last executing test programs: 9m48.927188565s ago: executing program 32 (id=106): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) 9m14.805969072s ago: executing program 5 (id=428): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)={@multicast1, @local, 0x1}, 0x10) r2 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, 0x0, 0x8050) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000001240), 0x0}, 0x20) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000003c00010000000000fcdbdf2504001950a8f280"], 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0xfe}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x50}}, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r2) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40100200}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0xa4, r8, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r7, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, 0x0, 0x80) 9m13.914596979s ago: executing program 5 (id=435): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket(0x400000000010, 0x3, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() tkill(r3, 0xb) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, r5, 0xd22800e99f4927f3, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x6}, 0x4020) 9m12.908895641s ago: executing program 5 (id=444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x4) 9m12.553377219s ago: executing program 5 (id=447): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setresuid(0x0, 0xee01, 0xee00) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x180, 0x8000810, 0xffffffffffffff9c, 0x0) 9m12.351879656s ago: executing program 5 (id=449): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='drop=1T', 0x7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, 0x0, 0x0, 0x1c) 9m8.813619987s ago: executing program 0 (id=463): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x80, 0x0, 0x7fff0002}]}) r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa0q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\v\a\x01Z\'\fy`', 0x2) ftruncate(r0, 0x10003) 9m8.334076387s ago: executing program 0 (id=465): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000280)="08001efbb07d", 0x6}], 0x1, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x10000000) 9m8.286648944s ago: executing program 5 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 9m7.842487527s ago: executing program 0 (id=468): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x402) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000080)=0x40) 9m6.987939251s ago: executing program 0 (id=470): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {}, {0x400}, 0x800, 0x0, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1234, 0x32}, 0x2, @in=@loopback}}, 0xe8) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2, 0x1234, @empty}, 0x10) 9m6.66716362s ago: executing program 0 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 9m5.662142489s ago: executing program 0 (id=474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xffff8001, 0x4, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x20000004, 0x7, 0xffeffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) 8m53.786151349s ago: executing program 33 (id=462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0xdf, 0x10000000, 0x6, 0xffff7fff}, 0x47}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 8m53.290688486s ago: executing program 34 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 8m50.173310672s ago: executing program 35 (id=474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xffff8001, 0x4, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x20000004, 0x7, 0xffeffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) 4m16.381267414s ago: executing program 7 (id=1871): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f00000000c0), 0x8) listen(r1, 0x5) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m16.283932024s ago: executing program 7 (id=1873): prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 4m16.191063156s ago: executing program 7 (id=1874): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a902d04"], 0xd) 4m16.110976115s ago: executing program 7 (id=1875): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x16f0d8, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(0x0, 0xa) 4m16.081575279s ago: executing program 7 (id=1876): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003700)={0x0}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 4m14.746313879s ago: executing program 7 (id=1885): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:00/resources\x00', 0x2, 0x0) 4m14.222886657s ago: executing program 36 (id=1885): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:00/resources\x00', 0x2, 0x0) 3m43.906822979s ago: executing program 1 (id=1996): r0 = syz_usb_connect$hid(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040710408060000000000010902200001010080fa0904000002ffffff0007058102000200070502020002"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000300)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x22001) ioctl$EVIOCGLED(r2, 0x5452, &(0x7f0000000240)=""/61) syz_usb_connect(0x3, 0xa7b, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0x90, 0xac, 0xc9, 0x23da6c1c6404ae25, 0x2013, 0x24c, 0x73ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa69, 0x4, 0x84, 0x6, 0x20, 0x81, "", [{{0x9, 0x4, 0x3a, 0xff, 0xd, 0xd0, 0xf2, 0x6c, 0x0, [], [{{0x9, 0x5, 0x8f, 0xc, 0x20, 0x3, 0x7, 0x3}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x3, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x40, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0xa, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf3, 0x5}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0xa9, 0x2, 0x92}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x6, 0xbf, 0x6}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x1, 0x0, 0x3, [@generic={0x100, 0x1, "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"}, @generic={0x7e, 0x5, "5436c8ed9068235b709bd820282e925f189cce5e138d190e4f4430428a7396ce3f10125f14c6cc9ac685aeffb4f20f64b6e3c351f90eeabb54ca07618497e6a5125c595eda561306e9859bdc47763506ecfb02746df98224742054af2ac0f460f800c26422e60ef141f07391c16a55b0c873b6efa210060f49566111"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x6, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xfbff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x0, 0x1, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x6, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x4}, @generic={0x24, 0x7, "a27fb66ef9f775c8dad83cbf6aaf374eb2df35f1f851d6b526fa9dabf40f42a638cf"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x10, 0x14, 0xce, 0x3}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0xb, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xc}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x9, 0xe, 0x4, [@generic={0xa6, 0xe, "c3ff8bc2c5fae020d5ab4048896703f9d29b27255f432d7b7d8bc6aab8991e71e17ff26f6b3ba16e2ced963b2ade2fa3f0a829e47df14161e5b96629acb20beefa1d4f56d4762e446d4c9a8c7300f995d42f4b5cd26e9aba05c3b49d94f5f6eff9b5d1f98050af3a44d834512c4fb09fe381f9762529edcbfd8b04dc38e434494706c02fc464ab9f8107add5e0370ec6cdca3fd64458a57f58b1ae37e65ffbca00e5c9c5"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x400, 0x8, 0x47, 0x1, [@generic={0x2f, 0x10, "ca06d4c886641e479b982f5b9662361db3842593e93fd0db7ab9339f42e05e01cf13608887ee1e87e0b64d8a27"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x401}]}}]}}, {{0x9, 0x4, 0x6f, 0x7, 0xa, 0xc0, 0xe6, 0xa4, 0x7, [@generic={0x30, 0xe, "6cb9bd77117710a4616791e6993a589d4dbb163cbea60ae2dd823247653708fb138046148edc8e5ce95ca6627b49"}], [{{0x9, 0x5, 0xc, 0x14, 0x0, 0x6, 0xb, 0x1, [@generic={0x2d, 0x31, "698d6d47f135c36fb031bcf7d181f81f96d4319247b1ee014d5600db91f57804e5c04ba986d9f0f7014c49"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0xb, 0x4, 0x0, [@generic={0xd, 0xd, "318cc8ef12cbe582a34dec"}, @generic={0xdb, 0x1, "cfdcbea308f3a67f9163167a19b0b501ee9f16d723ee42f499c3d1f48b3003ac6b779da18dd7ee256dbdd2b2d6add86a7ea02580061dfb0011f3a7918e89e750ba6c4f0223ceef33754b7a6b1b81b8626d4add4dd42b556524c9d2b8335a01f0209c1ed4ec12f68c1e5e8c42bfdc3c3214bfe89f45f4914a7fd6690db6b7f2ecbb352d97a09d8207737ebfb5cf1895d71fe99bf85d976e838fe6d4baf7e6150e32942d08eed892a807feea05cf660bf430f6f3af3def3a890646e2080cedfb74fa3367ea0f6866212e263acf6c5cc9c61bf52154e5069e1faa"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x7e, 0x0, 0x0, [@generic={0x50, 0x21, "77393238b6ec6c44fbe67149d6a042112b72f31bf9bf564468da2ebb88ab7c2b91912ce4b817e17af14d9e1b6354760b40160cbee842a2be92277a49c34ebd7dcce6320b194175984ecc0ae45035"}, @generic={0xc, 0x5, "f70f144bc9f040c91e0c"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x6b, 0x0, 0xa5, [@generic={0x85, 0x6, "0e79ebafec489fcd8848c51022d5b27119b2b804992427425e582078eaee86617dcc3c68ca29cba184abd944488c55a1ef043f5c3dab362cbec9b59239c9e4ccf5f353febf40faadd31c2887266d385abc93f9071430af25f89b6ddc564603536bc789d0f952c2f30075f56c6c5352eeb12293e1780c33eb09585c42d4770385c9981a"}, @generic={0x95, 0xb, "b00bc446ec89f35998f9355673c29caefccdbe213702f30136f658032b4aee3f41d6d82824e7d0ed369b779876fae5209a9e63a6ece0a78b0eda694e5c70ab3faff9fdb362a0142e0b12a541e99b00b4cd1dc6b588f48be01bfcc39300df1a3dc9af5c8c3cb4e7692e1d6ac68eb4f95f8d0157555d7b0e7edc7b151802b4e192da381fbcf6ff8c30ef8a4c0c311153d2ecdea6"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x4, 0x0, 0x7, [@generic={0x89, 0x1, "238bf49c41486d2c92d2f79fbc445743588c579e82b33f0ccc5665c36b5535e798cf78a98cfbcaf1ea7ac5d2784883e5a5d2d1d0b3953a31ec606830cfecfeb8308229cb2ba10aa54ab0d571608a778625b467edfdf7b4af8cb1cea6325fd029a9e41ae9290d3ec150a9bcc0d47e84d612a8a80ee3c78b6d4a9382c2be464e125a5c9dbc5a7a96"}, @generic={0x38, 0xe, "7d17f857bbda8a8ee047592c108504f2df04fe542bd85eddc147ddce82d98eea0e49a369fb467c43bf48ce28dec76c36d172042ef357"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x30, 0x7, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x7, 0x17}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x1, 0x1, 0xed, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}]}}, {{0x9, 0x5, 0x85, 0x11, 0x40, 0x8, 0x6, 0x58, [@generic={0x68, 0x21, "be221d98d88a77c71f5794e2f3b029588266b1711b04eb147d2aa96280217718d3a0f12645dc78b57cb3fb22e9fa95dfb44813c5dbddba35fc89e43fd36fa02a903505c45560e331b6939fcd57fe1b749c80f244bf151e7c55d05dd29fa2e689c165d4bce2af"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x6, 0xce, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x2}]}}]}}, {{0x9, 0x4, 0xd2, 0x1c, 0x3, 0x2a, 0xdf, 0xf, 0xd6, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "0df92d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xae47, 0x6, 0xa}, {0x6, 0x24, 0x1a, 0x0, 0x12}}], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x9, 0x6, 0x32}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x10, 0x8, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x6, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xd}]}}]}}, {{0x9, 0x4, 0xac, 0x5, 0x9, 0x3, 0x1b, 0x62, 0x4, [@uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0x9, 0x1, "ba3639"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x80, 0xd5, 0x6, 0x4}]}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x4c, 0x70, 0x18}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0xff, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7fff}]}}, {{0x9, 0x5, 0xc, 0x2, 0x248, 0xbf, 0x80, 0xe}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x0, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1}, @generic={0x51, 0xf, "c4cd4ed4c3addda5e39cc8456401b082c2c322a8f7ad630cd4e9a4a99f1ed060534c0897ecdad9477052a4332cdd355e2492b74f2bc3dec6a7e5ddeecf646db58abe6f78b8791e9240c1e9b5525501"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x1, 0x6, 0x9, [@generic={0x7a, 0xe, "03a0fb0f14696b1b7e7ce28f804e93809a16adec6a8773761d0767a2407d471b788ae30aa6b1c7757f88b142f026ae174d4f78b95d1214977477fca580d52d6de4d006b2ec396a9d591f38ea0dce06aba0752837be29cb83c683bf13148703879e9b388410bde2ca49ed0d44dc1501e8b3d423470fa37d48"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x89, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x0, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x8}, @generic={0x1f, 0x7, "450b18d1ae3fb5af4bf841d83d34b087a57e7b0231342f602ca0570170"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x8, 0x3, 0x5, [@generic={0x43, 0xc, "5eb2f77ba4a7733ecdd0f6703f72bccbe59fa95827b91210a1f1c03cfe99f5bffdf09ad61d6f70ad96769cd5a84f040e356a7de557a63b4548a7dbe180a91d4620"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xa, 0x1, 0x1, [@generic={0xb8, 0x7, "5be8f2c6e67bd7abdd0820935401394ae235ee2be09a2af840d6ce7bf8d34f152e3b190ac3f8c6c488c98403efde8f21a1e27a723032f610bca348733629caee5ba3173302998ae9a3111f99433573821df2af6d6f0e8a91379c944f81cc7e546161ead88bb2e75b2b1f37be6e5fe0a5d6f005ed9af38c153fd512f416d68a21fc54d0a57490b6de67092ee83f17eff6711f2fff4a69899987c0f694de3734ca3f8f1a0009526da3dc669d0950977a2f538743ce6d3e"}]}}]}}]}}]}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x78, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x7ffd, 0xfc, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x3, 0x20, 0x4b, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, 'r:#'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3d, 0x7, 0x8000, 0x3}, {0x6, 0x24, 0x1a, 0x9, 0x30}, [@acm={0x4, 0x24, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xb, 0x2, 0xcc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf0, 0x1, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x210, 0x4, 0x2, 0xe}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xa, 0x5, 0x6, 0x10, 0x9}, 0x9a, &(0x7f00000000c0)={0x5, 0xf, 0x9a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x4, 0xed4}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x7, 0xf00, 0x9, [0xff0000, 0xc000, 0xff0000, 0xffff3f, 0xc000, 0xffc00f]}, @generic={0x56, 0x10, 0xa, "586239adf225fb1216d64919571de844ee26ce3eb83fe0f29432ea93388ee12f20c624b0c3d8b0d380f97f2736ada7a65e9769c628620e29ed5d0f0acff4a8c9093202a96dbf165dced47ba6c36de664b99a14"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a791724daa87fa83e93a323284a17b7c"}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140c}}, {0x44, &(0x7f0000000300)=@string={0x44, 0x3, "9c96dcfdbd1a1052b3254addafbd133c53ecedf9e98a20f1e5a8cb996bbb783a95899119730d4fcc3fe3cbcac3e4e8893f43117a96fe30d1a97cd4260f83d9245a91"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x810}}]}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000700)=ANY=[@ANYBLOB="000bff000000ae7d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r6) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 3m41.964661321s ago: executing program 9 (id=1886): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x16f0d8, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(0x0, 0xa) 3m41.174459281s ago: executing program 9 (id=2010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) 3m40.608021418s ago: executing program 1 (id=2015): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m40.282200129s ago: executing program 1 (id=2018): unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c210000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3m39.971852709s ago: executing program 1 (id=2020): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x16f0d8, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(0x0, 0xa) 3m39.88826915s ago: executing program 9 (id=2021): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1e, 0x0, &(0x7f0000000440)="e0400000000d85ff9782762f88ca0ec8915ef32c4bdaf74d1bae70e0b8e0", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m39.269460084s ago: executing program 37 (id=2021): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1e, 0x0, &(0x7f0000000440)="e0400000000d85ff9782762f88ca0ec8915ef32c4bdaf74d1bae70e0b8e0", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m39.255230261s ago: executing program 1 (id=2023): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 3m37.647369319s ago: executing program 1 (id=2027): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$unix(r1, &(0x7f0000002840)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0}, 0x0) 3m37.333987659s ago: executing program 38 (id=2027): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$unix(r1, &(0x7f0000002840)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0}, 0x0) 11.931680721s ago: executing program 3 (id=3134): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000001c0)=0x10000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 8.798224247s ago: executing program 3 (id=3150): r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x800, 0x7, @loopback, @empty, 0x8000, 0x0, 0x200000e7, 0x9}}) 8.273047275s ago: executing program 3 (id=3155): r0 = syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef176161000001020301090230000101008032090400000302020000052400100104240202070581034000100705820200"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xfea5, &(0x7f00000001c0)="0e00000000000000") 6.391676838s ago: executing program 4 (id=3164): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 6.142263978s ago: executing program 4 (id=3165): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x142, 0x80) write(r0, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1db) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4.808494322s ago: executing program 3 (id=3171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) syz_open_dev$swradio(&(0x7f0000002100), 0x1, 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x114}], 0x1}, 0x24044010) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='256', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) write(r4, &(0x7f0000000700)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r5, &(0x7f0000000b00)='1\n', 0x2) faccessat(0xffffffffffffffff, &(0x7f000000b0c0)='./config/nullb/nullb1/zoned\x00', 0x89) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./dev\x00', 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0) write(r6, &(0x7f0000000f00)="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", 0x8eed) close(r6) 4.808152814s ago: executing program 4 (id=3172): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4000880) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.076382654s ago: executing program 8 (id=3175): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 4.05736722s ago: executing program 3 (id=3177): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x3, 0x39, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0xfffffffffffffffc) 3.830568796s ago: executing program 8 (id=3178): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r5, r4, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0x9000, 0x0, 0x43, 0x0, 0x0, 0x0) 3.733615774s ago: executing program 4 (id=3179): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0xff7f, 0x7d, 0x0, {{0x500, 0xfb, 0x0, 0x5000000, {0x80, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0xfffffffffffffcae, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5f, '\xf8\xf6i\xfbq\x05\x00\x00\x00\x10p\xa0[\xd8\xb2:W\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2<\"=c\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\xee6\x95 \xeb\xff\xb2\xf9\xae\xba\x80\xe8\xd4\x89\xda'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23c) 3.625947859s ago: executing program 6 (id=3180): syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='PHONEOUT\nMONITOR \'Synth\' 00000000000000000002\nSYNTH \'Master '], 0xc1) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 3.150272449s ago: executing program 6 (id=3181): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) 3.150036188s ago: executing program 4 (id=3182): r0 = syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef176161000001020301090230000101008032090400000302020000052400100104240202070581034000100705820200"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xfea5, &(0x7f00000001c0)="0e00000000000000") 3.015113545s ago: executing program 6 (id=3183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8040400) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/147, 0x93, 0x0, 0x0, 0x43}, &(0x7f0000000380)=0x40) 2.878174136s ago: executing program 6 (id=3184): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00'], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.777431567s ago: executing program 6 (id=3185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x1) 2.17042805s ago: executing program 2 (id=3188): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x11) socket(0xa, 0x3, 0xff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x20000, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) 2.079817846s ago: executing program 8 (id=3189): fsopen(&(0x7f0000000000)='ceph\x00', 0x0) 1.828588643s ago: executing program 8 (id=3190): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x254, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x218, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x174, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x64, 0x1d, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x2d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0xdc, 0xf, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x240, 0x1, 0x4, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x27}]}, {0x8d, 0x6, "63c05f8c9e4954364707888dd512113a633b28ad3f2e12a124b26d24dfc58593b18028f8543ff49b39492643cccf8af2f593670bb1b3d4fc1e22166a779be7422df4e9a376b24a82be7d26e7b54c5246ae4544f04fc515e293453ed76d22be5bdece4e77995202370e6b066c011dc25a92aae4918c981737686cb8ffd276f5ef73e2c08d570e29273b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x84, 0x1, [@m_gact={0x80, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0x53, 0x6, "6c76009d13f825044b800966ce940c2c7b9f493fab8615784b8098e0bf93830684467772dcf70dd296b1021a75a6ea2e6abbee4340b6d453b727be840490ec6680430eef0b6509445fdba97f88d8f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.792669719s ago: executing program 8 (id=3191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x1000000, 0x200000, &(0x7f0000000000/0x200000)=nil}) 1.682712898s ago: executing program 6 (id=3192): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) socket$inet6(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) read(r6, &(0x7f0000000100)=""/43, 0x2b) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, 0x0, 0x0) 1.676345231s ago: executing program 2 (id=3193): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc03064ca, &(0x7f0000000400)={&(0x7f0000000380)=[0x0, r7, 0x0, r8, r9, 0x0, r10], &(0x7f00000003c0), 0x5, 0x7, 0x5}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x41, 0x1}}}]}, 0x24}}, 0x0) 1.602390736s ago: executing program 2 (id=3194): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8040400) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/147, 0x93, 0x0, 0x0, 0x43}, &(0x7f0000000380)=0x40) 1.418970063s ago: executing program 2 (id=3195): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00'], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.374460333s ago: executing program 8 (id=3196): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @broadcast}], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x11, 0x80803, 0x0) setsockopt(r1, 0x107, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) semop(0x0, 0x0, 0x0) listen(r1, 0x80) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0xfffffffffffffe01, &(0x7f0000000040)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20002040) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet_buf(r1, 0x0, 0x9, &(0x7f0000000400), 0x0) 1.353119695s ago: executing program 2 (id=3197): r0 = socket$inet(0x2, 0x1, 0x6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 782.29486ms ago: executing program 3 (id=3198): shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0x5}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) clock_gettime(0x5, &(0x7f0000000000)) setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0xea60}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045808}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000100)="9ce9278bc8e075ab325f533c317c0f6cc8ec5759ac10394692141c2a6f6ee9377498cc806957c4202eb5c8e5ed5e41298228b77cd208054dbdf1f07b2870dbdd0c4cee5ed895041c0a077925fb2b3f84475a628ebc6c9bb6212649b6a234a3bf24c4d136c29dda77bfb3bf0ab3f1a83a2bfb4e5828b2d3c1b833293e34800aaebe584a9f2d84d53c1f23", 0x8a, 0x0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='ne', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, &(0x7f0000000280)) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 306.51847ms ago: executing program 2 (id=3199): r0 = inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x7f7) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0xa314}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x7fffffffffffff, 0x6a6}, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 0s ago: executing program 4 (id=3200): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 9][T14221] sk_alloc+0x3a/0x390 [ 579.578896][T14221] __netlink_create+0x62/0x260 [ 579.578994][T14221] netlink_create+0x3be/0x580 [ 579.579014][T14221] ? __pfx_rtnetlink_bind+0x10/0x10 [ 579.579089][T14221] __sock_create+0x4b3/0x9d0 [ 579.579151][T14221] __sys_socket+0xd6/0x1b0 [ 579.579175][T14221] __x64_sys_socket+0x7a/0x90 [ 579.579198][T14221] do_syscall_64+0x166/0x520 [ 579.579219][T14221] ? trace_irq_disable+0x3b/0x140 [ 579.579249][T14221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.579269][T14221] ? clear_bhb_loop+0x70/0xc0 [ 579.579293][T14221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.579312][T14221] RIP: 0033:0x7f1471dbe159 [ 579.579330][T14221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.579345][T14221] RSP: 002b:00007f1470016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 579.579367][T14221] RAX: ffffffffffffffda RBX: 00007f1472045fa0 RCX: 00007f1471dbe159 [ 579.579381][T14221] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 579.579393][T14221] RBP: 00007f1471e55024 R08: 0000000000000000 R09: 0000000000000000 [ 579.579405][T14221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.579420][T14221] R13: 00007f1472046038 R14: 00007f1472045fa0 R15: 00007fffe6ec3a18 [ 579.579452][T14221] [ 579.671697][T13482] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 580.525393][T13482] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 580.530966][T13482] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 580.530992][T13482] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.531009][T13482] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 580.531057][T13482] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.534342][T13482] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 580.534366][T13482] usb 4-1: Product: syz [ 580.534378][T13482] usb 4-1: Manufacturer: syz [ 580.565375][T13482] cdc_wdm 4-1:1.0: skipping garbage [ 580.565395][T13482] cdc_wdm 4-1:1.0: skipping garbage [ 580.573685][T13482] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 580.573704][T13482] cdc_wdm 4-1:1.0: Unknown control protocol [ 581.653927][ T5730] usb 4-1: USB disconnect, device number 9 [ 581.799254][ T37] audit: type=1800 audit(1788371274.903:111): pid=14237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2403" name="bus" dev="tmpfs" ino=295 res=0 errno=0 [ 581.884182][T14239] nvmet: failed to open block device ./file0: (-2) [ 582.151940][T14253] FAULT_INJECTION: forcing a failure. [ 582.151940][T14253] name failslab, interval 1, probability 0, space 0, times 0 [ 582.152018][T14253] CPU: 1 UID: 0 PID: 14253 Comm: syz.3.2410 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 582.152042][T14253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.152052][T14253] Call Trace: [ 582.152060][T14253] [ 582.152068][T14253] dump_stack_lvl+0xe8/0x150 [ 582.152102][T14253] should_fail_ex+0x46b/0x600 [ 582.152128][T14253] should_failslab+0xa8/0x100 [ 582.152150][T14253] ? do_getname+0x2e/0x250 [ 582.152170][T14253] kmem_cache_alloc_noprof+0x9e/0x690 [ 582.152192][T14253] ? do_getname+0x2e/0x250 [ 582.152216][T14253] ? lock_vma_under_rcu+0x45a/0x500 [ 582.152242][T14253] do_getname+0x2e/0x250 [ 582.152263][T14253] ? getname_flags+0x11/0x20 [ 582.152288][T14253] do_sys_openat2+0xcc/0x200 [ 582.152312][T14253] ? __pfx_do_sys_openat2+0x10/0x10 [ 582.152334][T14253] ? exc_page_fault+0x6a/0xc0 [ 582.152357][T14253] ? do_user_addr_fault+0xc4c/0x1340 [ 582.152379][T14253] __x64_sys_openat+0x138/0x170 [ 582.152409][T14253] do_syscall_64+0x166/0x520 [ 582.152428][T14253] ? trace_irq_disable+0x3b/0x140 [ 582.152450][T14253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.152468][T14253] ? clear_bhb_loop+0x70/0xc0 [ 582.152497][T14253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.152516][T14253] RIP: 0033:0x7fe5b0a3e98e [ 582.152536][T14253] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 582.152552][T14253] RSP: 002b:00007fe5aecd5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 582.152572][T14253] RAX: ffffffffffffffda RBX: 00007fe5aecd66c0 RCX: 00007fe5b0a3e98e [ 582.152586][T14253] RDX: 0000000000000002 RSI: 00007fe5aecd5c00 RDI: ffffffffffffff9c [ 582.152599][T14253] RBP: 00007fe5aecd5c00 R08: 0000000000000000 R09: 0000000000000000 [ 582.152611][T14253] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 582.152623][T14253] R13: 00007fe5b0d06038 R14: 00007fe5b0d05fa0 R15: 00007ffe3a32df88 [ 582.152652][T14253] [ 582.231576][T13482] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 582.240864][T13482] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 582.284734][ T4915] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 582.445183][ T4915] usb 3-1: Using ep0 maxpacket: 32 [ 582.447104][ T4915] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 582.447157][ T4915] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 582.452778][ T4915] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 582.452801][ T4915] usb 3-1: config 0 has no interface number 0 [ 582.458317][ T4915] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 582.458341][ T4915] usb 3-1: config 0 has no interface number 0 [ 582.459704][ T4915] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 582.459725][ T4915] usb 3-1: config 0 has no interface number 0 [ 582.471611][ T4915] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 582.471635][ T4915] usb 3-1: config 0 has no interface number 0 [ 582.479158][ T4915] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 582.479181][ T4915] usb 3-1: config 0 has no interface number 0 [ 582.480879][ T4915] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 582.480900][ T4915] usb 3-1: config 0 has no interface number 0 [ 582.483259][ T4915] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 582.483280][ T4915] usb 3-1: config 0 has no interface number 0 [ 582.491999][ T4915] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 582.492020][ T4915] usb 3-1: config 0 has no interface number 0 [ 582.506137][ T4915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.506161][ T4915] usb 3-1: Product: syz [ 582.506174][ T4915] usb 3-1: Manufacturer: syz [ 582.506187][ T4915] usb 3-1: SerialNumber: syz [ 582.541269][T13482] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 582.584262][ T4915] usb 3-1: config 0 descriptor?? [ 582.618200][ T4915] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 582.963494][ T4915] etas_es58x 3-1:0.2: could not retrieve the product info string [ 583.162198][T14253] ceph: No mds server is up or the cluster is laggy [ 583.665771][ T5730] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 584.826006][T13482] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 585.139903][ T37] audit: type=1800 audit(1788371278.243:112): pid=14283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.2417" name="bus" dev="tmpfs" ino=1851 res=0 errno=0 [ 585.666839][ T5709] usb 3-1: USB disconnect, device number 6 [ 585.703097][ T5709] etas_es58x 3-1:0.2: Disconnecting syz syz [ 586.374614][T13971] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 587.287697][T13971] usb 4-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 587.309857][T13971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.309896][T13971] usb 4-1: Product: syz [ 587.309910][T13971] usb 4-1: Manufacturer: syz [ 587.309923][T13971] usb 4-1: SerialNumber: syz [ 587.764793][T14310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.783025][T14310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.013170][T13971] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 588.146417][T13971] usb 4-1: USB disconnect, device number 10 [ 588.530990][T14331] FAULT_INJECTION: forcing a failure. [ 588.530990][T14331] name failslab, interval 1, probability 0, space 0, times 0 [ 588.544041][T14331] CPU: 0 UID: 0 PID: 14331 Comm: syz.4.2428 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 588.544068][T14331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.544079][T14331] Call Trace: [ 588.544086][T14331] [ 588.544095][T14331] dump_stack_lvl+0xe8/0x150 [ 588.544130][T14331] should_fail_ex+0x46b/0x600 [ 588.544156][T14331] should_failslab+0xa8/0x100 [ 588.544184][T14331] ? do_getname+0x2e/0x250 [ 588.544210][T14331] kmem_cache_alloc_noprof+0x9e/0x690 [ 588.544234][T14331] ? do_getname+0x2e/0x250 [ 588.544258][T14331] ? lock_vma_under_rcu+0x45a/0x500 [ 588.544286][T14331] do_getname+0x2e/0x250 [ 588.544309][T14331] ? getname_flags+0x11/0x20 [ 588.544337][T14331] do_sys_openat2+0xcc/0x200 [ 588.544373][T14331] ? __pfx_do_sys_openat2+0x10/0x10 [ 588.544401][T14331] ? exc_page_fault+0x6a/0xc0 [ 588.544426][T14331] ? do_user_addr_fault+0xc4c/0x1340 [ 588.544452][T14331] __x64_sys_openat+0x138/0x170 [ 588.544480][T14331] do_syscall_64+0x166/0x520 [ 588.544500][T14331] ? trace_irq_disable+0x3b/0x140 [ 588.544523][T14331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.544542][T14331] ? clear_bhb_loop+0x70/0xc0 [ 588.544564][T14331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.544582][T14331] RIP: 0033:0x7fb5499ce98e [ 588.544599][T14331] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 588.544615][T14331] RSP: 002b:00007fb547c65b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 588.544636][T14331] RAX: ffffffffffffffda RBX: 00007fb547c666c0 RCX: 00007fb5499ce98e [ 588.544650][T14331] RDX: 0000000000000002 RSI: 00007fb547c65c00 RDI: ffffffffffffff9c [ 588.544663][T14331] RBP: 00007fb547c65c00 R08: 0000000000000000 R09: 0000000000000000 [ 588.544675][T14331] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 588.544687][T14331] R13: 00007fb549c96038 R14: 00007fb549c95fa0 R15: 00007fffdc3b7498 [ 588.544719][T14331] [ 588.963162][T13482] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 589.028454][ T37] audit: type=1800 audit(1788371282.113:113): pid=14341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2430" name="bus" dev="tmpfs" ino=323 res=0 errno=0 [ 589.263209][T14311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.266811][T13482] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 589.362412][T14332] ceph: No mds server is up or the cluster is laggy [ 589.682599][T14350] process 'syz.2.2434' launched './file0' with NULL argv: empty string added [ 596.771657][T14437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 598.784661][ T5710] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 598.859287][T14542] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 598.859345][T14542] device-mapper: ioctl: error adding target to table [ 598.946686][ T5710] usb 9-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 598.955808][ T5710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.125776][ T5710] rc_core: IR keymap rc-rc6-mce not found [ 599.126843][ T5710] Registered IR keymap rc-empty [ 599.756371][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.765245][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.792033][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.793892][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.003308][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.015717][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.035435][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.049065][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.184782][ T5710] mceusb 9-1:1.0: Error: mce write timed out (expire = 100 (1000ms)) [ 601.225010][ T5710] mceusb 9-1:1.0: Error: mce write timed out (expire = 100 (1000ms)) [ 601.250679][ T5710] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/rc/rc0 [ 601.271394][ T5710] input: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/rc/rc0/input31 [ 601.349290][T14555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.659909][ T5710] mceusb 9-1:1.0: Error: mce write urb status = -71 [ 601.685558][ T5710] mceusb 9-1:1.0: Error: mce write urb status = -71 [ 601.704968][ T5710] mceusb 9-1:1.0: Error: mce write urb status = -71 [ 601.724943][ T5710] mceusb 9-1:1.0: Error: mce write urb status = -71 [ 601.750696][ T5710] mceusb 9-1:1.0: Error: mce write urb status = -71 [ 601.774965][ T5710] mceusb 9-1:1.0: Error: mce write urb status = -71 [ 601.796461][ T5710] mceusb 9-1:1.0: Error: mce write urb status = -71 [ 601.817142][ T5710] mceusb 9-1:1.0: Error: mce write urb status = -71 [ 601.835606][ T5710] mceusb 9-1:1.0: Error: mce write urb status = -71 [ 601.854967][ T5710] mceusb 9-1:1.0: Error: mce write urb status = -71 [ 601.875045][ T5710] mceusb 9-1:1.0: Error: mce write urb status = -71 [ 601.976052][ T5710] mceusb 9-1:1.0: Registered with mce emulator interface version 1 [ 601.978974][ T5710] mceusb 9-1:1.