last executing test programs: 2m16.14401742s ago: executing program 2 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x4905, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x2) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) lsetxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200), &(0x7f0000000240)=@md5={0x1, "7022e9d68bf35dce7d9bedff4445045a"}, 0x11, 0x2) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001500010300000000000000000b"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000820) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(r2) r5 = landlock_create_ruleset(&(0x7f00000001c0)={0x3225, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x49, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001a00010001000000ffffffff818080000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) renameat2(0xffffffffffffff9c, 0x0, r0, &(0x7f0000000000)='./file0\x00', 0x4) 2m15.360841401s ago: executing program 2 (id=121): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0xff, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000001dc0)={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0xfff, 0x2, 0x600, 0x66e, 0x103010001}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000500)={0x0, 0x9, 0x2a, {0x2a, 0x8, "b5743125cc6bad051a92108af7d5cb741f6a72379573718720ec93272a6f943b1ca4ef3335a64e78"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x2) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) recvfrom$packet(r6, &(0x7f0000000b00)=""/130, 0x82, 0x20, &(0x7f0000000c40)={0x11, 0x4, 0x0, 0x1, 0xf, 0x6, @multicast}, 0x14) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x8, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0x4, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x801, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x7, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x400001ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x80002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001ac0)={0x44, 0x0, &(0x7f00000009c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000ac0)="1c550e16"}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x1, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x6}}, 0x20) syz_usb_control_io$printer(r3, &(0x7f0000000180)={0x14, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x3, 0x39, @string={0x39, 0x3, "22182caeed799376a7df26f824be73ec6c967c543ed0c2ad65907d088fdeb533f8b153debc9a96fbe99751860ba31ff0270bc4b37e8105"}}}, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x0, 0x31, 0xd6, "3bdafa0116c59b15511893b90c1f2882799d4ee418a12c2e892e12d0428080088afc85d166fad6496632c1b95330cf0520f6faf91ca1f9e862206290a8607d9c9e3270902c7a0c02ff82e965bb8d78cb9dd39ec3c2749d54271e6d66ca398ff56c165df38ba430534e8e4f02c4790ed0b1ea6fa1c020293f62ec35dc7f9b073c08b09e905db005eb40d82e4bf814370de6ee2258298bda46f4035f98c54af5fd6d43a36d5d7b83187c30c38e30d7771cbf76614dfa3994409cd3b1a58ac13ba8a4082a4858d93ad8abec2c959f0f1875bfdfabd179b8"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x9d, {0x9b, "cec422f9ad535386976be3ce98ea971c45e5042cb0c1625084aa5b3d3326fdf0d0c25609d813c69b6b5a7f00d40a50760f98c8a7db2cb0f9cf90e774c0e6c799360cfc5a0bf9000dd7886055912eac3173f1d56557c68dc28408a3308c1ed89e96cc21e3d9ce20541ecdbe2bae028586af69d3dcad3c9eb98217955da49723e75eb8c4c025accb1cfdb1cce450dd410fb7d575d1d42f7b85c7b59e"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0xe}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x7}}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000004c0)=r8) 2m12.183857184s ago: executing program 2 (id=138): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="cd9d839aa901e57927ae33d43d8a055f6b9ff07b5ea54f00cb4e3d557f89cc9154160fa63f865ca79d00f67f8388c71ff2a654de0130ef6d71ca239fc0f56fdd4c253936953357e71b87db4d1d8a7ec2281c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x1c, 0x5, 0x96b, 0x64737664, [0x5, 0x5], [0x3, 0x4], 0x108}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) personality(0x400000) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x700, 0x8, 0x6, 0x1000, {{0x5, 0x4, 0x2, 0x1a, 0x14, 0x65, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b6", 0x86}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x10000, 0x1, 0xeeef0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 2m11.410942195s ago: executing program 2 (id=142): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x100000000000000, 0x10000}], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 2m9.918997219s ago: executing program 2 (id=151): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9"], 0x0}, 0x94) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x1c, 0x5, 0x96b, 0x64737664, [0x5, 0x5], [0x3, 0x4], 0x108}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043", 0x74}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f21", 0xd9}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x10000, 0x1, 0xeeef0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m9.267957344s ago: executing program 2 (id=157): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000e80)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x8001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x6}}, './file0\x00'}) semget$private(0x0, 0x4, 0x299) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e24, @rand_addr=0x64110100}], 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240521deb0b68000000060a010400000000000000000500000008000b400000000040000480240001800b00010074756e6e656c000014000280080001400000001008000240000000091800018008000100667764000c00028008000140000000090900010073797a30"], 0xf0}}, 0x0) listen(r0, 0xfff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = gettid() r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x1, r6}) syz_usb_connect(0x5, 0x3f, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x3, 0xb5, 0xef, 0xe4, 0x9, [], [{{0x9, 0x5, 0x35027ad7510f81c3, 0x2, 0x200, 0x1, 0x1, 0x8}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xfc, 0x40, 0x9}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x3, 0x96, 0x7}}]}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720aa3fe00000000850000000a000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f587e05000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc9271aa8b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d1b4b8345f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d5100000000b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb82e4541f92cb59b197a600331887e92dbcbad7b6b9af3c6f2d42ab9e591f57cc93d629b634518686492e0378547e1a33df35cbc133308dc1a87371bba153f03b8f177560732000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x87}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x300f000, 0xe, 0x0, &(0x7f0000000e40)="0049c69d2786a4b8d3dce769c270", 0x0, 0xad27, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a30000000001400048008000240000000000800e43f0000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800900010078800500030001000000080002400000000108000140000000010900010073797a3000"/207], 0xe0}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000440)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x9, 0xfffffbff, 0x8, 0x4, 0x7fffffff, 0x9, 0x6}, 0x1c) accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c) socket$netlink(0x10, 0x3, 0x12) 2m9.172806989s ago: executing program 32 (id=157): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000e80)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x8001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x6}}, './file0\x00'}) semget$private(0x0, 0x4, 0x299) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e24, @rand_addr=0x64110100}], 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240521deb0b68000000060a010400000000000000000500000008000b400000000040000480240001800b00010074756e6e656c000014000280080001400000001008000240000000091800018008000100667764000c00028008000140000000090900010073797a30"], 0xf0}}, 0x0) listen(r0, 0xfff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = gettid() r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x1, r6}) syz_usb_connect(0x5, 0x3f, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x3, 0xb5, 0xef, 0xe4, 0x9, [], [{{0x9, 0x5, 0x35027ad7510f81c3, 0x2, 0x200, 0x1, 0x1, 0x8}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xfc, 0x40, 0x9}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x3, 0x96, 0x7}}]}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x87}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x300f000, 0xe, 0x0, &(0x7f0000000e40)="0049c69d2786a4b8d3dce769c270", 0x0, 0xad27, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a30000000001400048008000240000000000800e43f0000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800900010078800500030001000000080002400000000108000140000000010900010073797a3000"/207], 0xe0}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000440)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x9, 0xfffffbff, 0x8, 0x4, 0x7fffffff, 0x9, 0x6}, 0x1c) accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c) socket$netlink(0x10, 0x3, 0x12) 11.221386411s ago: executing program 1 (id=577): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x2000000, 0x0, 0x3}, &(0x7f0000001100), 0x0, 0x0) setsockopt(r3, 0x84, 0x80, &(0x7f0000000040)="020000000980ffff", 0x8) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x5a, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "164508", 0x24, 0x6, 0xff, @local, @private0, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0x8001}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 10.207854563s ago: executing program 1 (id=578): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYRES64], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="190000000400000804000000020000000004000035b63e33108fcf989c6ee3843ebe638c8b7ebdff5cd7157397430b1c850f3139c0427a540c921002c10d503cfc95b5ae399066bde5913c8db33b9489fa094f495b7a751498842ae68daae3f4daba225b5501610febef8ef3d524dc781d6ec7165ef92ff8be7bab20aa3fbb4d0ec92b4723487eac9e83c412c1fe9e2d34", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000240), &(0x7f00000003c0)=@udp6=r3, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x8002) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.792005508s ago: executing program 0 (id=581): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) syz_usbip_server_init(0x5) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000019080)='syz0\x00', 0x1ff) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 9.453236643s ago: executing program 4 (id=582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r0}, 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x488040, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) capset(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000240), 0x0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.183414699s ago: executing program 5 (id=583): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.091146096s ago: executing program 4 (id=584): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x86, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r5], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg1\x00'}) accept4$unix(r6, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0xfffffffa) socket$kcm(0x29, 0x5, 0x0) 8.731238101s ago: executing program 0 (id=587): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x2000000, 0x0, 0x3}, &(0x7f0000001100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 7.736551928s ago: executing program 4 (id=588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x2000000, 0x0, 0x3}, &(0x7f0000001100)=[0x0], 0x1, 0x0) setsockopt(r3, 0x84, 0x80, 0x0, 0x0) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x5a, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "164508", 0x24, 0x6, 0xff, @local, @private0, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0x8001}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 6.864177594s ago: executing program 1 (id=589): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) syz_open_dev$dri(&(0x7f0000000580), 0xff, 0x10400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f00000001c0)={{0xfffffffffffffe01, 0x5}, {0x1, 0x598}, 0x80, 0x1}) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0xff8d, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x181002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000"], 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500ee1c090100013800002c00000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000540)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x57}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 6.38319596s ago: executing program 0 (id=590): preadv2(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 6.079205319s ago: executing program 4 (id=591): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x1c, 0x5, 0x96b, 0x64737664, [0x5, 0x5], [0x3, 0x4], 0x108}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b6", 0x86}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7", 0x4e}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010426bd7000fedbdf2503000000300001"], 0x44}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.819420332s ago: executing program 3 (id=592): socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x625b3224, 0x121501) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xbf) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) 5.759885005s ago: executing program 0 (id=593): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000004000000000000000000000018140000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095000000000000003e980000000000002608000000000000850000006c000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000500)={0x20, 0x0, 0x10, "025b8c6f2261832b1a8d801657547f59"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r5, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, 0x0) mq_notify(0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xffff, 0x0, 0x8, 0x200b3, r4, 0x2, '\x00', r6, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x7}, 0x50) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x287, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4003) syz_usb_connect$cdc_ecm(0x3, 0x97, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902850001010000000904000012020600000b24060000b819b958fd1d05240000000d240f0104000000000000000007240a02a0050108241c000002feff0c241b010001000e060800081524127706a317a88b045e4f01a607c0ffcb7e392a"], 0x0) 5.741955547s ago: executing program 5 (id=594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r0}, 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x488040, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) capset(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000240), 0x0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.343488367s ago: executing program 1 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x80) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="09000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000100"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002100)={r1, &(0x7f00000010c0)="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", &(0x7f00000020c0)=""/20, 0x4}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="10007d80", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 5.254424982s ago: executing program 3 (id=596): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$mouse(0x0, 0x0, 0x2042) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f00000001c0)=@other={'trylock', ' ', 'none'}, 0xd) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x5, 0x2, 0x0, 'queue1\x00', 0x7}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x64, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) r5 = request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, 0x0, r5}, 0x0, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, 0x0, 0x0) 5.032318273s ago: executing program 1 (id=597): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) syz_usbip_server_init(0x5) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000019080)='syz0\x00', 0x1ff) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 4.224009374s ago: executing program 5 (id=598): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x86, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r5], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg1\x00'}) accept4$unix(r6, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0xfffffffa) socket$kcm(0x29, 0x5, 0x0) 2.919024682s ago: executing program 5 (id=599): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/freeze_filesystems', 0x101a02, 0xc8) sendfile(r0, r0, 0x0, 0x101) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x1ff, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0x7fff, 0x1000, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) close_range(r1, r7, 0x0) 2.562452088s ago: executing program 3 (id=600): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x181000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {0x5, 0x8, 0x70, 0x4}, 0x34, [0xffffffff, 0x7, 0x1, 0x546, 0xaa, 0x40000, 0xfff, 0xe, 0x9, 0x7f, 0x1000, 0xfff, 0x2, 0x0, 0x743, 0x5193637f, 0x8001, 0x4, 0x5, 0x8, 0x4, 0x0, 0x1, 0x3, 0x3, 0x10001, 0x7, 0x2, 0x0, 0x7, 0x6, 0x8, 0x7fff, 0xe5d, 0x4, 0x200, 0x100, 0x7fffffff, 0x7, 0xff, 0x2, 0x9, 0x8001, 0x56be, 0x2, 0xb7, 0x6, 0xc, 0x8000, 0x9, 0x0, 0x2, 0x2, 0x1, 0x24a, 0x4, 0x4, 0x0, 0x7, 0x53, 0x7, 0xff, 0x10000, 0x1], [0x4, 0xeea1, 0x5, 0x1, 0x9, 0x3, 0x7, 0x5, 0x10, 0x4, 0x1ff, 0x1, 0x7, 0x7ff, 0x81, 0x5, 0xa836, 0x7ff, 0x7f, 0x9, 0x9, 0x1, 0x1, 0x5, 0x8, 0x8, 0x8, 0x8, 0xfe0, 0x8, 0x1c326, 0x1ff, 0x1b3, 0x15, 0xae, 0x2, 0x0, 0x7, 0x101c4d1e, 0xa9, 0x4, 0x9, 0x9, 0x9, 0x5, 0x7, 0x7, 0x4, 0x5, 0x4, 0x200, 0x0, 0x3, 0x5, 0x6, 0x3, 0x400, 0x3ff, 0x2, 0x4, 0x7, 0x9, 0x2ee, 0x9], [0x4b, 0x100, 0x6, 0x9, 0x9e4, 0x4, 0x9, 0x0, 0x6, 0xfffffff8, 0x3ff, 0xfffffff7, 0x3, 0x9, 0x0, 0x8, 0x9, 0x7, 0x0, 0x3, 0x6, 0x1, 0x9, 0x1, 0x0, 0x7fffffff, 0x2, 0x7, 0x3, 0x9, 0xa, 0x8, 0x2, 0x1, 0x800, 0x0, 0x3, 0x4, 0xeaa, 0x8, 0x6, 0x126, 0x5, 0x1, 