last executing test programs: 2m50.411909813s ago: executing program 3 (id=573): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) r1 = fcntl$dupfd(r0, 0x0, r0) write$bt_hci(r1, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESDEC=r1], 0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) (fail_nth: 2) 2m50.240482299s ago: executing program 3 (id=576): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='base=0x200000 size=0x100000 type=write-combining\n', 0x31) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x0, 0x9, 0x2, 0x5}, {0x3, 0x4, 0x2}, {0x2, 0x6, 0x8, 0xffffffff}, {0x6, 0xb, 0x2, 0x7f6}, {0xff80, 0x6, 0xe5, 0x4}, {0x7, 0x7, 0x85, 0x5}, {0x6, 0x5, 0x0, 0xffffcef0}]}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000140)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async) r4 = fcntl$dupfd(r3, 0x406, r3) sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='cdg', 0x3) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) syz_genetlink_get_family_id$tipc2(0x0, r4) recvmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f0000000180)=@phonet, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/207, 0xcf}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000540)=""/104, 0x68}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/22, 0x16}, {&(0x7f0000000740)=""/36, 0x24}, {&(0x7f0000000780)=""/150, 0x96}, {&(0x7f0000000840)=""/3, 0x3}], 0x9, &(0x7f0000000940)=""/127, 0x7f}, 0x21) 2m50.02013002s ago: executing program 3 (id=579): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) r1 = fcntl$dupfd(r0, 0x0, r0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) (fail_nth: 2) 2m49.732986133s ago: executing program 3 (id=582): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x1, &(0x7f0000000040)={0x5, "810556c721393f4084c89ea7f77d040b00"}}) 2m49.177533565s ago: executing program 3 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)=' 2\n496Jx95 2\\000 0000 0\n', 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x20, r2, 0x1, 0x1, 0x200a, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings]}, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x4004050) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000500)=' 2\n496Jx95 2\\000 0000 0\n', 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r3) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x20, r2, 0x1, 0x1, 0x200a, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings]}, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x4004050) (async) 2m49.037103049s ago: executing program 3 (id=593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="0a00060008021100000000000c00430002"], 0x34}}, 0x0) 2m34.002311444s ago: executing program 32 (id=593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="0a00060008021100000000000c00430002"], 0x34}}, 0x0) 2m30.696482818s ago: executing program 1 (id=687): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1, 0xb, 0x2, 0x100, 0x2, 0x6, 0x7ffdfffd, 0x19f, 0x38, 0x36e, 0x7fffffff, 0xd, 0x20, 0x1, 0x3, 0xc, 0xf6d}, [{0x6474e551, 0x9, 0x3a, 0x200, 0xfffffffa, 0x4, 0xbf, 0xd2a2}], "9218727fdd4726b0d993dda200"/22}, 0x6e) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, 0x1a, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="20dc000000d7064bb828760d4e68c2dd1f8f00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x840) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000200)={0x1809a090a, 0x200, "eb38045cf64cddb9f5c78afa1a2df0c100", 0x7fffff, 0x7, 0x400000001080004, 0x8000, 0x5000, 0x6, 0x400009, 0x40, [0xfffffa3f, 0x493, 0x4000, 0x80000000]}) close(r0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000001640)=""/4092, 0xffc}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000040)=""/104, 0x68}], 0x3}, 0x900000}], 0x7, 0x0, 0x0) 2m28.389878962s ago: executing program 1 (id=699): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0xb, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}}, 0x40044881) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m27.465174611s ago: executing program 1 (id=711): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x0, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0xff, 0x2, 0xfffffffc, 0xfa, 0xfffffff7, 0x9, 0x1, 0x7fffffff, 0x489, 0x7, 0x171d, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0xc, 0x6, 0xffffffff, 0xfffffff8]}) (fail_nth: 1) 2m27.360982493s ago: executing program 1 (id=712): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, r0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x400000000007, 0x0, 0x0, 0x16, 0x14, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000002900", "2809e8db65b5598948224a0010000000000000bdb22d0000b420a1cb84ddb875d72c9f01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x8, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xd28e, @empty, 0xbfd}}, {{0xa, 0x4e28, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfdfffe01}}}, 0x108) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000340)={0x7, 0x2, 0x0, [{0x4, 0x24000000000, 0x5, 0x9, 0x9, 0xf0, 0x9, '\x00', 0xc6ae}, {0x5, 0x3e, 0x4, 0x48, 0xff, 0x1, 0xbc, '\x00', 0x6}]}) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x3a, 0x1, 0x7fffa, 0x4, {0x1}, [@nested={0xc, 0x3c, 0x0, 0x1, [@typed={0x8, 0xf5, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f00002bf000/0x2000)=nil) unshare(0x2a020400) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r7, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x2}, {0x0, 0x5}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="5ddc25bd7000fddbdf250e00000008000300", @ANYRES32=r9], 0x74}, 0x1, 0x0, 0x0, 0x24008001}, 0x20008800) 2m27.300705031s ago: executing program 1 (id=713): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x0, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0xff, 0x2, 0xfffffffc, 0xfa, 0xfffffff7, 0x9, 0x1, 0x7fffffff, 0x489, 0x7, 0x171d, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0xc, 0x6, 0xffffffff, 0xfffffff8]}) 2m27.2147233s ago: executing program 1 (id=714): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x97, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000001ff0)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @multicast2, @empty}, &(0x7f0000000580)=0xc) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000200)="2dc5899410e08a1dfe4397e8bfc948cf75df12aa1dd0beb4381bf76df9f8914d87b1620dfbb1fba01411cc55a05396b7bf7af9a827ab52e77da08fc2922ecc2dbabf07d62bb7d239e615c78270784ca502423bef9b576531de7d0e21794364fbcfde42c9a61303c4e55b769809c2dbb25b9f599ef0c5f2", 0x77}, {&(0x7f0000000280)="f7030b9772b25f6952ce8e196e00fe575838511cfbfaf8082319bf7b29655cff86468a0bc6e3e4045c5ab66a83015865197df6b111387ed1fd83e7327309eba00801c337eebfe31df9dcee", 0x4b}, {&(0x7f0000000340)="141fcf988db67a6b1e73c97c162d2478dbb71d0f2eeea7b9ceadd97e28cf53a4158f7e19fbc21fc8f261847533c5f4e0c31d82c97cefd1b96575e7e553bd13a5be96ce0fde448178b0e60eea81a312d1", 0x50}, {&(0x7f0000000440)="10add1", 0x3}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="ac14143facffffffff000000"], 0x170}}, {{&(0x7f0000000740)={0x2, 0x4e27, @loopback}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000780)="4414b818ebb7e0a55fd9d4ace85d3109a2686c0bb3366df376e7419539b5efb671c3cdcc8261e7f8a622c06824e022e94573be5f612fe5196e0b031fe41446fe62ca27c16c6365c7fc174bb8bbbd1e11fb2b02ee5e376857c79e806becd24c862e44c9bac227f361e08471dd7692620b1b2a43a9ac242aea86fa", 0x7a}, {&(0x7f0000000800)}, {&(0x7f0000000840)="5e093fbadddfde307b878b7f2af06e5783f3488f37700932e6495a2bdf090647ba3198d5db21c51310052582a2ceed5378e2ba06383511d8516ff9329d9725862c135af78802a893b9f3fcaa9b2a9d1f5e53391dd2eb10e39111a95e3008bdd0", 0x60}, {&(0x7f00000008c0)="b551b8b6781c086f82158b3e1849754593ff1e673a69a4d27fed728a88f16d7c8ba7b637f0276e98987655d0173a60f89082e6ce8643a41a4a69db746668908c57712be926f454a5902b7321dd30d9c9d880bf1ce0f0b76adde41dc8cac429c79e55c9f207169304e7806d9368e8e86ae79d052ccde94997561c3645197d0787e0230091549e64ce1341e3c8e7ef9dc7a45b30c24e3e64a4f5a5a96e51c822265811cfe123b5270cbd5853cc507e34d6991ee0a408bb51244fc14c3b87095d31b06001822d4732c163fb4f0b27989a3ca2b90f13a3cb1fcede668519c4f10cff60", 0xe1}], 0x4, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x2, 0x4000) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x804000, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f0000000040)={0xffffff2a, 0x9, 0x4, 0x0, 0x6, "012f2e20e1430ecd7d6435b5aa19489de4cc57", 0x1, 0x8}) write$UHID_INPUT(r7, &(0x7f0000002c80)={0x8, {"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", 0x1000}}, 0x1006) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x6}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/12]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r11, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000800)={0x0, @local, @local}, &(0x7f0000000ac0)=0xc) bind$xdp(r6, &(0x7f0000000b00)={0x2c, 0x0, r12, 0x3d, r8}, 0x10) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x0, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0xff, 0x2, 0xfffffffc, 0xfa, 0xfffffff7, 0x9, 0x1, 0x7fffffff, 0x489, 0x7, 0x171d, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0xc, 0x6, 0xffffffff, 0xfffffff8]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0xb9e71000) 2m19.589187469s ago: executing program 4 (id=738): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) (fail_nth: 1) 2m19.420358193s ago: executing program 4 (id=739): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80c42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4620040000000000000000000003003e00ebffffff7c000000000000004000000000000000890200000000000000000000060038000200feff030000480600000007000000ffffffffffffffff0200000000000000060000000000000005000000000000000100010000000000020000000000000003"], 0xb0) close(r2) read$midi(r2, &(0x7f0000000080), 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = userfaultfd(0x80001) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x46, &(0x7f0000000380)=[{0x6, 0x0, 0x4, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090601020000000000000000030000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c001480903775a4f908000140ac1414bb"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r6, 0x80000}) lseek(r9, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file7/file0\x00', 0x5) splice(r4, 0x0, r5, 0x0, 0xf3e, 0xa) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'\x00', 0xc201}) ioctl$TUNSETDEBUG(r11, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r11, 0x400454cb, 0x2) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000", @ANYRES16=r10, @ANYBLOB="01002bbd7000fedbdf252100000009001f0070687930000000000500200010000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r12, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) 2m19.312014738s ago: executing program 4 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0xf) ioctl(r0, 0x400455c8, &(0x7f0000000008)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0xffffffffffffffff) 2m18.967338081s ago: executing program 4 (id=741): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (fail_nth: 2) 2m18.967143517s ago: executing program 4 (id=742): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440)=0x2, 0x4) ioctl$RTC_WIE_OFF(r0, 0x7010) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000940)={&(0x7f0000000080)=0xffffffffffffff00, 0x800, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000900)}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f00000001c0)="2ae0", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'nicvf0\x00', {0x2, 0x4e24, @remote}}) 2m18.657178177s ago: executing program 4 (id=744): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x400a, 0x8, '9P2000.u'}, 0x15) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x125, &(0x7f00000001c0)=ANY=[]) 2m11.562760549s ago: executing program 33 (id=714): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x97, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000001ff0)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @multicast2, @empty}, &(0x7f0000000580)=0xc) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000200)="2dc5899410e08a1dfe4397e8bfc948cf75df12aa1dd0beb4381bf76df9f8914d87b1620dfbb1fba01411cc55a05396b7bf7af9a827ab52e77da08fc2922ecc2dbabf07d62bb7d239e615c78270784ca502423bef9b576531de7d0e21794364fbcfde42c9a61303c4e55b769809c2dbb25b9f599ef0c5f2", 0x77}, {&(0x7f0000000280)="f7030b9772b25f6952ce8e196e00fe575838511cfbfaf8082319bf7b29655cff86468a0bc6e3e4045c5ab66a83015865197df6b111387ed1fd83e7327309eba00801c337eebfe31df9dcee", 0x4b}, {&(0x7f0000000340)="141fcf988db67a6b1e73c97c162d2478dbb71d0f2eeea7b9ceadd97e28cf53a4158f7e19fbc21fc8f261847533c5f4e0c31d82c97cefd1b96575e7e553bd13a5be96ce0fde448178b0e60eea81a312d1", 0x50}, {&(0x7f0000000440)="10add1", 0x3}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="ac14143facffffffff000000"], 0x170}}, {{&(0x7f0000000740)={0x2, 0x4e27, @loopback}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000780)="4414b818ebb7e0a55fd9d4ace85d3109a2686c0bb3366df376e7419539b5efb671c3cdcc8261e7f8a622c06824e022e94573be5f612fe5196e0b031fe41446fe62ca27c16c6365c7fc174bb8bbbd1e11fb2b02ee5e376857c79e806becd24c862e44c9bac227f361e08471dd7692620b1b2a43a9ac242aea86fa", 0x7a}, {&(0x7f0000000800)}, {&(0x7f0000000840)="5e093fbadddfde307b878b7f2af06e5783f3488f37700932e6495a2bdf090647ba3198d5db21c51310052582a2ceed5378e2ba06383511d8516ff9329d9725862c135af78802a893b9f3fcaa9b2a9d1f5e53391dd2eb10e39111a95e3008bdd0", 0x60}, {&(0x7f00000008c0)="b551b8b6781c086f82158b3e1849754593ff1e673a69a4d27fed728a88f16d7c8ba7b637f0276e98987655d0173a60f89082e6ce8643a41a4a69db746668908c57712be926f454a5902b7321dd30d9c9d880bf1ce0f0b76adde41dc8cac429c79e55c9f207169304e7806d9368e8e86ae79d052ccde94997561c3645197d0787e0230091549e64ce1341e3c8e7ef9dc7a45b30c24e3e64a4f5a5a96e51c822265811cfe123b5270cbd5853cc507e34d6991ee0a408bb51244fc14c3b87095d31b06001822d4732c163fb4f0b27989a3ca2b90f13a3cb1fcede668519c4f10cff60", 0xe1}], 0x4, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x2, 0x4000) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x804000, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f0000000040)={0xffffff2a, 0x9, 0x4, 0x0, 0x6, "012f2e20e1430ecd7d6435b5aa19489de4cc57", 0x1, 0x8}) write$UHID_INPUT(r7, &(0x7f0000002c80)={0x8, {"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", 0x1000}}, 0x1006) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x6}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/12]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r11, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000800)={0x0, @local, @local}, &(0x7f0000000ac0)=0xc) bind$xdp(r6, &(0x7f0000000b00)={0x2c, 0x0, r12, 0x3d, r8}, 0x10) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x0, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0xff, 0x2, 0xfffffffc, 0xfa, 0xfffffff7, 0x9, 0x1, 0x7fffffff, 0x489, 0x7, 0x171d, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0xc, 0x6, 0xffffffff, 0xfffffff8]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0xb9e71000) 2m3.190654265s ago: executing program 34 (id=744): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x400a, 0x8, '9P2000.u'}, 0x15) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x125, &(0x7f00000001c0)=ANY=[]) 1m23.876343602s ago: executing program 2 (id=986): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)={0x3}) 1m23.674126035s ago: executing program 2 (id=987): r0 = syz_usb_connect(0x2, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040480b03100001000000010902390002010080fa0904000000ff0000000904010000ff0000000904010103ff0000000705"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x1, &(0x7f0000000040)={0x5, "810556c721393f4084c89ea7f77d040b00"}}) 1m22.121092467s ago: executing program 2 (id=995): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) poll(&(0x7f00000001c0)=[{r0, 0xa}], 0x1, 0x9) 1m21.916010101s ago: executing program 2 (id=997): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0xc52db000) setsockopt$sock_timeval(r0, 0x1, 0x50, &(0x7f0000abaff9), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x2142, 0xc0) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x196) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) acct(0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000002060102800000000000000000000000050001000700000024000780180001801400024000000000000000000000ffffac1e000105000300060000000c0007800500150007000000050004000300000012000300686173683a6e65742c706f62740000080500010007000000"], 0x70}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x2, 0x18, 0x5, 0x2, 0x2, 0x0, 0x70bd2b, 0x25dfdbff}, 0x10}}, 0x20000000) unshare(0x22020600) r6 = fsmount(r4, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) pipe(0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) link(0x0, 0x0) stat(0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) 1m21.731597458s ago: executing program 2 (id=999): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000180)=0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r6, 0x1, 0x3ffc, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r4], 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r0, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) r12 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_}ug$\bo-\x03Q`\\H\xe94\b,H\xbf\x00'/48, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f00000001c0)) read$FUSE(r13, &(0x7f0000004140)={0x2020}, 0x2020) ioctl$VIDIOC_ENUMSTD(r12, 0xc0485619, &(0x7f0000000500)={0x80000000, 0x3200e0, "3d9f3f931497dd9772e0bcbffd83b749067cf1598b58a271", {0x7, 0x88}, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r11}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m21.17669316s ago: executing program 2 (id=1004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)={0xb4, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfe70}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r6, 0xffffffffffffffff}) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000980)=@IORING_OP_WAITID={0x32, 0x4c, 0x0, 0xffffffff, &(0x7f0000000240)={0x1f, 0xffffff5c, 0x5da9}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}}) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f00000000c0)=0x402) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000280)={"f993ed062e3b3022a54da749dda5da682b183484c89625fcfb80c51996e4a4b0", r7}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40c800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r12, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44800) syz_usb_connect$cdc_ecm(0x2, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x7, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x7, 0x43, 0x2, 0x6, 0x0, 0x15, {{0x5}, {0x5, 0x24, 0x0, 0xb12c}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x9, 0x400, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x70}, @mbim_extended={0x8, 0x24, 0x1c, 0xd552, 0x5, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x2, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xd, 0xea, 0x51}}}}}]}}]}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r15 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r15, 0xc138fd09, &(0x7f0000002000)) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010002000020ffdbdf252500000008000300", @ANYRES32=r14, @ANYBLOB="dfd8ccfa6c34da5fe8b81a24f202d9772819846b7a71839901e61ba5d805020c4f2cff25f4f8592282bb0b604efe296b6b134585848281a401d0cec27f19e9f1269cee2465ca3beed67fb0b579fc9e3ec73286d81b81eb47e201e26dc629eabb28824b2873d71aa6b772119e73e2f5f5aba341e24491b99f17ec0195ee999e1a3ca1c9517532cfea284cb558476dd1d5f3beb2d42ba3efc3082703e30700f269624617de81c315b79873bee0544fa9339fc7818a743d989b9133dc1781426722fd737361a7923ee3"], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 1m20.781091865s ago: executing program 35 (id=1004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)={0xb4, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfe70}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r6, 