last executing test programs: 11.987581068s ago: executing program 3 (id=377): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x102, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x4) vmsplice(r4, 0x0, 0x0, 0x2) 11.336994258s ago: executing program 2 (id=384): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r1, 0x0) shutdown(r1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x40002, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee01) semop(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) setrlimit(0x1, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) truncate(0x0, 0x400000f003) 10.417516711s ago: executing program 0 (id=385): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0x20008081}, 0x4) socket$inet6(0xa, 0x805, 0x0) r2 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='cifs\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0xc010) 10.328778717s ago: executing program 3 (id=387): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 10.039715348s ago: executing program 0 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x44080}], 0x1, 0x40800) r7 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_control_io$rtl8150(r2, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x0, 0x10, 0xe9, {0xe9, 0x4, "256086a151d316345f689049ffa49f02346ae6cf6654ea187ef62b189d948082abd64056e84dedb8ad4dd2e2cecc9e5e3bfba34f2154e4f7476835c7d20cd72796331b0d1c3b6b6032c21c739a5b1f4025a6bc789663d7e9e3856b1b9a136eaec1b42889a995a0008e65f73540db7a7cefd3af2b0166a87a4e38176712935ca0b36fae5f7259b569d2fc11b072b0d20ff5cf2492887c19298a06e9f1fd25763b3f6ba5f9c7e94ee68a48e13eabe81f53c8ba6dbdf0a81c9604733001e411737e46a78a37893440fc32de7affbb40bd4380c343fa5541a34816e3de8a8c334160e34047e454ca78"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a00)={0x20, 0xd, 0x5c, "8e2b62194b040c4ceecdf433b8640e21a2cabf1c43aa1038f3d29226c8178cc6ea81657a42469f6ff22919de13b12828edc48f70ec8748621a827e4a0c942689ac0ebd67146eff5a980fb4bfc29c38fa7b31707672b1d2c6c76b7266"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000b40)={0xc0, 0x5, 0x3, "b110a3"}, &(0x7f0000000b80)={0x40, 0x5, 0x6, "594fd514ce02"}}) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="1ad3ad7a3be96e37359278533a521eeaeafee835b3bd042fe5250bc2ebb30f19017d9cee90ed467c10b9f4bdf6aa3cdda36fd44d2a9307d51f50beb3a327b4388aa59cc43f20b112924bf0d5f501586681f11b7b9da69c3b88434a78bfc710aaf79876d35806c5b744422861bfa66edc5f3bdb9947d0a11f9d6c659e6eb840b312fca8a466daaa309350644aa2a33b54632aff2c3a9b47a42ac2cf9b4e38ba2d8fe34fbf3c66660d4ed8978a3bebb639aa4c747c8e48534b40332af3966e0bd74e6ffd3283586c4cc87cc5d5196b6bb902741a381ff7f9cc9e39116fd5cdc97b", 0xe0, r7) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000000040)=0x8) ioctl$KVM_RUN(r8, 0xae80, 0x0) 8.99369317s ago: executing program 4 (id=393): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) unshare(0x20000400) timer_create(0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 8.697227221s ago: executing program 4 (id=394): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x2, 0x0, [{0x4000, 0x97, &(0x7f0000000240)=""/151}, {0x2000, 0xa4, &(0x7f0000000340)=""/164}]}) r1 = timerfd_create(0x4, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$afs(&(0x7f0000000000)=@cell={0x23, 'syz1:', 'syz1', '.readonly'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) socket(0x2, 0x80805, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@host}) 7.893045554s ago: executing program 3 (id=396): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x3) landlock_restrict_self(0xffffffffffffffff, 0x4) landlock_restrict_self(0xffffffffffffffff, 0x2) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe40102030109021200010000000009"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000140)="020000000d800089", 0x8) 7.818623773s ago: executing program 2 (id=397): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000002042072626000000040001090224000100006d03"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f00000001c0)={0x40, 0x1, 0x29, {0x29, 0x23, "42f2c0ab65ac86d734ae3d3148c3f07e6b530544f0ce1d2cf1c45387f594556c34849aab260d21"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.45540313s ago: executing program 4 (id=398): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffef1}, {&(0x7f0000000700)="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", 0x116}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) unshare(0x4040600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0xb}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0xffff0001, 0x7fff, 0xa3c1, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x4000005, 0x6, 0xfff, 0x9, 0x1, 0x6, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0x401, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0x1000ff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfbf, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0xfc92, 0x13, 0x2000000, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x4002, 0xffff8000, 0x9, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x6, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x200, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x1, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0xbb, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x40, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.279344445s ago: executing program 4 (id=399): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) 6.9642742s ago: executing program 1 (id=400): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x81) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(0x0, 0x6000, 0x0) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000600)) 5.556680447s ago: executing program 0 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xb, 0x0, &(0x7f0000000340)="14fd54ab72df87e6256c00", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.457678953s ago: executing program 1 (id=402): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) fsmount(0xffffffffffffffff, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x3f00000000000000) 5.308238206s ago: executing program 1 (id=403): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)={0x0, @reserved}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x708, 0x6, '\x00', &(0x7f0000000100)=0x8}) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000180)="e71bd55f0f129ba714c36e93", 0xc}, {&(0x7f00000001c0)="2891246ecb88dbc1e5055f10ec8d0ba338155616a12248611ea0692a2bb0389e0f7718cb270505338d97029d108be7acfbb71f6199f927e40616570ddb5b80ee7ff63a7cdeb52a899bfa00f19fd10b10ec512ac4b6fec3723e0e2e3f991ea3a40caf4614bbeb293da5590332ece4ee9aadb9cd96a5c83f142dc67e9673a9c5a4097633b2cbef63496baef6e4dd4963d4", 0x90}], 0x2, 0x1) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000002c0)={0x6, 0x1, 0x1}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000300)=0xc, 0x4) r2 = dup2(r1, r1) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000090) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xb8, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x34}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffff001}]}, 0xb8}}, 0x4084) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) timer_create(0x0, &(0x7f00000006c0)={0x0, 0x33, 0x1, @tid=r4}, &(0x7f0000000700)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2d) flock(r0, 0x8) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf1a, 0xa}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000009c0)=0xfffffffe, 0x4) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000a00)={0x3}) socket(0x1a, 0x4, 0xcae4) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000f00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a80)={0x440, 0x3f4, 0x20, 0x70bd2a, 0x25dfdbfe, {0x5, 0x0, 0x2c, [0x8, 0x8001, 0x5, 0x8, 0xeb0f, 0x5, 0x7, 0xe8, 0xfc6, 0x6, 0xc, 0x2, 0x9, 0x3, 0x8, 0x8, 0xca8, 0x5, 0xff, 0x2, 0x9, 0xd, 0x3, 0xfffffffd, 0x101, 0x6, 0x7, 0x62b6, 0x194, 0x4, 0x6, 0x5, 0xffd, 0xe, 0x0, 0x9, 0x7, 0x8, 0x3, 0x3, 0x101, 0x5, 0x1, 0x0, 0x4, 0xbff1, 0x7, 0x0, 0x7288, 0x5, 0x0, 0x4, 0x743, 0xad4, 0x1, 0x80, 0x40, 0x1000, 0x4, 0x7, 0xffff, 0x3e, 0x1ff, 0x2], [0xffffffff, 0x80, 0x3, 0x1, 0x7, 0x6, 0x9, 0xd5, 0x3, 0x3, 0x0, 0x3, 0x0, 0x2, 0x0, 0xfffffc00, 0xfffffff7, 0xa, 0x0, 0x755, 0x0, 0x26, 0x8, 0x200, 0x80, 0x4, 0x2e7, 0x5, 0xa, 0x9, 0xfffffffe, 0x40, 0x7, 0x9, 0x4, 0x40, 0xffff, 0x9, 0x3, 0x9, 0x7, 0x200, 0x5, 0x3cf, 0x8, 0x2, 0x4, 0xa0f2, 0x401, 0x7, 0x0, 0x880f, 0xa84, 0x0, 0x7, 0x7, 0x7, 0x9, 0xf, 0x7, 0x68, 0x7fffffff, 0x200], [0x8, 0x45, 0x4, 0x3ff, 0x1, 0x4, 0x6, 0x80000000, 0x2, 0x3, 0x0, 0x3, 0x3, 0x3, 0x7fffffff, 0x3, 0x3, 0x5a, 0x8, 0xf9, 0x2133, 0xf3, 0x7, 0xf3, 0xb, 0x7, 0x4, 0x6, 0xc, 0x80000001, 0x8, 0xa, 0x0, 0x2589, 0x6, 0x8, 0x1, 0x4, 0x6, 0x0, 0xd491, 0x0, 0x5, 0x2, 0x6, 0xfffffe00, 0xb, 0x7ff, 0x8, 0x5, 0x3, 0x2, 0xd7, 0x10000, 0xd, 0x4, 0x7, 0x7, 0x6, 0xff, 0x1ff, 0x40, 0x2, 0x607aa381], [0x6, 0x10, 0xf, 0x10000, 0xe77d, 0x7, 0x2a6b, 0xf77, 0xfff, 0x1, 0x2, 0x9, 0x9, 0x400, 0x3, 0x5, 0x0, 0x1, 0x4, 0x0, 0x1000, 0xc06, 0x1, 0x3, 0x8, 0x0, 0xc, 0x0, 0x3, 0x260, 0x5, 0xf96, 0x5, 0x6bb, 0xca, 0x4, 0x3, 0x8, 0x6d, 0xa0a, 0x390d, 0x0, 0x6, 0xffff, 0x5, 0xfffffff8, 0x0, 0x4, 0x2, 0x1ff, 0x9, 0x3856, 0x6, 0xdc, 0x5, 0x6, 0x6, 0xfffffffc, 0x101, 0x7, 0x3, 0x1, 0x4, 0x7], 0x1e, [')@)),.-}^!\x00', '/\\.{+-[.