last executing test programs: 14m17.765558s ago: executing program 2 (id=299): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xe, 0x4) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x7) (async) syz_usb_connect(0x2, 0x46, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) (async) lseek(r0, 0x2, 0x3) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0xcc, @rand_addr=' \x01\x00', 0x2}, {0xa, 0x5e23, 0x8ae5, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, r3, 0x8}}, 0x48) (async) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x18, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000007d000000bf09000000000000b60904001200048065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090100f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m17.221238481s ago: executing program 2 (id=305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x1b) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)='%', 0x1}], 0x1, 0x0, 0x0, 0x4c840}, 0x4000001) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f00000004c0)=""/95, 0x5f}, 0xfffffffc}], 0x1, 0x12260, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xfffffffffffffffb, r0, 'id0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x201c}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1a, 0x4, &(0x7f0000000740)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x8, 0x97, &(0x7f00000003c0)=""/151, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@dellink={0x28, 0x11, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1001a, 0x62}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000300)={{r7}, 0x6, &(0x7f00000001c0)=[0x0, 0x80000001, 0x3, 0x0, 0xe, 0xb74d], 0x9, 0x4, 0x1}) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="110000000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r8], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = getpgrp(0x0) kcmp(0x0, r9, 0x4, r5, r3) r10 = fsopen(&(0x7f0000000200)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) 14m16.878049211s ago: executing program 2 (id=306): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 14m16.702576527s ago: executing program 2 (id=309): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) 14m16.52315571s ago: executing program 2 (id=310): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca00090506"], 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r1, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 14m14.762349169s ago: executing program 2 (id=313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x74, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2181}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x38, 0x16, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x6d}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x6d8, 0x10001}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x9}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x74}}, 0x0) 13m59.657227149s ago: executing program 32 (id=313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x74, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2181}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x38, 0x16, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x6d}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x6d8, 0x10001}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x9}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x74}}, 0x0) 10m51.473254936s ago: executing program 0 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) socket$kcm(0x29, 0x5, 0x0) 10m50.17482641s ago: executing program 0 (id=1043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) epoll_create(0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000080)={0x1, 0x1, 0xfffffffffffffff5, 0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x450000, 0x0) r5 = syz_open_pts(r4, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) utime(0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x80000) r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'pcl726\x00', [0x300, 0x8, 0x5ffff803, 0x4, 0x2f, 0xfffffff7, 0x6, 0xa22, 0xfffffff8, 0x2, 0x0, 0x8500, 0x5003, 0x1000007, 0x1, 0x10003, 0x801000, 0x80000000, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x8, 0x5, 0x5, 0x0, 0x0, 0xfffd]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 10m48.811928553s ago: executing program 0 (id=1045): mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x400504c) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r2, 0xa, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a000000000000000000000051fd3826b6599e4f30563d12939734937d9c9797f6f7887f2707306843a84fff3ca9c3"], 0x20) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a8302, 0x80) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) dup2(r2, r3) 10m48.229454062s ago: executing program 0 (id=1050): openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000fcffffff8500000097000000950000007b2c37ab09f64174000000004d05ee69f56513e4992c37f5bbc248be38e0be66494a7e11710cba7f934b9385fdc7eadd5494749eb35d08db2b46623481a961ad3611d35f8e3c405ae6b8775a040fcc571100ad3bf0da9e7296"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@alg={0xe0, 0x10, 0x8, 0x70bd27, 0x25dfdbfc, {{'ofb(camellia)\x00'}, '\x00', '\x00', 0x2000, 0x800}}, 0xe0}, 0x1, 0x0, 0x0, 0x48800}, 0x20008000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x903, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xb, 0x1}, {0xfff2, 0xfff1}, {0x6, 0xfff2}}}, 0x24}}, 0x8840) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xc0902) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffff}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r5], 0x20) 10m47.66645003s ago: executing program 0 (id=1052): r0 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(r1, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8880) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x18, 0x3f9, 0x800, 0x70bd2a, 0x25dfdbfb, {0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x4c840}, 0x4000001) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1}, 0xfffffffc}], 0x1, 0x12260, 0x0) 10m46.477987743s ago: executing program 0 (id=1055): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000740000000d30800064000000000080005400000000e080003400000000808000f4000000009140000001000010000000000000000000084000a"], 0x84}}, 0x884) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DELAY(r8, 0x80084121, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 10m30.915099924s ago: executing program 33 (id=1055): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000740000000d30800064000000000080005400000000e080003400000000808000f4000000009140000001000010000000000000000000084000a"], 0x84}}, 0x884) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DELAY(r8, 0x80084121, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 37.64495844s ago: executing program 1 (id=3635): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000480)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead34", 0x52}, {&(0x7f0000000600)="ebe3a00cb099ec4dd19eb1f4e376fdba288280b372219d205e81f4a7f71c1926aae1efd7e0054a4e183458c505fe92d89415863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb15cf344ab99d61eb888fccb53a069b1ed48d8ae1617233755ecefe3365320768662d15d7eb4c3502aa2f991567412ac74cc8d9476cc9cb2903efe73d3e94a2c0b2a06199344f7f69b7890f0889985bfcacf63bd4a157d5c3f812b10056956e21aa5183e2edb0ae7fd3258a37452dfa31be62ffadf3e35185f8088064ba50535f12", 0xce}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x4044090) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 36.561502458s ago: executing program 1 (id=3638): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xac7) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x23, 0x78, {0x78, 0x1, "a9dea1dddb012a92ed6291b2facd6348d12f161605cb42c30dcda1d7ddd5a95655bb8c294d87d52a5c33dce5a276d7a525ae60644265baa99a6a06555766b70c6149075d2858efd941416585efbc8969493f73ec0f14c4263f9bd33eb70d4b73c2784217633f02c5ede10e61452b7541ebf3918d269c"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400964000000fcc191c590bc09c8953547b7d69cd64ff46618b72dc3a88e2844f34753f9c1f30047aae3c3650c849c9591433b84210c5e8868fb413a7d217ad912d7f84e0855533cf2cba2cc75b6f5928e288cf3785fca71a9f0431d5e34fe09abfd870c"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x11, 0x6, 0x2, 0x100, 0x101, 0x0, 0x200, 0x8, 0x1, 0xfffa, 0x8, 0xa92}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x40}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 33.328755689s ago: executing program 1 (id=3645): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f0000000100001002bbd630000000000fc01000000000000000000000000ea00ac14143f0000000000000000000000000000ecdf000002000a00c00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000003300000064010100000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000080000000000000000084000000000000000000000000000000400000000000009000000000000000500000000000000073500000a0004003a00000000000000"], 0xf0}}, 0x4050) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) (async) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000edb7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRES8=r1], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) 33.073467424s ago: executing program 1 (id=3646): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070705000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x2000c000) sendmmsg$unix(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c}}], 0x20, 0x4000}}], 0x2, 0x0) 25.689686938s ago: executing program 1 (id=3658): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgrp(0x0) prlimit64(r3, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) fchdir(r1) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000342b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a04020200000000fc010000000000000000000000000000fc01000000000000000000000000000000000000000c9078010000014d4d6ef91b44a69248391507fd6f6f7cbf3dfd936b68bf6d91ee1d1ed079ef1c7ff6a1b120949ddd89e18cbb33dd7384805db014c2bacc876e9552ab59b2debbcc19c6b1f1d404e9c513bd7f2d43510170f44020d7a6d1dcf64038993b1bd82d00d877a9794044c0b361e7b9007991c41a1d7f0a05a587af2d645f"], 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) sendmmsg$unix(r2, &(0x7f00000007c0)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x800}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048000}}], 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214010028bd7000fedbdf2505005400fce7000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80d0) 21.79410621s ago: executing program 1 (id=3664): r0 = eventfd2(0x43, 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200010720f800000000000007000000", @ANYRES64=r0, @ANYBLOB="00000000000000000a000100"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12.988505675s ago: executing program 4 (id=3683): ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x1, 0x0, 0x4000000], [0x7ff, 0x100003, 0x3, 0x0, 0x0, 0x0, 0x2, 0x1000], [0x4, 0x0, 0x738, 0x0, 0x8, 0x0, 0x1]], '\x00', [{0xfffffffe, 0xfffffffe}, {0x100775, 0xffffffff}, {0x0, 0x5}, {0x5, 0x7f}, {}, {0x40}, {}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0xb6f}, {0x0, 0x5}], '\x00', 0x5}) bpf$MAP_CREATE(0x0, 0x0, 0x48) 12.772325773s ago: executing program 4 (id=3684): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r2, 0x0, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x10, 0x8004, 0x3}]}]}, {0x0, [0x51, 0x0, 0x0, 0x61, 0x30]}}, &(0x7f0000000400)=""/274, 0x37, 0x112, 0x9}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0xc8, 0x0, 0x1500}, [@RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x30}}, 0x44) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e37e1b"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a006da800000000000000001c"], 0x1c}}, 0x4000080) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e140100"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) r10 = fcntl$getown(r3, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000006c0)={0x6, 0xffffff06, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x400, 0x2}) mknod(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r5, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="06cd02996fedcaa3421fc2b76525e4055fd29d18fe9ed5920e3257d7d924c22735152e70ba7c3fc44e2572fb86c723af5778fb0b2260e80efcb0933c74d6bf1139c3fcf8e7c108b70816b6b249152045361fa28ce97fdbc1baa47e51736f3a30af9de53d20af80c58b5f2e66cbe66bc2155d6a04674ba54be50a24ae3a9bc26a321a841bdf5d122ee8e09985e69980fffd4891fad08bc51baf9ba1eea95c405f4354599aa70b0392de016ac8129a63ed220599f18fb0", 0xb6}, {&(0x7f0000000640)="de7eba45ed231ca02eec7bd3adb1b98bb6fcc57581a58c3f893c77e22e2c84bc8819492428aba16dc4c0486a7f", 0x2d}], 0x2, &(0x7f0000002cc0)=[@rights={{0x18, 0x1, 0x1, [r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r3]}}], 0x58, 0x8000}}], 0x1, 0x8010) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) syz_usb_connect(0x2, 0x296, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xf3, 0x7b, 0x12, 0x40, 0x979, 0x280, 0xfa0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x284, 0x2, 0x5, 0x6, 0x90, 0xd, "", [{{0x9, 0x4, 0xf4, 0x20, 0x9, 0xb2, 0x94, 0x72, 0x5, [], [{{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x9e, 0xb3}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0xa, 0xf8, 0x6, [@generic={0x3e, 0x30, "e4b5c591e0203c80d1b6960fbea01bedfd34376dbefdb8122ad7c1127ef2282f2b592f0f75bd60c9ff11cf2590f776ac368af7be2a46327c8e73182d"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x90, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x6, 0x0, 0x4e}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x1, 0xc8, 0x6}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x2a, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x2}, @generic={0x18, 0x23, "4a1d0b2685c35cb129150b1354c291c50fac8d2462df"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x40, 0x7, 0x7f, 0x3, [@generic={0x3d, 0x30, "1a3947cfb0af4476c60e5a5da1569767db6af10936dd9102cf69e1b4cd4cbbd7d7cd498eb30e56bd7bcb14fe1b0e4915053a50e30353eb258634bd"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x7}]}}, {{0x9, 0x5, 0xd, 0x8, 0x0, 0x9, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x3, 0x9, 0x2}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x4, 0x7f, 0x58}}]}}, {{0x9, 0x4, 0x5, 0x8, 0x2, 0x3c, 0x3c, 0xba, 0x7, [@generic={0x6b, 0x439d6d39c6e7bf3, "0666991b8da874b190c8df4f59388e06c73b770da901d94ea3c23cea555f4f521392f1f7136301a08df30670256cd221f8e841ebcf6084d37d393bd7bf0211e3ff240c2b6e554fb922cbc890f5afb0f0dfd0f18218bdd2ba0ad5ed57c8db12808cfe0d881fc0270a2c"}], [{{0x9, 0x5, 0x9, 0x0, 0x40, 0xfb, 0x2, 0x9, [@generic={0xe2, 0xb, "898ad272790cc116ea0fe32a9140d2588bf6ae6ff32b9454941b9a77163babc1a0cce4aa7d2d6961e5ec9f09872abec3e995470b8a010956640c47a36ccb460fe44d832436093e18adce410fffd84c2e45f27db88ceea7e004bc65b24ed29bf5e4b48d7c04bb53f4f7481e8bb885cfae3dcec85c077a9882e2414d98bc1fcc9d8e01bb13d8e8b94c9d14ba5f352cd24f3b2bfbe6809f31bf369a252e8bdbd216e7f2755aa98824d95d2a7842bff42b99a1e6b0d2338f7bf81e88438ad5c5cc87066608392643d99701c512ad00d535b43c821a9723d0277d9b9afc035600745f"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x4, 0x1, 0x9, [@generic={0xa, 0xa, "318b20f1aedc6b16"}]}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x0, 0x0, 0x9, 0x40}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x184e}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x80c}}, {0x9, &(0x7f0000000440)=@string={0x9, 0x3, "0e36cb8a4535cb"}}, {0xd, &(0x7f0000000480)=@string={0xd, 0x3, "7fdbcb74dff34ed58d6dea"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x426}}]}) 12.436854379s ago: executing program 6 (id=3685): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x40, 0x31, 0x38, {0x38, 0xd, "84e31ce753c42ee5e4b49d69f5d13205b604076fabd3c9eeaa47d8756c0878a2935aed848b8613248950a17ea6885f7a1eff571779fd"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}}, &(0x7f0000000840)={0x44, &(0x7f0000000580)={0x40, 0x12, 0xe1, "ea64cd5d1265515217e954787dd6201f1e862fbc03cdcb1e4843a157b452f377296366871a65a21c30dd27811d2e409246f5fd570420dc2a35c550fd536f15be0a8efcc0fc007c57449ee4c7b7b88e95f1a4101b5503c3ca865fbc06202509629222d216aa5c05617821d649511a5468a794319d460e8c7cb84c9a6306d9582ed1eefeb5b5084a6afccbc1c396264d6000902fe4266ed08595f9668210c849d85efcbb20f0800acbaa567d4b81b46e425c879484f528d94274653ff1e4576e7e79277c77baccb939d4838fc002020e816bfc078be59519ea51f441acadaaedd0ee"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xa8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x7d}, &(0x7f0000000700)={0x20, 0x81, 0x3, "ee86a3"}, &(0x7f0000000740)={0x20, 0x82, 0x3, "d61f42"}, &(0x7f0000000780)={0x20, 0x83, 0x1, "fc"}, &(0x7f00000007c0)={0x20, 0x84, 0x3, "9a8974"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "e05869"}}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX]) syz_usb_connect$uac2(0x3, 0xcd, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000408c0d1400400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240803010000000000000200010000000c24030402030103"], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x0, 0x21, 0xf0, {0xf0, 0x23, "7e9718375c2a13d3719e7b1f781282a6ed753a4c09e99b703967f5a415d57764e1c95c9a79b22dfd0e77728437f9f7f76723eaf8566d0854d265ffc7420e4c06e770f96b4135266b416b534435c04a7e8c4402e76a28dbceb1ac38ea851d2e39022db605b8073df7fa3682d1a5e3d53018b98ed1cddca100b4121b562d57282562a77e4f2a0854767e38dcd574ea1a10381e112dc02f0c1cea9dc99d9f9515c907805a10ff84510cf7006fc0b232fdf7da8c4581a5848e3c289b0c642277e5279866cc17054d8a548ecdf1216997a19c51479c7ff81270afdae460de34ad4e706a37b1618fdae29d8d6ce53d0170"}}, &(0x7f0000000140)={0x0, 0x3, 0x55, @string={0x55, 0x3, "68dc518dcb74a31ed0963eb749a2d57710ad0265eb4da9811e3249a1b2e4791f53b6f40594a07391a1c59cd46f33a128780be6ec7e864809dd505821be422171b9794048c6b4a18403736cf43fca69522ea196"}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x16, 0x7d, "7980ca17ec3489f5b2979945a2b1ecf1824ef493f61cc03c7d9f8473af213ca66cf189214490489424504b3a33ca599c09200e93221a9e5f0ee3d7401123c2ff5d1f8abcecb0dba769eb47c3b95188aa952fc04b14c415f73a1564e29900b2d68eb4ad16e4d2311de7b12ea34d91543b85f0211e048f05d80a50fc73a1"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0xc0, 0x5, 0x4, "f5ab98fe"}, &(0x7f00000003c0)={0x40, 0x5, 0x2, "eb6b"}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.905982727s ago: executing program 6 (id=3689): syz_emit_ethernet(0x101e, &(0x7f0000000400)=ANY=[], &(0x7f0000001440)={0x0, 0xe8, [0x3f9, 0x4c5, 0x424, 0xb9d]}) set_mempolicy(0x1, 0x0, 0xb) set_mempolicy(0x3, &(0x7f0000000000)=0xffff, 0x200) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[], 0x50) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) mlock2(&(0x7f00007a4000/0x2000)=nil, 0x2000, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1459c2, 0x40) ftruncate(r0, 0x8800000) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) getresgid(&(0x7f0000002800), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 9.103170348s ago: executing program 4 (id=3692): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0x2be, 0x8, 0x800, 0x5, 0xb}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000140)={0x7, 0x8001, 0x1ff}) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000180)={0xf9, 0x9, 0x3}) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000200)={r4}) r5 = socket$inet6(0xa, 0x80000, 0x1) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}, 0x2}, 0x1c) (async) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000280)) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000380)={0x0, 0x0, 0x5, 0x9, &(0x7f0000000300)=[{0x0, 0x8, 0x9d43, 0xfff8}, {0x3, 0x7, 0x6bfd, 0x3ff}, {0x7, 0x101, 0x6, 0xfffc}, {0x0, 0x7, 0x7, 0x7}, {0x8, 0xff, 0x4, 0x5}, {0x5fb9, 0x80, 0x6, 0x1000}, {0x60a, 0xfff, 0xd547, 0x9}, {0x8, 0x9, 0x6, 0x35f}, {0x9, 0x2, 0x2, 0x8}]}) (async) r6 = syz_open_dev$mouse(&(0x7f00000003c0), 0x10001, 0x10b000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000400)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e24, 0x780, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7b82}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffff4}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc2}], 0xa4) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0x8400, 0x0) (async) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01864c1, &(0x7f0000000540)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000580)={0x0, 0x0, r8}) (async) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f0000000640)={{0x8, 0x9, &(0x7f00000005c0)=[{0xf, 0x0, 0x3}, {0x1, 0x0, 0x7}, {0x4}, {0x0, 0x0, 0x2}, {0x4, 0x0, 0x401}, {0x6, 0x0, 0x5}, {0x40, 0x0, 0x1}, {0x1, 0x0, 0x7}, {0x3, 0x0, 0x5702770c}]}, 0x7, 0xff, 0x3, 0x1, 0x0, 0x4, 0xa, 0xfffffffffffffffb, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000680)={0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f00000006c0)={0x0, 0x1, r6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000007c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000840)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01864c2, &(0x7f0000000900)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r0, 0xc0186449, &(0x7f0000000bc0)={r10, 0x0, {0x28, 0x6, &(0x7f0000000ac0)=[{0x8, 0x5a2bb260, 0x8250dab0c5206dc0, 0xffffffff, 0x0, {0x10, 0x2, &(0x7f0000000700)=[{0x0, r11, 0x101}, {0x2, r12, 0x1}]}}, {0x8, 0x1f461428, 0x37f878cf6d825e00, 0x80000001, 0x0, {0x10, 0x8, &(0x7f0000000740)=[{0x0, r9, 0x5}, {0x1, r7, 0x3}, {0xff, r7, 0x8}, {0x1, r9, 0x5}, {0x80000000, r9}, {0x0, r7, 0x2}, {0xff, r9, 0x8}, {0x0, r7, 0x52af}]}}, {0x0, 0x4335480, 0x70ccbddb271e9c80, 0xa9, 0x0, {0x10, 