last executing test programs: 10.950165698s ago: executing program 4 (id=2326): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x2, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xabe}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_FILTER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0xdc8d570202969554}, 0x2400c800) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010f00000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES16=0xffffffffffffffff], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_usb_connect$midi(0x6, 0x86, &(0x7f0000000a40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0xf8, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x2, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x4, 0x8}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x48, 0x1, [{0xff, 0x80}], 0x1}], [{{0x9, 0x5, 0x8, 0x3, 0x10, 0x3, 0x81, 0x5d, {0xa, 0x25, 0x1, 0x6, "5dc41d1023d5"}}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xc1, 0x7, 0x3, {0x6, 0x25, 0x1, 0x2, "18a8"}}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x45, 0x7, 0x1, {0xd, 0x25, 0x1, 0x9, "872c93c05f09b86cc1"}}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x7, 0x40, 0x3, {0xb, 0x25, 0x1, 0x7, "4e72f35c7a2a89"}}}]}}}}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x111, 0x7f, 0x8, 0x6d, 0x40, 0xe1}, 0x132, &(0x7f0000000b40)={0x5, 0xf, 0x132, 0x5, [@wireless={0xb, 0x10, 0x1, 0x0, 0x21, 0x3, 0xc, 0x5, 0x9}, @generic={0xec, 0x10, 0x1, "99f5b0e715291734c4b4896f845ed9448b4c364bbbf26c606e5f19666e00d6d63ad949eb16888a94f26b07e0519cd797274173e979d826c429613e8820be3966c3ef701e77d5f4e7cd5bc1b26fb2e866c75a8a1dccb0888278b9725c2fd1c94580dfcdb1fca513dc2ac6d0a83e08a58163acec41fe6aec1c6fdd041e28f4a607fd6162eeb027a4cc75f92071fe67be2d72fe0a73f9f6420d54b6d9500c6affc7f3d75818379484627241aced65732ec3d3ab13a8d93b74d3cb96ca4fe5962cf421d21e31804a720e14ff2b28e371d5ac93ad71e30056357283eed7aadaa4548e37caf81cd515569973"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x40, 0x2e, 0x61, 0xff, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x6, 0xc, 0x2afb}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x1, 0xee00, 0xc, [0xc0c0, 0x0, 0xc030, 0xc02e, 0xc030, 0x3f00]}]}, 0x7, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x4001}}, {0x13, &(0x7f0000000cc0)=@string={0x13, 0x3, "dd03615796e34a04e5c0f17f8fc1c841a6"}}, {0x7f, &(0x7f0000000d00)=@string={0x7f, 0x3, "b6ce14cfc3b1cd1aa7cd964192ec88ed29426ed5c461d9dfd8e265f33c670e1a7f2e465295eb4fc4084026fb09cc6ba0a1fe595eb4e42361e7d752d71449b3c74f9ab368c670f9baa11b037ddcd438cc3b2fcede03faf5725e3bcf587e2d47c0efc935d0a3b9b8b3b579a37b7f26a2f0e0025e9daabf4da39f29669608"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x80c}}]}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32], 0x30}}, 0x40814) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x20, 0x31, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x93a, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xa, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x620, 0x10, 0x1, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x1, 0x9}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x4, 0x5, 0xb, 0xff, 0x7}, 0x66, &(0x7f00000003c0)={0x5, 0xf, 0x66, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x9, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0x2, 0x1}, @generic={0x3b, 0x10, 0x4, "9b6a3a80f0c16c6cf0cdb1d90c993b13c6ff1a74032f6564054079a0c8c565f4900906141866d58cd3dc981dd473fbaf175e5ac4cd33bf6f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x21, 0x20, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x8, 0x8}]}, 0x4, [{0x6e, &(0x7f0000000440)=@string={0x6e, 0x3, "ab070f0811c88b41e66709fa680d4c9b887be2ddd0755d7d605c76fe997987a08f0c9aebbeeb21a83fad0318bec389743cc281a6f12b03cf875f60b04c7e0fdbc5bb3e63c8866b48010ba16d2f5eedb1de4a38f69be90e791c199d89d4a0c25f460a9c7835bae649aa48ea43"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x100a}}, {0xf6, &(0x7f00000005c0)=@string={0xf6, 0x3, "f9bb658fcdfd3c4dd47870652ac5c256eb36393c72bd9a1c40f1f5b984576487edb6c63b4de1b2cc2c78898d33e238d7d45c73630f9c4f08b45593bd313a34cefd510d297a6f72db2ab5a4ef3ae42c3f21817dd8e7db4649999d806b02752b2cd727b30239cc50db9b39d6781e24ad24840c08ffd160fba1ed0f4b0b4ffb83f6e830ff1379d327b178101cd35a51817dc9d49931d23fd5b52ca3c4826555181e5dfd038cd6ca54b7fd0434e210315b53453469ddbf433fbf940833189f98446aa65f24b9924831e3064c2dd30ae6e0bed99b8618fda0fd6ca151727f571f66986fcc278438204b5f11eaf5f25f51f53dc22b2114"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x422}}]}) syz_usb_control_io(r5, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x20, 0xb, 0x28, {0x28, 0x9, "54b89cae72ea287f3c57f3e8b07705c935a09280b58ffe0620409f09193e0178e544a667dcb0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x2, 0x1, 0x0, &(0x7f00000001c0)=""/25, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)={0x2}) 10.877960786s ago: executing program 1 (id=2327): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8082, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) r4 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r4, 0x409, 0x3f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000014000000020a030700000000000000000000000514000000020a05"], 0x70}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r6}, 0x20) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f00000003c0)={'caif0\x00'}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400461c1d67f6f94007134cf6efb8000a007a290457f0189b31627287ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a15a8b16f14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f211ce3bb9ad809d5e1cace81ed0bff32ebb42a9ecbee5de6ccd40dd6826eef3d93452a92954b43370e9703920723f9a941c6a0501148", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24080000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x80082102, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2513000000200001801400020076657468315f746f5f6873720000000008000100", @ANYRES32, @ANYBLOB="900001801400020076657468315f6d61637674617000000008000300010000000800030000000000140002007665746830000000000000000000000008000300020000001400020070696d367265673100000000000000001400020070696d3672656730000000000000000008000300020000001400020070696d7265670000000000000000000008000100", @ANYRES32, @ANYBLOB="30000180080003000000000008000300070000000800030001000000140002006261746164765f736c6176655f3000001c00018008000100", @ANYRES32=r9, @ANYBLOB="080041dbcec8b678450c8e4ff7", @ANYRES32=r10, @ANYBLOB="0800030000000000740001801400020067726574617030000000000000000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB="0800030001000000140002006d61637365633000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="1400020064756d6d7930000000000000000000001400020076657468315f6d6163767461700000001800018014000200000000000000000000000000000000000c00018008000300030000000c0001800800030003000000"], 0x1b4}, 0x1, 0x0, 0x0, 0x2005}, 0x4008000) setresuid(0x0, 0xee00, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) read$hiddev(0xffffffffffffffff, 0x0, 0x0) 9.705396485s ago: executing program 4 (id=2331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0xfffffffd, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) 9.289650204s ago: executing program 1 (id=2333): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e000790b6462272963484d3e4206", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r2, 0x2, &(0x7f0000000600)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x4000c}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x5, r1, 0x0, 0x0, 0x100000001}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) r5 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) wait4(r5, 0x0, 0x8, 0x0) getsockopt$inet_opts(r3, 0x0, 0x17, &(0x7f0000937fed)=""/3, &(0x7f00000004c0)=0x3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106000000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350602000fff07201706000020191800160600000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x9, &(0x7f00000000c0)=0x2, 0x4) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000300)={r10}) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010623010020fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="08000d000400000008000e"], 0x2c}, 0x1, 0x0, 0x0, 0x20000820}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x6, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x7f}, @alu={0x7, 0x1, 0x4, 0x5, 0x3, 0x0, 0x1}, @exit], &(0x7f0000001fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.12961622s ago: executing program 2 (id=2335): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 8.794634821s ago: executing program 2 (id=2336): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) writev(r0, &(0x7f0000003280)=[{&(0x7f0000002080)='Y', 0x1}, {0x0}], 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) msgrcv(0x0, 0x0, 0x0, 0x0, 0x5800) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r3, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000140)=[{&(0x7f0000001700)=""/4082, 0xff2}], 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r6, &(0x7f0000000200), 0x0, 0x4000000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xd}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000100)={0x7, 0xc7, 0x204, 0xae, 0xffffffff, 0x7, 0x2, 0x4}, 0x20) 8.025668101s ago: executing program 1 (id=2338): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) socket$kcm(0x21, 0x2, 0xa) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_usb_connect$midi(0x6, 0xcf, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x1, 0x1, 0x8, 0x100, 0xc4, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x8, [@midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x4e, 0x4, [{0x6, 0x5}, {0x2, 0x2}, {0xf9, 0x1}, {0xb, 0x8}], 0x5}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x3, 0x2, 0x2, [{0xa, 0xcc}, {0x84, 0x14}], 0xc8}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x6ef744deac73cb2f, 0x9b, 0x1, [{}], 0x3}], [{{0x9, 0x5, 0x0, 0x84fdd878bd2fe3b0, 0x10, 0x8, 0x0, 0x6, {0x14, 0x25, 0x1, 0x10, "f8e7aee9a86d07eddc427ba64a4d8c07"}}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0x5, 0x2, {0x14, 0x25, 0x1, 0x10, "28381c9d8f466a3c44218adcca532852"}}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x9, 0x1, 0x8, {0xa, 0x25, 0x1, 0x6, "2cef6187fbdb"}}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0xf0, 0x2, 0x40, {0x9, 0x25, 0x1, 0x5, "3c506e0ee4"}}}, {{0x9, 0x5, 0x4, 0x4, 0x0, 0xad, 0xca, 0x7f, {0x12, 0x25, 0x1, 0xe, "06dd379fbdea67cbdc259de75a5b"}}}]}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x4, 0xc, 0x83, 0xf0, 0xf0}, 0x19, &(0x7f0000000200)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "a2a05eaf7320f2d112ca10e4d36b1078"}]}, 0x1, [{0xce, &(0x7f0000000240)=@string={0xce, 0x3, "2bd2618ecb560d30cb4ee6b76793efb083b7dc669a364c88eec6383bf6a3bf8195169f873967ae56cdc9f4482d05ee20d9f697aa3f99f67b8cbb358f0d464fbd5c570dd6a4b07e9bd5cdf3fe350ec0807df9557f1811970880fa55bfa723e94c142e4857a191979c1a03a5a5f77c3f2af2ca1cc28017fa1775dce1b377977288d00a09369ee5711b5c50599c152beb8c5e3fbc7beecfe7d13333c25ad309bc4a9964c130883c714ccbfdcb79cd94a3794442617c48e997e63a71db886208fff52981f16738a820455f898530"}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000500)={0x14, &(0x7f0000000380)={0x40, 0x11, 0xeb, {0xeb, 0xb, "88a62034ac87939cde46de9fbbef8316069f63a1de7624c23a7220ee3d88e973dbff21ff6812ca2f1eec9aebb71a83bcb72d19b49801139597caccf321c26521504f94a482500be785d8ef9de82b4892f7e1ea16d2164af88d7f14c191d604d06b1f1ae6f3d7251c3dc412911cdbdbb8df5f20be432ffaa4f32ef66e6a26665d6cf45412afca47e2c6a6e0b310c0ec56745338081002a1272c9601e8171654d88f9935f240aef97f42be02afcdf195e600f10dc3f4f36015a4c89879523a680e06291ca2808b74a44c201c495c4b85ed20e9c36d2864caf59a9adc84f2dada05f80abfd232889cf112"}}, &(0x7f0000000480)={0x0, 0x3, 0x3c, @lang_id={0x0, 0x3, 0xe1f8e8c2b16d6656}}}, &(0x7f0000000740)={0x44, &(0x7f00000006c0)={0x20, 0x8, 0x2d, "ccf613c0fb2f0f53e7fa313f92206f7d11b078fa0986fc931d67ce3513160cfb00fc7f4a6196de4730ad91fe18"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0xfffffffffffffd51, 0x8}, &(0x7f0000000600)={0x20, 0x81, 0x3, "f76ca2"}, &(0x7f0000000640)=ANY=[@ANYBLOB="b982010000003e"], &(0x7f0000000680)={0x20, 0x83, 0x3, "0eed90"}, &(0x7f00000004c0)={0x20, 0x84, 0x4, "613805e2"}, &(0x7f0000000700)={0x20, 0x85, 0x63, "8c0194"}}) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f0000000000), 0x9, 0x400, 0x0, 0x0, 0x0, 0x70}) 6.285045935s ago: executing program 0 (id=2340): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x10d000, 0x800, 0x7ffffffd, 0x1}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0x4018aee2, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="0a0001"], 0x48}}, 0x0) (async) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r2, 0xdbe88000) (async) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x214}]}]}, 0x94}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x1006802, &(0x7f0000000840)=ANY=[@ANYBLOB="6d706f6c3d7072656665723d72656c61746976653a4e09d1d19c5d04c601004c912624708d03f36a6081ba9918afc4b063eaab5cc67449448c8639ff076b5dc22d040fc38a3dbb8b72deb6be969030e3586ca40f7646f3c2d0c473f00a7bf0d8577cbe6efc9a0f45910550d71957fc773c817d42aa65273c44fd3abd221b94a82000cfd74c8dc063c5327fd3abbbb4281b92c248743cd6398804dda940b1e0ed"]) (async) set_mempolicy(0x2002, &(0x7f0000000080)=0x9, 0x9) (async) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000800)={0x1, 0x3, 0x8, 0x2a, 0x3}) (async) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000280)='tmpfs\x00', &(0x7f00000002c0)='./file0\x00', r6) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000006c00), 0x0, 0x20004000) r7 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r7, &(0x7f0000000500)={0x14, &(0x7f0000000340)={0x20, 0x23, 0x89, {0x89, 0x10, "1ab6bd79431af3fb60e575105992880a448523159e1981481db89e97d915a77a8cf84b5afd6a80a00927140ae5898678290959eb30b8d963bc06695015508704144f937458a0182bbe5404b0fb3cc7f5a517e451f8a6896f592ccb146d0c431e50462849cf079c567a39e5a9753ac9b828e38f2d6042f4d0c1409c4681cc47849b89da357439f5"}}, &(0x7f0000000400)={0x0, 0x3, 0xda, @string={0xda, 0x3, "547ee085de66d68d3b25ed06b571d326f01517c9a703be28c0310fd7ce7ddacd33205a1b3ab93c92385b37bd40cd81d4301a1ffa49e0b7e02bdf557620d9a7377a88f155ed71e2a5947b9af4e0a769eef706d7087b882559f527cab06403a2d0a70d4058bff2c54615715a0b70e5e1e9c24799cd6807ca36da8a66e30f1347017e68e637eb66a2b6cbfa6c62c91166fc5cf879400173dbba4b83f57f92b232eef716536149a0c66dcd46d1d49341c1280f10897cc6634ae9bc338f539f3f2cdeca7a6a12f0393bc4ee2587a221497e0aedb1ff293a61f654"}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000540)={0x0, 0x16, 0x22, "25c6ac08e008b917f267c9b527919a8ac44093f381ca4161e8650dd484c0b2e41c44"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xc1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)=ANY=[@ANYBLOB="c533"], &(0x7f0000000640)={0x40, 0x5, 0x1, '-'}}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000780), 0x4000) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000002240)=ANY=[@ANYBLOB="120150020000000882050400400001020301090269000301002008080b0201010420010904000000010120000924014d0015d360120904010000010220"], &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0}) 5.505030908s ago: executing program 2 (id=2341): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x2, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xabe}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_FILTER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0xdc8d570202969554}, 0x2400c800) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010f00000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES16=0xffffffffffffffff], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_usb_connect$midi(0x6, 0x86, &(0x7f0000000a40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0xf8, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x2, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x4, 0x8}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x1, 0x48, 0x1, [{0xff, 0x80}], 0x1}], [{{0x9, 0x5, 0x8, 0x3, 0x10, 0x3, 0x81, 0x5d, {0xa, 0x25, 0x1, 0x6, "5dc41d1023d5"}}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xc1, 0x7, 0x3, {0x6, 0x25, 0x1, 0x2, "18a8"}}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x45, 0x7, 0x1, {0xd, 0x25, 0x1, 0x9, "872c93c05f09b86cc1"}}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x7, 0x40, 0x3, {0xb, 0x25, 0x1, 0x7, "4e72f35c7a2a89"}}}]}}}}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x111, 0x7f, 0x8, 0x6d, 0x40, 0xe1}, 0x132, &(0x7f0000000b40)={0x5, 0xf, 0x132, 0x5, [@wireless={0xb, 0x10, 0x1, 0x0, 0x21, 0x3, 0xc, 0x5, 0x9}, @generic={0xec, 0x10, 0x1, "99f5b0e715291734c4b4896f845ed9448b4c364bbbf26c606e5f19666e00d6d63ad949eb16888a94f26b07e0519cd797274173e979d826c429613e8820be3966c3ef701e77d5f4e7cd5bc1b26fb2e866c75a8a1dccb0888278b9725c2fd1c94580dfcdb1fca513dc2ac6d0a83e08a58163acec41fe6aec1c6fdd041e28f4a607fd6162eeb027a4cc75f92071fe67be2d72fe0a73f9f6420d54b6d9500c6affc7f3d75818379484627241aced65732ec3d3ab13a8d93b74d3cb96ca4fe5962cf421d21e31804a720e14ff2b28e371d5ac93ad71e30056357283eed7aadaa4548e37caf81cd515569973"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x40, 0x2e, 0x61, 0xff, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x6, 0xc, 0x2afb}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x1, 0xee00, 0xc, [0xc0c0, 0x0, 0xc030, 0xc02e, 0xc030, 0x3f00]}]}, 0x7, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x4001}}, {0x13, &(0x7f0000000cc0)=@string={0x13, 0x3, "dd03615796e34a04e5c0f17f8fc1c841a6"}}, {0x7f, &(0x7f0000000d00)=@string={0x7f, 0x3, "b6ce14cfc3b1cd1aa7cd964192ec88ed29426ed5c461d9dfd8e265f33c670e1a7f2e465295eb4fc4084026fb09cc6ba0a1fe595eb4e42361e7d752d71449b3c74f9ab368c670f9baa11b037ddcd438cc3b2fcede03faf5725e3bcf587e2d47c0efc935d0a3b9b8b3b579a37b7f26a2f0e0025e9daabf4da39f29669608"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x80c}}]}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32], 0x30}}, 0x40814) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x20, 0x31, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x93a, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xa, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x620, 0x10, 0x1, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x1, 0x9}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x4, 0x5, 0xb, 