[*[#\'+#\x00', '\x00', '-\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x24040090}, 0x448c4) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000f40)) truncate(&(0x7f0000000f80)='./file0\x00', 0x7fffffffffffffff) write$binfmt_misc(r2, &(0x7f0000000fc0)="df7c31d342abf9eec2e6eba43bcb058075371c7f482f0347979bb72210819f650c5a75cc7a075d3c584aeea288f1b58b061737889991843ac759d9eb31919a2a5cf2d5f1d4d6dc68468dc910b2a2c816f55a78653901826e92249b67b3d777be0df968af5da43f1c41fc2b66eaa7e114daf56535065bd9b2c730", 0x7a) 5.26835124s ago: executing program 0 (id=404): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x3) landlock_restrict_self(0xffffffffffffffff, 0x4) landlock_restrict_self(0xffffffffffffffff, 0x2) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 5.079931012s ago: executing program 1 (id=405): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xf8) bind$bt_sco(r0, &(0x7f0000000100), 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0xffffffffffffffff, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731adaff00000000bfa10000000039fcdff4defc3a4c3ad4cb8d0a00000007010000f8fffffdb7020000080000003996008d60448e8fd075f505a5f3b11072a66820b23eab26e7fd1b41c287b1049b75f5da77ce19"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, 0x0, 0x1) clock_gettime(0x0, &(0x7f0000000180)) 4.844572941s ago: executing program 1 (id=406): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 4.592198299s ago: executing program 2 (id=407): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r1, 0x0) shutdown(r1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x40002, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee01) semop(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) setrlimit(0x1, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) truncate(0x0, 0x400000f003) 3.488091005s ago: executing program 3 (id=408): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffc}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) r1 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) r2 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000100)='nomand\x00', &(0x7f00000001c0)='G', 0x1) writev(r1, &(0x7f0000001180)=[{&(0x7f0000002340)='8', 0x1}, {&(0x7f0000001080)="061d", 0x2}], 0x2) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000140)) 3.097890424s ago: executing program 3 (id=409): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) io_uring_setup(0x1d90, &(0x7f0000000480)={0x0, 0x796a, 0x40, 0x1, 0x8c}) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffef1}, {&(0x7f0000000700)="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", 0x116}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) unshare(0x4040600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0xb}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0xffff0001, 0x7fff, 0xa3c1, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x4000005, 0x6, 0xfff, 0x9, 0x1, 0x6, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0x401, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0x1000ff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfbf, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0xfc92, 0x13, 0x2000000, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x4002, 0xffff8000, 0x9, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x6, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x200, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x1, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0xbb, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x40, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.974018685s ago: executing program 3 (id=410): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x3) landlock_restrict_self(0xffffffffffffffff, 0x4) landlock_restrict_self(0xffffffffffffffff, 0x2) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe401"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2.449527032s ago: executing program 1 (id=411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="0100000045d90266b000000000000000000000f80100000000f7f8f38ca4fd8ea2de11258ec5173ddbea82d64ddc1aa60000"], 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x44080}], 0x1, 0x40800) r8 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_control_io$rtl8150(r3, &(0x7f00000009c0)={0x14, &(0x7f0000000880)={0x0, 0x10, 0xe9, {0xe9, 0x4, "256086a151d316345f689049ffa49f02346ae6cf6654ea187ef62b189d948082abd64056e84dedb8ad4dd2e2cecc9e5e3bfba34f2154e4f7476835c7d20cd72796331b0d1c3b6b6032c21c739a5b1f4025a6bc789663d7e9e3856b1b9a136eaec1b42889a995a0008e65f73540db7a7cefd3af2b0166a87a4e38176712935ca0b36fae5f7259b569d2fc11b072b0d20ff5cf2492887c19298a06e9f1fd25763b3f6ba5f9c7e94ee68a48e13eabe81f53c8ba6dbdf0a81c9604733001e411737e46a78a37893440fc32de7affbb40bd4380c343fa5541a34816e3de8a8c334160e34047e454ca78"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a00)={0x20, 0xd, 0x5c, "8e2b62194b040c4ceecdf433b8640e21a2cabf1c43aa1038f3d29226c8178cc6ea81657a42469f6ff22919de13b12828edc48f70ec8748621a827e4a0c942689ac0ebd67146eff5a980fb4bfc29c38fa7b31707672b1d2c6c76b7266"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000b40)={0xc0, 0x5, 0x3, "b110a3"}, &(0x7f0000000b80)={0x40, 0x5, 0x6, "594fd514ce02"}}) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="1ad3ad7a3be96e37359278533a521eeaeafee835b3bd042fe5250bc2ebb30f19017d9cee90ed467c10b9f4bdf6aa3cdda36fd44d2a9307d51f50beb3a327b4388aa59cc43f20b112924bf0d5f501586681f11b7b9da69c3b88434a78bfc710aaf79876d35806c5b744422861bfa66edc5f3bdb9947d0a11f9d6c659e6eb840b312fca8a466daaa309350644aa2a33b54632aff2c3a9b47a42ac2cf9b4e38ba2d8fe34fbf3c66660d4ed8978a3bebb639aa4c747c8e48534b40332af3966e0bd74e6ffd3283586c4cc87cc5d5196b6bb902741a381ff7f9cc9e39116fd5cdc97b", 0xe0, r8) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCRMFF(r10, 0x40044581, &(0x7f0000000040)=0x8) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.104548339s ago: executing program 0 (id=412): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000000)=0x1330000, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r3) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000b40)={&(0x7f0000000400), 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)={0x12c, r7, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1e}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x26}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x2e}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0xa}, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r8 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r8, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)="1ab3c04a5720fda98676fe3d04", 0xd}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xe8}}], 0x2, 0x4000010) r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="640000000f0603e4e6f128968ede001e1e86e6e0800300000000000000000a000404050001000700000006000b000100000006000b000400000006000b000000ffffffff01000700000006000b0004040000050001000700000006000b00ffff0000050001000700000005000100070000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$nl_generic(r3, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0x34, 0x10, 0x20, 0x70bd26, 0x25dfdbff, {0x9}, [@typed={0x14, 0x25, 0x0, 0x0, @ipv6=@loopback}, @typed={0x4, 0xd9}, @generic, @typed={0x8, 0x96, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8003}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xffffff01}}, './file0\x00'}) ioctl$EVIOCGREP(r10, 0x80084503, &(0x7f0000000500)=""/175) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000100)={@initdev}, &(0x7f0000000140)=0x14) ioctl$sock_inet_SIOCDARP(r9, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) 1.104550567s ago: executing program 2 (id=413): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x8000) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x56) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x7ffffffe, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@getnexthop={0x3c, 0x6a, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) write(r0, &(0x7f0000000000)="2d000000010001", 0x7) 828.378005ms ago: executing program 0 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x0, &(0x7f0000000340)="14fd54ab72df87e6256c000000000c4f", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 230.301001ms ago: executing program 4 (id=415): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)={0x0, @reserved}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x708, 0x6, '\x00', &(0x7f0000000100)=0x8}) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000180)="e71bd55f0f129ba714c36e93", 0xc}, {&(0x7f00000001c0)="2891246ecb88dbc1e5055f10ec8d0ba338155616a12248611ea0692a2bb0389e0f7718cb270505338d97029d108be7acfbb71f6199f927e40616570ddb5b80ee7ff63a7cdeb52a899bfa00f19fd10b10ec512ac4b6fec3723e0e2e3f991ea3a40caf4614bbeb293da5590332ece4ee9aadb9cd96a5c83f142dc67e9673a9c5a4097633b2cbef63496baef6e4dd4963d4", 0x90}], 0x2, 0x1) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000002c0)={0x6, 0x1, 0x1}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000300)=0xc, 0x4) r2 = dup2(r1, r1) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000090) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xb8, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x34}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffff001}]}, 0xb8}}, 0x4084) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) timer_create(0x0, &(0x7f00000006c0)={0x0, 0x33, 0x1, @tid=r4}, &(0x7f0000000700)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2d) flock(r0, 0x8) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf1a, 0xa}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000009c0)=0xfffffffe, 0x4) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000a00)={0x3}) socket(0x1a, 0x4, 0xcae4) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000f00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a80)={0x440, 0x3f4, 0x20, 0x70bd2a, 0x25dfdbfe, {0x5, 0x0, 0x2c, [0x8, 0x8001, 0x5, 0x8, 0xeb0f, 0x5, 0x7, 0xe8, 0xfc6, 0x6, 0xc, 0x2, 0x9, 0x3, 0x8, 0x8, 0xca8, 0x5, 0xff, 0x2, 0x9, 0xd, 0x3, 0xfffffffd, 0x101, 0x6, 0x7, 0x62b6, 0x194, 0x4, 0x6, 0x5, 0xffd, 0xe, 0x0, 0x9, 0x7, 0x8, 0x3, 0x3, 0x101, 0x5, 0x1, 0x0, 0x4, 0xbff1, 0x7, 0x0, 0x7288, 0x5, 0x0, 0x4, 0x743, 0xad4, 0x1, 0x80, 0x40, 0x1000, 0x4, 0x7, 0xffff, 0x3e, 0x1ff, 0x2], [0xffffffff, 0x80, 0x3, 0x1, 0x7, 0x6, 0x9, 0xd5, 0x3, 0x3, 0x0, 0x3, 0x0, 0x2, 0x0, 0xfffffc00, 0xfffffff7, 0xa, 0x0, 0x755, 0x0, 0x26, 0x8, 0x200, 0x80, 0x4, 0x2e7, 0x5, 0xa, 0x9, 0xfffffffe, 0x40, 0x7, 0x9, 0x4, 0x40, 0xffff, 0x9, 0x3, 0x9, 0x7, 0x200, 0x5, 0x3cf, 0x8, 0x2, 0x4, 0xa0f2, 0x401, 0x7, 0x0, 0x880f, 0xa84, 0x0, 0x7, 0x7, 0x7, 0x9, 0xf, 0x7, 0x68, 0x7fffffff, 0x200], [0x8, 0x45, 0x4, 0x3ff, 0x1, 0x4, 0x6, 0x80000000, 0x2, 0x3, 0x0, 0x3, 0x3, 0x3, 0x7fffffff, 0x3, 0x3, 0x5a, 0x8, 0xf9, 0x2133, 0xf3, 0x7, 0xf3, 0xb, 0x7, 0x4, 0x6, 0xc, 0x80000001, 0x8, 0xa, 0x0, 0x2589, 0x6, 0x8, 0x1, 0x4, 0x6, 0x0, 0xd491, 0x0, 0x5, 0x2, 0x6, 0xfffffe00, 0xb, 0x7ff, 0x8, 0x5, 0x3, 0x2, 0xd7, 0x10000, 0xd, 0x4, 0x7, 0x7, 0x6, 0xff, 0x1ff, 0x40, 0x2, 0x607aa381], [0x6, 0x10, 0xf, 0x10000, 0xe77d, 0x7, 0x2a6b, 0xf77, 0xfff, 0x1, 0x2, 0x9, 0x9, 0x400, 0x3, 0x5, 0x0, 0x1, 0x4, 0x0, 0x1000, 0xc06, 0x1, 0x3, 0x8, 0x0, 0xc, 0x0, 0x3, 0x260, 0x5, 0xf96, 0x5, 0x6bb, 0xca, 0x4, 0x3, 0x8, 0x6d, 0xa0a, 0x390d, 0x0, 0x6, 0xffff, 0x5, 0xfffffff8, 0x0, 0x4, 0x2, 0x1ff, 0x9, 0x3856, 0x6, 0xdc, 0x5, 0x6, 0x6, 0xfffffffc, 0x101, 0x7, 0x3, 0x1, 0x4, 0x7], 0x1e, [')@)),.