0x2, &(0x7f0000000800)=[{0x1, r9, 0x6}, {0x0, r13, 0x7ff}]}}, {0x39, 0xdbc54f88, 0xb332a6529c5df580, 0x40, 0x0, {0x10, 0x6, &(0x7f0000000880)=[{0x0, r9, 0x10001}, {0xff, r9, 0x2}, {0x0, r7, 0x6}, {0x1, r7, 0x1}, {0x80000000, r14, 0x9}, {0x0, r9, 0x7f}]}}, {0x6, 0xa58957b0, 0x5fcb931e5017ae00, 0x5, 0x0, {0x10, 0x8, &(0x7f00000009c0)=[{0x1, r7, 0x100000000}, {0x0, r15, 0x7979}, {0x80000000, 0x0, 0xf}, {0x80000000, r9, 0xfffffffffffffff6}, {0x0, r9, 0x5}, {0xff, 0x0, 0x6}, {0x80000000, r7, 0x9}, {0xff, r7, 0x1}]}}, {0x40, 0x526f6eb0, 0x76f578402e1ae100, 0x99, 0x0, {0x10, 0x6, &(0x7f0000000a40)=[{0x80000001, r7, 0x4}, {0x1, r9, 0x1}, {0x0, r7, 0x47}, {0x1, r7, 0xa19}, {0x0, r9, 0x5}, {0x1, r9, 0x5}]}}]}}) 8.966190384s ago: executing program 3 (id=3694): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c00000085000000080000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x808) r1 = getpid() ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)=@ethtool_eeprom={0xc, 0x0, 0x51458ab7, 0xc0, "300b160fa355b13e1e433b6e38f42f2ad5cf42d9bd734678d5f48f8c76fd0cc2bd50d50fb2173df3fc766d04dabd945f64259d07137b97c0ff6f0d0835f4037797b7502ef25e3c891fa930da41e028ba469eb57f0e541b1f3edc5093f9ce84ff6a7ae50786b2300e4f5d647aec49eb7ff85e5e2dc6f943ba4bc8f5109f5ca20f8630c5b2a8682a3b0db6e475400d52d17e3e97d8e00ea00f2ef88ccfedc8d45ec6ff4e2b7e2299ef1486a23cd95a40b0f78d243c5abc58f5398e4b6590a9c8c0"}}) (async, rerun: 32) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000001040)=ANY=[@ANYBLOB="5b4ccb32f024300a3cd766aa879431e17bb0bdbdae8cab4ca05abfca52544815ada1f93122abaed3b6ae467c36097b73c358232e7f1c6039351eb7202864727f603e43887b1bcd7951c15b2ddedb4316df65b30ed3dfc70e8451586f8a28e2d724dcb3b4690eea8e8b74fe03ac7584e90fa3384570c0752955a46103ff938aa8fa5c", @ANYRES32=r0, @ANYBLOB="00012cbd7000fbdbdf251300000008000300", @ANYRES32=0x0, @ANYBLOB="0500130101000000"], 0x24}, 0x1, 0x0, 0x0, 0x4044844}, 0x4008000) (async) read$msr(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) connect$unix(r2, &(0x7f00000004c0)=@abs={0xfb488189b8fd23af, 0x0, 0x4e24}, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f0000001000)=[{{&(0x7f0000000540)=@nl=@proc, 0x80, &(0x7f0000000e80)=[{&(0x7f00000006c0)=""/27, 0x1b}, {&(0x7f0000000940)=""/193, 0xc1}, {&(0x7f0000000b40)=""/180, 0xb4}, {&(0x7f0000000c00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/249, 0xf9}, {&(0x7f0000000e00)=""/112, 0x70}], 0x6, &(0x7f0000000f00)=""/206, 0xce}, 0x783ab6ff}], 0x1, 0x2, 0x0) (async) r4 = socket(0x28, 0xa, 0xa) shutdown(r4, 0x2) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f00000005c0)="cfe1a29c4d2f0db5721fa88b7e3719418ef4cb363e25182cc8fb0d60f1ebfbdf0e0460df22fdda9c6d8c4ca7919350b98ebd0977020843e1688ac08c33894f47adbd9f0c84fdf2499d1be2fcd9c280174b2339a256f59d3ad41c068048bb05ce2e2081347125e4cd7d0b3d716233fb658c73b7e6a2ab835493155758b0673fa26918721319f823de79c5c1e69a1997272b4097b60ceeb6758340bdc134a6c9ffc2631109c1172026d7346e2eb0ac705e44b0eb5333e0bc32f51ad47948f095b41d80edf0bce215", 0x76, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getrlimit(0xd, &(0x7f0000000340)) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000080020000500000014de000001000000", @ANYRES32=0x1, @ANYBLOB="3b000000000000000000080000000000000000003d15469524f34e06c68ce416a7e7080096d8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)='6', &(0x7f0000000340), 0xca, r7}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/38}, 0x20) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000880)={'pcl812\x00', [0x2, 0x3204, 0x81, 0x4, 0x6, 0x7, 0x8, 0x50, 0x3, 0x5c3, 0x2, 0x0, 0x7, 0x3, 0x7f, 0xa, 0x0, 0x7ff, 0x4, 0x0, 0xfffffffc, 0xd99f, 0x4, 0xffffe737, 0x7ff, 0x4, 0x0, 0x401, 0x4, 0x9, 0xe87, 0x9]}) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) (async, rerun: 64) close(0xffffffffffffffff) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES32=r1], 0xfdef) 8.851939011s ago: executing program 6 (id=3696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000080)=0x2, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x5, 0xa) 8.746476521s ago: executing program 4 (id=3697): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x23, 0x78, {0x78, 0x1, "a9dea1dddb012a92ed6291b2facd6348d12f161605cb42c30dcda1d7ddd5a95655bb8c294d87d52a5c33dce5a276d7a525ae60644265baa99a6a06555766b70c6149075d2858efd941416585efbc8969493f73ec0f14c4263f9bd33eb70d4b73c2784217633f02c5ede10e61452b7541ebf3918d269c"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400964000000fcc191c590bc09c8953547b7d69cd64ff46618b72dc3a88e2844f34753f9c1f30047aae3c3650c849c9591433b84210c5e8868fb413a7d217ad912d7f84e0855533cf2cba2cc75b6f5928e288cf3785fca71a9f0431d5e34fe09abfd870c"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x11, 0x6, 0x2, 0x100, 0x101, 0x0, 0x200, 0x8, 0x1, 0xfffa, 0x8, 0xa92}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x40}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 8.514382006s ago: executing program 3 (id=3698): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000540)={0x14, 0x0, 0x0}, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xa8}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x7d}, &(0x7f0000000700)={0x20, 0x81, 0x3, "ee86a3"}, &(0x7f0000000740)={0x20, 0x82, 0x3, "d61f42"}, &(0x7f0000000780)={0x20, 0x83, 0x1, "fc"}, &(0x7f00000007c0)={0x20, 0x84, 0x3, "9a8974"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "e05869"}}) syz_usb_control_io$rtl8150(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x0, 0x21, 0xf0, {0xf0, 0x23, "7e9718375c2a13d3719e7b1f781282a6ed753a4c09e99b703967f5a415d57764e1c95c9a79b22dfd0e77728437f9f7f76723eaf8566d0854d265ffc7420e4c06e770f96b4135266b416b534435c04a7e8c4402e76a28dbceb1ac38ea851d2e39022db605b8073df7fa3682d1a5e3d53018b98ed1cddca100b4121b562d57282562a77e4f2a0854767e38dcd574ea1a10381e112dc02f0c1cea9dc99d9f9515c907805a10ff84510cf7006fc0b232fdf7da8c4581a5848e3c289b0c642277e5279866cc17054d8a548ecdf1216997a19c51479c7ff81270afdae460de34ad4e706a37b1618fdae29d8d6ce53d0170"}}, &(0x7f0000000140)={0x0, 0x3, 0x55, @string={0x55, 0x3, "68dc518dcb74a31ed0963eb749a2d57710ad0265eb4da9811e3249a1b2e4791f53b6f40594a07391a1c59cd46f33a128780be6ec7e864809dd505821be422171b9794048c6b4a18403736cf43fca69522ea196"}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x16, 0x7d, "7980ca17ec3489f5b2979945a2b1ecf1824ef493f61cc03c7d9f8473af213ca66cf189214490489424504b3a33ca599c09200e93221a9e5f0ee3d7401123c2ff5d1f8abcecb0dba769eb47c3b95188aa952fc04b14c415f73a1564e29900b2d68eb4ad16e4d2311de7b12ea34d91543b85f0211e048f05d80a50fc73a1"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0xc0, 0x5, 0x4, "f5ab98fe"}, &(0x7f00000003c0)={0x40, 0x5, 0x2, "eb6b"}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.79390865s ago: executing program 6 (id=3699): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgrp(0x0) prlimit64(r3, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) fchdir(r1) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000342b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a04020200000000fc010000000000000000000000000000fc01000000000000000000000000000000000000000c9078010000014d4d6ef91b44a69248391507fd6f6f7cbf3dfd936b68bf6d91ee1d1ed079ef1c7ff6a1b120949ddd89e18cbb33dd7384805db014c2bacc876e9552ab59b2debbcc19c6b1f1d404e9c513bd7f2d43510170f44020d7a6d1dcf64038993b1bd82d00d877a9794044c0b361e7b9007991c41a1d7f0a05a587af2d645f"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) sendmmsg$unix(r2, &(0x7f00000007c0)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x800}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048000}}], 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214010028bd7000fedbdf2505005400fce7000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80d0) 7.695130592s ago: executing program 5 (id=3700): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) userfaultfd(0x801) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x1, 0x5, 0x10, 0xae19, 0x3, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (fail_nth: 9) 5.907406258s ago: executing program 5 (id=3701): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r2, 0x0, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x10, 0x8004, 0x3}]}]}, {0x0, [0x51, 0x0, 0x0, 0x61, 0x30]}}, &(0x7f0000000400)=""/274, 0x37, 0x112, 0x9}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0xc8, 0x0, 0x1500}, [@RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x30}}, 0x44) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e37e1b"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a006da800000000000000001c"], 0x1c}}, 0x4000080) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e140100"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r8 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) r10 = fcntl$getown(r3, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000006c0)={0x6, 0xffffff06, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x400, 0x2}) mknod(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r5, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="06cd02996fedcaa3421fc2b76525e4055fd29d18fe9ed5920e3257d7d924c22735152e70ba7c3fc44e2572fb86c723af5778fb0b2260e80efcb0933c74d6bf1139c3fcf8e7c108b70816b6b249152045361fa28ce97fdbc1baa47e51736f3a30af9de53d20af80c58b5f2e66cbe66bc2155d6a04674ba54be50a24ae3a9bc26a321a841bdf5d122ee8e09985e69980fffd4891fad08bc51baf9ba1eea95c405f4354599aa70b0392de016ac8129a63ed220599f18fb0", 0xb6}, {&(0x7f0000000640)="de7eba45ed231ca02eec7bd3adb1b98bb6fcc57581a58c3f893c77e22e2c84bc8819492428aba16dc4c0486a7f", 0x2d}], 0x2, &(0x7f0000002cc0)=[@rights={{0x18, 0x1, 0x1, [r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r3]}}], 0x58, 0x8000}}], 0x1, 0x8010) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) syz_usb_connect(0x2, 0x296, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xf3, 0x7b, 0x12, 0x40, 0x979, 0x280, 0xfa0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x284, 0x2, 0x5, 0x6, 0x90, 0xd, "", [{{0x9, 0x4, 0xf4, 0x20, 0x9, 0xb2, 0x94, 0x72, 0x5, [], [{{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x9e, 0xb3}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0xa, 0xf8, 0x6, [@generic={0x3e, 0x30, "e4b5c591e0203c80d1b6960fbea01bedfd34376dbefdb8122ad7c1127ef2282f2b592f0f75bd60c9ff11cf2590f776ac368af7be2a46327c8e73182d"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x90, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x6, 0x0, 0x4e}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x1, 0xc8, 0x6}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x2a, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x2}, @generic={0x18, 0x23, "4a1d0b2685c35cb129150b1354c291c50fac8d2462df"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x40, 0x7, 0x7f, 0x3, [@generic={0x3d, 0x30, "1a3947cfb0af4476c60e5a5da1569767db6af10936dd9102cf69e1b4cd4cbbd7d7cd498eb30e56bd7bcb14fe1b0e4915053a50e30353eb258634bd"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x7}]}}, {{0x9, 0x5, 0xd, 0x8, 0x0, 0x9, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x3, 0x9, 0x2}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x4, 0x7f, 0x58}}]}}, {{0x9, 0x4, 0x5, 0x8, 0x2, 0x3c, 0x3c, 0xba, 0x7, [@generic={0x6b, 0x439d6d39c6e7bf3, "0666991b8da874b190c8df4f59388e06c73b770da901d94ea3c23cea555f4f521392f1f7136301a08df30670256cd221f8e841ebcf6084d37d393bd7bf0211e3ff240c2b6e554fb922cbc890f5afb0f0dfd0f18218bdd2ba0ad5ed57c8db12808cfe0d881fc0270a2c"}], [{{0x9, 0x5, 0x9, 0x0, 0x40, 0xfb, 0x2, 0x9, [@generic={0xe2, 0xb, "898ad272790cc116ea0fe32a9140d2588bf6ae6ff32b9454941b9a77163babc1a0cce4aa7d2d6961e5ec9f09872abec3e995470b8a010956640c47a36ccb460fe44d832436093e18adce410fffd84c2e45f27db88ceea7e004bc65b24ed29bf5e4b48d7c04bb53f4f7481e8bb885cfae3dcec85c077a9882e2414d98bc1fcc9d8e01bb13d8e8b94c9d14ba5f352cd24f3b2bfbe6809f31bf369a252e8bdbd216e7f2755aa98824d95d2a7842bff42b99a1e6b0d2338f7bf81e88438ad5c5cc87066608392643d99701c512ad00d535b43c821a9723d0277d9b9afc035600745f"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x4, 0x1, 0x9, [@generic={0xa, 0xa, "318b20f1aedc6b16"}]}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x0, 0x0, 0x9, 0x40}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x184e}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x80c}}, {0x9, &(0x7f0000000440)=@string={0x9, 0x3, "0e36cb8a4535cb"}}, {0xd, &(0x7f0000000480)=@string={0xd, 0x3, "7fdbcb74dff34ed58d6dea"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x426}}]}) 3.810129883s ago: executing program 3 (id=3702): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000480)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b2", 0x8f}, {&(0x7f0000000600)="ebe3a00cb099ec4dd19eb1f4e376fdba288280b372219d205e81f4a7f71c1926aae1efd7e0054a4e183458c505fe92d89415863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb15cf344ab99d61eb888fccb53a069b1ed48d8ae1617233755ecefe3365320768662d15d7eb4c3502aa2f991567412ac74cc8d9476cc9cb2903efe73d3e94a2c0b2a06199344f7f69b7890f0889985bfcacf63bd4a157d5c3f812b10056956e21aa5183e2edb0ae7fd3258a37452dfa31be62ffadf3e35185f8088064ba50535f12", 0xce}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x4044090) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.567760873s ago: executing program 4 (id=3703): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x23) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[], 0x0) 3.188999263s ago: executing program 6 (id=3704): ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x1, 0x0, 0x4000000], [0x7ff, 0x100003, 0x3, 0x0, 0x0, 0x0, 0x2, 0x1000], [0x4, 0x0, 0x738, 0x0, 0x8, 0x0, 0x1]], '\x00', [{0xfffffffe, 0xfffffffe}, {0x100775, 0xffffffff}, {0x0, 0x5}, {0x5, 0x7f}, {}, {0x40}, {}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0xb6f}, {0x0, 0x5}], '\x00', 0x5}) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.127999854s ago: executing program 4 (id=3705): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x1, "62993e", 0x6, 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) io_setup(0x7, &(0x7f0000001d00)=0x0) io_destroy(r3) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000080)={0x2e000, 0xcd8, @value=0x3}) ftruncate(r1, 0x8800000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000001100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x85, 0x10, 0xe, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xffffff24, 0x277, 0x1, 0xc}, {0x6, 0x24, 0x1a, 0x9c4, 0xd}}, {{0x9, 0x5, 0x81, 0x3, 0x3bf, 0x2, 0x10, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1ff, 0x3, 0x2, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xdb, 0x7, 0xa}}}}}}}]}}, &(0x7f0000001680)={0x0, 0x0, 0x7d, &(0x7f00000011c0)={0x5, 0xf, 0x7d, 0x1, [@generic={0x78, 0x10, 0xa, "661aa567fd465e3fea0bc9671a7eb79f5e49267e7cd89374931547d35f50781a202e0ac423c2ebb42b78a75d92f77d700fdbb492e97caf9a38ccf306867e55707fcb084c92e4d39f85ed028848c23f4e7956a8d0ba2832507b8224ecfda5142b630b0e9aacf55b5f65eec619bc6fc2cfa6eeaf7024"}]}}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x101442, 0x0) sendfile(r5, r1, 0x0, 0x558410e9) io_getevents(r3, 0x6, 0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)={0x77359400}) 2.96148259s ago: executing program 3 (id=3706): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003580)={0x7, 0x0, [{0x0, 0x0, 0x0}, {0x9000, 0x1d, &(0x7f0000000140)=""/29}, {0x100000, 0xff9, &(0x7f0000003700)=""/4089}, {0xffffffff, 0xd7, &(0x7f0000000580)=""/215}, {0x60000, 0x8f, &(0x7f0000000300)=""/143}, {0xe000, 0xaa, &(0x7f00000003c0)=""/170}, {0xf000, 0x1000, &(0x7f0000002500)=""/4096}]}) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r4, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r4, 0x107, 0x6, 0x0, 0x0) sendmsg$netlink(r4, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 1.499562554s ago: executing program 3 (id=3707): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11"], 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000050000000101000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000040)={r3, 0xefa, 0x6, 0x3, 0x401, 0x9, 0xffc0, 0xd1a6, {r3, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x1, 0x2, 0xfffffff8, 0x9, 0x1}}, &(0x7f0000000100)=0xb0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 1.407461136s ago: executing program 5 (id=3708): socket$unix(0x1, 0x1, 0x0) unshare(0x2020600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r4 = epoll_create1(0x80000) r5 = socket(0x1, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) 1.089322061s ago: executing program 3 (id=3709): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, 0x0, 0x4000000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r4}, 0xc) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13}) dup2(0xffffffffffffffff, r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x20}}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe00000000000029", 0x29) ioctl$sock_ifreq(r0, 0x8910, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x8001) syz_usb_connect(0x0, 0x3d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0110010e8592203735787e9a600102030109022bfb00020b1003fe02ff47d06209050a10000000060007250100060004090505002000080f42"], 0x0) 883.741135ms ago: executing program 5 (id=3710): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x30000, 0x0, 0xffffffffffffffff, 0x7a3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1800040000000000140012800b00010067656e657665"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x2ee, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63e4, 0x0, 0x8000, 0x8, 0xff, 0x6, 0x6, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x8, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0x101, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0x80000001, 0x7fffffff, 0xed2, 0x1, 0xfffffffa, 0x2, 0x18d1, 0xfcf9, 0x3, 0x6, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x9, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x7e, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xbffffffa, 0x1, 0x100008, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x800081, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7c, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x103, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0x4]}]}}]}, 0x468}}, 0x0) 274.504354ms ago: executing program 5 (id=3711): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)=':^:$\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x10001, 0xab41]}, {0xfff7, 0xd, 0x7, 0x5}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x1, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000180), 0x4) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x208, 0xf8, 0x208, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x9, 0x88f00000, 0xf, 0xff, 0xffff}}, @common=@ttl={{0x28}, {0x0, 0xfd}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xdf13}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}, 0xff000000, 0xffffff00, 'bridge_slave_0\x00', 'pim6reg1\x00', {}, {}, 0xfc, 0x2, 0x2}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0xc5f, 0x3]}}, @common=@set={{0x40}, {{0x2, [0x7, 0x5, 0x1, 0x7, 0x0, 0x5], 0x3, 0x2}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8, 0x2, 0x5}}}, {{@ip={@remote, @empty, 0x0, 0xff000000, 'bridge_slave_0\x00', 'wlan1\x00', {0xff}, {}, 0x32, 0x0, 0x4}, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x9}}, @common=@icmp={{0x28}, {0x11, "b41a"}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x3}, {0x3, 0x1, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f00000006c0)={&(0x7f0000000640)=[{0x0, 0x1, 0x0, {0x80, 0xddad, 0x2}}, {0x2, 0x1, 0x0, {0x5, 0x1, 0x2}}, {0x9, 0x2, 0x0, {0x5d, 0x7, 0x1}}], 0x3, 0x20, 0x4, 0x6147}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000700)={'\x00', 0x100, 0x1, 0x100, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000780)=r3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001040)={{r2, &(0x7f00000007c0)='*\x00', 0x208200, &(0x7f0000000800)={@align=0x6, {0x6, 0x1c, 0x6, 0xf}}, 0x5, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x3}, 0x7, &(0x7f0000000f40)=[{0x2, 0x0, &(0x7f00000008c0)='%\x00', &(0x7f0000000900)="7bb1aebab8929076a1c06a33786082227a2a8c5d1abd614426f97067af1af33f42aa14fd7784c3d0ecb24e5a4e548ed1485afe50decc90363f513db8e17adbe8010351e77b35a84dda2cb81d3d1d3951fa7e9eba6c9325d683446b980a5101df879ddcddb29cae342327a914a6420150632afb41ae236b127ada35e8393d0f44e3a7ccd94d0675ee7f6089136cd58f4bd02a8bd5fb8b21a8eb77380e304455e3c301761f5e51b6d39321a667d563e77bcc4669567150936f1a06fb5f1c6739cc99f25cbd569b76dd562bb6be26a9249ff1f9559444be74a6758431ddb19eb2ad0e857705947d", 0xe6, 0x28}, {0x3, 0xfff, &(0x7f0000000a00)='pim6reg1\x00', &(0x7f0000000a40)="8ece326b4596c56c75698e605f1b6f448288dc39397433efd0030e699b953302c1558bc048c2a25b24c173e6956e96e65a8b745f2e12df5a218f56c921a698e7c76ea019cfd7d47cb16706cd86aceef583bbf6cd4ddde1fd367de10dc0c1dfef5122654784db0ddddd3c3ea93177625a10ac3abf8b02efe46dbf39eecde3eb5559eae35062fba9e93c788e3c1cd051a387ec502c0d1ba654b166d07731682ffc683ffeaea64c155f05b05daa9e55617937045d244f8eeed3c206d11799f31c3b9467a5159d42ada71543d04a699fbefeca2cf2f268180ded7d0ef4bde34ad8df", 0xe0, 0x8}, {0x1, 0x9, &(0x7f0000000b40)='bridge_slave_0\x00', &(0x7f0000000b80)="86527a4ae29734b99503310ba74f6229398e44446571ae4be1dceff8677bb04e4b202e6528b6c9c7b4bba59bc1c7060f8f784f549f9c996a8bd63adadce9ddd006022f90d9f9f82b631ca0666c6341e47a9d1fc6bfb50f2fa942d7016ae5bc8bdba72f788cd49f9526ffb5d4703569b185df6d589ef6e71486214301697caec361423c", 0x83, 0x2a}, {0x1, 0x2, &(0x7f0000000c40)='icmp\x00', &(0x7f0000000c80)="b3e9332e2e8ce0288eb6471e97ac39a58a3d38a742c3f32edd1fedb44fa280f7e6deb81a3a72ece34a1bf5b4ef574101d5e13ad7eb3d22f7eaafe6bddcf56c9fbf63e6c3c1adbf22f078b983a6ae02e172f9cb406e8dfb6ddd970829b8d923b0eb0d4f291afed7c1f81f0ff06dee27ddd15031e1d8084ede033d9c8ef8eaacd8eeb9b89a8a21b35f6b6d0d674916bb915ad86da4e6960bbc546c88ee5e", 0x9d, 0x20}, {0x2, 0x0, &(0x7f0000000d40)='\xe9(\\]+}.