0xffffffffffffffff}) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000980)=@IORING_OP_WAITID={0x32, 0x4c, 0x0, 0xffffffff, &(0x7f0000000240)={0x1f, 0xffffff5c, 0x5da9}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}}) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f00000000c0)=0x402) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000280)={"f993ed062e3b3022a54da749dda5da682b183484c89625fcfb80c51996e4a4b0", r7}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40c800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r12, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44800) syz_usb_connect$cdc_ecm(0x2, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x7, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x7, 0x43, 0x2, 0x6, 0x0, 0x15, {{0x5}, {0x5, 0x24, 0x0, 0xb12c}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x9, 0x400, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x70}, @mbim_extended={0x8, 0x24, 0x1c, 0xd552, 0x5, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x2, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xd, 0xea, 0x51}}}}}]}}]}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r15 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r15, 0xc138fd09, &(0x7f0000002000)) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010002000020ffdbdf252500000008000300", @ANYRES32=r14, @ANYBLOB="dfd8ccfa6c34da5fe8b81a24f202d9772819846b7a71839901e61ba5d805020c4f2cff25f4f8592282bb0b604efe296b6b134585848281a401d0cec27f19e9f1269cee2465ca3beed67fb0b579fc9e3ec73286d81b81eb47e201e26dc629eabb28824b2873d71aa6b772119e73e2f5f5aba341e24491b99f17ec0195ee999e1a3ca1c9517532cfea284cb558476dd1d5f3beb2d42ba3efc3082703e30700f269624617de81c315b79873bee0544fa9339fc7818a743d989b9133dc1781426722fd737361a7923ee3"], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 6.320770681s ago: executing program 5 (id=1350): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x100000001, {0x0, 0x2, 0x1, 0x4, 0x8, 0xf0, {0x405, 0x10001, 0x1ffffffffffd, 0xd, 0x0, 0x4, 0x10000, 0x2, 0x6, 0x4000, 0xb7a, r2, r3, 0x7, 0x40a}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a740)={0x90, 0x0, 0x81, {0x2, 0x1, 0x8000000000000001, 0x0, 0x8, 0x1, {0x0, 0x7, 0xb, 0xffffffffffffffff, 0x1000000008, 0x8, 0x9, 0xdd, 0x1, 0x8000, 0x6, 0x0, r3, 0x4, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioperm(0x1, 0xb2be, 0x163f) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x201, 0x0) 5.358365066s ago: executing program 5 (id=1355): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x2a, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x489, 0x4, 0x0, 0x20001e58, 0xffffffff, 0x9, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) (async, rerun: 32) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d0000000109021200010000006c0904", @ANYRESHEX=0x0], 0x0) (rerun: 32) 5.199173019s ago: executing program 6 (id=1358): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) (fail_nth: 6) 5.178098863s ago: executing program 7 (id=1359): syz_usb_connect$uac1(0x2, 0xb4, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xf7, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0x3, 0x0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x4c}, [@mixer_unit={0xb, 0x24, 0x4, 0x1, 0x8, "3b5c476c963e"}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x3, 0x5, [0x8, 0x4, 0x9, 0xa, 0x9], 0x7}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x0, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x2, 0x80, 0x9, 0xdf, 0xd}, @feature_unit={0x13, 0x24, 0x6, 0xf8, 0x6, 0x6, [0x6, 0x57faffe072d6f4d3, 0x4, 0x8, 0x5, 0x5], 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x7, 0x3, 0x50, {0x7, 0x25, 0x1, 0x8, 0x6, 0xd8f1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xf9, 0x7e, 0x4, {0x7, 0x25, 0x1, 0x4, 0x2, 0x1}}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xab, 0x66, 0x56, 0x8, 0x1a0a, 0x108, 0x4efe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0xa, 0x10, 0x3, "", [{{0x9, 0x4, 0x40, 0xff, 0x0, 0xae, 0xd8, 0x2e, 0x5}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xd) fcntl$getownex(r2, 0x10, &(0x7f0000000200)) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc1) membarrier(0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$alg(0x26, 0x5, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x14, 0x51b, 0x70bd28, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "d76f51d2877e3e1d6a"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r6, 0x0, 0x2) read(r6, &(0x7f0000000040)=""/174, 0xae) 5.032711539s ago: executing program 6 (id=1361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) write$tun(r0, &(0x7f00000023c0)=ANY=[@ANYBLOB="01051c0010081400040045000020000000004411907864010102ec14000112344e20000c9078e1030001"], 0x2a) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r10 = dup2(r8, r9) close_range(r10, 0xffffffffffffffff, 0x0) (async) r11 = dup(r7) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) (async) syz_ublk_setup_queues(r11, r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x0, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x0, 0x0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) 3.977576483s ago: executing program 6 (id=1365): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='add sy', 0x6) 3.972396925s ago: executing program 5 (id=1366): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)={0x3, 0xfcff}) 3.788178033s ago: executing program 6 (id=1367): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000200)={0x0, 0x2, @start={0x3, 0x1}}) 3.733175741s ago: executing program 5 (id=1368): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.58296208s ago: executing program 6 (id=1369): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0xfffe, @empty}}, 0x1e) close(r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x1, 0xe3, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x2f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x4, 0x40, 0x10, {0x8, 0xb, 0x0, 0x0, 0x1, 0x4, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x6, 0x38, 0x7}, [@feature_unit={0xb, 0x24, 0x6, 0x2, 0x4, [0x0, 0x8, 0x8]}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x206, 0x4, 0x0, 0xfa, 0x5, 0x6, 0x3, 0x5}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x305, 0x5, 0x2, 0x3, 0x9, 0x7}, @extension_unit={0x8, 0x24, 0x9, 0x6, 0x400, 0xff, 'D'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xf55, 0x4000, 0x5, "a1a5d42af0b9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x6, 0x7, {0x8, 0x25, 0x1, 0x82, 0x5, 0x6, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0xcd, 0xa, 0x3, 0x3, 0x1, 0x7e, 0xb}, @as_header={0x10, 0x24, 0x1, 0xdb, 0x4, 0x1, 0x4, 0x0, 0x80000000, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x3, 0x7, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xb, 0x57, 0x1, {0x8, 0x25, 0x1, 0x81, 0xc, 0x9, 0x6}}}}}}}}]}}, 0x0) setns(0xc9, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10f) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000100), 0x12) listen(r6, 0x1) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) 3.507792402s ago: executing program 5 (id=1370): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000140)={'wlan0\x00'}) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000100)=""/13, 0xd}], 0x1, 0xfffffc00, 0x7) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000400)="0bdab5e6", 0x4, r1) keyctl$dh_compute(0x17, &(0x7f0000000280)={r4, r0, r0}, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x6) bind(r5, &(0x7f0000000000)=@in={0x2, 0x573, @empty}, 0x10) listen(r5, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x76) mount(&(0x7f0000000100)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='cifs\x00', 0x0, &(0x7f0000000400)='unc=\\127.0.0.1\\share,ip=127.0.0.1,port=1395,vers=3.0\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './proc/fs/cifs/DebugData\x00'}) r7 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x40025b0c, &(0x7f0000000040)) r9 = openat(r6, &(0x7f0000000500)='./proc/fs/cifs/DebugData\x00', 0x0, 0x0) read(r9, &(0x7f0000000080)=""/104, 0x68) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000840)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x74ff}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220500000000000000314755fec120073dc385e0c0aa921ae53f7fbca7dec6b4423d173afbe6d24fc98283fe7fccdb8ab023e65620"], &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfc70, 0x8, 0x1, {0x22, 0xc4a}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000940)={0x40, 0x6, 0xee, "9c2117d6474efbcd2e524ba27ba539eb5d9f6c3fea0f61b4e332a0bceb4db75d66be2f6c5fe3ea1fa9d59bd0cfe5fea6efdcfb53114169c7401d2116c5329268c6a6597146bf61f0dcdc00a4b7d75d94f7962b4814595283afec90f3de3b90126f3956c9f812082a481ef630070207d9f2dba6e72cf032eda8f9fce3253b117043b307f69d2c7a4e0280a9feb617783682b609cf62f8e0e7d4d16593581c2b29f7f7d3fbfe9eff16d956038c606eed9983ffa719cf34783ca70e24334d1f3f971601262ebb1cf2c4b179b3b9d0307e6b22f3670e1f51d7c7cdcc4cfd7c13ec473e4c7ca670f672462abce469854c"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000ac0)={0x20, 0x1, 0x85, "cc39e9b39181d3522883699f722204479deabb3d70ad8c894c32deb8655dd97a05275bba71d65ab9850bd44d5f1998fefa366fa7828271891d468d7a2336fc6525d6c2c1e71827d2c22e3d2bbdf19b4b1e3a23c380302ad2982a8f42d27a5e768dc7b6fa5decb568871330f224d23739671f301c1ae8091a73df177af51c5d8e52d0945591"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x8}}) 3.085012756s ago: executing program 0 (id=1375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e25, @private=0xa010100}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) write(r0, &(0x7f00000004c0)="478cda8a", 0xfffd) 3.068124421s ago: executing program 0 (id=1376): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) (fail_nth: 6) 2.611686261s ago: executing program 0 (id=1377): mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x100c010, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) (fail_nth: 6) 2.480952777s ago: executing program 0 (id=1378): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000200)={0x0, 0x2, @start={0x3, 0x1}}) 2.319390088s ago: executing program 0 (id=1379): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) file_getattr(r2, 0x0, &(0x7f0000000040), 0x64, 0x1000) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 2.048532421s ago: executing program 7 (id=1380): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) listen(r0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7a}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x270, r7, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xf0{:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')-&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '&.^\\\'.\x1b-[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[^:]]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':-\x1c\')\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1d, 0x5, "0ed052324a32d9808211e715ab7354064f6c5f40d73352e7b8"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\xff){*:%/{,\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x64f2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '+^(\\&%[:\xa7$,+\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc8}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfec}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '+^(\\&%[:\xa7$,+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x270}}, 0x40000) 588.783463ms ago: executing program 7 (id=1381): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426ffffffffffffffff0000000000", 0x2a}], 0x1) poll(&(0x7f00000001c0)=[{r0, 0xa}], 0x1, 0x9) 551.458902ms ago: executing program 7 (id=1382): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x2, 0x3a, '\\x]^\\', 0x3a, '', 0x3a, './file0'}, 0x2c) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0x5d3547c5, 0x200, 0x1005, 0x200, 0xffeffffa, 0x0, 0x0, 0x8, 0x803}}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r4}, &(0x7f00000002c0)=0xc) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) 411.144208ms ago: executing program 6 (id=1383): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x48, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x120}}, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x83d3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = epoll_create1(0x80000) r10 = epoll_create1(0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000000)={0x2001}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000040)={0x2000}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000100)={0xa000000d}) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f0000000000)={&(0x7f00003e3000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc02d, 0x800, 0x0, 0x95}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c88, 0x4, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f73, 0x502, 0x40040002, 0x336, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) 253.56904ms ago: executing program 7 (id=1384): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x0, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0xff, 0x2, 0xfffffffc, 0xfa, 0xfffffff7, 0x9, 0x1, 0x7fffffff, 0x489, 0x7, 0x171d, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0xc, 0x6, 0xffffffff, 0xfffffff8]}) (fail_nth: 5) 253.10143ms ago: executing program 5 (id=1385): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x101, 0x7ffe, 0x6, 0xfffe}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@llc={0x1a, 0x110, 0x0, 0x4, 0x3, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000380)=[{0xf0, 0x1, 0x2, "c87d648a7258aec4a4a2aff25c298f7a9cb8802099141f8ab61647ad6256d68b55ee92b83de6b68b09e7ba23d130b30884a53c3a307792a46663d46f3c01bdf7cb31ec9aca330a9ba339ecc7823c73b6d7096cd11a05bff108523429e8a265e8d970db1d08554960a90ea66388755c5df91a41ca36fee5e0ae5ca6729926aa10f6140244939dca3f9a49cb43d67d48f43aafed93160e19cc96bbc7a1fe8ac7c55901b98572ee4f7124a928a0b875759b52d3d78b68dc1ea72513997b9396fe552be283ccc2d4dafb52b3a6e17ad32bbc1ab8d393c93873ae912949"}], 0xf0}, 0x4040040) 98.711041ms ago: executing program 0 (id=1386): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x120, 0x0, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0xff, 0x2, 0xfffffffc, 0xfa, 0xfffffff7, 0x9, 0x1, 0x7fffffff, 0x489, 0x7, 0x171d, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0xc, 0x6, 0xffffffff, 0xfffffff8]}) 0s ago: executing program 7 (id=1387): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000200)={0x0, 0x2, @start={0x3, 0x1}}) kernel console output (not intermixed with test programs): ndor=0424, idProduct=9901, bcdDevice=c2.57 [ 265.015373][ T5709] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 265.015396][ T5709] usb 1-1: config 0 has no interface number 0 [ 265.017339][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.017361][ T5709] usb 1-1: Product: syz [ 265.017375][ T5709] usb 1-1: Manufacturer: syz [ 265.017389][ T5709] usb 1-1: SerialNumber: syz [ 265.020948][ T5709] usb 1-1: config 0 descriptor?? [ 265.285440][ T9713] FAULT_INJECTION: forcing a failure. [ 265.285440][ T9713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.298633][ T9713] CPU: 0 UID: 0 PID: 9713 Comm: syz.6.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.298666][ T9713] Tainted: [L]=SOFTLOCKUP [ 265.298674][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.298686][ T9713] Call Trace: [ 265.298696][ T9713] [ 265.298705][ T9713] dump_stack_lvl+0xe8/0x150 [ 265.298737][ T9713] should_fail_ex+0x410/0x560 [ 265.298770][ T9713] _copy_from_user+0x2d/0xb0 [ 265.298791][ T9713] dm_ctl_ioctl+0x14c/0xe10 [ 265.298814][ T9713] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 265.298851][ T9713] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 265.298897][ T9713] ? __fget_files+0x2a/0x420 [ 265.298920][ T9713] ? __fget_files+0x3a2/0x420 [ 265.298942][ T9713] ? __fget_files+0x2a/0x420 [ 265.298968][ T9713] ? bpf_lsm_file_ioctl+0x9/0x20 [ 265.298995][ T9713] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 265.299024][ T9713] __se_sys_ioctl+0xfc/0x170 [ 265.299054][ T9713] do_syscall_64+0x166/0x520 [ 265.299074][ T9713] ? trace_irq_disable+0x3b/0x140 [ 265.299102][ T9713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.299122][ T9713] ? clear_bhb_loop+0x70/0xc0 [ 265.299146][ T9713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.299166][ T9713] RIP: 0033:0x7f99bd59e0d9 [ 265.299184][ T9713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.299201][ T9713] RSP: 002b:00007f99be54d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.299222][ T9713] RAX: ffffffffffffffda RBX: 00007f99bd825fa0 RCX: 00007f99bd59e0d9 [ 265.299237][ T9713] RDX: 0000200000000100 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 265.299251][ T9713] RBP: 00007f99be54d090 R08: 0000000000000000 R09: 0000000000000000 [ 265.299264][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.299276][ T9713] R13: 00007f99bd826038 R14: 00007f99bd825fa0 R15: 00007ffde55ab748 [ 265.299307][ T9713] [ 265.768628][ T5616] usb 6-1: USB disconnect, device number 27 [ 265.790544][ T9719] netlink: 'syz.6.1216': attribute type 39 has an invalid length. [ 265.848048][ T5709] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 265.848103][ T5709] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 266.092946][ T5709] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 266.093198][ T5709] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 266.121712][ T971] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 266.249404][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1219'. [ 266.264103][ T971] usb 8-1: device descriptor read/64, error -71 [ 266.384691][ T5616] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 266.513943][ T971] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 266.535328][ T5616] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 266.537273][ T5616] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.537326][ T5616] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 266.537365][ T5616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.645540][ T971] usb 8-1: device descriptor read/64, error -71 [ 266.754281][ T971] usb usb8-port1: attempt power cycle [ 266.978235][ T5616] dvb_ttusb_budget: ttusb_init_controller: error [ 266.978275][ T5616] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 267.095223][ T971] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 267.102524][ T5616] DVB: Unable to find symbol stv0299_attach() [ 267.126362][ T971] usb 8-1: device descriptor read/8, error -71 [ 267.273140][ T5616] DVB: Unable to find symbol tda8083_attach() [ 267.273182][ T5616] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 267.375191][ T971] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 267.395354][ T971] usb 8-1: device descriptor read/8, error -71 [ 267.504828][ T971] usb usb8-port1: unable to enumerate USB device [ 267.654042][ T5616] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 267.722550][ T971] usb 1-1: USB disconnect, device number 36 [ 267.818370][ T5616] usb 7-1: Using ep0 maxpacket: 8 [ 267.820295][ T5616] usb 7-1: New USB device found, idVendor=16d8, idProduct=7002, bcdDevice=b2.ee [ 267.821378][ T5616] usb 7-1: config 2 has an invalid interface number: 223 but max is 0 [ 267.821402][ T5616] usb 7-1: config 2 has no interface number 0 [ 267.821441][ T5616] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.842280][ T5616] option 7-1:2.223: GSM modem (1-port) converter detected [ 267.913723][ T4934] Bluetooth: hci4: command 0x0406 tx timeout [ 268.133754][ T971] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 268.283706][ T971] usb 1-1: Using ep0 maxpacket: 8 [ 268.284944][ T971] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 268.286910][ T971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.286952][ T971] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 