-}^!\x00', '/\\.{+-[.[*[#\'+#\x00', '\x00', '-\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x24040090}, 0x448c4) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000f40)) truncate(&(0x7f0000000f80)='./file0\x00', 0x7fffffffffffffff) write$binfmt_misc(r2, &(0x7f0000000fc0)="df7c31d342abf9eec2e6eba43bcb058075371c7f482f0347979bb72210819f650c5a75cc7a075d3c584aeea288f1b58b061737889991843ac759d9eb31919a2a5cf2d5f1d4d6dc68468dc910b2a2c816f55a78653901826e92249b67b3d777be0df968af5da43f1c41fc2b66eaa7e114daf56535065bd9b2c730", 0x7a) 215.940901ms ago: executing program 2 (id=416): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xf8) bind$bt_sco(r0, &(0x7f0000000100), 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0xffffffffffffffff, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731adaff00000000bfa10000000039fcdff4defc3a4c3ad4cb8d0a00000007010000f8fffffdb7020000080000003996008d60448e8fd075f505a5f3b11072a66820b23eab26e7fd1b41c287b1049b75f5da77ce19"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, 0x0, 0x1) clock_gettime(0x0, &(0x7f0000000180)) 17.283962ms ago: executing program 4 (id=417): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0xc}, {0x6, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) write(r1, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x101080) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 0s ago: executing program 2 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="38000000180001000000000000000000020080000003c809001b0000060015000400000014001680100008800c00028008000180"], 0x38}}, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): 6015] RAX: ffffffffffffffda RBX: 00007f2d84545fa0 RCX: 00007f2d842ccdd9 [ 131.193133][ T6015] RDX: 0000000000000001 RSI: 0000200000000740 RDI: 0000000000000005 [ 131.193146][ T6015] RBP: 00007f2d8251e090 R08: 00000000fffffffd R09: 0000000000000000 [ 131.193159][ T6015] R10: 00000000000000d9 R11: 0000000000000246 R12: 0000000000000001 [ 131.193171][ T6015] R13: 00007f2d84546038 R14: 00007f2d84545fa0 R15: 00007fff51ac1e18 [ 131.193207][ T6015] [ 131.196472][ T6001] ip6erspan0: entered promiscuous mode [ 133.036681][ T5842] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.163219][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.201484][ T5842] usb 2-1: Using ep0 maxpacket: 32 [ 133.229449][ T5842] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.229496][ T5842] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.275275][ T5842] usb 2-1: New USB device found, idVendor=0742, idProduct=2626, bcdDevice= 0.00 [ 133.275308][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 133.275329][ T5842] usb 2-1: Product: syz [ 133.333908][ T5842] usb 2-1: config 0 descriptor?? [ 134.180326][ T5842] usbhid 2-1:0.0: can't add hid device: -71 [ 134.180490][ T5842] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 134.337543][ T5842] usb 2-1: USB disconnect, device number 9 [ 134.547453][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.547564][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.919500][ T5842] usb 5-1: USB disconnect, device number 5 [ 135.318173][ T5613] Bluetooth: hci2: unexpected event 0x04 length: 245 > 10 [ 135.318280][ T5613] Bluetooth: hci2: connection err: -111 [ 135.342613][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.435424][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.446130][ T5585] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.620590][ T5585] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 135.620611][ T5585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.620623][ T5585] usb 2-1: Product: syz [ 135.620631][ T5585] usb 2-1: Manufacturer: syz [ 135.620639][ T5585] usb 2-1: SerialNumber: syz [ 135.691255][ T6043] FAULT_INJECTION: forcing a failure. [ 135.691255][ T6043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.691296][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.2.69 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.691320][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.691331][ T6043] Call Trace: [ 135.691339][ T6043] [ 135.691348][ T6043] dump_stack_lvl+0xe8/0x150 [ 135.691381][ T6043] should_fail_ex+0x46b/0x600 [ 135.691421][ T6043] _copy_to_user+0x31/0xb0 [ 135.691458][ T6043] simple_read_from_buffer+0xe1/0x170 [ 135.691496][ T6043] proc_fail_nth_read+0x1be/0x230 [ 135.691529][ T6043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.691562][ T6043] ? rw_verify_area+0x2ac/0x4e0 [ 135.691584][ T6043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.691617][ T6043] vfs_read+0x212/0xa80 [ 135.691649][ T6043] ? __pfx_vfs_read+0x10/0x10 [ 135.691675][ T6043] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 135.691704][ T6043] ? kmem_cache_free+0x187/0x6c0 [ 135.691728][ T6043] ? do_sys_openat2+0x14c/0x200 [ 135.691773][ T6043] ksys_read+0x156/0x270 [ 135.691800][ T6043] ? __pfx_ksys_read+0x10/0x10 [ 135.691832][ T6043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.691854][ T6043] do_syscall_64+0x15f/0xf80 [ 135.691874][ T6043] ? trace_irq_disable+0x3b/0x140 [ 135.691899][ T6043] ? clear_bhb_loop+0x40/0x90 [ 135.691924][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.691945][ T6043] RIP: 0033:0x7f2d8428d60e [ 135.691965][ T6043] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.691982][ T6043] RSP: 002b:00007f2d8251dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.692006][ T6043] RAX: ffffffffffffffda RBX: 00007f2d8251e6c0 RCX: 00007f2d8428d60e [ 135.692021][ T6043] RDX: 000000000000000f RSI: 00007f2d8251e0a0 RDI: 0000000000000005 [ 135.692034][ T6043] RBP: 00007f2d8251e090 R08: 0000000000000000 R09: 0000000000000000 [ 135.692046][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.692057][ T6043] R13: 00007f2d84546038 R14: 00007f2d84545fa0 R15: 00007fff51ac1e18 [ 135.692090][ T6043] [ 136.135935][ T5785] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.324696][ T5785] usb 5-1: Using ep0 maxpacket: 32 [ 136.334066][ T6047] vlan0: entered promiscuous mode [ 136.507414][ T5785] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 136.507511][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.554930][ T5785] usb 5-1: config 0 descriptor?? [ 136.605749][ T5785] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 136.781781][ T5785] gspca_vc032x: reg_r err -32 [ 136.781796][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781802][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781807][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781820][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781825][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781830][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781835][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781839][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781844][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781849][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781853][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781858][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781862][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781868][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781880][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781886][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781890][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781895][ T5785] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.781899][ T5785] gspca_vc032x: Unknown sensor... [ 136.781962][ T5785] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 136.792152][ T5585] rtl8150 2-1:1.0: couldn't reset the device [ 136.814662][ T5585] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 137.220677][ T6051] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 137.231011][ T5585] usb 2-1: USB disconnect, device number 10 [ 137.295331][ T5860] udevd[5860]: setting owner of /dev/bus/usb/002/010 to uid=0, gid=0 failed: No such file or directory [ 138.113669][ T6061] ======================================================= [ 138.113669][ T6061] WARNING: The mand mount option has been deprecated and [ 138.113669][ T6061] and is ignored by this kernel. Remove the mand [ 138.113669][ T6061] option from the mount to silence this warning. [ 138.113669][ T6061] ======================================================= [ 138.117041][ T6061] tmpfs: Bad value for 'huge' [ 138.716182][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.864476][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 138.873770][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 138.873802][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.873823][ T10] usb 2-1: Product: syz [ 138.873837][ T10] usb 2-1: Manufacturer: syz [ 138.873852][ T10] usb 2-1: SerialNumber: syz [ 139.136017][ T6070] overlayfs: failed to resolve './file1': -2 [ 139.704593][ T5891] usb 5-1: USB disconnect, device number 6 [ 139.813891][ T10] usb 2-1: config 0 descriptor?? [ 139.903500][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 140.481557][ T10] gspca_ov534_9: reg_w failed -110 [ 140.874500][ T10] gspca_ov534_9: Unknown sensor 0000 [ 140.874620][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 142.007065][ T6077] sctp: [Deprecated]: syz.0.78 (pid 6077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.007065][ T6077] Use struct sctp_sack_info instead [ 142.012905][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 142.282045][ T5613] Bluetooth: hci1: unexpected event 0x04 length: 245 > 10 [ 142.282093][ T5613] Bluetooth: hci1: connection err: -111 [ 142.336224][ T5891] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.487778][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 142.492308][ T5891] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.492345][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.495949][ T5891] usb 5-1: New USB device found, idVendor=0742, idProduct=2626, bcdDevice= 0.00 [ 142.495979][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 142.495997][ T5891] usb 5-1: Product: syz [ 142.523861][ T5891] usb 5-1: config 0 descriptor?? [ 142.739874][ T10] usb 2-1: USB disconnect, device number 11 [ 143.029553][ T5835] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 143.220881][ T5835] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 143.220912][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.220932][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.220986][ T5835] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.223839][ T5835] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.223868][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.223887][ T5835] usb 1-1: Product: syz [ 143.223901][ T5835] usb 1-1: Manufacturer: syz [ 143.395396][ T5835] cdc_wdm 1-1:1.0: skipping garbage [ 143.395436][ T5835] cdc_wdm 1-1:1.0: skipping garbage [ 143.401536][ T5835] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 143.401560][ T5835] cdc_wdm 1-1:1.0: Unknown control protocol [ 143.636659][ T5891] usbhid 5-1:0.0: can't add hid device: -71 [ 143.636796][ T5891] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 143.747034][ T5891] usb 5-1: USB disconnect, device number 7 [ 143.906908][ T6097] FAULT_INJECTION: forcing a failure. [ 143.906908][ T6097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.906946][ T6097] CPU: 0 UID: 0 PID: 6097 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.906970][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.906982][ T6097] Call Trace: [ 143.906990][ T6097] [ 143.906999][ T6097] dump_stack_lvl+0xe8/0x150 [ 143.907031][ T6097] should_fail_ex+0x46b/0x600 [ 143.907069][ T6097] _copy_from_user+0x2d/0xb0 [ 143.907095][ T6097] __copy_msghdr+0x3c5/0x5b0 [ 143.907125][ T6097] ___sys_sendmsg+0x213/0x360 [ 143.907149][ T6097] ? __lock_acquire+0x6b5/0x2cf0 [ 143.907182][ T6097] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.907243][ T6097] ? __fget_files+0x2a/0x420 [ 143.907274][ T6097] ? __fget_files+0x3a6/0x420 [ 143.907322][ T6097] __x64_sys_sendmsg+0x1c3/0x2a0 [ 143.907351][ T6097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.907386][ T6097] ? __pfx_ksys_write+0x10/0x10 [ 143.907420][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.907443][ T6097] do_syscall_64+0x15f/0xf80 [ 143.907463][ T6097] ? trace_irq_disable+0x3b/0x140 [ 143.907496][ T6097] ? clear_bhb_loop+0x40/0x90 [ 143.907520][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.907541][ T6097] RIP: 0033:0x7f2d842ccdd9 [ 143.907561][ T6097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.907577][ T6097] RSP: 002b:00007f2d8251e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.907599][ T6097] RAX: ffffffffffffffda RBX: 00007f2d84545fa0 RCX: 00007f2d842ccdd9 [ 143.907614][ T6097] RDX: 0000000004004080 RSI: 0000200000000280 RDI: 0000000000000003 [ 143.907628][ T6097] RBP: 00007f2d8251e090 R08: 0000000000000000 R09: 0000000000000000 [ 143.907640][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.907652][ T6097] R13: 00007f2d84546038 R14: 00007f2d84545fa0 R15: 00007fff51ac1e18 [ 143.907687][ T6097] [ 144.958555][ T6114] overlayfs: failed to resolve './file1': -2 [ 145.806081][ T5835] usb 1-1: USB disconnect, device number 4 [ 148.994685][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.014543][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 150.037318][ T31] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 150.037349][ T31] usb 5-1: config 0 has no interface number 0 [ 150.037399][ T31] usb 5-1: config 0 interface 184 has no altsetting 0 [ 150.072772][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 150.072804][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.072825][ T31] usb 5-1: Product: syz [ 150.072838][ T31] usb 5-1: Manufacturer: syz [ 150.072852][ T31] usb 5-1: SerialNumber: syz [ 150.137354][ T31] usb 5-1: config 0 descriptor?? [ 150.810981][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 150.811008][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 151.251920][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 151.251953][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 151.251968][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 151.287651][ T31] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 151.362871][ T31] usb 5-1: USB disconnect, device number 8 [ 151.696128][ T5891] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.862923][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 151.862942][ T37] audit: type=1326 audit(1777402782.613:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.3.101" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f3fcdd9 code=0x0 [ 152.173877][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 152.184783][ T5891] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.184821][ T5891] usb 1-1: config 0 interface 0 has no altsetting 0 [ 152.187063][ T5891] usb 1-1: New USB device found, idVendor=0742, idProduct=2626, bcdDevice= 0.00 [ 152.187093][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 152.187113][ T5891] usb 1-1: Product: syz [ 154.004455][ T5891] usb 1-1: config 0 descriptor?? [ 156.008088][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 156.048057][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 156.099586][ T5891] usb 1-1: USB disconnect, device number 5 [ 156.977660][ T6190] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 158.130525][ T6197] FAULT_INJECTION: forcing a failure. [ 158.130525][ T6197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.130559][ T6197] CPU: 1 UID: 0 PID: 6197 Comm: syz.4.114 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.130583][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.130594][ T6197] Call Trace: [ 158.130602][ T6197] [ 158.130611][ T6197] dump_stack_lvl+0xe8/0x150 [ 158.130642][ T6197] should_fail_ex+0x46b/0x600 [ 158.130681][ T6197] _copy_from_user+0x2d/0xb0 [ 158.130706][ T6197] get_user_ifreq+0x6b/0x180 [ 158.130737][ T6197] sock_ioctl+0x707/0x7f0 [ 158.130767][ T6197] ? __pfx_sock_ioctl+0x10/0x10 [ 158.130796][ T6197] ? __fget_files+0x3a6/0x420 [ 158.130826][ T6197] ? __fget_files+0x2a/0x420 [ 158.130860][ T6197] ? bpf_lsm_file_ioctl+0x9/0x20 [ 158.130884][ T6197] ? __pfx_sock_ioctl+0x10/0x10 [ 158.130910][ T6197] __se_sys_ioctl+0xff/0x170 [ 158.130934][ T6197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.130963][ T6197] do_syscall_64+0x15f/0xf80 [ 158.130982][ T6197] ? trace_irq_disable+0x3b/0x140 [ 158.131006][ T6197] ? clear_bhb_loop+0x40/0x90 [ 158.131032][ T6197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.131053][ T6197] RIP: 0033:0x7f5e5ea5cdd9 [ 158.131072][ T6197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.131109][ T6197] RSP: 002b:00007f5e5ccb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.131133][ T6197] RAX: ffffffffffffffda RBX: 00007f5e5ecd5fa0 RCX: 00007f5e5ea5cdd9 [ 158.131157][ T6197] RDX: 0000200000000340 RSI: 00000000000089f0 RDI: 0000000000000003 [ 158.131170][ T6197] RBP: 00007f5e5ccb6090 R08: 0000000000000000 R09: 0000000000000000 [ 158.131182][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.131194][ T6197] R13: 00007f5e5ecd6038 R14: 00007f5e5ecd5fa0 R15: 00007ffc2bfbe6d8 [ 158.131228][ T6197] [ 158.158909][ T6198] FAULT_INJECTION: forcing a failure. [ 158.158909][ T6198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.158940][ T6198] CPU: 0 UID: 0 PID: 6198 Comm: syz.1.111 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.158960][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.158970][ T6198] Call Trace: [ 158.158976][ T6198] [ 158.158984][ T6198] dump_stack_lvl+0xe8/0x150 [ 158.159011][ T6198] should_fail_ex+0x46b/0x600 [ 158.159044][ T6198] _copy_from_user+0x2d/0xb0 [ 158.159065][ T6198] bpf_test_init+0xd8/0x150 [ 158.159089][ T6198] bpf_prog_test_run_xdp+0x529/0x1160 [ 158.159124][ T6198] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 158.159150][ T6198] ? __fget_files+0x2a/0x420 [ 158.159182][ T6198] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 158.159203][ T6198] bpf_prog_test_run+0x2cd/0x340 [ 158.159230][ T6198] __sys_bpf+0x643/0x950 [ 158.159254][ T6198] ? __pfx___sys_bpf+0x10/0x10 [ 158.159273][ T6198] ? rt_mutex_slowunlock+0x1cb/0x300 [ 158.159312][ T6198] ? ksys_write+0x248/0x270 [ 158.159335][ T6198] ? __pfx_ksys_write+0x10/0x10 [ 158.159360][ T6198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.159380][ T6198] __x64_sys_bpf+0x7c/0x90 [ 158.159409][ T6198] do_syscall_64+0x15f/0xf80 [ 158.159426][ T6198] ? trace_irq_disable+0x3b/0x140 [ 158.159447][ T6198] ? clear_bhb_loop+0x40/0x90 [ 158.159470][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.159487][ T6198] RIP: 0033:0x7f8c9107cdd9 [ 158.159505][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.159519][ T6198] RSP: 002b:00007f8c8f2d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.159539][ T6198] RAX: ffffffffffffffda RBX: 00007f8c912f5fa0 RCX: 00007f8c9107cdd9 [ 158.159552][ T6198] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 158.159564][ T6198] RBP: 00007f8c8f2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 158.159575][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.159586][ T6198] R13: 00007f8c912f6038 R14: 00007f8c912f5fa0 R15: 00007fffc0944718 [ 158.159616][ T6198] [ 158.572267][ T6207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.077074][ T5842] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 159.233507][ T6221] syz.3.123 uses obsolete (PF_INET,SOCK_PACKET) [ 159.254494][ T5842] usb 5-1: Using ep0 maxpacket: 32 [ 159.287090][ T5842] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.287127][ T5842] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.288872][ T5842] usb 5-1: New USB device found, idVendor=0742, idProduct=2626, bcdDevice= 0.00 [ 159.288900][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 159.288920][ T5842] usb 5-1: Product: syz [ 159.514296][ T5842] usb 5-1: config 0 descriptor?? [ 160.233450][ T6218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.616343][ T5842] hid-generic 0003:0742:2626.0001: unknown main item tag 0x4 [ 161.616391][ T5842] hid-generic 0003:0742:2626.0001: collection stack underflow [ 161.616415][ T5842] hid-generic 0003:0742:2626.0001: item 0 4 0 12 parsing failed [ 161.645164][ T5842] hid-generic 0003:0742:2626.0001: probe with driver hid-generic failed with error -22 [ 161.818852][ T5842] usb 5-1: USB disconnect, device number 9 [ 162.659322][ T6254] netlink: 'syz.2.128': attribute type 5 has an invalid length. [ 162.890380][ T6259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.020082][ T6254] ip6erspan0: entered promiscuous mode [ 163.090095][ T6258] netlink: 'syz.2.128': attribute type 11 has an invalid length. [ 163.226052][ T5613] Bluetooth: hci0: unexpected event 0x04 length: 245 > 10 [ 164.181260][ T6273] netlink: 'syz.0.136': attribute type 21 has an invalid length. [ 164.894161][ T6300] fuse: Bad value for 'user_id' [ 164.894182][ T6300] fuse: Bad value for 'user_id' [ 165.235067][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.941084][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 165.962698][ T6308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.774712][ T6325] FAULT_INJECTION: forcing a failure. [ 167.774712][ T6325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.774748][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.4.151 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 167.774771][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.774782][ T6325] Call Trace: [ 167.774789][ T6325] [ 167.774798][ T6325] dump_stack_lvl+0xe8/0x150 [ 167.774829][ T6325] should_fail_ex+0x46b/0x600 [ 167.774868][ T6325] _copy_from_iter+0x1d3/0x1670 [ 167.774909][ T6325] ? trace_kmem_cache_alloc+0x29/0xe0 [ 167.774931][ T6325] ? __alloc_skb+0x27d/0x7d0 [ 167.774953][ T6325] ? __pfx__copy_from_iter+0x10/0x10 [ 167.774982][ T6325] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 167.775004][ T6325] ? __alloc_skb+0x27d/0x7d0 [ 167.775031][ T6325] ? netlink_sendmsg+0x650/0xb40 [ 167.775052][ T6325] ? skb_put+0x11b/0x210 [ 167.775078][ T6325] netlink_sendmsg+0x6c0/0xb40 [ 167.775109][ T6325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.775134][ T6325] ? unwind_get_return_address+0x4d/0x90 [ 167.775165][ T6325] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.775197][ T6325] ____sys_sendmsg+0x94c/0x9c0 [ 167.775229][ T6325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.775264][ T6325] ? import_iovec+0x73/0xa0 [ 167.775292][ T6325] ___sys_sendmsg+0x2a5/0x360 [ 167.775315][ T6325] ? __lock_acquire+0x6b5/0x2cf0 [ 167.775357][ T6325] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.775421][ T6325] ? __fget_files+0x2a/0x420 [ 167.775450][ T6325] ? __fget_files+0x3a6/0x420 [ 167.775493][ T6325] __x64_sys_sendmsg+0x1c3/0x2a0 [ 167.775521][ T6325] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.775558][ T6325] ? __pfx_ksys_write+0x10/0x10 [ 167.775591][ T6325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.775615][ T6325] do_syscall_64+0x15f/0xf80 [ 167.775634][ T6325] ? trace_irq_disable+0x3b/0x140 [ 167.775659][ T6325] ? clear_bhb_loop+0x40/0x90 [ 167.775685][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.775706][ T6325] RIP: 0033:0x7f5e5ea5cdd9 [ 167.775726][ T6325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.775743][ T6325] RSP: 002b:00007f5e5ccb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.775766][ T6325] RAX: ffffffffffffffda RBX: 00007f5e5ecd5fa0 RCX: 00007f5e5ea5cdd9 [ 167.775780][ T6325] RDX: 0000000020000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 167.775792][ T6325] RBP: 00007f5e5ccb6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.775804][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.775816][ T6325] R13: 00007f5e5ecd6038 R14: 00007f5e5ecd5fa0 R15: 00007ffc2bfbe6d8 [ 167.775849][ T6325] [ 168.223260][ T6340] netlink: 'syz.0.153': attribute type 5 has an invalid length. [ 168.449194][ T6340] ip6erspan0: entered promiscuous mode [ 168.809642][ T6336] netlink: 'syz.0.153': attribute type 11 has an invalid length. [ 169.082266][ T6352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.115549][ T6348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.854575][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 172.011221][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 172.011255][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.011275][ T10] usb 3-1: Product: syz [ 172.011289][ T10] usb 3-1: Manufacturer: syz [ 172.011303][ T10] usb 3-1: SerialNumber: syz [ 172.817704][ T10] rtl8150 3-1:1.0: couldn't reset the device [ 172.818118][ T10] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 172.874946][ T10] usb 3-1: USB disconnect, device number 3 [ 173.752855][ T6387] netlink: 92 bytes leftover after parsing attributes in process `syz.1.166'. [ 173.752886][ T6387] netlink: 92 bytes leftover after parsing attributes in process `syz.1.166'. [ 173.804208][ T6400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.825576][ T6407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.857835][ T6408] netlink: 'syz.0.172': attribute type 1 has an invalid length. [ 175.857881][ T6408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.934152][ T6409] netlink: 'syz.0.172': attribute type 149 has an invalid length. [ 175.934178][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 175.972351][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.172'. [ 175.972513][ T6409] block nbd0: not configured, cannot reconfigure [ 176.359991][ T6415] FAULT_INJECTION: forcing a failure. [ 176.359991][ T6415] name failslab, interval 1, probability 0, space 0, times 0 [ 176.360026][ T6415] CPU: 1 UID: 0 PID: 6415 Comm: syz.1.176 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.360049][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.360059][ T6415] Call Trace: [ 176.360068][ T6415] [ 176.360077][ T6415] dump_stack_lvl+0xe8/0x150 [ 176.360109][ T6415] should_fail_ex+0x46b/0x600 [ 176.360152][ T6415] should_failslab+0xa8/0x100 [ 176.360181][ T6415] kmem_cache_alloc_noprof+0x87/0x680 [ 176.360205][ T6415] ? __inet_hash_connect+0x1657/0x2630 [ 176.360244][ T6415] __inet_hash_connect+0x1657/0x2630 [ 176.360304][ T6415] ? __inet_hash_connect+0x60d/0x2630 [ 176.360347][ T6415] ? __pfx___inet_hash_connect+0x10/0x10 [ 176.360385][ T6415] ? inet_hash_connect+0xf1/0x380 [ 176.360423][ T6415] tcp_v4_connect+0xd5f/0x19b0 [ 176.360450][ T6415] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.360512][ T6415] ? __pfx_tcp_v4_connect+0x10/0x10 [ 176.360538][ T6415] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 176.360574][ T6415] mptcp_connect+0x56b/0x830 [ 176.360612][ T6415] __inet_stream_connect+0x25a/0xdd0 [ 176.360654][ T6415] ? __pfx___inet_stream_connect+0x10/0x10 [ 176.360674][ T6415] ? __local_bh_enable+0x1e1/0x2f0 [ 176.360703][ T6415] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 176.360726][ T6415] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.360766][ T6415] inet_stream_connect+0x66/0xa0 [ 176.360794][ T6415] __sys_connect+0x315/0x450 [ 176.360821][ T6415] ? __pfx___sys_connect+0x10/0x10 [ 176.360860][ T6415] ? __pfx_ksys_write+0x10/0x10 [ 176.360891][ T6415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.360915][ T6415] __x64_sys_connect+0x7a/0x90 [ 176.360940][ T6415] do_syscall_64+0x15f/0xf80 [ 176.360959][ T6415] ? trace_irq_disable+0x3b/0x140 [ 176.360983][ T6415] ? clear_bhb_loop+0x40/0x90 [ 176.361009][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.361028][ T6415] RIP: 0033:0x7f8c9107cdd9 [ 176.361048][ T6415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.361064][ T6415] RSP: 002b:00007f8c8f2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 176.361087][ T6415] RAX: ffffffffffffffda RBX: 00007f8c912f5fa0 RCX: 00007f8c9107cdd9 [ 176.361102][ T6415] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 176.361115][ T6415] RBP: 00007f8c8f2d6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.361128][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.361140][ T6415] R13: 00007f8c912f6038 R14: 00007f8c912f5fa0 R15: 00007fffc0944718 [ 176.361179][ T6415] [ 176.901357][ T6427] FAULT_INJECTION: forcing a failure. [ 176.901357][ T6427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.901405][ T6427] CPU: 0 UID: 0 PID: 6427 Comm: syz.0.181 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.901429][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.901441][ T6427] Call Trace: [ 176.901449][ T6427] [ 176.901458][ T6427] dump_stack_lvl+0xe8/0x150 [ 176.901488][ T6427] should_fail_ex+0x46b/0x600 [ 176.901533][ T6427] _copy_to_user+0x31/0xb0 [ 176.901560][ T6427] simple_read_from_buffer+0xe1/0x170 [ 176.901605][ T6427] proc_fail_nth_read+0x1be/0x230 [ 176.901639][ T6427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.901671][ T6427] ? rw_verify_area+0x2ac/0x4e0 [ 176.901693][ T6427] ? __fget_files+0x2a/0x420 [ 176.901722][ T6427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.901760][ T6427] vfs_read+0x212/0xa80 [ 176.901794][ T6427] ? __pfx_vfs_read+0x10/0x10 [ 176.901818][ T6427] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 176.901852][ T6427] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.901884][ T6427] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 176.901916][ T6427] ? mutex_lock_nested+0x152/0x1d0 [ 176.901941][ T6427] ? fdget_pos+0x252/0x320 [ 176.901970][ T6427] ksys_read+0x156/0x270 [ 176.901997][ T6427] ? __pfx_ksys_read+0x10/0x10 [ 176.902030][ T6427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.902053][ T6427] do_syscall_64+0x15f/0xf80 [ 176.902073][ T6427] ? trace_irq_disable+0x3b/0x140 [ 176.902097][ T6427] ? clear_bhb_loop+0x40/0x90 [ 176.902124][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.902143][ T6427] RIP: 0033:0x7f61951ed60e [ 176.902160][ T6427] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.902175][ T6427] RSP: 002b:00007f6193485fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.902196][ T6427] RAX: ffffffffffffffda RBX: 00007f61934866c0 RCX: 00007f61951ed60e [ 176.902211][ T6427] RDX: 000000000000000f RSI: 00007f61934860a0 RDI: 0000000000000005 [ 176.902223][ T6427] RBP: 