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 601.999488][ T5710] usb 9-1: USB disconnect, device number 21 [ 602.647801][T14630] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-EIO) [ 602.650402][T14630] device-mapper: ioctl: error adding target to table [ 602.715845][ T5696] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 602.875505][ T5696] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 602.888993][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.889020][ T5696] usb 3-1: Product: syz [ 602.889051][ T5696] usb 3-1: Manufacturer: syz [ 602.889065][ T5696] usb 3-1: SerialNumber: syz [ 602.954717][T14650] capability: warning: `syz.6.2515' uses 32-bit capabilities (legacy support in use) [ 603.018195][T14650] program syz.6.2515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 603.268471][T13971] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 603.361488][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 603.361600][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 603.434694][T13971] usb 4-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 603.503167][T13971] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.503291][T13971] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.503333][T13971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.623272][T14662] nvmet: failed to open block device ./file0: (-2) [ 603.665165][ T5709] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 603.747865][T13971] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 603.855233][ T5709] usb 7-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 603.878370][ T5709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.246511][ T5709] rc_core: IR keymap rc-rc6-mce not found [ 604.246638][ T5709] Registered IR keymap rc-empty [ 604.354772][T14648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.361787][T14648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.384408][ T2375] pvrusb2: control-write URB failure, status=-71 [ 604.392050][ T2375] pvrusb2: Device being rendered inoperable [ 604.404059][ T2375] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 604.410852][ T5710] usb 4-1: USB disconnect, device number 11 [ 604.464221][ T2375] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 604.464231][ T2375] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 604.464247][ T2375] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 604.464287][ T2375] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 604.570444][ T2375] pvrusb2: Attached sub-driver cx25840 [ 604.646874][ T2375] pvrusb2: Attempted to execute control transfer when device not ok [ 604.663507][ T2375] pvrusb2: Attempted to execute control transfer when device not ok [ 604.663534][ T2375] pvrusb2: Attempted to execute control transfer when device not ok [ 604.663555][ T2375] pvrusb2: Attempted to execute control transfer when device not ok [ 604.663566][ T2375] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 604.730403][T14677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.737492][T14677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.763446][T14677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.774302][T14677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.833463][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 604.980652][ T2375] TUNER: Unable to find symbol tda829x_probe() [ 604.999901][T14677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.001614][T14677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.013215][T14677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.019192][T14677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.074215][ T2375] DVB: Unable to find symbol tda9887_attach() [ 605.074711][ T2375] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 605.202340][ T2375] pvrusb2: Attached sub-driver tuner [ 605.207763][ T2375] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 605.207777][ T2375] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 605.250182][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 605.308764][ T5709] mceusb 7-1:1.0: Error: mce write timed out (expire = 100 (1000ms)) [ 605.310645][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 605.310698][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 605.656418][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 605.823638][ T5696] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 605.915249][T14700] nvmet: failed to open block device ./file0: (-2) [ 606.079230][ T5696] usb 3-1: USB disconnect, device number 7 [ 606.333101][ T5709] mceusb 7-1:1.0: Error: mce write urb status = -71 [ 606.388905][ T5709] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/rc/rc0 [ 606.524683][ T5709] input: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/rc/rc0/input33 [ 606.605524][ T5709] mceusb 7-1:1.0: Error: mce write urb status = -71 [ 606.625029][ T5709] mceusb 7-1:1.0: Error: mce write urb status = -71 [ 606.645030][ T5709] mceusb 7-1:1.0: Error: mce write urb status = -71 [ 606.651350][T14717] 9p: Bad value for 'rfdno' [ 606.703790][ T5709] mceusb 7-1:1.0: Error: mce write urb status = -71 [ 606.715956][ T5709] mceusb 7-1:1.0: Error: mce write urb status = -71 [ 606.716421][ T5696] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 606.734879][ T5709] mceusb 7-1:1.0: Error: mce write urb status = -71 [ 606.760858][ T5709] mceusb 7-1:1.0: Error: mce write urb status = -71 [ 606.778956][ T5709] mceusb 7-1:1.0: Error: mce write urb status = -71 [ 606.802591][ T5709] mceusb 7-1:1.0: Error: mce write urb status = -71 [ 606.818434][ T5709] mceusb 7-1:1.0: Error: mce write urb status = -71 [ 606.835118][ T5709] mceusb 7-1:1.0: Error: mce write urb status = -71 [ 606.867103][ T5709] mceusb 7-1:1.0: Registered with mce emulator interface version 1 [ 606.867185][ T5709] mceusb 7-1:1.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 606.902666][ T5709] usb 7-1: USB disconnect, device number 21 [ 606.915487][ T5696] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 606.917185][ T5696] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 606.917208][ T5696] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 606.917225][ T5696] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 606.917271][ T5696] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 606.917294][ T5696] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 606.919163][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 606.919185][ T5696] usb 3-1: Product: syz [ 606.919198][ T5696] usb 3-1: Manufacturer: syz [ 606.992188][T14725] nvmet: failed to open block device ./file0: (-2) [ 607.060276][ T5696] cdc_wdm 3-1:1.0: skipping garbage [ 607.060327][ T5696] cdc_wdm 3-1:1.0: skipping garbage [ 607.114039][ T5696] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 607.114118][ T5696] cdc_wdm 3-1:1.0: Unknown control protocol [ 607.244764][ T5844] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 607.327665][T14705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.341172][T14705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.363002][T14705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.377399][T14705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.407604][ T5844] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 607.426460][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.426529][ T5844] usb 5-1: Product: syz [ 607.426543][ T5844] usb 5-1: Manufacturer: syz [ 607.426556][ T5844] usb 5-1: SerialNumber: syz [ 607.714793][ T5709] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 607.834671][T13482] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 607.871361][ T5844] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 607.880550][ T5709] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 607.881994][ T5709] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 607.883140][ T5709] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 607.890774][ T5844] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 607.904738][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.904813][ T5709] usb 7-1: Product: syz [ 607.904827][ T5709] usb 7-1: Manufacturer: syz [ 607.904839][ T5709] usb 7-1: SerialNumber: syz [ 607.942180][ T5709] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 608.055382][T13482] usb 4-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 608.075008][T13482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.080844][ T5709] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 608.221304][ T5709] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 608.294576][T13482] rc_core: IR keymap rc-rc6-mce not found [ 608.300423][T13482] Registered IR keymap rc-empty [ 608.933392][T14743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.936860][T14743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.945825][T14743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.961621][T14743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.184140][T14743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.203198][T14743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.212909][ T5709] usb 3-1: USB disconnect, device number 8 [ 609.279391][T14743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.304668][T13482] mceusb 4-1:1.0: Error: mce write timed out (expire = 100 (1000ms)) [ 609.321578][T14743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.338053][ T5844] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 609.746600][ T5844] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 609.754681][ T5844] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 609.754736][ T5844] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 609.756069][ T5844] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 609.869093][ T5844] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 609.916504][ T5844] usb 5-1: USB disconnect, device number 38 [ 610.034918][ T5696] usb 7-1: USB disconnect, device number 22 [ 610.074774][ T5709] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 610.090591][ T5709] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 610.108265][ T5696] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 610.128153][ T5696] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 610.145648][ T5696] ti_usb_3410_5052 7-1:2.0: device disconnected [ 610.239575][T14757] 9p: Bad value for 'rfdno' [ 610.345574][T13482] mceusb 4-1:1.0: Error: mce write timed out (expire = 100 (1000ms)) [ 610.350537][ T5709] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 610.386438][T13482] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0 [ 610.407061][T13482] input: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0/input34 [ 610.471751][T14764] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2553'. [ 610.633410][T13482] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 610.654965][T13482] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 610.675063][T13482] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 610.695006][T13482] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 610.715596][T13482] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 610.734943][T13482] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 610.759706][T13482] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 610.761161][T14751] ceph: No mds server is up or the cluster is laggy [ 610.779978][T13482] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 610.794870][T13482] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 610.815214][T13482] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 610.835737][T13482] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 610.855820][ T5709] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 610.874942][T13482] mceusb 4-1:1.0: Registered with mce emulator interface version 1 [ 610.875005][T13482] mceusb 4-1:1.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 610.900943][T13482] usb 4-1: USB disconnect, device number 12 [ 611.792678][T14786] 9p: Bad value for 'rfdno' [ 611.975835][T13482] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 612.126712][T13482] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 612.142505][T13482] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 612.151909][T13482] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 612.168459][T13482] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.168524][T13482] usb 7-1: Product: syz [ 612.168538][T13482] usb 7-1: Manufacturer: syz [ 612.168551][T13482] usb 7-1: SerialNumber: syz [ 612.299276][T13482] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 612.403697][T13482] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 612.476781][T13482] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 612.814962][ T5696] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 612.966755][ T5696] usb 3-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 612.981932][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.135754][ T5696] rc_core: IR keymap rc-rc6-mce not found [ 613.138578][ T5696] Registered IR keymap rc-empty [ 613.619910][T14808] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 613.802190][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.802827][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.809479][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.813424][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.021174][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.032646][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.068178][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.070606][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.187485][ T5696] mceusb 3-1:1.0: Error: mce write timed out (expire = 100 (1000ms)) [ 614.227200][T14834] FAULT_INJECTION: forcing a failure. [ 614.227200][T14834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.232806][T14834] CPU: 0 UID: 0 PID: 14834 Comm: syz.8.2576 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 614.232833][T14834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.232844][T14834] Call Trace: [ 614.232853][T14834] [ 614.232864][T14834] dump_stack_lvl+0xe8/0x150 [ 614.232903][T14834] should_fail_ex+0x46b/0x600 [ 614.232930][T14834] _copy_from_user+0x2d/0xb0 [ 614.232982][T14834] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 614.233116][T14834] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 614.233147][T14834] ? rcu_is_watching+0x16/0xb0 [ 614.233175][T14834] ? trace_kmalloc+0x2a/0xf0 [ 614.233202][T14834] ip_generic_getfrag+0x149/0x2d0 [ 614.233232][T14834] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 614.233253][T14834] ? raw6_getfrag+0x116/0x3a0 [ 614.233347][T14834] ? __alloc_skb+0x4d0/0x7a0 [ 614.233367][T14834] ? skb_put+0x112/0x210 [ 614.233392][T14834] __ip6_append_data+0x3b26/0x40c0 [ 614.233478][T14834] ? __pfx_raw6_getfrag+0x10/0x10 [ 614.233528][T14834] ? __pfx___ip6_append_data+0x10/0x10 [ 614.233560][T14834] ? ip6_setup_cork+0x547/0xf60 [ 614.233585][T14834] ? ip6_append_data+0x1a6/0x270 [ 614.233611][T14834] ip6_append_data+0x108/0x270 [ 614.233637][T14834] ? __pfx_raw6_getfrag+0x10/0x10 [ 614.233666][T14834] rawv6_sendmsg+0x1298/0x18c0 [ 614.233702][T14834] ? smack_ipv6host_label+0x824/0x8e0 [ 614.233729][T14834] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 614.233762][T14834] ? smack_socket_sendmsg+0x4b8/0x5a0 [ 614.233785][T14834] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 614.233814][T14834] ? lock_acquire+0x115/0x350 [ 614.233844][T14834] ? sock_rps_record_flow+0x19/0x350 [ 614.233931][T14834] ? inet_sendmsg+0x298/0x320 [ 614.233959][T14834] ? __pfx_inet_sendmsg+0x10/0x10 [ 614.233981][T14834] sock_sendmsg_nosec+0x10e/0x180 [ 614.234005][T14834] __sys_sendto+0x41e/0x5d0 [ 614.234033][T14834] ? __pfx___sys_sendto+0x10/0x10 [ 614.234081][T14834] ? rcu_is_watching+0x16/0xb0 [ 614.234111][T14834] __x64_sys_sendto+0xde/0x100 [ 614.234136][T14834] do_syscall_64+0x166/0x520 [ 614.234157][T14834] ? trace_irq_disable+0x3b/0x140 [ 614.234179][T14834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.234199][T14834] ? clear_bhb_loop+0x70/0xc0 [ 614.234221][T14834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.234240][T14834] RIP: 0033:0x7f4ce9e0e159 [ 614.234259][T14834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.234274][T14834] RSP: 002b:00007f4ce8066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 614.234293][T14834] RAX: ffffffffffffffda RBX: 00007f4cea095fa0 RCX: 00007f4ce9e0e159 [ 614.234307][T14834] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000004 [ 614.234319][T14834] RBP: 00007f4ce9ea5024 R08: 0000200000000600 R09: 0000000000000080 [ 614.234332][T14834] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 614.234343][T14834] R13: 00007f4cea096038 R14: 00007f4cea095fa0 R15: 00007ffe9ac358c8 [ 614.234373][T14834] [ 614.576752][T14838] 9p: Bad value for 'wfdno' [ 614.665791][T14842] 9p: Bad value for 'rfdno' [ 614.838582][ T5709] usb 7-1: USB disconnect, device number 23 [ 615.109696][ T5709] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 615.223742][ T5709] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 615.226420][ T5696] mceusb 3-1:1.0: Error: mce write timed out (expire = 100 (1000ms)) [ 615.238826][ T5709] ti_usb_3410_5052 7-1:2.0: device disconnected [ 615.247347][ T5696] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0 [ 615.349500][ T5696] input: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0/input35 [ 615.676843][ T5696] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 615.698980][ T5696] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 615.722003][ T5696] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 615.740366][ T5696] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 615.755157][ T5696] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 615.775918][ T5696] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 615.794910][ T5696] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 615.814920][ T5696] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 615.838285][ T5696] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 615.857099][ T5696] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 615.876522][ T5696] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 615.918527][ T5696] mceusb 3-1:1.0: Registered with mce emulator interface version 1 [ 615.921275][ T5696] mceusb 3-1:1.