last executing test programs: 6.218602475s ago: executing program 2 (id=1344): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"a2e3ad21ed0d1bf91b29550987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f3b096c060890e0878f0e1ac6e7049b096e959b449a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b075d0d36cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130f91850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f4077fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677547430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a81aa1020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b21052010689af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153fae46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c343f7f140f319539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768aff7f000000000000f95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474b0679dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691951264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d984836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a70500be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x103d}}, 0x1006) mount(&(0x7f0000001080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000640)={@val={0xa, 0x86dd}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cf3f53f449aa", @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x0, 0x32, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r8 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x42c0, 0x4) sendto$inet(r8, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x488c0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYRES64=r6, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001180)=ANY=[@ANYBLOB="68418e051b929a103fd4c92e9e", @ANYRES16=r5, @ANYBLOB="010028bd70000600000012000000080009000101000008000900090000003c0001800800030001000000140002006272696467655f736c6176655f310000140002006272696467655f736c6176655f31000008000100", @ANYRES32=r7, @ANYBLOB="08000800090000000800090002000000080007003ff50000"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x8, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}) 5.79497273s ago: executing program 4 (id=1350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe9841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 5.283404122s ago: executing program 4 (id=1357): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000700)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x6}) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000680)={r10, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000280)={0x2, 0x0, r10}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000019c80)=""/102398, 0x18ffe) 4.601821923s ago: executing program 0 (id=1365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_io_uring_setup(0x51bf, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xbfdffff9}, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r7 = syz_io_uring_setup(0x4ed, &(0x7f0000000300)={0x0, 0xfec9, 0x0, 0xff7ffffc, 0x274}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0xdb4, 0xd070, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r9, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1={0xfc, 0x1, '\x00', 0x2}, 0x9}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x118) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x4000)=nil, 0x4000, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00') 4.365255167s ago: executing program 2 (id=1368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x240c4880) 4.364318213s ago: executing program 4 (id=1369): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r2, 0x8, 0x1, 0x6, 0x635b, 0x0, 0x8, 0xbba1, {r2, @in6={{0xa, 0x4e24, 0x0, @loopback, 0x8c}}, 0x8000, 0xe56, 0x3, 0x10000, 0xe7}}, &(0x7f0000000300)=0xb0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) setpgid(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x4e28, 0xf, @loopback, 0x2}}}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) splice(r6, 0x0, r7, &(0x7f0000000080)=0x9, 0x200000000005, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000600)={0x1, 0x6, 0x2000007, 0xe, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}]}) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r9) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fcdbdf2503000000180001801400020073797a5f74756e000000000000faffff04000300030000000500050002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1e, r11}) utime(&(0x7f00000000c0)='./file0\x00', 0x0) 3.728454007s ago: executing program 0 (id=1373): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) syz_emit_ethernet(0x19f, &(0x7f0000000940)={@broadcast, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x4}}, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, "4ab15a", 0x165, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x2c, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x5ed2}]}, @srh={0x0, 0x6, 0x4, 0x3, 0x4, 0x0, 0x8, [@private1, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x1, 0x18, '\x00', [@generic={0x1, 0xbb, "6c88cbcb47111ec5eed6d6c90ccde7a983f461ca477ad4523f7bf7aedf719db75c4900ad666f601c9d6aeadee3cbddacf1002d67fc7edd28e0a870cea852398510107da86e6f1982db5eafb56ee54d9d35b98a5fd92e0607f264afbce62f1450f74408f84eb989a639c3b20cea5189407224bcba3d3815d1b458295c26fdb0ff878efd97136387072bc0c886dd80c92e200e1c88efdbed0ddd298c6f8af5acd4a3aebc6d27dfa3b73cd77e06cce5bae18ecf63712148e6768f7af7"}, @calipso={0x7, 0x8, {0x2, 0x0, 0xb1, 0x7}}]}], @payload_mcast={{{{{{0x2d, 0x0, 0x1, 0x1, 0x1, 0xb, 0x2, 0x2, 0x2, 0x0, 0x1, 0x1, 0x5, 0x1, 0x2, 0xfff, 0x2, 0x4e23, 0x4e23}, 0x3, 0x2}, 0x3, 0x3}, 0x3}}, [0x0]}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.518317893s ago: executing program 2 (id=1374): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000240)='veno\x00', 0x5) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='afs\x00', 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000204000001c10004000000000a5000000001ed6e69500000000000000ca3061458160ae0f55ad0b99047905685e2b4d440042daba63a50a"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x28682, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@rdmsr={0x66, 0x18, {0x40000101}}], 0xffffffffffffff83}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000380)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './cgroup\x00'}) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000000a40)=[@nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18, 0x8}, @nested_amd_invlpga={0x17d, 0x20, {0x200000, 0xce49}}, @code={0xa, 0x68, {"c4c27d20f0c4c3e55d60a50026260fc73766baf80cb8f13a4482ef66bafc0cec8fe97c80c1c7442400b9000000c7442402c2740000ff2c2466b8c6000f00d8420f635444ea0f0090f95700000f20c035100000000f22c0"}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0x366a, 0x2, 0x1}}, @code={0xa, 0x4a, {"460f0780fe032664676467400f129e0cee000065260f07f3470f0866b8a5000f00d8c461fd51cd66ba410066b8000066ef0f01c365470f78c9"}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x6d, 0x7, 0x40, 0x7}}, @rdmsr={0x66, 0x18, {0xb26}}, @wr_crn={0x67, 0x20, {0x3, 0x80000001}}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x48, {0x0, "410f01c3f0450fb38700000000f20fd6e4c4024d9d1847f4400f186b06f2dde0663e79f864f3a6660ffa842900400000"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x98, 0xf, 0x9, 0x5}}, @out_dx={0x6a, 0x28, {0x4b49, 0x0, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x2}, @uexit={0x0, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x1}, @out_dx={0x6a, 0xffffffffffffff17, {0xcafa, 0x2, 0x7}}, @code={0xa, 0x55, {"666566470f38827dec26660f38f85ff3f2640f019ac69affff3e660f3830a9534c0000f2653e0f070f0666b818010f00d00f0dba520000000f06c4410de09c724b3b0000"}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xfc, 0x7, 0x1, 0x2}}, @in_dx={0x69, 0x20, {0x9528, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x60000, 0x5d45}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18}], 0x47f}) 3.247349359s ago: executing program 4 (id=1376): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/35, 0x23}, {&(0x7f00000000c0)=""/195, 0xc3}], 0x2) 3.007691425s ago: executing program 0 (id=1380): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x111, 0x4b4, 0x1e0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x73, 0xe}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x8, {0x2}}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) fsopen(&(0x7f00000003c0)='ocfs2_dlmfs\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) unshare(0x400) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x104, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xd4, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0xfffffffffffffc3e, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x9, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x104}}, 0x2000c800) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9, 0x6}, {0x4, 0xffe0}, {0xffe0, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x20014800) connect$rxrpc(r1, &(0x7f0000000240)=@in4={0x21, 0x0, 0x1c, 0x2, {0x10, 0x0, @broadcast}}, 0x24) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.724796373s ago: executing program 0 (id=1382): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, 0x0, 0x0) dup2(r1, r0) socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.506755019s ago: executing program 2 (id=1384): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x101642, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) splice(r1, &(0x7f0000000200)=0xf6, r0, &(0x7f0000000240)=0x235447e9, 0x5475, 0xe) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 2.506403231s ago: executing program 4 (id=1385): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000ec0000000800000002"], 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, 0x0, &(0x7f0000000280)=@udp=r2, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) 2.419319684s ago: executing program 1 (id=1387): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.400678508s ago: executing program 0 (id=1388): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) lseek(r0, 0xfffffffffffffff5, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000000e0c0)=""/102400, 0x19000) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) userfaultfd(0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000240)=[{0x6, 0x5, 0x0, 0x7ffc0001}]}) unshare(0x4a0004c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$rfkill(r4, &(0x7f0000000300)={0xfff, 0x6, 0x7, 0x1, 0x1}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x4, 0x5, 0x7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000f40)=ANY=[@ANYRES32=r1, @ANYRES8=r6], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x13e, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000003c0)={r2, 0x0, r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="880200001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="008000000011000014000300766574683100000000000000000000000c002b80080003002400000074003a80"], 0x288}, 0x1, 0x0, 0x0, 0x2000c046}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYRES16=r3], 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x60000c5) 2.286047777s ago: executing program 4 (id=1389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04000418"], 0x7) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000400a5e55a0000000000001090224000100000000090400000103000100092100100101220700090581032000"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "bf05017a"}, @global=@item_012={0x1, 0x1, 0x0, 'O'}]}}, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket(0x22, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r3, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x18, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x0, 0xa1, 0x1}]]}, 0x3c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000002240)={0x1, [0x0]}) recvmmsg(r6, &(0x7f0000004780)=[{{&(0x7f00000005c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000000640)=""/84, 0x54}], 0x2}, 0x5}, {{&(0x7f00000006c0)=@generic, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000740)=""/7, 0x7}, {&(0x7f0000000780)=""/216, 0xd8}, {&(0x7f0000000880)=""/7, 0x7}, {&(0x7f0000000940)=""/249, 0xf9}], 0x4, &(0x7f0000000a80)=""/151, 0x97}, 0x2}, {{&(0x7f0000000b40)=@qipcrtr, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000bc0)=""/192, 0xc0}, {&(0x7f0000000c80)=""/58, 0x3a}, {&(0x7f0000000cc0)=""/39, 0x27}, {&(0x7f0000000d00)=""/216, 0xd8}, {&(0x7f0000000e00)=""/139, 0x8b}, {&(0x7f0000000ec0)=""/31, 0x1f}], 0x6, &(0x7f0000000f80)=""/150, 0x96}, 0x3}, {{&(0x7f0000001040)=@can, 0x80, &(0x7f00000024c0)=[{&(0x7f00000010c0)=""/125, 0x7d}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/203, 0xcb}, {&(0x7f0000002240)}, {&(0x7f0000002280)=""/156, 0x9c}, {&(0x7f0000002340)=""/224, 0xe0}, {&(0x7f0000002440)=""/109, 0x6d}], 0x7}, 0x40}, {{&(0x7f0000002540)=@l2, 0x80, &(0x7f00000027c0)=[{&(0x7f00000025c0)=""/151, 0x97}, {&(0x7f0000002680)=""/27, 0x1b}, {&(0x7f00000026c0)=""/253, 0xfd}], 0x3, &(0x7f0000002800)=""/159, 0x9f}, 0x7}, {{&(0x7f00000028c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002940)=""/119, 0x77}, {&(0x7f00000029c0)=""/63, 0x3f}, {&(0x7f0000002a00)=""/43, 0x2b}, {&(0x7f0000002a40)=""/118, 0x76}, {&(0x7f0000002ac0)=""/51, 0x33}, {&(0x7f0000002b00)=""/66, 0x42}, {&(0x7f0000002b80)=""/211, 0xd3}], 0x7, &(0x7f0000002d00)=""/159, 0x9f}, 0x18f7}, {{&(0x7f0000002dc0)=@xdp, 0x80, &(0x7f0000003380)=[{&(0x7f0000002e40)=""/139, 0x8b}, {&(0x7f0000002f00)=""/250, 0xfa}, {&(0x7f0000003000)=""/126, 0x7e}, {&(0x7f0000003080)=""/141, 0x8d}, {&(0x7f0000003140)=""/164, 0xa4}, {&(0x7f0000003200)=""/188, 0xbc}, {&(0x7f00000032c0)=""/174, 0xae}], 0x7, &(0x7f0000003400)=""/191, 0xbf}, 0x7fffffff}, {{&(0x7f00000034c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000004680)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/83, 0x53}, {&(0x7f00000045c0)=""/173, 0xad}], 0x3, &(0x7f00000046c0)=""/132, 0x84}, 0xd9e}], 0x8, 0x0, &(0x7f0000004980)) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) close(0x3) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @val={0x6, 0x2, 0x8}, @void, @val={0x72, 0x6}, @void}, 0x42) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) 2.285380112s ago: executing program 3 (id=1390): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) syz_emit_ethernet(0x19f, &(0x7f0000000940)={@broadcast, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x4}}, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, "4ab15a", 0x165, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x2c, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x5ed2}]}, @srh={0x0, 0x6, 0x4, 0x3, 0x4, 0x0, 0x8, [@private1, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x1, 0x18, '\x00', [@generic={0x1, 0xbb, "6c88cbcb47111ec5eed6d6c90ccde7a983f461ca477ad4523f7bf7aedf719db75c4900ad666f601c9d6aeadee3cbddacf1002d67fc7edd28e0a870cea852398510107da86e6f1982db5eafb56ee54d9d35b98a5fd92e0607f264afbce62f1450f74408f84eb989a639c3b20cea5189407224bcba3d3815d1b458295c26fdb0ff878efd97136387072bc0c886dd80c92e200e1c88efdbed0ddd298c6f8af5acd4a3aebc6d27dfa3b73cd77e06cce5bae18ecf63712148e6768f7af7"}, @calipso={0x7, 0x8, {0x2, 0x0, 0xb1, 0x7}}]}], @payload_mcast={{{{{{0x2d, 0x0, 0x1, 0x1, 0x1, 0xb, 0x2, 0x2, 0x2, 0x0, 0x1, 0x1, 0x5, 0x1, 0x2, 0xfff, 0x2, 0x4e23, 0x4e23}, 0x3, 0x2}, 0x3, 0x3}, 0x3}}, [0x0]}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.276421606s ago: executing program 2 (id=1391): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[], 0x11) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f6465bc9dab9e3d3000023030303030303130303030302c75736572d4c625228ec0b4f0044228647e8a3a88f2f216c14cd4", @ANYRESDEC=0x0, @ANYRES32=r6, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r8, r9, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r10, r4) close_range(r3, 0xffffffffffffffff, 0x2) 2.208422713s ago: executing program 3 (id=1392): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x3, r2, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6800bd7000fbdbdf25"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="020114003cfe18000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}, {&(0x7f0000001680)=ANY=[], 0x1068}, {&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000085004f80cc070c2d23b31f92e3c22edbad38aedeb051ed691cb96159864d43bf3171bb4dd4085bab72fbd97f2c410c3184f19a4c84861fd02380d8e8d2f0320b5373f1d97170f0a5ad8aa80333487d69fd839c352aef63fe3e76e5af209496d43e84f252aafd128aab8da9cb783a1e5d6dd093b6f854f750d1445ffcbaf516fe9a63045a280000000000002800008021004e80808af2f172b5c72091bcdddcf185734b5f617991c9f3a6bfda3a269e41000000"], 0x1158}], 0x3, 0x0, 0x0, 0x9006}, 0x4000) 1.166702919s ago: executing program 1 (id=1393): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8e41, 0x0) ioctl$COMEDI_CANCEL(r0, 0x6407) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x49, 0x0, &(0x7f00000004c0)="0074f59da7e55e93f14a5d2bbf77b0002ffe43daae994f23fc8dc8ad76666cfc018047f03a468b92b7dca8271b225451fc9f7ad655b1c78918d52716c97845f158d2d7d55c44b20a7b", 0x0}, 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x27}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r4, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) r5 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) sync_file_range(r1, 0x7, 0x0, 0x5) 1.081639681s ago: executing program 2 (id=1394): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000900000000000000080000008500000013000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 948.512299ms ago: executing program 1 (id=1395): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newqdisc={0x498, 0x24, 0x3fe3aa0262d8c783, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x468, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c, 