00007f6193486090 R08: 0000000000000000 R09: 0000000000000000 [ 176.902235][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.902246][ T6427] R13: 00007f61954a6038 R14: 00007f61954a5fa0 R15: 00007ffc5e332fe8 [ 176.902282][ T6427] [ 177.224494][ T5729] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 177.263022][ T5891] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 177.384542][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 177.424563][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 177.430557][ T5729] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 177.430591][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.430611][ T5729] usb 4-1: Product: syz [ 177.430625][ T5729] usb 4-1: Manufacturer: syz [ 177.430639][ T5729] usb 4-1: SerialNumber: syz [ 177.452464][ T5891] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 177.452495][ T5891] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.452514][ T5891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 177.452567][ T5891] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.459041][ T5891] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 177.459069][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 177.459096][ T5891] usb 5-1: Product: syz [ 177.459108][ T5891] usb 5-1: Manufacturer: syz [ 177.586130][ T5729] usb 4-1: config 0 descriptor?? [ 177.609736][ T5729] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 177.649003][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 177.665220][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 177.665248][ T10] usb 3-1: config 0 has no interface number 0 [ 177.691098][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 177.703589][ T5891] cdc_wdm 5-1:1.0: skipping garbage [ 177.703611][ T5891] cdc_wdm 5-1:1.0: skipping garbage [ 177.730915][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 177.731011][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.731044][ T10] usb 3-1: Product: syz [ 177.731058][ T10] usb 3-1: Manufacturer: syz [ 177.731073][ T10] usb 3-1: SerialNumber: syz [ 177.790617][ T5891] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 177.790640][ T5891] cdc_wdm 5-1:1.0: Unknown control protocol [ 177.810064][ T10] usb 3-1: config 0 descriptor?? [ 177.885786][ T6424] Zero length message leads to an empty skb [ 178.126706][ T5729] gspca_ov534_9: reg_w failed -110 [ 178.524612][ T5729] gspca_ov534_9: Unknown sensor 0000 [ 178.524811][ T5729] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 178.596411][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 178.596447][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 179.592043][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 179.592078][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 179.592097][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 179.592115][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 179.592463][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 179.606066][ T10] usb 3-1: USB disconnect, device number 4 [ 179.761305][ T6451] netlink: 'syz.0.185': attribute type 5 has an invalid length. [ 179.763602][ T6451] netlink: 'syz.0.185': attribute type 11 has an invalid length. [ 179.850653][ T6439] netlink: 4120 bytes leftover after parsing attributes in process `syz.0.185'. [ 180.178806][ T6453] process 'syz.0.186' launched './file0' with NULL argv: empty string added [ 180.790434][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.330200][ T10] usb 5-1: USB disconnect, device number 10 [ 181.337111][ T5729] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 181.358811][ T5785] usb 4-1: USB disconnect, device number 3 [ 181.508794][ T6467] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 181.508840][ T6467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.531281][ T5729] usb 1-1: Using ep0 maxpacket: 16 [ 181.541796][ T5729] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.541840][ T5729] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 181.541926][ T5729] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.597338][ T6470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.630654][ T5729] usb 1-1: string descriptor 0 read error: -71 [ 181.630830][ T5729] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.630855][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.688733][ T6475] capability: warning: `syz.4.193' uses 32-bit capabilities (legacy support in use) [ 181.706327][ T5729] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 181.706363][ T5729] usb 1-1: no configuration chosen from 1 choice [ 181.728307][ T6467] netlink: 'syz.2.191': attribute type 149 has an invalid length. [ 181.728332][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 181.761023][ T5729] usb 1-1: USB disconnect, device number 6 [ 181.761996][ T6467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 181.762026][ T6467] block nbd0: not configured, cannot reconfigure [ 181.939620][ T6475] mmap: syz.4.193 (6475) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.150733][ T6480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.591123][ T6488] netlink: 'syz.4.196': attribute type 5 has an invalid length. [ 182.614597][ T5891] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 182.649633][ T6485] netlink: 'syz.4.196': attribute type 11 has an invalid length. [ 182.778384][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 182.780265][ T6488] ip6erspan0: entered promiscuous mode [ 182.822367][ T5891] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 182.822399][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.822416][ T5891] usb 3-1: Product: syz [ 182.822429][ T5891] usb 3-1: Manufacturer: syz [ 182.822442][ T5891] usb 3-1: SerialNumber: syz [ 182.842324][ T5891] usb 3-1: config 0 descriptor?? [ 182.915802][ T5891] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 183.029526][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 183.370579][ T6502] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 183.404495][ T5729] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.554471][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 183.576271][ T5729] usb 1-1: config 129 has an invalid interface number: 148 but max is 0 [ 183.576302][ T5729] usb 1-1: config 129 has no interface number 0 [ 183.576335][ T5729] usb 1-1: config 129 interface 148 has no altsetting 0 [ 183.581582][ T5729] usb 1-1: New USB device found, idVendor=257a, idProduct=260a, bcdDevice=d4.16 [ 183.581615][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.581634][ T5729] usb 1-1: Product: ࠌ [ 183.581649][ T5729] usb 1-1: Manufacturer: ᰊ [ 183.581663][ T5729] usb 1-1: SerialNumber: ࠉ [ 184.114692][ T5842] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 184.117056][ T5729] option 1-1:129.148: GSM modem (1-port) converter detected [ 184.220753][ T5729] usb 1-1: USB disconnect, device number 7 [ 184.240056][ T5729] option 1-1:129.148: device disconnected [ 184.317752][ T5842] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.317783][ T5842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.317802][ T5842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.317849][ T5842] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.321283][ T5842] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.321314][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.321334][ T5842] usb 4-1: Product: syz [ 184.321349][ T5842] usb 4-1: Manufacturer: syz [ 184.366481][ T5891] gspca_stk1135: reg_w 0x7 err -110 [ 184.367522][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 184.367535][ T5891] gspca_stk1135: Sensor write failed [ 184.367560][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 184.367568][ T5891] gspca_stk1135: Sensor write failed [ 184.367594][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 184.367602][ T5891] gspca_stk1135: Sensor read failed [ 184.367626][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 184.367634][ T5891] gspca_stk1135: Sensor read failed [ 184.367640][ T5891] gspca_stk1135: Detected sensor type unknown (0x0) [ 184.367670][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 184.367678][ T5891] gspca_stk1135: Sensor read failed [ 184.367702][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 184.367710][ T5891] gspca_stk1135: Sensor read failed [ 184.367734][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 184.367742][ T5891] gspca_stk1135: Sensor write failed [ 184.367766][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 184.367775][ T5891] gspca_stk1135: Sensor write failed [ 184.367858][ T5891] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 184.528321][ T5842] cdc_wdm 4-1:1.0: skipping garbage [ 184.528344][ T5842] cdc_wdm 4-1:1.0: skipping garbage [ 184.546145][ T5842] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 184.546169][ T5842] cdc_wdm 4-1:1.0: Unknown control protocol [ 184.574536][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 184.720137][ T5785] usb 3-1: USB disconnect, device number 5 [ 184.765183][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 184.771137][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.771165][ T10] usb 2-1: config 0 has no interfaces? [ 184.832591][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 184.832624][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.832644][ T10] usb 2-1: Product: syz [ 184.832657][ T10] usb 2-1: Manufacturer: syz [ 184.832670][ T10] usb 2-1: SerialNumber: syz [ 184.884011][ T10] usb 2-1: config 0 descriptor?? [ 185.643264][ T5785] usb 4-1: USB disconnect, device number 4 [ 185.993214][ T6542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.155399][ T5891] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 186.254805][ T5785] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 186.284976][ T5891] usb 1-1: device descriptor read/64, error -71 [ 186.424687][ T5785] usb 4-1: Using ep0 maxpacket: 32 [ 186.427693][ T5785] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.427716][ T5785] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.429336][ T5785] usb 4-1: New USB device found, idVendor=0742, idProduct=2626, bcdDevice= 0.00 [ 