\x00', &(0x7f0000000d80), 0x0, 0xa}, {0x1, 0x6b, &(0x7f0000000dc0)='}.\x00', &(0x7f0000000e00)="bd4214ef32c52d1119ee4a156ae74f27ea2f3ad509392b3ecdb80b03ab3e472f5b3df40c8c2ff59b578b158940fa7110eadfae943ef4a25d2e62932817502921f34d6d174a68ed3b946d3cc6cfabe230d87cc9a9314e578210c5e26caaea38b12c958ad54a35ef329e06e7e6c33e623d55c97159b54262ae", 0x78, 0x10}, {0x3, 0x499c, &(0x7f0000000e80)='\x00', &(0x7f0000000ec0)="147d0356fb483237f730b6d6ad2547e1e8844c4086b2d4141ab11250d2c63da1c707e8ab7882246ddcc9e4f60f5f435ac1fbe5e835e0cec021f95c5bab636dbbc4b933e316a2881be4e72c7f5558a28ae280eb9c2150073c5babe2e9ba573105ff635cfe1b750d6ed9f518eb59e49400ee33c643fab594775a0ba3205fb555", 0x7f, 0x30}]}) open_by_handle_at(r2, &(0x7f00000010c0)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x9, 0x5, 0x3, 0x79}}, 0xc201) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000001100)='cubic', 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000001180)={&(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000012c0)={&(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000001340)={r5, r6, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[0x0]}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000001380)={0xc000, 0x100000, 0x4}) fcntl$setlease(r4, 0x400, 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x8) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000013c0), 0x40) writev(r8, &(0x7f00000015c0)=[{&(0x7f0000001400)="b85bc491c734d0479a9cbec01cfeb04c076cd692a76d3315e3cc7d6250162bc7d83f591a20b3d5827229acaad2f654d742dc160b3ad7bf3d9478a6116ee8ec4a73e05d5347e6761880e23d49d40173963ac03d8c52dcd02a24f7eb9dad48a69342318c95e518db3bcc9de7f83c9cbde0e8e9d6c7b620feeaa873910dcff8c1419fad94", 0x83}, {&(0x7f00000014c0)="ec56b965048b18b87fcf89a54b020661da9e57087c0b57a3fadc065f547e42f0826ff72481238f7ab1945ba8", 0x2c}, {&(0x7f0000001500)="806082e5d36e564f3d4733c29340055405730fc891175bf1e836737252107f477b2b95bfee4c9c2688f251407be10408ba3d274b24b25c22b1ec986c08835cdf372596881424c4add36d169f6f4d183d28a2b9104cfcb932fb744257cc7675a3180697853b63c5a9c77633717549a0779e7d93583d8e7848384c0c95996152767b5e39f02eee65ddb50cf7605e", 0x8d}], 0x3) getsockopt$IP_SET_OP_GET_FNAME(r7, 0x1, 0x53, &(0x7f0000001600)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000001640)=0x2c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r4) sendmsg$NL80211_CMD_START_P2P_DEVICE(r9, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r10, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d4}, 0x4000000) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r11, 0xc0445624, &(0x7f0000001800)={0xffffaeb5, 0x0, "e14e646e92aa51943f6e6c178d02db77017d9dca84196067fabb3320c0d1f03d", 0x9, 0xf587, 0x5, 0x9e29, 0x40000183}) write$P9_RLOPEN(r0, &(0x7f0000001880)={0x18, 0xd, 0x1, {{0x2, 0x1, 0x3}, 0x81}}, 0x18) 25.984322ms ago: executing program 5 (id=3712): syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x23, 0x78, {0x78, 0x1, "a9dea1dddb012a92ed6291b2facd6348d12f161605cb42c30dcda1d7ddd5a95655bb8c294d87d52a5c33dce5a276d7a525ae60644265baa99a6a06555766b70c6149075d2858efd941416585efbc8969493f73ec0f14c4263f9bd33eb70d4b73c2784217633f02c5ede10e61452b7541ebf3918d269c"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400964000000fcc191c590bc09c8953547b7d69cd64ff46618b72dc3a88e2844f34753f9c1f30047aae3c3650c849c9591433b84210c5e8868fb413a7d217ad912d7f84e0855533cf2cba2cc75b6f5928e288cf3785fca71a9f0431d5e34fe09abfd870c"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x11, 0x6, 0x2, 0x100, 0x101, 0x0, 0x200, 0x8, 0x1, 0xfffa, 0x8, 0xa92}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x40}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 6 (id=3713): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgrp(0x0) prlimit64(r3, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) fchdir(r1) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000342b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a04020200000000fc010000000000000000000000000000fc01000000000000000000000000000000000000000c9078010000014d4d6ef91b44a69248391507fd6f6f7cbf3dfd936b68bf6d91ee1d1ed079ef1c7ff6a1b120949ddd89e18cbb33dd7384805db014c2bacc876e9552ab59b2debbcc19c6b1f1d404e9c513bd7f2d43510170f44020d7a6d1dcf64038993b1bd82d00d877a9794044c0b361e7b9007991c41a1d7f0a05a587af2d645f"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) sendmmsg$unix(r2, &(0x7f00000007c0)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x800}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048000}}], 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214010028bd7000fedbdf2505005400fce7000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80d0) kernel console output (not intermixed with test programs): 02][T16319] ? netlink_deliver_tap+0x2e/0x1b0 [ 940.066421][T16319] ? netlink_deliver_tap+0x2e/0x1b0 [ 940.066447][T16319] netlink_unicast+0x780/0x920 [ 940.066476][T16319] netlink_sendmsg+0x813/0xb40 [ 940.066505][T16319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.066533][T16319] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 940.066554][T16319] ____sys_sendmsg+0x94c/0x9c0 [ 940.066581][T16319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.066611][T16319] ? import_iovec+0x73/0xa0 [ 940.066633][T16319] ___sys_sendmsg+0x2a5/0x360 [ 940.066653][T16319] ? __lock_acquire+0x6b5/0x2cf0 [ 940.066680][T16319] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.066736][T16319] ? __fget_files+0x2a/0x420 [ 940.066751][T16319] ? __fget_files+0x3a6/0x420 [ 940.066777][T16319] __x64_sys_sendmsg+0x1c3/0x2a0 [ 940.066802][T16319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 940.066833][T16319] ? __pfx_ksys_write+0x10/0x10 [ 940.066860][T16319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.066880][T16319] do_syscall_64+0x15f/0xf80 [ 940.066902][T16319] ? clear_bhb_loop+0x40/0x90 [ 940.066923][T16319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.066940][T16319] RIP: 0033:0x7fdfb68fcdd9 [ 940.066963][T16319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.066978][T16319] RSP: 002b:00007fdfb4b35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.066997][T16319] RAX: ffffffffffffffda RBX: 00007fdfb6b76090 RCX: 00007fdfb68fcdd9 [ 940.067010][T16319] RDX: 0000000000004004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 940.067022][T16319] RBP: 00007fdfb4b35090 R08: 0000000000000000 R09: 0000000000000000 [ 940.067033][T16319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.067044][T16319] R13: 00007fdfb6b76128 R14: 00007fdfb6b76090 R15: 00007ffe6daf9668 [ 940.067074][T16319] [ 940.703144][ T820] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 940.840441][ T898] IPVS: starting estimator thread 0... [ 940.938912][T16329] IPVS: using max 11 ests per chain, 26400 per kthread [ 940.980474][T13236] Bluetooth: hci1: command tx timeout [ 941.043733][T16331] bridge1: entered promiscuous mode [ 941.043758][T16331] bridge1: entered allmulticast mode [ 941.304829][ T898] usb 2-1: USB disconnect, device number 105 [ 941.713765][T16252] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.713885][T16252] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.714077][T16252] bridge_slave_0: entered allmulticast mode [ 941.716960][T16252] bridge_slave_0: entered promiscuous mode [ 941.749888][T16252] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.750114][T16252] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.758606][T16252] bridge_slave_1: entered allmulticast mode [ 941.765744][T16252] bridge_slave_1: entered promiscuous mode [ 942.642436][T16367] ip6tnl0: Caught tx_queue_len zero misconfig [ 942.668249][ T5732] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 942.763341][T16252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.766817][T16252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.979595][ T5732] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 942.979624][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.979642][ T5732] usb 2-1: Product: syz [ 942.979655][ T5732] usb 2-1: Manufacturer: syz [ 942.979668][ T5732] usb 2-1: SerialNumber: syz [ 942.992930][ T5732] usb 2-1: config 0 descriptor?? [ 943.053470][T13236] Bluetooth: hci1: command tx timeout [ 943.114478][T16252] team0: Port device team_slave_0 added [ 943.129309][T16382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3337'. [ 943.135764][T16252] team0: Port device team_slave_1 added [ 943.168619][T16386] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3339'. [ 943.615551][T16382] binder: 16381:16382 ioctl 4018620d 0 returned -22 [ 943.969386][T16252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.969408][T16252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.969434][T16252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.169750][T16252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.169770][T16252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.169784][T16252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.194037][T16389] binder: 16381:16389 ioctl c0306201 200000000240 returned -14 [ 945.652308][T13236] Bluetooth: hci1: command tx timeout [ 946.146104][T16252] hsr_slave_0: entered promiscuous mode [ 946.156772][T16252] hsr_slave_1: entered promiscuous mode [ 946.160431][T16252] debugfs: 'hsr0' already exists in 'hsr' [ 946.160457][T16252] Cannot create hsr debugfs directory [ 946.195588][T16410] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 946.394931][ T820] usb 2-1: USB disconnect, device number 106 [ 947.579024][T16434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3353'. [ 948.710454][T16467] FAULT_INJECTION: forcing a failure. [ 948.710454][T16467] name failslab, interval 1, probability 0, space 0, times 0 [ 948.710490][T16467] CPU: 1 UID: 0 PID: 16467 Comm: syz.6.3365 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 948.710515][T16467] Tainted: [L]=SOFTLOCKUP [ 948.710523][T16467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 948.710533][T16467] Call Trace: [ 948.710540][T16467] [ 948.710548][T16467] dump_stack_lvl+0xe8/0x150 [ 948.710581][T16467] should_fail_ex+0x46b/0x600 [ 948.710609][T16467] should_failslab+0xa8/0x100 [ 948.710627][T16467] __kmalloc_noprof+0xdf/0x7b0 [ 948.710642][T16467] ? __kasan_kmalloc+0x93/0xb0 [ 948.710655][T16467] ? nla_strdup+0x9d/0x140 [ 948.710674][T16467] nla_strdup+0x9d/0x140 [ 948.710690][T16467] nf_tables_newtable+0x491/0x1910 [ 948.710709][T16467] ? nfnetlink_subsys_unregister+0x192/0x1c0 [ 948.710739][T16467] nfnetlink_rcv+0x1247/0x27b0 [ 948.710782][T16467] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 948.710809][T16467] ? ref_tracker_free+0x673/0x820 [ 948.710845][T16467] ? __netlink_deliver_tap+0x807/0x850 [ 948.710868][T16467] ? netlink_deliver_tap+0x2e/0x1b0 [ 948.710883][T16467] ? netlink_deliver_tap+0x2e/0x1b0 [ 948.710902][T16467] netlink_unicast+0x780/0x920 [ 948.710924][T16467] netlink_sendmsg+0x813/0xb40 [ 948.710947][T16467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.710964][T16467] ? unwind_get_return_address+0x4d/0x90 [ 948.710985][T16467] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 948.711002][T16467] ____sys_sendmsg+0x94c/0x9c0 [ 948.711023][T16467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 948.711047][T16467] ? import_iovec+0x73/0xa0 [ 948.711065][T16467] ___sys_sendmsg+0x2a5/0x360 [ 948.711081][T16467] ? __lock_acquire+0x6b5/0x2cf0 [ 948.711102][T16467] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.711145][T16467] ? __fget_files+0x2a/0x420 [ 948.711175][T16467] ? __fget_files+0x3a6/0x420 [ 948.711195][T16467] __x64_sys_sendmsg+0x1c3/0x2a0 [ 948.711214][T16467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 948.711238][T16467] ? __pfx_ksys_write+0x10/0x10 [ 948.711260][T16467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.711275][T16467] do_syscall_64+0x15f/0xf80 [ 948.711290][T16467] ? trace_irq_disable+0x3b/0x140 [ 948.711308][T16467] ? clear_bhb_loop+0x40/0x90 [ 948.711325][T16467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.711339][T16467] RIP: 0033:0x7fdfb68fcdd9 [ 948.711353][T16467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.711365][T16467] RSP: 002b:00007fdfb4b56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.711381][T16467] RAX: ffffffffffffffda RBX: 00007fdfb6b75fa0 RCX: 00007fdfb68fcdd9 [ 948.711391][T16467] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 948.711399][T16467] RBP: 00007fdfb4b56090 R08: 0000000000000000 R09: 0000000000000000 [ 948.711407][T16467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.711415][T16467] R13: 00007fdfb6b76038 R14: 00007fdfb6b75fa0 R15: 00007ffe6daf9668 [ 948.711437][T16467] [ 949.740960][T16252] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.740993][T16252] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.999963][T16491] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 951.337450][T16252] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.337472][T16252] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.468359][ T820] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 951.685098][ T820] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 951.685116][ T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.685127][ T820] usb 2-1: Product: syz [ 951.685134][ T820] usb 2-1: Manufacturer: syz [ 951.685142][ T820] usb 2-1: SerialNumber: syz [ 951.803853][T16527] Invalid ELF header len 3 [ 952.023777][T16252] bond0: (slave netdevsim1): Releasing backup interface [ 952.146674][ T820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 952.146736][ T820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 952.211734][T16252] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.211823][T16252] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.228366][ T5732] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 952.385808][ T5732] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 952.385909][ T5732] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 952.420553][ T5732] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 952.420583][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.420659][ T5732] usb 4-1: Product: syz [ 952.420672][ T5732] usb 4-1: Manufacturer: syz [ 952.420686][ T5732] usb 4-1: SerialNumber: syz [ 952.474084][T16526] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3390'. [ 952.487947][ T5732] usb 4-1: config 0 descriptor?? [ 952.489286][T16533] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 952.489406][T16533] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 952.692408][T16533] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 952.692672][T16533] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 952.900568][T16533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.901560][T16533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.205187][ T5732] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 953.223729][T16252] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.223762][T16252] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.406618][ T820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 953.407460][ T820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 953.606841][T13236] Bluetooth: hci4: unexpected event 0x03 length: 10 < 11 [ 953.698968][ T5732] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 953.726928][ T820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 953.726985][ T820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 953.804541][ T5732] usb 4-1: USB disconnect, device number 70 [ 953.942223][ T820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 954.027219][ T820] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 954.117459][ T820] usb 2-1: USB disconnect, device number 107 [ 954.278321][ T5735] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 954.331634][T16596] FAULT_INJECTION: forcing a failure. [ 954.331634][T16596] name failslab, interval 1, probability 0, space 0, times 0 [ 954.331664][T16596] CPU: 0 UID: 0 PID: 16596 Comm: syz.6.3422 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 954.331684][T16596] Tainted: [L]=SOFTLOCKUP [ 954.331689][T16596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 954.331697][T16596] Call Trace: [ 954.331704][T16596] [ 954.331710][T16596] dump_stack_lvl+0xe8/0x150 [ 954.331732][T16596] should_fail_ex+0x46b/0x600 [ 954.331760][T16596] should_failslab+0xa8/0x100 [ 954.331780][T16596] kmem_cache_alloc_noprof+0x87/0x680 [ 954.331796][T16596] ? alloc_empty_file+0x5b/0x1d0 [ 954.331819][T16596] alloc_empty_file+0x5b/0x1d0 [ 954.331837][T16596] path_openat+0x11b/0x38a0 [ 954.331851][T16596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.331893][T16596] ? __pfx_path_openat+0x10/0x10 [ 954.331913][T16596] ? rcu_is_watching+0x15/0xb0 [ 954.331935][T16596] ? trace_kmem_cache_alloc+0x29/0xe0 [ 954.331957][T16596] ? kmem_cache_alloc_noprof+0x388/0x680 [ 954.331972][T16596] ? do_getname_kernel+0x97/0x230 [ 954.331992][T16596] ? __asan_memcpy+0x40/0x70 [ 954.332010][T16596] ? do_file_open_root+0x584/0x710 [ 954.332038][T16596] do_file_open_root+0x32f/0x710 [ 954.332057][T16596] ? __pfx_do_file_open_root+0x10/0x10 [ 954.332071][T16596] ? do_raw_spin_lock+0x12b/0x2f0 [ 954.332103][T16596] ? rt_spin_lock+0x1e0/0x400 [ 954.332119][T16596] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 954.332130][T16596] ? build_open_flags+0x44a/0x5b0 [ 954.332155][T16596] file_open_root+0x166/0x1c0 [ 954.332176][T16596] ? __pfx_file_open_root+0x10/0x10 [ 954.332203][T16596] ? __pfx_nsfs_export_open+0x10/0x10 [ 954.332219][T16596] do_handle_open+0x850/0x970 [ 954.332242][T16596] ? __pfx_do_handle_open+0x10/0x10 [ 954.332263][T16596] ? ksys_write+0x248/0x270 [ 954.332281][T16596] ? __pfx_ksys_write+0x10/0x10 [ 954.332301][T16596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.332319][T16596] do_syscall_64+0x15f/0xf80 [ 954.332337][T16596] ? trace_irq_disable+0x3b/0x140 [ 954.332356][T16596] ? clear_bhb_loop+0x40/0x90 [ 954.332372][T16596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.332386][T16596] RIP: 0033:0x7fdfb68fcdd9 [ 954.332400][T16596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.332411][T16596] RSP: 002b:00007fdfb4b56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 954.332426][T16596] RAX: ffffffffffffffda RBX: 00007fdfb6b75fa0 RCX: 00007fdfb68fcdd9 [ 954.332436][T16596] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 954.332444][T16596] RBP: 00007fdfb4b56090 R08: 0000000000000000 R09: 0000000000000000 [ 954.332452][T16596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.332460][T16596] R13: 00007fdfb6b76038 R14: 00007fdfb6b75fa0 R15: 00007ffe6daf9668 [ 954.332481][T16596] [ 954.428310][ T5735] usb 5-1: Using ep0 maxpacket: 8 [ 954.433810][ T5735] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 954.433838][ T5735] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 954.433856][ T5735] usb 5-1: Product: syz [ 954.433869][ T5735] usb 5-1: Manufacturer: syz [ 954.433881][ T5735] usb 5-1: SerialNumber: syz [ 954.448034][ T5735] usb 5-1: config 0 descriptor?? [ 954.476018][ T5735] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 954.795965][T16252] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 954.945757][T16252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 954.961866][T16252] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 955.051771][T16252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 955.053353][T16252] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 955.085428][ T5735] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input64 [ 955.114237][T16252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 955.115532][T16252] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 955.289389][ T31] usb 5-1: USB disconnect, device number 94 [ 955.406014][T16252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 956.130462][T16642] MTD: Couldn't look up '/dev/nullb0': -15 [ 956.171996][T16642] /dev/nullb0: Can't lookup blockdev [ 956.388805][ T820] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 956.564598][T16252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.630431][ T820] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 956.630460][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.630479][ T820] usb 5-1: Product: syz [ 956.630492][ T820] usb 5-1: Manufacturer: syz [ 956.630506][ T820] usb 5-1: SerialNumber: syz [ 956.703951][ T820] usb 5-1: config 0 descriptor?? [ 956.754737][ T820] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 957.123419][T16252] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.186599][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.188100][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.246971][T13921] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.247388][T13921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.286155][ T5735] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 957.363994][T16658] program syz.6.3444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 957.364032][T16658] FAULT_INJECTION: forcing a failure. [ 957.364032][T16658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.364055][T16658] CPU: 0 UID: 0 PID: 16658 Comm: syz.6.3444 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 957.364075][T16658] Tainted: [L]=SOFTLOCKUP [ 957.364081][T16658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 