0xfff, 0x3, 0x8000, 0x86, 0xe, 0x9, 0x7, 0x8, 0x36a, 0x800, 0x5, 0x9, 0xd, 0x6, 0x4, 0x0, 0x2, 0xffffffff, 0xfffffffe, 0x7], [0x8, 0x5, 0x0, 0xeb, 0x1f, 0x8, 0x3, 0x7, 0x10000, 0x1ff, 0xe68, 0x2, 0xff97e24, 0x2, 0x3, 0x877, 0x5, 0x8001, 0x9, 0x7, 0x80000000, 0x6, 0x0, 0x3, 0x5, 0x5353, 0x7f, 0x2, 0x6, 0x47d, 0x0, 0x0, 0x7, 0x4, 0x1, 0x332, 0x1, 0x9, 0x9, 0x3f3c, 0x4, 0x4, 0x6, 0x6, 0x4, 0x1000000, 0xfa, 0x561, 0x7, 0x6, 0x9, 0x4, 0x5, 0x4, 0x1, 0x6, 0x3c4562de, 0x8001, 0x3, 0x8, 0x0, 0x9, 0x6]}, 0x45c) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "598908224ad54afac198b753974001ffffffff080200b78dd4992861ac000000100000000000f6ffffffffffffff00", "f4bd000000801900", [0x0, 0xb]}}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000340)) 2.379246022s ago: executing program 4 (id=601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x2000000, 0x0, 0x3}, &(0x7f0000001100)=[0x0], 0x1, 0x0) setsockopt(r3, 0x84, 0x80, 0x0, 0x0) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x5a, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "164508", 0x24, 0x6, 0xff, @local, @private0, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0x8001}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 2.225673295s ago: executing program 3 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f00000005c0), 0x0) setresgid(0xee00, 0xee01, 0x0) setresgid(0x0, 0x0, 0x0) 2.184187275s ago: executing program 5 (id=603): preadv2(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 2.087824004s ago: executing program 0 (id=604): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.001189037s ago: executing program 5 (id=605): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv6_newaddr={0x6c, 0x14, 0x4, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x93, 0xfe, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0xffffffff, 0x9, 0xc16, 0x4}}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_FLAGS={0x8, 0x8, 0xa}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4028841}, 0x8000) syz_usb_connect$midi(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x15b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x81, 0x80, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x3}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x423}}, {0x0, 0x0}, {0x2, &(0x7f0000000280)=@string={0x2}}]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x30, r4, 0x7ce44000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x800) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}}) read$msr(r4, &(0x7f0000000000)=""/181, 0xb5) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000001940)={&(0x7f0000000440), 0xc, &(0x7f0000001900)={&(0x7f0000000580)={0x1368, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x1140, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/]\\(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x75ae}]}]}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/proc/bus/input/devices\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&\\\',.*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x87}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '})-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\/\\+\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf3}]}]}]}, @ETHTOOL_A_LINKMODES_OURS={0x1fc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xaf, 0x5, "61e715be476cf911d8269d86dc86e56611cf4d650e0563e2dac00e9f1b0361f3b45b0fda18aabd2954436afd8db7538bcdcf66762e6dd12913788fdbe2b0ec2f72bad7bc016a830d25c0d79d709b065dc97d595f8cd2e5010d8a209d7b2c54757ce8730ebf733e4824ab7c878a65e1aef7964909c89accfbe0c4462876e087b4f67d842d3dcc975685420d6721e3a0e5c289638c652e8ecbe1c6da810ac0f88a892f39aa28c018b5c470ce"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x26, 0x5, "5e4319ec6bf729216d654117fc32bc8e9872632e930418acf6e7052367b71f730bc4"}, @ETHTOOL_A_BITSET_MASK={0x51, 0x5, "cf2eaa7808c05c0ef618c5ecbdbf47f6509b6a39e489c5d854329d6c3b688052d7fe2dd01851781db7270ea181ac7c9f0c5ef9a2c151ff6beeba07ffbdf2f8c44ad9446f60871cafdf4f4f8efe"}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/proc/bus/input/devices\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')$\'!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'wfdno'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[+$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$$\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'hash:net,net\x00'}]}]}]}]}, 0x1368}, 0x1, 0x0, 0x0, 0x4881}, 0x40) 663.116424ms ago: executing program 3 (id=606): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) syz_open_dev$dri(&(0x7f0000000580), 0xff, 0x10400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f00000001c0)={{0xfffffffffffffe01, 0x5}, {0x1, 0x598}, 0x80, 0x1}) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0xff8d, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x181002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000"], 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500ee1c090100013800002c00000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000540)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x57}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 552.901126ms ago: executing program 4 (id=607): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000500)={0x20, 0x0, 0x10, "025b8c6f2261832b1a8d801657547f59"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x97, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902850001010000000904000012020600000b24060000b819b958fd1d05240000000d240f0104000000000000000007240a02a0050108241c000002feff0c241b010001000e060800081524127706a317a88b045e4f01a607c0ffcb7e392a"], 0x0) 160.707865ms ago: executing program 1 (id=608): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x1, @vbi={0x1c, 0x5, 0x96b, 0x64737664, [0x5, 0x5], [0x3, 0x4], 0x108}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043", 0x74}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f21", 0xd9}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x10000, 0x1, 0xeeef0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 48.029205ms ago: executing program 3 (id=609): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x86, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r5], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg1\x00'}) accept4$unix(r6, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0xfffffffa) socket$kcm(0x29, 0x5, 0x0) 0s ago: executing program 0 (id=610): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="89bfc7684cf54df7196137f2c36c07ae6dde7697856d7c704e743b57002456734348d6042c7ebe17aad5fd1904a7a12e4718c26e4083fad1cb85fd9077e0b91987b1df57ebd0de93"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20004810) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) kernel console output (not intermixed with test programs): ng new adapter (Intel CE9500 reference design) [ 136.894112][ T9] usb 2-1: media controller created [ 136.935086][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.096528][ T9] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 137.096570][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 137.106631][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 137.234291][ T9] usb 2-1: USB disconnect, device number 8 [ 137.590590][ T6340] veth0_vlan: entered promiscuous mode [ 137.613535][ T6340] veth1_vlan: entered promiscuous mode [ 137.698539][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.707894][ T1010] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 137.738056][ T6612] netlink: 'syz.0.201': attribute type 9 has an invalid length. [ 137.763021][ T6610] bridge_slave_0 (unregistering): left allmulticast mode [ 137.771763][ T6610] bridge_slave_0 (unregistering): left promiscuous mode [ 137.771854][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.883468][ T1010] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 137.883501][ T1010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.883523][ T1010] usb 4-1: Product: syz [ 137.883538][ T1010] usb 4-1: Manufacturer: syz [ 137.883553][ T1010] usb 4-1: SerialNumber: syz [ 137.932970][ T1010] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 138.018170][ T5726] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 138.046851][ T6340] veth0_macvtap: entered promiscuous mode [ 138.066130][ T6340] veth1_macvtap: entered promiscuous mode [ 138.091068][ T6340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.105665][ T6340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.117816][ T886] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 138.125899][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.127610][ T3270] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.127655][ T3270] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.127689][ T3270] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.258240][ T5711] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.268675][ T886] usb 2-1: Using ep0 maxpacket: 16 [ 138.271568][ T886] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 138.271632][ T886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.271661][ T886] usb 2-1: config 0 has no interface number 0 [ 138.279282][ T886] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 138.279360][ T886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.279382][ T886] usb 2-1: Product: syz [ 138.279398][ T886] usb 2-1: Manufacturer: syz [ 138.279413][ T886] usb 2-1: SerialNumber: syz [ 138.292493][ T886] usb 2-1: config 0 descriptor?? [ 138.307124][ T886] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 138.307170][ T886] uvcvideo 2-1:0.105: No valid video chain found. [ 138.407628][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.413934][ T5711] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 138.414011][ T5711] usb 5-1: can't read configurations, error -61 [ 138.416480][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.438048][ T9] usb 4-1: USB disconnect, device number 13 [ 138.469915][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.469937][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.502268][ T886] usb 2-1: USB disconnect, device number 9 [ 138.507191][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.507210][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.550444][ T5711] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.700194][ T5711] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 138.700230][ T5711] usb 5-1: can't read configurations, error -61 [ 138.700440][ T5711] usb usb5-port1: attempt power cycle [ 139.038034][ T5711] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 139.063107][ T5711] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 139.063144][ T5711] usb 5-1: can't read configurations, error -61 [ 139.187927][ T5711] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 139.223520][ T5726] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 139.241300][ T5711] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 139.241337][ T5711] usb 5-1: can't read configurations, error -61 [ 139.241804][ T5711] usb usb5-port1: unable to enumerate USB device [ 139.299834][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.205'. [ 139.327107][ T5726] ath9k_htc: Failed to initialize the device [ 139.333869][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 140.476484][ T6659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.206'. [ 141.447827][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 141.602097][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.604452][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 141.604490][ T9] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 141.604522][ T9] usb 5-1: config 1 interface 0 has no altsetting 1 [ 141.606840][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 141.606868][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.606889][ T9] usb 5-1: Product: syz [ 141.606904][ T9] usb 5-1: Manufacturer: syz [ 141.606925][ T9] usb 5-1: SerialNumber: syz [ 141.687246][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 142.460399][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 142.698598][ T6711] netlink: 14 bytes leftover after parsing attributes in process `syz.4.212'. [ 143.574246][ T6711] team0 (unregistering): Port device team_slave_0 removed [ 143.713234][ T6711] team0 (unregistering): Port device team_slave_1 removed [ 143.867869][ T5718] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 144.048573][ T5718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 144.048600][ T5718] usb 2-1: can't read configurations, error -61 [ 144.179351][ T5718] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 144.342737][ T5718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 144.342775][ T5718] usb 2-1: can't read configurations, error -61 [ 144.343061][ T5718] usb usb2-port1: attempt power cycle [ 144.376720][ T6738] ======================================================= [ 144.376720][ T6738] WARNING: The mand mount option has been deprecated and [ 144.376720][ T6738] and is ignored by this kernel. Remove the mand [ 144.376720][ T6738] option from the mount to silence this warning. [ 144.376720][ T6738] ======================================================= [ 144.685679][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.5.229'. [ 144.697845][ T5718] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 144.723905][ T5718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 144.723945][ T5718] usb 2-1: can't read configurations, error -61 [ 144.847878][ T5718] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 144.873312][ T5718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 144.873349][ T5718] usb 2-1: can't read configurations, error -61 [ 144.873613][ T5718] usb usb2-port1: unable to enumerate USB device [ 144.910086][ T5711] usb 5-1: USB disconnect, device number 10 [ 145.087521][ T6750] netlink: 32 bytes leftover after parsing attributes in process `syz.0.232'. [ 145.914646][ T6765] FAULT_INJECTION: forcing a failure. [ 145.914646][ T6765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.914684][ T6765] CPU: 1 UID: 0 PID: 6765 Comm: syz.3.235 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.914710][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 145.914724][ T6765] Call Trace: [ 145.914731][ T6765] [ 145.914740][ T6765] dump_stack_lvl+0xe8/0x150 [ 145.914771][ T6765] should_fail_ex+0x467/0x600 [ 145.914799][ T6765] _copy_to_user+0x31/0xb0 [ 145.914831][ T6765] simple_read_from_buffer+0xe1/0x170 [ 145.914867][ T6765] proc_fail_nth_read+0x1be/0x230 [ 145.914891][ T6765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.914913][ T6765] ? rw_verify_area+0x250/0x4d0 [ 145.914939][ T6765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.914960][ T6765] vfs_read+0x219/0xa90 [ 145.914986][ T6765] ? __pfx_vfs_read+0x10/0x10 [ 145.915006][ T6765] ? rcu_is_watching+0x15/0xb0 [ 145.915038][ T6765] ? trace_irq_enable+0x3b/0x140 [ 145.915065][ T6765] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 145.915093][ T6765] ? mutex_lock_nested+0x152/0x1d0 [ 145.915126][ T6765] ? fdget_pos+0x252/0x320 [ 145.915162][ T6765] ksys_read+0x156/0x270 [ 145.915185][ T6765] ? __pfx_ksys_read+0x10/0x10 [ 145.915209][ T6765] ? rcu_is_watching+0x15/0xb0 [ 145.915242][ T6765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.915266][ T6765] do_syscall_64+0x174/0x580 [ 145.915294][ T6765] ? trace_irq_disable+0x3b/0x140 [ 145.915318][ T6765] ? clear_bhb_loop+0x40/0x90 [ 145.915343][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.915366][ T6765] RIP: 0033:0x7fad2bc3d68e [ 145.915385][ T6765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 145.915404][ T6765] RSP: 002b:00007fad29eacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.915428][ T6765] RAX: ffffffffffffffda RBX: 00007fad29ead6c0 RCX: 00007fad2bc3d68e [ 145.915444][ T6765] RDX: 000000000000000f RSI: 00007fad29ead0a0 RDI: 0000000000000004 [ 145.915457][ T6765] RBP: 00007fad29ead090 R08: 0000000000000000 R09: 0000000000000000 [ 145.915471][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.915498][ T6765] R13: 00007fad2bef6128 R14: 00007fad2bef6090 R15: 00007ffe1c918208 [ 145.915524][ T6765] [ 149.017398][ T6779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.017426][ T6779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.088528][ T6779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.088554][ T6779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.308782][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 149.460023][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 149.467261][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 149.506345][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 149.506391][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.506414][ T10] usb 5-1: Product: 㾲ꖆ젘 [ 149.506430][ T10] usb 5-1: SerialNumber: syz [ 149.584438][ T6799] pim6reg: entered allmulticast mode [ 149.868570][ T6782] 9p: Bad value for 'wfdno' [ 149.923455][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.923500][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 149.978191][ T10] usb 5-1: USB disconnect, device number 11 [ 150.093748][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.244'. [ 150.156329][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.695106][ T37] audit: type=1326 audit(1781868531.577:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6816 comm="syz.4.248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcdc57ce59 code=0x0 [ 150.810202][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.247'. [ 153.606224][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.607445][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.695697][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.696075][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.722312][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.738821][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.746486][ T6826] netlink: 'syz.0.250': attribute type 1 has an invalid length. [ 153.876426][ T6826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.159020][ T6840] loop5: detected capacity change from 0 to 7 [ 154.161279][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.161348][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.161510][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.161564][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.161702][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.161762][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.161904][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.161956][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.162078][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.162128][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.162261][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.162312][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.162442][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.162493][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.162555][ T6840] ldm_validate_partition_table(): Disk read failed. [ 154.162696][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.162757][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.162903][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.162955][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.163982][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.164040][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.164235][ T6840] Dev loop5: unable to read RDB block 0 [ 154.165704][ T6840] loop5: unable to read partition table [ 154.165851][ T6840] loop5: partition table beyond EOD, truncated [ 154.165882][ T6840] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 154.741181][ T6860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.256'. [ 154.853623][ T6867] FAULT_INJECTION: forcing a failure. [ 154.853623][ T6867] name failslab, interval 1, probability 0, space 0, times 0 [ 154.853660][ T6867] CPU: 0 UID: 0 PID: 6867 Comm: syz.1.258 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.853686][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.853700][ T6867] Call Trace: [ 154.853707][ T6867] [ 154.853716][ T6867] dump_stack_lvl+0xe8/0x150 [ 154.853747][ T6867] should_fail_ex+0x467/0x600 [ 154.853773][ T6867] should_failslab+0xa8/0x100 [ 154.853799][ T6867] __kmalloc_noprof+0xdf/0x7a0 [ 154.853821][ T6867] ? rcu_is_watching+0x15/0xb0 [ 154.853854][ T6867] ? kernfs_fop_write_iter+0x158/0x540 [ 154.853889][ T6867] ? lock_release+0x4b/0x3c0 [ 154.853922][ T6867] kernfs_fop_write_iter+0x158/0x540 [ 154.853953][ T6867] vfs_write+0x61e/0xbb0 [ 154.853980][ T6867] ? __pfx_vfs_write+0x10/0x10 [ 154.854003][ T6867] ? trace_irq_enable+0x3b/0x140 [ 154.854030][ T6867] ? mutex_lock_nested+0x152/0x1d0 [ 154.854072][ T6867] ? fdget_pos+0x252/0x320 [ 154.854110][ T6867] ksys_write+0x156/0x270 [ 154.854133][ T6867] ? __pfx_ksys_write+0x10/0x10 [ 154.854157][ T6867] ? rcu_is_watching+0x15/0xb0 [ 154.854189][ T6867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.854212][ T6867] do_syscall_64+0x174/0x580 [ 154.854239][ T6867] ? trace_irq_disable+0x3b/0x140 [ 154.854264][ T6867] ? clear_bhb_loop+0x40/0x90 [ 154.854290][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.854313][ T6867] RIP: 0033:0x7fa7d575ce59 [ 154.854332][ T6867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.854351][ T6867] RSP: 002b:00007fa7d39ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.854375][ T6867] RAX: ffffffffffffffda RBX: 00007fa7d59d5fa0 RCX: 00007fa7d575ce59 [ 154.854391][ T6867] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000003 [ 154.854406][ T6867] RBP: 00007fa7d39ae090 R08: 0000000000000000 R09: 0000000000000000 [ 154.854420][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.854433][ T6867] R13: 00007fa7d59d6038 R14: 00007fa7d59d5fa0 R15: 00007fff4ccbdc18 [ 154.854458][ T6867] [ 155.704284][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.709734][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.730170][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.733411][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.958730][ T6889] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 155.958819][ T6889] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 155.959067][ T6889] vhci_hcd vhci_hcd.0: Device attached [ 155.974165][ T6889] netlink: 'syz.3.263': attribute type 12 has an invalid length. [ 156.301855][ T10] usb 40-1: SetAddress Request (10) to port 0 [ 156.302026][ T10] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 156.814429][ T6891] vhci_hcd: connection reset by peer [ 156.944084][ T1414] vhci_hcd vhci_hcd.3: stop threads [ 156.944145][ T1414] vhci_hcd vhci_hcd.3: release socket [ 156.944267][ T1414] vhci_hcd vhci_hcd.3: disconnect device [ 157.187960][ T886] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 157.436016][ T886] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 157.436105][ T886] usb 5-1: config 0 has no interface number 0 [ 157.436247][ T886] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 157.436305][ T886] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 157.445509][ T886] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 157.445549][ T886] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 157.445577][ T886] usb 5-1: Manufacturer: syz [ 157.445620][ T886] usb 5-1: SerialNumber: syz [ 157.681549][ T886] usb 5-1: config 0 descriptor?? [ 157.807735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 158.084784][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.098191][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.130696][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.131058][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.164136][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.164463][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.196776][ T6897] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 158.282070][ T6897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.417076][ T6890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.420357][ T6890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.474481][ T886] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 158.488936][ T886] usb 5-1: USB disconnect, device number 12 [ 158.844777][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.5.268'. [ 159.732216][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.266'. [ 160.795636][ T6953] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 160.795718][ T6953] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 160.795936][ T6953] vhci_hcd vhci_hcd.0: Device attached [ 160.819590][ T6953] netlink: 'syz.0.275': attribute type 12 has an invalid length. [ 160.938042][ T6958] FAULT_INJECTION: forcing a failure. [ 160.938042][ T6958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.938106][ T6958] CPU: 1 UID: 0 PID: 6958 Comm: syz.5.276 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 160.938133][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 160.938148][ T6958] Call Trace: [ 160.938160][ T6958] [ 160.938170][ T6958] dump_stack_lvl+0xe8/0x150 [ 160.938202][ T6958] should_fail_ex+0x467/0x600 [ 160.938229][ T6958] _copy_from_user+0x2d/0xb0 [ 160.938262][ T6958] __se_sys_move_pages+0x14ab/0x1da0 [ 160.938298][ T6958] ? rcu_is_watching+0x15/0xb0 [ 160.938333][ T6958] ? __schedule+0x16f2/0x5500 [ 160.938358][ T6958] ? __pfx___se_sys_move_pages+0x10/0x10 [ 160.938397][ T6958] ? rcu_is_watching+0x15/0xb0 [ 160.938437][ T6958] ? rcu_is_watching+0x15/0xb0 [ 160.938476][ T6958] ? trace_irq_enable+0x3b/0x140 [ 160.938503][ T6958] ? irqentry_exit+0x218/0x8f0 [ 160.938535][ T6958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.938563][ T6958] ? __x64_sys_move_pages+0x21/0xf0 [ 160.938595][ T6958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.938619][ T6958] do_syscall_64+0x174/0x580 [ 160.938648][ T6958] ? clear_bhb_loop+0x40/0x90 [ 160.938680][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.938704][ T6958] RIP: 0033:0x7f465a46ce59 [ 160.938724][ T6958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.938743][ T6958] RSP: 002b:00007f46586c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 160.938767][ T6958] RAX: ffffffffffffffda RBX: 00007f465a6e5fa0 RCX: 00007f465a46ce59 [ 160.938784][ T6958] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 160.938799][ T6958] RBP: 00007f46586c6090 R08: 0000200000000040 R09: 0000000000000000 [ 160.938814][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.938828][ T6958] R13: 00007f465a6e6038 R14: 00007f465a6e5fa0 R15: 00007fff89351f18 [ 160.938853][ T6958] [ 161.228237][ T5725] usb 34-1: SetAddress Request (2) to port 0 [ 161.228467][ T5725] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 161.387845][ T10] usb 40-1: device descriptor read/8, error -110 [ 161.654222][ T6955] vhci_hcd: connection reset by peer [ 161.664526][ T1229] vhci_hcd vhci_hcd.0: stop threads [ 161.664563][ T1229] vhci_hcd vhci_hcd.0: release socket [ 161.664606][ T1229] vhci_hcd vhci_hcd.0: disconnect device [ 161.809136][ T10] usb usb40-port1: attempt power cycle [ 162.161784][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 162.382595][ T6969] overlay: filesystem on ./bus not supported as upperdir [ 162.398733][ T10] usb usb40-port1: unable to enumerate USB device [ 162.416318][ T37] audit: type=1800 audit(1781868543.297:10): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.281" name="file0" dev="overlay" ino=131 res=0 errno=0 [ 162.459267][ T6972] veth0_macvtap: left promiscuous mode [ 162.477849][ T886] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 162.487948][ T5718] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 162.630119][ T886] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 162.630156][ T886] usb 2-1: can't read configurations, error -61 [ 162.652410][ T5718] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 162.652440][ T5718] usb 5-1: config 0 has no interface number 0 [ 162.652556][ T5718] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 162.652588][ T5718] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 162.656544][ T5718] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 162.656577][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 162.656600][ T5718] usb 5-1: Manufacturer: syz [ 162.656616][ T5718] usb 5-1: SerialNumber: syz [ 162.694606][ T5718] usb 5-1: config 0 descriptor?? [ 162.777932][ T886] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 162.778499][ T6972] veth0_macvtap: entered promiscuous mode [ 163.053591][ T886] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 163.053629][ T886] usb 2-1: can't read configurations, error -61 [ 163.053870][ T886] usb usb2-port1: attempt power cycle [ 163.704577][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.705139][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.725611][ T886] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 163.745475][ T886] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 163.745509][ T886] usb 2-1: can't read configurations, error -61 [ 163.812865][ T5718] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 163.817576][ T5718] usb 5-1: USB disconnect, device number 13 [ 163.977820][ T886] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 164.000252][ T886] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 164.000288][ T886] usb 2-1: can't read configurations, error -61 [ 164.000501][ T886] usb usb2-port1: unable to enumerate USB device [ 164.700159][ T7022] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 164.700232][ T7022] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 164.700480][ T7022] vhci_hcd vhci_hcd.0: Device attached [ 164.736266][ T7022] netlink: 'syz.4.292': attribute type 12 has an invalid length. [ 164.822867][ T5718] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 165.188805][ T6635] usb 42-1: SetAddress Request (6) to port 0 [ 165.189033][ T6635] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 165.240300][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 165.475661][ T7024] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 165.533542][ T5718] usb 4-1: config 12 has an invalid interface number: 117 but max is 0 [ 165.533584][ T5718] usb 4-1: config 12 has no interface number 0 [ 165.533656][ T5718] usb 4-1: config 12 interface 117 altsetting 128 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 165.533693][ T5718] usb 4-1: config 12 interface 117 has no altsetting 0 [ 165.572474][ T5718] usb 4-1: New USB device found, idVendor=13d2, idProduct=0400, bcdDevice=3a.f3 [ 165.572514][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.572536][ T5718] usb 4-1: Product: à š [ 165.572551][ T5718] usb 4-1: Manufacturer: Ð [ 165.572566][ T5718] usb 4-1: SerialNumber: Т [ 165.630583][ T3270] vhci_hcd vhci_hcd.4: stop threads [ 165.630644][ T3270] vhci_hcd vhci_hcd.4: release socket [ 165.630797][ T3270] vhci_hcd vhci_hcd.4: disconnect device [ 166.277861][ T5725] usb 34-1: device descriptor read/8, error -110 [ 166.346729][ T5718] kaweth 4-1:12.117: couldn't find required endpoints [ 166.357603][ T5718] usb 4-1: USB disconnect, device number 14 [ 166.565859][ T7035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.566197][ T7035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.605831][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 166.668846][ T5725] usb usb34-port1: attempt power cycle [ 166.673912][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.293'. [ 166.707887][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 166.857804][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 166.859654][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.859690][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.859727][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 166.859752][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.862441][ T10] usb 2-1: config 0 descriptor?? [ 166.865210][ T10] hub 2-1:0.0: USB hub found [ 167.027838][ T5718] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 167.074919][ T10] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 167.177773][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 167.180688][ T5718] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 167.180717][ T5718] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.180739][ T5718] usb 5-1: config 0 has no interface number 0 [ 167.180774][ T5718] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.180805][ T5718] usb 5-1: config 0 interface 85 has no altsetting 0 [ 167.184308][ T5718] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 167.184341][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.184364][ T5718] usb 5-1: Product: syz [ 167.184380][ T5718] usb 5-1: Manufacturer: syz [ 167.184396][ T5718] usb 5-1: SerialNumber: syz [ 167.187331][ T5718] usb 5-1: config 0 descriptor?? [ 167.231894][ T5725] usb usb34-port1: unable to enumerate USB device [ 167.295550][ T5718] appletouch 5-1:0.85: Could not find int-in endpoint [ 167.295590][ T5718] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 167.313961][ T5718] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 167.498018][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.499747][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.518351][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.521441][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.555148][ T7044] batadv0: entered promiscuous mode [ 167.555174][ T7044] batadv0: entered allmulticast mode [ 167.557527][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.579214][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.618327][ T7054] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 167.788248][ T886] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 167.940405][ T886] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 167.940440][ T886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 167.943368][ T886] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 167.943399][ T886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.943422][ T886] usb 4-1: Product: syz [ 167.943482][ T886] usb 4-1: Manufacturer: syz [ 167.943499][ T886] usb 4-1: SerialNumber: syz [ 168.000173][ T886] usb 4-1: config 0 descriptor?? [ 168.004619][ T7054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.120946][ T37] audit: type=1326 audit(1781868549.007:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.4.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdc57ce59 code=0x7ffc0000 [ 168.122033][ T37] audit: type=1326 audit(1781868549.007:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.4.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbcdc57ce59 code=0x7ffc0000 [ 168.122133][ T37] audit: type=1326 audit(1781868549.007:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.4.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdc57ce59 code=0x7ffc0000 [ 168.122704][ T37] audit: type=1326 audit(1781868549.007:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.4.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fbcdc57ce59 code=0x7ffc0000 [ 168.123043][ T37] audit: type=1326 audit(1781868549.007:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.4.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdc57ce59 code=0x7ffc0000 [ 168.123827][ T37] audit: type=1326 audit(1781868549.007:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.4.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbcdc57ce59 code=0x7ffc0000 [ 168.123867][ T37] audit: type=1326 audit(1781868549.007:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.4.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdc57ce59 code=0x7ffc0000 [ 168.124097][ T37] audit: type=1326 audit(1781868549.007:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.4.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdc57ce59 code=0x7ffc0000 [ 168.124138][ T37] audit: type=1326 audit(1781868549.007:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.4.