, 0x9, {0x2, 0x10001}}, {0x5, 0x4, {0x1, 0x5}}, {0x7, 0x1, {0x1, 0x8001}}, {0x3, 0x6, {0x2, 0xf3b}}, {0x7, 0x1000, {0x0, 0x81}}, {0xa647, 0x2, {0x2, 0x5}}, {0x5, 0x527, {0x1}}, {0x5, 0x9b6, {0x1, 0x1}}, {0x0, 0x2, {0x1, 0x9}}, {0x1, 0x6, {0x2, 0x6}}, {0x5, 0x6, {0x1, 0x7ff}}, {0x3, 0x6, {0x1, 0x200}}, {0x8, 0x5, {0x1, 0x8}}, {0x6, 0x8, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x3}, 0x4, 0x1, 0x9, 0xfffa, 0x21, 'syz0\x00', "b2b54943678df07e16288e0aa7b33b162c85043c6d85e064d9a29d63c0a6c6fc", "57d75c63c5bd16807104f93a7a210e16bde0dc18cab024823070b69740971246", [{0x8, 0x816, {0x1, 0x2}}, {0x6, 0xf, {0x2, 0x6}}, {0x1, 0xe1b, {0x1, 0x5}}, {0x9, 0x7, {0x3, 0x5}}, {0xffff, 0x1, {0x0, 0x68}}, {0x7, 0xda8, {0x2, 0x7fffffff}}, {0x5, 0xddb2, {0x2, 0x3}}, {0x81, 0x4, {0x3, 0x4}}, {0x29, 0x8, {0x2}}, {0x7fff, 0x81, {0x2, 0x8}}, {0x9, 0x7, {0x2, 0xe}}, {0x3ff, 0x6}, {0x5, 0x401, {0x1, 0x7ff}}, {0x81, 0xfff7, {0x2, 0xffffffff}}, {0x6, 0x29, {0x0, 0xd}}, {0x0, 0xff, {0x2, 0x7}}, {0xe4, 0x3, {0x3, 0x8}}, {0x8, 0x9d6, {0x2, 0x6}}, {0x5, 0x1, {0x0, 0x1}}, {0x9, 0x5e06, {0x0, 0x10}}, {0x57, 0xfee, {0x1, 0xfff}}, {0x7ff, 0x1000, {0x1, 0x8}}, {0x2, 0x100, {0x1}}, {0x7, 0xf7b, {0x2, 0xfff}}, {0x3, 0x800, {0x1, 0x100}}, {0x6, 0xfff, {0x3, 0x8}}, {0x1410, 0x7ff, {0x1}}, {0x3, 0x5980}, {0x1, 0x9, {0x3, 0x2}}, {0x8, 0x0, {0x3, 0xffffffff}}, {0x8000, 0x1, {0x3, 0x4}}, {0x6, 0xe4b5, {0x1}}, {0x0, 0x70d3, {0x2, 0x6}}, {0x8, 0x8, {0x0, 0x7}}, {0x8, 0x40, {0x1, 0x5abd}}, {0x9, 0x4, {0x1, 0xec}}, {0x400, 0x7, {0x3, 0x8}}, {0x8, 0x9, {0x3, 0x5}}, {0x1b, 0x1000, {0x2, 0xe}}, {0x6, 0xfee3, {0x2, 0xa}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20011}, 0x40001) close_range(r0, r0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f00000018c0), 0xfffffffffffffffe, 0x98003) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000001900)=0x3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:dhcp_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x90}, 0x1, 0x0, 0x0, 0x14}, 0x40001) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b00), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x2c, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_genetlink_get_family_id$nl802154(&(0x7f0000001c00), r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x20010, r6, 0x4eb72000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c80), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001cc0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x44, r8, 0x584ea553b69bc68d, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x918e}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x40000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000001e00)) ioctl$DVB_DEMUX_DMX_REQBUFS(r3, 0xc0086f3c, &(0x7f0000001e40)={0x2, 0xd4f}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001e80)={@in6={{0xa, 0x4e24, 0xc958, @remote, 0x5}}, 0x0, 0x0, 0xf, 0x0, "8b7df34de6f734beb9189f6e9b3737ecc6752443c6e726fc4394c3107aedc0d7f3a2834853ef4aeea8910e30f19e84f38a3e293a0fed1d4fc6fbdb5e8648baadacc28758a5da61b11dc8fa2cd00d2de6"}, 0xd8) 757.692995ms ago: executing program 3 (id=1141): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0xfffffdab) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f00000004c0)=0x79, 0x4) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 753.093949ms ago: executing program 3 (id=1142): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x325967a866143452) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.events.local\x00', 0x275a, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r3, 0x0, &(0x7f0000000a40)="7f", 0xfffffffffffffd95, 0x8}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0010b420a1a93c527d3d458dd4992861ac000000000000000000000900", "3c97856707abf3f700", [0x7, 0x6]}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x20000000000007) 685.976109ms ago: executing program 3 (id=1143): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xad, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xdee7, 0x0, 0x1, 0x255, 0x0, r2}, 0x0, 0x1, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2001}, 0x0) 624.50049ms ago: executing program 3 (id=1144): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x0, 0x80, 0x190, 0x0, 0x0, 0x17c, 0x0, 0x0, {}, {0xffff}, {}, {}, 0x0, 0x40, 0x0, 0x3, 0x0, 0xfffffffd, 0x1, 0x6, 0x4, 0x80, 0x0, 0x90000000, 0x26, 0x0, 0x1}) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010276e92a000000000000078a0218010902120001fc0110040904ed5d007dd8ce02ce3197c036b95f37db086f19bad846fefe52c6b36e1518c6be658f848bf25349eeb1ec3a31bd6adc5dc2d66d840268b4aa88454bf15360895daaff64313c2424a9aa0c98affe8edc7633bbc25d3262e02cad045fdb7d18080c72cd42bcae465069e4c68be2e8942b6c93ce7a27e40789a018a3f040eb8c39c7755104d53d5a5b97b87ebc9d2f89138608dbf366ca754c5f777302cd433896307bea06869a67ca4c7722b42dcc7c60a6025eb5d8bb9ae1f99374b3a2b2"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x6, 0x10bc, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0xeb, 0x22, 0xfb, 0x20, 0x2013, 0x25f, 0x8d27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10aa, 0x3, 0x5, 0x0, 0x20, 0x4, "", [{{0x9, 0x4, 0xc9, 0xa0, 0x10, 0x79, 0xb2, 0xcb, 0x6, [@generic={0x25, 0xe, "a420fc1dd02f40ac1005599762884a3d4841dde69611ecff4b5db1ced5901c2a1671a0"}, @uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0xa, 0xff, 0x8}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0x401, 0x6, "3336e845bf"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x81, 0xb, "d5"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3ff, 0x3, 0x80, "3bc87fd9"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x1, 0x8, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xff, 0x1, 0x9, 0x5, 'Is', ' \a'}]}], [{{0x9, 0x5, 0x8, 0x4, 0x200, 0x6, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8}, @generic={0xc5, 0xc, "467da444faeaeaf630d6cb87bc910b38483729e3b9a8a356c95f828beb85a777b15182dc4d75056b3a8d3a898364a6f4d170a95845dc5539c9f2bd4c00fc81fb25ced8c78c818711925adba87acf9164466121947b6b933ee1687f76135d5f2b019a9186b8827ed5a9987f4d5242809fcd11b6a623b0e01f143cf45c3c53a8241ff3cd6e7d6d96cdea00f9f49e4eaec30f6586472958ed29feb6298cb05f3d6c59b7c8c1ce090cb5b5907ad56fc1dff9061d20794c04adc413fa1aa0077cf09a4128a9"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x6, 0x9}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x5, 0x6, 0x5, [@generic={0x31, 0xe, "90af98f51d64371f8e57e64e4ed980136f50eb831a73f02762dac35ec3fcf3294daf953d85c35fb7d5d26d2783c459"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x6, 0xc0, 0x27, [@generic={0x2e, 0x21, "5b883520142e65bae20da073302d8e6baeaa96df4fe5061fe6e0c02b39d9928ccc5c1358f286703b3e5265fc"}, @generic={0x5a, 0x3, "55f87c6c375efc4292edccd70d7ee06ce2a2816e3aa104cb463d405e53b2874469339ae9eb79c095e2fb291b99b5f1c5017bdf23dff4b95edcfb27a222fa5730968e38093d5e4e9d6cba1e0f9fcb9e67ce23c6df9f9749fd"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x40, 0x9, 0x3}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xf8, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x18, 0x40, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x8}]}}, {{0x9, 0x5, 0x1, 0x0, 0x7de, 0x80, 0x4, 0x6, [@generic={0x9b, 0x21, "8af80be5bb1f9359706425d12dab023525a1f0ad2b4f63f88b53627ea5e66deb88b1f79d678ad647dfd8cbd4f7342df8a1fa4cff2184eaeeb0b4612b713fdbf0d96b09c33edd336839cb021681c93ad23fd8a2a620901b183b310c07011b1a6f9078c5c76378390332fc9c4c30ca8496e6f4f655f7227d082b47a93a5c7109988611c153c1460224fc0fd2b2e8988d4cba2f48ad44ea78fc44"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8001}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0xce, 0x8, 0xfc, [@generic={0xde, 0x23, "89bd2c6e2a8f6861e81da0c583340eab1757796a72e1833fec8bb39d652d8fa8988e45a12721f249449e9cb29777aee099023dd1ecb8a75a7af3bc85d27db24e140ebd653a6c26032413305e925f8eb79265b21a7c27dcf77758fb53c34ce3de21b26c67255c87427843b457ba0890b52ec20e7a65db66f88e23e58fb9ddee8687b9bbefc95dc314296404dca80e9697e697ca28175ccf6e7d38dbcda614dc3fe5a6cdbe43d0af97ff758e8a1807d7027753d799d6665c1f0df78ee77bbbc5bb1fcb7af5eeaa327be491f1cedb0331433e7f31c48d67ca6cb5a3f581"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x1, 0x3, 0x1, [@generic={0xab, 0x22, "68dd2bfa725e42a55079e5f7019fcd82708a3d04ec0b347a696fab077ccb8abf5815170d96cde436b19e3d3e769f065be553b73e299024ed675c77521a6877255e3cacd00e52b3efe9a096cd15d9113b87aa1ab38ec559d5976aa249e261da5638867a04ed231e4946dd9e9a8b8697234a41c71e08831c0a6a3ab2c92bd743cff70c8579722b18d4f1b43e8c6f9acb797f939e760f5db734784e363287aa43bb39d645f6787b555ac1"}, @generic={0xda, 0x5, "dd4435481a188f70ca4986be460079fdc353f91ec1540cd46e22002656ab9f27298eb8d221136b46e7a8739816d5711ce0265254a97f069ec1aaf79cb93a5a520e531a25b0726b418dae1a3e50f2623e1810221a3b25067179f3b0dcecd5fe7e2a30ed4075833eb5232ccd908fec88b2b93882ee64077993efe7d3af5bbce6df76537d097d70a9b46b4a8a1af4225ab7b94af47abb16e051baeee40445180e44c73d60ec15925ae64f310a5ab4069bf9b3194443f72741f33730257ef00cf1aeb2f0ece671620bd5fa7a04c81b2f2fb28fe2ef40fbcd60a9"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x7, 0x2, 0xb, [@generic={0xd6, 0x30, "1d5472cdb2bc347ace97f321175d446991d05c91d22521048e4efc2e3b0b3eb9d485b9e230b9fedcdd14dc3258e218581696353dcf4bc350812eadbc09e6093daf2417fd3e7a8f510b79f8200120cc96ebd54772e1d017c722165369b515b1e788765b32fe00606f6ba2a8f5c9f81f1f9873f067d0a6f208d0c1d22a08e47dc5e9b9d1bc1c8970869d793505739623caed42c2610b9fe016e6953e4316e2b2081155e5e699a525d1217cb281eb70c1b0bf2fbbe3d4cb4732aa2837762537b70550777190b19e3eacf109af6507c5bf87bacba714"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x7}]}}, {{0x9, 0x5, 0x5, 0x4, 0x7ff, 0x5, 0x7, 0x40, [@generic={0x90, 0x22, "62df7b4dedaddbc7cc85ee4cdcd11ef33ac185b1e4ed5aab966e466e76a88d5bc6f65928b5cdcaae8b057e4bfbc5eae7924edc82b8047ed8def5fb44660bdde9fd455515b10365b83c2b56d60d2290502c080ed0a8dd832fa1200087c51741cf1f58b1f140abde374f78198a1fa633ee0b2e36d26e69bf707ec7800d3fd7d48813c6b1487a60ae03eebaba1f66d9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x4}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x7, 0x5, 0x4, [@generic={0xc8, 0x7, "ef8edb5a43c9042a745c7ff49e52e5c5292ecece5f48c796453aeeab055e4dcbc644de55dff102573eefbf6469d704f0b65723a3e7337fc67eff2f760f7180365e1a4e4d87d650474774b224551fdc2f956ecc45cebb48bb0e84ceb9ce2f2694adf0271833b6cb6a802259d07f50905f881598bfd03c5e16a9115739ce10615e9c0ad2830ffad62ad13195126fc9dc592cf54741afe6e50d9537dd5e2fe5250951cc5c6ac2e35562bfb4e8a0fcde9ca24a99b238b0c78876e8ae8213c89ab9cd633cd5156ce5"}, @generic={0xd7, 0x5, "8638f7d6a8e05d9c1ec2d28fd40681dc35ba42ad920d0e8d439f695b57c1fcc1a466ed4428cb3af57515aa3d17f908699994c1b9cead22a3603c140d8ef01e0f683db36225ff25300bc78b80fb600a84e823083f1080d7709ead7cdedf137d27daff4cb2b4a0059e20bd3a12bb079714003b67db8edba937abf1572f9e6e23017a2f9b65e00dd441a1f75cf088eb15f8ee524318d89a514d2031efcba527c181e826abc6702c05f89bd4d9b481d61f696ceece12b788476f786a0ef0fb4ac9f87dcdf9f8a6c262f43674e37b83ecd3702f97968fd4"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x62, 0x4, 0xfc}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x9, 0x9, 0x8, [@generic={0x4c, 0x5, "0a6fb6a1ddb76ac7cf0a7b5749c1d8e6360c9dd9bd7ba1544cf9b630832710cc83cde80580910c1fac93d40ffe5de73cc5c729d647a091bacb7a3ab67f715edfa06466154c1ba7fb04dd"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x4, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0x8, 0xfb}}]}}, {{0x9, 0x4, 0x1a, 0x0, 0x7, 0xff, 0xff, 0xff, 0x3, [], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x7, 0x1e, 0x3ff, 0x99, 0x0, 0xf9}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x6, 0x6, 0x8, [@generic={0x13, 0x23, "7835e5642380e8454ea145f18903cf0d7f"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x80, 0x9, 0x8}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x6, 0x0, 0x3, [@generic={0x82, 0x1, "1cbd78ed6d6bf4445beae250a4a984c7e620c46962cce376e554e2a0f8964f3ceeab261ec6579292bea881c760434af2f4d2600d98611f2921ee3fc58aed80a0b0ffad5fc1fed3cd60d567b78c2608ac8a0c3578c940c8551a6f3aaa986d7182b5d1fb02e4dddffe26f09f08486eeacbdb0ce5f84c2ba451a9b933bcea06533d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x2, 0xe0, 0x72, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @generic={0x60, 0x5, "2048f61e56e328819ee7b9ecbc10633310f3a5b4369816feb7d06b432bdfa969940b7979d5ec74b9117df46c33e8b7d42e6c9d9414eadd7205ca5d4c927b361043d34f2d0d578a1bd2b3e728cfa0d71a37328184a96c8c848276be44cd45"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x0, 0xe, 0xc, [@generic={0x9f, 0x0, "a7deda4f7dcb3dae7f082ff2b53d912f32cc4ccfcef3cb00d47f08aa5e8558381b4f746503ad63ee1809b6bb9f374000ec2cf3dc4ffe755197c0b08f1283f5c417e140d4057327e59551e9589463d547f46fb0090e81831f3eea6a650fd293d995dcde05b792c9976b81c0aa6976633b81e28ecc60cbc9d903ecdb74a3ccd327d0aa9dc11ce096b10420eb972b7aba81e1e0de2ea8b58fa8406757becc"}, @generic={0x8d, 0x6, "fd92ac3ae12b66288d2fe22eb7e7c892946812752d2345f742200af95078b14aa536e0f0da5ee5e30e9debbc58834738d342c54be8cd8df320c05f85d3c67532705b910142fb39404fc91ca8e53b036b2094da6c2e4adae7149cd17c2e24e949e70bf38d98708baa93f19d334a6f965fd327dc1576c3d0ff4f9555383ae48c5b9a39061d91f8f617c9799d"}]}}]}}, {{0x9, 0x4, 0xb2, 0x50, 0xd, 0xe8, 0x80, 0xf, 0x0, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "b14042e6cf56"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xc0, 0x1100, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x800}, [@obex={0x5, 0x24, 0x15, 0xcbd}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5a}, @mdlm_detail={0x6f, 0x24, 0x13, 0xa, "618d1006e4e3571f0c2a9b149a18af09cdef4c53e45fef471b1b41fb8cbca55d5924b66fb9821de179bebe9ac9fbcbbe483e490ce9b44a704cd062ca13a3e11d5af9e7a0a47bc02fe5e2daaf6670b971297e37a5ddf12731b3043a0a5e8c31272bfd456edbe2a9e3d49621"}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "3211cfd861"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x3, 0x5, 0x7f}, {0x6, 0x24, 0x1a, 0x9, 0x1}, [@mdlm_detail={0x8e, 0x24, 0x13, 0x5, "c4615e3d67521d736181fd34c3412cc5f11841cf4d4861d5756d27abff47b7546da04bec8d8128bd675d0ee0d272f83e22095a67348326b5cbb5b37d6a5ffcd5a3d8e8f64f7e46c2b0add04844f6cbb37fd8335671b4ab2ce548cd6c37da1fd40c4063fa614e45c3b38e95501a317160b377699a47b99e147cdba5231b9ccf48b85ab162b7f3c8dcf7f9"}, @obex={0x5, 0x24, 0x15, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x7fff, 0x7, 0xd, 0x7a, 0x7, 0x5}]}], [{{0x9, 0x5, 0x1, 0x1, 0x10, 0x3, 0x7f, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xf45}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x3, 0x9, 0x9, [@generic={0x63, 0xe, "f43cf329e3ea1ade04995670930a3a44edde2cf57f7f1e5c08d6f36eb4f94e0eb5e6da5ab6c9d85eefb0410e17a36519669bcf00c0c91bdac8e373daf576219fec4cf751c28c6b916df5dca252858c5f16f20fb96577d6c8821695cb99d84b4bc9"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x3, 0x4, 0x1, [@generic={0xc2, 0x8, "1ed4836f9fae547885efc8d31133961cf715306259c00241142e73bf9b1f3281c862243f426baddb5a220825cd52fee4bb5661750746e4eaf42725b97802187de32db44a8b4ad02747e6187b2975f14cdcd2a3e6fe979e24fb666dd15796c450543acf2a44886ecdd6184a0b8cbf29686ebd60b61c7d46a6fbbe47e9a06f63619b7c49700604e813c5fe8e8769eb71566f85e525f389ef46a81d2d7fdf8b1e18caeeb057440bbd609d14e95ad4124cfb4a82743e91ae1ad2025aee34542a7bc5"}]}}, {{0x9, 0x5, 0x9, 0x28, 0x40, 0x0, 0x2, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x1}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x1, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x2}]}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0xc7, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x22, 0x6}, @generic={0xb2, 0xc, "8faefc925a1527f506c20bef9f00f3d37a431d7370103b0b487826f218adbe1d9520da9caa8b590ce5b22557de254bad990ef7048ed5829282d26182dfc52fa8dd8fafe637ab624d70b1d35c1aca5c8f3add27c64d57ea637b65f137772a4c96a31935d0ebed4a2d4a4de9c4ce605247ea15656667c1a5951be02f6c8e38ba314fab57ff2fb502667a550534e5244ec7d72c585f1c5ae93e131a00ab618ca0cb552e7d836cb6157035fdb9c05ffe3559"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x0, 0xd, 0x8, 0xfa, [@generic={0x34, 0xd, "b37cd1393ea823e3632b07ab30e9b405f7addbd5c94bea998c1c927f76f4d5d189b7d09e2a9b3ad0052dcba8bfc1e5054cda"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xd, 0x93, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x6}, @generic={0x6e, 0xf, "bac9b97afe093b20f4b96253cc364301716b18402d716021df8e17f6f092df5830517e3b4304e976ff11d69686086a91d3460c30ad6fcfb6a88591aed76ec68da9e1debdf4f7232b87bf303c25233ef1ad227232b3c5af6ce0a21b09b66165a69fb12ee905359fedc7a0b1f2"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x2, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9}]}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x1, 0xa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x9, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0xfff}]}}, {{0x9, 0x5, 0x8, 0x2, 0x0, 0x8, 0x80, 0x1}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x6, 0x0, 0x7, [@generic={0x82, 0x4, "f81c69c4a0892084590148600a63be8323a001bb37a568e78771afa3807e8cfd1054ea4a08696860a0c4e10c90e8a61452cc4206fc709ddf0c2caf7d2cfc270848fa13c58340e5848c0f0bcdde6ce64756b8545fdde3a215d2e55115a34f93d290e32773794e3c49f3458a7e3ac5ad2e5ee96fb38b03158c7acb9084b053b424"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xe7, 0x6}]}}]}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x50, 0x0, 0x6, 0x9, 0x40, 0xc}, 0x8d, &(0x7f00000012c0)={0x5, 0xf, 0x8d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x1, 0xb6b}, @generic={0x76, 0x10, 0xb, "1e0b3eb53c821584cb6b855c7de8be23cf0d15c133f41f0b2b1d44ae417e5c46e5014bd83aa4adbb11198561c7be4495bb1d8a729e2b88e21bbbc1acfe5d31347962ff59fb3ff9f5338bcb2caafdc9cc53dd93f7a64a9efff58a5ca996d8fea398573217534a19b9edac9b60de6b8240148f19"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0xde, 0x80, 0x9, 0xc4}]}, 0x1, [{0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x280a}}]}) 505.924381ms ago: executing program 0 (id=1145): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x34, r1, 0x629, 0x70bd2f, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000104}, 0x40) 483.959006ms ago: executing program 0 (id=1146): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x101) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 418.978259ms ago: executing program 0 (id=1147): fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffdb, 0x200, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x8, 0x3, 0x33f, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8ebd, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffb, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) 327.136017ms ago: executing program 2 (id=1148): r0 = syz_open_dev$midi(0x0, 0xf200000000000000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, 0x0) 277.523861ms ago: executing program 2 (id=1149): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) eventfd(0x71f1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x2000, 0x0, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x428, 0x3f3, 0x8, 0x70bd29, 0x25dfdbfc, {0x2, 0x2, 0x2f, [0x80000001, 0x2, 0x0, 0x3ff, 0x3, 0x4, 0x9, 0x400, 0x2, 0x6, 0x3, 0xc0d, 0x80000001, 0x39d, 0x10001, 0x7, 0x9, 0x7, 0x2e, 0x0, 0x8, 0x401, 0x1, 0x80000000, 0x9, 0x9, 0x200, 0x10, 0x6, 0xca, 0xb7, 0x8000, 0x97, 0x200, 0x8e, 0xd, 0x5, 0x2, 0xd, 0x1, 0x1, 0x5, 0xffff, 0xfffffff7, 0xf, 0x6ab, 0x401, 0x8, 0x2, 0x2, 0x7, 0x7f, 0xffff7fff, 0xfffffff9, 0x0, 0x6, 0x3db4, 0x3b, 0x6, 0xfc000000, 0x7, 0x8, 0x7, 0x80], [0xc, 0x3, 0x2, 0x3, 0x10001, 0x3, 0x443d, 0x4, 0xfffff71c, 0x4, 0x7, 0x80000000, 0xfffffe01, 0x8, 0x7fff, 0x9, 0xb0, 0x1, 0x3ff, 0x1, 0x5e, 0x7, 0x8, 0x457, 0x7, 0x7ff, 0x8, 0xd0, 0x0, 0xed, 0x1, 0x1, 0x9, 0x1, 0x80, 0x7fa, 0xf, 0x8, 0x8, 0x9, 0xc02, 0xfffffff8, 0x4, 0x0, 0x4, 0x7, 0x7, 0xfffffffe, 0x2d8d, 0x5, 0x480, 0xd, 0x100000, 0xf, 0x20cb, 0x7fff, 0x7ff, 0x308e19ee, 0x4, 0x3, 0x2, 0x4, 0x3, 0x80000001], [0x9, 0x9, 0x3, 0x2, 0x40, 0x5, 0x81, 0xffff, 0x0, 0x9, 0xfffff000, 0x10, 0x8, 0x5, 0x4, 0x9, 0x5, 0x1, 0x2, 0x0, 0x7ff, 0xffff641c, 0x44, 0x9, 0x80, 0x5, 0x2, 0xb8000000, 0x6, 0x3, 0x5, 0x40, 0x7, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x1, 0x4, 0x8, 0x0, 0x3, 0x44f, 0x6, 0xffff, 0x8, 0x8, 0x2, 0x0, 0x4, 0x244, 0x0, 0x3, 0xa, 0x5, 0x7, 0x8, 0xdd000000, 0x1, 0x4, 0x9, 0x6, 0x9], [0x101, 0x2, 0x0, 0xff, 0xa, 0x3, 0x9, 0x47d, 0x3, 0xfffffffe, 0x1, 0x1ff, 0x5, 0x0, 0x87e1, 0x0, 0x31e4, 0x1, 0x23, 0x1, 0x7f, 0x4, 0x6, 0x753, 0x2, 0xfffffffe, 0x5, 0xfff, 0x7ff, 0x2, 0xe15e, 0xb13e, 0x80000000, 0x8, 0x3, 0x200, 0x1, 0x9, 0x4, 0x3ff, 0x9, 0x7, 0x7f, 0x2, 0xfffffffc, 0x1000, 0x9, 0x6, 0x3, 0xfff, 0xcf, 0x7, 0x3, 0x5, 0x3, 0x7, 0xea5, 0x0, 0x4, 0x8, 0x1, 0x9, 0x5, 0x5], 0x5, ['\x00', '-!