268.286977][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 268.287001][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 268.287027][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 268.287051][ T971] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.289722][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.289745][ T971] usb 1-1: Product: syz [ 268.289759][ T971] usb 1-1: Manufacturer: syz [ 268.289772][ T971] usb 1-1: SerialNumber: syz [ 268.294413][ T971] usb 1-1: config 0 descriptor?? [ 268.297334][ T9770] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 269.027621][ T5616] usb 6-1: USB disconnect, device number 28 [ 269.223733][ T5752] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 269.375060][ T5752] usb 8-1: not running at top speed; connect to a high speed hub [ 269.375111][ T5752] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 269.394110][ T5752] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.394177][ T5752] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 269.394229][ T5752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.444626][ T5752] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 269.467119][ T5752] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 269.484294][ T5752] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 269.484395][ T5752] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 269.504281][ T5752] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 269.524186][ T5616] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 269.604083][ T971] rc_core: IR keymap rc-snapstream-firefly not found [ 269.604467][ T971] Registered IR keymap rc-empty [ 269.605840][ T971] rc rc1: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 269.612341][ T971] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input20 [ 269.641874][ T971] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input21 [ 269.664590][ T5752] usb 8-1: USB disconnect, device number 20 [ 269.686397][ T5616] usb 6-1: New USB device found, idVendor=056a, idProduct=009a, bcdDevice= 0.00 [ 269.688046][ T5616] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.688134][ T5616] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.688173][ T5616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.736073][ T5752] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 269.745859][ C1] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 269.745893][ T971] usb 1-1: USB disconnect, device number 37 [ 269.783569][ T5616] usb 6-1: config 0 descriptor?? [ 269.793518][ T5752] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 269.807935][ T5752] keyspan 8-1:1.0: device disconnected [ 269.821233][ T9790] FAULT_INJECTION: forcing a failure. [ 269.821233][ T9790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.821291][ T9790] CPU: 0 UID: 0 PID: 9790 Comm: syz.0.1232 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.821318][ T9790] Tainted: [L]=SOFTLOCKUP [ 269.821326][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.821338][ T9790] Call Trace: [ 269.821346][ T9790] [ 269.821355][ T9790] dump_stack_lvl+0xe8/0x150 [ 269.821386][ T9790] should_fail_ex+0x410/0x560 [ 269.821418][ T9790] _copy_from_user+0x2d/0xb0 [ 269.821439][ T9790] kstrtouint_from_user+0xd6/0x180 [ 269.821469][ T9790] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 269.821503][ T9790] ? lock_acquire+0x115/0x350 [ 269.821535][ T9790] proc_fail_nth_write+0x8e/0x210 [ 269.821562][ T9790] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 269.821593][ T9790] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 269.821618][ T9790] vfs_write+0x296/0xba0 [ 269.821651][ T9790] ? __pfx_vfs_write+0x10/0x10 [ 269.821677][ T9790] ? __fget_files+0x2a/0x420 [ 269.821705][ T9790] ? __fget_files+0x3a2/0x420 [ 269.821726][ T9790] ? __fget_files+0x2a/0x420 [ 269.821756][ T9790] ksys_write+0x150/0x270 [ 269.821784][ T9790] ? __pfx_ksys_write+0x10/0x10 [ 269.821819][ T9790] do_syscall_64+0x166/0x520 [ 269.821838][ T9790] ? trace_irq_disable+0x3b/0x140 [ 269.821865][ T9790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.821885][ T9790] ? clear_bhb_loop+0x70/0xc0 [ 269.821910][ T9790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.821930][ T9790] RIP: 0033:0x7f6e9515e90e [ 269.821949][ T9790] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 269.821966][ T9790] RSP: 002b:00007f6e9607dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.821988][ T9790] RAX: ffffffffffffffda RBX: 00007f6e9607e6c0 RCX: 00007f6e9515e90e [ 269.822003][ T9790] RDX: 0000000000000001 RSI: 00007f6e9607e0a0 RDI: 0000000000000004 [ 269.822015][ T9790] RBP: 00007f6e9607e090 R08: 0000000000000000 R09: 0000000000000000 [ 269.822031][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.822042][ T9790] R13: 00007f6e95426038 R14: 00007f6e95425fa0 R15: 00007ffc9f9e0248 [ 269.822073][ T9790] [ 270.021942][ T9781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.029070][ T9781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.337200][ T5616] wacom 0003:056A:009A.000C: hidraw0: USB HID v20.00 Joystick [HID 056a:009a] on usb-dummy_hcd.5-1/input0 [ 270.468901][ T5752] usb 7-1: USB disconnect, device number 27 [ 270.470133][ T5616] usb 6-1: USB disconnect, device number 29 [ 270.490519][ T5752] option 7-1:2.223: device disconnected [ 270.602302][ T9797] fido_id[9797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 270.763891][ T971] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 270.933733][ T971] usb 8-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 270.934755][ T971] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.934803][ T971] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 270.934859][ T971] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.946927][ T971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.946951][ T971] usb 8-1: Product: syz [ 270.946964][ T971] usb 8-1: Manufacturer: syz [ 270.946979][ T971] usb 8-1: SerialNumber: syz [ 271.174434][ T971] usb 8-1: 0:2 : does not exist [ 271.174567][ T971] usb 8-1: unit 0 not found! [ 271.337480][ T9817] FAULT_INJECTION: forcing a failure. [ 271.337480][ T9817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.352475][ T9817] CPU: 0 UID: 0 PID: 9817 Comm: syz.6.1241 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.352508][ T9817] Tainted: [L]=SOFTLOCKUP [ 271.352516][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.352529][ T9817] Call Trace: [ 271.352537][ T9817] [ 271.352547][ T9817] dump_stack_lvl+0xe8/0x150 [ 271.352577][ T9817] should_fail_ex+0x410/0x560 [ 271.352611][ T9817] _copy_to_user+0x31/0xb0 [ 271.352633][ T9817] simple_read_from_buffer+0xe1/0x170 [ 271.352662][ T9817] proc_fail_nth_read+0x1bb/0x230 [ 271.352688][ T9817] ? common_file_perm+0x20e/0x2b0 [ 271.352719][ T9817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.352748][ T9817] ? rw_verify_area+0x24a/0x4c0 [ 271.352774][ T9817] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.352800][ T9817] vfs_read+0x213/0xa80 [ 271.352830][ T9817] ? __pfx___mutex_lock+0x10/0x10 [ 271.352852][ T9817] ? __pfx_vfs_read+0x10/0x10 [ 271.352878][ T9817] ? __fget_files+0x2a/0x420 [ 271.352905][ T9817] ? __fget_files+0x3a2/0x420 [ 271.352926][ T9817] ? __fget_files+0x2a/0x420 [ 271.352957][ T9817] ksys_read+0x150/0x270 [ 271.352985][ T9817] ? __pfx_ksys_read+0x10/0x10 [ 271.353008][ T9817] ? __pfx_v4l2_ioctl+0x10/0x10 [ 271.353053][ T9817] do_syscall_64+0x166/0x520 [ 271.353072][ T9817] ? trace_irq_disable+0x3b/0x140 [ 271.353099][ T9817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.353120][ T9817] ? clear_bhb_loop+0x70/0xc0 [ 271.353145][ T9817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.353165][ T9817] RIP: 0033:0x7f99bd55e90e [ 271.353183][ T9817] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 271.353200][ T9817] RSP: 002b:00007f99be54cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.353221][ T9817] RAX: ffffffffffffffda RBX: 00007f99be54d6c0 RCX: 00007f99bd55e90e [ 271.353236][ T9817] RDX: 000000000000000f RSI: 00007f99be54d0a0 RDI: 0000000000000004 [ 271.353250][ T9817] RBP: 00007f99be54d090 R08: 0000000000000000 R09: 0000000000000000 [ 271.353266][ T9817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.353278][ T9817] R13: 00007f99bd826038 R14: 00007f99bd825fa0 R15: 00007ffde55ab748 [ 271.353310][ T9817] [ 271.383732][ T5790] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 271.405102][ T971] usb 8-1: USB disconnect, device number 21 [ 271.560443][ T5790] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 271.566343][ T5790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.566373][ T5790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.566409][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.580952][ T5790] usb 1-1: config 0 descriptor?? [ 271.619755][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.044168][ T5790] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 272.054490][ T9831] FAULT_INJECTION: forcing a failure. [ 272.054490][ T9831] name failslab, interval 1, probability 0, space 0, times 0 [ 272.054523][ T9831] CPU: 1 UID: 0 PID: 9831 Comm: syz.7.1245 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.054549][ T9831] Tainted: [L]=SOFTLOCKUP [ 272.054557][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.054569][ T9831] Call Trace: [ 272.054577][ T9831] [ 272.054585][ T9831] dump_stack_lvl+0xe8/0x150 [ 272.054616][ T9831] should_fail_ex+0x410/0x560 [ 272.054649][ T9831] should_failslab+0xa8/0x100 [ 272.054673][ T9831] __kmalloc_cache_node_noprof+0xaa/0x620 [ 272.054702][ T9831] ? __get_vm_area_node+0x155/0x2f0 [ 272.054725][ T9831] ? __get_vm_area_node+0x155/0x2f0 [ 272.054753][ T9831] __get_vm_area_node+0x155/0x2f0 [ 272.054781][ T9831] __vmalloc_node_range_noprof+0x343/0x1540 [ 272.054807][ T9831] ? copy_process+0x820/0x43e0 [ 272.054829][ T9831] ? percpu_ref_get_many+0x19/0x140 [ 272.054859][ T9831] ? __memcg_slab_post_alloc_hook+0x4d7/0xf80 [ 272.054900][ T9831] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 272.054925][ T9831] ? dup_task_struct+0x52/0xa00 [ 272.054944][ T9831] ? trace_kmem_cache_alloc+0x29/0xe0 [ 272.054969][ T9831] ? memcpy_and_pad+0x48/0x80 [ 272.054996][ T9831] __vmalloc_node_noprof+0xc2/0x100 [ 272.055018][ T9831] ? copy_process+0x820/0x43e0 [ 272.055037][ T9831] ? copy_process+0x820/0x43e0 [ 272.055059][ T9831] dup_task_struct+0x2c6/0xa00 [ 272.055085][ T9831] copy_process+0x820/0x43e0 [ 272.055127][ T9831] ? rcu_is_watching+0x16/0xb0 [ 272.055149][ T9831] ? __pfx_copy_process+0x10/0x10 [ 272.055180][ T9831] ? mutex_init_lockdep+0xdf/0x110 [ 272.055204][ T9831] vhost_task_create+0x1f9/0x380 [ 272.055232][ T9831] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 272.055252][ T9831] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 272.055272][ T9831] ? __pfx_vhost_task_create+0x10/0x10 [ 272.055298][ T9831] ? register_lock_class+0x31/0x2e0 [ 272.055333][ T9831] ? __pfx_vhost_task_fn+0x10/0x10 [ 272.055368][ T9831] ? kasan_quarantine_put+0xbb/0x1f0 [ 272.055402][ T9831] kvm_mmu_post_init_vm+0x147/0x2b0 [ 272.055428][ T9831] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 272.055470][ T9831] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 272.055504][ T9831] kvm_vcpu_ioctl+0xa61/0xfd0 [ 272.055538][ T9831] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 272.055564][ T9831] ? hook_file_ioctl+0x1f2/0x600 [ 272.055609][ T9831] ? __fget_files+0x2a/0x420 [ 272.055635][ T9831] ? __fget_files+0x2a/0x420 [ 272.055655][ T9831] ? __fget_files+0x3a2/0x420 [ 272.055676][ T9831] ? __fget_files+0x2a/0x420 [ 272.055701][ T9831] ? bpf_lsm_file_ioctl+0x9/0x20 [ 272.055725][ T9831] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 272.055753][ T9831] __se_sys_ioctl+0xfc/0x170 [ 272.055783][ T9831] do_syscall_64+0x166/0x520 [ 272.055803][ T9831] ? trace_irq_disable+0x3b/0x140 [ 272.055829][ T9831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.055849][ T9831] ? clear_bhb_loop+0x70/0xc0 [ 272.055873][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.055893][ T9831] RIP: 0033:0x7fbbb519e0d9 [ 272.055911][ T9831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.055929][ T9831] RSP: 002b:00007fbbb6120028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.055950][ T9831] RAX: ffffffffffffffda RBX: 00007fbbb5426090 RCX: 00007fbbb519e0d9 [ 272.055965][ T9831] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 272.055977][ T9831] RBP: 00007fbbb6120090 R08: 0000000000000000 R09: 0000000000000000 [ 272.055990][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.056002][ T9831] R13: 00007fbbb5426128 R14: 00007fbbb5426090 R15: 00007ffc493add88 [ 272.056033][ T9831] [ 272.103725][ T9831] syz.7.1245: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 272.103794][ T9831] CPU: 1 UID: 0 PID: 9831 Comm: syz.7.1245 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.103820][ T9831] Tainted: [L]=SOFTLOCKUP [ 272.103828][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.103839][ T9831] Call Trace: [ 272.103847][ T9831] [ 272.103856][ T9831] dump_stack_lvl+0xe8/0x150 [ 272.103899][ T9831] warn_alloc+0x24d/0x270 [ 272.103927][ T9831] ? __kasan_kmalloc+0x22/0xb0 [ 272.103958][ T9831] ? __pfx_warn_alloc+0x10/0x10 [ 272.103983][ T9831] ? __get_vm_area_node+0x155/0x2f0 [ 272.104013][ T9831] ? __get_vm_area_node+0x2a9/0x2f0 [ 272.104043][ T9831] __vmalloc_node_range_noprof+0x36b/0x1540 [ 272.104069][ T9831] ? percpu_ref_get_many+0x19/0x140 [ 272.104099][ T9831] ? __memcg_slab_post_alloc_hook+0x4d7/0xf80 [ 272.104140][ T9831] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 272.104164][ T9831] ? dup_task_struct+0x52/0xa00 [ 272.104184][ T9831] ? trace_kmem_cache_alloc+0x29/0xe0 [ 272.104211][ T9831] ? memcpy_and_pad+0x48/0x80 [ 272.104238][ T9831] __vmalloc_node_noprof+0xc2/0x100 [ 272.104262][ T9831] ? copy_process+0x820/0x43e0 [ 272.104281][ T9831] ? copy_process+0x820/0x43e0 [ 272.104305][ T9831] dup_task_struct+0x2c6/0xa00 [ 272.104334][ T9831] copy_process+0x820/0x43e0 [ 272.104379][ T9831] ? rcu_is_watching+0x16/0xb0 [ 272.104402][ T9831] ? __pfx_copy_process+0x10/0x10 [ 272.104441][ T9831] ? mutex_init_lockdep+0xdf/0x110 [ 272.104465][ T9831] vhost_task_create+0x1f9/0x380 [ 272.104494][ T9831] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 272.104514][ T9831] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 272.104536][ T9831] ? __pfx_vhost_task_create+0x10/0x10 [ 272.104563][ T9831] ? register_lock_class+0x31/0x2e0 [ 272.104597][ T9831] ? __pfx_vhost_task_fn+0x10/0x10 [ 272.104632][ T9831] ? kasan_quarantine_put+0xbb/0x1f0 [ 272.104667][ T9831] kvm_mmu_post_init_vm+0x147/0x2b0 [ 272.104692][ T9831] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 272.104727][ T9831] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 272.104761][ T9831] kvm_vcpu_ioctl+0xa61/0xfd0 [ 272.104794][ T9831] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 272.104821][ T9831] ? hook_file_ioctl+0x1f2/0x600 [ 272.104866][ T9831] ? __fget_files+0x2a/0x420 [ 272.104891][ T9831] ? __fget_files+0x2a/0x420 [ 272.104912][ T9831] ? __fget_files+0x3a2/0x420 [ 272.104932][ T9831] ? __fget_files+0x2a/0x420 [ 272.104958][ T9831] ? bpf_lsm_file_ioctl+0x9/0x20 [ 272.104981][ T9831] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 272.105009][ T9831] __se_sys_ioctl+0xfc/0x170 [ 272.105039][ T9831] do_syscall_64+0x166/0x520 [ 272.105058][ T9831] ? trace_irq_disable+0x3b/0x140 [ 272.105084][ T9831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.105104][ T9831] ? clear_bhb_loop+0x70/0xc0 [ 272.105128][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.105148][ T9831] RIP: 0033:0x7fbbb519e0d9 [ 272.105166][ T9831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.105182][ T9831] RSP: 002b:00007fbbb6120028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.105201][ T9831] RAX: ffffffffffffffda RBX: 00007fbbb5426090 RCX: 00007fbbb519e0d9 [ 272.105216][ T9831] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 272.105232][ T9831] RBP: 00007fbbb6120090 R08: 0000000000000000 R09: 0000000000000000 [ 272.105244][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.105257][ T9831] R13: 00007fbbb5426128 R14: 00007fbbb5426090 R15: 00007ffc493add88 [ 272.105287][ T9831] [ 272.140015][ T5790] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected [ 272.140375][ T5790] hid-steam 0003:28DE:1142.000D: steam_probe:steam_get_conn_status failed with error -22 [ 272.160442][ T9831] Mem-Info: [ 272.160455][ T9831] active_anon:24181 inactive_anon:0 isolated_anon:0 [ 272.160455][ T9831] active_file:1 inactive_file:17018 isolated_file:0 [ 272.160455][ T9831] unevictable:0 dirty:34 writeback:0 [ 272.160455][ T9831] slab_reclaimable:10653 slab_unreclaimable:97839 [ 272.160455][ T9831] mapped:39335 shmem:16660 pagetables:1606 [ 272.160455][ T9831] sec_pagetables:0 bounce:0 [ 272.160455][ T9831] kernel_misc_reclaimable:0 [ 272.160455][ T9831] free:1330967 free_pcp:8828 free_cma:0 [ 272.160507][ T9831] Node 0 active_anon:96724kB inactive_anon:0kB active_file:4kB inactive_file:67880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157284kB dirty:132kB writeback:0kB shmem:66640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13080kB pagetables:6288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 272.160560][ T9831] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 272.160611][ T9831] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.160668][ T9831] lowmem_reserve[]: 0 2482 2484 2484 2484 [ 272.160705][ T9831] Node 0 DMA32 free:1371496kB boost:0kB min:34096kB low:42620kB high:51144kB reserved_highatomic:0kB free_highatomic:0kB active_anon:96724kB inactive_anon:0kB active_file:4kB inactive_file:67880kB unevictable:0kB writepending:132kB zspages:0kB present:3129332kB managed:2542416kB mlocked:0kB bounce:0kB free_pcp:35308kB local_pcp:12864kB free_cma:0kB [ 272.160762][ T9831] lowmem_reserve[]: 0 0 1 1 1 [ 272.160795][ T9831] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1712kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 272.160849][ T9831] lowmem_reserve[]: 0 0 0 0 0 [ 272.160882][ T9831] Node 1 Normal free:3937016kB boost:0kB min:55780kB low:69724kB high:83668kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.160938][ T9831] lowmem_reserve[]: 0 0 0 0 0 [ 272.160971][ T9831] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 272.161117][ T9831] Node 0 DMA32: 5*4kB (E) 10*8kB (UE) 313*16kB (UE) 207*32kB (UE) 30*64kB (UE) 16*128kB (UE) 10*256kB (UE) 5*512kB (UME) 17*1024kB (UM) 17*2048kB (UM) 317*4096kB (UM) = 1371476kB [ 272.161294][ T9831] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 272.161386][ T9831] Node 1 Normal: 2*4kB (M) 4*8kB (U) 3*16kB (U) 7*32kB (U) 9*64kB (UM) 5*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3937016kB [ 272.161533][ T9831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.161548][ T9831] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.161562][ T9831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.161576][ T9831] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.161591][ T9831] 33675 total pagecache pages [ 272.161600][ T9831] 0 pages in swap cache [ 272.162677][ T9831] Free swap = 124996kB [ 272.162687][ T9831] Total swap = 124996kB [ 272.162696][ T9831] 2097051 pages RAM [ 272.162704][ T9831] 0 pages HighMem/MovableOnly [ 272.162711][ T9831] 429403 pages reserved [ 272.162718][ T9831] 0 pages cma reserved [ 272.409517][ T5790] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 272.445074][ T5790] usb 1-1: USB disconnect, device number 38 [ 272.612196][ T5790] hid-steam 0003:28DE:1142.000D: Steam wireless receiver disconnected [ 272.626802][ T5709] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 272.739841][ T9836] fido_id[9836]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 272.783715][ T971] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 