957.364090][T16658] Call Trace: [ 957.364096][T16658] [ 957.364103][T16658] dump_stack_lvl+0xe8/0x150 [ 957.364125][T16658] should_fail_ex+0x46b/0x600 [ 957.364151][T16658] _copy_from_user+0x2d/0xb0 [ 957.364168][T16658] scsi_ioctl+0x186d/0x2130 [ 957.364192][T16658] ? __pfx_scsi_ioctl+0x10/0x10 [ 957.364234][T16658] ? kasan_quarantine_put+0xbb/0x1f0 [ 957.364255][T16658] ? tomoyo_path_number_perm+0x219/0x630 [ 957.364274][T16658] ? tomoyo_path_number_perm+0x219/0x630 [ 957.364294][T16658] ? do_vfs_ioctl+0x117b/0x1540 [ 957.364315][T16658] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 957.364348][T16658] sg_ioctl+0x1600/0x21a0 [ 957.364373][T16658] ? __pfx_smack_file_ioctl+0x10/0x10 [ 957.364391][T16658] ? __pfx_sg_ioctl+0x10/0x10 [ 957.364411][T16658] ? __fget_files+0x2a/0x420 [ 957.364422][T16658] ? __fget_files+0x3a6/0x420 [ 957.364433][T16658] ? __fget_files+0x2a/0x420 [ 957.364447][T16658] ? bpf_lsm_file_ioctl+0x9/0x20 [ 957.364464][T16658] ? __pfx_sg_ioctl+0x10/0x10 [ 957.364480][T16658] __se_sys_ioctl+0xff/0x170 [ 957.364495][T16658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.364523][T16658] do_syscall_64+0x15f/0xf80 [ 957.364540][T16658] ? trace_irq_disable+0x3b/0x140 [ 957.364556][T16658] ? clear_bhb_loop+0x40/0x90 [ 957.364575][T16658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.364589][T16658] RIP: 0033:0x7fdfb68fcdd9 [ 957.364604][T16658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.364617][T16658] RSP: 002b:00007fdfb4b56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 957.364634][T16658] RAX: ffffffffffffffda RBX: 00007fdfb6b75fa0 RCX: 00007fdfb68fcdd9 [ 957.364645][T16658] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 957.364655][T16658] RBP: 00007fdfb4b56090 R08: 0000000000000000 R09: 0000000000000000 [ 957.364664][T16658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.364673][T16658] R13: 00007fdfb6b76038 R14: 00007fdfb6b75fa0 R15: 00007ffe6daf9668 [ 957.364695][T16658] [ 957.418310][ T5735] usb 4-1: device descriptor read/64, error -71 [ 957.678268][ T5735] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 957.808327][ T5735] usb 4-1: device descriptor read/64, error -71 [ 957.818019][T16668] FAULT_INJECTION: forcing a failure. [ 957.818019][T16668] name fail_futex, interval 1, probability 0, space 0, times 1 [ 957.818042][T16668] CPU: 1 UID: 0 PID: 16668 Comm: syz.6.3447 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 957.818057][T16668] Tainted: [L]=SOFTLOCKUP [ 957.818061][T16668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 957.818067][T16668] Call Trace: [ 957.818071][T16668] [ 957.818077][T16668] dump_stack_lvl+0xe8/0x150 [ 957.818094][T16668] should_fail_ex+0x46b/0x600 [ 957.818116][T16668] get_futex_key+0x1b0/0x1590 [ 957.818137][T16668] ? _parse_integer_limit+0x1ae/0x1f0 [ 957.818165][T16668] ? __pfx_get_futex_key+0x10/0x10 [ 957.818186][T16668] ? kstrtouint+0x6e/0xe0 [ 957.818215][T16668] futex_wake_op+0x156/0xdd0 [ 957.818243][T16668] ? __pfx_futex_wake_op+0x10/0x10 [ 957.818269][T16668] ? do_raw_spin_lock+0x12b/0x2f0 [ 957.818297][T16668] do_futex+0x3bd/0x420 [ 957.818318][T16668] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 957.818343][T16668] ? __pfx_do_futex+0x10/0x10 [ 957.818364][T16668] ? rt_mutex_slowunlock+0x1cb/0x300 [ 957.818380][T16668] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 957.818403][T16668] __se_sys_futex+0x3a8/0x450 [ 957.818427][T16668] ? ksys_write+0x248/0x270 [ 957.818445][T16668] ? __pfx___se_sys_futex+0x10/0x10 [ 957.818467][T16668] ? __pfx_ksys_write+0x10/0x10 [ 957.818498][T16668] ? __x64_sys_futex+0x21/0xf0 [ 957.818522][T16668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.818542][T16668] do_syscall_64+0x15f/0xf80 [ 957.818561][T16668] ? trace_irq_disable+0x3b/0x140 [ 957.818581][T16668] ? clear_bhb_loop+0x40/0x90 [ 957.818602][T16668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.818620][T16668] RIP: 0033:0x7fdfb68fcdd9 [ 957.818638][T16668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.818654][T16668] RSP: 002b:00007fdfb4b14028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 957.818673][T16668] RAX: ffffffffffffffda RBX: 00007fdfb6b76180 RCX: 00007fdfb68fcdd9 [ 957.818687][T16668] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000020000000cffc [ 957.818698][T16668] RBP: 00007fdfb4b14090 R08: 0000200000000000 R09: 0000000004fffffe [ 957.818710][T16668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.818720][T16668] R13: 00007fdfb6b76218 R14: 00007fdfb6b76180 R15: 00007ffe6daf9668 [ 957.818748][T16668] [ 957.948352][ T5735] usb usb4-port1: attempt power cycle [ 958.251081][T16672] Bluetooth: MGMT ver 1.23 [ 958.332866][ T820] gspca_stk1135: reg_w 0xf err -71 [ 958.333905][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 958.333919][ T820] gspca_stk1135: Sensor write failed [ 958.333943][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 958.333952][ T820] gspca_stk1135: Sensor write failed [ 958.333974][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 958.333983][ T820] gspca_stk1135: Sensor read failed [ 958.334006][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 958.334015][ T820] gspca_stk1135: Sensor read failed [ 958.334022][ T820] gspca_stk1135: Detected sensor type unknown (0x0) [ 958.334049][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 958.334058][ T820] gspca_stk1135: Sensor read failed [ 958.334080][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 958.334088][ T820] gspca_stk1135: Sensor read failed [ 958.334108][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 958.334116][ T820] gspca_stk1135: Sensor write failed [ 958.334139][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 958.334148][ T820] gspca_stk1135: Sensor write failed [ 958.334231][ T820] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 958.348452][ T5735] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 958.370684][ T820] usb 5-1: USB disconnect, device number 95 [ 958.381445][ T5735] usb 4-1: device descriptor read/8, error -71 [ 958.619872][ T5735] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 958.639047][ T5735] usb 4-1: device descriptor read/8, error -71 [ 958.749803][ T5735] usb usb4-port1: unable to enumerate USB device [ 958.755695][T16252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.279561][T16252] veth0_vlan: entered promiscuous mode [ 959.304144][T16252] veth1_vlan: entered promiscuous mode [ 959.369638][T16252] veth0_macvtap: entered promiscuous mode [ 959.375528][T16252] veth1_macvtap: entered promiscuous mode [ 959.486079][T16252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.519049][T16252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.558487][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.561554][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.562581][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.605274][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.583411][T16723] FAULT_INJECTION: forcing a failure. [ 960.583411][T16723] name failslab, interval 1, probability 0, space 0, times 0 [ 960.583469][T16723] CPU: 0 UID: 0 PID: 16723 Comm: syz.4.3463 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 960.583494][T16723] Tainted: [L]=SOFTLOCKUP [ 960.583502][T16723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 960.583513][T16723] Call Trace: [ 960.583521][T16723] [ 960.583529][T16723] dump_stack_lvl+0xe8/0x150 [ 960.583556][T16723] should_fail_ex+0x46b/0x600 [ 960.583589][T16723] should_failslab+0xa8/0x100 [ 960.583613][T16723] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 960.583633][T16723] ? __alloc_skb+0x1d0/0x7d0 [ 960.583652][T16723] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 960.583678][T16723] __alloc_skb+0x1d0/0x7d0 [ 960.583703][T16723] alloc_skb_with_frags+0xc8/0x760 [ 960.583736][T16723] sock_alloc_send_pskb+0x884/0x9a0 [ 960.583761][T16723] ? finish_task_switch+0x41f/0xbe0 [ 960.583790][T16723] ? trace_sched_exit_tp+0x3a/0x130 [ 960.583825][T16723] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 960.583855][T16723] ? irqentry_exit+0x218/0x760 [ 960.583877][T16723] ? lockdep_hardirqs_on+0x7a/0x110 [ 960.583898][T16723] ? irqentry_exit+0x218/0x760 [ 960.583921][T16723] hci_sock_sendmsg+0x208/0xf40 [ 960.583943][T16723] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 960.583963][T16723] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 960.583980][T16723] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 960.583999][T16723] ? sock_write_iter+0x48f/0x4f0 [ 960.584028][T16723] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 960.584046][T16723] sock_write_iter+0x4a1/0x4f0 [ 960.584073][T16723] ? __pfx_sock_write_iter+0x10/0x10 [ 960.584149][T16723] ? rcu_is_watching+0x15/0xb0 [ 960.584195][T16723] vfs_write+0x629/0xba0 [ 960.584225][T16723] ? __pfx_vfs_write+0x10/0x10 [ 960.584255][T16723] ? __fget_files+0x2a/0x420 [ 960.584281][T16723] ksys_write+0x156/0x270 [ 960.584304][T16723] ? __pfx_ksys_write+0x10/0x10 [ 960.584332][T16723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.584350][T16723] do_syscall_64+0x15f/0xf80 [ 960.584373][T16723] ? clear_bhb_loop+0x40/0x90 [ 960.584396][T16723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.584414][T16723] RIP: 0033:0x7fa847eecdd9 [ 960.584431][T16723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.584452][T16723] RSP: 002b:00007fa8460fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 960.584475][T16723] RAX: ffffffffffffffda RBX: 00007fa848166180 RCX: 00007fa847eecdd9 [ 960.584489][T16723] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000006 [ 960.584501][T16723] RBP: 00007fa8460fc090 R08: 0000000000000000 R09: 0000000000000000 [ 960.584513][T16723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.584528][T16723] R13: 00007fa848166218 R14: 00007fa848166180 R15: 00007ffd94b4a958 [ 960.584561][T16723] [ 961.979241][ T898] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 962.198281][ T898] usb 4-1: Using ep0 maxpacket: 8 [ 962.227602][ T898] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 962.227631][ T898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.227650][ T898] usb 4-1: Product: syz [ 962.227663][ T898] usb 4-1: Manufacturer: syz [ 962.227677][ T898] usb 4-1: SerialNumber: syz [ 962.247203][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.247223][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.302653][ T898] usb 4-1: config 0 descriptor?? [ 962.319275][ T898] gspca_main: se401-2.14.0 probing 047d:5003 [ 962.561063][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.561084][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.051713][ T820] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 963.874148][ T898] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 963.874239][ T898] se401 4-1:0.0: probe with driver se401 failed with error -110 [ 963.980208][ T820] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 963.980238][ T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.980258][ T820] usb 2-1: Product: syz [ 963.980272][ T820] usb 2-1: Manufacturer: syz [ 963.980284][ T820] usb 2-1: SerialNumber: syz [ 964.007730][ T820] usb 2-1: config 0 descriptor?? [ 964.225241][ T5735] usb 4-1: USB disconnect, device number 75 [ 964.783630][T16779] FAULT_INJECTION: forcing a failure. [ 964.783630][T16779] name failslab, interval 1, probability 0, space 0, times 0 [ 964.783664][T16779] CPU: 0 UID: 0 PID: 16779 Comm: syz.4.3485 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 964.783690][T16779] Tainted: [L]=SOFTLOCKUP [ 964.783697][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 964.783708][T16779] Call Trace: [ 964.783720][T16779] [ 964.783728][T16779] dump_stack_lvl+0xe8/0x150 [ 964.783756][T16779] should_fail_ex+0x46b/0x600 [ 964.783839][T16779] should_failslab+0xa8/0x100 [ 964.783864][T16779] kmem_cache_alloc_noprof+0x87/0x680 [ 964.783883][T16779] ? arch_stack_walk+0xfb/0x150 [ 964.783905][T16779] ? vm_area_dup+0x2b/0x670 [ 964.783931][T16779] vm_area_dup+0x2b/0x670 [ 964.783957][T16779] __split_vma+0x1e4/0xa30 [ 964.783982][T16779] ? __lock_acquire+0x6b5/0x2cf0 [ 964.784015][T16779] ? __pfx___split_vma+0x10/0x10 [ 964.784059][T16779] vms_gather_munmap_vmas+0x32d/0x1380 [ 964.784081][T16779] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 964.784103][T16779] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 964.784136][T16779] ? mtree_range_walk+0x6fc/0x8b0 [ 964.784162][T16779] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 964.784196][T16779] ? mas_find+0xa7d/0xd30 [ 964.784222][T16779] mmap_region+0x945/0x2280 [ 964.784260][T16779] ? __pfx_mmap_region+0x10/0x10 [ 964.784283][T16779] ? __lock_acquire+0x6b5/0x2cf0 [ 964.784311][T16779] ? __lock_acquire+0x6b5/0x2cf0 [ 964.784335][T16779] ? __lock_acquire+0x6b5/0x2cf0 [ 964.784415][T16779] ? __lock_acquire+0x6b5/0x2cf0 [ 964.784448][T16779] ? __lock_acquire+0x6b5/0x2cf0 [ 964.784473][T16779] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 964.784500][T16779] ? __lock_acquire+0x6b5/0x2cf0 [ 964.784520][T16779] ? cap_mmap_addr+0xaf/0x100 [ 964.784542][T16779] ? bpf_lsm_mmap_addr+0x9/0x50 [ 964.784565][T16779] ? shmem_mapping+0xd/0x50 [ 964.784580][T16779] ? memfd_check_seals_mmap+0xcb/0x210 [ 964.784606][T16779] do_mmap+0xc2f/0x10c0 [ 964.784627][T16779] ? lockdep_hardirqs_on+0x7a/0x110 [ 964.784648][T16779] ? __pfx_do_mmap+0x10/0x10 [ 964.784663][T16779] ? rwbase_write_lock+0x568/0x730 [ 964.784695][T16779] vm_mmap_pgoff+0x2cc/0x4f0 [ 964.784719][T16779] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 964.784742][T16779] ? __fget_files+0x2a/0x420 [ 964.784756][T16779] ? __fget_files+0x3a6/0x420 [ 964.784771][T16779] ? __fget_files+0x2a/0x420 [ 964.784796][T16779] ksys_mmap_pgoff+0x4e8/0x720 [ 964.784815][T16779] ? __x64_sys_mmap+0x7f/0x140 [ 964.784834][T16779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.784853][T16779] do_syscall_64+0x15f/0xf80 [ 964.784872][T16779] ? trace_irq_disable+0x3b/0x140 [ 964.784891][T16779] ? clear_bhb_loop+0x40/0x90 [ 964.784912][T16779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.784929][T16779] RIP: 0033:0x7fa847eecdd9 [ 964.784945][T16779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.784960][T16779] RSP: 002b:00007fa84613e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 964.784978][T16779] RAX: ffffffffffffffda RBX: 00007fa848165fa0 RCX: 00007fa847eecdd9 [ 964.784989][T16779] RDX: 0000000001000001 RSI: 0000000000002000 RDI: 0000200000ffd000 [ 964.785000][T16779] RBP: 00007fa84613e090 R08: 0000000000000003 R09: 0000000000000000 [ 964.785010][T16779] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 964.785020][T16779] R13: 00007fa848166038 R14: 00007fa848165fa0 R15: 00007ffd94b4a958 [ 964.785048][T16779] [ 965.076055][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 965.129545][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 965.131502][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 965.136852][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 965.137710][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 965.643094][ T5735] usb 2-1: USB disconnect, device number 108 [ 965.789538][ T898] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 965.923488][ T898] usb 6-1: device descriptor read/64, error -71 [ 966.787812][T16788] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 966.789868][T16788] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 966.848404][ T898] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 966.972743][T16788] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 966.973035][T16788] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 966.988257][ T898] usb 6-1: device descriptor read/64, error -71 [ 967.105299][ T898] usb usb6-port1: attempt power cycle [ 967.108649][T16788] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 967.234701][T16788] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 967.234785][T16788] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 967.353467][T16788] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 967.377788][ T5607] Bluetooth: hci5: command tx timeout [ 967.402226][T16788] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 967.402634][T16788] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 967.445093][T16788] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 967.548290][ T898] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 967.574355][ T898] usb 6-1: device descriptor read/8, error -71 [ 967.680278][T16815] program syz.1.3492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 967.811246][ T898] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 967.831971][ T898] usb 6-1: device descriptor read/8, error -71 [ 967.882874][T16819] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3493'. [ 967.938742][ T898] usb usb6-port1: unable to enumerate USB device [ 968.498610][ T898] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 968.656860][ T898] usb 2-1: Using ep0 maxpacket: 8 [ 968.707355][ T898] usb 2-1: config index 0 descriptor too short (expected 57652, got 308) [ 968.707384][ T898] usb 2-1: config 9 has too many interfaces: 59, using maximum allowed: 32 [ 968.707488][ T898] usb 2-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 968.707507][ T898] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 968.707525][ T898] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 59 [ 968.777592][ T898] usb 2-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 968.777621][ T898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.777637][ T898] usb 2-1: Product: syz [ 968.777644][ T898] usb 2-1: Manufacturer: syz [ 968.777651][ T898] usb 2-1: SerialNumber: syz [ 968.810025][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 968.892745][T16827] program syz.5.3496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 969.058409][ T5607] Bluetooth: hci4: command 0x0c1a tx timeout [ 969.098808][ T898] usb 2-1: USB disconnect, device number 109 [ 969.288651][ T5607] Bluetooth: hci1: command 0x0c1a tx timeout [ 969.458278][ T5607] Bluetooth: hci5: command 0x040f tx timeout [ 971.190412][ T5607] Bluetooth: hci4: command 0x0c1a tx timeout [ 971.568171][T13236] Bluetooth: hci1: command 0x0c1a tx timeout [ 971.568220][T13236] Bluetooth: hci3: command 0x0406 tx timeout [ 971.568246][T13236] Bluetooth: hci5: command 0x040f tx timeout [ 971.857164][T16857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3502'. [ 972.065293][T16777] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.067455][T16777] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.067747][T16777] bridge_slave_0: entered allmulticast mode [ 972.069872][T16777] bridge_slave_0: entered promiscuous mode [ 972.075902][T16862] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3503'. [ 972.075923][T16862] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 972.127515][T16777] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.127787][T16777] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.128064][T16777] bridge_slave_1: entered allmulticast mode [ 972.156591][T16777] bridge_slave_1: entered promiscuous mode [ 972.209505][T16777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.213603][T16777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.275660][T16777] team0: Port device team_slave_0 added [ 972.285692][T16777] team0: Port device team_slave_1 added [ 973.109821][T16777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.109837][T16777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.109871][T16777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.161318][T16777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.161337][T16777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.161363][T16777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.258386][ T898] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 973.391921][ T898] usb 2-1: device descriptor read/64, error -71 [ 973.608570][ T5617] Bluetooth: hci5: command 0x040f tx timeout [ 973.608605][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 973.608724][T16855] Bluetooth: hci4: command 0x0c1a tx timeout [ 973.629110][ T898] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 973.669944][ T820] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 973.768991][ T898] usb 2-1: device descriptor read/64, error -71 [ 973.793831][T16777] hsr_slave_0: entered promiscuous mode [ 973.796522][T16777] hsr_slave_1: entered promiscuous mode [ 973.797430][T16777] debugfs: 'hsr0' already exists in 'hsr' [ 973.797454][T16777] Cannot create hsr debugfs directory [ 973.798544][ T820] usb 5-1: device descriptor read/64, error -71 [ 973.880764][ T898] usb usb2-port1: attempt power cycle [ 974.039083][ T820] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 974.168372][ T820] usb 5-1: device descriptor read/64, error -71 [ 974.220536][ T898] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 974.242020][ T898] usb 2-1: device descriptor read/8, error -71 [ 974.280724][ T820] usb usb5-port1: attempt power cycle [ 974.478833][ T898] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 974.499881][ T898] usb 2-1: device descriptor read/8, error -71 [ 974.613827][ T898] usb usb2-port1: unable to enumerate USB device [ 974.632774][ T820] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 974.650432][ T820] usb 5-1: device descriptor read/8, error -71 [ 974.992119][ T820] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 