0xff, 0x7}, 0x66, &(0x7f00000003c0)={0x5, 0xf, 0x66, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x9, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0x2, 0x1}, @generic={0x3b, 0x10, 0x4, "9b6a3a80f0c16c6cf0cdb1d90c993b13c6ff1a74032f6564054079a0c8c565f4900906141866d58cd3dc981dd473fbaf175e5ac4cd33bf6f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x21, 0x20, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x8, 0x8}]}, 0x4, [{0x6e, &(0x7f0000000440)=@string={0x6e, 0x3, "ab070f0811c88b41e66709fa680d4c9b887be2ddd0755d7d605c76fe997987a08f0c9aebbeeb21a83fad0318bec389743cc281a6f12b03cf875f60b04c7e0fdbc5bb3e63c8866b48010ba16d2f5eedb1de4a38f69be90e791c199d89d4a0c25f460a9c7835bae649aa48ea43"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x100a}}, {0xf6, &(0x7f00000005c0)=@string={0xf6, 0x3, "f9bb658fcdfd3c4dd47870652ac5c256eb36393c72bd9a1c40f1f5b984576487edb6c63b4de1b2cc2c78898d33e238d7d45c73630f9c4f08b45593bd313a34cefd510d297a6f72db2ab5a4ef3ae42c3f21817dd8e7db4649999d806b02752b2cd727b30239cc50db9b39d6781e24ad24840c08ffd160fba1ed0f4b0b4ffb83f6e830ff1379d327b178101cd35a51817dc9d49931d23fd5b52ca3c4826555181e5dfd038cd6ca54b7fd0434e210315b53453469ddbf433fbf940833189f98446aa65f24b9924831e3064c2dd30ae6e0bed99b8618fda0fd6ca151727f571f66986fcc278438204b5f11eaf5f25f51f53dc22b2114"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x422}}]}) syz_usb_control_io(r5, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x20, 0xb, 0x28, {0x28, 0x9, "54b89cae72ea287f3c57f3e8b07705c935a09280b58ffe0620409f09193e0178e544a667dcb0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x2, 0x1, 0x0, &(0x7f00000001c0)=""/25, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)={0x2}) 5.442458191s ago: executing program 3 (id=2342): syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b00114242"], 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @exit]}, &(0x7f0000000280)='GPL\x00', 0x8, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0xffed, 0x10, &(0x7f00000004c0)={0x3, 0x2}, 0x10}, 0x94) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.242228128s ago: executing program 4 (id=2343): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 4.964472169s ago: executing program 3 (id=2344): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x7) landlock_restrict_self(r0, 0x3) landlock_restrict_self(r0, 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') 4.884010695s ago: executing program 0 (id=2345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000040000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000c00080211000001000030005080110001004abee33908f8eef16f162471f4000000080007"], 0x58}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000072c5498b5f2fad95c231d7e66581b8d70b5341f843d82873180280ac7b3d94d4232bebf526d1a28b9d562167ad3a8cefb45e763cfdb9ad5fa52b387326f70fd57b77bf85107a08030df5b87790b1bad74d2f032f9f52751673f01faf380fc7441eb3be346fb37f4e1fcba81ddc02e8ac86e6475b40191902e965342c0a69c09777e61cc61dbb1f673f6a3ef168b0bebf59a7613d19e1b5b285f9a28dd689f440e2c0792d3ccfe51a2a", @ANYRES16=r1, @ANYBLOB="000427bd7000fedbdf256d0000000c0099000600000005000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 4.584273093s ago: executing program 3 (id=2346): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x88, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16], 0x28}}, 0x0) 4.521850992s ago: executing program 0 (id=2347): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r4, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a2800018008000100000000001c0003802800020002000000060001000003000006000300a2aa000005"], 0x64}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x2, 0x80805, 0x0) fcntl$addseals(r1, 0x409, 0x7) shmget(0x0, 0x2000, 0x54000000, &(0x7f0000002000/0x2000)=nil) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) 4.427819543s ago: executing program 1 (id=2348): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') 4.20385863s ago: executing program 1 (id=2349): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = socket$inet(0x2, 0x5, 0x56) shutdown(r1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x80000000007, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) read(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000440)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32=r0]) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) close(r4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r5 = socket(0x23, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x9, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r5]) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='bfs\x00', 0x800041, 0x0) 4.146101883s ago: executing program 3 (id=2350): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$iommufd(0xffffffffffffff9c, 0x0, 0x103002, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.098152198s ago: executing program 0 (id=2351): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) writev(r0, &(0x7f0000003280)=[{&(0x7f0000002080)='Y', 0x1}, {0x0}], 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) msgrcv(0x0, 0x0, 0x0, 0x0, 0x5800) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r3, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000140)=[{&(0x7f0000001700)=""/4082, 0xff2}], 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r6, &(0x7f0000000200), 0x0, 0x4000000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xd}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000100)={0x7, 0xc7, 0x204, 0xae, 0xffffffff, 0x7, 0x2, 0x4}, 0x20) 3.730104645s ago: executing program 4 (id=2352): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.37290989s ago: executing program 3 (id=2353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0xfffffffd, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) 3.24616642s ago: executing program 4 (id=2354): syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b00114242"], 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @exit]}, &(0x7f0000000280)='GPL\x00', 0x8, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0xffed, 0x10, &(0x7f00000004c0)={0x3, 0x2}, 0x10}, 0x94) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.220287848s ago: executing program 0 (id=2355): pwritev(0xffffffffffffffff, &(0x7f0000000d00)=[{&(0x7f0000000b40)="f4a6dc2d85f1db98b762c688a6757e6255b4794ea4996d26669d117e5c489700fd5f0380c6320dc22377d89e319f71393b8a9c8efceefb95a9ffe23e00c36191dc78ac871a4baecea77f2297d84f641450355a6b26b8a260e71986f1e48ed0c7e8c5b02561cfa0f6795b8698ce34ea3bb0537664ac398fdba16dac14e03f880330801c34f8670759349257f33928386187fea7d1571351587e4716", 0x9b}], 0x1, 0x4, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000940)={0x2, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c00000000000000210d0000aaa8fa017242ba9380", 0x1f) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={0x0, &(0x7f0000000ac0)=""/50, 0x0, 0x32, 0x0, 0x3}, 0x28) bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000011) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 2.937531064s ago: executing program 2 (id=2356): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0xfe33) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) (fail_nth: 2) 1.778226484s ago: executing program 2 (id=2357): syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x23, 0xdb, 0x2b, 0x8, 0x4b4, 0x2, 0x341c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x80, 0x3, "", [{{0x9, 0x4, 0xe0, 0x8, 0x0, 0x3f, 0x54, 0x2b, 0x1e}}]}}]}}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x21}, 0x23, 0x0, 0x0, 0x9, 0xa, 0x22, 0x5}, 0x20) r1 = getpid() syz_pidfd_open(r1, 0x0) setuid(0xee01) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000280)=0x4, 0x4) 1.535502405s ago: executing program 0 (id=2358): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) socket$kcm(0x21, 0x2, 0xa) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_usb_connect$midi(0x6, 0xcf, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x1, 0x1, 0x8, 0x100, 0xc4, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x8, [@midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x4e, 0x4, [{0x6, 0x5}, {0x2, 0x2}, {0xf9, 0x1}, {0xb, 0x8}], 0x5}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x3, 0x2, 0x2, [{0xa, 0xcc}, {0x84, 0x14}], 0xc8}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x6ef744deac73cb2f, 0x9b, 0x1, [{}], 0x3}], [{{0x9, 0x5, 0x0, 0x84fdd878bd2fe3b0, 0x10, 0x8, 0x0, 0x6, {0x14, 0x25, 0x1, 0x10, "f8e7aee9a86d07eddc427ba64a4d8c07"}}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0x5, 0x2, {0x14, 0x25, 0x1, 0x10, "28381c9d8f466a3c44218adcca532852"}}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x9, 0x1, 0x8, {0xa, 0x25, 0x1, 0x6, "2cef6187fbdb"}}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0xf0, 0x2, 0x40, {0x9, 0x25, 0x1, 0x5, "3c506e0ee4"}}}, {{0x9, 0x5, 0x4, 0x4, 0x0, 0xad, 0xca, 0x7f, {0x12, 0x25, 0x1, 0xe, "06dd379fbdea67cbdc259de75a5b"}}}]}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x4, 0xc, 0x83, 0xf0, 0xf0}, 0x19, &(0x7f0000000200)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "a2a05eaf7320f2d112ca10e4d36b1078"}]}, 0x1, [{0xce, &(0x7f0000000240)=@string={0xce, 0x3, "2bd2618ecb560d30cb4ee6b76793efb083b7dc669a364c88eec6383bf6a3bf8195169f873967ae56cdc9f4482d05ee20d9f697aa3f99f67b8cbb358f0d464fbd5c570dd6a4b07e9bd5cdf3fe350ec0807df9557f1811970880fa55bfa723e94c142e4857a191979c1a03a5a5f77c3f2af2ca1cc28017fa1775dce1b377977288d00a09369ee5711b5c50599c152beb8c5e3fbc7beecfe7d13333c25ad309bc4a9964c130883c714ccbfdcb79cd94a3794442617c48e997e63a71db886208fff52981f16738a820455f898530"}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000500)={0x14, &(0x7f0000000380)={0x40, 0x11, 0xeb, {0xeb, 0xb, "88a62034ac87939cde46de9fbbef8316069f63a1de7624c23a7220ee3d88e973dbff21ff6812ca2f1eec9aebb71a83bcb72d19b49801139597caccf321c26521504f94a482500be785d8ef9de82b4892f7e1ea16d2164af88d7f14c191d604d06b1f1ae6f3d7251c3dc412911cdbdbb8df5f20be432ffaa4f32ef66e6a26665d6cf45412afca47e2c6a6e0b310c0ec56745338081002a1272c9601e8171654d88f9935f240aef97f42be02afcdf195e600f10dc3f4f36015a4c89879523a680e06291ca2808b74a44c201c495c4b85ed20e9c36d2864caf59a9adc84f2dada05f80abfd232889cf112"}}, &(0x7f0000000480)={0x0, 0x3, 0x3c, @lang_id={0x0, 0x3, 0xe1f8e8c2b16d6656}}}, &(0x7f0000000740)={0x44, &(0x7f00000006c0)={0x20, 0x8, 0x2d, "ccf613c0fb2f0f53e7fa313f92206f7d11b078fa0986fc931d67ce3513160cfb00fc7f4a6196de4730ad91fe18"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0xfffffffffffffd51, 0x8}, &(0x7f0000000600)={0x20, 0x81, 0x3, "f76ca2"}, &(0x7f0000000640)=ANY=[@ANYBLOB="b982010000003e"], &(0x7f0000000680)={0x20, 0x83, 0x3, "0eed90"}, &(0x7f00000004c0)={0x20, 0x84, 0x4, "613805e2"}, &(0x7f0000000700)={0x20, 0x85, 0x63, "8c0194"}}) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f0000000000), 0x9, 0x400, 0x0, 0x0, 0x0, 0x70}) 390.634455ms ago: executing program 4 (id=2359): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100)) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x20000100, 0xb, 0xdd, 0x2, 0x1, 0x103, 0x3, 0x20000000, 0x8, 0xb, 0xffffffff, 0xb51, 0x9, 0x401, 0x3, 0xe, 0x0, 0x3, 0xfe9, 0xfffffffd, 0x6, 0x2, 0x4, 0x9, 0x48, 0x6, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x2b) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x4, 0x2, "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", 0x0, 0x0, 0x61, 0x9, 0x40, 0x1, 0xfc}, r3}}, 0x128) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x80000001}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x7}}, './file0\x00'}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r7, 0x7c80, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, 0x42100}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}}, 0x0) 3.456543ms ago: executing program 1 (id=2360): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') 3.005762ms ago: executing program 2 (id=2361): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r4, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a2800018008000100000000001c0003802800020002000000060001000003000006000300a2aa000005"], 0x64}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x2, 0x80805, 0x0) fcntl$addseals(r1, 0x409, 0x7) shmget(0x0, 0x2000, 0x54000000, &(0x7f0000002000/0x2000)=nil) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) 0s ago: executing program 3 (id=2362): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001400000014"], 0x0, 0x2e}, 0x28) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000004c0)={0x1e6, @tick=0xb}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0xd0d00, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000001140)=""/4110, &(0x7f00000000c0)=0x100e) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00002da000/0x1000)=nil, &(0x7f0000081000/0x11000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000076e000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) close(0x3) kernel console output (not intermixed with test programs): ause=open_writers comm="syz.3.1881" name="/newroot/41/file0" dev="tmpfs" ino=227 res=1 errno=0 [ 445.594597][ T59] Bluetooth: hci2: ACL packet too small [ 445.639294][ T37] audit: type=1326 audit(1782691869.862:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11429 comm="syz.4.1883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bf94ce59 code=0x7ffc0000 [ 445.639389][ T37] audit: type=1326 audit(1782691869.862:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11429 comm="syz.4.1883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bf94ce59 code=0x7ffc0000 [ 445.639433][ T37] audit: type=1326 audit(1782691869.862:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11429 comm="syz.4.1883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f39bf94ce59 code=0x7ffc0000 [ 445.640665][ T37] audit: type=1326 audit(1782691869.862:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11429 comm="syz.4.1883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bf94ce59 code=0x7ffc0000 [ 445.640711][ T37] audit: type=1326 audit(1782691869.862:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11429 comm="syz.4.1883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bf94ce59 code=0x7ffc0000 [ 445.640751][ T37] audit: type=1326 audit(1782691869.862:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11429 comm="syz.4.1883" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f39bf94ce59 code=0x7ffc0000 [ 446.650629][T11446] FAULT_INJECTION: forcing a failure. [ 446.650629][T11446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.650663][T11446] CPU: 0 UID: 0 PID: 11446 Comm: syz.0.1889 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 446.650688][T11446] Tainted: [L]=SOFTLOCKUP [ 446.650695][T11446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 446.650707][T11446] Call Trace: [ 446.650715][T11446] [ 446.650723][T11446] dump_stack_lvl+0xe8/0x150 [ 446.650751][T11446] should_fail_ex+0x467/0x600 [ 446.650777][T11446] _copy_from_user+0x2d/0xb0 [ 446.650802][T11446] ___sys_sendmsg+0x1c6/0x360 [ 446.650824][T11446] ? __lock_acquire+0x683/0x2ce0 [ 446.650849][T11446] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.650870][T11446] ? __lock_acquire+0x683/0x2ce0 [ 446.650894][T11446] ? kstrtouint+0x6e/0xe0 [ 446.650954][T11446] __sys_sendmmsg+0x279/0x4d0 [ 446.650982][T11446] ? __pfx___sys_sendmmsg+0x10/0x10 [ 446.651014][T11446] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 446.651054][T11446] ? ksys_write+0x248/0x270 [ 446.651090][T11446] ? __pfx_ksys_write+0x10/0x10 [ 446.651119][T11446] __x64_sys_sendmmsg+0xa0/0xc0 [ 446.651141][T11446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.651159][T11446] do_syscall_64+0x174/0x580 [ 446.651178][T11446] ? trace_irq_disable+0x3b/0x140 [ 446.651199][T11446] ? clear_bhb_loop+0x40/0x90 [ 446.651219][T11446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.651236][T11446] RIP: 0033:0x7fe8cfc5ce59 [ 446.651253][T11446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.651267][T11446] RSP: 002b:00007fe8cdeb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 446.651285][T11446] RAX: ffffffffffffffda RBX: 00007fe8cfed5fa0 RCX: 00007fe8cfc5ce59 [ 446.651297][T11446] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000003 [ 446.651308][T11446] RBP: 00007fe8cdeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 446.651319][T11446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.651329][T11446] R13: 00007fe8cfed6038 R14: 00007fe8cfed5fa0 R15: 00007ffd4ef08fe8 [ 446.651353][T11446] [ 446.933450][T11451] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1890'. [ 447.015196][T11462] netlink: 'syz.1.1892': attribute type 21 has an invalid length. [ 447.116733][ T821] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 447.408743][ T821] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 447.408772][ T821] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 447.408789][ T821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 447.408837][ T821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 447.408860][ T821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 447.412694][ T821] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 447.412723][ T821] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 447.412740][ T821] usb 1-1: Product: syz [ 447.412754][ T821] usb 1-1: Manufacturer: syz [ 447.469215][ T821] cdc_wdm 1-1:1.0: skipping garbage [ 447.469236][ T821] cdc_wdm 1-1:1.0: skipping garbage [ 447.477580][ T821] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 447.477601][ T821] cdc_wdm 1-1:1.0: Unknown control protocol [ 448.263325][ T5708] usb 1-1: USB disconnect, device number 45 [ 448.403440][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 448.403457][ T37] audit: type=1326 audit(1782691872.632:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11479 comm="syz.2.1900" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 448.403501][ T37] audit: type=1326 audit(1782691872.632:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11479 comm="syz.2.1900" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 448.403545][ T37] audit: type=1326 audit(1782691872.632:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11479 comm="syz.2.1900" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 448.403732][ T37] audit: type=1326 audit(1782691872.632:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11479 