272.793759][ T5709] usb 7-1: Using ep0 maxpacket: 8 [ 272.795168][ T5709] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 272.808823][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.808847][ T5709] usb 7-1: Product: syz [ 272.808861][ T5709] usb 7-1: Manufacturer: syz [ 272.808875][ T5709] usb 7-1: SerialNumber: syz [ 272.821660][ T5709] usb 7-1: config 0 descriptor?? [ 272.935298][ T971] usb 6-1: device descriptor read/64, error -71 [ 273.027090][ T5709] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 273.173849][ T971] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 273.325237][ T971] usb 6-1: device descriptor read/64, error -71 [ 273.424806][ T971] usb usb6-port1: attempt power cycle [ 273.650782][ T5709] usb write operation failed. (-71) [ 273.659464][ T5709] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 273.659962][ T5709] dvbdev: DVB: registering new adapter (Terratec H7) [ 273.660006][ T5709] usb 7-1: media controller created [ 273.665568][ T5709] usb read operation failed. (-71) [ 273.666081][ T5709] usb write operation failed. (-71) [ 273.678714][ T5709] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 273.690175][ T5709] usb 7-1: USB disconnect, device number 28 [ 273.774643][ T971] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 273.796435][ T971] usb 6-1: device descriptor read/8, error -71 [ 273.812330][ T9848] FAULT_INJECTION: forcing a failure. [ 273.812330][ T9848] name failslab, interval 1, probability 0, space 0, times 0 [ 273.812390][ T9848] CPU: 1 UID: 0 PID: 9848 Comm: syz.7.1253 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.812416][ T9848] Tainted: [L]=SOFTLOCKUP [ 273.812421][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.812431][ T9848] Call Trace: [ 273.812439][ T9848] [ 273.812447][ T9848] dump_stack_lvl+0xe8/0x150 [ 273.812477][ T9848] should_fail_ex+0x410/0x560 [ 273.812509][ T9848] ? __alloc_skb+0x1db/0x7a0 [ 273.812530][ T9848] should_failslab+0xa8/0x100 [ 273.812550][ T9848] ? __alloc_skb+0x1db/0x7a0 [ 273.812570][ T9848] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 273.812598][ T9848] ? __alloc_skb+0x1db/0x7a0 [ 273.812625][ T9848] __alloc_skb+0x1db/0x7a0 [ 273.812650][ T9848] tcp_stream_alloc_skb+0x3f/0x580 [ 273.812675][ T9848] tcp_sendmsg_locked+0x14a9/0x5640 [ 273.812718][ T9848] ? do_user_addr_fault+0xc4c/0x1340 [ 273.812766][ T9848] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 273.812797][ T9848] ? __asan_memset+0x22/0x50 [ 273.812822][ T9848] ? iov_iter_bvec+0xb8/0x180 [ 273.812853][ T9848] espintcp_push_msgs+0x4e6/0x840 [ 273.812889][ T9848] ? __pfx_espintcp_push_msgs+0x10/0x10 [ 273.812918][ T9848] ? sk_msg_memcopy_from_iter+0x678/0x700 [ 273.812948][ T9848] ? tcp_rate_check_app_limited+0x1ab/0x350 [ 273.812972][ T9848] espintcp_sendmsg+0x55a/0x730 [ 273.813002][ T9848] ? __pfx_espintcp_sendmsg+0x10/0x10 [ 273.813035][ T9848] ? sock_rps_record_flow+0x19/0x350 [ 273.813065][ T9848] ? inet_sendmsg+0x298/0x320 [ 273.813090][ T9848] ? apparmor_socket_sendmsg+0x98/0x360 [ 273.813118][ T9848] ? __pfx_inet_sendmsg+0x10/0x10 [ 273.813144][ T9848] sock_sendmsg_nosec+0x10e/0x180 [ 273.813179][ T9848] sock_write_iter+0x2de/0x3e0 [ 273.813208][ T9848] ? __pfx_sock_write_iter+0x10/0x10 [ 273.813242][ T9848] ? bpf_lsm_file_permission+0x9/0x20 [ 273.813270][ T9848] ? security_file_permission+0x75/0x260 [ 273.813302][ T9848] vfs_write+0x612/0xba0 [ 273.813335][ T9848] ? __pfx_vfs_write+0x10/0x10 [ 273.813367][ T9848] ? __fget_files+0x2a/0x420 [ 273.813398][ T9848] ksys_write+0x150/0x270 [ 273.813425][ T9848] ? __pfx_ksys_write+0x10/0x10 [ 273.813458][ T9848] do_syscall_64+0x166/0x520 [ 273.813478][ T9848] ? trace_irq_disable+0x3b/0x140 [ 273.813504][ T9848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.813524][ T9848] ? clear_bhb_loop+0x70/0xc0 [ 273.813548][ T9848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.813567][ T9848] RIP: 0033:0x7fbbb519e0d9 [ 273.813585][ T9848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.813602][ T9848] RSP: 002b:00007fbbb6141028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.813624][ T9848] RAX: ffffffffffffffda RBX: 00007fbbb5425fa0 RCX: 00007fbbb519e0d9 [ 273.813639][ T9848] RDX: 000000000000fffd RSI: 00002000000004c0 RDI: 0000000000000003 [ 273.813652][ T9848] RBP: 00007fbbb6141090 R08: 0000000000000000 R09: 0000000000000000 [ 273.813664][ T9848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.813676][ T9848] R13: 00007fbbb5426038 R14: 00007fbbb5425fa0 R15: 00007ffc493add88 [ 273.813707][ T9848] [ 273.838160][ T5790] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 274.004369][ T5790] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 274.006377][ T5790] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 274.006402][ T5790] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 274.006438][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.025861][ T5790] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 274.046414][ T971] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 274.050003][ T5790] usb 1-1: SPCP8x5 converter now attached to ttyUSB1 [ 274.080800][ T971] usb 6-1: device descriptor read/8, error -71 [ 274.176774][ T971] usb usb6-port1: unable to enumerate USB device [ 274.534956][ T971] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 274.655680][ T9857] FAULT_INJECTION: forcing a failure. [ 274.655680][ T9857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.669349][ T9857] CPU: 0 UID: 0 PID: 9857 Comm: syz.6.1257 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.669382][ T9857] Tainted: [L]=SOFTLOCKUP [ 274.669390][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.669403][ T9857] Call Trace: [ 274.669412][ T9857] [ 274.669421][ T9857] dump_stack_lvl+0xe8/0x150 [ 274.669452][ T9857] should_fail_ex+0x410/0x560 [ 274.669487][ T9857] _copy_to_user+0x31/0xb0 [ 274.669509][ T9857] simple_read_from_buffer+0xe1/0x170 [ 274.669539][ T9857] proc_fail_nth_read+0x1bb/0x230 [ 274.669564][ T9857] ? common_file_perm+0x20e/0x2b0 [ 274.669595][ T9857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.669625][ T9857] ? rw_verify_area+0x24a/0x4c0 [ 274.669651][ T9857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.669677][ T9857] vfs_read+0x213/0xa80 [ 274.669704][ T9857] ? __pfx___mutex_lock+0x10/0x10 [ 274.669727][ T9857] ? __pfx_vfs_read+0x10/0x10 [ 274.669753][ T9857] ? __fget_files+0x2a/0x420 [ 274.669780][ T9857] ? __fget_files+0x3a2/0x420 [ 274.669801][ T9857] ? __fget_files+0x2a/0x420 [ 274.669833][ T9857] ksys_read+0x150/0x270 [ 274.669859][ T9857] ? __pfx_ksys_read+0x10/0x10 [ 274.669883][ T9857] ? __pfx_binder_ioctl+0x10/0x10 [ 274.669925][ T9857] do_syscall_64+0x166/0x520 [ 274.669945][ T9857] ? trace_irq_disable+0x3b/0x140 [ 274.669972][ T9857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.669993][ T9857] ? clear_bhb_loop+0x70/0xc0 [ 274.670018][ T9857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.670038][ T9857] RIP: 0033:0x7f99bd55e90e [ 274.670057][ T9857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 274.670075][ T9857] RSP: 002b:00007f99be54cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.670097][ T9857] RAX: ffffffffffffffda RBX: 00007f99be54d6c0 RCX: 00007f99bd55e90e [ 274.670112][ T9857] RDX: 000000000000000f RSI: 00007f99be54d0a0 RDI: 0000000000000006 [ 274.670126][ T9857] RBP: 00007f99be54d090 R08: 0000000000000000 R09: 0000000000000000 [ 274.670139][ T9857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.670152][ T9857] R13: 00007f99bd826038 R14: 00007f99bd825fa0 R15: 00007ffde55ab748 [ 274.670190][ T9857] [ 274.695254][ T971] usb 8-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 274.697822][ T971] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.702384][ T971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.702407][ T971] usb 8-1: Product: syz [ 274.702421][ T971] usb 8-1: Manufacturer: syz [ 274.702435][ T971] usb 8-1: SerialNumber: syz [ 274.714594][ T971] r8152-cfgselector 8-1: Unknown version 0x0000 [ 274.952762][ T9850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.093070][ T9] usb 1-1: USB disconnect, device number 39 [ 275.109122][ T9] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1 [ 275.120055][ T9] spcp8x5 1-1:1.0: device disconnected [ 275.195789][ T971] r8152-cfgselector 8-1: Unknown version 0x0000 [ 275.240396][ T971] r8152-cfgselector 8-1: USB disconnect, device number 22 [ 275.463262][ T9868] binder: 9867:9868 ioctl 40189429 200000000000 returned -22 [ 275.944583][ T9876] FAULT_INJECTION: forcing a failure. [ 275.944583][ T9876] name failslab, interval 1, probability 0, space 0, times 0 [ 275.944643][ T9876] CPU: 1 UID: 0 PID: 9876 Comm: syz.7.1264 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.944669][ T9876] Tainted: [L]=SOFTLOCKUP [ 275.944675][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.944684][ T9876] Call Trace: [ 275.944690][ T9876] [ 275.944698][ T9876] dump_stack_lvl+0xe8/0x150 [ 275.944726][ T9876] should_fail_ex+0x410/0x560 [ 275.944759][ T9876] should_failslab+0xa8/0x100 [ 275.944779][ T9876] ? sctp_chunkify+0x5a/0x260 [ 275.944807][ T9876] kmem_cache_alloc_noprof+0xa1/0x600 [ 275.944830][ T9876] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 275.944854][ T9876] ? __alloc_skb+0x27a/0x7a0 [ 275.944876][ T9876] ? sctp_chunkify+0x5a/0x260 [ 275.944909][ T9876] sctp_chunkify+0x5a/0x260 [ 275.944939][ T9876] _sctp_make_chunk+0x122/0x290 [ 275.944970][ T9876] sctp_make_heartbeat+0xc4/0x4b0 [ 275.944996][ T9876] ? lock_acquire+0x115/0x350 [ 275.945028][ T9876] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 275.945058][ T9876] ? is_bpf_text_address+0x26/0x2b0 [ 275.945090][ T9876] ? is_bpf_text_address+0x292/0x2b0 [ 275.945112][ T9876] ? is_bpf_text_address+0x26/0x2b0 [ 275.945135][ T9876] sctp_sf_do_prm_requestheartbeat+0x2e/0x280 [ 275.945164][ T9876] sctp_do_sm+0x239/0x5de0 [ 275.945187][ T9876] ? arch_stack_walk+0xfb/0x150 [ 275.945204][ T9876] ? __pfx_sctp_pname+0x10/0x10 [ 275.945238][ T9876] ? stack_trace_save+0xa9/0x100 [ 275.945264][ T9876] ? __pfx_sctp_do_sm+0x10/0x10 [ 275.945336][ T9876] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 275.945363][ T9876] sctp_apply_peer_addr_params+0xd4/0x1880 [ 275.945400][ T9876] sctp_setsockopt_peer_addr_params+0x6be/0x980 [ 275.945433][ T9876] sctp_setsockopt+0x759/0x12c0 [ 275.945451][ T9876] ? sock_common_setsockopt+0x36/0xc0 [ 275.945471][ T9876] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 275.945493][ T9876] do_sock_setsockopt+0x17c/0x1b0 [ 275.945520][ T9876] __x64_sys_setsockopt+0x13d/0x1b0 [ 275.945549][ T9876] do_syscall_64+0x166/0x520 [ 275.945568][ T9876] ? trace_irq_disable+0x3b/0x140 [ 275.945595][ T9876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.945614][ T9876] ? clear_bhb_loop+0x70/0xc0 [ 275.945637][ T9876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.945657][ T9876] RIP: 0033:0x7fbbb519e0d9 [ 275.945675][ T9876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.945692][ T9876] RSP: 002b:00007fbbb6141028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.945712][ T9876] RAX: ffffffffffffffda RBX: 00007fbbb5425fa0 RCX: 00007fbbb519e0d9 [ 275.945727][ T9876] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 275.945740][ T9876] RBP: 00007fbbb6141090 R08: 000000000000009c R09: 0000000000000000 [ 275.945753][ T9876] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 275.945765][ T9876] R13: 00007fbbb5426038 R14: 00007fbbb5425fa0 R15: 00007ffc493add88 [ 275.945795][ T9876] [ 276.504189][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 276.519161][ T9890] FAULT_INJECTION: forcing a failure. [ 276.519161][ T9890] name failslab, interval 1, probability 0, space 0, times 0 [ 276.519216][ T9890] CPU: 1 UID: 0 PID: 9890 Comm: syz.5.1270 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.519240][ T9890] Tainted: [L]=SOFTLOCKUP [ 276.519246][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.519257][ T9890] Call Trace: [ 276.519265][ T9890] [ 276.519274][ T9890] dump_stack_lvl+0xe8/0x150 [ 276.519305][ T9890] should_fail_ex+0x410/0x560 [ 276.519336][ T9890] ? __alloc_skb+0x1db/0x7a0 [ 276.519357][ T9890] should_failslab+0xa8/0x100 [ 276.519379][ T9890] ? __alloc_skb+0x1db/0x7a0 [ 276.519398][ T9890] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 276.519424][ T9890] ? __alloc_skb+0x18d/0x7a0 [ 276.519444][ T9890] ? __alloc_skb+0x1db/0x7a0 [ 276.519472][ T9890] __alloc_skb+0x1db/0x7a0 [ 276.519497][ T9890] create_monitor_ctrl_event+0x38/0x470 [ 276.519528][ T9890] mgmt_cmd_status+0x1cd/0x570 [ 276.519558][ T9890] hci_mgmt_cmd+0xa2c/0xfc0 [ 276.519596][ T9890] hci_sock_sendmsg+0x6e1/0xf50 [ 276.519622][ T9890] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.519652][ T9890] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 276.519683][ T9890] ? apparmor_socket_sendmsg+0x98/0x360 [ 276.519707][ T9890] ? lock_acquire+0x115/0x350 [ 276.519735][ T9890] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 276.519759][ T9890] sock_sendmsg_nosec+0x13a/0x180 [ 276.519792][ T9890] sock_write_iter+0x2de/0x3e0 [ 276.519821][ T9890] ? __pfx_sock_write_iter+0x10/0x10 [ 276.519855][ T9890] ? bpf_lsm_file_permission+0x9/0x20 [ 276.519878][ T9890] ? security_file_permission+0x75/0x260 [ 276.519911][ T9890] vfs_write+0x612/0xba0 [ 276.519943][ T9890] ? __pfx_vfs_write+0x10/0x10 [ 276.519978][ T9890] ? __fget_files+0x2a/0x420 [ 276.520015][ T9890] ksys_write+0x150/0x270 [ 276.520041][ T9890] ? __pfx_ksys_write+0x10/0x10 [ 276.520080][ T9890] do_syscall_64+0x166/0x520 [ 276.520099][ T9890] ? trace_irq_disable+0x3b/0x140 [ 276.520126][ T9890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.520144][ T9890] ? clear_bhb_loop+0x70/0xc0 [ 276.520168][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.520188][ T9890] RIP: 0033:0x7f2c1a19e0d9 [ 276.520206][ T9890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.520222][ T9890] RSP: 002b:00007f2c1afea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.520243][ T9890] RAX: ffffffffffffffda RBX: 00007f2c1a425fa0 RCX: 00007f2c1a19e0d9 [ 276.520258][ T9890] RDX: 0000000000000008 RSI: 0000200000000580 RDI: 0000000000000004 [ 276.520270][ T9890] RBP: 00007f2c1afea090 R08: 0000000000000000 R09: 0000000000000000 [ 276.520283][ T9890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.520295][ T9890] R13: 00007f2c1a426038 R14: 00007f2c1a425fa0 R15: 00007fff0d92d5f8 [ 276.520326][ T9890] [ 276.794963][ T9894] binder: 9891:9894 ioctl c0306201 2000000006c0 returned -14 [ 276.823998][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 276.824059][ T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=00c8, bcdDevice=81.90 [ 276.842271][ T9] usb 7-1: config 2 has an invalid interface number: 74 but max is 1 [ 276.842297][ T9] usb 7-1: config 2 has an invalid interface number: 136 but max is 1 [ 276.842316][ T9] usb 7-1: config 2 has no interface number 0 [ 276.842332][ T9] usb 7-1: config 2 has no interface number 1 [ 276.842376][ T9] usb 7-1: config 2 interface 74 altsetting 255 endpoint 0x4 has an invalid bInterval 221, changing to 11 [ 276.842403][ T9] usb 7-1: config 2 interface 74 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 276.842425][ T9] usb 7-1: config 2 interface 74 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 276.842451][ T9] usb 7-1: config 2 interface 74 has no altsetting 0 [ 276.842468][ T9] usb 7-1: config 2 interface 136 has no altsetting 0 [ 276.922422][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.922464][ T9] usb 7-1: Product: syz [ 276.922508][ T9] usb 7-1: Manufacturer: syz [ 276.922527][ T9] usb 7-1: SerialNumber: syz [ 277.160289][ T9885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.175962][ T9885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.215333][ T9] adutux 7-1:2.74: interrupt endpoints not found [ 277.270665][ T9] adutux 7-1:2.136: interrupt endpoints not found [ 277.296243][ T9] usb 7-1: USB disconnect, device number 29 [ 277.424847][ T9906] FAULT_INJECTION: forcing a failure. [ 277.424847][ T9906] name failslab, interval 1, probability 0, space 0, times 0 [ 277.424898][ T9906] CPU: 0 UID: 0 PID: 9906 Comm: syz.7.1274 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.424928][ T9906] Tainted: [L]=SOFTLOCKUP [ 277.424936][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.424947][ T9906] Call Trace: [ 277.424955][ T9906] [ 277.424964][ T9906] dump_stack_lvl+0xe8/0x150 [ 277.424994][ T9906] should_fail_ex+0x410/0x560 [ 277.425029][ T9906] should_failslab+0xa8/0x100 [ 277.425050][ T9906] ? __inet_hash_connect+0x1631/0x25a0 [ 277.425076][ T9906] kmem_cache_alloc_noprof+0xa1/0x600 [ 277.425100][ T9906] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 277.425122][ T9906] ? __inet_hash_connect+0xe9b/0x25a0 [ 277.425147][ T9906] ? __inet_hash_connect+0x1631/0x25a0 [ 277.425178][ T9906] __inet_hash_connect+0x1631/0x25a0 [ 277.425219][ T9906] ? __inet_hash_connect+0x5ce/0x25a0 [ 277.425250][ T9906] ? __pfx___inet_hash_connect+0x10/0x10 [ 277.425281][ T9906] ? inet_hash_connect+0xf1/0x380 [ 277.425311][ T9906] tcp_v4_connect+0xcee/0x1950 [ 277.425348][ T9906] ? __pfx_tcp_v4_connect+0x10/0x10 [ 277.425373][ T9906] ? __lock_acquire+0x6df/0x2e50 [ 277.425407][ T9906] __inet_stream_connect+0x258/0xe00 [ 277.425451][ T9906] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.425481][ T9906] ? __pfx___inet_stream_connect+0x10/0x10 [ 277.425512][ T9906] ? inet_stream_connect+0x51/0xa0 [ 277.425542][ T9906] ? __local_bh_enable_ip+0xd6/0x140 [ 277.425569][ T9906] inet_stream_connect+0x66/0xa0 [ 277.425601][ T9906] kernel_connect+0x141/0x1c0 [ 277.425631][ T9906] ? __pfx_kernel_connect+0x10/0x10 [ 277.425656][ T9906] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.425693][ T9906] ? __local_bh_enable_ip+0xd6/0x140 [ 277.425720][ T9906] smc_connect+0x78c/0xdb0 [ 277.425758][ T9906] __sys_connect+0x316/0x450 [ 277.425782][ T9906] ? __pfx___sys_connect+0x10/0x10 [ 277.425817][ T9906] ? __pfx_ksys_write+0x10/0x10 [ 277.425852][ T9906] __x64_sys_connect+0x7a/0x90 [ 277.425875][ T9906] do_syscall_64+0x166/0x520 [ 277.425896][ T9906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.425916][ T9906] ? clear_bhb_loop+0x70/0xc0 [ 277.425940][ T9906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.425959][ T9906] RIP: 0033:0x7fbbb519e0d9 [ 277.425978][ T9906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.425995][ T9906] RSP: 002b:00007fbbb6141028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 277.426017][ T9906] RAX: ffffffffffffffda RBX: 00007fbbb5425fa0 RCX: 00007fbbb519e0d9 [ 277.426031][ T9906] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 277.426044][ T9906] RBP: 00007fbbb6141090 R08: 0000000000000000 R09: 0000000000000000 [ 277.426057][ T9906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.426069][ T9906] R13: 00007fbbb5426038 R14: 00007fbbb5425fa0 R15: 00007ffc493add88 [ 277.426100][ T9906] [ 277.778644][ T9912] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1277'. [ 277.789136][ T9912] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1277'. [ 277.798824][ T9912] netlink: 500 bytes leftover after parsing attributes in process `syz.7.1277'. [ 277.888917][ T9916] FAULT_INJECTION: forcing a failure. [ 277.888917][ T9916] name failslab, interval 1, probability 0, space 0, times 0 [ 277.901771][ T9916] CPU: 0 UID: 0 PID: 9916 Comm: syz.6.1280 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.901803][ T9916] Tainted: [L]=SOFTLOCKUP [ 277.901811][ T9916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.901823][ T9916] Call Trace: [ 277.901832][ T9916] [ 277.901841][ T9916] dump_stack_lvl+0xe8/0x150 [ 277.901872][ T9916] should_fail_ex+0x410/0x560 [ 277.901912][ T9916] should_failslab+0xa8/0x100 [ 277.901935][ T9916] __kmalloc_cache_noprof+0xa3/0x600 [ 277.901964][ T9916] ? binder_transaction+0x6d7/0x7080 [ 277.901983][ T9916] ? binder_transaction+0x6d7/0x7080 [ 277.902009][ T9916] binder_transaction+0x6d7/0x7080 [ 277.902031][ T9916] ? lock_acquire+0x115/0x350 [ 277.902076][ T9916] ? is_bpf_text_address+0x26/0x2b0 [ 277.902101][ T9916] ? kernel_text_address+0xa5/0xe0 [ 277.902131][ T9916] ? __kernel_text_address+0xd/0x30 [ 277.902167][ T9916] ? __pfx_binder_transaction+0x10/0x10 [ 277.902187][ T9916] ? __lock_acquire+0x6df/0x2e50 [ 277.902227][ T9916] ? __lock_acquire+0x6df/0x2e50 [ 277.902259][ T9916] ? __lock_acquire+0x6df/0x2e50 [ 277.902291][ T9916] ? __lock_acquire+0x6df/0x2e50 [ 277.902322][ T9916] ? lock_acquire+0x115/0x350 [ 277.902372][ T9916] binder_ioctl_write_read+0xb29/0xa940 [ 277.902420][ T9916] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 277.902460][ T9916] ? stack_trace_save+0xa9/0x100 [ 277.902487][ T9916] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 277.902515][ T9916] ? kasan_save_track+0x4f/0x80 [ 277.902546][ T9916] ? stack_depot_save_flags+0x33/0x7f0 [ 277.902575][ T9916] ? __lock_acquire+0x6df/0x2e50 [ 277.902609][ T9916] ? __lock_acquire+0x6df/0x2e50 [ 277.902660][ T9916] ? __pfx_binder_debug+0x10/0x10 [ 277.902687][ T9916] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.902726][ T9916] ? _raw_spin_unlock+0x28/0x50 [ 277.902754][ T9916] ? binder_get_thread+0x176/0x6d0 [ 277.902783][ T9916] ? binder_ioctl+0x186/0x1b00 [ 277.902815][ T9916] binder_ioctl+0x41d/0x1b00 [ 277.902844][ T9916] ? tomoyo_path_number_perm+0x219/0x5f0 [ 277.902873][ T9916] ? tomoyo_path_number_perm+0x219/0x5f0 [ 277.902909][ T9916] ? do_vfs_ioctl+0x116f/0x1530 [ 277.902937][ T9916] ? __pfx_binder_ioctl+0x10/0x10 [ 277.902967][ T9916] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 277.903007][ T9916] ? hook_file_ioctl+0x1f2/0x600 [ 277.903056][ T9916] ? __fget_files+0x2a/0x420 [ 277.903082][ T9916] ? __fget_files+0x2a/0x420 [ 277.903104][ T9916] ? __fget_files+0x3a2/0x420 [ 277.903126][ T9916] ? __fget_files+0x2a/0x420 [ 277.903152][ T9916] ? bpf_lsm_file_ioctl+0x9/0x20 [ 277.903176][ T9916] ? __pfx_binder_ioctl+0x10/0x10 [ 277.903205][ T9916] __se_sys_ioctl+0xfc/0x170 [ 277.903236][ T9916] do_syscall_64+0x166/0x520 [ 277.903255][ T9916] ? trace_irq_disable+0x3b/0x140 [ 277.903283][ T9916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.903304][ T9916] ? clear_bhb_loop+0x70/0xc0 [ 277.903328][ T9916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.903349][ T9916] RIP: 0033:0x7f99bd59e0d9 [ 277.903383][ T9916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.903399][ T9916] RSP: 002b:00007f99be54d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.903422][ T9916] RAX: ffffffffffffffda RBX: 00007f99bd825fa0 RCX: 00007f99bd59e0d9 [ 277.903437][ T9916] RDX: 00002000000006c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 277.903450][ T9916] RBP: 00007f99be54d090 R08: 0000000000000000 R09: 0000000000000000 [ 277.903463][ T9916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.903475][ T9916] R13: 00007f99bd826038 R14: 00007f99bd825fa0 R15: 00007ffde55ab748 [ 277.903506][ T9916] [ 277.931911][ T9916] binder: 9915:9916 ioctl c0306201 2000000006c0 returned -14 [ 278.142926][ T9921] FAULT_INJECTION: forcing a failure. [ 278.142926][ T9921] name failslab, interval 1, probability 0, space 0, times 0 [ 278.142960][ T9921] CPU: 1 UID: 0 PID: 9921 Comm: syz.7.1281 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.142986][ T9921] Tainted: [L]=SOFTLOCKUP [ 278.142994][ T9921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.143006][ T9921] Call Trace: [ 278.143014][ T9921] [ 278.143023][ T9921] dump_stack_lvl+0xe8/0x150 [ 278.143052][ T9921] should_fail_ex+0x410/0x560 [ 278.143084][ T9921] should_failslab+0xa8/0x100 [ 278.143106][ T9921] __kmalloc_noprof+0xfe/0x720 [ 278.143131][ T9921] ? is_bpf_text_address+0x26/0x2b0 [ 278.143152][ T9921] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 278.143175][ T9921] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 278.143204][ T9921] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 278.143234][ T9921] genl_family_rcv_msg_doit+0xda/0x340 [ 278.143262][ T9921] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 278.143291][ T9921] ? apparmor_capable+0x126/0x170 [ 278.143315][ T9921] ? bpf_lsm_capable+0x9/0x20 [ 278.143340][ T9921] ? security_capable+0x7e/0x2c0 [ 278.143386][ T9921] genl_rcv_msg+0x614/0x7a0 [ 278.143413][ T9921] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.143433][ T9921] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 278.143457][ T9921] ? __pfx_nl80211_associate+0x10/0x10 [ 278.143475][ T9921] ? __pfx_nl80211_post_doit+0x10/0x10 [ 278.143511][ T9921] netlink_rcv_skb+0x226/0x4a0 [ 278.143539][ T9921] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.143562][ T9921] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.143605][ T9921] ? down_read+0x2be/0x330 [ 278.143631][ T9921] genl_rcv+0x28/0x40 [ 278.143650][ T9921] netlink_unicast+0x7bd/0x940 [ 278.143684][ T9921] netlink_sendmsg+0x813/0xb40 [ 278.143719][ T9921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.143754][ T9921] ? apparmor_socket_sendmsg+0x98/0x360 [ 278.143781][ T9921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.143806][ T9921] sock_sendmsg_nosec+0x13a/0x180 [ 278.143838][ T9921] ____sys_sendmsg+0x54e/0x850 [ 278.143867][ T9921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.143904][ T9921] ? import_iovec+0x73/0xa0 [ 278.143927][ T9921] ___sys_sendmsg+0x2a5/0x360 [ 278.143950][ T9921] ? __lock_acquire+0x6df/0x2e50 [ 278.143982][ T9921] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.144038][ T9921] ? __fget_files+0x2a/0x420 [ 278.144060][ T9921] ? __fget_files+0x3a2/0x420 [ 278.144092][ T9921] __x64_sys_sendmsg+0x1b1/0x290 [ 278.144118][ T9921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.144163][ T9921] do_syscall_64+0x166/0x520 [ 278.144182][ T9921] ? trace_irq_disable+0x3b/0x140 [ 278.144208][ T9921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.144228][ T9921] ? clear_bhb_loop+0x70/0xc0 [ 278.144252][ T9921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.144271][ T9921] RIP: 0033:0x7fbbb519e0d9 [ 278.144289][ T9921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.144305][ T9921] RSP: 002b:00007fbbb6141028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.144326][ T9921] RAX: ffffffffffffffda RBX: 00007fbbb5425fa0 RCX: 00007fbbb519e0d9 [ 278.144341][ T9921] RDX: 0000000000000c10 RSI: 0000200000000140 RDI: 0000000000000003 [ 278.144354][ T9921] RBP: 00007fbbb6141090 R08: 0000000000000000 R09: 0000000000000000 [ 278.144367][ T9921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.144379][ T9921] R13: 00007fbbb5426038 R14: 00007fbbb5425fa0 R15: 00007ffc493add88 [ 278.144409][ T9921] [ 278.424151][ T9924] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 278.694392][ T971] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 278.756287][ T5709] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 278.815116][ T9936] kAFS: bad VL server IP address [ 278.866837][ T971] usb 8-1: Using ep0 maxpacket: 16 [ 278.870040][ T971] usb 8-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 278.875414][ T971] usb 8-1: config 0 interface 0 has no altsetting 0 [ 278.875450][ T971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.881589][ T971] usb 8-1: config 0 descriptor?? [ 278.923979][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 278.926654][ T5709] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 278.927932][ T5709] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 278.927955][ T5709] usb 6-1: config 251 has no interface number 0 [ 278.927999][ T5709] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 278.928045][ T5709] usb 6-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 278.928066][ T5709] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 278.928092][ T5709] usb 6-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 278.928116][ T5709] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.928141][ T5709] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.928187][ T5709] usb 6-1: config 251 interface 202 has no altsetting 0 [ 278.941688][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.941712][ T5709] usb 6-1: Product: syz [ 278.941750][ T5709] usb 6-1: Manufacturer: syz [ 278.941764][ T5709] usb 6-1: SerialNumber: syz [ 278.965709][ T9928] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 279.044782][ T9938] FAULT_INJECTION: forcing a failure. [ 279.044782][ T9938] name failslab, interval 1, probability 0, space 0, times 0 [ 279.044842][ T9938] CPU: 1 UID: 0 PID: 9938 Comm: syz.0.1288 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.044868][ T9938] Tainted: [L]=SOFTLOCKUP [ 279.044876][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.044887][ T9938] Call Trace: [ 279.044895][ T9938] [ 279.044904][ T9938] dump_stack_lvl+0xe8/0x150 [ 279.044933][ T9938] should_fail_ex+0x410/0x560 [ 279.044976][ T9938] should_failslab+0xa8/0x100 [ 279.044998][ T9938] __kmalloc_noprof+0xfe/0x720 [ 279.045024][ T9938] ? __kmalloc_cache_noprof+0x14d/0x600 [ 279.045048][ T9938] ? afs_lookup_cell+0x4a9/0x1c80 [ 279.045074][ T9938] ? afs_lookup_cell+0x4a9/0x1c80 [ 279.045106][ T9938] afs_lookup_cell+0x4a9/0x1c80 [ 279.045138][ T9938] ? lock_acquire+0x115/0x350 [ 279.045165][ T9938] ? afs_net+0x45/0x270 [ 279.045187][ T9938] ? __pfx_afs_lookup_cell+0x10/0x10 [ 279.045218][ T9938] ? afs_net+0x45/0x270 [ 279.045239][ T9938] ? afs_net+0x45/0x270 [ 279.045259][ T9938] ? afs_net+0x45/0x270 [ 279.045287][ T9938] afs_proc_cells_write+0x242/0x310 [ 279.045314][ T9938] proc_simple_write+0x10c/0x140 [ 279.045338][ T9938] ? __pfx_proc_simple_write+0x10/0x10 [ 279.045356][ T9938] proc_reg_write+0x1e9/0x2e0 [ 279.045386][ T9938] ? __pfx_proc_reg_write+0x10/0x10 [ 279.045413][ T9938] vfs_write+0x296/0xba0 [ 279.045444][ T9938] ? __pfx_vfs_write+0x10/0x10 [ 279.045470][ T9938] ? __fget_files+0x2a/0x420 [ 279.045496][ T9938] ? __fget_files+0x3a2/0x420 [ 279.045518][ T9938] ? __fget_files+0x2a/0x420 [ 279.045547][ T9938] ksys_write+0x150/0x270 [ 279.045572][ T9938] ? __pfx_ksys_write+0x10/0x10 [ 279.045608][ T9938] do_syscall_64+0x166/0x520 [ 279.045628][ T9938] ? trace_irq_disable+0x3b/0x140 [ 279.045654][ T9938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.045674][ T9938] ? clear_bhb_loop+0x70/0xc0 [ 279.045713][ T9938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.045733][ T9938] RIP: 0033:0x7f6e9519e0d9 [ 279.045751][ T9938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.045768][ T9938] RSP: 002b:00007f6e9607e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 279.045789][ T9938] RAX: ffffffffffffffda RBX: 00007f6e95425fa0 RCX: 00007f6e9519e0d9 [ 279.045804][ T9938] RDX: 000000000000000c RSI: 0000200000000500 RDI: 0000000000000003 [ 279.045817][ T9938] RBP: 00007f6e9607e090 R08: 0000000000000000 R09: 0000000000000000 [ 279.045829][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.045841][ T9938] R13: 00007f6e95426038 R14: 00007f6e95425fa0 R15: 00007ffc9f9e0248 [ 279.045873][ T9938] [ 279.211470][ T5709] cxacru 6-1:251.202: cxacru_bind: interface has incorrect endpoints [ 279.211621][ T5709] cxacru 6-1:251.202: usbatm_usb_probe: bind failed: -19! [ 279.263945][ T5709] usb 6-1: USB disconnect, device number 34 [ 279.327894][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.328371][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.420956][ T971] kye 0003:0458:5012.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 279.429608][ T971] hid_parser_main: 5 callbacks suppressed [ 279.431716][ T971] kye 0003:0458:5012.000F: unknown main item tag 0x2 [ 279.431753][ T971] kye 0003:0458:5012.000F: unknown main item tag 0x6 [ 279.431845][ T971] kye 0003:0458:5012.000F: ignoring exceeding usage max [ 279.449874][ T971] kye 0003:0458:5012.000F: hidraw0: USB HID vcc.5e Device [HID 0458:5012] on usb-dummy_hcd.7-1/input0 [ 279.449904][ T971] kye 0003:0458:5012.000F: tablet-enabling feature report not found [ 279.449919][ T971] kye 0003:0458:5012.000F: tablet enabling failed [ 279.636509][ T971] usb 8-1: USB disconnect, device number 23 [ 280.051287][ T9957] FAULT_INJECTION: forcing a failure. [ 280.051287][ T9957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.051341][ T9957] CPU: 0 UID: 0 PID: 9957 Comm: syz.0.1294 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.051369][ T9957] Tainted: [L]=SOFTLOCKUP [ 280.051376][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.051389][ T9957] Call Trace: [ 280.051397][ T9957] [ 280.051407][ T9957] dump_stack_lvl+0xe8/0x150 [ 280.051437][ T9957] should_fail_ex+0x410/0x560 [ 280.051470][ T9957] _copy_to_user+0x31/0xb0 [ 280.051491][ T9957] simple_read_from_buffer+0xe1/0x170 [ 280.051521][ T9957] proc_fail_nth_read+0x1bb/0x230 [ 280.051547][ T9957] ? common_file_perm+0x20e/0x2b0 [ 280.051578][ T9957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.051607][ T9957] ? rw_verify_area+0x24a/0x4c0 [ 280.051634][ T9957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.051660][ T9957] vfs_read+0x213/0xa80 [ 280.051689][ T9957] ? __pfx___mutex_lock+0x10/0x10 [ 280.051712][ T9957] ? __pfx_vfs_read+0x10/0x10 [ 280.051747][ T9957] ? __fget_files+0x2a/0x420 [ 280.051774][ T9957] ? __fget_files+0x3a2/0x420 [ 280.051796][ T9957] ? __fget_files+0x2a/0x420 [ 280.051826][ T9957] ksys_read+0x150/0x270 [ 280.051853][ T9957] ? __pfx_ksys_read+0x10/0x10 [ 280.051878][ T9957] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 280.051910][ T9957] do_syscall_64+0x166/0x520 [ 280.051930][ T9957] ? trace_irq_disable+0x3b/0x140 [ 280.051957][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.051977][ T9957] ? clear_bhb_loop+0x70/0xc0 [ 280.052002][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.052022][ T9957] RIP: 0033:0x7f6e9515e90e [ 280.052041][ T9957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 280.052058][ T9957] RSP: 002b:00007f6e9607dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.052079][ T9957] RAX: ffffffffffffffda RBX: 00007f6e9607e6c0 RCX: 00007f6e9515e90e [ 280.052094][ T9957] RDX: 000000000000000f RSI: 00007f6e9607e0a0 RDI: 0000000000000004 [ 280.052107][ T9957] RBP: 00007f6e9607e090 R08: 0000000000000000 R09: 0000000000000000 [ 280.052121][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.052134][ T9957] R13: 00007f6e95426038 R14: 00007f6e95425fa0 R15: 00007ffc9f9e0248 [ 280.052166][ T9957] [ 280.107128][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 280.314437][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 280.324679][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 280.334531][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 280.345028][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.364243][ T9] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 280.373595][ T9] usb 7-1: SPCP8x5 converter now attached to ttyUSB1 [ 280.530548][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1295'. [ 281.260731][ T9980] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1298'. [ 281.406741][ T9] usb 7-1: USB disconnect, device number 30 [ 281.424145][ T9] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1 [ 281.434936][ T9] spcp8x5 7-1:1.0: device disconnected [ 281.951910][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1301'. [ 281.978873][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1301'. [ 282.313749][ T9995] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1303'. [ 282.493774][ T192] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 282.620346][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1307'. [ 282.629421][ T192] usb 6-1: device descriptor read/64, error -71 [ 282.863768][ T192] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 282.994588][ T192] usb 6-1: device descriptor read/64, error -71 [ 283.103981][ T192] usb usb6-port1: attempt power cycle [ 283.122864][T10017] FAULT_INJECTION: forcing a failure. [ 283.122864][T10017] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.122938][T10017] CPU: 1 UID: 0 PID: 10017 Comm: syz.6.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.122968][T10017] Tainted: [L]=SOFTLOCKUP [ 283.122974][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.122984][T10017] Call Trace: [ 283.122991][T10017] [ 283.122999][T10017] dump_stack_lvl+0xe8/0x150 [ 283.123030][T10017] should_fail_ex+0x410/0x560 [ 283.123064][T10017] prepare_alloc_pages+0x223/0x600 [ 283.123097][T10017] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 283.123129][T10017] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 283.123162][T10017] ? __pfx_policy_nodemask+0x10/0x10 [ 283.123180][T10017] ? __get_vm_area_node+0x155/0x2f0 [ 283.123202][T10017] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 283.123225][T10017] ? __vmalloc_node_noprof+0xc2/0x100 [ 283.123247][T10017] ? dup_task_struct+0x2c6/0xa00 [ 283.123268][T10017] ? copy_process+0x820/0x43e0 [ 283.123288][T10017] ? kvm_mmu_post_init_vm+0x147/0x2b0 [ 283.123309][T10017] ? kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 283.123334][T10017] ? kvm_vcpu_ioctl+0xa61/0xfd0 [ 283.123361][T10017] ? __se_sys_ioctl+0xfc/0x170 [ 283.123386][T10017] ? do_syscall_64+0x166/0x520 [ 283.123410][T10017] alloc_pages_mpol+0x21e/0x390 [ 283.123436][T10017] alloc_pages_noprof+0xb1/0x2b0 [ 283.123466][T10017] get_free_pages_noprof+0xf/0x80 [ 283.123493][T10017] __kasan_populate_vmalloc+0x38/0x1c0 [ 283.123520][T10017] ? do_raw_spin_unlock+0xf5/0x200 [ 283.123549][T10017] alloc_vmap_area+0xd1a/0x1420 [ 283.123585][T10017] ? __pfx_alloc_vmap_area+0x10/0x10 [ 283.123605][T10017] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 283.123632][T10017] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 283.123658][T10017] ? __get_vm_area_node+0x155/0x2f0 [ 283.123684][T10017] __get_vm_area_node+0x200/0x2f0 [ 283.123714][T10017] __vmalloc_node_range_noprof+0x343/0x1540 [ 283.123740][T10017] ? copy_process+0x820/0x43e0 [ 283.123761][T10017] ? percpu_ref_get_many+0x19/0x140 [ 283.123791][T10017] ? __memcg_slab_post_alloc_hook+0x4d7/0xf80 [ 283.123832][T10017] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.123857][T10017] ? dup_task_struct+0x52/0xa00 [ 283.123877][T10017] ? trace_kmem_cache_alloc+0x29/0xe0 [ 283.123902][T10017] ? memcpy_and_pad+0x48/0x80 [ 283.123929][T10017] __vmalloc_node_noprof+0xc2/0x100 [ 283.123953][T10017] ? copy_process+0x820/0x43e0 [ 283.123973][T10017] ? copy_process+0x820/0x43e0 [ 283.123996][T10017] dup_task_struct+0x2c6/0xa00 [ 283.124023][T10017] copy_process+0x820/0x43e0 [ 283.124068][T10017] ? rcu_is_watching+0x16/0xb0 [ 283.124091][T10017] ? __pfx_copy_process+0x10/0x10 [ 283.124120][T10017] ? mutex_init_lockdep+0xdf/0x110 [ 283.124143][T10017] vhost_task_create+0x1f9/0x380 [ 283.124171][T10017] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 283.124191][T10017] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 283.124213][T10017] ? __pfx_vhost_task_create+0x10/0x10 [ 283.124239][T10017] ? register_lock_class+0x31/0x2e0 [ 283.124273][T10017] ? __pfx_vhost_task_fn+0x10/0x10 [ 283.124309][T10017] ? kasan_quarantine_put+0xbb/0x1f0 [ 283.124342][T10017] kvm_mmu_post_init_vm+0x147/0x2b0 [ 283.124367][T10017] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 283.124401][T10017] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 283.124434][T10017] kvm_vcpu_ioctl+0xa61/0xfd0 [ 283.124474][T10017] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 283.124500][T10017] ? hook_file_ioctl+0x1f2/0x600 [ 283.124546][T10017] ? __fget_files+0x2a/0x420 [ 283.124570][T10017] ? __fget_files+0x2a/0x420 [ 283.124591][T10017] ? __fget_files+0x3a2/0x420 [ 283.124611][T10017] ? __fget_files+0x2a/0x420 [ 283.124637][T10017] ? bpf_lsm_file_ioctl+0x9/0x20 [ 283.124660][T10017] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 283.124688][T10017] __se_sys_ioctl+0xfc/0x170 [ 283.124717][T10017] do_syscall_64+0x166/0x520 [ 283.124736][T10017] ? trace_irq_disable+0x3b/0x140 [ 283.124762][T10017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.124782][T10017] ? clear_bhb_loop+0x70/0xc0 [ 283.124807][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.124826][T10017] RIP: 0033:0x7f99bd59e0d9 [ 283.124845][T10017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.124862][T10017] RSP: 002b:00007f99be52c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.124883][T10017] RAX: ffffffffffffffda RBX: 00007f99bd826090 RCX: 00007f99bd59e0d9 [ 283.124898][T10017] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 283.124910][T10017] RBP: 00007f99be52c090 R08: 0000000000000000 R09: 0000000000000000 [ 283.124923][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.124935][T10017] R13: 00007f99bd826128 R14: 00007f99bd826090 R15: 00007ffde55ab748 [ 283.124966][T10017] [ 283.134258][T10017] syz.6.1310: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 283.134325][T10017] CPU: 1 UID: 0 PID: 10017 Comm: syz.6.