last executing test programs: 23m41.011509483s ago: executing program 3 (id=14): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x70}, 0x1, 0x7}, 0x0) 23m40.794435932s ago: executing program 3 (id=15): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffe9d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/file0\x00', 0x105240, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$pagemap(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 23m36.118275237s ago: executing program 3 (id=34): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x1, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 23m35.576524015s ago: executing program 3 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff03000000000000000100000000000000ccb600000000000007000000000000003b00000003000000010000000000000034fcffffffffffff01000000000000000300000000000000ff7f000000000000000100000000000005000000fdffffff070000000040000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="018000000000b8df0000000002000000844d793c108331c20000000001"], 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m35.238722829s ago: executing program 3 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x9}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x1}) 23m34.93084602s ago: executing program 3 (id=42): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 23m34.381957438s ago: executing program 32 (id=42): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 2m13.246631213s ago: executing program 4 (id=10282): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000880)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000e80)={0x2c, &(0x7f0000000cc0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2m10.152196377s ago: executing program 4 (id=10297): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m9.427033135s ago: executing program 4 (id=10303): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCXONC(r1, 0x540a, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f00000008c0)={0x40, 0x12, 0x3, "8561af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m57.846118768s ago: executing program 4 (id=10308): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x68ba}, 0x8) 1m57.118286816s ago: executing program 4 (id=10311): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e5635", 0x46}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323", 0x47}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c", 0x10}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m54.901166503s ago: executing program 4 (id=10318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000000c0)={0x5, 0x7, 0x1, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffff", 0x9) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x6, 0x5be, 0xfffffffc, '\x00', 0x7}, 0x1, 0x400, 0x8, 0x0, 0x0, 0xff, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000480)) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) clock_gettime(0x0, &(0x7f0000000200)) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r4, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x100000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x24, 0xc, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}}}, 0x30) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaf6b317aaaaaa0000000000081f0045000024000008ff4e0130edd52ebb17cd3fe0a2250000001090f9c55d0f010000000000", @ANYRES32=r4], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1m33.270869197s ago: executing program 33 (id=10318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000000c0)={0x5, 0x7, 0x1, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffff", 0x9) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x6, 0x5be, 0xfffffffc, '\x00', 0x7}, 0x1, 0x400, 0x8, 0x0, 0x0, 0xff, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000480)) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) clock_gettime(0x0, &(0x7f0000000200)) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r4, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x100000) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x24, 0xc, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}}}, 0x30) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaf6b317aaaaaa0000000000081f0045000024000008ff4e0130edd52ebb17cd3fe0a2250000001090f9c55d0f010000000000", @ANYRES32=r4], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 52.210095574s ago: executing program 6 (id=10495): r0 = memfd_create(&(0x7f00000003c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2\xff\x90z\xea{\xe5\xa0\xceyY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r1 = dup(r0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x31, r1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r3, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x11e, 0x1, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001e0001"], 0x24}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x6}) fcntl$lock(r6, 0x24, &(0x7f0000007c00)={0x0, 0x2, 0x4, 0x8}) memfd_create(&(0x7f00000003c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2\xff\x90z\xea{\xe5\xa0\xceyY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) (async) dup(r0) (async) fanotify_init(0x200, 0x0) (async) fanotify_mark(r2, 0x1, 0x31, r1, 0x0) (async) memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) (async) ftruncate(r3, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2b, 0x801, 0x0) (async) setsockopt$inet_tcp_TLS_TX(r5, 0x11e, 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001e0001"], 0x24}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x6}) (async) fcntl$lock(r6, 0x24, &(0x7f0000007c00)={0x0, 0x2, 0x4, 0x8}) (async) 52.022121147s ago: executing program 6 (id=10496): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCXONC(r1, 0x540a, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f00000008c0)={0x40, 0x12, 0x3, "8561af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x30, 0xaf, {0xaf, 0xa, "2d6015a176d6319cf147a7b6a7dab4b1df2728d1d8920df55b6bfb0775b41557e990986ee6624b3bf53498f44a10d2513a53f8db8cd8615438896ff236ee811768529c7dbcccc78dc5ab419ed70e48d1d961bff957f1c898f4b7ac9a4c7bf91c1d7ddea796d95c4183f3f5163df88239b57d2e4035b0d23fb6037808db94783edbdd7a2338d0ff2aaad2ef9899a9acb8f95fb7a300ab9c50c6073901cf4f0b110ecb83720aaed8faa4d68585fa"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f0000000200)={0x40, 0x6, 0x76, "60369a325635f44e3c6da9d0d00783aabeacafb9296c359afd02efcc39207f41ba49e0e18e555fa5a81f33809f01a725c7632a3296efaa781e4ce394dfb4f43b79fe854db15221608fb0d0499686028855a7cd6ae552dfab3446562a146eba89576baef9ab6d08e686556758f775e48a9291835b5641"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x7, 0x5, 0xdc3, 0x800, 0x9, 0x3, 0x6, 0x8, 0x13, 0x8, 0x1c0, 0x1ff}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) 48.357030565s ago: executing program 6 (id=10506): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt(r0, 0x3, 0x7, &(0x7f0000000380)="fb67024854ac1d8f4daaa7a4619efc3624700aa41bdcd935d195411a33c9eec73420bbc3c1be76e0dfb3dd61e23c7d7394b122ef7e52b1ba31c2b51537dbb6106ce593753d813f75b6ee04be2915e0e305c664c7fc2575675d3703c93512af3c4002e0c458649750447cb209b9f8d20c48fc155e97725109d143ba2279544e8eb278fc962f14e57d0c1a6b4696d519c660fd7426c4b99f656e079bedefbcaa1f736203999c82ea423275c4df173c187c9980d66788141f6b666ee046c8d1cbfe462cd0a4bff5ffecc3cd8e81b4e163f28a663a90dd33ee74", 0xd8) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x300, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8) 44.685670073s ago: executing program 6 (id=10517): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x8}, 0x8080) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0) preadv(r4, &(0x7f0000000040)=[{0x0, 0x4c}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/92}, {&(0x7f0000001180)=""/132}], 0x2, 0xa, 0x9) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x29) r8 = syz_open_dev$ndb(&(0x7f0000001340), 0x0, 0x0) ioctl$BLKGETZONESZ(r8, 0x80041284, &(0x7f0000001380)=0x800) ioctl$BLKRRPART(r6, 0x125f, 0x0) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000001240)={0x3, [0x1e1, 0x8, 0x10000], [{0x6, 0x1000, 0x1, 0x1, 0x1, 0x1}, {0x7ff, 0x0, 0x1, 0x0, 0x1}, {0xdd3, 0x3fffc, 0x0, 0x0, 0x1}, {0x3, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1}, {0x0, 0x1000, 0x1, 0x1, 0x0, 0x1}, {0xfffffffe, 0xb, 0x0, 0x1, 0x1}, {0x6, 0x8000, 0x1, 0x1, 0x1}, {0xe5, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5, 0xffff7292, 0x0, 0x0, 0x1, 0x1}, {0xfff, 0xfffff46b, 0x1}, {0x0, 0xfffffff2, 0x0, 0x1, 0x1, 0x1}], 0x80}) syz_clone3(&(0x7f00000001c0)={0x280823600, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffe2) 38.939086407s ago: executing program 6 (id=10524): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$igmp6(0xa, 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 37.006542844s ago: executing program 6 (id=10526): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000880)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 36.315966111s ago: executing program 34 (id=10526): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000880)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.492425436s ago: executing program 1 (id=10618): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x80500) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) syz_usb_ep_write(r0, 0x81, 0x39, &(0x7f00000005c0)="67e543057fa0917f3d7ebecbde1a67d3a8ff365d3d440346b5e0b62c636e4997425cb7e80e139c5b34e853cb418e61ff8b49acdf524535765b") syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x80500) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x39, &(0x7f00000005c0)="67e543057fa0917f3d7ebecbde1a67d3a8ff365d3d440346b5e0b62c636e4997425cb7e80e139c5b34e853cb418e61ff8b49acdf524535765b") (async) 14.42526788s ago: executing program 1 (id=10642): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r3 = epoll_create(0xd751) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0xef19, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0xa1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)={0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="140000000000000000000000020000000480000000000000100000000000000000000000070000003d55eb7e2242fa08fbf412dbd63ce81f57e9c8a15322d7307df037e7cdb3fa49a217291d809c81211c11aa11bcac9f2c64f85383757837b522327f0f8f2b61dbf8"], 0x28}}], 0x1, 0xc054) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a0000000000001090224000100000000090400000103000100092100100101220700090581"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369df9740250ceaac594b111d741dd17c1060d38ef2a565ef1e83323691c58d66500", "a9103b39c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75d754a9b2296aba84c193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) readahead(r9, 0x8, 0x4f68) r10 = accept4$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14, 0x0) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000300)=@req3={0x200, 0xb6, 0x8, 0x3, 0x7, 0x4, 0x7ff}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 12.880775988s ago: executing program 0 (id=10653): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="0014010000009d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.061760019s ago: executing program 1 (id=10662): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x18}, 0xb7}], 0x1, 0x40002021, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x7fffffffffffffff, 0x103000) socket$tipc(0x1e, 0x7, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x101400, 0x1dc) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000000000061626364"], 0x18, 0xfffffffffffffffd) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xa8d4}}, './file0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r6], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008800) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYRESDEC=r2], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r7 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 9.55061467s ago: executing program 0 (id=10666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffe0100f4f, 0x86, 0xe000, 0xf, 0x2, 0x0, 0x0, 0x100, 0x6}}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x1) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000000)=0x1) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)=""/204) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x402}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x4c}}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e60b, [{{0x9, 0x2, 0x48}}]}}, 0x7fe782539b0b) 9.108322585s ago: executing program 2 (id=10668): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x270, 0x5c, 0x160, 0x0, 0x3e0, 0x270, 0x228, 0x25a, 0x270, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0x0, 0xff, 0xff], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a, 0x1}, 0x5002, 0xf8, 0x160, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x0, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x9, 0x10, '\x00', 'syz0\x00', {0x4}}}}, {{@ipv6={@local, @empty, [0xffffffff, 0x0, 0xffffffff], [0xffffff00], 'veth1_to_hsr\x00', 'dummy0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x9f, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x3a0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xf0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x8, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xb, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xff, 0x7f, 0x6}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000300)={0x20, 0x14}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000740)={0x14, &(0x7f0000000600)={0x20, 0x21, 0xe2, {0xe2, 0x22, "f80226ca4ed65daf965caa3ab0a019b8442d4e491a25ca7a05cc1e121d945bc7c70b12101797fb47aa509fd9f9d70779b09a60ed79e8d25bd984ad8661ea35679988a7648f38c09716c49afd94dc9f71f4e688a854465295cc0ed85711209b39036cf916f994aa7e7ee9906c8c5a93c2c6cb32184fa514375d5856c62a759bafdf5b0fd30c90a7719c302b44df673ad6348853da51eae81b14d5033cb287e6ad0252a13f5ccba2f948f776d213ec79a4c0eb062c07e9faedd46e4bedd1274febeeda19457d3c2e00b003eba94d9c57d7544068ad2361ae12f1337aa0ca3854aa"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000780)={0x40, 0x0, 0x76, "f78536e5e995b03e08812484fa40bffae728d954e3f864b0bd1378fdb515a0ab3aafd608babb1d9daec40482b6139c7f9689a633fbc97e35d5505f7b6711a5ea128793a18bc013abf96162ef939b028ddf7b3da19ae7e706f28a4b39d118b9d01898c38839ac3289ff53c5778b151a47950f916bf7c3"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x80, 0x9, 0x4, 0x40, 0x100, 0x22f, 0x4, 0x7ce9, 0x3, 0x7ff, 0x0, 0x3}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x6ebc}, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000980)={0x20, 0x89, 0x2, 0x1}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f0000000080)={[0xfd]}, 0x8) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB=' \b)'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, &(0x7f00000000c0)={0x20, 0x7, 0xab, {0xab, 0x31, "427674396cc34aef1e14789842d22ede470c9ebc002b6171724b7c58b28c2b1c0365b4995bf8428dac36573d93f3d9b220dc80424029fce9ec43f4b35ee1227af6e23118e4c5f545ceaa6fd379dd77a6136ecacd41271acf7134513ba51fa3bfd89e030b3bff98643f6cbcd4a57e4cf44f5231bea33851904433ce5c5c3ef4f18215d541e5d7407125f8e1b2024bacf323ddb7799930667fb7d1ca115af3b9bd7306e1ad0ae0d003fa"}}, &(0x7f0000000200)={0x0, 0x3, 0xde, @string={0xde, 0x3, "3eaa1848511bf860e41666fc2fdffc3f9a34a882eed566da5e49c495c2e05f6887c8b1feeb0c81c0a1fc5a5ebdfc9328556d30159f1623533277292343ff4d09f8f7a77dda199dc71321bb742326445b0fbb2f0ee1711a9b62f7978b84ecd02684ba53426b572c2d208dba9c46069ffa51b6e32a3ccb43dd8d7192aae539ddc9f90d1936bf1b008f37f5b0854dd6db6f8464418391d4d88addad005dbd20a104ecb6964d26a75dda3ddd9631a93e33db9c62aba053f61d257a87b9d47f3f5b97db085dc4207d8ed7224e0940eabc68d3262ac7e95288518ca5feacdd"}}, &(0x7f0000000300)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x7, "0448b9a3"}, @main=@item_012={0x0, 0x0, 0xc}, @global=@item_4={0x3, 0x1, 0x6, "772a56e6"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x793}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x40, 0xc, 0x98, "8287029f1eb134e5760298e1ae8e2cf32bc7c2ed4b0cd1271760b2ab11a38a45fe7205efb36e0e43ca2126a855325df0b5c11ec4a98731a867e617683e644fbe50c2f9bb4779b8a3432f454335d4245e351a02dcd648848c6e30eed3ee04d0f4ecb783213907dd9313314231772edd6980ab4ee626204cea699e5af5fa1b3b87bf83ec27b6dbfb36ae6d1bd8a03989502f2c0a86926aa8c9"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20016f000000edd2362c32cc86b4df6e125d7c75d064ce84617e7e0141864706482c92b14d759242a090db2b88b30760c158a8f21a8cd9124a17631253d1a9668d39fe024ffd93a05019a68b5b6a61b3aa19152e6222fd8da3e5bdaea96ec5b0ff7a0ffff5e9d0229902dc1ca7f85e0b8f33975d4485f5f1afb97920f3f8cda4f7c73898ae187b2eed093c51473dbdfade7342b67332c8a6282465ae43f2673b80f36cbd1cf7"], &(0x7f0000000580)={0x20, 0x3, 0x1, 0x53}}) 7.510605999s ago: executing program 1 (id=10673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @private0, 0x8000}}, 0x0, 0x0, 0x33, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20008045, 0x0, 0x0) 7.311093602s ago: executing program 1 (id=10674): r0 = socket$inet6(0xa, 0xa, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x235, &(0x7f0000000140)={0x0, 0x4533, 0x10100, 0xfffffffd, 0x24c, 0x0, r2}, &(0x7f0000000880), &(0x7f0000000280), &(0x7f0000000000)=0x0) io_uring_enter(r3, 0x3677, 0x9a6d, 0x7, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xfffffff8, 0x0, 0x0, 0x4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYRES16=r2, @ANYRESHEX=0x0, @ANYRES8=r5, @ANYBLOB="4c7b40509f934d671e6b7964942f7f8de08eb7d1224f4e6c1b9ed0178d852ccc2c3ead58bf0764b4850d6fb966b5334d1f3611dec35630ded7ba4fd1", @ANYRES16=r4, @ANYRESOCT, @ANYRESOCT=r5], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x3, &(0x7f0000000200)={0x1, 0x0, 0x100000000000081, 0xcf}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x4040000) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010) 6.117244694s ago: executing program 7 (id=10677): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) openat$cgroup_ro(r0, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0xb) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x16d40044}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="98030000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf253a00000008000300", @ANYRES32=r1, @ANYBLOB="060065000300000000015b002b6a7898d22f31a1e275bd778faa466669e520aa5b5b237307caa1322682dde3bae10c1b9263d119188bff1ad592ab0831682d3ab277801af82017cae9be856dd8589413fa250ae9c5cc38f84185a083c213d866d2e4aab03ebb0c5775618635bed69958e46d0b6376b501ce42a3267c47a795cb1bdb9ddd1eebbed415aa31e347c2876ef0e44d066243527f3784139e5e8c331235516af0c89d89a47afa72d3fe10b9c16b0132b6a88a48a7cad43433e202239510cd07664d528a79fb8586866b4b2f5270d36519449662e641800ae4944c2f8a85841eb5815816da2ce42b7ba76911214fa7ec3522123aaf471671473a2cdc96d0bcc1cb81f2a7df4c005b00d04d98b29675c98f709283632efa6957ac55db2222525aaf8a6a136e12403e9c2f8392304f15ee55c8744da3e7dbf8cbbbb2c6d37dc640311138d9c48aa552fd82cef52b923c52d4ee005b002d1d9694dc5a95e90a9f756fcce114cade785dea72714a68a5b2d0ac635ebce11fca90720583189e58f0d86828ee5f2f75559052baeb3b83c31b57ea5880b03dfc0495c036e8a4ac64211ee516f16ccc09890c929ebca1cafdd6ed9cf6a918c3bd8f5a20afe0f62fd8ea3a95ff7240ccc688e60611598fe117e06d44acd239281e3683f63c9a1f91ca3208b0173086e2dfcf527ce2d0cb7c1ad6e815979f51ce7593a4f535c1e27ac9a8ae7e301d8daa4210555693e7757f9c03984b6b618f344770a4aef5d7a89adca712b7ef574f162d1aaa4ac635e0b2e1c4d7ab6b5e40932776c0f87c89469269fe000041005b00ed9d9bd60074523b5c206e6db905c03cd19be00976e1a0b26b8f0d069a054e1454a5b669c30ef51f2adb162d9fe49c7db0fe22b94696e5513347e5f72f000000e9005b0022d5d79c3129570aadfad4f79097a38f43ca3b0634a4dbe641a9deee899690178fe640d269789c19606bb7752edfe2f0de77486ce0860a2e63fe7cded69a57e83e8ebb446de4d9b97c3826ee87735c5301e2ae36adcdd5b483efdeb680eba6a574db89a181d51cb240342bcee56e12e288ce4cc09419a47b620f0a724fde2e3c10f668788b050000000065506fac66a665249a4dc2d2277d94d0f1e8fb8076c314815bf0ec303f8d5437fa3be4625da52fcee4ea610bf89f049096dae8fc38980fa069bf68a4a4ad238ffdfc896aca346b92c240d32e03ffa577eff8dc84a1e879bb0d57690000000600650005000000e323f5ef08ee0ce6417f8253a63dcc6350c2b1119357b691c1bb5efda12ac9"], 