comm="syz.2.1900" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 448.403802][ T37] audit: type=1326 audit(1782691872.632:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11479 comm="syz.2.1900" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 448.403930][ T37] audit: type=1326 audit(1782691872.632:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11479 comm="syz.2.1900" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 448.404351][ T37] audit: type=1326 audit(1782691872.632:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11479 comm="syz.2.1900" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 448.404395][ T37] audit: type=1326 audit(1782691872.632:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11479 comm="syz.2.1900" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 448.404524][ T37] audit: type=1326 audit(1782691872.632:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11479 comm="syz.2.1900" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 448.877796][ T37] audit: type=1804 audit(1782691873.102:1541): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1907" name="/newroot/47/file0" dev="tmpfs" ino=258 res=1 errno=0 [ 449.082259][T11509] netlink: 'syz.3.1910': attribute type 21 has an invalid length. [ 450.020654][T11512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.537196][T11518] overlayfs: failed to clone upperpath [ 450.583806][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1913'. [ 450.583820][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1913'. [ 451.810849][ T821] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 452.215987][T11538] FAULT_INJECTION: forcing a failure. [ 452.215987][T11538] name failslab, interval 1, probability 0, space 0, times 0 [ 452.216023][T11538] CPU: 1 UID: 0 PID: 11538 Comm: syz.0.1922 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 452.216048][T11538] Tainted: [L]=SOFTLOCKUP [ 452.216055][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 452.216066][T11538] Call Trace: [ 452.216073][T11538] [ 452.216082][T11538] dump_stack_lvl+0xe8/0x150 [ 452.216112][T11538] should_fail_ex+0x467/0x600 [ 452.216151][T11538] should_failslab+0xa8/0x100 [ 452.216180][T11538] __kmalloc_cache_noprof+0xa0/0x6b0 [ 452.216203][T11538] ? find_get_context+0xc7/0x860 [ 452.216299][T11538] ? find_get_context+0xc7/0x860 [ 452.216323][T11538] find_get_context+0xc7/0x860 [ 452.216346][T11538] ? perf_event_create_kernel_counter+0xe0/0x630 [ 452.216366][T11538] perf_event_create_kernel_counter+0x210/0x630 [ 452.216391][T11538] ptrace_set_debugreg+0xaa7/0xd60 [ 452.216459][T11538] ? unwind_get_return_address+0x4d/0x90 [ 452.216485][T11538] ? __pfx_ptrace_set_debugreg+0x10/0x10 [ 452.216507][T11538] ? __lock_acquire+0x683/0x2ce0 [ 452.216533][T11538] ? __lock_acquire+0x683/0x2ce0 [ 452.216562][T11538] ? __lock_acquire+0x683/0x2ce0 [ 452.216584][T11538] ? kstrtouint+0x6e/0xe0 [ 452.216618][T11538] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 452.216650][T11538] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 452.216673][T11538] ? lockdep_hardirqs_on+0x7a/0x110 [ 452.216693][T11538] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 452.216713][T11538] ? wait_task_inactive+0x42f/0x800 [ 452.216769][T11538] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 452.216805][T11538] ? __pfx_wait_task_inactive+0x10/0x10 [ 452.216827][T11538] ? rt_read_unlock+0x17f/0x340 [ 452.216847][T11538] arch_ptrace+0x361/0x410 [ 452.216871][T11538] __se_sys_ptrace+0x150/0x3a0 [ 452.216923][T11538] ? __pfx___se_sys_ptrace+0x10/0x10 [ 452.216948][T11538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.216968][T11538] do_syscall_64+0x174/0x580 [ 452.216987][T11538] ? trace_irq_disable+0x3b/0x140 [ 452.217010][T11538] ? clear_bhb_loop+0x40/0x90 [ 452.217030][T11538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.217047][T11538] RIP: 0033:0x7fe8cfc5ce59 [ 452.217065][T11538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.217080][T11538] RSP: 002b:00007fe8cde74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 452.217100][T11538] RAX: ffffffffffffffda RBX: 00007fe8cfed6180 RCX: 00007fe8cfc5ce59 [ 452.217114][T11538] RDX: 0000000000000388 RSI: 0000000000000371 RDI: 0000000000000006 [ 452.217125][T11538] RBP: 00007fe8cde74090 R08: 0000000000000000 R09: 0000000000000000 [ 452.217147][T11538] R10: 0000000041d9fda7 R11: 0000000000000246 R12: 0000000000000001 [ 452.217158][T11538] R13: 00007fe8cfed6218 R14: 00007fe8cfed6180 R15: 00007ffd4ef08fe8 [ 452.217188][T11538] [ 453.749853][ T821] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 453.749881][ T821] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 453.749897][ T821] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 453.749936][ T821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 453.749958][ T821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 453.804741][ T821] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 453.804769][ T821] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 453.804787][ T821] usb 2-1: Product: syz [ 453.804800][ T821] usb 2-1: Manufacturer: syz [ 453.854722][ T821] cdc_wdm 2-1:1.0: skipping garbage [ 453.854743][ T821] cdc_wdm 2-1:1.0: skipping garbage [ 453.859794][ T821] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 453.859814][ T821] cdc_wdm 2-1:1.0: Unknown control protocol [ 455.308696][T11565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1927'. [ 455.752958][ T821] usb 2-1: USB disconnect, device number 38 [ 456.041729][T11575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1931'. [ 456.041753][T11575] nbd: must specify a size in bytes for the device [ 456.235148][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 456.235165][ T37] audit: type=1804 audit(1782691880.463:1543): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1932" name="/newroot/335/file0" dev="tmpfs" ino=1751 res=1 errno=0 [ 456.979809][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'. [ 456.988035][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1938'. [ 457.161077][T11595] FAULT_INJECTION: forcing a failure. [ 457.161077][T11595] name failslab, interval 1, probability 0, space 0, times 0 [ 457.161132][T11595] CPU: 1 UID: 0 PID: 11595 Comm: syz.3.1938 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 457.161157][T11595] Tainted: [L]=SOFTLOCKUP [ 457.161163][T11595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.161174][T11595] Call Trace: [ 457.161182][T11595] [ 457.161190][T11595] dump_stack_lvl+0xe8/0x150 [ 457.161217][T11595] should_fail_ex+0x467/0x600 [ 457.161243][T11595] should_failslab+0xa8/0x100 [ 457.161268][T11595] kmem_cache_alloc_node_noprof+0xae/0x670 [ 457.161290][T11595] ? __alloc_skb+0x1d7/0x7a0 [ 457.161311][T11595] ? __alloc_skb+0x1d7/0x7a0 [ 457.161334][T11595] __alloc_skb+0x1d7/0x7a0 [ 457.161352][T11595] netlink_sendmsg+0x5d4/0xb40 [ 457.161379][T11595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.161398][T11595] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 457.161421][T11595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.161438][T11595] sock_sendmsg_nosec+0x13a/0x180 [ 457.161455][T11595] ____sys_sendmsg+0x565/0x870 [ 457.161479][T11595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.161508][T11595] ? import_iovec+0x73/0xa0 [ 457.161529][T11595] ___sys_sendmsg+0x2a5/0x360 [ 457.161546][T11595] ? __lock_acquire+0x683/0x2ce0 [ 457.161566][T11595] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.161587][T11595] ? __schedule+0x16f2/0x5500 [ 457.161622][T11595] ? __fget_files+0x2a/0x420 [ 457.161639][T11595] ? __fget_files+0x3a8/0x420 [ 457.161668][T11595] __x64_sys_sendmsg+0x1b7/0x290 [ 457.161687][T11595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.161717][T11595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.161733][T11595] do_syscall_64+0x174/0x580 [ 457.161750][T11595] ? clear_bhb_loop+0x40/0x90 [ 457.161766][T11595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.161780][T11595] RIP: 0033:0x7fec1180ce59 [ 457.161793][T11595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.161806][T11595] RSP: 002b:00007fec0fa1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.161821][T11595] RAX: ffffffffffffffda RBX: 00007fec11a86180 RCX: 00007fec1180ce59 [ 457.161832][T11595] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 0000000000000007 [ 457.161841][T11595] RBP: 00007fec0fa1c090 R08: 0000000000000000 R09: 0000000000000000 [ 457.161850][T11595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.161858][T11595] R13: 00007fec11a86218 R14: 00007fec11a86180 R15: 00007ffc9587e348 [ 457.161880][T11595] [ 457.930386][ T5708] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 458.080593][T11595] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.081426][T11595] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.141251][ T5708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 458.162237][ T5708] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.162328][ T5708] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 458.162374][ T5708] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 458.162430][ T5708] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 458.162466][ T5708] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 458.162488][ T5708] usb 3-1: config 1 interface 1 has no altsetting 0 [ 458.235488][ T5708] usb 3-1: string descriptor 0 read error: -22 [ 458.235633][ T5708] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 458.235646][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.439783][T11595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.478470][T11595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.592246][ T5708] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 458.627938][ T5708] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 458.627966][ T5708] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 458.627983][ T5708] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 458.816512][ T5708] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 458.873181][ T5708] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 458.914970][ T5708] usb 3-1: USB disconnect, device number 49 [ 459.130168][ T821] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 459.284200][ T821] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 459.284228][ T821] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 459.284245][ T821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 459.284291][ T821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 459.284314][ T821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 459.341855][ T821] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 459.341884][ T821] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 459.341901][ T821] usb 1-1: Product: syz [ 459.341914][ T821] usb 1-1: Manufacturer: syz [ 459.393863][ T821] cdc_wdm 1-1:1.0: skipping garbage [ 459.393877][ T821] cdc_wdm 1-1:1.0: skipping garbage [ 459.409096][ T821] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 459.409114][ T821] cdc_wdm 1-1:1.0: Unknown control protocol [ 459.600188][T11609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1943'. [ 459.660356][ T694] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.662028][ T694] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.662067][ T694] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.662099][ T694] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.675287][ T821] usb 1-1: USB disconnect, device number 46 [ 459.780210][T11612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1944'. [ 459.780234][T11612] nbd: must specify a size in bytes for the device [ 459.901400][T11614] FAULT_INJECTION: forcing a failure. [ 459.901400][T11614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.901436][T11614] CPU: 0 UID: 0 PID: 11614 Comm: syz.3.1946 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 459.901461][T11614] Tainted: [L]=SOFTLOCKUP [ 459.901467][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 459.901478][T11614] Call Trace: [ 459.901486][T11614] [ 459.901494][T11614] dump_stack_lvl+0xe8/0x150 [ 459.901522][T11614] should_fail_ex+0x467/0x600 [ 459.901549][T11614] _copy_from_user+0x2d/0xb0 [ 459.901575][T11614] __copy_msghdr+0x390/0x590 [ 459.901604][T11614] ___sys_sendmsg+0x213/0x360 [ 459.901626][T11614] ? __lock_acquire+0x683/0x2ce0 [ 459.901653][T11614] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.901707][T11614] ? __fget_files+0x2a/0x420 [ 459.901729][T11614] ? __fget_files+0x3a8/0x420 [ 459.901758][T11614] __x64_sys_sendmsg+0x1b7/0x290 [ 459.901785][T11614] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.901823][T11614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.901841][T11614] do_syscall_64+0x174/0x580 [ 459.901863][T11614] ? trace_irq_disable+0x3b/0x140 [ 459.901884][T11614] ? clear_bhb_loop+0x40/0x90 [ 459.901906][T11614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.901923][T11614] RIP: 0033:0x7fec1180ce59 [ 459.901941][T11614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.901955][T11614] RSP: 002b:00007fec0fa5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.901974][T11614] RAX: ffffffffffffffda RBX: 00007fec11a85fa0 RCX: 00007fec1180ce59 [ 459.901987][T11614] RDX: 000000002000c041 RSI: 0000200000000100 RDI: 0000000000000004 [ 459.901999][T11614] RBP: 00007fec0fa5e090 R08: 0000000000000000 R09: 0000000000000000 [ 459.902010][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.902019][T11614] R13: 00007fec11a86038 R14: 00007fec11a85fa0 R15: 00007ffc9587e348 [ 459.902047][T11614] [ 460.011517][ T37] audit: type=1804 audit(1782691884.243:1544): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1945" name="/newroot/291/file0" dev="tmpfs" ino=1525 res=1 errno=0 [ 461.712230][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1951'. [ 462.049914][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 462.069942][ T5871] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 462.200123][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 462.203506][ T31] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 462.203529][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.236901][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.236930][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.236948][ T31] usb 4-1: Product: syz [ 462.236961][ T31] usb 4-1: Manufacturer: syz [ 462.236973][ T31] usb 4-1: SerialNumber: syz [ 462.258553][ T5871] usb 3-1: unable to get BOS descriptor or descriptor too short [ 462.280023][ T5871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.280047][ T5871] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 462.280103][ T5871] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 462.280137][ T5871] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 462.280173][ T5871] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 462.280196][ T5871] usb 3-1: config 1 interface 1 has no altsetting 0 [ 462.285440][ T5871] usb 3-1: string descriptor 0 read error: -22 [ 462.285568][ T5871] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 462.285591][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.400319][ T31] usb 4-1: 0:2 : does not exist [ 462.400401][ T31] usb 4-1: unit 9 not found! [ 462.559655][T11651] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1957'. [ 462.840334][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'. [ 463.159203][ T5871] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 463.159231][ T5871] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 463.159246][ T5871] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 463.243383][ T5871] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 463.294302][ T5871] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 463.323471][ T5871] usb 3-1: USB disconnect, device number 50 [ 463.795026][T11673] FAULT_INJECTION: forcing a failure. [ 463.795026][T11673] name failslab, interval 1, probability 0, space 0, times 0 [ 463.795086][T11673] CPU: 1 UID: 0 PID: 11673 Comm: syz.1.1963 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 463.795111][T11673] Tainted: [L]=SOFTLOCKUP [ 463.795118][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 463.795130][T11673] Call Trace: [ 463.795138][T11673] [ 463.795147][T11673] dump_stack_lvl+0xe8/0x150 [ 463.795175][T11673] should_fail_ex+0x467/0x600 [ 463.795204][T11673] should_failslab+0xa8/0x100 [ 463.795230][T11673] kmem_cache_alloc_node_noprof+0xae/0x670 [ 463.795254][T11673] ? __alloc_skb+0x1d7/0x7a0 [ 463.795276][T11673] ? __alloc_skb+0x1d7/0x7a0 [ 463.795303][T11673] __alloc_skb+0x1d7/0x7a0 [ 463.795327][T11673] netlink_sendmsg+0x5d4/0xb40 [ 463.795363][T11673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.795388][T11673] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 463.795411][T11673] ? hook_socket_sendmsg+0x84/0x200 [ 463.795510][T11673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.795533][T11673] sock_sendmsg_nosec+0x13a/0x180 [ 463.795557][T11673] ____sys_sendmsg+0x565/0x870 [ 463.795580][T11673] ? __might_fault+0xaf/0x130 [ 463.795609][T11673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.795641][T11673] ? import_iovec+0x73/0xa0 [ 463.795670][T11673] ___sys_sendmsg+0x2a5/0x360 [ 463.795699][T11673] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.795755][T11673] ? __fget_files+0x2a/0x420 [ 463.795777][T11673] ? __fget_files+0x3a8/0x420 [ 463.795807][T11673] __x64_sys_sendmsg+0x1b7/0x290 [ 463.795834][T11673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.795874][T11673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.795894][T11673] do_syscall_64+0x174/0x580 [ 463.795926][T11673] ? clear_bhb_loop+0x40/0x90 [ 463.795948][T11673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.795966][T11673] RIP: 0033:0x7f2382aace59 [ 463.795984][T11673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.795998][T11673] RSP: 002b:00007f2380cc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.796018][T11673] RAX: ffffffffffffffda RBX: 00007f2382d26180 RCX: 00007f2382aace59 [ 463.796031][T11673] RDX: 00000000200080c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 463.796042][T11673] RBP: 00007f2380cc4090 R08: 0000000000000000 R09: 0000000000000000 [ 