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbcdc57ce59 code=0x7ffc0000 [ 168.124176][ T37] audit: type=1326 audit(1781868549.007:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7043 comm="syz.4.300" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdc57ce59 code=0x7ffc0000 [ 168.147194][ T7064] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 108, id = 0 [ 168.794669][ T7071] netlink: 'syz.5.306': attribute type 12 has an invalid length. [ 169.517381][ T7069] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 169.517461][ T7069] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 169.517885][ T7069] vhci_hcd vhci_hcd.0: Device attached [ 169.721616][ T886] usb 5-1: USB disconnect, device number 14 [ 169.942516][ T7073] vhci_hcd: connection closed [ 169.963725][ T66] vhci_hcd vhci_hcd.5: stop threads [ 169.963922][ T66] vhci_hcd vhci_hcd.5: release socket [ 169.964128][ T66] vhci_hcd vhci_hcd.5: disconnect device [ 170.359721][ T6635] usb 42-1: device descriptor read/8, error -110 [ 170.748706][ T6635] usb usb42-port1: attempt power cycle [ 170.840728][ T5581] usb 4-1: USB disconnect, device number 15 [ 170.902665][ T7081] FAULT_INJECTION: forcing a failure. [ 170.902665][ T7081] name failslab, interval 1, probability 0, space 0, times 0 [ 170.902701][ T7081] CPU: 1 UID: 0 PID: 7081 Comm: syz.0.307 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.902727][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.902740][ T7081] Call Trace: [ 170.902748][ T7081] [ 170.902757][ T7081] dump_stack_lvl+0xe8/0x150 [ 170.902787][ T7081] should_fail_ex+0x467/0x600 [ 170.902814][ T7081] should_failslab+0xa8/0x100 [ 170.902852][ T7081] __kvmalloc_node_noprof+0x16a/0x900 [ 170.902877][ T7081] ? seq_read_iter+0x1eb/0xcb0 [ 170.902901][ T7081] ? mutex_lock_nested+0x152/0x1d0 [ 170.902934][ T7081] ? seq_read_iter+0xa5/0xcb0 [ 170.902969][ T7081] seq_read_iter+0x1eb/0xcb0 [ 170.903003][ T7081] seq_read+0x36a/0x490 [ 170.903027][ T7081] ? rcu_is_watching+0x15/0xb0 [ 170.903062][ T7081] ? __pfx_seq_read+0x10/0x10 [ 170.903089][ T7081] ? lock_release+0x4b/0x3c0 [ 170.903113][ T7081] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 170.903135][ T7081] ? bpf_lsm_file_permission+0x9/0x20 [ 170.903157][ T7081] ? security_file_permission+0x75/0x260 [ 170.903188][ T7081] ? rw_verify_area+0x250/0x4d0 [ 170.903209][ T7081] ? rcu_is_watching+0x15/0xb0 [ 170.903240][ T7081] ? __pfx_seq_read+0x10/0x10 [ 170.903262][ T7081] vfs_read+0x219/0xa90 [ 170.903288][ T7081] ? __pfx_vfs_read+0x10/0x10 [ 170.903308][ T7081] ? rcu_is_watching+0x15/0xb0 [ 170.903342][ T7081] ? trace_irq_enable+0x3b/0x140 [ 170.903366][ T7081] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 170.903393][ T7081] ? mutex_lock_nested+0x152/0x1d0 [ 170.903425][ T7081] ? fdget_pos+0x252/0x320 [ 170.903462][ T7081] ksys_read+0x156/0x270 [ 170.903484][ T7081] ? __pfx_ksys_read+0x10/0x10 [ 170.903507][ T7081] ? rcu_is_watching+0x15/0xb0 [ 170.903537][ T7081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.903559][ T7081] do_syscall_64+0x174/0x580 [ 170.903588][ T7081] ? trace_irq_disable+0x3b/0x140 [ 170.903612][ T7081] ? clear_bhb_loop+0x40/0x90 [ 170.903637][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.903659][ T7081] RIP: 0033:0x7f336df7ce59 [ 170.903684][ T7081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.903704][ T7081] RSP: 002b:00007f336c1d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 170.903744][ T7081] RAX: ffffffffffffffda RBX: 00007f336e1f5fa0 RCX: 00007f336df7ce59 [ 170.903760][ T7081] RDX: 0000000000002020 RSI: 0000200000004900 RDI: 0000000000000003 [ 170.903775][ T7081] RBP: 00007f336c1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.903788][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.903806][ T7081] R13: 00007f336e1f6038 R14: 00007f336e1f5fa0 R15: 00007fff5edee938 [ 170.903838][ T7081] [ 171.319152][ T6635] usb usb42-port1: unable to enumerate USB device [ 171.396710][ T7097] netlink: 'syz.3.309': attribute type 12 has an invalid length. [ 171.410333][ T7095] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 171.410422][ T7095] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 171.410655][ T7095] vhci_hcd vhci_hcd.0: Device attached [ 172.019363][ T886] usb 40-1: SetAddress Request (14) to port 0 [ 172.020060][ T886] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 172.333743][ T10] usbhid 2-1:0.0: can't add hid device: -32 [ 172.334047][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 172.698605][ T7096] vhci_hcd: connection reset by peer [ 172.765974][ T1421] vhci_hcd vhci_hcd.3: stop threads [ 172.766222][ T1421] vhci_hcd vhci_hcd.3: release socket [ 172.766363][ T1421] vhci_hcd vhci_hcd.3: disconnect device [ 172.973999][ T7103] tipc: Started in network mode [ 172.974085][ T7103] tipc: Node identity 92a1ffa33344, cluster identity 4711 [ 172.979198][ T7103] tipc: Enabled bearer , priority 0 [ 172.991323][ T7103] syzkaller0: entered promiscuous mode [ 172.991387][ T7103] syzkaller0: entered allmulticast mode [ 173.157733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.328011][ T5581] usb 2-1: USB disconnect, device number 18 [ 173.347977][ T7100] tipc: Resetting bearer [ 173.520766][ T7100] tipc: Disabling bearer [ 173.608522][ T7120] syz.0.316 uses obsolete (PF_INET,SOCK_PACKET) [ 173.959890][ T7126] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 173.959939][ T7126] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 173.960258][ T7126] vhci_hcd vhci_hcd.0: Device attached [ 173.967926][ T7126] netlink: 'syz.5.318': attribute type 12 has an invalid length. [ 174.545731][ T6635] usb 44-1: SetAddress Request (2) to port 0 [ 174.545931][ T6635] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 174.818031][ T5718] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 174.969038][ T7128] vhci_hcd: connection reset by peer [ 175.018000][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 175.023115][ T5718] usb 2-1: config 243 has an invalid interface number: 78 but max is 0 [ 175.023172][ T5718] usb 2-1: config 243 has no interface number 0 [ 175.023247][ T5718] usb 2-1: config 243 interface 78 has no altsetting 0 [ 175.127373][ T12] vhci_hcd vhci_hcd.5: stop threads [ 175.127557][ T12] vhci_hcd vhci_hcd.5: release socket [ 175.137284][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 175.249973][ T5718] usb 2-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=69.b0 [ 175.250014][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.250043][ T5718] usb 2-1: Product: syz [ 175.250085][ T5718] usb 2-1: Manufacturer: syz [ 175.250136][ T5718] usb 2-1: SerialNumber: syz [ 175.818257][ T5718] usb 2-1: USB disconnect, device number 19 [ 175.937922][ T5725] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 175.947888][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 176.099297][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 176.101639][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.101692][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.101728][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 176.101746][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.103807][ T10] usb 6-1: config 0 descriptor?? [ 176.106963][ T10] hub 6-1:0.0: USB hub found [ 176.162770][ T5725] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 176.162807][ T5725] usb 4-1: can't read configurations, error -61 [ 176.297804][ T5725] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 176.316552][ T10] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 176.328601][ T5718] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 176.450173][ T5725] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 176.450211][ T5725] usb 4-1: can't read configurations, error -61 [ 176.450445][ T5725] usb usb4-port1: attempt power cycle [ 176.497765][ T5718] usb 5-1: Using ep0 maxpacket: 16 [ 176.499978][ T5718] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 176.500020][ T5718] usb 5-1: config 252 has no interface number 0 [ 176.500056][ T5718] usb 5-1: config 252 interface 15 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 63 [ 176.502074][ T5718] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 176.502104][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.502129][ T5718] usb 5-1: Product: syz [ 176.502145][ T5718] usb 5-1: Manufacturer: syz [ 176.502162][ T5718] usb 5-1: SerialNumber: syz [ 176.722543][ T7154] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 176.739184][ T5718] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 176.797781][ T5725] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 176.952949][ T12] usb 5-1: Failed to submit usb control message: -71 [ 176.952985][ T12] usb 5-1: unable to send the bmi data to the device: -71 [ 176.953007][ T12] usb 5-1: unable to get target info from device [ 176.953493][ T12] usb 5-1: could not get target info (-71) [ 176.954057][ T5581] usb 5-1: USB disconnect, device number 15 [ 176.956037][ T12] usb 5-1: could not probe fw (-71) [ 177.067891][ T886] usb 40-1: device descriptor read/8, error -110 [ 177.179177][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.184007][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.459530][ T886] usb usb40-port1: attempt power cycle [ 177.583326][ T5725] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 177.583369][ T5725] usb 4-1: can't read configurations, error -61 [ 177.976562][ T5725] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 178.019098][ T886] usb usb40-port1: unable to enumerate USB device [ 178.227814][ T5725] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 178.227854][ T5725] usb 4-1: can't read configurations, error -61 [ 178.248185][ T5725] usb usb4-port1: unable to enumerate USB device [ 178.334425][ T7178] FAULT_INJECTION: forcing a failure. [ 178.334425][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.334465][ T7178] CPU: 0 UID: 0 PID: 7178 Comm: syz.4.331 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.334492][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 178.334516][ T7178] Call Trace: [ 178.334525][ T7178] [ 178.334534][ T7178] dump_stack_lvl+0xe8/0x150 [ 178.334567][ T7178] should_fail_ex+0x467/0x600 [ 178.334595][ T7178] _copy_from_user+0x2d/0xb0 [ 178.334628][ T7178] ___sys_recvmsg+0x173/0x5a0 [ 178.334668][ T7178] ? __pfx____sys_recvmsg+0x10/0x10 [ 178.334706][ T7178] ? __fget_files+0x2a/0x420 [ 178.334739][ T7178] ? rcu_is_watching+0x15/0xb0 [ 178.334788][ T7178] ? __fget_files+0x3a8/0x420 [ 178.334826][ T7178] do_recvmmsg+0x320/0x7f0 [ 178.334867][ T7178] ? __pfx_do_recvmmsg+0x10/0x10 [ 178.334903][ T7178] ? trace_irq_enable+0x3b/0x140 [ 178.334935][ T7178] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 178.334966][ T7178] __x64_sys_recvmmsg+0x198/0x250 [ 178.335005][ T7178] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 178.335044][ T7178] ? rcu_is_watching+0x15/0xb0 [ 178.335077][ T7178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.335101][ T7178] do_syscall_64+0x174/0x580 [ 178.335132][ T7178] ? clear_bhb_loop+0x40/0x90 [ 178.335158][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.335182][ T7178] RIP: 0033:0x7fbcdc57ce59 [ 178.335202][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.335222][ T7178] RSP: 002b:00007fbcda7ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 178.335253][ T7178] RAX: ffffffffffffffda RBX: 00007fbcdc7f5fa0 RCX: 00007fbcdc57ce59 [ 178.335271][ T7178] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000003 [ 178.335287][ T7178] RBP: 00007fbcda7ce090 R08: 0000000000000000 R09: 0000000000000000 [ 178.335302][ T7178] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 178.335316][ T7178] R13: 00007fbcdc7f6038 R14: 00007fbcdc7f5fa0 R15: 00007ffd167ab088 [ 178.335344][ T7178] [ 179.765894][ T6635] usb 44-1: device descriptor read/8, error -110 [ 180.159787][ T6635] usb usb44-port1: attempt power cycle [ 180.872784][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 180.872885][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 180.880169][ T6635] usb usb44-port1: unable to enumerate USB device [ 180.918859][ T10] usb 6-1: USB disconnect, device number 2 [ 180.978460][ T7214] FAULT_INJECTION: forcing a failure. [ 180.978460][ T7214] name failslab, interval 1, probability 0, space 0, times 0 [ 180.978497][ T7214] CPU: 1 UID: 0 PID: 7214 Comm: syz.4.340 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.978523][ T7214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 180.978536][ T7214] Call Trace: [ 180.978544][ T7214] [ 180.978553][ T7214] dump_stack_lvl+0xe8/0x150 [ 180.978582][ T7214] should_fail_ex+0x467/0x600 [ 180.978609][ T7214] should_failslab+0xa8/0x100 [ 180.978633][ T7214] kmem_cache_alloc_noprof+0x87/0x680 [ 180.978654][ T7214] ? do_getname+0x2e/0x250 [ 180.978679][ T7214] ? rt_mutex_slowunlock+0x219/0x460 [ 180.978702][ T7214] do_getname+0x2e/0x250 [ 180.978729][ T7214] ? getname_flags+0x11/0x20 [ 180.978757][ T7214] do_sys_openat2+0xcc/0x200 [ 180.978788][ T7214] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.978819][ T7214] ? ksys_write+0x248/0x270 [ 180.978842][ T7214] ? __pfx_ksys_write+0x10/0x10 [ 180.978864][ T7214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.978887][ T7214] __x64_sys_open+0x11e/0x150 [ 180.978919][ T7214] do_syscall_64+0x174/0x580 [ 180.978945][ T7214] ? trace_irq_disable+0x3b/0x140 [ 180.978977][ T7214] ? clear_bhb_loop+0x40/0x90 [ 180.979001][ T7214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.979027][ T7214] RIP: 0033:0x7fbcdc57ce59 [ 180.979046][ T7214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.979065][ T7214] RSP: 002b:00007fbcda7ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 180.979089][ T7214] RAX: ffffffffffffffda RBX: 00007fbcdc7f5fa0 RCX: 00007fbcdc57ce59 [ 180.979105][ T7214] RDX: 78e22799f4a46f8f RSI: 000000000014a600 RDI: 0000200000000000 [ 180.979120][ T7214] RBP: 00007fbcda7ce090 R08: 0000000000000000 R09: 0000000000000000 [ 180.979133][ T7214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.979146][ T7214] R13: 00007fbcdc7f6038 R14: 00007fbcdc7f5fa0 R15: 00007ffd167ab088 [ 180.979171][ T7214] [ 181.027951][ T5581] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 181.293473][ T5581] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 181.293514][ T5581] usb 2-1: config 0 has no interface number 0 [ 181.293553][ T5581] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 181.293585][ T5581] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 181.296145][ T5581] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 181.296175][ T5581] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 181.296198][ T5581] usb 2-1: Manufacturer: syz [ 181.296214][ T5581] usb 2-1: SerialNumber: syz [ 181.375467][ T5581] usb 2-1: config 0 descriptor?? [ 181.803600][ T7231] tipc: Enabled bearer , priority 0 [ 181.805286][ T7231] syzkaller0: entered promiscuous mode [ 181.805308][ T7231] syzkaller0: entered allmulticast mode [ 181.941559][ T5581] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 181.944950][ T5581] usb 2-1: USB disconnect, device number 20 [ 182.809529][ T7229] tipc: Resetting bearer [ 182.853196][ T7243] netlink: 68 bytes leftover after parsing attributes in process `syz.0.346'. [ 183.250451][ T7229] tipc: Disabling bearer [ 183.320352][ T1010] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 183.359770][ T7252] input: syz1 as /devices/virtual/input/input13 [ 183.368894][ T6635] tipc: Node number set to 2716204963 [ 183.478631][ T1010] usb 2-1: Using ep0 maxpacket: 8 [ 183.480871][ T1010] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 183.480908][ T1010] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 183.480938][ T1010] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.480970][ T1010] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 183.480994][ T1010] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.486955][ T1010] usb 2-1: config 0 descriptor?? [ 183.707907][ T5725] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 183.711745][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 183.711771][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'. [ 183.713234][ T7250] ip6gre0: Master is either lo or non-ether device [ 183.867865][ T5725] usb 6-1: Using ep0 maxpacket: 32 [ 183.883847][ T5725] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 183.883877][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.906953][ T5725] usb 6-1: config 0 descriptor?? [ 183.920077][ T5725] gspca_main: sq930x-2.14.0 probing 041e:403c [ 184.325404][ T5725] gspca_sq930x: ucbus_write failed -71 [ 184.325710][ T5725] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 184.344440][ T5725] usb 6-1: USB disconnect, device number 3 [ 184.527561][ T1010] usbhid 2-1:0.0: can't add hid device: -71 [ 184.527657][ T1010] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 184.544876][ T1010] usb 2-1: USB disconnect, device number 21 [ 184.679141][ T7264] comedi comedi0: reset error (fatal) [ 185.086335][ T7287] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 185.086371][ T7287] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 185.086733][ T7287] vhci_hcd vhci_hcd.0: Device attached [ 185.099934][ T7287] netlink: 'syz.4.358': attribute type 12 has an invalid length. [ 185.412616][ T5581] usb 42-1: SetAddress Request (10) to port 0 [ 185.413046][ T5581] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 186.017593][ T7288] vhci_hcd: connection reset by peer [ 186.041120][ T1403] vhci_hcd vhci_hcd.4: stop threads [ 186.041162][ T1403] vhci_hcd vhci_hcd.4: release socket [ 186.041285][ T1403] vhci_hcd vhci_hcd.4: disconnect device [ 187.454675][ T7305] FAULT_INJECTION: forcing a failure. [ 187.454675][ T7305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.454713][ T7305] CPU: 1 UID: 0 PID: 7305 Comm: syz.0.363 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 187.454738][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 187.454752][ T7305] Call Trace: [ 187.454760][ T7305] [ 