0x398}, 0x1, 0x0, 0x0, 0x4004084}, 0x20000000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty}}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 5.838571174s ago: executing program 2 (id=10678): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x10) socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d84a56bd0d001c00180081064e32e82331734c368cc79100", 0x18}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.560851315s ago: executing program 0 (id=10679): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162", 0xc8}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316a", 0x19}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.520541985s ago: executing program 7 (id=10680): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0xa0}}, 0x0) 4.586870807s ago: executing program 0 (id=10681): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) pipe2(&(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) 4.586360988s ago: executing program 7 (id=10682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd25, 0x255fdbfb, {0x1c, 0x20, 0x80, 0x8, 0xff, 0x1, 0xff, 0xa, 0xe00}, [@RTA_DST={0x8, 0x1, {0x100, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c25}, 0x400c020) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000fcff001c0601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70c20000030000001e08d09e5ef9ff11"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r5, @ANYBLOB="028fee050a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x20040040) quotactl_fd$Q_GETINFO(r1, 0x8000000040000782, r2, &(0x7f00000032c0)) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) r9 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000140)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0x2b, {0x2b, 0x31, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f559626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r10, r7, 0x0, 0x0, 0xdead, 0x8, &(0x7f0000000240)}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000080)) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r12, 0x29, 0x4b, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x14}}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x8}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000894}, 0xc010) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) 4.145635256s ago: executing program 2 (id=10684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) recvfrom(r2, &(0x7f0000000080)=""/60, 0x3c, 0x101, 0x0, 0x0) 3.323330575s ago: executing program 0 (id=10685): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0x25}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000c40)=ANY=[@ANYBLOB="000086dd0001110004"], 0x2226) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x200000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe9ac0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x16, &(0x7f0000000580)={@broadcast, @broadcast, @void, {@llc_tr={0x11, {@snap={0xaa, 0xaa, "ab", "bb7a2a", 0x8848}}}}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000380)={0x7, 0x1, "62c192cdb9934e72980a5b952a87db091e8f2fd812704a266fb552debc71bc3b", 0x6, 0xb, 0x7e5e, 0x0, 0x40000100}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020000}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000400)={0x0, 0xffff882d, 0x6, 0x4d, 0x4, 0x800, 0x6, 0x7, {0x0, @in6={{0xa, 0x6, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa562}}, 0x0, 0x10, 0x10, 0x7}}, &(0x7f00000004c0)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r7, @in6={{0xa, 0x4e20, 0x9, @empty, 0x1000}}, 0x2e2b, 0x6, 0x5, 0x81, 0x7, 0x19e9, 0x9}, 0x9c) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x57, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x80, 0x80000) syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0xac502) 2.959982642s ago: executing program 1 (id=10686): r0 = io_uring_setup(0x257e, &(0x7f00000003c0)={0x0, 0xfdcf, 0x800, 0x1}) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) ioctl$HIDIOCGUSAGE(r2, 0xc0105b08, &(0x7f0000000340)={0x1, 0x200, 0x3cf3, 0x200000, 0x110001}) close_range(r0, 0xffffffffffffffff, 0x0) 2.440263797s ago: executing program 2 (id=10688): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x78, 0x0, &(0x7f0000000900)="a4d57046748734e83aa52b052c378271d57bd01eb6fe1abbc215f7b1b6b251594f747d04da6161f4b7bbe6065c78ce2047bd1f15e2997c28fd6ddec8ea6d0a811a9f6bc6d034469c28d06f55223894738e0b2137538fe254dea1abab01f0b77ee06b07abf027415dd74a39c66a5da6e9a160ec7c3cb5b5f2"}) (fail_nth: 2) 1.316792198s ago: executing program 2 (id=10691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x1114}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r4, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c010) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)='4', 0x1}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) getpgid(0x0) r5 = syz_clone(0x840000, &(0x7f00000000c0)="56b20d0839ef4e460c217d565a7fc6f9699379e75709fc36b087c0870fb6ec3168764013802a", 0x26, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="c9ee95c3d9af1a3b88ae5f292bf9b97b69b4f8698dd2a6f16431d503f06dc5c7d89441d4c48f8d761e722520f2fe505f43d3485e2f32e4ef9ae489111598bd493be8a274da37105e155d6be661fa617e4abb18edc0") ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f0000000280)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) close(0x3) 1.218838151s ago: executing program 5 (id=10692): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0xa0}}, 0x0) 1.114747167s ago: executing program 5 (id=10693): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="0014010000009d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 941.25882ms ago: executing program 2 (id=10694): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/181, 0xb5, 0x365) syz_usb_connect(0x5, 0xe4, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501", @ANYRES32], 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) 850.452733ms ago: executing program 7 (id=10695): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x301240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x10) r2 = syz_open_procfs(0x0, &(0x7f0000008240)='attr\x00') openat(r2, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe2342, 0x16b) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 762.985674ms ago: executing program 7 (id=10696): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @empty, 0x7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xffffff00], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x0, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) 750.217383ms ago: executing program 7 (id=10697): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xa4, 0xbb, 0xea, 0x40, 0x41e, 0x4051, 0x6a3e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0x1, 0x80, 0xf9, "", [{{0x9, 0x4, 0x9a, 0x7, 0x0, 0xad, 0xc7, 0xb4, 0x5}}]}}]}}, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000014c0)='\t', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0xa}}], 0x1, 0x4044805) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r7, 0x8004745a, &(0x7f0000005280)) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r3, 0x8002}], 0x1, 0x0, 0x0, 0x0) r8 = dup2(r2, r3) fcntl$setown(r8, 0x8, r1) ioctl$KVM_CREATE_VM(r8, 0xae01, 0xf) tkill(r1, 0x13) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x4) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) truncate(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x7) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x200, r9, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x744}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x147}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 496.722079ms ago: executing program 5 (id=10698): r0 = syz_clone(0x2a002091, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x7) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xee00) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x206, 0x92700) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x0, 0x9, 0x0, 0x8, 0x9, 0x14, 0x6, 0x7, 0x8, 0xc0, 0x9, 0x0, 0x3, 0x6, 0x9, 0xb, 0xc, 0xa, '\x00', 0x6, 0x43}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) 321.890784ms ago: executing program 5 (id=10699): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x1801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x40000, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r0, &(0x7f0000000200)={0x40, 0x0, 0x2, 0x1, 0x1}, 0x8) 203.638335ms ago: executing program 5 (id=10700): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c0000000c000380040005"], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) r4 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fcntl$setpipe(r1, 0x407, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) syz_open_procfs(r6, &(0x7f00000002c0)='comm\x00') r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r0, r7}) 564.602µs ago: executing program 0 (id=10701): recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/49, 0x31}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0xb, 0x4) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000f00)=0x7) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r7, 0x0, 0x2100) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x40000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x11a, 0x4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) 0s ago: executing program 5 (id=10702): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) openat$cgroup_ro(r0, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0xb) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty}}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) kernel console output (not intermixed with test programs): c, intf0) on usb<2:27> initialized [ 1357.514573][ T807] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc1 [ 1357.529466][ T400] FAULT_INJECTION: forcing a failure. [ 1357.529466][ T400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1357.586055][T11629] usb 2-1: USB disconnect, device number 27 [ 1357.614965][ T400] CPU: 1 UID: 0 PID: 400 Comm: syz.1.10250 Tainted: G L syzkaller #0 PREEMPT(full) [ 1357.614992][ T400] Tainted: [L]=SOFTLOCKUP [ 1357.614998][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1357.615008][ T400] Call Trace: [ 1357.615015][ T400] [ 1357.615023][ T400] dump_stack_lvl+0xe8/0x150 [ 1357.615048][ T400] should_fail_ex+0x412/0x560 [ 1357.615073][ T400] _copy_to_user+0x31/0xb0 [ 1357.615098][ T400] simple_read_from_buffer+0xe1/0x170 [ 1357.615123][ T400] proc_fail_nth_read+0x1bb/0x230 [ 1357.615148][ T400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1357.615172][ T400] ? rw_verify_area+0x2a6/0x4d0 [ 1357.615193][ T400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1357.615215][ T400] vfs_read+0x20c/0xa70 [ 1357.615241][ T400] ? __pfx___mutex_lock+0x10/0x10 [ 1357.615263][ T400] ? __pfx_vfs_read+0x10/0x10 [ 1357.615285][ T400] ? __fget_files+0x2a/0x420 [ 1357.615312][ T400] ? __fget_files+0x3a0/0x420 [ 1357.615330][ T400] ? __fget_files+0x2a/0x420 [ 1357.615361][ T400] ksys_read+0x150/0x270 [ 1357.615385][ T400] ? __pfx_ksys_read+0x10/0x10 [ 1357.615414][ T400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.615432][ T400] do_syscall_64+0x15f/0xf80 [ 1357.615450][ T400] ? trace_irq_disable+0x3b/0x140 [ 1357.615474][ T400] ? clear_bhb_loop+0x40/0x90 [ 1357.615494][ T400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.615510][ T400] RIP: 0033:0x7fa3ffb5d60e [ 1357.615527][ T400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1357.615540][ T400] RSP: 002b:00007fa4009e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1357.615557][ T400] RAX: ffffffffffffffda RBX: 00007fa4009e76c0 RCX: 00007fa3ffb5d60e [ 1357.615569][ T400] RDX: 000000000000000f RSI: 00007fa4009e70a0 RDI: 0000000000000004 [ 1357.615579][ T400] RBP: 00007fa4009e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.615587][ T400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.615598][ T400] R13: 00007fa3ffe16038 R14: 00007fa3ffe15fa0 R15: 00007fa3fff3fa48 [ 1357.615626][ T400] [ 1357.890354][ T807] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc1/input164 [ 1357.915883][ T416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.924717][ T416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.069565][ T403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.140928][ T403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.229004][ T807] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:20> initialized [ 1358.278892][ T807] usb 3-1: USB disconnect, device number 20 [ 1358.390561][T11628] usb 5-1: USB disconnect, device number 39 [ 1358.772303][T11628] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1358.944332][T11628] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1358.996572][T11628] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1359.039519][T11628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.122341][T11628] usb 5-1: Product: syz [ 1359.145468][T11628] usb 5-1: Manufacturer: syz [ 1359.182568][T11628] usb 5-1: SerialNumber: syz [ 1359.245911][T11628] usb 5-1: config 0 descriptor?? [ 1359.697286][ T434] netlink: 'syz.2.10260': attribute type 1 has an invalid length. [ 1359.848867][ T434] bond1: entered promiscuous mode [ 1359.862766][ T434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1360.014798][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 1360.014816][ T29] audit: type=1326 audit(1777727398.794:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.1.10262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffb9cdd9 code=0x7ffc0000 [ 1360.074351][ T440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1360.103729][ T440] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1360.135979][ T440] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1360.161215][ T29] audit: type=1326 audit(1777727398.794:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.1.10262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffb9cdd9 code=0x7ffc0000 [ 1360.258614][ T440] bond1: (slave vcan1): making interface the new active one [ 1360.283875][ T440] vcan1: entered promiscuous mode [ 1360.297796][ T440] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1360.322036][ T29] audit: type=1326 audit(1777727398.824:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.1.10262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffb9cdd9 code=0x7ffc0000 [ 1360.392153][ T447] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10263'. [ 1360.484107][ T29] audit: type=1326 audit(1777727398.824:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.1.10262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffb9cdd9 code=0x7ffc0000 [ 1360.633114][ T29] audit: type=1326 audit(1777727398.874:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.1.10262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3ffb9cdd9 code=0x7ffc0000 [ 1360.677512][ T454] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10265'. [ 1360.721042][ T29] audit: type=1326 audit(1777727398.894:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.1.10262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffb9cdd9 code=0x7ffc0000 [ 1360.759304][ T29] audit: type=1326 audit(1777727398.894:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.1.10262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffb9cdd9 code=0x7ffc0000 [ 1360.835189][ T29] audit: type=1326 audit(1777727398.894:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.1.10262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffb9cdd9 code=0x7ffc0000 [ 1360.941609][ T29] audit: type=1326 audit(1777727398.904:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.1.10262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffb9cdd9 code=0x7ffc0000 [ 1360.989674][ T458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.998229][ T29] audit: type=1326 audit(1777727398.904:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.1.10262" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3ffb9cdd9 code=0x7ffc0000 [ 1361.040145][ T458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.402409][T11629] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1361.454346][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.485441][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.644003][T11629] usb 2-1: Using ep0 maxpacket: 32 [ 1361.661493][T11629] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1361.693508][T11629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.717953][ T469] random: crng reseeded on system resumption [ 1361.737560][ T807] usb 5-1: USB disconnect, device number 40 [ 1361.753583][T11629] usb 2-1: config 0 descriptor?? [ 1361.801261][ T470] FAULT_INJECTION: forcing a failure. [ 1361.801261][ T470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.828478][T11629] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1361.850067][ T470] CPU: 1 UID: 0 PID: 470 Comm: syz.5.10271 Tainted: G L syzkaller #0 PREEMPT(full) [ 1361.850097][ T470] Tainted: [L]=SOFTLOCKUP [ 1361.850104][ T470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1361.850121][ T470] Call Trace: [ 1361.850129][ T470] [ 1361.850136][ T470] dump_stack_lvl+0xe8/0x150 [ 1361.850161][ T470] should_fail_ex+0x412/0x560 [ 1361.850187][ T470] _copy_to_user+0x31/0xb0 [ 1361.850212][ T470] simple_read_from_buffer+0xe1/0x170 [ 1361.850237][ T470] proc_fail_nth_read+0x1bb/0x230 [ 1361.850261][ T470] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1361.850284][ T470] ? rw_verify_area+0x2a6/0x4d0 [ 1361.850305][ T470] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1361.850327][ T470] vfs_read+0x20c/0xa70 [ 1361.850353][ T470] ? __pfx___mutex_lock+0x10/0x10 [ 1361.850375][ T470] ? __pfx_vfs_read+0x10/0x10 [ 1361.850398][ T470] ? __fget_files+0x2a/0x420 [ 1361.850421][ T470] ? __fget_files+0x3a0/0x420 [ 1361.850437][ T470] ? __fget_files+0x2a/0x420 [ 1361.850463][ T470] ksys_read+0x150/0x270 [ 1361.850486][ T470] ? __pfx_ksys_read+0x10/0x10 [ 1361.850516][ T470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.850534][ T470] do_syscall_64+0x15f/0xf80 [ 1361.850552][ T470] ? trace_irq_disable+0x3b/0x140 [ 1361.850575][ T470] ? clear_bhb_loop+0x40/0x90 [ 1361.850595][ T470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.850612][ T470] RIP: 0033:0x7f5c87f5d60e [ 1361.850629][ T470] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1361.850642][ T470] RSP: 002b:00007f5c88da0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1361.850660][ T470] RAX: ffffffffffffffda RBX: 00007f5c88da16c0 RCX: 00007f5c87f5d60e [ 1361.850672][ T470] RDX: 000000000000000f RSI: 00007f5c88da10a0 RDI: 0000000000000004 [ 1361.850682][ T470] RBP: 00007f5c88da1090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.850692][ T470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.850702][ T470] R13: 00007f5c88216128 R14: 00007f5c88216090 R15: 00007f5c8833fa48 [ 1361.850730][ T470] [ 1361.888065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 1364.769041][T11629] gspca_sunplus: reg_w_riv err -110 [ 1364.830395][T11629] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1365.079117][ T10] usb 2-1: USB disconnect, device number 28 [ 1365.254713][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1365.254729][ T29] audit: type=1800 audit(1777727404.034:1377): pid=479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10275" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 