last executing test programs: 10m3.057641911s ago: executing program 3 (id=1075): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000580)='/dev/comedi4\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b00140000000000000000000000070000004403"], 0x38}, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000280)={0x2000000, 0x0, 0x0, 0x4}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a140000000b0a010200000000000000000700000a140000001100010000000000000000000300000ac00d57740e130d16064f780463cecd25c0ec3f76cbda13d213e864ccdb9b56f2faf0110248f801ef76391bd060d04328b249b34d2f43bb0f0480431ebcd00e0e1f91c50d7c4a18051825a508d19bf87541036496bd92bfa12e695ef2a2ee74fa270c9f10a6a2e66e56eeaf2876e46ea7ecc04a"], 0x3c}}, 0x20004010) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) dup2(r5, r4) r6 = getpid() sched_setscheduler(r6, 0x3, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x95c5, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000040)="b19cccb884f531e53c214627c11430c174dd15ab9187589102ee85de39332550f2fd8e7123", 0x25) ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r10, 0x0, &(0x7f0000000900)="8a", 0x1}) 10m1.104760841s ago: executing program 3 (id=1096): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)={0x3, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0xfa, 0x1, 0x0, 0x0, "c6e83912ce2150c0"}}, 0x48}, 0x2}, 0x20000080) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r1], 0x0) 10m0.905200119s ago: executing program 3 (id=1100): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c001532525cd6438c0001b5b2a15c82d0174083d9ce7c6ee39f4ed8f2755cda8785031a33fe5c10415436fe88dd34866e5cc89b3fe59531c15eb25602e58f448292bb4d8d51390f5c00003123f5826a1dfccd62739b091a89bba4355d2d30529adb22d9c079b6169a1f2a6746f37cc39fb9", @ANYRES8=r0, @ANYRES32=r0, @ANYRES8=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000f8ffffff000000000000000022a8cf2feda6bbb4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, 0x0, 0x1f}, 0x28) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x810) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0xffffffffffffffff, 0x10001, 0x3, 0x1, 0x2, 0x0, [{0xfffffffffffffffd, 0x80000000, 0x64bf, '\x00', 0x18}, {0xc, 0x5, 0x4, '\x00', 0x602}]}) read$FUSE(r0, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x1034002, &(0x7f00000005c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@version_9p2000}, {@version_L}]}}) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1d", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528899c4dafaadec1", 0xf}, {&(0x7f0000000380)="863df713b27092133340e45590eac45df1f0a54f338c8d702066c10522ae8700000000", 0x23}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea", 0x4f}, {&(0x7f0000001000)="5e48212599327704ccc5ca940f85ce93d081835a8f8ce527ba414eeb2fac35952374361fa3fe455eae90ef6636e089eeae608c4bb2a0cae5f3d8ebe5294f272023815eacab65c0a92cd792cae6645dcef01758183b1dab679fc8bccc9b2a7c95efda137f6f80e4159ff6295a35f2516454afb609ce2bc852ece0d2234e63a4cfcceb2f628f6425b0b5dd6ba4c20e250c72f658b059079271c6f206a758e87784fd6256d1ee6cd55ea723631572ba4729109fa114f7240bb6776054d1fa9b5c3114debca30e4196223e3f6fcbf715c61e62f3702e1a43c72c114587e1eb727a458aba50fe0da0523b0f243482e33c7af73d072374f04ec75bd199e7357d8d37a60c4b225c0ebb8e8fde86484871015eb8ccda35183959fccdbe3cc8f9f018c70c405d1847d8666a34f86d1f996b42f9ce536100b8d6080f472d2a87a277a0c45baca157f0d578b6ca0e8627819d4d8e5226494474ff573c36caf000e9c52f206013851f2702c83224a7ac58fef0a2f337174f79900af0899ad371ebc5759d1f48b01c962be95456341e280de8aa4e5b46f2ac3256254cdec803cbfe597bc771b49cb0806048a441f1ba825d92b59140afcf59c7d7c6359b5c729da3480946575f681243faefac01e76ccd447d6035744375fd08e491aa597b3fb77874b0f3818331a895375d7602eb1676f853d2b1e058d5519c146310857b3783e33b27c9e6d269fbc75161a1840d4c5a6a22951afce45232ec10e9ddb9265a9370a4d89602f4f88ead4af3fd8f7533438e52eb529d6f3ea27dc2b921b96b3e72cc06baf4e6f92b56c86e737932a38c6f798d458047d45294c4e27d8e026ad1c7229987b573ec9b486fdda6775c08fb9484106f93c3f0e197dfaeb3e7f0ed65f69788ab253716ab4e6e1c8f4f4f382ac3d822a5ff8ccea83d6748cbb439490d0a0e3737d26e7ec85058debce6f60b9f9596e5bed99662ccf4c8bc7ef30ce1ba764ff8bc31262f89e3d83657aa4b3b529cf8d83a5babab", 0x2d0}], 0x4}}], 0x2, 0x4004) openat(r4, &(0x7f00000006c0)='./file0/file0\x00', 0x2e4400, 0x82) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0xb0, 0x0, 0x99, [{{0x3, 0x0, 0x7, 0xa19f, 0x1, 0x0, {0x2, 0xffff, 0x9, 0x5, 0xb409, 0x5, 0x1, 0xc, 0x1, 0x1000, 0x5, r2, r3, 0x6, 0x9}}, {0x4, 0x8, 0x1, 0xe68d, '\x00'}}]}, 0x0, 0x0, 0x0}) 9m59.890137429s ago: executing program 3 (id=1110): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc0049364, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10000001}}}, 0x88) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100000a4000f9dbdf2501004000d2c6bb22410935fcdceff129ef90ea3d765d5cc0f5fcd31be25220832e80d265f18c5ae47f37298ad5aed53ffde63fabed8f1b9a413354f0337a74fcf4436348e8c44cdf9caa488e706b61d173f6487928"], 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r5, &(0x7f0000000580)=[{&(0x7f0000000300)=""/222, 0x1b}], 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 9m59.513693666s ago: executing program 3 (id=1113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000ff000000050000007f00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r6, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r7}, 0x38) sendmsg$nl_route_sched(r1, 0x0, 0x4000810) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r9, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) 9m57.956217094s ago: executing program 3 (id=1123): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x2e, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8, 0x1}, {0x5, 0x4}]}, @func={0x10, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61, 0x2e, 0x2e, 0x30]}}, 0x0, 0x46, 0x0, 0x1, 0x2}, 0x28) 9m57.80739142s ago: executing program 32 (id=1123): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x2e, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8, 0x1}, {0x5, 0x4}]}, @func={0x10, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61, 0x2e, 0x2e, 0x30]}}, 0x0, 0x46, 0x0, 0x1, 0x2}, 0x28) 7m39.893652879s ago: executing program 2 (id=1562): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000840)=@name={0x1e, 0x2, 0x3, {{0x1, 0x2}, 0x4}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000840)=@name={0x1e, 0x2, 0x3, {{0x1, 0x2}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000500)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x3, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x2c00) (async) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x2c00) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f00000002c0)={0x0, 0xfffff54b, 0x1006, 0x2000000}) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) bind$inet6(r4, &(0x7f0000000580)={0xa, 0x4e24, 0x2, @empty}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000580)={0xa, 0x4e24, 0x2, @empty}, 0x1c) listen(r6, 0x0) r7 = getpgrp(0xffffffffffffffff) capget(&(0x7f0000000100)={0x19980330, r7}, &(0x7f0000000140)={0x7, 0x9, 0xc, 0xffffd92c, 0x4, 0x7}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xb0, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x99, 0x3, 0x0, 0x1, [@generic="ae32562498623e57c04d11f7f76d67ea4e37aa19f834a729a0421838cf7b03d518c506086b4c990f409e23687aedbbcd3ca0c8ce696f8785dab61a23bdd3efaeefdc60853f6328b8372c1e1a4fea9a2735a1eb7bcfea6a9f4647d8ce6067c05491d615f53ca84e5f218d9e2b35203c9f831bc0c7d45c3064718c8481d1c1f092a4df32711797aaa078039354d21133bfd8575d9920"]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x2c1, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "d0967a", 0x28b, 0x3a, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@hopopts={0x1a, 0x9, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0xe4, 0xf5b, [0x1, 0x225, 0x1000, 0x10]}}, @ra={0x5, 0x2, 0x4}]}, @routing={0x0, 0xa, 0x0, 0x3, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}, @srh={0x8, 0x6, 0x4, 0x3, 0x2, 0x10, 0x1fa1, [@dev={0xfe, 0x80, '\x00', 0x79}, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @dstopts={0x2d, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @srh={0x33, 0x6, 0x4, 0x3, 0x0, 0x28, 0x8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @private0={0xfc, 0x0, '\x00', 0x1}]}], @param_prob={0x4, 0x0, 0x0, 0x6, {0x1, 0x6, "db7dd7", 0x200, 0x73, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, [@hopopts={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0xff11}]}, @srh={0x2c, 0x2, 0x4, 0x1, 0x5, 0x40, 0x8, [@rand_addr=' \x01\x00']}, @fragment={0x33, 0x0, 0x0, 0x1, 0x0, 0x12, 0xd791}, @fragment={0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x66}], "e069914eae45b90b3b744b94db0f771e78b6a130c7e0e1445bd4aa491f2d4102a01805966f41e9cf1739bb2ccc3a0d50d4a3ef31ead5a7c93331a5d7146ceca5f834ca83fd93c5b96904873c758d3f5287ab553807981fe29d166a1e6304752620c23760414131a62e66ed92566ed5f556c2e59ccc991cd7e848203e8c14c13c533047afebca20d75e9fd3ed898fca50b11f2d82a6fb2e9b5a5b12845f5ba6e68a6f0ce6710d5caf1a43e9ba80a2b204a780886e5315a1772d7501ede027aaebac926b8eb722e242a8337590832c92056fdcc457a932303fc6ab3e034668eb7389e4c9fdcb4debe1a378be"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x2c1, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "d0967a", 0x28b, 0x3a, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@hopopts={0x1a, 0x9, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0xe4, 0xf5b, [0x1, 0x225, 0x1000, 0x10]}}, @ra={0x5, 0x2, 0x4}]}, @routing={0x0, 0xa, 0x0, 0x3, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}, @srh={0x8, 0x6, 0x4, 0x3, 0x2, 0x10, 0x1fa1, [@dev={0xfe, 0x80, '\x00', 0x79}, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @dstopts={0x2d, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @srh={0x33, 0x6, 0x4, 0x3, 0x0, 0x28, 0x8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @private0={0xfc, 0x0, '\x00', 0x1}]}], @param_prob={0x4, 0x0, 0x0, 0x6, {0x1, 0x6, "db7dd7", 0x200, 0x73, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, [@hopopts={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0xff11}]}, @srh={0x2c, 0x2, 0x4, 0x1, 0x5, 0x40, 0x8, [@rand_addr=' \x01\x00']}, @fragment={0x33, 0x0, 0x0, 0x1, 0x0, 0x12, 0xd791}, @fragment={0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x66}], "e069914eae45b90b3b744b94db0f771e78b6a130c7e0e1445bd4aa491f2d4102a01805966f41e9cf1739bb2ccc3a0d50d4a3ef31ead5a7c93331a5d7146ceca5f834ca83fd93c5b96904873c758d3f5287ab553807981fe29d166a1e6304752620c23760414131a62e66ed92566ed5f556c2e59ccc991cd7e848203e8c14c13c533047afebca20d75e9fd3ed898fca50b11f2d82a6fb2e9b5a5b12845f5ba6e68a6f0ce6710d5caf1a43e9ba80a2b204a780886e5315a1772d7501ede027aaebac926b8eb722e242a8337590832c92056fdcc457a932303fc6ab3e034668eb7389e4c9fdcb4debe1a378be"}}}}}}}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x71727000) 7m39.509229088s ago: executing program 2 (id=1564): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0003020000000203b69446c4b4e60e942f8a41caeab3eecf0106495b1abe4e4beae0af7bd30702b99b78acffb8704f40dcf3d49c23749271ae45f6e88be7e0ce10d621d6b01c4c597f597a0a0d7652ab94ecafb14a7d5d691116ef20af9fee9577b6caab1f54cc106f8091876023266fa32f9f31a7b6c678b8475f64dc1b4e2d13d48930e55824ca8261248334e1385f83da65adc9c59d904191bba9d43bbb7fb02a95517a79954b11e9feaebbdd909b86592a1f9c793f3137663a3ddcdd1e56654fdbca8b3881a0dfe1ca2fc34429"], 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000b9", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000003000000851000000300000018580000040000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x5, 0xef, &(0x7f00000004c0)=""/239, 0x41100, 0x4a, '\x00', r3, 0x0, r2, 0x8, &(0x7f00000005c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x7, 0x6, 0x205a4a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r2], &(0x7f0000000680), 0x10, 0x1}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendto(r1, 0x0, 0x0, 0x40000, 0x0, 0x43) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_read_bd_addr={{0x9}, {0x9, @none}}}}, 0xd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40003, 0x0) 7m35.948213377s ago: executing program 2 (id=1578): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r0, 0x0, 0x2f) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0x205, 0x44680) 7m34.693156623s ago: executing program 2 (id=1581): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000006a007129613cac23a4ead80bb3d9"], 0x18}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x111099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0xa00}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r4) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x240000d4}, 0x0) pivot_root(&(0x7f00000000c0)='./cgroup\x00', 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) acct(0x0) fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x0, 0x3, 0x5, 0xffffffffffffffff, r6}) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x20, 0x0, 0x20, 0x7}, 0x48) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x7) 7m31.83581593s ago: executing program 2 (id=1587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x60, 0x0, 0x1, 0x7e291fee186bc0af, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x845}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x60, 0x0, 0x1, 0x7e291fee186bc0af, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x845}, 0x80) (async) 7m27.992705931s ago: executing program 2 (id=1597): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="01ff000010000000000000000400000000000000100087a2000000002000000003000000"], 0x24, 0x0) 7m25.92013836s ago: executing program 33 (id=1597): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="01ff000010000000000000000400000000000000100087a2000000002000000003000000"], 0x24, 0x0) 38.628313311s ago: executing program 1 (id=2578): socket$inet(0x2, 0x5, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd", 0xa) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e1e, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) connect$netlink(r3, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0xae, &(0x7f0000000300)={@multicast, @multicast, @void, {@mpls_mc={0x8848, {[{0xc6, 0x0, 0x1}, {0x20000, 0x0, 0x1}, {0x4}, {0xe6}, {0x3, 0x0, 0x1}], @ipv4=@udp={{0xa, 0x4, 0x0, 0x3f, 0x8c, 0x64, 0x0, 0x2, 0x11, 0x0, @empty, @empty, {[@end, @lsrr={0x83, 0x13, 0x81, [@multicast2, @rand_addr=0x64010102, @remote, @multicast1]}]}}, {0x4e23, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "1448682bc201da494fa9778eec6f8d4490742ff453ab2a9e1a2f683ad4591f06", "34f5f99579fd357952d2005a291e41ae", {"2437dc9f711526cd087472f77df462b0", "d9243fb8571f9a9618cf05bfc06ad39c"}}}}}}}}, 0x0) 35.335961798s ago: executing program 1 (id=2584): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) set_mempolicy(0x1, &(0x7f0000000080)=0xfffffffffffffffa, 0x6) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x80005ed9, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000), &(0x7f00000001c0)) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x8, 0x0, 0x313}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000181401"], 0x20}, 0x1, 0xf000000, 0x0, 0x4000044}, 0x44810) r4 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r4, &(0x7f0000000080)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000040)=0x6, 0x4) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x87) socket$nl_sock_diag(0x10, 0x3, 0x4) setreuid(0x0, 0xee00) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x1014}], 0x1, 0x0, 0x0, 0x2000081}, 0x20048040) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40441, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x5, 0x4000, r7, 0x0, 0x0, 0x7, 0x0, 0x2, r4}]) socket$nl_generic(0x10, 0x3, 0x10) 34.739033198s ago: executing program 1 (id=2585): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x40, 0x8, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 32.956573319s ago: executing program 6 (id=2594): openat$pfkey(0xffffffffffffff9c, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) epoll_create1(0x80000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4, 0x0, 0x8}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000025a05f3c2d13588a800008100200008060001080006040001ffffffff"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) setrlimit(0x4, &(0x7f0000000040)={0x87, 0x80000000ffff}) sendmsg$IPVS_CMD_NEW_SERVICE(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x1d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 31.455984806s ago: executing program 1 (id=2597): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)) msgsnd(0x0, 0x0, 0x3f9, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x5) 31.429238284s ago: executing program 6 (id=2598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x40000, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 31.288141264s ago: executing program 0 (id=2600): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (fail_nth: 4) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 31.090424224s ago: executing program 0 (id=2602): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0xc0045103, &(0x7f0000000040)) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x4000000, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) 31.007861094s ago: executing program 0 (id=2604): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000100)=0x400, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="110000"], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000340), 0x2000011a) setsockopt$TIPC_MCAST_REPLICAST(r7, 0x10f, 0x86) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a000100000000000000000002202000001e00"], 0x24}}, 0x0) 29.965947603s ago: executing program 4 (id=2605): socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x82d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$vcsu(0x0, 0x6, 0x9c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) (fail_nth: 4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r1}, 0x10) r2 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x80001) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000380)={0x0, 0xa, 0x7, &(0x7f0000000280)={0xc, "adab9c9a9e4547d89bef0e7390cb22260923413d6fc20230db6c829745e60b6c5c"}}) mknod(&(0x7f0000000000)='./file0\x00', 0x10d4, 0xffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0x40, {0x37, 0x10, 0x0, {0x5, 0x6, 0x4030cf86, 0x1035, 0x1e93, 0x5, 0x8001fffe, 0x8000, 0x2d, 0x6000, 0x3, 0x0, 0x0, 0xc8, 0x80000003}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r4, 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) 29.86537839s ago: executing program 6 (id=2606): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bridge_slave_0\x00', @random="01316d7e6157"}) (fail_nth: 1) 28.729294337s ago: executing program 0 (id=2608): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x40, 0x8, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 28.533937429s ago: executing program 4 (id=2609): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000080000, {0x7, 0x29, 0x9, 0xa110000, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x8, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f00000000c0)) tee(0xffffffffffffffff, r3, 0xff, 0x0) 28.345217362s ago: executing program 4 (id=2610): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800"/32], &(0x7f0000000000)='GPL\x00'}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x40090, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), 0xffffffffffffffff, 0x2}}, 0x18) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0xe53, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x80}, &(0x7f00000002c0), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000060a090400000000000000000200ffff0900020073797a320000000009000100"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000070a01048b07954200000000020000000c00034000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r9 = dup(r0) write$UHID_INPUT(r9, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) 28.003728037s ago: executing program 6 (id=2611): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) dup2(r2, r1) (fail_nth: 4) 26.53335585s ago: executing program 1 (id=2612): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) setpriority(0x2, r0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000140)={0x1, 0x1, {0x53, 0x7, 0x3, {0x3}, {0x9, 0x2}, @cond=[{0x126, 0x8, 0x0, 0x6, 0xfff9, 0x4}, {0x7, 0xd, 0x1, 0x80, 0xadf2, 0x6}]}, {0xa7, 0x9, 0x717, {0x8000, 0x101}, {0xa, 0x5}, @rumble={0x1, 0x8001}}}) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8}, 0x50) close(r5) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) 26.003549329s ago: executing program 4 (id=2613): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000080000, {0x7, 0x29, 0x9, 0xa110000, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x8, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)={'b', ' *:* ', 'rw\x00'}, 0x9) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f00000000c0)) tee(0xffffffffffffffff, r4, 0xff, 0x0) 26.001713448s ago: executing program 1 (id=2614): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=@base={0x22, 0x0, 0x0, 0x2000}, 0x50) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r3, 0x0, 0x3, &(0x7f00000000c0)='.(\x00'}, 0x30) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x0, 0x2e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x35a0}, 0x0, {0x0, r7}}) capset(&(0x7f0000000080)={0x20071026}, 0x0) io_uring_enter(r4, 0x663e, 0x0, 0x2, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000006c0)={0x1f, 0xffff, 0x4}, 0x6) recvmmsg(r8, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 25.826768905s ago: executing program 6 (id=2615): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) (fail_nth: 4) 25.825681546s ago: executing program 4 (id=2616): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x300, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000ffff25bd7000fddbdf2500000095", @ANYRES32=0x0, @ANYBLOB="7a0a0500230800003c0012800b000100697036746e6c00002c00028014000300ff0100000000000000000000000000011400020000000000000000000000ffff"], 0x5c}}, 0x24000000) 25.584481848s ago: executing program 6 (id=2617): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd72000000000004000000080018000bac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (fail_nth: 4) 25.501055777s ago: executing program 0 (id=2618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x6, 0x6}}}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (fail_nth: 4) 25.449975203s ago: executing program 4 (id=2619): r0 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x10, 0x2, 0xd, 0x2}, {0x9, 0x5, 0xf, 0x2, 0x0, 0x0, 0x0, 0xff}, {0x9, 0x5, 0x80, 0x3, 0x5d7, 0xf5, 0x0, 0x1}}}}}}]}}, 0x0) syz_usb_ep_read(r0, 0x50, 0x4e, &(0x7f0000000040)=""/78) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x40, 0x11, 0xf0, {0xf0, 0x30, "e7d36fe2ca232ec362d3f0a2240c6e9d1ce05211c60cf6bbdc4c55a598751d5cafd34057df30285a547e555bcda221346d54dd43191b371eedb58997a42bc1eb986dcc55789f47f76d6dceea978ed815032394a88d952852ce8cbdedd571e442462bcd1da268d73dbe34f7c734775da1038046cff76a2946a3356cbe1db54251f6b73518375606611d59591fe005bda8c282bde8d8a31124c4dcdbd5c6a3cd5800274ae472c43c37bca90017e93044713e669d6584a610dea310066aeb5bd3e547e585c82b5c68f430eb6a405c2061e123f96c422f8abe25809c4d08bc62bf942e3d88f7772ee7160d4f8fef3436"}}, &(0x7f00000001c0)={0x0, 0x3, 0x99, @string={0x99, 0x3, "8e27669cf05d78c4d54a01280ed8bbfc915ed0f35bb2d5bb08e9935a34fb1a0ad98fd3663bd8b653b66e7a1bd882858ba4f113bf4b2275d345f64d69a691110b900cb095f865e791b8397dffaeb7f5a2018c957eb13386f0c436c4a7d72018447b631da5405dc2c9e77389f6d06c73eea0bfc7ba8367a6eeda93f2115e41355f7af6ab7fa43781b364569afbb21a580bfe0ba85fb8bb3c"}}, &(0x7f0000000280)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0x1, "b6"}, @local=@item_4={0x3, 0x2, 0x2, "f8af028e"}, @local=@item_4={0x3, 0x2, 0xa, "3e2f579b"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x9ff}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000340)={0x40, 0xd3303471317be316, 0xef, "8446d04d2682dbc3ad7845167c6f2fee306bab57cb04e845f596ed15f7e2dd986e40a87cdfb282968834e55b9014f9ef8b27ac5e87a9f0d95f4adbafef4e3d4ea07c580c40b683f4d2d5af5ec558fb922021754936438f79d4e1d58a7cf3229538c852261ff80b788c3d081f365156cd4d52500b1795518412fffebe10c0fb47d007ec339318ea240a71462c535f8b2c32058eab90fa0f9f91e107134e65eef3e12612b1be84b5adb58296d0bc4c864fb04fc132828d3eab1e05d4228cdd800778cf6807f79b241a43c64d6d44d4cf2d8fe74b4777fa981aa8ad38ed9df362a7ec8d6c1c44aa1b8e4ad823941d8ec2"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xc4}, &(0x7f00000004c0)={0x20, 0x1, 0xcf, "7ef3c80c4c5ccb8ece285d5186dde4a3ef54d63d88833eba32c90f959f6f9c5035abd82d2d14b4dd8b561a5ac9f1cca88066c641cfc7c42446d3c0f08e5ba7fe2933fc6613fced2e97ea3eeeebb5593a982186c33d9208e2df5cc6059ac905b41bf302456eb579731937f96272d884b08455cdf68faf17703a60a34a58ae26868c5f65829818a5bdb820025c7783e50afc6fdfdfa72f2577bb1765231be75b491e866701a9b66989e205cdb9be6704d3690fb9a9973d6376c86d01a50ca30142d4b956e0d23d139aef40176abbb445"}, &(0x7f00000005c0)={0x20, 0x3, 0x1}}) syz_usb_ep_write(r0, 0x6, 0xa4, &(0x7f0000000640)="d46608638cf35db6bfe80afbb78567ec9dbdfadf0be469e348ce40c983f721b5fb81b4d4266cd33cf54a3a76f277603a79a6e264585bd7362ee0188eb0deb29fa22e82e2a8fd9f70fe49de9f6b88b0c89ea4882fbc0dd563e05f7afbb6690bd8d801ea01bdd591ea7ddedb33f9623e2532001361a960ec44453aaf1570ef6cbedff2d4e9bf6ecc9058a2dd820af8f4e5869e5910739ebf68af250f5954b51d1ec5fe49d6") r1 = syz_open_dev$vbi(&(0x7f0000000700), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000740)={0x8, 0x9}) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, &(0x7f0000000780)={0x40, 0x23, 0x28, {0x28, 0x6, "fcb037ec45e35dc3db5736b2899a0c3162e0c99048db02067620dc5ef9cf90270a61f7678f97"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, &(0x7f0000000800)={0x0, 0xf, 0xfc, {0x5, 0xf, 0xfc, 0x2, [@generic={0xf0, 0x10, 0x3, "322bde204d33e9353d996311985e9b92ef97c7fc5960a5784813af6fb864c0921e65df9efd150947d104bcb336616417f241ca6cc753737fd809e1adda007d761afd7c4e5d627f0c4287ed76fadc4118471d37367b93cd2f9d560ac1ccd9d79b203b03f4978a79532e4a76c8dcdf4e4b37ee721dee3d98e131ed3f4d702d382e14a197c08cfa14dec0951c7a57277aa096a0ed424d1e5a2e9fbdb4cc6ec4512a168309ef0025fd3584e506ce119a667781b85ed35a826cd1490e1a1fc0f76fa0695af1e767a6005955313b057e284192761095618def28fee16b856b66b15f5e1b56264d30ba630df0d928f18f"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0xb, 0x2, 0xff}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x5, 0x0, "5186635e", "02bc47ac"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x34, 0x0, 0xf7, 0xfe, 0x9b, 0x8, 0x3}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a00)={0x40, 0x5, 