975.026581][ T820] usb 5-1: device descriptor read/8, error -71 [ 975.072565][T16908] dns_resolver: Unsupported content type (254) [ 975.076802][T16777] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.077962][ T37] kauditd_printk_skb: 66 callbacks suppressed [ 975.077977][ T37] audit: type=1800 audit(1778412678.527:1240): pid=16908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.3509" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=142 res=0 errno=0 [ 975.138810][ T820] usb usb5-port1: unable to enumerate USB device [ 975.251136][T16905] C: renamed from veth1_to_team (while UP) [ 975.292928][T16905] netlink: 'syz.3.3509': attribute type 1 has an invalid length. [ 975.292947][T16905] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3509'. [ 975.292963][T16905] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 976.801066][ T5617] Bluetooth: hci5: command 0x040f tx timeout [ 977.532795][T16927] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3512'. [ 977.617931][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3514'. [ 977.767846][T16940] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3516'. [ 978.296549][T16950] input: syz1 as /devices/virtual/input/input65 [ 978.900869][T16855] Bluetooth: hci5: command 0x040f tx timeout [ 979.462020][ T898] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 979.766174][T16777] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.838372][ T898] usb 5-1: Using ep0 maxpacket: 16 [ 979.841532][ T898] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 979.841558][ T898] usb 5-1: config 0 has no interface number 0 [ 979.841608][ T898] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.841630][ T898] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.841666][ T898] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 979.841686][ T898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.845650][ T898] usb 5-1: config 0 descriptor?? [ 979.948336][ T31] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 980.100323][ T31] usb 4-1: device descriptor read/64, error -71 [ 980.277507][ T5732] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 980.303640][ T898] hid (null): bogus close delimiter [ 980.428306][ T5732] usb 6-1: device descriptor read/64, error -71 [ 980.428379][ T31] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 980.449160][T16777] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.558292][ T31] usb 4-1: device descriptor read/64, error -71 [ 980.656470][ T898] usb 5-1: USB disconnect, device number 100 [ 980.668523][ T5732] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 980.669115][ T31] usb usb4-port1: attempt power cycle [ 980.840262][ T5732] usb 6-1: device descriptor read/64, error -71 [ 981.087218][T16855] Bluetooth: hci5: command 0x040f tx timeout [ 981.088743][ T5732] usb usb6-port1: attempt power cycle [ 981.213943][ T31] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 981.251671][ T31] usb 4-1: device descriptor read/8, error -71 [ 981.255101][T16777] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.503882][T16986] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3528'. [ 981.588514][ T5732] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 981.639989][ T5732] usb 6-1: device descriptor read/8, error -71 [ 981.800109][ T31] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 981.881858][ T31] usb 4-1: device descriptor read/8, error -71 [ 982.398723][ T31] usb usb4-port1: unable to enumerate USB device [ 982.570369][ T5732] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 982.589311][ T5732] usb 6-1: device descriptor read/8, error -71 [ 982.710163][ T5732] usb usb6-port1: unable to enumerate USB device [ 983.901171][ T898] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 984.091240][ T898] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 984.091268][ T898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.125396][ T898] usb 6-1: config 0 descriptor?? [ 984.135609][ T898] cp210x 6-1:0.0: cp210x converter detected [ 984.582677][ T898] usb 6-1: cp210x converter now attached to ttyUSB0 [ 984.694063][T16777] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 984.771194][T16777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 984.772746][T16777] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 984.845220][ T898] usb 6-1: USB disconnect, device number 92 [ 984.878251][ T898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 984.884177][ T898] cp210x 6-1:0.0: device disconnected [ 984.984999][T16777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 984.987194][T16777] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 985.037304][T16777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 985.053775][T16777] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 985.107797][T16777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 985.686801][T17019] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3536'. [ 986.784106][T16777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.847841][T16777] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.880582][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.882280][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.900250][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.902002][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.918251][ T898] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 987.038272][T12234] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 987.068251][ T898] usb 2-1: Using ep0 maxpacket: 32 [ 987.070047][ T898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.070076][ T898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.070111][ T898] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 987.070137][ T898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.131435][ T898] usb 2-1: config 0 descriptor?? [ 987.188331][T12234] usb 5-1: device descriptor read/64, error -71 [ 987.326676][T17033] kvm: kvm [17032]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4800 [ 987.327905][T17033] kvm: kvm [17032]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4900 [ 987.343730][T17033] kvm: kvm [17032]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1800 [ 987.428305][T12234] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 987.560880][T12234] usb 5-1: device descriptor read/64, error -71 [ 987.576306][ T898] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 987.579957][ T898] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 987.669264][T12234] usb usb5-port1: attempt power cycle [ 987.778659][T17029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.779609][T17029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.828376][ T898] ft260 0003:0403:6030.0029: chip code: 0000 0000 [ 988.008451][T12234] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 988.029918][T12234] usb 5-1: device descriptor read/8, error -71 [ 988.030712][ T898] ft260 0003:0403:6030.0029: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 988.235214][ T898] ft260 0003:0403:6030.0029: failed to retrieve status: -71, no wakeup [ 988.237347][ T898] ft260 0003:0403:6030.0029: failed to retrieve status: -71 [ 988.238018][ T898] ft260 0003:0403:6030.0029: failed to reset I2C controller: -71 [ 988.275901][T12234] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 988.292304][T12234] usb 5-1: device descriptor read/8, error -71 [ 988.356721][T16777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.403275][T12234] usb usb5-port1: unable to enumerate USB device [ 988.409978][ T820] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 988.443814][ T898] usb 2-1: USB disconnect, device number 114 [ 988.584505][ T820] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 988.584531][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.584542][ T820] usb 4-1: Product: syz [ 988.584549][ T820] usb 4-1: Manufacturer: syz [ 988.584556][ T820] usb 4-1: SerialNumber: syz [ 988.598905][ T820] usb 4-1: config 0 descriptor?? [ 988.626729][ T820] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 988.908262][ T5735] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 989.034902][T17067] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3549'. [ 989.074954][ T5735] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 989.074983][ T5735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.075001][ T5735] usb 6-1: Product: syz [ 989.075015][ T5735] usb 6-1: Manufacturer: syz [ 989.075028][ T5735] usb 6-1: SerialNumber: syz [ 989.126836][ T5735] usb 6-1: config 0 descriptor?? [ 989.208053][T16777] veth0_vlan: entered promiscuous mode [ 989.471129][T16777] veth1_vlan: entered promiscuous mode [ 989.765523][T17060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.777742][T17060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.103713][ T820] gspca_stk1135: reg_w 0xf err -71 [ 990.104999][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 990.105013][ T820] gspca_stk1135: Sensor write failed [ 990.105037][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 990.105047][ T820] gspca_stk1135: Sensor write failed [ 990.105066][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 990.105071][ T820] gspca_stk1135: Sensor read failed [ 990.105084][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 990.105089][ T820] gspca_stk1135: Sensor read failed [ 990.105093][ T820] gspca_stk1135: Detected sensor type unknown (0x0) [ 990.105113][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 990.105122][ T820] gspca_stk1135: Sensor read failed [ 990.105144][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 990.105153][ T820] gspca_stk1135: Sensor read failed [ 990.105332][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 990.105343][ T820] gspca_stk1135: Sensor write failed [ 990.105368][ T820] gspca_stk1135: serial bus timeout: status=0x00 [ 990.105377][ T820] gspca_stk1135: Sensor write failed [ 990.105438][ T820] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 990.177165][ T820] usb 4-1: USB disconnect, device number 80 [ 990.190747][T16777] veth0_macvtap: entered promiscuous mode [ 990.202165][ T5735] usb 6-1: non-Atmel transceiver xxxx79ea [ 990.273908][T16777] veth1_macvtap: entered promiscuous mode [ 990.440136][ T5735] usb 6-1: Firmware version (0.0) predates our first public release. [ 990.440161][ T5735] usb 6-1: Please update to version 0.2 or newer [ 990.443041][ T5735] usb 6-1: atusb_probe: initialization failed, error = -19 [ 991.378420][ T5735] usb 6-1: USB disconnect, device number 93 [ 991.554108][T16777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.586876][T16777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.643527][T13921] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.650772][T13921] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.655415][T13921] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.666935][T13921] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.649590][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.649655][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.024006][T17092] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3558'. [ 994.044169][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.044188][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.364078][T17096] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3559'. [ 994.427333][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.427355][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.316203][T17103] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3560'. [ 998.726082][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 998.731591][T17126] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3567'. [ 999.215318][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 999.223080][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 999.264136][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 999.281708][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 999.820566][T17133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3568'. [ 1001.158349][ T898] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1001.315566][ T898] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1001.315596][ T898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.315617][ T898] usb 4-1: Product: syz [ 1001.315631][ T898] usb 4-1: Manufacturer: syz [ 1001.315644][ T898] usb 4-1: SerialNumber: syz [ 1001.347830][ T898] usb 4-1: config 0 descriptor?? [ 1001.384051][ T898] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1001.528287][ T5617] Bluetooth: hci0: command tx timeout [ 1002.882089][T16233] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1003.075923][ T898] gspca_stk1135: reg_w 0xf err -71 [ 1003.076961][ T898] gspca_stk1135: serial bus timeout: status=0x00 [ 1003.076972][ T898] gspca_stk1135: Sensor write failed [ 1003.076996][ T898] gspca_stk1135: serial bus timeout: status=0x00 [ 1003.077005][ T898] gspca_stk1135: Sensor write failed [ 1003.077028][ T898] gspca_stk1135: serial bus timeout: status=0x00 [ 1003.077038][ T898] gspca_stk1135: Sensor read failed [ 1003.077062][ T898] gspca_stk1135: serial bus timeout: status=0x00 [ 1003.077071][ T898] gspca_stk1135: Sensor read failed [ 1003.077079][ T898] gspca_stk1135: Detected sensor type unknown (0x0) [ 1003.077107][ T898] gspca_stk1135: serial bus timeout: status=0x00 [ 1003.077117][ T898] gspca_stk1135: Sensor read failed [ 1003.077145][ T898] gspca_stk1135: serial bus timeout: status=0x00 [ 1003.077155][ T898] gspca_stk1135: Sensor read failed [ 1003.077178][ T898] gspca_stk1135: serial bus timeout: status=0x00 [ 1003.077187][ T898] gspca_stk1135: Sensor write failed [ 1003.077211][ T898] gspca_stk1135: serial bus timeout: status=0x00 [ 1003.077220][ T898] gspca_stk1135: Sensor write failed [ 1003.077302][ T898] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1003.095405][T16233] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1003.095433][T16233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.095450][T16233] usb 6-1: Product: syz [ 1003.095460][T16233] usb 6-1: Manufacturer: syz [ 1003.095471][T16233] usb 6-1: SerialNumber: syz [ 1003.106082][ T898] usb 4-1: USB disconnect, device number 81 [ 1003.264178][T17176] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3580'. [ 1003.303518][T16233] usb 6-1: config 0 descriptor?? [ 1003.694425][ T5617] Bluetooth: hci0: command tx timeout [ 1004.558608][T17168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.559256][T17168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.802445][T17186] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3583'. [ 1005.170507][T16233] usb 6-1: non-Atmel transceiver xxxx79ea [ 1005.339586][T17189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1005.374797][T16233] usb 6-1: Firmware version (0.0) predates our first public release. [ 1005.374822][T16233] usb 6-1: Please update to version 0.2 or newer [ 1005.375291][T16233] usb 6-1: atusb_probe: initialization failed, error = -19 [ 1005.416151][T16233] usb 6-1: USB disconnect, device number 94 [ 1006.293671][ T5732] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1006.339506][ T5617] Bluetooth: hci0: command tx timeout [ 1006.429899][T17123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.429995][T17123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.430304][T17123] bridge_slave_0: entered allmulticast mode [ 1006.434751][T17123] bridge_slave_0: entered promiscuous mode [ 1006.458012][T17123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.462131][T17123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.462432][T17123] bridge_slave_1: entered allmulticast mode [ 1006.476204][T17123] bridge_slave_1: entered promiscuous mode [ 1006.508213][ T5732] usb 2-1: Using ep0 maxpacket: 32 [ 1006.511734][ T5732] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 1006.511772][ T5732] usb 2-1: config 0 has no interface number 0 [ 1006.511815][ T5732] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1006.511843][ T5732] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1006.511867][ T5732] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1006.511889][ T5732] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1006.514101][ T5732] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1006.514125][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.514135][ T5732] usb 2-1: Product: syz [ 1006.514143][ T5732] usb 2-1: Manufacturer: syz [ 1006.514150][ T5732] usb 2-1: SerialNumber: syz [ 1006.515074][T17202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3587'. [ 1006.519293][ T5732] usb 2-1: config 0 descriptor?? [ 1006.531112][T17189] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1006.565936][ T5732] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input67 [ 1006.801037][T17204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3584'. [ 1006.845545][T17123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.934504][T17204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.958769][T17123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.962434][T17204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.153783][T17123] team0: Port device team_slave_0 added [ 1007.174793][T17123] team0: Port device team_slave_1 added [ 1007.293501][T17123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.293518][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.293542][T17123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.296064][T17123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.296079][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.296104][T17123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.479240][ T5617] Bluetooth: hci0: command tx timeout [ 1008.886699][ T5732] usb 2-1: USB disconnect, device number 115 [ 1009.169347][T16233] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1009.248989][T17123] hsr_slave_0: entered promiscuous mode [ 1009.249475][T17223] FAULT_INJECTION: forcing a failure. [ 1009.249475][T17223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1009.249512][T17223] CPU: 0 UID: 0 PID: 17223 Comm: syz.6.3588 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1009.249537][T17223] Tainted: [L]=SOFTLOCKUP [ 1009.249544][T17223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1009.249555][T17223] Call Trace: [ 1009.249562][T17223] [ 1009.249571][T17223] dump_stack_lvl+0xe8/0x150 [ 1009.249597][T17223] should_fail_ex+0x46b/0x600 [ 1009.249630][T17223] prepare_alloc_pages+0x22a/0x6b0 [ 1009.249660][T17223] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1009.249689][T17223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1009.249710][T17223] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 1009.249734][T17223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1009.249758][T17223] ? __pfx_policy_nodemask+0x10/0x10 [ 1009.249783][T17223] __alloc_pages_noprof+0x10/0x100 [ 1009.249806][T17223] alloc_pages_bulk_noprof+0x6c0/0x8c0 [ 1009.249834][T17223] ? alloc_pages_noprof+0x161/0x2f0 [ 1009.249857][T17223] __kasan_populate_vmalloc+0xc1/0x1d0 [ 1009.249884][T17223] ? rt_spin_unlock+0x160/0x200 [ 1009.249905][T17223] alloc_vmap_area+0xd47/0x1480 [ 1009.249935][T17223] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1009.249952][T17223] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1009.249972][T17223] ? __get_vm_area_node+0x171/0x350 [ 1009.249985][T17223] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1009.250003][T17223] __get_vm_area_node+0x226/0x350 [ 1009.250024][T17223] __vmalloc_node_range_noprof+0x36a/0x1750 [ 1009.250044][T17223] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1009.250068][T17223] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.250104][T17223] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1009.250128][T17223] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1009.250146][T17223] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.250170][T17223] ? _parse_integer_limit+0x1ae/0x1f0 [ 1009.250199][T17223] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1009.250217][T17223] __vmalloc_noprof+0xd2/0x120 [ 1009.250236][T17223] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1009.250266][T17223] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1009.250292][T17223] bpf_prog_alloc+0x3c/0x1a0 [ 1009.250315][T17223] bpf_prog_load+0x779/0x1a10 [ 1009.250347][T17223] ? __pfx_bpf_prog_load+0x10/0x10 [ 1009.250367][T17223] ? __might_fault+0xaf/0x130 [ 1009.250401][T17223] ? bpf_lsm_bpf+0x9/0x20 [ 1009.250428][T17223] ? security_bpf+0x7e/0x2d0 [ 1009.250451][T17123] hsr_slave_1: entered promiscuous mode [ 1009.250454][T17223] __sys_bpf+0x618/0x950 [ 1009.250477][T17223] ? __pfx___sys_bpf+0x10/0x10 [ 1009.250494][T17223] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1009.250522][T17223] ? ksys_write+0x248/0x270 [ 1009.250543][T17223] ? __pfx_ksys_write+0x10/0x10 [ 1009.250568][T17223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.250587][T17223] __x64_sys_bpf+0x7c/0x90 [ 1009.250607][T17223] do_syscall_64+0x15f/0xf80 [ 1009.250629][T17223] ? clear_bhb_loop+0x40/0x90 [ 1009.250651][T17223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.250670][T17223] RIP: 0033:0x7ff7c595cdd9 [ 1009.250687][T17223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.250703][T17223] RSP: 002b:00007ff7c3bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1009.250723][T17223] RAX: ffffffffffffffda RBX: 00007ff7c5bd5fa0 RCX: 00007ff7c595cdd9 [ 