186.429367][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 186.429387][ T5785] usb 4-1: Product: syz [ 186.433723][ T5785] usb 4-1: config 0 descriptor?? [ 186.594666][ T5891] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 186.734701][ T5891] usb 1-1: device descriptor read/64, error -71 [ 186.892389][ T5891] usb usb1-port1: attempt power cycle [ 186.961296][ T5785] hid-generic 0003:0742:2626.0002: unknown main item tag 0x4 [ 186.961323][ T5785] hid-generic 0003:0742:2626.0002: collection stack underflow [ 186.961336][ T5785] hid-generic 0003:0742:2626.0002: item 0 4 0 12 parsing failed [ 186.961897][ T5785] hid-generic 0003:0742:2626.0002: probe with driver hid-generic failed with error -22 [ 187.152267][ T5785] usb 4-1: USB disconnect, device number 5 [ 187.188778][ T5714] usb 2-1: USB disconnect, device number 12 [ 187.296252][ T5891] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 187.315575][ T5891] usb 1-1: device descriptor read/8, error -71 [ 187.434284][ T6554] netlink: 'syz.2.212': attribute type 5 has an invalid length. [ 187.454876][ T6554] netlink: 'syz.2.212': attribute type 11 has an invalid length. [ 187.588707][ T5891] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 187.615033][ T5891] usb 1-1: device descriptor read/8, error -71 [ 187.726670][ T5891] usb usb1-port1: unable to enumerate USB device [ 188.267152][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 188.383750][ T6569] netlink: 'syz.2.218': attribute type 1 has an invalid length. [ 188.415410][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 188.417846][ T10] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 188.417875][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.534622][ T10] usb 5-1: config 0 descriptor?? [ 188.605758][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 188.849324][ T6569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.963545][ T6585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.367973][ T6573] bond1: (slave geneve2): making interface the new active one [ 189.487573][ T10] gspca_vc032x: reg_w err -110 [ 189.487594][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487607][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487616][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487626][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487633][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487642][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487650][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487657][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487666][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487674][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487683][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487692][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487701][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487709][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487716][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487724][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487732][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487741][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 189.487750][ T10] gspca_vc032x: Unknown sensor... [ 189.487833][ T10] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 189.532268][ T6573] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 189.788494][ T6597] netlink: 'syz.2.225': attribute type 2 has an invalid length. [ 189.798501][ T5729] usb 5-1: USB disconnect, device number 11 [ 190.239740][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 191.139814][ T6628] batman_adv: batadv0: Adding interface: dummy0 [ 191.139835][ T6628] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.139867][ T6628] batman_adv: batadv0: Interface activated: dummy0 [ 191.545311][ T5785] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 191.734759][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.734795][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.734834][ T5785] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 191.734873][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.851549][ T6628] batadv0: mtu less than device minimum [ 191.879109][ T5785] usb 1-1: config 0 descriptor?? [ 191.896536][ T6628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.915799][ T6628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.923027][ T6628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.958188][ T6628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.980660][ T6628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.005832][ T6628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.014014][ T6628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.045818][ T6628] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 194.276690][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 194.424496][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 194.427431][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.427456][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.431231][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 194.431259][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.431279][ T10] usb 2-1: Product: syz [ 194.431293][ T10] usb 2-1: Manufacturer: syz [ 194.431308][ T10] usb 2-1: SerialNumber: syz [ 194.512114][ T10] usb 2-1: config 0 descriptor?? [ 194.555256][ T5785] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 194.555298][ T5785] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 194.555322][ T5785] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 194.555346][ T5785] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 194.555368][ T5785] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 194.555411][ T5785] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 194.555435][ T5785] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 194.726520][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.726603][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.484756][ T5785] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 195.499644][ T5785] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 195.499700][ T5785] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 195.593645][ T6653] overlayfs: failed to resolve './file0': -2 [ 196.538768][ T5785] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 196.652158][ T5785] usb 1-1: USB disconnect, device number 12 [ 196.872899][ T6656] fido_id[6656]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 198.137807][ T10] usb 2-1: USB disconnect, device number 13 [ 198.169698][ T6664] net_ratelimit: 11 callbacks suppressed [ 198.169720][ T6664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.499134][ T6671] FAULT_INJECTION: forcing a failure. [ 198.499134][ T6671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.499171][ T6671] CPU: 0 UID: 0 PID: 6671 Comm: syz.4.246 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.499195][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.499207][ T6671] Call Trace: [ 198.499215][ T6671] [ 198.499224][ T6671] dump_stack_lvl+0xe8/0x150 [ 198.499264][ T6671] should_fail_ex+0x46b/0x600 [ 198.499304][ T6671] _copy_from_iter+0x1d3/0x1670 [ 198.499342][ T6671] ? rcu_is_watching+0x15/0xb0 [ 198.499379][ T6671] ? __pfx__copy_from_iter+0x10/0x10 [ 198.499409][ T6671] ? __kmalloc_node_track_caller_noprof+0x390/0x7e0 [ 198.499444][ T6671] ? netlink_sendmsg+0x650/0xb40 [ 198.499466][ T6671] ? skb_put+0x11b/0x210 [ 198.499493][ T6671] netlink_sendmsg+0x6c0/0xb40 [ 198.499526][ T6671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.499557][ T6671] ? unwind_get_return_address+0x4d/0x90 [ 198.499591][ T6671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.499617][ T6671] ____sys_sendmsg+0x94c/0x9c0 [ 198.499650][ T6671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.499684][ T6671] ? import_iovec+0x73/0xa0 [ 198.499711][ T6671] ___sys_sendmsg+0x2a5/0x360 [ 198.499735][ T6671] ? __lock_acquire+0x6b5/0x2cf0 [ 198.499767][ T6671] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.499833][ T6671] ? __fget_files+0x2a/0x420 [ 198.499864][ T6671] ? __fget_files+0x3a6/0x420 [ 198.499906][ T6671] __x64_sys_sendmsg+0x1c3/0x2a0 [ 198.499942][ T6671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.499979][ T6671] ? __pfx_ksys_write+0x10/0x10 [ 198.500010][ T6671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.500034][ T6671] do_syscall_64+0x15f/0xf80 [ 198.500055][ T6671] ? trace_irq_disable+0x3b/0x140 [ 198.500080][ T6671] ? clear_bhb_loop+0x40/0x90 [ 198.500106][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.500127][ T6671] RIP: 0033:0x7f5e5ea5cdd9 [ 198.500147][ T6671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.500164][ T6671] RSP: 002b:00007f5e5ccb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.500187][ T6671] RAX: ffffffffffffffda RBX: 00007f5e5ecd5fa0 RCX: 00007f5e5ea5cdd9 [ 198.500202][ T6671] RDX: 0000000000040040 RSI: 0000200000000880 RDI: 0000000000000003 [ 198.500215][ T6671] RBP: 00007f5e5ccb6090 R08: 0000000000000000 R09: 0000000000000000 [ 198.500227][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.500239][ T6671] R13: 00007f5e5ecd6038 R14: 00007f5e5ecd5fa0 R15: 00007ffc2bfbe6d8 [ 198.500282][ T6671] [ 200.514691][ T6692] capability: warning: `syz.4.251' uses deprecated v2 capabilities in a way that may be insecure [ 200.517114][ T6692] overlayfs: failed to resolve './file2': -2 [ 202.534506][ T5891] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 202.605442][ T6710] could not allocate digest TFM handle sha512-avx [ 202.735053][ T5891] usb 1-1: device descriptor read/64, error -71 [ 203.199629][ T5891] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 203.334579][ T5891] usb 1-1: device descriptor read/64, error -71 [ 203.456904][ T5891] usb usb1-port1: attempt power cycle [ 203.511895][ T6732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.851477][ T6739] fuse: Invalid rootmode [ 203.914828][ T5891] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 203.973954][ T5891] usb 1-1: device descriptor read/8, error -71 [ 204.103666][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 