463.796054][T11673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.796064][T11673] R13: 00007f2382d26218 R14: 00007f2382d26180 R15: 00007ffe4054cb18 [ 463.796093][T11673] [ 464.936103][ T5730] usb 4-1: USB disconnect, device number 22 [ 464.995491][T11689] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1969'. [ 465.129908][ T5700] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 466.161475][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1968'. [ 468.177734][T11714] FAULT_INJECTION: forcing a failure. [ 468.177734][T11714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.177793][T11714] CPU: 1 UID: 0 PID: 11714 Comm: syz.3.1977 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 468.177818][T11714] Tainted: [L]=SOFTLOCKUP [ 468.177825][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 468.177835][T11714] Call Trace: [ 468.177843][T11714] [ 468.177852][T11714] dump_stack_lvl+0xe8/0x150 [ 468.177879][T11714] should_fail_ex+0x467/0x600 [ 468.177906][T11714] _copy_from_user+0x2d/0xb0 [ 468.177934][T11714] __sys_bpf+0x2e7/0xd90 [ 468.177965][T11714] ? __pfx___sys_bpf+0x10/0x10 [ 468.177990][T11714] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 468.178016][T11714] ? rt_mutex_slowunlock+0x219/0x460 [ 468.178059][T11714] ? ksys_write+0x248/0x270 [ 468.178086][T11714] ? __pfx_ksys_write+0x10/0x10 [ 468.178115][T11714] __x64_sys_bpf+0xba/0xd0 [ 468.178144][T11714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.178183][T11714] do_syscall_64+0x174/0x580 [ 468.178218][T11714] ? clear_bhb_loop+0x40/0x90 [ 468.178236][T11714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.178249][T11714] RIP: 0033:0x7fec1180ce59 [ 468.178263][T11714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.178273][T11714] RSP: 002b:00007fec0fa1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.178300][T11714] RAX: ffffffffffffffda RBX: 00007fec11a86180 RCX: 00007fec1180ce59 [ 468.178310][T11714] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 468.178332][T11714] RBP: 00007fec0fa1c090 R08: 0000000000000000 R09: 0000000000000000 [ 468.178341][T11714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.178349][T11714] R13: 00007fec11a86218 R14: 00007fec11a86180 R15: 00007ffc9587e348 [ 468.178371][T11714] [ 468.659417][ T5730] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 468.750158][ T821] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 468.810569][ T5730] usb 1-1: Using ep0 maxpacket: 16 [ 468.817576][ T5730] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 468.817604][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.817623][ T5730] usb 1-1: Product: syz [ 468.817758][ T5730] usb 1-1: Manufacturer: syz [ 468.817772][ T5730] usb 1-1: SerialNumber: syz [ 468.855386][T11717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1978'. [ 468.887425][ T5730] r8152-cfgselector 1-1: Unknown version 0x0000 [ 468.887448][ T5730] r8152-cfgselector 1-1: config 0 descriptor?? [ 468.927035][ T821] usb 3-1: Using ep0 maxpacket: 16 [ 468.971100][ T821] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 468.971138][ T821] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 468.971152][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 128, changing to 11 [ 468.971257][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 1792, setting to 1024 [ 468.971280][ T821] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.971306][ T821] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 468.971317][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.983093][ T821] usb 3-1: config 0 descriptor?? [ 469.009851][T11710] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 469.143605][ T821] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input37 [ 469.280897][T11710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.284913][T11710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.311277][T11710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.331103][T11710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.338943][T11710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.348179][T11710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.383378][ T5700] usb 2-1: unable to get BOS descriptor or descriptor too short [ 469.384396][ T5700] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 469.384429][ T5700] usb 2-1: can't read configurations, error -71 [ 469.570453][ T37] audit: type=1804 audit(1782691893.794:1545): pid=11724 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1980" name="file0" dev="tmpfs" ino=1956 res=1 errno=0 [ 469.776669][T11734] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1982'. [ 469.795495][ T821] usb 3-1: USB disconnect, device number 51 [ 469.809371][ T5700] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 469.970208][ T5700] usb 2-1: Using ep0 maxpacket: 16 [ 469.974307][ T5700] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 469.974331][ T5700] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.008532][ T5700] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.008549][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.008559][ T5700] usb 2-1: Product: syz [ 470.008567][ T5700] usb 2-1: Manufacturer: syz [ 470.008574][ T5700] usb 2-1: SerialNumber: syz [ 470.093984][ T5700] usb 2-1: 0:2 : does not exist [ 470.094031][ T5700] usb 2-1: unit 9 not found! [ 470.095929][ T37] audit: type=1804 audit(1782691894.324:1546): pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1983" name="/newroot/66/file0" dev="tmpfs" ino=355 res=1 errno=0 [ 470.418781][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'. [ 471.709778][T11752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'. [ 471.715124][T11752] 8021q: VLANs not supported on ip6_vti0 [ 471.849263][ T5604] Bluetooth: hci5: command 0x0406 tx timeout [ 472.329228][ T5730] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 472.409343][ T821] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 472.455960][ T5735] r8152-cfgselector 1-1: USB disconnect, device number 47 [ 472.501963][ T5730] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 472.501992][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.502009][ T5730] usb 4-1: Product: syz [ 472.502023][ T5730] usb 4-1: Manufacturer: syz [ 472.502035][ T5730] usb 4-1: SerialNumber: syz [ 472.574938][ T821] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 472.574965][ T821] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping [ 472.574982][ T821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.575000][ T821] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 472.577979][ T821] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 472.578005][ T821] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=8 [ 472.578024][ T821] usb 3-1: Product: syz [ 472.578038][ T821] usb 3-1: Manufacturer: syz [ 472.578051][ T821] usb 3-1: SerialNumber: syz [ 472.672196][ T5700] usb 2-1: USB disconnect, device number 40 [ 472.822770][ T5735] usb 3-1: USB disconnect, device number 52 [ 473.178808][T11779] FAULT_INJECTION: forcing a failure. [ 473.178808][T11779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.178895][T11779] CPU: 1 UID: 0 PID: 11779 Comm: syz.0.1999 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 473.178920][T11779] Tainted: [L]=SOFTLOCKUP [ 473.178927][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 473.178940][T11779] Call Trace: [ 473.178947][T11779] [ 473.178954][T11779] dump_stack_lvl+0xe8/0x150 [ 473.178981][T11779] should_fail_ex+0x467/0x600 [ 473.179008][T11779] _copy_from_user+0x2d/0xb0 [ 473.179036][T11779] core_sys_select+0x673/0xb40 [ 473.179056][T11779] ? get_pid_task+0x20/0x1f0 [ 473.179089][T11779] ? __pfx_core_sys_select+0x10/0x10 [ 473.179139][T11779] ? __pfx_set_user_sigmask+0x10/0x10 [ 473.179164][T11779] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 473.179198][T11779] __se_sys_pselect6+0x267/0x320 [ 473.179224][T11779] ? __pfx___se_sys_pselect6+0x10/0x10 [ 473.179244][T11779] ? __pfx_ksys_write+0x10/0x10 [ 473.179273][T11779] ? __x64_sys_pselect6+0x21/0xf0 [ 473.179293][T11779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.179312][T11779] do_syscall_64+0x174/0x580 [ 473.179332][T11779] ? trace_irq_disable+0x3b/0x140 [ 473.179353][T11779] ? clear_bhb_loop+0x40/0x90 [ 473.179375][T11779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.179392][T11779] RIP: 0033:0x7fe8cfc5ce59 [ 473.179408][T11779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.179423][T11779] RSP: 002b:00007fe8cdeb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 473.179441][T11779] RAX: ffffffffffffffda RBX: 00007fe8cfed5fa0 RCX: 00007fe8cfc5ce59 [ 473.179454][T11779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000900 [ 473.179465][T11779] RBP: 00007fe8cdeb6090 R08: 0000200000000280 R09: 0000000000000000 [ 473.179476][T11779] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 473.179486][T11779] R13: 00007fe8cfed6038 R14: 00007fe8cfed5fa0 R15: 00007ffd4ef08fe8 [ 473.179514][T11779] [ 473.180140][ T5730] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 473.180193][ T5730] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 473.180772][ T5730] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 473.180820][ T5730] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 473.181808][ T5730] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 473.471009][ T5730] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 473.594284][T11788] netlink: 'syz.1.2000': attribute type 21 has an invalid length. [ 473.620878][ T5730] usb 4-1: USB disconnect, device number 23 [ 474.019640][ T31] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 474.186072][T11805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2008'. [ 474.203654][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.203689][ T31] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 474.203701][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.227142][ T31] usb 3-1: config 0 descriptor?? [ 474.246187][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 474.520532][ T5730] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 474.718967][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 474.722270][ T5730] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 474.722294][ T5730] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.726213][ T5730] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.726239][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.726256][ T5730] usb 4-1: Product: syz [ 474.726269][ T5730] usb 4-1: Manufacturer: syz [ 474.726282][ T5730] usb 4-1: SerialNumber: syz [ 474.726451][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'. [ 474.726480][T11805] netlink: 'syz.0.2008': attribute type 10 has an invalid length. [ 474.726688][T11805] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2008'. [ 474.855963][ T5730] usb 4-1: 0:2 : does not exist [ 474.856046][ T5730] usb 4-1: unit 9 not found! [ 475.218669][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'. [ 476.023424][ T31] pwc: recv_control_msg error -71 req 02 val 2b00 [ 476.024509][ T31] pwc: recv_control_msg error -71 req 02 val 2700 [ 476.024929][ T31] pwc: recv_control_msg error -71 req 02 val 2c00 [ 476.025300][ T31] pwc: recv_control_msg error -71 req 04 val 1000 [ 476.025660][ T31] pwc: recv_control_msg error -71 req 04 val 1300 [ 476.026011][ T31] pwc: recv_control_msg error -71 req 04 val 1400 [ 476.027584][ T31] pwc: recv_control_msg error -71 req 02 val 2000 [ 476.031715][ T31] pwc: recv_control_msg error -71 req 02 val 2100 [ 476.033779][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 476.035112][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 476.035572][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 476.036030][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 476.036479][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 476.040253][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 476.041212][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 476.041769][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 476.617717][ T31] pwc: Registered as video103. [ 476.705514][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 476.729757][ T31] usb 3-1: USB disconnect, device number 53 [ 477.148812][ T5708] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 477.313129][ T5708] usb 2-1: unable to get BOS descriptor or descriptor too short [ 477.314622][ T5708] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.314635][ T5708] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 477.314661][ T5708] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 477.314688][ T5708] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 477.314709][ T5708] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 477.314723][ T5708] usb 2-1: config 1 interface 1 has no altsetting 0 [ 477.388589][ T5708] usb 2-1: string descriptor 0 read error: -22 [ 477.404711][ T5708] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 477.404736][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.763722][ T5735] usb 4-1: USB disconnect, device number 24 [ 477.896225][ T5708] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 477.896256][ T5708] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 477.896271][ T5708] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 477.964096][ T5708] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 477.988314][ T5708] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 478.013415][ T5708] usb 2-1: USB disconnect, device number 41 [ 478.394731][T11845] netlink: 'syz.0.2019': attribute type 21 has an invalid length. [ 479.368888][ T5735] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 479.455624][ T37] audit: type=1804 audit(1782691903.685:1547): pid=11860 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.2025" name="/newroot/310/file0" dev="tmpfs" ino=1606 res=1 errno=0 [ 479.508762][ T5735] usb 2-1: device descriptor read/64, error -71 [ 479.759673][ T5735] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 479.899019][ T5735] usb 2-1: device descriptor read/64, error -71 [ 480.008948][ T821] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 480.011573][ T5735] usb usb2-port1: attempt power cycle [ 480.028728][ T5716] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 480.168704][ T821] usb 3-1: Using ep0 maxpacket: 16 [ 480.172181][ T821] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 480.172207][ T821] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.174540][ T821] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.174564][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.174583][ T821] usb 3-1: Product: syz [ 480.174595][ T821] usb 3-1: Manufacturer: syz [ 480.174609][ T821] usb 3-1: SerialNumber: syz [ 480.191590][ T5716] usb 1-1: Using ep0 maxpacket: 16 [ 480.216228][ T821] usb 3-1: 0:2 : does not exist [ 480.216368][ T821] usb 3-1: unit 9 not found! [ 480.232352][ T5716] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 480.232379][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.232397][ T5716] usb 1-1: Product: syz [ 480.232411][ T5716] usb 1-1: Manufacturer: syz [ 480.232423][ T5716] usb 1-1: SerialNumber: syz [ 480.256498][ T5716] r8152-cfgselector 1-1: Unknown version 0x0000 [ 480.256523][ T5716] r8152-cfgselector 1-1: config 0 descriptor?? [ 480.358625][ T5735] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 480.379476][ T5735] usb 2-1: device descriptor read/8, error -71 [ 480.545878][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2028'. [ 480.619085][ T5735] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 480.639351][ T5735] usb 2-1: device descriptor read/8, error -71 [ 480.750106][ T5735] usb usb2-port1: unable to enumerate USB device [ 481.377698][T11891] netlink: 'syz.3.2035': attribute type 21 has an invalid length. [ 482.524781][T11895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2037'. [ 482.822045][ T5708] usb 3-1: USB disconnect, device number 54 [ 482.855775][T11901] virt_wifi0 speed is unknown, defaulting to 1000 [ 484.853778][ T5735] r8152-cfgselector 1-1: USB disconnect, device number 48 [ 485.150261][ T37] audit: type=1400 audit(1782691909.385:1548): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=11929 comm="syz.3.2048" daddr=fe80::1c dest=16385 [ 485.389859][T11935] netlink: 'syz.2.2049': attribute type 21 has an invalid length. [ 485.666446][T11937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2050'. [ 485.932009][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2051'. [ 486.646628][T11947] binder: 11946:11947 ioctl c0385868 200000000180 returned -22 [ 487.420087][ T31] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 487.570105][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 487.584441][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 487.584467][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.584485][ T31] usb 3-1: Product: syz [ 487.584498][ T31] usb 3-1: Manufacturer: syz [ 487.584511][ T31] usb 3-1: SerialNumber: syz [ 487.627285][ T31] r8152-cfgselector 3-1: Unknown version 0x0000 [ 487.627308][ T31] r8152-cfgselector 3-1: config 0 descriptor?? [ 487.878408][T11970] random: crng reseeded on system resumption [ 488.375274][T11978] netlink: 'syz.0.2062': attribute type 21 has an invalid length. [ 488.601740][T11968] virt_wifi0 speed is unknown, defaulting to 1000 [ 489.510899][T11989] FAULT_INJECTION: forcing a failure. [ 489.510899][T11989] name failslab, interval 1, probability 0, space 0, times 0 [ 489.510935][T11989] CPU: 1 UID: 0 PID: 11989 Comm: syz.0.2064 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 489.510962][T11989] Tainted: [L]=SOFTLOCKUP [ 489.510968][T11989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.510979][T11989] Call Trace: [ 489.510988][T11989] [ 489.510996][T11989] dump_stack_lvl+0xe8/0x150 [ 489.511025][T11989] should_fail_ex+0x467/0x600 [ 489.511052][T11989] should_failslab+0xa8/0x100 [ 489.511086][T11989] kmem_cache_alloc_noprof+0xa4/0x650 [ 489.511108][T11989] ? key_alloc+0x30e/0xfe0 [ 489.511126][T11989] ? key_alloc+0x30e/0xfe0 [ 489.511150][T11989] key_alloc+0x30e/0xfe0 [ 489.511177][T11989] keyring_alloc+0x45/0xb0 [ 489.511201][T11989] look_up_user_keyrings+0x376/0x670 [ 489.511228][T11989] ? __lock_acquire+0x683/0x2ce0 [ 489.511254][T11989] ? _parse_integer_limit+0x192/0x1e0 [ 489.511276][T11989] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 489.511302][T11989] ? kstrtoull+0x12f/0x1d0 [ 489.511322][T11989] ? lookup_user_key+0xd0/0x1150 [ 489.511344][T11989] lookup_user_key+0x361/0x1150 [ 489.511367][T11989] ? __pfx_lookup_user_key+0x10/0x10 [ 489.511387][T11989] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 489.511423][T11989] keyctl_session_to_parent+0x28/0xa30 [ 489.511456][T11989] __se_sys_keyctl+0x780/0x9d0 [ 489.511484][T11989] ? __pfx___se_sys_keyctl+0x10/0x10 [ 489.511507][T11989] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 489.511529][T11989] ? rt_mutex_slowunlock+0x219/0x460 [ 489.511554][T11989] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 489.511575][T11989] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 489.511609][T11989] ? fput+0xa0/0xd0 [ 489.511630][T11989] ? ksys_write+0x248/0x270 [ 489.511657][T11989] ? __pfx_ksys_write+0x10/0x10 [ 489.511687][T11989] ? __x64_sys_keyctl+0x20/0xc0 [ 489.511711][T11989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.511731][T11989] do_syscall_64+0x174/0x580 [ 489.511750][T11989] ? trace_irq_disable+0x3b/0x140 [ 489.511772][T11989] ? clear_bhb_loop+0x40/0x90 [ 489.511794][T11989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.511812][T11989] RIP: 0033:0x7fe8cfc5ce59 [ 489.511830][T11989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.511845][T11989] RSP: 002b:00007fe8cdeb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 489.511865][T11989] RAX: ffffffffffffffda RBX: 00007fe8cfed5fa0 RCX: 00007fe8cfc5ce59 [ 489.511878][T11989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 489.511890][T11989] RBP: 00007fe8cdeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 489.511901][T11989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.511912][T11989] R13: 00007fe8cfed6038 R14: 00007fe8cfed5fa0 R15: 00007ffd4ef08fe8 [ 489.511943][T11989] [ 490.177997][ T37] audit: type=1326 audit(1782691914.395:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11990 comm="syz.0.2065" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 490.197682][ T37] audit: type=1326 audit(1782691914.395:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11990 comm="syz.0.2065" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 490.312344][ T37] audit: type=1326 audit(1782691914.545:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11990 comm="syz.0.2065" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 490.312864][ T37] audit: type=1326 audit(1782691914.545:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11990 comm="syz.0.2065" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 490.313395][ T37] audit: type=1326 audit(1782691914.545:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11990 comm="syz.0.2065" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 490.313718][ T37] audit: type=1326 audit(1782691914.545:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11990 comm="syz.0.2065" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 490.351481][ T37] audit: type=1326 audit(1782691914.545:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11990 comm="syz.0.2065" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 490.486734][ T37] audit: type=1326 audit(1782691914.715:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11990 comm="syz.0.2065" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 490.487683][ T37] audit: type=1326 audit(1782691914.715:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11990 comm="syz.0.2065" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 492.375167][T12005] comedi comedi2: comedi_config --init_data is deprecated [ 492.889578][ T31] r8152-cfgselector 3-1: Unknown version 0x0000 [ 492.955063][ T31] r8152-cfgselector 3-1: No union descriptors [ 493.204530][T12016] virt_wifi0 speed is unknown, defaulting to 1000 [ 493.503229][T12021] FAULT_INJECTION: forcing a failure. [ 493.503229][T12021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.503271][T12021] CPU: 0 UID: 0 PID: 12021 Comm: syz.1.2075 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 493.503295][T12021] Tainted: [L]=SOFTLOCKUP [ 493.503302][T12021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 493.503312][T12021] Call Trace: [ 493.503320][T12021] [ 493.503328][T12021] dump_stack_lvl+0xe8/0x150 [ 493.503356][T12021] should_fail_ex+0x467/0x600 [ 493.503383][T12021] _copy_to_user+0x31/0xb0 [ 493.503410][T12021] simple_read_from_buffer+0xe1/0x170 [ 493.503437][T12021] proc_fail_nth_read+0x1be/0x230 [ 493.503463][T12021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.503487][T12021] ? rw_verify_area+0x250/0x4d0 [ 493.503512][T12021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.503533][T12021] vfs_read+0x219/0xa90 [ 493.503563][T12021] ? __pfx_vfs_read+0x10/0x10 [ 493.503588][T12021] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 493.503613][T12021] ? lockdep_hardirqs_on+0x7a/0x110 [ 493.503634][T12021] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 493.503653][T12021] ? mutex_lock_nested+0x152/0x1d0 [ 493.503676][T12021] ? fdget_pos+0x252/0x320 [ 493.503705][T12021] ksys_read+0x156/0x270 [ 493.503730][T12021] ? __pfx_ksys_read+0x10/0x10 [ 493.503760][T12021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.503780][T12021] do_syscall_64+0x174/0x580 [ 493.503799][T12021] ? trace_irq_disable+0x3b/0x140 [ 493.503821][T12021] ? clear_bhb_loop+0x40/0x90 [ 493.503843][T12021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.503859][T12021] RIP: 0033:0x7f2382a6d68e [ 493.503875][T12021] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 493.503888][T12021] RSP: 002b:00007f2380d05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 493.503907][T12021] RAX: ffffffffffffffda RBX: 00007f2380d066c0 RCX: 00007f2382a6d68e [ 493.503921][T12021] RDX: 000000000000000f RSI: 00007f2380d060a0 RDI: 0000000000000006 [ 493.503932][T12021] RBP: 00007f2380d06090 R08: 0000000000000000 R09: 0000000000000000 [ 493.503943][T12021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.503954][T12021] R13: 00007f2382d26038 R14: 00007f2382d25fa0 R15: 00007ffe4054cb18 [ 493.503984][T12021] [ 493.534169][ T821] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 493.555795][ T5730] r8152-cfgselector 3-1: USB disconnect, device number 55 [ 493.787793][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 493.807825][ T821] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 493.807851][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.807870][ T821] usb 4-1: Product: syz [ 493.807883][ T821] usb 4-1: Manufacturer: syz [ 493.807897][ T821] usb 4-1: SerialNumber: syz [ 493.848659][ T821] usb 4-1: config 0 descriptor?? [ 493.864525][ T821] gspca_main: se401-2.14.0 probing 047d:5003 [ 494.072202][T12029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2077'. [ 494.072242][T12029] nbd: must specify a size in bytes for the device [ 494.433690][ T37] audit: type=1326 audit(1782691918.646:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12028 comm="syz.4.2078" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39bf94ce59 code=0x7ffc0000 [ 494.632208][T12037] virt_wifi0 speed is unknown, defaulting to 1000 [ 494.646350][ T821] gspca_se401: Wrong descriptor type [ 494.648692][T12038] random: crng reseeded on system resumption [ 494.848858][ T5700] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 494.915427][ T31] usb 4-1: USB disconnect, device number 25 [ 496.797644][ T5730] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 496.960156][ T5730] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 496.960183][ T5730] usb 1-1: config 0 has no interface number 0 [ 496.960226][ T5730] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 496.960250][ T5730] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 496.960285][ T5730] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 496.960306][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.986099][ T5730] usb 1-1: config 0 descriptor?? [ 497.120219][ T5730] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 497.229387][ T59] Bluetooth: hci4: ACL packet too small [ 497.234141][T12053] iowarrior 1-1:0.1: Error -90 while submitting URB [ 497.253503][ T5716] usb 1-1: USB disconnect, device number 49 [ 497.355219][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2088'. [ 497.397656][ T5700] usb 3-1: device descriptor read/64, error -71 [ 497.501046][T12066] FAULT_INJECTION: forcing a failure. [ 497.501046][T12066] name failslab, interval 1, probability 0, space 0, times 0 [ 497.501081][T12066] CPU: 1 UID: 0 PID: 12066 Comm: syz.1.2089 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 497.501111][T12066] Tainted: [L]=SOFTLOCKUP [ 497.501118][T12066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 497.501129][T12066] Call Trace: [ 497.501137][T12066] [ 497.501145][T12066] dump_stack_lvl+0xe8/0x150 [ 497.501172][T12066] should_fail_ex+0x467/0x600 [ 497.501201][T12066] should_failslab+0xa8/0x100 [ 497.501227][T12066] kmem_cache_alloc_node_noprof+0xae/0x670 [ 497.501251][T12066] ? __alloc_skb+0x1d7/0x7a0 [ 497.501271][T12066] ? __alloc_skb+0x1d7/0x7a0 [ 497.501298][T12066] __alloc_skb+0x1d7/0x7a0 [ 497.501323][T12066] netlink_sendmsg+0x5d4/0xb40 [ 497.501357][T12066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.501383][T12066] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 497.501404][T12066] ? __kernel_text_address+0xd/0x30 [ 497.501429][T12066] ? unwind_get_return_address+0x4d/0x90 [ 497.501455][T12066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.501477][T12066] sock_sendmsg_nosec+0x13a/0x180 [ 497.501500][T12066] ____sys_sendmsg+0x565/0x870 [ 497.501524][T12066] ? __might_fault+0xaf/0x130 [ 497.501552][T12066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.501585][T12066] ? import_iovec+0x73/0xa0 [ 497.501614][T12066] ___sys_sendmsg+0x2a5/0x360 [ 497.501636][T12066] ? __lock_acquire+0x683/0x2ce0 [ 497.501662][T12066] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.501710][T12066] ? __fget_files+0x2a/0x420 [ 497.501730][T12066] ? __fget_files+0x3a8/0x420 [ 497.501756][T12066] __x64_sys_sendmsg+0x1b7/0x290 [ 497.501780][T12066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.501819][T12066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.501840][T12066] do_syscall_64+0x174/0x580 [ 497.501861][T12066] ? trace_irq_disable+0x3b/0x140 [ 497.501884][T12066] ? clear_bhb_loop+0x40/0x90 [ 497.501914][T12066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.501934][T12066] RIP: 0033:0x7f2382aace59 [ 497.501951][T12066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.501966][T12066] RSP: 002b:00007f2380d06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.501986][T12066] RAX: ffffffffffffffda RBX: 00007f2382d25fa0 RCX: 00007f2382aace59 [ 497.502000][T12066] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 497.502012][T12066] RBP: 00007f2380d06090 R08: 0000000000000000 R09: 0000000000000000 [ 497.502024][T12066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.502035][T12066] R13: 00007f2382d26038 R14: 00007f2382d25fa0 R15: 00007ffe4054cb18 [ 497.502065][T12066] [ 497.667564][ T5700] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 497.817561][ T5700] usb 3-1: Using ep0 maxpacket: 16 [ 497.829499][ T5700] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 497.829527][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.829547][ T5700] usb 3-1: Product: syz [ 497.829560][ T5700] usb 3-1: Manufacturer: syz [ 497.829573][ T5700] usb 3-1: SerialNumber: syz [ 497.889694][ T5700] r8152-cfgselector 3-1: Unknown version 0x0000 [ 497.889718][ T5700] r8152-cfgselector 3-1: config 0 descriptor?? [ 498.621255][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 498.621272][ T37] audit: type=1326 audit(1782691922.856:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12076 comm="syz.1.2094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2382aace59 code=0x7ffc0000 [ 498.621449][ T37] audit: type=1326 audit(1782691922.856:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12076 comm="syz.1.2094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2382aace59 code=0x7ffc0000 [ 498.621999][ T37] audit: type=1326 audit(1782691922.856:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12076 comm="syz.1.2094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f2382aace59 code=0x7ffc0000 [ 498.622026][ T37] audit: type=1326 audit(1782691922.856:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12076 comm="syz.1.2094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2382aace59 code=0x7ffc0000 [ 498.622055][ T37] audit: type=1326 audit(1782691922.856:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12076 comm="syz.1.2094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2382aace59 code=0x7ffc0000 [ 498.625557][ T37] audit: type=1326 audit(1782691922.856:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12076 comm="syz.1.2094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2382aace59 code=0x7ffc0000 [ 498.625601][ T37] audit: type=1326 audit(1782691922.856:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12076 comm="syz.1.2094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2382aace59 code=0x7ffc0000 [ 498.625647][ T37] audit: type=1326 audit(1782691922.856:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12076 comm="syz.1.2094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2382aace59 code=0x7ffc0000 [ 498.625688][ T37] audit: type=1326 audit(1782691922.856:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12076 comm="syz.1.2094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2382aace59 code=0x7ffc0000 [ 500.498528][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.509982][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.704882][T12090] FAULT_INJECTION: forcing a failure. [ 500.704882][T12090] name failslab, interval 1, probability 0, space 0, times 0 [ 500.704918][T12090] CPU: 0 UID: 0 PID: 12090 Comm: syz.0.2097 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 500.704950][T12090] Tainted: [L]=SOFTLOCKUP [ 500.704954][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.704960][T12090] Call Trace: [ 500.704965][T12090] [ 500.704970][T12090] dump_stack_lvl+0xe8/0x150 [ 500.704988][T12090] should_fail_ex+0x467/0x600 [ 500.705005][T12090] should_failslab+0xa8/0x100 [ 500.705020][T12090] kmem_cache_alloc_node_noprof+0xae/0x670 [ 500.705034][T12090] ? __alloc_skb+0x1d7/0x7a0 [ 500.705046][T12090] ? __alloc_skb+0x1d7/0x7a0 [ 500.705061][T12090] __alloc_skb+0x1d7/0x7a0 [ 500.705074][T12090] tipc_msg_build+0x15f/0xf50 [ 500.705175][T12090] ? tipc_node_find+0xb3/0x4a0 [ 500.705209][T12090] ? tipc_node_find+0x3cd/0x4a0 [ 500.705219][T12090] ? __lock_acquire+0x683/0x2ce0 [ 500.705233][T12090] ? __pfx_tipc_msg_build+0x10/0x10 [ 500.705246][T12090] ? __lock_acquire+0x683/0x2ce0 [ 500.705262][T12090] __tipc_sendmsg+0x182d/0x2ba0 [ 500.705304][T12090] ? rcu_is_watching+0x15/0xb0 [ 500.705320][T12090] ? __pfx___tipc_sendmsg+0x10/0x10 [ 500.705332][T12090] ? try_to_take_rt_mutex+0x842/0xb00 [ 500.705346][T12090] ? __lock_acquire+0x683/0x2ce0 [ 500.705358][T12090] ? register_lock_class+0x31/0x2e0 [ 500.705374][T12090] ? __lock_acquire+0x683/0x2ce0 [ 500.705390][T12090] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.705403][T12090] ? __lock_acquire+0x683/0x2ce0 [ 500.705418][T12090] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 500.705429][T12090] ? lockdep_hardirqs_on+0x7a/0x110 [ 500.705456][T12090] ? __pfx_woken_wake_function+0x10/0x10 [ 500.705519][T12090] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 500.705590][T12090] ? lockdep_hardirqs_on+0x7a/0x110 [ 500.705616][T12090] tipc_sendmsg+0x55/0x70 [ 500.705634][T12090] ? __pfx_tipc_sendmsg+0x10/0x10 [ 500.705643][T12090] sock_sendmsg_nosec+0x13a/0x180 [ 500.705656][T12090] ____sys_sendmsg+0x565/0x870 [ 500.705670][T12090] ? __might_fault+0xaf/0x130 [ 500.705685][T12090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.705703][T12090] ? import_iovec+0x73/0xa0 [ 500.705720][T12090] ___sys_sendmsg+0x2a5/0x360 [ 500.705732][T12090] ? __lock_acquire+0x683/0x2ce0 [ 500.705746][T12090] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.705762][T12090] ? kstrtouint+0x6e/0xe0 [ 500.705786][T12090] ? __fget_files+0x2a/0x420 [ 500.705799][T12090] ? __fget_files+0x3a8/0x420 [ 500.705815][T12090] __sys_sendmmsg+0x279/0x4d0 [ 500.705831][T12090] ? __pfx___sys_sendmmsg+0x10/0x10 [ 500.705849][T12090] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 500.705871][T12090] ? ksys_write+0x248/0x270 [ 500.705887][T12090] ? __pfx_ksys_write+0x10/0x10 [ 500.705904][T12090] __x64_sys_sendmmsg+0xa0/0xc0 [ 500.705917][T12090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.705928][T12090] do_syscall_64+0x174/0x580 [ 500.705949][T12090] ? clear_bhb_loop+0x40/0x90 [ 500.705962][T12090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.705972][T12090] RIP: 0033:0x7fe8cfc5ce59 [ 500.705984][T12090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.705992][T12090] RSP: 002b:00007fe8cdeb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 500.706004][T12090] RAX: ffffffffffffffda RBX: 00007fe8cfed5fa0 RCX: 00007fe8cfc5ce59 [ 500.706012][T12090] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 500.706018][T12090] RBP: 00007fe8cdeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 500.706025][T12090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.706031][T12090] R13: 00007fe8cfed6038 R14: 00007fe8cfed5fa0 R15: 00007ffd4ef08fe8 [ 500.706046][T12090] [ 500.813357][T12092] netlink: 'syz.1.2098': attribute type 11 has an invalid length. [ 501.149530][T12092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2098'. [ 501.149549][T12092] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2098'. [ 501.313677][T12100] random: crng reseeded on system resumption [ 501.567563][T12095] virt_wifi0 speed is unknown, defaulting to 1000 [ 503.179014][ T5700] r8152-cfgselector 3-1: Unknown version 0x0000 [ 503.179452][ T5700] r8152-cfgselector 3-1: No union descriptors [ 503.256240][T12108] loop8: detected capacity change from 0 to 8 [ 503.414274][T12108] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 