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 615.974882][T14875] 9p: Bad value for 'wfdno' [ 616.038685][ T5696] usb 3-1: USB disconnect, device number 9 [ 616.424806][ T5844] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 616.575412][ T5844] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 616.578102][ T5844] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 616.579482][ T5844] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 616.582856][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.582878][ T5844] usb 5-1: Product: syz [ 616.582891][ T5844] usb 5-1: Manufacturer: syz [ 616.582903][ T5844] usb 5-1: SerialNumber: syz [ 616.615879][ T5844] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 616.624686][ T5844] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 616.652031][ T5844] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 616.777598][ T5730] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 616.945192][ T5730] usb 4-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 616.959279][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.114595][ T5730] rc_core: IR keymap rc-rc6-mce not found [ 617.120602][ T5730] Registered IR keymap rc-empty [ 617.775633][T14925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.801971][T14925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.812473][T14925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.823596][T14925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.944923][ T5696] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 618.036628][T14925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.037263][T14925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.049020][T14925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.052936][T14925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.098332][ T5696] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 618.115416][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.115482][ T5696] usb 3-1: Product: syz [ 618.115497][ T5696] usb 3-1: Manufacturer: syz [ 618.115508][ T5696] usb 3-1: SerialNumber: syz [ 618.194805][ T5730] mceusb 4-1:1.0: Error: mce write timed out (expire = 100 (1000ms)) [ 618.551233][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 618.551434][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 619.315162][ T5730] mceusb 4-1:1.0: Error: mce write timed out (expire = 100 (1000ms)) [ 619.402053][ T5730] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0 [ 619.434161][ T5730] input: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0/input36 [ 619.545948][ T36] usb 5-1: USB disconnect, device number 39 [ 619.733548][ T36] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 619.755211][ T5730] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 619.782135][ T5730] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 619.815034][ T5730] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 619.822589][ T36] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 619.836800][ T36] ti_usb_3410_5052 5-1:2.0: device disconnected [ 619.857148][ T5730] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 619.876627][ T5730] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 619.894878][ T5730] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 619.915057][ T5730] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 619.935158][ T5730] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 619.964916][ T5730] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 619.985211][ T5730] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 620.015004][ T5730] mceusb 4-1:1.0: Error: mce write urb status = -71 [ 620.046678][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 620.083528][ T5730] mceusb 4-1:1.0: Registered with mce emulator interface version 1 [ 620.091763][ T5730] mceusb 4-1:1.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 620.108321][ T5730] usb 4-1: USB disconnect, device number 13 [ 620.457880][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 620.458401][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 620.458451][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 620.459307][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 620.525043][ T5696] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 620.680216][ T5696] usb 3-1: USB disconnect, device number 10 [ 620.704628][ T5730] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 620.855337][ T5730] usb 4-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 620.868433][ T5730] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.874553][ T5730] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.874583][ T5730] usb 4-1: config 0 interface 0 has no altsetting 0 [ 620.874617][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.917128][ T5730] usb 4-1: config 0 descriptor?? [ 621.377168][ T5730] logitech-djreceiver 0003:046D:C714.0009: unknown main item tag 0x0 [ 621.377255][ T5730] logitech-djreceiver 0003:046D:C714.0009: unknown main item tag 0x0 [ 621.377281][ T5730] logitech-djreceiver 0003:046D:C714.0009: unknown main item tag 0x0 [ 621.377305][ T5730] logitech-djreceiver 0003:046D:C714.0009: unbalanced collection at end of report description [ 621.414111][ T5730] logitech-djreceiver 0003:046D:C714.0009: logi_dj_probe: parse failed [ 621.422571][ T5730] logitech-djreceiver 0003:046D:C714.0009: probe with driver logitech-djreceiver failed with error -22 [ 621.445356][ T5844] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 621.467274][ T5592] Bluetooth: hci3: command 0x0406 tx timeout [ 621.467355][ T5592] Bluetooth: hci0: command 0x0406 tx timeout [ 621.620179][T13482] usb 4-1: USB disconnect, device number 14 [ 621.745204][ T5844] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 621.781104][ T5844] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 621.805632][ T5844] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 621.847770][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.847850][ T5844] usb 3-1: Product: syz [ 621.847864][ T5844] usb 3-1: Manufacturer: syz [ 621.847874][ T5844] usb 3-1: SerialNumber: syz [ 621.880114][ T5844] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 621.908311][ T5844] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 621.930984][ T5844] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 622.241926][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 622.311489][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 622.321963][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 622.326756][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 622.329061][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 622.592369][ T5729] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 622.913329][ T5730] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 622.941739][T14976] ceph: No mds server is up or the cluster is laggy [ 623.634600][T13482] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 623.778832][T13482] usb 4-1: device descriptor read/64, error -71 [ 624.049392][T13482] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 624.200389][T13482] usb 4-1: device descriptor read/64, error -71 [ 624.238730][ T5710] usb 3-1: USB disconnect, device number 11 [ 624.307515][ T5710] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 624.308387][T13482] usb usb4-port1: attempt power cycle [ 624.333523][ T5710] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 624.350800][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.350866][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.360476][ T5710] ti_usb_3410_5052 3-1:2.0: device disconnected [ 624.664637][ T5595] Bluetooth: hci4: command tx timeout [ 624.674653][T13482] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 624.699806][T13482] usb 4-1: device descriptor read/8, error -71 [ 624.711986][ T5710] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 624.974604][T13482] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 624.976402][ T5710] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 625.008539][T13482] usb 4-1: device descriptor read/8, error -71 [ 625.126780][T13482] usb usb4-port1: unable to enumerate USB device [ 625.270848][T14978] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.271041][T14978] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.271567][T14978] bridge_slave_0: entered allmulticast mode [ 625.280929][T14978] bridge_slave_0: entered promiscuous mode [ 625.319285][T14978] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.319416][T14978] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.319535][T14978] bridge_slave_1: entered allmulticast mode [ 625.333341][T14978] bridge_slave_1: entered promiscuous mode [ 625.437177][T15037] ceph: No mds server is up or the cluster is laggy [ 625.482806][T14978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.533581][ T5844] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 625.552832][T14978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.840126][T14978] team0: Port device team_slave_0 added [ 625.843900][T14978] team0: Port device team_slave_1 added [ 625.974634][T14978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.983130][T14978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.983159][T14978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.056705][T14978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.056768][T14978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.056795][T14978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.180209][T13482] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 626.346948][T13482] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 626.348455][T13482] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 626.349501][T13482] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 626.351809][T13482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.351830][T13482] usb 3-1: Product: syz [ 626.351843][T13482] usb 3-1: Manufacturer: syz [ 626.351856][T13482] usb 3-1: SerialNumber: syz [ 626.387720][T13482] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 626.404185][T13482] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 626.441613][T14978] hsr_slave_0: entered promiscuous mode [ 626.445218][T14978] hsr_slave_1: entered promiscuous mode [ 626.453247][T14978] debugfs: 'hsr0' already exists in 'hsr' [ 626.453272][T14978] Cannot create hsr debugfs directory [ 626.618130][T13482] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 626.744689][ T5595] Bluetooth: hci4: command tx timeout [ 627.635549][T14978] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.665793][T14978] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.482877][T14978] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.482957][T14978] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.575744][ T5729] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 628.718096][ T5729] usb 7-1: device descriptor read/64, error -71 [ 628.826298][ T5595] Bluetooth: hci4: command tx timeout [ 629.042227][ T5710] usb 3-1: USB disconnect, device number 12 [ 629.108326][ T5729] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 629.154397][ T5710] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 629.175666][ T5710] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 629.190295][ T5710] ti_usb_3410_5052 3-1:2.0: device disconnected [ 629.244619][ T5729] usb 7-1: device descriptor read/64, error -71 [ 629.280684][T14978] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 629.282288][T14978] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.356662][ T5729] usb usb7-port1: attempt power cycle [ 629.498896][T15112] nvmet: failed to open block device ./file0: (-2) [ 629.694748][ T5729] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 629.727737][ T5729] usb 7-1: device descriptor read/8, error -71 [ 629.934550][ T5710] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 629.991262][ T5729] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 630.005410][ T5729] usb 7-1: device descriptor read/8, error -71 [ 630.095329][ T5710] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.118053][ T5710] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.126041][ T5729] usb usb7-port1: unable to enumerate USB device [ 630.137236][ T5710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.145319][ T5710] usb 9-1: Product: syz [ 630.145338][ T5710] usb 9-1: Manufacturer: syz [ 630.145352][ T5710] usb 9-1: SerialNumber: syz [ 630.370054][T15119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.372784][T15119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.391227][ T5710] usb 9-1: No union descriptors [ 630.404651][ T5710] usb 9-1: USB disconnect, device number 22 [ 630.812307][T14978] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.812394][T14978] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.904822][ T5595] Bluetooth: hci4: command tx timeout [ 630.944612][ T5710] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 631.095182][ T5710] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 631.099340][ T5710] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 631.099366][ T5710] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 631.099414][ T5710] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 631.099435][ T5710] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 631.099456][ T5710] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.099494][ T5710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.178184][ T5710] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 631.454556][ T5710] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 631.619189][ T5710] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 631.632248][ T5710] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 631.644907][ T5710] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 631.663957][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.672032][ T5710] usb 3-1: Product: syz [ 631.672051][ T5710] usb 3-1: Manufacturer: syz [ 631.672066][ T5710] usb 3-1: SerialNumber: syz [ 631.769846][ T5710] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 631.799842][ T5710] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 631.823955][ T5710] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 631.879086][ T37] audit: type=1800 audit(1788371324.983:114): pid=15138 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2678" name="size" dev="configfs" ino=49152 res=0 errno=0 [ 631.888954][ T37] audit: type=1800 audit(1788371324.993:115): pid=15138 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2678" name="zoned" dev="configfs" ino=50177 res=0 errno=0 [ 631.898958][ T37] audit: type=1800 audit(1788371325.003:116): pid=15138 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2678" name="power" dev="configfs" ino=50178 res=0 errno=0 [ 632.305539][T14978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 632.398692][T14978] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 632.409923][T14978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 632.450907][T14978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 632.459243][T14978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 632.459295][T15146] nvmet: failed to open block device ./file0: (-2) [ 632.512023][T14978] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 632.521515][T14978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 632.603945][T14978] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 632.802647][T14978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.846419][T14978] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.880147][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.880302][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.900132][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.900397][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.005922][ T5730] usb 9-1: USB disconnect, device number 23 [ 634.111688][T15190] nvmet: failed to open block device ./file0: (-2) [ 634.295072][ T5710] usb 3-1: USB disconnect, device number 13 [ 634.318772][ T5710] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 634.339267][T14978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.341817][ T5710] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 634.359194][ T5710] ti_usb_3410_5052 3-1:2.0: device disconnected [ 634.744643][ T5710] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 634.896019][ T5710] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.908054][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.927544][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.929208][ T5710] usb 3-1: Product: syz [ 634.929225][ T5710] usb 3-1: Manufacturer: syz [ 634.929238][ T5710] usb 3-1: SerialNumber: syz [ 635.191608][T15198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.192249][T15198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.227910][ T5710] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 635.257942][ T5710] usb 3-1: USB disconnect, device number 14 [ 635.524350][T14978] veth0_vlan: entered promiscuous mode [ 635.540495][T14978] veth1_vlan: entered promiscuous mode [ 635.609211][T14978] veth0_macvtap: entered promiscuous mode [ 635.671983][T14978] veth1_macvtap: entered promiscuous mode [ 635.734989][ T5710] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 