0x88, "32ee00fab9cc5b50e9ccb143bbe3ef7ccd778fac2f4faffe4aee49b28b418129e810669dd35ad8d0a4a5cc046f5df5ba26716badb480ef17ff2355c7ea9ee07e8dadd5cf23cc4445e3887b9ab40a75fd05a56a31d50d85d0088ce62c51f55f9492cdbdc0910349217cc920e3b4e6a30a07585612bf39480525c5edf5d2eb19ed176c86e30d8580c5"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000b00)={0x0, 0x8, 0x1}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000b80)={0x20, 0x0, 0x8, {0x1d80, 0x1, [0x0]}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "f05a"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "9379"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x4}}) syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000f40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x400, 0xff, 0xf7, 0x7}, {0x9, 0x5, 0xd, 0x2, 0x7b7, 0xff, 0x0, 0x9}, {0x9, 0x5, 0x1, 0x3, 0x10, 0x4, 0x1}}}}}}]}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = accept4(r2, &(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000001000)=0x80, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000001080)={{0x6, 0x8, 0x2, 0x2}, 'syz0\x00', 0x2e}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001140), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r6, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0xc0) close_range(r2, r1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001240)={0x2, [0x0, 0x0]}, &(0x7f0000001280)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000012c0)={r8, 0xae, "20b6c26c55e6b114292c6bf066080f06ea81c7111dd5aff4e43afc481dd5d0d67529e237e2481cc6ec2d6f46e222bc703a4caa25d0259b8e080829a644f320503bab3268868e1f220ebbe8348cc9710ca570f9166502c1f420794201e7632a1b1dced83e681032f5d268b4260d81880125fd3a98619385975b144cb924c8501cbba257cb620f2043d61a224eeb552385e6e811a319498f11dc5e8dfb685d7ed908e4ec27109a6b1c05a6b8c313f8"}, &(0x7f0000001380)=0xb6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000013c0)={r7, 0x5}, 0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), r9) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000001440)={0x5, 0x1, 0x8, 0xc, 0x1, 0x3}) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000001480)={0x0, @bt={0x5, 0x80, 0x1, 0x3, 0xd74, 0x1, 0x5, 0x167, 0x91f7, 0x81, 0x1, 0x8, 0xff, 0x0, 0x4, 0x10, {0x9, 0xc7d4}, 0x7, 0xfb}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001580)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x30, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x400}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000814}, 0x20040001) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfa, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x5, 0xf7, 0x1, {0x22, 0x55c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x86, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xa, 0x2, 0xf5}}]}}}]}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001700)={0xa, 0x6, 0x201, 0x3a, 0x4, 0x1, 0x40, 0x21}, 0x5, &(0x7f0000001740)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x423}}]}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000001880)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x38, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x1000, 0x9, 0x1, {0x22, 0xb49}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc0, 0xa, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0xb, 0xf8}}]}}}]}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f00000018c0)={0xa, 0x6, 0x200, 0x4, 0xa, 0x40, 0xe7, 0x7}, 0x21, &(0x7f0000001900)={0x5, 0xf, 0x21, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x40, 0x8, 0x7, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x5, 0x40, 0xfff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x2, 0x59}]}, 0x3, [{0xee, &(0x7f0000001940)=@string={0xee, 0x3, "3d2d1e95f64078c4211b3b421dd99cadf87f98e350ec860acc39b0765b5e3c5cbe99b15d50cca9095dd2a2473edaf860743726f6ee9a83dc6bcf06626480db1c333e926956c44ca494bb595a37ab7e5b95a4efbacec84179f68ec904159ff8d0cdfa6d8ce625432388777a0b19c48d80a384be2b972693457f60ddc198f77aba8aa3035d13de4469768fbd2824cc1bc67c3297be61371cd1ba04bb0bc609c44474a37b4c3b8a41a855790784f15a9391803c86e2b30f1a9b2e1d98587b0e67831ecfe9949c3ab6800d4a6dc543d05e1bfd136d9c9d098ab02547857f8e52f770b1705316c7814b8df646151a"}}, {0x15, &(0x7f0000001a40)=@string={0x15, 0x3, "d49ad8f52acda6773dccf224082e8062a46a75"}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x413}}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_STD(r10, 0x40085618, &(0x7f0000001b00)=0x400) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001b80)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x0, 0x1d8, 0x1d8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000001b40), {[{{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff, 0xff000000, 0xffffff00], [0x0, 0xff, 0xff000000, 0xffffffff], 'team0\x00', 'batadv0\x00', {}, {0xff}, 0x21, 0x2b, 0x2, 0x1}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ipv6header={{0x28}, {0x90, 0x86, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3, 0x3}, {0x9, 0x6, 0x1}, {0x1, 0x3, 0x4}, 0x6, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3}}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [0xff000000, 0xffffff00, 0xff, 0xffffffff], [0x0, 0xff000000, 0xffffff00, 0xff000000], 'veth1_to_batadv\x00', 'xfrm0\x00', {}, {0xff}, 0x0, 0x1}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8cb1, 'syz1\x00', {0x101}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 24.930860208s ago: executing program 0 (id=2621): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f0000000240)=""/120, 0x78}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000680)=""/140, 0x8c}, {&(0x7f0000000380)=""/125, 0x7d}, {&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f0000000800)=""/180, 0xb4}], 0x8, &(0x7f0000001940)=""/101, 0x65}, 0x20) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x3c}}, 0x4000) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "f5f32f97"}}, 0x0}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x8000000063) sched_setscheduler(0x0, 0x2, 0x0) 19.047510242s ago: executing program 5 (id=2631): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000009c0)=[{{&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000a40)=""/97, 0x61}, {&(0x7f00000002c0)=""/217, 0xd9}, {&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000600)=""/255, 0xff}], 0x6, &(0x7f0000000700)=""/84, 0x54}, 0x80000001}, {{&(0x7f0000000780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000800)=""/249, 0xf9}, {&(0x7f0000000900)=""/10, 0xa}], 0x2}, 0x56}], 0x2, 0x103, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x6, 0x1) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000240)=@userptr={0x3, 0x9, 0x4, 0xe000, 0x7, {}, {0x2, 0x0, 0xff, 0x9, 0x9, 0xa, "1ed00c3c"}, 0x8, 0x2, {0x0}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast2, 0x4e20, 0x6600, 0x800, 0x0, 0x2}, {0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000}}, 0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}}, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x48, 0x76, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}}, 0x8080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(r3, &(0x7f00000003c0)='./file0\x00', 0x5) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000400)={0x97c, 0x3, 0x101, 0x0, 0x8, 0x3}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x9, 0x4bfe710e7a371040, 0x4, 0x3, 0x0, 0x8}, {0x80000000, 0x0, 0x4, 0xffff6947, 0x8, 0x249}]}) syz_open_dev$ptys(0xc, 0x3, 0x1) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000300002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) 18.806756981s ago: executing program 5 (id=2632): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="582000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 18.797625163s ago: executing program 5 (id=2633): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x20, @mcast2, 0x4}, 0x1c) 18.765270635s ago: executing program 5 (id=2634): r0 = fsopen(&(0x7f0000000040)='nfs4\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xad, 0xb3, 0xf6, 0x8, 0x10c4, 0xeac1, 0xc4a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0x1, 0xf9, 0x0, 0x81, 0x6e, 0x9f, 0xe6}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f0000000300)}, {&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000640)=""/101, 0x65}, {&(0x7f00000006c0)=""/105, 0x69}], 0xa, &(0x7f0000002940)=""/131, 0x83}, 0x4}, {{&(0x7f0000002a00)=@xdp, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/114, 0x72}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000740)=""/31, 0x1f}, {&(0x7f0000002800)}], 0x4, &(0x7f0000002b40)=""/23, 0x17}, 0x2}, {{&(0x7f0000002b80)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002c00)=""/92, 0x5c}, {&(0x7f0000002c80)=""/155, 0x9b}, {&(0x7f0000002d40)=""/211, 0xd3}, {&(0x7f0000002e40)=""/57, 0x39}], 0x4}, 0x1}], 0x3, 0x2, &(0x7f0000002f80)) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x4095, 0x7721, 0x16, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x4, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) sendmmsg$inet6(r5, &(0x7f0000000780)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002840)="aa5cd3484f5a8b50", 0x8}, {0x0}], 0x2, &(0x7f0000000540)=ANY=[], 0x208}}], 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r0) 15.517965505s ago: executing program 5 (id=2635): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10001) munlockall() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='gpu_mem_total\x00'}, 0x18) dup(0xffffffffffffffff) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) 15.045641717s ago: executing program 5 (id=2636): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) modify_ldt$write(0x1, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x80001, 0x84) listen(r4, 0x3) close(0x3) creat(&(0x7f0000000000)='./file0\x00', 0x80) socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x9, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="440000000206050000000000000000000000000012006269746d61703a69702c6d61630000000500047a31000000000500050002000000"], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0}) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r8, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4) 10.494049676s ago: executing program 34 (id=2614): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=@base={0x22, 0x0, 0x0, 0x2000}, 0x50) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r3, 0x0, 0x3, &(0x7f00000000c0)='.(\x00'}, 0x30) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x0, 0x2e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x35a0}, 0x0, {0x0, r7}}) capset(&(0x7f0000000080)={0x20071026}, 0x0) io_uring_enter(r4, 0x663e, 0x0, 0x2, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000006c0)={0x1f, 0xffff, 0x4}, 0x6) recvmmsg(r8, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 10.438421213s ago: executing program 35 (id=2617): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd72000000000004000000080018000bac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (fail_nth: 4) 9.402113661s ago: executing program 36 (id=2621): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f0000000240)=""/120, 0x78}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000680)=""/140, 0x8c}, {&(0x7f0000000380)=""/125, 0x7d}, {&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f0000000800)=""/180, 0xb4}], 0x8, &(0x7f0000001940)=""/101, 0x65}, 0x20) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x3c}}, 0x4000) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "f5f32f97"}}, 0x0}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x8000000063) sched_setscheduler(0x0, 0x2, 0x0) 9.330749564s ago: executing program 37 (id=2619): r0 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x10, 0x2, 0xd, 0x2}, {0x9, 0x5, 0xf, 0x2, 0x0, 0x0, 0x0, 0xff}, {0x9, 0x5, 0x80, 0x3, 0x5d7, 0xf5, 0x0, 0x1}}}}}}]}}, 0x0) syz_usb_ep_read(r0, 0x50, 0x4e, &(0x7f0000000040)=""/78) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x40, 0x11, 0xf0, {0xf0, 0x30, "e7d36fe2ca232ec362d3f0a2240c6e9d1ce05211c60cf6bbdc4c55a598751d5cafd34057df30285a547e555bcda221346d54dd43191b371eedb58997a42bc1eb986dcc55789f47f76d6dceea978ed815032394a88d952852ce8cbdedd571e442462bcd1da268d73dbe34f7c734775da1038046cff76a2946a3356cbe1db54251f6b73518375606611d59591fe005bda8c282bde8d8a31124c4dcdbd5c6a3cd5800274ae472c43c37bca90017e93044713e669d6584a610dea310066aeb5bd3e547e585c82b5c68f430eb6a405c2061e123f96c422f8abe25809c4d08bc62bf942e3d88f7772ee7160d4f8fef3436"}}, &(0x7f00000001c0)={0x0, 0x3, 0x99, @string={0x99, 0x3, "8e27669cf05d78c4d54a01280ed8bbfc915ed0f35bb2d5bb08e9935a34fb1a0ad98fd3663bd8b653b66e7a1bd882858ba4f113bf4b2275d345f64d69a691110b900cb095f865e791b8397dffaeb7f5a2018c957eb13386f0c436c4a7d72018447b631da5405dc2c9e77389f6d06c73eea0bfc7ba8367a6eeda93f2115e41355f7af6ab7fa43781b364569afbb21a580bfe0ba85fb8bb3c"}}, &(0x7f0000000280)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0x1, "b6"}, @local=@item_4={0x3, 0x2, 0x2, "f8af028e"}, @local=@item_4={0x3, 0x2, 0xa, "3e2f579b"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x9ff}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000340)={0x40, 0xd3303471317be316, 0xef, "8446d04d2682dbc3ad7845167c6f2fee306bab57cb04e845f596ed15f7e2dd986e40a87cdfb282968834e55b9014f9ef8b27ac5e87a9f0d95f4adbafef4e3d4ea07c580c40b683f4d2d5af5ec558fb922021754936438f79d4e1d58a7cf3229538c852261ff80b788c3d081f365156cd4d52500b1795518412fffebe10c0fb47d007ec339318ea240a71462c535f8b2c32058eab90fa0f9f91e107134e65eef3e12612b1be84b5adb58296d0bc4c864fb04fc132828d3eab1e05d4228cdd800778cf6807f79b241a43c64d6d44d4cf2d8fe74b4777fa981aa8ad38ed9df362a7ec8d6c1c44aa1b8e4ad823941d8ec2"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xc4}, &(0x7f00000004c0)={0x20, 0x1, 0xcf, "7ef3c80c4c5ccb8ece285d5186dde4a3ef54d63d88833eba32c90f959f6f9c5035abd82d2d14b4dd8b561a5ac9f1cca88066c641cfc7c42446d3c0f08e5ba7fe2933fc6613fced2e97ea3eeeebb5593a982186c33d9208e2df5cc6059ac905b41bf302456eb579731937f96272d884b08455cdf68faf17703a60a34a58ae26868c5f65829818a5bdb820025c7783e50afc6fdfdfa72f2577bb1765231be75b491e866701a9b66989e205cdb9be6704d3690fb9a9973d6376c86d01a50ca30142d4b956e0d23d139aef40176abbb445"}, &(0x7f00000005c0)={0x20, 0x3, 0x1}}) syz_usb_ep_write(r0, 0x6, 0xa4, &(0x7f0000000640)="d46608638cf35db6bfe80afbb78567ec9dbdfadf0be469e348ce40c983f721b5fb81b4d4266cd33cf54a3a76f277603a79a6e264585bd7362ee0188eb0deb29fa22e82e2a8fd9f70fe49de9f6b88b0c89ea4882fbc0dd563e05f7afbb6690bd8d801ea01bdd591ea7ddedb33f9623e2532001361a960ec44453aaf1570ef6cbedff2d4e9bf6ecc9058a2dd820af8f4e5869e5910739ebf68af250f5954b51d1ec5fe49d6") r1 = syz_open_dev$vbi(&(0x7f0000000700), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000740)={0x8, 0x9}) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, &(0x7f0000000780)={0x40, 0x23, 0x28, {0x28, 0x6, "fcb037ec45e35dc3db5736b2899a0c3162e0c99048db02067620dc5ef9cf90270a61f7678f97"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, &(0x7f0000000800)={0x0, 0xf, 0xfc, {0x5, 0xf, 0xfc, 0x2, [@generic={0xf0, 0x10, 0x3, "322bde204d33e9353d996311985e9b92ef97c7fc5960a5784813af6fb864c0921e65df9efd150947d104bcb336616417f241ca6cc753737fd809e1adda007d761afd7c4e5d627f0c4287ed76fadc4118471d37367b93cd2f9d560ac1ccd9d79b203b03f4978a79532e4a76c8dcdf4e4b37ee721dee3d98e131ed3f4d702d382e14a197c08cfa14dec0951c7a57277aa096a0ed424d1e5a2e9fbdb4cc6ec4512a168309ef0025fd3584e506ce119a667781b85ed35a826cd1490e1a1fc0f76fa0695af1e767a6005955313b057e284192761095618def28fee16b856b66b15f5e1b56264d30ba630df0d928f18f"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0xb, 0x2, 0xff}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x5, 0x0, "5186635e", "02bc47ac"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x34, 0x0, 0xf7, 0xfe, 0x9b, 0x8, 0x3}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a00)={0x40, 0x5, 0x88, "32ee00fab9cc5b50e9ccb143bbe3ef7ccd778fac2f4faffe4aee49b28b418129e810669dd35ad8d0a4a5cc046f5df5ba26716badb480ef17ff2355c7ea9ee07e8dadd5cf23cc4445e3887b9ab40a75fd05a56a31d50d85d0088ce62c51f55f9492cdbdc0910349217cc920e3b4e6a30a07585612bf39480525c5edf5d2eb19ed176c86e30d8580c5"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000b00)={0x0, 0x8, 0x1}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000b80)={0x20, 0x0, 0x8, {0x1d80, 0x1, [0x0]}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "f05a"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "9379"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x4}}) syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000f40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x400, 0xff, 0xf7, 0x7}, {0x9, 0x5, 0xd, 0x2, 0x7b7, 0xff, 0x0, 0x9}, {0x9, 0x5, 0x1, 0x3, 0x10, 0x4, 0x1}}}}}}]}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = accept4(r2, &(0x7f0000000f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000001000)=0x80, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000001080)={{0x6, 0x8, 0x2, 0x2}, 'syz0\x00', 0x2e}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001140), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r6, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0xc0) close_range(r2, r1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001240)={0x2, [0x0, 0x0]}, &(0x7f0000001280)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000012c0)={r8, 0xae, "20b6c26c55e6b114292c6bf066080f06ea81c7111dd5aff4e43afc481dd5d0d67529e237e2481cc6ec2d6f46e222bc703a4caa25d0259b8e080829a644f320503bab3268868e1f220ebbe8348cc9710ca570f9166502c1f420794201e7632a1b1dced83e681032f5d268b4260d81880125fd3a98619385975b144cb924c8501cbba257cb620f2043d61a224eeb552385e6e811a319498f11dc5e8dfb685d7ed908e4ec27109a6b1c05a6b8c313f8"}, &(0x7f0000001380)=0xb6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000013c0)={r7, 0x5}, 0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), r9) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000001440)={0x5, 0x1, 0x8, 0xc, 0x1, 0x3}) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000001480)={0x0, @bt={0x5, 0x80, 0x1, 0x3, 0xd74, 0x1, 0x5, 0x167, 0x91f7, 0x81, 0x1, 0x8, 0xff, 0x0, 0x4, 0x10, {0x9, 0xc7d4}, 0x7, 0xfb}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001580)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x30, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x400}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000814}, 0x20040001) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfa, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x5, 0xf7, 0x1, {0x22, 0x55c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x86, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xa, 0x2, 0xf5}}]}}}]}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001700)={0xa, 0x6, 0x201, 0x3a, 0x4, 0x1, 0x40, 0x21}, 0x5, &(0x7f0000001740)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x423}}]}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000001880)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x38, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x1000, 0x9, 0x1, {0x22, 0xb49}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc0, 0xa, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0xb, 0xf8}}]}}}]}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f00000018c0)={0xa, 0x6, 0x200, 0x4, 0xa, 0x40, 0xe7, 0x7}, 0x21, &(0x7f0000001900)={0x5, 0xf, 0x21, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x40, 0x8, 0x7, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x5, 0x40, 0xfff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x2, 0x59}]}, 0x3, [{0xee, &(0x7f0000001940)=@string={0xee, 0x3, "3d2d1e95f64078c4211b3b421dd99cadf87f98e350ec860acc39b0765b5e3c5cbe99b15d50cca9095dd2a2473edaf860743726f6ee9a83dc6bcf06626480db1c333e926956c44ca494bb595a37ab7e5b95a4efbacec84179f68ec904159ff8d0cdfa6d8ce625432388777a0b19c48d80a384be2b972693457f60ddc198f77aba8aa3035d13de4469768fbd2824cc1bc67c3297be61371cd1ba04bb0bc609c44474a37b4c3b8a41a855790784f15a9391803c86e2b30f1a9b2e1d98587b0e67831ecfe9949c3ab6800d4a6dc543d05e1bfd136d9c9d098ab02547857f8e52f770b1705316c7814b8df646151a"}}, {0x15, &(0x7f0000001a40)=@string={0x15, 0x3, "d49ad8f52acda6773dccf224082e8062a46a75"}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x413}}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_STD(r10, 0x40085618, &(0x7f0000001b00)=0x400) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001b80)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x0, 0x1d8, 0x1d8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000001b40), {[{{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff, 0xff000000, 0xffffff00], [0x0, 0xff, 0xff000000, 0xffffffff], 'team0\x00', 'batadv0\x00', {}, {0xff}, 0x21, 0x2b, 0x2, 0x1}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ipv6header={{0x28}, {0x90, 0x86, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3, 0x3}, {0x9, 0x6, 0x1}, {0x1, 0x3, 0x4}, 0x6, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3}}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [0xff000000, 0xffffff00, 0xff, 0xffffffff], [0x0, 0xff000000, 0xffffff00, 0xff000000], 'veth1_to_batadv\x00', 'xfrm0\x00', {}, {0xff}, 0x0, 0x1}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8cb1, 'syz1\x00', {0x101}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 0s ago: executing program 38 (id=2636): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) modify_ldt$write(0x1, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x80001, 0x84) listen(r4, 0x3) close(0x3) creat(&(0x7f0000000000)='./file0\x00', 0x80) socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x9, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="440000000206050000000000000000000000000012006269746d61703a69702c6d61630000000500047a31000000000500050002000000"], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0}) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r8, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4) kernel console output (not intermixed with test programs): 876.760039][T13588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 876.760051][T13588] Call Trace: [ 876.760058][T13588] [ 876.760066][T13588] dump_stack_lvl+0x189/0x250 [ 876.760095][T13588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 876.760117][T13588] ? __pfx__printk+0x10/0x10 [ 876.760135][T13588] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 876.760159][T13588] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 876.760185][T13588] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 876.760210][T13588] warn_alloc+0x22e/0x3b0 [ 876.760236][T13588] ? kasan_quarantine_put+0xdd/0x220 [ 876.760258][T13588] ? lockdep_hardirqs_on+0x98/0x140 [ 876.760279][T13588] ? __pfx_warn_alloc+0x10/0x10 [ 876.760303][T13588] ? __get_vm_area_node+0x240/0x350 [ 876.760323][T13588] ? __get_vm_area_node+0x172/0x350 [ 876.760344][T13588] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 876.760366][T13588] ? __get_vm_area_node+0x240/0x350 [ 876.760395][T13588] __vmalloc_node_range_noprof+0x396/0x16a0 [ 876.760444][T13588] ? unwind_get_return_address+0x4d/0x90 [ 876.760468][T13588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 876.760494][T13588] ? __lock_acquire+0x6b6/0x2cf0 [ 876.760524][T13588] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 876.760542][T13588] __vmalloc_noprof+0xd2/0x120 [ 876.760563][T13588] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 876.760586][T13588] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 876.760610][T13588] bpf_prog_alloc+0x3c/0x1a0 [ 876.760632][T13588] bpf_prog_load+0x735/0x1a10 [ 876.760663][T13588] ? __pfx_bpf_prog_load+0x10/0x10 [ 876.760741][T13588] ? bpf_lsm_bpf+0x9/0x20 [ 876.760757][T13588] ? security_bpf+0x7e/0x300 [ 876.760782][T13588] __sys_bpf+0x507/0x860 [ 876.760803][T13588] ? __pfx___sys_bpf+0x10/0x10 [ 876.760819][T13588] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 876.760857][T13588] ? ksys_write+0x230/0x260 [ 876.760882][T13588] ? __pfx_ksys_write+0x10/0x10 [ 876.760910][T13588] __x64_sys_bpf+0x7c/0x90 [ 876.760928][T13588] do_syscall_64+0xfa/0xf80 [ 876.760946][T13588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.760963][T13588] ? clear_bhb_loop+0x60/0xb0 [ 876.760983][T13588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.761000][T13588] RIP: 0033:0x7fa811fbf749 [ 876.761018][T13588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.761032][T13588] RSP: 002b:00007fa81021e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 876.761050][T13588] RAX: ffffffffffffffda RBX: 00007fa812215fa0 RCX: 00007fa811fbf749 [ 876.761063][T13588] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 876.761075][T13588] RBP: 00007fa81021e090 R08: 0000000000000000 R09: 0000000000000000 [ 876.761086][T13588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.761097][T13588] R13: 00007fa812216038 R14: 00007fa812215fa0 R15: 00007ffdde6f3538 [ 876.761127][T13588] [ 876.761134][T13588] Mem-Info: [ 876.761144][T13588] active_anon:291 inactive_anon:12407 isolated_anon:0 [ 876.761144][T13588] active_file:27308 inactive_file:38740 isolated_file:0 [ 876.761144][T13588] unevictable:768 dirty:116 writeback:0 [ 876.761144][T13588] slab_reclaimable:13092 slab_unreclaimable:102375 [ 876.761144][T13588] mapped:30081 shmem:9816 pagetables:1069 [ 876.761144][T13588] sec_pagetables:0 bounce:0 [ 876.761144][T13588] kernel_misc_reclaimable:0 [ 876.761144][T13588] free:1292239 free_pcp:10889 free_cma:0 [ 876.761189][T13588] Node 0 active_anon:1164kB inactive_anon:49628kB active_file:108964kB inactive_file:154960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120260kB dirty:464kB writeback:0kB shmem:37728kB kernel_stack:13072kB pagetables:4112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 876.761232][T13588] Node 1 active_anon:0kB inactive_anon:0kB active_file:268kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 876.761270][T13588] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.761321][T13588] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 876.761352][T13588] Node 0 DMA32 free:1252528kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1164kB inactive_anon:49628kB active_file:108964kB inactive_file:154960kB unevictable:1536kB writepending:464kB zspages:0kB present:3129332kB managed:2574552kB mlocked:0kB bounce:0kB free_pcp:43556kB local_pcp:9132kB free_cma:0kB [ 876.761406][T13588] lowmem_reserve[]: 0 0 1 1 1 [ 876.761434][T13588] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.761482][T13588] lowmem_reserve[]: 0 0 0 0 0 [ 876.761512][T13588] Node 1 Normal free:3901068kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:268kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.761564][T13588] lowmem_reserve[]: 0 0 0 0 0 [ 876.761592][T13588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 876.761699][T13588] Node 0 DMA32: 3002*4kB (UME) 2459*8kB (UME) 1738*16kB (UME) 539*32kB (UME) 510*64kB (UME) 289*128kB (UME) 163*256kB (UME) 115*512kB (UME) 70*1024kB (UM) 32*2048kB (UM) 212*4096kB (UM) = 1252544kB [ 