1365.467268][ T487] FAULT_INJECTION: forcing a failure. [ 1365.467268][ T487] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.547134][ T487] CPU: 1 UID: 0 PID: 487 Comm: syz.2.10279 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.547162][ T487] Tainted: [L]=SOFTLOCKUP [ 1365.547169][ T487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1365.547179][ T487] Call Trace: [ 1365.547187][ T487] [ 1365.547194][ T487] dump_stack_lvl+0xe8/0x150 [ 1365.547220][ T487] should_fail_ex+0x412/0x560 [ 1365.547249][ T487] should_failslab+0xa8/0x100 [ 1365.547275][ T487] __kmalloc_noprof+0xe8/0x760 [ 1365.547298][ T487] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1365.547326][ T487] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1365.547348][ T487] ? tomoyo_domain+0xd7/0x130 [ 1365.547374][ T487] ? tomoyo_path_number_perm+0x219/0x630 [ 1365.547392][ T487] tomoyo_path_number_perm+0x246/0x630 [ 1365.547414][ T487] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1365.547431][ T487] ? __lock_acquire+0x6b5/0x2cf0 [ 1365.547464][ T487] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1365.547505][ T487] ? __fget_files+0x2a/0x420 [ 1365.547526][ T487] ? __fget_files+0x2a/0x420 [ 1365.547544][ T487] ? __fget_files+0x3a0/0x420 [ 1365.547561][ T487] ? __fget_files+0x2a/0x420 [ 1365.547584][ T487] security_file_ioctl+0xc3/0x2a0 [ 1365.547603][ T487] __se_sys_ioctl+0x47/0x170 [ 1365.547624][ T487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.547641][ T487] do_syscall_64+0x15f/0xf80 [ 1365.547660][ T487] ? trace_irq_disable+0x3b/0x140 [ 1365.547683][ T487] ? clear_bhb_loop+0x40/0x90 [ 1365.547704][ T487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.547720][ T487] RIP: 0033:0x7f2451f9cdd9 [ 1365.547736][ T487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1365.547750][ T487] RSP: 002b:00007f2452d84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1365.547775][ T487] RAX: ffffffffffffffda RBX: 00007f2452215fa0 RCX: 00007f2451f9cdd9 [ 1365.547787][ T487] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000004 [ 1365.547797][ T487] RBP: 00007f2452d84090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.547807][ T487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.547817][ T487] R13: 00007f2452216038 R14: 00007f2452215fa0 R15: 00007f245233fa48 [ 1365.547845][ T487] [ 1365.549327][ T487] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1365.911004][ T493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.929645][ T493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.142348][ T807] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1366.304079][ T807] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1366.316762][ T807] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1366.337339][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.357152][ T807] usb 5-1: Product: syz [ 1366.368192][ T497] FAULT_INJECTION: forcing a failure. [ 1366.368192][ T497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.405589][ T497] CPU: 0 UID: 0 PID: 497 Comm: syz.2.10284 Tainted: G L syzkaller #0 PREEMPT(full) [ 1366.405608][ T497] Tainted: [L]=SOFTLOCKUP [ 1366.405612][ T497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1366.405620][ T497] Call Trace: [ 1366.405630][ T497] [ 1366.405636][ T497] dump_stack_lvl+0xe8/0x150 [ 1366.405652][ T497] should_fail_ex+0x412/0x560 [ 1366.405668][ T497] _copy_from_user+0x2d/0xb0 [ 1366.405682][ T497] core_sys_select+0x578/0xc30 [ 1366.405701][ T497] ? __pfx_core_sys_select+0x10/0x10 [ 1366.405722][ T497] ? __pfx_set_user_sigmask+0x10/0x10 [ 1366.405737][ T497] __se_sys_pselect6+0x267/0x320 [ 1366.405750][ T497] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1366.405760][ T497] ? __pfx_ksys_write+0x10/0x10 [ 1366.405776][ T497] ? __x64_sys_pselect6+0x21/0xf0 [ 1366.405786][ T497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.405796][ T497] do_syscall_64+0x15f/0xf80 [ 1366.405809][ T497] ? trace_irq_disable+0x3b/0x140 [ 1366.405823][ T497] ? clear_bhb_loop+0x40/0x90 [ 1366.405834][ T497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.405844][ T497] RIP: 0033:0x7f2451f9cdd9 [ 1366.405854][ T497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.405862][ T497] RSP: 002b:00007f2452d84028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1366.405873][ T497] RAX: ffffffffffffffda RBX: 00007f2452215fa0 RCX: 00007f2451f9cdd9 [ 1366.405879][ T497] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000040 [ 1366.405886][ T497] RBP: 00007f2452d84090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.405891][ T497] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 1366.405897][ T497] R13: 00007f2452216038 R14: 00007f2452215fa0 R15: 00007f245233fa48 [ 1366.405912][ T497] [ 1366.821030][ T807] usb 5-1: Manufacturer: syz [ 1366.839024][ T807] usb 5-1: SerialNumber: syz [ 1366.852078][ T807] usb 5-1: config 0 descriptor?? [ 1367.819562][ T515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.836697][ T807] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1367.846539][ T515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.002268][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 1368.012135][ T807] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1368.021771][ T807] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1368.032154][ T807] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1368.042638][ T807] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1368.056385][ T807] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1368.079640][ T807] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1368.107543][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.353480][ T807] usb 3-1: usb_control_msg returned -32 [ 1368.370360][ T807] usbtmc 3-1:16.0: can't read capabilities [ 1368.822457][ T807] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1368.913971][T11629] usb 5-1: USB disconnect, device number 41 [ 1369.011744][ T807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.062271][ T807] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1369.091682][ T539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10297'. [ 1369.113652][ T807] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1369.138629][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.157983][ T807] usb 2-1: Product: syz [ 1369.168156][ T807] usb 2-1: Manufacturer: syz [ 1369.174493][ T539] bond3: option ad_actor_sys_prio: invalid value (0) [ 1369.181441][ T807] usb 2-1: SerialNumber: syz [ 1369.188017][ T539] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1369.197407][ T807] usb 2-1: config 0 descriptor?? [ 1369.242865][ T539] bond3 (unregistering): Released all slaves [ 1369.254213][ T543] netlink: 91 bytes leftover after parsing attributes in process `syz.4.10297'. [ 1369.556172][ T550] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.10301'. [ 1369.873330][ T561] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10306'. [ 1369.895842][ T561] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10306'. [ 1369.952504][T11629] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1380.802077][ T5717] usb 3-1: USB disconnect, device number 21 [ 1381.023627][T32172] usb 2-1: USB disconnect, device number 29 [ 1381.307981][ T3271] bridge_slave_1: left allmulticast mode [ 1381.405790][ T3271] bridge_slave_1: left promiscuous mode [ 1381.449623][ T3271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.634204][ T3271] ¾x9ÿ: left allmulticast mode [ 1381.674437][ T569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.690337][ T3271] ¾x9ÿ: left promiscuous mode [ 1381.759856][ T3271] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1381.851014][ T569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.488399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 1383.230936][ T3271] gretap0 (unregistering): left promiscuous mode [ 1383.554367][ T3271] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1383.566406][ T3271] bridge1 (unregistering): left promiscuous mode [ 1383.573390][ T3271] bridge1 (unregistering): left allmulticast mode [ 1383.645616][ T3271] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1383.657071][ T3271] bridge2 (unregistering): left promiscuous mode [ 1383.663733][ T3271] bridge2 (unregistering): left allmulticast mode [ 1383.726805][ T3271] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1383.735631][ T3271] bridge3 (unregistering): left promiscuous mode [ 1383.744050][ T3271] bridge3 (unregistering): left allmulticast mode [ 1383.787984][ T595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10316'. [ 1383.812093][ T3271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.829072][ T3271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.847286][ T3271] bond0 (unregistering): Released all slaves [ 1383.865916][ T3271] bond1 (unregistering): Released all slaves [ 1383.894435][ T3271] bond2 (unregistering): Released all slaves [ 1383.917970][ T3271] bond3 (unregistering): Released all slaves [ 1383.952467][ T3271] bond4 (unregistering): Released all slaves [ 1384.474047][ T3271] tipc: Left network mode [ 1384.542334][T11628] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1384.732317][T11628] usb 3-1: Using ep0 maxpacket: 8 [ 1384.799648][ T610] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 1384.813062][T11628] usb 3-1: config 242 has an invalid interface number: 209 but max is 0 [ 1384.844334][ T610] CIFS: VFS: Malformed UNC in devname [ 1384.867378][T11628] usb 3-1: config 242 has no interface number 0 [ 1384.892001][T11628] usb 3-1: config 242 interface 209 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1385.028967][T11628] usb 3-1: config 242 interface 209 altsetting 9 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1385.212716][T11628] usb 3-1: config 242 interface 209 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 1385.301716][T11628] usb 3-1: config 242 interface 209 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1385.381144][ T3271] veth1_to_team: left promiscuous mode [ 1385.411164][T11628] usb 3-1: config 242 interface 209 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 1385.499597][T11628] usb 3-1: config 242 interface 209 has no altsetting 0 [ 1385.507886][ T5717] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1385.538485][T11628] usb 3-1: New USB device found, idVendor=13d3, idProduct=3349, bcdDevice=17.0d [ 1385.597657][T11628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.624440][ T617] FAULT_INJECTION: forcing a failure. [ 1385.624440][ T617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1385.650058][ T3271] hsr_slave_0: left promiscuous mode [ 1385.695180][T11628] usb 3-1: Product: syz [ 1385.708996][ T3271] hsr_slave_1: left promiscuous mode [ 1385.757244][T11628] usb 3-1: Manufacturer: syz [ 1385.769795][ T617] CPU: 0 UID: 0 PID: 617 Comm: syz.5.10323 Tainted: G L syzkaller #0 PREEMPT(full) [ 1385.769813][ T617] Tainted: [L]=SOFTLOCKUP [ 1385.769816][ T617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1385.769823][ T617] Call Trace: [ 1385.769827][ T617] [ 1385.769832][ T617] dump_stack_lvl+0xe8/0x150 [ 1385.769850][ T617] should_fail_ex+0x412/0x560 [ 1385.769865][ T617] _copy_from_user+0x2d/0xb0 [ 1385.769880][ T617] tipc_setsockopt+0x49c/0x990 [ 1385.769897][ T617] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1385.769908][ T617] ? __fget_files+0x2a/0x420 [ 1385.769918][ T617] ? aa_sock_opt_perm+0xff/0x1a0 [ 1385.769932][ T617] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1385.769945][ T617] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1385.769963][ T617] do_sock_setsockopt+0x17c/0x1b0 [ 1385.769986][ T617] __x64_sys_setsockopt+0x13d/0x1b0 [ 1385.769999][ T617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.770009][ T617] do_syscall_64+0x15f/0xf80 [ 1385.770021][ T617] ? trace_irq_disable+0x3b/0x140 [ 1385.770035][ T617] ? clear_bhb_loop+0x40/0x90 [ 1385.770046][ T617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.770056][ T617] RIP: 0033:0x7f5c87f9cdd9 [ 1385.770066][ T617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1385.770075][ T617] RSP: 002b:00007f5c88dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1385.770086][ T617] RAX: ffffffffffffffda RBX: 00007f5c88215fa0 RCX: 00007f5c87f9cdd9 [ 1385.770093][ T617] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 1385.770099][ T617] RBP: 00007f5c88dc2090 R08: 0000000000000010 R09: 0000000000000000 [ 1385.770104][ T617] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1385.770110][ T617] R13: 00007f5c88216038 R14: 00007f5c88215fa0 R15: 00007f5c8833fa48 [ 1385.770125][ T617] [ 1386.567741][T11628] usb 3-1: SerialNumber: syz [ 1386.918010][ T5717] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1386.933795][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.962967][ T5717] usb 2-1: Product: syz [ 1386.979491][ T5717] usb 2-1: Manufacturer: syz [ 1387.008481][ T5717] usb 2-1: SerialNumber: syz [ 1387.191192][T11628] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1387.217462][ T5717] usb 2-1: config 0 descriptor?? [ 1387.553508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 1387.577765][ T5717] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1387.764990][T11628] usb 3-1: USB disconnect, device number 22 [ 1387.908488][ T5717] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1388.239004][ T628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.423152][ T628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.809760][ T634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10326'. [ 1389.142135][T27853] Bluetooth: hci5: command 0x0406 tx timeout [ 1389.432161][ T807] usb 2-1: USB disconnect, device number 30 [ 1390.164368][ T640] kvm: user requested TSC rate below hardware speed [ 1390.314674][ T640] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 1390.367620][ T640] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1390.646543][ T3271] team0 (unregistering): Port device team_slave_1 removed [ 1390.677537][ T3271] team0 (unregistering): Port device team_slave_0 removed [ 1391.606360][ T660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.634926][ T660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.687623][ T660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.805780][ T660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.035143][ T3271] IPVS: stop unused estimator thread 0... [ 1392.243549][T32172] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1392.408074][ T667] netlink: 180 bytes leftover after parsing attributes in process `syz.5.10336'. [ 1392.419114][T32172] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1392.443873][T32172] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1392.472316][T32172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.501374][T32172] usb 2-1: Product: syz [ 1392.524643][T32172] usb 2-1: Manufacturer: syz [ 1392.541785][T32172] usb 2-1: SerialNumber: syz [ 1392.570937][T32172] usb 2-1: config 0 descriptor?? [ 1392.627245][ T671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.689386][ T671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.832375][T32172] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1393.044043][T32172] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1393.053399][T32172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.061661][T32172] usb 3-1: Product: syz [ 1393.066612][T32172] usb 3-1: Manufacturer: syz [ 1393.071242][T32172] usb 3-1: SerialNumber: syz [ 1393.081655][T32172] usb 3-1: config 0 descriptor?? [ 1393.357907][T32172] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1393.373771][ T674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.387778][ T674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.478438][ T674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10339'. [ 1393.499756][ T674] netlink: 'syz.5.10339': attribute type 30 has an invalid length. [ 1393.518185][ T674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10339'. [ 1394.401085][T32172] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1395.066427][T32172] usb 2-1: USB disconnect, device number 31 [ 1395.588689][ T692] syzkaller1: entered promiscuous mode [ 1395.618463][ T692] syzkaller1: entered allmulticast mode [ 1395.655762][T11629] usb 3-1: USB disconnect, device number 23 [ 1406.174070][ T700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10346'. [ 1406.479050][ T709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.507444][ T709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.531193][ T709] netlink: 'syz.5.10350': attribute type 13 has an invalid length. [ 1406.550464][ T709] netlink: 'syz.5.10350': attribute type 5 has an invalid length. [ 1406.671219][T27853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1406.708033][T27853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1406.727879][T27853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1406.768138][T27853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1406.849004][T27853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1406.918283][ T719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10352'. [ 1407.288769][ T5717] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1407.924910][ T729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.960497][ T729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.961302][ T5717] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1408.007578][ T732] FAULT_INJECTION: forcing a failure. [ 1408.007578][ T732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1408.015644][ T5717] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1408.043309][ T732] CPU: 1 UID: 0 PID: 732 Comm: syz.0.10355 Tainted: G L syzkaller #0 PREEMPT(full) [ 1408.043337][ T732] Tainted: [L]=SOFTLOCKUP [ 1408.043343][ T732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1408.043353][ T732] Call Trace: [ 1408.043361][ T732] [ 1408.043368][ T732] dump_stack_lvl+0xe8/0x150 [ 1408.043393][ T732] should_fail_ex+0x412/0x560 [ 1408.043418][ T732] _copy_from_user+0x2d/0xb0 [ 1408.043442][ T732] ___sys_sendmsg+0x1c6/0x360 [ 1408.043464][ T732] ? __lock_acquire+0x6b5/0x2cf0 [ 1408.043486][ T732] ? __pfx____sys_sendmsg+0x10/0x10 [ 1408.043539][ T732] ? __fget_files+0x2a/0x420 [ 1408.043557][ T732] ? __fget_files+0x3a0/0x420 [ 1408.043585][ T732] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1408.043609][ T732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1408.043638][ T732] ? __pfx_ksys_write+0x10/0x10 [ 1408.043678][ T732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.043695][ T732] do_syscall_64+0x15f/0xf80 [ 1408.043715][ T732] ? trace_irq_disable+0x3b/0x140 [ 1408.043738][ T732] ? clear_bhb_loop+0x40/0x90 [ 1408.043757][ T732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.043773][ T732] RIP: 0033:0x7f8058f9cdd9 [ 1408.043789][ T732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.043802][ T732] RSP: 002b:00007f8059df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1408.043820][ T732] RAX: ffffffffffffffda RBX: 00007f8059215fa0 RCX: 00007f8058f9cdd9 [ 1408.043832][ T732] RDX: 0000000000000098 RSI: 0000200000000600 RDI: 0000000000000003 [ 1408.043842][ T732] RBP: 00007f8059df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.043853][ T732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1408.043862][ T732] R13: 00007f8059216038 R14: 00007f8059215fa0 R15: 00007f805933fa48 [ 1408.043890][ T732] [ 1408.972423][ T5630] Bluetooth: hci4: command tx timeout [ 1409.066449][ T5717] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1409.067442][ T736] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10357'. [ 1409.188844][ T741] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1409.247664][ T741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.280083][ T741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.445568][ T5717] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1409.459827][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1409.474584][ T5717] usb 2-1: Product: syz [ 1409.478762][ T5717] usb 2-1: Manufacturer: syz [ 1409.506345][ T5717] usb 2-1: SerialNumber: syz [ 1409.552493][T32172] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1409.594897][ T5717] usb 2-1: config 0 descriptor?? [ 1409.718261][T32172] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.739607][T32172] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1409.769481][T32172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1409.840549][T32172] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1409.880827][T32172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.906915][ T720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.928590][T32172] usb 3-1: Product: syz [ 1409.939394][ T720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.947104][T32172] usb 3-1: Manufacturer: syz [ 1409.955843][T32172] usb 3-1: SerialNumber: syz [ 1409.960984][ T720] bridge_slave_0: entered allmulticast mode [ 1409.984018][ T720] bridge_slave_0: entered promiscuous mode [ 1409.994315][ T720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.005315][ T720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.013710][ T720] bridge_slave_1: entered allmulticast mode [ 1410.021432][ T720] bridge_slave_1: entered promiscuous mode [ 1410.244600][ T720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.351225][ T755] xfrm1: entered allmulticast mode [ 1410.431368][ T720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1411.116484][ T5630] Bluetooth: hci4: command tx timeout [ 1411.124663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 1411.739340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 1411.753477][ T720] team0: Port device team_slave_0 added [ 1411.836067][ T720] team0: Port device team_slave_1 added [ 1412.046891][ T720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.116531][ T720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.225906][ T720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.331948][ T720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.379565][ T720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.389943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 1412.484458][ T720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.122084][ T776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.133877][ T5630] Bluetooth: hci4: command tx timeout [ 1413.414684][ T776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.438973][ T720] hsr_slave_0: entered promiscuous mode [ 1413.496078][ T720] hsr_slave_1: entered promiscuous mode [ 1413.568188][ T720] debugfs: 'hsr0' already exists in 'hsr' [ 1413.602304][ T720] Cannot create hsr debugfs directory [ 1414.224925][ T781] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10367'. [ 1414.978892][ T720] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1415.212373][ T5630] Bluetooth: hci4: command tx timeout [ 1415.358966][ T788] FAULT_INJECTION: forcing a failure. [ 1415.358966][ T788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1415.385764][ T720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1415.403871][ T720] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1415.418054][ T788] CPU: 1 UID: 0 PID: 788 Comm: syz.1.10369 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.418080][ T788] Tainted: [L]=SOFTLOCKUP [ 1415.418086][ T788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1415.418096][ T788] Call Trace: [ 1415.418104][ T788] [ 1415.418112][ T788] dump_stack_lvl+0xe8/0x150 [ 1415.418136][ T788] should_fail_ex+0x412/0x560 [ 1415.418162][ T788] _copy_from_user+0x2d/0xb0 [ 1415.418185][ T788] do_sock_getsockopt+0x200/0x7e0 [ 1415.418212][ T788] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1415.418247][ T788] ? __fget_files+0x3a0/0x420 [ 1415.418266][ T788] ? __fget_files+0x2a/0x420 [ 1415.418290][ T788] __x64_sys_getsockopt+0x1a4/0x240 [ 1415.418315][ T788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.418332][ T788] do_syscall_64+0x15f/0xf80 [ 1415.418352][ T788] ? trace_irq_disable+0x3b/0x140 [ 1415.418374][ T788] ? clear_bhb_loop+0x40/0x90 [ 1415.418394][ T788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.418410][ T788] RIP: 0033:0x7fa3ffb9cdd9 [ 1415.418426][ T788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.418439][ T788] RSP: 002b:00007fa4009c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1415.418457][ T788] RAX: ffffffffffffffda RBX: 00007fa3ffe16090 RCX: 00007fa3ffb9cdd9 [ 1415.418469][ T788] RDX: 000000000000000b RSI: 0000000000000006 RDI: 0000000000000003 [ 1415.418478][ T788] RBP: 00007fa4009c6090 R08: 0000200000000280 R09: 0000000000000000 [ 1415.418488][ T788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1415.418497][ T788] R13: 00007fa3ffe16128 R14: 00007fa3ffe16090 R15: 00007fa3fff3fa48 [ 1415.418524][ T788] [ 1415.719466][ T720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1415.727686][ T720] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1416.001033][ T798] FAULT_INJECTION: forcing a failure. [ 1416.001033][ T798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1416.018627][ T798] CPU: 1 UID: 0 PID: 798 Comm: syz.5.10372 Tainted: G L syzkaller #0 PREEMPT(full) [ 1416.018653][ T798] Tainted: [L]=SOFTLOCKUP [ 1416.018660][ T798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1416.018669][ T798] Call Trace: [ 1416.018676][ T798] [ 1416.018683][ T798] dump_stack_lvl+0xe8/0x150 [ 1416.018708][ T798] should_fail_ex+0x412/0x560 [ 1416.018734][ T798] _copy_to_user+0x31/0xb0 [ 1416.018759][ T798] simple_read_from_buffer+0xe1/0x170 [ 1416.018783][ T798] proc_fail_nth_read+0x1bb/0x230 [ 1416.018818][ T798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1416.018841][ T798] ? rw_verify_area+0x2a6/0x4d0 [ 1416.018866][ T798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1416.018887][ T798] vfs_read+0x20c/0xa70 [ 1416.018913][ T798] ? __pfx___mutex_lock+0x10/0x10 [ 1416.018936][ T798] ? __pfx_vfs_read+0x10/0x10 [ 1416.018958][ T798] ? __fget_files+0x2a/0x420 [ 1416.018981][ T798] ? __fget_files+0x3a0/0x420 [ 1416.018998][ T798] ? __fget_files+0x2a/0x420 [ 1416.019024][ T798] ksys_read+0x150/0x270 [ 1416.019048][ T798] ? __pfx_ksys_read+0x10/0x10 [ 1416.019078][ T798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.019096][ T798] do_syscall_64+0x15f/0xf80 [ 1416.019115][ T798] ? trace_irq_disable+0x3b/0x140 [ 1416.019137][ T798] ? clear_bhb_loop+0x40/0x90 [ 1416.019157][ T798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.019172][ T798] RIP: 0033:0x7f5c87f5d60e [ 1416.019188][ T798] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1416.019202][ T798] RSP: 002b:00007f5c88da0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1416.019220][ T798] RAX: ffffffffffffffda RBX: 00007f5c88da16c0 RCX: 00007f5c87f5d60e [ 1416.019232][ T798] RDX: 000000000000000f RSI: 00007f5c88da10a0 RDI: 0000000000000004 [ 1416.019241][ T798] RBP: 00007f5c88da1090 R08: 0000000000000000 R09: 0000000000000000 [ 1416.019251][ T798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1416.019261][ T798] R13: 00007f5c88216128 R14: 00007f5c88216090 R15: 00007f5c8833fa48 [ 1416.019289][ T798] [ 1416.380757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1419.495593][ T720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1419.644466][ T720] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1419.681855][ T720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1420.114668][ T720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.198763][ T720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1420.212064][ T827] netlink: 'syz.2.10379': attribute type 15 has an invalid length. [ 1420.240685][ T827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10379'. [ 1420.410199][ T832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.425007][ T832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.559538][ T3271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.566773][ T3271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1420.913161][T31479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.920362][T31479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.221493][ T720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1421.350890][ T720] veth0_vlan: entered promiscuous mode [ 1421.376514][ T841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10383'. [ 1421.387166][ T720] veth1_vlan: entered promiscuous mode [ 1422.913852][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.920270][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.502490][ T845] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10384'. [ 1424.603631][ T720] veth0_macvtap: entered promiscuous mode [ 1424.685897][ T860] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 1424.700632][ T720] veth1_macvtap: entered promiscuous mode [ 1426.351446][ T720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1426.548121][ T720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1426.898652][ T870] netlink: 'syz.5.10389': attribute type 4 has an invalid length. [ 1426.972879][ T871] netlink: 'syz.5.10389': attribute type 4 has an invalid length. [ 1427.053900][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.098066][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.150363][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.182280][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.375845][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.388124][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.436214][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.444759][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.706606][ T894] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10394'. [ 1428.613406][ T5680] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1428.824391][ T5680] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.834940][ T5680] usb 7-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1428.844134][ T5680] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.860692][ T5680] usb 7-1: config 0 descriptor?? [ 1428.882511][ T5680] dvb-usb: found a 'TeVii S662' in warm state. [ 1428.891972][ T5680] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1428.898652][ T5680] dvb-usb: bulk message failed: -22 (2/0) [ 1428.919455][ T5680] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1428.938952][ T5680] dvb-usb: TeVii S662 error while loading driver (-19) [ 1429.081710][ T5680] usb 7-1: USB disconnect, device number 2 [ 1429.221149][ T909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.266726][ T909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.383166][ T5630] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 1429.952406][ T5680] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1430.117958][ T5680] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1430.126998][ T5680] usb 7-1: config 13 has an invalid interface number: 147 but max is 0 [ 1430.135507][ T5680] usb 7-1: config 13 has no interface number 0 [ 1430.141801][ T5680] usb 7-1: config 13 interface 147 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1430.153051][ T5680] usb 7-1: config 13 interface 147 altsetting 2 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 1430.166560][ T5680] usb 7-1: config 13 interface 147 altsetting 2 endpoint 0x85 has invalid maxpacket 19262, setting to 64 [ 1430.182694][ T5680] usb 7-1: config 13 interface 147 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1430.194286][ T5680] usb 7-1: config 13 interface 147 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 8 [ 1430.204554][ T5680] usb 7-1: config 13 interface 147 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1430.217839][ T5680] usb 7-1: config 13 interface 147 has no altsetting 0 [ 1430.231186][ T5680] usb 7-1: New USB device found, idVendor=093b, idProduct=a003, bcdDevice=ee.49 [ 1430.241210][ T5680] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.253613][ T5680] usb 7-1: Product: syz [ 1430.257836][ T5680] usb 7-1: Manufacturer: syz [ 1430.262694][ T5680] usb 7-1: SerialNumber: syz [ 1430.274829][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.284410][ T918] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 1430.378923][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.432693][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.513239][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.535743][ T5680] usb 7-1: USB disconnect, device number 3 [ 1431.822514][ T48] bond0 (unregistering): Released all slaves [ 1431.863269][ T48] bond1 (unregistering): Released all slaves [ 1431.923779][ T48] bond2 (unregistering): Released all slaves [ 1432.074159][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1432.612271][ T807] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1432.648512][ T979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.668317][ T979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.782847][ T807] usb 7-1: device descriptor read/64, error -71 [ 1433.042780][ T807] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1433.082891][ T48] hsr_slave_0: left promiscuous mode [ 1433.100720][ T48] hsr_slave_1: left promiscuous mode [ 1433.113724][ T48] veth1_macvtap: left promiscuous mode [ 1433.122571][ T48] veth0_macvtap: left promiscuous mode [ 1433.128198][ T48] veth1_vlan: left promiscuous mode [ 1433.138675][ T48] veth0_vlan: left promiscuous mode [ 1433.212300][ T807] usb 7-1: device descriptor read/64, error -71 [ 1433.337575][ T807] usb usb7-port1: attempt power cycle [ 1433.479238][ T1000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.488492][ T1000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.498657][ T1000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.507696][ T1000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.663476][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1433.702505][ T807] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1433.746429][ T807] usb 7-1: device descriptor read/8, error -71 [ 1433.931891][ T48] IPVS: stop unused estimator thread 0... [ 1434.003441][ T807] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1434.025961][ T807] usb 7-1: device descriptor read/8, error -71 [ 1434.107061][ T1016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.119207][ T1016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.140014][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1434.149160][ T807] usb usb7-port1: unable to enumerate USB device [ 1434.467011][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1434.887297][ T1046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.896085][ T1046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.455935][ T1054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.464898][ T1054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.565958][ T1055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10420'. [ 1435.620851][ T1054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.636461][ T1054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.012473][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1436.023051][ T1072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10423'. [ 1436.189535][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1436.209016][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.223741][ T9] usb 7-1: Product: syz [ 1436.228014][ T9] usb 7-1: Manufacturer: syz [ 1436.234547][ T9] usb 7-1: SerialNumber: syz [ 1436.247157][ T1077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.258335][ T9] usb 7-1: config 0 descriptor?? [ 1436.277729][ T1077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.480872][ T9] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1436.827994][ T1083] tipc: Started in network mode [ 1436.834153][ T1083] tipc: Node identity 6e9be10e44bb, cluster identity 4711 [ 1436.841600][ T1083] tipc: Enabled bearer , priority 0 [ 1436.850960][ T1083] syzkaller0: entered promiscuous mode [ 1436.858585][ T1083] syzkaller0: entered allmulticast mode [ 1436.919232][ T1082] tipc: Resetting bearer [ 1436.947444][ T1082] tipc: Disabling bearer [ 1437.036620][ T1092] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1437.096096][ T1094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.106119][ T1094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.277759][ T1103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10432'. [ 1437.765782][ T1105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.774905][ T1105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.860131][ T1105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10434'. [ 1437.893999][ T1105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.903001][ T1105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.120372][ T5630] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 1438.449514][ T1119] FAULT_INJECTION: forcing a failure. [ 1438.449514][ T1119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1438.463046][ T1119] CPU: 1 UID: 0 PID: 1119 Comm: syz.5.10439 Tainted: G L syzkaller #0 PREEMPT(full) [ 1438.463068][ T1119] Tainted: [L]=SOFTLOCKUP [ 1438.463072][ T1119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1438.463078][ T1119] Call Trace: [ 1438.463082][ T1119] [ 1438.463087][ T1119] dump_stack_lvl+0xe8/0x150 [ 1438.463102][ T1119] should_fail_ex+0x412/0x560 [ 1438.463119][ T1119] _copy_from_user+0x2d/0xb0 [ 1438.463141][ T1119] ___sys_sendmsg+0x1c6/0x360 [ 1438.463162][ T1119] ? __lock_acquire+0x6b5/0x2cf0 [ 1438.463184][ T1119] ? __pfx____sys_sendmsg+0x10/0x10 [ 1438.463226][ T1119] ? __fget_files+0x2a/0x420 [ 1438.463237][ T1119] ? __fget_files+0x3a0/0x420 [ 1438.463255][ T1119] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1438.463269][ T1119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1438.463295][ T1119] ? __pfx_ksys_write+0x10/0x10 [ 1438.463334][ T1119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.463351][ T1119] do_syscall_64+0x15f/0xf80 [ 1438.463368][ T1119] ? trace_irq_disable+0x3b/0x140 [ 1438.463382][ T1119] ? clear_bhb_loop+0x40/0x90 [ 1438.463394][ T1119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.463403][ T1119] RIP: 0033:0x7f5c87f9cdd9 [ 1438.463413][ T1119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1438.463422][ T1119] RSP: 002b:00007f5c88dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1438.463439][ T1119] RAX: ffffffffffffffda RBX: 00007f5c88215fa0 RCX: 00007f5c87f9cdd9 [ 1438.463451][ T1119] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1438.463462][ T1119] RBP: 00007f5c88dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.463472][ T1119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.463482][ T1119] R13: 00007f5c88216038 R14: 00007f5c88215fa0 R15: 00007f5c8833fa48 [ 1438.463509][ T1119] [ 1439.290884][ T9] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1439.304369][ T9] usb 7-1: USB disconnect, device number 8 [ 1440.262252][ T807] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1440.423877][ T807] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.434219][ T807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1440.443957][ T807] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1440.462368][ T807] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1440.471492][ T807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.479596][ T807] usb 7-1: Product: syz [ 1440.483849][ T807] usb 7-1: Manufacturer: syz [ 1440.488442][ T807] usb 7-1: SerialNumber: syz [ 1440.496531][ T807] usb 7-1: config 0 descriptor?? [ 1440.789068][ T1142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.798099][ T1142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.812119][ T9] usb 7-1: USB disconnect, device number 9 [ 1441.299514][ T1153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10451'. [ 1441.318362][ T1153] ip6gretap0: entered promiscuous mode [ 1441.330697][ T1153] macvtap1: entered promiscuous mode [ 1441.337629][ T1153] macvtap1: entered allmulticast mode [ 1441.343296][ T1153] ip6gretap0: entered allmulticast mode [ 1441.394634][ T1155] syzkaller0: entered promiscuous mode [ 1441.400141][ T1155] syzkaller0: entered allmulticast mode [ 1441.411187][ T13] syzkaller0: tun_net_xmit 70 [ 1441.423439][ T1155] syzkaller0: tun_net_xmit 14 [ 1441.469184][ T1157] syzkaller0: entered promiscuous mode [ 1441.475535][ T1157] syzkaller0: entered allmulticast mode [ 1441.484277][ T35] syzkaller0: tun_net_xmit 70 [ 1441.489764][ T1157] FAULT_INJECTION: forcing a failure. [ 1441.489764][ T1157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.503299][ T1157] CPU: 0 UID: 0 PID: 1157 Comm: syz.0.10453 Tainted: G L syzkaller #0 PREEMPT(full) [ 1441.503315][ T1157] Tainted: [L]=SOFTLOCKUP [ 1441.503319][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1441.503325][ T1157] Call Trace: [ 1441.503330][ T1157] [ 1441.503334][ T1157] dump_stack_lvl+0xe8/0x150 [ 1441.503350][ T1157] should_fail_ex+0x412/0x560 [ 1441.503365][ T1157] _copy_from_user+0x2d/0xb0 [ 1441.503387][ T1157] __sys_sendto+0x2b0/0x710 [ 1441.503412][ T1157] ? __pfx___sys_sendto+0x10/0x10 [ 1441.503428][ T1157] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1441.503455][ T1157] ? __fget_files+0x3a0/0x420 [ 1441.503471][ T1157] ? ksys_write+0x242/0x270 [ 1441.503486][ T1157] ? __pfx_ksys_write+0x10/0x10 [ 1441.503501][ T1157] __x64_sys_sendto+0xde/0x100 [ 1441.503512][ T1157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.503522][ T1157] do_syscall_64+0x15f/0xf80 [ 1441.503534][ T1157] ? trace_irq_disable+0x3b/0x140 [ 1441.503552][ T1157] ? clear_bhb_loop+0x40/0x90 [ 1441.503564][ T1157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.503573][ T1157] RIP: 0033:0x7f8058f9cdd9 [ 1441.503583][ T1157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.503591][ T1157] RSP: 002b:00007f8059df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1441.503602][ T1157] RAX: ffffffffffffffda RBX: 00007f8059215fa0 RCX: 00007f8058f9cdd9 [ 1441.503609][ T1157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1441.503615][ T1157] RBP: 00007f8059df6090 R08: 00002000000001c0 R09: 0000000000000014 [ 1441.503621][ T1157] R10: 0000000000050040 R11: 0000000000000246 R12: 0000000000000001 [ 1441.503627][ T1157] R13: 00007f8059216038 R14: 00007f8059215fa0 R15: 00007f805933fa48 [ 1441.503641][ T1157] [ 1441.830942][ T1161] netlink: 136 bytes leftover after parsing attributes in process `syz.0.10455'. [ 1441.841091][ T1161] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1442.393039][T11628] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1442.586843][T11628] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.600376][T11628] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1442.611371][T11628] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1442.627790][T11628] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1442.637060][T11628] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.645205][T11628] usb 7-1: Product: syz [ 1442.649632][T11628] usb 7-1: Manufacturer: syz [ 1442.659971][T11628] usb 7-1: SerialNumber: syz [ 1442.677919][T11628] usb 7-1: config 0 descriptor?? [ 1442.701480][ T1186] FAULT_INJECTION: forcing a failure. [ 1442.701480][ T1186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1442.724016][ T1186] CPU: 0 UID: 0 PID: 1186 Comm: syz.2.10464 Tainted: G L syzkaller #0 PREEMPT(full) [ 1442.724042][ T1186] Tainted: [L]=SOFTLOCKUP [ 1442.724048][ T1186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1442.724058][ T1186] Call Trace: [ 1442.724065][ T1186] [ 1442.724073][ T1186] dump_stack_lvl+0xe8/0x150 [ 1442.724098][ T1186] should_fail_ex+0x412/0x560 [ 1442.724130][ T1186] _copy_to_user+0x31/0xb0 [ 1442.724155][ T1186] simple_read_from_buffer+0xe1/0x170 [ 1442.724180][ T1186] proc_fail_nth_read+0x1bb/0x230 [ 1442.724203][ T1186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1442.724227][ T1186] ? rw_verify_area+0x2a6/0x4d0 [ 1442.724248][ T1186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1442.724269][ T1186] vfs_read+0x20c/0xa70 [ 1442.724300][ T1186] ? __pfx___mutex_lock+0x10/0x10 [ 1442.724322][ T1186] ? __pfx_vfs_read+0x10/0x10 [ 1442.724344][ T1186] ? __fget_files+0x2a/0x420 [ 1442.724368][ T1186] ? __fget_files+0x3a0/0x420 [ 1442.724385][ T1186] ? __fget_files+0x2a/0x420 [ 1442.724412][ T1186] ksys_read+0x150/0x270 [ 1442.724436][ T1186] ? __pfx_ksys_read+0x10/0x10 [ 1442.724466][ T1186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.724484][ T1186] do_syscall_64+0x15f/0xf80 [ 1442.724503][ T1186] ? trace_irq_disable+0x3b/0x140 [ 1442.724522][ T1186] ? clear_bhb_loop+0x40/0x90 [ 1442.724540][ T1186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.724554][ T1186] RIP: 0033:0x7f2451f5d60e [ 1442.724570][ T1186] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1442.724583][ T1186] RSP: 002b:00007f24501d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1442.724600][ T1186] RAX: ffffffffffffffda RBX: 00007f24501d56c0 RCX: 00007f2451f5d60e [ 1442.724611][ T1186] RDX: 000000000000000f RSI: 00007f24501d50a0 RDI: 000000000000000a [ 1442.724622][ T1186] RBP: 00007f24501d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.724632][ T1186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1442.724642][ T1186] R13: 00007f2452216218 R14: 00007f2452216180 R15: 00007f245233fa48 [ 1442.724669][ T1186] [ 1443.130737][ T1190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.140821][ T1190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.252477][T30091] usb 7-1: USB disconnect, device number 10 [ 1443.907577][ T1209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.931049][ T1209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.322261][ T807] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1444.554159][ T807] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1444.566177][ T1226] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10477'. [ 1444.594810][ T807] usb 7-1: config 0 has no interface number 0 [ 1444.617751][ T807] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1444.641238][ T807] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1444.668654][ T807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.695771][ T807] usb 7-1: Product: syz [ 1444.709965][ T807] usb 7-1: Manufacturer: syz [ 1444.732816][ T807] usb 7-1: SerialNumber: syz [ 1444.757471][ T807] usb 7-1: config 0 descriptor?? [ 1444.823309][ T1230] binder: 1229:1230 ioctl 4018620d 0 returned -22 [ 1445.602965][ T807] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1445.643743][ T1254] bond0: (slave lo): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 1445.937094][ T1267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10488'. [ 1446.213625][ T1267] vivid-000: ================= START STATUS ================= [ 1446.229787][ T1267] vivid-000: Radio HW Seek Mode: Bounded [ 1446.251127][ T1267] vivid-000: Radio Programmable HW Seek: false [ 1446.273850][ T1267] vivid-000: RDS Rx I/O Mode: Block I/O [ 1446.280840][ T1267] vivid-000: Generate RBDS Instead of RDS: false [ 1446.296526][ T1267] vivid-000: RDS Reception: true [ 1446.305429][ T1267] vivid-000: RDS Program Type: 0 inactive [ 1446.319620][ T1267] vivid-000: RDS PS Name: inactive [ 1446.329816][ T1267] vivid-000: RDS Radio Text: inactive [ 1446.348786][ T1267] vivid-000: RDS Traffic Announcement: false inactive [ 1446.369043][ T1267] vivid-000: RDS Traffic Program: false inactive [ 1446.398924][ T1267] vivid-000: RDS Music: false inactive [ 1446.419227][ T1267] vivid-000: ================== END STATUS ================== [ 1446.502126][ T1287] loop4: detected capacity change from 0 to 7 [ 1446.554655][ T1288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10494'. [ 1446.587304][ T1287] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1446.596942][ T1287] loop4: partition table partially beyond EOD, truncated [ 1446.607402][ T1287] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1446.672619][ T807] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1446.717355][ T807] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 1446.757996][ T807] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 1446.777439][ T807] usb 7-1: USB disconnect, device number 11 [ 1446.935801][ T1294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10495'. [ 1446.951590][ T1295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10495'. [ 1447.312257][T11628] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1447.487797][T11628] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1447.508147][T11628] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.529258][T11628] usb 7-1: Product: syz [ 1447.540211][T11628] usb 7-1: Manufacturer: syz [ 1447.547349][T11628] usb 7-1: SerialNumber: syz [ 1447.563722][T11628] usb 7-1: config 0 descriptor?? [ 1447.789620][T11628] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1448.775244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 1450.083115][T11628] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1450.168280][T11628] usb 7-1: USB disconnect, device number 12 [ 1450.789242][ T1362] gre0: entered promiscuous mode [ 1450.821370][ T1362] gre0: entered allmulticast mode [ 1452.876319][ T1385] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1453.804515][ T1394] ip6gretap0: entered promiscuous mode [ 1453.858483][ T1394] macvtap1: entered promiscuous mode [ 1454.135778][ T1394] ip6gretap0: left promiscuous mode [ 1457.161145][ T1406] loop5: detected capacity change from 0 to 4095 [ 1458.018131][ T1409] syz.6.10517: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1458.142912][ T1409] CPU: 0 UID: 0 PID: 1409 Comm: syz.6.10517 Tainted: G L syzkaller #0 PREEMPT(full) [ 1458.142941][ T1409] Tainted: [L]=SOFTLOCKUP [ 1458.142948][ T1409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1458.142958][ T1409] Call Trace: [ 1458.142966][ T1409] [ 1458.142974][ T1409] dump_stack_lvl+0xe8/0x150 [ 1458.143000][ T1409] warn_alloc+0x249/0x340 [ 1458.143025][ T1409] ? stack_trace_save+0xa9/0x100 [ 1458.143054][ T1409] ? __pfx_warn_alloc+0x10/0x10 [ 1458.143083][ T1409] ? kasan_save_track+0x4f/0x80 [ 1458.143103][ T1409] ? kasan_save_track+0x3e/0x80 [ 1458.143123][ T1409] ? __kasan_kmalloc+0x93/0xb0 [ 1458.143143][ T1409] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1458.143164][ T1409] ? xskq_create+0x56/0x170 [ 1458.143182][ T1409] ? xsk_setsockopt+0x54c/0x990 [ 1458.143197][ T1409] ? do_sock_setsockopt+0x17c/0x1b0 [ 1458.143217][ T1409] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1458.143235][ T1409] ? do_syscall_64+0x15f/0xf80 [ 1458.143261][ T1409] __vmalloc_node_range_noprof+0x132/0x1750 [ 1458.143314][ T1409] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1458.143343][ T1409] ? __kasan_kmalloc+0x93/0xb0 [ 1458.143371][ T1409] vmalloc_user_noprof+0xad/0xe0 [ 1458.143393][ T1409] ? xskq_create+0xbf/0x170 [ 1458.143412][ T1409] xskq_create+0xbf/0x170 [ 1458.143434][ T1409] xsk_init_queue+0x8a/0xe0 [ 1458.143454][ T1409] xsk_setsockopt+0x54c/0x990 [ 1458.143481][ T1409] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1458.143500][ T1409] ? __pfx_aa_sk_perm+0x10/0x10 [ 1458.143524][ T1409] ? aa_sock_opt_perm+0xff/0x1a0 [ 1458.143549][ T1409] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1458.143572][ T1409] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1458.143591][ T1409] do_sock_setsockopt+0x17c/0x1b0 [ 1458.143617][ T1409] __x64_sys_setsockopt+0x13d/0x1b0 [ 1458.143641][ T1409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.143660][ T1409] do_syscall_64+0x15f/0xf80 [ 1458.143680][ T1409] ? trace_irq_disable+0x3b/0x140 [ 1458.143703][ T1409] ? clear_bhb_loop+0x40/0x90 [ 1458.143724][ T1409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.143745][ T1409] RIP: 0033:0x7f6e30b9cdd9 [ 1458.143762][ T1409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.143776][ T1409] RSP: 002b:00007f6e2edf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1458.143795][ T1409] RAX: ffffffffffffffda RBX: 00007f6e30e16090 RCX: 00007f6e30b9cdd9 [ 1458.143808][ T1409] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 1458.143819][ T1409] RBP: 00007f6e30c32d69 R08: 0000000000000029 R09: 0000000000000000 [ 1458.143829][ T1409] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1458.143840][ T1409] R13: 00007f6e30e16128 R14: 00007f6e30e16090 R15: 00007f6e30f3fa48 [ 1458.143869][ T1409] [ 1458.147296][ T1409] Mem-Info: [ 1459.033512][ T1409] active_anon:8560 inactive_anon:0 isolated_anon:0 [ 1459.033512][ T1409] active_file:20113 inactive_file:40611 isolated_file:0 [ 1459.033512][ T1409] unevictable:768 dirty:340 writeback:0 [ 1459.033512][ T1409] slab_reclaimable:7435 slab_unreclaimable:106365 [ 1459.033512][ T1409] mapped:32639 shmem:3384 pagetables:1626 [ 1459.033512][ T1409] sec_pagetables:0 bounce:0 [ 1459.033512][ T1409] kernel_misc_reclaimable:0 [ 1459.033512][ T1409] free:1283185 free_pcp:15598 free_cma:0 [ 1459.322773][ T1409] Node 0 active_anon:34140kB inactive_anon:0kB active_file:80424kB inactive_file:162240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130528kB dirty:1356kB writeback:0kB shmem:12000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12560kB pagetables:6404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1459.410053][ T1433] Invalid logical block size (2082) [ 1459.496904][ T1409] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1459.687790][ T1409] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1459.796810][ T1409] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1459.806193][ T1438] bond2: Unable to set up delay as MII monitoring is disabled [ 1459.814480][ T1409] Node 0 DMA32 free:1183668kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33952kB inactive_anon:0kB active_file:80424kB inactive_file:162248kB unevictable:1536kB writepending:1368kB zspages:0kB present:3129332kB managed:2552668kB mlocked:0kB bounce:0kB free_pcp:56484kB local_pcp:22240kB free_cma:0kB [ 1459.851214][ T1409] lowmem_reserve[]: 0 0 0 0 0 [ 1459.856721][ T1409] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1459.895562][ T1409] lowmem_reserve[]: 0 0 0 0 0 [ 1459.900411][ T1409] Node 1 Normal free:3934604kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7280kB local_pcp:7280kB free_cma:0kB [ 1459.939049][ T1409] lowmem_reserve[]: 0 0 0 0 0 [ 1459.944307][ T1409] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1459.957451][ T1409] Node 0 DMA32: 1688*4kB (UME) 2885*8kB (UME) 847*16kB (UME) 2637*32kB (UME) 1054*64kB (UME) 456*128kB (UME) 295*256kB (UME) 150*512kB (UME) 104*1024kB (UME) 34*2048kB (UM) 147*4096kB (UM) = 1184152kB [ 1459.979710][ T1409] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1459.991732][ T1409] Node 1 Normal: 3*4kB (UM) 18*8kB (UM) 7*16kB (U) 2*32kB (U) 11*64kB (UM) 1*128kB (U) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3934604kB [ 1460.014538][ T1409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1460.024664][ T1409] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1460.034839][ T1409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1460.050040][ T1409] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1460.059830][ T1409] 64106 total pagecache pages [ 1460.065153][ T1409] 0 pages in swap cache [ 1460.070521][ T1409] Free swap = 124996kB [ 1460.077841][ T1409] Total swap = 124996kB [ 1460.082439][ T1409] 2097051 pages RAM [ 1460.087340][ T1409] 0 pages HighMem/MovableOnly [ 1460.092106][ T1409] 427101 pages reserved [ 1460.102302][ T1409] 0 pages cma reserved [ 1460.178871][ T1441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.189821][ T1441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.211791][ T1438] bond2 (unregistering): Released all slaves [ 1460.279652][ T1441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.292681][ T1442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.306059][ T1441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.315361][ T1442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.518646][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.500729][T27853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1463.525759][T27853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1463.534866][T27853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1463.551756][T27853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1463.561817][T27853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1464.418277][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.619928][ T1454] netlink: 64975 bytes leftover after parsing attributes in process `syz.0.10529'. [ 1464.724769][ T1468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10533'. [ 1464.831204][ T1456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10530'. [ 1465.224984][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.265891][ T1483] FAULT_INJECTION: forcing a failure. [ 1465.265891][ T1483] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.294641][ T1483] CPU: 1 UID: 0 PID: 1483 Comm: syz.0.10535 Tainted: G L syzkaller #0 PREEMPT(full) [ 1465.294659][ T1483] Tainted: [L]=SOFTLOCKUP [ 1465.294663][ T1483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1465.294670][ T1483] Call Trace: [ 1465.294674][ T1483] [ 1465.294679][ T1483] dump_stack_lvl+0xe8/0x150 [ 1465.294696][ T1483] should_fail_ex+0x412/0x560 [ 1465.294711][ T1483] should_failslab+0xa8/0x100 [ 1465.294727][ T1483] __kmalloc_noprof+0xe8/0x760 [ 1465.294740][ T1483] ? tomoyo_encode+0x28b/0x550 [ 1465.294761][ T1483] tomoyo_encode+0x28b/0x550 [ 1465.294776][ T1483] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1465.294790][ T1483] ? tomoyo_domain+0xd7/0x130 [ 1465.294805][ T1483] ? tomoyo_path_number_perm+0x219/0x630 [ 1465.294816][ T1483] tomoyo_path_number_perm+0x246/0x630 [ 1465.294827][ T1483] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1465.294838][ T1483] ? __lock_acquire+0x6b5/0x2cf0 [ 1465.294856][ T1483] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1465.294879][ T1483] ? __fget_files+0x2a/0x420 [ 1465.294892][ T1483] ? __fget_files+0x2a/0x420 [ 1465.294902][ T1483] ? __fget_files+0x3a0/0x420 [ 1465.294912][ T1483] ? __fget_files+0x2a/0x420 [ 1465.294924][ T1483] security_file_ioctl+0xc3/0x2a0 [ 1465.294936][ T1483] __se_sys_ioctl+0x47/0x170 [ 1465.294950][ T1483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.294964][ T1483] do_syscall_64+0x15f/0xf80 [ 1465.294982][ T1483] ? trace_irq_disable+0x3b/0x140 [ 1465.295003][ T1483] ? clear_bhb_loop+0x40/0x90 [ 1465.295022][ T1483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.295038][ T1483] RIP: 0033:0x7f8058f9cdd9 [ 1465.295054][ T1483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1465.295067][ T1483] RSP: 002b:00007f8059dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1465.295085][ T1483] RAX: ffffffffffffffda RBX: 00007f8059216090 RCX: 00007f8058f9cdd9 [ 1465.295095][ T1483] RDX: 0000200000000080 RSI: 000000004018aee3 RDI: 0000000000000005 [ 1465.295101][ T1483] RBP: 00007f8059dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1465.295107][ T1483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1465.295113][ T1483] R13: 00007f8059216128 R14: 00007f8059216090 R15: 00007f805933fa48 [ 1465.295128][ T1483] [ 1465.295141][ T1483] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1465.622613][T27853] Bluetooth: hci3: command tx timeout [ 1466.469501][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.704994][T27853] Bluetooth: hci3: command tx timeout [ 1467.999744][ T1498] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10540'. [ 1468.249402][ T1506] netlink: 'syz.1.10541': attribute type 4 has an invalid length. [ 1468.296316][ T1507] netlink: 'syz.1.10541': attribute type 4 has an invalid length. [ 1468.327576][ T1499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.409350][ T1499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.590720][ T1504] FAULT_INJECTION: forcing a failure. [ 1468.590720][ T1504] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.626932][ T1504] CPU: 0 UID: 0 PID: 1504 Comm: syz.1.10541 Tainted: G L syzkaller #0 PREEMPT(full) [ 1468.626961][ T1504] Tainted: [L]=SOFTLOCKUP [ 1468.626967][ T1504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1468.626978][ T1504] Call Trace: [ 1468.626986][ T1504] [ 1468.626994][ T1504] dump_stack_lvl+0xe8/0x150 [ 1468.627020][ T1504] should_fail_ex+0x412/0x560 [ 1468.627046][ T1504] should_failslab+0xa8/0x100 [ 1468.627072][ T1504] __kmalloc_cache_noprof+0x88/0x660 [ 1468.627095][ T1504] ? igmpv3_add_delrec+0xbd/0x560 [ 1468.627121][ T1504] igmpv3_add_delrec+0xbd/0x560 [ 1468.627139][ T1504] ? __local_bh_enable_ip+0xd0/0x130 [ 1468.627161][ T1504] __igmp_group_dropped+0x711/0x920 [ 1468.627176][ T1504] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 1468.627202][ T1504] ? __pfx___igmp_group_dropped+0x10/0x10 [ 1468.627234][ T1504] __ip_mc_dec_group+0x3c7/0x770 [ 1468.627255][ T1504] ip_mc_leave_group+0x3e9/0x4b0 [ 1468.627281][ T1504] ip_mc_source+0xa8b/0x1490 [ 1468.627315][ T1504] do_ip_setsockopt+0x217c/0x2ea0 [ 1468.627342][ T1504] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1468.627360][ T1504] ? aa_sk_perm+0x6d5/0x900 [ 1468.627381][ T1504] ? __fget_files+0x2a/0x420 [ 1468.627405][ T1504] ? __pfx_aa_sk_perm+0x10/0x10 [ 1468.627433][ T1504] ? __fget_files+0x2a/0x420 [ 1468.627450][ T1504] ? aa_sock_opt_perm+0xff/0x1a0 [ 1468.627477][ T1504] ip_setsockopt+0x66/0x110 [ 1468.627493][ T1504] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1468.627514][ T1504] do_sock_setsockopt+0x17c/0x1b0 [ 1468.627540][ T1504] __x64_sys_setsockopt+0x13d/0x1b0 [ 1468.627562][ T1504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.627581][ T1504] do_syscall_64+0x15f/0xf80 [ 1468.627600][ T1504] ? trace_irq_disable+0x3b/0x140 [ 1468.627623][ T1504] ? clear_bhb_loop+0x40/0x90 [ 1468.627644][ T1504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.627660][ T1504] RIP: 0033:0x7fa3ffb9cdd9 [ 1468.627676][ T1504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1468.627689][ T1504] RSP: 002b:00007fa4009e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1468.627708][ T1504] RAX: ffffffffffffffda RBX: 00007fa3ffe15fa0 RCX: 00007fa3ffb9cdd9 [ 1468.627720][ T1504] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000003 [ 1468.627730][ T1504] RBP: 00007fa4009e7090 R08: 000000000000000c R09: 0000000000000000 [ 1468.627740][ T1504] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 1468.627751][ T1504] R13: 00007fa3ffe16038 R14: 00007fa3ffe15fa0 R15: 00007fa3fff3fa48 [ 1468.627779][ T1504] [ 1469.782365][T27853] Bluetooth: hci3: command tx timeout [ 1470.296018][ T1538] netlink: 'syz.5.10547': attribute type 4 has an invalid length. [ 1470.350751][ T1539] fuse: Bad value for 'group_id' [ 1470.369790][ T1539] fuse: Bad value for 'group_id' [ 1470.450109][ T1535] netlink: 'syz.5.10547': attribute type 4 has an invalid length. [ 1470.549063][ T35] bridge_slave_1: left allmulticast mode [ 1470.557244][ T35] bridge_slave_1: left promiscuous mode [ 1470.565415][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.587057][ T35] bridge_slave_0: left allmulticast mode [ 1470.609619][ T35] bridge_slave_0: left promiscuous mode [ 1470.625062][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.853936][ T1559] trusted_key: encrypted_key: insufficient parameters specified [ 1471.029404][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1471.039943][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1471.050157][ T35] bond0 (unregistering): Released all slaves [ 1471.087300][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1471.381380][ T1477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.397725][ T1477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.413619][ T1477] bridge_slave_0: entered allmulticast mode [ 1471.421691][ T1477] bridge_slave_0: entered promiscuous mode [ 1471.446457][ T1477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1471.463250][ T1580] FAULT_INJECTION: forcing a failure. [ 1471.463250][ T1580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1471.472704][ T1477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.484735][ T1580] CPU: 1 UID: 0 PID: 1580 Comm: syz.1.10557 Tainted: G L syzkaller #0 PREEMPT(full) [ 1471.484759][ T1580] Tainted: [L]=SOFTLOCKUP [ 1471.484765][ T1580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1471.484774][ T1580] Call Trace: [ 1471.484781][ T1580] [ 1471.484788][ T1580] dump_stack_lvl+0xe8/0x150 [ 1471.484812][ T1580] should_fail_ex+0x412/0x560 [ 1471.484836][ T1580] _copy_to_iter+0x1e4/0x17d0 [ 1471.484857][ T1580] ? seq_read_iter+0xb84/0xe10 [ 1471.484877][ T1580] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1471.484904][ T1580] ? __pfx__copy_to_iter+0x10/0x10 [ 1471.484922][ T1580] ? kernfs_seq_stop+0x17e/0x200 [ 1471.484942][ T1580] ? kernfs_put_active+0xa0/0x100 [ 1471.484962][ T1580] ? kernfs_seq_stop+0x17e/0x200 [ 1471.484990][ T1580] seq_read_iter+0xbf5/0xe10 [ 1471.485023][ T1580] vfs_read+0x582/0xa70 [ 1471.485050][ T1580] ? __pfx_vfs_read+0x10/0x10 [ 1471.485081][ T1580] ? __fget_files+0x2a/0x420 [ 1471.485107][ T1580] ksys_read+0x150/0x270 [ 1471.485131][ T1580] ? __pfx_ksys_read+0x10/0x10 [ 1471.485158][ T1580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.485176][ T1580] do_syscall_64+0x15f/0xf80 [ 1471.485194][ T1580] ? trace_irq_disable+0x3b/0x140 [ 1471.485215][ T1580] ? clear_bhb_loop+0x40/0x90 [ 1471.485235][ T1580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.485250][ T1580] RIP: 0033:0x7fa3ffb9cdd9 [ 1471.485265][ T1580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1471.485279][ T1580] RSP: 002b:00007fa4009e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1471.485295][ T1580] RAX: ffffffffffffffda RBX: 00007fa3ffe15fa0 RCX: 00007fa3ffb9cdd9 [ 1471.485307][ T1580] RDX: 0000000000002020 RSI: 0000200000000980 RDI: 0000000000000004 [ 1471.485316][ T1580] RBP: 00007fa4009e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1471.485326][ T1580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1471.485336][ T1580] R13: 00007fa3ffe16038 R14: 00007fa3ffe15fa0 R15: 00007fa3fff3fa48 [ 1471.485362][ T1580] [ 1471.763805][ T1477] bridge_slave_1: entered allmulticast mode [ 1471.781977][ T1477] bridge_slave_1: entered promiscuous mode [ 1471.864109][T27853] Bluetooth: hci3: command tx timeout [ 1471.931404][ T1477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1472.039595][ T1477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1472.409373][ T1477] team0: Port device team_slave_0 added [ 1472.449398][ T1615] xt_hashlimit: size too large, truncated to 1048576 [ 1472.456611][ T1615] xt_hashlimit: overflow, try lower: 3/0 [ 1472.463673][ T35] hsr_slave_0: left promiscuous mode [ 1472.484663][ T35] hsr_slave_1: left promiscuous mode [ 1472.499083][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1472.509953][ T1618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10566'. [ 1472.524375][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1472.545513][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1472.560268][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1472.603243][ T35] veth1_macvtap: left promiscuous mode [ 1472.612373][ T35] veth0_macvtap: left promiscuous mode [ 1472.624694][ T35] veth1_vlan: left promiscuous mode [ 1472.630039][ T35] veth0_vlan: left promiscuous mode [ 1473.120958][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1473.156097][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1473.576273][ T1477] team0: Port device team_slave_1 added [ 1473.627118][ T5289] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1473.738390][ T1631] trusted_key: encrypted_key: insufficient parameters specified [ 1473.759204][ T1477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.798028][ T1477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.910405][ T1477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.964555][ T1477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.010650][ T1477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.039227][ T1477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.239806][ T1477] hsr_slave_0: entered promiscuous mode [ 1474.259190][ T1477] hsr_slave_1: entered promiscuous mode [ 1474.286129][ T1477] debugfs: 'hsr0' already exists in 'hsr' [ 1474.311747][ T1649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.313283][ T1477] Cannot create hsr debugfs directory [ 1474.322639][ T1649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.379709][T11628] hid_parser_main: 446 callbacks suppressed [ 1474.379729][T11628] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 1474.434728][T11628] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1475.301085][ T5289] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1475.390098][ T1477] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1475.400777][ T1477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1475.409415][ T1477] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1475.422025][ T1477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1475.433042][ T1477] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1475.444884][ T1477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1475.453829][ T1477] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1475.464212][ T1477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1475.584196][ T1477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.609135][ T1477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.625210][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.632435][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1475.651172][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.658312][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1475.764863][ T1477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1475.816442][ T1477] veth0_vlan: entered promiscuous mode [ 1475.830500][ T1477] veth1_vlan: entered promiscuous mode [ 1475.877880][ T1477] veth0_macvtap: entered promiscuous mode [ 1475.890710][ T1477] veth1_macvtap: entered promiscuous mode [ 1475.920776][ T1477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1475.938493][ T1477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1475.955898][ T3271] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.966898][ T3271] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.998174][ T3271] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.037526][ T3271] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.153190][ T5289] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1476.167438][ T3271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.186704][ T3271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.236370][ T3271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.253831][ T3271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.379438][ T1699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.398574][ T1699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.604357][ T1707] netlink: 'syz.2.10585': attribute type 11 has an invalid length. [ 1476.612333][ T1707] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.10585'. [ 1476.705860][ T1709] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10586'. [ 1476.718130][ T1709] IPv6: Can't replace route, no match found [ 1476.762321][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1476.782097][ T1699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.803582][ T1699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.848230][ T1714] trusted_key: encrypted_key: insufficient parameters specified [ 1476.913185][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1476.920662][ T9] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1476.930658][ T9] usb 8-1: config 0 has no interface number 0 [ 1476.937344][ T9] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1476.947958][ T9] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1476.958731][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1476.972006][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.980958][ T9] usb 8-1: Product: syz [ 1476.985591][ T9] usb 8-1: Manufacturer: syz [ 1476.990220][ T9] usb 8-1: SerialNumber: syz [ 1477.004354][ T9] usb 8-1: config 0 descriptor?? [ 1477.015421][ T9] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1477.026235][ T9] em28xx 8-1:0.89: Video interface 89 found: [ 1477.623950][ T9] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1477.665043][ T1726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10589'. [ 1477.720449][ T1728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.733117][ T1728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.864621][ T1728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.873804][ T1728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.126706][ T1736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1478.191283][ T1741] xt_hashlimit: size too large, truncated to 1048576 [ 1478.198835][ T1741] xt_hashlimit: overflow, try lower: 3/0 [ 1478.296298][ T1745] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10596'. [ 1478.338171][ T1747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10597'. [ 1478.370894][ T1747] team1: entered promiscuous mode [ 1478.376218][ T1747] team1: entered allmulticast mode [ 1478.381717][ T1747] 8021q: adding VLAN 0 to HW filter on device team1 [ 1478.424983][ T1750] trusted_key: encrypted_key: insufficient parameters specified [ 1478.546879][ T1753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.561455][ T1753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.644925][ T9] em28xx 8-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1478.657794][ T9] em28xx 8-1:0.89: board has no eeprom [ 1478.723118][ T9] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1478.743703][ T9] em28xx 8-1:0.89: analog set to bulk mode. [ 1478.749685][T29365] em28xx 8-1:0.89: Registering V4L2 extension [ 1478.778349][ T9] usb 8-1: USB disconnect, device number 2 [ 1478.788163][ T9] em28xx 8-1:0.89: Disconnecting em28xx [ 1478.896393][T29365] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1478.914821][T29365] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1478.924521][T29365] em28xx 8-1:0.89: No AC97 audio processor [ 1478.935744][T29365] usb 8-1: Decoder not found [ 1478.943051][T29365] em28xx 8-1:0.89: failed to create media graph [ 1478.946360][T27853] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 1478.950581][T29365] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1478.970408][T29365] em28xx 8-1:0.89: Registering snapshot button... [ 1478.989572][T29365] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input165 [ 1479.018725][T29365] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1479.028484][ T9] em28xx 8-1:0.89: Closing input extension [ 1479.036817][ T9] em28xx 8-1:0.89: Deregistering snapshot button [ 1479.069889][ T9] em28xx 8-1:0.89: Freeing device [ 1479.530946][ T1773] xt_hashlimit: size too large, truncated to 1048576 [ 1479.539158][ T1773] xt_hashlimit: overflow, try lower: 3/0 [ 1479.562274][ T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1479.695331][ T1777] kvm: pic: non byte write [ 1479.735633][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1479.745401][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.753768][ T9] usb 8-1: Product: syz [ 1479.758142][ T9] usb 8-1: Manufacturer: syz [ 1479.768213][ T9] usb 8-1: SerialNumber: syz [ 1479.779563][ T9] usb 8-1: config 0 descriptor?? [ 1480.013268][ T9] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1481.037173][ T1799] FAULT_INJECTION: forcing a failure. [ 1481.037173][ T1799] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.050180][ T1799] CPU: 0 UID: 0 PID: 1799 Comm: syz.0.10613 Tainted: G L syzkaller #0 PREEMPT(full) [ 1481.050207][ T1799] Tainted: [L]=SOFTLOCKUP [ 1481.050213][ T1799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1481.050223][ T1799] Call Trace: [ 1481.050230][ T1799] [ 1481.050237][ T1799] dump_stack_lvl+0xe8/0x150 [ 1481.050260][ T1799] should_fail_ex+0x412/0x560 [ 1481.050286][ T1799] should_failslab+0xa8/0x100 [ 1481.050310][ T1799] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1481.050331][ T1799] ? __alloc_skb+0x186/0x7d0 [ 1481.050349][ T1799] ? __alloc_skb+0x1d0/0x7d0 [ 1481.050364][ T1799] ? __local_bh_enable_ip+0xd0/0x130 [ 1481.050383][ T1799] __alloc_skb+0x1d0/0x7d0 [ 1481.050397][ T1799] pfkey_sendmsg+0x212/0x1120 [ 1481.050411][ T1799] ? unwind_next_frame+0xa6/0x2550 [ 1481.050429][ T1799] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1481.050443][ T1799] ? aa_sk_perm+0x6d5/0x900 [ 1481.050458][ T1799] ? __pfx_aa_sk_perm+0x10/0x10 [ 1481.050468][ T1799] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1481.050483][ T1799] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1481.050496][ T1799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1481.050510][ T1799] ____sys_sendmsg+0x972/0x9f0 [ 1481.050522][ T1799] ? __might_fault+0xaf/0x130 [ 1481.050536][ T1799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1481.050552][ T1799] ? import_iovec+0x73/0xa0 [ 1481.050567][ T1799] ___sys_sendmsg+0x2a5/0x360 [ 1481.050579][ T1799] ? __lock_acquire+0x6b5/0x2cf0 [ 1481.050591][ T1799] ? __pfx____sys_sendmsg+0x10/0x10 [ 1481.050619][ T1799] ? __fget_files+0x2a/0x420 [ 1481.050630][ T1799] ? __fget_files+0x3a0/0x420 [ 1481.050645][ T1799] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1481.050658][ T1799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1481.050675][ T1799] ? __pfx_ksys_write+0x10/0x10 [ 1481.050691][ T1799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.050701][ T1799] do_syscall_64+0x15f/0xf80 [ 1481.050713][ T1799] ? trace_irq_disable+0x3b/0x140 [ 1481.050726][ T1799] ? clear_bhb_loop+0x40/0x90 [ 1481.050737][ T1799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.050746][ T1799] RIP: 0033:0x7f8058f9cdd9 [ 1481.050757][ T1799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.050765][ T1799] RSP: 002b:00007f8059df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1481.050777][ T1799] RAX: ffffffffffffffda RBX: 00007f8059215fa0 RCX: 00007f8058f9cdd9 [ 1481.050784][ T1799] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1481.050790][ T1799] RBP: 00007f8059df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1481.050795][ T1799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1481.050801][ T1799] R13: 00007f8059216038 R14: 00007f8059215fa0 R15: 00007f805933fa48 [ 1481.050816][ T1799] [ 1481.680377][ T1815] FAULT_INJECTION: forcing a failure. [ 1481.680377][ T1815] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.694217][ T1815] CPU: 1 UID: 0 PID: 1815 Comm: syz.0.10619 Tainted: G L syzkaller #0 PREEMPT(full) [ 