635.754980][T14978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.802163][T14978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.885758][ T5710] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 635.899400][ T5710] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 635.901053][ T5710] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 635.901106][ T5710] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 635.901127][ T5710] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 635.901147][ T5710] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 635.901186][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.937914][ T9711] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.009080][ T5710] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 636.078689][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.256621][ T37] audit: type=1800 audit(1788371329.353:117): pid=15233 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2703" name="size" dev="configfs" ino=50565 res=0 errno=0 [ 636.256713][ T37] audit: type=1800 audit(1788371329.353:118): pid=15233 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2703" name="zoned" dev="configfs" ino=51278 res=0 errno=0 [ 636.256748][ T37] audit: type=1800 audit(1788371329.353:119): pid=15233 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2703" name="power" dev="configfs" ino=51279 res=0 errno=0 [ 636.299621][ T104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.620207][ T104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.780721][ T5730] usb 3-1: USB disconnect, device number 15 [ 638.151909][ T1309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.153457][ T1309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.257830][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.257899][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.648002][T15285] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2721'. [ 638.751922][T15290] FAULT_INJECTION: forcing a failure. [ 638.751922][T15290] name failslab, interval 1, probability 0, space 0, times 0 [ 638.753643][T15290] CPU: 1 UID: 0 PID: 15290 Comm: syz.8.2722 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 638.753670][T15290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.753682][T15290] Call Trace: [ 638.753690][T15290] [ 638.753700][T15290] dump_stack_lvl+0xe8/0x150 [ 638.753733][T15290] should_fail_ex+0x46b/0x600 [ 638.753760][T15290] should_failslab+0xa8/0x100 [ 638.753790][T15290] kmem_cache_alloc_node_noprof+0xac/0x660 [ 638.753812][T15290] ? __alloc_skb+0x1db/0x7a0 [ 638.753832][T15290] ? __alloc_skb+0x1db/0x7a0 [ 638.753858][T15290] __alloc_skb+0x1db/0x7a0 [ 638.753883][T15290] __ip6_append_data+0x2ec4/0x40c0 [ 638.753928][T15290] ? __pfx_raw6_getfrag+0x10/0x10 [ 638.753978][T15290] ? __pfx___ip6_append_data+0x10/0x10 [ 638.754003][T15290] ? ip6_setup_cork+0x547/0xf60 [ 638.754027][T15290] ? ip6_append_data+0x1a6/0x270 [ 638.754052][T15290] ip6_append_data+0x108/0x270 [ 638.754194][T15290] ? __pfx_raw6_getfrag+0x10/0x10 [ 638.754227][T15290] rawv6_sendmsg+0x1298/0x18c0 [ 638.754265][T15290] ? smack_ipv6host_label+0x824/0x8e0 [ 638.754291][T15290] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 638.754324][T15290] ? smack_socket_sendmsg+0x4b8/0x5a0 [ 638.754349][T15290] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 638.754378][T15290] ? lock_acquire+0x115/0x350 [ 638.754407][T15290] ? sock_rps_record_flow+0x19/0x350 [ 638.754433][T15290] ? inet_sendmsg+0x298/0x320 [ 638.754456][T15290] ? __pfx_inet_sendmsg+0x10/0x10 [ 638.754477][T15290] sock_sendmsg_nosec+0x10e/0x180 [ 638.754500][T15290] __sys_sendto+0x41e/0x5d0 [ 638.754526][T15290] ? __pfx___sys_sendto+0x10/0x10 [ 638.754585][T15290] ? rcu_is_watching+0x16/0xb0 [ 638.754617][T15290] __x64_sys_sendto+0xde/0x100 [ 638.754642][T15290] do_syscall_64+0x166/0x520 [ 638.754662][T15290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.754682][T15290] ? clear_bhb_loop+0x70/0xc0 [ 638.754705][T15290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.754724][T15290] RIP: 0033:0x7f4ce9e0e159 [ 638.754743][T15290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.754759][T15290] RSP: 002b:00007f4ce8066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 638.754780][T15290] RAX: ffffffffffffffda RBX: 00007f4cea095fa0 RCX: 00007f4ce9e0e159 [ 638.754795][T15290] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000004 [ 638.754807][T15290] RBP: 00007f4ce9ea5024 R08: 0000200000000600 R09: 0000000000000080 [ 638.754820][T15290] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 638.754832][T15290] R13: 00007f4cea096038 R14: 00007f4cea095fa0 R15: 00007ffe9ac358c8 [ 638.754864][T15290] [ 640.752688][T15327] input: syz0 as /devices/virtual/input/input37 [ 641.934585][ T4915] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 642.136332][ T4915] usb 7-1: Using ep0 maxpacket: 32 [ 642.138442][ T4915] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 642.139751][ T4915] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 642.139779][ T4915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 130, setting to 64 [ 642.142108][ T4915] usb 7-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 642.142130][ T4915] usb 7-1: Product: syz [ 642.142143][ T4915] usb 7-1: Manufacturer: syz [ 642.142155][ T4915] usb 7-1: SerialNumber: syz [ 642.150673][ T4915] usb 7-1: config 0 descriptor?? [ 642.216674][ T4915] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 642.362702][T15337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.367653][T15337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.408709][ T5710] usb 7-1: USB disconnect, device number 28 [ 642.442251][ T3360] usb 7-1: Failed to submit usb control message: -71 [ 642.454189][ T3360] usb 7-1: unable to send the bmi data to the device: -71 [ 642.454213][ T3360] usb 7-1: unable to get target info from device [ 642.454228][ T3360] usb 7-1: could not get target info (-71) [ 642.454331][ T3360] usb 7-1: could not probe fw (-71) [ 644.156704][T15384] input: syz0 as /devices/virtual/input/input38 [ 646.458858][T15439] input: syz0 as /devices/virtual/input/input39 [ 647.084202][T15434] syz.4.2774 (15434) used greatest stack depth: 18152 bytes left [ 648.183157][T15477] FAULT_INJECTION: forcing a failure. [ 648.183157][T15477] name fail_futex, interval 1, probability 0, space 0, times 0 [ 648.188217][T15477] CPU: 1 UID: 0 PID: 15477 Comm: syz.8.2791 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 648.188246][T15477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 648.188257][T15477] Call Trace: [ 648.188264][T15477] [ 648.188272][T15477] dump_stack_lvl+0xe8/0x150 [ 648.188305][T15477] should_fail_ex+0x46b/0x600 [ 648.188330][T15477] get_futex_key+0x1b4/0x1580 [ 648.188357][T15477] ? lock_acquire+0x115/0x350 [ 648.188387][T15477] ? __pfx_get_futex_key+0x10/0x10 [ 648.188410][T15477] ? __fget_files+0x2a/0x420 [ 648.188429][T15477] ? __fget_files+0x3a8/0x420 [ 648.188449][T15477] futex_wake+0x119/0x600 [ 648.188475][T15477] ? __pfx_futex_wake+0x10/0x10 [ 648.188493][T15477] ? __sys_bpf+0xa22/0xd90 [ 648.188529][T15477] ? __pfx___sys_bpf+0x10/0x10 [ 648.188565][T15477] do_futex+0x458/0x4e0 [ 648.188601][T15477] ? __pfx_do_futex+0x10/0x10 [ 648.188645][T15477] __se_sys_futex+0x3a8/0x450 [ 648.188680][T15477] ? __pfx___se_sys_futex+0x10/0x10 [ 648.188716][T15477] ? rcu_is_watching+0x16/0xb0 [ 648.188752][T15477] ? __x64_sys_futex+0x21/0xf0 [ 648.188789][T15477] do_syscall_64+0x166/0x520 [ 648.188815][T15477] ? trace_irq_disable+0x3b/0x140 [ 648.188837][T15477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.188860][T15477] ? clear_bhb_loop+0x70/0xc0 [ 648.188891][T15477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.188912][T15477] RIP: 0033:0x7f4ce9e0e159 [ 648.188932][T15477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.188954][T15477] RSP: 002b:00007f4ce80660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 648.188979][T15477] RAX: ffffffffffffffda RBX: 00007f4cea095fa8 RCX: 00007f4ce9e0e159 [ 648.188993][T15477] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cea095fac [ 648.189006][T15477] RBP: 00007f4cea095fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 648.189024][T15477] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 648.189041][T15477] R13: 00007f4cea096038 R14: 00007ffe9ac357e0 R15: 00007ffe9ac358c8 [ 648.189074][T15477] [ 649.432872][T15509] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2804'. [ 656.504967][ T1234] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 656.675695][ T1234] usb 5-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 656.680419][ T1234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.680471][ T1234] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.680509][ T1234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.726336][ T1234] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 657.880842][T15627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.892864][T15627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.107548][ T2375] pvrusb2: control-write URB failure, status=-71 [ 658.123075][ T4915] usb 5-1: USB disconnect, device number 40 [ 658.132825][ T2375] pvrusb2: Device being rendered inoperable [ 658.133144][ T2375] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 658.133157][ T2375] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 658.799025][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2862'. [ 659.402537][ T3360] bond0: (slave bond_slave_0): interface is now down [ 659.432482][ T3360] bond0: (slave bond_slave_1): interface is now down [ 659.710538][ T3360] bond0: now running without any active interface! [ 660.646941][ T1234] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 660.784785][ T1234] usb 5-1: device descriptor read/64, error -71 [ 661.034703][ T1234] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 661.164588][ T1234] usb 5-1: device descriptor read/64, error -71 [ 661.276427][ T1234] usb usb5-port1: attempt power cycle [ 661.392308][T15727] FAULT_INJECTION: forcing a failure. [ 661.392308][T15727] name fail_futex, interval 1, probability 0, space 0, times 0 [ 661.392381][T15727] CPU: 0 UID: 0 PID: 15727 Comm: syz.8.2886 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 661.392408][T15727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.392417][T15727] Call Trace: [ 661.392424][T15727] [ 661.392432][T15727] dump_stack_lvl+0xe8/0x150 [ 661.392464][T15727] should_fail_ex+0x46b/0x600 [ 661.392491][T15727] get_futex_key+0x1b4/0x1580 [ 661.392516][T15727] ? lock_acquire+0x115/0x350 [ 661.392547][T15727] ? __pfx_get_futex_key+0x10/0x10 [ 661.392571][T15727] ? __fget_files+0x2a/0x420 [ 661.392589][T15727] ? __fget_files+0x3a8/0x420 [ 661.392613][T15727] futex_wake+0x119/0x600 [ 661.392638][T15727] ? __pfx_futex_wake+0x10/0x10 [ 661.392656][T15727] ? __sys_bpf+0xa22/0xd90 [ 661.392687][T15727] ? __pfx___sys_bpf+0x10/0x10 [ 661.392711][T15727] do_futex+0x458/0x4e0 [ 661.392741][T15727] ? __pfx_do_futex+0x10/0x10 [ 661.392773][T15727] __se_sys_futex+0x3a8/0x450 [ 661.392802][T15727] ? ksys_write+0x248/0x270 [ 661.392821][T15727] ? __pfx___se_sys_futex+0x10/0x10 [ 661.392847][T15727] ? __pfx_ksys_write+0x10/0x10 [ 661.392871][T15727] ? __x64_sys_futex+0x21/0xf0 [ 661.392899][T15727] do_syscall_64+0x166/0x520 [ 661.392919][T15727] ? trace_irq_disable+0x3b/0x140 [ 661.392940][T15727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.392959][T15727] ? clear_bhb_loop+0x70/0xc0 [ 661.392980][T15727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.392998][T15727] RIP: 0033:0x7f4ce9e0e159 [ 661.393015][T15727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.393031][T15727] RSP: 002b:00007f4ce80660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 661.393051][T15727] RAX: ffffffffffffffda RBX: 00007f4cea095fa8 RCX: 00007f4ce9e0e159 [ 661.393064][T15727] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cea095fac [ 661.393075][T15727] RBP: 00007f4cea095fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 661.393088][T15727] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 661.393100][T15727] R13: 00007f4cea096038 R14: 00007ffe9ac357e0 R15: 00007ffe9ac358c8 [ 661.393129][T15727] [ 661.626541][ T1234] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 661.645300][ T1234] usb 5-1: device descriptor read/8, error -71 [ 661.894550][ T1234] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 661.916265][ T1234] usb 5-1: device descriptor read/8, error -71 [ 662.044954][ T1234] usb usb5-port1: unable to enumerate USB device [ 662.803894][T15754] nvmet: failed to open block device ./file0: (-2) [ 662.941497][T15757] FAULT_INJECTION: forcing a failure. [ 662.941497][T15757] name fail_futex, interval 1, probability 0, space 0, times 0 [ 662.958560][T15757] CPU: 1 UID: 0 PID: 15757 Comm: syz.6.2898 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 662.958587][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 662.958598][T15757] Call Trace: [ 662.958606][T15757] [ 662.958614][T15757] dump_stack_lvl+0xe8/0x150 [ 662.958647][T15757] should_fail_ex+0x46b/0x600 [ 662.958683][T15757] get_futex_key+0x1b4/0x1580 [ 662.958709][T15757] ? lock_acquire+0x115/0x350 [ 662.958746][T15757] ? __pfx_get_futex_key+0x10/0x10 [ 662.958772][T15757] ? __fget_files+0x2a/0x420 [ 662.958790][T15757] ? __fget_files+0x3a8/0x420 [ 662.958816][T15757] futex_wake+0x119/0x600 [ 662.958842][T15757] ? __pfx_futex_wake+0x10/0x10 [ 662.958860][T15757] ? __sys_bpf+0xa22/0xd90 [ 662.958892][T15757] ? __pfx___sys_bpf+0x10/0x10 [ 662.958919][T15757] do_futex+0x458/0x4e0 [ 662.958951][T15757] ? __pfx_do_futex+0x10/0x10 [ 662.958985][T15757] __se_sys_futex+0x3a8/0x450 [ 662.959018][T15757] ? __pfx___se_sys_futex+0x10/0x10 [ 662.959044][T15757] ? rcu_is_watching+0x16/0xb0 [ 662.959075][T15757] ? __x64_sys_futex+0x21/0xf0 [ 662.959105][T15757] do_syscall_64+0x166/0x520 [ 662.959125][T15757] ? trace_irq_disable+0x3b/0x140 [ 662.959146][T15757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.959165][T15757] ? clear_bhb_loop+0x70/0xc0 [ 662.959187][T15757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.959206][T15757] RIP: 0033:0x7f1471dbe159 [ 662.959224][T15757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.959241][T15757] RSP: 002b:00007f14700160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 662.959262][T15757] RAX: ffffffffffffffda RBX: 00007f1472045fa8 RCX: 00007f1471dbe159 [ 662.959276][T15757] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1472045fac [ 662.959289][T15757] RBP: 00007f1472045fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 662.959302][T15757] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 662.959314][T15757] R13: 00007f1472046038 R14: 00007fffe6ec3930 R15: 00007fffe6ec3a18 [ 662.959345][T15757] [ 664.284601][ T5730] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 664.437075][ T5730] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 664.454592][ T5730] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 664.455676][ T5730] usb 9-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 664.455697][ T5730] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 664.455747][ T5730] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 664.455772][ T5730] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 664.509627][ T5730] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 664.517703][ T5730] usb 9-1: Product: syz [ 664.517722][ T5730] usb 9-1: Manufacturer: syz [ 664.578455][ T5730] cdc_wdm 9-1:1.0: skipping garbage [ 664.584872][ T5730] cdc_wdm 9-1:1.0: skipping garbage [ 664.584986][ T5730] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 664.872131][T15782] nvmet: failed to open block device ./file0: (-2) [ 665.254592][ T5710] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 665.384572][ T5710] usb 5-1: device descriptor read/64, error -71 [ 665.624633][ T5710] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 665.755392][ T5710] usb 5-1: device descriptor read/64, error -71 [ 665.865698][ T5710] usb usb5-port1: attempt power cycle [ 666.204659][ T5710] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 666.228726][ T5710] usb 5-1: device descriptor read/8, error -71 [ 666.464686][ T5710] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 666.497865][ T5710] usb 5-1: device descriptor read/8, error -71 [ 666.605694][ T5710] usb usb5-port1: unable to enumerate USB device [ 667.094785][ T4915] usb 9-1: USB disconnect, device number 24 [ 669.277929][T15839] FAULT_INJECTION: forcing a failure. [ 669.277929][T15839] name fail_futex, interval 1, probability 0, space 0, times 0 [ 669.291059][T15839] CPU: 1 UID: 0 PID: 15839 Comm: syz.6.2932 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 669.291092][T15839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 669.291103][T15839] Call Trace: [ 669.291111][T15839] [ 669.291119][T15839] dump_stack_lvl+0xe8/0x150 [ 669.291154][T15839] should_fail_ex+0x46b/0x600 [ 669.291180][T15839] get_futex_key+0x1b4/0x1580 [ 669.291206][T15839] ? lock_acquire+0x115/0x350 [ 669.291238][T15839] ? __pfx_get_futex_key+0x10/0x10 [ 669.291264][T15839] ? __fget_files+0x2a/0x420 [ 669.291282][T15839] ? __fget_files+0x3a8/0x420 [ 669.291306][T15839] futex_wake+0x119/0x600 [ 669.291336][T15839] ? __pfx_futex_wake+0x10/0x10 [ 669.291354][T15839] ? __sys_bpf+0xa22/0xd90 [ 669.291386][T15839] ? __pfx___sys_bpf+0x10/0x10 [ 669.291413][T15839] do_futex+0x458/0x4e0 [ 669.291444][T15839] ? __pfx_do_futex+0x10/0x10 [ 669.291479][T15839] __se_sys_futex+0x3a8/0x450 [ 669.291510][T15839] ? __pfx___se_sys_futex+0x10/0x10 [ 669.291535][T15839] ? rcu_is_watching+0x16/0xb0 [ 669.291564][T15839] ? __x64_sys_futex+0x21/0xf0 [ 669.291592][T15839] do_syscall_64+0x166/0x520 [ 669.291611][T15839] ? trace_irq_disable+0x3b/0x140 [ 669.291633][T15839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.291651][T15839] ? clear_bhb_loop+0x70/0xc0 [ 669.291673][T15839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.291691][T15839] RIP: 0033:0x7f1471dbe159 [ 669.291708][T15839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.291724][T15839] RSP: 002b:00007f14700160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 669.291745][T15839] RAX: ffffffffffffffda RBX: 00007f1472045fa8 RCX: 00007f1471dbe159 [ 