876.761837][T13588] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 876.761923][T13588] Node 1 Normal: 165*4kB (UE) 47*8kB (UME) 36*16kB (UME) 202*32kB (UME) 88*64kB (UE) 26*128kB (UME) 18*256kB (UME) 7*512kB (UM) 5*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3901068kB [ 876.762058][T13588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 876.762073][T13588] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 876.762087][T13588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 876.762101][T13588] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 876.762113][T13588] 75886 total pagecache pages [ 876.762120][T13588] 0 pages in swap cache [ 876.762126][T13588] Free swap = 124996kB [ 876.762133][T13588] Total swap = 124996kB [ 876.762139][T13588] 2097051 pages RAM [ 876.762146][T13588] 0 pages HighMem/MovableOnly [ 876.762152][T13588] 421387 pages reserved [ 876.762159][T13588] 0 pages cma reserved [ 876.930267][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2283'. [ 877.253979][T13596] FAULT_INJECTION: forcing a failure. [ 877.253979][T13596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.254014][T13596] CPU: 1 UID: 0 PID: 13596 Comm: syz.4.2285 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 877.254038][T13596] Tainted: [L]=SOFTLOCKUP [ 877.254046][T13596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 877.254057][T13596] Call Trace: [ 877.254065][T13596] [ 877.254073][T13596] dump_stack_lvl+0x189/0x250 [ 877.254099][T13596] ? __pfx____ratelimit+0x10/0x10 [ 877.254125][T13596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 877.254147][T13596] ? __pfx__printk+0x10/0x10 [ 877.254180][T13596] should_fail_ex+0x46c/0x600 [ 877.254208][T13596] _copy_to_user+0x31/0xb0 [ 877.254228][T13596] simple_read_from_buffer+0xe1/0x170 [ 877.254252][T13596] proc_fail_nth_read+0x1b6/0x220 [ 877.254279][T13596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.254305][T13596] ? rw_verify_area+0x2ac/0x4e0 [ 877.254327][T13596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.254351][T13596] vfs_read+0x206/0xa30 [ 877.254382][T13596] ? __pfx_vfs_read+0x10/0x10 [ 877.254401][T13596] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 877.254431][T13596] ? mutex_lock_nested+0x154/0x1d0 [ 877.254450][T13596] ? fdget_pos+0x253/0x320 [ 877.254478][T13596] ksys_read+0x14b/0x260 [ 877.254498][T13596] ? __fget_files+0x2a/0x420 [ 877.254517][T13596] ? __pfx_ksys_read+0x10/0x10 [ 877.254537][T13596] ? __secure_computing+0xe2/0x2a0 [ 877.254569][T13596] do_syscall_64+0xfa/0xf80 [ 877.254587][T13596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.254605][T13596] ? clear_bhb_loop+0x60/0xb0 [ 877.254625][T13596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.254648][T13596] RIP: 0033:0x7fa811fbe15c [ 877.254665][T13596] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 877.254681][T13596] RSP: 002b:00007fa81021e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 877.254701][T13596] RAX: ffffffffffffffda RBX: 00007fa812215fa0 RCX: 00007fa811fbe15c [ 877.254715][T13596] RDX: 000000000000000f RSI: 00007fa81021e0a0 RDI: 0000000000000005 [ 877.254726][T13596] RBP: 00007fa81021e090 R08: 0000000000000000 R09: 0000000000000000 [ 877.254737][T13596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.254748][T13596] R13: 00007fa812216038 R14: 00007fa812215fa0 R15: 00007ffdde6f3538 [ 877.254780][T13596] [ 877.260139][ T6644] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 877.412324][ T6644] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.412369][ T6644] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 877.412392][ T6644] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.417348][ T6644] usb 6-1: config 0 descriptor?? [ 878.210461][T13594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.214127][T13594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.300390][ T6644] nintendo 0003:057E:200E.000B: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.5-1/input0 [ 878.361469][ T6644] nintendo 0003:057E:200E.000B: Failed charging grip handshake [ 878.361494][ T6644] nintendo 0003:057E:200E.000B: Failed to initialize controller; ret=-110 [ 878.373170][ T6644] nintendo 0003:057E:200E.000B: probe - fail = -110 [ 878.373323][ T6644] nintendo 0003:057E:200E.000B: probe with driver nintendo failed with error -110 [ 878.579858][ T5876] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 879.408399][T13605] delete_channel: no stack [ 879.437659][ T5876] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 879.437688][ T5876] usb 7-1: config 0 has no interface number 0 [ 879.437740][ T5876] usb 7-1: config 0 interface 41 has no altsetting 0 [ 879.462110][ T5876] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 879.462139][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.462158][ T5876] usb 7-1: Product: syz [ 879.462172][ T5876] usb 7-1: Manufacturer: syz [ 879.462185][ T5876] usb 7-1: SerialNumber: syz [ 879.505400][ T5876] usb 7-1: config 0 descriptor?? [ 879.919491][ T6644] usb 6-1: USB disconnect, device number 39 [ 879.941984][ T5876] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 879.942256][ T5876] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 879.993369][ T5876] usb 7-1: USB disconnect, device number 15 [ 880.021458][T13622] FAULT_INJECTION: forcing a failure. [ 880.021458][T13622] name failslab, interval 1, probability 0, space 0, times 0 [ 880.021493][T13622] CPU: 1 UID: 0 PID: 13622 Comm: syz.5.2294 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 880.021518][T13622] Tainted: [L]=SOFTLOCKUP [ 880.021524][T13622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 880.021535][T13622] Call Trace: [ 880.021542][T13622] [ 880.021551][T13622] dump_stack_lvl+0x189/0x250 [ 880.021577][T13622] ? __pfx____ratelimit+0x10/0x10 [ 880.021602][T13622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 880.021624][T13622] ? __pfx__printk+0x10/0x10 [ 880.021639][T13622] ? __kasan_slab_alloc+0x6c/0x80 [ 880.021667][T13622] ? __lock_acquire+0x6b6/0x2cf0 [ 880.021700][T13622] should_fail_ex+0x46c/0x600 [ 880.021727][T13622] ? skb_clone+0x212/0x3a0 [ 880.021748][T13622] should_failslab+0xa8/0x100 [ 880.021767][T13622] ? skb_clone+0x212/0x3a0 [ 880.021785][T13622] kmem_cache_alloc_noprof+0x84/0x6c0 [ 880.021807][T13622] ? __netlink_lookup+0xbd/0x8a0 [ 880.021838][T13622] skb_clone+0x212/0x3a0 [ 880.021863][T13622] __netlink_deliver_tap+0x404/0x850 [ 880.021898][T13622] ? netlink_deliver_tap+0x2e/0x1b0 [ 880.021922][T13622] netlink_deliver_tap+0x19c/0x1b0 [ 880.021945][T13622] netlink_unicast+0x811/0xa10 [ 880.021975][T13622] ? __pfx_netlink_unicast+0x10/0x10 [ 880.021997][T13622] ? netlink_sendmsg+0x642/0xb30 [ 880.022016][T13622] ? skb_put+0x11b/0x210 [ 880.022038][T13622] netlink_sendmsg+0x805/0xb30 [ 880.022068][T13622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 880.022097][T13622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 880.022118][T13622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 880.022140][T13622] __sock_sendmsg+0x21c/0x270 [ 880.022169][T13622] ____sys_sendmsg+0x508/0x810 [ 880.022197][T13622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 880.022233][T13622] ? import_iovec+0x74/0xa0 [ 880.022255][T13622] ___sys_sendmsg+0x21f/0x2a0 [ 880.022279][T13622] ? __pfx____sys_sendmsg+0x10/0x10 [ 880.022347][T13622] ? __fget_files+0x2a/0x420 [ 880.022366][T13622] ? __fget_files+0x3a6/0x420 [ 880.022396][T13622] __x64_sys_sendmsg+0x1a1/0x260 [ 880.022421][T13622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 880.022453][T13622] ? __pfx_ksys_write+0x10/0x10 [ 880.022481][T13622] ? do_syscall_64+0xbe/0xf80 [ 880.022504][T13622] do_syscall_64+0xfa/0xf80 [ 880.022523][T13622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.022541][T13622] ? clear_bhb_loop+0x60/0xb0 [ 880.022563][T13622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.022580][T13622] RIP: 0033:0x7fb6efb1f749 [ 880.022596][T13622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 880.022612][T13622] RSP: 002b:00007fb6edd7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 880.022632][T13622] RAX: ffffffffffffffda RBX: 00007fb6efd75fa0 RCX: 00007fb6efb1f749 [ 880.022645][T13622] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 880.022658][T13622] RBP: 00007fb6edd7e090 R08: 0000000000000000 R09: 0000000000000000 [ 880.022669][T13622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.022681][T13622] R13: 00007fb6efd76038 R14: 00007fb6efd75fa0 R15: 00007ffff54628e8 [ 880.022714][T13622] [ 880.028241][T13622] netlink: 'syz.5.2294': attribute type 10 has an invalid length. [ 880.313491][T13624] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2295'. [ 880.313514][T13624] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2295'. [ 880.313529][T13624] netlink: 'syz.4.2295': attribute type 4 has an invalid length. [ 881.435242][T13622] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 881.453377][T13621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.007234][T13640] FAULT_INJECTION: forcing a failure. [ 882.007234][T13640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 882.007270][T13640] CPU: 0 UID: 0 PID: 13640 Comm: syz.4.2300 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 882.007296][T13640] Tainted: [L]=SOFTLOCKUP [ 882.007303][T13640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 882.007315][T13640] Call Trace: [ 882.007323][T13640] [ 882.007332][T13640] dump_stack_lvl+0x189/0x250 [ 882.007358][T13640] ? __pfx____ratelimit+0x10/0x10 [ 882.007384][T13640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 882.007414][T13640] ? __pfx__printk+0x10/0x10 [ 882.007433][T13640] ? __might_fault+0xb0/0x130 [ 882.007467][T13640] should_fail_ex+0x46c/0x600 [ 882.007497][T13640] _copy_from_iter+0x1cd/0x1630 [ 882.007525][T13640] ? __build_skb_around+0x22d/0x3c0 [ 882.007551][T13640] ? __pfx__copy_from_iter+0x10/0x10 [ 882.007572][T13640] ? __alloc_skb+0x2f1/0x430 [ 882.007593][T13640] ? __pfx___alloc_skb+0x10/0x10 [ 882.007615][T13640] ? netlink_sendmsg+0x642/0xb30 [ 882.007636][T13640] ? skb_put+0x11b/0x210 [ 882.007659][T13640] netlink_sendmsg+0x6b2/0xb30 [ 882.007691][T13640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.007721][T13640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 882.007743][T13640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.007766][T13640] __sock_sendmsg+0x21c/0x270 [ 882.007794][T13640] ____sys_sendmsg+0x508/0x810 [ 882.007822][T13640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 882.007851][T13640] ? import_iovec+0x74/0xa0 [ 882.007873][T13640] ___sys_sendmsg+0x21f/0x2a0 [ 882.007897][T13640] ? __pfx____sys_sendmsg+0x10/0x10 [ 882.007955][T13640] ? __fget_files+0x2a/0x420 [ 882.007973][T13640] ? __fget_files+0x3a6/0x420 [ 882.008002][T13640] __x64_sys_sendmsg+0x1a1/0x260 [ 882.008026][T13640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 882.008058][T13640] ? __pfx_ksys_write+0x10/0x10 [ 882.008085][T13640] ? do_syscall_64+0xbe/0xf80 [ 882.008107][T13640] do_syscall_64+0xfa/0xf80 [ 882.008125][T13640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.008143][T13640] ? clear_bhb_loop+0x60/0xb0 [ 882.008166][T13640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.008182][T13640] RIP: 0033:0x7fa811fbf749 [ 882.008199][T13640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 882.008214][T13640] RSP: 002b:00007fa81021e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 882.008234][T13640] RAX: ffffffffffffffda RBX: 00007fa812215fa0 RCX: 00007fa811fbf749 [ 882.008248][T13640] RDX: 0000000000000804 RSI: 0000200000000080 RDI: 0000000000000003 [ 882.008261][T13640] RBP: 00007fa81021e090 R08: 0000000000000000 R09: 0000000000000000 [ 882.008273][T13640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.008284][T13640] R13: 00007fa812216038 R14: 00007fa812215fa0 R15: 00007ffdde6f3538 [ 882.008316][T13640] [ 882.801391][T13637] delete_channel: no stack [ 884.495257][T13674] FAULT_INJECTION: forcing a failure. [ 884.495257][T13674] name failslab, interval 1, probability 0, space 0, times 0 [ 884.495292][T13674] CPU: 1 UID: 0 PID: 13674 Comm: syz.5.2312 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 884.495314][T13674] Tainted: [L]=SOFTLOCKUP [ 884.495321][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 884.495333][T13674] Call Trace: [ 884.495340][T13674] [ 884.495348][T13674] dump_stack_lvl+0x189/0x250 [ 884.495374][T13674] ? __pfx____ratelimit+0x10/0x10 [ 884.495398][T13674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 884.495419][T13674] ? __pfx__printk+0x10/0x10 [ 884.495434][T13674] ? __kasan_slab_alloc+0x6c/0x80 [ 884.495463][T13674] ? __lock_acquire+0x6b6/0x2cf0 [ 884.495492][T13674] should_fail_ex+0x46c/0x600 [ 884.495517][T13674] ? skb_clone+0x212/0x3a0 [ 884.495538][T13674] should_failslab+0xa8/0x100 [ 884.495556][T13674] ? skb_clone+0x212/0x3a0 [ 884.495574][T13674] kmem_cache_alloc_noprof+0x84/0x6c0 [ 884.495595][T13674] ? __netlink_lookup+0xbd/0x8a0 [ 884.495626][T13674] skb_clone+0x212/0x3a0 [ 884.495650][T13674] __netlink_deliver_tap+0x404/0x850 [ 884.495680][T13674] ? netlink_deliver_tap+0x2e/0x1b0 [ 884.495699][T13674] netlink_deliver_tap+0x19c/0x1b0 [ 884.495721][T13674] netlink_unicast+0x811/0xa10 [ 884.495748][T13674] ? __pfx_netlink_unicast+0x10/0x10 [ 884.495771][T13674] ? netlink_sendmsg+0x642/0xb30 [ 884.495791][T13674] ? skb_put+0x11b/0x210 [ 884.495813][T13674] netlink_sendmsg+0x805/0xb30 [ 884.495841][T13674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.495870][T13674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 884.495899][T13674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 884.495921][T13674] __sock_sendmsg+0x21c/0x270 [ 884.495949][T13674] ____sys_sendmsg+0x508/0x810 [ 884.495977][T13674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 884.496008][T13674] ? import_iovec+0x74/0xa0 [ 884.496029][T13674] ___sys_sendmsg+0x21f/0x2a0 [ 884.496053][T13674] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.496114][T13674] ? __fget_files+0x2a/0x420 [ 884.496132][T13674] ? __fget_files+0x3a6/0x420 [ 884.496162][T13674] __x64_sys_sendmsg+0x1a1/0x260 [ 884.496187][T13674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 884.496220][T13674] ? __pfx_ksys_write+0x10/0x10 [ 884.496248][T13674] ? do_syscall_64+0xbe/0xf80 [ 884.496271][T13674] do_syscall_64+0xfa/0xf80 [ 884.496290][T13674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.496308][T13674] ? clear_bhb_loop+0x60/0xb0 [ 884.496331][T13674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.496348][T13674] RIP: 0033:0x7fb6efb1f749 [ 884.496365][T13674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.496381][T13674] RSP: 002b:00007fb6edd7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.496402][T13674] RAX: ffffffffffffffda RBX: 00007fb6efd75fa0 RCX: 00007fb6efb1f749 [ 884.496416][T13674] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 884.496428][T13674] RBP: 00007fb6edd7e090 R08: 0000000000000000 R09: 0000000000000000 [ 884.496440][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.496451][T13674] R13: 00007fb6efd76038 R14: 00007fb6efd75fa0 R15: 00007ffff54628e8 [ 884.496484][T13674] [ 886.602325][T13684] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2318'. [ 886.625508][ T37] audit: type=1326 audit(1765849677.068:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.6.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6da6f749 code=0x7ff00000 [ 886.625806][ T37] audit: type=1326 audit(1765849677.068:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.6.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6da6f749 code=0x7ff00000 [ 886.626065][ T37] audit: type=1326 audit(1765849677.068:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.6.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6da6f749 code=0x7ff00000 [ 886.626319][ T37] audit: type=1326 audit(1765849677.068:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.6.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6da6f749 code=0x7ff00000 [ 886.626692][ T37] audit: type=1326 audit(1765849677.068:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.6.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6da6f749 code=0x7ff00000 [ 886.626951][ T37] audit: type=1326 audit(1765849677.068:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.6.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6da6f749 code=0x7ff00000 [ 886.627217][ T37] audit: type=1326 audit(1765849677.068:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.6.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6da6f749 code=0x7ff00000 [ 886.627484][ T37] audit: type=1326 audit(1765849677.068:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.6.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6da6f749 code=0x7ff00000 [ 886.627844][ T37] audit: type=1326 audit(1765849677.068:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.6.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6da6f749 code=0x7ff00000 [ 886.628095][ T37] audit: type=1326 audit(1765849677.068:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13683 comm="syz.6.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6da6f749 code=0x7ff00000 [ 886.660320][T13685] FAULT_INJECTION: forcing a failure. [ 886.660320][T13685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.660356][T13685] CPU: 0 UID: 0 PID: 13685 Comm: syz.4.2315 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 886.660382][T13685] Tainted: [L]=SOFTLOCKUP [ 886.660389][T13685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 886.660400][T13685] Call Trace: [ 886.660408][T13685] [ 886.660416][T13685] dump_stack_lvl+0x189/0x250 [ 886.660443][T13685] ? __pfx____ratelimit+0x10/0x10 [ 886.660468][T13685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.660491][T13685] ? __pfx__printk+0x10/0x10 [ 886.660509][T13685] ? __might_fault+0xb0/0x130 [ 886.660543][T13685] should_fail_ex+0x46c/0x600 [ 886.660571][T13685] _copy_from_iter+0x1cd/0x1630 [ 886.660599][T13685] ? __build_skb_around+0x22d/0x3c0 [ 886.660624][T13685] ? __pfx__copy_from_iter+0x10/0x10 [ 886.660644][T13685] ? __alloc_skb+0x2f1/0x430 [ 886.660665][T13685] ? __pfx___alloc_skb+0x10/0x10 [ 886.660683][T13685] ? smack_socket_getpeersec_dgram+0x266/0x430 [ 886.660710][T13685] ? netlink_sendmsg+0x642/0xb30 [ 886.660737][T13685] ? skb_put+0x11b/0x210 [ 886.660760][T13685] netlink_sendmsg+0x6b2/0xb30 [ 886.660791][T13685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.660820][T13685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 886.660842][T13685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.660864][T13685] __sock_sendmsg+0x21c/0x270 [ 886.660892][T13685] ____sys_sendmsg+0x508/0x810 [ 886.660919][T13685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.660947][T13685] ? import_iovec+0x74/0xa0 [ 886.660968][T13685] ___sys_sendmsg+0x21f/0x2a0 [ 886.660990][T13685] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.661016][T13685] ? rcu_is_watching+0x15/0xb0 [ 886.661061][T13685] ? __fget_files+0x2a/0x420 [ 886.661079][T13685] ? __fget_files+0x3a6/0x420 [ 886.661107][T13685] __x64_sys_sendmsg+0x1a1/0x260 [ 886.661126][T13685] ? __might_fault+0xb0/0x130 [ 886.661149][T13685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 886.661181][T13685] ? rcu_is_watching+0x15/0xb0 [ 886.661207][T13685] do_syscall_64+0xfa/0xf80 [ 886.661226][T13685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.661243][T13685] ? clear_bhb_loop+0x60/0xb0 [ 886.661264][T13685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.661281][T13685] RIP: 0033:0x7fa811fbf749 [ 886.661297][T13685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.661313][T13685] RSP: 002b:00007fa81021e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.661333][T13685] RAX: ffffffffffffffda RBX: 00007fa812215fa0 RCX: 00007fa811fbf749 [ 886.661346][T13685] RDX: 0000000020008040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 886.661358][T13685] RBP: 00007fa81021e090 R08: 0000000000000000 R09: 0000000000000000 [ 886.661369][T13685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.661380][T13685] R13: 00007fa812216038 R14: 00007fa812215fa0 R15: 00007ffdde6f3538 [ 886.661411][T13685] [ 887.482481][T13690] Bluetooth: MGMT ver 1.23 [ 887.488451][T13690] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2319'. [ 887.488493][T13690] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2319'. [ 887.488503][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 888.769887][T13700] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 888.769961][T13700] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 894.355924][T13735] FAULT_INJECTION: forcing a failure. [ 894.355924][T13735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.355963][T13735] CPU: 1 UID: 0 PID: 13735 Comm: syz.6.2333 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 894.355988][T13735] Tainted: [L]=SOFTLOCKUP [ 894.355995][T13735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 894.356006][T13735] Call Trace: [ 894.356014][T13735] [ 894.356023][T13735] dump_stack_lvl+0x189/0x250 [ 894.356050][T13735] ? __pfx____ratelimit+0x10/0x10 [ 894.356076][T13735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 894.356098][T13735] ? __pfx__printk+0x10/0x10 [ 894.356117][T13735] ? __might_fault+0xb0/0x130 [ 894.356153][T13735] should_fail_ex+0x46c/0x600 [ 894.356182][T13735] _copy_from_iter+0x1cd/0x1630 [ 894.356212][T13735] ? __build_skb_around+0x22d/0x3c0 [ 894.356238][T13735] ? __pfx__copy_from_iter+0x10/0x10 [ 894.356258][T13735] ? __alloc_skb+0x2f1/0x430 [ 894.356281][T13735] ? __pfx___alloc_skb+0x10/0x10 [ 894.356303][T13735] ? netlink_sendmsg+0x642/0xb30 [ 894.356325][T13735] ? skb_put+0x11b/0x210 [ 894.356349][T13735] netlink_sendmsg+0x6b2/0xb30 [ 894.356382][T13735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.356412][T13735] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 894.356435][T13735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.356458][T13735] __sock_sendmsg+0x21c/0x270 [ 894.356486][T13735] ____sys_sendmsg+0x508/0x810 [ 894.356514][T13735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 894.356545][T13735] ? import_iovec+0x74/0xa0 [ 894.356567][T13735] ___sys_sendmsg+0x21f/0x2a0 [ 894.356591][T13735] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.356652][T13735] ? __fget_files+0x2a/0x420 [ 894.356670][T13735] ? __fget_files+0x3a6/0x420 [ 894.356700][T13735] __x64_sys_sendmsg+0x1a1/0x260 [ 894.356725][T13735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 894.356757][T13735] ? __pfx_ksys_write+0x10/0x10 [ 894.356785][T13735] ? do_syscall_64+0xbe/0xf80 [ 894.356809][T13735] do_syscall_64+0xfa/0xf80 [ 894.356827][T13735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.356855][T13735] ? clear_bhb_loop+0x60/0xb0 [ 894.356877][T13735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.356895][T13735] RIP: 0033:0x7f5c6da6f749 [ 894.356912][T13735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.356928][T13735] RSP: 002b:00007f5c6bcce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.356948][T13735] RAX: ffffffffffffffda RBX: 00007f5c6dcc5fa0 RCX: 00007f5c6da6f749 [ 894.356962][T13735] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 894.356974][T13735] RBP: 00007f5c6bcce090 R08: 0000000000000000 R09: 0000000000000000 [ 894.356987][T13735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.356998][T13735] R13: 00007f5c6dcc6038 R14: 00007f5c6dcc5fa0 R15: 00007fff3b48f378 [ 894.357031][T13735] [ 896.702610][T13737] loop2: detected capacity change from 0 to 7 [ 896.726159][T13737] Dev loop2: unable to read RDB block 7 [ 896.726194][T13737] loop2: AHDI p1 p2 p3 [ 896.726223][T13737] loop2: partition table partially beyond EOD, truncated [ 896.726328][T13737] loop2: p1 start 1818582900 is beyond EOD, truncated [ 896.726347][T13737] loop2: p3 start 335544320 is beyond EOD, truncated [ 899.463814][T13762] /dev/nullb0: Can't open blockdev [ 901.941063][ T5937] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 902.222053][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 902.540707][ T5937] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 902.540908][ T5937] usb 5-1: config 0 has no interface number 0 [ 902.582836][ T5937] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 902.751569][ T5937] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 902.751603][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.751622][ T5937] usb 5-1: Product: syz [ 902.751636][ T5937] usb 5-1: Manufacturer: syz [ 902.751649][ T5937] usb 5-1: SerialNumber: syz [ 902.792075][ T5937] usb 5-1: config 0 descriptor?? [ 902.824113][ T5937] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 902.824148][ T5937] em28xx 5-1:0.132: Video interface 132 found: [ 903.339021][ T5937] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 904.266060][ T5937] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 904.266095][ T5937] em28xx 5-1:0.132: board has no eeprom [ 904.359960][ T5937] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 904.359990][ T5937] em28xx 5-1:0.132: analog set to bulk mode. [ 904.360346][T12644] em28xx 5-1:0.132: Registering V4L2 extension [ 904.454923][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2360'. [ 904.515555][ T7848] usb 5-1: USB disconnect, device number 38 [ 904.517811][ T7848] em28xx 5-1:0.132: Disconnecting em28xx [ 905.864641][T13825] netlink: 'syz.4.2365': attribute type 8 has an invalid length. [ 905.924936][T12644] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 905.924961][T12644] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 905.924974][T12644] em28xx 5-1:0.132: No AC97 audio processor [ 905.927513][T12644] usb 5-1: Decoder not found [ 905.927530][T12644] em28xx 5-1:0.132: failed to create media graph [ 905.927564][T12644] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 905.929305][T12644] em28xx 5-1:0.132: Remote control support is not available for this card. [ 905.929366][ T7848] em28xx 5-1:0.132: Closing input extension [ 905.960073][ T7848] em28xx 5-1:0.132: Freeing device [ 908.756026][ T5937] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 908.919905][ T9059] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 908.940026][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 908.942320][ T5937] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 908.942353][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.947243][ T5937] usb 6-1: config 0 descriptor?? [ 908.983762][ T5937] gspca_main: sunplus-2.14.0 probing 041e:400b [ 909.069855][ T9059] usb 7-1: Using ep0 maxpacket: 32 [ 909.072141][ T9059] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 909.072165][ T9059] usb 