1481.694234][ T1815] Tainted: [L]=SOFTLOCKUP [ 1481.694237][ T1815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1481.694243][ T1815] Call Trace: [ 1481.694248][ T1815] [ 1481.694253][ T1815] dump_stack_lvl+0xe8/0x150 [ 1481.694277][ T1815] should_fail_ex+0x412/0x560 [ 1481.694304][ T1815] should_failslab+0xa8/0x100 [ 1481.694329][ T1815] __kmalloc_noprof+0xe8/0x760 [ 1481.694348][ T1815] ? tomoyo_encode+0x28b/0x550 [ 1481.694364][ T1815] tomoyo_encode+0x28b/0x550 [ 1481.694379][ T1815] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1481.694392][ T1815] ? tomoyo_domain+0xd7/0x130 [ 1481.694409][ T1815] ? tomoyo_path_number_perm+0x219/0x630 [ 1481.694428][ T1815] tomoyo_path_number_perm+0x246/0x630 [ 1481.694449][ T1815] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1481.694466][ T1815] ? __lock_acquire+0x6b5/0x2cf0 [ 1481.694496][ T1815] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1481.694522][ T1815] ? __fget_files+0x2a/0x420 [ 1481.694535][ T1815] ? __fget_files+0x2a/0x420 [ 1481.694545][ T1815] ? __fget_files+0x3a0/0x420 [ 1481.694555][ T1815] ? __fget_files+0x2a/0x420 [ 1481.694577][ T1815] security_file_ioctl+0xc3/0x2a0 [ 1481.694597][ T1815] __se_sys_ioctl+0x47/0x170 [ 1481.694619][ T1815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.694638][ T1815] do_syscall_64+0x15f/0xf80 [ 1481.694651][ T1815] ? trace_irq_disable+0x3b/0x140 [ 1481.694665][ T1815] ? clear_bhb_loop+0x40/0x90 [ 1481.694676][ T1815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.694685][ T1815] RIP: 0033:0x7f8058f9cdd9 [ 1481.694695][ T1815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.694704][ T1815] RSP: 002b:00007f8059df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1481.694719][ T1815] RAX: ffffffffffffffda RBX: 00007f8059215fa0 RCX: 00007f8058f9cdd9 [ 1481.694732][ T1815] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1481.694742][ T1815] RBP: 00007f8059df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1481.694752][ T1815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1481.694762][ T1815] R13: 00007f8059216038 R14: 00007f8059215fa0 R15: 00007f805933fa48 [ 1481.694790][ T1815] [ 1481.694813][ T1815] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1482.114658][ T1821] FAULT_INJECTION: forcing a failure. [ 1482.114658][ T1821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1482.127771][ T1821] CPU: 0 UID: 0 PID: 1821 Comm: syz.0.10621 Tainted: G L syzkaller #0 PREEMPT(full) [ 1482.127795][ T1821] Tainted: [L]=SOFTLOCKUP [ 1482.127801][ T1821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1482.127812][ T1821] Call Trace: [ 1482.127818][ T1821] [ 1482.127822][ T1821] dump_stack_lvl+0xe8/0x150 [ 1482.127838][ T1821] should_fail_ex+0x412/0x560 [ 1482.127854][ T1821] _copy_from_user+0x2d/0xb0 [ 1482.127871][ T1821] __copy_msghdr+0x3c5/0x5b0 [ 1482.127886][ T1821] ___sys_sendmsg+0x213/0x360 [ 1482.127898][ T1821] ? __lock_acquire+0x6b5/0x2cf0 [ 1482.127910][ T1821] ? __pfx____sys_sendmsg+0x10/0x10 [ 1482.127938][ T1821] ? __fget_files+0x2a/0x420 [ 1482.127949][ T1821] ? __fget_files+0x3a0/0x420 [ 1482.127965][ T1821] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1482.127979][ T1821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1482.127995][ T1821] ? __pfx_ksys_write+0x10/0x10 [ 1482.128012][ T1821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.128022][ T1821] do_syscall_64+0x15f/0xf80 [ 1482.128034][ T1821] ? trace_irq_disable+0x3b/0x140 [ 1482.128052][ T1821] ? clear_bhb_loop+0x40/0x90 [ 1482.128064][ T1821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.128073][ T1821] RIP: 0033:0x7f8058f9cdd9 [ 1482.128083][ T1821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1482.128091][ T1821] RSP: 002b:00007f8059df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1482.128102][ T1821] RAX: ffffffffffffffda RBX: 00007f8059215fa0 RCX: 00007f8058f9cdd9 [ 1482.128109][ T1821] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1482.128115][ T1821] RBP: 00007f8059df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1482.128121][ T1821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1482.128126][ T1821] R13: 00007f8059216038 R14: 00007f8059215fa0 R15: 00007f805933fa48 [ 1482.128141][ T1821] [ 1482.436309][ T1827] xt_hashlimit: size too large, truncated to 1048576 [ 1482.445198][ T1827] xt_hashlimit: overflow, try lower: 3/0 [ 1482.530638][ T1833] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10625'. [ 1482.574411][ T1835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10626'. [ 1482.583711][ T1836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10626'. [ 1482.710940][ T1841] trusted_key: encrypted_key: insufficient parameters specified [ 1482.747049][T27853] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 1483.578836][ T9] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1483.590210][ T9] usb 8-1: USB disconnect, device number 3 [ 1483.645255][ T1859] trusted_key: encrypted_key: insufficient parameters specified [ 1483.719713][ T1862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.730593][ T1862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.851493][ T1866] netlink: 'syz.2.10635': attribute type 11 has an invalid length. [ 1483.863426][ T1866] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.10635'. [ 1483.901136][ T1868] FAULT_INJECTION: forcing a failure. [ 1483.901136][ T1868] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.914210][ T1868] CPU: 0 UID: 0 PID: 1868 Comm: syz.2.10636 Tainted: G L syzkaller #0 PREEMPT(full) [ 1483.914233][ T1868] Tainted: [L]=SOFTLOCKUP [ 1483.914240][ T1868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1483.914250][ T1868] Call Trace: [ 1483.914257][ T1868] [ 1483.914263][ T1868] dump_stack_lvl+0xe8/0x150 [ 1483.914287][ T1868] should_fail_ex+0x412/0x560 [ 1483.914311][ T1868] should_failslab+0xa8/0x100 [ 1483.914335][ T1868] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1483.914354][ T1868] ? __alloc_skb+0x186/0x7d0 [ 1483.914372][ T1868] ? __alloc_skb+0x1d0/0x7d0 [ 1483.914388][ T1868] ? __local_bh_enable_ip+0xd0/0x130 [ 1483.914409][ T1868] __alloc_skb+0x1d0/0x7d0 [ 1483.914429][ T1868] netlink_sendmsg+0x5d4/0xb40 [ 1483.914456][ T1868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1483.914479][ T1868] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1483.914500][ T1868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1483.914523][ T1868] ____sys_sendmsg+0x972/0x9f0 [ 1483.914544][ T1868] ? __might_fault+0xaf/0x130 [ 1483.914570][ T1868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1483.914596][ T1868] ? import_iovec+0x73/0xa0 [ 1483.914617][ T1868] ___sys_sendmsg+0x2a5/0x360 [ 1483.914631][ T1868] ? __lock_acquire+0x6b5/0x2cf0 [ 1483.914643][ T1868] ? __pfx____sys_sendmsg+0x10/0x10 [ 1483.914671][ T1868] ? __fget_files+0x2a/0x420 [ 1483.914682][ T1868] ? __fget_files+0x3a0/0x420 [ 1483.914697][ T1868] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1483.914710][ T1868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1483.914726][ T1868] ? __pfx_ksys_write+0x10/0x10 [ 1483.914744][ T1868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.914754][ T1868] do_syscall_64+0x15f/0xf80 [ 1483.914765][ T1868] ? trace_irq_disable+0x3b/0x140 [ 1483.914778][ T1868] ? clear_bhb_loop+0x40/0x90 [ 1483.914789][ T1868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.914799][ T1868] RIP: 0033:0x7f2451f9cdd9 [ 1483.914809][ T1868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1483.914817][ T1868] RSP: 002b:00007f2452d84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1483.914828][ T1868] RAX: ffffffffffffffda RBX: 00007f2452215fa0 RCX: 00007f2451f9cdd9 [ 1483.914835][ T1868] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1483.914848][ T1868] RBP: 00007f2452d84090 R08: 0000000000000000 R09: 0000000000000000 [ 1483.914854][ T1868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1483.914860][ T1868] R13: 00007f2452216038 R14: 00007f2452215fa0 R15: 00007f245233fa48 [ 1483.914874][ T1868] [ 1484.270186][ T1872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10638'. [ 1484.333912][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.341309][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.632282][ T1880] FAULT_INJECTION: forcing a failure. [ 1484.632282][ T1880] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.668456][ T1880] CPU: 1 UID: 0 PID: 1880 Comm: syz.2.10641 Tainted: G L syzkaller #0 PREEMPT(full) [ 1484.668485][ T1880] Tainted: [L]=SOFTLOCKUP [ 1484.668491][ T1880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1484.668501][ T1880] Call Trace: [ 1484.668508][ T1880] [ 1484.668516][ T1880] dump_stack_lvl+0xe8/0x150 [ 1484.668540][ T1880] should_fail_ex+0x412/0x560 [ 1484.668565][ T1880] should_failslab+0xa8/0x100 [ 1484.668590][ T1880] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1484.668620][ T1880] ? __alloc_skb+0x186/0x7d0 [ 1484.668638][ T1880] ? __alloc_skb+0x1d0/0x7d0 [ 1484.668655][ T1880] ? __local_bh_enable_ip+0xd0/0x130 [ 1484.668676][ T1880] __alloc_skb+0x1d0/0x7d0 [ 1484.668699][ T1880] netlink_sendmsg+0x5d4/0xb40 [ 1484.668728][ T1880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1484.668752][ T1880] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1484.668774][ T1880] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1484.668797][ T1880] ____sys_sendmsg+0x972/0x9f0 [ 1484.668816][ T1880] ? __might_fault+0xaf/0x130 [ 1484.668839][ T1880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1484.668863][ T1880] ? import_iovec+0x73/0xa0 [ 1484.668886][ T1880] ___sys_sendmsg+0x2a5/0x360 [ 1484.668903][ T1880] ? __lock_acquire+0x6b5/0x2cf0 [ 1484.668920][ T1880] ? __pfx____sys_sendmsg+0x10/0x10 [ 1484.668966][ T1880] ? __fget_files+0x2a/0x420 [ 1484.668982][ T1880] ? __fget_files+0x3a0/0x420 [ 1484.669007][ T1880] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1484.669030][ T1880] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1484.669061][ T1880] ? __pfx_ksys_write+0x10/0x10 [ 1484.669090][ T1880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.669105][ T1880] do_syscall_64+0x15f/0xf80 [ 1484.669124][ T1880] ? trace_irq_disable+0x3b/0x140 [ 1484.669145][ T1880] ? clear_bhb_loop+0x40/0x90 [ 1484.669164][ T1880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.669178][ T1880] RIP: 0033:0x7f2451f9cdd9 [ 1484.669194][ T1880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1484.669207][ T1880] RSP: 002b:00007f2452d84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1484.669225][ T1880] RAX: ffffffffffffffda RBX: 00007f2452215fa0 RCX: 00007f2451f9cdd9 [ 1484.669236][ T1880] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 1484.669246][ T1880] RBP: 00007f2452d84090 R08: 0000000000000000 R09: 0000000000000000 [ 1484.669256][ T1880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1484.669265][ T1880] R13: 00007f2452216038 R14: 00007f2452215fa0 R15: 00007f245233fa48 [ 1484.669289][ T1880] [ 1485.065706][ T1884] binder: 1883:1884 ioctl c0306201 200000000080 returned -14 [ 1485.435348][ T1896] netlink: 'syz.2.10646': attribute type 11 has an invalid length. [ 1485.508642][ T1896] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.10646'. [ 1485.755491][ T1903] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10649'. [ 1486.443083][ T1916] No such timeout policy "syz0" [ 1486.752044][ T1923] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1487.468724][ T1927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.498567][ T1927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.772364][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1488.954829][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1488.966639][ T9] usb 8-1: can't read configurations, error -61 [ 1489.113244][ T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1489.371876][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1489.388204][ T9] usb 8-1: can't read configurations, error -61 [ 1489.405856][ T9] usb usb8-port1: attempt power cycle [ 1489.620972][T27853] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1489.634268][T27853] Bluetooth: hci3: Injecting HCI hardware error event [ 1489.650541][ T5630] Bluetooth: hci3: hardware error 0x00 [ 1489.762277][ T9] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1489.807459][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1489.826514][ T9] usb 8-1: can't read configurations, error -61 [ 1489.982725][ T9] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1490.026067][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1490.061472][ T9] usb 8-1: can't read configurations, error -61 [ 1490.102109][ T9] usb usb8-port1: unable to enumerate USB device [ 1491.365729][ T2018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.380310][ T2018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.708366][ T2023] openvswitch: netlink: IP tunnel dst address not specified [ 1491.730525][ T29] audit: type=1326 audit(1777727530.504:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2020 comm="syz.7.10672" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facb819cdd9 code=0x0 [ 1491.852368][ T5630] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1492.309879][ T2035] FAULT_INJECTION: forcing a failure. [ 1492.309879][ T2035] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.341293][ T2035] CPU: 0 UID: 0 PID: 2035 Comm: syz.5.10675 Tainted: G L syzkaller #0 PREEMPT(full) [ 1492.341322][ T2035] Tainted: [L]=SOFTLOCKUP [ 1492.341328][ T2035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1492.341338][ T2035] Call Trace: [ 1492.341346][ T2035] [ 1492.341354][ T2035] dump_stack_lvl+0xe8/0x150 [ 1492.341378][ T2035] should_fail_ex+0x412/0x560 [ 1492.341405][ T2035] should_failslab+0xa8/0x100 [ 1492.341430][ T2035] __kmalloc_noprof+0xe8/0x760 [ 1492.341451][ T2035] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1492.341479][ T2035] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1492.341502][ T2035] ? tomoyo_domain+0xd7/0x130 [ 1492.341529][ T2035] ? tomoyo_path_number_perm+0x219/0x630 [ 1492.341547][ T2035] tomoyo_path_number_perm+0x246/0x630 [ 1492.341568][ T2035] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1492.341585][ T2035] ? __lock_acquire+0x6b5/0x2cf0 [ 1492.341618][ T2035] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1492.341659][ T2035] ? __fget_files+0x2a/0x420 [ 1492.341681][ T2035] ? __fget_files+0x2a/0x420 [ 1492.341698][ T2035] ? __fget_files+0x3a0/0x420 [ 1492.341715][ T2035] ? __fget_files+0x2a/0x420 [ 1492.341737][ T2035] security_file_ioctl+0xc3/0x2a0 [ 1492.341758][ T2035] __se_sys_ioctl+0x47/0x170 [ 1492.341785][ T2035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.341802][ T2035] do_syscall_64+0x15f/0xf80 [ 1492.341821][ T2035] ? trace_irq_disable+0x3b/0x140 [ 1492.341843][ T2035] ? clear_bhb_loop+0x40/0x90 [ 1492.341863][ T2035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.341879][ T2035] RIP: 0033:0x7f5c87f9cdd9 [ 1492.341896][ T2035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1492.341907][ T2035] RSP: 002b:00007f5c88dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1492.341924][ T2035] RAX: ffffffffffffffda RBX: 00007f5c88215fa0 RCX: 00007f5c87f9cdd9 [ 1492.341935][ T2035] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 1492.341944][ T2035] RBP: 00007f5c88dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.341954][ T2035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1492.341963][ T2035] R13: 00007f5c88216038 R14: 00007f5c88215fa0 R15: 00007f5c8833fa48 [ 1492.341989][ T2035] [ 1492.566981][ T2035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1492.574189][ T2035] program syz.5.10675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1493.087336][ T2037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.218864][ T2037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.269999][ T2032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10674'. [ 1495.826554][ T2056] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10682'. [ 1495.881526][ T2056] bridge_slave_0: default FDB implementation only supports local addresses [ 1496.142863][ T9] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 1496.201628][ T2065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1496.304724][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1496.333818][ T2069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.348759][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1496.375132][ T2069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.389498][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1496.424917][ T9] usb 8-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1496.447650][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.479635][ T9] usb 8-1: config 0 descriptor?? [ 1496.497833][ T2062] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1496.750634][ T2071] FAULT_INJECTION: forcing a failure. [ 1496.750634][ T2071] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.773861][ T2071] CPU: 1 UID: 0 PID: 2071 Comm: syz.2.10688 Tainted: G L syzkaller #0 PREEMPT(full) [ 1496.773888][ T2071] Tainted: [L]=SOFTLOCKUP [ 1496.773894][ T2071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1496.773904][ T2071] Call Trace: [ 1496.773911][ T2071] [ 1496.773918][ T2071] dump_stack_lvl+0xe8/0x150 [ 1496.773943][ T2071] should_fail_ex+0x412/0x560 [ 1496.773968][ T2071] should_failslab+0xa8/0x100 [ 1496.773993][ T2071] __kmalloc_noprof+0xe8/0x760 [ 1496.774015][ T2071] ? tomoyo_encode+0x28b/0x550 [ 1496.774040][ T2071] tomoyo_encode+0x28b/0x550 [ 1496.774066][ T2071] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1496.774096][ T2071] ? tomoyo_path_number_perm+0x219/0x630 [ 1496.774115][ T2071] tomoyo_path_number_perm+0x246/0x630 [ 1496.774136][ T2071] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1496.774153][ T2071] ? __lock_acquire+0x6b5/0x2cf0 [ 1496.774185][ T2071] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1496.774226][ T2071] ? __fget_files+0x2a/0x420 [ 1496.774248][ T2071] ? __fget_files+0x2a/0x420 [ 1496.774265][ T2071] ? __fget_files+0x3a0/0x420 [ 1496.774282][ T2071] ? __fget_files+0x2a/0x420 [ 1496.774312][ T2071] security_file_ioctl+0xc3/0x2a0 [ 1496.774332][ T2071] __se_sys_ioctl+0x47/0x170 [ 1496.774354][ T2071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.774371][ T2071] do_syscall_64+0x15f/0xf80 [ 1496.774389][ T2071] ? trace_irq_disable+0x3b/0x140 [ 1496.774413][ T2071] ? clear_bhb_loop+0x40/0x90 [ 1496.774433][ T2071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.774449][ T2071] RIP: 0033:0x7f2451f9cdd9 [ 1496.774466][ T2071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1496.774480][ T2071] RSP: 002b:00007f2452d84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1496.774498][ T2071] RAX: ffffffffffffffda RBX: 00007f2452215fa0 RCX: 00007f2451f9cdd9 [ 1496.774509][ T2071] RDX: 00002000000009c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1496.774520][ T2071] RBP: 00007f2452d84090 R08: 0000000000000000 R09: 0000000000000000 [ 1496.774530][ T2071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1496.774540][ T2071] R13: 00007f2452216038 R14: 00007f2452215fa0 R15: 00007f245233fa48 [ 1496.774569][ T2071] [ 1496.774587][ T2071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1496.969423][ T9] uclogic 0003:5543:0004.005A: ignoring exceeding usage max [ 1496.975383][ T9] uclogic 0003:5543:0004.005A: unknown main item tag 0x0 [ 1497.169152][ T2074] FAULT_INJECTION: forcing a failure. [ 1497.169152][ T2074] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.183531][ T2056] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1497.210647][ T2074] CPU: 