187.454769][ T7305] dump_stack_lvl+0xe8/0x150 [ 187.454799][ T7305] should_fail_ex+0x467/0x600 [ 187.454832][ T7305] _copy_from_user+0x2d/0xb0 [ 187.454864][ T7305] __sys_bind+0x1cc/0x410 [ 187.454892][ T7305] ? __pfx___sys_bind+0x10/0x10 [ 187.454925][ T7305] ? __pfx_ksys_write+0x10/0x10 [ 187.454951][ T7305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.454975][ T7305] __x64_sys_bind+0x7a/0x90 [ 187.455002][ T7305] do_syscall_64+0x174/0x580 [ 187.455030][ T7305] ? trace_irq_disable+0x3b/0x140 [ 187.455055][ T7305] ? clear_bhb_loop+0x40/0x90 [ 187.455081][ T7305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.455103][ T7305] RIP: 0033:0x7f336df7ce59 [ 187.455122][ T7305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.455143][ T7305] RSP: 002b:00007f336c1d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 187.455168][ T7305] RAX: ffffffffffffffda RBX: 00007f336e1f5fa0 RCX: 00007f336df7ce59 [ 187.455185][ T7305] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000003 [ 187.455199][ T7305] RBP: 00007f336c1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 187.455214][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.455227][ T7305] R13: 00007f336e1f6038 R14: 00007f336e1f5fa0 R15: 00007fff5edee938 [ 187.455252][ T7305] [ 187.817741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.860332][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.860652][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.022492][ T7316] netlink: 14 bytes leftover after parsing attributes in process `syz.0.367'. [ 188.181028][ T7321] hfsplus: unable to find HFS+ superblock [ 188.671253][ T5725] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 188.726820][ T7316] team0 (unregistering): Port device team_slave_0 removed [ 188.739882][ T7316] team0 (unregistering): Port device team_slave_1 removed [ 188.870470][ T5725] usb 4-1: unable to get BOS descriptor or descriptor too short [ 188.871807][ T5725] usb 4-1: config 12 has an invalid interface number: 117 but max is 0 [ 188.871838][ T5725] usb 4-1: config 12 has no interface number 0 [ 188.871875][ T5725] usb 4-1: config 12 interface 117 altsetting 128 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 188.871906][ T5725] usb 4-1: config 12 interface 117 has no altsetting 0 [ 188.875504][ T5725] usb 4-1: New USB device found, idVendor=13d2, idProduct=0400, bcdDevice=3a.f3 [ 188.875538][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.875561][ T5725] usb 4-1: Product: à š [ 188.875577][ T5725] usb 4-1: Manufacturer: Ð [ 188.875595][ T5725] usb 4-1: SerialNumber: Т [ 189.100380][ T5725] kaweth 4-1:12.117: couldn't find required endpoints [ 189.145569][ T5725] usb 4-1: USB disconnect, device number 20 [ 189.718866][ T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 189.738730][ T5725] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 189.872479][ T10] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 189.872518][ T10] usb 2-1: config 0 has no interface number 0 [ 189.872554][ T10] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 189.876020][ T10] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 189.876060][ T10] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 189.876083][ T10] usb 2-1: Manufacturer: syz [ 189.876099][ T10] usb 2-1: SerialNumber: syz [ 189.887955][ T5725] usb 6-1: Using ep0 maxpacket: 32 [ 189.897510][ T5725] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 189.897592][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.955753][ T10] usb 2-1: config 0 descriptor?? [ 190.104271][ T5725] usb 6-1: config 0 descriptor?? [ 190.119276][ T5725] gspca_main: sq930x-2.14.0 probing 041e:403c [ 190.507830][ T5581] usb 42-1: device descriptor read/8, error -110 [ 190.515959][ T5725] gspca_sq930x: ucbus_write failed -71 [ 190.516201][ T5725] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 190.526555][ T5725] usb 6-1: USB disconnect, device number 4 [ 190.909306][ T5581] usb usb42-port1: attempt power cycle [ 191.097755][ T7342] comedi comedi0: reset error (fatal) [ 191.101809][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.102755][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.374770][ T7358] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 191.506001][ T5581] usb usb42-port1: unable to enumerate USB device [ 192.107508][ T7369] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 192.107543][ T7369] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 192.123232][ T7369] vhci_hcd vhci_hcd.0: Device attached [ 192.125013][ T7369] netlink: 'syz.5.381': attribute type 12 has an invalid length. [ 192.408853][ T5581] usb 44-1: SetAddress Request (6) to port 0 [ 192.408913][ T5581] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 192.489508][ T10] usb 2-1: USB disconnect, device number 22 [ 192.879910][ T7376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.383'. [ 192.917436][ T7370] vhci_hcd: connection reset by peer [ 192.923541][ T66] vhci_hcd vhci_hcd.5: stop threads [ 192.923565][ T66] vhci_hcd vhci_hcd.5: release socket [ 192.923613][ T66] vhci_hcd vhci_hcd.5: disconnect device [ 193.511010][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 193.620828][ T7384] ALSA: mixer_oss: invalid OSS volume '' [ 193.660204][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.661446][ T10] usb 4-1: config 12 has an invalid interface number: 117 but max is 0 [ 193.661474][ T10] usb 4-1: config 12 has no interface number 0 [ 193.661995][ T10] usb 4-1: config 12 interface 117 altsetting 128 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 193.662543][ T10] usb 4-1: config 12 interface 117 has no altsetting 0 [ 193.665782][ T10] usb 4-1: New USB device found, idVendor=13d2, idProduct=0400, bcdDevice=3a.f3 [ 193.665813][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.665836][ T10] usb 4-1: Product: à š [ 193.665852][ T10] usb 4-1: Manufacturer: Ð [ 193.665869][ T10] usb 4-1: SerialNumber: Т [ 193.790848][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.799999][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.957876][ T10] kaweth 4-1:12.117: couldn't find required endpoints [ 193.982104][ T10] usb 4-1: USB disconnect, device number 21 [ 194.127773][ T5711] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 194.291352][ T5711] usb 2-1: unable to get BOS descriptor or descriptor too short [ 194.292336][ T5711] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 194.292373][ T5711] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 194.292403][ T5711] usb 2-1: config 1 interface 0 has no altsetting 1 [ 194.294329][ T5711] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 194.294359][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.294381][ T5711] usb 2-1: Product: syz [ 194.294396][ T5711] usb 2-1: Manufacturer: syz [ 194.294411][ T5711] usb 2-1: SerialNumber: syz [ 194.354309][ T1345] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.354433][ T1345] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.393466][ T5711] smsusb:smsusb_probe: board id=8, interface number 0 [ 194.595465][ T5711] smsusb:smsusb_probe: Device initialized with return code -19 [ 194.800794][ T7407] netlink: 14 bytes leftover after parsing attributes in process `syz.1.388'. [ 194.839577][ T7407] team0 (unregistering): left allmulticast mode [ 194.839603][ T7407] team_slave_0: left allmulticast mode [ 194.839625][ T7407] team_slave_1: left allmulticast mode [ 194.907925][ T7407] team0 (unregistering): Port device team_slave_0 removed [ 194.982799][ T7407] team0 (unregistering): Port device team_slave_1 removed [ 195.389093][ T7401] comedi comedi0: reset error (fatal) [ 195.587847][ T31] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 195.819231][ T31] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 195.819263][ T31] usb 4-1: config 0 has no interface number 0 [ 195.819306][ T31] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 195.821477][ T31] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 195.821509][ T31] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 195.821532][ T31] usb 4-1: Manufacturer: syz [ 195.821548][ T31] usb 4-1: SerialNumber: syz [ 195.824107][ T31] usb 4-1: config 0 descriptor?? [ 196.287881][ T5711] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 196.427972][ T7406] Bluetooth: hci2: command 0x0406 tx timeout [ 196.428011][ T7406] Bluetooth: hci0: command 0x0406 tx timeout [ 196.428033][ T7406] Bluetooth: hci3: command 0x0406 tx timeout [ 196.428074][ T5594] Bluetooth: hci1: command 0x0406 tx timeout [ 196.439306][ T5711] usb 6-1: Using ep0 maxpacket: 32 [ 196.467288][ T5711] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 196.467308][ T5711] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.467347][ T5711] usb 6-1: config 0 has no interface number 0 [ 196.467382][ T5711] usb 6-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.467411][ T5711] usb 6-1: config 0 interface 85 has no altsetting 0 [ 196.512993][ T5711] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 196.513038][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.513062][ T5711] usb 6-1: Product: syz [ 196.513078][ T5711] usb 6-1: Manufacturer: syz [ 196.513093][ T5711] usb 6-1: SerialNumber: syz [ 196.515724][ T5711] usb 6-1: config 0 descriptor?? [ 196.627262][ T5711] appletouch 6-1:0.85: Could not find int-in endpoint [ 196.627292][ T5711] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 196.643565][ T5711] usbhid 6-1:0.85: couldn't find an input interrupt endpoint [ 196.724091][ T7421] batadv1: entered promiscuous mode [ 196.724116][ T7421] batadv1: entered allmulticast mode [ 196.737548][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.739325][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.858302][ T7431] FAULT_INJECTION: forcing a failure. [ 196.858302][ T7431] name failslab, interval 1, probability 0, space 0, times 0 [ 196.858358][ T7431] CPU: 0 UID: 0 PID: 7431 Comm: syz.0.398 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.858383][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.858397][ T7431] Call Trace: [ 196.858406][ T7431] [ 196.858414][ T7431] dump_stack_lvl+0xe8/0x150 [ 196.858445][ T7431] should_fail_ex+0x467/0x600 [ 196.858472][ T7431] should_failslab+0xa8/0x100 [ 196.858498][ T7431] __kmalloc_noprof+0xdf/0x7a0 [ 196.858519][ T7431] ? kfree+0x4d/0x6c0 [ 196.858538][ T7431] ? tomoyo_realpath_from_path+0xef/0x640 [ 196.858565][ T7431] tomoyo_realpath_from_path+0xef/0x640 [ 196.858593][ T7431] ? tomoyo_path_number_perm+0x219/0x5f0 [ 196.858625][ T7431] tomoyo_path_number_perm+0x246/0x5f0 [ 196.858658][ T7431] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 196.858691][ T7431] ? rcu_is_watching+0x15/0xb0 [ 196.858722][ T7431] ? trace_sched_exit_tp+0x3a/0x130 [ 196.858751][ T7431] ? hook_file_ioctl+0x1f3/0x5d0 [ 196.858786][ T7431] ? lock_release+0x4b/0x3c0 [ 196.858812][ T7431] ? rcu_is_watching+0x15/0xb0 [ 196.858845][ T7431] ? __fget_files+0x2a/0x420 [ 196.858877][ T7431] ? __fget_files+0x3a8/0x420 [ 196.858909][ T7431] ? __fget_files+0x2a/0x420 [ 196.858951][ T7431] security_file_ioctl+0xc3/0x2a0 [ 196.858989][ T7431] __se_sys_ioctl+0x47/0x170 [ 196.859014][ T7431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.859037][ T7431] do_syscall_64+0x174/0x580 [ 196.859067][ T7431] ? clear_bhb_loop+0x40/0x90 [ 196.859093][ T7431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.859115][ T7431] RIP: 0033:0x7f336df7ce59 [ 196.859135][ T7431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.859155][ T7431] RSP: 002b:00007f336c1d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.859178][ T7431] RAX: ffffffffffffffda RBX: 00007f336e1f5fa0 RCX: 00007f336df7ce59 [ 196.859195][ T7431] RDX: 0000200000000040 RSI: 00000000c2604110 RDI: 0000000000000003 [ 196.859210][ T7431] RBP: 00007f336c1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.859224][ T7431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.859237][ T7431] R13: 00007f336e1f6038 R14: 00007f336e1f5fa0 R15: 00007fff5edee938 [ 196.859263][ T7431] [ 196.859345][ T7431] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.949237][ T5711] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 197.129360][ T5718] usb 2-1: USB disconnect, device number 23 [ 197.143807][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 197.152996][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.153033][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.153071][ T5711] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 197.153096][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.246371][ T5711] usb 5-1: config 0 descriptor?? [ 197.254487][ T5711] hub 5-1:0.0: USB hub found [ 197.460222][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 197.460243][ T37] audit: type=1326 audit(1781868578.347:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7420 comm="syz.5.395" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465a46ce59 code=0x7ffc0000 [ 197.460577][ T37] audit: type=1326 audit(1781868578.347:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7420 comm="syz.5.395" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465a46ce59 code=0x7ffc0000 [ 197.460776][ T37] audit: type=1326 audit(1781868578.347:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7420 comm="syz.5.395" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f465a46ce59 code=0x7ffc0000 [ 197.460979][ T37] audit: type=1326 audit(1781868578.347:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7420 comm="syz.5.395" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465a46ce59 code=0x7ffc0000 [ 197.461324][ T37] audit: type=1326 audit(1781868578.347:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7420 comm="syz.5.395" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f465a46ce59 code=0x7ffc0000 [ 197.461611][ T37] audit: type=1326 audit(1781868578.347:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7420 comm="syz.5.395" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465a46ce59 code=0x7ffc0000 [ 197.461883][ T37] audit: type=1326 audit(1781868578.347:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7420 comm="syz.5.395" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465a46ce59 code=0x7ffc0000 [ 197.462086][ T37] audit: type=1326 audit(1781868578.347:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7420 comm="syz.5.395" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f465a46ce59 code=0x7ffc0000 [ 197.462797][ T37] audit: type=1326 audit(1781868578.347:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7420 comm="syz.5.395" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465a46ce59 code=0x7ffc0000 [ 197.463074][ T37] audit: type=1326 audit(1781868578.347:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7420 comm="syz.5.395" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f465a46ce59 code=0x7ffc0000 [ 197.464854][ T7440] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 108, id = 0 [ 197.672501][ T5581] usb 44-1: device descriptor read/8, error -110 [ 197.672584][ T5711] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 197.792065][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 198.326435][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.339273][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.342436][ T7446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.344213][ T7446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.508581][ T10] usb 4-1: USB disconnect, device number 22 [ 198.552979][ T5581] usb usb44-port1: attempt power cycle [ 198.581980][ T5718] usb 6-1: USB disconnect, device number 5 [ 199.058162][ T5718] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 199.112923][ T5581] usb usb44-port1: unable to enumerate USB device [ 199.210703][ T5718] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 199.210738][ T5718] usb 2-1: config 0 has no interface number 0 [ 199.210787][ T5718] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 199.210819][ T5718] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 199.214800][ T5718] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 199.214830][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 199.214851][ T5718] usb 2-1: Manufacturer: syz [ 199.214866][ T5718] usb 2-1: SerialNumber: syz [ 199.290520][ T5718] usb 2-1: config 0 descriptor?? [ 199.818549][ T7451] comedi comedi0: reset error (fatal) [ 199.863457][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.864857][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.059780][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.062601][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.121752][ T5718] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 200.125369][ T5718] usb 2-1: USB disconnect, device number 24 [ 200.290128][ T5711] usbhid 5-1:0.0: can't add hid device: -71 [ 200.290223][ T5711] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 200.320312][ T5711] usb 5-1: USB disconnect, device number 16 [ 200.409781][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.409'. [ 200.647803][ T5718] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 200.761487][ T7487] FAULT_INJECTION: forcing a failure. [ 200.761487][ T7487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.761533][ T7487] CPU: 0 UID: 0 PID: 7487 Comm: syz.1.414 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 200.761559][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.761573][ T7487] Call Trace: [ 200.761581][ T7487] [ 200.761589][ T7487] dump_stack_lvl+0xe8/0x150 [ 200.761622][ T7487] should_fail_ex+0x467/0x600 [ 200.761649][ T7487] _copy_from_user+0x2d/0xb0 [ 200.761696][ T7487] ___sys_sendmsg+0x1c6/0x360 [ 200.761729][ T7487] ? rcu_is_watching+0x15/0xb0 [ 200.761758][ T7487] ? get_pid_task+0x20/0x1f0 [ 200.761781][ T7487] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.761817][ T7487] ? rcu_is_watching+0x15/0xb0 [ 200.761860][ T7487] ? __fget_files+0x2a/0x420 [ 200.761893][ T7487] ? __fget_files+0x3a8/0x420 [ 200.761929][ T7487] __x64_sys_sendmsg+0x1b7/0x290 [ 200.761963][ T7487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.762013][ T7487] ? rcu_is_watching+0x15/0xb0 [ 200.762045][ T7487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.762074][ T7487] do_syscall_64+0x174/0x580 [ 200.762102][ T7487] ? trace_irq_disable+0x3b/0x140 [ 200.762127][ T7487] ? clear_bhb_loop+0x40/0x90 [ 200.762152][ T7487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.762176][ T7487] RIP: 0033:0x7fa7d575ce59 [ 200.762196][ T7487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.762216][ T7487] RSP: 002b:00007fa7d39ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.762239][ T7487] RAX: ffffffffffffffda RBX: 00007fa7d59d5fa0 RCX: 00007fa7d575ce59 [ 200.762255][ T7487] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 200.762272][ T7487] RBP: 00007fa7d39ae090 R08: 0000000000000000 R09: 0000000000000000 [ 200.762292][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.762301][ T7487] R13: 00007fa7d59d6038 R14: 00007fa7d59d5fa0 R15: 00007fff4ccbdc18 [ 200.762320][ T7487] [ 200.777770][ T5718] usb 6-1: device descriptor read/64, error -71 [ 201.037789][ T5718] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 201.124077][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.124400][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.167798][ T5718] usb 6-1: device descriptor read/64, error -71 [ 201.257800][ T5711] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 201.278470][ T5718] usb usb6-port1: attempt power cycle [ 201.407818][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 201.414150][ T5711] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 201.414252][ T5711] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.414312][ T5711] usb 2-1: config 0 has no interface number 0 [ 201.414346][ T5711] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.414378][ T5711] usb 2-1: config 0 interface 85 has no altsetting 0 [ 201.434950][ T5711] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 201.435034][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.435088][ T5711] usb 2-1: Product: syz [ 201.435130][ T5711] usb 2-1: Manufacturer: syz [ 201.435173][ T5711] usb 2-1: SerialNumber: syz [ 201.457265][ T5711] usb 2-1: config 0 descriptor?? [ 201.474491][ T5711] appletouch 2-1:0.85: Could not find int-in endpoint [ 201.474565][ T5711] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 201.478166][ T5711] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 201.617797][ T5718] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 201.639382][ T5718] usb 6-1: device descriptor read/8, error -71 [ 201.698398][ T7491] batadv1: entered promiscuous mode [ 201.698426][ T7491] batadv1: entered allmulticast mode [ 201.884263][ T5718] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 201.898378][ T5718] usb 6-1: device descriptor read/8, error -71 [ 201.904659][ T7504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.905014][ T7504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.007965][ T5718] usb usb6-port1: unable to enumerate USB device [ 202.231517][ T7499] comedi comedi0: reset error (fatal) [ 202.413294][ T7515] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 108, id = 0 [ 202.515667][ T7519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.515987][ T7519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.627845][ T6635] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 202.779589][ T6635] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 202.779621][ T6635] usb 5-1: config 0 has no interface number 0 [ 202.779656][ T6635] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 202.781200][ T6635] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 202.781231][ T6635] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 202.781259][ T6635] usb 5-1: Manufacturer: syz [ 202.781277][ T6635] usb 5-1: SerialNumber: syz [ 202.783557][ T6635] usb 5-1: config 0 descriptor?? [ 203.069407][ T7524] netlink: 'syz.3.426': attribute type 27 has an invalid length. [ 203.094921][ T5711] usb 2-1: USB disconnect, device number 25 [ 203.838377][ T5581] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 203.998503][ T5581] usb 6-1: Using ep0 maxpacket: 32 [ 204.002109][ T5581] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 204.002142][ T5581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.006919][ T5581] usb 6-1: config 0 descriptor?? [ 204.031460][ T5581] gspca_main: sq930x-2.14.0 probing 041e:403c [ 204.173213][ T7546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.173614][ T7546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.207960][ T7546] batadv0: entered promiscuous mode [ 204.207985][ T7546] batadv0: entered allmulticast mode [ 204.214161][ T5581] gspca_sq930x: reg_r 001f failed -32 [ 204.214241][ T5581] sq930x 6-1:0.0: probe with driver sq930x failed with error -32 [ 204.225354][ T5581] usb 6-1: USB disconnect, device number 10 [ 204.333931][ T7550] FAULT_INJECTION: forcing a failure. [ 204.333931][ T7550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.333970][ T7550] CPU: 0 UID: 0 PID: 7550 Comm: syz.3.436 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.333997][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.334011][ T7550] Call Trace: [ 204.334019][ T7550] [ 204.334028][ T7550] dump_stack_lvl+0xe8/0x150 [ 204.334059][ T7550] should_fail_ex+0x467/0x600 [ 204.334086][ T7550] _copy_from_iter+0x1d3/0x1660 [ 204.334113][ T7550] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.334137][ T7550] ? rcu_is_watching+0x15/0xb0 [ 204.334171][ T7550] ? __pfx__copy_from_iter+0x10/0x10 [ 204.334198][ T7550] ? is_bpf_text_address+0x26/0x2b0 [ 204.334227][ T7550] ? rcu_is_watching+0x15/0xb0 [ 204.334259][ T7550] ? rcu_is_watching+0x15/0xb0 [ 204.334294][ T7550] tun_get_user+0x269/0x4370 [ 204.334318][ T7550] ? is_bpf_text_address+0x292/0x2b0 [ 204.334350][ T7550] ? kernel_text_address+0xa5/0xe0 [ 204.334377][ T7550] ? __kernel_text_address+0xd/0x30 [ 204.334403][ T7550] ? orc_sort_swap+0x121/0x130 [ 204.334430][ T7550] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 204.334455][ T7550] ? arch_stack_walk+0xfb/0x150 [ 204.334484][ T7550] ? __might_fault+0xaf/0x130 [ 204.334507][ T7550] ? rcu_is_watching+0x15/0xb0 [ 204.334540][ T7550] ? __pfx_tun_get_user+0x10/0x10 [ 204.334561][ T7550] ? _parse_integer_limit+0x1ae/0x1f0 [ 204.334587][ T7550] ? kstrtoull+0x12f/0x1d0 [ 204.334613][ T7550] ? ref_tracker_alloc+0x353/0x4c0 [ 204.334648][ T7550] ? get_pid_task+0x20/0x1f0 [ 204.334668][ T7550] ? rcu_is_watching+0x15/0xb0 [ 204.334699][ T7550] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 204.334724][ T7550] ? rcu_is_watching+0x15/0xb0 [ 204.334755][ T7550] ? tun_get+0x1c/0x2f0 [ 204.334777][ T7550] ? tun_get+0x1c/0x2f0 [ 204.334801][ T7550] ? rcu_is_watching+0x15/0xb0 [ 204.334831][ T7550] ? tun_get+0x1c/0x2f0 [ 204.334852][ T7550] ? lock_release+0x4b/0x3c0 [ 204.334879][ T7550] ? rcu_is_watching+0x15/0xb0 [ 204.334910][ T7550] ? tun_get+0x1c/0x2f0 [ 204.334934][ T7550] tun_chr_write_iter+0x119/0x200 [ 204.334959][ T7550] vfs_write+0x61e/0xbb0 [ 204.334985][ T7550] ? __pfx_vfs_write+0x10/0x10 [ 204.335012][ T7550] ? __fget_files+0x2a/0x420 [ 204.335050][ T7550] ksys_write+0x156/0x270 [ 204.335074][ T7550] ? __pfx_ksys_write+0x10/0x10 [ 204.335099][ T7550] ? rcu_is_watching+0x15/0xb0 [ 204.335131][ T7550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.335155][ T7550] do_syscall_64+0x174/0x580 [ 204.335184][ T7550] ? trace_irq_disable+0x3b/0x140 [ 204.335209][ T7550] ? clear_bhb_loop+0x40/0x90 [ 204.335235][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.335258][ T7550] RIP: 0033:0x7fad2bc7ce59 [ 204.335278][ T7550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.335298][ T7550] RSP: 002b:00007fad29ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 204.335322][ T7550] RAX: ffffffffffffffda RBX: 00007fad2bef5fa0 RCX: 00007fad2bc7ce59 [ 204.335340][ T7550] RDX: 0000000000000036 RSI: 0000200000000100 RDI: 0000000000000003 [ 204.335354][ T7550] RBP: 00007fad29ece090 R08: 0000000000000000 R09: 0000000000000000 [ 204.335368][ T7550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.335382][ T7550] R13: 00007fad2bef6038 R14: 00007fad2bef5fa0 R15: 00007ffe1c918208 [ 204.335408][ T7550] [ 205.160602][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 205.160623][ T37] audit: type=1326 audit(1781868586.047:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336df7ce59 code=0x7ffc0000 [ 205.162218][ T37] audit: type=1326 audit(1781868586.047:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336df7ce59 code=0x7ffc0000 [ 205.162267][ T37] audit: type=1326 audit(1781868586.047:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f336df7ce59 code=0x7ffc0000 [ 205.162308][ T37] audit: type=1326 audit(1781868586.047:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336df7ce59 code=0x7ffc0000 [ 205.162350][ T37] audit: type=1326 audit(1781868586.047:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336df7ce59 code=0x7ffc0000 [ 205.163275][ T37] audit: type=1326 audit(1781868586.047:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f336df7ce59 code=0x7ffc0000 [ 205.164669][ T37] audit: type=1326 audit(1781868586.047:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336df7ce59 code=0x7ffc0000 [ 205.164917][ T37] audit: type=1326 audit(1781868586.047:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336df7ce59 code=0x7ffc0000 [ 205.165066][ T37] audit: type=1326 audit(1781868586.047:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f336df7ce59 code=0x7ffc0000 [ 205.165289][ T37] audit: type=1326 audit(1781868586.047:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336df7ce59 code=0x7ffc0000 [ 205.199221][ T7570] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 108, id = 0 [ 205.514645][ T9] usb 5-1: USB disconnect, device number 17 [ 205.861030][ T7580] ptrace attach of ""[7581] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7580] [ 205.862668][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.863352][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.955617][ T7558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.168775][ T7593] FAULT_INJECTION: forcing a failure. [ 208.168775][ T7593] name failslab, interval 1, probability 0, space 0, times 0 [ 208.168813][ T7593] CPU: 1 UID: 0 PID: 7593 Comm: syz.0.447 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 208.168839][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 208.168854][ T7593] Call Trace: [ 208.168862][ T7593] [ 208.168870][ T7593] dump_stack_lvl+0xe8/0x150 [ 208.168900][ T7593] should_fail_ex+0x467/0x600 [ 208.168928][ T7593] should_failslab+0xa8/0x100 [ 208.168954][ T7593] kmem_cache_alloc_noprof+0x87/0x680 [ 208.168976][ T7593] ? audit_log_start+0x108/0xa30 [ 208.169011][ T7593] audit_log_start+0x108/0xa30 [ 208.169046][ T7593] ? __pfx_audit_log_start+0x10/0x10 [ 208.169075][ T7593] ? lock_release+0x4b/0x3c0 [ 208.169102][ T7593] ? get_pid_task+0x20/0x1f0 [ 208.169122][ T7593] ? get_pid_task+0x20/0x1f0 [ 208.169146][ T7593] ? rcu_is_watching+0x15/0xb0 [ 208.169179][ T7593] audit_seccomp+0x63/0x190 [ 208.169220][ T7593] __seccomp_filter+0xd14/0x1e00 [ 208.169255][ T7593] ? __pfx___seccomp_filter+0x10/0x10 [ 208.169283][ T7593] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 208.169311][ T7593] ? rt_mutex_slowunlock+0x219/0x460 [ 208.169332][ T7593] ? trace_irq_enable+0x3b/0x140 [ 208.169356][ T7593] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 208.169378][ T7593] ? lock_release+0x4b/0x3c0 [ 208.169402][ T7593] ? fdget_pos+0x252/0x320 [ 208.169436][ T7593] ? fput+0xa0/0xd0 [ 208.169469][ T7593] ? __pfx_ksys_write+0x10/0x10 [ 208.169493][ T7593] ? __secure_computing+0xe7/0x2b0 [ 208.169523][ T7593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.169546][ T7593] do_syscall_64+0x10e/0x580 [ 208.169579][ T7593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.169607][ T7593] ? clear_bhb_loop+0x40/0x90 [ 208.169632][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.169654][ T7593] RIP: 0033:0x7f336df7ce59 [ 208.169674][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.169694][ T7593] RSP: 002b:00007f336c1d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 208.169718][ T7593] RAX: ffffffffffffffda RBX: 00007f336e1f5fa0 RCX: 00007f336df7ce59 [ 208.169734][ T7593] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 208.169748][ T7593] RBP: 00007f336c1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 208.169763][ T7593] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 208.169776][ T7593] R13: 00007f336e1f6038 R14: 00007f336e1f5fa0 R15: 00007fff5edee938 [ 208.169801][ T7593] [ 208.435755][ T7595] netlink: 52 bytes leftover after parsing attributes in process `syz.5.448'. [ 208.559836][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 208.594234][ T7608] input: syz1 as /devices/virtual/input/input15 [ 208.687915][ T9] usb 4-1: device descriptor read/64, error -71 [ 208.927890][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 209.058647][ T9] usb 4-1: device descriptor read/64, error -71 [ 209.180477][ T9] usb usb4-port1: attempt power cycle [ 210.127832][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 210.150704][ T9] usb 4-1: device descriptor read/8, error -71 [ 210.387914][ T5718] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 210.407957][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 210.468021][ T9] usb 4-1: device descriptor read/8, error -71 [ 210.538552][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.540905][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.656858][ T9] usb usb4-port1: unable to enumerate USB device [ 210.906602][ T5718] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 210.906633][ T5718] usb 2-1: config 0 has no interface number 0 [ 210.906681][ T5718] usb 2-1: config 0 interface 41 has no altsetting 0 [ 211.419678][ T5718] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 211.419715][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.419738][ T5718] usb 2-1: Product: syz [ 211.419754][ T5718] usb 2-1: Manufacturer: syz [ 211.419771][ T5718] usb 2-1: SerialNumber: syz [ 213.865694][ T5718] usb 2-1: config 0 descriptor?? [ 214.449203][ T5718] usb 2-1: can't set config #0, error -71 [ 214.450517][ T5718] usb 2-1: USB disconnect, device number 26 [ 214.737843][ T7643] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 215.497763][ T5718] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 215.550910][ T7652] netlink: 48 bytes leftover after parsing attributes in process `syz.0.464'. [ 215.648297][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 215.693633][ T7656] input: syz1 as /devices/virtual/input/input16 [ 215.919327][ T5718] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 215.919360][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.922259][ T5718] usb 2-1: config 0 descriptor?? [ 215.937927][ T5718] gspca_main: sq930x-2.14.0 probing 041e:403c [ 216.197782][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 216.332125][ T5718] gspca_sq930x: ucbus_write failed -71 [ 216.332188][ T5718] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 216.336678][ T5718] usb 2-1: USB disconnect, device number 27 [ 216.354496][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 216.366030][ T31] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 216.366061][ T31] usb 4-1: config 252 has no interface number 0 [ 216.366099][ T31] usb 4-1: config 252 interface 15 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 63 [ 216.374514][ T31] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 216.374593][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.374645][ T31] usb 4-1: Product: syz [ 216.374685][ T31] usb 4-1: Manufacturer: syz [ 216.374768][ T31] usb 4-1: SerialNumber: syz [ 216.421162][ T7653] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 216.452628][ T31] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 216.638110][ T1229] usb 4-1: Failed to submit usb control message: -71 [ 216.638145][ T1229] usb 4-1: unable to send the bmi data to the device: -71 [ 216.638166][ T1229] usb 4-1: unable to get target info from device [ 216.638183][ T1229] usb 4-1: could not get target info (-71) [ 216.638206][ T1229] usb 4-1: could not probe fw (-71) [ 216.638562][ T5711] usb 4-1: USB disconnect, device number 27 [ 217.707721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 217.727713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 217.737716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 217.747715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 218.222260][ T7700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.028735][ T7728] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 220.560133][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 220.707800][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 220.709547][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.709579][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.709614][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 220.709639][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.712502][ T31] usb 5-1: config 0 descriptor?? [ 220.769528][ T31] hub 5-1:0.0: USB hub found [ 220.827898][ T5718] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 221.329805][ T7737] FAULT_INJECTION: forcing a failure. [ 221.329805][ T7737] name failslab, interval 1, probability 0, space 0, times 0 [ 221.329916][ T7737] CPU: 0 UID: 0 PID: 7737 Comm: syz.5.480 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.329943][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.329962][ T7737] Call Trace: [ 221.329968][ T7737] [ 221.329974][ T7737] dump_stack_lvl+0xe8/0x150 [ 221.329996][ T7737] should_fail_ex+0x467/0x600 [ 221.330015][ T7737] should_failslab+0xa8/0x100 [ 221.330033][ T7737] __kmalloc_noprof+0xdf/0x7a0 [ 221.330048][ T7737] ? kfree+0x4d/0x6c0 [ 221.330060][ T7737] ? tomoyo_realpath_from_path+0xef/0x640 [ 