0x16}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x5, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0xffffffffffffffd9, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7d9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47f92500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4eb2998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc300"}]}}]}, 0x498}}, 0x0) 810.355606ms ago: executing program 3 (id=1396): connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x46, 0x0, @fd_index=0x1, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 760.969257ms ago: executing program 0 (id=1397): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="00100c00000002000000f6c239ceb5d21e9d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000bc0)={0x14, &(0x7f0000000a80)={0x0, 0xa, 0x27, {0x27, 0x5, "97dcdce3ae7bf691156fcfdd46caf6c683d8d3390839bc55aa34504f48ad4cf608650308fe"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x34, @string={0x34, 0x3, "889d22967d47e390fd38dd87bc5b2a63e46e9d1c37a6c9f39cb02e35a7fa27ddb0cf14f98ed8e65e84333adc36bab8a7b85a"}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000c00)={0x40, 0x1, 0xed, "362a1db8e79f74e57f6c46bf09f1d667befc82aa8130358bd35fd51b85f36541134a4b2202d7f4535e3e51c1d4cb67d8f33484ac2a90037693c1e6141ab10278f474b58e820c2de961f81630675a28faa8c5aab12a0ed2b7e03b94ab3046f47a1bab87f7107605a6cd6447680a9f02cd48afe8d59fe6fa6c04ec7374bce2ebb6fff637d013e7e1f19a86d1b1f189ff97353dfc6f4746a215c1e6a79811ff4c50a480d9b87f4c1a1b12e8dd1d48c262b9595f0d55d6b272d1357259925e56098d6a7620748f3bc5f37137f317d9e7b90d984de93800157f5da200042b94b1afb6237fc2bfbcd2ba1510376c7269"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x4}, 0x0, &(0x7f0000000d80)={0x20, 0x81, 0x2, 'I&'}, &(0x7f0000000dc0)={0x20, 0x82, 0x3, "eba48a"}, &(0x7f0000000e00)={0x20, 0x83, 0x1, '\''}, &(0x7f0000000f40)=ANY=[@ANYBLOB="ad55d0f44f511df64dd2bc4eae7250047a0d8dbe71e12f60cad2e1d4f2732c2213fb61293b75d068518d25"], &(0x7f0000000e80)={0x20, 0x85, 0x3, "be051b"}}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1854, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x5b}}}}}]}}]}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r3, 0x2035}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)={0x0, 0x10, 0x64, {0x64, 0xa, "2c21331f8b1a79bd721dd40ebf9fad515ef0f96eceb0ee7836644b4007c0126f2f26de2f4e9b0ab332aaee0a28a0803a49fe372181471a14b487fa5496e301fa28624d4592e15b953c5d3eed6b39913277635118b7109a2c8a35913ac4f722dc054b"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x143e}}, &(0x7f0000000300)={0x0, 0xf, 0x166, {0x5, 0xf, 0x166, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x3, 0x9, 0xd, 0x4}, @generic={0xca, 0x10, 0xb, "44ca210106f1ef69d2829445efe00f821ed4dd854bc0d1deb40ef1b849c12223a3fe4f63da2187dcf50d5433676cf8c89efce7835b8d5d45f17a64e9e66024e2620effece73c915fe70aa2cbcec167f38614e803c96f8a4cb786533d0a618ce21dc9e0d50af947602ec1a76b19691b6519eb83396c21ffbdef8a32485d28101e1e8cad5b4bbefe650784a9539c11f368f72ce6adfe0f131605a57b7d57b569663620add1c1d188691286133fa21157634786348800641735d3a7c5790c9d4bee833ecd55b92605"}, @generic={0x90, 0x10, 0xb, "0a7891bb3d075b3689b6c778b7e6d14ab4cd22f4768bd55bc3d636d4f2f8f7531b321ea32f891f2c1b07888e0ee36ad5ca092bd2a21bc8a86822465d4826b94f99b7be60a6b7f0aee95458a725e3de896f839664cd80545c7eff21195505946c2a961689ab8637b5212aff6e950d1926cfea79dad2de37469f7c2fb1837059d43df7438b0ba8730a611a3507b1"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x8, 0x6, "72d58089", "80658151"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0xc0, 0xb2, 0xf9, 0x9f, 0x400}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x40, 0x17, 0x1d, "cd5ddb4a45db2f5a21fe42bea8c13880a257b053906c37f20680ccb0ba"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xcc}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1, 0x5}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x80, 0x20, [0xf00]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000780)={0x40, 0xb, 0x2, "8883"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000800)={0x40, 0x13, 0x6, @local}, &(0x7f0000000840)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, &(0x7f0000000880)={0x40, 0x19, 0x2, "d9f6"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x80}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0xd7}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0xc}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x28, "1a46d75a8fd68e333ff6617081d56276c20ade022ac0a5b0e021217f3b7e3adaef08362106a27f90"}, 0x0, 0x0, 0x0, 0x0}) 671.609469ms ago: executing program 1 (id=1398): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, 0x0, 0x0) dup2(r1, r0) socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 378.042839ms ago: executing program 3 (id=1399): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x9, 0x27d08d, 0x2, &(0x7f0000000180)="9bb4", 0x10001}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000200)={0xc, 0x0, 0x1, 0x204}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x4, 0x1, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0x1, 0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe, 0x7, 0x1, 0x23f6, 0x0, 0x4c000000, 0x401, 0x0, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000050}, 0x40) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 349.164974ms ago: executing program 1 (id=1400): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) lseek(r0, 0xfffffffffffffff5, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000000e0c0)=""/102400, 0x19000) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) userfaultfd(0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000240)=[{0x6, 0x5, 0x0, 0x7ffc0001}]}) unshare(0x4a0004c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$rfkill(r4, &(0x7f0000000300)={0xfff, 0x6, 0x7, 0x1, 0x1}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x4, 0x5, 0x7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000f40)=ANY=[@ANYRES32=r1, @ANYRES8=r6], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x13e, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000003c0)={r2, 0x0, r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="880200001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="008000000011000014000300766574683100000000000000000000000c002b80080003002400000074003a80"], 0x288}, 0x1, 0x0, 0x0, 0x2000c046}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYRES16=r3], 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x60000c5) 170.317406ms ago: executing program 3 (id=1401): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x9, 0x27d08d, 0x2, &(0x7f0000000180)="9bb4", 0x10001}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000200)={0xc, 0x0, 0x1, 0x204}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x4, 0x1, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0x1, 0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe, 0x7, 0x1, 0x23f6, 0x0, 0x4c000000, 0x401, 0x0, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000050}, 0x40) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 78.259726ms ago: executing program 1 (id=1402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x57e, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xd, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x4, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220b0000009bd5043c9dab2475087e7efccbddfe335c950f59533692f380c328f4a61c4e4c0c3e5228011e05bc405b0800fb"], 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe70, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xfffffffd, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x6}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x800, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x8, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x56, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe70}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="3400000040000100feffff0a5ac99025017c0000040042800c00018006000600800a0000100002800c00178008000100", @ANYRES32=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000d40)=[@code={0xa, 0x60, {"36660f383c086666410f3832c3c421096d7766470f32660f3881a500b00000b91d0a00000f32643e65f22e4581bb0c0000001f00000066baf80cb8b0203180ef66bafc0ced410f01ca6736420f79db"}}, @nested_create_vm={0x12d, 0x18}, @uexit={0x0, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x7, 0xffffffff}}, @uexit={0x0, 0x18, 0x5}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x51c, 0x2, 0x10000, 0x1}}, @out_dx={0x6a, 0x28, {0x2ec4, 0x6, 0xffffffffffffffff}}, @wr_drn={0x68, 0x20, {0x1, 0xe1}}, @uexit, @in_dx={0x69, 0x20, {0xaa71, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit, @out_dx={0x6a, 0x28, {0xf704, 0x4, 0x10001}}, @nested_vmresume={0x130, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0xa7f}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x4000009c}}, @wr_drn={0x68, 0x20, {0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x672, 0x8, 0xfff, 0x8}}, @uexit, @uexit, @nested_load_code={0x12e, 0x79, {0x2, "f20f3066baf80cb88c3b608cef66bafc0cb87a000000ef0f30b91f0800000f3266ba4300b800200000ef66b826000f00d048b80c000000000000000f23d80f21f835400000a00f23f866baf80cb8b48bf28fef66bafc0ced470f01f8c421116dd1"}}], 0x3b1}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x1a, "ec28a144f13d7607"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) r4 = syz_open_pts(0xffffffffffffffff, 0x20800) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x44) 0s ago: executing program 3 (id=1403): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000200)=0x3, 0x4) (fail_nth: 3) kernel console output (not intermixed with test programs): 4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7904 comm="syz.4.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9810d8c629 code=0x7ffc0000 [ 269.254280][ T5879] usbhid 3-1:0.0: can't add hid device: -71 [ 269.254407][ T5879] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 269.282442][ T5879] usb 3-1: USB disconnect, device number 21 [ 269.622406][ T5799] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 269.772398][ T5799] usb 5-1: Using ep0 maxpacket: 16 [ 269.774437][ T5799] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 269.774465][ T5799] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.774485][ T5799] usb 5-1: config 0 has no interface number 0 [ 269.774516][ T5799] usb 5-1: config 0 interface 2 has no altsetting 0 [ 269.782098][ T5799] usb 5-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice= e.a0 [ 269.782130][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.782150][ T5799] usb 5-1: Product: syz [ 269.782164][ T5799] usb 5-1: Manufacturer: syz [ 269.782178][ T5799] usb 5-1: SerialNumber: syz [ 269.864323][ T5799] usb 5-1: config 0 descriptor?? [ 270.166793][ T5799] cdc_ether 5-1:0.2: More than one union descriptor, skipping ... [ 270.166816][ T5799] cdc_ether 5-1:0.2: skipping garbage [ 270.166832][ T5799] usb 5-1: bad CDC descriptors [ 270.215902][ T5799] usb 5-1: USB disconnect, device number 24 [ 270.466464][ T37] audit: type=1326 audit(1771841798.197:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7976 comm="syz.0.676" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x0 [ 270.556185][ T5985] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 270.587461][ T37] audit: type=1326 audit(1771841798.317:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7976 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 270.587511][ T37] audit: type=1326 audit(1771841798.317:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7976 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 270.587534][ T37] audit: type=1326 audit(1771841798.317:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7976 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 270.587557][ T37] audit: type=1326 audit(1771841798.317:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7976 comm="syz.0.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 270.716683][ T5985] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.716737][ T5985] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 270.716765][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 270.716791][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 270.716818][ T5985] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.731606][ T5985] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 270.731638][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.731658][ T5985] usb 3-1: Product: syz [ 270.731671][ T5985] usb 3-1: Manufacturer: syz [ 270.731685][ T5985] usb 3-1: SerialNumber: syz [ 270.764924][ T5985] usb 3-1: config 0 descriptor?? [ 270.767319][ T7968] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 270.881996][ T7995] FAULT_INJECTION: forcing a failure. [ 270.881996][ T7995] name failslab, interval 1, probability 0, space 0, times 0 [ 270.882031][ T7995] CPU: 0 UID: 0 PID: 7995 Comm: syz.4.684 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 270.882057][ T7995] Tainted: [L]=SOFTLOCKUP [ 270.882062][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.882074][ T7995] Call Trace: [ 270.882081][ T7995] [ 270.882090][ T7995] dump_stack_lvl+0xe8/0x150 [ 270.882123][ T7995] should_fail_ex+0x46b/0x600 [ 270.882155][ T7995] should_failslab+0xa8/0x100 [ 270.882182][ T7995] __kmalloc_noprof+0xdf/0x7b0 [ 270.882207][ T7995] ? tomoyo_encode+0x28b/0x550 [ 270.882241][ T7995] tomoyo_encode+0x28b/0x550 [ 270.882269][ T7995] tomoyo_realpath_from_path+0x58d/0x5d0 [ 270.882304][ T7995] ? tomoyo_path_number_perm+0x219/0x630 [ 270.882325][ T7995] tomoyo_path_number_perm+0x246/0x630 [ 270.882349][ T7995] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 270.882373][ T7995] ? __lock_acquire+0x6b5/0x2cf0 [ 270.882420][ T7995] ? __fget_files+0x2a/0x420 [ 270.882445][ T7995] ? __fget_files+0x2a/0x420 [ 270.882463][ T7995] ? __fget_files+0x3a6/0x420 [ 270.882482][ T7995] ? __fget_files+0x2a/0x420 [ 270.882508][ T7995] security_file_ioctl+0xc3/0x2a0 [ 270.882535][ T7995] __se_sys_ioctl+0x47/0x170 [ 270.882565][ T7995] do_syscall_64+0x14d/0xf80 [ 270.882588][ T7995] ? trace_irq_disable+0x3b/0x150 [ 270.882609][ T7995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.882628][ T7995] ? clear_bhb_loop+0x40/0x90 [ 270.882651][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.882670][ T7995] RIP: 0033:0x7f9810d8c629 [ 270.882687][ T7995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.882703][ T7995] RSP: 002b:00007f980efe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.882724][ T7995] RAX: ffffffffffffffda RBX: 00007f9811005fa0 RCX: 00007f9810d8c629 [ 270.882737][ T7995] RDX: 0000000000000000 RSI: 0000000000008907 RDI: 0000000000000003 [ 270.882749][ T7995] RBP: 00007f980efe6090 R08: 0000000000000000 R09: 0000000000000000 [ 270.882761][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.882772][ T7995] R13: 00007f9811006038 R14: 00007f9811005fa0 R15: 00007ffcebfb2ba8 [ 270.882811][ T7995] [ 270.886841][ T7995] ERROR: Out of memory at tomoyo_realpath_from_path. [ 271.192951][ T5985] rc_core: IR keymap rc-xbox-dvd not found [ 271.192970][ T5985] Registered IR keymap rc-empty [ 271.197317][ T5985] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 271.200011][ T5985] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 272.036030][ T8015] binder: 8011:8015 ioctl c0306201 2000000003c0 returned -14 [ 272.387366][ T808] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 272.494737][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 272.497413][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 272.504423][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 272.505588][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 272.506793][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 272.523031][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 272.535151][ T808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.535879][ T808] usb 5-1: not running at top speed; connect to a high speed hub [ 272.537290][ T808] usb 5-1: config 14 has an invalid interface number: 227 but max is 0 [ 272.537316][ T808] usb 5-1: config 14 has no interface number 0 [ 272.537360][ T808] usb 5-1: config 14 interface 227 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 272.537389][ T808] usb 5-1: config 14 interface 227 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 272.537416][ T808] usb 5-1: config 14 interface 227 has no altsetting 0 [ 272.540904][ T808] usb 5-1: string descriptor 0 read error: -22 [ 272.541059][ T808] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=f9.2c [ 272.541083][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.602706][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 272.603465][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 272.627967][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 272.629051][ T8006] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 272.638837][ T808] kvaser_usb 5-1:14.227: error -ENODEV: Cannot get usb endpoint(s) [ 272.642823][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 272.710169][ T8021] netlink: 'syz.0.695': attribute type 9 has an invalid length. [ 272.972693][ T8006] vlan2: entered promiscuous mode [ 273.541949][ T5799] usb 3-1: USB disconnect, device number 22 [ 273.541957][ C0] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 273.602457][ T5990] usb 5-1: USB disconnect, device number 25 [ 273.852194][ T8044] FAULT_INJECTION: forcing a failure. [ 273.852194][ T8044] name failslab, interval 1, probability 0, space 0, times 0 [ 273.852232][ T8044] CPU: 1 UID: 0 PID: 8044 Comm: syz.3.704 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 273.852257][ T8044] Tainted: [L]=SOFTLOCKUP [ 273.852263][ T8044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.852273][ T8044] Call Trace: [ 273.852280][ T8044] [ 273.852287][ T8044] dump_stack_lvl+0xe8/0x150 [ 273.852312][ T8044] should_fail_ex+0x46b/0x600 [ 273.852339][ T8044] should_failslab+0xa8/0x100 [ 273.852361][ T8044] __kmalloc_noprof+0xdf/0x7b0 [ 273.852383][ T8044] ? tomoyo_encode+0x28b/0x550 [ 273.852408][ T8044] tomoyo_encode+0x28b/0x550 [ 273.852432][ T8044] tomoyo_realpath_from_path+0x58d/0x5d0 [ 273.852461][ T8044] ? tomoyo_path_number_perm+0x219/0x630 [ 273.852479][ T8044] tomoyo_path_number_perm+0x246/0x630 [ 273.852498][ T8044] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 273.852520][ T8044] ? __lock_acquire+0x6b5/0x2cf0 [ 273.852571][ T8044] ? __fget_files+0x2a/0x420 [ 273.852590][ T8044] ? __fget_files+0x2a/0x420 [ 273.852605][ T8044] ? __fget_files+0x3a6/0x420 [ 273.852619][ T8044] ? __fget_files+0x2a/0x420 [ 273.852638][ T8044] security_file_ioctl+0xc3/0x2a0 [ 273.852658][ T8044] __se_sys_ioctl+0x47/0x170 [ 273.852681][ T8044] do_syscall_64+0x14d/0xf80 [ 273.852698][ T8044] ? trace_irq_disable+0x3b/0x150 [ 273.852714][ T8044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.852728][ T8044] ? clear_bhb_loop+0x40/0x90 [ 273.852746][ T8044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.852759][ T8044] RIP: 0033:0x7fbea01bc629 [ 273.852773][ T8044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.852786][ T8044] RSP: 002b:00007fbe9e416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.852802][ T8044] RAX: ffffffffffffffda RBX: 00007fbea0435fa0 RCX: 00007fbea01bc629 [ 273.852813][ T8044] RDX: 0000200000000180 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 273.852821][ T8044] RBP: 00007fbe9e416090 R08: 0000000000000000 R09: 0000000000000000 [ 273.852830][ T8044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.852839][ T8044] R13: 00007fbea0436038 R14: 00007fbea0435fa0 R15: 00007ffe169b1008 [ 273.852861][ T8044] [ 273.867903][ T8044] ERROR: Out of memory at tomoyo_realpath_from_path. [ 275.911279][ T8105] kvm: kvm [8103]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x9e0000a371 [ 275.911370][ T8105] kvm: kvm [8103]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 275.920926][ T8105] kvm: kvm [8103]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xd800007b22 [ 275.921015][ T8105] kvm: kvm [8103]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 276.482165][ T5990] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 276.523415][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.523920][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.636896][ T5990] usb 3-1: unable to get BOS descriptor or descriptor too short [ 276.637444][ T5990] usb 3-1: not running at top speed; connect to a high speed hub [ 276.639864][ T5990] usb 3-1: config 14 has an invalid interface number: 227 but max is 0 [ 276.639891][ T5990] usb 3-1: config 14 has no interface number 0 [ 276.639953][ T5990] usb 3-1: config 14 interface 227 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 276.639983][ T5990] usb 3-1: config 14 interface 227 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 276.640010][ T5990] usb 3-1: config 14 interface 227 has no altsetting 0 [ 276.647275][ T5990] usb 3-1: string descriptor 0 read error: -22 [ 276.647408][ T5990] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=f9.2c [ 276.647430][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.661429][ T8126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 276.689036][ T5990] kvaser_usb 3-1:14.227: error -ENODEV: Cannot get usb endpoint(s) [ 276.879818][ T8126] bond_slave_0: entered promiscuous mode [ 276.879873][ T8126] bond_slave_1: entered promiscuous mode [ 276.880025][ T8126] vlan2: entered promiscuous mode [ 276.880039][ T8126] bond0: entered promiscuous mode [ 277.102416][ T5985] usb 3-1: USB disconnect, device number 23 [ 277.822991][ T8168] FAULT_INJECTION: forcing a failure. [ 277.822991][ T8168] name failslab, interval 1, probability 0, space 0, times 0 [ 277.823047][ T8168] CPU: 0 UID: 0 PID: 8168 Comm: syz.1.757 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 277.823074][ T8168] Tainted: [L]=SOFTLOCKUP [ 277.823081][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.823092][ T8168] Call Trace: [ 277.823100][ T8168] [ 277.823114][ T8168] dump_stack_lvl+0xe8/0x150 [ 277.823136][ T8168] should_fail_ex+0x46b/0x600 [ 277.823156][ T8168] should_failslab+0xa8/0x100 [ 277.823173][ T8168] kmem_cache_alloc_noprof+0x87/0x680 [ 277.823189][ T8168] ? alloc_empty_file+0x55/0x1d0 [ 277.823203][ T8168] alloc_empty_file+0x55/0x1d0 [ 277.823215][ T8168] path_openat+0x11b/0x38a0 [ 277.823231][ T8168] ? rcu_is_watching+0x15/0xb0 [ 277.823243][ T8168] ? trace_sched_exit_tp+0x3a/0x150 [ 277.823256][ T8168] ? __schedule+0x1511/0x52c0 [ 277.823279][ T8168] ? __pfx_path_openat+0x10/0x10 [ 277.823295][ T8168] ? __pfx___schedule+0x10/0x10 [ 277.823307][ T8168] ? lockdep_hardirqs_on+0x7a/0x110 [ 277.823320][ T8168] ? irqentry_exit+0x59e/0x620 [ 277.823332][ T8168] ? rcu_is_watching+0x15/0xb0 [ 277.823346][ T8168] ? preempt_schedule_thunk+0x16/0x30 [ 277.823362][ T8168] do_file_open+0x23e/0x4a0 [ 277.823379][ T8168] ? __pfx_do_file_open+0x10/0x10 [ 277.823391][ T8168] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 277.823413][ T8168] ? alloc_fd+0x64e/0x6c0 [ 277.823430][ T8168] do_sys_openat2+0x113/0x200 [ 277.823443][ T8168] ? __pfx_do_sys_openat2+0x10/0x10 [ 277.823456][ T8168] ? __x64_sys_openat+0x122/0x170 [ 277.823471][ T8168] __x64_sys_openat+0x138/0x170 [ 277.823485][ T8168] do_syscall_64+0x14d/0xf80 [ 277.823498][ T8168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.823509][ T8168] ? clear_bhb_loop+0x40/0x90 [ 277.823521][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.823531][ T8168] RIP: 0033:0x7fadd288cece [ 277.823542][ T8168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 277.823551][ T8168] RSP: 002b:00007fadd0afcec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 277.823563][ T8168] RAX: ffffffffffffffda RBX: 00007fadd0afd6c0 RCX: 00007fadd288cece [ 277.823570][ T8168] RDX: 0000000000000002 RSI: 00007fadd0afcf90 RDI: ffffffffffffff9c [ 277.823577][ T8168] RBP: 00007fadd0afd090 R08: 0000000000000000 R09: 0000000000000000 [ 277.823584][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.823590][ T8168] R13: 00007fadd2b46128 R14: 00007fadd2b46090 R15: 00007ffe1178f548 [ 277.823605][ T8168] [ 278.690644][ T8182] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 278.690689][ T8182] netlink: 'syz.2.763': attribute type 2 has an invalid length. [ 278.690703][ T8182] __nla_validate_parse: 56 callbacks suppressed [ 278.690715][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'. [ 279.806505][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.769'. [ 280.116151][ T5111] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 280.365404][ T8215] FAULT_INJECTION: forcing a failure. [ 280.365404][ T8215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.365439][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: syz.2.778 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 280.365464][ T8215] Tainted: [L]=SOFTLOCKUP [ 280.365470][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.365481][ T8215] Call Trace: [ 280.365488][ T8215] [ 280.365496][ T8215] dump_stack_lvl+0xe8/0x150 [ 280.365528][ T8215] should_fail_ex+0x46b/0x600 [ 280.365560][ T8215] _copy_to_user+0x31/0xb0 [ 280.365584][ T8215] simple_read_from_buffer+0xe1/0x170 [ 280.365610][ T8215] proc_fail_nth_read+0x1be/0x230 [ 280.365635][ T8215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.365658][ T8215] ? rw_verify_area+0x2ac/0x4e0 [ 280.365682][ T8215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.365704][ T8215] vfs_read+0x212/0xa80 [ 280.365738][ T8215] ? __pfx_vfs_read+0x10/0x10 [ 280.365763][ T8215] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 280.365788][ T8215] ? lockdep_hardirqs_on+0x7a/0x110 [ 280.365812][ T8215] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 280.365836][ T8215] ? mutex_lock_nested+0x152/0x1d0 [ 280.365853][ T8215] ? fdget_pos+0x252/0x320 [ 280.365885][ T8215] ksys_read+0x156/0x270 [ 280.365985][ T8215] ? __pfx_ksys_read+0x10/0x10 [ 280.366020][ T8215] do_syscall_64+0x14d/0xf80 [ 280.366042][ T8215] ? trace_irq_disable+0x3b/0x150 [ 280.366064][ T8215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.366082][ T8215] ? clear_bhb_loop+0x40/0x90 [ 280.366101][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.366117][ T8215] RIP: 0033:0x7f52b5facece [ 280.366134][ T8215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 280.366149][ T8215] RSP: 002b:00007f52b4245fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.366168][ T8215] RAX: ffffffffffffffda RBX: 00007f52b42466c0 RCX: 00007f52b5facece [ 280.366180][ T8215] RDX: 000000000000000f RSI: 00007f52b42460a0 RDI: 0000000000000003 [ 280.366191][ T8215] RBP: 00007f52b4246090 R08: 0000000000000000 R09: 0000000000000000 [ 280.366202][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.366212][ T8215] R13: 00007f52b6266038 R14: 00007f52b6265fa0 R15: 00007ffda73e6168 [ 280.366240][ T8215] [ 280.885900][ T37] audit: type=1326 audit(1771841808.617:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 280.885950][ T37] audit: type=1326 audit(1771841808.617:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 280.901950][ T37] audit: type=1326 audit(1771841808.627:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 280.902002][ T37] audit: type=1326 audit(1771841808.627:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 280.902040][ T37] audit: type=1326 audit(1771841808.627:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 280.902077][ T37] audit: type=1326 audit(1771841808.627:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 280.902114][ T37] audit: type=1326 audit(1771841808.627:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 280.902151][ T37] audit: type=1326 audit(1771841808.627:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 280.905911][ T37] audit: type=1326 audit(1771841808.637:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 280.905959][ T37] audit: type=1326 audit(1771841808.637:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.0.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 281.471685][ T8254] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 281.718938][ T8264] FAULT_INJECTION: forcing a failure. [ 281.718938][ T8264] name failslab, interval 1, probability 0, space 0, times 0 [ 281.718973][ T8264] CPU: 0 UID: 0 PID: 8264 Comm: syz.1.801 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 281.718999][ T8264] Tainted: [L]=SOFTLOCKUP [ 281.719005][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.719016][ T8264] Call Trace: [ 281.719023][ T8264] [ 281.719031][ T8264] dump_stack_lvl+0xe8/0x150 [ 281.719065][ T8264] should_fail_ex+0x46b/0x600 [ 281.719099][ T8264] should_failslab+0xa8/0x100 [ 281.719129][ T8264] __kmalloc_noprof+0xdf/0x7b0 [ 281.719156][ T8264] ? tomoyo_encode+0x28b/0x550 [ 281.719190][ T8264] tomoyo_encode+0x28b/0x550 [ 281.719223][ T8264] tomoyo_realpath_from_path+0x58d/0x5d0 [ 281.719261][ T8264] ? tomoyo_path_number_perm+0x219/0x630 [ 281.719285][ T8264] tomoyo_path_number_perm+0x246/0x630 [ 281.719311][ T8264] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 281.719338][ T8264] ? __lock_acquire+0x6b5/0x2cf0 [ 281.719391][ T8264] ? __fget_files+0x2a/0x420 [ 281.719416][ T8264] ? __fget_files+0x2a/0x420 [ 281.719437][ T8264] ? __fget_files+0x3a6/0x420 [ 281.719457][ T8264] ? __fget_files+0x2a/0x420 [ 281.719482][ T8264] security_file_ioctl+0xc3/0x2a0 [ 281.719510][ T8264] __se_sys_ioctl+0x47/0x170 [ 281.719539][ T8264] do_syscall_64+0x14d/0xf80 [ 281.719564][ T8264] ? trace_irq_disable+0x3b/0x150 [ 281.719586][ T8264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.719605][ T8264] ? clear_bhb_loop+0x40/0x90 [ 281.719630][ T8264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.719648][ T8264] RIP: 0033:0x7fadd28cc629 [ 281.719666][ T8264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.719683][ T8264] RSP: 002b:00007fadd0b1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.719703][ T8264] RAX: ffffffffffffffda RBX: 00007fadd2b45fa0 RCX: 00007fadd28cc629 [ 281.719717][ T8264] RDX: 0000200000000340 RSI: 00000000c0cc5616 RDI: 0000000000000003 [ 281.719730][ T8264] RBP: 00007fadd0b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 281.719742][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.719759][ T8264] R13: 00007fadd2b46038 R14: 00007fadd2b45fa0 R15: 00007ffe1178f548 [ 281.719791][ T8264] [ 281.719810][ T8264] ERROR: Out of memory at tomoyo_realpath_from_path. [ 282.169966][ T8274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.806'. [ 282.505646][ T8303] FAULT_INJECTION: forcing a failure. [ 282.505646][ T8303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.505682][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.3.818 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 282.505708][ T8303] Tainted: [L]=SOFTLOCKUP [ 282.505722][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.505733][ T8303] Call Trace: [ 282.505739][ T8303] [ 282.505747][ T8303] dump_stack_lvl+0xe8/0x150 [ 282.505778][ T8303] should_fail_ex+0x46b/0x600 [ 282.505810][ T8303] _copy_from_user+0x2d/0xb0 [ 282.505833][ T8303] ___sys_sendmsg+0x1c6/0x360 [ 282.505862][ T8303] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.505917][ T8303] ? __fget_files+0x2a/0x420 [ 282.505937][ T8303] ? __fget_files+0x3a6/0x420 [ 282.505965][ T8303] __x64_sys_sendmsg+0x1c3/0x2a0 [ 282.505991][ T8303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.506021][ T8303] ? __pfx_ksys_write+0x10/0x10 [ 282.506056][ T8303] do_syscall_64+0x14d/0xf80 [ 282.506080][ T8303] ? trace_irq_disable+0x3b/0x150 [ 282.506101][ T8303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.506120][ T8303] ? clear_bhb_loop+0x40/0x90 [ 282.506143][ T8303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.506160][ T8303] RIP: 0033:0x7fbea01bc629 [ 282.506177][ T8303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.506193][ T8303] RSP: 002b:00007fbe9e416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.506213][ T8303] RAX: ffffffffffffffda RBX: 00007fbea0435fa0 RCX: 00007fbea01bc629 [ 282.506227][ T8303] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 282.506239][ T8303] RBP: 00007fbe9e416090 R08: 0000000000000000 R09: 0000000000000000 [ 282.506251][ T8303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.506262][ T8303] R13: 00007fbea0436038 R14: 00007fbea0435fa0 R15: 00007ffe169b1008 [ 282.506291][ T8303] [ 282.532440][ T1209] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 282.662432][ T1209] usb 3-1: device descriptor read/64, error -71 [ 282.902804][ T1209] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 283.052469][ T1209] usb 3-1: device descriptor read/64, error -71 [ 283.177422][ T1209] usb usb3-port1: attempt power cycle [ 283.182401][ T5879] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 283.342607][ T5879] usb 2-1: device descriptor read/64, error -71 [ 283.392557][ T8343] netlink: 'syz.0.831': attribute type 33 has an invalid length. [ 283.392579][ T8343] netlink: 63 bytes leftover after parsing attributes in process `syz.0.831'. [ 283.396345][ T8343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.396820][ T8343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.512419][ T1209] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 283.533278][ T1209] usb 3-1: device descriptor read/8, error -71 [ 283.602494][ T5879] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 283.626724][ T5111] Bluetooth: hci4: unexpected event for opcode 0x1804 [ 283.742446][ T5879] usb 2-1: device descriptor read/64, error -71 [ 283.782433][ T1209] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 283.803276][ T1209] usb 3-1: device descriptor read/8, error -71 [ 283.852783][ T5879] usb usb2-port1: attempt power cycle [ 283.892708][ T5985] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 283.912838][ T1209] usb usb3-port1: unable to enumerate USB device [ 284.067222][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.067273][ T5985] usb 5-1: New USB device found, idVendor=5e0a, idProduct=a055, bcdDevice= 0.00 [ 284.067295][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.106874][ T5985] usb 5-1: config 0 descriptor?? [ 284.144751][ T5111] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 284.147447][ T5111] Bluetooth: hci2: Injecting HCI hardware error event [ 284.152414][ T5812] Bluetooth: hci2: hardware error 0x00 [ 284.232337][ T5879] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 284.253439][ T5879] usb 2-1: device descriptor read/8, error -71 [ 284.492449][ T5879] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 284.514578][ T5879] usb 2-1: device descriptor read/8, error -71 [ 284.537217][ T5985] hid-generic 0003:5E0A:A055.0005: unbalanced collection at end of report description [ 284.538014][ T5985] hid-generic 0003:5E0A:A055.0005: probe with driver hid-generic failed with error -22 [ 284.632802][ T5879] usb usb2-port1: unable to enumerate USB device [ 284.644566][ T8401] FAULT_INJECTION: forcing a failure. [ 284.644566][ T8401] name failslab, interval 1, probability 0, space 0, times 0 [ 284.644601][ T8401] CPU: 1 UID: 0 PID: 8401 Comm: syz.3.859 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 284.644627][ T8401] Tainted: [L]=SOFTLOCKUP [ 284.644634][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.644645][ T8401] Call Trace: [ 284.644652][ T8401] [ 284.644660][ T8401] dump_stack_lvl+0xe8/0x150 [ 284.644693][ T8401] should_fail_ex+0x46b/0x600 [ 284.644727][ T8401] should_failslab+0xa8/0x100 [ 284.644764][ T8401] __kmalloc_noprof+0xdf/0x7b0 [ 284.644791][ T8401] ? tomoyo_encode+0x28b/0x550 [ 284.644822][ T8401] tomoyo_encode+0x28b/0x550 [ 284.644853][ T8401] tomoyo_realpath_from_path+0x58d/0x5d0 [ 284.644889][ T8401] ? tomoyo_path_number_perm+0x219/0x630 [ 284.644913][ T8401] tomoyo_path_number_perm+0x246/0x630 [ 284.644938][ T8401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 284.644964][ T8401] ? __lock_acquire+0x6b5/0x2cf0 [ 284.645019][ T8401] ? __fget_files+0x2a/0x420 [ 284.645042][ T8401] ? __fget_files+0x2a/0x420 [ 284.645062][ T8401] ? __fget_files+0x3a6/0x420 [ 284.645087][ T8401] ? __fget_files+0x2a/0x420 [ 284.645112][ T8401] security_file_ioctl+0xc3/0x2a0 [ 284.645139][ T8401] __se_sys_ioctl+0x47/0x170 [ 284.645168][ T8401] do_syscall_64+0x14d/0xf80 [ 284.645192][ T8401] ? trace_irq_disable+0x3b/0x150 [ 284.645212][ T8401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.645232][ T8401] ? clear_bhb_loop+0x40/0x90 [ 284.645255][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.645273][ T8401] RIP: 0033:0x7fbea01bc629 [ 284.645291][ T8401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.645307][ T8401] RSP: 002b:00007fbe9e3f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.645327][ T8401] RAX: ffffffffffffffda RBX: 00007fbea0436090 RCX: 00007fbea01bc629 [ 284.645341][ T8401] RDX: 0000200000000040 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 284.645352][ T8401] RBP: 00007fbe9e3f5090 R08: 0000000000000000 R09: 0000000000000000 [ 284.645364][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.645375][ T8401] R13: 00007fbea0436128 R14: 00007fbea0436090 R15: 00007ffe169b1008 [ 284.645406][ T8401] [ 284.645573][ T8401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.865731][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 284.947556][ T8354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.000335][ T8354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.052509][ T8354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.059564][ T5990] usb 5-1: USB disconnect, device number 26 [ 285.336718][ T5111] Bluetooth: hci0: ISO packet for unknown connection handle 48 [ 285.702342][ T5990] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 285.868983][ T5990] usb 3-1: not running at top speed; connect to a high speed hub [ 285.870377][ T5990] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 285.870410][ T5990] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 285.903683][ T5990] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.903714][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.903732][ T5990] usb 3-1: Product: syz [ 285.903745][ T5990] usb 3-1: Manufacturer: syz [ 285.903757][ T5990] usb 3-1: SerialNumber: syz [ 286.153818][ T5990] cdc_ncm 3-1:1.0: bind() failure [ 286.376542][ T5812] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 286.392069][ T5990] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 286.392114][ T5990] cdc_ncm 3-1:1.1: bind() failure [ 286.404413][ T5990] usb 3-1: USB disconnect, device number 28 [ 286.605104][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 286.605121][ T37] audit: type=1326 audit(1771841814.337:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9810d8c629 code=0x7ffc0000 [ 286.605708][ T37] audit: type=1326 audit(1771841814.337:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9810d8c629 code=0x7ffc0000 [ 286.605976][ T37] audit: type=1326 audit(1771841814.337:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9810d4cece code=0x7ffc0000 [ 286.615337][ T8453] FAULT_INJECTION: forcing a failure. [ 286.615337][ T8453] name failslab, interval 1, probability 0, space 0, times 0 [ 286.615370][ T8453] CPU: 1 UID: 0 PID: 8453 Comm: syz.4.883 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 286.615396][ T8453] Tainted: [L]=SOFTLOCKUP [ 286.615403][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.615413][ T8453] Call Trace: [ 286.615421][ T8453] [ 286.615428][ T8453] dump_stack_lvl+0xe8/0x150 [ 286.615461][ T8453] should_fail_ex+0x46b/0x600 [ 286.615494][ T8453] should_failslab+0xa8/0x100 [ 286.615531][ T8453] __kmalloc_cache_noprof+0x84/0x690 [ 286.615558][ T8453] ? audit_log_d_path+0xb8/0x1a0 [ 286.615584][ T8453] audit_log_d_path+0xb8/0x1a0 [ 286.615613][ T8453] audit_log_d_path_exe+0x45/0x70 [ 286.615632][ T8453] audit_log_task+0x2c3/0x3d0 [ 286.615660][ T8453] ? __pfx_audit_log_task+0x10/0x10 [ 286.615695][ T8453] audit_seccomp+0x85/0x190 [ 286.615724][ T8453] __seccomp_filter+0xd48/0x1ef0 [ 286.615760][ T8453] ? __pfx___seccomp_filter+0x10/0x10 [ 286.615785][ T8453] ? lockdep_hardirqs_on+0x7a/0x110 [ 286.615807][ T8453] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 286.615831][ T8453] ? rt_mutex_slowunlock+0x1cb/0x300 [ 286.615850][ T8453] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 286.615877][ T8453] ? fput+0xa0/0xd0 [ 286.615910][ T8453] ? __secure_computing+0xe1/0x2a0 [ 286.615939][ T8453] do_syscall_64+0xf4/0xf80 [ 286.615962][ T8453] ? trace_irq_disable+0x3b/0x150 [ 286.615982][ T8453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.616001][ T8453] ? clear_bhb_loop+0x40/0x90 [ 286.616023][ T8453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.616041][ T8453] RIP: 0033:0x7f9810d8c629 [ 286.616059][ T8453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.616075][ T8453] RSP: 002b:00007f980efe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 286.616096][ T8453] RAX: ffffffffffffffda RBX: 00007f9811005fa0 RCX: 00007f9810d8c629 [ 286.616109][ T8453] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 286.616121][ T8453] RBP: 00007f980efe6090 R08: 0000000000008000 R09: 0000000000000000 [ 286.616139][ T8453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.616150][ T8453] R13: 00007f9811006038 R14: 00007f9811005fa0 R15: 00007ffcebfb2ba8 [ 286.616184][ T8453] [ 286.617098][ T37] audit: type=1326 audit(1771841814.337:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9810d4cece code=0x7ffc0000 [ 286.617144][ T37] audit: type=1326 audit(1771841814.347:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.4.883" exe="" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f9810d8c629 code=0x7ffc0000 [ 286.617181][ T37] audit: type=1326 audit(1771841814.347:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9810d4cece code=0x7ffc0000 [ 286.617218][ T37] audit: type=1326 audit(1771841814.347:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9810d4cece code=0x7ffc0000 [ 286.617254][ T37] audit: type=1326 audit(1771841814.347:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9810d4cece code=0x7ffc0000 [ 286.617290][ T37] audit: type=1326 audit(1771841814.347:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9810d8c629 code=0x7ffc0000 [ 286.617327][ T37] audit: type=1326 audit(1771841814.347:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9810d8c629 code=0x7ffc0000 [ 287.369930][ T8475] overlayfs: overlapping lowerdir path [ 287.652455][ T5812] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 287.652836][ T5812] Bluetooth: hci4: Injecting HCI hardware error event [ 287.657613][ T5111] Bluetooth: hci4: hardware error 0x00 [ 288.828161][ T8504] netlink: 'syz.4.902': attribute type 5 has an invalid length. [ 290.235032][ T8544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.235581][ T8544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.384723][ T8544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.385254][ T8544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.689589][ T8544] exFAT-fs (loop0): unable to read boot sector [ 290.689607][ T8544] exFAT-fs (loop0): failed to read boot sector [ 290.689617][ T8544] exFAT-fs (loop0): failed to recognize exfat type [ 290.697440][ T5111] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 291.319507][ T8583] binder: 8582:8583 ioctl c0306201 2000000003c0 returned -14 [ 292.936503][ T8580] 9pnet_fd: Insufficient options for proto=fd [ 293.342435][ T5879] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 293.494603][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 293.497020][ T5879] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 293.497049][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.497070][ T5879] usb 5-1: config 0 has no interface number 0 [ 293.497104][ T5879] usb 5-1: config 0 interface 2 has no altsetting 0 [ 293.500070][ T5879] usb 5-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice= e.a0 [ 293.500100][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.500121][ T5879] usb 5-1: Product: syz [ 293.500137][ T5879] usb 5-1: Manufacturer: syz [ 293.500154][ T5879] usb 5-1: SerialNumber: syz [ 293.531263][ T5879] usb 5-1: config 0 descriptor?? [ 293.900697][ T5879] cdc_ether 5-1:0.2: More than one union descriptor, skipping ... [ 293.900719][ T5879] cdc_ether 5-1:0.2: skipping garbage [ 293.900734][ T5879] usb 5-1: bad CDC descriptors [ 293.959042][ T5879] usb 5-1: USB disconnect, device number 27 [ 294.036160][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.036700][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.302802][ T6623] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 294.452475][ T6623] usb 3-1: Using ep0 maxpacket: 32 [ 294.459679][ T6623] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 294.459708][ T6623] usb 3-1: config 0 has no interface number 0 [ 294.462916][ T6623] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.7f [ 294.462945][ T6623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.462964][ T6623] usb 3-1: Product: syz [ 294.462978][ T6623] usb 3-1: Manufacturer: syz [ 294.462993][ T6623] usb 3-1: SerialNumber: syz [ 294.475761][ T6623] usb 3-1: config 0 descriptor?? [ 294.492723][ T6623] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 294.706356][ T6623] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 294.750965][ T6623] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 294.753647][ T5879] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 294.911928][ T5879] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 294.916810][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.916836][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.917587][ T5879] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.917617][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.926743][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.926775][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.926868][ T5879] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.926895][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.928654][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.928677][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.928809][ T5879] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.928837][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.930593][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.930616][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.931491][ T5879] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.931520][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.949905][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.950473][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.950525][ T5879] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.950551][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.958036][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.958064][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.958159][ T5879] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.958186][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.965045][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.965073][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.965694][ T5879] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.965723][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.974475][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.974502][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.974687][ T5879] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.975089][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.992782][ T5879] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 294.992910][ T5879] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 294.992931][ T5879] usb 5-1: Product: syz [ 294.992945][ T5879] usb 5-1: Manufacturer: syz [ 294.992959][ T5879] usb 5-1: SerialNumber: syz [ 295.034796][ T5879] usb 5-1: config 0 descriptor?? [ 295.077645][ T5879] yurex 5-1:0.0: Could not find endpoints [ 295.100539][ T8658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.230886][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 295.247418][ T5879] usb 3-1: USB disconnect, device number 29 [ 295.280059][ T5879] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 295.292742][ T8658] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 295.313134][ T5879] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 295.313997][ T5879] quatech2 3-1:0.51: device disconnected [ 295.343562][ T8663] FAULT_INJECTION: forcing a failure. [ 295.343562][ T8663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.343598][ T8663] CPU: 0 UID: 0 PID: 8663 Comm: syz.1.974 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.343624][ T8663] Tainted: [L]=SOFTLOCKUP [ 295.343631][ T8663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.343642][ T8663] Call Trace: [ 295.343649][ T8663] [ 295.343666][ T8663] dump_stack_lvl+0xe8/0x150 [ 295.343699][ T8663] should_fail_ex+0x46b/0x600 [ 295.343733][ T8663] _copy_from_user+0x2d/0xb0 [ 295.343756][ T8663] ___sys_sendmsg+0x1c6/0x360 [ 295.343786][ T8663] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.343841][ T8663] ? __fget_files+0x2a/0x420 [ 295.343862][ T8663] ? __fget_files+0x3a6/0x420 [ 295.343891][ T8663] __x64_sys_sendmsg+0x1c3/0x2a0 [ 295.343917][ T8663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.343950][ T8663] ? __pfx_ksys_write+0x10/0x10 [ 295.343985][ T8663] do_syscall_64+0x14d/0xf80 [ 295.344008][ T8663] ? trace_irq_disable+0x3b/0x150 [ 295.344028][ T8663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.344048][ T8663] ? clear_bhb_loop+0x40/0x90 [ 295.344070][ T8663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.344089][ T8663] RIP: 0033:0x7fadd28cc629 [ 295.344106][ T8663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.344122][ T8663] RSP: 002b:00007fadd0b1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.344142][ T8663] RAX: ffffffffffffffda RBX: 00007fadd2b45fa0 RCX: 00007fadd28cc629 [ 295.344156][ T8663] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 0000000000000004 [ 295.344167][ T8663] RBP: 00007fadd0b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 295.344179][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.344191][ T8663] R13: 00007fadd2b46038 R14: 00007fadd2b45fa0 R15: 00007ffe1178f548 [ 295.344220][ T8663] [ 295.425551][ T8666] No source specified [ 295.439130][ T6623] usb 5-1: USB disconnect, device number 28 [ 295.812852][ T8681] FAULT_INJECTION: forcing a failure. [ 295.812852][ T8681] name failslab, interval 1, probability 0, space 0, times 0 [ 295.812887][ T8681] CPU: 0 UID: 0 PID: 8681 Comm: syz.1.979 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.812914][ T8681] Tainted: [L]=SOFTLOCKUP [ 295.812921][ T8681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.812932][ T8681] Call Trace: [ 295.812940][ T8681] [ 295.812948][ T8681] dump_stack_lvl+0xe8/0x150 [ 295.812981][ T8681] should_fail_ex+0x46b/0x600 [ 295.813017][ T8681] should_failslab+0xa8/0x100 [ 295.813047][ T8681] __kmalloc_noprof+0xdf/0x7b0 [ 295.813076][ T8681] ? sock_kmalloc+0xd6/0x160 [ 295.813100][ T8681] ? __local_bh_enable+0x1e1/0x2f0 [ 295.813131][ T8681] sock_kmalloc+0xd6/0x160 [ 295.813158][ T8681] alg_setkey+0x55/0x190 [ 295.813180][ T8681] ? alg_setsockopt+0x3c5/0x4a0 [ 295.813223][ T8681] alg_setsockopt+0x3da/0x4a0 [ 295.813247][ T8681] ? __pfx_alg_setsockopt+0x10/0x10 [ 295.813272][ T8681] do_sock_setsockopt+0x17c/0x1b0 [ 295.813301][ T8681] __x64_sys_setsockopt+0x143/0x1b0 [ 295.813330][ T8681] do_syscall_64+0x14d/0xf80 [ 295.813355][ T8681] ? trace_irq_disable+0x3b/0x150 [ 295.813376][ T8681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.813396][ T8681] ? clear_bhb_loop+0x40/0x90 [ 295.813425][ T8681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.813444][ T8681] RIP: 0033:0x7fadd28cc629 [ 295.813462][ T8681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.813479][ T8681] RSP: 002b:00007fadd0b1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 295.813500][ T8681] RAX: ffffffffffffffda RBX: 00007fadd2b45fa0 RCX: 00007fadd28cc629 [ 295.813514][ T8681] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 295.813526][ T8681] RBP: 00007fadd0b1e090 R08: 0000000000000001 R09: 0000000000000000 [ 295.813538][ T8681] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 295.813550][ T8681] R13: 00007fadd2b46038 R14: 00007fadd2b45fa0 R15: 00007ffe1178f548 [ 295.813583][ T8681] [ 296.152805][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 296.173118][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 296.179243][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'. [ 296.472006][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.472466][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.497145][ T8684] sctp: [Deprecated]: syz.2.981 (pid 8684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.497145][ T8684] Use struct sctp_sack_info instead [ 297.812393][ T5990] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 297.975231][ T5990] usb 3-1: Using ep0 maxpacket: 8 [ 297.979149][ T5990] usb 3-1: config 129 has an invalid interface number: 37 but max is 1 [ 297.979179][ T5990] usb 3-1: config 129 has an invalid interface number: 250 but max is 1 [ 297.979199][ T5990] usb 3-1: config 129 has no interface number 0 [ 297.979216][ T5990] usb 3-1: config 129 has no interface number 1 [ 297.979272][ T5990] usb 3-1: config 129 interface 37 altsetting 44 has an invalid endpoint descriptor of length 2, skipping [ 297.979297][ T5990] usb 3-1: config 129 interface 37 altsetting 44 endpoint 0x8 has an invalid bInterval 127, changing to 7 [ 297.979325][ T5990] usb 3-1: config 129 interface 37 altsetting 44 has an endpoint descriptor with address 0x12, changing to 0x2 [ 297.979350][ T5990] usb 3-1: config 129 interface 37 altsetting 44 endpoint 0xE has an invalid bInterval 196, changing to 7 [ 297.979375][ T5990] usb 