0 UID: 0 PID: 2074 Comm: syz.5.10689 Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.210675][ T2074] Tainted: [L]=SOFTLOCKUP [ 1497.210681][ T2074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1497.210690][ T2074] Call Trace: [ 1497.210698][ T2074] [ 1497.210705][ T2074] dump_stack_lvl+0xe8/0x150 [ 1497.210730][ T2074] should_fail_ex+0x412/0x560 [ 1497.210755][ T2074] should_failslab+0xa8/0x100 [ 1497.210781][ T2074] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1497.210802][ T2074] ? __alloc_skb+0x186/0x7d0 [ 1497.210820][ T2074] ? __alloc_skb+0x1d0/0x7d0 [ 1497.210837][ T2074] ? __local_bh_enable_ip+0xd0/0x130 [ 1497.210860][ T2074] __alloc_skb+0x1d0/0x7d0 [ 1497.210878][ T2074] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1497.210903][ T2074] netlink_sendmsg+0x5d4/0xb40 [ 1497.210932][ T2074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1497.210956][ T2074] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1497.210979][ T2074] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1497.211001][ T2074] ____sys_sendmsg+0x972/0x9f0 [ 1497.211022][ T2074] ? __might_fault+0xaf/0x130 [ 1497.211047][ T2074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1497.211077][ T2074] ? import_iovec+0x73/0xa0 [ 1497.211102][ T2074] ___sys_sendmsg+0x2a5/0x360 [ 1497.211122][ T2074] ? __lock_acquire+0x6b5/0x2cf0 [ 1497.211144][ T2074] ? __pfx____sys_sendmsg+0x10/0x10 [ 1497.211197][ T2074] ? __fget_files+0x2a/0x420 [ 1497.211216][ T2074] ? __fget_files+0x3a0/0x420 [ 1497.211244][ T2074] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1497.211267][ T2074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1497.211297][ T2074] ? __pfx_ksys_write+0x10/0x10 [ 1497.211330][ T2074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.211348][ T2074] do_syscall_64+0x15f/0xf80 [ 1497.211368][ T2074] ? trace_irq_disable+0x3b/0x140 [ 1497.211390][ T2074] ? clear_bhb_loop+0x40/0x90 [ 1497.211410][ T2074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.211427][ T2074] RIP: 0033:0x7f5c87f9cdd9 [ 1497.211443][ T2074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.211457][ T2074] RSP: 002b:00007f5c88dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1497.211474][ T2074] RAX: ffffffffffffffda RBX: 00007f5c88215fa0 RCX: 00007f5c87f9cdd9 [ 1497.211486][ T2074] RDX: 00000000040008c0 RSI: 0000200000000280 RDI: 0000000000000003 [ 1497.211503][ T2074] RBP: 00007f5c88dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.211513][ T2074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1497.211523][ T2074] R13: 00007f5c88216038 R14: 00007f5c88215fa0 R15: 00007f5c8833fa48 [ 1497.211549][ T2074] [ 1497.531147][ T9] uclogic 0003:5543:0004.005A: unknown main item tag 0x0 [ 1497.538594][ T9] uclogic 0003:5543:0004.005A: unknown main item tag 0x0 [ 1497.545746][ T9] uclogic 0003:5543:0004.005A: unknown main item tag 0x0 [ 1497.553534][ T9] uclogic 0003:5543:0004.005A: unknown main item tag 0x0 [ 1497.560591][ T9] uclogic 0003:5543:0004.005A: unknown main item tag 0x0 [ 1497.567864][ T9] uclogic 0003:5543:0004.005A: unknown main item tag 0x0 [ 1497.574957][ T9] uclogic 0003:5543:0004.005A: unknown main item tag 0x0 [ 1497.619153][ T9] uclogic 0003:5543:0004.005A: hidraw0: USB HID v0.08 Device [HID 5543:0004] on usb-dummy_hcd.7-1/input0 [ 1497.721508][ T9] usb 8-1: USB disconnect, device number 8 [ 1497.936929][ T2079] fido_id[2079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1497.971923][ T2086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.027183][ T2086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.300257][ T2092] xt_hashlimit: size too large, truncated to 1048576 [ 1498.309298][ T2092] xt_hashlimit: overflow, try lower: 3/0 [ 1498.592297][ T1237] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1498.767404][ T1237] usb 8-1: config 251 has an invalid interface number: 154 but max is 0 [ 1498.797327][ T1237] usb 8-1: config 251 has no interface number 0 [ 1498.807498][ T1237] usb 8-1: config 251 interface 154 has no altsetting 0 [ 1498.819136][ T1237] usb 8-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=6a.3e [ 1498.831972][ T1237] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.840647][ T1237] usb 8-1: Product: syz [ 1498.845226][ T1237] usb 8-1: Manufacturer: syz [ 1498.849859][ T1237] usb 8-1: SerialNumber: syz [ 1498.924925][ T2104] netlink: 212356 bytes leftover after parsing attributes in process `syz.5.10700'. [ 1499.064919][ T30] INFO: task kworker/1:3:5624 blocked for more than 143 seconds. [ 1499.085133][ T30] Tainted: G L syzkaller #0 [ 1499.101769][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1499.124832][ T30] task:kworker/1:3 state:D stack:20248 pid:5624 tgid:5624 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1499.149570][ T30] Workqueue: usb_hub_wq hub_event [ 1499.154990][ T30] Call Trace: [ 1499.158311][ T30] [ 1499.161321][ T30] __schedule+0x17b4/0x5680 [ 1499.166382][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 1499.171435][ T30] ? look_up_lock_class+0x57/0x110 [ 1499.176992][ T30] ? __pfx___schedule+0x10/0x10 [ 1499.185416][ T30] ? schedule+0x90/0x360 [ 1499.198893][ T30] schedule+0x164/0x360 [ 1499.200485][ T2094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.218032][ T30] schedule_timeout+0xc3/0x2c0 [ 1499.223496][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1499.227125][ T2094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.228979][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1499.252744][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1499.258030][ T30] ? wait_for_completion+0x274/0x5e0 [ 1499.268873][ T30] wait_for_completion+0x2cc/0x5e0 [ 1499.274364][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 1499.277374][ T1237] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 1499.280042][ T30] ? __init_swait_queue_head+0xa9/0x150 [ 1499.291462][ T1237] gspca_zc3xx: reg_w_i err -71 [ 1499.292701][ T30] snd_card_free+0x147/0x1d0 [ 1499.297269][ T1237] gspca_zc3xx 8-1:251.154: probe with driver gspca_zc3xx failed with error -71 [ 1499.301639][ T30] ? __pfx_snd_card_free+0x10/0x10 [ 1499.301672][ T30] ? usb_match_one_id+0x654/0x980 [ 1499.313878][ T1237] usb 8-1: USB disconnect, device number 9 [ 1499.323499][ T30] ? snd_usb_create_quirk+0x5d/0x110 [ 1499.336210][ T30] usb_audio_probe+0x1e23/0x2380 [ 1499.341258][ T30] ? __pfx_usb_audio_probe+0x10/0x10 [ 1499.346899][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1499.353361][ T30] usb_probe_interface+0x659/0xc70 [ 1499.358560][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 1499.364234][ T30] really_probe+0x267/0xaf0 [ 1499.368891][ T30] __driver_probe_device+0x1ef/0x380 [ 1499.374278][ T30] driver_probe_device+0x4f/0x240 [ 1499.379424][ T30] __device_attach_driver+0x279/0x430 [ 1499.384883][ T30] bus_for_each_drv+0x258/0x2f0 [ 1499.389874][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 1499.395829][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1499.401346][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1499.406623][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1499.412544][ T30] __device_attach+0x2c5/0x450 [ 1499.417331][ T30] ? __pfx___device_attach+0x10/0x10 [ 1499.423820][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1499.428704][ T30] device_initial_probe+0xa1/0xd0 [ 1499.433851][ T30] bus_probe_device+0x12a/0x220 [ 1499.438876][ T30] device_add+0x7e9/0xbb0 [ 1499.445537][ T30] usb_set_configuration+0x1a87/0x2110 [ 1499.451032][ T30] usb_generic_driver_probe+0x8d/0x150 [ 1499.456907][ T30] usb_probe_device+0x1c4/0x3b0 [ 1499.461792][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 1499.467981][ T30] really_probe+0x267/0xaf0 [ 1499.472553][ T30] __driver_probe_device+0x1ef/0x380 [ 1499.477942][ T30] driver_probe_device+0x4f/0x240 [ 1499.483031][ T30] __device_attach_driver+0x279/0x430 [ 1499.488509][ T30] bus_for_each_drv+0x258/0x2f0 [ 1499.493463][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 1499.499475][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1499.505081][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1499.510431][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1499.516295][ T30] __device_attach+0x2c5/0x450 [ 1499.521172][ T30] ? __pfx___device_attach+0x10/0x10 [ 1499.526508][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1499.531455][ T30] device_initial_probe+0xa1/0xd0 [ 1499.537537][ T30] bus_probe_device+0x12a/0x220 [ 1499.542509][ T30] device_add+0x7e9/0xbb0 [ 1499.546935][ T30] usb_new_device+0xa08/0x16f0 [ 1499.551709][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 1499.557195][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1499.562467][ T30] hub_event+0x2a1c/0x4f30 [ 1499.567059][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1499.572399][ T30] ? __pfx_hub_event+0x10/0x10 [ 1499.577306][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1499.583114][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1499.588928][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1499.594737][ T30] process_scheduled_works+0xb5d/0x1860 [ 1499.600416][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1499.606460][ T30] ? assign_work+0x3d5/0x5e0 [ 1499.611151][ T30] worker_thread+0xa53/0xfc0 [ 1499.615997][ T30] kthread+0x388/0x470 [ 1499.620374][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1499.625572][ T30] ? __pfx_kthread+0x10/0x10 [ 1499.630267][ T30] ret_from_fork+0x514/0xb70 [ 1499.634951][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1499.640163][ T30] ? __switch_to+0xc79/0x1410 [ 1499.645135][ T30] ? __pfx_kthread+0x10/0x10 [ 1499.649831][ T30] ret_from_fork_asm+0x1a/0x30 [ 1499.654696][ T30] [ 1499.662854][ T30] [ 1499.662854][ T30] Showing all locks held in the system: [ 1499.678051][ T30] 1 lock held by khungtaskd/30: [ 1499.683187][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1499.693573][ T30] 5 locks held by kworker/u8:9/3340: [ 1499.698912][ T30] 2 locks held by getty/5381: [ 1499.703717][ T30] #0: ffff88803202d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1499.713553][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1499.723925][ T30] 6 locks held by kworker/1:3/5624: [ 1499.729132][ T30] #0: ffff888021ecd540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1499.740502][ T30] #1: ffffc900042d7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1499.752708][ T30] #2: ffff88802b0ae1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1499.761634][ T30] #3: ffff88805ce241d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1499.770986][ T30] #4: ffff88805b7e21a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1499.780506][ T30] #5: ffffffff8fd35c80 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x63a/0x2380 [ 1499.790406][ T30] 6 locks held by kworker/0:6/5717: [ 1499.795739][ T30] #0: ffff888021ecd540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1499.807085][ T30] #1: ffffc900047d7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1499.819065][ T30] #2: ffff88802aff71d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1499.828093][ T30] #3: ffff88805816f1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1499.837513][ T30] #4: ffff88805816e1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1499.847151][ T30] #5: ffffffff8fd35c80 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x63a/0x2380 [ 1499.857362][ T30] 6 locks held by kworker/1:0/32172: [ 1499.863082][ T30] #0: ffff888021ecd540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1499.881187][ T30] #1: ffffc90003c8fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1499.893439][ T30] #2: ffff88802b0341d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1499.902997][ T30] #3: ffff88802acca1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1499.912297][ T30] #4: ffff88804e43b1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1499.921647][ T30] #5: ffffffff8fd35c80 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x63a/0x2380 [ 1499.931544][ T30] 4 locks held by udevd/565: [ 1499.936309][ T30] #0: ffff888059fddab8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 1499.945148][ T30] #1: ffff88807f850480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1499.954688][ T30] #2: ffff88805e94a968 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1499.964216][ T30] #3: ffff88805816f1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1499.973822][ T30] 4 locks held by udevd/566: [ 1499.978435][ T30] #0: ffff8880784fc2d8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 1499.987360][ T30] #1: ffff88805bf86080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1499.997078][ T30] #2: ffff88805ee05b48 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1500.006683][ T30] #3: ffff88802acca1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1500.016245][ T30] [ 1500.018599][ T30] ============================================= [ 1500.018599][ T30] [ 1500.031527][ T30] NMI backtrace for cpu 1 [ 1500.031540][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1500.031553][ T30] Tainted: [L]=SOFTLOCKUP [ 1500.031557][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1500.031562][ T30] Call Trace: [ 1500.031566][ T30] [ 1500.031571][ T30] dump_stack_lvl+0xe8/0x150 [ 1500.031586][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1500.031602][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1500.031614][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1500.031629][ T30] sys_info+0x135/0x170 [ 1500.031642][ T30] watchdog+0xfd3/0x1030 [ 1500.031658][ T30] ? watchdog+0x1c9/0x1030 [ 1500.031673][ T30] kthread+0x388/0x470 [ 1500.031688][ T30] ? __pfx_watchdog+0x10/0x10 [ 1500.031707][ T30] ? __pfx_kthread+0x10/0x10 [ 1500.031726][ T30] ret_from_fork+0x514/0xb70 [ 1500.031746][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1500.031763][ T30] ? __switch_to+0xc79/0x1410 [ 1500.031780][ T30] ? __pfx_kthread+0x10/0x10 [ 1500.031792][ T30] ret_from_fork_asm+0x1a/0x30 [ 1500.031810][ T30] [ 1500.031814][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1500.146910][ C0] NMI backtrace for cpu 0 [ 1500.146929][ C0] CPU: 0 UID: 0 PID: 3340 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1500.146951][ C0] Tainted: [L]=SOFTLOCKUP [ 1500.146957][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1500.146968][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1500.146997][ C0] RIP: 0010:__lock_acquire+0xc59/0x2cf0 [ 1500.147016][ C0] Code: 00 00 00 48 c7 c7 90 b1 82 8e 4c 89 fe e8 af 4d 4d 03 48 8b 54 24 18 eb c3 48 8b 48 18 48 39 e9 0f 84 b9 00 00 00 48 8b 40 08 <48> 85 c0 0f 84 ca fe ff ff 48 83 c0 f8 75 e0 e9 bf fe ff ff 48 8b [ 1500.147030][ C0] RSP: 0018:ffffc9000db3f310 EFLAGS: 00000007 [ 1500.147044][ C0] RAX: ffffffff94424378 RBX: 0000000000021248 RCX: 64dee99db5e0cf99 [ 1500.147056][ C0] RDX: 00000000693fed00 RSI: 0000000001a2ef72 RDI: ffff888032720000 [ 1500.147067][ C0] RBP: f1ba2f2e6bdadc43 R08: ffffffff81b2cf25 R09: ffffffff9a48a588 [ 1500.147079][ C0] R10: dffffc0000000000 R11: ffffed1003f627b1 R12: ffff888032720c80 [ 1500.147090][ C0] R13: ffff888032720c80 R14: ffff888032720000 R15: 0000000000000006 [ 1500.147102][ C0] FS: 0000000000000000(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 1500.147115][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1500.147126][ C0] CR2: 0000556fc5ee2c30 CR3: 000000007bf82000 CR4: 00000000003526f0 [ 1500.147140][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1500.147151][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1500.147162][ C0] Call Trace: [ 1500.147169][ C0] [ 1500.147178][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1500.147198][ C0] ? rcu_is_watching+0x15/0xb0 [ 1500.147223][ C0] ? ktime_get+0x45/0x220 [ 1500.147245][ C0] lock_acquire+0x106/0x350 [ 1500.147261][ C0] ? ktime_get+0x45/0x220 [ 1500.147284][ C0] ? finish_task_switch+0x15f/0xbe0 [ 1500.147298][ C0] ? lock_acquire+0x106/0x350 [ 1500.147314][ C0] ? finish_task_switch+0x15f/0xbe0 [ 1500.147329][ C0] ? ktime_get+0x45/0x220 [ 1500.147350][ C0] seqcount_lockdep_reader_access+0x55/0x100 [ 1500.147374][ C0] ? ktime_get+0x45/0x220 [ 1500.147395][ C0] ktime_get+0x45/0x220 [ 1500.147418][ C0] finish_task_switch+0x312/0xbe0 [ 1500.147436][ C0] __schedule+0x17bc/0x5680 [ 1500.147454][ C0] ? irqentry_exit+0x218/0x730 [ 1500.147482][ C0] ? smp_call_function_many_cond+0xfd4/0x13d0 [ 1500.147499][ C0] ? smp_call_function_many_cond+0x1051/0x13d0 [ 1500.147515][ C0] ? __pfx___schedule+0x10/0x10 [ 1500.147533][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1500.147557][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1500.147579][ C0] preempt_schedule_common+0x82/0xd0 [ 1500.147597][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1500.147617][ C0] preempt_schedule_thunk+0x16/0x30 [ 1500.147638][ C0] ? on_each_cpu_cond_mask+0x75/0x80 [ 1500.147653][ C0] on_each_cpu_cond_mask+0x7a/0x80 [ 1500.147669][ C0] smp_text_poke_batch_finish+0x5f5/0x1160 [ 1500.147693][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 1500.147718][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1500.147739][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1500.147762][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1500.147790][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1500.147814][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 1500.147833][ C0] static_key_disable+0x1a/0x20 [ 1500.147849][ C0] toggle_allocation_gate+0x1fe/0x290 [ 1500.147872][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1500.147894][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1500.147920][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1500.147939][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1500.147954][ C0] process_scheduled_works+0xb5d/0x1860 [ 1500.147981][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1500.147998][ C0] ? assign_work+0x3d5/0x5e0 [ 1500.148015][ C0] worker_thread+0xa53/0xfc0 [ 1500.148040][ C0] kthread+0x388/0x470 [ 1500.148059][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1500.148074][ C0] ? __pfx_kthread+0x10/0x10 [ 1500.148093][ C0] ret_from_fork+0x514/0xb70 [ 1500.148110][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1500.148126][ C0] ? __switch_to+0xc79/0x1410 [ 1500.148148][ C0] ? __pfx_kthread+0x10/0x10 [ 1500.148167][ C0] ret_from_fork_asm+0x1a/0x30 [ 1500.148191][ C0] [ 1500.562669][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1500.569546][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1500.580210][ T30] Tainted: [L]=SOFTLOCKUP [ 1500.584528][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1500.594581][ T30] Call Trace: [ 1500.597849][ T30] [ 1500.600769][ T30] vpanic+0x56c/0xa60 [ 1500.604747][ T30] ? __pfx___schedule+0x10/0x10 [ 1500.609583][ T30] ? __pfx_vpanic+0x10/0x10 [ 1500.614074][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1500.620218][ T30] panic+0xc5/0xd0 [ 1500.623955][ T30] ? __pfx_panic+0x10/0x10 [ 1500.628358][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1500.633729][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1500.639890][ T30] watchdog+0x102c/0x1030 [ 1500.644219][ T30] ? watchdog+0x1c9/0x1030 [ 1500.648651][ T30] kthread+0x388/0x470 [ 1500.652727][ T30] ? __pfx_watchdog+0x10/0x10 [ 1500.657413][ T30] ? __pfx_kthread+0x10/0x10 [ 1500.662012][ T30] ret_from_fork+0x514/0xb70 [ 1500.666591][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1500.671691][ T30] ? __switch_to+0xc79/0x1410 [ 1500.676370][ T30] ? __pfx_kthread+0x10/0x10 [ 1500.680951][ T30] ret_from_fork_asm+0x1a/0x30 [ 1500.685804][ T30] [ 1500.689403][ T30] Kernel Offset: disabled [ 1500.693730][ T30] Rebooting in 86400 seconds..