last executing test programs: 2m42.388814522s ago: executing program 0 (id=13): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) unshare(0x22020600) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}, 0x8}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) set_mempolicy(0x8006, &(0x7f00000001c0)=0x1, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000000) readv(r3, &(0x7f0000000440)=[{&(0x7f0000002200)=""/4088, 0xff8}], 0x1) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e0"], 0x30}, 0x40880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x8, &(0x7f0000000180)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x3, 0x54}, @ldst={0x0, 0x0, 0x6, 0x6, 0x0, 0x20, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x5}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rt_sigsuspend(0x0, 0xfe68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000005c0)={0x0, 0x9, [@random="5511da4a5d84", @local, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast]}) getpid() 2m39.833079177s ago: executing program 0 (id=21): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe8800051a0000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005b07350008"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) connect$inet(r3, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10402000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xa}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x58}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r5 = socket(0x15, 0x5, 0x0) connect$can_j1939(r5, &(0x7f0000000040)={0xa, 0x0, 0xffffc0fe}, 0x1c) getpeername$packet(r5, 0x0, &(0x7f0000000100)) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2m36.168736474s ago: executing program 0 (id=28): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac6eb8947e4e4080045000070000000000001907864010100ac1414aa0bba907803000000450000000000001000890000000000f4df0003020d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f000001e0000001e000000200"/126], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x40) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r8 = socket$qrtr(0x2a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f0000000240)=[{0x7, 0x3, 0xf6, 0x4}, {0x8001, 0x64, 0xb, 0x6}, {0x5, 0x4, 0x99, 0x7fffffff}, {0x5, 0xc3, 0x9, 0x3}, {0x6, 0x4, 0x9, 0xa}]}, 0x10) read$char_usb(r1, &(0x7f00000006c0)=""/237, 0xed) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r11, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4605fc0040ff7f00000000000003003e00edfffbff94020000000000004000000000000000cf000000000000000f000000000038000100020002000000030000000300000004000000000000000d00000000000000041000000000000003"], 0x78) close(r11) ioctl$HIDIOCSFLAG(r11, 0x4004480f, &(0x7f00000000c0)=0x3) sendmsg$inet(r10, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) write$cgroup_subtree(r10, &(0x7f00000001c0)=ANY=[], 0xfe33) write$char_usb(r1, &(0x7f00000003c0)="77e848144670a0beffc3bce5214fcd74f64117429fb4df3d2d0d475416fcbbeea979f8603869e1261a16913697ff", 0x2e) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b"], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) 2m32.794285882s ago: executing program 0 (id=36): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x120) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x414b2bba708b1418) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000100)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r3, r5, 0x0, 0x20000000000006) read$FUSE(r2, &(0x7f0000005600)={0x2020}, 0x2020) close_range(r0, r0, 0x0) sendmsg$sock(r2, &(0x7f0000002640)={&(0x7f0000000100)=@rc={0x1f, @none, 0xa}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000180)="1657974750e704fb1e1c3027297e6e5997f2592c36f490a8d0588e1b5fdb8d55e927828b0e96f6e083fb943481c44a852a4032917048c4dbb8e59737598bf960fc87ada8e6c84b7febc6e55f6a43bc97bc28da7aaf38e82bfce1fb9f10a7bf943ccc59f76a9c7124be7bec68bd7c032164b35817dc7ca7d257a36feb0da0188c6343b894d57e9b233d609e4210f4ffe7038042761e", 0x95}, {&(0x7f00000002c0)="98ad0cd80f63baf0c7f2e2c95b294ca3bd26bd718272e1ed0f9de810a71b3b0ef9a35c7108d8a8ba947148996c406c7cbb57628a3fd0d38272ecbb786adc527794651da9c273c201273c5ce69f1ba866d1d5ba9981f99d3b6713ca8edf6f632e608e1487135bfe5776f92d0b40da321c136738a63b8468fcf70fa1e5b91fd9c346df242db7fe8e1dc72dbb281d52fed73135d57b703a7fd3b8632d8240d193ada6de4e513e9eedae6625d4b76681dc413774f4", 0xb3}, {&(0x7f0000000380)="0e031294d84b1c3fd7c4d0630ff19138486715bb3018acd87e7fd856dd9752f127e783b24bc739c5eaca49cf1fae9b96afd18597a38189104ddfbdea7c697db4d08b91e23db96cffaf3d47b0dc52d2a0ad1be0bc9b3b06aca1480cd5f0d84d327c3072dcf919f881f88b1fd25e7081b4238a8adbcfee83100cc9ef4968349f1c73290c56fd9445a2e92dd47a6dbf6308f2df85cf67e08d8278bd47dca327e1a840a2a6d5f211dd60437c01565dbbdca89a3a602826abe0791482b8633a94d3774dba114d2992c8933df41163c27c0a9134", 0xd1}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="0e42a96135f76c6be53bf272ad97a4f5cce084126388bc92e01fd98eddb4c8b8b90d31d3f285b5202c285727f6c67c8ac1818626276006bc3da6ec44fad195c4395f57eec83ed39f0dbc3c759fd4af61716051f06d97dfe63fc8853dfc0998b36edb8cc06c38e9a067a4695cf2f2c47f65f4cd11741c11ccd7315f8da08881bcb05a9e2d7de40e6e0482ff59e9f2ad8a9668f14b2e22a82eaae9c418fffc1d738ae4ff36649c5c98d67143a0eeb55e918935d5b82598089778a641cb47b15326d05ee14929b62ff5e8ad5bc0b19507f0346f6a39620940d1fa2ee39c304330f3a4f1d4da5e", 0xe5}, {&(0x7f0000001580)="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", 0x1000}], 0x6, &(0x7f0000002600)=[@mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x30}, 0x20000840) socket$kcm(0x1e, 0x5, 0x0) r6 = socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="74720e4e839943be4a3166646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) 2m29.683478609s ago: executing program 0 (id=44): socket$packet(0x11, 0x2, 0x300) syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) io_uring_setup(0x3c30, &(0x7f00000002c0)={0x0, 0x4354, 0x10000, 0x20, 0x34a}) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r2, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2m29.167014963s ago: executing program 0 (id=45): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8804) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x90000207) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) pselect6(0x40, &(0x7f0000000040)={0x8, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0x35c0}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x7, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) poll(&(0x7f0000000480)=[{r6, 0x101}], 0x1, 0xffff) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x1) dup2(r3, r5) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb085, 0x6, &(0x7f0000006680)=0x1) r8 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000000000000000000001180000000000000084"], 0x38}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000098b000/0x4000)=nil, 0x4000, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 2m13.704074985s ago: executing program 32 (id=45): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8804) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x90000207) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) pselect6(0x40, &(0x7f0000000040)={0x8, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0x35c0}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x7, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) poll(&(0x7f0000000480)=[{r6, 0x101}], 0x1, 0xffff) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r4, 0x5441, 0x1) dup2(r3, r5) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb085, 0x6, &(0x7f0000006680)=0x1) r8 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000000000000000000001180000000000000084"], 0x38}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000098b000/0x4000)=nil, 0x4000, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 7.727093308s ago: executing program 3 (id=552): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="0100ffffffdd29a618ff2b1f440008000300", @ANYRES64=r3, @ANYBLOB="0a00060008021100000000000500280b060000000500e4"], 0x40}, 0x1, 0x0, 0x0, 0x2004}, 0x24004010) syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00090000000905", @ANYRESDEC], 0x0) 6.496719247s ago: executing program 1 (id=556): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b0009008000", 0x2c}], 0x1) 6.454598515s ago: executing program 1 (id=557): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001f40)=[@dstopts={{0x14, 0x29, 0x37, {0x2e}}}, @dstopts={{0x14, 0x29, 0x37, {0x88}}}, @rthdrdstopts={{0x14, 0x29, 0x37, {0x29}}}], 0x3c}, 0xff00) syz_usb_connect(0x3, 0x275, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0xfd, 0x1a, 0xb6, 0x8, 0x19d2, 0xff73, 0x7fb3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x263, 0x1, 0x4, 0x7, 0x10, 0x81, "", [{{0x9, 0x4, 0xfc, 0x0, 0x9, 0xff, 0xff, 0xff, 0xb4, [], [{{0x9, 0x5, 0x6, 0x4, 0x8, 0x9, 0xda, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xb9, 0xfe, 0x8}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x0, 0x0, 0x7, [@generic={0x5e, 0x21, "be866a8dacb9aa319a64b67b8e151ec1db5b906c1e55e47c5f77ff11251ca765d822fb13855ef56d3551e7b2e22b126b959dfdd4f338451607b5d05b8a433eae35859e2bf20639e01791d83d9fbf25a3318c7048d43aad9c87ef2d11"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x3, 0x4, 0xaf}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x10, 0x6e, 0x1}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x9, 0x1, 0x8e, [@generic={0xd2, 0x0, "77d05b3f9f3ee9992a22bf6a115821f19808c3a89465a95dee75bbaa77be4ee5eb04b61225fcbe73e0cd90f0957414fb40c51564e166336e0b195b5f766627c92ed6dae193babdf4e4d8e6532613bc8daea1579fa3d8769a475206e4ff84e4ade0e716961b2fa4866ac42b852c4905d4dc8884634ac0965d1c5ffb09f812fa4cf89f069b248c31fefca559d58cf4a27818f8eb5dc5c369de94c4360026ad7cc468c133119484468d8c18660ae2144970e6352a4a5b151f6c81837b5c47cbc3661eae9a9884c8a960ada7700b8dc9d5db"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x3}]}}, {{0x9, 0x5, 0xa, 0x1, 0x3ff, 0x52, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x9}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x5, 0x5, 0xff}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x0, 0x9, 0x1, [@generic={0xc2, 0x9, "19a5844bc687afcc7fc4836428dc3ce290603ff7c4f43c0ca6a2179e72044ea0bfc8118409d59f02ec978a7150787807999556c41c35e8dcc73efa413ed38d09b83ba202e8844205f044dba2877c546495ff4d974d2f6a05f362065a12ccd799f9dc82f1894b63253ba04f507d03b7ef526cbab2fb03564517d556c75283b3299ddacd8c8b0ace4768cfc2e122c1da6ebb3d31ea8574fce9576b9b48c33f1eb13e1e203d8555477a86e2bd97faa37fbf51399c5f47bd8d4e57f212c1d0a959a4"}]}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x6d, &(0x7f0000000040)=@string={0x6d, 0x3, "7f66242d7aaf2ad032a88af08f80cc15522ed236051467954c2f336f02be31d91096a3e77947d5426c17cad23a2a574c0bb7b613d928105cb53d9a31772e6e4fb8a7f91dd0dfc702fc6cd883e68420f5f5cd2b43fe16b2a21f8dfcfbc771e19e8ec816a512f0a747e37f7a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_connect$cdc_ncm(0x1, 0xab, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x2, 0x1, 0xe, 0xc0, 0xe3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "dc76042f0c"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x3, 0xef2b, 0xd4}, {0x6, 0x24, 0x1a, 0x1ff, 0x23}, [@obex={0x5, 0x24, 0x15, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x680, 0x9940, 0x2, 0x6, 0x61ef, 0x1}, @dmm={0x7, 0x24, 0x14, 0xfff0, 0xb245}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x4, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x1, 0x7f}, @country_functional={0x10, 0x24, 0x7, 0x92, 0x1fef, [0x100, 0x5, 0x6, 0x2, 0x200]}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xfd, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x10, 0x0, 0xd}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x0, 0x9, 0xf, 0x8, 0x20, 0x7}, 0x5, &(0x7f00000004c0)={0x5, 0xf, 0x5}, 0x2, [{0x52, &(0x7f0000000500)=@string={0x52, 0x3, "d74205ace77b73ec6db652bfd411d71ba52a92c43869fd86a86e0eec4e0317e3e3cb1dc2bb16ba71d2cbd0e8de840f9aa2502b5074aed1d78de9f302c0623f5c9a0c490e4a2866bc2fd147f2184f04f7"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40b}}]}) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x6, 0x11, 0x7, 0x7, 0x81, 0xfff, 0xe4a8, 0xf753, 0x100}, 0x0) 6.316262441s ago: executing program 4 (id=559): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x12f}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bf", 0x18}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x33a}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.256703883s ago: executing program 2 (id=560): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) getpriority(0x1, r1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000001c0018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000c300a0004100000095"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x100000007}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010324bd7000fcffffff2e00000087e38c409d0c05bc3b44e983dae2e3a90803c95c8c859f938dc44ec9a7cd084b1da7e7a469ddd60218"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x40) 6.235173648s ago: executing program 5 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000140)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000000240)="e70d", 0x2}], 0x1}}], 0x3, 0x4050000) 5.04632805s ago: executing program 4 (id=562): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 4.981054246s ago: executing program 3 (id=563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)="5e15674417ab20782f6f3ecdf6d66966ef711c", 0x13}], 0x1}, 0x801) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, '\r\x00', "8a36c47a9c625dfaf08ace81c500", "f8ffffff", "362d3017f069109d"}, 0x28) 4.888899581s ago: executing program 5 (id=564): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffd) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) r1 = epoll_create(0x2) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000080)=0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2002}) 4.805586592s ago: executing program 3 (id=565): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0xa, 0x801, 0x84) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, 0x0, 0x1f, &(0x7f00000003c0)={0x14, 0x1851, 0x2}) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffffff7]}, 0x8, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="ea", 0x1) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000880) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) 4.710723032s ago: executing program 4 (id=566): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x29, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014bfd0701c00016ef6d449623b8d0c9be7aa932b7c163922a113fa25a6c9a235d557fcbf96f788d4369aed07f68cd6ba07dba909fee7cd4c27c2f13a2881190b7a4785fc64d2aa3d510bd4c154aeed009c2ba3a653f24ad996b57828b62d52a9305e1de8568a0eb453226a73e742582d5e54823adacc0bf3330238d9a4d7534be9"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.246432391s ago: executing program 2 (id=567): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffff", 0x42}], 0x1) 4.156681839s ago: executing program 5 (id=568): read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000020c0)=""/4057, &(0x7f0000000000)=0xfd9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)}}], 0x1, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) landlock_restrict_self(r0, 0x9) 4.156442082s ago: executing program 3 (id=569): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x5, r1, 0x0, &(0x7f00000002c0)="e63e1cc1", 0x4, 0x400000000000004}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000000340)='d', 0x1, 0xf537}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r1, 0x0, &(0x7f0000000380)='\b', 0x1, 0x9}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000000440)='/', 0x1, 0xa}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000000400), 0x0, 0xbe5}) 4.104081851s ago: executing program 1 (id=570): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0x6}, 0x0, [0x0, 0x0, 0x5, 0x3, 0x100000, 0x0, 0x8, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x0, 0x200000000000, 0xfffffffffffffff7, 0x0, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x3fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc874, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x7f, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x704, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffd, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7660, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', 0x0, 0x84, &(0x7f00000004c0)={[{@upperdir}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_require}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}}], 0x1, 0x8044) 3.939659125s ago: executing program 2 (id=571): r0 = fsopen(&(0x7f0000000580)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 3.904255318s ago: executing program 3 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c0902120001000000000904"], 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) r1 = io_uring_setup(0x1ad2, 0x0) close(r1) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5707}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404d808}, 0x24000000) 3.632665669s ago: executing program 2 (id=573): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a300000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x12, 0xb, 0x1c, "fee8a2ab78fc979fdee00db6072000001ea89de2b4410100008000000000960000100000000000000000000100000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 3.360309524s ago: executing program 2 (id=574): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x40002, 0x2, {0xd, @win={{0x6, 0x2, 0x1, 0x7}, 0x9, 0x1000, 0x0, 0x0, 0x0, 0xaa}}}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4003, 0x20, 0x400, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0xfffffffe, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x8, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x925, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x2, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x1, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.133580657s ago: executing program 4 (id=575): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac6eb8947e4e4080045000070000000000001907864010100ac1414aa0bba907803000000450000000000001000890000000000f4df0003020d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f000001e0000001e000000200"/126], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x40) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r8 = socket$qrtr(0x2a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000300)={0x5, &(0x7f0000000240)=[{0x7, 0x3, 0xf6, 0x4}, {0x8001, 0x64, 0xb, 0x6}, {0x5, 0x4, 0x99, 0x7fffffff}, {0x5, 0xc3, 0x9, 0x3}, {0x6, 0x4, 0x9, 0xa}]}, 0x10) read$char_usb(r1, &(0x7f00000006c0)=""/237, 0xed) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r11) ioctl$HIDIOCSFLAG(r11, 0x4004480f, &(0x7f00000000c0)=0x3) sendmsg$inet(r10, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) write$cgroup_subtree(r10, &(0x7f00000001c0)=ANY=[], 0xfe33) write$char_usb(r1, &(0x7f00000003c0)="77e848144670a0beffc3bce5214fcd74f64117429fb4df3d2d0d475416fcbbeea979f8603869e1261a16913697ff", 0x2e) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b"], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) 3.080171021s ago: executing program 5 (id=576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)="5e15674417ab20782f6f3ecdf6d66966ef711c", 0x13}], 0x1}, 0x801) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, '\r\x00', "8a36c47a9c625dfaf08ace81c500", "f8ffffff", "362d3017f069109d"}, 0x28) 2.784587544s ago: executing program 5 (id=577): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @multicast2}, 0x10, 0x0}, 0x3406c012) 1.826687461s ago: executing program 1 (id=578): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x0, 0x32315559, 0x780, 0x4, 0x3, @discrete={0x0, 0x8}}) 1.586531302s ago: executing program 4 (id=579): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x5) copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x7, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x2c, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @empty}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000fc0)={0x0, 0x4}, &(0x7f0000001000)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610430000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) 1.478013461s ago: executing program 5 (id=580): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r2 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002300010322bd7002fadbdf250100000097a5638def4be16997a9894c4ddbf36573563ecbcc8d669ed6817c6c97592a"], 0x14}}, 0xc004) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'nq\x00', 0x0, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e25, 0x3, 0x1d8, 0x12d5c, 0x92d5c}}, 0x44) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x506, 0x8, 0x5, 0xff, 0x7, 0x80, 0x0, 0x5, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e21, 0x9, @remote, 0xfff}}, 0x4, 0x7, 0x935d, 0x100, 0x4, 0x0, 0x4}, 0x9c) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000001c0)={0x1, 0x1ff, 0x7f, 0x0, 0x11}) 1.090857348s ago: executing program 1 (id=581): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffff", 0x42}], 0x1) 1.016534613s ago: executing program 4 (id=582): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x7b485c32) r1 = accept4(r0, 0x0, 0x0, 0x80400) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x80004) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = fsopen(&(0x7f0000000580)='ceph\x00', 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000200)=0x40) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x101, 0x503e00) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet(0xa, 0x2, 0x84) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r6}, 0x8) connect$inet(r5, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$can_bcm(0x1d, 0x2, 0x2) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x48) 751.109844ms ago: executing program 3 (id=583): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000240)=0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x400000, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) setrlimit(0x2, &(0x7f00000005c0)={0x2, 0xfffffffffffffff7}) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x26, '\x00', @st={0x4, [{0x1, @uvalue=0x404}, {0x0, @svalue=0x5}, {0x3, @svalue=0x7ff}, {0x1, @svalue=0x6}]}}, {0x2a, '\x00', @data=0x10000, 0x9}, {0x15, '\x00', @buffer={"dc9b04fa64d44fee75863feda5450bd00fd74d2299a72bc44ec4d5beeeb1d7f6", 0x20}, 0x3}]}) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x8) 113.562419ms ago: executing program 1 (id=584): rt_sigtimedwait(&(0x7f0000001980)={[0x8000000000000001]}, 0x0, 0xffffffffffffffff, 0x8) close(0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000001b00), &(0x7f0000000000)=0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r2, 0x0, &(0x7f0000000280)=""/198, 0xc6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 2 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): 120.460411][ T6086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.460447][ T6086] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.460468][ T6086] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.460494][ T6086] netlink_unicast+0x780/0x920 [ 120.460524][ T6086] netlink_sendmsg+0x813/0xb40 [ 120.460556][ T6086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.460586][ T6086] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 120.460607][ T6086] ____sys_sendmsg+0x94c/0x9c0 [ 120.460636][ T6086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.460668][ T6086] ? import_iovec+0x73/0xa0 [ 120.460698][ T6086] ___sys_sendmsg+0x2a5/0x360 [ 120.460721][ T6086] ? __lock_acquire+0x6b5/0x2cf0 [ 120.460748][ T6086] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.460778][ T6086] ? kstrtouint+0x6e/0xe0 [ 120.460828][ T6086] ? __fget_files+0x2a/0x420 [ 120.460844][ T6086] ? __fget_files+0x3a6/0x420 [ 120.460871][ T6086] __sys_sendmmsg+0x282/0x4e0 [ 120.460900][ T6086] ? __pfx___sys_sendmmsg+0x10/0x10 [ 120.460932][ T6086] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 120.460965][ T6086] ? ksys_write+0x248/0x270 [ 120.460987][ T6086] ? __pfx_ksys_write+0x10/0x10 [ 120.461013][ T6086] __x64_sys_sendmmsg+0xa0/0xc0 [ 120.461036][ T6086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.461055][ T6086] do_syscall_64+0x15f/0xf80 [ 120.461077][ T6086] ? trace_irq_disable+0x3b/0x140 [ 120.461098][ T6086] ? clear_bhb_loop+0x40/0x90 [ 120.461121][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.461139][ T6086] RIP: 0033:0x7ff51e99ce59 [ 120.461156][ T6086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.461171][ T6086] RSP: 002b:00007ff51cbee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 120.461190][ T6086] RAX: ffffffffffffffda RBX: 00007ff51ec15fa0 RCX: 00007ff51e99ce59 [ 120.461203][ T6086] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 120.461216][ T6086] RBP: 00007ff51cbee090 R08: 0000000000000000 R09: 0000000000000000 [ 120.461227][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.461238][ T6086] R13: 00007ff51ec16038 R14: 00007ff51ec15fa0 R15: 00007fff3d9e98d8 [ 120.461268][ T6086] [ 120.718308][ T6073] ip6tnl1: entered promiscuous mode [ 120.718331][ T6073] ip6tnl1: entered allmulticast mode [ 120.869052][ T5898] usb 3-1: USB disconnect, device number 4 [ 121.373974][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 121.518382][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 121.629151][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 121.940618][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 121.941366][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.981198][ T6128] netem: change failed [ 123.380898][ T6135] netlink: 'syz.4.96': attribute type 2 has an invalid length. [ 123.380934][ T6135] netlink: 'syz.4.96': attribute type 2 has an invalid length. [ 123.668781][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 123.669466][ T6149] sit0: Master is either lo or non-ether device [ 123.744577][ T5726] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.897238][ T5726] usb 2-1: Using ep0 maxpacket: 16 [ 123.899649][ T5726] usb 2-1: too many configurations: 60, using maximum allowed: 8 [ 123.917894][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.917917][ T5726] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.920784][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.920806][ T5726] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.969597][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.969620][ T5726] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.971380][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.971401][ T5726] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.972829][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.972852][ T5726] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.001047][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.001071][ T5726] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.007036][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.007059][ T5726] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.008292][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.008312][ T5726] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.031497][ T5726] usb 2-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 124.031522][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 124.031540][ T5726] usb 2-1: Product: syz [ 124.031554][ T5726] usb 2-1: Manufacturer: syz [ 124.031568][ T5726] usb 2-1: SerialNumber: syz [ 124.054886][ T5603] Bluetooth: hci5: command tx timeout [ 124.149111][ T5726] usb 2-1: config 0 descriptor?? [ 124.728689][ T6170] ip6tnl1: entered promiscuous mode [ 124.728713][ T6170] ip6tnl1: entered allmulticast mode [ 124.822230][ T5726] usb 2-1: USB disconnect, device number 5 [ 124.987275][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.988570][ T6179] usb usb7: usbfs: process 6179 (syz.4.107) did not claim interface 0 before use [ 124.988956][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.989120][ T6096] bridge_slave_0: entered allmulticast mode [ 124.992326][ T6096] bridge_slave_0: entered promiscuous mode [ 125.039189][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.039383][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.039544][ T6096] bridge_slave_1: entered allmulticast mode [ 125.042111][ T6096] bridge_slave_1: entered promiscuous mode [ 125.115770][ T6096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.119448][ T6096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.211797][ T6096] team0: Port device team_slave_0 added [ 125.222785][ T6096] team0: Port device team_slave_1 added [ 125.277644][ T6096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.277657][ T6096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.277681][ T6096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.279774][ T6096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.279786][ T6096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.279809][ T6096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.460910][ T6096] hsr_slave_0: entered promiscuous mode [ 125.462197][ T6096] hsr_slave_1: entered promiscuous mode [ 125.463064][ T6096] debugfs: 'hsr0' already exists in 'hsr' [ 125.463085][ T6096] Cannot create hsr debugfs directory [ 126.337771][ T5603] Bluetooth: hci5: command tx timeout [ 126.888989][ T36] audit: type=1326 audit(1778919315.175:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6198 comm="syz.4.114" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dde56ce59 code=0x0 [ 128.104600][ T36] audit: type=1800 audit(1778919316.345:96): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.3.111" name="/" dev="tmpfs" ino=1042 res=0 errno=0 [ 128.279979][ T6096] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.427794][ T5603] Bluetooth: hci5: command tx timeout [ 128.535622][ T6096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.834801][ T5715] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.871905][ T6096] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.938956][ T6096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.002212][ T6096] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.016305][ T5715] usb 3-1: Using ep0 maxpacket: 16 [ 129.020226][ T5715] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 129.045204][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.045226][ T5715] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.073831][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.073852][ T5715] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.096655][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.096675][ T5715] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.098964][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.098984][ T5715] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.101239][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.101258][ T5715] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.134673][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.134695][ T5715] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.154531][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.154552][ T5715] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.166353][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.166375][ T5715] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.192744][ T6096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.228843][ T5715] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 129.228868][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 129.228887][ T5715] usb 3-1: Product: syz [ 129.228901][ T5715] usb 3-1: Manufacturer: syz [ 129.228915][ T5715] usb 3-1: SerialNumber: syz [ 129.270767][ T6096] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.290347][ T5715] usb 3-1: config 0 descriptor?? [ 129.316041][ T5898] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 129.347349][ T6096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.510506][ T5898] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 129.510532][ T5898] usb 5-1: config 0 has no interface number 0 [ 129.510575][ T5898] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 129.510598][ T5898] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 129.510624][ T5898] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 129.510648][ T5898] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 129.510673][ T5898] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 129.510697][ T5898] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.510737][ T5898] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 129.510759][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.557232][ T5898] usb 5-1: config 0 descriptor?? [ 129.578241][ T6221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 129.578353][ T6221] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 129.800996][ T5898] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 129.833829][ T5726] usb 3-1: USB disconnect, device number 5 [ 129.944973][ T6096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.089675][ T6096] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.111085][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.113791][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.182289][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.182395][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.338722][ T5898] usb 5-1: USB disconnect, device number 4 [ 130.382492][ T5898] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 130.455531][ T5603] Bluetooth: hci5: command tx timeout [ 132.716594][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.716694][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.100278][ T6272] fuse: Unknown parameter '0000000000000000000000318446744073709551615' [ 133.198386][ T6096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.463467][ T6278] mmap: syz.3.131 (6278): VmData 25010176 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 133.793591][ T6096] veth0_vlan: entered promiscuous mode [ 133.814000][ T6096] veth1_vlan: entered promiscuous mode [ 133.913904][ T6096] veth0_macvtap: entered promiscuous mode [ 133.938186][ T6096] veth1_macvtap: entered promiscuous mode [ 133.964611][ T5715] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.006432][ T6096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.102751][ T6096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.138826][ T1342] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.141442][ T5976] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.143521][ T5976] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.144169][ T5976] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.144571][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 134.145373][ T5715] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 134.146555][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.146575][ T5715] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.147651][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.147671][ T5715] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.148704][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.148724][ T5715] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.157508][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.157529][ T5715] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.159890][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.159911][ T5715] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.163342][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.163363][ T5715] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.173734][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.173755][ T5715] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.182014][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.182035][ T5715] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.204731][ T5715] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 134.204757][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 134.204777][ T5715] usb 4-1: Product: syz [ 134.204790][ T5715] usb 4-1: Manufacturer: syz [ 134.204803][ T5715] usb 4-1: SerialNumber: syz [ 134.250805][ T5715] usb 4-1: config 0 descriptor?? [ 134.758273][ T6298] ip6tnl1: entered promiscuous mode [ 134.758385][ T6298] ip6tnl1: entered allmulticast mode [ 134.866140][ T5726] usb 4-1: USB disconnect, device number 8 [ 135.452100][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.452119][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.472427][ T6300] capability: warning: `syz.1.136' uses deprecated v2 capabilities in a way that may be insecure [ 135.605421][ T5976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.605439][ T5976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.516012][ T6318] netlink: 40 bytes leftover after parsing attributes in process `syz.3.143'. [ 136.567287][ T5899] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 136.657572][ T6323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.657590][ T6323] IPv6: NLM_F_CREATE should be set when creating new route [ 136.657999][ T6323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.144'. [ 136.660361][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 136.719375][ T5899] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 136.719407][ T5899] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 136.719426][ T5899] usb 6-1: config 2 has no interface number 0 [ 136.719469][ T5899] usb 6-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 136.719495][ T5899] usb 6-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 136.719518][ T5899] usb 6-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.721796][ T5899] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 136.721821][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.721839][ T5899] usb 6-1: Product: syz [ 136.721853][ T5899] usb 6-1: Manufacturer: syz [ 136.721867][ T5899] usb 6-1: SerialNumber: syz [ 136.776976][ T6315] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 137.258356][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.638686][ T9] usb 4-1: config index 0 descriptor too short (expected 37906, got 18) [ 137.638714][ T9] usb 4-1: config 0 has too many interfaces: 103, using maximum allowed: 32 [ 137.638735][ T9] usb 4-1: config 0 has an invalid interface number: 121 but max is 102 [ 137.638810][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 103 [ 137.638831][ T9] usb 4-1: config 0 has no interface number 0 [ 137.638860][ T9] usb 4-1: too many endpoints for config 0 interface 121 altsetting 187: 242, using maximum allowed: 30 [ 137.638905][ T9] usb 4-1: config 0 interface 121 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 137.638985][ T9] usb 4-1: config 0 interface 121 has no altsetting 0 [ 137.749774][ T9] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 137.749802][ T9] usb 4-1: New USB device strings: Mfr=2, Product=79, SerialNumber=3 [ 137.749881][ T9] usb 4-1: Product: syz [ 137.749895][ T9] usb 4-1: Manufacturer: syz [ 137.749909][ T9] usb 4-1: SerialNumber: syz [ 137.870892][ T9] usb 4-1: config 0 descriptor?? [ 138.054482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.074504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.084485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.094483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.104482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.114479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.124491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.134484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.319184][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.319720][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.327461][ T6325] No buffer was provided with the request [ 138.438201][ T6335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.453364][ T6335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.614604][ T5327] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 138.672181][ T5899] usb 6-1: probing VID:PID(0424:012C) [ 138.687813][ T5899] usb 6-1: vub300 testing BULK IN EndPoint(0) 8E [ 138.687885][ T5899] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 138.774122][ T9] hub 4-1:0.121: bad descriptor, ignoring hub [ 138.774158][ T9] hub 4-1:0.121: probe with driver hub failed with error -5 [ 138.794106][ T5899] vub300 6-1:2.174: probe with driver vub300 failed with error -22 [ 138.804408][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 138.804577][ T5327] usb 2-1: Using ep0 maxpacket: 16 [ 138.805227][ T5327] usb 2-1: too many configurations: 60, using maximum allowed: 8 [ 138.809192][ T5327] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.830960][ T5327] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.845401][ T5327] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.869790][ T5327] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.876589][ T5327] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.879091][ T5327] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.881078][ T5327] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.882860][ T5327] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.923892][ T5327] usb 2-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 138.923917][ T5327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 138.923936][ T5327] usb 2-1: Product: syz [ 138.923950][ T5327] usb 2-1: Manufacturer: syz [ 138.923963][ T5327] usb 2-1: SerialNumber: syz [ 139.032296][ T5899] usb 6-1: USB disconnect, device number 2 [ 139.053398][ T5327] usb 2-1: config 0 descriptor?? [ 140.026837][ T9] gspca_spca501: reg write: error -110 [ 140.026856][ T9] spca501 4-1:0.121: Reg write failed for 0x02,0x0f,0x05 [ 140.026955][ T9] spca501 4-1:0.121: probe with driver spca501 failed with error -22 [ 141.528563][ T6358] FAULT_INJECTION: forcing a failure. [ 141.528563][ T6358] name failslab, interval 1, probability 0, space 0, times 0 [ 141.528605][ T6358] CPU: 0 UID: 0 PID: 6358 Comm: syz.4.155 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 141.528632][ T6358] Tainted: [L]=SOFTLOCKUP [ 141.528638][ T6358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.528649][ T6358] Call Trace: [ 141.528656][ T6358] [ 141.528664][ T6358] dump_stack_lvl+0xe8/0x150 [ 141.528692][ T6358] should_fail_ex+0x46b/0x600 [ 141.528728][ T6358] should_failslab+0xa8/0x100 [ 141.528753][ T6358] kmem_cache_alloc_noprof+0x87/0x680 [ 141.528774][ T6358] ? __inet_hash_connect+0xef8/0x2630 [ 141.528801][ T6358] __inet_hash_connect+0xef8/0x2630 [ 141.528825][ T6358] ? __pfx___inet_check_established+0x10/0x10 [ 141.528856][ T6358] ? __inet_hash_connect+0x60d/0x2630 [ 141.528887][ T6358] ? __pfx___inet_hash_connect+0x10/0x10 [ 141.528908][ T6358] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.528939][ T6358] ? inet_hash_connect+0xf1/0x380 [ 141.528966][ T6358] tcp_v4_connect+0xd5f/0x19b0 [ 141.529019][ T6358] ? __pfx_tcp_v4_connect+0x10/0x10 [ 141.529058][ T6358] __inet_stream_connect+0x25a/0xdd0 [ 141.529094][ T6358] ? __pfx___inet_stream_connect+0x10/0x10 [ 141.529119][ T6358] ? __kasan_kmalloc+0x93/0xb0 [ 141.529141][ T6358] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 141.529163][ T6358] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 141.529195][ T6358] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 141.529229][ T6358] tcp_sendmsg_locked+0x4a8e/0x5370 [ 141.529259][ T6358] ? __lock_acquire+0x6b5/0x2cf0 [ 141.529284][ T6358] ? tcp_sendmsg_locked+0x281/0x5370 [ 141.529329][ T6358] ? __lock_acquire+0x6b5/0x2cf0 [ 141.529367][ T6358] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 141.529392][ T6358] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.529415][ T6358] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.529439][ T6358] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 141.529467][ T6358] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 141.529504][ T6358] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 141.529526][ T6358] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.529551][ T6358] ? __pfx_inet_sendmsg+0x10/0x10 [ 141.529577][ T6358] tcp_sendmsg+0x2f/0x50 [ 141.529609][ T6358] __sys_sendto+0x5f1/0x710 [ 141.529639][ T6358] ? __pfx___sys_sendto+0x10/0x10 [ 141.529692][ T6358] ? ksys_write+0x248/0x270 [ 141.529718][ T6358] ? __pfx_ksys_write+0x10/0x10 [ 141.529746][ T6358] __x64_sys_sendto+0xde/0x100 [ 141.529769][ T6358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.529790][ T6358] do_syscall_64+0x15f/0xf80 [ 141.529813][ T6358] ? trace_irq_disable+0x3b/0x140 [ 141.529836][ T6358] ? clear_bhb_loop+0x40/0x90 [ 141.529860][ T6358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.529879][ T6358] RIP: 0033:0x7f8dde56ce59 [ 141.529897][ T6358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.529913][ T6358] RSP: 002b:00007f8ddc7c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 141.529933][ T6358] RAX: ffffffffffffffda RBX: 00007f8dde7e5fa0 RCX: 00007f8dde56ce59 [ 141.529947][ T6358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 141.529958][ T6358] RBP: 00007f8ddc7c6090 R08: 0000200000000180 R09: 0000000000000010 [ 141.529970][ T6358] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 141.529982][ T6358] R13: 00007f8dde7e6038 R14: 00007f8dde7e5fa0 R15: 00007fff88282e58 [ 141.530016][ T6358] [ 142.094067][ T5726] usb 2-1: USB disconnect, device number 6 [ 142.274991][ T9] usb 4-1: USB disconnect, device number 9 [ 142.594566][ T5726] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 142.754585][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 142.756340][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.756369][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.756406][ T5726] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.756428][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.775002][ T5726] usb 2-1: config 0 descriptor?? [ 142.896814][ T5726] hub 2-1:0.0: USB hub found [ 142.980785][ T5726] hub 2-1:0.0: 1 port detected [ 143.182681][ T5726] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 143.182707][ T5726] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 143.270072][ T5726] usbhid 2-1:0.0: can't add hid device: -71 [ 143.270189][ T5726] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 143.402133][ T5726] usb 2-1: USB disconnect, device number 7 [ 143.893814][ T6380] FAULT_INJECTION: forcing a failure. [ 143.893814][ T6380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.893848][ T6380] CPU: 0 UID: 0 PID: 6380 Comm: syz.1.163 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 143.893874][ T6380] Tainted: [L]=SOFTLOCKUP [ 143.893881][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.893891][ T6380] Call Trace: [ 143.893899][ T6380] [ 143.893907][ T6380] dump_stack_lvl+0xe8/0x150 [ 143.893935][ T6380] should_fail_ex+0x46b/0x600 [ 143.893970][ T6380] _copy_from_iter+0x1d3/0x1670 [ 143.893990][ T6380] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 143.894020][ T6380] ? __pfx_policy_nodemask+0x10/0x10 [ 143.894046][ T6380] ? __pfx__copy_from_iter+0x10/0x10 [ 143.894068][ T6380] ? alloc_pages_mpol+0x2ae/0x380 [ 143.894099][ T6380] copy_page_from_iter+0x220/0x2d0 [ 143.894123][ T6380] tun_get_user+0x1bfa/0x4400 [ 143.894144][ T6380] ? is_bpf_text_address+0x292/0x2b0 [ 143.894170][ T6380] ? tun_get_user+0x8a1/0x4400 [ 143.894210][ T6380] ? __pfx_tun_get_user+0x10/0x10 [ 143.894234][ T6380] ? __lock_acquire+0x6b5/0x2cf0 [ 143.894272][ T6380] ? ref_tracker_alloc+0x332/0x4a0 [ 143.894290][ T6380] ? get_pid_task+0x20/0x1f0 [ 143.894323][ T6380] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 143.894345][ T6380] ? tun_get+0x1c/0x2f0 [ 143.894365][ T6380] ? tun_get+0x1c/0x2f0 [ 143.894390][ T6380] ? tun_get+0x1c/0x2f0 [ 143.894411][ T6380] ? tun_get+0x1c/0x2f0 [ 143.894439][ T6380] tun_chr_write_iter+0x119/0x200 [ 143.894461][ T6380] vfs_write+0x629/0xba0 [ 143.894490][ T6380] ? __pfx_vfs_write+0x10/0x10 [ 143.894521][ T6380] ? __fget_files+0x2a/0x420 [ 143.894547][ T6380] ksys_write+0x156/0x270 [ 143.894570][ T6380] ? __pfx_ksys_write+0x10/0x10 [ 143.894599][ T6380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.894621][ T6380] do_syscall_64+0x15f/0xf80 [ 143.894644][ T6380] ? trace_irq_disable+0x3b/0x140 [ 143.894665][ T6380] ? clear_bhb_loop+0x40/0x90 [ 143.894689][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.894708][ T6380] RIP: 0033:0x7ff51e95d68e [ 143.894725][ T6380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 143.894740][ T6380] RSP: 002b:00007ff51cbedfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.894761][ T6380] RAX: ffffffffffffffda RBX: 00007ff51cbee6c0 RCX: 00007ff51e95d68e [ 143.894774][ T6380] RDX: 000000000000002a RSI: 0000200000000000 RDI: 00000000000000c8 [ 143.894787][ T6380] RBP: 00007ff51cbee090 R08: 0000000000000000 R09: 0000000000000000 [ 143.894798][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.894809][ T6380] R13: 00007ff51ec16038 R14: 00007ff51ec15fa0 R15: 00007fff3d9e98d8 [ 143.894839][ T6380] [ 144.324267][ T5726] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 145.216057][ T5726] usb 6-1: Using ep0 maxpacket: 16 [ 145.221167][ T5726] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 145.221193][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.221212][ T5726] usb 6-1: Product: syz [ 145.221225][ T5726] usb 6-1: Manufacturer: syz [ 145.221239][ T5726] usb 6-1: SerialNumber: syz [ 145.263677][ T5726] usb 6-1: config 0 descriptor?? [ 145.284163][ T5726] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 145.290921][ T6388] netlink: 420 bytes leftover after parsing attributes in process `syz.1.164'. [ 145.375832][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.377443][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.503501][ T5726] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 145.503657][ T5726] visor 6-1:0.0: probe with driver visor failed with error -71 [ 145.528896][ T5726] usb 6-1: USB disconnect, device number 3 [ 145.729029][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.733650][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.669357][ T1373] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.828699][ T1373] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.954614][ T5726] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 147.006702][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.080045][ T5975] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.084763][ T5975] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.104613][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 147.105432][ T5726] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 147.106866][ T5726] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.115107][ T5726] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.137713][ T5726] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.154762][ T5726] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.156143][ T5726] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.161993][ T5726] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.165234][ T9] usb 3-1: config index 0 descriptor too short (expected 37906, got 18) [ 147.165258][ T9] usb 3-1: config 0 has too many interfaces: 103, using maximum allowed: 32 [ 147.165277][ T9] usb 3-1: config 0 has an invalid interface number: 121 but max is 102 [ 147.165297][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 103 [ 147.165316][ T9] usb 3-1: config 0 has no interface number 0 [ 147.165345][ T9] usb 3-1: too many endpoints for config 0 interface 121 altsetting 187: 242, using maximum allowed: 30 [ 147.165383][ T9] usb 3-1: config 0 interface 121 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 147.165410][ T9] usb 3-1: config 0 interface 121 has no altsetting 0 [ 147.169515][ T5726] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.185097][ T5726] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.204096][ T5726] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 147.204120][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 147.204139][ T5726] usb 4-1: Product: syz [ 147.204153][ T5726] usb 4-1: Manufacturer: syz [ 147.204166][ T5726] usb 4-1: SerialNumber: syz [ 147.238974][ T5726] usb 4-1: config 0 descriptor?? [ 147.240095][ T9] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 147.240127][ T9] usb 3-1: New USB device strings: Mfr=2, Product=79, SerialNumber=3 [ 147.240147][ T9] usb 3-1: Product: syz [ 147.240161][ T9] usb 3-1: Manufacturer: syz [ 147.240175][ T9] usb 3-1: SerialNumber: syz [ 147.371262][ T9] usb 3-1: config 0 descriptor?? [ 147.570732][ T6415] FAULT_INJECTION: forcing a failure. [ 147.570732][ T6415] name failslab, interval 1, probability 0, space 0, times 0 [ 147.570765][ T6415] CPU: 0 UID: 0 PID: 6415 Comm: syz.4.174 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 147.570790][ T6415] Tainted: [L]=SOFTLOCKUP [ 147.570799][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.570810][ T6415] Call Trace: [ 147.570817][ T6415] [ 147.570825][ T6415] dump_stack_lvl+0xe8/0x150 [ 147.570854][ T6415] should_fail_ex+0x46b/0x600 [ 147.570889][ T6415] should_failslab+0xa8/0x100 [ 147.570913][ T6415] __kmalloc_noprof+0xdf/0x7b0 [ 147.570934][ T6415] ? ip_options_get+0x51/0x4c0 [ 147.570953][ T6415] ? _copy_from_iter+0x446/0x1670 [ 147.570977][ T6415] ip_options_get+0x51/0x4c0 [ 147.571006][ T6415] ip_cmsg_send+0x591/0xa70 [ 147.571043][ T6415] ping_v4_sendmsg+0x69e/0x1810 [ 147.571091][ T6415] ? __lock_acquire+0x6b5/0x2cf0 [ 147.571125][ T6415] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 147.571156][ T6415] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 147.571182][ T6415] ? lockdep_hardirqs_on+0x7a/0x110 [ 147.571218][ T6415] ? __local_bh_enable+0x1e1/0x2f0 [ 147.571245][ T6415] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 147.571265][ T6415] ? lockdep_hardirqs_on+0x7a/0x110 [ 147.571293][ T6415] ? inet_sendmsg+0x2f4/0x370 [ 147.571320][ T6415] ____sys_sendmsg+0x7da/0x9c0 [ 147.571350][ T6415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.571383][ T6415] ? import_iovec+0x73/0xa0 [ 147.571408][ T6415] ___sys_sendmsg+0x2a5/0x360 [ 147.571430][ T6415] ? __lock_acquire+0x6b5/0x2cf0 [ 147.571456][ T6415] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.571511][ T6415] ? __fget_files+0x2a/0x420 [ 147.571527][ T6415] ? __fget_files+0x3a6/0x420 [ 147.571553][ T6415] __x64_sys_sendmsg+0x1c3/0x2a0 [ 147.571579][ T6415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.571609][ T6415] ? __pfx_ksys_write+0x10/0x10 [ 147.571637][ T6415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.571657][ T6415] do_syscall_64+0x15f/0xf80 [ 147.571681][ T6415] ? clear_bhb_loop+0x40/0x90 [ 147.571703][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.571721][ T6415] RIP: 0033:0x7f8dde56ce59 [ 147.571739][ T6415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.571753][ T6415] RSP: 002b:00007f8ddc7c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.571774][ T6415] RAX: ffffffffffffffda RBX: 00007f8dde7e5fa0 RCX: 00007f8dde56ce59 [ 147.571786][ T6415] RDX: 0000000000000804 RSI: 0000200000000080 RDI: 0000000000000003 [ 147.571798][ T6415] RBP: 00007f8ddc7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.571809][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.571820][ T6415] R13: 00007f8dde7e6038 R14: 00007f8dde7e5fa0 R15: 00007fff88282e58 [ 147.571850][ T6415] [ 147.585407][ T5726] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 147.612684][ T6398] No buffer was provided with the request [ 147.786161][ T5726] usb 6-1: Using ep0 maxpacket: 32 [ 147.805429][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.805459][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.805496][ T5726] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 147.805519][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.819175][ T6417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.821358][ T6417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.866372][ T5726] usb 6-1: config 0 descriptor?? [ 147.932685][ T5726] hub 6-1:0.0: USB hub found [ 148.127150][ T5726] hub 6-1:0.0: 1 port detected [ 148.536503][ T5717] usb 4-1: USB disconnect, device number 10 [ 148.984526][ T5863] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.200336][ T9] hub 3-1:0.121: bad descriptor, ignoring hub [ 149.200374][ T9] hub 3-1:0.121: probe with driver hub failed with error -5 [ 149.203689][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 149.204116][ T9] gspca_spca501: reg write: error -71 [ 149.204129][ T9] spca501 3-1:0.121: Reg write failed for 0x02,0x0f,0x05 [ 149.204222][ T9] spca501 3-1:0.121: probe with driver spca501 failed with error -22 [ 149.274716][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 149.275946][ T9] usb 3-1: USB disconnect, device number 6 [ 149.295887][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.295917][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.295953][ T5863] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 149.295974][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.338462][ T5726] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 149.338484][ T5726] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 149.393130][ T5726] usbhid 6-1:0.0: can't add hid device: -32 [ 149.393237][ T5726] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 149.412230][ T5863] usb 5-1: config 0 descriptor?? [ 149.463961][ T5863] hub 5-1:0.0: USB hub found [ 149.714418][ T5863] hub 5-1:0.0: 1 port detected [ 149.810877][ T6428] bridge3: entered promiscuous mode [ 149.810903][ T6428] bridge3: entered allmulticast mode [ 150.205130][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 150.244711][ T5726] usb 6-1: USB disconnect, device number 4 [ 150.410109][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.410796][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 150.412149][ T9] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 150.412179][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 150.433283][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.433310][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.433328][ T9] usb 3-1: Product: syz [ 150.433342][ T9] usb 3-1: Manufacturer: syz [ 150.433907][ T9] usb 3-1: SerialNumber: syz [ 150.500348][ T6426] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.706079][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.707136][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.077242][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 151.129968][ T5863] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 151.129994][ T5863] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 151.167946][ T5863] usbhid 5-1:0.0: can't add hid device: -71 [ 151.168055][ T5863] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 151.189705][ T9] usb 3-1: USB disconnect, device number 7 [ 151.275277][ T5863] usb 5-1: USB disconnect, device number 5 [ 151.650329][ T6448] netlink: 'syz.5.184': attribute type 3 has an invalid length. [ 151.650358][ T6448] netlink: 'syz.5.184': attribute type 1 has an invalid length. [ 151.650370][ T6448] netlink: 216 bytes leftover after parsing attributes in process `syz.5.184'. [ 151.684695][ T6452] usb usb7: usbfs: process 6452 (syz.2.185) did not claim interface 0 before use [ 151.854634][ T5863] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 152.027108][ T5863] usb 2-1: config index 0 descriptor too short (expected 37906, got 18) [ 152.027136][ T5863] usb 2-1: config 0 has too many interfaces: 103, using maximum allowed: 32 [ 152.027156][ T5863] usb 2-1: config 0 has an invalid interface number: 121 but max is 102 [ 152.027174][ T5863] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 103 [ 152.027193][ T5863] usb 2-1: config 0 has no interface number 0 [ 152.027221][ T5863] usb 2-1: too many endpoints for config 0 interface 121 altsetting 187: 242, using maximum allowed: 30 [ 152.027308][ T5863] usb 2-1: config 0 interface 121 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 152.027334][ T5863] usb 2-1: config 0 interface 121 has no altsetting 0 [ 152.031116][ T6458] FAULT_INJECTION: forcing a failure. [ 152.031116][ T6458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.031148][ T6458] CPU: 1 UID: 0 PID: 6458 Comm: syz.4.189 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 152.031173][ T6458] Tainted: [L]=SOFTLOCKUP [ 152.031180][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.031190][ T6458] Call Trace: [ 152.031198][ T6458] [ 152.031206][ T6458] dump_stack_lvl+0xe8/0x150 [ 152.031233][ T6458] should_fail_ex+0x46b/0x600 [ 152.031268][ T6458] _copy_from_user+0x2d/0xb0 [ 152.031291][ T6458] ___sys_sendmsg+0x1c6/0x360 [ 152.031314][ T6458] ? __lock_acquire+0x6b5/0x2cf0 [ 152.031343][ T6458] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.031402][ T6458] ? __fget_files+0x2a/0x420 [ 152.031419][ T6458] ? __fget_files+0x3a6/0x420 [ 152.031445][ T6458] __x64_sys_sendmsg+0x1c3/0x2a0 [ 152.031471][ T6458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.031503][ T6458] ? __pfx_ksys_write+0x10/0x10 [ 152.031531][ T6458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.031551][ T6458] do_syscall_64+0x15f/0xf80 [ 152.031574][ T6458] ? trace_irq_disable+0x3b/0x140 [ 152.031596][ T6458] ? clear_bhb_loop+0x40/0x90 [ 152.031619][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.031636][ T6458] RIP: 0033:0x7f8dde56ce59 [ 152.031654][ T6458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.031668][ T6458] RSP: 002b:00007f8ddc7c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.031688][ T6458] RAX: ffffffffffffffda RBX: 00007f8dde7e5fa0 RCX: 00007f8dde56ce59 [ 152.031700][ T6458] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 152.031712][ T6458] RBP: 00007f8ddc7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 152.031723][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.031734][ T6458] R13: 00007f8dde7e6038 R14: 00007f8dde7e5fa0 R15: 00007fff88282e58 [ 152.031764][ T6458] [ 152.056279][ T5863] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 152.056312][ T5863] usb 2-1: New USB device strings: Mfr=2, Product=79, SerialNumber=3 [ 152.056331][ T5863] usb 2-1: Product: syz [ 152.056345][ T5863] usb 2-1: Manufacturer: syz [ 152.056359][ T5863] usb 2-1: SerialNumber: syz [ 152.064654][ T821] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 152.112077][ T5863] usb 2-1: config 0 descriptor?? [ 152.304578][ T821] usb 6-1: Using ep0 maxpacket: 16 [ 152.324673][ T821] usb 6-1: too many configurations: 60, using maximum allowed: 8 [ 152.383058][ T821] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.407492][ T821] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.428544][ T821] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.432295][ T821] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.439042][ T821] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.463649][ T821] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.475495][ T821] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.479969][ T821] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.508299][ T821] usb 6-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 152.508325][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 152.508345][ T821] usb 6-1: Product: syz [ 152.508359][ T821] usb 6-1: Manufacturer: syz [ 152.508373][ T821] usb 6-1: SerialNumber: syz [ 152.550412][ T6451] No buffer was provided with the request [ 152.553478][ T821] usb 6-1: config 0 descriptor?? [ 152.688348][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.688909][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.989315][ T6454] ip6tnl1: entered promiscuous mode [ 152.989333][ T6454] ip6tnl1: entered allmulticast mode [ 153.286962][ T5717] usb 6-1: USB disconnect, device number 5 [ 154.997831][ T5863] hub 2-1:0.121: bad descriptor, ignoring hub [ 154.997869][ T5863] hub 2-1:0.121: probe with driver hub failed with error -5 [ 155.027998][ T5863] gspca_main: spca501-2.14.0 probing 0000:0000 [ 155.030137][ T5863] gspca_spca501: reg write: error -71 [ 155.030149][ T5863] spca501 2-1:0.121: Reg write failed for 0x02,0x0f,0x05 [ 155.040388][ T5863] spca501 2-1:0.121: probe with driver spca501 failed with error -22 [ 155.073533][ T5863] usb 2-1: USB disconnect, device number 8 [ 156.504087][ T6489] usb usb7: usbfs: process 6489 (syz.5.198) did not claim interface 0 before use [ 157.234650][ T5863] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 157.513733][ T6515] netlink: 188 bytes leftover after parsing attributes in process `syz.5.206'. [ 158.113750][ T6508] netlink: 188 bytes leftover after parsing attributes in process `syz.2.205'. [ 158.330658][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 158.333200][ T5863] usb 4-1: config 0 has no interfaces? [ 158.354629][ T5863] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 158.354655][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.354674][ T5863] usb 4-1: Product: syz [ 158.354688][ T5863] usb 4-1: Manufacturer: syz [ 158.354701][ T5863] usb 4-1: SerialNumber: syz [ 158.412144][ T5863] r8152-cfgselector 4-1: Unknown version 0x0000 [ 158.412165][ T5863] r8152-cfgselector 4-1: config 0 descriptor?? [ 158.491345][ T6518] netlink: 'syz.4.208': attribute type 30 has an invalid length. [ 158.621830][ T6522] usb usb7: usbfs: process 6522 (syz.1.210) did not claim interface 0 before use [ 158.632897][ T5725] r8152-cfgselector 4-1: USB disconnect, device number 11 [ 159.206132][ T5725] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 160.169875][ T5725] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 160.169900][ T5725] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 160.169917][ T5725] usb 3-1: config 2 has no interface number 0 [ 160.169950][ T5725] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 160.169974][ T5725] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 160.169996][ T5725] usb 3-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.197480][ T5725] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 160.197506][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.197526][ T5725] usb 3-1: Product: syz [ 160.197539][ T5725] usb 3-1: Manufacturer: syz [ 160.197553][ T5725] usb 3-1: SerialNumber: syz [ 160.316470][ T6530] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.507099][ T6553] usb usb7: usbfs: process 6553 (syz.4.223) did not claim interface 0 before use [ 160.796844][ T6555] netlink: 188 bytes leftover after parsing attributes in process `syz.3.222'. [ 161.329671][ T6547] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 163.053652][ T6565] block nbd0: shutting down sockets [ 163.381875][ T6592] FAULT_INJECTION: forcing a failure. [ 163.381875][ T6592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.381909][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.1.236 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 163.381934][ T6592] Tainted: [L]=SOFTLOCKUP [ 163.381940][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.381951][ T6592] Call Trace: [ 163.381958][ T6592] [ 163.381965][ T6592] dump_stack_lvl+0xe8/0x150 [ 163.381993][ T6592] should_fail_ex+0x46b/0x600 [ 163.382028][ T6592] _copy_from_user+0x2d/0xb0 [ 163.382050][ T6592] input_event_from_user+0xb1/0x290 [ 163.382071][ T6592] ? __pfx_input_event_from_user+0x10/0x10 [ 163.382096][ T6592] ? rt_spin_unlock+0x160/0x200 [ 163.382119][ T6592] evdev_write+0x2ca/0x4c0 [ 163.382145][ T6592] ? __lock_acquire+0x6b5/0x2cf0 [ 163.382174][ T6592] ? __pfx_evdev_write+0x10/0x10 [ 163.382207][ T6592] ? rw_verify_area+0x25b/0x4e0 [ 163.382227][ T6592] ? __pfx_evdev_write+0x10/0x10 [ 163.382254][ T6592] vfs_write+0x2a3/0xba0 [ 163.382283][ T6592] ? __pfx_vfs_write+0x10/0x10 [ 163.382306][ T6592] ? __fget_files+0x2a/0x420 [ 163.382326][ T6592] ? __fget_files+0x2a/0x420 [ 163.382343][ T6592] ? __fget_files+0x3a6/0x420 [ 163.382359][ T6592] ? __fget_files+0x2a/0x420 [ 163.382385][ T6592] ksys_write+0x156/0x270 [ 163.382420][ T6592] ? __pfx_ksys_write+0x10/0x10 [ 163.382450][ T6592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.382470][ T6592] do_syscall_64+0x15f/0xf80 [ 163.382493][ T6592] ? trace_irq_disable+0x3b/0x140 [ 163.382516][ T6592] ? clear_bhb_loop+0x40/0x90 [ 163.382539][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.382558][ T6592] RIP: 0033:0x7ff51e99ce59 [ 163.382576][ T6592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.382591][ T6592] RSP: 002b:00007ff51cbee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.382611][ T6592] RAX: ffffffffffffffda RBX: 00007ff51ec15fa0 RCX: 00007ff51e99ce59 [ 163.382625][ T6592] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 163.382636][ T6592] RBP: 00007ff51cbee090 R08: 0000000000000000 R09: 0000000000000000 [ 163.382647][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.382658][ T6592] R13: 00007ff51ec16038 R14: 00007ff51ec15fa0 R15: 00007fff3d9e98d8 [ 163.382689][ T6592] [ 164.325211][ T6605] netlink: 188 bytes leftover after parsing attributes in process `syz.5.237'. [ 164.951991][ T5725] usb 3-1: probing VID:PID(0424:012C) [ 165.043790][ T5725] usb 3-1: vub300 testing BULK IN EndPoint(0) 8E [ 165.043816][ T5725] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 165.056158][ T6607] Smack: duplicate mount options [ 165.094133][ T5725] vub300 3-1:2.174: probe with driver vub300 failed with error -22 [ 165.127834][ T5725] usb 3-1: USB disconnect, device number 8 [ 168.074646][ T5725] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 168.225655][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 168.242904][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.242933][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.242985][ T5725] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 168.243008][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.254846][ T5327] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 168.326617][ T5725] usb 4-1: config 0 descriptor?? [ 168.355745][ T5725] hub 4-1:0.0: USB hub found [ 168.449214][ T5327] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 168.449239][ T5327] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 168.449257][ T5327] usb 6-1: config 2 has no interface number 0 [ 168.449306][ T5327] usb 6-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 168.449333][ T5327] usb 6-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 168.449356][ T5327] usb 6-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.451949][ T5327] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 168.451973][ T5327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.451992][ T5327] usb 6-1: Product: syz [ 168.452007][ T5327] usb 6-1: Manufacturer: syz [ 168.452021][ T5327] usb 6-1: SerialNumber: syz [ 168.462561][ T6642] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 168.580019][ T5725] hub 4-1:0.0: 1 port detected [ 168.828018][ T6651] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 169.826184][ T5725] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 169.826212][ T5725] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 169.867080][ T5725] usbhid 4-1:0.0: can't add hid device: -32 [ 169.867194][ T5725] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 169.990685][ T6652] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 170.155537][ T5725] usb 4-1: USB disconnect, device number 12 [ 171.330481][ T6675] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 172.230971][ T5327] usb 6-1: probing VID:PID(0424:012C) [ 172.299874][ T5327] usb 6-1: vub300 testing BULK IN EndPoint(0) 8E [ 172.299899][ T5327] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 172.396910][ T5327] vub300 6-1:2.174: probe with driver vub300 failed with error -22 [ 172.520576][ T5327] usb 6-1: USB disconnect, device number 6 [ 172.826260][ T5898] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 172.989393][ T5898] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 172.989424][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.034786][ T5898] usb 4-1: config 0 descriptor?? [ 173.404252][ T6683] FAULT_INJECTION: forcing a failure. [ 173.404252][ T6683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.404280][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.265 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 173.404295][ T6683] Tainted: [L]=SOFTLOCKUP [ 173.404299][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.404305][ T6683] Call Trace: [ 173.404309][ T6683] [ 173.404314][ T6683] dump_stack_lvl+0xe8/0x150 [ 173.404342][ T6683] should_fail_ex+0x46b/0x600 [ 173.404376][ T6683] _copy_from_user+0x2d/0xb0 [ 173.404400][ T6683] rds_rdma_extra_size+0x120/0x330 [ 173.404435][ T6683] rds_rm_size+0x4a0/0x760 [ 173.404472][ T6683] rds_sendmsg+0xaf0/0x2130 [ 173.404506][ T6683] ? __pfx_rds_sendmsg+0x10/0x10 [ 173.404529][ T6683] ? __might_fault+0xaf/0x130 [ 173.404553][ T6683] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 173.404593][ T6683] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.404616][ T6683] ____sys_sendmsg+0x94c/0x9c0 [ 173.404647][ T6683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.404680][ T6683] ? import_iovec+0x73/0xa0 [ 173.404694][ T6683] ___sys_sendmsg+0x2a5/0x360 [ 173.404706][ T6683] ? __lock_acquire+0x6b5/0x2cf0 [ 173.404727][ T6683] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.404784][ T6683] ? __fget_files+0x2a/0x420 [ 173.404802][ T6683] ? __fget_files+0x3a6/0x420 [ 173.404829][ T6683] __x64_sys_sendmsg+0x1c3/0x2a0 [ 173.404852][ T6683] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.404870][ T6683] ? __pfx_ksys_write+0x10/0x10 [ 173.404886][ T6683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.404899][ T6683] do_syscall_64+0x15f/0xf80 [ 173.404922][ T6683] ? trace_irq_disable+0x3b/0x140 [ 173.404945][ T6683] ? clear_bhb_loop+0x40/0x90 [ 173.404968][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.404987][ T6683] RIP: 0033:0x7fac3d91ce59 [ 173.405004][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.405019][ T6683] RSP: 002b:00007fac3bb76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.405036][ T6683] RAX: ffffffffffffffda RBX: 00007fac3db95fa0 RCX: 00007fac3d91ce59 [ 173.405049][ T6683] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 173.405061][ T6683] RBP: 00007fac3bb76090 R08: 0000000000000000 R09: 0000000000000000 [ 173.405072][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.405083][ T6683] R13: 00007fac3db96038 R14: 00007fac3db95fa0 R15: 00007ffde3c47c68 [ 173.405113][ T6683] [ 173.562843][ T5898] ath6kl: Failed to submit usb control message: -71 [ 173.562893][ T5898] ath6kl: unable to send the bmi data to the device: -71 [ 173.562907][ T5898] ath6kl: Unable to send get target info: -71 [ 173.745251][ T5898] ath6kl: Failed to init ath6kl core: -71 [ 173.746163][ T5898] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 173.768365][ T5898] usb 4-1: USB disconnect, device number 13 [ 174.190672][ T6698] FAULT_INJECTION: forcing a failure. [ 174.190672][ T6698] name failslab, interval 1, probability 0, space 0, times 0 [ 174.190705][ T6698] CPU: 1 UID: 0 PID: 6698 Comm: syz.4.269 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 174.190730][ T6698] Tainted: [L]=SOFTLOCKUP [ 174.190736][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.190746][ T6698] Call Trace: [ 174.190754][ T6698] [ 174.190761][ T6698] dump_stack_lvl+0xe8/0x150 [ 174.190789][ T6698] should_fail_ex+0x46b/0x600 [ 174.190823][ T6698] should_failslab+0xa8/0x100 [ 174.190846][ T6698] kmem_cache_alloc_noprof+0x87/0x680 [ 174.190868][ T6698] ? do_getname+0x2e/0x250 [ 174.190897][ T6698] do_getname+0x2e/0x250 [ 174.190919][ T6698] ? user_path_at+0x1e/0x160 [ 174.190941][ T6698] user_path_at+0x2a/0x160 [ 174.190962][ T6698] __se_sys_mount+0x2dc/0x420 [ 174.190993][ T6698] ? __pfx___se_sys_mount+0x10/0x10 [ 174.191024][ T6698] ? __x64_sys_mount+0x20/0xc0 [ 174.191048][ T6698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.191076][ T6698] do_syscall_64+0x15f/0xf80 [ 174.191099][ T6698] ? trace_irq_disable+0x3b/0x140 [ 174.191121][ T6698] ? clear_bhb_loop+0x40/0x90 [ 174.191144][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.191162][ T6698] RIP: 0033:0x7f8dde56ce59 [ 174.191179][ T6698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.191194][ T6698] RSP: 002b:00007f8ddc7c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 174.191214][ T6698] RAX: ffffffffffffffda RBX: 00007f8dde7e5fa0 RCX: 00007f8dde56ce59 [ 174.191227][ T6698] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000200000000140 [ 174.191240][ T6698] RBP: 00007f8ddc7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.191252][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.191262][ T6698] R13: 00007f8dde7e6038 R14: 00007f8dde7e5fa0 R15: 00007fff88282e58 [ 174.191292][ T6698] [ 175.680300][ T6709] netlink: 52 bytes leftover after parsing attributes in process `syz.4.272'. [ 176.036720][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.977395][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.054660][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 177.223822][ T31] usb 4-1: config 2 has an invalid interface number: 174 but max is 0 [ 177.223848][ T31] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 177.223866][ T31] usb 4-1: config 2 has no interface number 0 [ 177.223906][ T31] usb 4-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 177.223929][ T31] usb 4-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 177.223951][ T31] usb 4-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.277535][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 177.277563][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.277582][ T31] usb 4-1: Product: syz [ 177.277595][ T31] usb 4-1: Manufacturer: syz [ 177.277608][ T31] usb 4-1: SerialNumber: syz [ 177.354684][ T6714] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 178.625815][ T31] usb 4-1: probing VID:PID(0424:012C) [ 178.634848][ T31] usb 4-1: vub300 testing BULK IN EndPoint(0) 8E [ 178.634871][ T31] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 178.728653][ T31] vub300 4-1:2.174: probe with driver vub300 failed with error -22 [ 178.756983][ T31] usb 4-1: USB disconnect, device number 14 [ 179.085985][ T5863] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 179.234637][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 179.236984][ T5863] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.237015][ T5863] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 179.237029][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.303042][ T5863] usb 6-1: config 0 descriptor?? [ 181.824551][ T5725] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 182.024569][ T5725] usb 4-1: Using ep0 maxpacket: 16 [ 182.026785][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.026848][ T5725] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 182.026873][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.039432][ T5725] usb 4-1: config 0 descriptor?? [ 182.352878][ T31] usb 6-1: USB disconnect, device number 7 [ 183.078513][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 183.098015][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 183.219564][ T6782] Smack: duplicate mount options [ 183.504681][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 183.658696][ T10] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 183.658723][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 183.658916][ T10] usb 2-1: config 2 has no interface number 0 [ 183.658961][ T10] usb 2-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 183.658989][ T10] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 183.659098][ T10] usb 2-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.662518][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 183.662547][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.662567][ T10] usb 2-1: Product: syz [ 183.662582][ T10] usb 2-1: Manufacturer: syz [ 183.662596][ T10] usb 2-1: SerialNumber: syz [ 183.901487][ T6778] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.578328][ T5898] usb 4-1: USB disconnect, device number 15 [ 184.775257][ T6795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.775282][ T6795] IPv6: NLM_F_CREATE should be set when creating new route [ 184.810383][ T6795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.368764][ T10] usb 2-1: probing VID:PID(0424:012C) [ 185.415619][ T10] usb 2-1: vub300 testing BULK IN EndPoint(0) 8E [ 185.415643][ T10] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 185.470991][ T10] vub300 2-1:2.174: probe with driver vub300 failed with error -22 [ 185.511871][ T10] usb 2-1: USB disconnect, device number 9 [ 187.714988][ T6835] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 187.796677][ T36] audit: type=1326 audit(1778919376.085:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.2.308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac3d91ce59 code=0x0 [ 187.918689][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.311'. [ 188.357705][ T36] audit: type=1326 audit(1778919376.635:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6847 comm="syz.4.315" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8dde56ce59 code=0x0 [ 188.524588][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 188.546665][ T6856] batadv_slave_1: entered promiscuous mode [ 188.548595][ T6855] batadv_slave_1: left promiscuous mode [ 188.689262][ T10] usb 4-1: config index 0 descriptor too short (expected 37906, got 18) [ 188.689297][ T10] usb 4-1: config 0 has too many interfaces: 103, using maximum allowed: 32 [ 188.689331][ T10] usb 4-1: config 0 has an invalid interface number: 121 but max is 102 [ 188.689351][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 103 [ 188.689369][ T10] usb 4-1: config 0 has no interface number 0 [ 188.689398][ T10] usb 4-1: too many endpoints for config 0 interface 121 altsetting 187: 242, using maximum allowed: 30 [ 188.689434][ T10] usb 4-1: config 0 interface 121 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 188.689461][ T10] usb 4-1: config 0 interface 121 has no altsetting 0 [ 188.696810][ T10] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 188.696836][ T10] usb 4-1: New USB device strings: Mfr=2, Product=79, SerialNumber=3 [ 188.696855][ T10] usb 4-1: Product: syz [ 188.696869][ T10] usb 4-1: Manufacturer: syz [ 188.696884][ T10] usb 4-1: SerialNumber: syz [ 188.810751][ T10] usb 4-1: config 0 descriptor?? [ 189.038221][ T6846] No buffer was provided with the request [ 189.301662][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.325489][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.593133][ T10] hub 4-1:0.121: bad descriptor, ignoring hub [ 190.593172][ T10] hub 4-1:0.121: probe with driver hub failed with error -5 [ 190.620521][ T10] gspca_main: spca501-2.14.0 probing 0000:0000 [ 190.691669][ T6889] FAULT_INJECTION: forcing a failure. [ 190.691669][ T6889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.691700][ T6889] CPU: 0 UID: 0 PID: 6889 Comm: syz.5.323 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 190.691723][ T6889] Tainted: [L]=SOFTLOCKUP [ 190.691728][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.691736][ T6889] Call Trace: [ 190.691741][ T6889] [ 190.691747][ T6889] dump_stack_lvl+0xe8/0x150 [ 190.691772][ T6889] should_fail_ex+0x46b/0x600 [ 190.691799][ T6889] _copy_from_user+0x2d/0xb0 [ 190.691816][ T6889] ___sys_recvmsg+0x175/0x590 [ 190.691840][ T6889] ? __pfx____sys_recvmsg+0x10/0x10 [ 190.691862][ T6889] ? __fget_files+0x2a/0x420 [ 190.691887][ T6889] ? __fget_files+0x3a6/0x420 [ 190.691908][ T6889] do_recvmmsg+0x33a/0x800 [ 190.691934][ T6889] ? __pfx_do_recvmmsg+0x10/0x10 [ 190.691965][ T6889] ? rt_mutex_slowunlock+0x1cb/0x300 [ 190.691994][ T6889] __x64_sys_recvmmsg+0x198/0x250 [ 190.692018][ T6889] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 190.692057][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.692078][ T6889] do_syscall_64+0x15f/0xf80 [ 190.692098][ T6889] ? clear_bhb_loop+0x40/0x90 [ 190.692116][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.692131][ T6889] RIP: 0033:0x7fce7271ce59 [ 190.692146][ T6889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.692159][ T6889] RSP: 002b:00007fce7096e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 190.692176][ T6889] RAX: ffffffffffffffda RBX: 00007fce72995fa0 RCX: 00007fce7271ce59 [ 190.692187][ T6889] RDX: 0000000000000001 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 190.692198][ T6889] RBP: 00007fce7096e090 R08: 0000000000000000 R09: 0000000000000000 [ 190.692208][ T6889] R10: 0000000000012022 R11: 0000000000000246 R12: 0000000000000001 [ 190.692219][ T6889] R13: 00007fce72996038 R14: 00007fce72995fa0 R15: 00007ffed54fa398 [ 190.692245][ T6889] [ 191.124898][ T10] gspca_spca501: reg write: error -110 [ 191.124914][ T10] spca501 4-1:0.121: Reg write failed for 0x02,0x0f,0x05 [ 191.125012][ T10] spca501 4-1:0.121: probe with driver spca501 failed with error -22 [ 191.445126][ T5715] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 192.464762][ T5715] usb 5-1: Using ep0 maxpacket: 8 [ 192.475555][ T5715] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 192.478445][ T5715] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 192.478471][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.478490][ T5715] usb 5-1: Product: syz [ 192.478504][ T5715] usb 5-1: Manufacturer: syz [ 192.478518][ T5715] usb 5-1: SerialNumber: syz [ 192.512610][ T5715] usb 5-1: config 0 descriptor?? [ 193.179158][ T5715] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 193.179220][ T5715] usb 5-1: setting power ON [ 193.179790][ T5715] dvb-usb: bulk message failed: -22 (2/0) [ 193.404308][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.433243][ T5715] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 193.433328][ T5715] usb 5-1: media controller created [ 193.584990][ T5898] usb 4-1: USB disconnect, device number 16 [ 193.682312][ T6920] overlay: ./file0 is not a directory [ 193.689521][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.123416][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.123487][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.177825][ T5715] usb 5-1: selecting invalid altsetting 6 [ 195.177847][ T5715] usb 5-1: digital interface selection failed (-22) [ 195.177867][ T5715] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 195.179168][ T5715] usb 5-1: setting power OFF [ 195.179301][ T5715] dvb-usb: bulk message failed: -22 (2/0) [ 195.179317][ T5715] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 195.179329][ T5715] (NULL device *): no alternate interface [ 195.247567][ T5863] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 195.398546][ T5863] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.398624][ T5863] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.398646][ T5863] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.408328][ T5863] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.408355][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.408373][ T5863] usb 2-1: Product: syz [ 195.408387][ T5863] usb 2-1: Manufacturer: syz [ 195.408401][ T5863] usb 2-1: SerialNumber: syz [ 195.613729][ T5715] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 195.632313][ T5715] usb 5-1: USB disconnect, device number 6 [ 196.366830][ T36] audit: type=1326 audit(1778919384.655:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.2.348" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac3d91ce59 code=0x0 [ 196.624157][ T5863] cdc_ncm 2-1:1.0: bind() failure [ 197.598456][ T5863] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 197.598503][ T5863] cdc_ncm 2-1:1.1: bind() failure [ 197.644557][ T5863] usb 2-1: USB disconnect, device number 10 [ 198.153601][ T6968] Smack: duplicate mount options [ 199.722152][ T6985] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 199.750125][ T6989] netlink: 40 bytes leftover after parsing attributes in process `syz.3.364'. [ 199.857457][ T6994] netlink: 156 bytes leftover after parsing attributes in process `syz.3.364'. [ 199.858170][ T6994] futex_wake_op: syz.3.364 tries to shift op by -1; fix this program [ 199.934384][ T6996] netlink: 260 bytes leftover after parsing attributes in process `syz.1.365'. [ 202.225694][ T5607] Bluetooth: hci1: command 0x0406 tx timeout [ 202.225745][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 202.225769][ T5607] Bluetooth: hci2: command 0x0406 tx timeout [ 202.225793][ T5607] Bluetooth: hci4: command 0x0406 tx timeout [ 202.225815][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 202.654771][ T7023] bridge3: entered promiscuous mode [ 202.654796][ T7023] bridge3: entered allmulticast mode [ 204.528088][ T7026] netlink: 140 bytes leftover after parsing attributes in process `syz.5.373'. [ 205.010315][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.373'. [ 205.064352][ T7041] can0: slcan on ttynull. [ 205.479018][ T7048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.380'. [ 205.504656][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 205.541612][ T7049] netlink: 156 bytes leftover after parsing attributes in process `syz.3.380'. [ 205.542152][ T7049] futex_wake_op: syz.3.380 tries to shift op by -1; fix this program [ 205.597583][ T7032] can0 (unregistered): slcan off ttynull. [ 205.754564][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 205.756869][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.756897][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.756934][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.756957][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.830327][ T31] usb 3-1: config 0 descriptor?? [ 205.846841][ T31] hub 3-1:0.0: USB hub found [ 206.050268][ T31] hub 3-1:0.0: 1 port detected [ 206.064864][ T5725] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 206.214672][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 206.218563][ T5725] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 206.218727][ T5725] usb 4-1: config 0 has no interface number 0 [ 206.218771][ T5725] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 206.218798][ T5725] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 206.238070][ T5725] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 206.238097][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.238966][ T5725] usb 4-1: Product: syz [ 206.238983][ T5725] usb 4-1: Manufacturer: syz [ 206.238997][ T5725] usb 4-1: SerialNumber: syz [ 206.264150][ T31] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 206.264172][ T31] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 206.329499][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 206.329669][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 206.372916][ T5725] usb 4-1: config 0 descriptor?? [ 206.382859][ T31] usb 3-1: USB disconnect, device number 9 [ 206.621645][ T5725] radio-si470x 4-1:0.35: this is not a si470x device. [ 206.831383][ T5725] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 206.841970][ T5725] usb 4-1: USB disconnect, device number 17 [ 208.333922][ T7087] FAULT_INJECTION: forcing a failure. [ 208.333922][ T7087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.333956][ T7087] CPU: 0 UID: 0 PID: 7087 Comm: syz.5.391 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 208.333983][ T7087] Tainted: [L]=SOFTLOCKUP [ 208.333990][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.334000][ T7087] Call Trace: [ 208.334007][ T7087] [ 208.334015][ T7087] dump_stack_lvl+0xe8/0x150 [ 208.334043][ T7087] should_fail_ex+0x46b/0x600 [ 208.334077][ T7087] _copy_from_iter+0x1d3/0x1670 [ 208.334104][ T7087] ? trace_kmem_cache_alloc+0x29/0xe0 [ 208.334123][ T7087] ? __alloc_skb+0x27d/0x7d0 [ 208.334146][ T7087] ? __pfx__copy_from_iter+0x10/0x10 [ 208.334163][ T7087] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 208.334184][ T7087] ? __alloc_skb+0x27d/0x7d0 [ 208.334210][ T7087] ? netlink_sendmsg+0x650/0xb40 [ 208.334232][ T7087] ? skb_put+0x11b/0x210 [ 208.334257][ T7087] netlink_sendmsg+0x6c0/0xb40 [ 208.334290][ T7087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.334315][ T7087] ? unwind_get_return_address+0x4d/0x90 [ 208.334343][ T7087] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.334375][ T7087] ____sys_sendmsg+0x94c/0x9c0 [ 208.334405][ T7087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.334436][ T7087] ? import_iovec+0x73/0xa0 [ 208.334462][ T7087] ___sys_sendmsg+0x2a5/0x360 [ 208.334484][ T7087] ? __lock_acquire+0x6b5/0x2cf0 [ 208.334513][ T7087] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.334565][ T7087] ? __fget_files+0x2a/0x420 [ 208.334577][ T7087] ? __fget_files+0x3a6/0x420 [ 208.334597][ T7087] __x64_sys_sendmsg+0x1c3/0x2a0 [ 208.334617][ T7087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.334642][ T7087] ? __pfx_ksys_write+0x10/0x10 [ 208.334663][ T7087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.334679][ T7087] do_syscall_64+0x15f/0xf80 [ 208.334696][ T7087] ? trace_irq_disable+0x3b/0x140 [ 208.334714][ T7087] ? clear_bhb_loop+0x40/0x90 [ 208.334732][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.334746][ T7087] RIP: 0033:0x7fce7271ce59 [ 208.334762][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.334775][ T7087] RSP: 002b:00007fce7096e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.334794][ T7087] RAX: ffffffffffffffda RBX: 00007fce72995fa0 RCX: 00007fce7271ce59 [ 208.334806][ T7087] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 208.334816][ T7087] RBP: 00007fce7096e090 R08: 0000000000000000 R09: 0000000000000000 [ 208.334824][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.334832][ T7087] R13: 00007fce72996038 R14: 00007fce72995fa0 R15: 00007ffed54fa398 [ 208.334854][ T7087] [ 208.685390][ T5327] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 208.707112][ T7091] dvmrp0: entered allmulticast mode [ 208.713073][ T7098] netlink: 40 bytes leftover after parsing attributes in process `syz.1.392'. [ 208.758908][ T7098] netlink: 156 bytes leftover after parsing attributes in process `syz.1.392'. [ 208.759389][ T7098] futex_wake_op: syz.1.392 tries to shift op by -1; fix this program [ 208.848007][ T5327] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 208.848034][ T5327] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 208.848054][ T5327] usb 5-1: config 2 has no interface number 0 [ 208.848096][ T5327] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 208.848123][ T5327] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 208.848147][ T5327] usb 5-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.878568][ T5327] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 208.878597][ T5327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.878616][ T5327] usb 5-1: Product: syz [ 208.878631][ T5327] usb 5-1: Manufacturer: syz [ 208.878646][ T5327] usb 5-1: SerialNumber: syz [ 208.954235][ T7105] netlink: 260 bytes leftover after parsing attributes in process `syz.3.394'. [ 208.980641][ T7085] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 209.244558][ T821] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 209.480230][ T7085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.513639][ T7085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.484255][ T5327] usb 5-1: probing VID:PID(0424:012C) [ 210.486837][ T821] usb 2-1: config index 0 descriptor too short (expected 37906, got 18) [ 210.486861][ T821] usb 2-1: config 0 has too many interfaces: 103, using maximum allowed: 32 [ 210.486881][ T821] usb 2-1: config 0 has an invalid interface number: 121 but max is 102 [ 210.486900][ T821] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 103 [ 210.486920][ T821] usb 2-1: config 0 has no interface number 0 [ 210.486948][ T821] usb 2-1: too many endpoints for config 0 interface 121 altsetting 187: 242, using maximum allowed: 30 [ 210.486984][ T821] usb 2-1: config 0 interface 121 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 210.487010][ T821] usb 2-1: config 0 interface 121 has no altsetting 0 [ 210.489899][ T821] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 210.489924][ T821] usb 2-1: New USB device strings: Mfr=2, Product=79, SerialNumber=3 [ 210.489944][ T821] usb 2-1: Product: syz [ 210.489958][ T821] usb 2-1: Manufacturer: syz [ 210.489971][ T821] usb 2-1: SerialNumber: syz [ 210.502890][ T821] usb 2-1: config 0 descriptor?? [ 210.611919][ T5327] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 210.611943][ T5327] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 210.728864][ T5327] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 210.770066][ T5327] usb 5-1: USB disconnect, device number 7 [ 210.776331][ T7109] No buffer was provided with the request [ 210.933214][ T7136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.215227][ T7136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.465683][ T7144] FAULT_INJECTION: forcing a failure. [ 211.465683][ T7144] name failslab, interval 1, probability 0, space 0, times 0 [ 211.465718][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.5.406 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 211.465747][ T7144] Tainted: [L]=SOFTLOCKUP [ 211.465753][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.465765][ T7144] Call Trace: [ 211.465773][ T7144] [ 211.465780][ T7144] dump_stack_lvl+0xe8/0x150 [ 211.465809][ T7144] should_fail_ex+0x46b/0x600 [ 211.465846][ T7144] should_failslab+0xa8/0x100 [ 211.465870][ T7144] __kmalloc_cache_noprof+0x84/0x690 [ 211.465893][ T7144] ? sctp_association_new+0x89/0x25e0 [ 211.465926][ T7144] sctp_association_new+0x89/0x25e0 [ 211.465967][ T7144] sctp_connect_new_asoc+0x2e4/0x6b0 [ 211.465996][ T7144] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 211.466025][ T7144] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 211.466052][ T7144] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 211.466077][ T7144] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 211.466103][ T7144] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 211.466125][ T7144] ? security_sctp_bind_connect+0x7e/0x2c0 [ 211.466153][ T7144] sctp_sendmsg+0x14f2/0x29b0 [ 211.466195][ T7144] ? __pfx_sctp_sendmsg+0x10/0x10 [ 211.466225][ T7144] ? __might_fault+0xaf/0x130 [ 211.466248][ T7144] ? __might_fault+0xaf/0x130 [ 211.466277][ T7144] ? sock_rps_record_flow+0x19/0x350 [ 211.466300][ T7144] ? __pfx_inet_sendmsg+0x10/0x10 [ 211.466324][ T7144] ? inet_sendmsg+0x2f4/0x370 [ 211.466347][ T7144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.466366][ T7144] ? __pfx_inet_sendmsg+0x10/0x10 [ 211.466391][ T7144] __sys_sendto+0x5f1/0x710 [ 211.466421][ T7144] ? __pfx___sys_sendto+0x10/0x10 [ 211.466469][ T7144] ? ksys_write+0x248/0x270 [ 211.466499][ T7144] ? __pfx_ksys_write+0x10/0x10 [ 211.466526][ T7144] __x64_sys_sendto+0xde/0x100 [ 211.466549][ T7144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.466570][ T7144] do_syscall_64+0x15f/0xf80 [ 211.466593][ T7144] ? trace_irq_disable+0x3b/0x140 [ 211.466616][ T7144] ? clear_bhb_loop+0x40/0x90 [ 211.466639][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.466658][ T7144] RIP: 0033:0x7fce7271ce59 [ 211.466676][ T7144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.466692][ T7144] RSP: 002b:00007fce7096e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 211.466712][ T7144] RAX: ffffffffffffffda RBX: 00007fce72995fa0 RCX: 00007fce7271ce59 [ 211.466726][ T7144] RDX: 000000000001a000 RSI: 0000200000000280 RDI: 0000000000000003 [ 211.466738][ T7144] RBP: 00007fce7096e090 R08: 0000200000000040 R09: 000000000000001c [ 211.466751][ T7144] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000001 [ 211.466763][ T7144] R13: 00007fce72996038 R14: 00007fce72995fa0 R15: 00007ffed54fa398 [ 211.466794][ T7144] [ 211.467884][ T7147] netlink: 40 bytes leftover after parsing attributes in process `syz.2.407'. [ 211.593372][ T7147] netlink: 156 bytes leftover after parsing attributes in process `syz.2.407'. [ 211.617193][ T7147] futex_wake_op: syz.2.407 tries to shift op by -1; fix this program [ 211.869206][ T821] hub 2-1:0.121: bad descriptor, ignoring hub [ 211.869243][ T821] hub 2-1:0.121: probe with driver hub failed with error -5 [ 211.892568][ T821] gspca_main: spca501-2.14.0 probing 0000:0000 [ 212.129572][ T7154] netlink: 240 bytes leftover after parsing attributes in process `syz.3.410'. [ 212.936441][ T821] gspca_spca501: reg write: error -110 [ 212.936460][ T821] spca501 2-1:0.121: Reg write failed for 0x02,0x0f,0x05 [ 212.936553][ T821] spca501 2-1:0.121: probe with driver spca501 failed with error -22 [ 213.377257][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 213.504963][ T5327] usb 2-1: USB disconnect, device number 11 [ 214.276458][ T7185] netlink: 40 bytes leftover after parsing attributes in process `syz.5.421'. [ 214.279682][ T7185] netlink: 156 bytes leftover after parsing attributes in process `syz.5.421'. [ 214.281026][ T7185] futex_wake_op: syz.5.421 tries to shift op by -1; fix this program [ 214.334707][ T5863] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 214.484918][ T5327] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 214.509293][ T5863] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 214.509318][ T5863] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 214.509338][ T5863] usb 5-1: config 2 has no interface number 0 [ 214.509380][ T5863] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 214.509408][ T5863] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 214.509434][ T5863] usb 5-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.513868][ T5863] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 214.513895][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.513916][ T5863] usb 5-1: Product: syz [ 214.513944][ T5863] usb 5-1: Manufacturer: syz [ 214.513959][ T5863] usb 5-1: SerialNumber: syz [ 214.631476][ T7178] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 215.474199][ T5327] usb 4-1: config index 0 descriptor too short (expected 37906, got 18) [ 215.474280][ T5327] usb 4-1: config 0 has too many interfaces: 103, using maximum allowed: 32 [ 215.474303][ T5327] usb 4-1: config 0 has an invalid interface number: 121 but max is 102 [ 215.474323][ T5327] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 103 [ 215.474344][ T5327] usb 4-1: config 0 has no interface number 0 [ 215.474375][ T5327] usb 4-1: too many endpoints for config 0 interface 121 altsetting 187: 242, using maximum allowed: 30 [ 215.485510][ T5327] usb 4-1: config 0 interface 121 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 215.485543][ T5327] usb 4-1: config 0 interface 121 has no altsetting 0 [ 215.553554][ T5327] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 215.553581][ T5327] usb 4-1: New USB device strings: Mfr=2, Product=79, SerialNumber=3 [ 215.558453][ T5327] usb 4-1: Product: syz [ 215.558479][ T5327] usb 4-1: Manufacturer: syz [ 215.568534][ T5327] usb 4-1: SerialNumber: syz [ 215.644809][ T5327] usb 4-1: config 0 descriptor?? [ 215.727004][ T7193] netlink: 240 bytes leftover after parsing attributes in process `syz.2.424'. [ 215.898168][ T7180] No buffer was provided with the request [ 216.039576][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.076875][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.144011][ T5327] hub 4-1:0.121: bad descriptor, ignoring hub [ 216.144049][ T5327] hub 4-1:0.121: probe with driver hub failed with error -5 [ 216.177666][ T5327] gspca_main: spca501-2.14.0 probing 0000:0000 [ 216.387889][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.388498][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.911414][ T5327] gspca_spca501: reg write: error -110 [ 216.911432][ T5327] spca501 4-1:0.121: Reg write failed for 0x02,0x0f,0x05 [ 216.911556][ T5327] spca501 4-1:0.121: probe with driver spca501 failed with error -22 [ 217.041754][ T5863] usb 5-1: probing VID:PID(0424:012C) [ 217.068737][ T5863] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 217.068762][ T5863] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 217.142759][ T5863] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 217.167129][ T5863] usb 5-1: USB disconnect, device number 8 [ 217.214598][ T5327] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 217.370057][ T5327] usb 2-1: Using ep0 maxpacket: 32 [ 217.388021][ T5327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.388053][ T5327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.388090][ T5327] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 217.388112][ T5327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.435267][ T7218] netlink: 'syz.2.427': attribute type 21 has an invalid length. [ 217.435282][ T7218] netlink: 164 bytes leftover after parsing attributes in process `syz.2.427'. [ 217.441373][ T5327] usb 2-1: config 0 descriptor?? [ 217.479064][ T5327] hub 2-1:0.0: USB hub found [ 217.479970][ T5898] usb 4-1: USB disconnect, device number 18 [ 217.666688][ T7228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.432'. [ 217.667427][ T5327] hub 2-1:0.0: 1 port detected [ 217.761324][ T7230] netlink: 156 bytes leftover after parsing attributes in process `syz.3.432'. [ 217.812115][ T7230] futex_wake_op: syz.3.432 tries to shift op by -1; fix this program [ 217.874155][ T5327] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 217.874178][ T5327] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 217.892483][ T5327] usbhid 2-1:0.0: can't add hid device: -71 [ 217.892594][ T5327] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 217.986998][ T5327] usb 2-1: USB disconnect, device number 12 [ 219.544659][ T5725] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 219.583117][ T7252] netlink: 240 bytes leftover after parsing attributes in process `syz.1.437'. [ 219.733315][ T7243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.866810][ T5725] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 219.866840][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 219.866854][ T5725] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 219.868923][ T5725] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 219.868946][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.868957][ T5725] usb 4-1: Product: syz [ 219.868965][ T5725] usb 4-1: Manufacturer: syz [ 219.868972][ T5725] usb 4-1: SerialNumber: syz [ 219.962905][ T5725] usb 4-1: config 0 descriptor?? [ 221.072011][ T7236] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.072523][ T7236] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.165513][ T5725] usb 4-1: ucan: probing device on interface #0 [ 221.306537][ T5725] usb 4-1: ucan: could not read protocol version, ret=-71 [ 221.306552][ T5725] usb 4-1: ucan: probe failed; try to update the device firmware [ 221.312847][ T5725] usb 4-1: USB disconnect, device number 19 [ 221.435797][ T7258] netlink: 56 bytes leftover after parsing attributes in process `syz.4.433'. [ 222.779776][ T7272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.444'. [ 222.809464][ T7272] netlink: 156 bytes leftover after parsing attributes in process `syz.3.444'. [ 222.809911][ T7272] futex_wake_op: syz.3.444 tries to shift op by -1; fix this program [ 223.387799][ T7284] warning: `syz.4.447' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 223.626522][ T7295] netlink: 240 bytes leftover after parsing attributes in process `syz.4.452'. [ 223.709299][ T7296] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 223.710480][ T7296] Error validating options; rc = [-22] [ 223.755411][ T7297] ======================================================= [ 223.755411][ T7297] WARNING: The mand mount option has been deprecated and [ 223.755411][ T7297] and is ignored by this kernel. Remove the mand [ 223.755411][ T7297] option from the mount to silence this warning. [ 223.755411][ T7297] ======================================================= [ 224.414613][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.074581][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 225.077504][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.077534][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.077572][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 225.077596][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.091573][ T31] usb 3-1: config 0 descriptor?? [ 225.853941][ T31] hub 3-1:0.0: USB hub found [ 225.856475][ T31] hub 3-1:0.0: 1 port detected [ 226.067102][ T31] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 226.067127][ T31] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 226.094165][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 226.094276][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 226.135645][ T31] usb 3-1: USB disconnect, device number 10 [ 226.178065][ T7303] netlink: 80 bytes leftover after parsing attributes in process `syz.5.453'. [ 226.195282][ T7303] netlink: 20 bytes leftover after parsing attributes in process `syz.5.453'. [ 226.230054][ T7308] netlink: 40 bytes leftover after parsing attributes in process `syz.1.455'. [ 226.233201][ T7308] netlink: 156 bytes leftover after parsing attributes in process `syz.1.455'. [ 226.233642][ T7308] futex_wake_op: syz.1.455 tries to shift op by -1; fix this program [ 226.312789][ T59] Bluetooth: hci0: connection err: -111 [ 227.032808][ T7324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.760295][ T7338] can0: slcan on ttynull. [ 227.989007][ T7335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.157494][ T7363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.468'. [ 228.231480][ T7364] netlink: 156 bytes leftover after parsing attributes in process `syz.2.468'. [ 228.235429][ T7364] futex_wake_op: syz.2.468 tries to shift op by -1; fix this program [ 228.355189][ T7336] can0 (unregistered): slcan off ttynull. [ 229.894627][ T5327] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 230.084653][ T5327] usb 3-1: Using ep0 maxpacket: 32 [ 230.091744][ T5327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.091773][ T5327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.091811][ T5327] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 230.091834][ T5327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.155607][ T5327] usb 3-1: config 0 descriptor?? [ 230.177965][ T5327] hub 3-1:0.0: USB hub found [ 230.290508][ T7391] vlan2: entered promiscuous mode [ 230.290529][ T7391] bridge0: entered promiscuous mode [ 230.391067][ T5327] hub 3-1:0.0: 1 port detected [ 231.897565][ T5327] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 231.897591][ T5327] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 231.922575][ T5327] usbhid 3-1:0.0: can't add hid device: -32 [ 231.922689][ T5327] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 232.351535][ T7411] netlink: 156 bytes leftover after parsing attributes in process `syz.3.482'. [ 232.359561][ T7410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.482'. [ 232.382043][ T7411] futex_wake_op: syz.3.482 tries to shift op by -1; fix this program [ 232.437216][ T5327] usb 3-1: USB disconnect, device number 11 [ 232.663022][ T7408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.255288][ T821] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 233.624573][ T821] usb 2-1: device descriptor read/64, error -71 [ 233.708554][ T7430] Smack: duplicate mount options [ 233.867819][ T821] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 233.994809][ T821] usb 2-1: device descriptor read/64, error -71 [ 234.009488][ T7440] netlink: 'syz.2.491': attribute type 2 has an invalid length. [ 234.105528][ T821] usb usb2-port1: attempt power cycle [ 234.444593][ T821] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 234.643455][ T5715] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 234.643608][ T821] usb 2-1: device descriptor read/8, error -71 [ 234.724191][ T7449] smc: net device vcan0 applied user defined pnetid SYZ1 [ 234.734230][ T7449] netlink: 'syz.4.494': attribute type 2 has an invalid length. [ 234.804575][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 234.809626][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.809657][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.809696][ T5715] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.809719][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.864740][ T5715] usb 4-1: config 0 descriptor?? [ 234.872270][ T7453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.496'. [ 234.876671][ T7453] netlink: 156 bytes leftover after parsing attributes in process `syz.2.496'. [ 234.878612][ T7453] futex_wake_op: syz.2.496 tries to shift op by -1; fix this program [ 234.909867][ T5715] hub 4-1:0.0: USB hub found [ 234.919373][ T821] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 234.935245][ T821] usb 2-1: device descriptor read/8, error -71 [ 235.053518][ T821] usb usb2-port1: unable to enumerate USB device [ 235.142863][ T5715] hub 4-1:0.0: 1 port detected [ 235.347707][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 235.348620][ T5715] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 235.348645][ T5715] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 235.382465][ T5715] usbhid 4-1:0.0: can't add hid device: -71 [ 235.382586][ T5715] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 235.443738][ T5715] usb 4-1: USB disconnect, device number 20 [ 235.480898][ T7461] syz.2.498 uses obsolete (PF_INET,SOCK_PACKET) [ 235.542097][ T7461] bridge_slave_1: default FDB implementation only supports local addresses [ 235.873869][ T5863] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 236.069166][ T5863] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 236.069194][ T5863] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 236.069214][ T5863] usb 6-1: config 2 has no interface number 0 [ 236.069257][ T5863] usb 6-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 236.069283][ T5863] usb 6-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 255 [ 236.069308][ T5863] usb 6-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.071964][ T5863] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 236.071992][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.072012][ T5863] usb 6-1: Product: syz [ 236.072027][ T5863] usb 6-1: Manufacturer: syz [ 236.072041][ T5863] usb 6-1: SerialNumber: syz [ 236.096515][ T7463] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 236.383787][ T7475] Smack: duplicate mount options [ 237.834583][ T5726] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 238.184534][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 238.192709][ T5726] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 238.192739][ T5726] usb 2-1: config 1 interface 0 has no altsetting 0 [ 238.221530][ T5726] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 238.221556][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.221577][ T5726] usb 2-1: Product: syz [ 238.221590][ T5726] usb 2-1: Manufacturer: ᡶ [ 238.221605][ T5726] usb 2-1: SerialNumber: syz [ 238.315783][ T7477] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.358739][ T5863] usb 6-1: probing VID:PID(0424:012C) [ 238.372462][ T5863] usb 6-1: vub300 testing BULK IN EndPoint(0) 8E [ 238.372486][ T5863] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 238.443066][ T5863] vub300 6-1:2.174: probe with driver vub300 failed with error -22 [ 238.484572][ T5863] usb 6-1: USB disconnect, device number 8 [ 238.574323][ T7493] binder: BINDER_SET_CONTEXT_MGR already set [ 238.574336][ T7493] binder: 7492:7493 ioctl 4018620d 200000004a80 returned -16 [ 238.664380][ T5726] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 1 proto 2 vid 0x0525 pid 0xA4A8 [ 238.668048][ T7496] netlink: 240 bytes leftover after parsing attributes in process `syz.4.512'. [ 238.690038][ T5726] usb 2-1: USB disconnect, device number 17 [ 238.704235][ T5726] usblp0: removed [ 240.775853][ T7518] Smack: duplicate mount options [ 240.884581][ T5898] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 241.044603][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.044652][ T5898] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 241.086149][ T5898] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.086179][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.086199][ T5898] usb 2-1: Product: syz [ 241.086213][ T5898] usb 2-1: Manufacturer: syz [ 241.086227][ T5898] usb 2-1: SerialNumber: syz [ 241.645237][ T5898] cdc_ncm 2-1:1.0: bind() failure [ 241.732728][ T5898] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 241.732784][ T5898] cdc_ncm 2-1:1.1: bind() failure [ 241.768867][ T7528] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 241.768894][ T7528] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 241.769083][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.3.521'. [ 241.826137][ T5898] usb 2-1: USB disconnect, device number 18 [ 241.967082][ T7537] capability: warning: `syz.2.524' uses 32-bit capabilities (legacy support in use) [ 242.129408][ T7541] netlink: 240 bytes leftover after parsing attributes in process `syz.2.525'. [ 242.966148][ T5863] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 243.130522][ T5863] usb 3-1: config index 0 descriptor too short (expected 37906, got 18) [ 243.130550][ T5863] usb 3-1: config 0 has too many interfaces: 103, using maximum allowed: 32 [ 243.130571][ T5863] usb 3-1: config 0 has an invalid interface number: 121 but max is 102 [ 243.130591][ T5863] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 103 [ 243.130612][ T5863] usb 3-1: config 0 has no interface number 0 [ 243.130642][ T5863] usb 3-1: too many endpoints for config 0 interface 121 altsetting 187: 242, using maximum allowed: 30 [ 243.130680][ T5863] usb 3-1: config 0 interface 121 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 243.130708][ T5863] usb 3-1: config 0 interface 121 has no altsetting 0 [ 243.305565][ T5863] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 243.305620][ T5863] usb 3-1: New USB device strings: Mfr=2, Product=79, SerialNumber=3 [ 243.305691][ T5863] usb 3-1: Product: syz [ 243.305730][ T5863] usb 3-1: Manufacturer: syz [ 243.305786][ T5863] usb 3-1: SerialNumber: syz [ 243.954941][ T7569] Smack: duplicate mount options [ 243.967253][ T7571] FAULT_INJECTION: forcing a failure. [ 243.967253][ T7571] name failslab, interval 1, probability 0, space 0, times 0 [ 243.967287][ T7571] CPU: 1 UID: 0 PID: 7571 Comm: syz.1.536 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 243.967314][ T7571] Tainted: [L]=SOFTLOCKUP [ 243.967321][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.967351][ T7571] Call Trace: [ 243.967358][ T7571] [ 243.967366][ T7571] dump_stack_lvl+0xe8/0x150 [ 243.967394][ T7571] should_fail_ex+0x46b/0x600 [ 243.967430][ T7571] should_failslab+0xa8/0x100 [ 243.967455][ T7571] __kmalloc_noprof+0xdf/0x7b0 [ 243.967477][ T7571] ? kfree+0x4d/0x6c0 [ 243.967493][ T7571] ? tomoyo_encode+0x511/0x550 [ 243.967520][ T7571] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 243.967545][ T7571] tomoyo_realpath_from_path+0xe3/0x5d0 [ 243.967575][ T7571] ? tomoyo_path2_perm+0x299/0x760 [ 243.967601][ T7571] tomoyo_path2_perm+0x2e7/0x760 [ 243.967633][ T7571] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 243.967658][ T7571] ? __asan_memset+0x22/0x50 [ 243.967686][ T7571] ? current_check_refer_path+0x402/0x11f0 [ 243.967742][ T7571] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 243.967767][ T7571] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 243.967795][ T7571] tomoyo_path_rename+0x14e/0x1b0 [ 243.967820][ T7571] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 243.967855][ T7571] security_path_rename+0x248/0x460 [ 243.967882][ T7571] filename_renameat2+0x4c1/0x9c0 [ 243.967909][ T7571] ? __might_fault+0xaf/0x130 [ 243.967933][ T7571] ? __might_fault+0xaf/0x130 [ 243.967962][ T7571] ? __pfx_filename_renameat2+0x10/0x10 [ 243.968012][ T7571] ? do_getname+0x151/0x250 [ 243.968042][ T7571] __se_sys_renameat2+0x5a/0x2c0 [ 243.968068][ T7571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.968089][ T7571] do_syscall_64+0x15f/0xf80 [ 243.968113][ T7571] ? trace_irq_disable+0x3b/0x140 [ 243.968136][ T7571] ? clear_bhb_loop+0x40/0x90 [ 243.968160][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.968179][ T7571] RIP: 0033:0x7ff51e99ce59 [ 243.968196][ T7571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.968212][ T7571] RSP: 002b:00007ff51cbee028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 243.968233][ T7571] RAX: ffffffffffffffda RBX: 00007ff51ec15fa0 RCX: 00007ff51e99ce59 [ 243.968247][ T7571] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 243.968261][ T7571] RBP: 00007ff51cbee090 R08: 0700000000000000 R09: 0000000000000000 [ 243.968274][ T7571] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 243.968286][ T7571] R13: 00007ff51ec16038 R14: 00007ff51ec15fa0 R15: 00007fff3d9e98d8 [ 243.968319][ T7571] [ 243.975347][ T5863] usb 3-1: config 0 descriptor?? [ 244.003944][ T7571] ERROR: Out of memory at tomoyo_realpath_from_path. [ 244.211190][ T7556] No buffer was provided with the request [ 244.319730][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.320665][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.588349][ T5863] hub 3-1:0.121: bad descriptor, ignoring hub [ 244.588387][ T5863] hub 3-1:0.121: probe with driver hub failed with error -5 [ 244.615454][ T5863] gspca_main: spca501-2.14.0 probing 0000:0000 [ 244.819956][ T7589] FAULT_INJECTION: forcing a failure. [ 244.819956][ T7589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.819990][ T7589] CPU: 1 UID: 0 PID: 7589 Comm: syz.1.543 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 244.820016][ T7589] Tainted: [L]=SOFTLOCKUP [ 244.820023][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.820034][ T7589] Call Trace: [ 244.820041][ T7589] [ 244.820049][ T7589] dump_stack_lvl+0xe8/0x150 [ 244.820077][ T7589] should_fail_ex+0x46b/0x600 [ 244.820111][ T7589] _copy_from_user+0x2d/0xb0 [ 244.820134][ T7589] memdup_user+0x5e/0xd0 [ 244.820163][ T7589] strndup_user+0x68/0xd0 [ 244.820191][ T7589] __se_sys_mount+0x9d/0x420 [ 244.820220][ T7589] ? ksys_write+0x248/0x270 [ 244.820244][ T7589] ? __pfx___se_sys_mount+0x10/0x10 [ 244.820275][ T7589] ? __x64_sys_mount+0x20/0xc0 [ 244.820301][ T7589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.820321][ T7589] do_syscall_64+0x15f/0xf80 [ 244.820344][ T7589] ? trace_irq_disable+0x3b/0x140 [ 244.820374][ T7589] ? clear_bhb_loop+0x40/0x90 [ 244.820398][ T7589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.820417][ T7589] RIP: 0033:0x7ff51e99ce59 [ 244.820435][ T7589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.820451][ T7589] RSP: 002b:00007ff51cbee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 244.820471][ T7589] RAX: ffffffffffffffda RBX: 00007ff51ec15fa0 RCX: 00007ff51e99ce59 [ 244.820485][ T7589] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 0000200000000080 [ 244.820499][ T7589] RBP: 00007ff51cbee090 R08: 0000000000000000 R09: 0000000000000000 [ 244.820511][ T7589] R10: 0000000000208052 R11: 0000000000000246 R12: 0000000000000001 [ 244.820523][ T7589] R13: 00007ff51ec16038 R14: 00007ff51ec15fa0 R15: 00007fff3d9e98d8 [ 244.820553][ T7589] [ 245.085038][ T5715] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 245.126460][ T5863] gspca_spca501: reg write: error -110 [ 245.126476][ T5863] spca501 3-1:0.121: Reg write failed for 0x02,0x0f,0x05 [ 245.126566][ T5863] spca501 3-1:0.121: probe with driver spca501 failed with error -22 [ 245.238809][ T5715] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 245.238825][ T5715] usb 4-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 245.238835][ T5715] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 245.238849][ T5715] usb 4-1: config 220 has no interface number 2 [ 245.238896][ T5715] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 245.238923][ T5715] usb 4-1: config 220 interface 0 has no altsetting 0 [ 245.238934][ T5715] usb 4-1: config 220 interface 76 has no altsetting 0 [ 245.238944][ T5715] usb 4-1: config 220 interface 1 has no altsetting 0 [ 245.241966][ T5715] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 245.241981][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.241992][ T5715] usb 4-1: Product: syz [ 245.241999][ T5715] usb 4-1: Manufacturer: syz [ 245.242007][ T5715] usb 4-1: SerialNumber: syz [ 245.471221][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 245.485317][ T5327] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 245.614657][ T5327] usb 6-1: device descriptor read/64, error -71 [ 245.684997][ T5725] usb 3-1: USB disconnect, device number 12 [ 245.737988][ T5726] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 245.864581][ T5327] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 246.007913][ T5726] usb 2-1: Invalid ep0 maxpacket: 32 [ 246.016382][ T5327] usb 6-1: device descriptor read/64, error -71 [ 246.883480][ T5715] usb 4-1: selecting invalid altsetting 0 [ 246.913022][ T5715] usb 4-1: selecting invalid altsetting 0 [ 246.913507][ T5715] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 246.913541][ T5715] uvcvideo 4-1:220.0: No valid video chain found. [ 246.943684][ T5726] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 246.962835][ T5327] usb usb6-port1: attempt power cycle [ 247.028302][ T5715] usb 4-1: selecting invalid altsetting 0 [ 247.028337][ T5715] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 247.077280][ T5715] usb 4-1: USB disconnect, device number 21 [ 247.104619][ T5726] usb 2-1: Invalid ep0 maxpacket: 32 [ 247.104934][ T5726] usb usb2-port1: attempt power cycle [ 247.238058][ T7612] macsec1: entered promiscuous mode [ 247.238084][ T7612] macsec1: entered allmulticast mode [ 247.300927][ T7618] FAULT_INJECTION: forcing a failure. [ 247.300927][ T7618] name failslab, interval 1, probability 0, space 0, times 0 [ 247.300960][ T7618] CPU: 0 UID: 0 PID: 7618 Comm: syz.4.553 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 247.300987][ T7618] Tainted: [L]=SOFTLOCKUP [ 247.300994][ T7618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.301005][ T7618] Call Trace: [ 247.301012][ T7618] [ 247.301020][ T7618] dump_stack_lvl+0xe8/0x150 [ 247.301048][ T7618] should_fail_ex+0x46b/0x600 [ 247.301083][ T7618] should_failslab+0xa8/0x100 [ 247.301108][ T7618] __kvmalloc_node_noprof+0x170/0x8e0 [ 247.301133][ T7618] ? traverse+0xde/0x580 [ 247.301163][ T7618] traverse+0xde/0x580 [ 247.301185][ T7618] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 247.301212][ T7618] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 247.301237][ T7618] ? seq_read_iter+0xb8/0xe20 [ 247.301264][ T7618] seq_read_iter+0xd09/0xe20 [ 247.301294][ T7618] ? alloc_pages_bulk_noprof+0x6c0/0x8c0 [ 247.301327][ T7618] proc_reg_read_iter+0x1bf/0x290 [ 247.301352][ T7618] copy_splice_read+0x605/0xab0 [ 247.301384][ T7618] ? __pfx_copy_splice_read+0x10/0x10 [ 247.301410][ T7618] ? rcu_is_watching+0x15/0xb0 [ 247.301439][ T7618] ? look_up_lock_class+0x57/0x110 [ 247.301464][ T7618] ? register_lock_class+0x31/0x2e0 [ 247.301499][ T7618] ? alloc_pipe_info+0x373/0x4d0 [ 247.301523][ T7618] ? __pfx_copy_splice_read+0x10/0x10 [ 247.301551][ T7618] splice_direct_to_actor+0x483/0xc80 [ 247.301592][ T7618] ? __pfx_direct_splice_actor+0x10/0x10 [ 247.301623][ T7618] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 247.301654][ T7618] do_splice_direct+0x19b/0x2a0 [ 247.301676][ T7618] ? __pfx_do_splice_direct+0x10/0x10 [ 247.301697][ T7618] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 247.301725][ T7618] ? rw_verify_area+0x25b/0x4e0 [ 247.301750][ T7618] do_sendfile+0x547/0x7e0 [ 247.301785][ T7618] ? __pfx_do_sendfile+0x10/0x10 [ 247.301824][ T7618] __se_sys_sendfile64+0xdf/0x1a0 [ 247.301852][ T7618] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 247.301887][ T7618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.301908][ T7618] do_syscall_64+0x15f/0xf80 [ 247.301946][ T7618] ? trace_irq_disable+0x3b/0x140 [ 247.301968][ T7618] ? clear_bhb_loop+0x40/0x90 [ 247.301993][ T7618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.302012][ T7618] RIP: 0033:0x7f8dde56ce59 [ 247.302030][ T7618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.302046][ T7618] RSP: 002b:00007f8ddc7c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 247.302066][ T7618] RAX: ffffffffffffffda RBX: 00007f8dde7e5fa0 RCX: 00007f8dde56ce59 [ 247.302081][ T7618] RDX: 0000200000019380 RSI: 0000000000000003 RDI: 0000000000000005 [ 247.302094][ T7618] RBP: 00007f8ddc7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 247.302106][ T7618] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000001 [ 247.302117][ T7618] R13: 00007f8dde7e6038 R14: 00007f8dde7e5fa0 R15: 00007fff88282e58 [ 247.302149][ T7618] [ 247.325053][ T5327] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 247.403992][ T5327] usb 6-1: device descriptor read/8, error -71 [ 247.469240][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 247.537115][ T5726] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 247.947115][ T5327] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 248.042452][ T5726] usb 2-1: Invalid ep0 maxpacket: 32 [ 248.059214][ T5327] usb 6-1: device descriptor read/8, error -71 [ 248.165145][ T5327] usb usb6-port1: unable to enumerate USB device [ 248.176106][ T5726] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 248.202149][ T5726] usb 2-1: device descriptor read/8, error -71 [ 248.206237][ T5715] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 248.305684][ T5726] usb usb2-port1: unable to enumerate USB device [ 248.359740][ T5715] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 248.359772][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 248.359799][ T5715] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 248.359825][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 248.378408][ T5715] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 248.378442][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.378462][ T5715] usb 4-1: Product: syz [ 248.378475][ T5715] usb 4-1: Manufacturer: syz [ 248.378489][ T5715] usb 4-1: SerialNumber: syz [ 248.403373][ T5715] usb 4-1: config 0 descriptor?? [ 248.476113][ T5715] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 248.884910][ T5726] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 249.067476][ T5327] usb 4-1: USB disconnect, device number 22 [ 249.284737][ T5726] usb 2-1: Using ep0 maxpacket: 8 [ 249.420881][ T5726] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.439202][ T5726] usb 2-1: config 4 has an invalid interface number: 252 but max is 0 [ 249.439228][ T5726] usb 2-1: config 4 has no interface number 0 [ 249.439275][ T5726] usb 2-1: config 4 interface 252 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 249.439309][ T5726] usb 2-1: config 4 interface 252 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 249.439333][ T5726] usb 2-1: config 4 interface 252 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 249.439356][ T5726] usb 2-1: config 4 interface 252 altsetting 0 endpoint 0xA has an invalid bInterval 82, changing to 7 [ 249.439383][ T5726] usb 2-1: config 4 interface 252 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 249.448656][ T5726] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff73, bcdDevice=7f.b3 [ 249.448683][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.448702][ T5726] usb 2-1: Product: syz [ 249.448717][ T5726] usb 2-1: Manufacturer: и [ 249.448731][ T5726] usb 2-1: SerialNumber: syz [ 249.571120][ T7628] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 249.785649][ T7628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.787476][ T7628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.830291][ T5726] option 2-1:4.252: GSM modem (1-port) converter detected [ 249.874753][ T5726] usb 2-1: USB disconnect, device number 23 [ 249.941352][ T5726] option 2-1:4.252: device disconnected [ 251.194755][ T5863] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 251.285868][ T7674] support for cryptoloop has been removed. Use dm-crypt instead. [ 251.301834][ T5327] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 251.364715][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 251.368823][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.368852][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.368888][ T5863] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.368911][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.435555][ T5863] usb 2-1: config 0 descriptor?? [ 251.450196][ T5863] hub 2-1:0.0: USB hub found [ 251.494995][ T5327] usb 4-1: Using ep0 maxpacket: 16 [ 251.495735][ T5327] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 251.549175][ T5327] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 251.549203][ T5327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 251.549224][ T5327] usb 4-1: Product: syz [ 251.549240][ T5327] usb 4-1: Manufacturer: syz [ 251.549304][ T5327] usb 4-1: SerialNumber: syz [ 251.601497][ T5327] usb 4-1: config 0 descriptor?? [ 251.628798][ T5327] pwc: Philips SPC 880NC USB webcam detected. [ 251.647216][ T5863] hub 2-1:0.0: 1 port detected [ 252.326415][ T5863] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 252.326448][ T5863] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 252.364755][ T5863] usbhid 2-1:0.0: can't add hid device: -71 [ 252.364924][ T5863] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 252.417248][ T7688] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 252.443772][ T5863] usb 2-1: USB disconnect, device number 24 [ 252.634993][ T10] IPVS: starting estimator thread 0... [ 252.676410][ T7681] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.764827][ T7694] IPVS: using max 15 ests per chain, 36000 per kthread [ 253.809151][ T5863] IPVS: starting estimator thread 0... [ 253.896179][ T7707] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 253.937503][ T7704] IPVS: using max 15 ests per chain, 36000 per kthread [ 254.029808][ T5327] pwc: Warning: more than 1 configuration available. [ 254.056306][ T5327] pwc: Failed to set LED on/off time (-71) [ 254.062681][ T5327] pwc: send_video_command error -71 [ 254.062696][ T5327] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 254.062817][ T5327] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 254.486848][ T5327] usb 4-1: USB disconnect, device number 23 [ 255.757464][ T37] INFO: task syz.0.45:5952 blocked for more than 143 seconds. [ 255.757491][ T37] Tainted: G L syzkaller #0 [ 255.757503][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.757526][ T37] task:syz.0.45 state:D stack:24552 pid:5952 tgid:5949 ppid:5598 task_flags:0x400740 flags:0x00080002 [ 255.757579][ T37] Call Trace: [ 255.757585][ T37] [ 255.757599][ T37] __schedule+0x16ec/0x5620 [ 255.757659][ T37] ? __pfx___schedule+0x10/0x10 [ 255.757693][ T37] ? schedule+0x90/0x360 [ 255.757719][ T37] schedule+0x164/0x360 [ 255.757744][ T37] schedule_timeout+0xc3/0x2c0 [ 255.757782][ T37] ? __pfx_schedule_timeout+0x10/0x10 [ 255.757806][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 255.757840][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.757867][ T37] __wait_for_common+0x3c0/0x690 [ 255.757910][ T37] ? __pfx_schedule_timeout+0x10/0x10 [ 255.757931][ T37] ? __pfx___wait_for_common+0x10/0x10 [ 255.757958][ T37] ? rt_spin_unlock+0x14f/0x200 [ 255.757988][ T37] wait_for_completion_state+0x1c/0x40 [ 255.758011][ T37] vfs_coredump+0x9d0/0x4540 [ 255.758045][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 255.758077][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 255.758110][ T37] ? __pfx_vfs_coredump+0x10/0x10 [ 255.758138][ T37] ? unwind_next_frame+0xa6/0x2550 [ 255.758174][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 255.758206][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 255.758234][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 255.758263][ T37] ? is_bpf_text_address+0x292/0x2b0 [ 255.758291][ T37] ? unwind_next_frame+0xa6/0x2550 [ 255.758323][ T37] ? unwind_next_frame+0xa6/0x2550 [ 255.758351][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 255.758380][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 255.758409][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 255.758438][ T37] ? is_bpf_text_address+0x292/0x2b0 [ 255.758462][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 255.758491][ T37] ? kernel_text_address+0xa5/0xe0 [ 255.758522][ T37] ? stack_depot_save_flags+0x290/0x810 [ 255.758541][ T37] ? lock_acquire+0x106/0x350 [ 255.758578][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 255.758603][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 255.758632][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 255.758660][ T37] ? kasan_save_track+0x4f/0x80 [ 255.758679][ T37] ? kasan_save_track+0x3e/0x80 [ 255.758696][ T37] ? kasan_save_free_info+0x46/0x50 [ 255.758721][ T37] ? __kasan_slab_free+0x5c/0x80 [ 255.758740][ T37] ? kmem_cache_free+0x187/0x6c0 [ 255.758761][ T37] ? get_signal+0xa4a/0x1330 [ 255.758779][ T37] ? arch_do_signal_or_restart+0xbc/0x840 [ 255.758807][ T37] ? exit_to_user_mode_loop+0x8c/0x4d0 [ 255.758856][ T37] ? do_syscall_64+0x33e/0xf80 [ 255.758879][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.758914][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 255.758970][ T37] ? rt_spin_unlock+0x14f/0x200 [ 255.758995][ T37] ? rt_spin_unlock+0x160/0x200 [ 255.759023][ T37] get_signal+0x1107/0x1330 [ 255.759065][ T37] arch_do_signal_or_restart+0xbc/0x840 [ 255.759097][ T37] ? rt_spin_unlock+0x14f/0x200 [ 255.759116][ T37] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 255.759153][ T37] ? force_sig_info_to_task+0x392/0x4b0 [ 255.759190][ T37] exit_to_user_mode_loop+0x8c/0x4d0 [ 255.759214][ T37] ? rcu_is_watching+0x15/0xb0 [ 255.759243][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.759264][ T37] do_syscall_64+0x33e/0xf80 [ 255.759287][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.759308][ T37] ? clear_bhb_loop+0x40/0x90 [ 255.759333][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.759353][ T37] RIP: 0033:0x7fa98a76ce59 [ 255.759370][ T37] RSP: 002b:00007fa9889a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 255.759390][ T37] RAX: 00000000000000ca RBX: 00007fa98a9e6098 RCX: 00007fa98a76ce59 [ 255.759404][ T37] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa98a9e609c [ 255.759417][ T37] RBP: 00007fa98a9e6090 R08: 3fffffffffffffff R09: 0000000000000000 [ 255.759431][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.759443][ T37] R13: 00007fa98a9e6128 R14: 00007ffc1b5d76a0 R15: 00007ffc1b5d7788 [ 255.759476][ T37] [ 255.759510][ T37] [ 255.759510][ T37] Showing all locks held in the system: [ 255.759520][ T37] 7 locks held by ktimers/0/16: [ 255.759537][ T37] 3 locks held by ksoftirqd/1/30: [ 255.759549][ T37] 1 lock held by khungtaskd/37: [ 255.759559][ T37] #0: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 255.759616][ T37] 2 locks held by kworker/u8:5/68: [ 255.759627][ T37] #0: ffff88801a074938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 255.759680][ T37] #1: ffffc9000153fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 255.759749][ T37] 3 locks held by udevd/4961: [ 255.759760][ T37] 2 locks held by getty/5352: [ 255.759771][ T37] #0: ffff8880366d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 255.759819][ T37] #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 255.759874][ T37] 9 locks held by syz-executor/5605: [ 255.759891][ T37] 4 locks held by kworker/1:5/5725: [ 255.759904][ T37] 1 lock held by udevd/5907: [ 255.759914][ T37] 2 locks held by kworker/u8:14/5979: [ 255.759925][ T37] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 255.759973][ T37] #1: ffffc90006087c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 255.760026][ T37] 2 locks held by syz.2.560/7642: [ 255.760037][ T37] 4 locks held by syz.5.580/7699: [ 255.760048][ T37] 2 locks held by syz.4.582/7706: [ 255.760059][ T37] 4 locks held by syz.3.583/7714: [ 255.760069][ T37] 1 lock held by syz.1.584/7720: [ 255.760080][ T37] 3 locks held by modprobe/7717: [ 255.760091][ T37] [ 255.760096][ T37] ============================================= [ 255.760096][ T37] [ 255.760113][ T37] NMI backtrace for cpu 1 [ 255.760128][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 255.760153][ T37] Tainted: [L]=SOFTLOCKUP [ 255.760160][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.760171][ T37] Call Trace: [ 255.760178][ T37] [ 255.760186][ T37] dump_stack_lvl+0xe8/0x150 [ 255.760209][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 255.760229][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 255.760252][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 255.760284][ T37] sys_info+0x135/0x170 [ 255.760309][ T37] watchdog+0xfd3/0x1030 [ 255.760338][ T37] ? watchdog+0x1c9/0x1030 [ 255.760365][ T37] kthread+0x388/0x470 [ 255.760390][ T37] ? __pfx_watchdog+0x10/0x10 [ 255.760408][ T37] ? __pfx_kthread+0x10/0x10 [ 255.760434][ T37] ret_from_fork+0x514/0xb70 [ 255.760458][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 255.760479][ T37] ? __switch_to+0xc79/0x1410 [ 255.760510][ T37] ? __pfx_kthread+0x10/0x10 [ 255.760535][ T37] ret_from_fork_asm+0x1a/0x30 [ 255.760574][ T37] [ 255.760581][ T37] Sending NMI from CPU 1 to CPUs 0: [ 255.760607][ C0] NMI backtrace for cpu 0 [ 255.760622][ C0] CPU: 0 UID: 0 PID: 7720 Comm: syz.1.584 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 255.760644][ C0] Tainted: [L]=SOFTLOCKUP [ 255.760650][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.760658][ C0] RIP: 0010:__lock_acquire+0x60c/0x2cf0 [ 255.760681][ C0] Code: 7d bd e8 0d 00 0f 84 0a 08 00 00 83 7c 24 10 00 0f 84 a8 00 00 00 41 8b 45 20 66 85 c0 0f 88 8c 00 00 00 65 8b 0d 90 b3 ca 10 00 00 03 00 74 39 85 c9 48 8b 5c 24 08 74 18 48 89 df 4c 89 ee [ 255.760694][ C0] RSP: 0018:ffffc9000802f3e0 EFLAGS: 00000002 [ 255.760708][ C0] RAX: 00000000000c003b RBX: ffff88805a4668a8 RCX: 0000000000000000 [ 255.760719][ C0] RDX: 0000000000000003 RSI: 0000000000000004 RDI: 0000000000000000 [ 255.760728][ C0] RBP: ffff88805a466888 R08: ffffffff8b1f5857 R09: ffff888036c28c58 [ 255.760739][ C0] R10: dffffc0000000000 R11: fffffbfff1f11f1f R12: 0000000000000003 [ 255.760750][ C0] R13: ffff88805a466888 R14: ffff88805a465c40 R15: 0000000000000002 [ 255.760761][ C0] FS: 00007ff51cbcd6c0(0000) GS:ffff888126174000(0000) knlGS:0000000000000000 [ 255.760775][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.760786][ C0] CR2: 000020000001e000 CR3: 0000000036764000 CR4: 00000000003526f0 [ 255.760800][ C0] Call Trace: [ 255.760806][ C0] [ 255.760815][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 255.760838][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 255.760859][ C0] ? rt_spin_lock+0x157/0x400 [ 255.760873][ C0] lock_acquire+0x106/0x350 [ 255.760891][ C0] ? rt_spin_lock+0x157/0x400 [ 255.760908][ C0] ? rcu_is_watching+0x15/0xb0 [ 255.760930][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 255.760948][ C0] ? rt_spin_lock+0x157/0x400 [ 255.760962][ C0] rt_spin_lock+0x157/0x400 [ 255.760978][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 255.760994][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 255.761014][ C0] __skb_try_recv_datagram+0x89/0x1b0 [ 255.761038][ C0] __unix_dgram_recvmsg+0x2e3/0xd60 [ 255.761058][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 255.761078][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 255.761099][ C0] ? unix_dgram_recvmsg+0xae/0xd0 [ 255.761116][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 255.761135][ C0] sock_recvmsg_nosec+0x10c/0x140 [ 255.761151][ C0] ____sys_recvmsg+0x3ef/0x4b0 [ 255.761170][ C0] ? __import_iovec+0x40e/0x7e0 [ 255.761190][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 255.761215][ C0] ? import_iovec+0x73/0xa0 [ 255.761232][ C0] ___sys_recvmsg+0x215/0x590 [ 255.761253][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 255.761271][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 255.761291][ C0] ? irqentry_exit+0x218/0x760 [ 255.761320][ C0] do_recvmmsg+0x33a/0x800 [ 255.761342][ C0] ? file_init_path+0x3b/0x5b0 [ 255.761363][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 255.761381][ C0] ? __asan_memcpy+0x40/0x70 [ 255.761405][ C0] ? __pfx_do_futex+0x10/0x10 [ 255.761432][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 255.761453][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 255.761476][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.761491][ C0] do_syscall_64+0x15f/0xf80 [ 255.761509][ C0] ? trace_irq_disable+0x3b/0x140 [ 255.761532][ C0] ? clear_bhb_loop+0x40/0x90 [ 255.761549][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.761565][ C0] RIP: 0033:0x7ff51e99ce59 [ 255.761578][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.761591][ C0] RSP: 002b:00007ff51cbcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 255.761606][ C0] RAX: ffffffffffffffda RBX: 00007ff51ec16090 RCX: 00007ff51e99ce59 [ 255.761618][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 255.761628][ C0] RBP: 00007ff51ea32d6f R08: 0000000000000000 R09: 0000000000000000 [ 255.761638][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 255.761648][ C0] R13: 00007ff51ec16128 R14: 00007ff51ec16090 R15: 00007fff3d9e98d8 [ 255.761666][ C0] [ 255.762610][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 255.762626][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 255.762652][ T37] Tainted: [L]=SOFTLOCKUP [ 255.762659][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.762669][ T37] Call Trace: [ 255.762676][ T37] [ 255.762684][ T37] vpanic+0x56c/0xa60 [ 255.762711][ T37] ? __pfx_vpanic+0x10/0x10 [ 255.762744][ T37] panic+0xc5/0xd0 [ 255.762766][ T37] ? __pfx_panic+0x10/0x10 [ 255.762799][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 255.762832][ T37] watchdog+0x102c/0x1030 [ 255.762860][ T37] ? watchdog+0x1c9/0x1030 [ 255.762888][ T37] kthread+0x388/0x470 [ 255.762913][ T37] ? __pfx_watchdog+0x10/0x10 [ 255.762932][ T37] ? __pfx_kthread+0x10/0x10 [ 255.762958][ T37] ret_from_fork+0x514/0xb70 [ 255.762982][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 255.763003][ T37] ? __switch_to+0xc79/0x1410 [ 255.763038][ T37] ? __pfx_kthread+0x10/0x10 [ 255.763065][ T37] ret_from_fork_asm+0x1a/0x30 [ 255.763102][ T37] [ 255.763613][ T37] Kernel Offset: disabled