503.414295][T12108] loop8: partition table partially beyond EOD, truncated [ 503.414488][T12108] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 503.800183][ T5715] r8152-cfgselector 3-1: USB disconnect, device number 57 [ 504.144694][ T5823] udevd[5823]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 504.697447][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 505.425292][ T37] audit: type=1400 audit(1782691928.936:1576): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12124 comm="syz.0.2108" daddr=::ffff:172.20.20.20 dest=20001 [ 505.822806][T12139] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2111'. [ 505.851967][T12139] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2111'. [ 505.851992][T12139] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2111'. [ 505.852005][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2111'. [ 505.870841][T12141] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2112'. [ 505.896533][ T37] audit: type=1326 audit(1782691930.086:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12137 comm="syz.2.2111" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21a131ce59 code=0x0 [ 505.963889][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2111'. [ 506.170157][ T821] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 506.324845][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 506.340947][ T821] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 506.340976][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.340996][ T821] usb 1-1: Product: syz [ 506.341009][ T821] usb 1-1: Manufacturer: syz [ 506.341023][ T821] usb 1-1: SerialNumber: syz [ 506.370788][ T821] r8152-cfgselector 1-1: Unknown version 0x0000 [ 506.370811][ T821] r8152-cfgselector 1-1: config 0 descriptor?? [ 506.574981][T12159] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 507.298232][T12171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2120'. [ 507.561785][T12176] 9p: Bad value for 'rfdno' [ 507.811049][T12174] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.200371][T12173] comedi comedi3: rti800: I/O base address not correctly aligned [ 509.132590][ T59] Bluetooth: hci5: ACL packet too small [ 510.663503][T12196] loop5: detected capacity change from 0 to 6 [ 510.809164][T12196] Dev loop5: unable to read RDB block 6 [ 510.809210][T12196] loop5: AHDI p1 p2 [ 510.809228][T12196] loop5: partition table partially beyond EOD, truncated [ 510.809469][T12196] loop5: p1 start 1702059890 is beyond EOD, truncated [ 511.610742][ T821] r8152-cfgselector 1-1: Unknown version 0x0000 [ 511.611222][ T821] r8152-cfgselector 1-1: No union descriptors [ 511.956797][ T37] audit: type=1804 audit(1782691936.186:1578): pid=12205 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2132" name="/newroot/95/file0" dev="tmpfs" ino=504 res=1 errno=0 [ 512.232276][T12207] 9p: Bad value for 'rfdno' [ 513.625007][ T31] r8152-cfgselector 1-1: USB disconnect, device number 50 [ 513.722623][T12221] FAULT_INJECTION: forcing a failure. [ 513.722623][T12221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.722657][T12221] CPU: 0 UID: 0 PID: 12221 Comm: syz.0.2139 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 513.722681][T12221] Tainted: [L]=SOFTLOCKUP [ 513.722688][T12221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 513.722698][T12221] Call Trace: [ 513.722706][T12221] [ 513.722714][T12221] dump_stack_lvl+0xe8/0x150 [ 513.722741][T12221] should_fail_ex+0x467/0x600 [ 513.722769][T12221] strncpy_from_user+0x36/0x2c0 [ 513.722806][T12221] do_getname+0x77/0x250 [ 513.722831][T12221] __se_sys_renameat2+0x34/0x2c0 [ 513.722851][T12221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.722872][T12221] do_syscall_64+0x174/0x580 [ 513.722893][T12221] ? trace_irq_disable+0x3b/0x140 [ 513.722915][T12221] ? clear_bhb_loop+0x40/0x90 [ 513.722937][T12221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.722954][T12221] RIP: 0033:0x7fe8cfc5ce59 [ 513.722971][T12221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.722987][T12221] RSP: 002b:00007fe8cdeb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 513.723007][T12221] RAX: ffffffffffffffda RBX: 00007fe8cfed5fa0 RCX: 00007fe8cfc5ce59 [ 513.723021][T12221] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 513.723034][T12221] RBP: 00007fe8cdeb6090 R08: 0000000000000002 R09: 0000000000000000 [ 513.723046][T12221] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 513.723058][T12221] R13: 00007fe8cfed6038 R14: 00007fe8cfed5fa0 R15: 00007ffd4ef08fe8 [ 513.723087][T12221] [ 514.103849][T12229] FAULT_INJECTION: forcing a failure. [ 514.103849][T12229] name failslab, interval 1, probability 0, space 0, times 0 [ 514.103884][T12229] CPU: 0 UID: 0 PID: 12229 Comm: syz.0.2141 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 514.103908][T12229] Tainted: [L]=SOFTLOCKUP [ 514.103914][T12229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.103925][T12229] Call Trace: [ 514.103933][T12229] [ 514.103941][T12229] dump_stack_lvl+0xe8/0x150 [ 514.103968][T12229] should_fail_ex+0x467/0x600 [ 514.103996][T12229] should_failslab+0xa8/0x100 [ 514.104023][T12229] __kmalloc_noprof+0xfe/0x780 [ 514.104044][T12229] ? rcu_is_watching+0x15/0xb0 [ 514.104071][T12229] ? tomoyo_realpath_from_path+0xef/0x640 [ 514.104090][T12229] ? tomoyo_realpath_from_path+0xef/0x640 [ 514.104115][T12229] tomoyo_realpath_from_path+0xef/0x640 [ 514.104143][T12229] ? tomoyo_path_number_perm+0x219/0x5f0 [ 514.104255][T12229] tomoyo_path_number_perm+0x246/0x5f0 [ 514.104283][T12229] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 514.104306][T12229] ? __lock_acquire+0x683/0x2ce0 [ 514.104343][T12229] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 514.104363][T12229] ? hook_file_ioctl+0x1f3/0x600 [ 514.104384][T12229] ? lockdep_hardirqs_on+0x7a/0x110 [ 514.104447][T12229] ? __fget_files+0x2a/0x420 [ 514.104473][T12229] ? __fget_files+0x2a/0x420 [ 514.104493][T12229] ? __fget_files+0x3a8/0x420 [ 514.104512][T12229] ? __fget_files+0x2a/0x420 [ 514.104538][T12229] security_file_ioctl+0xc3/0x2a0 [ 514.104565][T12229] __se_sys_ioctl+0x47/0x170 [ 514.104590][T12229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.104611][T12229] do_syscall_64+0x174/0x580 [ 514.104630][T12229] ? trace_irq_disable+0x3b/0x140 [ 514.104652][T12229] ? clear_bhb_loop+0x40/0x90 [ 514.104673][T12229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.104691][T12229] RIP: 0033:0x7fe8cfc5ce59 [ 514.104708][T12229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.104730][T12229] RSP: 002b:00007fe8cdeb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.104751][T12229] RAX: ffffffffffffffda RBX: 00007fe8cfed5fa0 RCX: 00007fe8cfc5ce59 [ 514.104764][T12229] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 514.104776][T12229] RBP: 00007fe8cdeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 514.104788][T12229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.104799][T12229] R13: 00007fe8cfed6038 R14: 00007fe8cfed5fa0 R15: 00007ffd4ef08fe8 [ 514.104830][T12229] [ 514.104864][T12229] ERROR: Out of memory at tomoyo_realpath_from_path. [ 514.409803][T12229] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 514.418247][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 514.423611][T12238] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2145'. [ 514.614166][T12242] 9p: Bad value for 'rfdno' [ 514.654324][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2146'. [ 514.654757][ T37] audit: type=1400 audit(1782691938.887:1579): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12239 comm="syz.4.2146" daddr=ff01::1 dest=20000 [ 515.107205][T12250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2150'. [ 515.129161][ T5700] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 515.146345][ T37] audit: type=1804 audit(1782691939.377:1580): pid=12255 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2152" name="/newroot/323/file0" dev="tmpfs" ino=1691 res=1 errno=0 [ 515.276660][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 515.283452][ T5700] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 515.283479][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.283498][ T5700] usb 1-1: Product: syz [ 515.283511][ T5700] usb 1-1: Manufacturer: syz [ 515.283524][ T5700] usb 1-1: SerialNumber: syz [ 515.331385][ T5700] r8152-cfgselector 1-1: Unknown version 0x0000 [ 515.331410][ T5700] r8152-cfgselector 1-1: config 0 descriptor?? [ 516.971274][T12266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2155'. [ 517.363804][T12274] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2158'. [ 517.456614][ T821] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 517.703550][T12276] 9p: Bad value for 'rfdno' [ 517.730804][ T821] usb 3-1: unable to get BOS descriptor or descriptor too short [ 517.749246][ T821] usb 3-1: config 114 has 0 interfaces, different from the descriptor's value: 1 [ 517.779779][ T821] usb 3-1: string descriptor 0 read error: -22 [ 517.779988][ T821] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 517.780064][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.227752][ T821] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 519.375055][T12295] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 519.416541][ T821] usb 2-1: Using ep0 maxpacket: 16 [ 519.419408][ T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.419707][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 519.419736][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 519.419756][ T821] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 519.419777][ T821] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.421920][ T821] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 519.421935][ T821] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 519.421946][ T821] usb 2-1: Manufacturer: syz [ 519.502265][ T37] audit: type=1804 audit(1782691943.717:1581): pid=12297 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2167" name="file0" dev="tmpfs" ino=2191 res=1 errno=0 [ 519.547704][ T821] usb 2-1: config 0 descriptor?? [ 519.976489][ T821] rc_core: IR keymap rc-hauppauge not found [ 519.976510][ T821] Registered IR keymap rc-empty [ 520.017051][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.036608][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.076057][ T821] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 520.097623][ T821] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input42 [ 520.130342][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.146510][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.167337][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.186536][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.206494][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.226498][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.246619][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.266770][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.286511][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.306778][ T821] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 520.408425][ T821] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 520.408450][ T821] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 520.449085][ T821] usb 2-1: USB disconnect, device number 46 [ 520.571226][ T5700] r8152-cfgselector 1-1: Unknown version 0x0000 [ 520.571710][ T5700] r8152-cfgselector 1-1: No union descriptors [ 520.802471][ T31] usb 3-1: USB disconnect, device number 58 [ 521.422669][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'. [ 521.423126][ T37] audit: type=1400 audit(1782691945.657:1582): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12308 comm="syz.4.2170" daddr=ff01::1 dest=20000 [ 521.630647][ T5708] r8152-cfgselector 1-1: USB disconnect, device number 51 [ 521.811580][T12307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2169'. [ 522.096641][ T5708] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 522.269104][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 522.271198][ T5708] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 522.271250][ T5708] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 522.271274][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 128, changing to 11 [ 522.271296][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 1792, setting to 1024 [ 522.271319][ T5708] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.271356][ T5708] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 522.271377][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.299516][ T5708] usb 1-1: config 0 descriptor?? [ 522.315402][T12315] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 522.352599][ T5708] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input43 [ 522.620579][T12315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.621181][T12315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.642765][T12315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.644889][T12315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.653878][T12315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.673046][T12315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.984005][T12332] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2178'. [ 522.998804][ T5715] usb 1-1: USB disconnect, device number 52 [ 523.177167][ T5708] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 523.206591][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 523.206628][T12332] netlink: 'syz.3.2178': attribute type 10 has an invalid length. [ 523.206644][T12332] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2178'. [ 523.336339][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 523.338331][ T5708] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 523.338353][ T5708] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 523.342124][ T5708] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 523.342214][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.342225][ T5708] usb 2-1: Product: syz [ 523.342232][ T5708] usb 2-1: Manufacturer: syz [ 523.342239][ T5708] usb 2-1: SerialNumber: syz [ 523.398606][ T5708] usb 2-1: 0:2 : does not exist [ 523.398684][ T5708] usb 2-1: unit 9 not found! [ 523.617721][T12337] FAULT_INJECTION: forcing a failure. [ 523.617721][T12337] name failslab, interval 1, probability 0, space 0, times 0 [ 523.617754][T12337] CPU: 1 UID: 0 PID: 12337 Comm: syz.0.2179 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 523.617778][T12337] Tainted: [L]=SOFTLOCKUP [ 523.617784][T12337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.617795][T12337] Call Trace: [ 523.617802][T12337] [ 523.617810][T12337] dump_stack_lvl+0xe8/0x150 [ 523.617838][T12337] should_fail_ex+0x467/0x600 [ 523.617864][T12337] should_failslab+0xa8/0x100 [ 523.617890][T12337] __kmalloc_noprof+0xfe/0x780 [ 523.617913][T12337] ? tomoyo_encode+0x2ad/0x570 [ 523.617931][T12337] ? tomoyo_encode+0x2ad/0x570 [ 523.617954][T12337] tomoyo_encode+0x2ad/0x570 [ 523.617977][T12337] tomoyo_realpath_from_path+0x5fa/0x640 [ 523.618003][T12337] ? tomoyo_path_number_perm+0x219/0x5f0 [ 523.618025][T12337] tomoyo_path_number_perm+0x246/0x5f0 [ 523.618049][T12337] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 523.618070][T12337] ? __lock_acquire+0x683/0x2ce0 [ 523.618103][T12337] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 523.618123][T12337] ? hook_file_ioctl+0x1f3/0x600 [ 523.618143][T12337] ? lockdep_hardirqs_on+0x7a/0x110 [ 523.618179][T12337] ? __fget_files+0x2a/0x420 [ 523.618202][T12337] ? __fget_files+0x2a/0x420 [ 523.618221][T12337] ? __fget_files+0x3a8/0x420 [ 523.618239][T12337] ? __fget_files+0x2a/0x420 [ 523.618264][T12337] security_file_ioctl+0xc3/0x2a0 [ 523.618300][T12337] __se_sys_ioctl+0x47/0x170 [ 523.618325][T12337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.618344][T12337] do_syscall_64+0x174/0x580 [ 523.618364][T12337] ? trace_irq_disable+0x3b/0x140 [ 523.618385][T12337] ? clear_bhb_loop+0x40/0x90 [ 523.618405][T12337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.618424][T12337] RIP: 0033:0x7fe8cfc5ce59 [ 523.618441][T12337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.618456][T12337] RSP: 002b:00007fe8cdeb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.618476][T12337] RAX: ffffffffffffffda RBX: 00007fe8cfed5fa0 RCX: 00007fe8cfc5ce59 [ 523.618489][T12337] RDX: 00002000000000c0 RSI: 00000000c0105512 RDI: 0000000000000003 [ 523.618500][T12337] RBP: 00007fe8cdeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 523.618510][T12337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.618520][T12337] R13: 00007fe8cfed6038 R14: 00007fe8cfed5fa0 R15: 00007ffd4ef08fe8 [ 523.618549][T12337] [ 523.618567][T12337] ERROR: Out of memory at tomoyo_realpath_from_path. [ 523.647717][T12337] hub 8-0:1.0: USB hub found [ 523.648172][T12337] hub 8-0:1.0: 1 port detected [ 523.747028][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 523.776580][ T37] audit: type=1400 audit(1782691948.017:1583): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12323 comm="syz.1.2176" daddr=ff01::1 dest=20000 [ 524.290054][T12345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2180'. [ 524.506285][ T821] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 524.656337][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 524.678445][ T821] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 524.678474][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.678492][ T821] usb 1-1: Product: syz [ 524.678505][ T821] usb 1-1: Manufacturer: syz [ 524.678517][ T821] usb 1-1: SerialNumber: syz [ 524.718699][ T821] r8152-cfgselector 1-1: Unknown version 0x0000 [ 524.718721][ T821] r8152-cfgselector 1-1: config 0 descriptor?? [ 524.900367][T12364] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2190'. [ 525.070842][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'. [ 525.070877][T12364] netlink: 'syz.4.2190': attribute type 10 has an invalid length. [ 525.070892][T12364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2190'. [ 525.834624][ T5708] usb 2-1: USB disconnect, device number 47 [ 528.299301][T12396] random: crng reseeded on system resumption [ 528.824152][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2199'. [ 528.928875][T12391] virt_wifi0 