(\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x10}, 0x80) 0s ago: executing program 2 (id=1150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) (fail_nth: 7) kernel console output (not intermixed with test programs): t: 16 [ 244.917628][ T5717] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 244.917660][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.920078][ T5717] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 244.920106][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.920128][ T5717] usb 2-1: Product: syz [ 244.920144][ T5717] usb 2-1: Manufacturer: syz [ 244.920159][ T5717] usb 2-1: SerialNumber: syz [ 244.989599][ T5717] usb 2-1: config 0 descriptor?? [ 245.000696][ T5717] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 245.000728][ T5717] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 245.463032][ T199] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 245.501035][ T7799] FAULT_INJECTION: forcing a failure. [ 245.501035][ T7799] name failslab, interval 1, probability 0, space 0, times 0 [ 245.501074][ T7799] CPU: 0 UID: 0 PID: 7799 Comm: syz.3.716 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 245.501095][ T7799] Tainted: [L]=SOFTLOCKUP [ 245.501114][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 245.501128][ T7799] Call Trace: [ 245.501136][ T7799] [ 245.501145][ T7799] dump_stack_lvl+0xe8/0x150 [ 245.501186][ T7799] should_fail_ex+0x467/0x600 [ 245.501222][ T7799] should_failslab+0xa8/0x100 [ 245.501256][ T7799] __kmalloc_cache_noprof+0xa1/0x670 [ 245.501296][ T7799] ? sync_file_create+0x53/0x1d0 [ 245.501324][ T7799] ? sync_file_create+0x53/0x1d0 [ 245.501360][ T7799] sync_file_create+0x53/0x1d0 [ 245.501390][ T7799] sw_sync_ioctl+0xd2f/0x1110 [ 245.501435][ T7799] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 245.501476][ T7799] ? __fget_files+0x2a/0x420 [ 245.501529][ T7799] ? __fget_files+0x3a8/0x420 [ 245.501558][ T7799] ? __fget_files+0x2a/0x420 [ 245.501595][ T7799] ? bpf_lsm_file_ioctl+0x9/0x20 [ 245.501630][ T7799] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 245.501661][ T7799] __se_sys_ioctl+0xff/0x170 [ 245.501686][ T7799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.501710][ T7799] do_syscall_64+0x174/0x580 [ 245.501730][ T7799] ? trace_irq_disable+0x3b/0x140 [ 245.501749][ T7799] ? clear_bhb_loop+0x40/0x90 [ 245.501778][ T7799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.501801][ T7799] RIP: 0033:0x7f5e0012de59 [ 245.501821][ T7799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.501839][ T7799] RSP: 002b:00007f5dfe386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.501861][ T7799] RAX: ffffffffffffffda RBX: 00007f5e003b5fa0 RCX: 00007f5e0012de59 [ 245.501876][ T7799] RDX: 0000200000000000 RSI: 00000000c0285700 RDI: 0000000000000003 [ 245.501889][ T7799] RBP: 00007f5dfe386090 R08: 0000000000000000 R09: 0000000000000000 [ 245.501906][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.501915][ T7799] R13: 00007f5e003b6038 R14: 00007f5e003b5fa0 R15: 00007fffdae51d28 [ 245.501952][ T7799] [ 245.681177][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.681210][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.681261][ T199] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 245.681321][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.726061][ T5717] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 245.747991][ T5717] em28xx 2-1:0.0: Config register raw data: 0x70 [ 245.805235][ T5717] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 245.805271][ T5717] em28xx 2-1:0.0: No AC97 audio processor [ 245.808187][ T199] usb 1-1: config 0 descriptor?? [ 246.063490][ T7797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.067858][ T7797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.137026][ T5717] usb 2-1: USB disconnect, device number 47 [ 246.227352][ T7809] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 246.284284][ T7809] xfrm0 speed is unknown, defaulting to 1000 [ 246.288582][ T199] usbhid 1-1:0.0: can't add hid device: -71 [ 246.288715][ T199] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 246.343008][ T199] usb 1-1: USB disconnect, device number 43 [ 246.563960][ T7817] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 246.563989][ T7817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.662831][ T7817] vhci_hcd vhci_hcd.0: Device attached [ 246.802792][ T199] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 246.903046][ T5717] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 246.957845][ T7824] binder: Bad value for 'stats' [ 246.963792][ T199] usb 4-1: Using ep0 maxpacket: 16 [ 246.971718][ T199] usb 4-1: config 0 has no interfaces? [ 246.972832][ T824] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 246.987669][ T199] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 246.987690][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.987704][ T199] usb 4-1: Product: syz [ 246.987715][ T199] usb 4-1: Manufacturer: syz [ 246.987725][ T199] usb 4-1: SerialNumber: syz [ 246.999385][ T199] usb 4-1: config 0 descriptor?? [ 247.126695][ T824] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.131200][ T824] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 247.131229][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 247.131250][ T824] usb 2-1: Product: syz [ 247.131265][ T824] usb 2-1: Manufacturer: syz [ 247.131280][ T824] usb 2-1: SerialNumber: syz [ 247.240846][ T7818] vhci_hcd: cannot find a urb of seqnum 3799595792 max seqnum 1 [ 247.244417][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.722'. [ 247.270805][ T199] usb 4-1: USB disconnect, device number 50 [ 247.336746][ T6769] vhci_hcd vhci_hcd.3: stop threads [ 247.377808][ T6769] vhci_hcd vhci_hcd.3: release socket [ 247.378361][ T6769] vhci_hcd vhci_hcd.3: disconnect device [ 247.423559][ T824] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 247.430709][ T824] usb 2-1: USB disconnect, device number 48 [ 247.451994][ T824] usblp0: removed [ 248.264031][ T199] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 248.421167][ T199] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 248.444367][ T199] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 248.444389][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.444403][ T199] usb 4-1: Product: syz [ 248.444413][ T199] usb 4-1: Manufacturer: syz [ 248.444424][ T199] usb 4-1: SerialNumber: syz [ 248.533930][ T199] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 248.848290][ T7861] FAULT_INJECTION: forcing a failure. [ 248.848290][ T7861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.848332][ T7861] CPU: 0 UID: 0 PID: 7861 Comm: syz.0.731 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 248.848362][ T7861] Tainted: [L]=SOFTLOCKUP [ 248.848370][ T7861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 248.848397][ T7861] Call Trace: [ 248.848405][ T7861] [ 248.848415][ T7861] dump_stack_lvl+0xe8/0x150 [ 248.848449][ T7861] should_fail_ex+0x467/0x600 [ 248.848491][ T7861] _copy_to_iter+0x404/0x1810 [ 248.848511][ T7861] ? lockdep_hardirqs_on+0x7a/0x110 [ 248.848540][ T7861] ? seq_putc+0x75/0xf0 [ 248.848574][ T7861] ? __pfx__copy_to_iter+0x10/0x10 [ 248.848601][ T7861] ? fput+0xa0/0xd0 [ 248.848628][ T7861] ? __pfx_fanotify_show_fdinfo+0x10/0x10 [ 248.848666][ T7861] seq_read_iter+0xaaf/0xcb0 [ 248.848708][ T7861] seq_read+0x36a/0x490 [ 248.848745][ T7861] ? __pfx_seq_read+0x10/0x10 [ 248.848786][ T7861] ? rw_verify_area+0x250/0x4d0 [ 248.848810][ T7861] ? __pfx_seq_read+0x10/0x10 [ 248.848836][ T7861] vfs_read+0x219/0xa90 [ 248.848866][ T7861] ? __pfx_vfs_read+0x10/0x10 [ 248.848890][ T7861] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 248.848912][ T7861] ? lockdep_hardirqs_on+0x7a/0x110 [ 248.848951][ T7861] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 248.848973][ T7861] ? mutex_lock_nested+0x152/0x1d0 [ 248.849000][ T7861] ? fdget_pos+0x252/0x320 [ 248.849044][ T7861] ksys_read+0x156/0x270 [ 248.849070][ T7861] ? __pfx_ksys_read+0x10/0x10 [ 248.849102][ T7861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.849128][ T7861] do_syscall_64+0x174/0x580 [ 248.849149][ T7861] ? trace_irq_disable+0x3b/0x140 [ 248.849171][ T7861] ? clear_bhb_loop+0x40/0x90 [ 248.849200][ T7861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.849231][ T7861] RIP: 0033:0x7f0f7628de59 [ 248.849253][ T7861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.849272][ T7861] RSP: 002b:00007f0f744e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.849295][ T7861] RAX: ffffffffffffffda RBX: 00007f0f76515fa0 RCX: 00007f0f7628de59 [ 248.849312][ T7861] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000005 [ 248.849326][ T7861] RBP: 00007f0f744e6090 R08: 0000000000000000 R09: 0000000000000000 [ 248.849339][ T7861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.849352][ T7861] R13: 00007f0f76516038 R14: 00007f0f76515fa0 R15: 00007ffe4e9617d8 [ 248.849387][ T7861] [ 249.002940][ T5711] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 249.171585][ T199] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 249.186123][ T199] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 249.186214][ T199] usb 4-1: media controller created [ 249.209693][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.209725][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.209762][ T5711] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 249.209802][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.291266][ T5711] usb 2-1: config 0 descriptor?? [ 249.402236][ T199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.434631][ T7871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.733'. [ 249.434662][ T7871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.733'. [ 249.550803][ T7860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.564533][ T7860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.794779][ T5711] usbhid 2-1:0.0: can't add hid device: -71 [ 249.794908][ T5711] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 249.829208][ T5711] usb 2-1: USB disconnect, device number 49 [ 249.981317][ T199] usb 4-1: USB disconnect, device number 51 [ 250.084929][ T11] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 250.246717][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.249087][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 250.249117][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 250.249149][ T11] usb 1-1: Product: syz [ 250.249165][ T11] usb 1-1: Manufacturer: syz [ 250.249180][ T11] usb 1-1: SerialNumber: syz [ 250.474918][ T7899] FAULT_INJECTION: forcing a failure. [ 250.474918][ T7899] name failslab, interval 1, probability 0, space 0, times 0 [ 250.474958][ T7899] CPU: 0 UID: 0 PID: 7899 Comm: syz.1.741 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 250.474988][ T7899] Tainted: [L]=SOFTLOCKUP [ 250.474999][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.475013][ T7899] Call Trace: [ 250.475021][ T7899] [ 250.475030][ T7899] dump_stack_lvl+0xe8/0x150 [ 250.475064][ T7899] should_fail_ex+0x467/0x600 [ 250.475106][ T7899] should_failslab+0xa8/0x100 [ 250.475153][ T7899] __kmalloc_noprof+0xfb/0x790 [ 250.475185][ T7899] ? tomoyo_realpath_from_path+0xef/0x640 [ 250.475211][ T7899] ? tomoyo_realpath_from_path+0xef/0x640 [ 250.475245][ T7899] tomoyo_realpath_from_path+0xef/0x640 [ 250.475282][ T7899] ? tomoyo_path_number_perm+0x219/0x5f0 [ 250.475317][ T7899] tomoyo_path_number_perm+0x246/0x5f0 [ 250.475356][ T7899] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 250.475389][ T7899] ? __lock_acquire+0x6df/0x2e40 [ 250.475427][ T7899] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.475450][ T7899] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.475493][ T7899] ? __fget_files+0x2a/0x420 [ 250.475529][ T7899] ? __fget_files+0x2a/0x420 [ 250.475561][ T7899] ? __fget_files+0x3a8/0x420 [ 250.475593][ T7899] ? __fget_files+0x2a/0x420 [ 250.475631][ T7899] security_file_ioctl+0xb9/0x260 [ 250.475666][ T7899] __se_sys_ioctl+0x47/0x170 [ 250.475692][ T7899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.475716][ T7899] do_syscall_64+0x174/0x580 [ 250.475746][ T7899] ? clear_bhb_loop+0x40/0x90 [ 250.475773][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.475796][ T7899] RIP: 0033:0x7f7af321de59 [ 250.475823][ T7899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.475842][ T7899] RSP: 002b:00007f7af1476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.475866][ T7899] RAX: ffffffffffffffda RBX: 00007f7af34a5fa0 RCX: 00007f7af321de59 [ 250.475882][ T7899] RDX: 0000200000000040 RSI: 00000000c0305602 RDI: 0000000000000003 [ 250.475896][ T7899] RBP: 00007f7af1476090 R08: 0000000000000000 R09: 0000000000000000 [ 250.475909][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.475923][ T7899] R13: 00007f7af34a6038 R14: 00007f7af34a5fa0 R15: 00007fffdec68b18 [ 250.475954][ T7899] [ 250.476265][ T7899] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.495570][ T11] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 250.778576][ T5702] usb 1-1: USB disconnect, device number 44 [ 250.797417][ T5702] usblp0: removed [ 250.951393][ T7907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.954852][ T7907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.040052][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 252.053251][ T5717] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 252.142813][ T37] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 252.242869][ T11] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 252.297473][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.297499][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.297527][ T37] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 252.297544][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.356239][ T37] usb 2-1: config 0 descriptor?? [ 252.399255][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.420510][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 252.420559][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 252.420581][ T11] usb 1-1: Product: syz [ 252.420597][ T11] usb 1-1: Manufacturer: syz [ 252.420614][ T11] usb 1-1: SerialNumber: syz [ 252.588863][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.592314][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.634006][ T7935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.638089][ T7935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.668460][ T11] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 252.761533][ T11] usb 1-1: USB disconnect, device number 45 [ 252.779022][ T11] usblp0: removed [ 252.827586][ T37] usbhid 2-1:0.0: can't add hid device: -71 [ 252.827721][ T37] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 252.853493][ T37] usb 2-1: USB disconnect, device number 50 [ 253.281736][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.282506][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.478884][ T7946] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22) [ 253.549167][ T7948] nfsd: Unknown parameter 'norecoveryport' [ 253.576177][ T7946] 9p: Could not find request transport: t [ 253.632790][ T5702] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 253.783077][ T5702] usb 4-1: Using ep0 maxpacket: 16 [ 253.786206][ T5702] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 253.786239][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 253.788897][ T5702] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 253.788927][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.788949][ T5702] usb 4-1: Product: syz [ 253.788969][ T5702] usb 4-1: Manufacturer: syz [ 253.788979][ T5702] usb 4-1: SerialNumber: syz [ 253.855753][ T5702] usb 4-1: config 0 descriptor?? [ 253.874436][ T5702] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 253.874479][ T5702] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 253.959701][ T7953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.759'. [ 254.252806][ T11] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 254.402748][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 254.406336][ T11] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 254.406360][ T11] usb 1-1: config 0 has no interface number 0 [ 254.406402][ T11] usb 1-1: config 0 interface 12 has no altsetting 0 [ 254.412866][ T11] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 254.412891][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.412909][ T11] usb 1-1: Product: syz [ 254.412922][ T11] usb 1-1: Manufacturer: syz [ 254.412934][ T11] usb 1-1: SerialNumber: syz [ 254.439967][ T11] usb 1-1: config 0 descriptor?? [ 254.479288][ T5702] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 254.498092][ T5702] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 254.639431][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.659261][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.705336][ T5702] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 254.705357][ T5702] em28xx 4-1:0.0: No AC97 audio processor [ 254.747477][ T5702] usb 4-1: USB disconnect, device number 52 [ 254.764489][ T5702] em28xx 4-1:0.0: Disconnecting em28xx [ 254.825064][ T5702] em28xx 4-1:0.0: Freeing device [ 254.981477][ T11] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 254.981540][ T11] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 254.981560][ T11] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 254.981656][ T11] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 254.997034][ T11] usb 1-1: USB disconnect, device number 46 [ 255.442799][ T5717] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 255.562412][ T5615] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 255.576390][ T5717] usb 2-1: device descriptor read/64, error -71 [ 255.752787][ T11] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 255.782992][ T7990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.785937][ T7990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.817697][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.817814][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.844441][ T5717] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 255.932974][ T199] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 255.954629][ T11] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 255.956985][ T11] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 255.957014][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.957034][ T11] usb 4-1: Product: syz [ 255.957049][ T11] usb 4-1: Manufacturer: syz [ 255.957069][ T11] usb 4-1: SerialNumber: syz [ 255.977746][ T11] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 256.012731][ T5717] usb 2-1: device descriptor read/64, error -71 [ 256.105063][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 256.105094][ T199] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 256.105153][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 256.105170][ T199] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 256.105199][ T199] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 256.105216][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.110368][ T199] usb 1-1: config 0 descriptor?? [ 256.122835][ T5717] usb usb2-port1: attempt power cycle [ 256.442204][ T199] hdpvr 1-1:0.0: unexpected answer of status request, len 0 [ 256.442227][ T199] hdpvr 1-1:0.0: device init failed [ 256.442330][ T199] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 256.525200][ T11] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 256.525544][ T11] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 256.525578][ T11] usb 4-1: media controller created [ 256.541444][ T5717] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 256.593338][ T5717] usb 2-1: device descriptor read/8, error -71 [ 256.611755][ T199] usb 1-1: USB disconnect, device number 47 [ 256.640276][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.843335][ T5717] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 256.865304][ T5717] usb 2-1: device descriptor read/8, error -71 [ 256.967014][ T11] usb 4-1: USB disconnect, device number 53 [ 256.973100][ T5717] usb usb2-port1: unable to enumerate USB device [ 257.733502][ T5702] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 257.896480][ T5702] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 257.896526][ T5702] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 257.896567][ T5702] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.896590][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.947884][ T8029] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 257.964826][ T5702] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 258.185473][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.187552][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.212353][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'. [ 258.341208][ T8034] FAT-fs (nullb0): bogus number of reserved sectors [ 258.341238][ T8034] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 259.202556][ T5717] usb 1-1: USB disconnect, device number 48 [ 259.283347][ T199] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 259.443057][ T199] usb 4-1: Using ep0 maxpacket: 32 [ 259.472325][ T199] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 259.472361][ T199] usb 4-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 259.472376][ T199] usb 4-1: Product: syz [ 259.472386][ T199] usb 4-1: Manufacturer: syz [ 259.472398][ T199] usb 4-1: SerialNumber: syz [ 259.498133][ T199] usb 4-1: config 0 descriptor?? [ 259.634470][ T37] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 259.742146][ T8062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.753557][ T8062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.799792][ T37] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.817502][ T37] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 259.817532][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 259.817554][ T37] usb 2-1: Product: syz [ 259.817571][ T37] usb 2-1: Manufacturer: syz [ 259.817587][ T37] usb 2-1: SerialNumber: syz [ 260.000934][ T8064] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 260.087115][ T37] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 260.128792][ T37] usb 2-1: USB disconnect, device number 55 [ 260.135891][ T37] usblp0: removed [ 260.403972][ T199] usb 4-1: reset high-speed USB device number 54 using dummy_hcd [ 260.413455][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.414325][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.790061][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 260.790225][ T8074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.795'. [ 260.926676][ T8077] netlink: 44 bytes leftover after parsing attributes in process `syz.1.796'. [ 261.037690][ T8049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.038777][ T8049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.084518][ T199] usb 4-1: [UEAGLE-ATM] interface 1 not found [ 261.084543][ T199] ueagle-atm 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 261.181030][ T199] usb 4-1: USB disconnect, device number 54 [ 261.521582][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.522203][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.129830][ T38] audit: type=1326 audit(1783379314.316:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8086 comm="syz.3.801" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e0012de59 code=0x0 [ 262.302760][ T199] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 262.452877][ T199] usb 1-1: Using ep0 maxpacket: 32 [ 262.463642][ T199] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 262.463669][ T199] usb 1-1: config 0 has no interface number 0 [ 262.467806][ T199] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 262.467827][ T199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.467842][ T199] usb 1-1: Product: syz [ 262.467853][ T199] usb 1-1: Manufacturer: syz [ 262.467863][ T199] usb 1-1: SerialNumber: syz [ 262.497280][ T199] usb 1-1: config 0 descriptor?? [ 262.920493][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.921135][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.944979][ T199] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 262.945006][ T199] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 263.149867][ T199] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 263.150215][ T199] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 263.811079][ T8113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.809'. [ 263.882756][ T5717] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 264.022704][ T5717] usb 2-1: device descriptor read/64, error -71 [ 264.262853][ T5717] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 264.412791][ T5717] usb 2-1: device descriptor read/64, error -71 [ 264.523186][ T5717] usb usb2-port1: attempt power cycle [ 264.892933][ T5717] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 264.913292][ T5717] usb 2-1: device descriptor read/8, error -71 [ 265.022770][ T37] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 265.075737][ T199] usb 1-1: USB disconnect, device number 49 [ 265.153440][ T5717] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 265.176224][ T5717] usb 2-1: device descriptor read/8, error -71 [ 265.187199][ T37] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.204651][ T37] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 265.204683][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 265.204705][ T37] usb 4-1: Product: syz [ 265.204721][ T37] usb 4-1: Manufacturer: syz [ 265.204736][ T37] usb 4-1: SerialNumber: syz [ 265.287615][ T5717] usb usb2-port1: unable to enumerate USB device [ 265.479542][ T37] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 265.495344][ T37] usb 4-1: USB disconnect, device number 55 [ 265.507446][ T37] usblp0: removed [ 266.786755][ T8159] netlink: 188 bytes leftover after parsing attributes in process `syz.3.824'. [ 267.343779][ T5717] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 267.494370][ T5717] usb 4-1: Using ep0 maxpacket: 8 [ 267.496339][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.496375][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 267.496394][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 267.499872][ T5717] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 267.499901][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.499915][ T5717] usb 4-1: Product: syz [ 267.499925][ T5717] usb 4-1: Manufacturer: syz [ 267.499935][ T5717] usb 4-1: SerialNumber: syz [ 267.522733][ T5710] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 267.538412][ T5717] usb 4-1: config 0 descriptor?? [ 267.594415][ T8169] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 267.632784][ T199] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 267.682751][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 267.683554][ T5710] usb 2-1: too many configurations: 166, using maximum allowed: 8 [ 267.685367][ T5710] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 267.685404][ T5710] usb 2-1: can't read configurations, error -61 [ 267.699737][ T5717] rc_core: IR keymap rc-streamzap not found [ 267.699798][ T5717] Registered IR keymap rc-empty [ 267.704169][ T5717] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 267.750864][ T5717] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 267.822866][ T5710] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 267.910707][ T199] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 267.910755][ T199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.910776][ T199] usb 1-1: Product: syz [ 267.910791][ T199] usb 1-1: Manufacturer: syz [ 267.910847][ T199] usb 1-1: SerialNumber: syz [ 267.982760][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 267.983930][ T5710] usb 2-1: too many configurations: 166, using maximum allowed: 8 [ 267.988295][ T5710] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 267.988331][ T5710] usb 2-1: can't read configurations, error -61 [ 267.996824][ T5710] usb usb2-port1: attempt power cycle [ 268.344933][ T8180] netlink: set zone limit has 4 unknown bytes [ 268.362810][ T199] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 268.364624][ T199] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 268.398455][ T5710] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 268.419317][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 268.422778][ T5710] usb 2-1: too many configurations: 166, using maximum allowed: 8 [ 268.426463][ T5710] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 268.426499][ T5710] usb 2-1: can't read configurations, error -61 [ 268.584766][ T5710] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 268.604450][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 268.605622][ T5710] usb 2-1: too many configurations: 166, using maximum allowed: 8 [ 268.608498][ T5710] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 268.608533][ T5710] usb 2-1: can't read configurations, error -61 [ 268.662472][ T5710] usb usb2-port1: unable to enumerate USB device [ 269.199819][ T5710] usb 4-1: USB disconnect, device number 56 [ 269.212029][ T199] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 269.212090][ T199] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 269.284795][ T199] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 269.328213][ T199] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 269.370705][ T8191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.371259][ T8191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.395774][ T4917] Bluetooth: hci0: unexpected cc 0x0809 length: 68 > 4 [ 269.395799][ T4917] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 269.724590][ T8194] FAULT_INJECTION: forcing a failure. [ 269.724590][ T8194] name failslab, interval 1, probability 0, space 0, times 0 [ 269.724618][ T8194] CPU: 0 UID: 0 PID: 8194 Comm: syz.3.835 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 269.724641][ T8194] Tainted: [L]=SOFTLOCKUP [ 269.724646][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 269.724656][ T8194] Call Trace: [ 269.724662][ T8194] [ 269.724668][ T8194] dump_stack_lvl+0xe8/0x150 [ 269.724694][ T8194] should_fail_ex+0x467/0x600 [ 269.724723][ T8194] should_failslab+0xa8/0x100 [ 269.724747][ T8194] ? __kernfs_new_node+0xe7/0xa70 [ 269.724773][ T8194] kmem_cache_alloc_noprof+0x9e/0x680 [ 269.724795][ T8194] ? __kernfs_new_node+0xe7/0xa70 [ 269.724831][ T8194] __kernfs_new_node+0xe7/0xa70 [ 269.724863][ T8194] ? __pfx___kernfs_new_node+0x10/0x10 [ 269.724889][ T8194] ? kernfs_root+0x1c/0x230 [ 269.724917][ T8194] ? kernfs_root+0x1c/0x230 [ 269.724940][ T8194] ? kernfs_root+0x1c/0x230 [ 269.724962][ T8194] ? kernfs_root+0x1c/0x230 [ 269.724989][ T8194] kernfs_create_dir_ns+0xfe/0x230 [ 269.725009][ T8194] sysfs_create_dir_ns+0x12f/0x2a0 [ 269.725035][ T8194] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 269.725062][ T8194] ? rt_spin_unlock+0x163/0x200 [ 269.725086][ T8194] kobject_add_internal+0x62c/0xce0 [ 269.725111][ T8194] kobject_add+0x163/0x240 [ 269.725130][ T8194] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 269.725154][ T8194] ? __pfx_kobject_add+0x10/0x10 [ 269.725177][ T8194] ? get_device_parent+0x370/0x3a0 [ 269.725198][ T8194] ? __pfx_klist_children_get+0x10/0x10 [ 269.725217][ T8194] device_add+0x3fa/0xb80 [ 269.725240][ T8194] input_register_device+0x9d7/0x1150 [ 269.725263][ T8194] uinput_create_device+0x53e/0x690 [ 269.725293][ T8194] uinput_ioctl_handler+0x436/0x15a0 [ 269.725323][ T8194] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 269.725354][ T8194] ? __fget_files+0x2a/0x420 [ 269.725378][ T8194] ? __fget_files+0x3a8/0x420 [ 269.725405][ T8194] ? bpf_lsm_file_ioctl+0x9/0x20 [ 269.725429][ T8194] ? __pfx_uinput_ioctl+0x10/0x10 [ 269.725452][ T8194] __se_sys_ioctl+0xff/0x170 [ 269.725469][ T8194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.725487][ T8194] do_syscall_64+0x174/0x580 [ 269.725502][ T8194] ? trace_irq_disable+0x3b/0x140 [ 269.725517][ T8194] ? clear_bhb_loop+0x40/0x90 [ 269.725537][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.725552][ T8194] RIP: 0033:0x7f5e0012de59 [ 269.725567][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.725580][ T8194] RSP: 002b:00007f5dfe386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.725596][ T8194] RAX: ffffffffffffffda RBX: 00007f5e003b5fa0 RCX: 00007f5e0012de59 [ 269.725608][ T8194] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 269.725617][ T8194] RBP: 00007f5dfe386090 R08: 0000000000000000 R09: 0000000000000000 [ 269.725626][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.725635][ T8194] R13: 00007f5e003b6038 R14: 00007f5e003b5fa0 R15: 00007fffdae51d28 [ 269.725659][ T8194] [ 269.725679][ T8194] kobject: kobject_add_internal failed for input18 (error: -12 parent: input) [ 269.986983][ T4917] Bluetooth: hci3: command 0x0406 tx timeout [ 270.398559][ T8199] syz.3.836 (8199) used greatest stack depth: 18856 bytes left [ 270.605637][ T8211] FAULT_INJECTION: forcing a failure. [ 270.605637][ T8211] name failslab, interval 1, probability 0, space 0, times 0 [ 270.605677][ T8211] CPU: 1 UID: 0 PID: 8211 Comm: syz.3.840 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 270.605706][ T8211] Tainted: [L]=SOFTLOCKUP [ 270.605714][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 270.605727][ T8211] Call Trace: [ 270.605735][ T8211] [ 270.605744][ T8211] dump_stack_lvl+0xe8/0x150 [ 270.605778][ T8211] should_fail_ex+0x467/0x600 [ 270.605819][ T8211] should_failslab+0xa8/0x100 [ 270.605855][ T8211] __kmalloc_noprof+0xfb/0x790 [ 270.605887][ T8211] ? tomoyo_realpath_from_path+0xef/0x640 [ 270.605911][ T8211] ? tomoyo_realpath_from_path+0xef/0x640 [ 270.605945][ T8211] tomoyo_realpath_from_path+0xef/0x640 [ 270.605982][ T8211] ? tomoyo_path_number_perm+0x219/0x5f0 [ 270.606018][ T8211] tomoyo_path_number_perm+0x246/0x5f0 [ 270.606056][ T8211] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 270.606091][ T8211] ? __lock_acquire+0x6df/0x2e40 [ 270.606129][ T8211] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 270.606153][ T8211] ? lockdep_hardirqs_on+0x7a/0x110 [ 270.606206][ T8211] ? __fget_files+0x2a/0x420 [ 270.606243][ T8211] ? __fget_files+0x2a/0x420 [ 270.606275][ T8211] ? __fget_files+0x3a8/0x420 [ 270.606305][ T8211] ? __fget_files+0x2a/0x420 [ 270.606342][ T8211] security_file_ioctl+0xb9/0x260 [ 270.606375][ T8211] __se_sys_ioctl+0x47/0x170 [ 270.606401][ T8211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.606426][ T8211] do_syscall_64+0x174/0x580 [ 270.606448][ T8211] ? trace_irq_disable+0x3b/0x140 [ 270.606469][ T8211] ? clear_bhb_loop+0x40/0x90 [ 270.606498][ T8211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.606519][ T8211] RIP: 0033:0x7f5e0012de59 [ 270.606540][ T8211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.606558][ T8211] RSP: 002b:00007f5dfe386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.606581][ T8211] RAX: ffffffffffffffda RBX: 00007f5e003b5fa0 RCX: 00007f5e0012de59 [ 270.606598][ T8211] RDX: 0000200000000040 RSI: 000000008028640c RDI: 0000000000000003 [ 270.606612][ T8211] RBP: 00007f5dfe386090 R08: 0000000000000000 R09: 0000000000000000 [ 270.606625][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.606638][ T8211] R13: 00007f5e003b6038 R14: 00007f5e003b5fa0 R15: 00007fffdae51d28 [ 270.606672][ T8211] [ 270.610215][ T8211] ERROR: Out of memory at tomoyo_realpath_from_path. [ 270.939779][ T8219] netlink: 176 bytes leftover after parsing attributes in process `syz.1.844'. [ 271.010432][ T8221] FAULT_INJECTION: forcing a failure. [ 271.010432][ T8221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.010471][ T8221] CPU: 0 UID: 0 PID: 8221 Comm: syz.1.845 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 271.010500][ T8221] Tainted: [L]=SOFTLOCKUP [ 271.010508][ T8221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.010521][ T8221] Call Trace: [ 271.010529][ T8221] [ 271.010545][ T8221] dump_stack_lvl+0xe8/0x150 [ 271.010579][ T8221] should_fail_ex+0x467/0x600 [ 271.010618][ T8221] _copy_to_user+0x31/0xb0 [ 271.010646][ T8221] simple_read_from_buffer+0xe1/0x170 [ 271.010686][ T8221] proc_fail_nth_read+0x1be/0x230 [ 271.010724][ T8221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.010781][ T8221] ? rw_verify_area+0x250/0x4d0 [ 271.010806][ T8221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.010839][ T8221] vfs_read+0x219/0xa90 [ 271.010870][ T8221] ? __pfx_vfs_read+0x10/0x10 [ 271.010895][ T8221] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 271.010918][ T8221] ? lockdep_hardirqs_on+0x7a/0x110 [ 271.010940][ T8221] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 271.010963][ T8221] ? mutex_lock_nested+0x152/0x1d0 [ 271.010990][ T8221] ? fdget_pos+0x252/0x320 [ 271.011032][ T8221] ksys_read+0x156/0x270 [ 271.011062][ T8221] ? __pfx_ksys_read+0x10/0x10 [ 271.011082][ T8221] ? __pfx_drm_ioctl+0x10/0x10 [ 271.011120][ T8221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.011145][ T8221] do_syscall_64+0x174/0x580 [ 271.011166][ T8221] ? trace_irq_disable+0x3b/0x140 [ 271.011187][ T8221] ? clear_bhb_loop+0x40/0x90 [ 271.011216][ T8221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.011238][ T8221] RIP: 0033:0x7f7af31de68e [ 271.011259][ T8221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 271.011278][ T8221] RSP: 002b:00007f7af1475fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.011302][ T8221] RAX: ffffffffffffffda RBX: 00007f7af14766c0 RCX: 00007f7af31de68e [ 271.011319][ T8221] RDX: 000000000000000f RSI: 00007f7af14760a0 RDI: 0000000000000005 [ 271.011332][ T8221] RBP: 00007f7af1476090 R08: 0000000000000000 R09: 0000000000000000 [ 271.011345][ T8221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.011358][ T8221] R13: 00007f7af34a6038 R14: 00007f7af34a5fa0 R15: 00007fffdec68b18 [ 271.011392][ T8221] [ 271.413044][ T5717] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 271.563193][ T5717] usb 4-1: Using ep0 maxpacket: 8 [ 271.565870][ T5717] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 271.565910][ T5717] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.565927][ T5717] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.565945][ T5717] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.565963][ T5717] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.565992][ T5717] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.566009][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.646769][ T5710] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 271.796896][ T5710] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.800847][ T8223] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.808460][ T5717] usb 4-1: usb_control_msg returned -32 [ 271.808647][ T5717] usbtmc 4-1:16.0: can't read capabilities [ 271.833139][ T5710] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 271.833172][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 271.833196][ T5710] usb 2-1: Product: syz [ 271.833211][ T5710] usb 2-1: Manufacturer: syz [ 271.833226][ T5710] usb 2-1: SerialNumber: syz [ 271.949427][ T5717] usb 1-1: USB disconnect, device number 50 [ 272.048517][ T8235] FAULT_INJECTION: forcing a failure. [ 272.048517][ T8235] name failslab, interval 1, probability 0, space 0, times 0 [ 272.048622][ T8235] CPU: 0 UID: 0 PID: 8235 Comm: syz.0.850 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 272.048653][ T8235] Tainted: [L]=SOFTLOCKUP [ 272.048660][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 272.048674][ T8235] Call Trace: [ 272.048682][ T8235] [ 272.048691][ T8235] dump_stack_lvl+0xe8/0x150 [ 272.048728][ T8235] should_fail_ex+0x467/0x600 [ 272.048768][ T8235] should_failslab+0xa8/0x100 [ 272.048804][ T8235] kmem_cache_alloc_node_noprof+0xac/0x660 [ 272.048836][ T8235] ? __alloc_skb+0x1d7/0x7a0 [ 272.048866][ T8235] ? __alloc_skb+0x1d7/0x7a0 [ 272.048902][ T8235] __alloc_skb+0x1d7/0x7a0 [ 272.048948][ T8235] xfrm_send_policy_notify+0x2a0/0x1c00 [ 272.048984][ T8235] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 272.049011][ T8235] ? lock_acquire+0x115/0x350 [ 272.049044][ T8235] ? km_policy_notify+0x28/0x200 [ 272.049072][ T8235] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 272.049099][ T8235] km_policy_notify+0x121/0x200 [ 272.049124][ T8235] ? km_policy_notify+0x28/0x200 [ 272.049154][ T8235] xfrm_add_policy+0x4a1/0x690 [ 272.049180][ T8235] ? rcu_is_watching+0x15/0xb0 [ 272.049212][ T8235] ? __pfx_xfrm_add_policy+0x10/0x10 [ 272.049245][ T8235] ? __nla_parse+0x40/0x60 [ 272.049274][ T8235] xfrm_user_rcv_msg+0x7a8/0xf30 [ 272.049308][ T8235] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 272.049374][ T8235] ? __lock_acquire+0x6df/0x2e40 [ 272.049401][ T8235] ? ref_tracker_free+0x668/0x820 [ 272.049421][ T8235] ? netlink_deliver_tap+0x19c/0x1b0 [ 272.049441][ T8235] ? netlink_unicast+0x7b8/0x990 [ 272.049471][ T8235] ? netlink_sendmsg+0x813/0xb40 [ 272.049493][ T8235] ? sock_sendmsg_nosec+0x13a/0x180 [ 272.049519][ T8235] ? ____sys_sendmsg+0x565/0x870 [ 272.049552][ T8235] ? ___sys_sendmsg+0x2a5/0x360 [ 272.049572][ T8235] ? __x64_sys_sendmsg+0x1b7/0x290 [ 272.049601][ T8235] netlink_rcv_skb+0x226/0x4a0 [ 272.049639][ T8235] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 272.049668][ T8235] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.049718][ T8235] ? lockdep_hardirqs_on+0x7a/0x110 [ 272.049744][ T8235] ? mutex_lock_nested+0x152/0x1d0 [ 272.049782][ T8235] ? xfrm_netlink_rcv+0x6a/0x90 [ 272.049812][ T8235] xfrm_netlink_rcv+0x79/0x90 [ 272.049838][ T8235] netlink_unicast+0x7f5/0x990 [ 272.049881][ T8235] netlink_sendmsg+0x813/0xb40 [ 272.049913][ T8235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.049945][ T8235] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 272.049975][ T8235] ? __kernel_text_address+0xd/0x30 [ 272.050007][ T8235] ? unwind_get_return_address+0x4d/0x90 [ 272.050032][ T8235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.050053][ T8235] sock_sendmsg_nosec+0x13a/0x180 [ 272.050084][ T8235] ____sys_sendmsg+0x565/0x870 [ 272.050128][ T8235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.050173][ T8235] ? import_iovec+0x73/0xa0 [ 272.050202][ T8235] ___sys_sendmsg+0x2a5/0x360 [ 272.050222][ T8235] ? __lock_acquire+0x6df/0x2e40 [ 272.050248][ T8235] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.050307][ T8235] ? __fget_files+0x2a/0x420 [ 272.050340][ T8235] ? __fget_files+0x3a8/0x420 [ 272.050383][ T8235] __x64_sys_sendmsg+0x1b7/0x290 [ 272.050408][ T8235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.050449][ T8235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.050473][ T8235] do_syscall_64+0x174/0x580 [ 272.050494][ T8235] ? trace_irq_disable+0x3b/0x140 [ 272.050515][ T8235] ? clear_bhb_loop+0x40/0x90 [ 272.050542][ T8235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.050565][ T8235] RIP: 0033:0x7f0f7628de59 [ 272.050585][ T8235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.050609][ T8235] RSP: 002b:00007f0f744e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.050632][ T8235] RAX: ffffffffffffffda RBX: 00007f0f76515fa0 RCX: 00007f0f7628de59 [ 272.050647][ T8235] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 272.050661][ T8235] RBP: 00007f0f744e6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.050693][ T8235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.050706][ T8235] R13: 00007f0f76516038 R14: 00007f0f76515fa0 R15: 00007ffe4e9617d8 [ 272.050742][ T8235] [ 272.398204][ T8233] comedi comedi1: 8255: I/O base address or length out of range [ 272.570611][ T8241] netlink: 176 bytes leftover after parsing attributes in process `syz.0.851'. [ 272.570668][ T8241] FAULT_INJECTION: forcing a failure. [ 272.570668][ T8241] name failslab, interval 1, probability 0, space 0, times 0 [ 272.570702][ T8241] CPU: 1 UID: 0 PID: 8241 Comm: syz.0.851 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 272.570736][ T8241] Tainted: [L]=SOFTLOCKUP [ 272.570743][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 272.570762][ T8241] Call Trace: [ 272.570768][ T8241] [ 272.570775][ T8241] dump_stack_lvl+0xe8/0x150 [ 272.570819][ T8241] should_fail_ex+0x467/0x600 [ 272.570862][ T8241] should_failslab+0xa8/0x100 [ 272.570899][ T8241] __kmalloc_cache_noprof+0xa1/0x670 [ 272.570932][ T8241] ? netlbl_cipsov4_add+0x576/0x2580 [ 272.570961][ T8241] ? netlbl_cipsov4_add+0x576/0x2580 [ 272.570996][ T8241] netlbl_cipsov4_add+0x576/0x2580 [ 272.571036][ T8241] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 272.571067][ T8241] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 272.571097][ T8241] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 272.571137][ T8241] genl_family_rcv_msg_doit+0x233/0x340 [ 272.571175][ T8241] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 272.571219][ T8241] ? bpf_lsm_capable+0x9/0x20 [ 272.571243][ T8241] ? security_capable+0x74/0x280 [ 272.571288][ T8241] genl_rcv_msg+0x614/0x7a0 [ 272.571325][ T8241] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.571354][ T8241] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 272.571396][ T8241] netlink_rcv_skb+0x226/0x4a0 [ 272.571453][ T8241] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.571485][ T8241] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.571535][ T8241] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.571561][ T8241] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.571580][ T8241] genl_rcv+0x28/0x40 [ 272.571615][ T8241] netlink_unicast+0x7f5/0x990 [ 272.571661][ T8241] netlink_sendmsg+0x813/0xb40 [ 272.571694][ T8241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.571717][ T8241] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 272.571746][ T8241] ? __kernel_text_address+0xd/0x30 [ 272.571789][ T8241] ? unwind_get_return_address+0x4d/0x90 [ 272.571816][ T8241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.571838][ T8241] sock_sendmsg_nosec+0x13a/0x180 [ 272.571869][ T8241] ____sys_sendmsg+0x565/0x870 [ 272.571914][ T8241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.571971][ T8241] ? import_iovec+0x73/0xa0 [ 272.572009][ T8241] ___sys_sendmsg+0x2a5/0x360 [ 272.572029][ T8241] ? __lock_acquire+0x6df/0x2e40 [ 272.572054][ T8241] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.572105][ T8241] ? __fget_files+0x2a/0x420 [ 272.572155][ T8241] ? __fget_files+0x3a8/0x420 [ 272.572199][ T8241] __x64_sys_sendmsg+0x1b7/0x290 [ 272.572223][ T8241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.572271][ T8241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.572297][ T8241] do_syscall_64+0x174/0x580 [ 272.572320][ T8241] ? trace_irq_disable+0x3b/0x140 [ 272.572342][ T8241] ? clear_bhb_loop+0x40/0x90 [ 272.572371][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.572411][ T8241] RIP: 0033:0x7f0f7628de59 [ 272.572483][ T8241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.572503][ T8241] RSP: 002b:00007f0f744e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.572525][ T8241] RAX: ffffffffffffffda RBX: 00007f0f76515fa0 RCX: 00007f0f7628de59 [ 272.572541][ T8241] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 272.572553][ T8241] RBP: 00007f0f744e6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.572569][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.572583][ T8241] R13: 00007f0f76516038 R14: 00007f0f76515fa0 R15: 00007ffe4e9617d8 [ 272.572617][ T8241] [ 273.076150][ T8246] input input19: cannot allocate more than FF_MAX_EFFECTS effects [ 273.090594][ T8247] FAULT_INJECTION: forcing a failure. [ 273.090594][ T8247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.090674][ T8247] CPU: 1 UID: 0 PID: 8247 Comm: syz.2.853 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 273.090727][ T8247] Tainted: [L]=SOFTLOCKUP [ 273.090735][ T8247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.090749][ T8247] Call Trace: [ 273.090757][ T8247] [ 273.090766][ T8247] dump_stack_lvl+0xe8/0x150 [ 273.090876][ T8247] should_fail_ex+0x467/0x600 [ 273.090919][ T8247] _copy_from_user+0x2d/0xb0 [ 273.090979][ T8247] kstrtouint_from_user+0xd6/0x180 [ 273.091054][ T8247] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 273.091088][ T8247] ? __lock_acquire+0x6df/0x2e40 [ 273.091156][ T8247] ? btrfs_search_old_slot+0x3e0/0x970 [ 273.091216][ T8247] ? lock_acquire+0x115/0x350 [ 273.091244][ T8247] proc_fail_nth_write+0x8e/0x210 [ 273.091344][ T8247] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 273.091404][ T8247] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 273.091440][ T8247] vfs_write+0x29f/0xbb0 [ 273.091502][ T8247] ? __pfx_vfs_write+0x10/0x10 [ 273.091534][ T8247] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 273.091559][ T8247] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.091609][ T8247] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 273.091665][ T8247] ? mutex_lock_nested+0x152/0x1d0 [ 273.091702][ T8247] ? fdget_pos+0x252/0x320 [ 273.091771][ T8247] ksys_write+0x156/0x270 [ 273.091836][ T8247] ? __pfx_ksys_write+0x10/0x10 [ 273.091870][ T8247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.091896][ T8247] do_syscall_64+0x174/0x580 [ 273.091961][ T8247] ? clear_bhb_loop+0x40/0x90 [ 273.092009][ T8247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.092034][ T8247] RIP: 0033:0x7ff4f2b9e68e [ 273.092070][ T8247] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.092106][ T8247] RSP: 002b:00007ff4f0e35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.092138][ T8247] RAX: ffffffffffffffda RBX: 00007ff4f0e366c0 RCX: 00007ff4f2b9e68e [ 273.092164][ T8247] RDX: 0000000000000001 RSI: 00007ff4f0e360a0 RDI: 0000000000000004 [ 273.092178][ T8247] RBP: 00007ff4f0e36090 R08: 0000000000000000 R09: 0000000000000000 [ 273.092192][ T8247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.092205][ T8247] R13: 00007ff4f2e66038 R14: 00007ff4f2e65fa0 R15: 00007ffe3da588d8 [ 273.092241][ T8247] [ 273.345999][ T5710] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 273.361635][ T5710] usb 2-1: USB disconnect, device number 64 [ 273.374152][ T5710] usblp1: removed [ 273.436631][ T8251] netlink: 5 bytes leftover after parsing attributes in process `syz.0.856'. [ 273.459826][ T8251] 0{X: renamed from gretap0 (while UP) [ 273.476946][ T8251] 0{X: entered allmulticast mode [ 273.477389][ T8251] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 273.562844][ T8253] FAULT_INJECTION: forcing a failure. [ 273.562844][ T8253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.562885][ T8253] CPU: 0 UID: 0 PID: 8253 Comm: syz.0.857 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 273.562915][ T8253] Tainted: [L]=SOFTLOCKUP [ 273.562924][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.562940][ T8253] Call Trace: [ 273.562949][ T8253] [ 273.562963][ T8253] dump_stack_lvl+0xe8/0x150 [ 273.562998][ T8253] should_fail_ex+0x467/0x600 [ 273.563037][ T8253] _copy_to_user+0x31/0xb0 [ 273.563065][ T8253] simple_read_from_buffer+0xe1/0x170 [ 273.563107][ T8253] proc_fail_nth_read+0x1be/0x230 [ 273.563146][ T8253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.563183][ T8253] ? rw_verify_area+0x250/0x4d0 [ 273.563207][ T8253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.563240][ T8253] vfs_read+0x219/0xa90 [ 273.563271][ T8253] ? __pfx_vfs_read+0x10/0x10 [ 273.563296][ T8253] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 273.563318][ T8253] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.563339][ T8253] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 273.563362][ T8253] ? mutex_lock_nested+0x152/0x1d0 [ 273.563389][ T8253] ? fdget_pos+0x252/0x320 [ 273.563432][ T8253] ksys_read+0x156/0x270 [ 273.563456][ T8253] ? __pfx_ksys_read+0x10/0x10 [ 273.563487][ T8253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.563511][ T8253] do_syscall_64+0x174/0x580 [ 273.563532][ T8253] ? trace_irq_disable+0x3b/0x140 [ 273.563553][ T8253] ? clear_bhb_loop+0x40/0x90 [ 273.563580][ T8253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.563603][ T8253] RIP: 0033:0x7f0f7624e68e [ 273.563623][ T8253] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.563643][ T8253] RSP: 002b:00007f0f744e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.563667][ T8253] RAX: ffffffffffffffda RBX: 00007f0f744e66c0 RCX: 00007f0f7624e68e [ 273.563683][ T8253] RDX: 000000000000000f RSI: 00007f0f744e60a0 RDI: 0000000000000004 [ 273.563697][ T8253] RBP: 00007f0f744e6090 R08: 0000000000000000 R09: 0000000000000000 [ 273.563711][ T8253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.563724][ T8253] R13: 00007f0f76516038 R14: 00007f0f76515fa0 R15: 00007ffe4e9617d8 [ 273.563759][ T8253] [ 274.151089][ T199] usb 4-1: USB disconnect, device number 57 [ 274.472774][ T5710] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 274.623281][ T5710] usb 1-1: Using ep0 maxpacket: 32 [ 274.628834][ T5710] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.628861][ T5710] usb 1-1: config 0 has no interface number 0 [ 274.628891][ T5710] usb 1-1: too many endpoints for config 0 interface 1 altsetting 48: 48, using maximum allowed: 30 [ 274.628925][ T5710] usb 1-1: config 0 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 274.628951][ T5710] usb 1-1: config 0 interface 1 has no altsetting 0 [ 274.638322][ T5710] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 274.638344][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.638359][ T5710] usb 1-1: Product: syz [ 274.638369][ T5710] usb 1-1: Manufacturer: syz [ 274.638379][ T5710] usb 1-1: SerialNumber: syz [ 274.721769][ T5710] usb 1-1: config 0 descriptor?? [ 274.962743][ T8275] ./file0: Can't open blockdev [ 275.010571][ T5710] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 275.010600][ T5710] usb 1-1: selecting invalid altsetting 1 [ 275.010617][ T5710] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 275.049598][ T5710] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 275.049974][ T5710] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 275.050026][ T5710] usb 1-1: media controller created [ 275.091638][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.133711][ T5710] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 275.133770][ T5710] zl10353_read_register: readreg error (reg=127, ret==-71) [ 275.133826][ T5710] usb 1-1: selecting invalid altsetting 0 [ 275.133843][ T5710] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 275.226619][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.229905][ T5710] usb 1-1: USB disconnect, device number 51 [ 275.250229][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.436885][ T8285] syz_tun: entered allmulticast mode [ 275.438081][ T8286] syz_tun: left allmulticast mode [ 275.648334][ T8294] FAULT_INJECTION: forcing a failure. [ 275.648334][ T8294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.648372][ T8294] CPU: 0 UID: 0 PID: 8294 Comm: syz.3.872 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 275.648401][ T8294] Tainted: [L]=SOFTLOCKUP [ 275.648420][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.648432][ T8294] Call Trace: [ 275.648439][ T8294] [ 275.648448][ T8294] dump_stack_lvl+0xe8/0x150 [ 275.648478][ T8294] should_fail_ex+0x467/0x600 [ 275.648514][ T8294] _copy_to_user+0x31/0xb0 [ 275.648558][ T8294] simple_read_from_buffer+0xe1/0x170 [ 275.648600][ T8294] proc_fail_nth_read+0x1be/0x230 [ 275.648637][ T8294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.648673][ T8294] ? rw_verify_area+0x250/0x4d0 [ 275.648702][ T8294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.648735][ T8294] vfs_read+0x219/0xa90 [ 275.648765][ T8294] ? __pfx_vfs_read+0x10/0x10 [ 275.648788][ T8294] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 275.648810][ T8294] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.648831][ T8294] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 275.648853][ T8294] ? mutex_lock_nested+0x152/0x1d0 [ 275.648880][ T8294] ? fdget_pos+0x252/0x320 [ 275.648920][ T8294] ksys_read+0x156/0x270 [ 275.648944][ T8294] ? __pfx_ksys_read+0x10/0x10 [ 275.648963][ T8294] ? native_tss_update_io_bitmap+0x337/0x520 [ 275.649005][ T8294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.649029][ T8294] do_syscall_64+0x174/0x580 [ 275.649050][ T8294] ? trace_irq_disable+0x3b/0x140 [ 275.649070][ T8294] ? clear_bhb_loop+0x40/0x90 [ 275.649097][ T8294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.649120][ T8294] RIP: 0033:0x7f5e000ee68e [ 275.649140][ T8294] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 275.649158][ T8294] RSP: 002b:00007f5dfe385fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.649180][ T8294] RAX: ffffffffffffffda RBX: 00007f5dfe3866c0 RCX: 00007f5e000ee68e [ 275.649196][ T8294] RDX: 000000000000000f RSI: 00007f5dfe3860a0 RDI: 0000000000000004 [ 275.649209][ T8294] RBP: 00007f5dfe386090 R08: 0000000000000000 R09: 0000000000000000 [ 275.649222][ T8294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.649234][ T8294] R13: 00007f5e003b6038 R14: 00007f5e003b5fa0 R15: 00007fffdae51d28 [ 275.649267][ T8294] [ 275.970956][ T8296] GUP no longer grows the stack in syz.0.873 (8296): 200000006000-200000008000 (200000004000) [ 275.970997][ T8296] CPU: 1 UID: 0 PID: 8296 Comm: syz.0.873 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 275.971029][ T8296] Tainted: [L]=SOFTLOCKUP [ 275.971037][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.971051][ T8296] Call Trace: [ 275.971060][ T8296] [ 275.971069][ T8296] dump_stack_lvl+0xe8/0x150 [ 275.971105][ T8296] __get_user_pages+0x21e9/0x2590 [ 275.971148][ T8296] ? down_read_killable+0x14c/0x220 [ 275.971191][ T8296] __gup_longterm_locked+0xd52/0x15c0 [ 275.971244][ T8296] gup_fast_fallback+0x1cf7/0x2040 [ 275.971307][ T8296] ? __pfx_gup_fast_fallback+0x10/0x10 [ 275.971336][ T8296] ? __futex_wait+0x1e3/0x410 [ 275.971368][ T8296] ? is_valid_gup_args+0x11f/0x200 [ 275.971399][ T8296] ? get_user_pages_fast+0x4d/0xb0 [ 275.971430][ T8296] get_futex_key+0x90e/0x1580 [ 275.971466][ T8296] ? __pfx_get_futex_key+0x10/0x10 [ 275.971502][ T8296] futex_wake+0x119/0x600 [ 275.971536][ T8296] ? __pfx_futex_wait+0x10/0x10 [ 275.971569][ T8296] ? __pfx_futex_wake+0x10/0x10 [ 275.971606][ T8296] ? handle_mm_fault+0x144b/0x1520 [ 275.971642][ T8296] do_futex+0x458/0x4e0 [ 275.971675][ T8296] ? __pfx_do_futex+0x10/0x10 [ 275.971710][ T8296] __se_sys_futex+0x3a8/0x450 [ 275.971748][ T8296] ? __pfx___se_sys_futex+0x10/0x10 [ 275.971774][ T8296] ? rcu_is_watching+0x15/0xb0 [ 275.971809][ T8296] ? __x64_sys_futex+0x21/0xf0 [ 275.971836][ T8296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.971861][ T8296] do_syscall_64+0x174/0x580 [ 275.971891][ T8296] ? trace_irq_disable+0x3b/0x140 [ 275.971913][ T8296] ? clear_bhb_loop+0x40/0x90 [ 275.971941][ T8296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.971963][ T8296] RIP: 0033:0x7f0f7628de59 [ 275.971984][ T8296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.972004][ T8296] RSP: 002b:00007f0f744e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 275.972028][ T8296] RAX: ffffffffffffffda RBX: 00007f0f76515fa0 RCX: 00007f0f7628de59 [ 275.972045][ T8296] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000004000 [ 275.972060][ T8296] RBP: 00007f0f76323e6f R08: 0000000000000000 R09: 0000000000000002 [ 275.972074][ T8296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.972087][ T8296] R13: 00007f0f76516038 R14: 00007f0f76515fa0 R15: 00007ffe4e9617d8 [ 275.972121][ T8296] [ 276.741725][ T8314] netlink: 'syz.1.880': attribute type 11 has an invalid length. [ 276.741747][ T8314] netlink: 224 bytes leftover after parsing attributes in process `syz.1.880'. [ 277.178643][ T8333] Flush: task=syz.1.886[8333] dev=loop8 state=2 [ 277.275758][ T8333] Teardown: task=syz.1.886[8333] dev=loop8 state=2 [ 277.302732][ T5710] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 277.460212][ T5710] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.460244][ T5710] usb 4-1: config 0 has no interface number 0 [ 277.479332][ T5710] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 277.479666][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.479690][ T5710] usb 4-1: Product: syz [ 277.479707][ T5710] usb 4-1: Manufacturer: syz [ 277.479721][ T5710] usb 4-1: SerialNumber: syz [ 277.525851][ T5710] usb 4-1: config 0 descriptor?? [ 277.532666][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.891'. [ 277.731658][ T5710] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 277.788576][ T5710] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 277.790668][ T5710] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 277.790728][ T5710] usb 4-1: media controller created [ 277.846776][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.938442][ T5702] IPVS: starting estimator thread 0... [ 278.049377][ T8351] IPVS: using max 11 ests per chain, 26400 per kthread [ 278.196873][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.200684][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.528191][ T8357] netdevsim0 speed is unknown, defaulting to 1000 [ 278.528945][ T8357] netdevsim0 speed is unknown, defaulting to 1000 [ 278.635605][ T8357] netdevsim0 speed is unknown, defaulting to 1000 [ 278.638144][ T8357] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 278.638181][ T8357] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 278.638220][ T8357] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 278.673587][ T8357] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 278.824701][ T8357] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 278.987321][ T8357] netdevsim0 speed is unknown, defaulting to 1000 [ 278.998877][ T8357] netdevsim0 speed is unknown, defaulting to 1000 [ 279.007957][ T8362] FAULT_INJECTION: forcing a failure. [ 279.007957][ T8362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.007996][ T8362] CPU: 0 UID: 0 PID: 8362 Comm: syz.2.897 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 279.008032][ T8362] Tainted: [L]=SOFTLOCKUP [ 279.008040][ T8362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 279.008053][ T8362] Call Trace: [ 279.008062][ T8362] [ 279.008070][ T8362] dump_stack_lvl+0xe8/0x150 [ 279.008103][ T8362] should_fail_ex+0x467/0x600 [ 279.008142][ T8362] _copy_to_user+0x31/0xb0 [ 279.008171][ T8362] simple_read_from_buffer+0xe1/0x170 [ 279.008212][ T8362] proc_fail_nth_read+0x1be/0x230 [ 279.008252][ T8362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.008290][ T8362] ? rw_verify_area+0x250/0x4d0 [ 279.008311][ T8362] ? lockdep_hardirqs_on+0x7a/0x110 [ 279.008334][ T8362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.008368][ T8362] vfs_read+0x219/0xa90 [ 279.008393][ T8362] ? preempt_schedule_thunk+0x16/0x40 [ 279.008419][ T8362] ? __pfx_vfs_read+0x10/0x10 [ 279.008438][ T8362] ? preempt_schedule_thunk+0x16/0x40 [ 279.008466][ T8362] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 279.008489][ T8362] ? mutex_lock_nested+0x152/0x1d0 [ 279.008546][ T8362] ? fdget_pos+0x252/0x320 [ 279.008589][ T8362] ksys_read+0x156/0x270 [ 279.008613][ T8362] ? __pfx_ksys_read+0x10/0x10 [ 279.008643][ T8362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.008667][ T8362] do_syscall_64+0x174/0x580 [ 279.008691][ T8362] ? clear_bhb_loop+0x40/0x90 [ 279.008717][ T8362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.008740][ T8362] RIP: 0033:0x7ff4f2b9e68e [ 279.008765][ T8362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 279.008785][ T8362] RSP: 002b:00007ff4f0e35fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 279.008824][ T8362] RAX: ffffffffffffffda RBX: 00007ff4f0e366c0 RCX: 00007ff4f2b9e68e [ 279.008841][ T8362] RDX: 000000000000000f RSI: 00007ff4f0e360a0 RDI: 0000000000000006 [ 279.008854][ T8362] RBP: 00007ff4f0e36090 R08: 0000000000000000 R09: 0000000000000000 [ 279.008868][ T8362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.008881][ T8362] R13: 00007ff4f2e66038 R14: 00007ff4f2e65fa0 R15: 00007ffe3da588d8 [ 279.008915][ T8362] [ 279.011398][ T8357] netdevsim0 speed is unknown, defaulting to 1000 [ 279.024205][ T8357] netdevsim0 speed is unknown, defaulting to 1000 [ 279.092950][ T5710] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 279.844853][ T32] usb 4-1: USB disconnect, device number 58 [ 279.973315][ T5710] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 280.129331][ T5710] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 280.129354][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.130279][ T5710] usb 2-1: Product: syz [ 280.130297][ T5710] usb 2-1: Manufacturer: syz [ 280.130313][ T5710] usb 2-1: SerialNumber: syz [ 280.172884][ T5710] usb 2-1: config 0 descriptor?? [ 280.178983][ T5710] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 280.372830][ T5615] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 280.895167][ T5710] gspca_stk1135: reg_w 0x3 err -110 [ 280.896240][ T5710] gspca_stk1135: serial bus timeout: status=0x00 [ 280.896262][ T5710] gspca_stk1135: Sensor write failed [ 280.896299][ T5710] gspca_stk1135: serial bus timeout: status=0x00 [ 280.896310][ T5710] gspca_stk1135: Sensor write failed [ 280.896355][ T5710] gspca_stk1135: serial bus timeout: status=0x00 [ 280.896366][ T5710] gspca_stk1135: Sensor read failed [ 280.896403][ T5710] gspca_stk1135: serial bus timeout: status=0x00 [ 280.896414][ T5710] gspca_stk1135: Sensor read failed [ 280.896422][ T5710] gspca_stk1135: Detected sensor type unknown (0x0) [ 280.896463][ T5710] gspca_stk1135: serial bus timeout: status=0x00 [ 280.896474][ T5710] gspca_stk1135: Sensor read failed [ 280.896509][ T5710] gspca_stk1135: serial bus timeout: status=0x00 [ 280.896519][ T5710] gspca_stk1135: Sensor read failed [ 280.896553][ T5710] gspca_stk1135: serial bus timeout: status=0x00 [ 280.896563][ T5710] gspca_stk1135: Sensor write failed [ 280.896599][ T5710] gspca_stk1135: serial bus timeout: status=0x00 [ 280.896625][ T5710] gspca_stk1135: Sensor write failed [ 280.897832][ T5710] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 281.119846][ T8392] FAULT_INJECTION: forcing a failure. [ 281.119846][ T8392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.119893][ T8392] CPU: 1 UID: 0 PID: 8392 Comm: syz.0.909 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 281.119923][ T8392] Tainted: [L]=SOFTLOCKUP [ 281.119930][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 281.119944][ T8392] Call Trace: [ 281.119952][ T8392] [ 281.119961][ T8392] dump_stack_lvl+0xe8/0x150 [ 281.119997][ T8392] should_fail_ex+0x467/0x600 [ 281.120037][ T8392] strncpy_from_user+0x36/0x2c0 [ 281.120073][ T8392] do_getname+0x77/0x250 [ 281.120108][ T8392] path_setxattrat+0x351/0x450 [ 281.120144][ T8392] ? __pfx_path_setxattrat+0x10/0x10 [ 281.120198][ T8392] ? ksys_write+0x248/0x270 [ 281.120224][ T8392] ? __pfx_ksys_write+0x10/0x10 [ 281.120252][ T8392] __x64_sys_setxattr+0xbc/0xe0 [ 281.120290][ T8392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.120314][ T8392] do_syscall_64+0x174/0x580 [ 281.120337][ T8392] ? trace_irq_disable+0x3b/0x140 [ 281.120359][ T8392] ? clear_bhb_loop+0x40/0x90 [ 281.120390][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.120412][ T8392] RIP: 0033:0x7f0f7628de59 [ 281.120432][ T8392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.120451][ T8392] RSP: 002b:00007f0f744e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 281.120473][ T8392] RAX: ffffffffffffffda RBX: 00007f0f76515fa0 RCX: 00007f0f7628de59 [ 281.120489][ T8392] RDX: 0000200000000300 RSI: 0000200000000280 RDI: 0000200000000240 [ 281.120505][ T8392] RBP: 00007f0f744e6090 R08: 0000000000000003 R09: 0000000000000000 [ 281.120518][ T8392] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 281.120531][ T8392] R13: 00007f0f76516038 R14: 00007f0f76515fa0 R15: 00007ffe4e9617d8 [ 281.120564][ T8392] [ 281.238439][ T8389] kAFS: unable to lookup cell 'yz0' [ 281.407973][ T11] usb 2-1: USB disconnect, device number 65 [ 281.412170][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.906'. [ 281.412196][ T8394] openvswitch: netlink: Key type 12294 is out of range max 32 [ 281.804597][ T11] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 281.962767][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 281.972296][ T11] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 281.972395][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 282.001493][ T11] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 282.001522][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.001549][ T11] usb 2-1: Product: syz [ 282.001561][ T11] usb 2-1: Manufacturer: syz [ 282.001572][ T11] usb 2-1: SerialNumber: syz [ 282.002825][ T5710] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 282.044497][ T11] usb 2-1: config 0 descriptor?? [ 282.050886][ T11] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 282.050910][ T11] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 282.175380][ T5710] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 282.175402][ T5710] usb 1-1: config 0 has no interface number 0 [ 282.175434][ T5710] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 282.175463][ T5710] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 282.196662][ T5710] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 282.196813][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 282.197410][ T5710] usb 1-1: Manufacturer: syz [ 282.197449][ T5710] usb 1-1: SerialNumber: syz [ 282.282510][ T5710] usb 1-1: config 0 descriptor?? [ 282.408792][ T8421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.918'. [ 282.465768][ T8426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 282.668913][ T11] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 282.669622][ T11] em28xx 2-1:0.0: Config register raw data: 0x70 [ 282.669637][ T11] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 282.669648][ T11] em28xx 2-1:0.0: No AC97 audio processor [ 282.714873][ T5710] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 282.743560][ T5710] usb 1-1: USB disconnect, device number 52 [ 283.006342][ T8437] netlink: 'syz.2.921': attribute type 4 has an invalid length. [ 283.015747][ T32] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 283.103579][ T11] usb 2-1: USB disconnect, device number 66 [ 283.182743][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 283.185426][ T32] usb 4-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 283.185496][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.185517][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 283.185535][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58111, setting to 1024 [ 283.185564][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.186738][ T32] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 283.186775][ T32] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.186790][ T32] usb 4-1: Manufacturer: syz [ 283.191032][ T32] usb 4-1: config 0 descriptor?? [ 283.524267][ T32] rc_core: IR keymap rc-hauppauge not found [ 283.524289][ T32] Registered IR keymap rc-empty [ 283.525907][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 283.552374][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 283.583109][ T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 283.586602][ T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 283.621905][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 283.633882][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 283.656293][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 283.675728][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 283.703561][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 283.734906][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 283.763540][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 