7-1: config 0 has no interface number 0 [ 909.072217][ T9059] usb 7-1: config 0 interface 12 has no altsetting 0 [ 909.122323][ T9059] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 909.122406][ T9059] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.122426][ T9059] usb 7-1: Product: syz [ 909.122440][ T9059] usb 7-1: Manufacturer: syz [ 909.122454][ T9059] usb 7-1: SerialNumber: syz [ 909.166405][ T9059] usb 7-1: config 0 descriptor?? [ 910.529987][ T52] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 910.610169][ T5937] gspca_sunplus: reg_w_riv err -71 [ 910.610649][ T5937] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 910.637094][ T5937] usb 6-1: USB disconnect, device number 40 [ 910.699875][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 910.709373][ T52] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 911.298840][ T52] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 911.299084][ T52] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 911.299105][ T52] usb 2-1: Product: syz [ 911.299118][ T52] usb 2-1: Manufacturer: syz [ 911.299132][ T52] usb 2-1: SerialNumber: syz [ 911.542221][ T9059] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 911.542489][ T9059] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 911.542507][ T9059] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 911.542810][ T9059] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 911.595229][ T9059] usb 7-1: USB disconnect, device number 16 [ 911.694730][T13885] FAULT_INJECTION: forcing a failure. [ 911.694730][T13885] name failslab, interval 1, probability 0, space 0, times 0 [ 911.694755][T13885] CPU: 1 UID: 0 PID: 13885 Comm: syz.4.2383 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 911.694770][T13885] Tainted: [L]=SOFTLOCKUP [ 911.694773][T13885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 911.694780][T13885] Call Trace: [ 911.694785][T13885] [ 911.694790][T13885] dump_stack_lvl+0x189/0x250 [ 911.694807][T13885] ? __pfx____ratelimit+0x10/0x10 [ 911.694827][T13885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 911.694839][T13885] ? __pfx__printk+0x10/0x10 [ 911.694848][T13885] ? __kasan_slab_alloc+0x6c/0x80 [ 911.694865][T13885] ? __lock_acquire+0x6b6/0x2cf0 [ 911.694883][T13885] should_fail_ex+0x46c/0x600 [ 911.694899][T13885] ? skb_clone+0x212/0x3a0 [ 911.694912][T13885] should_failslab+0xa8/0x100 [ 911.694922][T13885] ? skb_clone+0x212/0x3a0 [ 911.694933][T13885] kmem_cache_alloc_noprof+0x84/0x6c0 [ 911.694945][T13885] ? __netlink_lookup+0xbd/0x8a0 [ 911.694963][T13885] skb_clone+0x212/0x3a0 [ 911.694977][T13885] __netlink_deliver_tap+0x404/0x850 [ 911.694996][T13885] ? netlink_deliver_tap+0x2e/0x1b0 [ 911.695009][T13885] netlink_deliver_tap+0x19c/0x1b0 [ 911.695022][T13885] netlink_unicast+0x811/0xa10 [ 911.695038][T13885] ? __pfx_netlink_unicast+0x10/0x10 [ 911.695053][T13885] ? netlink_sendmsg+0x642/0xb30 [ 911.695065][T13885] ? skb_put+0x11b/0x210 [ 911.695078][T13885] netlink_sendmsg+0x805/0xb30 [ 911.695095][T13885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 911.695112][T13885] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 911.695125][T13885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 911.695138][T13885] __sock_sendmsg+0x21c/0x270 [ 911.695154][T13885] ____sys_sendmsg+0x534/0x810 [ 911.695169][T13885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 911.695187][T13885] ? import_iovec+0x74/0xa0 [ 911.695199][T13885] ___sys_sendmsg+0x21f/0x2a0 [ 911.695212][T13885] ? __pfx____sys_sendmsg+0x10/0x10 [ 911.695244][T13885] ? __fget_files+0x2a/0x420 [ 911.695254][T13885] ? __fget_files+0x3a6/0x420 [ 911.695270][T13885] __sys_sendmmsg+0x22d/0x430 [ 911.695285][T13885] ? __pfx___sys_sendmmsg+0x10/0x10 [ 911.695311][T13885] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 911.695333][T13885] ? ksys_write+0x230/0x260 [ 911.695348][T13885] ? __pfx_ksys_write+0x10/0x10 [ 911.695364][T13885] __x64_sys_sendmmsg+0xa0/0xc0 [ 911.695378][T13885] do_syscall_64+0xfa/0xf80 [ 911.695389][T13885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.695399][T13885] ? clear_bhb_loop+0x60/0xb0 [ 911.695411][T13885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.695421][T13885] RIP: 0033:0x7fa811fbf749 [ 911.695431][T13885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.695440][T13885] RSP: 002b:00007fa81021e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 911.695451][T13885] RAX: ffffffffffffffda RBX: 00007fa812215fa0 RCX: 00007fa811fbf749 [ 911.695459][T13885] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 911.695466][T13885] RBP: 00007fa81021e090 R08: 0000000000000000 R09: 0000000000000000 [ 911.695472][T13885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.695478][T13885] R13: 00007fa812216038 R14: 00007fa812215fa0 R15: 00007ffdde6f3538 [ 911.695496][T13885] [ 911.754639][ T52] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 911.754739][ T52] visor 2-1:1.0: probe with driver visor failed with error -110 [ 911.817320][T13887] qnx4: unable to read the superblock [ 914.691318][ T5937] usb 2-1: USB disconnect, device number 50 [ 917.866782][T13930] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.2394'. [ 917.882529][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2394'. [ 918.020176][ T5962] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 919.420007][ T5962] usb 2-1: Using ep0 maxpacket: 32 [ 919.423259][ T5962] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 919.423284][ T5962] usb 2-1: config 0 has no interface number 0 [ 919.423336][ T5962] usb 2-1: config 0 interface 12 has no altsetting 0 [ 919.426973][ T5962] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 919.426999][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.427018][ T5962] usb 2-1: Product: syz [ 919.427031][ T5962] usb 2-1: Manufacturer: syz [ 919.427045][ T5962] usb 2-1: SerialNumber: syz [ 919.452735][ T5962] usb 2-1: config 0 descriptor?? [ 921.010538][ T5962] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 921.011684][ T5962] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 921.011703][ T5962] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 921.011799][ T5962] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 921.081990][ T5962] usb 2-1: USB disconnect, device number 51 [ 922.806838][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2398'. [ 923.133897][T13972] FAULT_INJECTION: forcing a failure. [ 923.133897][T13972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.133957][T13972] CPU: 1 UID: 0 PID: 13972 Comm: syz.1.2405 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 923.133984][T13972] Tainted: [L]=SOFTLOCKUP [ 923.133992][T13972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 923.134004][T13972] Call Trace: [ 923.134013][T13972] [ 923.134021][T13972] dump_stack_lvl+0x189/0x250 [ 923.134049][T13972] ? __pfx____ratelimit+0x10/0x10 [ 923.134075][T13972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 923.134098][T13972] ? __pfx__printk+0x10/0x10 [ 923.134130][T13972] should_fail_ex+0x46c/0x600 [ 923.134159][T13972] _copy_to_user+0x31/0xb0 [ 923.134179][T13972] video_usercopy+0xd93/0x13f0 [ 923.134206][T13972] ? irqentry_exit+0x5dd/0x660 [ 923.134227][T13972] ? __pfx___video_do_ioctl+0x10/0x10 [ 923.134246][T13972] ? __pfx_video_usercopy+0x10/0x10 [ 923.134289][T13972] v4l2_ioctl+0x190/0x1e0 [ 923.134309][T13972] ? __pfx_v4l2_ioctl+0x10/0x10 [ 923.134326][T13972] __se_sys_ioctl+0xff/0x170 [ 923.134353][T13972] do_syscall_64+0xfa/0xf80 [ 923.134371][T13972] ? rcu_is_watching+0x15/0xb0 [ 923.134388][T13972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.134406][T13972] ? clear_bhb_loop+0x60/0xb0 [ 923.134428][T13972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.134446][T13972] RIP: 0033:0x7fa844abf749 [ 923.134463][T13972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.134479][T13972] RSP: 002b:00007fa842ce4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 923.134500][T13972] RAX: ffffffffffffffda RBX: 00007fa844d16180 RCX: 00007fa844abf749 [ 923.134514][T13972] RDX: 0000200000000080 RSI: 00000000c0405602 RDI: 0000000000000007 [ 923.134526][T13972] RBP: 00007fa842ce4090 R08: 0000000000000000 R09: 0000000000000000 [ 923.134537][T13972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.134549][T13972] R13: 00007fa844d16218 R14: 00007fa844d16180 R15: 00007ffc85287998 [ 923.134581][T13972] [ 924.442130][T13977] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 924.586814][T13986] geneve2: entered promiscuous mode [ 925.610039][T13985] netlink: 'syz.1.2409': attribute type 12 has an invalid length. [ 925.610056][T13985] netlink: 'syz.1.2409': attribute type 29 has an invalid length. [ 925.610064][T13985] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2409'. [ 925.610090][T13985] netlink: 'syz.1.2409': attribute type 1 has an invalid length. [ 925.610098][T13985] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2409'. [ 928.233290][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2413'. [ 929.354623][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2416'. [ 931.670039][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.670112][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.893317][T14021] geneve3: entered promiscuous mode [ 932.212069][ T9059] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 932.405446][ T9059] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.405470][ T9059] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.406812][ T9059] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 932.406836][ T9059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 932.406854][ T9059] usb 2-1: SerialNumber: syz [ 934.786799][ T9059] usb 2-1: 0:2 : does not exist [ 934.786886][ T9059] usb 2-1: unit 5: unexpected type 0x03 [ 935.415952][ T9059] usb 2-1: USB disconnect, device number 52 [ 937.512839][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 938.207370][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2426'. [ 940.563740][T14092] FAULT_INJECTION: forcing a failure. [ 940.563740][T14092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.563774][T14092] CPU: 0 UID: 0 PID: 14092 Comm: syz.1.2440 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 940.563799][T14092] Tainted: [L]=SOFTLOCKUP [ 940.563807][T14092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 940.563818][T14092] Call Trace: [ 940.563825][T14092] [ 940.563834][T14092] dump_stack_lvl+0x189/0x250 [ 940.563859][T14092] ? __pfx____ratelimit+0x10/0x10 [ 940.563881][T14092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.563901][T14092] ? __pfx__printk+0x10/0x10 [ 940.563917][T14092] ? __might_fault+0xb0/0x130 [ 940.563949][T14092] should_fail_ex+0x46c/0x600 [ 940.563976][T14092] _copy_from_iter+0x1cd/0x1630 [ 940.564004][T14092] ? __build_skb_around+0x22d/0x3c0 [ 940.564030][T14092] ? __pfx__copy_from_iter+0x10/0x10 [ 940.564050][T14092] ? __alloc_skb+0x2f1/0x430 [ 940.564072][T14092] ? __pfx___alloc_skb+0x10/0x10 [ 940.564093][T14092] ? netlink_sendmsg+0x642/0xb30 [ 940.564113][T14092] ? skb_put+0x11b/0x210 [ 940.564137][T14092] netlink_sendmsg+0x6b2/0xb30 [ 940.564168][T14092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.564199][T14092] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 940.564229][T14092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.564252][T14092] __sock_sendmsg+0x21c/0x270 [ 940.564280][T14092] ____sys_sendmsg+0x508/0x810 [ 940.564307][T14092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.564339][T14092] ? import_iovec+0x74/0xa0 [ 940.564360][T14092] ___sys_sendmsg+0x21f/0x2a0 [ 940.564383][T14092] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.564454][T14092] ? __fget_files+0x2a/0x420 [ 940.564472][T14092] ? __fget_files+0x3a6/0x420 [ 940.564502][T14092] __x64_sys_sendmsg+0x1a1/0x260 [ 940.564526][T14092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 940.564558][T14092] ? __pfx_ksys_write+0x10/0x10 [ 940.564586][T14092] ? do_syscall_64+0xbe/0xf80 [ 940.564608][T14092] do_syscall_64+0xfa/0xf80 [ 940.564627][T14092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.564645][T14092] ? clear_bhb_loop+0x60/0xb0 [ 940.564667][T14092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.564684][T14092] RIP: 0033:0x7fa844abf749 [ 940.564701][T14092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.564716][T14092] RSP: 002b:00007fa842d05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.564736][T14092] RAX: ffffffffffffffda RBX: 00007fa844d16090 RCX: 00007fa844abf749 [ 940.564750][T14092] RDX: 0000000000000004 RSI: 0000200000000600 RDI: 0000000000000004 [ 940.564763][T14092] RBP: 00007fa842d05090 R08: 0000000000000000 R09: 0000000000000000 [ 940.564774][T14092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.564786][T14092] R13: 00007fa844d16128 R14: 00007fa844d16090 R15: 00007ffc85287998 [ 940.564818][T14092] [ 940.580742][T14080] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 941.070845][T14094] FAULT_INJECTION: forcing a failure. [ 941.070845][T14094] name failslab, interval 1, probability 0, space 0, times 0 [ 941.070878][T14094] CPU: 0 UID: 0 PID: 14094 Comm: syz.5.2438 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 941.070904][T14094] Tainted: [L]=SOFTLOCKUP [ 941.070911][T14094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 941.070922][T14094] Call Trace: [ 941.070929][T14094] [ 941.070935][T14094] dump_stack_lvl+0x189/0x250 [ 941.070961][T14094] ? __pfx____ratelimit+0x10/0x10 [ 941.070985][T14094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 941.071004][T14094] ? __pfx__printk+0x10/0x10 [ 941.071027][T14094] ? __pfx___might_resched+0x10/0x10 [ 941.071048][T14094] should_fail_ex+0x46c/0x600 [ 941.071074][T14094] ? __alloc_skb+0x255/0x430 [ 941.071093][T14094] should_failslab+0xa8/0x100 [ 941.071111][T14094] ? __alloc_skb+0x255/0x430 [ 941.071126][T14094] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 941.071158][T14094] __alloc_skb+0x255/0x430 [ 941.071187][T14094] ? __pfx___alloc_skb+0x10/0x10 [ 941.071209][T14094] ? netlink_autobind+0xdb/0x300 [ 941.071230][T14094] ? netlink_autobind+0x2c2/0x300 [ 941.071255][T14094] netlink_sendmsg+0x5c6/0xb30 [ 941.071285][T14094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.071313][T14094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 941.071334][T14094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 941.071355][T14094] __sock_sendmsg+0x21c/0x270 [ 941.071383][T14094] ____sys_sendmsg+0x508/0x810 [ 941.071410][T14094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 941.071439][T14094] ? import_iovec+0x74/0xa0 [ 941.071461][T14094] ___sys_sendmsg+0x21f/0x2a0 [ 941.071484][T14094] ? __pfx____sys_sendmsg+0x10/0x10 [ 941.071542][T14094] ? __fget_files+0x2a/0x420 [ 941.071560][T14094] ? __fget_files+0x3a6/0x420 [ 941.071602][T14094] __x64_sys_sendmsg+0x1a1/0x260 [ 941.071627][T14094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 941.071656][T14094] ? __pfx_ksys_write+0x10/0x10 [ 941.071684][T14094] ? do_syscall_64+0xbe/0xf80 [ 941.071705][T14094] do_syscall_64+0xfa/0xf80 [ 941.071724][T14094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.071742][T14094] ? clear_bhb_loop+0x60/0xb0 [ 941.071764][T14094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.071781][T14094] RIP: 0033:0x7fb6efb1f749 [ 941.071799][T14094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.071814][T14094] RSP: 002b:00007fb6edd3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.071835][T14094] RAX: ffffffffffffffda RBX: 00007fb6efd76180 RCX: 00007fb6efb1f749 [ 941.071847][T14094] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 941.071859][T14094] RBP: 00007fb6edd3c090 R08: 0000000000000000 R09: 0000000000000000 [ 941.071869][T14094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.071880][T14094] R13: 00007fb6efd76218 R14: 00007fb6efd76180 R15: 00007ffff54628e8 [ 941.071912][T14094] [ 941.416749][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2437'. [ 941.416788][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2437'. [ 941.714061][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 941.874996][ T5120] Bluetooth: hci3: unexpected event for opcode 0x202a [ 942.089547][T14103] FAULT_INJECTION: forcing a failure. [ 942.089547][T14103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.089583][T14103] CPU: 1 UID: 0 PID: 14103 Comm: syz.5.2444 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 942.089608][T14103] Tainted: [L]=SOFTLOCKUP [ 942.089615][T14103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 942.089626][T14103] Call Trace: [ 942.089634][T14103] [ 942.089642][T14103] dump_stack_lvl+0x189/0x250 [ 942.089669][T14103] ? __pfx____ratelimit+0x10/0x10 [ 942.089694][T14103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 942.089718][T14103] ? __pfx__printk+0x10/0x10 [ 942.089735][T14103] ? __might_fault+0xb0/0x130 [ 942.089765][T14103] should_fail_ex+0x46c/0x600 [ 942.089792][T14103] _copy_from_user+0x2d/0xb0 [ 942.089811][T14103] __se_sys_mount+0x18b/0x410 [ 942.089835][T14103] ? __pfx___se_sys_mount+0x10/0x10 [ 942.089857][T14103] ? do_syscall_64+0xbe/0xf80 [ 942.089873][T14103] ? __x64_sys_mount+0x20/0xc0 [ 942.089893][T14103] do_syscall_64+0xfa/0xf80 [ 942.089910][T14103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.089928][T14103] ? clear_bhb_loop+0x60/0xb0 [ 942.089949][T14103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.089966][T14103] RIP: 0033:0x7fb6efb1f749 [ 942.089982][T14103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.089998][T14103] RSP: 002b:00007fb6edd7e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 942.090017][T14103] RAX: ffffffffffffffda RBX: 00007fb6efd75fa0 RCX: 00007fb6efb1f749 [ 942.090030][T14103] RDX: 0000200000000200 RSI: 0000200000000280 RDI: 0000000000000000 [ 942.090043][T14103] RBP: 00007fb6edd7e090 R08: 0000200000000340 R09: 0000000000000000 [ 942.090054][T14103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.090065][T14103] R13: 00007fb6efd76038 R14: 00007fb6efd75fa0 R15: 00007ffff54628e8 [ 942.090107][T14103] [ 942.640802][ T52] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 943.339929][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 943.344335][ T52] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 943.344362][ T52] usb 5-1: config 0 has no interface number 0 [ 943.344407][ T52] usb 5-1: config 0 interface 35 altsetting 0 has an endpoint descriptor with address 0x7A, changing to 0xA [ 943.344432][ T52] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xA has an invalid bInterval 70, changing to 10 [ 943.344458][ T52] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 943.411087][ T52] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=3e.04 [ 943.411288][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.411309][ T52] usb 5-1: Product: syz [ 943.411322][ T52] usb 5-1: Manufacturer: syz [ 943.411336][ T52] usb 5-1: SerialNumber: syz [ 943.477286][ T52] usb 5-1: config 0 descriptor?? [ 943.745202][T12644] usb 5-1: USB disconnect, device number 39 [ 944.759065][T14141] FAULT_INJECTION: forcing a failure. [ 944.759065][T14141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.759093][T14141] CPU: 1 UID: 0 PID: 14141 Comm: syz.4.2457 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 944.759118][T14141] Tainted: [L]=SOFTLOCKUP [ 944.759125][T14141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 944.759136][T14141] Call Trace: [ 944.759145][T14141] [ 944.759153][T14141] dump_stack_lvl+0x189/0x250 [ 944.759180][T14141] ? __pfx____ratelimit+0x10/0x10 [ 944.759206][T14141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 944.759228][T14141] ? __pfx__printk+0x10/0x10 [ 944.759262][T14141] should_fail_ex+0x46c/0x600 [ 944.759292][T14141] _copy_to_user+0x31/0xb0 [ 944.759313][T14141] simple_read_from_buffer+0xe1/0x170 [ 944.759337][T14141] proc_fail_nth_read+0x1b6/0x220 [ 944.759365][T14141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 944.759393][T14141] ? rw_verify_area+0x2ac/0x4e0 [ 944.759416][T14141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 944.759458][T14141] vfs_read+0x206/0xa30 [ 944.759497][T14141] ? __pfx_vfs_read+0x10/0x10 [ 944.759516][T14141] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 944.759548][T14141] ? mutex_lock_nested+0x154/0x1d0 [ 944.759568][T14141] ? fdget_pos+0x253/0x320 [ 944.759596][T14141] ksys_read+0x14b/0x260 [ 944.759621][T14141] ? __pfx_ksys_read+0x10/0x10 [ 944.759648][T14141] ? do_syscall_64+0xbe/0xf80 [ 944.759670][T14141] do_syscall_64+0xfa/0xf80 [ 944.759688][T14141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.759707][T14141] ? clear_bhb_loop+0x60/0xb0 [ 944.759731][T14141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.759745][T14141] RIP: 0033:0x7fa811fbe15c [ 944.759760][T14141] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 944.759774][T14141] RSP: 002b:00007fa81021e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 944.759793][T14141] RAX: ffffffffffffffda RBX: 00007fa812215fa0 RCX: 00007fa811fbe15c [ 944.759805][T14141] RDX: 000000000000000f RSI: 00007fa81021e0a0 RDI: 0000000000000004 [ 944.759815][T14141] RBP: 00007fa81021e090 R08: 0000000000000000 R09: 0000000000000000 [ 944.759826][T14141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.759836][T14141] R13: 00007fa812216038 R14: 00007fa812215fa0 R15: 00007ffdde6f3538 [ 944.759867][T14141] [ 945.430124][ T5884] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 945.510126][ T9059] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 945.609869][ T5884] usb 7-1: Using ep0 maxpacket: 32 [ 945.612942][ T5884] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 945.612969][ T5884] usb 7-1: config 0 has no interface number 0 [ 945.613000][ T5884] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 945.618285][ T5884] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 945.618306][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.618317][ T5884] usb 7-1: Product: syz [ 945.618324][ T5884] usb 7-1: Manufacturer: syz [ 945.618332][ T5884] usb 7-1: SerialNumber: syz [ 945.679857][ T9059] usb 5-1: Using ep0 maxpacket: 32 [ 945.689122][ T9059] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 945.689148][ T9059] usb 5-1: config 0 has no interface number 0 [ 945.689220][ T9059] usb 5-1: config 0 interface 12 has no altsetting 0 [ 945.718865][ T9059] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 945.718892][ T9059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.718902][ T9059] usb 5-1: Product: syz [ 945.718910][ T9059] usb 5-1: Manufacturer: syz [ 945.718917][ T9059] usb 5-1: SerialNumber: syz [ 945.731218][ T5884] usb 7-1: config 0 descriptor?? [ 945.767794][ T9059] usb 5-1: config 0 descriptor?? [ 945.793005][ T5884] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 945.793028][ T5884] em28xx 7-1:0.132: Video interface 132 found: [ 946.147673][ T5884] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 946.767294][ T5884] em28xx 7-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 946.767365][ T5884] em28xx 7-1:0.132: failed to read eeprom (err=-5) [ 946.767409][ T5884] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 946.839886][ T5884] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 946.839915][ T5884] em28xx 7-1:0.132: analog set to bulk mode. [ 946.840426][ T5937] em28xx 7-1:0.132: Registering V4L2 extension [ 946.944204][ T5884] usb 7-1: USB disconnect, device number 17 [ 946.974034][ T5884] em28xx 7-1:0.132: Disconnecting em28xx [ 947.223966][ T9059] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 947.224026][ T9059] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 947.224042][ T9059] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 947.224138][ T9059] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 947.330034][ T9059] usb 5-1: USB disconnect, device number 40 [ 947.596074][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2464'. [ 947.596093][T14167] openvswitch: netlink: Message has -1 unknown bytes. [ 948.722754][ T5937] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 948.722779][ T5937] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 948.722792][ T5937] em28xx 7-1:0.132: No AC97 audio processor [ 948.774150][ T5937] usb 7-1: Decoder not found [ 948.774171][ T5937] em28xx 7-1:0.132: failed to create media graph [ 948.774204][ T5937] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 948.812879][ T5937] em28xx 7-1:0.132: Remote control support is not available for this card. [ 948.812937][ T5884] em28xx 7-1:0.132: Closing input extension [ 948.817973][ T5884] em28xx 7-1:0.132: Freeing device [ 948.890278][T14180] FAULT_INJECTION: forcing a failure. [ 948.890278][T14180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.890302][T14180] CPU: 0 UID: 0 PID: 14180 Comm: syz.5.2468 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 948.890317][T14180] Tainted: [L]=SOFTLOCKUP [ 948.890321][T14180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 948.890327][T14180] Call Trace: [ 948.890331][T14180] [ 948.890336][T14180] dump_stack_lvl+0x189/0x250 [ 948.890362][T14180] ? __pfx____ratelimit+0x10/0x10 [ 948.890377][T14180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 948.890389][T14180] ? __pfx__printk+0x10/0x10 [ 948.890400][T14180] ? __might_fault+0xb0/0x130 [ 948.890419][T14180] should_fail_ex+0x46c/0x600 [ 948.890436][T14180] _copy_from_iter+0x1cd/0x1630 [ 948.890452][T14180] ? __build_skb_around+0x22d/0x3c0 [ 948.890466][T14180] ? __pfx__copy_from_iter+0x10/0x10 [ 948.890478][T14180] ? __alloc_skb+0x2f1/0x430 [ 948.890489][T14180] ? __pfx___alloc_skb+0x10/0x10 [ 948.890501][T14180] ? netlink_sendmsg+0x642/0xb30 [ 948.890513][T14180] ? skb_put+0x11b/0x210 [ 948.890526][T14180] netlink_sendmsg+0x6b2/0xb30 [ 948.890543][T14180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.890559][T14180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 948.890572][T14180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.890585][T14180] __sock_sendmsg+0x21c/0x270 [ 948.890601][T14180] ____sys_sendmsg+0x508/0x810 [ 948.890616][T14180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.890633][T14180] ? import_iovec+0x74/0xa0 [ 948.890644][T14180] ___sys_sendmsg+0x21f/0x2a0 [ 948.890657][T14180] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.890688][T14180] ? __fget_files+0x2a/0x420 [ 948.890698][T14180] ? __fget_files+0x3a6/0x420 [ 948.890714][T14180] __x64_sys_sendmsg+0x1a1/0x260 [ 948.890727][T14180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 948.890744][T14180] ? __pfx_ksys_write+0x10/0x10 [ 948.890760][T14180] ? do_syscall_64+0xbe/0xf80 [ 948.890772][T14180] do_syscall_64+0xfa/0xf80 [ 