1009.250737][T17223] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 1009.250749][T17223] RBP: 00007ff7c3bae090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.250760][T17223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.250770][T17223] R13: 00007ff7c5bd6038 R14: 00007ff7c5bd5fa0 R15: 00007ffca9a68888 [ 1009.250795][T17223] [ 1009.250971][T17223] syz.6.3588: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1009.251033][T17223] CPU: 0 UID: 0 PID: 17223 Comm: syz.6.3588 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1009.251058][T17223] Tainted: [L]=SOFTLOCKUP [ 1009.251064][T17223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1009.251075][T17223] Call Trace: [ 1009.251082][T17223] [ 1009.251090][T17223] dump_stack_lvl+0xe8/0x150 [ 1009.251115][T17223] warn_alloc+0x263/0x3e0 [ 1009.251139][T17223] ? kasan_quarantine_put+0xbb/0x1f0 [ 1009.251161][T17223] ? __pfx_warn_alloc+0x10/0x10 [ 1009.251182][T17223] ? __get_vm_area_node+0x23f/0x350 [ 1009.251199][T17223] ? __get_vm_area_node+0x171/0x350 [ 1009.251218][T17223] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1009.251242][T17223] ? __get_vm_area_node+0x23f/0x350 [ 1009.251275][T17223] __vmalloc_node_range_noprof+0x38f/0x1750 [ 1009.251299][T17223] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.251339][T17223] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1009.251364][T17223] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1009.251389][T17223] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.251413][T17223] ? _parse_integer_limit+0x1ae/0x1f0 [ 1009.251442][T17223] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1009.251461][T17223] __vmalloc_noprof+0xd2/0x120 [ 1009.251480][T17223] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1009.251503][T17223] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1009.251529][T17223] bpf_prog_alloc+0x3c/0x1a0 [ 1009.251552][T17223] bpf_prog_load+0x779/0x1a10 [ 1009.251585][T17223] ? __pfx_bpf_prog_load+0x10/0x10 [ 1009.251607][T17223] ? __might_fault+0xaf/0x130 [ 1009.251642][T17223] ? bpf_lsm_bpf+0x9/0x20 [ 1009.251662][T17223] ? security_bpf+0x7e/0x2d0 [ 1009.251691][T17223] __sys_bpf+0x618/0x950 [ 1009.251714][T17223] ? __pfx___sys_bpf+0x10/0x10 [ 1009.251733][T17223] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1009.251766][T17223] ? ksys_write+0x248/0x270 [ 1009.251789][T17223] ? __pfx_ksys_write+0x10/0x10 [ 1009.251813][T17223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.251832][T17223] __x64_sys_bpf+0x7c/0x90 [ 1009.251853][T17223] do_syscall_64+0x15f/0xf80 [ 1009.251874][T17223] ? clear_bhb_loop+0x40/0x90 [ 1009.251896][T17223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.251915][T17223] RIP: 0033:0x7ff7c595cdd9 [ 1009.251931][T17223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.251946][T17223] RSP: 002b:00007ff7c3bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1009.251965][T17223] RAX: ffffffffffffffda RBX: 00007ff7c5bd5fa0 RCX: 00007ff7c595cdd9 [ 1009.251979][T17223] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 1009.251991][T17223] RBP: 00007ff7c3bae090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.252003][T17223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.252014][T17223] R13: 00007ff7c5bd6038 R14: 00007ff7c5bd5fa0 R15: 00007ffca9a68888 [ 1009.252043][T17223] [ 1009.252166][T17223] Mem-Info: [ 1009.252175][T17223] active_anon:246 inactive_anon:23183 isolated_anon:0 [ 1009.252175][T17223] active_file:26773 inactive_file:36167 isolated_file:0 [ 1009.252175][T17223] unevictable:768 dirty:84 writeback:0 [ 1009.252175][T17223] slab_reclaimable:13277 slab_unreclaimable:123029 [ 1009.252175][T17223] mapped:31445 shmem:18604 pagetables:1483 [ 1009.252175][T17223] sec_pagetables:1 bounce:0 [ 1009.252175][T17223] kernel_misc_reclaimable:0 [ 1009.252175][T17223] free:1265168 free_pcp:656 free_cma:0 [ 1009.252226][T17223] Node 0 active_anon:984kB inactive_anon:92732kB active_file:106868kB inactive_file:144668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125780kB dirty:332kB writeback:0kB shmem:72880kB kernel_stack:14728kB pagetables:5780kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1009.252281][T17223] Node 1 active_anon:0kB inactive_anon:0kB active_file:224kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1009.252325][T17223] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1009.252391][T17223] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 1009.252424][T17223] Node 0 DMA32 free:1115144kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:984kB inactive_anon:92732kB active_file:106868kB inactive_file:144668kB unevictable:1536kB writepending:332kB zspages:0kB present:3129332kB managed:2566556kB mlocked:0kB bounce:0kB free_pcp:2612kB local_pcp:2272kB free_cma:0kB [ 1009.252551][T17223] lowmem_reserve[]: 0 0 0 0 0 [ 1009.252582][T17223] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:212kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1009.252634][T17223] lowmem_reserve[]: 0 0 0 0 0 [ 1009.252664][T17223] Node 1 Normal free:3930168kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:224kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1009.252719][T17223] lowmem_reserve[]: 0 0 0 0 0 [ 1009.252746][T17223] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1009.252838][T17223] Node 0 DMA32: 4510*4kB (UME) 5274*8kB (UME) 3606*16kB (UME) 1805*32kB (UME) 1595*64kB (UME) 892*128kB (UME) 493*256kB (UM) 270*512kB (UM) 132*1024kB (UME) 32*2048kB (UME) 63*4096kB (UM) = 1115144kB [ 1009.252964][T17223] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1009.253042][T17223] Node 1 Normal: 2*4kB (M) 6*8kB (U) 10*16kB (UM) 3*32kB (U) 4*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 3*2048kB (UM) 957*4096kB (M) = 3930168kB [ 1009.253157][T17223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1009.253173][T17223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1009.253188][T17223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1009.253204][T17223] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1009.253218][T17223] 81565 total pagecache pages [ 1009.253225][T17223] 0 pages in swap cache [ 1009.253232][T17223] Free swap = 124996kB [ 1009.253239][T17223] Total swap = 124996kB [ 1009.253247][T17223] 2097051 pages RAM [ 1009.253262][T17223] 0 pages HighMem/MovableOnly [ 1009.253269][T17223] 423744 pages reserved [ 1009.253276][T17223] 0 pages cma reserved [ 1009.255797][T17123] debugfs: 'hsr0' already exists in 'hsr' [ 1009.255815][T17123] Cannot create hsr debugfs directory [ 1009.590842][T16233] usb 4-1: Using ep0 maxpacket: 8 [ 1010.403755][T16233] usb 4-1: config index 0 descriptor too short (expected 57652, got 308) [ 1010.403782][T16233] usb 4-1: config 9 has too many interfaces: 59, using maximum allowed: 32 [ 1010.403799][T16233] usb 4-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 1010.403815][T16233] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.403832][T16233] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 59 [ 1010.413617][T16233] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 1010.413647][T16233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.413665][T16233] usb 4-1: Product: syz [ 1010.413679][T16233] usb 4-1: Manufacturer: syz [ 1010.413692][T16233] usb 4-1: SerialNumber: syz [ 1010.688688][T16233] usb 4-1: USB disconnect, device number 82 [ 1010.884288][T17231] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3596'. [ 1012.922548][T17250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.233186][ T898] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1013.398313][ T898] usb 4-1: Using ep0 maxpacket: 32 [ 1013.438888][ T898] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1013.438916][ T898] usb 4-1: config 0 has no interface number 0 [ 1013.438959][ T898] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1013.438979][ T898] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1013.439003][ T898] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1013.439025][ T898] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1013.446298][ T898] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1013.446324][ T898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.446343][ T898] usb 4-1: Product: syz [ 1013.446357][ T898] usb 4-1: Manufacturer: syz [ 1013.446370][ T898] usb 4-1: SerialNumber: syz [ 1013.564884][ T898] usb 4-1: config 0 descriptor?? [ 1013.567758][T17250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1013.622310][T17123] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.663407][ T898] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input68 [ 1013.865670][T17253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3603'. [ 1013.967846][T17253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.971199][T17253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.061595][T17255] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3599'. [ 1014.381204][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3604'. [ 1014.601468][T17123] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.847272][T17261] macsec0: entered promiscuous mode [ 1014.861537][T17261] macsec0: entered allmulticast mode [ 1014.873515][T17261] bridge0: port 3(macsec0) entered blocking state [ 1014.873939][T17261] bridge0: port 3(macsec0) entered disabled state [ 1016.252606][ T898] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1016.430011][ T898] usb 6-1: Using ep0 maxpacket: 8 [ 1016.437935][ T898] usb 6-1: config index 0 descriptor too short (expected 57652, got 308) [ 1016.437960][ T898] usb 6-1: config 9 has too many interfaces: 59, using maximum allowed: 32 [ 1016.437980][ T898] usb 6-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 1016.437996][ T898] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.438012][ T898] usb 6-1: config 9 has 0 interfaces, different from the descriptor's value: 59 [ 1016.497295][ T898] usb 6-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 1016.497324][ T898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.497338][ T898] usb 6-1: Product: syz [ 1016.497345][ T898] usb 6-1: Manufacturer: syz [ 1016.497352][ T898] usb 6-1: SerialNumber: syz [ 1016.566147][T17276] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3610'. [ 1016.568625][T16233] usb 4-1: USB disconnect, device number 83 [ 1017.123469][ T898] usb 6-1: USB disconnect, device number 95 [ 1017.359181][T17123] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.540712][T17290] FAULT_INJECTION: forcing a failure. [ 1017.540712][T17290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.540756][T17290] CPU: 1 UID: 0 PID: 17290 Comm: syz.1.3615 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1017.540786][T17290] Tainted: [L]=SOFTLOCKUP [ 1017.540794][T17290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1017.540805][T17290] Call Trace: [ 1017.540813][T17290] [ 1017.540821][T17290] dump_stack_lvl+0xe8/0x150 [ 1017.540848][T17290] should_fail_ex+0x46b/0x600 [ 1017.540881][T17290] _copy_from_user+0x2d/0xb0 [ 1017.540902][T17290] memdup_user+0x5e/0xd0 [ 1017.540928][T17290] strndup_user+0x68/0xd0 [ 1017.540953][T17290] set_anon_vma_name+0x72/0x380 [ 1017.540979][T17290] ? static_key_count+0x41/0x70 [ 1017.541002][T17290] ? security_task_prctl+0x163/0x190 [ 1017.541027][T17290] __se_sys_prctl+0x141d/0x1980 [ 1017.541058][T17290] ? __pfx___se_sys_prctl+0x10/0x10 [ 1017.541088][T17290] ? __x64_sys_prctl+0x20/0xc0 [ 1017.541111][T17290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.541132][T17290] do_syscall_64+0x15f/0xf80 [ 1017.541153][T17290] ? trace_irq_disable+0x3b/0x140 [ 1017.541174][T17290] ? clear_bhb_loop+0x40/0x90 [ 1017.541196][T17290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.541215][T17290] RIP: 0033:0x7f864171cdd9 [ 1017.541232][T17290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.541248][T17290] RSP: 002b:00007f863f976028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1017.541269][T17290] RAX: ffffffffffffffda RBX: 00007f8641995fa0 RCX: 00007f864171cdd9 [ 1017.541283][T17290] RDX: 0000200000ff1000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 1017.541295][T17290] RBP: 00007f863f976090 R08: 0000200000000040 R09: 0000000000000000 [ 1017.541308][T17290] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.541320][T17290] R13: 00007f8641996038 R14: 00007f8641995fa0 R15: 00007ffd17cc7408 [ 1017.541350][T17290] [ 1018.052176][T17123] bridge0: port 3(netdevsim0) entered disabled state [ 1018.566422][T16233] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1018.727500][T17123] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 1018.727614][T17123] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 1018.765127][T17123] bridge0: port 3(netdevsim0) entered disabled state [ 1018.771971][T16233] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1018.774777][T16233] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1018.774805][T16233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.774823][T16233] usb 2-1: Product: syz [ 1018.774836][T16233] usb 2-1: Manufacturer: syz [ 1018.774849][T16233] usb 2-1: SerialNumber: syz [ 1018.793636][T16233] usb 2-1: config 0 descriptor?? [ 1018.837524][T17308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1018.928316][T12234] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1019.069862][T17310] netlink: 'syz.5.3618': attribute type 1 has an invalid length. [ 1019.572696][T12234] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1019.572725][T12234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.572744][T12234] usb 7-1: Product: syz [ 1019.572758][T12234] usb 7-1: Manufacturer: syz [ 1019.572772][T12234] usb 7-1: SerialNumber: syz [ 1019.580508][T12234] usb 7-1: config 0 descriptor?? [ 1019.618277][ T898] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1019.755218][T17313] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3621'. [ 1019.779991][ T898] usb 4-1: Using ep0 maxpacket: 32 [ 1019.783706][T17123] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.790965][ T898] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1019.790991][ T898] usb 4-1: config 0 has no interface number 0 [ 1019.791917][ T898] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1019.791940][ T898] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1019.791965][ T898] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1019.792038][ T898] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1019.799904][ T898] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1019.799931][ T898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.799950][ T898] usb 4-1: Product: syz [ 1019.799962][ T898] usb 4-1: Manufacturer: syz [ 1019.799975][ T898] usb 4-1: SerialNumber: syz [ 1019.835873][ T898] usb 4-1: config 0 descriptor?? [ 1019.839836][T17308] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1019.994576][ T898] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input69 [ 1020.201097][T17316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3620'. [ 1020.276097][T17306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.292561][T17306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.434588][ T5617] Bluetooth: hci2: urb ffff888092fa5700 submission failed (2) [ 1020.476466][T16233] usb 2-1: USB disconnect, device number 116 [ 1020.562976][T17316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.596077][T17316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.739816][T12234] usb 7-1: non-Atmel transceiver xxxx79ea [ 1021.066086][T12234] usb 7-1: Firmware version (0.0) predates our first public release. [ 1021.066216][T12234] usb 7-1: Please update to version 0.2 or newer [ 1021.075678][T12234] usb 7-1: atusb_probe: initialization failed, error = -19 [ 1021.294297][T12234] usb 7-1: USB disconnect, device number 27 [ 1022.219340][ T9] usb 4-1: USB disconnect, device number 84 [ 1022.618567][T12234] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1022.772019][T12234] usb 2-1: Using ep0 maxpacket: 8 [ 1022.790210][T12234] usb 2-1: config index 0 descriptor too short (expected 57652, got 308) [ 1022.790236][T12234] usb 2-1: config 9 has too many interfaces: 59, using maximum allowed: 32 [ 1022.790254][T12234] usb 2-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 1022.790271][T12234] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.790286][T12234] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 59 [ 1022.790917][T17123] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1022.793563][T12234] usb 2-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 1022.793588][T12234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.793607][T12234] usb 2-1: Product: syz [ 1022.793620][T12234] usb 2-1: Manufacturer: syz [ 1022.793633][T12234] usb 2-1: SerialNumber: syz [ 1022.947326][T17123] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1022.955784][T17123] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1023.099951][T12234] usb 2-1: USB disconnect, device number 117 [ 1023.194020][T17123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1023.212872][T17123] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1023.647562][ T37] audit: type=1326 audit(1778412727.097:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17348 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9af1cdd9 code=0x7ffc0000 [ 1023.647837][ T37] audit: type=1326 audit(1778412727.097:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17348 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9af1cdd9 code=0x7ffc0000 [ 1023.649549][ T37] audit: type=1326 audit(1778412727.097:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17348 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9af1cdd9 code=0x7ffc0000 [ 1023.650221][ T37] audit: type=1326 audit(1778412727.107:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17348 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9af1cdd9 code=0x7ffc0000 [ 1023.650640][ T37] audit: type=1326 audit(1778412727.107:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17348 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f1c9af1cdd9 code=0x7ffc0000 [ 1023.650674][ T37] audit: type=1326 audit(1778412727.107:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17348 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9af1cdd9 code=0x7ffc0000 [ 1023.650980][ T37] audit: type=1326 audit(1778412727.107:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17348 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9af1cdd9 code=0x7ffc0000 [ 1023.651576][ T37] audit: type=1326 audit(1778412727.107:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17348 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9af1cdd9 code=0x7ffc0000 [ 1023.651611][ T37] audit: type=1326 audit(1778412727.107:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17348 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9af1cdd9 code=0x7ffc0000 [ 1023.652171][ T37] audit: type=1326 audit(1778412727.107:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17348 comm="syz.3.3631" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1c9af1cdd9 code=0x7ffc0000 [ 1023.785568][T17352] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3632'. [ 1023.811248][T17123] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1023.964043][T17123] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1023.990088][T17123] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1024.406448][T17123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.438330][T12234] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1024.476394][T17123] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.495186][ T1431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.495391][ T1431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.562438][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.562607][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.618831][T12234] usb 4-1: Using ep0 maxpacket: 8 [ 1024.624299][T12234] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1024.624326][T12234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.624344][T12234] usb 4-1: Product: syz [ 1024.624356][T12234] usb 4-1: Manufacturer: syz [ 1024.624368][T12234] usb 4-1: SerialNumber: syz [ 1024.671677][T12234] usb 4-1: config 0 descriptor?? [ 1024.691339][T12234] gspca_main: se401-2.14.0 probing 047d:5003 [ 1024.807672][T17372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.050109][ T5732] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1025.107254][T12234] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1025.107406][T12234] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 1025.142051][T12234] usb 4-1: USB disconnect, device number 85 [ 1025.198288][ T5732] usb 6-1: Using ep0 maxpacket: 32 [ 1025.200744][ T5732] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 1025.200769][ T5732] usb 6-1: config 0 has no interface number 0 [ 1025.200809][ T5732] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1025.200828][ T5732] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1025.200850][ T5732] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1025.200872][ T5732] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1025.203520][ T5732] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1025.203563][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.203581][ T5732] usb 6-1: Product: syz [ 1025.203593][ T5732] usb 6-1: Manufacturer: syz [ 1025.203605][ T5732] usb 6-1: SerialNumber: syz [ 1025.248822][ T5732] usb 6-1: config 0 descriptor?? [ 1025.249996][T17372] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1025.282386][ T5732] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input70 [ 1025.525848][T17383] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3637'. [ 1025.598521][T17383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.630381][T17383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.771328][ T9] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1025.924049][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1025.924078][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.924097][ T9] usb 2-1: Product: syz [ 1025.924110][ T9] usb 2-1: Manufacturer: syz [ 1025.924123][ T9] usb 2-1: SerialNumber: syz [ 1025.977987][ T9] usb 2-1: config 0 descriptor?? [ 1025.995632][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1026.442749][T17123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.508054][ T9] gspca_stk1135: reg_w 0xf err -71 [ 1027.513807][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1027.513823][ T9] gspca_stk1135: Sensor write failed [ 1027.513847][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1027.513857][ T9] gspca_stk1135: Sensor write failed [ 1027.513882][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1027.513892][ T9] gspca_stk1135: Sensor read failed [ 1027.513917][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1027.513927][ T9] gspca_stk1135: Sensor read failed [ 1027.513934][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 1027.513962][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1027.513975][ T9] gspca_stk1135: Sensor read failed [ 1027.513999][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1027.514009][ T9] gspca_stk1135: Sensor read failed [ 1027.514033][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1027.514042][ T9] gspca_stk1135: Sensor write failed [ 1027.514066][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 1027.514076][ T9] gspca_stk1135: Sensor write failed [ 1027.515820][ T9] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1027.689612][ T9] usb 2-1: USB disconnect, device number 118 [ 1028.430818][ T5732] usb 6-1: USB disconnect, device number 96 [ 1028.662541][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3644'. [ 1028.867807][T17123] veth0_vlan: entered promiscuous mode [ 1030.456216][T17123] veth1_vlan: entered promiscuous mode [ 1030.654171][T17123] veth0_macvtap: entered promiscuous mode [ 1030.676326][T17123] veth1_macvtap: entered promiscuous mode [ 1030.756178][T17123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.802272][T17123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.843499][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.849685][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.851270][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.854832][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.063632][T17441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1032.387660][ T1437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.387680][ T1437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.458899][T16233] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1034.251719][T16233] usb 6-1: Using ep0 maxpacket: 32 [ 1034.298897][T16233] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 1034.298924][T16233] usb 6-1: config 0 has no interface number 0 [ 1034.298962][T16233] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1034.298982][T16233] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1034.299005][T16233] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1034.299027][T16233] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1034.306585][T16233] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1034.306611][T16233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.306628][T16233] usb 6-1: Product: syz [ 1034.306637][T16233] usb 6-1: Manufacturer: syz [ 1034.306644][T16233] usb 6-1: SerialNumber: syz [ 1034.339562][T16233] usb 6-1: config 0 descriptor?? [ 1034.355994][T17443] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1034.441959][T16233] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input71 [ 1034.502471][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3654'. [ 1034.653877][T17443] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3653'. [ 1034.726644][T17443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.886478][T17443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.379580][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.379600][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.628381][ T898] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1035.810748][ T898] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1035.810778][ T898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.876392][ T898] usb 7-1: config 0 descriptor?? [ 1035.925354][ T898] cp210x 7-1:0.0: cp210x converter detected [ 1036.193615][T16233] usb 6-1: USB disconnect, device number 97 [ 1036.481475][ T898] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1036.481503][ T898] cp210x 7-1:0.0: querying part number failed [ 1036.580666][ T898] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1036.682653][T17470] nfs: Bad value for 'source' [ 1037.590277][ T898] usb 7-1: USB disconnect, device number 28 [ 1037.807668][ T898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1040.013529][ T898] cp210x 7-1:0.0: device disconnected [ 1041.042244][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3664'. [ 1041.262271][ T820] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1041.415397][ T820] usb 5-1: Using ep0 maxpacket: 8 [ 1041.436044][ T820] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1041.436083][ T820] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1041.436102][ T820] usb 5-1: Product: syz [ 1041.436116][ T820] usb 5-1: Manufacturer: syz [ 1041.436130][ T820] usb 5-1: SerialNumber: syz [ 1041.493167][ T820] usb 5-1: config 0 descriptor?? [ 1041.525205][ T820] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1042.135418][ T820] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input72 [ 1042.294881][T17494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1042.333987][ T898] usb 5-1: USB disconnect, device number 105 [ 1042.568521][ T31] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1042.718515][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 1042.721230][ T31] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 1042.721261][ T31] usb 6-1: config 0 has no interface number 0 [ 1042.721303][ T31] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1042.721322][ T31] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1042.721344][ T31] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1042.721366][ T31] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1042.726422][ T31] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1042.726451][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.726471][ T31] usb 6-1: Product: syz [ 1042.726485][ T31] usb 6-1: Manufacturer: syz [ 1042.726498][ T31] usb 6-1: SerialNumber: syz [ 1042.854820][ T31] usb 6-1: config 0 descriptor?? [ 1042.857200][T17494] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1042.885353][ T31] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input73 [ 1043.071376][T16855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1043.137547][T16855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1043.141603][T16855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1043.159043][T16855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1043.159998][T16855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1043.293354][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3668'. [ 1043.443541][T17502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.445257][T17502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.268337][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1044.376626][T17518] netlink: 'syz.4.3672': attribute type 3 has an invalid length. [ 1044.408955][ T9] usb 7-1: device descriptor read/64, error -71 [ 1044.648309][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1044.678307][ T31] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1044.788458][ T9] usb 7-1: device descriptor read/64, error -71 [ 1044.845584][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1044.845617][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1044.845642][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1044.845662][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1044.845703][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1044.845726][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.881544][ T31] usb 5-1: config 0 descriptor?? [ 1044.920193][ T9] usb usb7-port1: attempt power cycle [ 1045.281391][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1045.310450][ T9] usb 7-1: device descriptor read/8, error -71 [ 1045.455118][ T5617] Bluetooth: hci2: command tx timeout [ 1045.471336][ C0] bcm5974 6-1:0.119: trackpad urb failed: -1 [ 1045.504401][ T31] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1045.568262][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1045.584125][ T9] usb 7-1: device descriptor read/8, error -71 [ 1045.688576][ T9] usb usb7-port1: unable to enumerate USB device [ 1046.028668][T16233] usb 6-1: USB disconnect, device number 98 [ 1046.117066][ T820] usb 5-1: USB disconnect, device number 106 [ 1046.438647][T17535] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3675'. [ 1047.230965][T17541] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3676'. [ 1047.528926][ T5617] Bluetooth: hci2: command tx timeout [ 1048.198221][ T898] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1048.245135][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3678'. [ 1048.341008][T17548] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3678'. [ 1048.404694][ T898] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1048.404723][ T898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.404742][ T898] usb 6-1: Product: syz [ 1048.404754][ T898] usb 6-1: Manufacturer: syz [ 1048.404767][ T898] usb 6-1: SerialNumber: syz [ 1048.454508][ T898] usb 6-1: config 0 descriptor?? [ 1048.931787][T17496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.933601][T17496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.933900][T17496] bridge_slave_0: entered allmulticast mode [ 1048.941014][T17496] bridge_slave_0: entered promiscuous mode [ 1048.956881][T17496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.959849][T17496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.960150][T17496] bridge_slave_1: entered allmulticast mode [ 1048.977600][T17496] bridge_slave_1: entered promiscuous mode [ 1049.012925][ T898] usb 6-1: Firmware: major: 121, minor: 128, hardware type: UNKNOWN (202) [ 1049.185668][T17496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.203606][T17496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.232287][ T898] usb 6-1: Firmware: build  [ 1049.267853][T17568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1049.437756][ T898] usb 6-1: failed to fetch extended address, random address set [ 1049.437788][ T898] usb 6-1: atusb_probe: initialization failed, error = -524 [ 1049.438022][ T898] atusb 6-1:0.0: probe with driver atusb failed with error -524 [ 1049.558265][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1049.577155][T17496] team0: Port device team_slave_0 added [ 1049.588051][T17496] team0: Port device team_slave_1 added [ 1049.610597][ T5617] Bluetooth: hci2: command tx timeout [ 1049.653116][ T31] usb 6-1: USB disconnect, device number 99 [ 1049.708516][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1049.710618][ T9] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 1049.710644][ T9] usb 5-1: config 0 has no interface number 0 [ 1049.710711][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1049.710732][ T9] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1049.710757][ T9] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1049.710779][ T9] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1049.713557][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1049.713584][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.713604][ T9] usb 5-1: Product: syz [ 1049.713617][ T9] usb 5-1: Manufacturer: syz [ 1049.713631][ T9] usb 5-1: SerialNumber: syz [ 1049.820064][ T9] usb 5-1: config 0 descriptor?? [ 1049.821033][T17569] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1049.828293][ T820] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1049.884822][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input75 [ 1049.905850][T17496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.905863][T17496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.905886][T17496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.953553][T17496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.953568][T17496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.953593][T17496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.002331][ T820] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1050.002360][ T820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.002379][ T820] usb 7-1: Product: syz [ 1050.002558][ T820] usb 7-1: Manufacturer: syz [ 1050.002573][ T820] usb 7-1: SerialNumber: syz [ 1050.076493][ T820] usb 7-1: config 0 descriptor?? [ 1050.141694][T17569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3684'. [ 1050.229605][T17569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.230565][T17569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.777665][T17571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.801282][T17571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.829922][T17496] hsr_slave_0: entered promiscuous mode [ 1050.831570][T17496] hsr_slave_1: entered promiscuous mode [ 1050.832679][T17496] debugfs: 'hsr0' already exists in 'hsr' [ 1050.832703][T17496] Cannot create hsr debugfs directory [ 1050.948446][ T9] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1051.098526][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1051.115551][ T9] usb 6-1: config index 0 descriptor too short (expected 57652, got 308) [ 1051.115577][ T9] usb 6-1: config 9 has too many interfaces: 59, using maximum allowed: 32 [ 1051.115597][ T9] usb 6-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 1051.115615][ T9] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.115632][ T9] usb 6-1: config 9 has 0 interfaces, different from the descriptor's value: 59 [ 1051.194644][ T9] usb 6-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 1051.194674][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.194692][ T9] usb 6-1: Product: syz [ 1051.194706][ T9] usb 6-1: Manufacturer: syz [ 1051.194720][ T9] usb 6-1: SerialNumber: syz [ 1051.222614][ T820] usb 7-1: non-Atmel transceiver xxxx79ea [ 1051.430927][ T820] usb 7-1: Firmware version (0.0) predates our first public release. [ 1051.430953][ T820] usb 7-1: Please update to version 0.2 or newer [ 1051.444826][ T820] usb 7-1: atusb_probe: initialization failed, error = -19 [ 1051.484236][ T9] usb 6-1: USB disconnect, device number 100 [ 1051.562785][ T820] usb 7-1: USB disconnect, device number 33 [ 1051.688979][ T5617] Bluetooth: hci2: command tx timeout [ 1052.364552][T17583] FAULT_INJECTION: forcing a failure. [ 1052.364552][T17583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.364583][T17583] CPU: 0 UID: 0 PID: 17583 Comm: syz.5.3690 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1052.364604][T17583] Tainted: [L]=SOFTLOCKUP [ 1052.364610][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1052.364620][T17583] Call Trace: [ 1052.364627][T17583] [ 1052.364634][T17583] dump_stack_lvl+0xe8/0x150 [ 1052.364658][T17583] should_fail_ex+0x46b/0x600 [ 1052.364687][T17583] _copy_from_user+0x2d/0xb0 [ 1052.364704][T17583] __copy_msghdr+0x3c5/0x5b0 [ 1052.364725][T17583] ___sys_sendmsg+0x213/0x360 [ 1052.364742][T17583] ? __lock_acquire+0x6b5/0x2cf0 [ 1052.364764][T17583] ? __pfx____sys_sendmsg+0x10/0x10 [ 1052.364805][T17583] ? __fget_files+0x2a/0x420 [ 1052.364819][T17583] ? __fget_files+0x3a6/0x420 [ 1052.364838][T17583] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1052.364858][T17583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1052.364881][T17583] ? __pfx_ksys_write+0x10/0x10 [ 1052.364903][T17583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.364921][T17583] do_syscall_64+0x15f/0xf80 [ 1052.364940][T17583] ? trace_irq_disable+0x3b/0x140 [ 1052.364960][T17583] ? clear_bhb_loop+0x40/0x90 [ 1052.364976][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.364989][T17583] RIP: 0033:0x7f81e612cdd9 [ 1052.365002][T17583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.365022][T17583] RSP: 002b:00007f81e437e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1052.365038][T17583] RAX: ffffffffffffffda RBX: 00007f81e63a5fa0 RCX: 00007f81e612cdd9 [ 1052.365047][T17583] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000003 [ 1052.365056][T17583] RBP: 00007f81e437e090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.365064][T17583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.365072][T17583] R13: 00007f81e63a6038 R14: 00007f81e63a5fa0 R15: 00007ffecc340fb8 [ 1052.365093][T17583] [ 1052.715865][T12234] usb 5-1: USB disconnect, device number 107 [ 1052.816916][T17496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.816951][T17496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.313725][ T37] kauditd_printk_skb: 75 callbacks suppressed [ 1053.313742][ T37] audit: type=1326 audit(1778412756.767:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17598 comm="syz.6.3696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c595cdd9 code=0x7ffc0000 [ 1053.314808][ T37] audit: type=1326 audit(1778412756.767:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17598 comm="syz.6.3696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7ff7c595cdd9 code=0x7ffc0000 [ 1053.666501][ T37] audit: type=1326 audit(1778412756.767:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17598 comm="syz.6.3696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c595cdd9 code=0x7ffc0000 [ 1053.699095][ T37] audit: type=1326 audit(1778412757.147:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17598 comm="syz.6.3696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c595cdd9 code=0x7ffc0000 [ 1054.082323][T12234] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1054.284076][T12234] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1054.284105][T12234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.284123][T12234] usb 5-1: Product: syz [ 1054.284136][T12234] usb 5-1: Manufacturer: syz [ 1054.284148][T12234] usb 5-1: SerialNumber: syz [ 1054.512194][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.512263][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.528578][T17614] FAULT_INJECTION: forcing a failure. [ 1054.528578][T17614] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.528611][T17614] CPU: 1 UID: 0 PID: 17614 Comm: syz.5.3700 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1054.528634][T17614] Tainted: [L]=SOFTLOCKUP [ 1054.528640][T17614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1054.528649][T17614] Call Trace: [ 1054.528657][T17614] [ 1054.528664][T17614] dump_stack_lvl+0xe8/0x150 [ 1054.528689][T17614] should_fail_ex+0x46b/0x600 [ 1054.528718][T17614] should_failslab+0xa8/0x100 [ 1054.528741][T17614] kmem_cache_alloc_noprof+0x87/0x680 [ 1054.528775][T17614] ? rcu_is_watching+0x15/0xb0 [ 1054.528798][T17614] ? security_file_alloc+0x34/0x310 [ 1054.528824][T17614] security_file_alloc+0x34/0x310 [ 1054.528848][T17614] init_file+0x96/0x2d0 [ 1054.528874][T17614] alloc_empty_file+0x74/0x1d0 [ 1054.528898][T17614] alloc_file_pseudo+0x155/0x240 [ 1054.528925][T17614] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1054.528946][T17614] ? rcu_is_watching+0x15/0xb0 [ 1054.528969][T17614] ? __pfx_shmem_get_inode+0x10/0x10 [ 1054.529000][T17614] __shmem_file_setup+0x2e9/0x370 [ 1054.529021][T17614] ? __pfx___shmem_file_setup+0x10/0x10 [ 1054.529050][T17614] shmem_zero_setup+0x90/0x130 [ 1054.529072][T17614] mmap_region+0x1985/0x2280 [ 1054.529112][T17614] ? __pfx_mmap_region+0x10/0x10 [ 1054.529134][T17614] ? __lock_acquire+0x6b5/0x2cf0 [ 1054.529159][T17614] ? __lock_acquire+0x6b5/0x2cf0 [ 1054.529190][T17614] ? unwind_next_frame+0xa6/0x2550 [ 1054.529224][T17614] ? is_bpf_text_address+0x26/0x2b0 [ 1054.529289][T17614] ? _parse_integer_limit+0x1ae/0x1f0 [ 1054.529331][T17614] ? __lock_acquire+0x6b5/0x2cf0 [ 1054.529369][T17614] ? cap_mmap_addr+0xaf/0x100 [ 1054.529395][T17614] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1054.529426][T17614] do_mmap+0xc2f/0x10c0 [ 1054.529448][T17614] ? lockdep_hardirqs_on+0x7a/0x110 [ 1054.529470][T17614] ? __pfx_do_mmap+0x10/0x10 [ 1054.529486][T17614] ? rwbase_write_lock+0x568/0x730 [ 1054.529521][T17614] vm_mmap_pgoff+0x2cc/0x4f0 [ 1054.529545][T17614] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1054.529560][T17614] ? ksys_write+0x248/0x270 [ 1054.529582][T17614] ? __pfx_ksys_write+0x10/0x10 [ 1054.529607][T17614] ? __x64_sys_mmap+0x7f/0x140 [ 1054.529628][T17614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.529647][T17614] do_syscall_64+0x15f/0xf80 [ 1054.529667][T17614] ? trace_irq_disable+0x3b/0x140 [ 