283.783256][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 283.803465][ T8451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.804256][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 283.807394][ T8451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.840489][ T8451] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 283.849594][ T32] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 283.871440][ T32] mceusb 4-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 283.871463][ T32] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 283.904382][ T32] usb 4-1: USB disconnect, device number 59 [ 284.242772][ T5717] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 284.322759][ T11] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 284.397749][ T5717] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.401374][ T5717] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 284.401403][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 284.401424][ T5717] usb 2-1: Product: syz [ 284.401438][ T5717] usb 2-1: Manufacturer: syz [ 284.401452][ T5717] usb 2-1: SerialNumber: syz [ 284.474956][ T11] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 284.475010][ T11] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 140, changing to 4 [ 284.479566][ T11] usb 1-1: New USB device found, idVendor=0499, idProduct=5006, bcdDevice= 0.40 [ 284.479596][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.479617][ T11] usb 1-1: Product: ᠍ [ 284.479633][ T11] usb 1-1: Manufacturer: 萙弘敶짥ፋ졈힭ꄌ苬≂ี㥎↕跼ઇ灗튃씱膢竇䏏荌ӂ䕸Ꮘ響諾⬾鴮ᒣ໑㌲夆ቶ쀌ꡢ琢遌ᶿ䰓 [ 284.479655][ T11] usb 1-1: SerialNumber: ࠔ [ 284.681564][ T5717] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 284.706850][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.707455][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.765320][ T11] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 284.765715][ T11] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 284.793061][ T11] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 284.817383][ T11] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 284.839389][ T11] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 284.999436][ T8476] FAULT_INJECTION: forcing a failure. [ 284.999436][ T8476] name failslab, interval 1, probability 0, space 0, times 0 [ 284.999476][ T8476] CPU: 1 UID: 0 PID: 8476 Comm: syz.2.935 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 284.999516][ T8476] Tainted: [L]=SOFTLOCKUP [ 284.999518][ T11] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 284.999524][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 284.999539][ T8476] Call Trace: [ 284.999548][ T8476] [ 284.999557][ T8476] dump_stack_lvl+0xe8/0x150 [ 284.999594][ T8476] should_fail_ex+0x467/0x600 [ 284.999633][ T8476] should_failslab+0xa8/0x100 [ 284.999668][ T8476] kmem_cache_alloc_node_noprof+0xac/0x660 [ 284.999699][ T8476] ? __alloc_skb+0x1d7/0x7a0 [ 284.999729][ T8476] ? __alloc_skb+0x1d7/0x7a0 [ 284.999767][ T8476] __alloc_skb+0x1d7/0x7a0 [ 284.999803][ T8476] tipc_nl_compat_doit+0x18a/0x650 [ 284.999841][ T8476] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 284.999870][ T8476] ? __lock_acquire+0x6df/0x2e40 [ 284.999893][ T8476] ? rcu_is_watching+0x15/0xb0 [ 284.999921][ T8476] ? cap_capable+0x123/0x460 [ 284.999950][ T8476] ? safesetid_security_capable+0xa9/0x1a0 [ 284.999989][ T8476] ? bpf_lsm_capable+0x9/0x20 [ 285.000012][ T8476] ? security_capable+0x74/0x280 [ 285.000056][ T8476] tipc_nl_compat_recv+0x8d3/0xcf0 [ 285.000090][ T8476] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 285.000123][ T8476] ? __lock_acquire+0x6df/0x2e40 [ 285.000144][ T8476] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 285.000171][ T8476] ? __pfx_tipc_nl_compat_net_set+0x10/0x10 [ 285.000229][ T8476] ? snprintf+0xe8/0x140 [ 285.000259][ T8476] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 285.000298][ T8476] genl_family_rcv_msg_doit+0x233/0x340 [ 285.000335][ T8476] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 285.000376][ T8476] ? lockdep_hardirqs_on+0x7a/0x110 [ 285.000398][ T8476] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 285.000428][ T8476] genl_rcv_msg+0x614/0x7a0 [ 285.000481][ T8476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.000513][ T8476] ? ref_tracker_free+0x668/0x820 [ 285.000534][ T8476] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 285.000565][ T8476] ? ____sys_sendmsg+0x565/0x870 [ 285.000598][ T8476] ? ___sys_sendmsg+0x2a5/0x360 [ 285.000617][ T8476] ? __x64_sys_sendmsg+0x1b7/0x290 [ 285.000637][ T8476] ? do_syscall_64+0x174/0x580 [ 285.000658][ T8476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.000692][ T8476] netlink_rcv_skb+0x226/0x4a0 [ 285.000730][ T8476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.000760][ T8476] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.000834][ T8476] genl_rcv+0x28/0x40 [ 285.000859][ T8476] netlink_unicast+0x7f5/0x990 [ 285.000904][ T8476] netlink_sendmsg+0x813/0xb40 [ 285.000925][ T8476] ? __lock_acquire+0x6df/0x2e40 [ 285.000954][ T8476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.000979][ T8476] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 285.001007][ T8476] ? __kernel_text_address+0xd/0x30 [ 285.001040][ T8476] ? unwind_get_return_address+0x4d/0x90 [ 285.001065][ T8476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.001086][ T8476] sock_sendmsg_nosec+0x13a/0x180 [ 285.001115][ T8476] ____sys_sendmsg+0x565/0x870 [ 285.001159][ T8476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.001204][ T8476] ? import_iovec+0x73/0xa0 [ 285.001234][ T8476] ___sys_sendmsg+0x2a5/0x360 [ 285.001254][ T8476] ? __lock_acquire+0x6df/0x2e40 [ 285.001280][ T8476] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.001340][ T8476] ? __fget_files+0x2a/0x420 [ 285.001372][ T8476] ? __fget_files+0x3a8/0x420 [ 285.001416][ T8476] __x64_sys_sendmsg+0x1b7/0x290 [ 285.001440][ T8476] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.001479][ T8476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.001527][ T8476] do_syscall_64+0x174/0x580 [ 285.001548][ T8476] ? trace_irq_disable+0x3b/0x140 [ 285.001569][ T8476] ? clear_bhb_loop+0x40/0x90 [ 285.001597][ T8476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.001619][ T8476] RIP: 0033:0x7ff4f2bdde59 [ 285.001640][ T8476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.001660][ T8476] RSP: 002b:00007ff4f0e36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.001683][ T8476] RAX: ffffffffffffffda RBX: 00007ff4f2e65fa0 RCX: 00007ff4f2bdde59 [ 285.001699][ T8476] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 285.001725][ T8476] RBP: 00007ff4f0e36090 R08: 0000000000000000 R09: 0000000000000000 [ 285.001738][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.001750][ T8476] R13: 00007ff4f2e66038 R14: 00007ff4f2e65fa0 R15: 00007ffe3da588d8 [ 285.001783][ T8476] [ 285.657721][ T8482] FAULT_INJECTION: forcing a failure. [ 285.657721][ T8482] name failslab, interval 1, probability 0, space 0, times 0 [ 285.657761][ T8482] CPU: 0 UID: 0 PID: 8482 Comm: syz.3.937 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 285.657793][ T8482] Tainted: [L]=SOFTLOCKUP [ 285.657801][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.657815][ T8482] Call Trace: [ 285.657823][ T8482] [ 285.657833][ T8482] dump_stack_lvl+0xe8/0x150 [ 285.657864][ T8482] should_fail_ex+0x467/0x600 [ 285.657904][ T8482] should_failslab+0xa8/0x100 [ 285.657932][ T8482] ? skb_clone+0x212/0x3a0 [ 285.657949][ T8482] kmem_cache_alloc_noprof+0x9e/0x680 [ 285.657972][ T8482] ? skb_clone+0x212/0x3a0 [ 285.657991][ T8482] skb_clone+0x212/0x3a0 [ 285.658009][ T8482] __netlink_deliver_tap+0x410/0x880 [ 285.658033][ T8482] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.658049][ T8482] netlink_deliver_tap+0x19c/0x1b0 [ 285.658078][ T8482] netlink_unicast+0x7b8/0x990 [ 285.658109][ T8482] netlink_sendmsg+0x813/0xb40 [ 285.658131][ T8482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.658148][ T8482] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 285.658169][ T8482] ? __kernel_text_address+0xd/0x30 [ 285.658192][ T8482] ? unwind_get_return_address+0x4d/0x90 [ 285.658209][ T8482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.658224][ T8482] sock_sendmsg_nosec+0x13a/0x180 [ 285.658245][ T8482] ____sys_sendmsg+0x565/0x870 [ 285.658276][ T8482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.658307][ T8482] ? import_iovec+0x73/0xa0 [ 285.658327][ T8482] ___sys_sendmsg+0x2a5/0x360 [ 285.658341][ T8482] ? __lock_acquire+0x6df/0x2e40 [ 285.658359][ T8482] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.658398][ T8482] ? __fget_files+0x2a/0x420 [ 285.658428][ T8482] ? __fget_files+0x3a8/0x420 [ 285.658458][ T8482] __x64_sys_sendmsg+0x1b7/0x290 [ 285.658475][ T8482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.658502][ T8482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.658519][ T8482] do_syscall_64+0x174/0x580 [ 285.658534][ T8482] ? trace_irq_disable+0x3b/0x140 [ 285.658548][ T8482] ? clear_bhb_loop+0x40/0x90 [ 285.658567][ T8482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.658583][ T8482] RIP: 0033:0x7f5e0012de59 [ 285.658597][ T8482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.658610][ T8482] RSP: 002b:00007f5dfe386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.658626][ T8482] RAX: ffffffffffffffda RBX: 00007f5e003b5fa0 RCX: 00007f5e0012de59 [ 285.658637][ T8482] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 285.658646][ T8482] RBP: 00007f5dfe386090 R08: 0000000000000000 R09: 0000000000000000 [ 285.658656][ T8482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.658664][ T8482] R13: 00007f5e003b6038 R14: 00007f5e003b5fa0 R15: 00007fffdae51d28 [ 285.658688][ T8482] [ 286.078430][ T11] usb 2-1: USB disconnect, device number 67 [ 286.119215][ T11] usblp0: removed [ 286.995080][ T32] usb 1-1: USB disconnect, device number 53 [ 287.561435][ T8520] sg_write: data in/out 229433/136 bytes for SCSI command 0x0-- guessing data in; [ 287.561435][ T8520] program syz.2.953 not setting count and/or reply_len properly [ 287.824741][ T32] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 287.976941][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.980750][ T32] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 287.980779][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 287.980809][ T32] usb 2-1: Product: syz [ 287.980825][ T32] usb 2-1: Manufacturer: syz [ 287.980840][ T32] usb 2-1: SerialNumber: syz [ 288.275176][ T32] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 288.369185][ T32] usb 2-1: USB disconnect, device number 68 [ 288.404041][ T32] usblp0: removed [ 288.518716][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.519331][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.304813][ T5702] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 289.357320][ T8564] FAULT_INJECTION: forcing a failure. [ 289.357320][ T8564] name failslab, interval 1, probability 0, space 0, times 0 [ 289.357369][ T8564] CPU: 0 UID: 0 PID: 8564 Comm: syz.2.971 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 289.357401][ T8564] Tainted: [L]=SOFTLOCKUP [ 289.357408][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 289.357421][ T8564] Call Trace: [ 289.357429][ T8564] [ 289.357438][ T8564] dump_stack_lvl+0xe8/0x150 [ 289.357473][ T8564] should_fail_ex+0x467/0x600 [ 289.357514][ T8564] should_failslab+0xa8/0x100 [ 289.357550][ T8564] __kmalloc_noprof+0xfb/0x790 [ 289.357586][ T8564] ? tomoyo_realpath_from_path+0xef/0x640 [ 289.357611][ T8564] ? tomoyo_realpath_from_path+0xef/0x640 [ 289.357645][ T8564] tomoyo_realpath_from_path+0xef/0x640 [ 289.357681][ T8564] ? tomoyo_path_number_perm+0x219/0x5f0 [ 289.357716][ T8564] tomoyo_path_number_perm+0x246/0x5f0 [ 289.357755][ T8564] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 289.357796][ T8564] ? __lock_acquire+0x6df/0x2e40 [ 289.357834][ T8564] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 289.357859][ T8564] ? lockdep_hardirqs_on+0x7a/0x110 [ 289.357902][ T8564] ? __fget_files+0x2a/0x420 [ 289.357941][ T8564] ? __fget_files+0x2a/0x420 [ 289.357974][ T8564] ? __fget_files+0x3a8/0x420 [ 289.358005][ T8564] ? __fget_files+0x2a/0x420 [ 289.358046][ T8564] security_file_ioctl+0xb9/0x260 [ 289.358083][ T8564] __se_sys_ioctl+0x47/0x170 [ 289.358111][ T8564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.358137][ T8564] do_syscall_64+0x174/0x580 [ 289.358158][ T8564] ? trace_irq_disable+0x3b/0x140 [ 289.358179][ T8564] ? clear_bhb_loop+0x40/0x90 [ 289.358206][ T8564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.358230][ T8564] RIP: 0033:0x7ff4f2bdde59 [ 289.358250][ T8564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.358270][ T8564] RSP: 002b:00007ff4f0e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.358294][ T8564] RAX: ffffffffffffffda RBX: 00007ff4f2e65fa0 RCX: 00007ff4f2bdde59 [ 289.358310][ T8564] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 289.358331][ T8564] RBP: 00007ff4f0e36090 R08: 0000000000000000 R09: 0000000000000000 [ 289.358345][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.358359][ T8564] R13: 00007ff4f2e66038 R14: 00007ff4f2e65fa0 R15: 00007ffe3da588d8 [ 289.358394][ T8564] [ 289.358511][ T8564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 289.526840][ T5702] usb 2-1: Using ep0 maxpacket: 8 [ 289.608850][ T5702] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 289.608882][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.608903][ T5702] usb 2-1: Product: syz [ 289.608920][ T5702] usb 2-1: Manufacturer: syz [ 289.608935][ T5702] usb 2-1: SerialNumber: syz [ 289.665330][ T5702] usb 2-1: config 0 descriptor?? [ 289.873433][ T5702] usb read operation failed. (-32) [ 289.881166][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.887984][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.895918][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.896896][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.080144][ T5702] usb write operation failed. (-71) [ 290.080660][ T5702] usb write operation failed. (-71) [ 290.080682][ T5702] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 290.147351][ T5702] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 290.147378][ T5702] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 290.636755][ T8583] hub 8-0:1.0: USB hub found [ 290.639648][ T8583] hub 8-0:1.0: 1 port detected [ 291.286294][ T8593] netlink: 40 bytes leftover after parsing attributes in process `syz.2.979'. [ 291.782912][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.783558][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.943536][ T8613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.944022][ T8613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.248982][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'. [ 293.662328][ T38] audit: type=1800 audit(1783379345.836:5): pid=8627 uid=0 auid=4294967295 ses=4294967295 op=set_data cause=unavailable-hash-algorithm comm="syz.0.991" name="/kvm" dev="devtmpfs" ino=84 res=0 errno=0 [ 294.913629][ T5717] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 295.099403][ T5717] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.119366][ T5717] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 295.119395][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 295.119416][ T5717] usb 1-1: Product: syz [ 295.119430][ T5717] usb 1-1: Manufacturer: syz [ 295.119463][ T5717] usb 1-1: SerialNumber: syz [ 295.367203][ T5717] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 295.461224][ T5717] usb 1-1: USB disconnect, device number 54 [ 295.474815][ T5717] usblp0: removed [ 295.942812][ T5717] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 296.076028][ T5717] usb 4-1: device descriptor read/64, error -71 [ 296.342907][ T5717] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 296.485571][ T5717] usb 4-1: device descriptor read/64, error -71 [ 296.603108][ T5717] usb usb4-port1: attempt power cycle [ 296.611100][ T8669] dummy0: entered promiscuous mode [ 296.649953][ T8668] dummy0: left promiscuous mode [ 296.703430][ T824] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 296.771868][ T8673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1007'. [ 296.823953][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.830409][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.874820][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.874871][ T824] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 296.874896][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.922508][ T824] usb 1-1: config 0 descriptor?? [ 296.973043][ T5717] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 296.993454][ T5717] usb 4-1: device descriptor read/8, error -71 [ 297.140992][ T824] usbhid 1-1:0.0: can't add hid device: -71 [ 297.141083][ T824] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 297.159769][ T824] usb 1-1: USB disconnect, device number 55 [ 297.242864][ T5717] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 297.263610][ T5717] usb 4-1: device descriptor read/8, error -71 [ 297.373184][ T5717] usb usb4-port1: unable to enumerate USB device [ 297.472757][ T824] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 297.634783][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.634831][ T824] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 297.634848][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.643694][ T824] usb 1-1: config 0 descriptor?? [ 297.966407][ T8697] dummy0: entered promiscuous mode [ 297.972358][ T8696] dummy0: left promiscuous mode [ 298.293671][ T824] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 298.298392][ T824] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input24 [ 298.341721][ T8709] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1021'. [ 298.352934][ T8709] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1021'. [ 298.440107][ T8665] netlink: 'syz.0.1004': attribute type 10 has an invalid length. [ 298.517827][ T8665] bond0: (slave bond_slave_0): Releasing backup interface [ 298.693752][ T8665] team0: Port device bond_slave_0 added [ 298.696720][ T824] usb 1-1: USB disconnect, device number 56 [ 298.696812][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 298.863997][ T8717] trusted_key: encrypted_key: master key parameter '' is invalid [ 