3-1: config 129 interface 37 altsetting 44 has a duplicate endpoint with address 0xB, skipping [ 297.979395][ T5990] usb 3-1: config 129 interface 37 altsetting 44 has an invalid descriptor for endpoint zero, skipping [ 297.979416][ T5990] usb 3-1: config 129 interface 37 altsetting 44 bulk endpoint 0x5 has invalid maxpacket 1024 [ 297.979438][ T5990] usb 3-1: config 129 interface 37 altsetting 44 has a duplicate endpoint with address 0x2, skipping [ 297.979461][ T5990] usb 3-1: config 129 interface 37 altsetting 44 has a duplicate endpoint with address 0x5, skipping [ 297.979490][ T5990] usb 3-1: config 129 interface 37 altsetting 44 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 297.979518][ T5990] usb 3-1: config 129 interface 37 has no altsetting 0 [ 297.979536][ T5990] usb 3-1: config 129 interface 250 has no altsetting 0 [ 297.984494][ T5990] usb 3-1: New USB device found, idVendor=10c4, idProduct=817d, bcdDevice=2d.ec [ 297.984523][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.984542][ T5990] usb 3-1: Product: syz [ 297.984556][ T5990] usb 3-1: Manufacturer: ā€ [ 297.984570][ T5990] usb 3-1: SerialNumber: syz [ 298.239766][ T5990] cp210x 3-1:129.37: cp210x converter detected [ 298.242652][ T5990] cp210x 3-1:129.37: failed to get vendor val 0x370b size 1: -71 [ 298.242680][ T5990] cp210x 3-1:129.37: querying part number failed [ 298.289066][ T5990] usb 3-1: cp210x converter now attached to ttyUSB0 [ 298.307110][ T5990] cp210x 3-1:129.250: cp210x converter detected [ 298.315464][ T5990] cp210x 3-1:129.250: failed to get vendor val 0x370b size 1: -71 [ 298.315490][ T5990] cp210x 3-1:129.250: querying part number failed [ 298.343117][ T5990] usb 3-1: cp210x converter now attached to ttyUSB1 [ 298.367618][ T5990] usb 3-1: USB disconnect, device number 30 [ 298.472617][ T5990] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 298.473157][ T5990] cp210x 3-1:129.37: device disconnected [ 298.508825][ T5990] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 298.509260][ T5990] cp210x 3-1:129.250: device disconnected [ 299.079416][ T8751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.080015][ T8751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.096631][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 299.098038][ T8751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.082955][ T8785] FAULT_INJECTION: forcing a failure. [ 300.082955][ T8785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.082991][ T8785] CPU: 0 UID: 0 PID: 8785 Comm: syz.3.1025 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 300.083017][ T8785] Tainted: [L]=SOFTLOCKUP [ 300.083024][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.083036][ T8785] Call Trace: [ 300.083043][ T8785] [ 300.083052][ T8785] dump_stack_lvl+0xe8/0x150 [ 300.083085][ T8785] should_fail_ex+0x46b/0x600 [ 300.083120][ T8785] _copy_from_user+0x2d/0xb0 [ 300.083144][ T8785] do_ipv6_setsockopt+0x264/0x31c0 [ 300.083182][ T8785] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 300.083234][ T8785] ? __lock_acquire+0x6b5/0x2cf0 [ 300.083268][ T8785] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 300.083294][ T8785] ? lockdep_hardirqs_on+0x7a/0x110 [ 300.083331][ T8785] ? __fget_files+0x2a/0x420 [ 300.083358][ T8785] ipv6_setsockopt+0x59/0x170 [ 300.083384][ T8785] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 300.083406][ T8785] do_sock_setsockopt+0x17c/0x1b0 [ 300.083435][ T8785] __x64_sys_setsockopt+0x143/0x1b0 [ 300.083463][ T8785] do_syscall_64+0x14d/0xf80 [ 300.083485][ T8785] ? trace_irq_disable+0x3b/0x150 [ 300.083506][ T8785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.083525][ T8785] ? clear_bhb_loop+0x40/0x90 [ 300.083547][ T8785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.083566][ T8785] RIP: 0033:0x7fbea01bc629 [ 300.083583][ T8785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.083599][ T8785] RSP: 002b:00007fbe9e416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 300.083618][ T8785] RAX: ffffffffffffffda RBX: 00007fbea0435fa0 RCX: 00007fbea01bc629 [ 300.083632][ T8785] RDX: 0000000000000048 RSI: 0000000000000029 RDI: 0000000000000003 [ 300.083643][ T8785] RBP: 00007fbe9e416090 R08: 0000000000000004 R09: 0000000000000000 [ 300.083655][ T8785] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 300.083668][ T8785] R13: 00007fbea0436038 R14: 00007fbea0435fa0 R15: 00007ffe169b1008 [ 300.083694][ T8785] [ 300.478095][ T8796] FAULT_INJECTION: forcing a failure. [ 300.478095][ T8796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.478132][ T8796] CPU: 0 UID: 0 PID: 8796 Comm: syz.1.1029 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 300.478160][ T8796] Tainted: [L]=SOFTLOCKUP [ 300.478166][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.478178][ T8796] Call Trace: [ 300.478185][ T8796] [ 300.478194][ T8796] dump_stack_lvl+0xe8/0x150 [ 300.478227][ T8796] should_fail_ex+0x46b/0x600 [ 300.478261][ T8796] _copy_from_user+0x2d/0xb0 [ 300.478286][ T8796] ___sys_sendmsg+0x1c6/0x360 [ 300.478317][ T8796] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.478374][ T8796] ? __fget_files+0x2a/0x420 [ 300.478396][ T8796] ? __fget_files+0x3a6/0x420 [ 300.478427][ T8796] __x64_sys_sendmsg+0x1c3/0x2a0 [ 300.478454][ T8796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.478487][ T8796] ? __pfx_ksys_write+0x10/0x10 [ 300.478524][ T8796] do_syscall_64+0x14d/0xf80 [ 300.478547][ T8796] ? trace_irq_disable+0x3b/0x150 [ 300.478568][ T8796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.478591][ T8796] ? clear_bhb_loop+0x40/0x90 [ 300.478614][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.478633][ T8796] RIP: 0033:0x7fadd28cc629 [ 300.478650][ T8796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.478666][ T8796] RSP: 002b:00007fadd0b1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.478687][ T8796] RAX: ffffffffffffffda RBX: 00007fadd2b45fa0 RCX: 00007fadd28cc629 [ 300.478700][ T8796] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 300.478713][ T8796] RBP: 00007fadd0b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 300.478725][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.478737][ T8796] R13: 00007fadd2b46038 R14: 00007fadd2b45fa0 R15: 00007ffe1178f548 [ 300.478767][ T8796] [ 300.836645][ T8809] FAULT_INJECTION: forcing a failure. [ 300.836645][ T8809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.836695][ T8809] CPU: 1 UID: 0 PID: 8809 Comm: syz.1.1035 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 300.836720][ T8809] Tainted: [L]=SOFTLOCKUP [ 300.836727][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.836739][ T8809] Call Trace: [ 300.836747][ T8809] [ 300.836755][ T8809] dump_stack_lvl+0xe8/0x150 [ 300.836789][ T8809] should_fail_ex+0x46b/0x600 [ 300.836822][ T8809] _copy_from_iter+0x3b0/0x1670 [ 300.836862][ T8809] ? __pfx__copy_from_iter+0x10/0x10 [ 300.836890][ T8809] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 300.836917][ T8809] skb_copy_datagram_from_iter+0xf5/0x710 [ 300.836942][ T8809] ? dev_get_by_index+0x22/0x2e0 [ 300.836967][ T8809] ? skb_put+0x11b/0x210 [ 300.836992][ T8809] packet_sendmsg+0x37e4/0x50f0 [ 300.837025][ T8809] ? __lock_acquire+0x6b5/0x2cf0 [ 300.837058][ T8809] ? smack_socket_sendmsg+0x1f8/0x590 [ 300.837089][ T8809] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 300.837133][ T8809] ? __pfx_packet_sendmsg+0x10/0x10 [ 300.837154][ T8809] ? __lock_acquire+0x6b5/0x2cf0 [ 300.837179][ T8809] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 300.837211][ T8809] ? kernel_text_address+0xa5/0xe0 [ 300.837239][ T8809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.837270][ T8809] ____sys_sendmsg+0xa4e/0xac0 [ 300.837304][ T8809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.837340][ T8809] ? import_iovec+0x73/0xa0 [ 300.837366][ T8809] ___sys_sendmsg+0x2a5/0x360 [ 300.837396][ T8809] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.837453][ T8809] ? __fget_files+0x2a/0x420 [ 300.837475][ T8809] ? __fget_files+0x3a6/0x420 [ 300.837507][ T8809] __x64_sys_sendmsg+0x1c3/0x2a0 [ 300.837535][ T8809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.837569][ T8809] ? __pfx_ksys_write+0x10/0x10 [ 300.837606][ T8809] do_syscall_64+0x14d/0xf80 [ 300.837630][ T8809] ? trace_irq_disable+0x3b/0x150 [ 300.837652][ T8809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.837672][ T8809] ? clear_bhb_loop+0x40/0x90 [ 300.837695][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.837715][ T8809] RIP: 0033:0x7fadd28cc629 [ 300.837734][ T8809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.837751][ T8809] RSP: 002b:00007fadd0b1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.837772][ T8809] RAX: ffffffffffffffda RBX: 00007fadd2b45fa0 RCX: 00007fadd28cc629 [ 300.837786][ T8809] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 300.837798][ T8809] RBP: 00007fadd0b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 300.837810][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.837821][ T8809] R13: 00007fadd2b46038 R14: 00007fadd2b45fa0 R15: 00007ffe1178f548 [ 300.837857][ T8809] [ 301.402493][ T5799] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 301.552387][ T5799] usb 5-1: Using ep0 maxpacket: 32 [ 301.554687][ T5799] usb 5-1: config 0 interface 0 has no altsetting 0 [ 301.557427][ T5799] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 301.557457][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.557478][ T5799] usb 5-1: Product: syz [ 301.557492][ T5799] usb 5-1: Manufacturer: syz [ 301.557507][ T5799] usb 5-1: SerialNumber: syz [ 301.572397][ T5902] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 301.577720][ T5799] usb 5-1: config 0 descriptor?? [ 301.723405][ T5902] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 301.725017][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.725070][ T5902] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.725145][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.726500][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.726551][ T5902] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.726627][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.727973][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.728022][ T5902] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.728100][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.729598][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.729649][ T5902] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.729722][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.732021][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.732072][ T5902] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.732144][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.751770][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.751889][ T5902] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.751917][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.753644][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.753743][ T5902] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.753770][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.757800][ T5902] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.757852][ T5902] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.757926][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.764638][ T5902] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 301.764667][ T5902] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 301.764892][ T5902] usb 3-1: Product: syz [ 301.764906][ T5902] usb 3-1: Manufacturer: syz [ 301.764920][ T5902] usb 3-1: SerialNumber: syz [ 301.783213][ T5902] usb 3-1: config 0 descriptor?? [ 301.857178][ T5902] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 302.009036][ T1209] usb 3-1: USB disconnect, device number 31 [ 302.023885][ T1209] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 302.033298][ T5799] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 302.436436][ T8817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.436948][ T8817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.460990][ T8817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.464973][ T8817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.712365][ T5799] usb 5-1: USB disconnect, device number 29 [ 302.970571][ T8891] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1072'. [ 303.003096][ T8889] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1074'. [ 303.230855][ T8905] syzkaller0: entered promiscuous mode [ 303.230880][ T8905] syzkaller0: entered allmulticast mode [ 303.297391][ T8909] FAULT_INJECTION: forcing a failure. [ 303.297391][ T8909] name failslab, interval 1, probability 0, space 0, times 0 [ 303.297423][ T8909] CPU: 1 UID: 0 PID: 8909 Comm: syz.3.1082 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 303.297446][ T8909] Tainted: [L]=SOFTLOCKUP [ 303.297452][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.297462][ T8909] Call Trace: [ 303.297468][ T8909] [ 303.297476][ T8909] dump_stack_lvl+0xe8/0x150 [ 303.297506][ T8909] should_fail_ex+0x46b/0x600 [ 303.297536][ T8909] should_failslab+0xa8/0x100 [ 303.297563][ T8909] kmem_cache_alloc_noprof+0x87/0x680 [ 303.297587][ T8909] ? skb_clone+0x212/0x3a0 [ 303.297612][ T8909] skb_clone+0x212/0x3a0 [ 303.297636][ T8909] __netlink_deliver_tap+0x404/0x850 [ 303.297664][ T8909] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.297693][ T8909] netlink_deliver_tap+0x19c/0x1b0 [ 303.297710][ T8909] netlink_unicast+0x805/0x9f0 [ 303.297743][ T8909] ? __pfx_netlink_unicast+0x10/0x10 [ 303.297768][ T8909] ? netlink_sendmsg+0x650/0xb40 [ 303.297783][ T8909] ? skb_put+0x11b/0x210 [ 303.297805][ T8909] netlink_sendmsg+0x813/0xb40 [ 303.297830][ T8909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.297853][ T8909] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.297879][ T8909] ____sys_sendmsg+0xa4e/0xac0 [ 303.297908][ T8909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.297937][ T8909] ? import_iovec+0x73/0xa0 [ 303.297959][ T8909] ___sys_sendmsg+0x2a5/0x360 [ 303.297984][ T8909] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.298037][ T8909] ? __fget_files+0x2a/0x420 [ 303.298055][ T8909] ? __fget_files+0x3a6/0x420 [ 303.298083][ T8909] __x64_sys_sendmsg+0x1c3/0x2a0 [ 303.298106][ T8909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.298135][ T8909] ? __pfx_ksys_write+0x10/0x10 [ 303.298168][ T8909] do_syscall_64+0x14d/0xf80 [ 303.298188][ T8909] ? trace_irq_disable+0x3b/0x150 [ 303.298206][ T8909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.298223][ T8909] ? clear_bhb_loop+0x40/0x90 [ 303.298243][ T8909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.298259][ T8909] RIP: 0033:0x7fbea01bc629 [ 303.298275][ T8909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.298289][ T8909] RSP: 002b:00007fbe9e416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.298307][ T8909] RAX: ffffffffffffffda RBX: 00007fbea0435fa0 RCX: 00007fbea01bc629 [ 303.298319][ T8909] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 303.298331][ T8909] RBP: 00007fbe9e416090 R08: 0000000000000000 R09: 0000000000000000 [ 303.298341][ T8909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.298350][ T8909] R13: 00007fbea0436038 R14: 00007fbea0435fa0 R15: 00007ffe169b1008 [ 303.298376][ T8909] [ 303.612377][ T5799] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 303.773193][ T5799] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 303.774523][ T5799] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.774578][ T5799] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.774602][ T5799] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.776132][ T5799] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.776181][ T5799] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.776204][ T5799] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.777258][ T5799] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.777307][ T5799] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.777329][ T5799] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.793043][ T5799] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.793096][ T5799] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.793118][ T5799] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.794137][ T5799] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.794184][ T5799] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.794206][ T5799] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.795216][ T5799] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.795263][ T5799] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.795284][ T5799] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.796803][ T5799] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.796857][ T5799] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.796878][ T5799] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.797991][ T5799] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.798040][ T5799] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 303.798063][ T5799] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.806550][ T5799] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 303.806580][ T5799] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 303.806601][ T5799] usb 3-1: Product: syz [ 303.806622][ T5799] usb 3-1: Manufacturer: syz [ 303.806637][ T5799] usb 3-1: SerialNumber: syz [ 303.830140][ T5799] usb 3-1: config 0 descriptor?? [ 303.844434][ T5799] yurex 3-1:0.0: Could not find endpoints [ 304.098993][ T8945] No source specified [ 304.102466][ T5799] usb 3-1: USB disconnect, device number 32 [ 304.243258][ T8954] FAULT_INJECTION: forcing a failure. [ 304.243258][ T8954] name failslab, interval 1, probability 0, space 0, times 0 [ 304.243292][ T8954] CPU: 0 UID: 0 PID: 8954 Comm: syz.3.1099 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 