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.134351][T10017] Tainted: [L]=SOFTLOCKUP [ 283.134358][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.134369][T10017] Call Trace: [ 283.134377][T10017] [ 283.134385][T10017] dump_stack_lvl+0xe8/0x150 [ 283.134415][T10017] warn_alloc+0x24d/0x270 [ 283.134449][T10017] ? lockdep_hardirqs_on+0x7b/0x110 [ 283.134472][T10017] ? __pfx_warn_alloc+0x10/0x10 [ 283.134497][T10017] ? kfree+0x1c5/0x650 [ 283.134526][T10017] ? __get_vm_area_node+0x219/0x2f0 [ 283.134556][T10017] __vmalloc_node_range_noprof+0x36b/0x1540 [ 283.134582][T10017] ? percpu_ref_get_many+0x19/0x140 [ 283.134612][T10017] ? __memcg_slab_post_alloc_hook+0x4d7/0xf80 [ 283.134653][T10017] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.134678][T10017] ? dup_task_struct+0x52/0xa00 [ 283.134701][T10017] ? trace_kmem_cache_alloc+0x29/0xe0 [ 283.134726][T10017] ? memcpy_and_pad+0x48/0x80 [ 283.134753][T10017] __vmalloc_node_noprof+0xc2/0x100 [ 283.134776][T10017] ? copy_process+0x820/0x43e0 [ 283.134796][T10017] ? copy_process+0x820/0x43e0 [ 283.134819][T10017] dup_task_struct+0x2c6/0xa00 [ 283.134847][T10017] copy_process+0x820/0x43e0 [ 283.134892][T10017] ? rcu_is_watching+0x16/0xb0 [ 283.134914][T10017] ? __pfx_copy_process+0x10/0x10 [ 283.134943][T10017] ? mutex_init_lockdep+0xdf/0x110 [ 283.134967][T10017] vhost_task_create+0x1f9/0x380 [ 283.134993][T10017] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 283.135014][T10017] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 283.135036][T10017] ? __pfx_vhost_task_create+0x10/0x10 [ 283.135061][T10017] ? register_lock_class+0x31/0x2e0 [ 283.135095][T10017] ? __pfx_vhost_task_fn+0x10/0x10 [ 283.135131][T10017] ? kasan_quarantine_put+0xbb/0x1f0 [ 283.135165][T10017] kvm_mmu_post_init_vm+0x147/0x2b0 [ 283.135190][T10017] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 283.135224][T10017] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 283.135258][T10017] kvm_vcpu_ioctl+0xa61/0xfd0 [ 283.135291][T10017] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 283.135318][T10017] ? hook_file_ioctl+0x1f2/0x600 [ 283.135363][T10017] ? __fget_files+0x2a/0x420 [ 283.135388][T10017] ? __fget_files+0x2a/0x420 [ 283.135408][T10017] ? __fget_files+0x3a2/0x420 [ 283.135429][T10017] ? __fget_files+0x2a/0x420 [ 283.135460][T10017] ? bpf_lsm_file_ioctl+0x9/0x20 [ 283.135484][T10017] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 283.135512][T10017] __se_sys_ioctl+0xfc/0x170 [ 283.135542][T10017] do_syscall_64+0x166/0x520 [ 283.135561][T10017] ? trace_irq_disable+0x3b/0x140 [ 283.135587][T10017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.135607][T10017] ? clear_bhb_loop+0x70/0xc0 [ 283.135631][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.135650][T10017] RIP: 0033:0x7f99bd59e0d9 [ 283.135669][T10017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.135684][T10017] RSP: 002b:00007f99be52c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.135703][T10017] RAX: ffffffffffffffda RBX: 00007f99bd826090 RCX: 00007f99bd59e0d9 [ 283.135718][T10017] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 283.135731][T10017] RBP: 00007f99be52c090 R08: 0000000000000000 R09: 0000000000000000 [ 283.135743][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.135755][T10017] R13: 00007f99bd826128 R14: 00007f99bd826090 R15: 00007ffde55ab748 [ 283.135786][T10017] [ 283.141790][T10017] Mem-Info: [ 283.141801][T10017] active_anon:16816 inactive_anon:0 isolated_anon:0 [ 283.141801][T10017] active_file:1 inactive_file:21274 isolated_file:0 [ 283.141801][T10017] unevictable:2 dirty:70 writeback:0 [ 283.141801][T10017] slab_reclaimable:10936 slab_unreclaimable:98755 [ 283.141801][T10017] mapped:32199 shmem:8152 pagetables:1631 [ 283.141801][T10017] sec_pagetables:3 bounce:0 [ 283.141801][T10017] kernel_misc_reclaimable:0 [ 283.141801][T10017] free:1322995 free_pcp:16620 free_cma:0 [ 283.141852][T10017] Node 0 active_anon:67264kB inactive_anon:0kB active_file:4kB inactive_file:84904kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:128740kB dirty:272kB writeback:0kB shmem:32608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13084kB pagetables:6388kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 283.141906][T10017] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 283.141955][T10017] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.142011][T10017] lowmem_reserve[]: 0 2482 2484 2484 2484 [ 283.142046][T10017] Node 0 DMA32 free:1339608kB boost:0kB min:34096kB low:42620kB high:51144kB reserved_highatomic:0kB free_highatomic:0kB active_anon:67264kB inactive_anon:0kB active_file:4kB inactive_file:84904kB unevictable:8kB writepending:272kB zspages:0kB present:3129332kB managed:2542416kB mlocked:12kB bounce:0kB free_pcp:66476kB local_pcp:18700kB free_cma:0kB [ 283.142104][T10017] lowmem_reserve[]: 0 0 1 1 1 [ 283.142137][T10017] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1712kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 283.142192][T10017] lowmem_reserve[]: 0 0 0 0 0 [ 283.142237][T10017] Node 1 Normal free:3937016kB boost:0kB min:55780kB low:69724kB high:83668kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.142294][T10017] lowmem_reserve[]: 0 0 0 0 0 [ 283.142326][T10017] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 283.142475][T10017] Node 0 DMA32: 0*4kB 22*8kB (ME) 105*16kB (UME) 140*32kB (UM) 101*64kB (UM) 61*128kB (UM) 34*256kB (UM) 25*512kB (UME) 3*1024kB (UM) 0*2048kB 316*4096kB (UM) = 1339520kB [ 283.142616][T10017] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.142709][T10017] Node 1 Normal: 2*4kB (M) 4*8kB (U) 3*16kB (U) 7*32kB (U) 9*64kB (UM) 5*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3937016kB [ 283.142857][T10017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.142874][T10017] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.142890][T10017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.142920][T10017] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.142935][T10017] 29430 total pagecache pages [ 283.142944][T10017] 0 pages in swap cache [ 283.142950][T10017] Free swap = 124996kB [ 283.142958][T10017] Total swap = 124996kB [ 283.142966][T10017] 2097051 pages RAM [ 283.142973][T10017] 0 pages HighMem/MovableOnly [ 283.142981][T10017] 429403 pages reserved [ 283.142988][T10017] 0 pages cma reserved [ 283.535620][ T192] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 283.610489][ T192] usb 6-1: device descriptor read/8, error -71 [ 283.906182][ T192] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 283.963549][ T192] usb 6-1: device descriptor read/8, error -71 [ 284.130770][ T192] usb usb6-port1: unable to enumerate USB device [ 284.315251][ T5790] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 284.364374][ T2252] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 284.454488][ T5790] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 284.455636][ T5790] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 284.455662][ T5790] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 284.455697][ T5790] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.470996][ T5790] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 284.480581][ T5790] usb 8-1: SPCP8x5 converter now attached to ttyUSB1 [ 284.534967][ T2252] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 284.546599][ T2252] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.560596][ T2252] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.573716][ T2252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.621517][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1315'. [ 284.739234][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1316'. [ 285.200651][ T2252] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 285.208902][ T2252] dvb_ttusb_budget: ttusb_init_controller: error [ 285.217281][ T2252] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 285.337523][ T2252] DVB: Unable to find symbol stv0299_attach() [ 285.400366][ T5709] usb 8-1: USB disconnect, device number 24 [ 285.421020][ T2252] DVB: Unable to find symbol tda8083_attach() [ 285.427874][ T2252] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 285.455702][ T5709] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1 [ 285.466088][ T5709] spcp8x5 8-1:1.0: device disconnected [ 285.513246][T10047] FAULT_INJECTION: forcing a failure. [ 285.513246][T10047] name failslab, interval 1, probability 0, space 0, times 0 [ 285.513309][T10047] CPU: 1 UID: 0 PID: 10047 Comm: syz.5.1317 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.513336][T10047] Tainted: [L]=SOFTLOCKUP [ 285.513342][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.513352][T10047] Call Trace: [ 285.513362][T10047] [ 285.513370][T10047] dump_stack_lvl+0xe8/0x150 [ 285.513400][T10047] should_fail_ex+0x410/0x560 [ 285.513432][T10047] ? __alloc_skb+0x1db/0x7a0 [ 285.513453][T10047] should_failslab+0xa8/0x100 [ 285.513474][T10047] ? __alloc_skb+0x1db/0x7a0 [ 285.513493][T10047] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 285.513517][T10047] ? __alloc_skb+0x18d/0x7a0 [ 285.513539][T10047] ? __alloc_skb+0x1db/0x7a0 [ 285.513566][T10047] __alloc_skb+0x1db/0x7a0 [ 285.513591][T10047] ieee802154_nl_new_reply+0x2e/0x100 [ 285.513617][T10047] ieee802154_add_iface+0x2a6/0x850 [ 285.513642][T10047] ? rcu_is_watching+0x16/0xb0 [ 285.513662][T10047] ? trace_kmalloc+0x2a/0xf0 [ 285.513707][T10047] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 285.513732][T10047] ? __kmalloc_noprof+0x38c/0x720 [ 285.513759][T10047] ? __nla_parse+0x40/0x60 [ 285.513782][T10047] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 285.513805][T10047] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 285.513834][T10047] genl_family_rcv_msg_doit+0x233/0x340 [ 285.513862][T10047] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 285.513895][T10047] ? bpf_lsm_capable+0x9/0x20 [ 285.513919][T10047] ? security_capable+0x7e/0x2c0 [ 285.513953][T10047] genl_rcv_msg+0x614/0x7a0 [ 285.513979][T10047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.513999][T10047] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 285.514038][T10047] netlink_rcv_skb+0x226/0x4a0 [ 285.514065][T10047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.514088][T10047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.514128][T10047] ? down_read+0x2be/0x330 [ 285.514154][T10047] genl_rcv+0x28/0x40 [ 285.514172][T10047] netlink_unicast+0x7bd/0x940 [ 285.514206][T10047] netlink_sendmsg+0x813/0xb40 [ 285.514242][T10047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.514277][T10047] ? apparmor_socket_sendmsg+0x98/0x360 [ 285.514305][T10047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.514331][T10047] sock_sendmsg_nosec+0x13a/0x180 [ 285.514363][T10047] ____sys_sendmsg+0x54e/0x850 [ 285.514391][T10047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.514425][T10047] ? import_iovec+0x73/0xa0 [ 285.514448][T10047] ___sys_sendmsg+0x2a5/0x360 [ 285.514471][T10047] ? __lock_acquire+0x6df/0x2e50 [ 285.514502][T10047] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.514560][T10047] ? __fget_files+0x2a/0x420 [ 285.514582][T10047] ? __fget_files+0x3a2/0x420 [ 285.514613][T10047] __x64_sys_sendmsg+0x1b1/0x290 [ 285.514641][T10047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.514692][T10047] do_syscall_64+0x166/0x520 [ 285.514711][T10047] ? trace_irq_disable+0x3b/0x140 [ 285.514738][T10047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.514757][T10047] ? clear_bhb_loop+0x70/0xc0 [ 285.514781][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.514800][T10047] RIP: 0033:0x7f2c1a19e0d9 [ 285.514819][T10047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.514835][T10047] RSP: 002b:00007f2c1afea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.514856][T10047] RAX: ffffffffffffffda RBX: 00007f2c1a425fa0 RCX: 00007f2c1a19e0d9 [ 285.514871][T10047] RDX: 0000000004040814 RSI: 0000200000000180 RDI: 0000000000000004 [ 285.514884][T10047] RBP: 00007f2c1afea090 R08: 0000000000000000 R09: 0000000000000000 [ 285.514897][T10047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.514909][T10047] R13: 00007f2c1a426038 R14: 00007f2c1a425fa0 R15: 00007fff0d92d5f8 [ 285.514945][T10047] [ 285.906154][T10052] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 286.099832][T10057] block2mtd: illegal erase size [ 286.260588][ T971] usb 1-1: USB disconnect, device number 40 [ 286.405865][ T5709] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 286.554188][ T5709] usb 8-1: Using ep0 maxpacket: 8 [ 286.562243][ T5709] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.582496][ T5709] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 286.582577][ T5709] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.582620][ T5709] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.582649][ T5709] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.582678][ T5709] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.582724][ T5709] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.659352][T10075] FAULT_INJECTION: forcing a failure. [ 286.659352][T10075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.673716][T10075] CPU: 1 UID: 0 PID: 10075 Comm: syz.5.1327 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.673746][T10075] Tainted: [L]=SOFTLOCKUP [ 286.673755][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.673767][T10075] Call Trace: [ 286.673775][T10075] [ 286.673784][T10075] dump_stack_lvl+0xe8/0x150 [ 286.673814][T10075] should_fail_ex+0x410/0x560 [ 286.673848][T10075] _copy_from_iter+0x1d3/0x1660 [ 286.673876][T10075] ? __alloc_skb+0x27a/0x7a0 [ 286.673900][T10075] ? __alloc_skb+0x27a/0x7a0 [ 286.673923][T10075] ? __alloc_skb+0x27a/0x7a0 [ 286.673944][T10075] ? __pfx__copy_from_iter+0x10/0x10 [ 286.673971][T10075] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 286.673996][T10075] ? __alloc_skb+0x27a/0x7a0 [ 286.674015][T10075] ? __alloc_skb+0x27a/0x7a0 [ 286.674042][T10075] ? netlink_sendmsg+0x650/0xb40 [ 286.674069][T10075] ? skb_put+0x112/0x210 [ 286.674094][T10075] netlink_sendmsg+0x6c0/0xb40 [ 286.674141][T10075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.674176][T10075] ? apparmor_socket_sendmsg+0x98/0x360 [ 286.674204][T10075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.674231][T10075] sock_sendmsg_nosec+0x13a/0x180 [ 286.674263][T10075] ____sys_sendmsg+0x54e/0x850 [ 286.674293][T10075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.674323][T10075] ? import_iovec+0x73/0xa0 [ 286.674345][T10075] ___sys_sendmsg+0x2a5/0x360 [ 286.674369][T10075] ? __lock_acquire+0x6df/0x2e50 [ 286.674402][T10075] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.674457][T10075] ? __fget_files+0x2a/0x420 [ 286.674478][T10075] ? __fget_files+0x3a2/0x420 [ 286.674509][T10075] __x64_sys_sendmsg+0x1b1/0x290 [ 286.674537][T10075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.674579][T10075] do_syscall_64+0x166/0x520 [ 286.674598][T10075] ? trace_irq_disable+0x3b/0x140 [ 286.674624][T10075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.674644][T10075] ? clear_bhb_loop+0x70/0xc0 [ 286.674668][T10075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.674688][T10075] RIP: 0033:0x7f2c1a19e0d9 [ 286.674706][T10075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.674724][T10075] RSP: 002b:00007f2c1afea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.674745][T10075] RAX: ffffffffffffffda RBX: 00007f2c1a425fa0 RCX: 00007f2c1a19e0d9 [ 286.674761][T10075] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 286.674774][T10075] RBP: 00007f2c1afea090 R08: 0000000000000000 R09: 0000000000000000 [ 286.674786][T10075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.674799][T10075] R13: 00007f2c1a426038 R14: 00007f2c1a425fa0 R15: 00007fff0d92d5f8 [ 286.674828][T10075] [ 286.823852][ T2252] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 286.866518][ T5709] usb 8-1: usb_control_msg returned -32 [ 286.866566][ T5709] usbtmc 8-1:16.0: can't read capabilities [ 286.975510][ T2252] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 286.979666][ T2252] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.979721][ T2252] usb 7-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.979761][ T2252] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.593240][ T2252] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 287.593266][ T2252] dvb_ttusb_budget: ttusb_init_controller: error [ 287.593600][ T2252] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 287.607975][ T5752] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 287.684586][ T2252] DVB: Unable to find symbol stv0299_attach() [ 287.691158][T10091] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 287.732247][ T2252] DVB: Unable to find symbol tda8083_attach() [ 287.732283][ T2252] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 287.755735][ T5752] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 287.756844][ T5752] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.756899][ T5752] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.756937][ T5752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.898782][ T192] usb 8-1: USB disconnect, device number 25 [ 288.355370][T10096] FAULT_INJECTION: forcing a failure. [ 288.355370][T10096] name failslab, interval 1, probability 0, space 0, times 0 [ 288.372077][T10096] CPU: 1 UID: 0 PID: 10096 Comm: syz.6.1326 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.372111][T10096] Tainted: [L]=SOFTLOCKUP [ 288.372118][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.372131][T10096] Call Trace: [ 288.372141][T10096] [ 288.372150][T10096] dump_stack_lvl+0xe8/0x150 [ 288.372185][T10096] should_fail_ex+0x410/0x560 [ 288.372220][T10096] should_failslab+0xa8/0x100 [ 288.372243][T10096] __kmalloc_cache_noprof+0xa3/0x600 [ 288.372271][T10096] ? dummy_urb_enqueue+0x7c/0x780 [ 288.372298][T10096] ? dummy_urb_enqueue+0x7c/0x780 [ 288.372332][T10096] dummy_urb_enqueue+0x7c/0x780 [ 288.372358][T10096] ? usb_hcd_map_urb_for_dma+0x435/0xc50 [ 288.372391][T10096] usb_hcd_submit_urb+0x328/0x1b60 [ 288.372431][T10096] usb_start_wait_urb+0x13f/0x5b0 [ 288.372454][T10096] ? __kmalloc_noprof+0x38c/0x720 [ 288.372480][T10096] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 288.372498][T10096] ? usb_alloc_urb+0x46/0x150 [ 288.372537][T10096] ? usb_bulk_msg+0x2bb/0x550 [ 288.372564][T10096] ttusb_cmd+0x152/0x440 [ 288.372589][T10096] ? __pfx_ttusb_cmd+0x10/0x10 [ 288.372611][T10096] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 288.372640][T10096] ? master_xfer+0x360/0x680 [ 288.372666][T10096] master_xfer+0x385/0x680 [ 288.372701][T10096] ? __pfx_master_xfer+0x10/0x10 [ 288.372729][T10096] ? kasan_save_track+0x4f/0x80 [ 288.372756][T10096] ? kasan_save_track+0x3e/0x80 [ 288.372782][T10096] ? kasan_save_free_info+0x40/0x50 [ 288.372805][T10096] ? kfree+0x1c5/0x650 [ 288.372826][T10096] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 288.372852][T10096] ? security_file_ioctl+0xc3/0x2a0 [ 288.372875][T10096] ? __se_sys_ioctl+0x47/0x170 [ 288.372905][T10096] __i2c_transfer+0x7bf/0x1fe0 [ 288.372943][T10096] __i2c_smbus_xfer+0x159a/0x27e0 [ 288.372993][T10096] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 288.373043][T10096] ? rt_mutex_lock_nested+0x156/0x1c0 [ 288.373072][T10096] i2c_smbus_xfer+0x1f5/0x310 [ 288.373103][T10096] i2cdev_ioctl_smbus+0x407/0x700 [ 288.373132][T10096] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 288.373171][T10096] i2cdev_ioctl+0x615/0x880 [ 288.373191][T10096] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 288.373212][T10096] ? __fget_files+0x2a/0x420 [ 288.373234][T10096] ? __fget_files+0x3a2/0x420 [ 288.373263][T10096] ? bpf_lsm_file_ioctl+0x9/0x20 [ 288.373287][T10096] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 288.373307][T10096] __se_sys_ioctl+0xfc/0x170 [ 288.373338][T10096] do_syscall_64+0x166/0x520 [ 288.373358][T10096] ? trace_irq_disable+0x3b/0x140 [ 288.373385][T10096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.373406][T10096] ? clear_bhb_loop+0x70/0xc0 [ 288.373431][T10096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.373451][T10096] RIP: 0033:0x7f99bd59e0d9 [ 288.373470][T10096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.373487][T10096] RSP: 002b:00007f99be52c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.373509][T10096] RAX: ffffffffffffffda RBX: 00007f99bd826090 RCX: 00007f99bd59e0d9 [ 288.373524][T10096] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 288.373538][T10096] RBP: 00007f99be52c090 R08: 0000000000000000 R09: 0000000000000000 [ 288.373550][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.373563][T10096] R13: 00007f99bd826128 R14: 00007f99bd826090 R15: 00007ffde55ab748 [ 288.373596][T10096] [ 288.376854][ T5752] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 288.376869][ T5752] dvb_ttusb_budget: ttusb_init_controller: error [ 288.376880][ T5752] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 288.576831][ T5752] DVB: Unable to find symbol stv0299_attach() [ 288.795732][ T5752] DVB: Unable to find symbol tda8083_attach() [ 288.795768][ T5752] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 289.003747][ T971] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 289.164554][ T971] usb 6-1: Using ep0 maxpacket: 16 [ 289.170350][ T971] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 289.182255][ T971] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 289.190499][ T971] usb 6-1: config 0 has no interface number 0 [ 289.190544][ T971] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 289.190570][ T971] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 289.213887][ T5752] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 289.232872][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.240979][ T971] usb 6-1: Product: syz [ 289.245407][ T971] usb 6-1: Manufacturer: syz [ 289.250202][ T971] usb 6-1: SerialNumber: syz [ 289.257670][ T971] usb 6-1: config 0 descriptor?? [ 289.263435][T10102] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 289.272551][T10102] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 289.364268][ T5752] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 289.365203][ T5752] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.365255][ T5752] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.365294][ T5752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.455742][ T5709] usb 7-1: USB disconnect, device number 31 [ 289.486388][T10102] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 289.494177][T10102] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 289.703080][ T971] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 289.777517][ T5752] dvb_ttusb_budget: ttusb_init_controller: error [ 289.777556][ T5752] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 289.838834][ T5752] DVB: Unable to find symbol stv0299_attach() [ 289.878230][ T5752] DVB: Unable to find symbol tda8083_attach() [ 289.878265][ T5752] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 290.132205][T10115] FAULT_INJECTION: forcing a failure. [ 290.132205][T10115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.146138][T10115] CPU: 1 UID: 0 PID: 10115 Comm: syz.7.1337 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.146170][T10115] Tainted: [L]=SOFTLOCKUP [ 290.146178][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.146191][T10115] Call Trace: [ 290.146199][T10115] [ 290.146208][T10115] dump_stack_lvl+0xe8/0x150 [ 290.146240][T10115] should_fail_ex+0x410/0x560 [ 290.146275][T10115] _copy_to_user+0x31/0xb0 [ 290.146298][T10115] simple_read_from_buffer+0xe1/0x170 [ 290.146326][T10115] proc_fail_nth_read+0x1bb/0x230 [ 290.146352][T10115] ? common_file_perm+0x20e/0x2b0 [ 290.146382][T10115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.146412][T10115] ? rw_verify_area+0x24a/0x4c0 [ 290.146439][T10115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.146466][T10115] vfs_read+0x213/0xa80 [ 290.146495][T10115] ? __pfx___mutex_lock+0x10/0x10 [ 290.146518][T10115] ? __pfx_vfs_read+0x10/0x10 [ 290.146544][T10115] ? __fget_files+0x2a/0x420 [ 290.146571][T10115] ? __fget_files+0x3a2/0x420 [ 290.146593][T10115] ? __fget_files+0x2a/0x420 [ 290.146623][T10115] ksys_read+0x150/0x270 [ 290.146651][T10115] ? __pfx_ksys_read+0x10/0x10 [ 290.146687][T10115] do_syscall_64+0x166/0x520 [ 290.146706][T10115] ? trace_irq_disable+0x3b/0x140 [ 290.146733][T10115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.146754][T10115] ? clear_bhb_loop+0x70/0xc0 [ 290.146778][T10115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.146799][T10115] RIP: 0033:0x7fbbb515e90e [ 290.146825][T10115] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 290.146842][T10115] RSP: 002b:00007fbbb611ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.146865][T10115] RAX: ffffffffffffffda RBX: 00007fbbb61206c0 RCX: 00007fbbb515e90e [ 290.146880][T10115] RDX: 000000000000000f RSI: 00007fbbb61200a0 RDI: 0000000000000004 [ 290.146895][T10115] RBP: 00007fbbb6120090 R08: 0000000000000000 R09: 0000000000000000 [ 290.146908][T10115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.146920][T10115] R13: 00007fbbb5426128 R14: 00007fbbb5426090 R15: 00007ffc493add88 [ 290.146952][T10115] [ 290.331493][ T5752] usb 8-1: USB disconnect, device number 26 [ 290.416939][ T5616] usb 1-1: USB disconnect, device number 41 [ 290.535936][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1340'. [ 290.753712][ T5709] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 290.774248][ T5752] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 290.915973][ T5709] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6 [ 290.924461][ T5752] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 290.925461][ T5752] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.925513][ T5752] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 290.925552][ T5752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.969729][ T5709] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.980016][ T5709] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 290.980065][ T5709] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 290.980089][ T5709] usb 7-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 290.980109][ T5709] usb 7-1: config 0 interface 0 has no altsetting 1 [ 290.980142][ T5709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.026624][ T5709] usb 7-1: config 0 descriptor?? [ 291.162435][ T971] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 291.172644][ T971] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 291.183305][ T971] asix 6-1:0.34: probe with driver asix failed with error -71 [ 291.204416][ T971] usb 6-1: USB disconnect, device number 39 [ 291.238675][ T2252] usb 7-1: USB disconnect, device number 32 [ 291.349277][ T5752] dvb_ttusb_budget: ttusb_init_controller: error [ 291.349333][ T5752] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 291.471400][ T5752] DVB: Unable to find symbol stv0299_attach() [ 291.538001][ T5752] DVB: Unable to find symbol tda8083_attach() [ 291.538043][ T5752] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 291.674673][T10134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1344'. [ 291.674736][T10134] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 291.708715][ T2252] usb 8-1: USB disconnect, device number 27 [ 291.913767][ T5752] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 292.064983][ T5752] usb 1-1: Using ep0 maxpacket: 16 [ 292.066600][ T5752] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 292.068322][ T5752] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.068343][ T5752] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.069578][ T5752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 292.069600][ T5752] usb 1-1: SerialNumber: syz [ 292.102072][ T5752] usb 1-1: 0:2 : does not exist [ 292.254286][ T5616] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 292.426661][ T5616] usb 7-1: not running at top speed; connect to a high speed hub [ 292.426710][ T5616] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 292.444427][ T5616] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.444493][ T5616] usb 7-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 292.444560][ T5616] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.485517][ T5616] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 292.507579][ T5616] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 292.519482][ T5616] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 292.527438][ T5616] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 292.545112][ T5616] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 292.563761][ T2252] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 292.689701][T10143] CIFS: VFS: bad security option: krb5iż [ 292.700394][ T192] usb 7-1: USB disconnect, device number 33 [ 292.716131][ T2252] usb 8-1: Using ep0 maxpacket: 16 [ 292.719625][ T2252] usb 8-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 292.723437][ T2252] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.723461][ T2252] usb 8-1: Product: syz [ 292.723475][ T2252] usb 8-1: Manufacturer: syz [ 292.723489][ T2252] usb 8-1: SerialNumber: syz [ 292.727487][ T192] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 292.753111][ T192] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 292.762696][ T192] keyspan 7-1:1.0: device disconnected [ 293.030671][ T5752] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 293.080475][ T2252] usb 8-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 293.080569][ T2252] usb 8-1: MIDIStreaming interface descriptor not found [ 293.089819][ T5752] usb 1-1: USB disconnect, device number 42 [ 293.343265][ T2252] usb 8-1: USB disconnect, device number 28 [ 293.514800][ T4934] Bluetooth: hci5: command 0x0406 tx timeout [ 293.719397][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 294.123589][T10179] FAULT_INJECTION: forcing a failure. [ 294.123589][T10179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.123732][T10179] CPU: 0 UID: 0 PID: 10179 Comm: syz.6.1358 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.123757][T10179] Tainted: [L]=SOFTLOCKUP [ 294.123765][T10179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.123777][T10179] Call Trace: [ 294.123785][T10179] [ 294.123794][T10179] dump_stack_lvl+0xe8/0x150 [ 294.123824][T10179] should_fail_ex+0x410/0x560 [ 294.123857][T10179] _copy_to_user+0x31/0xb0 [ 294.123879][T10179] simple_read_from_buffer+0xe1/0x170 [ 294.123907][T10179] proc_fail_nth_read+0x1bb/0x230 [ 294.123932][T10179] ? common_file_perm+0x20e/0x2b0 [ 294.123962][T10179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.123990][T10179] ? rw_verify_area+0x24a/0x4c0 [ 294.124016][T10179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.124041][T10179] vfs_read+0x213/0xa80 [ 294.124069][T10179] ? __pfx___mutex_lock+0x10/0x10 [ 294.124091][T10179] ? __pfx_vfs_read+0x10/0x10 [ 294.124116][T10179] ? __fget_files+0x2a/0x420 [ 294.124142][T10179] ? __fget_files+0x3a2/0x420 [ 294.124163][T10179] ? __fget_files+0x2a/0x420 [ 294.124192][T10179] ksys_read+0x150/0x270 [ 294.124218][T10179] ? __pfx_ksys_read+0x10/0x10 [ 294.124253][T10179] do_syscall_64+0x166/0x520 [ 294.124273][T10179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.124293][T10179] ? clear_bhb_loop+0x70/0xc0 [ 294.124320][T10179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.124340][T10179] RIP: 0033:0x7f99bd55e90e [ 294.124357][T10179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.124374][T10179] RSP: 002b:00007f99be54cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.124395][T10179] RAX: ffffffffffffffda RBX: 00007f99be54d6c0 RCX: 00007f99bd55e90e [ 294.124409][T10179] RDX: 000000000000000f RSI: 00007f99be54d0a0 RDI: 0000000000000004 [ 294.124422][T10179] RBP: 00007f99be54d090 R08: 0000000000000000 R09: 0000000000000000 [ 294.124435][T10179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.124447][T10179] R13: 00007f99bd826038 R14: 00007f99bd825fa0 R15: 00007ffde55ab748 [ 294.124487][T10179] [ 294.223769][ T2252] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 294.344531][ T5752] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 294.384442][ T2252] usb 6-1: Using ep0 maxpacket: 8 [ 294.385801][ T2252] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 294.387053][ T2252] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 294.387076][ T2252] usb 6-1: config 0 has no interface number 0 [ 294.387102][ T2252] usb 6-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 294.387136][ T2252] usb 6-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 294.387162][ T2252] usb 6-1: config 0 interface 48 has no altsetting 0 [ 294.387192][ T2252] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.392680][ T2252] usb 6-1: config 0 descriptor?? [ 294.474249][ T5752] usb 8-1: device descriptor read/64, error -71 [ 294.594934][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.598833][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.607503][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.610786][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.611836][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.613349][T10190] FAULT_INJECTION: forcing a failure. [ 294.613349][T10190] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 294.613383][T10190] CPU: 0 UID: 0 PID: 10190 Comm: syz.0.1363 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.613416][T10190] Tainted: [L]=SOFTLOCKUP [ 294.613423][T10190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.613435][T10190] Call Trace: [ 294.613443][T10190] [ 294.613452][T10190] dump_stack_lvl+0xe8/0x150 [ 294.613482][T10190] should_fail_ex+0x410/0x560 [ 294.613514][T10190] prepare_alloc_pages+0x223/0x600 [ 294.613548][T10190] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 294.613580][T10190] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.613612][T10190] ? __pfx_policy_nodemask+0x10/0x10 [ 294.613630][T10190] ? __dev_queue_xmit+0x29b/0x3820 [ 294.613656][T10190] ? __local_bh_enable_ip+0xd6/0x140 [ 294.613682][T10190] ? __lock_acquire+0x6df/0x2e50 [ 294.613712][T10190] alloc_pages_mpol+0x21e/0x390 [ 294.613737][T10190] folio_alloc_mpol_noprof+0x39/0x160 [ 294.613761][T10190] vma_alloc_folio_noprof+0xe1/0x1e0 [ 294.613784][T10190] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 294.613807][T10190] ? lock_acquire+0x115/0x350 [ 294.613839][T10190] do_pte_missing+0x173a/0x34b0 [ 294.613882][T10190] handle_mm_fault+0x1a53/0x3750 [ 294.613913][T10190] ? handle_mm_fault+0xf1/0x3750 [ 294.613945][T10190] ? __pfx_handle_mm_fault+0x10/0x10 [ 294.613978][T10190] ? __lock_acquire+0x6df/0x2e50 [ 294.614009][T10190] ? lock_mm_and_find_vma+0xa7/0x340 [ 294.614037][T10190] do_user_addr_fault+0x746/0x1340 [ 294.614079][T10190] exc_page_fault+0x6a/0xc0 [ 294.614099][T10190] asm_exc_page_fault+0x26/0x30 [ 294.614118][T10190] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 294.614143][T10190] Code: 6e 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 294.614159][T10190] RSP: 0018:ffffc900033874f8 EFLAGS: 00050206 [ 294.614178][T10190] RAX: ffff88801ea8c001 RBX: ffff88801ea8c193 RCX: 0000000000000329 [ 294.614193][T10190] RDX: 0000000000000000 RSI: ffff88801ea8cb53 RDI: 0000200000002000 [ 294.614206][T10190] RBP: ffffc90003387670 R08: ffff88801ea8ce7b R09: 1ffff11003d519cf [ 294.614220][T10190] R10: dffffc0000000000 R11: ffffed1003d519d0 R12: dffffc0000000000 [ 294.614235][T10190] R13: 0000000000000ce9 R14: 0000200000002329 R15: 00007ffffffff000 [ 294.614264][T10190] _copy_to_iter+0x619/0x1810 [ 294.614306][T10190] ? __pfx__copy_to_iter+0x10/0x10 [ 294.614334][T10190] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 294.614364][T10190] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 294.614392][T10190] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 294.614429][T10190] __skb_datagram_iter+0xf8/0x980 [ 294.614452][T10190] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 294.614472][T10190] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 294.614507][T10190] skb_copy_datagram_iter+0xb5/0x240 [ 294.614537][T10190] netlink_recvmsg+0x2b9/0xa50 [ 294.614574][T10190] ? __pfx_netlink_recvmsg+0x10/0x10 [ 294.614599][T10190] ? lock_acquire+0x115/0x350 [ 294.614628][T10190] ? aa_sock_msg_perm+0x144/0x210 [ 294.614660][T10190] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 294.614680][T10190] ? security_socket_recvmsg+0x7e/0x2c0 [ 294.614702][T10190] ? __pfx_netlink_recvmsg+0x10/0x10 [ 294.614730][T10190] sock_recvmsg+0x196/0x1e0 [ 294.614761][T10190] ____sys_recvmsg+0x1e6/0x4a0 [ 294.614794][T10190] ? __pfx_____sys_recvmsg+0x10/0x10 [ 294.614834][T10190] ? import_iovec+0x73/0xa0 [ 294.614856][T10190] ___sys_recvmsg+0x213/0x5a0 [ 294.614886][T10190] ? __pfx____sys_recvmsg+0x10/0x10 [ 294.614916][T10190] ? lock_acquire+0x115/0x350 [ 294.614957][T10190] ? __fget_files+0x3a2/0x420 [ 294.614990][T10190] do_recvmmsg+0x31a/0x7f0 [ 294.615023][T10190] ? __pfx_do_recvmmsg+0x10/0x10 [ 294.615059][T10190] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.615081][T10190] ? __fget_files+0x3a2/0x420 [ 294.615112][T10190] __x64_sys_recvmmsg+0x198/0x250 [ 294.615141][T10190] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 294.615177][T10190] do_syscall_64+0x166/0x520 [ 294.615197][T10190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.615217][T10190] ? clear_bhb_loop+0x70/0xc0 [ 294.615241][T10190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.615260][T10190] RIP: 0033:0x7f6e9519e0d9 [ 294.615277][T10190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.615293][T10190] RSP: 002b:00007f6e9607e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 294.615313][T10190] RAX: ffffffffffffffda RBX: 00007f6e95425fa0 RCX: 00007f6e9519e0d9 [ 294.615326][T10190] RDX: 0000000000000007 RSI: 0000200000008d80 RDI: 0000000000000003 [ 294.615339][T10190] RBP: 00007f6e9607e090 R08: 0000000000000000 R09: 0000000000000000 [ 294.615351][T10190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.615363][T10190] R13: 00007f6e95426038 R14: 00007f6e95425fa0 R15: 00007ffc9f9e0248 [ 294.615393][T10190] [ 294.619368][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.620299][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.624168][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.625146][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.633364][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.670185][ T2252] usb 6-1: string