948.890782][T14180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.890792][T14180] ? clear_bhb_loop+0x60/0xb0 [ 948.890804][T14180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.890814][T14180] RIP: 0033:0x7fb6efb1f749 [ 948.890824][T14180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.890833][T14180] RSP: 002b:00007fb6edd7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.890845][T14180] RAX: ffffffffffffffda RBX: 00007fb6efd75fa0 RCX: 00007fb6efb1f749 [ 948.890852][T14180] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 948.890859][T14180] RBP: 00007fb6edd7e090 R08: 0000000000000000 R09: 0000000000000000 [ 948.890865][T14180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.890871][T14180] R13: 00007fb6efd76038 R14: 00007fb6efd75fa0 R15: 00007ffff54628e8 [ 948.890888][T14180] [ 948.971590][T14183] sctp: [Deprecated]: syz.0.2470 (pid 14183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 948.971590][T14183] Use struct sctp_sack_info instead [ 949.231362][T12282] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 949.418615][T12282] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 949.418641][T12282] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 949.418659][T12282] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 949.443518][T12282] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 949.443547][T12282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.443565][T12282] usb 5-1: Product: syz [ 949.443578][T12282] usb 5-1: Manufacturer: syz [ 949.443591][T12282] usb 5-1: SerialNumber: syz [ 950.907610][T14214] tmpfs: Bad value for 'mpol' [ 950.981143][ T9059] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 951.017812][T14216] FAULT_INJECTION: forcing a failure. [ 951.017812][T14216] name failslab, interval 1, probability 0, space 0, times 0 [ 951.017856][T14216] CPU: 1 UID: 0 PID: 14216 Comm: syz.6.2481 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 951.017882][T14216] Tainted: [L]=SOFTLOCKUP [ 951.017889][T14216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 951.017900][T14216] Call Trace: [ 951.017908][T14216] [ 951.017917][T14216] dump_stack_lvl+0x189/0x250 [ 951.017944][T14216] ? __pfx____ratelimit+0x10/0x10 [ 951.017969][T14216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 951.017991][T14216] ? __pfx__printk+0x10/0x10 [ 951.018027][T14216] should_fail_ex+0x46c/0x600 [ 951.018054][T14216] ? dst_alloc+0x105/0x170 [ 951.018076][T14216] should_failslab+0xa8/0x100 [ 951.018095][T14216] ? dst_alloc+0x105/0x170 [ 951.018114][T14216] kmem_cache_alloc_noprof+0x84/0x6c0 [ 951.018146][T14216] dst_alloc+0x105/0x170 [ 951.018173][T14216] ip_route_input_rcu+0x1ec2/0x30d0 [ 951.018207][T14216] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 951.018226][T14216] ? inet_ehashfn+0x8d/0x210 [ 951.018274][T14216] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 951.018299][T14216] ? ip_route_input_noref+0x98/0x250 [ 951.018319][T14216] ip_route_input_noref+0x167/0x250 [ 951.018340][T14216] ? __pfx_ip_route_input_noref+0x10/0x10 [ 951.018366][T14216] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 951.018387][T14216] ? tcp_v4_early_demux+0x5c1/0x9a0 [ 951.018416][T14216] ip_rcv_finish_core+0x5af/0x1c00 [ 951.018452][T14216] ip_rcv_finish+0x14c/0x2f0 [ 951.018477][T14216] NF_HOOK+0x30c/0x3a0 [ 951.018501][T14216] ? __pfx_ip_rcv_finish+0x10/0x10 [ 951.018521][T14216] ? NF_HOOK+0x9a/0x3a0 [ 951.018541][T14216] ? __pfx_NF_HOOK+0x10/0x10 [ 951.018563][T14216] ? ip_rcv_core+0x7f7/0xd00 [ 951.018587][T14216] ? __pfx_ip_rcv_finish+0x10/0x10 [ 951.018618][T14216] ? __pfx_ip_rcv+0x10/0x10 [ 951.018638][T14216] __netif_receive_skb+0x143/0x380 [ 951.018656][T14216] ? __pfx_write_ibpb+0x8/0x10 [ 951.018672][T14216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.018695][T14216] ? netif_receive_skb+0x105/0x750 [ 951.018718][T14216] netif_receive_skb+0x1bb/0x750 [ 951.018746][T14216] ? __pfx_netif_receive_skb+0x10/0x10 [ 951.018787][T14216] ? __lock_acquire+0x6b6/0x2cf0 [ 951.018810][T14216] ? tun_rx_batched+0x166/0x730 [ 951.018834][T14216] tun_rx_batched+0x1bf/0x730 [ 951.018867][T14216] ? __pfx_tun_rx_batched+0x10/0x10 [ 951.018884][T14216] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 951.018904][T14216] ? lockdep_hardirqs_on+0x98/0x140 [ 951.018933][T14216] ? tun_get_user+0x266d/0x3de0 [ 951.018964][T14216] ? tun_get_user+0x266d/0x3de0 [ 951.018985][T14216] tun_get_user+0x2abd/0x3de0 [ 951.019010][T14216] ? tun_get_user+0x6fc/0x3de0 [ 951.019046][T14216] ? __pfx_tun_get_user+0x10/0x10 [ 951.019069][T14216] ? __lock_acquire+0x6b6/0x2cf0 [ 951.019093][T14216] ? kstrtoull+0x12f/0x1d0 [ 951.019124][T14216] ? ref_tracker_alloc+0x2fe/0x450 [ 951.019151][T14216] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 951.019180][T14216] ? tun_get+0x1c/0x2f0 [ 951.019206][T14216] ? tun_get+0x1c/0x2f0 [ 951.019227][T14216] ? tun_get+0x1c/0x2f0 [ 951.019252][T14216] tun_chr_write_iter+0x119/0x200 [ 951.019277][T14216] vfs_write+0x5d5/0xb40 [ 951.019301][T14216] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 951.019318][T14216] ? __pfx_vfs_write+0x10/0x10 [ 951.019345][T14216] ? __fget_files+0x2a/0x420 [ 951.019368][T14216] ksys_write+0x14b/0x260 [ 951.019388][T14216] ? __pfx_ksys_write+0x10/0x10 [ 951.019408][T14216] ? do_syscall_64+0xbe/0xf80 [ 951.019425][T14216] do_syscall_64+0xfa/0xf80 [ 951.019439][T14216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.019452][T14216] ? clear_bhb_loop+0x60/0xb0 [ 951.019469][T14216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.019483][T14216] RIP: 0033:0x7f5c6da6e1ff [ 951.019497][T14216] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 951.019509][T14216] RSP: 002b:00007f5c6bcce000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 951.019525][T14216] RAX: ffffffffffffffda RBX: 00007f5c6dcc5fa0 RCX: 00007f5c6da6e1ff [ 951.019535][T14216] RDX: 0000000000000036 RSI: 0000200000000140 RDI: 00000000000000c8 [ 951.019544][T14216] RBP: 00007f5c6bcce090 R08: 0000000000000000 R09: 0000000000000000 [ 951.019553][T14216] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 951.019561][T14216] R13: 00007f5c6dcc6038 R14: 00007f5c6dcc5fa0 R15: 00007fff3b48f378 [ 951.019587][T14216] [ 951.114029][ T9059] usb 6-1: device descriptor read/64, error -71 [ 951.479888][ T9059] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 951.609863][ T9059] usb 6-1: device descriptor read/64, error -71 [ 951.720863][ T9059] usb usb6-port1: attempt power cycle [ 951.970755][T12282] usb 5-1: 0:2 : does not exist [ 952.027836][T12282] usb 5-1: USB disconnect, device number 41 [ 952.070088][ T9059] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 952.090818][ T5876] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 952.108430][ T9059] usb 6-1: device descriptor read/8, error -71 [ 952.231029][T14226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2484'. [ 952.271057][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 952.285869][ T5876] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 952.285902][ T5876] usb 2-1: config 0 has no interface number 0 [ 952.285951][ T5876] usb 2-1: config 0 interface 12 has no altsetting 0 [ 952.293882][ T5876] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 952.293917][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.293936][ T5876] usb 2-1: Product: syz [ 952.293949][ T5876] usb 2-1: Manufacturer: syz [ 952.293962][ T5876] usb 2-1: SerialNumber: syz [ 952.307434][ T5876] usb 2-1: config 0 descriptor?? [ 952.349890][ T9059] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 952.372597][ T9059] usb 6-1: device descriptor read/8, error -71 [ 952.484077][ T9059] usb usb6-port1: unable to enumerate USB device [ 953.093344][T14238] FAULT_INJECTION: forcing a failure. [ 953.093344][T14238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.093377][T14238] CPU: 1 UID: 0 PID: 14238 Comm: syz.4.2489 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 953.093392][T14238] Tainted: [L]=SOFTLOCKUP [ 953.093396][T14238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 953.093403][T14238] Call Trace: [ 953.093408][T14238] [ 953.093413][T14238] dump_stack_lvl+0x189/0x250 [ 953.093439][T14238] ? __pfx____ratelimit+0x10/0x10 [ 953.093464][T14238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 953.093486][T14238] ? __pfx__printk+0x10/0x10 [ 953.093504][T14238] ? __might_fault+0xb0/0x130 [ 953.093538][T14238] should_fail_ex+0x46c/0x600 [ 953.093567][T14238] _copy_from_iter+0x1cd/0x1630 [ 953.093603][T14238] ? __build_skb_around+0x22d/0x3c0 [ 953.093628][T14238] ? __pfx__copy_from_iter+0x10/0x10 [ 953.093649][T14238] ? __alloc_skb+0x2f1/0x430 [ 953.093670][T14238] ? __pfx___alloc_skb+0x10/0x10 [ 953.093691][T14238] ? netlink_sendmsg+0x642/0xb30 [ 953.093712][T14238] ? skb_put+0x11b/0x210 [ 953.093735][T14238] netlink_sendmsg+0x6b2/0xb30 [ 953.093765][T14238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.093795][T14238] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 953.093818][T14238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 953.093840][T14238] __sock_sendmsg+0x21c/0x270 [ 953.093869][T14238] ____sys_sendmsg+0x508/0x810 [ 953.093896][T14238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 953.093926][T14238] ? import_iovec+0x74/0xa0 [ 953.093946][T14238] ___sys_sendmsg+0x21f/0x2a0 [ 953.093970][T14238] ? __pfx____sys_sendmsg+0x10/0x10 [ 953.094027][T14238] ? __fget_files+0x2a/0x420 [ 953.094046][T14238] ? __fget_files+0x3a6/0x420 [ 953.094075][T14238] __x64_sys_sendmsg+0x1a1/0x260 [ 953.094099][T14238] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 953.094129][T14238] ? __pfx_ksys_write+0x10/0x10 [ 953.094156][T14238] ? do_syscall_64+0xbe/0xf80 [ 953.094178][T14238] do_syscall_64+0xfa/0xf80 [ 953.094197][T14238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.094216][T14238] ? clear_bhb_loop+0x60/0xb0 [ 953.094238][T14238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.094256][T14238] RIP: 0033:0x7fa811fbf749 [ 953.094273][T14238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.094290][T14238] RSP: 002b:00007fa81021e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.094310][T14238] RAX: ffffffffffffffda RBX: 00007fa812215fa0 RCX: 00007fa811fbf749 [ 953.094323][T14238] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 953.094335][T14238] RBP: 00007fa81021e090 R08: 0000000000000000 R09: 0000000000000000 [ 953.094346][T14238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.094358][T14238] R13: 00007fa812216038 R14: 00007fa812215fa0 R15: 00007ffdde6f3538 [ 953.094389][T14238] [ 953.579077][ T5876] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 953.579132][ T5876] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 953.579148][ T5876] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 953.579239][ T5876] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 953.627906][ T5876] usb 2-1: USB disconnect, device number 53 [ 955.610792][T14264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2496'. [ 955.686745][T14271] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 959.263319][T14289] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 959.263376][T14289] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 959.640295][T14299] FAULT_INJECTION: forcing a failure. [ 959.640295][T14299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.640326][T14299] CPU: 0 UID: 0 PID: 14299 Comm: syz.6.2510 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 959.640346][T14299] Tainted: [L]=SOFTLOCKUP [ 959.640351][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 959.640360][T14299] Call Trace: [ 959.640367][T14299] [ 959.640373][T14299] dump_stack_lvl+0x189/0x250 [ 959.640395][T14299] ? __pfx____ratelimit+0x10/0x10 [ 959.640415][T14299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 959.640431][T14299] ? __pfx__printk+0x10/0x10 [ 959.640446][T14299] ? __might_fault+0xb0/0x130 [ 959.640473][T14299] should_fail_ex+0x46c/0x600 [ 959.640494][T14299] _copy_from_user+0x2d/0xb0 [ 959.640509][T14299] memdup_user+0x5e/0xd0 [ 959.640524][T14299] strndup_user+0x68/0xd0 [ 959.640538][T14299] __se_sys_mount+0xdf/0x410 [ 959.640553][T14299] ? ksys_write+0x230/0x260 [ 959.640572][T14299] ? __pfx___se_sys_mount+0x10/0x10 [ 959.640589][T14299] ? do_syscall_64+0xbe/0xf80 [ 959.640602][T14299] ? __x64_sys_mount+0x20/0xc0 [ 959.640617][T14299] do_syscall_64+0xfa/0xf80 [ 959.640630][T14299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.640644][T14299] ? clear_bhb_loop+0x60/0xb0 [ 959.640661][T14299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.640674][T14299] RIP: 0033:0x7f5c6da6f749 [ 959.640688][T14299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.640700][T14299] RSP: 002b:00007f5c6bcad038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 959.640716][T14299] RAX: ffffffffffffffda RBX: 00007f5c6dcc6090 RCX: 00007f5c6da6f749 [ 959.640727][T14299] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000000 [ 959.640736][T14299] RBP: 00007f5c6bcad090 R08: 0000000000000000 R09: 0000000000000000 [ 959.640744][T14299] R10: 0000000000210818 R11: 0000000000000246 R12: 0000000000000001 [ 959.640753][T14299] R13: 00007f5c6dcc6128 R14: 00007f5c6dcc6090 R15: 00007fff3b48f378 [ 959.640776][T14299] [ 963.472878][T14333] FAULT_INJECTION: forcing a failure. [ 963.472878][T14333] name failslab, interval 1, probability 0, space 0, times 0 [ 963.472916][T14333] CPU: 1 UID: 0 PID: 14333 Comm: syz.5.2517 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 963.472942][T14333] Tainted: [L]=SOFTLOCKUP [ 963.472949][T14333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 963.472960][T14333] Call Trace: [ 963.472968][T14333] [ 963.472978][T14333] dump_stack_lvl+0x189/0x250 [ 963.473006][T14333] ? __pfx____ratelimit+0x10/0x10 [ 963.473033][T14333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 963.473056][T14333] ? __pfx__printk+0x10/0x10 [ 963.473072][T14333] ? do_raw_spin_lock+0x121/0x290 [ 963.473108][T14333] should_fail_ex+0x46c/0x600 [ 963.473136][T14333] ? __alloc_skb+0x255/0x430 [ 963.473156][T14333] should_failslab+0xa8/0x100 [ 963.473176][T14333] ? __alloc_skb+0x255/0x430 [ 963.473192][T14333] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 963.473215][T14333] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 963.473245][T14333] __alloc_skb+0x255/0x430 [ 963.473264][T14333] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 963.473285][T14333] ? __pfx___alloc_skb+0x10/0x10 [ 963.473319][T14333] tipc_buf_acquire+0x2b/0xe0 [ 963.473344][T14333] tipc_named_publish+0x2c6/0x850 [ 963.473369][T14333] ? tipc_named_publish+0x184/0x850 [ 963.473397][T14333] tipc_nametbl_publish+0x10f/0x210 [ 963.473416][T14333] ? tipc_nametbl_publish+0x76/0x210 [ 963.473435][T14333] tipc_sk_publish+0x1c3/0x450 [ 963.473455][T14333] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 963.473482][T14333] ? rt_spin_unlock+0x150/0x200 [ 963.473506][T14333] ? __pfx_tipc_sk_publish+0x10/0x10 [ 963.473527][T14333] ? rt_spin_unlock+0x161/0x200 [ 963.473549][T14333] ? lock_sock_nested+0x5f/0x130 [ 963.473574][T14333] ? lock_sock_nested+0xdd/0x130 [ 963.473602][T14333] tipc_sk_bind+0x221/0x300 [ 963.473628][T14333] __sys_bind+0x2cc/0x3e0 [ 963.473651][T14333] ? __pfx___sys_bind+0x10/0x10 [ 963.473685][T14333] ? __pfx_ksys_write+0x10/0x10 [ 963.473715][T14333] __x64_sys_bind+0x7a/0x90 [ 963.473735][T14333] do_syscall_64+0xfa/0xf80 [ 963.473755][T14333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.473774][T14333] ? clear_bhb_loop+0x60/0xb0 [ 963.473797][T14333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.473815][T14333] RIP: 0033:0x7fb6efb1f749 [ 963.473832][T14333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 963.473849][T14333] RSP: 002b:00007fb6edd7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 963.473869][T14333] RAX: ffffffffffffffda RBX: 00007fb6efd75fa0 RCX: 00007fb6efb1f749 [ 963.473883][T14333] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000005 [ 963.473896][T14333] RBP: 00007fb6edd7e090 R08: 0000000000000000 R09: 0000000000000000 [ 963.473908][T14333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.473919][T14333] R13: 00007fb6efd76038 R14: 00007fb6efd75fa0 R15: 00007ffff54628e8 [ 963.473955][T14333] [ 963.473963][T14333] tipc: Publication distribution failure [ 964.710188][T14344] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 965.895345][T14353] overlay: ./file1 is not a directory [ 966.481912][ T52] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 967.139892][ T52] usb 5-1: device descriptor read/64, error -71 [ 967.379882][ T52] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 967.509882][ T52] usb 5-1: device descriptor read/64, error -71 [ 967.511616][T14378] FAULT_INJECTION: forcing a failure. [ 967.511616][T14378] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 967.511652][T14378] CPU: 0 UID: 0 PID: 14378 Comm: syz.6.2531 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 967.511678][T14378] Tainted: [L]=SOFTLOCKUP [ 967.511685][T14378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 967.511697][T14378] Call Trace: [ 967.511705][T14378] [ 967.511714][T14378] dump_stack_lvl+0x189/0x250 [ 967.511742][T14378] ? __pfx____ratelimit+0x10/0x10 [ 967.511767][T14378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 967.511790][T14378] ? __pfx__printk+0x10/0x10 [ 967.511811][T14378] ? fs_reclaim_acquire+0x7d/0x100 [ 967.511838][T14378] should_fail_ex+0x46c/0x600 [ 967.511868][T14378] prepare_alloc_pages+0x22b/0x6c0 [ 967.511895][T14378] __alloc_frozen_pages_noprof+0x123/0x370 [ 967.511919][T14378] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 967.511937][T14378] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 967.511963][T14378] ? policy_nodemask+0x27c/0x720 [ 967.511988][T14378] alloc_pages_mpol+0xd1/0x380 [ 967.512011][T14378] vma_alloc_folio_noprof+0xe4/0x280 [ 967.512033][T14378] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 967.512156][T14378] ? ___pte_offset_map+0x29/0x200 [ 967.512187][T14378] folio_prealloc+0x30/0x180 [ 967.512216][T14378] do_pte_missing+0x86a/0x27a0 [ 967.512245][T14378] ? handle_mm_fault+0xd1/0x1330 [ 967.512271][T14378] ? handle_mm_fault+0xd1/0x1330 [ 967.512293][T14378] handle_mm_fault+0xcc1/0x1330 [ 967.512326][T14378] ? handle_mm_fault+0xd1/0x1330 [ 967.512351][T14378] ? __pfx_handle_mm_fault+0x10/0x10 [ 967.512407][T14378] ? lock_mm_and_find_vma+0x9c/0x300 [ 967.512428][T14378] do_user_addr_fault+0x764/0x1380 [ 967.512469][T14378] exc_page_fault+0x82/0x100 [ 967.512491][T14378] asm_exc_page_fault+0x26/0x30 [ 967.512509][T14378] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 967.512532][T14378] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff 23 05 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 967.512549][T14378] RSP: 0018:ffffc9000d3ffc10 EFLAGS: 00050202 [ 967.512567][T14378] RAX: ffffffff847ea301 RBX: 0000000000018ff0 RCX: 00000000000186f0 [ 967.512587][T14378] RDX: 0000000000000000 RSI: ffffc900044d9900 RDI: 000020000001c000 [ 967.512604][T14378] RBP: ffffc900044d9000 R08: ffffc900044f1fef R09: 1ffff9200089e3fd [ 967.512618][T14378] R10: dffffc0000000000 R11: fffff5200089e3fe R12: 00002000000346f0 [ 967.512632][T14378] R13: 00007ffffffff000 R14: ffffc900044d9000 R15: 000020000001b700 [ 967.512655][T14378] ? _copy_to_user+0x21/0xb0 [ 967.512681][T14378] _copy_to_user+0x8a/0xb0 [ 967.512701][T14378] fb_sys_read+0x211/0x340 [ 967.512725][T14378] ? __pfx_fb_read+0x10/0x10 [ 967.512747][T14378] vfs_read+0x206/0xa30 [ 967.512783][T14378] ? __pfx_vfs_read+0x10/0x10 [ 967.512808][T14378] ? __fget_files+0x2a/0x420 [ 967.512832][T14378] ? __fget_files+0x2a/0x420 [ 967.512849][T14378] ? __fget_files+0x3a6/0x420 [ 967.512867][T14378] ? __fget_files+0x2a/0x420 [ 967.512897][T14378] ksys_read+0x14b/0x260 [ 967.512924][T14378] ? __pfx_ksys_read+0x10/0x10 [ 967.512952][T14378] ? do_syscall_64+0xbe/0xf80 [ 967.512976][T14378] do_syscall_64+0xfa/0xf80 [ 967.512996][T14378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.513014][T14378] ? clear_bhb_loop+0x60/0xb0 [ 967.513037][T14378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.513056][T14378] RIP: 0033:0x7f5c6da6f749 [ 967.513075][T14378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.513091][T14378] RSP: 002b:00007f5c6bcce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 967.513110][T14378] RAX: ffffffffffffffda RBX: 00007f5c6dcc5fa0 RCX: 00007f5c6da6f749 [ 967.513125][T14378] RDX: 0000000000018ff0 RSI: 000020000001b700 RDI: 0000000000000004 [ 967.513138][T14378] RBP: 00007f5c6bcce090 R08: 0000000000000000 R09: 0000000000000000 [ 967.513150][T14378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.513162][T14378] R13: 00007f5c6dcc6038 R14: 00007f5c6dcc5fa0 R15: 00007fff3b48f378 [ 967.513196][T14378] [ 967.626318][ T52] usb usb5-port1: attempt power cycle [ 968.949970][ T52] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 968.970574][ T52] usb 5-1: device descriptor read/8, error -71 [ 968.990552][T14388] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 969.220421][ T52] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 969.246557][ T52] usb 5-1: device descriptor read/8, error -71 [ 969.262629][ T9059] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 969.350837][ T52] usb usb5-port1: unable to enumerate USB device [ 969.419989][ T9059] usb 7-1: Using ep0 maxpacket: 16 [ 969.422529][ T9059] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.422583][ T9059] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 969.422603][ T9059] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.466858][ T9059] usb 7-1: config 0 descriptor?? [ 969.481251][ T9059] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input30 [ 971.321564][T14419] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2544'. [ 972.399901][ T6064] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 972.564701][ T6064] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 972.564735][ T6064] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 972.564761][ T6064] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 972.564799][ T6064] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 972.564820][ T6064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.636209][T14419] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 972.692767][ T6064] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 972.962922][T14419] syz.4.2544 (14419): /proc/14418/oom_adj is deprecated, please use /proc/14418/oom_score_adj instead. [ 974.026745][T12282] usb 5-1: USB disconnect, device number 46 [ 975.009130][T14389] bcm5974 7-1:0.0: could not read from device [ 975.068568][T14446] dvmrp1: left allmulticast mode [ 975.522936][ T9059] usb 7-1: USB disconnect, device number 18 [ 977.566455][T14478] FAULT_INJECTION: forcing a failure. [ 977.566455][T14478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.566517][T14478] CPU: 0 UID: 0 PID: 14478 Comm: syz.5.2558 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 977.566544][T14478] Tainted: [L]=SOFTLOCKUP [ 977.566551][T14478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 977.566563][T14478] Call Trace: [ 977.566571][T14478] [ 977.566580][T14478] dump_stack_lvl+0x189/0x250 [ 977.566608][T14478] ? __pfx____ratelimit+0x10/0x10 [ 977.566634][T14478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 977.566657][T14478] ? __pfx__printk+0x10/0x10 [ 977.566677][T14478] ? __might_fault+0xb0/0x130 [ 977.566712][T14478] should_fail_ex+0x46c/0x600 [ 977.566743][T14478] _copy_from_iter+0x1cd/0x1630 [ 977.566772][T14478] ? __build_skb_around+0x22d/0x3c0 [ 977.566798][T14478] ? __pfx__copy_from_iter+0x10/0x10 [ 977.566819][T14478] ? __alloc_skb+0x2f1/0x430 [ 977.566840][T14478] ? __pfx___alloc_skb+0x10/0x10 [ 977.566857][T14478] ? netlink_autobind+0xdb/0x300 [ 977.566882][T14478] ? netlink_sendmsg+0x642/0xb30 [ 977.566902][T14478] ? skb_put+0x11b/0x210 [ 977.566926][T14478] netlink_sendmsg+0x6b2/0xb30 [ 977.566957][T14478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 977.566982][T14478] ? rcu_is_watching+0x15/0xb0 [ 977.567005][T14478] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 977.567027][T14478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 977.567050][T14478] __sock_sendmsg+0x21c/0x270 [ 977.567079][T14478] ____sys_sendmsg+0x508/0x810 [ 977.567106][T14478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 977.567138][T14478] ? import_iovec+0x74/0xa0 [ 977.567159][T14478] ___sys_sendmsg+0x21f/0x2a0 [ 977.567183][T14478] ? __pfx____sys_sendmsg+0x10/0x10 [ 977.567243][T14478] ? __fget_files+0x2a/0x420 [ 977.567262][T14478] ? __fget_files+0x3a6/0x420 [ 977.567298][T14478] __x64_sys_sendmsg+0x1a1/0x260 [ 977.567322][T14478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 977.567342][T14478] ? irqentry_exit+0x5dd/0x660 [ 977.567384][T14478] do_syscall_64+0xfa/0xf80 [ 977.567402][T14478] ? rcu_is_watching+0x15/0xb0 [ 977.567418][T14478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.567436][T14478] ? clear_bhb_loop+0x60/0xb0 [ 977.567458][T14478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.567476][T14478] RIP: 0033:0x7fb6efb1f749 [ 977.567493][T14478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.567508][T14478] RSP: 002b:00007fb6edd3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.567529][T14478] RAX: ffffffffffffffda RBX: 00007fb6efd76180 RCX: 00007fb6efb1f749 [ 977.567542][T14478] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 977.567555][T14478] RBP: 00007fb6edd3c090 R08: 0000000000000000 R09: 0000000000000000 [ 977.567567][T14478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.567579][T14478] R13: 00007fb6efd76218 R14: 00007fb6efd76180 R15: 00007ffff54628e8 [ 977.567612][T14478] [ 978.559871][ T6064] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 979.190267][ T6064] usb 2-1: Using ep0 maxpacket: 32 [ 979.196129][ T6064] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 979.196156][ T6064] usb 2-1: config 0 has no interface number 0 [ 979.223423][ T6064] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 979.223450][ T6064] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.223470][ T6064] usb 2-1: Product: syz [ 979.223482][ T6064] usb 2-1: Manufacturer: syz [ 979.223496][ T6064] usb 2-1: SerialNumber: syz [ 979.281901][ T6064] usb 2-1: config 0 descriptor?? [ 979.297803][ T6064] ftdi_sio 2-1:0.217: FTDI USB Serial Device converter detected [ 979.299462][ T6064] usb 2-1: Detected SIO [ 980.122977][ T6064] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 980.425181][T14510] netlink: 'syz.5.2570': attribute type 1 has an invalid length. [ 980.514184][T14513] FAULT_INJECTION: forcing a failure. [ 