1054.529687][T17614] ? clear_bhb_loop+0x40/0x90 [ 1054.529708][T17614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.529726][T17614] RIP: 0033:0x7f81e612cdd9 [ 1054.529743][T17614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.529764][T17614] RSP: 002b:00007f81e437e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1054.529782][T17614] RAX: ffffffffffffffda RBX: 00007f81e63a5fa0 RCX: 00007f81e612cdd9 [ 1054.529796][T17614] RDX: d3283d0368e269b3 RSI: 000000000000a000 RDI: 0000200000000000 [ 1054.529809][T17614] RBP: 00007f81e437e090 R08: ffffffffffffffff R09: 0000000000000000 [ 1054.529821][T17614] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 1054.529832][T17614] R13: 00007f81e63a6038 R14: 00007f81e63a5fa0 R15: 00007ffecc340fb8 [ 1054.529862][T17614] [ 1054.560061][ T820] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1054.740663][ T820] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1054.740691][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.740765][ T820] usb 4-1: Product: syz [ 1054.740778][ T820] usb 4-1: Manufacturer: syz [ 1054.740791][ T820] usb 4-1: SerialNumber: syz [ 1055.890832][ T820] usb 4-1: config 0 descriptor?? [ 1055.890832][T12234] usb 5-1: config 0 descriptor?? [ 1055.947497][T12234] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1056.386557][ T820] usb 4-1: Firmware: major: 121, minor: 128, hardware type: UNKNOWN (202) [ 1056.595494][ T820] usb 4-1: Firmware: build  [ 1056.689465][T17621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1056.801780][ T820] usb 4-1: failed to fetch extended address, random address set [ 1056.801806][ T820] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1056.802007][ T820] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 1056.878268][ T5888] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1057.051626][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 1057.064402][ T820] usb 4-1: USB disconnect, device number 86 [ 1057.072810][ T5888] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 1057.072837][ T5888] usb 6-1: config 0 has no interface number 0 [ 1057.072883][ T5888] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1057.072904][ T5888] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1057.072928][ T5888] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1057.072950][ T5888] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1057.109671][ T5888] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1057.109700][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.109719][ T5888] usb 6-1: Product: syz [ 1057.109732][ T5888] usb 6-1: Manufacturer: syz [ 1057.109745][ T5888] usb 6-1: SerialNumber: syz [ 1057.135586][ T5888] usb 6-1: config 0 descriptor?? [ 1057.136778][T17622] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1057.194767][ T5888] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input76 [ 1057.401432][T17622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3701'. [ 1057.444656][T17622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.445828][T17622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.642114][T12234] gspca_stk1135: reg_w 0x200 err -71 [ 1057.643153][T12234] gspca_stk1135: serial bus timeout: status=0x00 [ 1057.643166][T12234] gspca_stk1135: Sensor write failed [ 1057.643188][T12234] gspca_stk1135: serial bus timeout: status=0x00 [ 1057.643197][T12234] gspca_stk1135: Sensor write failed [ 1057.643219][T12234] gspca_stk1135: serial bus timeout: status=0x00 [ 1057.643226][T12234] gspca_stk1135: Sensor read failed [ 1057.643249][T12234] gspca_stk1135: serial bus timeout: status=0x00 [ 1057.643257][T12234] gspca_stk1135: Sensor read failed [ 1057.643264][T12234] gspca_stk1135: Detected sensor type unknown (0x0) [ 1057.643290][T12234] gspca_stk1135: serial bus timeout: status=0x00 [ 1057.643297][T12234] gspca_stk1135: Sensor read failed [ 1057.643318][T12234] gspca_stk1135: serial bus timeout: status=0x00 [ 1057.643325][T12234] gspca_stk1135: Sensor read failed [ 1057.643345][T12234] gspca_stk1135: serial bus timeout: status=0x00 [ 1057.643352][T12234] gspca_stk1135: Sensor write failed [ 1057.643373][T12234] gspca_stk1135: serial bus timeout: status=0x00 [ 1057.643380][T12234] gspca_stk1135: Sensor write failed [ 1057.643454][T12234] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1057.887745][T12234] usb 5-1: USB disconnect, device number 108 [ 1057.962630][T17174] udevd[17174]: setting mode of /dev/bus/usb/005/108 to 020664 failed: No such file or directory [ 1057.962849][T17174] udevd[17174]: setting owner of /dev/bus/usb/005/108 to uid=0, gid=0 failed: No such file or directory [ 1058.580367][T17496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.580399][T17496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.119934][ T37] audit: type=1326 audit(1778412762.567:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.4.3705" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a56ccdd9 code=0x7ffc0000 [ 1059.119986][ T37] audit: type=1326 audit(1778412762.567:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.4.3705" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a56ccdd9 code=0x7ffc0000 [ 1059.126177][ T37] audit: type=1326 audit(1778412762.577:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.4.3705" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f17a56ccdd9 code=0x7ffc0000 [ 1059.126229][ T37] audit: type=1326 audit(1778412762.577:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.4.3705" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a56ccdd9 code=0x7ffc0000 [ 1059.167624][ T37] audit: type=1326 audit(1778412762.617:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.4.3705" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f17a56ccdd9 code=0x7ffc0000 [ 1060.238904][ T37] audit: type=1326 audit(1778412763.697:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.4.3705" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a56ccdd9 code=0x7ffc0000 [ 1060.239174][ T37] audit: type=1326 audit(1778412763.697:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.4.3705" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a56ccdd9 code=0x7ffc0000 [ 1060.488312][ T5732] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1060.503911][T16233] usb 6-1: USB disconnect, device number 101 [ 1060.718238][ T5732] usb 5-1: Using ep0 maxpacket: 16 [ 1060.725445][ T5732] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 511 [ 1060.732573][ T5732] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1060.732602][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.732620][ T5732] usb 5-1: Product: syz [ 1060.732633][ T5732] usb 5-1: Manufacturer: syz [ 1060.732646][ T5732] usb 5-1: SerialNumber: syz [ 1061.014693][ T37] audit: type=1326 audit(1778412764.467:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.4.3705" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f17a56ccdd9 code=0x7ffc0000 [ 1061.050909][ T5617] Bluetooth: hci0: command 0x0401 tx timeout [ 1061.077746][T17629] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1061.086245][ T37] audit: type=1326 audit(1778412764.527:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.4.3705" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a56ccdd9 code=0x7ffc0000 [ 1061.119117][ T37] audit: type=1326 audit(1778412764.567:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17628 comm="syz.4.3705" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a56ccdd9 code=0x7ffc0000 [ 1061.152484][ T5732] cdc_ncm 5-1:1.0: bind() failure [ 1061.166974][T17496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.166995][T17496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.189382][ T5732] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1061.189413][ T5732] cdc_ncm 5-1:1.1: bind() failure [ 1061.258425][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3710'. [ 1061.258446][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3710'. [ 1061.317878][ T5732] usb 5-1: USB disconnect, device number 109 [ 1061.384094][T17645] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3710'. [ 1061.384291][T17645] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1061.938263][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1062.089340][ T38] INFO: task kworker/u8:9:1125 blocked for more than 143 seconds. [ 1062.089368][ T38] Tainted: G L syzkaller #0 [ 1062.089379][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1062.089389][ T38] task:kworker/u8:9 state:D stack:22200 pid:1125 tgid:1125 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1062.089441][ T38] Workqueue: netns cleanup_net [ 1062.089467][ T38] Call Trace: [ 1062.089474][ T38] [ 1062.089487][ T38] __schedule+0x16ec/0x5620 [ 1062.089528][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1062.089556][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1062.089577][ T38] ? __pfx___schedule+0x10/0x10 [ 1062.089607][ T38] ? schedule+0x90/0x360 [ 1062.089631][ T38] schedule+0x164/0x360 [ 1062.089654][ T38] afs_cell_purge+0x40d/0x580 [ 1062.089681][ T38] ? __pfx_afs_cell_purge+0x10/0x10 [ 1062.089707][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 1062.089732][ T38] ? __timer_delete_sync+0x53e/0x610 [ 1062.089763][ T38] afs_net_exit+0x50/0x100 [ 1062.089786][ T38] ops_undo_list+0x49f/0x940 [ 1062.089809][ T38] ? rt_spin_unlock+0x1c0/0x200 [ 1062.089828][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1062.089846][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1062.089866][ T38] ? idr_destroy+0x21b/0x2a0 [ 1062.089892][ T38] ? rt_spin_unlock+0x160/0x200 [ 1062.089914][ T38] cleanup_net+0x56e/0x800 [ 1062.089937][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 1062.089964][ T38] ? process_scheduled_works+0xa70/0x1860 [ 1062.089984][ T38] ? process_scheduled_works+0xa70/0x1860 [ 1062.090012][ T38] process_scheduled_works+0xb5d/0x1860 [ 1062.090063][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1062.090091][ T38] ? assign_work+0x3d5/0x5e0 [ 1062.090115][ T38] worker_thread+0xa53/0xfc0 [ 1062.090162][ T38] kthread+0x388/0x470 [ 1062.090186][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1062.090204][ T38] ? __pfx_kthread+0x10/0x10 [ 1062.090228][ T38] ret_from_fork+0x514/0xb70 [ 1062.090252][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1062.090268][ T38] ? __switch_to+0xc79/0x1410 [ 1062.090295][ T38] ? __pfx_kthread+0x10/0x10 [ 1062.090319][ T38] ret_from_fork_asm+0x1a/0x30 [ 1062.090358][ T38] [ 1062.090543][ T38] [ 1062.090543][ T38] Showing all locks held in the system: [ 1062.090554][ T38] 6 locks held by kworker/0:0/9: [ 1062.090565][ T38] #0: ffff88802229e938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1062.090616][ T38] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1062.090660][ T38] #2: ffff88802a368210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 1062.090711][ T38] #3: ffff88802a366658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 1062.090788][ T38] #4: ffff88801fb01458 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 1062.090831][ T38] #5: ffffffff8ec018a0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820 [ 1062.090884][ T38] 1 lock held by khungtaskd/38: [ 1062.090895][ T38] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1062.090953][ T38] 2 locks held by kworker/u8:8/1114: [ 1062.090964][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1062.091013][ T38] #1: ffffc900056a7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1062.091058][ T38] 3 locks held by kworker/u8:9/1125: [ 1062.091069][ T38] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1062.091112][ T38] #1: ffffc90005697c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1062.091154][ T38] #2: ffffffff8f3487a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1062.091200][ T38] 2 locks held by kworker/u8:14/1431: [ 1062.091210][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1062.091253][ T38] #1: ffffc90006017c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1062.091297][ T38] 5 locks held by kworker/u8:16/1455: [ 1062.091320][ T38] 2 locks held by getty/5356: [ 1062.091331][ T38] #0: ffff88802c5fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1062.091377][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1062.091440][ T38] 6 locks held by syz-executor/17496: [ 1062.091452][ T38] #0: ffff888037258480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1062.091500][ T38] #1: ffff88805280a078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1062.091546][ T38] #2: ffff8880263b35a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1062.091595][ T38] #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1062.091637][ T38] #4: ffff88802ab55160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1062.091683][ T38] #5: ffff88803b430310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1062.091730][ T38] 1 lock held by syz.6.3713/17656: [ 1062.091741][ T38] #0: ffffffff8de7ebb8 (sched_core_mutex){+.+.}-{4:4}, at: sched_core_get+0x52/0x170 [ 1062.091784][ T38] 1 lock held by syz.6.3713/17657: [ 1062.091797][ T38] [ 1062.091803][ T38] ============================================= [ 1062.091803][ T38] [ 1062.091818][ T38] NMI backtrace for cpu 1 [ 1062.091834][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1062.091858][ T38] Tainted: [L]=SOFTLOCKUP [ 1062.091865][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1062.091875][ T38] Call Trace: [ 1062.091883][ T38] [ 1062.091891][ T38] dump_stack_lvl+0xe8/0x150 [ 1062.091913][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1062.091936][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1062.091957][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1062.091993][ T38] sys_info+0x135/0x170 [ 1062.092022][ T38] watchdog+0xfd3/0x1030 [ 1062.092050][ T38] ? watchdog+0x1c9/0x1030 [ 1062.092075][ T38] kthread+0x388/0x470 [ 1062.092098][ T38] ? __pfx_watchdog+0x10/0x10 [ 1062.092116][ T38] ? __pfx_kthread+0x10/0x10 [ 1062.092140][ T38] ret_from_fork+0x514/0xb70 [ 1062.092163][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1062.092183][ T38] ? __switch_to+0xc79/0x1410 [ 1062.092221][ T38] ? __pfx_kthread+0x10/0x10 [ 1062.092245][ T38] ret_from_fork_asm+0x1a/0x30 [ 1062.092281][ T38] [ 1062.092289][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1062.092312][ C0] NMI backtrace for cpu 0 [ 1062.092328][ C0] CPU: 0 UID: 0 PID: 17657 Comm: syz.6.3713 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1062.092351][ C0] Tainted: [L]=SOFTLOCKUP [ 1062.092357][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1062.092367][ C0] RIP: 0010:__lock_acquire+0x2e3/0x2cf0 [ 1062.092389][ C0] Code: 41 23 54 c7 20 09 ca 41 89 54 c7 20 4d 89 44 c7 08 4d 89 4c c7 10 48 8b 94 24 20 01 00 00 49 89 54 c7 18 65 8b 15 b9 9a ca 10 <31> f6 85 d2 40 0f 95 c6 31 d2 41 83 be dc 0b 00 00 00 0f 95 c2 c1 [ 1062.092403][ C0] RSP: 0018:ffffc90005feec90 EFLAGS: 00000002 [ 1062.092417][ C0] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 000000000000000b [ 1062.092428][ C0] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000000 [ 1062.092437][ C0] RBP: 0000000000000001 R08: ffffffff8176d226 R09: ffffffff8dfc8140 [ 1062.092449][ C0] R10: ffffc90005feef98 R11: ffffffff81af9130 R12: 0000000000000000 [ 1062.092460][ C0] R13: 0000000000000002 R14: ffff888033139ec0 R15: ffff88803313aab8 [ 1062.092472][ C0] FS: 00007ff7c3b8d6c0(0000) GS:ffff888126176000(0000) knlGS:0000000000000000 [ 1062.092486][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1062.092498][ C0] CR2: 000000110c349832 CR3: 00000000506f4000 CR4: 00000000003526f0 [ 1062.092512][ C0] Call Trace: [ 1062.092519][ C0] [ 1062.092532][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1062.092554][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1062.092571][ C0] lock_acquire+0x106/0x350 [ 1062.092590][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1062.092611][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1062.092629][ C0] ? get_page_from_freelist+0x27c8/0x2840 [ 1062.092649][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1062.092666][ C0] unwind_next_frame+0xc3/0x2550 [ 1062.092684][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1062.092704][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1062.092722][ C0] ? post_alloc_hook+0x231/0x280 [ 1062.092737][ C0] ? get_page_from_freelist+0x27c8/0x2840 [ 1062.092757][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1062.092775][ C0] arch_stack_walk+0x11b/0x150 [ 1062.092796][ C0] ? get_page_from_freelist+0x27c8/0x2840 [ 1062.092816][ C0] stack_trace_save+0xa9/0x100 [ 1062.092833][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1062.092854][ C0] save_stack+0x124/0x230 [ 1062.092872][ C0] ? __pfx_save_stack+0x10/0x10 [ 1062.092886][ C0] ? post_alloc_hook+0x231/0x280 [ 1062.092901][ C0] ? get_page_from_freelist+0x27c8/0x2840 [ 1062.092924][ C0] ? bad_range+0xa0/0x330 [ 1062.092948][ C0] __set_page_owner+0x8d/0x4b0 [ 1062.092964][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1062.092980][ C0] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 1062.092995][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1062.093017][ C0] post_alloc_hook+0x231/0x280 [ 1062.093036][ C0] get_page_from_freelist+0x27c8/0x2840 [ 1062.093058][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 1062.093088][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1062.093108][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1062.093129][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 1062.093146][ C0] ? filemap_get_entry+0x378/0x3f0 [ 1062.093161][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1062.093179][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1062.093194][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 1062.093211][ C0] alloc_pages_mpol+0xd1/0x380 [ 1062.093229][ C0] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1062.093254][ C0] shmem_get_folio_gfp+0x644/0x1a80 [ 1062.093280][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1062.093295][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1062.093318][ C0] shmem_fault+0x170/0x380 [ 1062.093336][ C0] ? do_pte_missing+0x12b5/0x2950 [ 1062.093355][ C0] __do_fault+0x138/0x2a0 [ 1062.093373][ C0] ? do_pte_missing+0x12b5/0x2950 [ 1062.093392][ C0] do_pte_missing+0x179c/0x2950 [ 1062.093413][ C0] ? handle_mm_fault+0xe7/0x13c0 [ 1062.093430][ C0] handle_mm_fault+0xd0a/0x13c0 [ 1062.093448][ C0] ? handle_mm_fault+0xe7/0x13c0 [ 1062.093465][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 1062.093482][ C0] ? follow_page_pte+0xbc8/0xe40 [ 1062.093502][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 1062.093523][ C0] __get_user_pages+0x168f/0x2570 [ 1062.093550][ C0] populate_vma_page_range+0x2be/0x3c0 [ 1062.093567][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1062.093581][ C0] ? userfaultfd_unmap_complete+0x29e/0x320 [ 1062.093597][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1062.093615][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1062.093636][ C0] __mm_populate+0x25f/0x390 [ 1062.093651][ C0] ? __pfx___mm_populate+0x10/0x10 [ 1062.093666][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1062.093684][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1062.093700][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1062.093719][ C0] vm_mmap_pgoff+0x3ad/0x4f0 [ 1062.093734][ C0] ? __se_sys_futex+0x3a8/0x450 [ 1062.093756][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1062.093771][ C0] ? rcu_is_watching+0x15/0xb0 [ 1062.093795][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 1062.093812][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.093828][ C0] do_syscall_64+0x15f/0xf80 [ 1062.093845][ C0] ? trace_irq_disable+0x3b/0x140 [ 1062.093862][ C0] ? clear_bhb_loop+0x40/0x90 [ 1062.093880][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.093895][ C0] RIP: 0033:0x7ff7c595cdd9 [ 1062.093909][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.093922][ C0] RSP: 002b:00007ff7c3b8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1062.093937][ C0] RAX: ffffffffffffffda RBX: 00007ff7c5bd6090 RCX: 00007ff7c595cdd9 [ 1062.093949][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1062.093961][ C0] RBP: 00007ff7c59f2d69 R08: ffffffffffffffff R09: 0000000000000000 [ 1062.093971][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1062.093982][ C0] R13: 00007ff7c5bd6128 R14: 00007ff7c5bd6090 R15: 00007ffca9a68888 [ 1062.094000][ C0] [ 1062.094317][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1062.094334][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1062.094358][ T38] Tainted: [L]=SOFTLOCKUP [ 1062.094365][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1062.094375][ T38] Call Trace: [ 1062.094383][ T38] [ 1062.094391][ T38] vpanic+0x56c/0xa60 [ 1062.094417][ T38] ? __pfx_vpanic+0x10/0x10 [ 1062.094448][ T38] panic+0xc5/0xd0 [ 1062.094468][ T38] ? __pfx_panic+0x10/0x10 [ 1062.094498][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1062.094528][ T38] watchdog+0x102c/0x1030 [ 1062.094555][ T38] ? watchdog+0x1c9/0x1030 [ 1062.094580][ T38] kthread+0x388/0x470 [ 1062.094603][ T38] ? __pfx_watchdog+0x10/0x10 [ 1062.094621][ T38] ? __pfx_kthread+0x10/0x10 [ 1062.094645][ T38] ret_from_fork+0x514/0xb70 [ 1062.094669][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1062.094689][ T38] ? __switch_to+0xc79/0x1410 [ 1062.094716][ T38] ? __pfx_kthread+0x10/0x10 [ 1062.094740][ T38] ret_from_fork_asm+0x1a/0x30 [ 1062.094776][ T38] [ 1062.094923][ T38] Kernel Offset: disabled