221.330078][ T7737] tomoyo_realpath_from_path+0xef/0x640 [ 221.330097][ T7737] ? tomoyo_path_number_perm+0x219/0x5f0 [ 221.330119][ T7737] tomoyo_path_number_perm+0x246/0x5f0 [ 221.330141][ T7737] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.330169][ T7737] ? hook_file_ioctl+0x1f3/0x5d0 [ 221.330199][ T7737] security_file_ioctl+0xc3/0x2a0 [ 221.330222][ T7737] __se_sys_ioctl+0x47/0x170 [ 221.330239][ T7737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.330254][ T7737] do_syscall_64+0x174/0x580 [ 221.330275][ T7737] ? clear_bhb_loop+0x40/0x90 [ 221.330292][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.330308][ T7737] RIP: 0033:0x7f465a46ce59 [ 221.330321][ T7737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.330334][ T7737] RSP: 002b:00007f46586a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.330352][ T7737] RAX: ffffffffffffffda RBX: 00007f465a6e6090 RCX: 00007f465a46ce59 [ 221.330363][ T7737] RDX: 0000200000000540 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 221.330373][ T7737] RBP: 00007f46586a5090 R08: 0000000000000000 R09: 0000000000000000 [ 221.330383][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.330392][ T7737] R13: 00007f465a6e6128 R14: 00007f465a6e6090 R15: 00007fff89351f18 [ 221.330410][ T7737] [ 221.330446][ T7737] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.351482][ T7737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.974295][ T5711] kernel write not supported for file /snd/midiC2D0 (pid: 5711 comm: kworker/0:6) [ 222.044563][ T31] hub 5-1:0.0: 26 ports detected [ 222.073809][ T31] hub 5-1:0.0: insufficient power available to use all downstream ports [ 222.127734][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 222.156858][ T5718] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 222.156951][ T5718] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 222.156982][ T5718] usb 4-1: config 0 interface 0 has no altsetting 0 [ 222.157030][ T5718] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 222.157056][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.215510][ T5718] usb 4-1: config 0 descriptor?? [ 222.457526][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 222.457551][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 222.457945][ T7732] ip6gre0: Master is either lo or non-ether device [ 223.206941][ T31] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 223.206969][ T31] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 223.231463][ T31] usbhid 5-1:0.0: can't add hid device: -32 [ 223.231906][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 223.735096][ T5718] usbhid 4-1:0.0: can't add hid device: -71 [ 223.735198][ T5718] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 223.760421][ T5718] usb 4-1: USB disconnect, device number 28 [ 223.814585][ T7762] FAULT_INJECTION: forcing a failure. [ 223.814585][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 223.814622][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: syz.5.497 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 223.814647][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 223.814661][ T7762] Call Trace: [ 223.814668][ T7762] [ 223.814680][ T7762] dump_stack_lvl+0xe8/0x150 [ 223.814709][ T7762] should_fail_ex+0x467/0x600 [ 223.814737][ T7762] should_failslab+0xa8/0x100 [ 223.814763][ T7762] kmem_cache_alloc_noprof+0x87/0x680 [ 223.814784][ T7762] ? do_getname+0x2e/0x250 [ 223.814811][ T7762] ? rt_mutex_slowunlock+0x219/0x460 [ 223.814835][ T7762] do_getname+0x2e/0x250 [ 223.814861][ T7762] ? getname_flags+0x11/0x20 [ 223.814890][ T7762] do_sys_openat2+0xcc/0x200 [ 223.814921][ T7762] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.814952][ T7762] ? ksys_write+0x248/0x270 [ 223.814975][ T7762] ? __pfx_ksys_write+0x10/0x10 [ 223.814999][ T7762] __x64_sys_openat+0x138/0x170 [ 223.815032][ T7762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.815054][ T7762] do_syscall_64+0x174/0x580 [ 223.815081][ T7762] ? trace_irq_disable+0x3b/0x140 [ 223.815113][ T7762] ? clear_bhb_loop+0x40/0x90 [ 223.815138][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.815160][ T7762] RIP: 0033:0x7f465a46ce59 [ 223.815179][ T7762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.815198][ T7762] RSP: 002b:00007f46586c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.815223][ T7762] RAX: ffffffffffffffda RBX: 00007f465a6e5fa0 RCX: 00007f465a46ce59 [ 223.815239][ T7762] RDX: 00000000000cc17f RSI: 0000200000000140 RDI: ffffffffffffff9c [ 223.815255][ T7762] RBP: 00007f46586c6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.815269][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.815282][ T7762] R13: 00007f465a6e6038 R14: 00007f465a6e5fa0 R15: 00007fff89351f18 [ 223.815307][ T7762] [ 224.059238][ T7765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.066011][ T7765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.175907][ T7771] netlink: 14 bytes leftover after parsing attributes in process `syz.0.499'. [ 224.298067][ T5718] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 224.450766][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.452327][ T5718] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 224.452364][ T5718] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 224.452398][ T5718] usb 4-1: config 1 interface 0 has no altsetting 1 [ 224.454820][ T5718] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 224.454851][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.454873][ T5718] usb 4-1: Product: syz [ 224.454889][ T5718] usb 4-1: Manufacturer: syz [ 224.454905][ T5718] usb 4-1: SerialNumber: syz [ 224.456152][ T7778] syz_tun: entered allmulticast mode [ 224.787244][ T5718] smsusb:smsusb_probe: board id=8, interface number 0 [ 225.357282][ T7777] syz_tun: left allmulticast mode [ 225.445426][ T5718] smsusb:smsusb_probe: Device initialized with return code -19 [ 225.668645][ T7781] netlink: 14 bytes leftover after parsing attributes in process `syz.3.500'. [ 225.744099][ T10] usb 5-1: USB disconnect, device number 18 [ 225.901421][ T7781] team0 (unregistering): Port device team_slave_0 removed [ 226.587488][ T7781] team0 (unregistering): Port device team_slave_1 removed [ 226.890018][ T5600] Bluetooth: hci1: unexpected cc 0x2023 length: 16 > 5 [ 226.890063][ T5600] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 227.147811][ T6635] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 227.301035][ T6635] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 227.301082][ T6635] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 227.301104][ T6635] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 227.301126][ T6635] usb 5-1: config 220 has no interface number 2 [ 227.301174][ T6635] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 227.301202][ T6635] usb 5-1: config 220 interface 0 has no altsetting 0 [ 227.301221][ T6635] usb 5-1: config 220 interface 76 has no altsetting 0 [ 227.301240][ T6635] usb 5-1: config 220 interface 1 has no altsetting 0 [ 227.304761][ T6635] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 227.304793][ T6635] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.304816][ T6635] usb 5-1: Product: syz [ 227.304832][ T6635] usb 5-1: Manufacturer: syz [ 227.304849][ T6635] usb 5-1: SerialNumber: syz [ 227.567400][ T6635] usb 5-1: selecting invalid altsetting 0 [ 227.570000][ T6635] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 227.570086][ T6635] uvcvideo 5-1:220.0: No valid video chain found. [ 227.595861][ T6635] usb 5-1: selecting invalid altsetting 0 [ 227.595895][ T6635] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 227.613399][ T6635] usb 5-1: USB disconnect, device number 19 [ 227.810464][ T31] usb 4-1: USB disconnect, device number 29 [ 227.876823][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.883466][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.376725][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.377055][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.417801][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 229.576069][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.577153][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 229.577235][ T10] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 229.577266][ T10] usb 2-1: config 1 interface 0 has no altsetting 1 [ 229.690867][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 229.690902][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.690925][ T10] usb 2-1: Product: syz [ 229.690940][ T10] usb 2-1: Manufacturer: syz [ 229.690955][ T10] usb 2-1: SerialNumber: syz [ 229.739322][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 229.967859][ T7874] FAULT_INJECTION: forcing a failure. [ 229.967859][ T7874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.967896][ T7874] CPU: 1 UID: 0 PID: 7874 Comm: syz.3.528 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.967922][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.967936][ T7874] Call Trace: [ 229.967943][ T7874] [ 229.967952][ T7874] dump_stack_lvl+0xe8/0x150 [ 229.967981][ T7874] should_fail_ex+0x467/0x600 [ 229.968007][ T7874] _copy_from_user+0x2d/0xb0 [ 229.968039][ T7874] eventfd_write+0xe6/0x5e0 [ 229.968074][ T7874] ? __pfx_eventfd_write+0x10/0x10 [ 229.968106][ T7874] ? __import_iovec+0x5d7/0x7e0 [ 229.968137][ T7874] ? bpf_lsm_file_permission+0x9/0x20 [ 229.968159][ T7874] ? security_file_permission+0x75/0x260 [ 229.968190][ T7874] ? rw_verify_area+0x209/0x4d0 [ 229.968214][ T7874] vfs_writev+0x4c4/0x990 [ 229.968242][ T7874] ? __pfx_eventfd_write+0x10/0x10 [ 229.968277][ T7874] ? __pfx_vfs_writev+0x10/0x10 [ 229.968303][ T7874] ? rcu_is_watching+0x15/0xb0 [ 229.968341][ T7874] ? lock_release+0x4b/0x3c0 [ 229.968367][ T7874] ? rt_mutex_slowunlock+0x219/0x460 [ 229.968391][ T7874] ? __fget_files+0x3a8/0x420 [ 229.968420][ T7874] ? __fget_files+0x2a/0x420 [ 229.968457][ T7874] do_writev+0x15a/0x2e0 [ 229.968487][ T7874] ? __pfx_do_writev+0x10/0x10 [ 229.968525][ T7874] ? rcu_is_watching+0x15/0xb0 [ 229.968555][ T7874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.968579][ T7874] do_syscall_64+0x174/0x580 [ 229.968606][ T7874] ? trace_irq_disable+0x3b/0x140 [ 229.968630][ T7874] ? clear_bhb_loop+0x40/0x90 [ 229.968656][ T7874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.968677][ T7874] RIP: 0033:0x7fad2bc7ce59 [ 229.968696][ T7874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.968715][ T7874] RSP: 002b:00007fad29ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 229.968738][ T7874] RAX: ffffffffffffffda RBX: 00007fad2bef5fa0 RCX: 00007fad2bc7ce59 [ 229.968754][ T7874] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000004 [ 229.968767][ T7874] RBP: 00007fad29ece090 R08: 0000000000000000 R09: 0000000000000000 [ 229.968781][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.968794][ T7874] R13: 00007fad2bef6038 R14: 00007fad2bef5fa0 R15: 00007ffe1c918208 [ 229.968819][ T7874] [ 230.007891][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 230.225995][ T7876] netlink: 14 bytes leftover after parsing attributes in process `syz.1.522'. [ 231.950893][ T5711] usb 2-1: USB disconnect, device number 28 [ 234.252880][ T5600] Bluetooth: Frame is too long (len 18, expected len 8) [ 234.668913][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.669253][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.771546][ T7958] 9p: Bad value for 'wfdno' [ 234.897786][ T5718] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 234.988461][ T6635] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 235.047783][ T5718] usb 5-1: Using ep0 maxpacket: 16 [ 235.049704][ T5718] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.067779][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 235.067942][ T5718] usb 5-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 235.067971][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.068003][ T5718] usb 5-1: SerialNumber: syz [ 235.177812][ T6635] usb 6-1: Using ep0 maxpacket: 32 [ 235.179428][ T6635] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 235.179462][ T6635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.182236][ T6635] usb 6-1: config 0 descriptor?? [ 235.187253][ T6635] gspca_main: sq930x-2.14.0 probing 041e:403c [ 235.250276][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.251293][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 235.251332][ T9] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 235.251364][ T9] usb 2-1: config 1 interface 0 has no altsetting 1 [ 235.253319][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 235.253348][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.253371][ T9] usb 2-1: Product: syz [ 235.253387][ T9] usb 2-1: Manufacturer: syz [ 235.253403][ T9] usb 2-1: SerialNumber: syz [ 235.263843][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 235.287883][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 235.406191][ T7953] 9p: Bad value for 'wfdno' [ 235.438749][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 235.441111][ T10] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 235.441140][ T10] usb 4-1: config 252 has no interface number 0 [ 235.441177][ T10] usb 4-1: config 252 interface 15 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 63 [ 235.444518][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 235.444547][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.444568][ T10] usb 4-1: Product: syz [ 235.444583][ T10] usb 4-1: Manufacturer: syz [ 235.444638][ T10] usb 4-1: SerialNumber: syz [ 235.491774][ T7965] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 235.533542][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 235.536933][ T5718] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.537347][ T5718] usb 5-1: MIDIStreaming interface descriptor not found [ 235.538999][ T10] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 235.593640][ T6635] gspca_sq930x: ucbus_write failed -71 [ 235.593704][ T6635] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 235.597344][ T6635] usb 6-1: USB disconnect, device number 11 [ 235.661515][ T5718] usb 5-1: USB disconnect, device number 20 [ 235.730716][ T12] usb 4-1: Failed to submit usb control message: -71 [ 235.730753][ T12] usb 4-1: unable to send the bmi data to the device: -71 [ 235.730774][ T12] usb 4-1: unable to get target info from device [ 235.730792][ T12] usb 4-1: could not get target info (-71) [ 235.730816][ T12] usb 4-1: could not probe fw (-71) [ 235.734463][ T7961] netlink: 14 bytes leftover after parsing attributes in process `syz.1.547'. [ 235.738533][ T10] usb 4-1: USB disconnect, device number 30 [ 236.099366][ T5600] Bluetooth: Frame is too long (len 18, expected len 8) [ 236.106093][ T6195] udevd[6195]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.135204][ T9] usb 2-1: USB disconnect, device number 29 [ 236.581007][ T7989] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 236.581033][ T7989] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 236.581098][ T7989] vhci_hcd vhci_hcd.0: Device attached [ 236.581926][ T7989] netlink: 'syz.5.554': attribute type 12 has an invalid length. [ 236.717401][ T7990] vhci_hcd: connection closed [ 236.718533][ T1170] vhci_hcd vhci_hcd.5: stop threads [ 236.718557][ T1170] vhci_hcd vhci_hcd.5: release socket [ 236.718723][ T1170] vhci_hcd vhci_hcd.5: disconnect device [ 236.949164][ T7996] netlink: 'syz.4.555': attribute type 2 has an invalid length. [ 236.950548][ T7996] process 'syz.4.555' launched './file0' with NULL argv: empty string added [ 237.374118][ T37] kauditd_printk_skb: 127 callbacks suppressed [ 237.374138][ T37] audit: type=1326 audit(1781868618.257:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7995 comm="syz.3.556" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad2bc7ce59 code=0x0 [ 237.721362][ T8006] FAULT_INJECTION: forcing a failure. [ 237.721362][ T8006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.721389][ T8006] CPU: 1 UID: 0 PID: 8006 Comm: syz.0.557 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 237.721408][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 237.721418][ T8006] Call Trace: [ 237.721423][ T8006] [ 237.721429][ T8006] dump_stack_lvl+0xe8/0x150 [ 237.721455][ T8006] should_fail_ex+0x467/0x600 [ 237.721474][ T8006] _copy_to_user+0x31/0xb0 [ 237.721497][ T8006] simple_read_from_buffer+0xe1/0x170 [ 237.721523][ T8006] proc_fail_nth_read+0x1be/0x230 [ 237.721540][ T8006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.721555][ T8006] ? rw_verify_area+0x250/0x4d0 [ 237.721570][ T8006] ? rt_spin_unlock+0x160/0x200 [ 237.721584][ T8006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.721598][ T8006] vfs_read+0x219/0xa90 [ 237.721616][ T8006] ? __pfx_vfs_read+0x10/0x10 [ 237.721631][ T8006] ? cap_task_prctl+0x1dd/0xaa0 [ 237.721655][ T8006] ? static_key_count+0x41/0x70 [ 237.721675][ T8006] ? security_task_prctl+0x163/0x190 [ 237.721715][ T8006] ksys_read+0x156/0x270 [ 237.721731][ T8006] ? __pfx_ksys_read+0x10/0x10 [ 237.721748][ T8006] ? __secure_computing+0x1b4/0x2b0 [ 237.721769][ T8006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.721786][ T8006] do_syscall_64+0x174/0x580 [ 237.721805][ T8006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.721821][ T8006] ? clear_bhb_loop+0x40/0x90 [ 237.721839][ T8006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.721854][ T8006] RIP: 0033:0x7f336df3d68e [ 237.721868][ T8006] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 237.721882][ T8006] RSP: 002b:00007f336c1d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 237.721899][ T8006] RAX: ffffffffffffffda RBX: 00007f336c1d66c0 RCX: 00007f336df3d68e [ 237.721911][ T8006] RDX: 000000000000000f RSI: 00007f336c1d60a0 RDI: 0000000000000006 [ 237.721921][ T8006] RBP: 00007f336c1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 237.721931][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.721940][ T8006] R13: 00007f336e1f6038 R14: 