980.514184][T14513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.514207][T14513] CPU: 1 UID: 0 PID: 14513 Comm: syz.5.2571 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 980.514222][T14513] Tainted: [L]=SOFTLOCKUP [ 980.514226][T14513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 980.514233][T14513] Call Trace: [ 980.514237][T14513] [ 980.514243][T14513] dump_stack_lvl+0x189/0x250 [ 980.514259][T14513] ? __pfx____ratelimit+0x10/0x10 [ 980.514274][T14513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 980.514287][T14513] ? __pfx__printk+0x10/0x10 [ 980.514306][T14513] should_fail_ex+0x46c/0x600 [ 980.514323][T14513] _copy_to_user+0x31/0xb0 [ 980.514334][T14513] simple_read_from_buffer+0xe1/0x170 [ 980.514348][T14513] proc_fail_nth_read+0x1b6/0x220 [ 980.514365][T14513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.514380][T14513] ? rw_verify_area+0x2ac/0x4e0 [ 980.514393][T14513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.514407][T14513] vfs_read+0x206/0xa30 [ 980.514424][T14513] ? __pfx_vfs_read+0x10/0x10 [ 980.514435][T14513] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 980.514453][T14513] ? mutex_lock_nested+0x154/0x1d0 [ 980.514470][T14513] ? fdget_pos+0x253/0x320 [ 980.514495][T14513] ksys_read+0x14b/0x260 [ 980.514519][T14513] ? __pfx_ksys_read+0x10/0x10 [ 980.514544][T14513] ? do_syscall_64+0xbe/0xf80 [ 980.514569][T14513] do_syscall_64+0xfa/0xf80 [ 980.514586][T14513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.514597][T14513] ? clear_bhb_loop+0x60/0xb0 [ 980.514609][T14513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.514619][T14513] RIP: 0033:0x7fb6efb1e15c [ 980.514629][T14513] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 980.514639][T14513] RSP: 002b:00007fb6edd7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 980.514651][T14513] RAX: ffffffffffffffda RBX: 00007fb6efd75fa0 RCX: 00007fb6efb1e15c [ 980.514658][T14513] RDX: 000000000000000f RSI: 00007fb6edd7e0a0 RDI: 0000000000000004 [ 980.514665][T14513] RBP: 00007fb6edd7e090 R08: 0000000000000000 R09: 0000000000000000 [ 980.514671][T14513] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000001 [ 980.514677][T14513] R13: 00007fb6efd76038 R14: 00007fb6efd75fa0 R15: 00007ffff54628e8 [ 980.514694][T14513] [ 980.637337][T14515] FAULT_INJECTION: forcing a failure. [ 980.637337][T14515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.637372][T14515] CPU: 1 UID: 0 PID: 14515 Comm: syz.5.2572 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 980.637397][T14515] Tainted: [L]=SOFTLOCKUP [ 980.637403][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 980.637415][T14515] Call Trace: [ 980.637422][T14515] [ 980.637431][T14515] dump_stack_lvl+0x189/0x250 [ 980.637457][T14515] ? __pfx____ratelimit+0x10/0x10 [ 980.637487][T14515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 980.637508][T14515] ? __pfx__printk+0x10/0x10 [ 980.637541][T14515] should_fail_ex+0x46c/0x600 [ 980.637570][T14515] _copy_to_user+0x31/0xb0 [ 980.637590][T14515] simple_read_from_buffer+0xe1/0x170 [ 980.637614][T14515] proc_fail_nth_read+0x1b6/0x220 [ 980.637641][T14515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.637668][T14515] ? rw_verify_area+0x2ac/0x4e0 [ 980.637697][T14515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.637721][T14515] vfs_read+0x206/0xa30 [ 980.637752][T14515] ? __pfx_vfs_read+0x10/0x10 [ 980.637771][T14515] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 980.637803][T14515] ? mutex_lock_nested+0x154/0x1d0 [ 980.637822][T14515] ? fdget_pos+0x253/0x320 [ 980.637850][T14515] ksys_read+0x14b/0x260 [ 980.637875][T14515] ? __pfx_ksys_read+0x10/0x10 [ 980.637896][T14515] ? __secure_computing+0xe2/0x2a0 [ 980.637927][T14515] do_syscall_64+0xfa/0xf80 [ 980.637945][T14515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.637963][T14515] ? clear_bhb_loop+0x60/0xb0 [ 980.637984][T14515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.638001][T14515] RIP: 0033:0x7fb6efb1e15c [ 980.638018][T14515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 980.638033][T14515] RSP: 002b:00007fb6edd7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 980.638053][T14515] RAX: ffffffffffffffda RBX: 00007fb6efd75fa0 RCX: 00007fb6efb1e15c [ 980.638066][T14515] RDX: 000000000000000f RSI: 00007fb6edd7e0a0 RDI: 0000000000000002 [ 980.638077][T14515] RBP: 00007fb6edd7e090 R08: 0000000000000000 R09: 0000000000000000 [ 980.638090][T14515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.638101][T14515] R13: 00007fb6efd76038 R14: 00007fb6efd75fa0 R15: 00007ffff54628e8 [ 980.638132][T14515] [ 980.726248][T14517] input: syz1 as /devices/virtual/input/input32 [ 980.732537][T14517] FAULT_INJECTION: forcing a failure. [ 980.732537][T14517] name failslab, interval 1, probability 0, space 0, times 0 [ 980.732571][T14517] CPU: 1 UID: 0 PID: 14517 Comm: syz.5.2573 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 980.732596][T14517] Tainted: [L]=SOFTLOCKUP [ 980.732603][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 980.732615][T14517] Call Trace: [ 980.732622][T14517] [ 980.732630][T14517] dump_stack_lvl+0x189/0x250 [ 980.732662][T14517] ? __pfx____ratelimit+0x10/0x10 [ 980.732694][T14517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 980.732716][T14517] ? __pfx__printk+0x10/0x10 [ 980.732741][T14517] ? __pfx___might_resched+0x10/0x10 [ 980.732764][T14517] should_fail_ex+0x46c/0x600 [ 980.732792][T14517] should_failslab+0xa8/0x100 [ 980.732811][T14517] __kmalloc_noprof+0xe0/0x7e0 [ 980.732833][T14517] ? lockdep_hardirqs_on+0x98/0x140 [ 980.732849][T14517] ? kobject_get_path+0xc5/0x2f0 [ 980.732873][T14517] kobject_get_path+0xc5/0x2f0 [ 980.732889][T14517] ? input_devices_seq_show+0x58a/0x640 [ 980.732916][T14517] input_devices_seq_show+0x38/0x640 [ 980.732941][T14517] seq_read_iter+0x9bc/0xe20 [ 980.732984][T14517] seq_read+0x36c/0x480 [ 980.733015][T14517] ? __pfx_seq_read+0x10/0x10 [ 980.733042][T14517] ? __import_iovec+0x5d4/0x7f0 [ 980.733070][T14517] ? __pfx_seq_read+0x10/0x10 [ 980.733089][T14517] proc_reg_read+0x1f6/0x2f0 [ 980.733111][T14517] vfs_readv+0x5b3/0x850 [ 980.733129][T14517] ? __pfx_proc_reg_read+0x10/0x10 [ 980.733149][T14517] ? __pfx_vfs_readv+0x10/0x10 [ 980.733183][T14517] ? __fget_files+0x2a/0x420 [ 980.733206][T14517] ? __fget_files+0x3a6/0x420 [ 980.733222][T14517] ? __fget_files+0x2a/0x420 [ 980.733249][T14517] __x64_sys_preadv+0x19a/0x2a0 [ 980.733276][T14517] ? __pfx___x64_sys_preadv+0x10/0x10 [ 980.733304][T14517] ? do_syscall_64+0xbe/0xf80 [ 980.733325][T14517] do_syscall_64+0xfa/0xf80 [ 980.733342][T14517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.733359][T14517] ? clear_bhb_loop+0x60/0xb0 [ 980.733380][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.733397][T14517] RIP: 0033:0x7fb6efb1f749 [ 980.733413][T14517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.733427][T14517] RSP: 002b:00007fb6edd7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 980.733446][T14517] RAX: ffffffffffffffda RBX: 00007fb6efd75fa0 RCX: 00007fb6efb1f749 [ 980.733458][T14517] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000004 [ 980.733469][T14517] RBP: 00007fb6edd7e090 R08: 0000000000000003 R09: 0000000000000000 [ 980.733481][T14517] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 980.733491][T14517] R13: 00007fb6efd76038 R14: 00007fb6efd75fa0 R15: 00007ffff54628e8 [ 980.733523][T14517] [ 980.839907][ T7848] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 981.069814][ T7848] usb 5-1: Using ep0 maxpacket: 32 [ 981.072247][ T7848] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 981.072272][ T7848] usb 5-1: config 0 has no interface number 0 [ 981.072317][ T7848] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 981.139997][ T7848] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 981.140025][ T7848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.140044][ T7848] usb 5-1: Product: syz [ 981.140057][ T7848] usb 5-1: Manufacturer: syz [ 981.140071][ T7848] usb 5-1: SerialNumber: syz [ 981.219942][ T37] kauditd_printk_skb: 488 callbacks suppressed [ 981.219960][ T37] audit: type=1326 audit(1765849771.658:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14518 comm="syz.5.2574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6efb1f749 code=0x0 [ 981.293506][ T7848] usb 5-1: config 0 descriptor?? [ 981.322571][ T7848] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 981.322605][ T7848] em28xx 5-1:0.132: Video interface 132 found: [ 981.444345][ T5937] usb 2-1: USB disconnect, device number 54 [ 981.466925][ T5937] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 982.566136][ T7848] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 982.581787][ T5937] ftdi_sio 2-1:0.217: device disconnected [ 983.954991][T14541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2577'. [ 984.387067][ T7848] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 984.479548][ T7848] em28xx 5-1:0.132: board has no eeprom [ 984.531781][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 984.548814][ T7848] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 984.548840][ T7848] em28xx 5-1:0.132: analog set to bulk mode. [ 984.549184][T13356] em28xx 5-1:0.132: Registering V4L2 extension [ 984.710254][ T7848] usb 5-1: USB disconnect, device number 47 [ 984.717424][ T7848] em28xx 5-1:0.132: Disconnecting em28xx [ 984.905172][T14555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2584'. [ 984.993742][T13356] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 984.993767][T13356] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 984.993779][T13356] em28xx 5-1:0.132: No AC97 audio processor [ 984.997977][T13356] usb 5-1: Decoder not found [ 984.997995][T13356] em28xx 5-1:0.132: failed to create media graph [ 984.998031][T13356] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 985.045877][T13356] em28xx 5-1:0.132: Remote control support is not available for this card. [ 985.046562][ T7848] em28xx 5-1:0.132: Closing input extension [ 985.074761][ T7848] em28xx 5-1:0.132: Freeing device [ 985.751894][ T5937] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 985.899894][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 985.902092][ T5937] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 985.902115][ T5937] usb 2-1: config 0 has no interface number 0 [ 985.902163][ T5937] usb 2-1: config 0 interface 12 has no altsetting 0 [ 985.904806][ T5937] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 985.904831][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.904850][ T5937] usb 2-1: Product: syz [ 985.904863][ T5937] usb 2-1: Manufacturer: syz [ 985.904875][ T5937] usb 2-1: SerialNumber: syz [ 985.914270][ T5937] usb 2-1: config 0 descriptor?? [ 985.946450][ T5937] f81534 2-1:0.12: required endpoints missing [ 987.007893][T14582] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 987.007910][T14582] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 987.007922][T14582] overlayfs: missing 'lowerdir' [ 987.801194][T14595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2593'. [ 988.520875][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2593'. [ 988.527545][T14599] netlink: 'syz.4.2595': attribute type 2 has an invalid length. [ 988.546887][ T5937] usb 2-1: USB disconnect, device number 55 [ 991.486797][T14625] FAULT_INJECTION: forcing a failure. [ 991.486797][T14625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.486822][T14625] CPU: 0 UID: 0 PID: 14625 Comm: syz.4.2605 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 991.486837][T14625] Tainted: [L]=SOFTLOCKUP [ 991.486840][T14625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 991.486847][T14625] Call Trace: [ 991.486851][T14625] [ 991.486857][T14625] dump_stack_lvl+0x189/0x250 [ 991.486875][T14625] ? __pfx____ratelimit+0x10/0x10 [ 991.486890][T14625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 991.486902][T14625] ? __pfx__printk+0x10/0x10 [ 991.486921][T14625] should_fail_ex+0x46c/0x600 [ 991.486938][T14625] _copy_to_user+0x31/0xb0 [ 991.486950][T14625] simple_read_from_buffer+0xe1/0x170 [ 991.486963][T14625] proc_fail_nth_read+0x1b6/0x220 [ 991.486979][T14625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 991.486995][T14625] ? rw_verify_area+0x2ac/0x4e0 [ 991.487007][T14625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 991.487022][T14625] vfs_read+0x206/0xa30 [ 991.487039][T14625] ? __pfx_vfs_read+0x10/0x10 [ 991.487050][T14625] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 991.487067][T14625] ? mutex_lock_nested+0x154/0x1d0 [ 991.487079][T14625] ? fdget_pos+0x253/0x320 [ 991.487095][T14625] ksys_read+0x14b/0x260 [ 991.487109][T14625] ? __pfx_ksys_read+0x10/0x10 [ 991.487124][T14625] ? do_syscall_64+0xbe/0xf80 [ 991.487136][T14625] do_syscall_64+0xfa/0xf80 [ 991.487146][T14625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.487156][T14625] ? clear_bhb_loop+0x60/0xb0 [ 991.487168][T14625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.487178][T14625] RIP: 0033:0x7fa811fbe15c [ 991.487188][T14625] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 991.487197][T14625] RSP: 002b:00007fa8101fd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 991.487210][T14625] RAX: ffffffffffffffda RBX: 00007fa812216090 RCX: 00007fa811fbe15c [ 991.487217][T14625] RDX: 000000000000000f RSI: 00007fa8101fd0a0 RDI: 0000000000000005 [ 991.487224][T14625] RBP: 00007fa8101fd090 R08: 0000000000000000 R09: 0000000000000000 [ 991.487230][T14625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.487236][T14625] R13: 00007fa812216128 R14: 00007fa812216090 R15: 00007ffdde6f3538 [ 991.487253][T14625] [ 991.575142][T14630] FAULT_INJECTION: forcing a failure. [ 991.575142][T14630] name failslab, interval 1, probability 0, space 0, times 0 [ 991.575176][T14630] CPU: 1 UID: 0 PID: 14630 Comm: syz.6.2606 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 991.575201][T14630] Tainted: [L]=SOFTLOCKUP [ 991.575207][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 991.575218][T14630] Call Trace: [ 991.575226][T14630] [ 991.575234][T14630] dump_stack_lvl+0x189/0x250 [ 991.575260][T14630] ? __pfx____ratelimit+0x10/0x10 [ 991.575285][T14630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 991.575307][T14630] ? __pfx__printk+0x10/0x10 [ 991.575330][T14630] ? __pfx___might_resched+0x10/0x10 [ 991.575353][T14630] should_fail_ex+0x46c/0x600 [ 991.575381][T14630] should_failslab+0xa8/0x100 [ 991.575400][T14630] __kmalloc_noprof+0xe0/0x7e0 [ 991.575423][T14630] ? kfree+0x4d/0x900 [ 991.575440][T14630] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 991.575465][T14630] tomoyo_realpath_from_path+0xe3/0x5d0 [ 991.575484][T14630] ? tomoyo_domain+0xd9/0x130 [ 991.575506][T14630] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 991.575529][T14630] tomoyo_path_number_perm+0x1e8/0x5a0 [ 991.575555][T14630] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 991.575581][T14630] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 991.575600][T14630] ? lockdep_hardirqs_on+0x98/0x140 [ 991.575647][T14630] ? __fget_files+0x2a/0x420 [ 991.575671][T14630] ? __fget_files+0x3a6/0x420 [ 991.575687][T14630] ? __fget_files+0x2a/0x420 [ 991.575709][T14630] security_file_ioctl+0xcb/0x2d0 [ 991.575735][T14630] __se_sys_ioctl+0x47/0x170 [ 991.575760][T14630] do_syscall_64+0xfa/0xf80 [ 991.575778][T14630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.575796][T14630] ? clear_bhb_loop+0x60/0xb0 [ 991.575823][T14630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.575841][T14630] RIP: 0033:0x7f5c6da6f749 [ 991.575857][T14630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 991.575872][T14630] RSP: 002b:00007f5c6bcce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 991.575892][T14630] RAX: ffffffffffffffda RBX: 00007f5c6dcc5fa0 RCX: 00007f5c6da6f749 [ 991.575906][T14630] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000004 [ 991.575917][T14630] RBP: 00007f5c6bcce090 R08: 0000000000000000 R09: 0000000000000000 [ 991.575929][T14630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.575940][T14630] R13: 00007f5c6dcc6038 R14: 00007f5c6dcc5fa0 R15: 00007fff3b48f378 [ 991.575971][T14630] [ 991.575979][T14630] ERROR: Out of memory at tomoyo_realpath_from_path. [ 991.576080][T14630] m~aW: renamed from bridge_slave_0 (while UP) [ 991.663928][T14629] 9p: Bad value for 'rfdno' [ 992.074747][T14629] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2607'. [ 992.781046][ T5937] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 992.852568][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'. [ 992.989221][T14641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2610'. [ 993.512874][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.512955][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.608993][T14644] FAULT_INJECTION: forcing a failure. [ 993.608993][T14644] name failslab, interval 1, probability 0, space 0, times 0 [ 993.609109][T14644] CPU: 1 UID: 0 PID: 14644 Comm: syz.6.2611 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 993.609135][T14644] Tainted: [L]=SOFTLOCKUP [ 993.609142][T14644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 993.609154][T14644] Call Trace: [ 993.609162][T14644] [ 993.609171][T14644] dump_stack_lvl+0x189/0x250 [ 993.609202][T14644] ? __pfx____ratelimit+0x10/0x10 [ 993.609227][T14644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 993.609250][T14644] ? __pfx__printk+0x10/0x10 [ 993.609283][T14644] ? __pfx___might_resched+0x10/0x10 [ 993.609303][T14644] ? fs_reclaim_acquire+0x7d/0x100 [ 993.609326][T14644] should_fail_ex+0x46c/0x600 [ 993.609355][T14644] should_failslab+0xa8/0x100 [ 993.609375][T14644] __kmalloc_node_noprof+0xe7/0x820 [ 993.609400][T14644] ? alloc_slab_obj_exts+0x3e/0x100 [ 993.609427][T14644] alloc_slab_obj_exts+0x3e/0x100 [ 993.609450][T14644] __memcg_slab_post_alloc_hook+0x394/0x7d0 [ 993.609490][T14644] ? fanotify_handle_event+0x1a2b/0x3f20 [ 993.609515][T14644] kmem_cache_alloc_noprof+0x42b/0x6c0 [ 993.609546][T14644] fanotify_handle_event+0x1a2b/0x3f20 [ 993.609585][T14644] ? fanotify_handle_event+0xfd0/0x3f20 [ 993.609616][T14644] ? __pfx_fanotify_handle_event+0x10/0x10 [ 993.609651][T14644] ? fsnotify+0x72c/0x1ac0 [ 993.609679][T14644] ? __pfx_fanotify_handle_event+0x10/0x10 [ 993.609706][T14644] fsnotify+0x141e/0x1ac0 [ 993.609737][T14644] ? fsnotify+0x72c/0x1ac0 [ 993.609755][T14644] ? __pfx_fsnotify+0x10/0x10 [ 993.609771][T14644] ? do_raw_spin_lock+0x121/0x290 [ 993.609804][T14644] __fput+0x37b/0xa80 [ 993.609836][T14644] task_work_run+0x1d4/0x260 [ 993.609862][T14644] ? __pfx_task_work_run+0x10/0x10 [ 993.609889][T14644] ? exit_to_user_mode_loop+0x55/0x4f0 [ 993.609914][T14644] exit_to_user_mode_loop+0xff/0x4f0 [ 993.609936][T14644] ? rcu_is_watching+0x15/0xb0 [ 993.609958][T14644] do_syscall_64+0x2d0/0xf80 [ 993.609975][T14644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.609992][T14644] ? clear_bhb_loop+0x60/0xb0 [ 993.610014][T14644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.610032][T14644] RIP: 0033:0x7f5c6da6f749 [ 993.610048][T14644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.610064][T14644] RSP: 002b:00007f5c6bcce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 993.610083][T14644] RAX: 0000000000000005 RBX: 00007f5c6dcc5fa0 RCX: 00007f5c6da6f749 [ 993.610094][T14644] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 993.610104][T14644] RBP: 00007f5c6bcce090 R08: 0000000000000000 R09: 0000000000000000 [ 993.610116][T14644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.610127][T14644] R13: 00007f5c6dcc6038 R14: 00007f5c6dcc5fa0 R15: 00007fff3b48f378 [ 993.610157][T14644] [ 994.314489][T14663] FAULT_INJECTION: forcing a failure. [ 994.314489][T14663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 994.314524][T14663] CPU: 1 UID: 0 PID: 14663 Comm: syz.6.2615 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 994.314548][T14663] Tainted: [L]=SOFTLOCKUP [ 994.314556][T14663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 994.314566][T14663] Call Trace: [ 994.314574][T14663] [ 994.314583][T14663] dump_stack_lvl+0x189/0x250 [ 994.314610][T14663] ? __pfx____ratelimit+0x10/0x10 [ 994.314635][T14663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 994.314657][T14663] ? __pfx__printk+0x10/0x10 [ 994.314688][T14663] should_fail_ex+0x46c/0x600 [ 994.314716][T14663] _copy_to_user+0x31/0xb0 [ 994.314736][T14663] simple_read_from_buffer+0xe1/0x170 [ 994.314761][T14663] proc_fail_nth_read+0x1b6/0x220 [ 994.314788][T14663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 994.314815][T14663] ? rw_verify_area+0x2ac/0x4e0 [ 994.314838][T14663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 994.314863][T14663] vfs_read+0x206/0xa30 [ 994.314895][T14663] ? __pfx_vfs_read+0x10/0x10 [ 994.314913][T14663] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 994.314944][T14663] ? mutex_lock_nested+0x154/0x1d0 [ 994.314964][T14663] ? fdget_pos+0x253/0x320 [ 994.314991][T14663] ksys_read+0x14b/0x260 [ 994.315016][T14663] ? __pfx_ksys_read+0x10/0x10 [ 994.315052][T14663] ? do_syscall_64+0xbe/0xf80 [ 994.315081][T14663] do_syscall_64+0xfa/0xf80 [ 994.315105][T14663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.315126][T14663] ? clear_bhb_loop+0x60/0xb0 [ 994.315165][T14663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.315181][T14663] RIP: 0033:0x7f5c6da6e15c [ 994.315197][T14663] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 994.315212][T14663] RSP: 002b:00007f5c6bcad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 994.315230][T14663] RAX: ffffffffffffffda RBX: 00007f5c6dcc6090 RCX: 00007f5c6da6e15c [ 994.315244][T14663] RDX: 000000000000000f RSI: 00007f5c6bcad0a0 RDI: 0000000000000004 [ 994.315254][T14663] RBP: 00007f5c6bcad090 R08: 0000000000000000 R09: 0000000000000000 [ 994.315265][T14663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.315274][T14663] R13: 00007f5c6dcc6128 R14: 00007f5c6dcc6090 R15: 00007fff3b48f378 [ 994.315303][T14663] [ 994.648767][T14666] FAULT_INJECTION: forcing a failure. [ 994.648767][T14666] name failslab, interval 1, probability 0, space 0, times 0 [ 994.648801][T14666] CPU: 1 UID: 0 PID: 14666 Comm: syz.6.2617 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 994.648826][T14666] Tainted: [L]=SOFTLOCKUP [ 994.648833][T14666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 994.648843][T14666] Call Trace: [ 994.648851][T14666] [ 994.648859][T14666] dump_stack_lvl+0x189/0x250 [ 994.648885][T14666] ? __pfx____ratelimit+0x10/0x10 [ 994.648911][T14666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 994.648933][T14666] ? __pfx__printk+0x10/0x10 [ 994.648948][T14666] ? __kasan_slab_alloc+0x6c/0x80 [ 994.648976][T14666] ? __lock_acquire+0x6b6/0x2cf0 [ 994.649007][T14666] should_fail_ex+0x46c/0x600 [ 994.649034][T14666] ? skb_clone+0x212/0x3a0 [ 994.649055][T14666] should_failslab+0xa8/0x100 [ 994.649073][T14666] ? skb_clone+0x212/0x3a0 [ 994.649092][T14666] kmem_cache_alloc_noprof+0x84/0x6c0 [ 994.649113][T14666] ? __netlink_lookup+0xbd/0x8a0 [ 994.649143][T14666] skb_clone+0x212/0x3a0 [ 994.649185][T14666] __netlink_deliver_tap+0x404/0x850 [ 994.649220][T14666] ? netlink_deliver_tap+0x2e/0x1b0 [ 994.649243][T14666] netlink_deliver_tap+0x19c/0x1b0 [ 994.649267][T14666] netlink_unicast+0x811/0xa10 [ 994.649296][T14666] ? __pfx_netlink_unicast+0x10/0x10 [ 994.649319][T14666] ? netlink_sendmsg+0x642/0xb30 [ 994.649338][T14666] ? skb_put+0x11b/0x210 [ 994.649361][T14666] netlink_sendmsg+0x805/0xb30 [ 994.649394][T14666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 994.649421][T14666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 994.649441][T14666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 994.649463][T14666] __sock_sendmsg+0x21c/0x270 [ 994.649492][T14666] ____sys_sendmsg+0x508/0x810 [ 994.649519][T14666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 994.649550][T14666] ? import_iovec+0x74/0xa0 [ 994.649572][T14666] ___sys_sendmsg+0x21f/0x2a0 [ 994.649594][T14666] ? __pfx____sys_sendmsg+0x10/0x10 [ 994.649653][T14666] ? __fget_files+0x2a/0x420 [ 994.649671][T14666] ? __fget_files+0x3a6/0x420 [ 994.649701][T14666] __x64_sys_sendmsg+0x1a1/0x260 [ 994.649727][T14666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 994.649753][T14666] ? __pfx_ksys_write+0x10/0x10 [ 994.649778][T14666] ? do_syscall_64+0xbe/0xf80 [ 994.649797][T14666] do_syscall_64+0xfa/0xf80 [ 994.649813][T14666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.649830][T14666] ? clear_bhb_loop+0x60/0xb0 [ 994.649847][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.649862][T14666] RIP: 0033:0x7f5c6da6f749 [ 994.649878][T14666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 994.649892][T14666] RSP: 002b:00007f5c6bcce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 994.649912][T14666] RAX: ffffffffffffffda RBX: 00007f5c6dcc5fa0 RCX: 00007f5c6da6f749 [ 994.649924][T14666] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 994.649934][T14666] RBP: 00007f5c6bcce090 R08: 0000000000000000 R09: 0000000000000000 [ 994.649944][T14666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.649953][T14666] R13: 00007f5c6dcc6038 R14: 00007f5c6dcc5fa0 R15: 00007fff3b48f378 [ 994.649983][T14666] [ 995.109987][ T5962] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 995.271509][ T5937] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 995.299010][ T5937] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 995.328347][T14670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.338791][T14670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.502265][T14680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.502684][T14680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.505163][T14680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.505551][T14680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.845168][T14693] FAULT_INJECTION: forcing a failure. [ 998.845168][T14693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.845203][T14693] CPU: 1 UID: 0 PID: 14693 Comm: syz.5.2626 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 998.845228][T14693] Tainted: [L]=SOFTLOCKUP [ 998.845236][T14693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 998.845245][T14693] Call Trace: [ 998.845250][T14693] [ 998.845255][T14693] dump_stack_lvl+0x189/0x250 [ 998.845272][T14693] ? __pfx____ratelimit+0x10/0x10 [ 998.845287][T14693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 998.845306][T14693] ? __pfx__printk+0x10/0x10 [ 998.845325][T14693] ? __might_fault+0xb0/0x130 [ 998.845359][T14693] should_fail_ex+0x46c/0x600 [ 998.845387][T14693] _copy_from_iter+0x1cd/0x1630 [ 998.845414][T14693] ? __build_skb_around+0x22d/0x3c0 [ 998.845429][T14693] ? __pfx__copy_from_iter+0x10/0x10 [ 998.845440][T14693] ? __alloc_skb+0x2f1/0x430 [ 998.845452][T14693] ? __pfx___alloc_skb+0x10/0x10 [ 998.845467][T14693] ? netlink_sendmsg+0x642/0xb30 [ 998.845488][T14693] ? skb_put+0x11b/0x210 [ 998.845511][T14693] netlink_sendmsg+0x6b2/0xb30 [ 998.845543][T14693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.845573][T14693] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 998.845588][T14693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.845600][T14693] __sock_sendmsg+0x21c/0x270 [ 998.845617][T14693] ____sys_sendmsg+0x508/0x810 [ 998.845636][T14693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 998.845667][T14693] ? import_iovec+0x74/0xa0 [ 998.845688][T14693] ___sys_sendmsg+0x21f/0x2a0 [ 998.845719][T14693] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.845760][T14693] ? __fget_files+0x2a/0x420 [ 998.845771][T14693] ? __fget_files+0x3a6/0x420 [ 998.845786][T14693] __x64_sys_sendmsg+0x1a1/0x260 [ 998.845807][T14693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 998.845838][T14693] ? __pfx_ksys_write+0x10/0x10 [ 998.845866][T14693] ? do_syscall_64+0xbe/0xf80 [ 998.845890][T14693] do_syscall_64+0xfa/0xf80 [ 998.845907][T14693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.845918][T14693] ? clear_bhb_loop+0x60/0xb0 [ 998.845930][T14693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.845940][T14693] RIP: 0033:0x7fb6efb1f749 [ 998.845950][T14693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.845963][T14693] RSP: 002b:00007fb6edd7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.845983][T14693] RAX: ffffffffffffffda RBX: 00007fb6efd75fa0 RCX: 00007fb6efb1f749 [ 998.845997][T14693] RDX: 0000000020040014 RSI: 0000200000000100 RDI: 0000000000000003 [ 998.846010][T14693] RBP: 00007fb6edd7e090 R08: 0000000000000000 R09: 0000000000000000 [ 998.846022][T14693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.846033][T14693] R13: 00007fb6efd76038 R14: 00007fb6efd75fa0 R15: 00007ffff54628e8 [ 998.846066][T14693] [ 999.619950][ T52] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 999.769848][ T52] usb 6-1: Using ep0 maxpacket: 32 [ 999.771836][ T52] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 999.771859][ T52] usb 6-1: config 0 has no interface number 0 [ 999.771910][ T52] usb 6-1: config 0 interface 12 has no altsetting 0 [ 999.774346][ T52] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 999.774370][ T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.774389][ T52] usb 6-1: Product: syz [ 999.774402][ T52] usb 6-1: Manufacturer: syz [ 999.774416][ T52] usb 6-1: SerialNumber: syz [ 999.778536][ T52] usb 6-1: config 0 descriptor?? [ 999.782345][ T52] f81534 6-1:0.12: required endpoints missing [ 1000.307476][ T5962] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 1000.307494][ T5962] usb 5-1: chopping to 0 config(s) [ 1000.307507][ T5962] usb 5-1: can't read configurations, error -32 [ 1000.429954][ T5962] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1000.560023][ T5962] usb 5-1: device descriptor read/64, error -32 [ 1000.671125][ T5962] usb usb5-port1: attempt power cycle [ 1000.706514][T13356] usb 6-1: USB disconnect, device number 46 [ 1000.773873][ T6064] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1000.788704][ T6064] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1001.011145][ T5962] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1001.030566][ T5962] usb 5-1: device descriptor read/8, error -32 [ 1001.058674][T14707] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2631'. [ 1001.089603][T14707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2631'. [ 1001.099428][T14707] vlan2: entered promiscuous mode [ 1001.099453][T14707] gretap0: entered promiscuous mode [ 1001.269988][ T5962] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 1001.290336][ T5962] usb 5-1: device descriptor read/8, error -32 [ 1001.405555][ T5962] usb usb5-port1: unable to enumerate USB device [ 1001.590001][ T5962] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1001.749980][ T5962] usb 6-1: Using ep0 maxpacket: 8 [ 1001.753356][ T5962] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1001.754660][ T5962] usb 6-1: config 127 has an invalid interface number: 1 but max is 0 [ 1001.754685][ T5962] usb 6-1: config 127 has no interface number 0 [ 1001.754716][ T5962] usb 6-1: config 127 interface 1 has no altsetting 0 [ 1001.756977][ T5962] usb 6-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=c4.a4 [ 1001.757002][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.757013][ T5962] usb 6-1: Product: syz [ 1001.757021][ T5962] usb 6-1: Manufacturer: syz [ 1001.757028][ T5962] usb 6-1: SerialNumber: syz [ 1002.055865][T14715] netlink: 'syz.5.2634': attribute type 1 has an invalid length. [ 1002.055882][T14715] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2634'. [ 1004.393997][ T5962] usb 6-1: selecting invalid altsetting 2 [ 1004.394037][ T5962] i2c-cp2615 6-1:127.1: probe with driver i2c-cp2615 failed with error -22 [ 1004.397562][ T5962] usb 6-1: USB disconnect, device number 47 [ 1005.061472][T14722] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2636'. [ 1054.553124][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.553221][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.993092][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.993190][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1156.940462][ T38] INFO: task kworker/0:4:5876 blocked for more than 143 seconds. [ 1156.940489][ T38] Tainted: G L syzkaller #0 [ 1156.940501][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.940511][ T38] task:kworker/0:4 state:D stack:20544 pid:5876 tgid:5876 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1156.940556][ T38] Workqueue: events rfkill_sync_work [ 1156.940587][ T38] Call Trace: [ 1156.940595][ T38] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1156.940609][ T38] __schedule+0x1480/0x50a0 [ 1156.940650][ T38] ? sched_clock_cpu+0x74/0x430 [ 1156.940677][ T38] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1156.940697][ T38] ? __pfx___schedule+0x10/0x10 [ 1156.940742][ T38] rt_mutex_schedule+0x77/0xf0 [ 1156.940761][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1156.940797][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1156.940824][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1156.940849][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1156.940873][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1156.940908][ T38] ? nfc_dev_down+0x3b/0x290 [ 1156.940939][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1156.940960][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 1156.940985][ T38] ? nfc_dev_down+0x3b/0x290 [ 1156.941005][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1156.941026][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1156.941048][ T38] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1156.941070][ T38] nfc_dev_down+0x3b/0x290 [ 1156.941093][ T38] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1156.941114][ T38] nfc_rfkill_set_block+0x2d/0x100 [ 1156.941136][ T38] rfkill_set_block+0x1e5/0x450 [ 1156.941165][ T38] rfkill_sync_work+0x114/0x200 [ 1156.941187][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 1156.941210][ T38] process_scheduled_works+0xad1/0x1770 [ 1156.941267][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1156.941306][ T38] worker_thread+0x8a0/0xda0 [ 1156.941355][ T38] kthread+0x711/0x8a0 [ 1156.941381][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1156.941401][ T38] ? __pfx_kthread+0x10/0x10 [ 1156.941421][ T38] ? rt_spin_unlock+0x150/0x200 [ 1156.941447][ T38] ? rt_spin_unlock+0x161/0x200 [ 1156.941466][ T38] ? __pfx_[ 1156.941466][ T38] ? __pfx_kthread+0x10/0x10 [ 1156.941491][ T38] ret_from_fork+0x599/0xb30 [ 1156.941514][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1156.941546][ T38] ? __switch_to_asm+0x39/0x70 [ 1156.941567][ T38] ? __switch_to_asm+0x33/0x70 [ 1156.941593][ T38] ? __pfx_kthread+0x10/0x10 [ 1156.941617][ T38] ret_from_fork_asm+0x1a/0x30 [ 1156.941659][ T38] [ 1156.941698][ T38] INFO: task syz.1.2614:14648 blocked for more than 143 seconds. [ 1156.941713][ T38] Tainted: G L syzkaller #0 [ 1156.941724][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.941733][ T38] task:syz.1.2614 state:D stack:24920 pid:14648 tgid:14648 ppid:5817 task_flags:0x400040 flags:0x00080002 [ 1156.941778][ T38] Call Trace: [ 1156.941784][ T38] [ 1156.941797][ T38] __schedule+0x1480/0x50a0 [ 1156.941848][ T38] ? __pfx___schedule+0x10/0x10 [ 1156.941885][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1156.941901][ T38] rt_mutex_schedule+0x77/0xf0 [ 1156.941911][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1156.941924][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 1156.941945][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1156.941959][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1156.941971][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1156.941989][ T38] ? rfkill_fop_release+0x4e/0x220 [ 1156.942005][ T38] ? __pfx___fsnotify_parent+0x10/0x10 [ 1156.942020][ T38] ? rfkill_fop_release+0x4e/0x220 [ 1156.942029][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1156.942042][ T38] ? __pfx_rfkill_fop_release+0x10/0x10 [ 1156.942053][ T38] rfkill_fop_release+0x4e/0x220 [ 1156.942063][ T38] ? __pfx_rfkill_fop_release+0x10/0x10 [ 1156.942073][ T38] __fput+0x45b/0xa80 [ 1156.942092][ T38] task_work_run+0x1d4/0x260 [ 1156.942107][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1156.942120][ T38] ? __se_sys_close_range+0x4f0/0x650 [ 1156.942133][ T38] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1156.942149][ T38] exit_to_user_mode_loop+0xff/0x4f0 [ 1156.942161][ T38] ? rcu_is_watching+0x15/0xb0 [ 1156.942174][ T38] do_syscall_64+0x2d0/0xf80 [ 1156.942186][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.942196][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1156.942208][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.942219][ T38] RIP: 0033:0x7fa844abf749 [ 1156.942228][ T38] RSP: 002b:00007ffc85287af8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1156.942240][ T38] RAX: 0000000000000000 RBX: 00007fa844d17da0 RCX: 00007fa844abf749 [ 1156.942247][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1156.942260][ T38] RBP: 00007fa844d17da0 R08: 0000000000010744 R09: 0000001685287def [ 1156.942267][ T38] R10: 00007fa844d17cb0 R11: 0000000000000246 R12: 00000000000f2dd2 [ 1156.942274][ T38] R13: 00007fa844d16180 R14: ffffffffffffffff R15: 00007ffc85287c10 [ 1156.942292][ T38] [ 1156.942297][ T38] INFO: task syz.1.2614:14651 blocked for more than 143 seconds. [ 1156.942305][ T38] Tainted: G L syzkaller #0 [ 1156.942311][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.942316][ T38] task:syz.1.2614 state:D stack:24728 pid:14651 tgid:14648 ppid:5817 task_flags:0x400140 flags:0x00080002 [ 1156.942345][ T38] Call Trace: [ 1156.942348][ T38] [ 1156.942355][ T38] __schedule+0x1480/0x50a0 [ 1156.942379][ T38] ? __lock_acquire+0x146f/0x2cf0 [ 1156.942394][ T38] ? rtlock_slowlock_locked+0xd8/0x4010 [ 1156.942407][ T38] ? __pfx___schedule+0x10/0x10 [ 1156.942428][ T38] ? schedule+0x91/0x360 [ 1156.942444][ T38] schedule+0x165/0x360 [ 1156.942458][ T38] schedule_timeout+0x9a/0x270 [ 1156.942472][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1156.942493][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1156.942502][ T38] ? lockdep_hardirqs_on+0x98/0x140 [ 1156.942511][ T38] ? wait_for_completion+0x267/0x5d0 [ 1156.942521][ T38] wait_for_completion+0x2bf/0x5d0 [ 1156.942538][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1156.942551][ T38] ? __flush_work+0xce/0xd20 [ 1156.942564][ T38] ? __flush_work+0xce/0xd20 [ 1156.942576][ T38] __flush_work+0x9c1/0xd20 [ 1156.942590][ T38] ? __flush_work+0xce/0xd20 [ 1156.942604][ T38] ? __pfx___flush_work+0x10/0x10 [ 1156.942617][ T38] ? __pfx_wq_barrier_func+0x10/0x10 [ 1156.942636][ T38] ? __pfx___cancel_work+0x10/0x10 [ 1156.942649][ T38] ? nfc_genl_device_removed+0x23c/0x330 [ 1156.942661][ T38] ? __cancel_work_sync+0x5c/0x110 [ 1156.942675][ T38] __cancel_work_sync+0xbe/0x110 [ 1156.942689][ T38] rfkill_unregister+0x95/0x230 [ 1156.942705][ T38] nfc_unregister_device+0x96/0x300 [ 1156.942715][ T38] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1156.942729][ T38] virtual_ncidev_close+0x59/0x90 [ 1156.942741][ T38] __fput+0x45b/0xa80 [ 1156.942758][ T38] task_work_run+0x1d4/0x260 [ 1156.942774][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1156.942790][ T38] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1156.942805][ T38] exit_to_user_mode_loop+0xff/0x4f0 [ 1156.942817][ T38] ? rcu_is_watching+0x15/0xb0 [ 1156.942829][ T38] do_syscall_64+0x2d0/0xf80 [ 1156.942840][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.942850][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1156.942862][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.942872][ T38] RIP: 0033:0x7fa844abf749 [ 1156.942880][ T38] RSP: 002b:00007fa842d05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1156.942890][ T38] RAX: ffffffffffffffea RBX: 00007fa844d16090 RCX: 00007fa844abf749 [ 1156.942897][ T38] RDX: 0000000000005400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1156.942905][ T38] RBP: 00007fa844b43f91 R08: 0000000000000000 R09: 0000000000000000 [ 1156.942911][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1156.942918][ T38] R13: 00007fa844d16128 R14: 00007fa844d16090 R15: 00007ffc85287998 [ 1156.942935][ T38] [ 1156.942939][ T38] INFO: task syz.6.2617:14666 blocked for more than 143 seconds. [ 1156.942947][ T38] Tainted: G L syzkaller #0 [ 1156.942953][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.942958][ T38] task:syz.6.2617 state:D stack:24376 pid:14666 tgid:14665 ppid:11369 task_flags:0x400140 flags:0x00080002 [ 1156.942986][ T38] Call Trace: [ 1156.942990][ T38] [ 1156.942996][ T38] __schedule+0x1480/0x50a0 [ 1156.943029][ T38] ? __pfx___schedule+0x10/0x10 [ 1156.943054][ T38] rt_mutex_schedule+0x77/0xf0 [ 1156.943063][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1156.943083][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1156.943098][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1156.943111][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1156.943124][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1156.943142][ T38] ? rfkill_register+0x37/0x900 [ 1156.943157][ T38] ? lockdep_hardirqs_on+0x98/0x140 [ 1156.943171][ T38] ? rfkill_register+0x37/0x900 [ 1156.943183][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1156.943194][ T38] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 1156.943208][ T38] rfkill_register+0x37/0x900 [ 1156.943224][ T38] wiphy_register+0x246a/0x2d20 [ 1156.943246][ T38] ? __pfx_wiphy_register+0x10/0x10 [ 1156.943264][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1156.943278][ T38] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1156.943294][ T38] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1156.943312][ T38] ieee80211_register_hw+0x34a7/0x4110 [ 1156.943332][ T38] ? ieee80211_register_hw+0x1481/0x4110 [ 1156.943347][ T38] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1156.943357][ T38] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1156.943369][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1156.943379][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1156.943394][ T38] ? __hrtimer_setup+0x184/0x200 [ 1156.943404][ T38] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1156.943418][ T38] mac80211_hwsim_new_radio+0x2efe/0x5240 [ 1156.943436][ T38] ? mac80211_hwsim_new_radio+0x10f/0x5240 [ 1156.943448][ T38] ? stack_depot_save_flags+0x40/0x850 [ 1156.943468][ T38] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1156.943480][ T38] ? __nla_validate_parse+0x2400/0x2d40 [ 1156.943494][ T38] ? __x64_sys_sendmsg+0x1a1/0x260 [ 1156.943511][ T38] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1156.943526][ T38] ? __pfx___nla_validate_parse+0x10/0x10 [ 1156.943547][ T38] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1156.943561][ T38] ? rcu_is_watching+0x15/0xb0 [ 1156.943573][ T38] ? __nla_parse+0x40/0x60 [ 1156.943588][ T38] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1156.943604][ T38] genl_family_rcv_msg_doit+0x215/0x300 [ 1156.943618][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1156.943635][ T38] ? bpf_lsm_capable+0x9/0x20 [ 1156.943645][ T38] ? security_capable+0x7e/0x2e0 [ 1156.943664][ T38] genl_rcv_msg+0x60e/0x790 [ 1156.943677][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.943687][ T38] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1156.943706][ T38] netlink_rcv_skb+0x208/0x470 [ 1156.943720][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.943730][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1156.943741][ T38] ? rcu_read_unlock_special+0x39b/0x4e0 [ 1156.943763][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1156.943779][ T38] genl_rcv+0x28/0x40 [ 1156.943788][ T38] netlink_unicast+0x846/0xa10 [ 1156.943805][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1156.943817][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1156.943828][ T38] ? skb_put+0x11b/0x210 [ 1156.943842][ T38] netlink_sendmsg+0x805/0xb30 [ 1156.943860][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.943877][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1156.943890][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.943902][ T38] __sock_sendmsg+0x21c/0x270 [ 1156.943919][ T38] ____sys_sendmsg+0x508/0x810 [ 1156.943935][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1156.943952][ T38] ? import_iovec+0x74/0xa0 [ 1156.943964][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 1156.943978][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 1156.944012][ T38] ? __fget_files+0x2a/0x420 [ 1156.944022][ T38] ? __fget_files+0x3a6/0x420 [ 1156.944038][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 1156.944051][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1156.944069][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1156.944084][ T38] ? do_syscall_64+0xbe/0xf80 [ 1156.944096][ T38] do_syscall_64+0xfa/0xf80 [ 1156.944106][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.944115][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1156.944127][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.944137][ T38] RIP: 0033:0x7f5c6da6f749 [ 1156.944145][ T38] RSP: 002b:00007f5c6bcce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1156.944155][ T38] RAX: ffffffffffffffda RBX: 00007f5c6dcc5fa0 RCX: 00007f5c6da6f749 [ 1156.944162][ T38] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1156.944169][ T38] RBP: 00007f5c6bcce090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.944175][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.944181][ T38] R13: 00007f5c6dcc6038 R14: 00007f5c6dcc5fa0 R15: 00007fff3b48f378 [ 1156.944198][ T38] [ 1156.944203][ T38] INFO: task syz.4.2619:14670 blocked for more than 143 seconds. [ 1156.944211][ T38] Tainted: G L syzkaller #0 [ 1156.944216][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.944221][ T38] task:syz.4.2619 state:D stack:26928 pid:14670 tgid:14669 ppid:12409 task_flags:0x400040 flags:0x00080002 [ 1156.944253][ T38] Call Trace: [ 1156.944256][ T38] [ 1156.944263][ T38] __schedule+0x1480/0x50a0 [ 1156.944292][ T38] ? __pfx___schedule+0x10/0x10 [ 1156.944314][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1156.944325][ T38] rt_mutex_schedule+0x77/0xf0 [ 1156.944334][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1156.944347][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 1156.944368][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1156.944381][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1156.944394][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1156.944412][ T38] ? genl_rcv_msg+0x10d/0x790 [ 1156.944429][ T38] ? genl_rcv_msg+0x10d/0x790 [ 1156.944437][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1156.944449][ T38] ? radix_tree_lookup+0x243/0x290 [ 1156.944464][ T38] genl_rcv_msg+0x10d/0x790 [ 1156.944476][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.944496][ T38] netlink_rcv_skb+0x208/0x470 [ 1156.944508][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.944519][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1156.944539][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1156.944551][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1156.944566][ T38] genl_rcv+0x28/0x40 [ 1156.944574][ T38] netlink_unicast+0x846/0xa10 [ 1156.944590][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1156.944603][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1156.944614][ T38] ? skb_put+0x11b/0x210 [ 1156.944627][ T38] netlink_sendmsg+0x805/0xb30 [ 1156.944645][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.944661][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1156.944673][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.944686][ T38] __sock_sendmsg+0x21c/0x270 [ 1156.944702][ T38] __sys_sendto+0x3c7/0x520 [ 1156.944714][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1156.944747][ T38] __x64_sys_sendto+0xde/0x100 [ 1156.944760][ T38] do_syscall_64+0xfa/0xf80 [ 1156.944770][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.944780][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1156.944792][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.944802][ T38] RIP: 0033:0x7fa811fc15dc [ 1156.944810][ T38] RSP: 002b:00007fa81021cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1156.944819][ T38] RAX: ffffffffffffffda RBX: 00007fa81021cfc0 RCX: 00007fa811fc15dc [ 1156.944827][ T38] RDX: 0000000000000024 RSI: 00007fa81021d010 RDI: 0000000000000008 [ 1156.944833][ T38] RBP: 0000000000000000 R08: 00007fa81021cf14 R09: 000000000000000c [ 1156.944840][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1156.944846][ T38] R13: 00007fa81021cf68 R14: 00007fa81021d010 R15: 0000000000000000 [ 1156.944863][ T38] [ 1156.944867][ T38] INFO: task syz.4.2619:14679 blocked for more than 143 seconds. [ 1156.944875][ T38] Tainted: G L syzkaller #0 [ 1156.944880][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.944885][ T38] task:syz.4.2619 state:D stack:26704 pid:14679 tgid:14669 ppid:12409 task_flags:0x400140 flags:0x00080002 [ 1156.944914][ T38] Call Trace: [ 1156.944918][ T38] [ 1156.944924][ T38] __schedule+0x1480/0x50a0 [ 1156.944954][ T38] ? __pfx___schedule+0x10/0x10 [ 1156.944976][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1156.944987][ T38] rt_mutex_schedule+0x77/0xf0 [ 1156.944996][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1156.945011][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 1156.945032][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1156.945046][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1156.945058][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1156.945077][ T38] ? genl_rcv_msg+0x10d/0x790 [ 1156.945088][ T38] ? __pfx_stack_trace_save+0x10/0x10 [ 1156.945105][ T38] ? genl_rcv_msg+0x10d/0x790 [ 1156.945113][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1156.945125][ T38] ? radix_tree_lookup+0x243/0x290 [ 1156.945139][ T38] genl_rcv_msg+0x10d/0x790 [ 1156.945152][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.945171][ T38] netlink_rcv_skb+0x208/0x470 [ 1156.945184][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.945195][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1156.945215][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1156.945227][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1156.945241][ T38] genl_rcv+0x28/0x40 [ 1156.945254][ T38] netlink_unicast+0x846/0xa10 [ 1156.945271][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1156.945283][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1156.945295][ T38] ? skb_put+0x11b/0x210 [ 1156.945308][ T38] netlink_sendmsg+0x805/0xb30 [ 1156.945325][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.945342][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1156.945354][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.945367][ T38] __sock_sendmsg+0x21c/0x270 [ 1156.945383][ T38] __sys_sendto+0x3c7/0x520 [ 1156.945395][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1156.945420][ T38] ? exc_page_fault+0x82/0x100 [ 1156.945435][ T38] __x64_sys_sendto+0xde/0x100 [ 1156.945448][ T38] do_syscall_64+0xfa/0xf80 [ 1156.945459][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.945469][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1156.945481][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.945490][ T38] RIP: 0033:0x7fa811fc15dc [ 1156.945498][ T38] RSP: 002b:00007fa8101fbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1156.945508][ T38] RAX: ffffffffffffffda RBX: 00007fa8101fbfc0 RCX: 00007fa811fc15dc [ 1156.945516][ T38] RDX: 0000000000000024 RSI: 00007fa8101fc010 RDI: 000000000000000a [ 1156.945522][ T38] RBP: 0000000000000000 R08: 00007fa8101fbf14 R09: 000000000000000c [ 1156.945529][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 1156.945535][ T38] R13: 00007fa8101fbf68 R14: 00007fa8101fc010 R15: 0000000000000000 [ 1156.945552][ T38] [ 1156.945556][ T38] INFO: task syz.0.2621:14676 blocked for more than 143 seconds. [ 1156.945564][ T38] Tainted: G L syzkaller #0 [ 1156.945570][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.945574][ T38] task:syz.0.2621 state:D stack:26808 pid:14676 tgid:14674 ppid:5808 task_flags:0x400140 flags:0x00080002 [ 1156.945603][ T38] Call Trace: [ 1156.945606][ T38] [ 1156.945613][ T38] __schedule+0x1480/0x50a0 [ 1156.945642][ T38] ? __pfx___schedule+0x10/0x10 [ 1156.945667][ T38] rt_mutex_schedule+0x77/0xf0 [ 1156.945676][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1156.945695][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1156.945710][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1156.945723][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1156.945736][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1156.945755][ T38] ? genl_rcv_msg+0x10d/0x790 [ 1156.945771][ T38] ? genl_rcv_msg+0x10d/0x790 [ 1156.945780][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1156.945791][ T38] ? radix_tree_lookup+0x243/0x290 [ 1156.945806][ T38] genl_rcv_msg+0x10d/0x790 [ 1156.945819][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.945838][ T38] netlink_rcv_skb+0x208/0x470 [ 1156.945851][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.945862][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1156.945882][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1156.945894][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1156.945908][ T38] genl_rcv+0x28/0x40 [ 1156.945917][ T38] netlink_unicast+0x846/0xa10 [ 1156.945933][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1156.945946][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1156.945957][ T38] ? skb_put+0x11b/0x210 [ 1156.945970][ T38] netlink_sendmsg+0x805/0xb30 [ 1156.945987][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.946006][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1156.946019][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.946032][ T38] __sock_sendmsg+0x21c/0x270 [ 1156.946048][ T38] __sys_sendto+0x3c7/0x520 [ 1156.946060][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1156.946084][ T38] ? exc_page_fault+0x82/0x100 [ 1156.946100][ T38] __x64_sys_sendto+0xde/0x100 [ 1156.946113][ T38] do_syscall_64+0xfa/0xf80 [ 1156.946123][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.946133][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1156.946145][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.946155][ T38] RIP: 0033:0x7ff110d715dc [ 1156.946163][ T38] RSP: 002b:00007ff10efccec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1156.946173][ T38] RAX: ffffffffffffffda RBX: 00007ff10efccfc0 RCX: 00007ff110d715dc [ 1156.946180][ T38] RDX: 000000000000001c RSI: 00007ff10efcd010 RDI: 0000000000000006 [ 1156.946187][ T38] RBP: 0000000000000000 R08: 00007ff10efccf14 R09: 000000000000000c [ 1156.946193][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 1156.946199][ T38] R13: 00007ff10efccf68 R14: 00007ff10efcd010 R15: 0000000000000000 [ 1156.946216][ T38] [ 1156.946220][ T38] INFO: task syz.5.2636:14722 blocked for more than 143 seconds. [ 1156.946228][ T38] Tainted: G L syzkaller #0 [ 1156.946233][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.946238][ T38] task:syz.5.2636 state:D stack:24952 pid:14722 tgid:14721 ppid:9292 task_flags:0x400140 flags:0x00080002 [ 1156.946268][ T38] Call Trace: [ 1156.946271][ T38] [ 1156.946278][ T38] __schedule+0x1480/0x50a0 [ 1156.946307][ T38] ? __pfx___schedule+0x10/0x10 [ 1156.946329][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1156.946340][ T38] rt_mutex_schedule+0x77/0xf0 [ 1156.946349][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1156.946362][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 1156.946383][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1156.946397][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1156.946410][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1156.946428][ T38] ? genl_rcv_msg+0x10d/0x790 [ 1156.946445][ T38] ? genl_rcv_msg+0x10d/0x790 [ 1156.946453][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1156.946465][ T38] ? radix_tree_lookup+0x243/0x290 [ 1156.946479][ T38] genl_rcv_msg+0x10d/0x790 [ 1156.946492][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.946511][ T38] netlink_rcv_skb+0x208/0x470 [ 1156.946524][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.946534][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1156.946555][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1156.946567][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1156.946581][ T38] genl_rcv+0x28/0x40 [ 1156.946590][ T38] netlink_unicast+0x846/0xa10 [ 1156.946606][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1156.946618][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1156.946629][ T38] ? skb_put+0x11b/0x210 [ 1156.946642][ T38] netlink_sendmsg+0x805/0xb30 [ 1156.946660][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.946677][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1156.946689][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.946702][ T38] __sock_sendmsg+0x21c/0x270 [ 1156.946717][ T38] __sys_sendto+0x3c7/0x520 [ 1156.946730][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1156.946754][ T38] ? fd_install+0x98/0x3e0 [ 1156.946764][ T38] ? fd_install+0x30d/0x3e0 [ 1156.946779][ T38] __x64_sys_sendto+0xde/0x100 [ 1156.946792][ T38] do_syscall_64+0xfa/0xf80 [ 1156.946802][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.946812][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1156.946824][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.946834][ T38] RIP: 0033:0x7fb6efb215dc [ 1156.946842][ T38] RSP: 002b:00007fb6edd7cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1156.946852][ T38] RAX: ffffffffffffffda RBX: 00007fb6edd7cfc0 RCX: 00007fb6efb215dc [ 1156.946859][ T38] RDX: 000000000000001c RSI: 00007fb6edd7d010 RDI: 0000000000000013 [ 1156.946866][ T38] RBP: 0000000000000000 R08: 00007fb6edd7cf14 R09: 000000000000000c [ 1156.946872][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000013 [ 1156.946878][ T38] R13: 00007fb6edd7cf68 R14: 00007fb6edd7d010 R15: 0000000000000000 [ 1156.946895][ T38] [ 1156.946900][ T38] INFO: task syz-executor:14726 blocked for more than 143 seconds. [ 1156.946907][ T38] Tainted: G L syzkaller #0 [ 1156.946913][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.946918][ T38] task:syz-executor state:D stack:27992 pid:14726 tgid:14726 ppid:1 task_flags:0x400040 flags:0x00080000 [ 1156.946947][ T38] Call Trace: [ 1156.946950][ T38] [ 1156.946957][ T38] __schedule+0x1480/0x50a0 [ 1156.946986][ T38] ? __pfx___schedule+0x10/0x10 [ 1156.947009][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1156.947020][ T38] rt_mutex_schedule+0x77/0xf0 [ 1156.947030][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1156.947042][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 1156.947064][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1156.947078][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1156.947090][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1156.947109][ T38] ? rfkill_register+0x37/0x900 [ 1156.947129][ T38] ? rfkill_register+0x37/0x900 [ 1156.947141][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1156.947152][ T38] ? device_initialize+0x25b/0x450 [ 1156.947165][ T38] rfkill_register+0x37/0x900 [ 1156.947181][ T38] hci_register_dev+0x3f2/0x850 [ 1156.947198][ T38] vhci_create_device+0x39c/0x660 [ 1156.947216][ T38] vhci_write+0x3d0/0x4a0 [ 1156.947232][ T38] vfs_write+0x5d5/0xb40 [ 1156.947252][ T38] ? __pfx_vhci_write+0x10/0x10 [ 1156.947267][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1156.947291][ T38] ksys_write+0x14b/0x260 [ 1156.947306][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1156.947321][ T38] ? do_syscall_64+0xbe/0xf80 [ 1156.947333][ T38] do_syscall_64+0xfa/0xf80 [ 1156.947343][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.947352][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1156.947365][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.947374][ T38] RIP: 0033:0x7f0bab83e1c0 [ 1156.947382][ T38] RSP: 002b:00007ffec4fcea18 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1156.947392][ T38] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0bab83e1c0 [ 1156.947399][ T38] RDX: 0000000000000002 RSI: 00007ffec4fcea2a RDI: 00000000000000ca [ 1156.947405][ T38] RBP: 00007f0baba967b8 R08: 0000000000000000 R09: 00007f0bac5cd6c0 [ 1156.947412][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1156.947418][ T38] R13: 0000000000000003 R14: 00007ffec4fced78 R15: 0000000000000000 [ 1156.947434][ T38] [ 1156.947439][ T38] INFO: task syz-executor:14727 blocked for more than 143 seconds. [ 1156.947447][ T38] Tainted: G L syzkaller #0 [ 1156.947452][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.947457][ T38] task:syz-executor state:D stack:28056 pid:14727 tgid:14727 ppid:1 task_flags:0x400040 flags:0x00080000 [ 1156.947485][ T38] Call Trace: [ 1156.947488][ T38] [ 1156.947495][ T38] __schedule+0x1480/0x50a0 [ 1156.947524][ T38] ? __pfx___schedule+0x10/0x10 [ 1156.947546][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1156.947557][ T38] rt_mutex_schedule+0x77/0xf0 [ 1156.947567][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1156.947579][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 1156.947601][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1156.947614][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1156.947627][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1156.947645][ T38] ? rfkill_register+0x37/0x900 [ 1156.947666][ T38] ? rfkill_register+0x37/0x900 [ 1156.947678][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1156.947689][ T38] ? device_initialize+0x25b/0x450 [ 1156.947701][ T38] rfkill_register+0x37/0x900 [ 1156.947717][ T38] hci_register_dev+0x3f2/0x850 [ 1156.947732][ T38] vhci_create_device+0x39c/0x660 [ 1156.947748][ T38] vhci_write+0x3d0/0x4a0 [ 1156.947764][ T38] vfs_write+0x5d5/0xb40 [ 1156.947779][ T38] ? __pfx_vhci_write+0x10/0x10 [ 1156.947793][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1156.947818][ T38] ksys_write+0x14b/0x260 [ 1156.947832][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1156.947847][ T38] ? do_syscall_64+0xbe/0xf80 [ 1156.947858][ T38] do_syscall_64+0xfa/0xf80 [ 1156.947868][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.947878][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1156.947890][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.947899][ T38] RIP: 0033:0x7f936bafe1c0 [ 1156.947907][ T38] RSP: 002b:00007ffe639cc628 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1156.947916][ T38] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f936bafe1c0 [ 1156.947923][ T38] RDX: 0000000000000002 RSI: 00007ffe639cc63a RDI: 00000000000000ca [ 1156.947930][ T38] RBP: 00007f936bd567b8 R08: 0000000000000000 R09: 00007f936c88d6c0 [ 1156.947936][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1156.947943][ T38] R13: 0000000000000003 R14: 00007ffe639cc988 R15: 0000000000000000 [ 1156.947959][ T38] [ 1156.947963][ T38] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1156.947968][ T38] INFO: task syz-executor:14730 blocked for more than 143 seconds. [ 1156.947976][ T38] Tainted: G L syzkaller #0 [ 1156.947981][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.947986][ T38] task:syz-executor state:D stack:27312 pid:14730 tgid:14730 ppid:1 task_flags:0x400040 flags:0x00080000 [ 1156.948015][ T38] Call Trace: [ 1156.948018][ T38] [ 1156.948025][ T38] __schedule+0x1480/0x50a0 [ 1156.948054][ T38] ? __pfx___schedule+0x10/0x10 [ 1156.948076][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1156.948087][ T38] rt_mutex_schedule+0x77/0xf0 [ 1156.948096][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1156.948109][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 1156.948131][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1156.948144][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1156.948157][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1156.948175][ T38] ? rfkill_register+0x37/0x900 [ 1156.948196][ T38] ? rfkill_register+0x37/0x900 [ 1156.948207][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1156.948219][ T38] ? device_initialize+0x25b/0x450 [ 1156.948231][ T38] rfkill_register+0x37/0x900 [ 1156.948247][ T38] hci_register_dev+0x3f2/0x850 [ 1156.948268][ T38] vhci_create_device+0x39c/0x660 [ 1156.948284][ T38] vhci_write+0x3d0/0x4a0 [ 1156.948300][ T38] vfs_write+0x5d5/0xb40 [ 1156.948315][ T38] ? __pfx_vhci_write+0x10/0x10 [ 1156.948329][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1156.948354][ T38] ksys_write+0x14b/0x260 [ 1156.948368][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1156.948383][ T38] ? do_syscall_64+0xbe/0xf80 [ 1156.948395][ T38] do_syscall_64+0xfa/0xf80 [ 1156.948405][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.948415][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1156.948426][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.948436][ T38] RIP: 0033:0x7f71a3ace1c0 [ 1156.948444][ T38] RSP: 002b:00007fff14c37da8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1156.948454][ T38] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f71a3ace1c0 [ 1156.948461][ T38] RDX: 0000000000000002 RSI: 00007fff14c37dba RDI: 00000000000000ca [ 1156.948467][ T38] RBP: 00007f71a3d267b8 R08: 0000000000000000 R09: 00007f71a485d6c0 [ 1156.948474][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1156.948480][ T38] R13: 0000000000000003 R14: 00007fff14c38108 R15: 0000000000000000 [ 1156.948497][ T38] [ 1156.948500][ T38] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1156.948506][ T38] INFO: task syz-executor:14731 blocked for more than 143 seconds. [ 1156.948514][ T38] Tainted: G L syzkaller #0 [ 1156.948519][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.948524][ T38] task:syz-executor state:D stack:28056 pid:14731 tgid:14731 ppid:1 task_flags:0x400040 flags:0x00080000 [ 1156.948550][ T38] Call Trace: [ 1156.948553][ T38] [ 1156.948560][ T38] __schedule+0x1480/0x50a0 [ 1156.948579][ T38] ? do_raw_spin_lock+0x121/0x290 [ 1156.948599][ T38] ? __pfx___schedule+0x10/0x10 [ 1156.948621][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1156.948632][ T38] rt_mutex_schedule+0x77/0xf0 [ 1156.948641][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1156.948653][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 1156.948674][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1156.948688][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1156.948701][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1156.948719][ T38] ? rfkill_register+0x37/0x900 [ 1156.948739][ T38] ? rfkill_register+0x37/0x900 [ 1156.948751][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1156.948762][ T38] ? device_initialize+0x25b/0x450 [ 1156.948775][ T38] rfkill_register+0x37/0x900 [ 1156.948790][ T38] hci_register_dev+0x3f2/0x850 [ 1156.948806][ T38] vhci_create_device+0x39c/0x660 [ 1156.948823][ T38] vhci_write+0x3d0/0x4a0 [ 1156.948838][ T38] vfs_write+0x5d5/0xb40 [ 1156.948853][ T38] ? __pfx_vhci_write+0x10/0x10 [ 1156.948867][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1156.948892][ T38] ksys_write+0x14b/0x260 [ 1156.948906][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1156.948921][ T38] ? do_syscall_64+0xbe/0xf80 [ 1156.948933][ T38] do_syscall_64+0xfa/0xf80 [ 1156.948943][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.948953][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1156.948965][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.948974][ T38] RIP: 0033:0x7faea5c1e1c0 [ 1156.948982][ T38] RSP: 002b:00007fff3a2bddd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1156.948992][ T38] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007faea5c1e1c0 [ 1156.949000][ T38] RDX: 0000000000000002 RSI: 00007fff3a2bddea RDI: 00000000000000ca [ 1156.949008][ T38] RBP: 00007faea5e767b8 R08: 0000000000000000 R09: 00007faea69ad6c0 [ 1156.949014][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1156.949020][ T38] R13: 0000000000000003 R14: 00007fff3a2be138 R15: 0000000000000000 [ 1156.949037][ T38] [ 1156.949041][ T38] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1156.949062][ T38] [ 1156.949062][ T38] Showing all locks held in the system: [ 1156.949071][ T38] 1 lock held by khungtaskd/38: [ 1156.949077][ T38] #0: ffffffff8d5ae880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1156.949135][ T38] 2 locks held by getty/5559: [ 1156.949141][ T38] #0: ffff8880350f00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1156.949166][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 1156.949191][ T38] 4 locks held by kworker/0:4/5876: [ 1156.949197][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1156.949221][ T38] #1: ffffc90004f6fb80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1156.949253][ T38] #2: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 1156.949279][ T38] #3: ffff8880291520f0 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 1156.949312][ T38] 1 lock held by syz.1.2614/14648: [ 1156.949317][ T38] #0: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4e/0x220 [ 1156.949340][ T38] 1 lock held by syz.1.2614/14651: [ 1156.949345][ T38] #0: ffff8880291520f0 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 1156.949368][ T38] 3 locks held by syz.6.2617/14666: [ 1156.949374][ T38] #0: ffffffff8e90dae0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1156.949395][ T38] #1: ffffffff8e90d8d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1156.949417][ T38] #2: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1156.949443][ T38] 2 locks held by syz.4.2619/14670: [ 1156.949449][ T38] #0: ffffffff8e90dae0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1156.949469][ T38] #1: ffffffff8e90d8d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1156.949491][ T38] 2 locks held by syz.4.2619/14679: [ 1156.949497][ T38] #0: ffffffff8e90dae0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1156.949517][ T38] #1: ffffffff8e90d8d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1156.949539][ T38] 2 locks held by syz.0.2621/14676: [ 1156.949544][ T38] #0: ffffffff8e90dae0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1156.949565][ T38] #1: ffffffff8e90d8d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1156.949586][ T38] 2 locks held by syz.5.2636/14722: [ 1156.949592][ T38] #0: ffffffff8e90dae0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1156.949613][ T38] #1: ffffffff8e90d8d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1156.949634][ T38] 2 locks held by syz-executor/14726: [ 1156.949640][ T38] #0: ffff88805ae24988 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1156.949666][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1156.949692][ T38] 2 locks held by syz-executor/14727: [ 1156.949698][ T38] #0: ffff888033943188 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.154268][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.154331][ T38] 2 locks held by syz-executor/14730: [ 1157.154343][ T38] #0: ffff888065f6a188 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.154391][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.154437][ T38] 2 locks held by syz-executor/14731: [ 1157.154448][ T38] #0: ffff888065f69988 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.154493][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.154539][ T38] 2 locks held by syz-executor/14733: [ 1157.154549][ T38] #0: ffff88805aab4988 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.154594][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.154638][ T38] 2 locks held by syz-executor/14736: [ 1157.154648][ T38] #0: ffff888048df0188 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.154694][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.154740][ T38] 2 locks held by syz-executor/14737: [ 1157.154750][ T38] #0: ffff8880655e5188 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.154796][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.154842][ T38] 2 locks held by syz-executor/14740: [ 1157.154852][ T38] #0: ffff88806023b188 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.154898][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.154943][ T38] 2 locks held by syz-executor/14741: [ 1157.154954][ T38] #0: ffff888060239188 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.155006][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.155051][ T38] 2 locks held by syz-executor/14743: [ 1157.155063][ T38] #0: ffff88808be7c988 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.155108][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.155153][ T38] 1 lock held by syz-executor/14745: [ 1157.155165][ T38] 2 locks held by syz-executor/14746: [ 1157.155175][ T38] #0: ffff8880503b3188 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.155221][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.155265][ T38] 2 locks held by syz-executor/14747: [ 1157.155275][ T38] #0: ffff8880503b1988 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.155321][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.155366][ T38] 1 lock held by syz-executor/14749: [ 1157.155377][ T38] 2 locks held by syz-executor/14750: [ 1157.155388][ T38] #0: ffff88808e702188 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.155434][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.155478][ T38] 2 locks held by syz-executor/14751: [ 1157.155488][ T38] #0: ffff88808e700988 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.155533][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.155577][ T38] 2 locks held by syz-executor/14753: [ 1157.155587][ T38] #0: ffff8880497e7188 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 1157.155632][ T38] #1: ffffffff8eb90e78 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 1157.160251][ T38] [ 1157.160262][ T38] ============================================= [ 1157.160262][ T38] [ 1157.160271][ T38] NMI backtrace for cpu 1 [ 1157.160288][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1157.160313][ T38] Tainted: [L]=SOFTLOCKUP [ 1157.160320][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1157.160331][ T38] Call Trace: [ 1157.160338][ T38] [ 1157.160347][ T38] dump_stack_lvl+0x189/0x250 [ 1157.160376][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1157.160398][ T38] ? __pfx__printk+0x10/0x10 [ 1157.160428][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1157.160453][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1157.160477][ T38] ? __pfx__printk+0x10/0x10 [ 1157.160498][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1157.160519][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1157.160543][ T38] sys_info+0x135/0x170 [ 1157.160562][ T38] watchdog+0xf95/0xfe0 [ 1157.160585][ T38] ? watchdog+0x20a/0xfe0 [ 1157.160611][ T38] kthread+0x711/0x8a0 [ 1157.160638][ T38] ? __pfx_watchdog+0x10/0x10 [ 1157.160655][ T38] ? __pfx_kthread+0x10/0x10 [ 1157.160675][ T38] ? rt_spin_unlock+0x150/0x200 [ 1157.160700][ T38] ? rt_spin_unlock+0x161/0x200 [ 1157.160718][ T38] ? __pfx_kthread+0x10/0x10 [ 1157.160741][ T38] ret_from_fork+0x599/0xb30 [ 1157.160762][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1157.160790][ T38] ? __switch_to_asm+0x39/0x70 [ 1157.160811][ T38] ? __switch_to_asm+0x33/0x70 [ 1157.160831][ T38] ? __pfx_kthread+0x10/0x10 [ 1157.160854][ T38] ret_from_fork_asm+0x1a/0x30 [ 1157.160891][ T38] [ 1157.160898][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1157.160925][ C0] NMI backtrace for cpu 0 [ 1157.160941][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1157.160963][ C0] Tainted: [L]=SOFTLOCKUP [ 1157.160970][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1157.160980][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 1157.161005][ C0] Code: 5f b5 fc 44 89 f9 d3 e5 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2c cb 17 fd 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 1157.161019][ C0] RSP: 0018:ffffc90000167930 EFLAGS: 00000202 [ 1157.161034][ C0] RAX: 000000000000005d RBX: 000000000000005d RCX: 0000000000000000 [ 1157.161045][ C0] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1157.161056][ C0] RBP: 00000000000003f8 R08: 0000000000000000 R09: 0000000000000000 [ 1157.161066][ C0] R10: dffffc0000000000 R11: ffffffff850b02a0 R12: dffffc0000000000 [ 1157.161079][ C0] R13: 0000000000000001 R14: ffffffff98f86d40 R15: 0000000000000000 [ 1157.161091][ C0] FS: 0000000000000000(0000) GS:ffff888126d03000(0000) knlGS:0000000000000000 [ 1157.161105][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1157.161118][ C0] CR2: 00007fbe3512f4fd CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 1157.161133][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1157.161144][ C0] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1157.161155][ C0] Call Trace: [ 1157.161162][ C0] [ 1157.161171][ C0] serial8250_console_write+0x1291/0x1b40 [ 1157.161203][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1157.161232][ C0] ? console_flush_one_record+0x10b/0xbe0 [ 1157.161257][ C0] ? console_flush_one_record+0x4a0/0xbe0 [ 1157.161280][ C0] console_flush_one_record+0x6b5/0xbe0 [ 1157.161300][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1157.161321][ C0] ? console_flush_one_record+0x10b/0xbe0 [ 1157.161345][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1157.161365][ C0] ? legacy_kthread_func+0x15c/0x210 [ 1157.161386][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1157.161402][ C0] ? schedule+0x91/0x360 [ 1157.161429][ C0] legacy_kthread_func+0x16f/0x210 [ 1157.161451][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1157.161471][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1157.161492][ C0] ? __kthread_parkme+0x7b/0x200 [ 1157.161512][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1157.161535][ C0] kthread+0x711/0x8a0 [ 1157.161558][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1157.161582][ C0] ? __pfx_kthread+0x10/0x10 [ 1157.161602][ C0] ? rt_spin_unlock+0x150/0x200 [ 1157.161625][ C0] ? rt_spin_unlock+0x161/0x200 [ 1157.161644][ C0] ? __pfx_kthread+0x10/0x10 [ 1157.161666][ C0] ret_from_fork+0x599/0xb30 [ 1157.161684][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1157.161708][ C0] ? __switch_to_asm+0x39/0x70 [ 1157.161729][ C0] ? __switch_to_asm+0x33/0x70 [ 1157.161749][ C0] ? __pfx_kthread+0x10/0x10 [ 1157.161771][ C0] ret_from_fork_asm+0x1a/0x30 [ 1157.161802][ C0] [ 1157.161935][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1157.161953][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1157.161984][ T38] Tainted: [L]=SOFTLOCKUP [ 1157.161991][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1157.162001][ T38] Call Trace: [ 1157.162009][ T38] [ 1157.162017][ T38] dump_stack_lvl+0x99/0x250 [ 1157.162038][ T38] ? __asan_memcpy+0x40/0x70 [ 1157.162059][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1157.162081][ T38] ? __pfx__printk+0x10/0x10 [ 1157.162110][ T38] vpanic+0x237/0x6d0 [ 1157.162132][ T38] ? __pfx_vpanic+0x10/0x10 [ 1157.162164][ T38] panic+0xb9/0xc0 [ 1157.162185][ T38] ? __pfx_panic+0x10/0x10 [ 1157.162215][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1157.162240][ T38] watchdog+0xfdf/0xfe0 [ 1157.162264][ T38] ? watchdog+0x20a/0xfe0 [ 1157.162289][ T38] kthread+0x711/0x8a0 [ 1157.162314][ T38] ? __pfx_watchdog+0x10/0x10 [ 1157.162332][ T38] ? __pfx_kthread+0x10/0x10 [ 1157.162351][ T38] ? rt_spin_unlock+0x150/0x200 [ 1157.162376][ T38] ? rt_spin_unlock+0x161/0x200 [ 1157.162395][ T38] ? __pfx_kthread+0x10/0x10 [ 1157.162417][ T38] ret_from_fork+0x599/0xb30 [ 1157.162438][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1157.162466][ T38] ? __switch_to_asm+0x39/0x70 [ 1157.162486][ T38] ? __switch_to_asm+0x33/0x70 [ 1157.162506][ T38] ? __pfx_kthread+0x10/0x10 [ 1157.162529][ T38] ret_from_fork_asm+0x1a/0x30 [ 1157.162567][ T38] [ 1157.162951][ T38] Kernel Offset: disabled