669.291759][T15839] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1472045fac [ 669.291771][T15839] RBP: 00007f1472045fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 669.291784][T15839] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 669.291796][T15839] R13: 00007f1472046038 R14: 00007fffe6ec3930 R15: 00007fffe6ec3a18 [ 669.291827][T15839] [ 670.649419][T15865] FAULT_INJECTION: forcing a failure. [ 670.649419][T15865] name fail_futex, interval 1, probability 0, space 0, times 0 [ 670.649513][T15865] CPU: 0 UID: 0 PID: 15865 Comm: syz.8.2943 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 670.649533][T15865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 670.649542][T15865] Call Trace: [ 670.649548][T15865] [ 670.649556][T15865] dump_stack_lvl+0xe8/0x150 [ 670.649588][T15865] should_fail_ex+0x46b/0x600 [ 670.649615][T15865] get_futex_key+0x1b4/0x1580 [ 670.649641][T15865] ? lock_acquire+0x115/0x350 [ 670.649676][T15865] ? __pfx_get_futex_key+0x10/0x10 [ 670.649701][T15865] ? __fget_files+0x2a/0x420 [ 670.649721][T15865] ? __fget_files+0x3a8/0x420 [ 670.649744][T15865] futex_wake+0x119/0x600 [ 670.649769][T15865] ? __pfx_futex_wake+0x10/0x10 [ 670.649792][T15865] ? __sys_bpf+0xa22/0xd90 [ 670.649825][T15865] ? __pfx___sys_bpf+0x10/0x10 [ 670.649851][T15865] do_futex+0x458/0x4e0 [ 670.649882][T15865] ? __pfx_do_futex+0x10/0x10 [ 670.649916][T15865] __se_sys_futex+0x3a8/0x450 [ 670.649948][T15865] ? __pfx___se_sys_futex+0x10/0x10 [ 670.649973][T15865] ? rcu_is_watching+0x16/0xb0 [ 670.650003][T15865] ? __x64_sys_futex+0x21/0xf0 [ 670.650032][T15865] do_syscall_64+0x166/0x520 [ 670.650050][T15865] ? trace_irq_disable+0x3b/0x140 [ 670.650071][T15865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.650091][T15865] ? clear_bhb_loop+0x70/0xc0 [ 670.650113][T15865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.650132][T15865] RIP: 0033:0x7f4ce9e0e159 [ 670.650149][T15865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.650164][T15865] RSP: 002b:00007f4ce80660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 670.650184][T15865] RAX: ffffffffffffffda RBX: 00007f4cea095fa8 RCX: 00007f4ce9e0e159 [ 670.650198][T15865] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cea095fac [ 670.650210][T15865] RBP: 00007f4cea095fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 670.650223][T15865] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 670.650235][T15865] R13: 00007f4cea096038 R14: 00007ffe9ac357e0 R15: 00007ffe9ac358c8 [ 670.650263][T15865] [ 672.227841][T15902] FAULT_INJECTION: forcing a failure. [ 672.227841][T15902] name fail_futex, interval 1, probability 0, space 0, times 0 [ 672.232622][T15902] CPU: 0 UID: 0 PID: 15902 Comm: syz.6.2957 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 672.232642][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.232651][T15902] Call Trace: [ 672.232658][T15902] [ 672.232666][T15902] dump_stack_lvl+0xe8/0x150 [ 672.232700][T15902] should_fail_ex+0x46b/0x600 [ 672.232726][T15902] get_futex_key+0x1b4/0x1580 [ 672.232751][T15902] ? lock_acquire+0x115/0x350 [ 672.232796][T15902] ? __pfx_get_futex_key+0x10/0x10 [ 672.232820][T15902] ? __fget_files+0x2a/0x420 [ 672.232838][T15902] ? __fget_files+0x3a8/0x420 [ 672.232861][T15902] futex_wake+0x119/0x600 [ 672.232888][T15902] ? __pfx_futex_wake+0x10/0x10 [ 672.232906][T15902] ? __sys_bpf+0xa22/0xd90 [ 672.232937][T15902] ? __pfx___sys_bpf+0x10/0x10 [ 672.232962][T15902] do_futex+0x458/0x4e0 [ 672.232992][T15902] ? __pfx_do_futex+0x10/0x10 [ 672.233026][T15902] __se_sys_futex+0x3a8/0x450 [ 672.233057][T15902] ? __pfx___se_sys_futex+0x10/0x10 [ 672.233082][T15902] ? rcu_is_watching+0x16/0xb0 [ 672.233112][T15902] ? __x64_sys_futex+0x21/0xf0 [ 672.233140][T15902] do_syscall_64+0x166/0x520 [ 672.233161][T15902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.233180][T15902] ? clear_bhb_loop+0x70/0xc0 [ 672.233203][T15902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.233220][T15902] RIP: 0033:0x7f1471dbe159 [ 672.233237][T15902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.233253][T15902] RSP: 002b:00007f14700160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 672.233272][T15902] RAX: ffffffffffffffda RBX: 00007f1472045fa8 RCX: 00007f1471dbe159 [ 672.233286][T15902] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1472045fac [ 672.233297][T15902] RBP: 00007f1472045fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 672.233316][T15902] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 672.233328][T15902] R13: 00007f1472046038 R14: 00007fffe6ec3930 R15: 00007fffe6ec3a18 [ 672.233358][T15902] [ 673.859081][T15937] FAULT_INJECTION: forcing a failure. [ 673.859081][T15937] name fail_futex, interval 1, probability 0, space 0, times 0 [ 673.859114][T15937] CPU: 0 UID: 0 PID: 15937 Comm: syz.8.2970 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 673.859136][T15937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.859147][T15937] Call Trace: [ 673.859154][T15937] [ 673.859163][T15937] dump_stack_lvl+0xe8/0x150 [ 673.859196][T15937] should_fail_ex+0x46b/0x600 [ 673.859222][T15937] get_futex_key+0x1b4/0x1580 [ 673.859248][T15937] ? lock_acquire+0x115/0x350 [ 673.859281][T15937] ? __pfx_get_futex_key+0x10/0x10 [ 673.859306][T15937] ? __fget_files+0x2a/0x420 [ 673.859324][T15937] ? __fget_files+0x3a8/0x420 [ 673.859349][T15937] futex_wake+0x119/0x600 [ 673.859375][T15937] ? __pfx_futex_wake+0x10/0x10 [ 673.859393][T15937] ? __sys_bpf+0xa22/0xd90 [ 673.859424][T15937] ? __pfx___sys_bpf+0x10/0x10 [ 673.859452][T15937] do_futex+0x458/0x4e0 [ 673.859482][T15937] ? __pfx_do_futex+0x10/0x10 [ 673.859517][T15937] __se_sys_futex+0x3a8/0x450 [ 673.859550][T15937] ? __pfx___se_sys_futex+0x10/0x10 [ 673.859576][T15937] ? rcu_is_watching+0x16/0xb0 [ 673.859611][T15937] ? __x64_sys_futex+0x21/0xf0 [ 673.859648][T15937] do_syscall_64+0x166/0x520 [ 673.859668][T15937] ? trace_irq_disable+0x3b/0x140 [ 673.859689][T15937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.859707][T15937] ? clear_bhb_loop+0x70/0xc0 [ 673.859729][T15937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.859745][T15937] RIP: 0033:0x7f4ce9e0e159 [ 673.859762][T15937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.859779][T15937] RSP: 002b:00007f4ce80660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 673.859800][T15937] RAX: ffffffffffffffda RBX: 00007f4cea095fa8 RCX: 00007f4ce9e0e159 [ 673.859814][T15937] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cea095fac [ 673.859826][T15937] RBP: 00007f4cea095fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 673.859839][T15937] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 673.859851][T15937] R13: 00007f4cea096038 R14: 00007ffe9ac357e0 R15: 00007ffe9ac358c8 [ 673.859880][T15937] [ 673.860145][ T5595] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 674.540953][T15948] FAULT_INJECTION: forcing a failure. [ 674.540953][T15948] name failslab, interval 1, probability 0, space 0, times 0 [ 674.541036][T15948] CPU: 0 UID: 0 PID: 15948 Comm: syz.8.2977 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 674.541058][T15948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 674.541076][T15948] Call Trace: [ 674.541084][T15948] [ 674.541093][T15948] dump_stack_lvl+0xe8/0x150 [ 674.541125][T15948] should_fail_ex+0x46b/0x600 [ 674.541149][T15948] ? sock_alloc_inode+0x2c/0x1a0 [ 674.541171][T15948] should_failslab+0xa8/0x100 [ 674.541201][T15948] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 674.541226][T15948] ? sock_alloc_inode+0x2c/0x1a0 [ 674.541249][T15948] ? __pfx_sock_alloc_inode+0x10/0x10 [ 674.541266][T15948] sock_alloc_inode+0x2c/0x1a0 [ 674.541285][T15948] ? __pfx_sock_alloc_inode+0x10/0x10 [ 674.541302][T15948] alloc_inode+0x6a/0x1b0 [ 674.541329][T15948] __sock_create+0x12d/0x9d0 [ 674.541359][T15948] __sys_socket+0xd6/0x1b0 [ 674.541382][T15948] __x64_sys_socket+0x7a/0x90 [ 674.541402][T15948] do_syscall_64+0x166/0x520 [ 674.541424][T15948] ? trace_irq_disable+0x3b/0x140 [ 674.541446][T15948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.541465][T15948] ? clear_bhb_loop+0x70/0xc0 [ 674.541486][T15948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.541504][T15948] RIP: 0033:0x7f4ce9e0e159 [ 674.541523][T15948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.541539][T15948] RSP: 002b:00007f4ce8066028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 674.541560][T15948] RAX: ffffffffffffffda RBX: 00007f4cea095fa0 RCX: 00007f4ce9e0e159 [ 674.541574][T15948] RDX: 0000000000000087 RSI: 0000000000000003 RDI: 000000000000000a [ 674.541587][T15948] RBP: 00007f4ce9ea5024 R08: 0000000000000000 R09: 0000000000000000 [ 674.541599][T15948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.541611][T15948] R13: 00007f4cea096038 R14: 00007f4cea095fa0 R15: 00007ffe9ac358c8 [ 674.541637][T15948] [ 674.541646][T15948] socket: no more sockets [ 676.204544][ T5696] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 676.366618][ T5696] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 676.368545][ T5696] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.368581][ T5696] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 676.380137][ T5696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.380161][ T5696] usb 9-1: Product: syz [ 676.380174][ T5696] usb 9-1: Manufacturer: syz [ 676.380186][ T5696] usb 9-1: SerialNumber: syz [ 676.645953][T15977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.663365][T15977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.666116][T15986] 9p: Bad value for 'rfdno' [ 676.699774][ T5696] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 676.751579][ T5696] usb 9-1: USB disconnect, device number 25 [ 677.224749][ T5696] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 677.418106][ T5696] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 677.428256][ T5696] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 677.428911][ T5696] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 677.428972][ T5696] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 677.428994][ T5696] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 677.429019][ T5696] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 677.429055][ T5696] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.710004][ T5696] usb 9-1: usb_control_msg returned -32 [ 677.710099][ T5696] usbtmc 9-1:16.0: can't read capabilities [ 677.758472][T16003] FAULT_INJECTION: forcing a failure. [ 677.758472][T16003] name failslab, interval 1, probability 0, space 0, times 0 [ 677.813754][ T5696] usb 9-1: USB disconnect, device number 26 [ 677.836649][T16003] CPU: 0 UID: 0 PID: 16003 Comm: syz.2.2999 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 677.836679][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 677.836693][T16003] Call Trace: [ 677.836703][T16003] [ 677.836712][T16003] dump_stack_lvl+0xe8/0x150 [ 677.836747][T16003] should_fail_ex+0x46b/0x600 [ 677.836782][T16003] should_failslab+0xa8/0x100 [ 677.836812][T16003] ? fuse_get_req+0x8ee/0xd40 [ 677.836836][T16003] kmem_cache_alloc_noprof+0x9e/0x690 [ 677.836863][T16003] ? fuse_get_req+0x8ee/0xd40 [ 677.836889][T16003] fuse_get_req+0x8ee/0xd40 [ 677.836918][T16003] ? __pfx_fuse_get_req+0x10/0x10 [ 677.836938][T16003] ? __pfx_from_kgid+0x10/0x10 [ 677.836968][T16003] ? pid_nr_ns+0xcb/0x140 [ 677.836995][T16003] fuse_chan_send_bg+0x234/0x1640 [ 677.837020][T16003] ? fuse_simple_background+0xce/0x160 [ 677.837048][T16003] cuse_channel_open+0x4c1/0x7a0 [ 677.837080][T16003] ? __pfx_cuse_channel_open+0x10/0x10 [ 677.837106][T16003] misc_open+0x2de/0x350 [ 677.837238][T16003] chrdev_open+0x4dc/0x600 [ 677.837269][T16003] ? __pfx_chrdev_open+0x10/0x10 [ 677.837296][T16003] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 677.837329][T16003] ? __pfx_chrdev_open+0x10/0x10 [ 677.837355][T16003] do_dentry_open+0x849/0x1420 [ 677.837396][T16003] vfs_open+0x3b/0x350 [ 677.837421][T16003] ? path_openat+0x142d/0x1d60 [ 677.837470][T16003] path_openat+0x1448/0x1d60 [ 677.837514][T16003] do_file_open+0x23e/0x4a0 [ 677.837544][T16003] ? __pfx_do_file_open+0x10/0x10 [ 677.837592][T16003] ? alloc_fd+0x654/0x6d0 [ 677.837639][T16003] do_sys_openat2+0x115/0x200 [ 677.837667][T16003] ? __se_sys_futex+0x3a8/0x450 [ 677.837697][T16003] ? __pfx_do_sys_openat2+0x10/0x10 [ 677.837732][T16003] ? rcu_is_watching+0x16/0xb0 [ 677.837777][T16003] __x64_sys_openat+0x138/0x170 [ 677.837808][T16003] do_syscall_64+0x166/0x520 [ 677.837829][T16003] ? trace_irq_disable+0x3b/0x140 [ 677.837854][T16003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.837876][T16003] ? clear_bhb_loop+0x70/0xc0 [ 677.837901][T16003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.837922][T16003] RIP: 0033:0x7fbcc86de159 [ 677.837941][T16003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.837960][T16003] RSP: 002b:00007fbcc6936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 677.837982][T16003] RAX: ffffffffffffffda RBX: 00007fbcc8965fa0 RCX: 00007fbcc86de159 [ 677.837998][T16003] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 677.838013][T16003] RBP: 00007fbcc8775024 R08: 0000000000000000 R09: 0000000000000000 [ 677.838027][T16003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.838040][T16003] R13: 00007fbcc8966038 R14: 00007fbcc8965fa0 R15: 00007ffc7c8591d8 [ 677.838072][T16003] [ 679.190316][T16021] 9p: Bad value for 'rfdno' [ 680.149325][T16040] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 680.434068][T16049] 9p: Bad value for 'rfdno' [ 681.008412][ T4915] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 681.154575][ T4915] usb 9-1: device descriptor read/64, error -71 [ 681.405881][ T4915] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 681.544569][ T4915] usb 9-1: device descriptor read/64, error -71 [ 681.662814][T16077] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3028'. [ 681.664644][ T4915] usb usb9-port1: attempt power cycle [ 681.761105][T16081] netlink: 'syz.2.3029': attribute type 4 has an invalid length. [ 682.044562][ T4915] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 682.065296][ T4915] usb 9-1: device descriptor read/8, error -71 [ 682.314586][ T4915] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 682.332543][T16095] < [ 682.344894][ T4915] usb 9-1: device descriptor read/8, error -71 [ 682.454895][ T4915] usb usb9-port1: unable to enumerate USB device [ 684.224697][ T5696] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 684.378479][ T5696] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 684.397124][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.397191][ T5696] usb 3-1: Product: syz [ 684.397206][ T5696] usb 3-1: Manufacturer: syz [ 684.397218][ T5696] usb 3-1: SerialNumber: syz [ 684.474571][ T5249] veth0_vlan: left promiscuous mode [ 684.644306][ T4915] veth0_vlan: entered promiscuous mode [ 684.918810][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 684.920333][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 684.922625][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 684.922675][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 684.923518][ T5696] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 684.996427][ T5696] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 685.303911][ T5710] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 685.454623][ T5710] usb 5-1: device descriptor read/64, error -71 [ 685.694651][ T5710] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 685.804714][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.814835][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.859021][ T5710] usb 5-1: device descriptor read/64, error -71 [ 685.972291][ T5710] usb usb5-port1: attempt power cycle [ 686.175994][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 686.233501][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 686.241115][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 686.250706][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 686.261717][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 686.354612][ T5710] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 686.375215][ T5710] usb 5-1: device descriptor read/8, error -71 [ 686.614544][ T5710] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 686.635471][ T5710] usb 5-1: device descriptor read/8, error -71 [ 686.745103][ T5710] usb usb5-port1: unable to enumerate USB device [ 687.074340][ T5696] usb 3-1: USB disconnect, device number 16 [ 688.024627][ T5696] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 688.154633][ T5696] usb 4-1: device descriptor read/64, error -71 [ 688.394967][ T5696] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 688.429952][ T5595] Bluetooth: hci2: command tx timeout [ 688.524569][ T5696] usb 4-1: device descriptor read/64, error -71 [ 688.574527][ T5709] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 688.634932][ T5696] usb usb4-port1: attempt power cycle [ 688.726556][ T5709] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 688.739782][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.739808][ T5709] usb 5-1: Product: syz [ 688.739821][ T5709] usb 5-1: Manufacturer: syz [ 688.739834][ T5709] usb 5-1: SerialNumber: syz [ 688.770169][ T5710] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 688.925503][ T5710] usb 3-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 688.937090][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.937146][ T5710] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.937221][ T5710] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.937242][ T5710] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 688.995486][ T5696] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 689.007167][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.015623][ T5696] usb 4-1: device descriptor read/8, error -71 [ 689.022753][ T5710] usb 3-1: Product: syz [ 689.022771][ T5710] usb 3-1: Manufacturer: syz [ 689.022784][ T5710] usb 3-1: SerialNumber: syz [ 689.204318][T16179] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.204939][T16179] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.205113][T16179] bridge_slave_0: entered allmulticast mode [ 689.213469][T16179] bridge_slave_0: entered promiscuous mode [ 