304.243318][ T8954] Tainted: [L]=SOFTLOCKUP [ 304.243323][ T8954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 304.243334][ T8954] Call Trace: [ 304.243341][ T8954] [ 304.243349][ T8954] dump_stack_lvl+0xe8/0x150 [ 304.243382][ T8954] should_fail_ex+0x46b/0x600 [ 304.243414][ T8954] should_failslab+0xa8/0x100 [ 304.243443][ T8954] __kmalloc_cache_noprof+0x84/0x690 [ 304.243470][ T8954] ? __se_sys_mount+0x166/0x420 [ 304.243488][ T8954] ? memdup_user+0x99/0xd0 [ 304.243513][ T8954] __se_sys_mount+0x166/0x420 [ 304.243538][ T8954] ? __pfx___se_sys_mount+0x10/0x10 [ 304.243562][ T8954] ? __x64_sys_mount+0x20/0xc0 [ 304.243594][ T8954] do_syscall_64+0x14d/0xf80 [ 304.243617][ T8954] ? trace_irq_disable+0x3b/0x150 [ 304.243638][ T8954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.243656][ T8954] ? clear_bhb_loop+0x40/0x90 [ 304.243677][ T8954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.243695][ T8954] RIP: 0033:0x7fbea01bc629 [ 304.243711][ T8954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.243726][ T8954] RSP: 002b:00007fbe9e3f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.243746][ T8954] RAX: ffffffffffffffda RBX: 00007fbea0436090 RCX: 00007fbea01bc629 [ 304.243759][ T8954] RDX: 00002000000003c0 RSI: 0000200000000040 RDI: 0000200000002440 [ 304.243773][ T8954] RBP: 00007fbe9e3f5090 R08: 00002000000001c0 R09: 0000000000000000 [ 304.243785][ T8954] R10: 000000000200840d R11: 0000000000000246 R12: 0000000000000001 [ 304.243797][ T8954] R13: 00007fbea0436128 R14: 00007fbea0436090 R15: 00007ffe169b1008 [ 304.243827][ T8954] [ 305.182585][ T8962] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1104'. [ 305.732402][ T1209] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 305.979261][ T1209] usb 5-1: Using ep0 maxpacket: 16 [ 305.990384][ T1209] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 305.990412][ T1209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.990432][ T1209] usb 5-1: config 0 has no interface number 0 [ 305.990462][ T1209] usb 5-1: config 0 interface 2 has no altsetting 0 [ 306.014442][ T1209] usb 5-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice= e.a0 [ 306.014471][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.014489][ T1209] usb 5-1: Product: syz [ 306.014502][ T1209] usb 5-1: Manufacturer: syz [ 306.014514][ T1209] usb 5-1: SerialNumber: syz [ 306.640717][ T8988] FAULT_INJECTION: forcing a failure. [ 306.640717][ T8988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.640754][ T8988] CPU: 0 UID: 0 PID: 8988 Comm: syz.3.1113 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 306.640781][ T8988] Tainted: [L]=SOFTLOCKUP [ 306.640787][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.640799][ T8988] Call Trace: [ 306.640806][ T8988] [ 306.640814][ T8988] dump_stack_lvl+0xe8/0x150 [ 306.640848][ T8988] should_fail_ex+0x46b/0x600 [ 306.640884][ T8988] _copy_from_user+0x2d/0xb0 [ 306.640908][ T8988] lowpan_control_write+0x108/0x8f0 [ 306.640933][ T8988] ? __pfx_lowpan_control_write+0x10/0x10 [ 306.640960][ T8988] ? __pfx___debugfs_file_get+0x10/0x10 [ 306.640996][ T8988] full_proxy_write+0x127/0x1f0 [ 306.641021][ T8988] ? __pfx_full_proxy_write+0x10/0x10 [ 306.641046][ T8988] vfs_write+0x2a3/0xba0 [ 306.641082][ T8988] ? __pfx_vfs_write+0x10/0x10 [ 306.641111][ T8988] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 306.641136][ T8988] ? lockdep_hardirqs_on+0x7a/0x110 [ 306.641160][ T8988] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 306.641184][ T8988] ? mutex_lock_nested+0x152/0x1d0 [ 306.641202][ T8988] ? fdget_pos+0x252/0x320 [ 306.641234][ T8988] ksys_write+0x156/0x270 [ 306.641261][ T8988] ? __pfx_ksys_write+0x10/0x10 [ 306.641305][ T8988] do_syscall_64+0x14d/0xf80 [ 306.641328][ T8988] ? trace_irq_disable+0x3b/0x150 [ 306.641349][ T8988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.641369][ T8988] ? clear_bhb_loop+0x40/0x90 [ 306.641393][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.641413][ T8988] RIP: 0033:0x7fbea01bc629 [ 306.641431][ T8988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.641447][ T8988] RSP: 002b:00007fbe9e416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 306.641468][ T8988] RAX: ffffffffffffffda RBX: 00007fbea0435fa0 RCX: 00007fbea01bc629 [ 306.641482][ T8988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 306.641493][ T8988] RBP: 00007fbe9e416090 R08: 0000000000000000 R09: 0000000000000000 [ 306.641506][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.641517][ T8988] R13: 00007fbea0436038 R14: 00007fbea0435fa0 R15: 00007ffe169b1008 [ 306.641548][ T8988] [ 306.923850][ T1209] usb 5-1: config 0 descriptor?? [ 307.241107][ T1209] cdc_ether 5-1:0.2: More than one union descriptor, skipping ... [ 307.241130][ T1209] cdc_ether 5-1:0.2: skipping garbage [ 307.241146][ T1209] usb 5-1: bad CDC descriptors [ 307.282406][ T1209] usb 5-1: USB disconnect, device number 30 [ 307.962949][ T9041] FAULT_INJECTION: forcing a failure. [ 307.962949][ T9041] name failslab, interval 1, probability 0, space 0, times 0 [ 307.962984][ T9041] CPU: 1 UID: 0 PID: 9041 Comm: syz.1.1137 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 307.963008][ T9041] Tainted: [L]=SOFTLOCKUP [ 307.963015][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.963025][ T9041] Call Trace: [ 307.963033][ T9041] [ 307.963040][ T9041] dump_stack_lvl+0xe8/0x150 [ 307.963070][ T9041] should_fail_ex+0x46b/0x600 [ 307.963102][ T9041] should_failslab+0xa8/0x100 [ 307.963131][ T9041] __kmalloc_noprof+0xdf/0x7b0 [ 307.963156][ T9041] ? iovec_from_user+0x87/0x250 [ 307.963181][ T9041] iovec_from_user+0x87/0x250 [ 307.963206][ T9041] __import_iovec+0x163/0x7e0 [ 307.963227][ T9041] ? __lock_acquire+0x6b5/0x2cf0 [ 307.963250][ T9041] import_iovec+0x73/0xa0 [ 307.963274][ T9041] vfs_writev+0x1d2/0x9a0 [ 307.963302][ T9041] ? __pfx_vfs_writev+0x10/0x10 [ 307.963334][ T9041] ? __fget_files+0x2a/0x420 [ 307.963360][ T9041] ? __fget_files+0x3a6/0x420 [ 307.963379][ T9041] ? __fget_files+0x2a/0x420 [ 307.963415][ T9041] __x64_sys_pwritev+0x1a2/0x2b0 [ 307.963445][ T9041] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 307.963480][ T9041] do_syscall_64+0x14d/0xf80 [ 307.963504][ T9041] ? trace_irq_disable+0x3b/0x150 [ 307.963525][ T9041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.963545][ T9041] ? clear_bhb_loop+0x40/0x90 [ 307.963569][ T9041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.963586][ T9041] RIP: 0033:0x7fadd28cc629 [ 307.963602][ T9041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.963619][ T9041] RSP: 002b:00007fadd0b1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 307.963637][ T9041] RAX: ffffffffffffffda RBX: 00007fadd2b45fa0 RCX: 00007fadd28cc629 [ 307.963650][ T9041] RDX: 10000000000000a7 RSI: 00002000000021c0 RDI: 0000000000000003 [ 307.963662][ T9041] RBP: 00007fadd0b1e090 R08: 0000000000010000 R09: 0000000000000000 [ 307.963673][ T9041] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 307.963685][ T9041] R13: 00007fadd2b46038 R14: 00007fadd2b45fa0 R15: 00007ffe1178f548 [ 307.963714][ T9041] [ 308.327736][ T9055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.332174][ T9055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.438950][ T9064] FAULT_INJECTION: forcing a failure. [ 308.438950][ T9064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.438984][ T9064] CPU: 0 UID: 0 PID: 9064 Comm: syz.2.1146 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 308.439010][ T9064] Tainted: [L]=SOFTLOCKUP [ 308.439017][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 308.439029][ T9064] Call Trace: [ 308.439036][ T9064] [ 308.439045][ T9064] dump_stack_lvl+0xe8/0x150 [ 308.439078][ T9064] should_fail_ex+0x46b/0x600 [ 308.439112][ T9064] _copy_from_user+0x2d/0xb0 [ 308.439136][ T9064] iommufd_fops_ioctl+0x461/0x5d0 [ 308.439158][ T9064] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 308.439196][ T9064] ? bpf_lsm_file_ioctl+0x9/0x20 [ 308.439225][ T9064] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 308.439245][ T9064] __se_sys_ioctl+0xff/0x170 [ 308.439275][ T9064] do_syscall_64+0x14d/0xf80 [ 308.439299][ T9064] ? trace_irq_disable+0x3b/0x150 [ 308.439320][ T9064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.439340][ T9064] ? clear_bhb_loop+0x40/0x90 [ 308.439363][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.439382][ T9064] RIP: 0033:0x7f52b5fec629 [ 308.439406][ T9064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.439427][ T9064] RSP: 002b:00007f52b4246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.439447][ T9064] RAX: ffffffffffffffda RBX: 00007f52b6265fa0 RCX: 00007f52b5fec629 [ 308.439466][ T9064] RDX: 00002000000003c0 RSI: 0000000000003b81 RDI: 0000000000000003 [ 308.439479][ T9064] RBP: 00007f52b4246090 R08: 0000000000000000 R09: 0000000000000000 [ 308.439491][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.439502][ T9064] R13: 00007f52b6266038 R14: 00007f52b6265fa0 R15: 00007ffda73e6168 [ 308.439532][ T9064] [ 308.979272][ T9086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.979831][ T9086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.692412][ T5799] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 309.822428][ T5799] usb 5-1: device descriptor read/64, error -71 [ 310.062371][ T5799] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 310.222515][ T5799] usb 5-1: device descriptor read/64, error -71 [ 310.342806][ T5799] usb usb5-port1: attempt power cycle [ 310.715745][ T5799] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 310.743737][ T5799] usb 5-1: device descriptor read/8, error -71 [ 310.982401][ T5799] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 311.005134][ T5799] usb 5-1: device descriptor read/8, error -71 [ 311.129821][ T5799] usb usb5-port1: unable to enumerate USB device [ 311.211334][ T9196] FAULT_INJECTION: forcing a failure. [ 311.211334][ T9196] name failslab, interval 1, probability 0, space 0, times 0 [ 311.211369][ T9196] CPU: 0 UID: 0 PID: 9196 Comm: syz.3.1204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 311.211396][ T9196] Tainted: [L]=SOFTLOCKUP [ 311.211403][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.211414][ T9196] Call Trace: [ 311.211421][ T9196] [ 311.211429][ T9196] dump_stack_lvl+0xe8/0x150 [ 311.211461][ T9196] should_fail_ex+0x46b/0x600 [ 311.211495][ T9196] should_failslab+0xa8/0x100 [ 311.211525][ T9196] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 311.211553][ T9196] ? __lock_acquire+0x6b5/0x2cf0 [ 311.211572][ T9196] ? __get_vm_area_node+0x171/0x350 [ 311.211601][ T9196] __get_vm_area_node+0x171/0x350 [ 311.211630][ T9196] __vmalloc_node_range_noprof+0x372/0x1730 [ 311.211656][ T9196] ? copy_process+0x508/0x3d00 [ 311.211681][ T9196] ? rt_spin_unlock+0x160/0x200 [ 311.211722][ T9196] ? percpu_ref_get_many+0x19/0x140 [ 311.211766][ T9196] ? __memcg_slab_post_alloc_hook+0x3e4/0xa30 [ 311.211793][ T9196] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.211822][ T9196] ? rcu_is_watching+0x15/0xb0 [ 311.211842][ T9196] ? memcpy_and_pad+0x48/0x80 [ 311.211870][ T9196] __vmalloc_node_noprof+0xc2/0x100 [ 311.211896][ T9196] ? copy_process+0x508/0x3d00 [ 311.211919][ T9196] ? copy_process+0x508/0x3d00 [ 311.211946][ T9196] dup_task_struct+0x228/0x9a0 [ 311.211975][ T9196] ? rt_spin_unlock+0x160/0x200 [ 311.211996][ T9196] copy_process+0x508/0x3d00 [ 311.212022][ T9196] ? kstrtoull+0x12f/0x1d0 [ 311.212060][ T9196] ? get_pid_task+0x20/0x1f0 [ 311.212092][ T9196] ? __pfx_copy_process+0x10/0x10 [ 311.212130][ T9196] kernel_clone+0x249/0x840 [ 311.212159][ T9196] ? __pfx_kernel_clone+0x10/0x10 [ 311.212184][ T9196] ? do_raw_spin_lock+0x12b/0x2f0 [ 311.212228][ T9196] __x64_sys_clone+0x1b6/0x230 [ 311.212255][ T9196] ? __pfx___x64_sys_clone+0x10/0x10 [ 311.212292][ T9196] ? __pfx_ksys_write+0x10/0x10 [ 311.212325][ T9196] do_syscall_64+0x14d/0xf80 [ 311.212346][ T9196] ? trace_irq_disable+0x3b/0x150 [ 311.212365][ T9196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.212383][ T9196] ? clear_bhb_loop+0x40/0x90 [ 311.212406][ T9196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.212425][ T9196] RIP: 0033:0x7fbea01bc629 [ 311.212443][ T9196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.212460][ T9196] RSP: 002b:00007fbe9e415fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 311.212480][ T9196] RAX: ffffffffffffffda RBX: 00007fbea0435fa0 RCX: 00007fbea01bc629 [ 311.212495][ T9196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 311.212507][ T9196] RBP: 00007fbe9e416090 R08: 0000000000000000 R09: 0000000000000000 [ 311.212519][ T9196] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 311.212531][ T9196] R13: 00007fbea0436038 R14: 00007fbea0435fa0 R15: 00007ffe169b1008 [ 311.212561][ T9196] [ 311.223988][ T9196] syz.3.1204: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 311.224366][ T9196] CPU: 1 UID: 0 PID: 9196 Comm: syz.3.1204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 311.224392][ T9196] Tainted: [L]=SOFTLOCKUP [ 311.224398][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.224410][ T9196] Call Trace: [ 311.224417][ T9196] [ 311.224425][ T9196] dump_stack_lvl+0xe8/0x150 [ 311.224457][ T9196] warn_alloc+0x263/0x3e0 [ 311.224493][ T9196] ? __pfx_warn_alloc+0x10/0x10 [ 311.224518][ T9196] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 311.224545][ T9196] ? __get_vm_area_node+0x171/0x350 [ 311.224573][ T9196] ? __get_vm_area_node+0x2e1/0x350 [ 311.224602][ T9196] __vmalloc_node_range_noprof+0x397/0x1730 [ 311.224628][ T9196] ? rt_spin_unlock+0x160/0x200 [ 311.224651][ T9196] ? percpu_ref_get_many+0x19/0x140 [ 311.224710][ T9196] ? __memcg_slab_post_alloc_hook+0x3e4/0xa30 [ 311.224737][ T9196] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.224765][ T9196] ? rcu_is_watching+0x15/0xb0 [ 311.224786][ T9196] ? memcpy_and_pad+0x48/0x80 [ 311.224821][ T9196] __vmalloc_node_noprof+0xc2/0x100 [ 311.224852][ T9196] ? copy_process+0x508/0x3d00 [ 311.224876][ T9196] ? copy_process+0x508/0x3d00 [ 311.224902][ T9196] dup_task_struct+0x228/0x9a0 [ 311.224928][ T9196] ? rt_spin_unlock+0x160/0x200 [ 311.224949][ T9196] copy_process+0x508/0x3d00 [ 311.224975][ T9196] ? kstrtoull+0x12f/0x1d0 [ 311.225011][ T9196] ? get_pid_task+0x20/0x1f0 [ 311.225037][ T9196] ? __pfx_copy_process+0x10/0x10 [ 311.225073][ T9196] kernel_clone+0x249/0x840 [ 311.225107][ T9196] ? __pfx_kernel_clone+0x10/0x10 [ 311.225130][ T9196] ? do_raw_spin_lock+0x12b/0x2f0 [ 311.225175][ T9196] __x64_sys_clone+0x1b6/0x230 [ 311.225203][ T9196] ? __pfx___x64_sys_clone+0x10/0x10 [ 311.225244][ T9196] ? __pfx_ksys_write+0x10/0x10 [ 311.225280][ T9196] do_syscall_64+0x14d/0xf80 [ 311.225303][ T9196] ? trace_irq_disable+0x3b/0x150 [ 311.225323][ T9196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.225342][ T9196] ? clear_bhb_loop+0x40/0x90 [ 311.225364][ T9196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.225383][ T9196] RIP: 0033:0x7fbea01bc629 [ 311.225402][ T9196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.225418][ T9196] RSP: 002b:00007fbe9e415fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 311.225437][ T9196] RAX: ffffffffffffffda RBX: 00007fbea0435fa0 RCX: 00007fbea01bc629 [ 311.225450][ T9196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 311.225461][ T9196] RBP: 00007fbe9e416090 R08: 0000000000000000 R09: 0000000000000000 [ 311.225473][ T9196] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 311.225483][ T9196] R13: 00007fbea0436038 R14: 00007fbea0435fa0 R15: 00007ffe169b1008 [ 311.225514][ T9196] [ 311.225531][ T9196] Mem-Info: [ 311.225544][ T9196] active_anon:257 inactive_anon:9412 isolated_anon:0 [ 311.225544][ T9196] active_file:21239 inactive_file:39084 isolated_file:0 [ 311.225544][ T9196] unevictable:1280 dirty:178 writeback:0 [ 311.225544][ T9196] slab_reclaimable:12519 slab_unreclaimable:101765 [ 311.225544][ T9196] mapped:34142 shmem:4811 pagetables:1346 [ 311.225544][ T9196] sec_pagetables:0 bounce:0 [ 311.225544][ T9196] kernel_misc_reclaimable:0 [ 311.225544][ T9196] free:1303574 free_pcp:5516 free_cma:0 [ 311.225593][ T9196] Node 0 active_anon:1028kB inactive_anon:37648kB active_file:84700kB inactive_file:156336kB unevictable:3584kB isolated(anon):0kB isolated(file):0kB mapped:136512kB dirty:708kB writeback:0kB shmem:17708kB kernel_stack:13336kB pagetables:5228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 311.225637][ T9196] Node 1 active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 311.225676][ T9196] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.225738][ T9196] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 311.225769][ T9196] Node 0 DMA32 free:1260944kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1028kB inactive_anon:37648kB active_file:84700kB inactive_file:156336kB unevictable:3584kB writepending:708kB zspages:0kB present:3129332kB managed:2566648kB mlocked:2048kB bounce:0kB free_pcp:22064kB local_pcp:2536kB free_cma:0kB [ 311.225827][ T9196] lowmem_reserve[]: 0 0 0 0 0 [ 311.225929][ T9196] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.225982][ T9196] lowmem_reserve[]: 0 0 0 0 0 [ 311.226010][ T9196] Node 1 Normal free:3937992kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.226066][ T9196] lowmem_reserve[]: 0 0 0 0 0 [ 311.226093][ T9196] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 311.226206][ T9196] Node 0 DMA32: 1847*4kB (UME) 2151*8kB (UM) 1370*16kB (UME) 485*32kB (UM) 414*64kB (UM) 158*128kB (UM) 143*256kB (UM) 59*512kB (UME) 46*1024kB (UM) 17*2048kB (UME) 245*4096kB (UM) = 1261012kB [ 311.226347][ T9196] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 311.226444][ T9196] Node 1 Normal: 2*4kB (UM) 2*8kB (U) 11*16kB (UE) 8*32kB (UE) 6*64kB (UME) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 959*4096kB (M) = 3937992kB [ 311.226585][ T9196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.226601][ T9196] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.226616][ T9196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.226631][ T9196] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.226646][ T9196] 65130 total pagecache pages [ 311.226658][ T9196] 0 pages in swap cache [ 311.226664][ T9196] Free swap = 124996kB [ 311.226671][ T9196] Total swap = 124996kB [ 311.226679][ T9196] 2097051 pages RAM [ 311.226685][ T9196] 0 pages HighMem/MovableOnly [ 311.226691][ T9196] 423668 pages reserved [ 311.226697][ T9196] 0 pages cma reserved [ 311.918686][ T9207] syzkaller0: entered promiscuous mode [ 311.918711][ T9207] syzkaller0: entered allmulticast mode [ 312.229710][ T9219] FAULT_INJECTION: forcing a failure. [ 312.229710][ T9219] name failslab, interval 1, probability 0, space 0, times 0 [ 312.229745][ T9219] CPU: 0 UID: 0 PID: 9219 Comm: syz.1.1214 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 312.229772][ T9219] Tainted: [L]=SOFTLOCKUP [ 312.229779][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.229798][ T9219] Call Trace: [ 312.229805][ T9219] [ 312.229813][ T9219] dump_stack_lvl+0xe8/0x150 [ 312.229846][ T9219] should_fail_ex+0x46b/0x600 [ 312.229880][ T9219] should_failslab+0xa8/0x100 [ 312.229910][ T9219] kmem_cache_alloc_noprof+0x87/0x680 [ 312.229936][ T9219] ? rcu_is_watching+0x15/0xb0 [ 312.229955][ T9219] ? security_file_alloc+0x34/0x310 [ 312.229983][ T9219] security_file_alloc+0x34/0x310 [ 312.230009][ T9219] init_file+0x96/0x2d0 [ 312.230032][ T9219] alloc_empty_file+0x6e/0x1d0 [ 312.230053][ T9219] alloc_file_pseudo+0x155/0x240 [ 312.230077][ T9219] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 312.230105][ T9219] ? alloc_anon_inode+0x1c0/0x360 [ 312.230131][ T9219] aio_setup_ring+0x1f8/0xe50 [ 312.230155][ T9219] ? pcpu_memcg_post_alloc_hook+0xc4/0x580 [ 312.230181][ T9219] ? pcpu_alloc_noprof+0x105f/0x1950 [ 312.230204][ T9219] ? __pfx_aio_setup_ring+0x10/0x10 [ 312.230240][ T9219] ioctx_alloc+0x32f/0x850 [ 312.230273][ T9219] __se_sys_io_setup+0x7b/0x1d0 [ 312.230297][ T9219] do_syscall_64+0x14d/0xf80 [ 312.230321][ T9219] ? trace_irq_disable+0x3b/0x150 [ 312.230341][ T9219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.230360][ T9219] ? clear_bhb_loop+0x40/0x90 [ 312.230383][ T9219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.230401][ T9219] RIP: 0033:0x7fadd28cc629 [ 312.230418][ T9219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.230435][ T9219] RSP: 002b:00007fadd0b1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 312.230456][ T9219] RAX: ffffffffffffffda RBX: 00007fadd2b45fa0 RCX: 00007fadd28cc629 [ 312.230470][ T9219] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000001 [ 312.230483][ T9219] RBP: 00007fadd0b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 312.230494][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.230503][ T9219] R13: 00007fadd2b46038 R14: 00007fadd2b45fa0 R15: 00007ffe1178f548 [ 312.230530][ T9219] [ 312.595902][ T9228] FAULT_INJECTION: forcing a failure. [ 312.595902][ T9228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.595940][ T9228] CPU: 0 UID: 0 PID: 9228 Comm: syz.4.1218 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 312.595967][ T9228] Tainted: [L]=SOFTLOCKUP [ 312.595974][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.595985][ T9228] Call Trace: [ 312.595993][ T9228] [ 312.596001][ T9228] dump_stack_lvl+0xe8/0x150 [ 312.596032][ T9228] should_fail_ex+0x46b/0x600 [ 312.596065][ T9228] _copy_from_user+0x2d/0xb0 [ 312.596088][ T9228] __sys_bpf+0x229/0x950 [ 312.596114][ T9228] ? __pfx___sys_bpf+0x10/0x10 [ 312.596134][ T9228] ? rt_mutex_slowunlock+0x1cb/0x300 [ 312.596170][ T9228] ? ksys_write+0x248/0x270 [ 312.596199][ T9228] ? __pfx_ksys_write+0x10/0x10 [ 312.596231][ T9228] __x64_sys_bpf+0x7c/0x90 [ 312.596252][ T9228] do_syscall_64+0x14d/0xf80 [ 312.596276][ T9228] ? trace_irq_disable+0x3b/0x150 [ 312.596298][ T9228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.596318][ T9228] ? clear_bhb_loop+0x40/0x90 [ 312.596341][ T9228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.596360][ T9228] RIP: 0033:0x7f9810d8c629 [ 312.596378][ T9228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.596395][ T9228] RSP: 002b:00007f980efe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.596416][ T9228] RAX: ffffffffffffffda RBX: 00007f9811005fa0 RCX: 00007f9810d8c629 [ 312.596430][ T9228] RDX: 0000000000000041 RSI: 0000200000000300 RDI: 0000000000000010 [ 312.596443][ T9228] RBP: 00007f980efe6090 R08: 0000000000000000 R09: 0000000000000000 [ 312.596455][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.596467][ T9228] R13: 00007f9811006038 R14: 00007f9811005fa0 R15: 00007ffcebfb2ba8 [ 312.596497][ T9228] [ 313.422571][ T9243] binder: 9242:9243 ioctl c0306201 2000000003c0 returned -14 [ 313.674541][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1228'. [ 313.897218][ T9260] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 313.897246][ T9260] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 313.901110][ T9260] vhci_hcd vhci_hcd.0: Device attached [ 313.924758][ T9262] vhci_hcd: connection closed [ 313.956547][ T91] vhci_hcd vhci_hcd.0: stop threads [ 313.958914][ T91] vhci_hcd vhci_hcd.0: release socket [ 313.959042][ T91] vhci_hcd vhci_hcd.0: disconnect device [ 314.242361][ T5990] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 314.406204][ T5990] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 314.406234][ T5990] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 314.406254][ T5990] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 314.406301][ T5990] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 314.406329][ T5990] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 314.408200][ T5990] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.408239][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 314.408263][ T5990] usb 5-1: Product: syz [ 314.408278][ T5990] usb 5-1: Manufacturer: syz [ 314.444773][ T5990] cdc_wdm 5-1:1.0: skipping garbage [ 314.444795][ T5990] cdc_wdm 5-1:1.0: skipping garbage [ 314.462023][ T5990] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 314.462060][ T5990] cdc_wdm 5-1:1.0: Unknown control protocol [ 314.971898][ T9314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.981241][ T9314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.215961][ T9323] tipc: Enabling of bearer rejected, failed to enable media [ 315.216713][ T9323] syzkaller0: entered promiscuous mode [ 315.216736][ T9323] syzkaller0: entered allmulticast mode [ 315.415583][ T5985] usb 5-1: USB disconnect, device number 35 [ 315.453188][ T9335] FAULT_INJECTION: forcing a failure. [ 315.453188][ T9335] name failslab, interval 1, probability 0, space 0, times 0 [ 315.453218][ T9335] CPU: 1 UID: 0 PID: 9335 Comm: syz.3.1265 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 315.453238][ T9335] Tainted: [L]=SOFTLOCKUP [ 315.453243][ T9335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.453251][ T9335] Call Trace: [ 315.453257][ T9335] [ 315.453264][ T9335] dump_stack_lvl+0xe8/0x150 [ 315.453289][ T9335] should_fail_ex+0x46b/0x600 [ 315.453315][ T9335] should_failslab+0xa8/0x100 [ 315.453338][ T9335] __kmalloc_noprof+0xdf/0x7b0 [ 315.453358][ T9335] ? kfree+0x4d/0x6c0 [ 315.453374][ T9335] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 315.453399][ T9335] tomoyo_realpath_from_path+0xe3/0x5d0 [ 315.453427][ T9335] ? tomoyo_path_number_perm+0x219/0x630 [ 315.453444][ T9335] tomoyo_path_number_perm+0x246/0x630 [ 315.453463][ T9335] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 315.453482][ T9335] ? __lock_acquire+0x6b5/0x2cf0 [ 315.453533][ T9335] ? __fget_files+0x2a/0x420 [ 315.453552][ T9335] ? __fget_files+0x2a/0x420 [ 315.453567][ T9335] ? __fget_files+0x3a6/0x420 [ 315.453581][ T9335] ? __fget_files+0x2a/0x420 [ 315.453599][ T9335] security_file_ioctl+0xc3/0x2a0 [ 315.453620][ T9335] __se_sys_ioctl+0x47/0x170 [ 315.453642][ T9335] do_syscall_64+0x14d/0xf80 [ 315.453661][ T9335] ? trace_irq_disable+0x3b/0x150 [ 315.453677][ T9335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.453691][ T9335] ? clear_bhb_loop+0x40/0x90 [ 315.453709][ T9335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.453723][ T9335] RIP: 0033:0x7fbea01bc629 [ 315.453738][ T9335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.453751][ T9335] RSP: 002b:00007fbe9e416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.453767][ T9335] RAX: ffffffffffffffda RBX: 00007fbea0435fa0 RCX: 00007fbea01bc629 [ 315.453777][ T9335] RDX: 00002000000001c0 RSI: 00000000c058565d RDI: 0000000000000003 [ 315.453786][ T9335] RBP: 00007fbe9e416090 R08: 0000000000000000 R09: 0000000000000000 [ 315.453795][ T9335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.453803][ T9335] R13: 00007fbea0436038 R14: 00007fbea0435fa0 R15: 00007ffe169b1008 [ 315.453826][ T9335] [ 315.453832][ T9335] ERROR: Out of memory at tomoyo_realpath_from_path. [ 316.203893][ T9365] FAULT_INJECTION: forcing a failure. [ 316.203893][ T9365] name failslab, interval 1, probability 0, space 0, times 0 [ 316.203929][ T9365] CPU: 0 UID: 0 PID: 9365 Comm: syz.1.1278 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 316.203955][ T9365] Tainted: [L]=SOFTLOCKUP [ 316.203962][ T9365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 316.203973][ T9365] Call Trace: [ 316.203981][ T9365] [ 316.203989][ T9365] dump_stack_lvl+0xe8/0x150 [ 316.204022][ T9365] should_fail_ex+0x46b/0x600 [ 316.204057][ T9365] should_failslab+0xa8/0x100 [ 316.204086][ T9365] __kmalloc_noprof+0xdf/0x7b0 [ 316.204114][ T9365] ? fib6_info_alloc+0x30/0xf0 [ 316.204141][ T9365] fib6_info_alloc+0x30/0xf0 [ 316.204163][ T9365] ip6_route_info_create+0x142/0x860 [ 316.204193][ T9365] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 316.204223][ T9365] ip6_route_add+0x49/0x1d0 [ 316.204250][ T9365] ipv6_route_ioctl+0x3ac/0x4f0 [ 316.204280][ T9365] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 316.204336][ T9365] inet6_ioctl+0x246/0x2e0 [ 316.204355][ T9365] ? __pfx_inet6_ioctl+0x10/0x10 [ 316.204373][ T9365] ? tomoyo_path_number_perm+0x219/0x630 [ 316.204411][ T9365] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 316.204446][ T9365] sock_do_ioctl+0x101/0x320 [ 316.204477][ T9365] ? __pfx_sock_do_ioctl+0x10/0x10 [ 316.204508][ T9365] ? __asan_memset+0x22/0x50 [ 316.204530][ T9365] ? smack_file_ioctl+0x263/0x360 [ 316.204559][ T9365] sock_ioctl+0x5c9/0x7f0 [ 316.204588][ T9365] ? __pfx_sock_ioctl+0x10/0x10 [ 316.204616][ T9365] ? __fget_files+0x2a/0x420 [ 316.204636][ T9365] ? __fget_files+0x3a6/0x420 [ 316.204656][ T9365] ? __fget_files+0x2a/0x420 [ 316.204681][ T9365] ? bpf_lsm_file_ioctl+0x9/0x20 [ 316.204709][ T9365] ? __pfx_sock_ioctl+0x10/0x10 [ 316.204736][ T9365] __se_sys_ioctl+0xff/0x170 [ 316.204765][ T9365] do_syscall_64+0x14d/0xf80 [ 316.204787][ T9365] ? trace_irq_disable+0x3b/0x150 [ 316.204809][ T9365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.204829][ T9365] ? clear_bhb_loop+0x40/0x90 [ 316.204852][ T9365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.204871][ T9365] RIP: 0033:0x7fadd28cc629 [ 316.204889][ T9365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.204904][ T9365] RSP: 002b:00007fadd0b1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.204925][ T9365] RAX: ffffffffffffffda RBX: 00007fadd2b45fa0 RCX: 00007fadd28cc629 [ 316.204939][ T9365] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 0000000000000003 [ 316.204951][ T9365] RBP: 00007fadd0b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 316.204963][ T9365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.204974][ T9365] R13: 00007fadd2b46038 R14: 00007fadd2b45fa0 R15: 00007ffe1178f548 [ 316.205005][ T9365] [ 316.213682][ T5990] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 316.303031][ T9366] kernel read not supported for file /file0 (pid: 9366 comm: syz.0.1277) [ 316.309124][ T9366] syzkaller1: entered promiscuous mode [ 316.309146][ T9366] syzkaller1: entered allmulticast mode [ 316.312067][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 316.312084][ T37] audit: type=1800 audit(1771841844.037:375): pid=9366 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1277" name="file0" dev="mqueue" ino=23143 res=0 errno=0 [ 316.362393][ T5990] usb 5-1: device descriptor read/64, error -71 [ 316.632441][ T5990] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 316.762423][ T5990] usb 5-1: device descriptor read/64, error -71 [ 316.883326][ T5990] usb usb5-port1: attempt power cycle [ 316.962852][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 317.200154][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 317.202170][ T31] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 317.202208][ T31] usb 2-1: can't read configurations, error -71 [ 317.232490][ T5990] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 317.264127][ T5990] usb 5-1: device descriptor read/8, error -71 [ 317.418400][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.418469][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.522436][ T5990] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 317.544095][ T5990] usb 5-1: device descriptor read/8, error -71 [ 317.662894][ T5990] usb usb5-port1: unable to enumerate USB device [ 318.029511][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.030060][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.077503][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.077984][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.082528][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.082933][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.084248][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.093885][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.095379][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.095857][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.102745][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.103286][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.141812][ T9437] FAULT_INJECTION: forcing a failure. [ 318.141812][ T9437] name failslab, interval 1, probability 0, space 0, times 0 [ 318.141847][ T9437] CPU: 1 UID: 0 PID: 9437 Comm: syz.1.1308 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 318.141872][ T9437] Tainted: [L]=SOFTLOCKUP [ 318.141879][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.141890][ T9437] Call Trace: [ 318.141898][ T9437] [ 318.141906][ T9437] dump_stack_lvl+0xe8/0x150 [ 318.141939][ T9437] should_fail_ex+0x46b/0x600 [ 318.141972][ T9437] should_failslab+0xa8/0x100 [ 318.142002][ T9437] __kmalloc_cache_noprof+0x84/0x690 [ 318.142030][ T9437] ? __se_sys_mount+0x166/0x420 [ 318.142050][ T9437] ? memdup_user+0x99/0xd0 [ 318.142077][ T9437] __se_sys_mount+0x166/0x420 [ 318.142102][ T9437] ? __pfx___se_sys_mount+0x10/0x10 [ 318.142130][ T9437] ? __x64_sys_mount+0x20/0xc0 [ 318.142152][ T9437] do_syscall_64+0x14d/0xf80 [ 318.142174][ T9437] ? trace_irq_disable+0x3b/0x150 [ 318.142195][ T9437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.142215][ T9437] ? clear_bhb_loop+0x40/0x90 [ 318.142240][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.142256][ T9437] RIP: 0033:0x7fadd28cc629 [ 318.142272][ T9437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.142287][ T9437] RSP: 002b:00007fadd0b1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.142305][ T9437] RAX: ffffffffffffffda RBX: 00007fadd2b45fa0 RCX: 00007fadd28cc629 [ 318.142318][ T9437] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000200000000640 [ 318.142331][ T9437] RBP: 00007fadd0b1e090 R08: 00002000000000c0 R09: 0000000000000000 [ 318.142343][ T9437] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001 [ 318.142354][ T9437] R13: 00007fadd2b46038 R14: 00007fadd2b45fa0 R15: 00007ffe1178f548 [ 318.142384][ T9437] [ 318.698495][ T5985] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 318.803524][ T9470] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 318.808493][ T9470] FAULT_INJECTION: forcing a failure. [ 318.808493][ T9470] name failslab, interval 1, probability 0, space 0, times 0 [ 318.808528][ T9470] CPU: 0 UID: 0 PID: 9470 Comm: syz.3.1323 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 318.808555][ T9470] Tainted: [L]=SOFTLOCKUP [ 318.808562][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.808572][ T9470] Call Trace: [ 318.808580][ T9470] [ 318.808588][ T9470] dump_stack_lvl+0xe8/0x150 [ 318.808621][ T9470] should_fail_ex+0x46b/0x600 [ 318.808657][ T9470] should_failslab+0xa8/0x100 [ 318.808687][ T9470] __kmalloc_node_noprof+0xe7/0x7f0 [ 318.808716][ T9470] ? qdisc_alloc+0x92/0x9f0 [ 318.808741][ T9470] qdisc_alloc+0x92/0x9f0 [ 318.808762][ T9470] ? rt_read_unlock+0x16d/0x220 [ 318.808787][ T9470] qdisc_create+0x12c/0xf20 [ 318.808816][ T9470] ? lockdep_rtnl_is_held+0x26/0x40 [ 318.808841][ T9470] ? qdisc_lookup+0x179/0x6d0 [ 318.808866][ T9470] tc_modify_qdisc+0x16f0/0x2290 [ 318.808909][ T9470] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 318.808953][ T9470] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 318.808989][ T9470] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 318.809015][ T9470] rtnetlink_rcv_msg+0x77e/0xbe0 [ 318.809041][ T9470] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 318.809061][ T9470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.809079][ T9470] ? ref_tracker_free+0x673/0x820 [ 318.809097][ T9470] ? __copy_skb_header+0xa3/0x4a0 [ 318.809124][ T9470] ? __pfx_ref_tracker_free+0x10/0x10 [ 318.809141][ T9470] ? __skb_clone+0x63/0x7a0 [ 318.809182][ T9470] netlink_rcv_skb+0x232/0x4b0 [ 318.809204][ T9470] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.809226][ T9470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.809257][ T9470] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.809285][ T9470] netlink_unicast+0x831/0x9f0 [ 318.809322][ T9470] ? __pfx_netlink_unicast+0x10/0x10 [ 318.809351][ T9470] ? netlink_sendmsg+0x650/0xb40 [ 318.809369][ T9470] ? skb_put+0x11b/0x210 [ 318.809395][ T9470] netlink_sendmsg+0x813/0xb40 [ 318.809424][ T9470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.809453][ T9470] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.809483][ T9470] ____sys_sendmsg+0xa4e/0xac0 [ 318.809516][ T9470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.809549][ T9470] ? import_iovec+0x73/0xa0 [ 318.809576][ T9470] ___sys_sendmsg+0x2a5/0x360 [ 318.809607][ T9470] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.809669][ T9470] ? __fget_files+0x2a/0x420 [ 318.809690][ T9470] ? __fget_files+0x3a6/0x420 [ 318.809722][ T9470] __x64_sys_sendmsg+0x1c3/0x2a0 [ 318.809750][ T9470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.809784][ T9470] ? __pfx_ksys_write+0x10/0x10 [ 318.809823][ T9470] do_syscall_64+0x14d/0xf80 [ 318.809847][ T9470] ? trace_irq_disable+0x3b/0x150 [ 318.809868][ T9470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.809888][ T9470] ? clear_bhb_loop+0x40/0x90 [ 318.809913][ T9470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.809932][ T9470] RIP: 0033:0x7fbea01bc629 [ 318.809950][ T9470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.809965][ T9470] RSP: 002b:00007fbe9e416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.809985][ T9470] RAX: ffffffffffffffda RBX: 00007fbea0435fa0 RCX: 00007fbea01bc629 [ 318.809999][ T9470] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 318.810011][ T9470] RBP: 00007fbe9e416090 R08: 0000000000000000 R09: 0000000000000000 [ 318.810023][ T9470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.810034][ T9470] R13: 00007fbea0436038 R14: 00007fbea0435fa0 R15: 00007ffe169b1008 [ 318.810067][ T9470] [ 318.842367][ T5985] usb 3-1: Using ep0 maxpacket: 16 [ 318.902362][ T5985] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 318.902407][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.902432][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.902453][ T5985] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 318.902493][ T5985] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 318.902515][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.194344][ T5985] usb 3-1: config 0 descriptor?? [ 319.886824][ T5985] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0006/input/input14 [ 319.992642][ T5985] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0006/input/input15 [ 319.999948][ T9487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.038891][ T9487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.106353][ T5985] kye 0003:0458:5013.0006: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 320.138646][ T5985] usb 3-1: USB disconnect, device number 33 [ 320.673038][ T9494] fido_id[9494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 321.301363][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.301863][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.348099][ T9519] bond_slave_0: entered promiscuous mode [ 321.348156][ T9519] bond_slave_1: entered promiscuous mode [ 321.348320][ T9519] vlan2: entered promiscuous mode [ 321.348334][ T9519] bond0: entered promiscuous mode [ 321.572215][ T9528] omfs: Invalid superblock (0) [ 321.682468][ T5879] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 321.783404][ T9535] binder: 9534:9535 ioctl c0306201 0 returned -14 [ 321.835580][ T5879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.835622][ T5879] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 321.835661][ T5879] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 321.837187][ T5879] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 321.837216][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 321.837237][ T5879] usb 2-1: SerialNumber: syz [ 321.914472][ T5879] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 321.914497][ T5879] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 321.914529][ T5879] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 321.972680][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 321.972748][ T5111] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 322.292741][ T9554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.301990][ T9554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.320868][ T9554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.321373][ T9554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.354830][ T9554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.360363][ T9554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.446664][ T9561] FAULT_INJECTION: forcing a failure. [ 322.446664][ T9561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.446698][ T9561] CPU: 1 UID: 0 PID: 9561 Comm: syz.3.1358 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.446728][ T9561] Tainted: [L]=SOFTLOCKUP [ 322.446735][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.446746][ T9561] Call Trace: [ 322.446753][ T9561] [ 322.446761][ T9561] dump_stack_lvl+0xe8/0x150 [ 322.446798][ T9561] should_fail_ex+0x46b/0x600 [ 322.446830][ T9561] _copy_to_user+0x31/0xb0 [ 322.446854][ T9561] simple_read_from_buffer+0xe1/0x170 [ 322.446879][ T9561] proc_fail_nth_read+0x1be/0x230 [ 322.446903][ T9561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.446926][ T9561] ? rw_verify_area+0x2ac/0x4e0 [ 322.446950][ T9561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.446971][ T9561] vfs_read+0x212/0xa80 [ 322.447002][ T9561] ? __pfx_vfs_read+0x10/0x10 [ 322.447028][ T9561] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 322.447051][ T9561] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.447075][ T9561] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 322.447098][ T9561] ? mutex_lock_nested+0x152/0x1d0 [ 322.447115][ T9561] ? fdget_pos+0x252/0x320 [ 322.447145][ T9561] ksys_read+0x156/0x270 [ 322.447172][ T9561] ? __pfx_ksys_read+0x10/0x10 [ 322.447207][ T9561] do_syscall_64+0x14d/0xf80 [ 322.447230][ T9561] ? trace_irq_disable+0x3b/0x150 [ 322.447250][ T9561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.447268][ T9561] ? clear_bhb_loop+0x40/0x90 [ 322.447291][ T9561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.447307][ T9561] RIP: 0033:0x7fbea017cece [ 322.447326][ T9561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 322.447342][ T9561] RSP: 002b:00007fbe9e415fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.447362][ T9561] RAX: ffffffffffffffda RBX: 00007fbe9e4166c0 RCX: 00007fbea017cece [ 322.447375][ T9561] RDX: 000000000000000f RSI: 00007fbe9e4160a0 RDI: 0000000000000015 [ 322.447386][ T9561] RBP: 00007fbe9e416090 R08: 0000000000000000 R09: 0000000000000000 [ 322.447397][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.447407][ T9561] R13: 00007fbea0436038 R14: 00007fbea0435fa0 R15: 00007ffe169b1008 [ 322.447438][ T9561] [ 323.607508][ T9591] netlink: 'syz.4.1369': attribute type 3 has an invalid length. [ 323.794124][ T5799] usb 2-1: USB disconnect, device number 24 [ 323.912424][ T5990] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 324.072508][ T5990] usb 4-1: Using ep0 maxpacket: 32 [ 324.075810][ T5990] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 324.075840][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.106568][ T5990] usb 4-1: config 0 descriptor?? [ 324.305024][ T9601] kAFS: unparsable volume name [ 324.321081][ T5990] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 324.344138][ T5990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 324.344976][ T5990] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 324.345044][ T5990] usb 4-1: media controller created [ 324.352143][ T9602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.371207][ T9602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.417569][ T5990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 324.551189][ T5990] DVB: Unable to find symbol dib7000p_attach() [ 324.551206][ T5990] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 324.772642][ T5990] rc_core: IR keymap rc-dib0700-rc5 not found [ 324.772663][ T5990] Registered IR keymap rc-empty [ 324.772960][ T5990] dvb-usb: could not initialize remote control. [ 324.772969][ T5990] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 324.831354][ T9618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1380'. [ 324.844398][ T5990] usb 4-1: USB disconnect, device number 15 [ 324.919891][ T5990] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 325.315796][ T9628] binder: 9627:9628 ioctl c0306201 2000000003c0 returned -14 [ 325.633363][ T9643] fuse: Unknown parameter 'rootmode¼¯«˛' [ 326.685526][ T37] audit: type=1326 audit(1771841854.417:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9631 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 326.685580][ T37] audit: type=1326 audit(1771841854.417:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9631 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 326.685882][ T37] audit: type=1326 audit(1771841854.417:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9631 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 326.685913][ T37] audit: type=1326 audit(1771841854.417:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9631 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 326.686149][ T37] audit: type=1326 audit(1771841854.417:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9631 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 326.739331][ T37] audit: type=1326 audit(1771841854.417:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9631 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 326.739381][ T37] audit: type=1326 audit(1771841854.467:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9631 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 326.754729][ T37] audit: type=1326 audit(1771841854.467:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9631 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 326.754782][ T37] audit: type=1326 audit(1771841854.487:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9631 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 326.754821][ T37] audit: type=1326 audit(1771841854.487:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9631 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74c38c629 code=0x7ffc0000 [ 326.807454][ T9632] netlink: 'syz.0.1388': attribute type 58 has an invalid length. [ 326.807476][ T9632] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1388'. [ 326.812452][ T1209] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 326.965408][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.965458][ T1209] usb 5-1: New USB device found, idVendor=5e0a, idProduct=a055, bcdDevice= 0.00 [ 326.965480][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.994431][ T1209] usb 5-1: config 0 descriptor?? [ 327.076614][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.077121][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.101514][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.102047][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.153949][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.171094][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.237029][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 327.430698][ T1209] hid-generic 0003:5E0A:A055.0007: unbalanced collection at end of report description [ 327.431435][ T1209] hid-generic 0003:5E0A:A055.0007: probe with driver hid-generic failed with error -22 [ 327.630494][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'. [ 327.694766][ T9645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.742736][ C1] ------------[ cut here ]------------ [ 327.742750][ C1] 1 [ 327.742766][ C1] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#1: ktimers/1/29 [ 327.742800][ C1] Modules linked in: [ 327.742821][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 327.742847][ C1] Tainted: [L]=SOFTLOCKUP [ 327.742854][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.742866][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 327.742885][ C1] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 327.742901][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 327.742917][ C1] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801d2b3c80 [ 327.742932][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 327.742944][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 327.742956][ C1] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000001 [ 327.742970][ C1] R13: 0000000100000a09 R14: 1ffff92000147f4c R15: ffffc90000b27a40 [ 327.742984][ C1] FS: 0000000000000000(0000) GS:ffff888126443000(0000) knlGS:0000000000000000 [ 327.743000][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.743015][ C1] CR2: 00007fadd29364f0 CR3: 0000000037660000 CR4: 00000000003526f0 [ 327.743031][ C1] DR0: fffffffffffffffd DR1: 00000000000001f8 DR2: 0000000000000083 [ 327.743045][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 327.743058][ C1] Call Trace: [ 327.743066][ C1] [ 327.743073][ C1] call_timer_fn+0x192/0x640 [ 327.743095][ C1] ? __pfx_stub_timer+0x10/0x10 [ 327.743113][ C1] ? call_timer_fn+0xd4/0x640 [ 327.743131][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 327.743149][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 327.743189][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.743215][ C1] ? __pfx_stub_timer+0x10/0x10 [ 327.743236][ C1] __run_timer_base+0x6a3/0x9f0 [ 327.743282][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 327.743307][ C1] ? rt_spin_lock+0x1e0/0x400 [ 327.743345][ C1] run_timer_softirq+0xb7/0x170 [ 327.743375][ C1] handle_softirqs+0x1de/0x6f0 [ 327.743413][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 327.743442][ C1] run_ktimerd+0x69/0x100 [ 327.743471][ C1] smpboot_thread_fn+0x541/0xa50 [ 327.743502][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 327.743541][ C1] kthread+0x388/0x470 [ 327.743569][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 327.743596][ C1] ? __pfx_kthread+0x10/0x10 [ 327.743620][ C1] ret_from_fork+0x51e/0xb90 [ 327.743651][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 327.743677][ C1] ? __switch_to+0xc7d/0x1450 [ 327.743707][ C1] ? __pfx_kthread+0x10/0x10 [ 327.743730][ C1] ret_from_fork_asm+0x1a/0x30 [ 327.743769][ C1] [ 327.743784][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 327.743800][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 327.743825][ C1] Tainted: [L]=SOFTLOCKUP [ 327.743832][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.743843][ C1] Call Trace: [ 327.743851][ C1] [ 327.743859][ C1] vpanic+0x56c/0xa60 [ 327.743890][ C1] ? __pfx__printk+0x10/0x10 [ 327.743912][ C1] ? __pfx_vpanic+0x10/0x10 [ 327.743938][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 327.743965][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 327.744000][ C1] panic+0xc5/0xd0 [ 327.744027][ C1] ? __pfx_panic+0x10/0x10 [ 327.744065][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 327.744090][ C1] __warn+0x315/0x4f0 [ 327.744117][ C1] ? stub_timer+0xa/0x20 [ 327.744136][ C1] ? stub_timer+0xa/0x20 [ 327.744156][ C1] __report_bug+0x29a/0x540 [ 327.744188][ C1] ? stub_timer+0xa/0x20 [ 327.744207][ C1] ? __pfx___report_bug+0x10/0x10 [ 327.744230][ C1] ? add_lock_to_list+0xc7/0x100 [ 327.744255][ C1] ? lockdep_unlock+0x5d/0xd0 [ 327.744280][ C1] ? __lock_acquire+0x146e/0x2cf0 [ 327.744309][ C1] ? stub_timer+0xa/0x20 [ 327.744327][ C1] report_bug+0x16a/0x220 [ 327.744352][ C1] ? stub_timer+0xa/0x20 [ 327.744368][ C1] ? stub_timer+0xc/0x20 [ 327.744385][ C1] handle_bug+0x98/0x200 [ 327.744415][ C1] exc_invalid_op+0x1a/0x50 [ 327.744443][ C1] asm_exc_invalid_op+0x1a/0x20 [ 327.744463][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 327.744481][ C1] Code: 0f 94 c0 5b 41 5e e9 55 ed 74 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 327.744498][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 327.744515][ C1] RAX: ffffffff81b095e9 RBX: 0000000080000000 RCX: ffff88801d2b3c80 [ 327.744530][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 327.744542][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 327.744562][ C1] R10: dffffc0000000000 R11: ffffffff81b095e0 R12: 0000000000000001 [ 327.744576][ C1] R13: 0000000100000a09 R14: 1ffff92000147f4c R15: ffffc90000b27a40 [ 327.744596][ C1] ? __pfx_stub_timer+0x10/0x10 [ 327.744615][ C1] ? stub_timer+0x9/0x20 [ 327.744643][ C1] ? stub_timer+0x9/0x20 [ 327.744659][ C1] call_timer_fn+0x192/0x640 [ 327.744678][ C1] ? __pfx_stub_timer+0x10/0x10 [ 327.744695][ C1] ? call_timer_fn+0xd4/0x640 [ 327.744714][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 327.744731][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 327.744768][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.744793][ C1] ? __pfx_stub_timer+0x10/0x10 [ 327.744814][ C1] __run_timer_base+0x6a3/0x9f0 [ 327.744858][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 327.744884][ C1] ? rt_spin_lock+0x1e0/0x400 [ 327.744922][ C1] run_timer_softirq+0xb7/0x170 [ 327.744952][ C1] handle_softirqs+0x1de/0x6f0 [ 327.744989][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 327.745017][ C1] run_ktimerd+0x69/0x100 [ 327.745045][ C1] smpboot_thread_fn+0x541/0xa50 [ 327.745076][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 327.745114][ C1] kthread+0x388/0x470 [ 327.745135][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 327.745163][ C1] ? __pfx_kthread+0x10/0x10 [ 327.745186][ C1] ret_from_fork+0x51e/0xb90 [ 327.745216][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 327.745242][ C1] ? __switch_to+0xc7d/0x1450 [ 327.745270][ C1] ? __pfx_kthread+0x10/0x10 [ 327.745293][ C1] ret_from_fork_asm+0x1a/0x30 [ 327.745330][ C1] [ 327.745980][ C1] Kernel Offset: disabled