descriptor 0 read error: -71 [ 294.671186][ T2252] usb-storage 6-1:0.48: USB Mass Storage device detected [ 294.693516][ T2252] usb-storage 6-1:0.48: device ignored [ 294.714650][ T5752] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 294.780703][ T2252] usb 6-1: USB disconnect, device number 40 [ 294.844027][ T5752] usb 8-1: device descriptor read/64, error -71 [ 294.954151][ T5752] usb usb8-port1: attempt power cycle [ 295.293785][ T5752] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 295.317483][ T5752] usb 8-1: device descriptor read/8, error -71 [ 295.555052][ T5752] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 295.576423][ T5752] usb 8-1: device descriptor read/8, error -71 [ 295.684115][ T5752] usb usb8-port1: unable to enumerate USB device [ 295.853476][T10212] CIFS: Attempting to mount //127.0.0.1/share [ 296.024425][T10220] vivid-001: ================= START STATUS ================= [ 296.024495][T10220] vivid-001: ================== END STATUS ================== [ 296.044382][ T5752] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 296.143801][ T192] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 296.195587][ T5752] usb 7-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40 [ 296.196891][ T5752] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 296.196921][ T5752] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 296.196958][ T5752] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 296.294739][ T192] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 296.297625][ T192] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.297673][ T192] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.297714][ T192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.509951][ T192] usb 6-1: usb_control_msg returned -32 [ 296.510046][ T192] usbtmc 6-1:16.0: can't read capabilities [ 296.649873][T10228] FAULT_INJECTION: forcing a failure. [ 296.649873][T10228] name failslab, interval 1, probability 0, space 0, times 0 [ 296.650056][T10228] CPU: 0 UID: 0 PID: 10228 Comm: syz.0.1377 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.650085][T10228] Tainted: [L]=SOFTLOCKUP [ 296.650092][T10228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.650101][T10228] Call Trace: [ 296.650108][T10228] [ 296.650116][T10228] dump_stack_lvl+0xe8/0x150 [ 296.650146][T10228] should_fail_ex+0x410/0x560 [ 296.650179][T10228] should_failslab+0xa8/0x100 [ 296.650198][T10228] ? do_getname+0x2e/0x250 [ 296.650218][T10228] kmem_cache_alloc_noprof+0xa1/0x600 [ 296.650245][T10228] ? do_getname+0x2e/0x250 [ 296.650269][T10228] do_getname+0x2e/0x250 [ 296.650286][T10228] ? user_path_at+0x1e/0x160 [ 296.650311][T10228] user_path_at+0x2a/0x160 [ 296.650341][T10228] __se_sys_mount+0x2dc/0x420 [ 296.650370][T10228] ? __pfx___se_sys_mount+0x10/0x10 [ 296.650397][T10228] ? __x64_sys_mount+0x20/0xc0 [ 296.650421][T10228] do_syscall_64+0x166/0x520 [ 296.650442][T10228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.650462][T10228] ? clear_bhb_loop+0x70/0xc0 [ 296.650486][T10228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.650505][T10228] RIP: 0033:0x7f6e9519e0d9 [ 296.650523][T10228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.650540][T10228] RSP: 002b:00007f6e9607e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 296.650562][T10228] RAX: ffffffffffffffda RBX: 00007f6e95425fa0 RCX: 00007f6e9519e0d9 [ 296.650577][T10228] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 296.650591][T10228] RBP: 00007f6e9607e090 R08: 0000200000000500 R09: 0000000000000000 [ 296.650604][T10228] R10: 000000000100c010 R11: 0000000000000246 R12: 0000000000000001 [ 296.650616][T10228] R13: 00007f6e95426038 R14: 00007f6e95425fa0 R15: 00007ffc9f9e0248 [ 296.650645][T10228] [ 297.260807][T10236] tipc: Started in network mode [ 297.260860][T10236] tipc: Node identity ac14140f, cluster identity 4711 [ 297.283681][T10236] tipc: New replicast peer: 172.30.0.8 [ 297.284037][T10236] tipc: Enabled bearer , priority 10 [ 297.296910][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1380'. [ 297.307026][T10236] tipc: Disabling bearer [ 297.573725][ T971] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 297.723725][ T971] usb 8-1: Using ep0 maxpacket: 8 [ 297.729392][ T971] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 297.739624][ T971] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.739683][ T971] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 297.739726][ T971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 297.739757][ T971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 297.739788][ T971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 297.739817][ T971] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.810810][ T971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.810850][ T971] usb 8-1: Product: syz [ 297.810886][ T971] usb 8-1: Manufacturer: syz [ 297.810905][ T971] usb 8-1: SerialNumber: syz [ 297.837527][ T971] usb 8-1: config 0 descriptor?? [ 297.843300][T10236] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 298.633747][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 298.788003][ T5752] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.812715][ T5752] usb 7-1: can't set config #1, error -71 [ 298.819691][T10212] CIFS: VFS: cifs_mount failed w/return code = -512 [ 298.821626][ T5752] usb 7-1: USB disconnect, device number 34 [ 298.917962][ T192] usb 6-1: USB disconnect, device number 41 [ 298.987795][T10242] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1383'. [ 299.094549][T10244] FAULT_INJECTION: forcing a failure. [ 299.094549][T10244] name failslab, interval 1, probability 0, space 0, times 0 [ 299.094612][T10244] CPU: 0 UID: 0 PID: 10244 Comm: syz.7.1384 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.094639][T10244] Tainted: [L]=SOFTLOCKUP [ 299.094646][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.094661][T10244] Call Trace: [ 299.094671][T10244] [ 299.094680][T10244] dump_stack_lvl+0xe8/0x150 [ 299.094709][T10244] should_fail_ex+0x410/0x560 [ 299.094744][T10244] should_failslab+0xa8/0x100 [ 299.094767][T10244] __kmalloc_cache_noprof+0xa3/0x600 [ 299.094795][T10244] ? comedi_8254_io_alloc+0xb0/0x290 [ 299.094822][T10244] ? comedi_8254_io_alloc+0xb0/0x290 [ 299.094855][T10244] comedi_8254_io_alloc+0xb0/0x290 [ 299.094881][T10244] ? __pfx_i8254_io8_cb+0x10/0x10 [ 299.094905][T10244] ? comedi_check_request_region+0x61/0xc0 [ 299.094932][T10244] pcl711_attach+0x1f1/0xc30 [ 299.094961][T10244] comedi_device_attach+0x52d/0x720 [ 299.094990][T10244] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 299.095042][T10244] ? kasan_quarantine_put+0xbb/0x1f0 [ 299.095068][T10244] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 299.095111][T10244] ? do_vfs_ioctl+0x116f/0x1530 [ 299.095140][T10244] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 299.095177][T10244] ? hook_file_ioctl+0x1f2/0x600 [ 299.095220][T10244] ? __fget_files+0x2a/0x420 [ 299.095245][T10244] ? __fget_files+0x2a/0x420 [ 299.095266][T10244] ? __fget_files+0x3a2/0x420 [ 299.095288][T10244] ? __fget_files+0x2a/0x420 [ 299.095312][T10244] ? bpf_lsm_file_ioctl+0x9/0x20 [ 299.095335][T10244] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 299.095363][T10244] __se_sys_ioctl+0xfc/0x170 [ 299.095391][T10244] do_syscall_64+0x166/0x520 [ 299.095410][T10244] ? trace_irq_disable+0x3b/0x140 [ 299.095438][T10244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.095459][T10244] ? clear_bhb_loop+0x70/0xc0 [ 299.095483][T10244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.095503][T10244] RIP: 0033:0x7fbbb519e0d9 [ 299.095522][T10244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.095539][T10244] RSP: 002b:00007fbbb6141028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.095561][T10244] RAX: ffffffffffffffda RBX: 00007fbbb5425fa0 RCX: 00007fbbb519e0d9 [ 299.095576][T10244] RDX: 00002000000000c0 RSI: 00000000409464 ** replaying previous printk message ** [ 299.095576][T10244] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 299.095588][T10244] RBP: 00007fbbb6141090 R08: 0000000000000000 R09: 0000000000000000 [ 299.095600][T10244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.095612][T10244] R13: 00007fbbb5426038 R14: 00007fbbb5425fa0 R15: 00007ffc493add88 [ 299.095645][T10244] [ 299.276448][T10246] input: syz1 as /devices/virtual/input/input26 [ 299.300848][T10248] ================================================================== [ 299.300864][T10248] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 299.300895][T10248] Read of size 1 at addr ffff88802bcc7758 by task syz.5.1385/10248 [ 299.300912][T10248] [ 299.300924][T10248] CPU: 0 UID: 0 PID: 10248 Comm: syz.5.1385 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.300951][T10248] Tainted: [L]=SOFTLOCKUP [ 299.300959][T10248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.300971][T10248] Call Trace: [ 299.300986][T10248] [ 299.300995][T10248] dump_stack_lvl+0xe8/0x150 [ 299.301021][T10248] print_address_description+0x55/0x1e0 [ 299.301049][T10248] ? string+0x216/0x2d0 [ 299.301073][T10248] print_report+0x58/0x70 [ 299.301096][T10248] kasan_report+0x117/0x150 [ 299.301116][T10248] ? string+0x216/0x2d0 [ 299.301145][T10248] string+0x216/0x2d0 [ 299.301171][T10248] vsnprintf+0x74a/0xef0 [ 299.301200][T10248] seq_printf+0x188/0x290 [ 299.301219][T10248] ? __kmalloc_noprof+0x38c/0x720 [ 299.301247][T10248] ? __pfx_seq_printf+0x10/0x10 [ 299.301264][T10248] ? __asan_memcpy+0x40/0x70 [ 299.301293][T10248] input_devices_seq_show+0x10f/0x640 [ 299.301316][T10248] seq_read_iter+0x8d5/0xca0 [ 299.301350][T10248] seq_read+0x367/0x480 [ 299.301381][T10248] ? __pfx_seq_read+0x10/0x10 [ 299.301407][T10248] ? __mutex_trylock_common+0x15f/0x270 [ 299.301436][T10248] ? common_file_perm+0x20e/0x2b0 [ 299.301481][T10248] ? __pfx_seq_read+0x10/0x10 [ 299.301507][T10248] proc_reg_read+0x1e9/0x2e0 [ 299.301536][T10248] ? __pfx_proc_reg_read+0x10/0x10 [ 299.301563][T10248] vfs_read+0x213/0xa80 [ 299.301589][T10248] ? __pfx___mutex_lock+0x10/0x10 [ 299.301609][T10248] ? __pfx_vfs_read+0x10/0x10 [ 299.301633][T10248] ? __fget_files+0x2a/0x420 [ 299.301656][T10248] ? __fget_files+0x3a2/0x420 [ 299.301676][T10248] ? __fget_files+0x2a/0x420 [ 299.301701][T10248] ksys_read+0x150/0x270 [ 299.301725][T10248] ? __pfx_ksys_read+0x10/0x10 [ 299.301752][T10248] do_syscall_64+0x166/0x520 [ 299.301771][T10248] ? trace_irq_disable+0x3b/0x140 [ 299.301798][T10248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.301818][T10248] ? clear_bhb_loop+0x70/0xc0 [ 299.301840][T10248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.301858][T10248] RIP: 0033:0x7f2c1a19e0d9 [ 299.301876][T10248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.301894][T10248] RSP: 002b:00007f2c1afc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.301915][T10248] RAX: ffffffffffffffda RBX: 00007f2c1a426090 RCX: 00007f2c1a19e0d9 [ 299.301931][T10248] RDX: 0000000000002020 RSI: 0000200000000300 RDI: 0000000000000004 [ 299.301944][T10248] RBP: 00007f2c1a235024 R08: 0000000000000000 R09: 0000000000000000 [ 299.301957][T10248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.301969][T10248] R13: 00007f2c1a426128 R14: 00007f2c1a426090 R15: 00007fff0d92d5f8 [ 299.301998][T10248] [ 299.302006][T10248] [ 299.302018][T10248] Allocated by task 50: [ 299.302028][T10248] kasan_save_track+0x3e/0x80 [ 299.302055][T10248] __kasan_kmalloc+0x93/0xb0 [ 299.302080][T10248] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 299.302107][T10248] __alloc_skb+0x2c1/0x7a0 [ 299.302126][T10248] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 299.302154][T10248] unregister_netdevice_many_notify+0x1880/0x2140 [ 299.302182][T10248] ops_undo_list+0x391/0x8d0 [ 299.302200][T10248] cleanup_net+0x572/0x810 [ 299.302219][T10248] process_scheduled_works+0xc3d/0x1630 [ 299.302239][T10248] worker_thread+0xa47/0xfb0 [ 299.302258][T10248] kthread+0x38b/0x480 [ 299.302281][T10248] ret_from_fork+0x514/0xb70 [ 299.302305][T10248] ret_from_fork_asm+0x1a/0x30 [ 299.302329][T10248] [ 299.302333][T10248] Freed by task 50: [ 299.302342][T10248] kasan_save_track+0x3e/0x80 [ 299.302367][T10248] kasan_save_free_info+0x40/0x50 [ 299.302387][T10248] __kasan_slab_free+0x5c/0x80 [ 299.302413][T10248] kfree+0x1c5/0x650 [ 299.302432][T10248] skb_release_data+0x85e/0xab0 [ 299.302453][T10248] __kfree_skb+0x5d/0x210 [ 299.302472][T10248] netlink_broadcast_filtered+0xd9d/0xea0 [ 299.302495][T10248] nlmsg_notify+0xe3/0x1a0 [ 299.302518][T10248] unregister_netdevice_many_notify+0x1b3d/0x2140 [ 299.302545][T10248] ops_undo_list+0x391/0x8d0 [ 299.302563][T10248] cleanup_net+0x572/0x810 [ 299.302581][T10248] process_scheduled_works+0xc3d/0x1630 [ 299.302599][T10248] worker_thread+0xa47/0xfb0 [ 299.302619][T10248] kthread+0x38b/0x480 [ 299.302643][T10248] ret_from_fork+0x514/0xb70 [ 299.302665][T10248] ret_from_fork_asm+0x1a/0x30 [ 299.302687][T10248] [ 299.302692][T10248] The buggy address belongs to the object at ffff88802bcc7000 [ 299.302692][T10248] which belongs to the cache kmalloc-2k of size 2048 [ 299.302709][T10248] The buggy address is located 1880 bytes inside of [ 299.302709][T10248] freed 2048-byte region [ffff88802bcc7000, ffff88802bcc7800) [ 299.302729][T10248] [ 299.302734][T10248] The buggy address belongs to the physical page: [ 299.302749][T10248] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802bcc0000 pfn:0x2bcc0 [ 299.302773][T10248] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 299.302789][T10248] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 299.302808][T10248] page_type: f5(slab) [ 299.302830][T10248] raw: 00fff00000000240 ffff88813ff16000 ffffea0000d26810 ffffea0000d21810 [ 299.302847][T10248] raw: ffff88802bcc0000 0000000000080005 00000000f5000000 0000000000000000 [ 299.302866][T10248] head: 00fff00000000240 ffff88813ff16000 ffffea0000d26810 ffffea0000d21810 [ 299.302884][T10248] head: ffff88802bcc0000 0000000000080005 00000000f5000000 0000000000000000 [ 299.302899][T10248] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 299.302915][T10248] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 299.302926][T10248] page dumped because: kasan: bad access detected [ 299.302936][T10248] page_owner tracks the page as allocated [ 299.302947][T10248] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7710, tgid 7710 (syz.2.730), ts 156330170383 [ 299.302990][T10248] post_alloc_hook+0x1f9/0x250 [ 299.303013][T10248] get_page_from_freelist+0x2209/0x2280 [ 299.303040][T10248] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 299.303066][T10248] allocate_slab+0x7d/0x620 [ 299.303085][T10248] refill_objects+0x2d5/0x350 [ 299.303102][T10248] __pcs_replace_empty_main+0x2c8/0x6c0 [ 299.303120][T10248] __kmalloc_node_track_caller_noprof+0x548/0x720 [ 299.303146][T10248] __alloc_skb+0x2c1/0x7a0 [ 299.303163][T10248] sctp_packet_transmit+0xf54/0x2bb0 [ 299.303183][T10248] sctp_outq_flush+0x2ec6/0x3380 [ 299.303203][T10248] sctp_do_sm+0x55bb/0x5de0 [ 299.303224][T10248] sctp_assoc_bh_rcv+0x401/0x6f0 [ 299.303245][T10248] sctp_backlog_rcv+0x15c/0x370 [ 299.303264][T10248] __release_sock+0x28b/0x390 [ 299.303287][T10248] release_sock+0x190/0x260 [ 299.303303][T10248] sctp_close+0x6a5/0x8d0 [ 299.303318][T10248] page last free pid 31 tgid 31 ts 156094033365 stack trace: [ 299.303331][T10248] __free_frozen_pages+0xc93/0xd90 [ 299.303354][T10248] __slab_free+0x274/0x2c0 [ 299.303377][T10248] qlist_free_all+0x99/0x100 [ 299.303401][T10248] kasan_quarantine_reduce+0x148/0x160 [ 299.303424][T10248] __kasan_slab_alloc+0x22/0x80 [ 299.303450][T10248] __kmalloc_cache_noprof+0x29f/0x600 [ 299.303474][T10248] usb_control_msg+0x73/0x3e0 [ 299.303491][T10248] hub_ext_port_status+0x112/0x840 [ 299.303516][T10248] hub_port_debounce+0x21e/0x330 [ 299.303533][T10248] hub_event+0x1c57/0x4d30 [ 299.303552][T10248] process_scheduled_works+0xc3d/0x1630 [ 299.303571][T10248] worker_thread+0xa47/0xfb0 [ 299.303591][T10248] kthread+0x38b/0x480 [ 299.303614][T10248] ret_from_fork+0x514/0xb70 [ 299.303637][T10248] ret_from_fork_asm+0x1a/0x30 [ 299.303660][T10248] [ 299.303665][T10248] Memory state around the buggy address: [ 299.303675][T10248] ffff88802bcc7600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.303688][T10248] ffff88802bcc7680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.303700][T10248] >ffff88802bcc7700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.303711][T10248] ^ [ 299.303722][T10248] ffff88802bcc7780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 299.303735][T10248] ffff88802bcc7800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 299.303745][T10248] ================================================================== [ 299.343063][T10248] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 300.214361][T10248] CPU: 0 UID: 0 PID: 10248 Comm: syz.5.1385 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.225310][T10248] Tainted: [L]=SOFTLOCKUP [ 300.229636][T10248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.239693][T10248] Call Trace: [ 300.242970][T10248] [ 300.245904][T10248] vpanic+0x56d/0xa60 [ 300.249908][T10248] ? __pfx_vpanic+0x10/0x10 [ 300.254427][T10248] ? __pfx___schedule+0x10/0x10 [ 300.259301][T10248] panic+0xc5/0xd0 [ 300.263037][T10248] ? __pfx_panic+0x10/0x10 [ 300.267475][T10248] ? preempt_schedule_thunk+0x16/0x40 [ 300.272881][T10248] ? string+0x216/0x2d0 [ 300.277057][T10248] check_panic_on_warn+0x89/0xb0 [ 300.282016][T10248] ? string+0x216/0x2d0 [ 300.286183][T10248] end_report+0x73/0x170 [ 300.290435][T10248] ? string+0x216/0x2d0 [ 300.294605][T10248] kasan_report+0x128/0x150 [ 300.299119][T10248] ? string+0x216/0x2d0 [ 300.303298][T10248] string+0x216/0x2d0 [ 300.307294][T10248] vsnprintf+0x74a/0xef0 [ 300.311545][T10248] seq_printf+0x188/0x290 [ 300.315887][T10248] ? __kmalloc_noprof+0x38c/0x720 [ 300.320917][T10248] ? __pfx_seq_printf+0x10/0x10 [ 300.325770][T10248] ? __asan_memcpy+0x40/0x70 [ 300.330378][T10248] input_devices_seq_show+0x10f/0x640 [ 300.335762][T10248] seq_read_iter+0x8d5/0xca0 [ 300.340370][T10248] seq_read+0x367/0x480 [ 300.344536][T10248] ? __pfx_seq_read+0x10/0x10 [ 300.349226][T10248] ? __mutex_trylock_common+0x15f/0x270 [ 300.354770][T10248] ? common_file_perm+0x20e/0x2b0 [ 300.359800][T10248] ? __pfx_seq_read+0x10/0x10 [ 300.364495][T10248] proc_reg_read+0x1e9/0x2e0 [ 300.369105][T10248] ? __pfx_proc_reg_read+0x10/0x10 [ 300.374223][T10248] vfs_read+0x213/0xa80 [ 300.378390][T10248] ? __pfx___mutex_lock+0x10/0x10 [ 300.383412][T10248] ? __pfx_vfs_read+0x10/0x10 [ 300.388089][T10248] ? __fget_files+0x2a/0x420 [ 300.392683][T10248] ? __fget_files+0x3a2/0x420 [ 300.397354][T10248] ? __fget_files+0x2a/0x420 [ 300.401953][T10248] ksys_read+0x150/0x270 [ 300.406209][T10248] ? __pfx_ksys_read+0x10/0x10 [ 300.410990][T10248] do_syscall_64+0x166/0x520 [ 300.415587][T10248] ? trace_irq_disable+0x3b/0x140 [ 300.420620][T10248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.426684][T10248] ? clear_bhb_loop+0x70/0xc0 [ 300.431368][T10248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.437274][T10248] RIP: 0033:0x7f2c1a19e0d9 [ 300.441689][T10248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.461296][T10248] RSP: 002b:00007f2c1afc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.469734][T10248] RAX: ffffffffffffffda RBX: 00007f2c1a426090 RCX: 00007f2c1a19e0d9 [ 300.477713][T10248] RDX: 0000000000002020 RSI: 0000200000000300 RDI: 0000000000000004 [ 300.485689][T10248] RBP: 00007f2c1a235024 R08: 0000000000000000 R09: 0000000000000000 [ 300.493660][T10248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.501626][T10248] R13: 00007f2c1a426128 R14: 00007f2c1a426090 R15: 00007fff0d92d5f8 [ 300.509607][T10248] [ 300.512903][T10248] Kernel Offset: disabled [ 300.517218][T10248] Rebooting in 86400 seconds..