298.996256][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.997575][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.101840][ T8728] FAULT_INJECTION: forcing a failure. [ 299.101840][ T8728] name failslab, interval 1, probability 0, space 0, times 0 [ 299.101868][ T8728] CPU: 1 UID: 0 PID: 8728 Comm: syz.3.1030 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 299.101890][ T8728] Tainted: [L]=SOFTLOCKUP [ 299.101896][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.101918][ T8728] Call Trace: [ 299.101924][ T8728] [ 299.101931][ T8728] dump_stack_lvl+0xe8/0x150 [ 299.101957][ T8728] should_fail_ex+0x467/0x600 [ 299.101986][ T8728] should_failslab+0xa8/0x100 [ 299.102010][ T8728] ? ptlock_alloc+0x20/0x70 [ 299.102033][ T8728] kmem_cache_alloc_noprof+0x9e/0x680 [ 299.102055][ T8728] ? ptlock_alloc+0x20/0x70 [ 299.102081][ T8728] ptlock_alloc+0x20/0x70 [ 299.102102][ T8728] pte_alloc_one+0x7e/0x380 [ 299.102146][ T8728] __pte_alloc+0x25/0x1a0 [ 299.102173][ T8728] do_pte_missing+0x1bda/0x28f0 [ 299.102210][ T8728] ? rt_spin_unlock+0x163/0x200 [ 299.102245][ T8728] ? __pmd_alloc+0x41b/0x5e0 [ 299.102279][ T8728] handle_mm_fault+0xe0b/0x1520 [ 299.102305][ T8728] ? handle_mm_fault+0xe9/0x1520 [ 299.102328][ T8728] ? __pfx_handle_mm_fault+0x10/0x10 [ 299.102362][ T8728] ? lock_mm_and_find_vma+0xa7/0x340 [ 299.102389][ T8728] do_user_addr_fault+0x744/0x1340 [ 299.102423][ T8728] exc_page_fault+0x6a/0xc0 [ 299.102455][ T8728] asm_exc_page_fault+0x26/0x30 [ 299.102471][ T8728] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 299.102494][ T8728] Code: e9 c4 34 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 34 05 00 66 2e 0f 1f [ 299.102508][ T8728] RSP: 0018:ffffc9000460fca8 EFLAGS: 00050202 [ 299.102522][ T8728] RAX: ffffffff84cb1000 RBX: 0000000000000004 RCX: 0000000000000004 [ 299.102533][ T8728] RDX: 0000000000000000 RSI: ffffc9000460fd70 RDI: 0000200000bbdffc [ 299.102544][ T8728] RBP: ffffc9000460fdd0 R08: 0000000000000003 R09: 0000000000000004 [ 299.102554][ T8728] R10: dffffc0000000000 R11: fffff520008c1fae R12: 0000200000bbe000 [ 299.102588][ T8728] R13: 00007ffffffff000 R14: ffffc9000460fd70 R15: 0000200000bbdffc [ 299.102612][ T8728] ? _copy_from_user+0x30/0xb0 [ 299.102646][ T8728] _copy_to_user+0x8a/0xb0 [ 299.102680][ T8728] do_timer_create+0xb36/0x1100 [ 299.102710][ T8728] ? __pfx_do_timer_create+0x10/0x10 [ 299.102740][ T8728] __x64_sys_timer_create+0x14c/0x1c0 [ 299.102761][ T8728] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 299.102778][ T8728] ? ksys_write+0x248/0x270 [ 299.102796][ T8728] ? __pfx_ksys_write+0x10/0x10 [ 299.102817][ T8728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.102834][ T8728] do_syscall_64+0x174/0x580 [ 299.102849][ T8728] ? trace_irq_disable+0x3b/0x140 [ 299.102863][ T8728] ? clear_bhb_loop+0x40/0x90 [ 299.102884][ T8728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.102899][ T8728] RIP: 0033:0x7f5e0012de59 [ 299.102913][ T8728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.102926][ T8728] RSP: 002b:00007f5dfe386028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 299.102941][ T8728] RAX: ffffffffffffffda RBX: 00007f5e003b5fa0 RCX: 00007f5e0012de59 [ 299.102955][ T8728] RDX: 0000200000bbdffc RSI: 0000000000000000 RDI: c72c5882d1ee8ba5 [ 299.102966][ T8728] RBP: 00007f5dfe386090 R08: 0000000000000000 R09: 0000000000000000 [ 299.102976][ T8728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.102985][ T8728] R13: 00007f5e003b6038 R14: 00007f5e003b5fa0 R15: 00007fffdae51d28 [ 299.103009][ T8728] [ 299.539241][ T8733] batadv_slave_0: entered promiscuous mode [ 299.706233][ T8732] batadv_slave_0: left promiscuous mode [ 299.739213][ T8742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1035'. [ 299.817162][ T8744] FAULT_INJECTION: forcing a failure. [ 299.817162][ T8744] name failslab, interval 1, probability 0, space 0, times 0 [ 299.817203][ T8744] CPU: 0 UID: 0 PID: 8744 Comm: syz.2.1037 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 299.817232][ T8744] Tainted: [L]=SOFTLOCKUP [ 299.817240][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.817254][ T8744] Call Trace: [ 299.817262][ T8744] [ 299.817271][ T8744] dump_stack_lvl+0xe8/0x150 [ 299.817310][ T8744] should_fail_ex+0x467/0x600 [ 299.817351][ T8744] should_failslab+0xa8/0x100 [ 299.817397][ T8744] kmem_cache_alloc_node_noprof+0xac/0x660 [ 299.817427][ T8744] ? __alloc_skb+0x1d7/0x7a0 [ 299.817457][ T8744] ? __alloc_skb+0x1d7/0x7a0 [ 299.817496][ T8744] __alloc_skb+0x1d7/0x7a0 [ 299.817533][ T8744] __ip6_append_data+0x2ec4/0x40c0 [ 299.817575][ T8744] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 299.817640][ T8744] ? __pfx___ip6_append_data+0x10/0x10 [ 299.817663][ T8744] ? ip6_setup_cork+0x547/0xf60 [ 299.817686][ T8744] ? ip6_append_data+0x1b6/0x280 [ 299.817712][ T8744] ip6_append_data+0x108/0x280 [ 299.817736][ T8744] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 299.817772][ T8744] l2tp_ip6_sendmsg+0x139f/0x18e0 [ 299.817823][ T8744] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 299.817886][ T8744] ? sock_rps_record_flow+0x19/0x350 [ 299.817921][ T8744] ? inet_sendmsg+0x298/0x320 [ 299.817954][ T8744] ? __pfx_inet_sendmsg+0x10/0x10 [ 299.817983][ T8744] sock_sendmsg_nosec+0x10e/0x180 [ 299.818013][ T8744] ____sys_sendmsg+0x565/0x870 [ 299.818059][ T8744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.818105][ T8744] ? import_iovec+0x73/0xa0 [ 299.818135][ T8744] ___sys_sendmsg+0x2a5/0x360 [ 299.818155][ T8744] ? __lock_acquire+0x6df/0x2e40 [ 299.818183][ T8744] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.818242][ T8744] ? __fget_files+0x2a/0x420 [ 299.818273][ T8744] ? __fget_files+0x3a8/0x420 [ 299.818319][ T8744] __x64_sys_sendmsg+0x1b7/0x290 [ 299.818344][ T8744] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.818393][ T8744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.818418][ T8744] do_syscall_64+0x174/0x580 [ 299.818440][ T8744] ? trace_irq_disable+0x3b/0x140 [ 299.818461][ T8744] ? clear_bhb_loop+0x40/0x90 [ 299.818487][ T8744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.818508][ T8744] RIP: 0033:0x7ff4f2bdde59 [ 299.818528][ T8744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.818547][ T8744] RSP: 002b:00007ff4f0e36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.818570][ T8744] RAX: ffffffffffffffda RBX: 00007ff4f2e65fa0 RCX: 00007ff4f2bdde59 [ 299.818586][ T8744] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 299.818599][ T8744] RBP: 00007ff4f0e36090 R08: 0000000000000000 R09: 0000000000000000 [ 299.818612][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.818625][ T8744] R13: 00007ff4f2e66038 R14: 00007ff4f2e65fa0 R15: 00007ffe3da588d8 [ 299.818660][ T8744] [ 299.826551][ T5711] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 300.118255][ T5711] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 300.118288][ T5711] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 300.118305][ T5711] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 300.118322][ T5711] usb 4-1: config 250 has no interface number 0 [ 300.118368][ T5711] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 300.118393][ T5711] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 300.118413][ T5711] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 300.118436][ T5711] usb 4-1: config 250 interface 228 has no altsetting 0 [ 300.162718][ T5711] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 300.162749][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 300.162771][ T5711] usb 4-1: Product: syz [ 300.162786][ T5711] usb 4-1: SerialNumber: syz [ 300.267463][ T5711] hub 4-1:250.228: bad descriptor, ignoring hub [ 300.267505][ T5711] hub 4-1:250.228: probe with driver hub failed with error -5 [ 300.479686][ T5711] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 64 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 300.676491][ T38] audit: type=1326 audit(1783379352.866:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8734 comm="syz.3.1033" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e0012de59 code=0x0 [ 300.832468][ T8765] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1033'. [ 300.832496][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1033'. [ 300.914339][ T5717] usb 4-1: USB disconnect, device number 64 [ 300.942245][ T5717] usblp0: removed [ 301.124756][ T8776] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 301.146959][ T8776] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1046'. [ 302.024500][ T8785] netlink: 'syz.1.1050': attribute type 7 has an invalid length. [ 302.951687][ T8808] kvm: apic: phys broadcast and lowest prio [ 303.842787][ T37] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 303.971924][ T38] audit: type=1326 audit(1783379356.156:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8847 comm="syz.2.1069" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4f2bdde59 code=0x0 [ 303.998378][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.998404][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.998432][ T37] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 303.998449][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.029554][ T37] usb 4-1: config 0 descriptor?? [ 304.469202][ T37] pyra 0003:1E7D:2CF6.0009: unbalanced delimiter at end of report description [ 304.470009][ T37] pyra 0003:1E7D:2CF6.0009: parse failed [ 304.470103][ T37] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -22 [ 304.689826][ T5717] usb 4-1: USB disconnect, device number 65 [ 304.817408][ T8862] FAULT_INJECTION: forcing a failure. [ 304.817408][ T8862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.817447][ T8862] CPU: 1 UID: 0 PID: 8862 Comm: syz.0.1074 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 304.817478][ T8862] Tainted: [L]=SOFTLOCKUP [ 304.817485][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 304.817498][ T8862] Call Trace: [ 304.817507][ T8862] [ 304.817516][ T8862] dump_stack_lvl+0xe8/0x150 [ 304.817549][ T8862] should_fail_ex+0x467/0x600 [ 304.817587][ T8862] _copy_to_user+0x31/0xb0 [ 304.817614][ T8862] simple_read_from_buffer+0xe1/0x170 [ 304.817654][ T8862] proc_fail_nth_read+0x1be/0x230 [ 304.817691][ T8862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.817728][ T8862] ? rw_verify_area+0x250/0x4d0 [ 304.817751][ T8862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.817783][ T8862] vfs_read+0x219/0xa90 [ 304.817813][ T8862] ? __pfx_vfs_read+0x10/0x10 [ 304.817838][ T8862] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 304.817861][ T8862] ? lockdep_hardirqs_on+0x7a/0x110 [ 304.817882][ T8862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 304.817904][ T8862] ? mutex_lock_nested+0x152/0x1d0 [ 304.817934][ T8862] ? fdget_pos+0x252/0x320 [ 304.817976][ T8862] ksys_read+0x156/0x270 [ 304.818010][ T8862] ? __pfx_ksys_read+0x10/0x10 [ 304.818040][ T8862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.818065][ T8862] do_syscall_64+0x174/0x580 [ 304.818097][ T8862] ? trace_irq_disable+0x3b/0x140 [ 304.818117][ T8862] ? clear_bhb_loop+0x40/0x90 [ 304.818143][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.818163][ T8862] RIP: 0033:0x7f0f7624e68e [ 304.818183][ T8862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 304.818202][ T8862] RSP: 002b:00007f0f744e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.818225][ T8862] RAX: ffffffffffffffda RBX: 00007f0f744e66c0 RCX: 00007f0f7624e68e [ 304.818242][ T8862] RDX: 000000000000000f RSI: 00007f0f744e60a0 RDI: 0000000000000005 [ 304.818255][ T8862] RBP: 00007f0f744e6090 R08: 0000000000000000 R09: 0000000000000000 [ 304.818269][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.818282][ T8862] R13: 00007f0f76516038 R14: 00007f0f76515fa0 R15: 00007ffe4e9617d8 [ 304.818316][ T8862] [ 305.288832][ T8870] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 305.572883][ T5711] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 305.632800][ T5710] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 305.712840][ T5711] usb 4-1: device descriptor read/64, error -71 [ 305.782782][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 305.785530][ T5710] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 305.785563][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 305.788100][ T5710] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 305.788134][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.788148][ T5710] usb 1-1: Product: syz [ 305.788159][ T5710] usb 1-1: Manufacturer: syz [ 305.788170][ T5710] usb 1-1: SerialNumber: syz [ 305.854399][ T5710] usb 1-1: config 0 descriptor?? [ 305.872010][ T5710] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 305.872047][ T5710] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 305.974004][ T5711] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 306.077011][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.077685][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.102884][ T5711] usb 4-1: device descriptor read/64, error -71 [ 306.213571][ T5711] usb usb4-port1: attempt power cycle [ 306.469201][ T5710] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 306.469923][ T5710] em28xx 1-1:0.0: Config register raw data: 0x70 [ 306.469938][ T5710] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 306.469949][ T5710] em28xx 1-1:0.0: No AC97 audio processor [ 306.562722][ T5711] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 306.584126][ T5711] usb 4-1: device descriptor read/8, error -71 [ 306.822783][ T5711] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 306.843811][ T5711] usb 4-1: device descriptor read/8, error -71 [ 306.891011][ T5710] usb 1-1: USB disconnect, device number 57 [ 306.956407][ T5711] usb usb4-port1: unable to enumerate USB device [ 307.734569][ T824] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 307.819177][ T8919] evm: overlay not supported [ 307.884352][ T824] usb 1-1: Using ep0 maxpacket: 16 [ 307.889289][ T824] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 307.889313][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 307.891719][ T824] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 307.891749][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.891769][ T824] usb 1-1: Product: syz [ 307.891790][ T824] usb 1-1: Manufacturer: syz [ 307.891800][ T824] usb 1-1: SerialNumber: syz [ 307.972902][ T824] usb 1-1: config 0 descriptor?? [ 307.994381][ T824] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 307.994416][ T824] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 308.634750][ T824] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 308.636478][ T824] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 308.732781][ T5710] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 309.098554][ T8943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1106'. [ 309.124801][ T8943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1106'. [ 309.149864][ T8943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1106'. [ 309.183725][ T8943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1106'. [ 309.224122][ T8943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1106'. [ 309.263883][ T8943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1106'. [ 309.305604][ T8943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1106'. [ 309.348122][ T8943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1106'. [ 309.385763][ T8943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1106'. [ 309.439558][ T8943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1106'. [ 309.834975][ T824] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 309.837814][ T824] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 309.838423][ T824] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 309.838859][ T824] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 309.839292][ T824] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 309.839706][ T824] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 309.872838][ T824] usb 1-1: USB disconnect, device number 58 [ 310.482432][ T8974] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 310.493168][ T8974] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 310.745952][ T8988] openvswitch: netlink: IP tunnel dst address not specified [ 310.873585][ T824] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 311.033188][ T824] usb 1-1: Using ep0 maxpacket: 8 [ 311.040186][ T824] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 311.040265][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.040317][ T824] usb 1-1: Product: syz [ 311.040358][ T824] usb 1-1: Manufacturer: syz [ 311.040399][ T824] usb 1-1: SerialNumber: syz [ 311.076560][ T824] usb 1-1: config 0 descriptor?? [ 311.290537][ T824] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 312.095932][ T9023] FAULT_INJECTION: forcing a failure. [ 312.095932][ T9023] name failslab, interval 1, probability 0, space 0, times 0 [ 312.095964][ T9023] CPU: 0 UID: 0 PID: 9023 Comm: syz.2.1135 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 312.095988][ T9023] Tainted: [L]=SOFTLOCKUP [ 312.095995][ T9023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.096005][ T9023] Call Trace: [ 312.096012][ T9023] [ 312.096024][ T9023] dump_stack_lvl+0xe8/0x150 [ 312.096054][ T9023] should_fail_ex+0x467/0x600 [ 312.096088][ T9023] should_failslab+0xa8/0x100 [ 312.096118][ T9023] __kmalloc_noprof+0xfb/0x790 [ 312.096144][ T9023] ? tomoyo_encode+0x2ad/0x570 [ 312.096162][ T9023] ? tomoyo_encode+0x2ad/0x570 [ 312.096186][ T9023] tomoyo_encode+0x2ad/0x570 [ 312.096209][ T9023] tomoyo_realpath_from_path+0x5fa/0x640 [ 312.096238][ T9023] ? tomoyo_path_number_perm+0x219/0x5f0 [ 312.096273][ T9023] tomoyo_path_number_perm+0x246/0x5f0 [ 312.096305][ T9023] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 312.096334][ T9023] ? __lock_acquire+0x6df/0x2e40 [ 312.096367][ T9023] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 312.096386][ T9023] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.096417][ T9023] ? __fget_files+0x2a/0x420 [ 312.096446][ T9023] ? __fget_files+0x2a/0x420 [ 312.096470][ T9023] ? __fget_files+0x3a8/0x420 [ 312.096496][ T9023] ? __fget_files+0x2a/0x420 [ 312.096525][ T9023] security_file_ioctl+0xb9/0x260 [ 312.096553][ T9023] __se_sys_ioctl+0x47/0x170 [ 312.096588][ T9023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.096610][ T9023] do_syscall_64+0x174/0x580 [ 312.096628][ T9023] ? trace_irq_disable+0x3b/0x140 [ 312.096646][ T9023] ? clear_bhb_loop+0x40/0x90 [ 312.096671][ T9023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.096690][ T9023] RIP: 0033:0x7ff4f2bdde59 [ 312.096708][ T9023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.096724][ T9023] RSP: 002b:00007ff4f0e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.096745][ T9023] RAX: ffffffffffffffda RBX: 00007ff4f2e65fa0 RCX: 00007ff4f2bdde59 [ 312.096759][ T9023] RDX: 0000200000000280 RSI: 0000000040045612 RDI: 0000000000000003 [ 312.096771][ T9023] RBP: 00007ff4f0e36090 R08: 0000000000000000 R09: 0000000000000000 [ 312.096782][ T9023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.096800][ T9023] R13: 00007ff4f2e66038 R14: 00007ff4f2e65fa0 R15: 00007ffe3da588d8 [ 312.096832][ T9023] [ 312.097414][ T9023] ERROR: Out of memory at tomoyo_realpath_from_path. [ 312.527066][ T824] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 312.555637][ T824] usb 1-1: USB disconnect, device number 59 [ 312.695017][ T9029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.721693][ T9029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.955952][ T7279] Flush: task=udevd[7279] dev=loop2 state=2 [ 313.054706][ T7279] Teardown: task=udevd[7279] dev=loop2 state=2 [ 313.272868][ T37] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 313.402687][ T37] usb 4-1: device descriptor read/64, error -71 [ 313.412775][ T4917] Bluetooth: hci3: command 0x0406 tx timeout [ 313.648272][ T37] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 313.792782][ T37] usb 4-1: device descriptor read/64, error -71 [ 313.815148][ T9056] FAULT_INJECTION: forcing a failure. [ 313.815148][ T9056] name failslab, interval 1, probability 0, space 0, times 0 [ 313.815189][ T9056] CPU: 1 UID: 0 PID: 9056 Comm: syz.2.1150 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 313.815220][ T9056] Tainted: [L]=SOFTLOCKUP [ 313.815228][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.815241][ T9056] Call Trace: [ 313.815249][ T9056] [ 313.815259][ T9056] dump_stack_lvl+0xe8/0x150 [ 313.815295][ T9056] should_fail_ex+0x467/0x600 [ 313.815339][ T9056] should_failslab+0xa8/0x100 [ 313.815371][ T9056] ? alloc_empty_file+0x5b/0x1d0 [ 313.815402][ T9056] kmem_cache_alloc_noprof+0x9e/0x680 [ 313.815433][ T9056] ? alloc_empty_file+0x5b/0x1d0 [ 313.815470][ T9056] alloc_empty_file+0x5b/0x1d0 [ 313.815502][ T9056] path_openat+0x8f/0x3850 [ 313.815530][ T9056] ? __lock_acquire+0x6df/0x2e40 [ 313.815554][ T9056] ? kasan_save_track+0x4f/0x80 [ 313.815584][ T9056] ? __kasan_slab_alloc+0x6c/0x80 [ 313.815612][ T9056] ? kmem_cache_alloc_noprof+0x358/0x680 [ 313.815641][ T9056] ? do_getname+0x2e/0x250 [ 313.815669][ T9056] ? do_sys_openat2+0xcc/0x200 [ 313.815699][ T9056] ? __x64_sys_openat+0x138/0x170 [ 313.815730][ T9056] ? do_syscall_64+0x174/0x580 [ 313.815765][ T9056] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.815810][ T9056] do_file_open+0x23e/0x4a0 [ 313.815832][ T9056] ? lockdep_hardirqs_on+0x7a/0x110 [ 313.815859][ T9056] ? __pfx_do_file_open+0x10/0x10 [ 313.815908][ T9056] ? alloc_fd+0x654/0x6d0 [ 313.815950][ T9056] do_sys_openat2+0x115/0x200 [ 313.815985][ T9056] ? __pfx_do_sys_openat2+0x10/0x10 [ 313.816024][ T9056] ? rcu_is_watching+0x15/0xb0 [ 313.816057][ T9056] __x64_sys_openat+0x138/0x170 [ 313.816092][ T9056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.816117][ T9056] do_syscall_64+0x174/0x580 [ 313.816138][ T9056] ? trace_irq_disable+0x3b/0x140 [ 313.816159][ T9056] ? clear_bhb_loop+0x40/0x90 [ 313.816187][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.816209][ T9056] RIP: 0033:0x7ff4f2b9e68e [ 313.816229][ T9056] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 313.816249][ T9056] RSP: 002b:00007ff4f0e343f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 313.816272][ T9056] RAX: ffffffffffffffda RBX: 00007ff4f0e366c0 RCX: 00007ff4f2b9e68e [ 313.816288][ T9056] RDX: 0000000000000002 RSI: 00007ff4f2c73226 RDI: ffffffffffffff9c [ 313.816303][ T9056] RBP: 0000200000001000 R08: 0000000000000000 R09: 0000000000000000 [ 313.816316][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000001800 [ 313.816330][ T9056] R13: 00007ff4f0e34bd0 R14: 000000000000006b R15: 00000000000000c0 [ 313.816362][ T9056] [ 313.907911][ T37] usb usb4-port1: attempt power cycle [ 314.053008][ T39] INFO: task kworker/1:6:5800 blocked for more than 143 seconds. [ 314.053036][ T39] Tainted: G L syzkaller #0 [ 314.053049][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.053059][ T39] task:kworker/1:6 state:D stack:22144 pid:5800 tgid:5800 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 314.053136][ T39] Workqueue: usb_hub_wq hub_event [ 314.053172][ T39] Call Trace: [ 314.053180][ T39] [ 314.053194][ T39] __schedule+0x1709/0x5530 [ 314.053232][ T39] ? __lock_acquire+0x6df/0x2e40 [ 314.053260][ T39] ? __lock_acquire+0x6df/0x2e40 [ 314.053287][ T39] ? driver_probe_device+0x4f/0x240 [ 314.053320][ T39] ? __device_attach_driver+0x270/0x410 [ 314.053353][ T39] ? bus_for_each_drv+0x25b/0x2f0 [ 314.053377][ T39] ? __device_attach+0x2c7/0x450 [ 314.053416][ T39] ? register_lock_class+0x31/0x2e0 [ 314.053456][ T39] ? __pfx___schedule+0x10/0x10 [ 314.053488][ T39] ? lock_acquire+0x115/0x350 [ 314.053519][ T39] ? schedule+0x90/0x2b0 [ 314.053557][ T39] schedule+0x164/0x2b0 [ 314.053594][ T39] schedule_timeout+0xc0/0x2c0 [ 314.053629][ T39] ? __pfx_[ 314.053629][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 314.053665][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 314.053708][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.053731][ T39] ? wait_for_completion+0x272/0x5e0 [ 314.053768][ T39] wait_for_completion+0x2ca/0x5e0 [ 314.053819][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 314.053871][ T39] ? kobject_put+0x50f/0x550 [ 314.053905][ T39] i2c_del_adapter+0x281/0x430 [ 314.053941][ T39] ? __pfx_i2c_del_adapter+0x10/0x10 [ 314.053972][ T39] ? dvb_usbv2_exit+0x94d/0xb80 [ 314.054009][ T39] dvb_usbv2_probe+0x4bb/0x3950 [ 314.054068][ T39] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 314.054101][ T39] ? __pm_runtime_set_status+0x977/0xc40 [ 314.054144][ T39] usb_probe_interface+0x653/0xc60 [ 314.054191][ T39] ? __pfx_usb_probe_interface+0x10/0x10 [ 314.054226][ T39] really_probe+0x254/0xae0 [ 314.054266][ T39] __driver_probe_device+0x1e8/0x360 [ 314.113155][ T39] driver_probe_device+0x4f/0x240 [ 314.113202][ T39] __device_attach_driver+0x270/0x410 [ 314.142613][ T39] bus_for_each_drv+0x25b/0x2f0 [ 314.142650][ T39] ? __pfx___device_attach_driver+0x10/0x10 [ 314.142684][ T39] ? __pfx_bus_for_each_drv+0x10/0x10 [ 314.142710][ T39] ? rt_spin_unlock+0x163/0x200 [ 314.142747][ T39] __device_attach+0x2c7/0x450 [ 314.142775][ T39] ? rt_spin_unlock+0x157/0x200 [ 314.142804][ T39] ? __pfx___device_attach+0x10/0x10 [ 314.156535][ T39] device_initial_probe+0xa1/0xd0 [ 314.156582][ T39] bus_probe_device+0x12d/0x220 [ 314.156615][ T39] device_add+0x7d7/0xb80 [ 314.156649][ T39] usb_set_configuration+0x1ad8/0x2180 [ 314.156709][ T39] usb_generic_driver_probe+0x8d/0x150 [ 314.156744][ T39] usb_probe_device+0x1c3/0x3b0 [ 314.156782][ T39] ? __pfx_usb_probe_device+0x10/0x10 [ 314.156856][ T39] really_probe+0x254/0xae0 [ 314.156985][ T39] __driver_probe_device+0x1e8/0x360 [ 314.157059][ T39] driver_probe_device+0x4f/0x240 [ 314.157165][ T39] __device_attach_driver+0x270/0x410 [ 314.157264][ T39] bus_for_each_drv+0x25b/0x2f0 [ 314.157339][ T39] ? __pfx___device_attach_driver+0x10/0x10 [ 314.157444][ T39] ? __pfx_bus_for_each_drv+0x10/0x10 [ 314.157511][ T39] ? rt_spin_unlock+0x163/0x200 [ 314.157652][ T39] __device_attach+0x2c7/0x450 [ 314.157749][ T39] ? __pfx___device_attach+0x10/0x10 [ 314.159527][ T39] device_initial_probe+0xa1/0xd0 [ 314.159633][ T39] bus_probe_device+0x12d/0x220 [ 314.159716][ T39] device_add+0x7d7/0xb80 [ 314.159793][ T39] usb_new_device+0x98d/0x1610 [ 314.159857][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 314.159909][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 314.159938][ T39] ? __pfx_usb_new_device+0x10/0x10 [ 314.159973][ T39] hub_event+0x28cf/0x4cf0 [ 314.160051][ T39] ? __pfx_hub_event+0x10/0x10 [ 314.160090][ T39] ? rcu_is_watching+0x15/0xb0 [ 314.160118][ T39] ? process_one_work+0x7fd/0x1480 [ 314.160143][ T39] process_one_work+0xaaf/0x1480 [ 314.160189][ T39] ? __pfx_process_one_work+0x10/0x10 [ 314.160257][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 314.160390][ T39] ? assign_work+0x3cf/0x5d0 [ 314.160470][ T39] worker_thread+0xb05/0x10d0 [ 314.160563][ T39] ? __kthread_parkme+0x71/0x1f0 [ 314.160657][ T39] kthread+0x388/0x470 [ 314.160740][ T39] ? __pfx_worker_thread+0x10/0x10 [ 314.160796][ T39] ? __pfx_kthread+0x10/0x10 [ 314.160879][ T39] ret_from_fork+0x514/0xb70 [ 314.161922][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 314.162015][ T39] ? __switch_to+0xc89/0x1420 [ 314.162095][ T39] ? __pfx_kthread+0x10/0x10 [ 314.162179][ T39] ret_from_fork_asm+0x1a/0x30 [ 314.162298][ T39] [ 314.162491][ T39] [ 314.162491][ T39] Showing all locks held in the system: [ 314.162503][ T39] 4 locks held by pr/legacy/17: [ 314.162516][ T39] #0: ffffffff8e3b5a00 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 314.170840][ T39] #1: ffffffff8e29d2f8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb50 [ 314.171014][ T39] #2: ffffffff9a084518 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x17c/0x1b40 [ 314.171200][ T39] #3: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 314.179805][ T39] 7 locks held by kworker/1:1/37: [ 314.179843][ T39] #0: ffff88801fef9d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 314.179911][ T39] #1: ffffc90000ac7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 314.180095][ T39] #2: ffff88802a2ee210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 314.180278][ T39] #3: ffff88802a322658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0 [ 314.180736][ T39] #4: ffff88801db00c58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0 [ 314.180897][ T39] #5: ffffffff8f067660 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x17d0 [ 314.181068][ T39] #6: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 314.181229][ T39] 1 lock held by khungtaskd/39: [ 314.181271][ T39] #0: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 314.181392][ T39] 4 locks held by kworker/u8:9/1190: [ 314.181405][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 314.181459][ T39] #1: ffffc9000605fc60 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 314.190062][ T39] #2: ffffffff8e251cb0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 314.190221][ T39] #3: ffffffff8e499238 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 314.190416][ T39] 5 locks held by kworker/u8:19/2215: [ 314.190450][ T39] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 314.190604][ T39] #1: ffffc90007dc7c60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 314.190733][ T39] #2: ffff88803aab6310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 314.190919][ T39] #3: ffff88805c6cdd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 314.191254][ T39] #4: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 314.197280][ T39] 2 locks held by getty/5357: [ 314.197317][ T39] #0: ffff88803612d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 314.197467][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 314.197736][ T39] 6 locks held by kworker/1:3/5702: [ 314.197776][ T39] #0: ffff88801fef9d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 314.197919][ T39] #1: ffffc90004e47c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 314.199726][ T39] #2: ffff88802a100210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 314.199888][ T39] #3: ffff888036264210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 314.200271][ T39] #4: ffff8880342621d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 314.205094][ T39] #5: ffffffff8e2608c0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 314.205148][ T39] 4 locks held by udevd/5767: [ 314.205158][ T39] #0: ffff88803ef141a8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0 [ 314.205216][ T39] #1: ffff88805a6c5878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 314.205267][ T39] #2: ffff88805a564698 (kn->active#17){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 314.205318][ T39] #3: ffff88802598e210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 314.205380][ T39] 5 locks held by kworker/1:6/5800: [ 314.205391][ T39] #0: ffff88801fef9d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 314.205437][ T39] #1: ffffc90005127c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 314.205483][ T39] #2: ffff88802a2b4210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 314.205541][ T39] #3: ffff88802598e210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 314.205601][ T39] #4: ffff88805f5891d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 314.205710][ T39] 2 locks held by syz.0.1147/9047: [ 314.205750][ T39] #0: ffff888039e46098 (&ctx->uring_lock){+.+.}-{4:4}, at: __se_sys_io_uring_enter+0x359/0x1bb0 [ 314.205924][ T39] #1: ffff8880b863cfd8 ((lock)#5){+.+.}-{3:3}, at: trylock_stock+0x103/0x350 [ 314.206364][ T39] 3 locks held by syz.2.1150/9055: [ 314.206398][ T39] #0: ffffffff8e251cb0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_slow_dec+0x3d/0x90 [ 314.206549][ T39] #1: ffffffff8e499238 (jump_label_mutex){+.+.}-{4:4}, at: __static_key_slow_dec_cpuslocked+0x3a/0x110 [ 314.206739][ T39] #2: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: jump_label_update+0x96/0x500 [ 314.217373][ T39] [ 314.217396][ T39] ============================================= [ 314.217396][ T39] [ 314.217438][ T39] NMI backtrace for cpu 0 [ 314.217492][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 314.217573][ T39] Tainted: [L]=SOFTLOCKUP [ 314.217595][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.217628][ T39] Call Trace: [ 314.217651][ T39] [ 314.217674][ T39] dump_stack_lvl+0xe8/0x150 [ 314.217757][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 314.217846][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 314.217929][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 314.218017][ T39] sys_info+0x135/0x170 [ 314.218094][ T39] watchdog+0xfd7/0x1030 [ 314.218206][ T39] ? watchdog+0x1c7/0x1030 [ 314.218321][ T39] kthread+0x388/0x470 [ 314.218383][ T39] ? __pfx_watchdog+0x10/0x10 [ 314.218457][ T39] ? __pfx_kthread+0x10/0x10 [ 314.218557][ T39] ret_from_fork+0x514/0xb70 [ 314.218653][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 314.218735][ T39] ? __switch_to+0xc89/0x1420 [ 314.218820][ T39] ? __pfx_kthread+0x10/0x10 [ 314.218894][ T39] ret_from_fork_asm+0x1a/0x30 [ 314.219023][ T39] [ 314.219100][ T39] Sending NMI from CPU 0 to CPUs 1: [ 314.219162][ C1] NMI backtrace for cpu 1 [ 314.219178][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 314.219204][ C1] Tainted: [L]=SOFTLOCKUP [ 314.219210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.219221][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 314.219251][ C1] Code: e8 de 2f 67 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 df 1b d3 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 65 f2 05 cc 44 89 f9 80 e1 07 [ 314.219267][ C1] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 314.219283][ C1] RAX: 1ffffffff3410800 RBX: 00000000000003fd RCX: 0000000000000000 [ 314.219296][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 314.219307][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.219319][ C1] R10: dffffc0000000000 R11: ffffffff855e0b40 R12: dffffc0000000000 [ 314.219333][ C1] R13: 0000000000000000 R14: ffffffff9a084540 R15: 0000000000000000 [ 314.219347][ C1] FS: 0000000000000000(0000) GS:ffff888125b06000(0000) knlGS:0000000000000000 [ 314.219362][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.219374][ C1] CR2: 0000000000000000 CR3: 000000003f0b4000 CR4: 00000000003526f0 [ 314.219389][ C1] Call Trace: [ 314.219396][ C1] [ 314.219404][ C1] wait_for_lsr+0x190/0x300 [ 314.219433][ C1] serial8250_console_write+0x113a/0x1b40 [ 314.219466][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 314.219496][ C1] ? console_flush_one_record+0x472/0xb50 [ 314.219529][ C1] console_flush_one_record+0x642/0xb50 [ 314.219560][ C1] ? console_flush_one_record+0xfa/0xb50 [ 314.219591][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 314.219622][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 314.219643][ C1] legacy_kthread_func+0x1b6/0x250 [ 314.219673][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 314.219702][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 314.219729][ C1] ? __kthread_parkme+0x71/0x1f0 [ 314.219751][ C1] ? __kthread_parkme+0x196/0x1f0 [ 314.219776][ C1] kthread+0x388/0x470 [ 314.219801][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 314.219828][ C1] ? __pfx_kthread+0x10/0x10 [ 314.219865][ C1] ret_from_fork+0x514/0xb70 [ 314.219898][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 314.219924][ C1] ? __switch_to+0xc89/0x1420 [ 314.219947][ C1] ? __pfx_kthread+0x10/0x10 [ 314.219973][ C1] ret_from_fork_asm+0x1a/0x30 [ 314.220007][ C1] [ 314.226966][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 314.227030][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 314.227109][ T39] Tainted: [L]=SOFTLOCKUP [ 314.227130][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.227171][ T39] Call Trace: [ 314.227193][ T39] [ 314.227217][ T39] vpanic+0x5d9/0xad0 [ 314.227294][ T39] ? __pfx_vpanic+0x10/0x10 [ 314.227369][ T39] ? __pfx___schedule+0x10/0x10 [ 314.227500][ T39] panic+0xc5/0xd0 [ 314.227557][ T39] ? __pfx_panic+0x10/0x10 [ 314.227611][ T39] ? preempt_schedule_common+0x82/0xd0 [ 314.227711][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 314.227782][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 314.227839][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 314.227911][ T39] watchdog+0x1030/0x1030 [ 314.228045][ T39] ? watchdog+0x1c7/0x1030 [ 314.228172][ T39] kthread+0x388/0x470 [ 314.228250][ T39] ? __pfx_watchdog+0x10/0x10 [ 314.228333][ T39] ? __pfx_kthread+0x10/0x10 [ 314.228431][ T39] ret_from_fork+0x514/0xb70 [ 314.228526][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 314.228580][ T39] ? __switch_to+0xc89/0x1420 [ 314.228610][ T39] ? __pfx_kthread+0x10/0x10 [ 314.228641][ T39] ret_from_fork_asm+0x1a/0x30 [ 314.228687][ T39] [ 314.229310][ T39] Kernel Offset: disabled