689.235776][T16179] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.236088][T16179] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.236614][T16179] bridge_slave_1: entered allmulticast mode [ 689.239315][T16179] bridge_slave_1: entered promiscuous mode [ 689.266480][ T5696] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 689.303060][ T5696] usb 4-1: device descriptor read/8, error -71 [ 689.331292][ T5710] usb 3-1: USB disconnect, device number 17 [ 689.415215][ T5696] usb usb4-port1: unable to enumerate USB device [ 689.421207][T16179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.435882][T16179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.490321][ T5709] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 689.502198][ T5709] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 689.534803][ T5709] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 689.575973][ T5709] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 689.630425][T16179] team0: Port device team_slave_0 added [ 689.651022][T16179] team0: Port device team_slave_1 added [ 689.845393][ T5710] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 689.934237][T16179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.937427][T16179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.937451][T16179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.944394][T16179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.944525][T16179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.944550][T16179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.040297][ T5710] usb 3-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 690.053506][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.063709][ T5710] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.063737][ T5710] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.063756][ T5710] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 690.101889][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.109982][ T5710] usb 3-1: Product: syz [ 690.110000][ T5710] usb 3-1: Manufacturer: syz [ 690.110014][ T5710] usb 3-1: SerialNumber: syz [ 690.161281][T16179] hsr_slave_0: entered promiscuous mode [ 690.163621][T16179] hsr_slave_1: entered promiscuous mode [ 690.169701][T16179] debugfs: 'hsr0' already exists in 'hsr' [ 690.169724][T16179] Cannot create hsr debugfs directory [ 690.505053][ T5595] Bluetooth: hci2: command tx timeout [ 691.049173][T16249] input: syz0 as /devices/virtual/input/input40 [ 691.475528][ T5730] usb 5-1: USB disconnect, device number 53 [ 691.673227][T16256] 9p: Bad value for 'wfdno' [ 692.144746][ T5730] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 692.162674][ T36] usb 3-1: USB disconnect, device number 18 [ 692.274719][ T5730] usb 4-1: device descriptor read/64, error -71 [ 692.429560][T16179] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.515461][ T5730] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 692.593279][ T5595] Bluetooth: hci2: command tx timeout [ 692.654557][ T5730] usb 4-1: device descriptor read/64, error -71 [ 692.765069][ T5730] usb usb4-port1: attempt power cycle [ 693.104596][ T5730] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 693.125485][ T5730] usb 4-1: device descriptor read/8, error -71 [ 693.374645][ T5730] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 693.395421][ T5730] usb 4-1: device descriptor read/8, error -71 [ 693.404582][ T5729] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 693.515040][ T5730] usb usb4-port1: unable to enumerate USB device [ 693.564642][ T5729] usb 5-1: device descriptor read/64, error -71 [ 693.838066][ T5729] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 693.937406][T16286] input: syz0 as /devices/virtual/input/input41 [ 693.984596][ T5729] usb 5-1: device descriptor read/64, error -71 [ 694.097163][ T5729] usb usb5-port1: attempt power cycle [ 694.129751][T16179] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.535919][ T5729] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 694.556027][ T5729] usb 5-1: device descriptor read/8, error -71 [ 694.667407][ T5595] Bluetooth: hci2: command tx timeout [ 694.793440][T16179] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.844747][ T5729] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 694.865502][ T5729] usb 5-1: device descriptor read/8, error -71 [ 694.975112][ T5729] usb usb5-port1: unable to enumerate USB device [ 695.271532][T16179] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.587225][T16318] input: syz0 as /devices/virtual/input/input42 [ 697.016247][T16344] input: syz0 as /devices/virtual/input/input43 [ 697.054597][T16344] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 697.441982][T16356] FAULT_INJECTION: forcing a failure. [ 697.441982][T16356] name failslab, interval 1, probability 0, space 0, times 0 [ 697.442024][T16356] CPU: 0 UID: 0 PID: 16356 Comm: syz.2.3111 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 697.442046][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.442056][T16356] Call Trace: [ 697.442064][T16356] [ 697.442073][T16356] dump_stack_lvl+0xe8/0x150 [ 697.442106][T16356] should_fail_ex+0x46b/0x600 [ 697.442129][T16356] ? __d_alloc+0x37/0x6f0 [ 697.442151][T16356] should_failslab+0xa8/0x100 [ 697.442179][T16356] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 697.442204][T16356] ? __d_alloc+0x37/0x6f0 [ 697.442229][T16356] __d_alloc+0x37/0x6f0 [ 697.442254][T16356] d_alloc_pseudo+0x21/0xc0 [ 697.442278][T16356] alloc_path_pseudo+0x107/0x220 [ 697.442307][T16356] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 697.442330][T16356] ? rt_spin_lock+0x1e2/0x400 [ 697.442365][T16356] alloc_file_pseudo+0xa8/0x1e0 [ 697.442393][T16356] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 697.442421][T16356] ? alloc_fd+0x654/0x6d0 [ 697.442453][T16356] sock_alloc_file+0xb8/0x2f0 [ 697.442470][T16356] ? __sys_socket+0x12b/0x1b0 [ 697.442490][T16356] __sys_socket+0x13f/0x1b0 [ 697.442513][T16356] __x64_sys_socket+0x7a/0x90 [ 697.442533][T16356] do_syscall_64+0x166/0x520 [ 697.442552][T16356] ? trace_irq_disable+0x3b/0x140 [ 697.442571][T16356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.442588][T16356] ? clear_bhb_loop+0x70/0xc0 [ 697.442604][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.442618][T16356] RIP: 0033:0x7fbcc86de159 [ 697.442631][T16356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.442642][T16356] RSP: 002b:00007fbcc6936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 697.442658][T16356] RAX: ffffffffffffffda RBX: 00007fbcc8965fa0 RCX: 00007fbcc86de159 [ 697.442668][T16356] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018 [ 697.442676][T16356] RBP: 00007fbcc8775024 R08: 0000000000000000 R09: 0000000000000000 [ 697.442685][T16356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.442693][T16356] R13: 00007fbcc8966038 R14: 00007fbcc8965fa0 R15: 00007ffc7c8591d8 [ 697.442714][T16356] [ 697.741235][T16179] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 697.823302][T16179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 697.828562][T16179] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 697.835640][T16360] FAULT_INJECTION: forcing a failure. [ 697.835640][T16360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.835764][T16360] CPU: 1 UID: 0 PID: 16360 Comm: syz.3.3113 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 697.835788][T16360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.835799][T16360] Call Trace: [ 697.835807][T16360] [ 697.835815][T16360] dump_stack_lvl+0xe8/0x150 [ 697.835848][T16360] should_fail_ex+0x46b/0x600 [ 697.835875][T16360] _copy_from_user+0x2d/0xb0 [ 697.835898][T16360] ___sys_sendmsg+0x1c6/0x360 [ 697.835930][T16360] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.835951][T16360] ? __lock_acquire+0x6df/0x2e40 [ 697.835979][T16360] ? up_read+0x34/0x180 [ 697.836033][T16360] __sys_sendmmsg+0x279/0x4d0 [ 697.836061][T16360] ? __pfx___sys_sendmmsg+0x10/0x10 [ 697.836082][T16360] ? do_futex+0x3e7/0x4e0 [ 697.836116][T16360] ? __sys_connect+0x3b7/0x470 [ 697.836152][T16360] ? rcu_is_watching+0x16/0xb0 [ 697.836183][T16360] __x64_sys_sendmmsg+0xa0/0xc0 [ 697.836208][T16360] do_syscall_64+0x166/0x520 [ 697.836227][T16360] ? trace_irq_disable+0x3b/0x140 [ 697.836248][T16360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.836265][T16360] ? clear_bhb_loop+0x70/0xc0 [ 697.836287][T16360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.836304][T16360] RIP: 0033:0x7fe5b0a7e159 [ 697.836321][T16360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.836337][T16360] RSP: 002b:00007fe5aecd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 697.836360][T16360] RAX: ffffffffffffffda RBX: 00007fe5b0d05fa0 RCX: 00007fe5b0a7e159 [ 697.836373][T16360] RDX: 0000000000264e33 RSI: 0000200000005240 RDI: 0000000000000004 [ 697.836385][T16360] RBP: 00007fe5b0b15024 R08: 0000000000000000 R09: 0000000000000000 [ 697.836397][T16360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.836408][T16360] R13: 00007fe5b0d06038 R14: 00007fe5b0d05fa0 R15: 00007ffe3a32df88 [ 697.836439][T16360] [ 697.984644][ T36] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 698.101131][T16179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.111243][T16179] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 698.114855][ T36] usb 5-1: device descriptor read/64, error -71 [ 698.193826][T16179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.234913][T16179] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 698.315756][T16179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.376358][ T36] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 698.524561][ T36] usb 5-1: device descriptor read/64, error -71 [ 698.634958][ T36] usb usb5-port1: attempt power cycle [ 698.775074][T16384] input: syz0 as /devices/virtual/input/input44 [ 698.832308][T16384] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 698.981117][T16179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.054757][ T36] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 699.060423][T16179] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.080153][ T36] usb 5-1: device descriptor read/8, error -71 [ 699.108182][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.116406][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.152419][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.155771][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.325653][ T36] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 699.355574][ T36] usb 5-1: device descriptor read/8, error -71 [ 699.464968][ T36] usb usb5-port1: unable to enumerate USB device [ 699.885541][ T37] audit: type=1800 audit(1788371392.983:120): pid=16415 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3123" name="size" dev="configfs" ino=57572 res=0 errno=0 [ 699.910649][ T37] audit: type=1800 audit(1788371393.013:121): pid=16415 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3123" name="zoned" dev="configfs" ino=57573 res=0 errno=0 [ 699.962375][ T37] audit: type=1800 audit(1788371393.063:122): pid=16415 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3123" name="power" dev="configfs" ino=57170 res=0 errno=0 [ 700.770470][T16179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.808492][T16448] input: syz0 as /devices/virtual/input/input45 [ 700.864174][T16452] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 701.724565][ T5593] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 701.783248][ T37] audit: type=1800 audit(1788371394.883:123): pid=16476 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3136" name="size" dev="configfs" ino=57642 res=0 errno=0 [ 701.830766][ T37] audit: type=1800 audit(1788371394.913:124): pid=16476 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3136" name="power" dev="configfs" ino=57643 res=0 errno=0 [ 701.896925][ T5593] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 701.909236][ T5593] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 701.909336][ T5593] usb 4-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 701.934923][ T5593] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 701.935025][ T5593] usb 4-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 701.972365][ T5593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.972443][ T5593] usb 4-1: Product: syz [ 701.972457][ T5593] usb 4-1: Manufacturer: syz [ 701.972470][ T5593] usb 4-1: SerialNumber: syz [ 702.010880][T16179] veth0_vlan: entered promiscuous mode [ 702.030232][ T5593] ti_usb_3410_5052 4-1:2.0: required endpoints missing [ 702.080435][T16179] veth1_vlan: entered promiscuous mode [ 702.263940][T16179] veth0_macvtap: entered promiscuous mode [ 702.300012][T16179] veth1_macvtap: entered promiscuous mode [ 702.370326][T16179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.495641][T16179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.557118][ T3360] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.668726][ T1278] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.669888][ T1278] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.870167][T16491] kvm [16489]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 702.886397][T16491] kvm [16489]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 702.904391][T16491] kvm [16489]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 702.912649][T16491] kvm [16489]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 702.930286][T16491] kvm [16489]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 702.940783][T16491] kvm [16489]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 702.949275][T16491] kvm [16489]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 702.950047][T16491] kvm [16489]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 702.956539][ T3360] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.975862][T16491] kvm [16489]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 702.976647][T16491] kvm [16489]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 703.271674][T16499] input: syz0 as /devices/virtual/input/input46 [ 703.292456][T16499] device-mapper: ioctl: name not supplied when creating device [ 703.595528][T11204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.604665][T11204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.824189][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.832135][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.520697][ T5709] usb 4-1: USB disconnect, device number 27 [ 705.404602][ T36] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 705.404844][ T5730] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 705.414604][ T4915] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 705.556381][ T36] usb 3-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 705.559055][ T36] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.559104][ T36] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.559190][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.567786][ T5730] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 705.569068][ T5730] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 4096, setting to 1024 [ 705.569096][ T5730] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 705.571247][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 705.571269][ T5730] usb 5-1: Product: syz [ 705.571289][ T5730] usb 5-1: Manufacturer: syz [ 705.576870][ T4915] usb 4-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 705.593287][ T4915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.593350][ T4915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 705.593370][ T4915] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 705.593391][ T4915] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.600469][ T4915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.600492][ T4915] usb 4-1: Product: syz [ 705.600505][ T4915] usb 4-1: Manufacturer: syz [ 705.600518][ T4915] usb 4-1: SerialNumber: syz [ 705.635629][ T36] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 705.814708][ T5730] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected [ 705.973722][ T5730] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 706.075442][ T5730] usb 5-1: USB disconnect, device number 62 [ 706.102491][ T36] usb 4-1: USB disconnect, device number 28 [ 706.208811][ T37] audit: type=1800 audit(1788371399.313:125): pid=16557 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.3160" name="size" dev="configfs" ino=58068 res=0 errno=0 [ 706.229909][ T37] audit: type=1800 audit(1788371399.333:126): pid=16557 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.3160" name="power" dev="configfs" ino=58069 res=0 errno=0 [ 706.348539][T16535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.352775][T16535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.416453][ T5730] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 706.422150][ T5730] iuu_phoenix 5-1:1.0: device disconnected [ 706.589448][ T1234] usb 3-1: USB disconnect, device number 19 [ 706.597171][ T2375] pvrusb2: control-write URB failure, status=-71 [ 706.597182][ T2375] pvrusb2: Device being rendered inoperable [ 706.597201][ T2375] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 706.597206][ T2375] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 706.597210][ T2375] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 706.597226][ T2375] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 706.597259][ T2375] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 706.600738][ T2375] pvrusb2: Attached sub-driver cx25840 [ 706.709720][ T2375] pvrusb2: Attempted to execute control transfer when device not ok [ 706.718092][ T2375] pvrusb2: Attempted to execute control transfer when device not ok [ 706.718119][ T2375] pvrusb2: Attempted to execute control transfer when device not ok [ 706.718141][ T2375] pvrusb2: Attempted to execute control transfer when device not ok [ 706.718152][ T2375] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 706.724697][ T36] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 706.853573][ T2375] TUNER: Unable to find symbol tda829x_probe() [ 706.885506][ T36] usb 4-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 706.888870][ T36] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.888920][ T36] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 706.888941][ T36] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 706.888961][ T36] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.899856][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.899879][ T36] usb 4-1: Product: syz [ 706.899892][ T36] usb 4-1: Manufacturer: syz [ 706.899905][ T36] usb 4-1: SerialNumber: syz [ 706.990255][ T2375] DVB: Unable to find symbol tda9887_attach() [ 706.996718][ T2375] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 707.011666][ T2375] pvrusb2: Attached sub-driver tuner [ 707.017062][ T2375] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 707.017082][ T2375] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 708.446984][ T5730] usb 4-1: USB disconnect, device number 29 [ 708.718668][T16594] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3173'. [ 708.718733][T16594] tipc: Started in network mode [ 708.718758][T16594] tipc: Node identity 4, cluster identity 4711 [ 708.718778][T16594] tipc: Node number set to 4 [ 708.793195][ T37] audit: type=1800 audit(1788371401.893:127): pid=16595 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3171" name="size" dev="configfs" ino=58768 res=0 errno=0 [ 708.802523][ T37] audit: type=1800 audit(1788371401.903:128): pid=16595 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3171" name="zoned" dev="configfs" ino=58800 res=0 errno=0 [ 708.815316][ T37] audit: type=1800 audit(1788371401.923:129): pid=16595 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3171" name="power" dev="configfs" ino=58822 res=0 errno=0 [ 709.914538][ T1234] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 710.044531][ T1234] usb 4-1: device descriptor read/64, error -71 [ 710.284638][ T1234] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 710.425686][ T1234] usb 4-1: device descriptor read/64, error -71 [ 710.504599][ T36] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 710.535267][ T1234] usb usb4-port1: attempt power cycle [ 710.675876][ T36] usb 5-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 710.685455][ T36] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.685545][ T36] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 710.685566][ T36] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 710.685588][ T36] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.733837][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.733902][ T36] usb 5-1: Product: syz [ 710.733917][ T36] usb 5-1: Manufacturer: syz [ 710.733930][ T36] usb 5-1: SerialNumber: syz [ 710.874632][ T1234] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 710.899111][ T1234] usb 4-1: device descriptor read/8, error -71 [ 710.935942][T16639] FAULT_INJECTION: forcing a failure. [ 710.935942][T16639] name fail_futex, interval 1, probability 0, space 0, times 0 [ 710.950576][T16639] CPU: 1 UID: 0 PID: 16639 Comm: syz.2.3187 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 710.950601][T16639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 710.950613][T16639] Call Trace: [ 710.950621][T16639] [ 710.950629][T16639] dump_stack_lvl+0xe8/0x150 [ 710.950663][T16639] should_fail_ex+0x46b/0x600 [ 710.950689][T16639] get_futex_key+0x1b4/0x1580 [ 710.950727][T16639] ? __pfx_get_futex_key+0x10/0x10 [ 710.950752][T16639] ? update_se+0x90/0xf30 [ 710.950787][T16639] futex_wait_setup+0x4a/0x590 [ 710.950813][T16639] ? __futex_wait+0xe1/0x410 [ 710.950838][T16639] __futex_wait+0x161/0x410 [ 710.950863][T16639] ? __pfx___futex_wait+0x10/0x10 [ 710.950888][T16639] ? __pfx_futex_wake_mark+0x10/0x10 [ 710.950913][T16639] ? try_to_wake_up+0x84b/0x1430 [ 710.950944][T16639] futex_wait+0x121/0x390 [ 710.950966][T16639] ? __pfx_futex_wait+0x10/0x10 [ 710.950994][T16639] ? trace_sched_exit_tp+0x3a/0x130 [ 710.951015][T16639] ? __schedule+0x16ef/0x5700 [ 710.951037][T16639] do_futex+0x3e7/0x4e0 [ 710.951074][T16639] ? __pfx_do_futex+0x10/0x10 [ 710.951108][T16639] __se_sys_futex+0x3a8/0x450 [ 710.951141][T16639] ? __pfx___se_sys_futex+0x10/0x10 [ 710.951166][T16639] ? rcu_is_watching+0x16/0xb0 [ 710.951198][T16639] ? __x64_sys_futex+0x21/0xf0 [ 710.951228][T16639] do_syscall_64+0x166/0x520 [ 710.951249][T16639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.951267][T16639] ? clear_bhb_loop+0x70/0xc0 [ 710.951288][T16639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.951306][T16639] RIP: 0033:0x7fbcc86de159 [ 710.951323][T16639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.951339][T16639] RSP: 002b:00007fbcc69360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 710.951359][T16639] RAX: ffffffffffffffda RBX: 00007fbcc8965fa8 RCX: 00007fbcc86de159 [ 710.951372][T16639] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbcc8965fa8 [ 710.951383][T16639] RBP: 00007fbcc8965fa0 R08: 0000000000000000 R09: 0000000000000000 [ 710.951395][T16639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.951407][T16639] R13: 00007fbcc8966038 R14: 00007ffc7c8590f0 R15: 00007ffc7c8591d8 [ 710.951437][T16639] [ 710.995106][ T4915] usb 5-1: USB disconnect, device number 63 [ 711.255203][ T1234] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 711.275211][ T1234] usb 4-1: device descriptor read/8, error -71 [ 711.396418][ T1234] usb usb4-port1: unable to enumerate USB device [ 711.574708][ T4915] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 711.725883][ T4915] usb 5-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 711.735482][ T4915] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.735575][ T4915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 711.735596][ T4915] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 711.735618][ T4915] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.768481][ T4915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.768507][ T4915] usb 5-1: Product: syz [ 711.768520][ T4915] usb 5-1: Manufacturer: syz [ 711.768532][ T4915] usb 5-1: SerialNumber: syz [ 712.980692][T16662] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 713.018175][T16662] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 713.286785][ T5696] usb 5-1: USB disconnect, device number 64 [ 713.367824][T16662] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 713.368657][T16662] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 713.437192][T16662] ================================================================== [ 713.437210][T16662] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0xd8/0xae0 [ 713.437244][T16662] Write of size 8 at addr ffff888024774900 by task syz.6.31 ** replaying previous printk message ** [ 713.437244][T16662] Write of size 8 at addr ffff888024774900 by task syz.6.3192/16662 [ 713.437261][T16662] [ 713.437334][T16662] CPU: 1 UID: 0 PID: 16662 Comm: syz.6.3192 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 713.437356][T16662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.437366][T16662] Call Trace: [ 713.437374][T16662] [ 713.437382][T16662] dump_stack_lvl+0xe8/0x150 [ 713.437409][T16662] print_address_description+0x55/0x1e0 [ 713.437446][T16662] ? gadgetfs_bind+0xd8/0xae0 [ 713.437466][T16662] print_report+0x58/0x70 [ 713.437488][T16662] kasan_report+0x117/0x150 [ 713.437523][T16662] ? gadgetfs_bind+0xd8/0xae0 [ 713.437547][T16662] gadgetfs_bind+0xd8/0xae0 [ 713.437571][T16662] ? __pfx_gadgetfs_bind+0x10/0x10 [ 713.437590][T16662] gadget_bind_driver+0x2ca/0x9e0 [ 713.437616][T16662] ? __pfx_gadget_bind_driver+0x10/0x10 [ 713.437634][T16662] really_probe+0x254/0xae0 [ 713.437661][T16662] __driver_probe_device+0x1e8/0x360 [ 713.437684][T16662] driver_probe_device+0x4f/0x240 [ 713.437710][T16662] __driver_attach+0x339/0x600 [ 713.437731][T16662] bus_for_each_dev+0x23e/0x2c0 [ 713.437748][T16662] ? __pfx___driver_attach+0x10/0x10 [ 713.437768][T16662] ? __pfx_bus_for_each_dev+0x10/0x10 [ 713.437783][T16662] ? rt_spin_unlock+0x159/0x200 [ 713.437809][T16662] ? rt_spin_unlock+0x165/0x200 [ 713.437832][T16662] bus_add_driver+0x348/0x670 [ 713.437860][T16662] driver_register+0x23a/0x320 [ 713.437884][T16662] usb_gadget_register_driver_owner+0xf9/0x270 [ 713.437903][T16662] dev_config+0xe4e/0x12c0 [ 713.437925][T16662] ? __pfx_dev_config+0x10/0x10 [ 713.437947][T16662] ? __pfx_dev_config+0x10/0x10 [ 713.437965][T16662] vfs_write+0x29f/0xbb0 [ 713.437987][T16662] ? __pfx_vfs_write+0x10/0x10 [ 713.438006][T16662] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 713.438024][T16662] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 713.438041][T16662] ? mutex_lock_nested+0x152/0x1d0 [ 713.438062][T16662] ? fdget_pos+0x252/0x320 [ 713.438083][T16662] ksys_write+0x156/0x270 [ 713.438103][T16662] ? __pfx_ksys_write+0x10/0x10 [ 713.438123][T16662] do_syscall_64+0x166/0x520 [ 713.438141][T16662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.438159][T16662] ? clear_bhb_loop+0x70/0xc0 [ 713.438178][T16662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.438195][T16662] RIP: 0033:0x7f464cfbe159 [ 713.438212][T16662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.438227][T16662] RSP: 002b:00007f464b216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 713.438246][T16662] RAX: ffffffffffffffda RBX: 00007f464d245fa0 RCX: 00007f464cfbe159 [ 713.438260][T16662] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008 [ 713.438271][T16662] RBP: 00007f464d055024 R08: 0000000000000000 R09: 0000000000000000 [ 713.438282][T16662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.438292][T16662] R13: 00007f464d246038 R14: 00007f464d245fa0 R15: 00007ffd45500428 [ 713.438312][T16662] [ 713.438318][T16662] [ 713.438329][T16662] Allocated by task 5589: [ 713.438382][T16662] kasan_save_track+0x3e/0x80 [ 713.438400][T16662] __kasan_kmalloc+0x93/0xb0 [ 713.438416][T16662] __kmalloc_cache_noprof+0x3d5/0x680 [ 713.438433][T16662] gadgetfs_fill_super+0x27b/0x7a0 [ 713.438448][T16662] get_tree_single+0xc0/0x150 [ 713.438462][T16662] vfs_get_tree+0x92/0x2a0 [ 713.438475][T16662] do_new_mount+0x319/0xdc0 [ 713.438495][T16662] __se_sys_mount+0x31d/0x420 [ 713.438505][T16662] do_syscall_64+0x166/0x520 [ 713.438519][T16662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.438532][T16662] [ 713.438536][T16662] Freed by task 16662: [ 713.438543][T16662] kasan_save_track+0x3e/0x80 [ 713.438558][T16662] kasan_save_free_info+0x40/0x50 [ 713.438571][T16662] __kasan_slab_free+0x5c/0x80 [ 713.438587][T16662] kfree+0x1c5/0x6d0 [ 713.438600][T16662] gadgetfs_bind+0x942/0xae0 [ 713.438615][T16662] gadget_bind_driver+0x2ca/0x9e0 [ 713.438628][T16662] really_probe+0x254/0xae0 [ 713.438645][T16662] __driver_probe_device+0x1e8/0x360 [ 713.438662][T16662] driver_probe_device+0x4f/0x240 [ 713.438678][T16662] __driver_attach+0x339/0x600 [ 713.438694][T16662] bus_for_each_dev+0x23e/0x2c0 [ 713.438705][T16662] bus_add_driver+0x348/0x670 [ 713.438717][T16662] driver_register+0x23a/0x320 [ 713.438734][T16662] usb_gadget_register_driver_owner+0xf9/0x270 [ 713.438747][T16662] dev_config+0xe4e/0x12c0 [ 713.438761][T16662] vfs_write+0x29f/0xbb0 [ 713.438774][T16662] ksys_write+0x156/0x270 [ 713.438787][T16662] do_syscall_64+0x166/0x520 [ 713.438801][T16662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.438813][T16662] [ 713.438817][T16662] The buggy address belongs to the object at ffff888024774800 [ 713.438817][T16662] which belongs to the cache kmalloc-1k of size 1024 [ 713.438831][T16662] The buggy address is located 256 bytes inside of [ 713.438831][T16662] freed 1024-byte region [ffff888024774800, ffff888024774c00) [ 713.438847][T16662] [ 713.438860][T16662] The buggy address belongs to the physical page: [ 713.438911][T16662] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24770 [ 713.438926][T16662] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 713.438938][T16662] flags: 0x80000000000040(head|node=0|zone=1) [ 713.438956][T16662] page_type: f5(slab) [ 713.438969][T16662] raw: 0080000000000040 ffff88813ffbbdc0 dead000000000100 dead000000000122 [ 713.438982][T16662] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 713.438994][T16662] head: 0080000000000040 ffff88813ffbbdc0 dead000000000100 dead000000000122 [ 713.439006][T16662] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 713.439018][T16662] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 713.439030][T16662] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 713.439037][T16662] page dumped because: kasan: bad access detected [ 713.439048][T16662] page_owner tracks the page as allocated [ 713.439053][T16662] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5589, tgid 5589 (syz-executor), ts 90498813181 [ 713.439076][T16662] post_alloc_hook+0x1f9/0x250 [ 713.439094][T16662] get_page_from_freelist+0x2591/0x2600 [ 713.439112][T16662] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 713.439130][T16662] allocate_slab+0x7d/0x620 [ 713.439142][T16662] refill_objects+0x2d8/0x350 [ 713.439154][T16662] __pcs_replace_empty_main+0x339/0x690 [ 713.439174][T16662] __kmalloc_noprof+0x54b/0x790 [ 713.439189][T16662] tomoyo_init_log+0x1aaf/0x1fa0 [ 713.439207][T16662] tomoyo_supervisor+0x35f/0x1560 [ 713.439222][T16662] tomoyo_mount_permission+0x670/0x9e0 [ 713.439238][T16662] security_sb_mount+0xe4/0x320 [ 713.439256][T16662] path_mount+0xbc/0x1050 [ 713.439274][T16662] __se_sys_mount+0x31d/0x420 [ 713.439285][T16662] do_syscall_64+0x166/0x520 [ 713.439299][T16662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.439312][T16662] page last free pid 5585 tgid 5585 ts 90364012134 stack trace: [ 713.439322][T16662] __free_frozen_pages+0xf8e/0x1070 [ 713.439337][T16662] __slab_free+0x250/0x2a0 [ 713.439353][T16662] qlist_free_all+0x99/0x100 [ 713.439370][T16662] kasan_quarantine_reduce+0x148/0x160 [ 713.439385][T16662] __kasan_slab_alloc+0x22/0x80 [ 713.439402][T16662] __kmalloc_noprof+0x3b9/0x790 [ 713.439416][T16662] fib6_info_alloc+0x30/0xf0 [ 713.439471][T16662] ip6_route_info_create+0x149/0x890 [ 713.439489][T16662] ip6_route_add+0x49/0x1d0 [ 713.439506][T16662] addrconf_prefix_route+0x3a2/0x480 [ 713.439552][T16662] inet6_addr_add+0x504/0xba0 [ 713.439566][T16662] inet6_rtm_newaddr+0x9fc/0xe00 [ 713.439585][T16662] rtnetlink_rcv_msg+0x802/0xc00 [ 713.439603][T16662] netlink_rcv_skb+0x226/0x4a0 [ 713.439623][T16662] netlink_unicast+0x7f5/0x990 [ 713.439638][T16662] netlink_sendmsg+0x813/0xb40 [ 713.439657][T16662] [ 713.439661][T16662] Memory state around the buggy address: [ 713.439670][T16662] ffff888024774800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 713.439680][T16662] ffff888024774880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 713.439690][T16662] >ffff888024774900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 713.439697][T16662] ^ [ 713.439704][T16662] ffff888024774980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 713.439714][T16662] ffff888024774a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 713.439721][T16662] ================================================================== [ 713.463412][T16662] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 714.289907][T16662] CPU: 1 UID: 0 PID: 16662 Comm: syz.6.3192 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 714.299782][T16662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 714.309820][T16662] Call Trace: [ 714.313086][T16662] [ 714.316000][T16662] vpanic+0x56d/0xa60 [ 714.319970][T16662] ? rcu_is_watching+0x16/0xb0 [ 714.324721][T16662] ? __pfx_vpanic+0x10/0x10 [ 714.329215][T16662] panic+0xc5/0xd0 [ 714.332915][T16662] ? __pfx_panic+0x10/0x10 [ 714.337314][T16662] ? preempt_schedule_thunk+0x16/0x40 [ 714.342674][T16662] ? gadgetfs_bind+0xd8/0xae0 [ 714.347336][T16662] ? preempt_schedule_thunk+0x16/0x40 [ 714.352693][T16662] ? gadgetfs_bind+0xd8/0xae0 [ 714.357353][T16662] check_panic_on_warn+0x89/0xb0 [ 714.362275][T16662] ? gadgetfs_bind+0xd8/0xae0 [ 714.366938][T16662] end_report+0x73/0x170 [ 714.371172][T16662] ? gadgetfs_bind+0xd8/0xae0 [ 714.375836][T16662] kasan_report+0x128/0x150 [ 714.380329][T16662] ? gadgetfs_bind+0xd8/0xae0 [ 714.384989][T16662] gadgetfs_bind+0xd8/0xae0 [ 714.389483][T16662] ? __pfx_gadgetfs_bind+0x10/0x10 [ 714.394578][T16662] gadget_bind_driver+0x2ca/0x9e0 [ 714.399590][T16662] ? __pfx_gadget_bind_driver+0x10/0x10 [ 714.405119][T16662] really_probe+0x254/0xae0 [ 714.409609][T16662] __driver_probe_device+0x1e8/0x360 [ 714.414879][T16662] driver_probe_device+0x4f/0x240 [ 714.419890][T16662] __driver_attach+0x339/0x600 [ 714.424641][T16662] bus_for_each_dev+0x23e/0x2c0 [ 714.429481][T16662] ? __pfx___driver_attach+0x10/0x10 [ 714.434773][T16662] ? __pfx_bus_for_each_dev+0x10/0x10 [ 714.440124][T16662] ? rt_spin_unlock+0x159/0x200 [ 714.444965][T16662] ? rt_spin_unlock+0x165/0x200 [ 714.449804][T16662] bus_add_driver+0x348/0x670 [ 714.454470][T16662] driver_register+0x23a/0x320 [ 714.459223][T16662] usb_gadget_register_driver_owner+0xf9/0x270 [ 714.465364][T16662] dev_config+0xe4e/0x12c0 [ 714.469769][T16662] ? __pfx_dev_config+0x10/0x10 [ 714.474608][T16662] ? __pfx_dev_config+0x10/0x10 [ 714.479440][T16662] vfs_write+0x29f/0xbb0 [ 714.483675][T16662] ? __pfx_vfs_write+0x10/0x10 [ 714.488421][T16662] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 714.494213][T16662] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 714.500001][T16662] ? mutex_lock_nested+0x152/0x1d0 [ 714.505097][T16662] ? fdget_pos+0x252/0x320 [ 714.509499][T16662] ksys_write+0x156/0x270 [ 714.513811][T16662] ? __pfx_ksys_write+0x10/0x10 [ 714.518646][T16662] do_syscall_64+0x166/0x520 [ 714.523221][T16662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.529270][T16662] ? clear_bhb_loop+0x70/0xc0 [ 714.533934][T16662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.539811][T16662] RIP: 0033:0x7f464cfbe159 [ 714.544212][T16662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.563801][T16662] RSP: 002b:00007f464b216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 714.572203][T16662] RAX: ffffffffffffffda RBX: 00007f464d245fa0 RCX: 00007f464cfbe159 [ 714.580166][T16662] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008 [ 714.588124][T16662] RBP: 00007f464d055024 R08: 0000000000000000 R09: 0000000000000000 [ 714.596077][T16662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.604035][T16662] R13: 00007f464d246038 R14: 00007f464d245fa0 R15: 00007ffd45500428 [ 714.611999][T16662] [ 714.615255][T16662] Kernel Offset: disabled [ 714.619573][T16662] Rebooting in 86400 seconds..