speed is unknown, defaulting to 1000 [ 529.811082][T12411] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2205'. [ 529.945958][ T821] r8152-cfgselector 1-1: Unknown version 0x0000 [ 529.946500][ T821] r8152-cfgselector 1-1: No union descriptors [ 530.352910][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 530.352934][T12411] netlink: 'syz.4.2205': attribute type 10 has an invalid length. [ 530.352943][T12411] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2205'. [ 530.660475][ T5735] r8152-cfgselector 1-1: USB disconnect, device number 53 [ 532.484281][T12438] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2214'. [ 532.799468][ T37] audit: type=1800 audit(1782691962.041:1584): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2215" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 533.004354][ T5708] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 533.092092][ T37] audit: type=1326 audit(1782691962.329:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12448 comm="syz.2.2218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 533.092797][ T37] audit: type=1326 audit(1782691962.329:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12448 comm="syz.2.2218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 533.092839][ T37] audit: type=1326 audit(1782691962.329:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12448 comm="syz.2.2218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 533.094030][ T37] audit: type=1326 audit(1782691962.329:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12448 comm="syz.2.2218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 533.149373][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 533.149387][ T37] audit: type=1326 audit(1782691962.339:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12448 comm="syz.2.2218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 533.149435][ T37] audit: type=1326 audit(1782691962.339:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12448 comm="syz.2.2218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 533.149471][ T37] audit: type=1326 audit(1782691962.339:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12448 comm="syz.2.2218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 533.149506][ T37] audit: type=1326 audit(1782691962.339:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12448 comm="syz.2.2218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 533.150924][ T5708] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 533.150954][ T5708] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 533.150967][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 128, changing to 11 [ 533.150980][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 1792, setting to 1024 [ 533.150993][ T5708] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.151014][ T5708] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 533.151026][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.183993][ T5708] usb 1-1: config 0 descriptor?? [ 533.277034][T12443] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 533.419918][ T5708] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input45 [ 533.527498][ T37] audit: type=1326 audit(1782691962.735:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12448 comm="syz.2.2218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a131ce59 code=0x7ffc0000 [ 533.581219][T12443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.628685][T12443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.638396][T12443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.639333][T12443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.658753][T12443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.659087][T12443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.060924][ T5708] usb 1-1: USB disconnect, device number 54 [ 534.278983][T12458] random: crng reseeded on system resumption [ 534.448590][T12457] virt_wifi0 speed is unknown, defaulting to 1000 [ 534.520179][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2221'. [ 534.544101][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 534.611997][T12462] virt_wifi0 speed is unknown, defaulting to 1000 [ 535.503978][T12477] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2226'. [ 538.403401][T12503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2235'. [ 538.873785][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 538.874150][T12514] openvswitch: netlink: Flow actions attr not present in new flow. [ 540.220316][T12525] ªªªªªª: renamed from vlan0 (while UP) [ 540.424697][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 540.424720][ T37] audit: type=1326 audit(1782691969.601:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12527 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 540.424759][ T37] audit: type=1326 audit(1782691969.601:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12527 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 540.424789][ T37] audit: type=1326 audit(1782691969.601:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12527 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 540.428019][ T37] audit: type=1326 audit(1782691969.601:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12527 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 540.428065][ T37] audit: type=1326 audit(1782691969.601:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12527 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 540.428103][ T37] audit: type=1326 audit(1782691969.601:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12527 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 540.428141][ T37] audit: type=1326 audit(1782691969.601:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12527 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 540.428237][ T37] audit: type=1326 audit(1782691969.601:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12527 comm="syz.0.2242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8cfc5ce59 code=0x7ffc0000 [ 540.786697][T12534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2243'. [ 542.087839][T12547] random: crng reseeded on system resumption [ 542.250414][ T5716] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 542.254652][T12556] virt_wifi0 speed is unknown, defaulting to 1000 [ 542.285166][T12558] random: crng reseeded on system resumption [ 542.366215][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2251'. [ 542.401412][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 542.415674][ T5716] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 542.415700][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.415719][ T5716] usb 4-1: Product: syz [ 542.415732][ T5716] usb 4-1: Manufacturer: syz [ 542.415746][ T5716] usb 4-1: SerialNumber: syz [ 542.438468][ T5716] r8152-cfgselector 4-1: Unknown version 0x0000 [ 542.438491][ T5716] r8152-cfgselector 4-1: config 0 descriptor?? [ 542.581393][ T5700] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 542.746980][ T5700] usb 3-1: Using ep0 maxpacket: 8 [ 542.750515][ T5700] usb 3-1: unable to get BOS descriptor or descriptor too short [ 542.753946][ T5700] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 542.753970][ T5700] usb 3-1: config 0 has no interface number 0 [ 542.754013][ T5700] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 542.754091][ T5700] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 542.754113][ T5700] usb 3-1: config 0 interface 88 has no altsetting 0 [ 542.819303][ T5700] usb 3-1: string descriptor 0 read error: -22 [ 542.820050][ T5700] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 542.820073][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 542.849800][T12568] netlink: 'syz.0.2255': attribute type 21 has an invalid length. [ 542.914239][ T5700] usb 3-1: config 0 descriptor?? [ 543.050314][ T5700] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input49 [ 543.225175][T12575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.226636][T12575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.798386][ T5700] usb 3-1: USB disconnect, device number 59 [ 544.096163][ T5691] udevd[5691]: Error opening device "/dev/input/event4": No such device [ 544.096412][ T5691] udevd[5691]: Unable to EVIOCGABS device "/dev/input/event4" [ 544.098617][ T5691] udevd[5691]: Unable to EVIOCGABS device "/dev/input/event4" [ 545.139255][T12588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2260'. [ 545.329935][T12597] random: crng reseeded on system resumption [ 545.431417][T12600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2263'. [ 545.731518][T12590] virt_wifi0 speed is unknown, defaulting to 1000 [ 545.779473][ T5715] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 545.928042][ T5715] usb 1-1: Using ep0 maxpacket: 16 [ 545.933577][ T5715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.933602][ T5715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.943977][ T5715] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.944005][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.944024][ T5715] usb 1-1: Product: syz [ 545.944036][ T5715] usb 1-1: Manufacturer: syz [ 545.944048][ T5715] usb 1-1: SerialNumber: syz [ 546.094358][ T5715] usb 1-1: 0:2 : does not exist [ 546.094418][ T5715] usb 1-1: unit 6 not found! [ 547.609629][ T821] usb 1-1: USB disconnect, device number 55 [ 547.723333][ T5716] r8152-cfgselector 4-1: Unknown version 0x0000 [ 547.723859][ T5716] r8152-cfgselector 4-1: No union descriptors [ 548.111267][ T5716] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 548.306393][ T5716] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 548.306421][ T5716] usb 3-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 548.306439][ T5716] usb 3-1: config 0 has no interface number 0 [ 548.309957][ T5716] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 548.309983][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.310010][ T5716] usb 3-1: Product: syz [ 548.310022][ T5716] usb 3-1: Manufacturer: syz [ 548.310035][ T5716] usb 3-1: SerialNumber: syz [ 548.370992][ T5716] usb 3-1: config 0 descriptor?? [ 548.856578][ T5716] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 548.856644][ T5716] uvcvideo 3-1:0.64: No valid video chain found. [ 548.955933][ T5735] r8152-cfgselector 4-1: USB disconnect, device number 26 [ 549.096802][ T821] usb 3-1: USB disconnect, device number 60 [ 549.989922][T12645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2277'. [ 551.149468][ T37] audit: type=1400 audit(1782691980.187:1616): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12648 comm="syz.4.2281" daddr=::ffff:172.20.20.55 dest=20001 [ 551.149519][ T37] audit: type=1400 audit(1782691980.197:1617): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12648 comm="syz.4.2281" daddr=ff02::1 dest=20001 [ 551.149554][ T37] audit: type=1400 audit(1782691980.207:1618): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12648 comm="syz.4.2281" daddr=::ffff:224.0.0.2 dest=20000 [ 551.151645][ T821] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 551.329838][T12659] virt_wifi0 speed is unknown, defaulting to 1000 [ 551.339145][ T821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 551.339728][ T821] usb 1-1: not running at top speed; connect to a high speed hub [ 551.340839][ T821] usb 1-1: config 11 has an invalid interface number: 183 but max is 1 [ 551.340860][ T821] usb 1-1: config 11 has an invalid interface number: 184 but max is 1 [ 551.340879][ T821] usb 1-1: config 11 has no interface number 0 [ 551.340893][ T821] usb 1-1: config 11 has no interface number 1 [ 551.340929][ T821] usb 1-1: config 11 interface 183 has no altsetting 0 [ 551.340941][ T821] usb 1-1: config 11 interface 184 has no altsetting 0 [ 551.364985][ T821] usb 1-1: string descriptor 0 read error: -22 [ 551.365115][ T821] usb 1-1: New USB device found, idVendor=0711, idProduct=0179, bcdDevice=2e.62 [ 551.365136][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.406441][ T821] ax88179_178a 1-1:11.183: probe with driver ax88179_178a failed with error -22 [ 551.444588][ T5700] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 551.461839][T12660] random: crng reseeded on system resumption [ 551.596104][ T5700] usb 4-1: Using ep0 maxpacket: 16 [ 551.612630][ T5700] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 551.612657][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.612675][ T5700] usb 4-1: Product: syz [ 551.612688][ T5700] usb 4-1: Manufacturer: syz [ 551.612701][ T5700] usb 4-1: SerialNumber: syz [ 551.631051][ T5700] r8152-cfgselector 4-1: Unknown version 0x0000 [ 551.631140][ T5700] r8152-cfgselector 4-1: config 0 descriptor?? [ 551.726329][T12664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2285'. [ 553.351894][T12684] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2291'. [ 553.500710][ T5716] usb 1-1: USB disconnect, device number 56 [ 554.295690][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2291'. [ 554.295714][T12684] netlink: 'syz.2.2291': attribute type 10 has an invalid length. [ 554.295724][T12684] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2291'. [ 554.599621][T12701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2295'. [ 554.669562][T12684] geneve2: entered promiscuous mode [ 554.870683][T12684] geneve2: entered allmulticast mode [ 556.841186][T12725] FAULT_INJECTION: forcing a failure. [ 556.841186][T12725] name failslab, interval 1, probability 0, space 0, times 0 [ 556.841251][T12725] CPU: 1 UID: 0 PID: 12725 Comm: syz.1.2303 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 556.841277][T12725] Tainted: [L]=SOFTLOCKUP [ 556.841283][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 556.841294][T12725] Call Trace: [ 556.841302][T12725] [ 556.841311][T12725] dump_stack_lvl+0xe8/0x150 [ 556.841339][T12725] should_fail_ex+0x467/0x600 [ 556.841367][T12725] should_failslab+0xa8/0x100 [ 556.841394][T12725] kmem_cache_alloc_node_noprof+0xae/0x670 [ 556.841418][T12725] ? __alloc_skb+0x1d7/0x7a0 [ 556.841438][T12725] ? __alloc_skb+0x1d7/0x7a0 [ 556.841465][T12725] __alloc_skb+0x1d7/0x7a0 [ 556.841490][T12725] netlink_sendmsg+0x5d4/0xb40 [ 556.841514][T12725] ? lockdep_hardirqs_on+0x7a/0x110 [ 556.841544][T12725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.841567][T12725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.841592][T12725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.841617][T12725] ? sock_sendmsg_nosec+0x128/0x180 [ 556.841647][T12725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.841670][T12725] sock_sendmsg_nosec+0x13a/0x180 [ 556.841692][T12725] ____sys_sendmsg+0x565/0x870 [ 556.841724][T12725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.841757][T12725] ? import_iovec+0x73/0xa0 [ 556.841787][T12725] ___sys_sendmsg+0x2a5/0x360 [ 556.841809][T12725] ? __lock_acquire+0x683/0x2ce0 [ 556.841836][T12725] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.841892][T12725] ? __fget_files+0x2a/0x420 [ 556.841914][T12725] ? __fget_files+0x3a8/0x420 [ 556.841944][T12725] __x64_sys_sendmsg+0x1b7/0x290 [ 556.841971][T12725] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 556.842012][T12725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.842032][T12725] do_syscall_64+0x174/0x580 [ 556.842054][T12725] ? clear_bhb_loop+0x40/0x90 [ 556.842076][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.842094][T12725] RIP: 0033:0x7f2382aace59 [ 556.842112][T12725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.842126][T12725] RSP: 002b:00007f2380cc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.842146][T12725] RAX: ffffffffffffffda RBX: 00007f2382d26180 RCX: 00007f2382aace59 [ 556.842159][T12725] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000006 [ 556.842172][T12725] RBP: 00007f2380cc4090 R08: 0000000000000000 R09: 0000000000000000 [ 556.842183][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.842194][T12725] R13: 00007f2382d26218 R14: 00007f2382d26180 R15: 00007ffe4054cb18 [ 556.842224][T12725] [ 557.648223][ T5700] r8152-cfgselector 4-1: Unknown version 0x0000 [ 557.648688][ T5700] r8152-cfgselector 4-1: No union descriptors [ 559.846289][ T5715] r8152-cfgselector 4-1: USB disconnect, device number 27 [ 560.916926][T12760] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2314'. [ 560.953829][ T59] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 560.964109][ T59] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 561.241387][T12771] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 561.327133][T12772] FAULT_INJECTION: forcing a failure. [ 561.327133][T12772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.327170][T12772] CPU: 0 UID: 0 PID: 12772 Comm: syz.3.2317 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 561.327195][T12772] Tainted: [L]=SOFTLOCKUP [ 561.327202][T12772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 561.327212][T12772] Call Trace: [ 561.327220][T12772] [ 561.327236][T12772] dump_stack_lvl+0xe8/0x150 [ 561.327265][T12772] should_fail_ex+0x467/0x600 [ 561.327293][T12772] _copy_from_user+0x2d/0xb0 [ 561.327320][T12772] kstrtouint_from_user+0xd6/0x180 [ 561.327418][T12772] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 561.327458][T12772] proc_fail_nth_write+0x8e/0x210 [ 561.327481][T12772] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 561.327512][T12772] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 561.327534][T12772] vfs_write+0x29f/0xbb0 [ 561.327569][T12772] ? __pfx_vfs_write+0x10/0x10 [ 561.327596][T12772] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 561.327619][T12772] ? lockdep_hardirqs_on+0x7a/0x110 [ 561.327640][T12772] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 561.327661][T12772] ? mutex_lock_nested+0x152/0x1d0 [ 561.327685][T12772] ? fdget_pos+0x252/0x320 [ 561.327716][T12772] ksys_write+0x156/0x270 [ 561.327743][T12772] ? __pfx_ksys_write+0x10/0x10 [ 561.327776][T12772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.327797][T12772] do_syscall_64+0x174/0x580 [ 561.327817][T12772] ? trace_irq_disable+0x3b/0x140 [ 561.327839][T12772] ? clear_bhb_loop+0x40/0x90 [ 561.327861][T12772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.327879][T12772] RIP: 