00007f336e1f5fa0 R15: 00007fff5edee938 [ 237.721959][ T8006] [ 237.722519][ T37] audit: type=1326 audit(1781868618.607:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8002 comm="syz.0.557" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f336df7ce59 code=0x0 [ 238.045976][ T8015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.045996][ T8015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.080592][ T8015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.080620][ T8015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.269802][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.561'. [ 238.383714][ T8023] faux_driver vkms: [drm] Unknown color mode 255; guessing buffer size. [ 238.514429][ T6635] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 238.657775][ T6635] usb 2-1: Using ep0 maxpacket: 16 [ 238.660101][ T6635] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.686925][ T6635] usb 2-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 238.686960][ T6635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.686983][ T6635] usb 2-1: SerialNumber: syz [ 238.989039][ T8017] 9p: Bad value for 'wfdno' [ 239.073444][ T6635] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.073496][ T6635] usb 2-1: MIDIStreaming interface descriptor not found [ 239.176277][ T6635] usb 2-1: USB disconnect, device number 30 [ 239.297776][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 239.345544][ T8037] netlink: 188 bytes leftover after parsing attributes in process `syz.5.566'. [ 239.584744][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 239.778088][ T9] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 239.778120][ T9] usb 5-1: config 252 has no interface number 0 [ 239.778158][ T9] usb 5-1: config 252 interface 15 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 63 [ 239.781961][ T9] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 239.781995][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.782017][ T9] usb 5-1: Product: syz [ 239.782032][ T9] usb 5-1: Manufacturer: syz [ 239.782047][ T9] usb 5-1: SerialNumber: syz [ 239.785017][ T8032] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 239.813873][ T9] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 240.000434][ T86] usb 5-1: Failed to submit usb control message: -71 [ 240.000469][ T86] usb 5-1: unable to send the bmi data to the device: -71 [ 240.000489][ T86] usb 5-1: unable to get target info from device [ 240.000507][ T86] usb 5-1: could not get target info (-71) [ 240.000532][ T86] usb 5-1: could not probe fw (-71) [ 240.000761][ T6635] usb 5-1: USB disconnect, device number 21 [ 240.092416][ T8044] tipc: Started in network mode [ 240.092449][ T8044] tipc: Node identity 8afb0bb7125a, cluster identity 4711 [ 240.092717][ T8044] tipc: Enabled bearer , priority 0 [ 240.096245][ T8044] syzkaller0: entered promiscuous mode [ 240.096269][ T8044] syzkaller0: entered allmulticast mode [ 240.178733][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.179100][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.578113][ T8043] tipc: Resetting bearer [ 240.709377][ T8043] tipc: Disabling bearer [ 241.057815][ T5798] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 241.217731][ T5798] usb 5-1: Using ep0 maxpacket: 8 [ 241.219782][ T5798] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 241.219820][ T5798] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 241.219850][ T5798] usb 5-1: config 0 interface 0 has no altsetting 0 [ 241.219881][ T5798] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 241.219907][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.225450][ T5798] usb 5-1: config 0 descriptor?? [ 241.328154][ T6635] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 241.447458][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 241.447484][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 241.466369][ T8066] ip6gre0: Master is either lo or non-ether device [ 241.618163][ T6635] usb 4-1: Using ep0 maxpacket: 16 [ 241.968948][ T6635] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.974331][ T6635] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.976489][ T6635] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 241.977290][ T6635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.322648][ T6635] usb 4-1: config 0 descriptor?? [ 242.657840][ T1010] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 242.808119][ T1010] usb 2-1: Using ep0 maxpacket: 32 [ 242.812286][ T1010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 242.812367][ T1010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 242.812395][ T1010] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.812775][ T1010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 242.812847][ T1010] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.831335][ T1010] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 242.832912][ T1010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.834321][ T1010] usb 2-1: Product: syz [ 242.834377][ T1010] usb 2-1: Manufacturer: syz [ 242.834419][ T1010] usb 2-1: SerialNumber: syz [ 242.867526][ T1010] usb 2-1: config 0 descriptor?? [ 242.875197][ T8087] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 242.922771][ T8094] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 242.922814][ T8094] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 242.922874][ T8094] vhci_hcd vhci_hcd.0: Device attached [ 242.940179][ T8094] netlink: 'syz.0.581': attribute type 12 has an invalid length. [ 242.948895][ T6635] usbhid 4-1:0.0: can't add hid device: -71 [ 242.949094][ T6635] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 243.038200][ T5798] usbhid 5-1:0.0: can't add hid device: -71 [ 243.038286][ T5798] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 243.073569][ T8095] vhci_hcd: connection closed [ 243.074037][ T1010] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 243.075725][ T66] vhci_hcd vhci_hcd.0: stop threads [ 243.075748][ T66] vhci_hcd vhci_hcd.0: release socket [ 243.075771][ T66] vhci_hcd vhci_hcd.0: disconnect device [ 243.076018][ T6635] usb 4-1: USB disconnect, device number 31 [ 243.160184][ T4947] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 243.162278][ T5798] usb 5-1: USB disconnect, device number 22 [ 243.197782][ T1010] usb 2-1: USB disconnect, device number 31 [ 243.745646][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 245.492005][ T8125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.586'. [ 245.517781][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 245.519619][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 245.519651][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.627783][ T5600] Bluetooth: hci2: command 0x0406 tx timeout [ 246.149765][ T9] usb 6-1: config 0 descriptor?? [ 246.476074][ T8136] netlink: 'syz.1.589': attribute type 1 has an invalid length. [ 246.779606][ T9] usb 6-1: can't set config #0, error -71 [ 246.801649][ T9] usb 6-1: USB disconnect, device number 12 [ 249.519810][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.520137][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.576891][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.577225][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.991942][ T8175] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 249.991977][ T8175] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 249.992061][ T8175] vhci_hcd vhci_hcd.0: Device attached [ 249.992999][ T8175] netlink: 'syz.1.597': attribute type 12 has an invalid length. [ 250.104277][ T8176] vhci_hcd: connection closed [ 250.104680][ T7979] vhci_hcd vhci_hcd.1: stop threads [ 250.105120][ T7979] vhci_hcd vhci_hcd.1: release socket [ 250.105146][ T7979] vhci_hcd vhci_hcd.1: disconnect device [ 250.146217][ T8179] loop2: detected capacity change from 0 to 2 [ 250.165439][ T5808] buffer_io_error: 15 callbacks suppressed [ 250.165460][ T5808] Buffer I/O error on dev loop2, logical block 0, async page read [ 250.165890][ T5808] Buffer I/O error on dev loop2, logical block 0, async page read [ 250.166321][ T5808] Buffer I/O error on dev loop2, logical block 0, async page read [ 250.175924][ T5808] Buffer I/O error on dev loop2, logical block 0, async page read [ 250.180685][ T5808] Buffer I/O error on dev loop2, logical block 0, async page read [ 250.181793][ T5808] Buffer I/O error on dev loop2, logical block 0, async page read [ 250.191064][ T5808] Buffer I/O error on dev loop2, logical block 0, async page read [ 250.195604][ T5808] Buffer I/O error on dev loop2, logical block 0, async page read [ 250.202909][ T5808] Buffer I/O error on dev loop2, logical block 0, async page read [ 250.210709][ T5808] Buffer I/O error on dev loop2, logical block 0, async page read [ 250.519479][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.519868][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.148632][ T8196] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 252.338793][ T8193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.338820][ T8193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.371997][ T8193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.372022][ T8193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.627785][ T5798] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 252.664876][ T38] INFO: task kworker/1:4:5696 blocked for more than 143 seconds. [ 252.664901][ T38] Not tainted syzkaller #0 [ 252.664913][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.664924][ T38] task:kworker/1:4 state:D stack:22160 pid:5696 tgid:5696 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 252.664986][ T38] Workqueue: usb_hub_wq hub_event [ 252.665014][ T38] Call Trace: [ 252.665022][ T38] [ 252.665033][ T38] __schedule+0x16dc/0x5500 [ 252.665058][ T38] ? usb_probe_interface+0x653/0xc60 [ 252.665086][ T38] ? __device_attach_driver+0x270/0x410 [ 252.665108][ T38] ? device_initial_probe+0xa1/0xd0 [ 252.665140][ T38] ? bus_probe_device+0x12d/0x220 [ 252.665166][ T38] ? really_probe+0x254/0xae0 [ 252.665186][ T38] ? __device_attach_driver+0x270/0x410 [ 252.665207][ T38] ? bus_for_each_drv+0x25b/0x2f0 [ 252.665232][ T38] ? __device_attach+0x2c7/0x450 [ 252.665264][ T38] ? device_initial_probe+0xa1/0xd0 [ 252.665298][ T38] ? hub_event+0x28cf/0x4cf0 [ 252.665320][ T38] ? process_scheduled_works+0xa8e/0x14e0 [ 252.665351][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.665372][ T38] ? __pfx___schedule+0x10/0x10 [ 252.665400][ T38] ? schedule+0x90/0x360 [ 252.665441][ T38] ? rcu_is_watching+0x15/0xb0 [ 252.665478][ T38] ? lock_release+0x4b/0x3c0 [ 252.665507][ T38] ? schedule+0x90/0x360 [ 252.665530][ T38] ? wq_worker_sleeping+0x66/0x250 [ 252.665563][ T38] schedule+0x164/0x360 [ 252.665588][ T38] schedule_timeout+0xc0/0x2c0 [ 252.665613][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 252.665638][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.665661][ T38] ? rcu_is_watching+0x15/0xb0 [ 252.665700][ T38] ? rcu_is_watching+0x15/0xb0 [ 252.665728][ T38] ? trace_irq_enable+0x3b/0x140 [ 252.665750][ T38] ? wait_for_completion+0x272/0x5e0 [ 252.665774][ T38] wait_for_completion+0x2ca/0x5e0 [ 252.665802][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 252.665829][ T38] ? kobject_put+0x50f/0x550 [ 252.665864][ T38] i2c_del_adapter+0x281/0x430 [ 252.665897][ T38] ? __pfx_i2c_del_adapter+0x10/0x10 [ 252.665927][ T38] ? dvb_usbv2_exit+0x94d/0xb80 [ 252.665961][ T38] dvb_usbv2_probe+0x4bb/0x3950 [ 252.665994][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 252.666035][ T38] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 252.666067][ T38] ? __pm_runtime_set_status+0x977/0xc40 [ 252.666128][ T38] usb_probe_interface+0x653/0xc60 [ 252.666160][ T38] ? __pfx_usb_probe_interface+0x10/0x10 [ 252.666185][ T38] really_probe+0x254/0xae0 [ 252.666213][ T38] __driver_probe_device+0x1e8/0x360 [ 252.666254][ T38] driver_probe_device+0x4f/0x240 [ 252.666278][ T38] __device_attach_driver+0x270/0x410 [ 252.666303][ T38] bus_for_each_drv+0x25b/0x2f0 [ 252.666331][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 252.666353][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 252.666381][ T38] ? rt_spin_unlock+0x160/0x200 [ 252.666406][ T38] __device_attach+0x2c7/0x450 [ 252.666441][ T38] ? __pfx___device_attach+0x10/0x10 [ 252.666481][ T38] device_initial_probe+0xa1/0xd0 [ 252.666516][ T38] bus_probe_device+0x12d/0x220 [ 252.666545][ T38] device_add+0x7d7/0xb80 [ 252.666578][ T38] usb_set_configuration+0x1ad8/0x2180 [ 252.666619][ T38] usb_generic_driver_probe+0x8d/0x150 [ 252.666645][ T38] usb_probe_device+0x1c3/0x3b0 [ 252.666676][ T38] ? __pfx_usb_probe_device+0x10/0x10 [ 252.666708][ T38] really_probe+0x254/0xae0 [ 252.666729][ T38] __driver_probe_device+0x1e8/0x360 [ 252.666762][ T38] driver_probe_device+0x4f/0x240 [ 252.666782][ T38] __device_attach_driver+0x270/0x410 [ 252.666804][ T38] bus_for_each_drv+0x25b/0x2f0 [ 252.666828][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 252.666848][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 252.666873][ T38] ? rt_spin_unlock+0x160/0x200 [ 252.666894][ T38] __device_attach+0x2c7/0x450 [ 252.666925][ T38] ? __pfx___device_attach+0x10/0x10 [ 252.666961][ T38] device_initial_probe+0xa1/0xd0 [ 252.666992][ T38] bus_probe_device+0x12d/0x220 [ 252.667018][ T38] device_add+0x7d7/0xb80 [ 252.667047][ T38] usb_new_device+0x98d/0x1610 [ 252.667065][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 252.667092][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 252.667112][ T38] ? __pfx_usb_new_device+0x10/0x10 [ 252.667135][ T38] hub_event+0x28cf/0x4cf0 [ 252.667180][ T38] ? __pfx_hub_event+0x10/0x10 [ 252.667203][ T38] ? rcu_is_watching+0x15/0xb0 [ 252.667235][ T38] ? lock_acquire+0x5f/0x350 [ 252.667263][ T38] ? rcu_is_watching+0x15/0xb0 [ 252.667295][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 252.667326][ T38] process_scheduled_works+0xa8e/0x14e0 [ 252.667372][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.667414][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.667438][ T38] ? assign_work+0x3cf/0x5d0 [ 252.667469][ T38] worker_thread+0xa47/0xfb0 [ 252.667506][ T38] ? __kthread_parkme+0x71/0x1f0 [ 252.667543][ T38] kthread+0x388/0x470 [ 252.667565][ T38] ? __pfx_worker_thread+0x10/0x10 [ 252.667594][ T38] ? __pfx_kthread+0x10/0x10 [ 252.667617][ T38] ret_from_fork+0x514/0xb70 [ 252.667642][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 252.667800][ T38] ? __switch_to+0xc89/0x1420 [ 252.667833][ T38] ? __pfx_kthread+0x10/0x10 [ 252.667853][ T38] ret_from_fork_asm+0x1a/0x30 [ 252.667885][ T38] [ 252.667940][ T38] INFO: lockdep is turned off. [ 252.667949][ T38] NMI backtrace for cpu 1 [ 252.667962][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.667984][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.667996][ T38] Call Trace: [ 252.668002][ T38] [ 252.668009][ T38] dump_stack_lvl+0xe8/0x150 [ 252.668031][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 252.668051][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 252.668073][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 252.668093][ T38] sys_info+0x135/0x170 [ 252.668122][ T38] watchdog+0xfd7/0x1030 [ 252.668145][ T38] ? watchdog+0x1c7/0x1030 [ 252.668168][ T38] kthread+0x388/0x470 [ 252.668186][ T38] ? __pfx_watchdog+0x10/0x10 [ 252.668207][ T38] ? __pfx_kthread+0x10/0x10 [ 252.668229][ T38] ret_from_fork+0x514/0xb70 [ 252.668253][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 252.668275][ T38] ? __switch_to+0xc89/0x1420 [ 252.668308][ T38] ? __pfx_kthread+0x10/0x10 [ 252.668329][ T38] ret_from_fork_asm+0x1a/0x30 [ 252.668364][ T38] [ 252.668372][ T38] Sending NMI from CPU 1 to CPUs 0: [ 252.668405][ C0] NMI backtrace for cpu 0 [ 252.668420][ C0] CPU: 0 UID: 0 PID: 8203 Comm: syz.3.609 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.668440][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.668451][ C0] RIP: 0033:0x7fad2bb307c3 [ 252.668467][ C0] Code: 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 18 3b 00 89 f0 4c 8d 05 49 f8 3a 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 <48> 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 [ 252.668483][ C0] RSP: 002b:00007ffe1c918248 EFLAGS: 00000206 [ 252.668498][ C0] RAX: 0000000082350974 RBX: ffffffff82350974 RCX: ffffffff82350974 [ 252.668512][ C0] RDX: 0000000000000974 RSI: ffffffff82350974 RDI: 0000000000000005 [ 252.668524][ C0] RBP: 0000000000000000 R08: 00007fad2bee0000 R09: 00007fad2bee2000 [ 252.668536][ C0] R10: 0000000082350978 R11: 0000000000000005 R12: 00007fad2bef6038 [ 252.668548][ C0] R13: 00000000000399d2 R14: ffffffff823505fa R15: 00007fad2ca25720 [ 252.668561][ C0] FS: 0000555556126500 GS: 0000000000000000 [ 252.669414][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 252.669430][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.669453][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.669465][ T38] Call Trace: [ 252.669472][ T38] [ 252.669479][ T38] vpanic+0x56c/0xa60 [ 252.669506][ T38] ? __pfx___schedule+0x10/0x10 [ 252.669528][ T38] ? __pfx_vpanic+0x10/0x10 [ 252.669557][ T38] panic+0xc5/0xd0 [ 252.669580][ T38] ? __pfx_panic+0x10/0x10 [ 252.669603][ T38] ? preempt_schedule_common+0x82/0xd0 [ 252.669626][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 252.669656][ T38] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 252.669677][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 252.669707][ T38] watchdog+0x1030/0x1030 [ 252.669732][ T38] ? watchdog+0x1c7/0x1030 [ 252.669755][ T38] kthread+0x388/0x470 [ 252.669776][ T38] ? __pfx_watchdog+0x10/0x10 [ 252.669796][ T38] ? __pfx_kthread+0x10/0x10 [ 252.669816][ T38] ret_from_fork+0x514/0xb70 [ 252.669839][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 252.669860][ T38] ? __switch_to+0xc89/0x1420 [ 252.669891][ T38] ? __pfx_kthread+0x10/0x10 [ 252.669911][ T38] ret_from_fork_asm+0x1a/0x30 [ 252.669943][ T38] [ 252.670537][ T38] Kernel Offset: disabled