0033:0x7fec117cd68e [ 561.327897][T12772] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 561.327913][T12772] RSP: 002b:00007fec0fa1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 561.327933][T12772] RAX: ffffffffffffffda RBX: 00007fec0fa1c6c0 RCX: 00007fec117cd68e [ 561.327947][T12772] RDX: 0000000000000001 RSI: 00007fec0fa1c0a0 RDI: 0000000000000007 [ 561.327958][T12772] RBP: 00007fec0fa1c090 R08: 0000000000000000 R09: 0000000000000000 [ 561.327969][T12772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.327980][T12772] R13: 00007fec11a86218 R14: 00007fec11a86180 R15: 00007ffc9587e348 [ 561.328010][T12772] [ 561.517888][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2314'. [ 561.517920][T12760] netlink: 'syz.0.2314': attribute type 10 has an invalid length. [ 561.517934][T12760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2314'. [ 562.052567][T12781] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2319'. [ 562.129471][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.129538][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.157181][ T37] audit: type=1400 audit(1782691991.201:1619): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12780 comm="syz.3.2319" daddr=fe80::aa dest=20003 [ 563.668880][T12799] FAULT_INJECTION: forcing a failure. [ 563.668880][T12799] name failslab, interval 1, probability 0, space 0, times 0 [ 563.668971][T12799] CPU: 0 UID: 0 PID: 12799 Comm: syz.3.2325 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.668995][T12799] Tainted: [L]=SOFTLOCKUP [ 563.669001][T12799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 563.669012][T12799] Call Trace: [ 563.669020][T12799] [ 563.669028][T12799] dump_stack_lvl+0xe8/0x150 [ 563.669055][T12799] should_fail_ex+0x467/0x600 [ 563.669081][T12799] should_failslab+0xa8/0x100 [ 563.669107][T12799] __kmalloc_noprof+0xfe/0x780 [ 563.669127][T12799] ? rcu_is_watching+0x15/0xb0 [ 563.669153][T12799] ? tomoyo_realpath_from_path+0xef/0x640 [ 563.669169][T12799] ? tomoyo_realpath_from_path+0xef/0x640 [ 563.669194][T12799] tomoyo_realpath_from_path+0xef/0x640 [ 563.669220][T12799] ? tomoyo_path_number_perm+0x219/0x5f0 [ 563.669244][T12799] tomoyo_path_number_perm+0x246/0x5f0 [ 563.669271][T12799] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 563.669297][T12799] ? preempt_schedule_thunk+0x16/0x40 [ 563.669328][T12799] ? hook_file_ioctl+0x1f3/0x600 [ 563.669370][T12799] ? __rcu_read_unlock+0x83/0xe0 [ 563.669468][T12799] ? __fget_files+0x2a/0x420 [ 563.669490][T12799] ? __fget_files+0x3a8/0x420 [ 563.669517][T12799] ? __fget_files+0x2a/0x420 [ 563.669543][T12799] security_file_ioctl+0xc3/0x2a0 [ 563.669570][T12799] __se_sys_ioctl+0x47/0x170 [ 563.669596][T12799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.669616][T12799] do_syscall_64+0x174/0x580 [ 563.669639][T12799] ? clear_bhb_loop+0x40/0x90 [ 563.669661][T12799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.669679][T12799] RIP: 0033:0x7fec1180ce59 [ 563.669697][T12799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.669711][T12799] RSP: 002b:00007fec0fa3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.669730][T12799] RAX: ffffffffffffffda RBX: 00007fec11a86090 RCX: 00007fec1180ce59 [ 563.669744][T12799] RDX: 0000200000000080 RSI: 00000000c034564b RDI: 0000000000000003 [ 563.669756][T12799] RBP: 00007fec0fa3d090 R08: 0000000000000000 R09: 0000000000000000 [ 563.669767][T12799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.669777][T12799] R13: 00007fec11a86128 R14: 00007fec11a86090 R15: 00007ffc9587e348 [ 563.669807][T12799] [ 563.669855][T12799] ERROR: Out of memory at tomoyo_realpath_from_path. [ 564.184844][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2327'. [ 564.201070][ T59] Bluetooth: hci2: ACL packet too small [ 564.319711][T12812] netlink: 'syz.1.2327': attribute type 21 has an invalid length. [ 564.319726][T12812] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2327'. [ 564.319784][T12812] netlink: 'syz.1.2327': attribute type 5 has an invalid length. [ 564.319791][T12812] netlink: 'syz.1.2327': attribute type 6 has an invalid length. [ 564.319798][T12812] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2327'. [ 564.408520][ T5730] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 564.591056][ T5730] usb 1-1: Using ep0 maxpacket: 32 [ 564.598966][ T5730] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 564.599040][ T5730] usb 1-1: config 0 has no interface number 0 [ 564.623903][ T5730] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 564.623921][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.623930][ T5730] usb 1-1: Product: syz [ 564.623938][ T5730] usb 1-1: Manufacturer: syz [ 564.623944][ T5730] usb 1-1: SerialNumber: syz [ 564.667202][ T5730] usb 1-1: config 0 descriptor?? [ 564.685703][ T5730] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 565.361936][ T5730] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 565.415102][ T5730] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 566.051646][ T5700] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 566.217960][ T5700] usb 4-1: Using ep0 maxpacket: 32 [ 566.223341][ T5700] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 566.223366][ T5700] usb 4-1: config 0 has no interface number 0 [ 566.259965][ T5700] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 566.259985][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.260002][ T5700] usb 4-1: Product: syz [ 566.260015][ T5700] usb 4-1: Manufacturer: syz [ 566.260028][ T5700] usb 4-1: SerialNumber: syz [ 566.309752][ T5700] usb 4-1: config 0 descriptor?? [ 566.327678][ T5700] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 566.596775][T12849] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2338'. [ 566.793007][ T5700] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 566.869670][ T5700] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 567.620641][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 567.650722][ T5730] usb 1-1: USB disconnect, device number 57 [ 567.878597][ T5730] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 567.934106][ T5730] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 567.947503][ T5730] quatech2 1-1:0.51: device disconnected [ 568.013162][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'. [ 568.013414][T12849] netlink: 'syz.1.2338': attribute type 10 has an invalid length. [ 568.013606][T12849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2338'. [ 568.887925][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 569.098954][ T5730] usb 4-1: USB disconnect, device number 28 [ 569.125649][ T5730] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 569.146493][ T5730] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 569.147379][ T5730] quatech2 4-1:0.51: device disconnected [ 569.343770][ T5716] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 569.514569][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 569.519282][ T5716] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 569.519333][ T5716] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 569.519357][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 128, changing to 11 [ 569.519381][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 1792, setting to 1024 [ 569.519401][ T5716] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.519436][ T5716] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 569.519456][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.590918][T12876] netlink: 'syz.0.2345': attribute type 12 has an invalid length. [ 569.590958][T12876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2345'. [ 569.630428][ T5716] usb 3-1: config 0 descriptor?? [ 569.632060][T12867] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 569.665454][ T5716] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input52 [ 569.944586][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.945208][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.985438][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.006353][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.020946][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.039390][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.808509][ T5716] usb 3-1: USB disconnect, device number 61 [ 570.812034][ C1] pxrc 3-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 570.853433][ T5730] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 571.364569][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 571.370630][ T5730] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 571.370655][ T5730] usb 2-1: config 0 has no interface number 0 [ 571.373822][ T5730] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 571.373847][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.373864][ T5730] usb 2-1: Product: syz [ 571.373877][ T5730] usb 2-1: Manufacturer: syz [ 571.373889][ T5730] usb 2-1: SerialNumber: syz [ 571.390267][ T5730] usb 2-1: config 0 descriptor?? [ 571.395615][ T5730] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 571.742677][T12909] FAULT_INJECTION: forcing a failure. [ 571.742677][T12909] name failslab, interval 1, probability 0, space 0, times 0 [ 571.742733][T12909] CPU: 1 UID: 0 PID: 12909 Comm: syz.2.2356 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 571.742758][T12909] Tainted: [L]=SOFTLOCKUP [ 571.742765][T12909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 571.742776][T12909] Call Trace: [ 571.742784][T12909] [ 571.742793][T12909] dump_stack_lvl+0xe8/0x150 [ 571.742823][T12909] should_fail_ex+0x467/0x600 [ 571.742853][T12909] should_failslab+0xa8/0x100 [ 571.742881][T12909] __kmalloc_noprof+0xfe/0x780 [ 571.742903][T12909] ? tomoyo_encode+0x2ad/0x570 [ 571.742918][T12909] ? tomoyo_encode+0x2ad/0x570 [ 571.742936][T12909] tomoyo_encode+0x2ad/0x570 [ 571.742954][T12909] tomoyo_realpath_from_path+0x5fa/0x640 [ 571.742975][T12909] ? tomoyo_path_number_perm+0x219/0x5f0 [ 571.742994][T12909] tomoyo_path_number_perm+0x246/0x5f0 [ 571.743014][T12909] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 571.743037][T12909] ? __pfx___schedule+0x10/0x10 [ 571.743060][T12909] ? hook_file_ioctl+0x1f3/0x600 [ 571.743096][T12909] ? security_file_ioctl+0x19/0x2a0 [ 571.743119][T12909] security_file_ioctl+0xc3/0x2a0 [ 571.743139][T12909] __se_sys_ioctl+0x47/0x170 [ 571.743160][T12909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.743176][T12909] do_syscall_64+0x174/0x580 [ 571.743194][T12909] ? clear_bhb_loop+0x40/0x90 [ 571.743210][T12909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.743224][T12909] RIP: 0033:0x7f21a131ce59 [ 571.743238][T12909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.743249][T12909] RSP: 002b:00007f219f52c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.743264][T12909] RAX: ffffffffffffffda RBX: 00007f21a1596180 RCX: 00007f21a131ce59 [ 571.743281][T12909] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000006 [ 571.743291][T12909] RBP: 00007f219f52c090 R08: 0000000000000000 R09: 0000000000000000 [ 571.743299][T12909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.743307][T12909] R13: 00007f21a1596218 R14: 00007f21a1596180 R15: 00007ffe1ff01688 [ 571.743331][T12909] [ 571.743460][T12909] ERROR: Out of memory at tomoyo_realpath_from_path. [ 572.711703][ T5730] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 572.739148][ T5730] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 573.033783][ T5730] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 573.037508][T12916] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2358'. [ 573.184636][ T5730] usb 3-1: Using ep0 maxpacket: 8 [ 573.208758][ T5730] usb 3-1: unable to get BOS descriptor or descriptor too short [ 573.227381][ T5730] usb 3-1: config 1 has an invalid interface number: 224 but max is 0 [ 573.227406][ T5730] usb 3-1: config 1 has no interface number 0 [ 573.227438][ T5730] usb 3-1: config 1 interface 224 has no altsetting 0 [ 573.245107][ T5730] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=34.1c [ 573.247732][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.247753][ T5730] usb 3-1: Product: syz [ 573.247767][ T5730] usb 3-1: Manufacturer: syz [ 573.247780][ T5730] usb 3-1: SerialNumber: syz [ 573.465277][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2358'. [ 573.465375][T12916] netlink: 'syz.0.2358': attribute type 10 has an invalid length. [ 573.465391][T12916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2358'. [ 573.615722][ T5730] cytherm 3-1:1.224: Cypress thermometer device now attached [ 573.639971][ T5730] usb 3-1: USB disconnect, device number 62 [ 573.653412][ T5730] cytherm 3-1:1.224: Cypress thermometer now disconnected [ 574.290637][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 574.297743][ T5715] usb 2-1: USB disconnect, device number 48 [ 574.329298][ T5715] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 574.335285][ T5715] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 574.336165][ T5715] quatech2 2-1:0.51: device disconnected [ 574.549300][ T5715] ================================================================== [ 574.549387][ T5715] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 574.549481][ T5715] Read of size 8 at addr ffffc9000eea9008 by task kworker/1:5/5715 [ 574.549493][ T5715] [ 574.549537][ T5715] CPU: 1 UID: 0 PID: 5715 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 574.549591][ T5715] Tainted: [L]=SOFTLOCKUP [ 574.549597][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.549606][ T5715] Workqueue: usb_hub_wq hub_event [ 574.549683][ T5715] Call Trace: [ 574.549690][ T5715] [ 574.549696][ T5715] dump_stack_lvl+0xe8/0x150 [ 574.549717][ T5715] print_address_description+0x55/0x1e0 [ 574.549746][ T5715] ? __list_add_valid_or_report+0x4e/0x130 [ 574.549766][ T5715] print_report+0x58/0x70 [ 574.549782][ T5715] kasan_report+0x117/0x150 [ 574.549834][ T5715] ? __list_add_valid_or_report+0x4e/0x130 [ 574.549852][ T5715] __list_add_valid_or_report+0x4e/0x130 [ 574.549869][ T5715] kcov_remote_stop+0x457/0x680 [ 574.549889][ T5715] hub_event+0x4789/0x4cf0 [ 574.549908][ T5715] ? __lock_acquire+0x683/0x2ce0 [ 574.549927][ T5715] ? register_lock_class+0x31/0x2e0 [ 574.549950][ T5715] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 574.549966][ T5715] ? __pfx_hub_event+0x10/0x10 [ 574.549981][ T5715] ? process_scheduled_works+0xa20/0x14e0 [ 574.550039][ T5715] ? rcu_is_watching+0x15/0xb0 [ 574.550062][ T5715] ? process_scheduled_works+0xa20/0x14e0 [ 574.550078][ T5715] process_scheduled_works+0xa8e/0x14e0 [ 574.550105][ T5715] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.550123][ T5715] ? assign_work+0x3cf/0x5d0 [ 574.550141][ T5715] worker_thread+0xa47/0xfb0 [ 574.550164][ T5715] ? __kthread_parkme+0x71/0x1f0 [ 574.550184][ T5715] kthread+0x388/0x470 [ 574.550199][ T5715] ? __pfx_worker_thread+0x10/0x10 [ 574.550219][ T5715] ? __pfx_kthread+0x10/0x10 [ 574.550235][ T5715] ret_from_fork+0x514/0xb70 [ 574.550340][ T5715] ? __pfx_ret_from_fork+0x10/0x10 [ 574.550354][ T5715] ? __switch_to+0xc89/0x1420 [ 574.550399][ T5715] ? __pfx_kthread+0x10/0x10 [ 574.550415][ T5715] ret_from_fork_asm+0x1a/0x30 [ 574.550436][ T5715] [ 574.550442][ T5715] [ 574.550446][ T5715] The buggy address belongs to a vmalloc virtual mapping [ 574.550492][ T5715] Memory state around the buggy address: [ 574.550528][ T5715] ffffc9000eea8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 574.550537][ T5715] ffffc9000eea8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 574.550545][ T5715] >ffffc9000eea9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 574.550560][ T5715] ^ [ 574.550567][ T5715] ffffc9000eea9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 574.550575][ T5715] ffffc9000eea9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 574.550582][ T5715] ================================================================== [ 574.552586][ T5715] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 574.552606][ T5715] CPU: 1 UID: 0 PID: 5715 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 574.552627][ T5715] Tainted: [L]=SOFTLOCKUP [ 574.552634][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.552645][ T5715] Workqueue: usb_hub_wq hub_event [ 574.552668][ T5715] Call Trace: [ 574.552675][ T5715] [ 574.552682][ T5715] vpanic+0x56c/0xa60 [ 574.552704][ T5715] ? __pfx_vpanic+0x10/0x10 [ 574.552722][ T5715] ? __pfx___schedule+0x10/0x10 [ 574.552741][ T5715] panic+0xc5/0xd0 [ 574.552760][ T5715] ? __pfx_panic+0x10/0x10 [ 574.552779][ T5715] ? preempt_schedule_thunk+0x16/0x40 [ 574.552807][ T5715] ? __list_add_valid_or_report+0x4e/0x130 [ 574.552829][ T5715] check_panic_on_warn+0x89/0xb0 [ 574.552897][ T5715] ? __list_add_valid_or_report+0x4e/0x130 [ 574.552918][ T5715] end_report+0x73/0x170 [ 574.552941][ T5715] ? __list_add_valid_or_report+0x4e/0x130 [ 574.552962][ T5715] kasan_report+0x128/0x150 [ 574.552985][ T5715] ? __list_add_valid_or_report+0x4e/0x130 [ 574.553010][ T5715] __list_add_valid_or_report+0x4e/0x130 [ 574.553034][ T5715] kcov_remote_stop+0x457/0x680 [ 574.553055][ T5715] hub_event+0x4789/0x4cf0 [ 574.553080][ T5715] ? __lock_acquire+0x683/0x2ce0 [ 574.553103][ T5715] ? register_lock_class+0x31/0x2e0 [ 574.553135][ T5715] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 574.553156][ T5715] ? __pfx_hub_event+0x10/0x10 [ 574.553176][ T5715] ? process_scheduled_works+0xa20/0x14e0 [ 574.553203][ T5715] ? rcu_is_watching+0x15/0xb0 [ 574.553227][ T5715] ? process_scheduled_works+0xa20/0x14e0 [ 574.553249][ T5715] process_scheduled_works+0xa8e/0x14e0 [ 574.553284][ T5715] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.553309][ T5715] ? assign_work+0x3cf/0x5d0 [ 574.553334][ T5715] worker_thread+0xa47/0xfb0 [ 574.553362][ T5715] ? __kthread_parkme+0x71/0x1f0 [ 574.553382][ T5715] kthread+0x388/0x470 [ 574.553401][ T5715] ? __pfx_worker_thread+0x10/0x10 [ 574.553423][ T5715] ? __pfx_kthread+0x10/0x10 [ 574.553442][ T5715] ret_from_fork+0x514/0xb70 [ 574.553463][ T5715] ? __pfx_ret_from_fork+0x10/0x10 [ 574.553482][ T5715] ? __switch_to+0xc89/0x1420 [ 574.553499][ T5715] ? __pfx_kthread+0x10/0x10 [ 574.553518][ T5715] ret_from_fork_asm+0x1a/0x30 [ 574.553546][ T5715] [ 574.553856][ T5715] Kernel Offset: disabled