204.327575][ T6745] FAULT_INJECTION: forcing a failure. [ 204.327575][ T6745] name failslab, interval 1, probability 0, space 0, times 0 [ 204.327611][ T6745] CPU: 0 UID: 0 PID: 6745 Comm: syz.0.266 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.327634][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.327645][ T6745] Call Trace: [ 204.327653][ T6745] [ 204.327662][ T6745] dump_stack_lvl+0xe8/0x150 [ 204.327692][ T6745] should_fail_ex+0x46b/0x600 [ 204.327729][ T6745] should_failslab+0xa8/0x100 [ 204.327753][ T6745] __kmalloc_noprof+0xdf/0x7b0 [ 204.327776][ T6745] ? sock_kmalloc+0xd6/0x160 [ 204.327806][ T6745] sock_kmalloc+0xd6/0x160 [ 204.327832][ T6745] ipv6_sock_ac_join+0x316/0x880 [ 204.327860][ T6745] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 204.327883][ T6745] ? _copy_from_user+0x94/0xb0 [ 204.327910][ T6745] do_ipv6_setsockopt+0x203a/0x3150 [ 204.327933][ T6745] ? get_pid_task+0x20/0x1f0 [ 204.327974][ T6745] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 204.328000][ T6745] ? get_pid_task+0x20/0x1f0 [ 204.328023][ T6745] ? get_pid_task+0x20/0x1f0 [ 204.328059][ T6745] ? __lock_acquire+0x6b5/0x2cf0 [ 204.328091][ T6745] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.328130][ T6745] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 204.328166][ T6745] ? __fget_files+0x2a/0x420 [ 204.328216][ T6745] ? __fget_files+0x2a/0x420 [ 204.328249][ T6745] ipv6_setsockopt+0x59/0x170 [ 204.328276][ T6745] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 204.328307][ T6745] do_sock_setsockopt+0x17c/0x1b0 [ 204.328335][ T6745] __x64_sys_setsockopt+0x143/0x1b0 [ 204.328360][ T6745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.328383][ T6745] do_syscall_64+0x15f/0xf80 [ 204.328400][ T6745] ? trace_irq_disable+0x3b/0x140 [ 204.328422][ T6745] ? clear_bhb_loop+0x40/0x90 [ 204.328448][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.328468][ T6745] RIP: 0033:0x7f619522cdd9 [ 204.328487][ T6745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.328503][ T6745] RSP: 002b:00007f6193486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 204.328527][ T6745] RAX: ffffffffffffffda RBX: 00007f61954a5fa0 RCX: 00007f619522cdd9 [ 204.328541][ T6745] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 204.328553][ T6745] RBP: 00007f6193486090 R08: 0000000000000020 R09: 0000000000000000 [ 204.328565][ T6745] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 204.328577][ T6745] R13: 00007f61954a6038 R14: 00007f61954a5fa0 R15: 00007ffc5e332fe8 [ 204.328611][ T6745] [ 205.128270][ T5729] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 205.289743][ T5729] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.289774][ T5729] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 205.289795][ T5729] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.289849][ T5729] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12408, setting to 64 [ 205.341774][ T5729] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 205.341814][ T5729] usb 5-1: New USB device strings: Mfr=234, Product=3, SerialNumber=0 [ 205.341836][ T5729] usb 5-1: Product: syz [ 205.341850][ T5729] usb 5-1: Manufacturer: syz [ 205.400094][ T5729] cdc_wdm 5-1:1.0: skipping garbage [ 205.400117][ T5729] cdc_wdm 5-1:1.0: skipping garbage [ 205.400276][ T5729] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 205.602919][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 205.635793][ T5729] usb 5-1: USB disconnect, device number 12 [ 206.581060][ T37] audit: type=1326 audit(1777402837.313:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6771 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f3fcdd9 code=0x7ffc0000 [ 206.581118][ T37] audit: type=1326 audit(1777402837.333:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6771 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7fbe1f3fcdd9 code=0x7ffc0000 [ 206.581164][ T37] audit: type=1326 audit(1777402837.333:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6771 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f3fcdd9 code=0x7ffc0000 [ 206.581958][ T37] audit: type=1326 audit(1777402837.333:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6771 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbe1f3fcdd9 code=0x7ffc0000 [ 206.582026][ T37] audit: type=1326 audit(1777402837.333:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6771 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f3fcdd9 code=0x7ffc0000 [ 206.582409][ T37] audit: type=1326 audit(1777402837.333:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6771 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbe1f3fcdd9 code=0x7ffc0000 [ 206.741042][ T37] audit: type=1326 audit(1777402837.503:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6771 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f3fcdd9 code=0x7ffc0000 [ 206.741544][ T37] audit: type=1326 audit(1777402837.503:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6771 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1f3fcdd9 code=0x7ffc0000 [ 206.799185][ T37] audit: type=1326 audit(1777402837.553:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6771 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe1f3bd60e code=0x7ffc0000 [ 206.800105][ T37] audit: type=1326 audit(1777402837.553:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6771 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe1f3fca6b code=0x7ffc0000 [ 206.886677][ T6776] FAULT_INJECTION: forcing a failure. [ 206.886677][ T6776] name failslab, interval 1, probability 0, space 0, times 0 [ 206.886713][ T6776] CPU: 0 UID: 0 PID: 6776 Comm: syz.4.279 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 206.886735][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.886746][ T6776] Call Trace: [ 206.886755][ T6776] [ 206.886764][ T6776] dump_stack_lvl+0xe8/0x150 [ 206.886794][ T6776] should_fail_ex+0x46b/0x600 [ 206.886830][ T6776] should_failslab+0xa8/0x100 [ 206.886855][ T6776] __kmalloc_cache_noprof+0x84/0x690 [ 206.886878][ T6776] ? alloc_pipe_info+0xe8/0x4d0 [ 206.886908][ T6776] alloc_pipe_info+0xe8/0x4d0 [ 206.886935][ T6776] splice_direct_to_actor+0xa19/0xc80 [ 206.886954][ T6776] ? kstrtoull+0x12f/0x1d0 [ 206.886985][ T6776] ? kstrtouint+0x6e/0xe0 [ 206.887021][ T6776] ? __pfx_direct_splice_actor+0x10/0x10 [ 206.887043][ T6776] ? get_pid_task+0x20/0x1f0 [ 206.887075][ T6776] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 206.887095][ T6776] ? get_pid_task+0x20/0x1f0 [ 206.887127][ T6776] do_splice_direct+0x19b/0x2a0 [ 206.887150][ T6776] ? __pfx_do_splice_direct+0x10/0x10 [ 206.887171][ T6776] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 206.887199][ T6776] ? rw_verify_area+0x25b/0x4e0 [ 206.887233][ T6776] do_sendfile+0x547/0x7e0 [ 206.887261][ T6776] ? __pfx_vfs_write+0x10/0x10 [ 206.887290][ T6776] ? __pfx_do_sendfile+0x10/0x10 [ 206.887333][ T6776] __se_sys_sendfile64+0x144/0x1a0 [ 206.887360][ T6776] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 206.887396][ T6776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.887420][ T6776] do_syscall_64+0x15f/0xf80 [ 206.887440][ T6776] ? trace_irq_disable+0x3b/0x140 [ 206.887465][ T6776] ? clear_bhb_loop+0x40/0x90 [ 206.887491][ T6776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.887512][ T6776] RIP: 0033:0x7f5e5ea5cdd9 [ 206.887532][ T6776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.887548][ T6776] RSP: 002b:00007f5e5ccb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 206.887570][ T6776] RAX: ffffffffffffffda RBX: 00007f5e5ecd5fa0 RCX: 00007f5e5ea5cdd9 [ 206.887584][ T6776] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 206.887596][ T6776] RBP: 00007f5e5ccb6090 R08: 0000000000000000 R09: 0000000000000000 [ 206.887608][ T6776] R10: 000000010000a006 R11: 0000000000000246 R12: 0000000000000001 [ 206.887620][ T6776] R13: 00007f5e5ecd6038 R14: 00007f5e5ecd5fa0 R15: 00007ffc2bfbe6d8 [ 206.887653][ T6776] [ 207.326041][ T5729] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 207.544511][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 207.548606][ T5729] usb 4-1: config 2 has an invalid interface number: 255 but max is 0 [ 207.548635][ T5729] usb 4-1: config 2 has an invalid descriptor of length 70, skipping remainder of the config [ 207.548654][ T5729] usb 4-1: config 2 has no interface number 0 [ 207.548703][ T5729] usb 4-1: config 2 interface 255 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 207.548732][ T5729] usb 4-1: config 2 interface 255 has no altsetting 0 [ 207.650187][ T5729] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 207.650220][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.650239][ T5729] usb 4-1: Product: syz [ 207.650253][ T5729] usb 4-1: Manufacturer: syz [ 207.650268][ T5729] usb 4-1: SerialNumber: syz [ 207.808270][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.281'. [ 207.808723][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 209.095696][ T5729] usb 4-1: USB disconnect, device number 6 [ 209.431800][ T31] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 210.392546][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 210.392601][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 210.392628][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 210.392673][ T31] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 210.392696][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.455922][ T31] usb 3-1: config 0 descriptor?? [ 210.459065][ T6793] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 210.773460][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 210.773604][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 210.836318][ T31] usb 3-1: USB disconnect, device number 6 [ 211.064426][ T5891] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 211.219805][ T5891] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 211.219827][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.219838][ T5891] usb 1-1: Product: syz [ 211.219846][ T5891] usb 1-1: Manufacturer: syz [ 211.219854][ T5891] usb 1-1: SerialNumber: syz [ 211.224759][ T5835] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 211.424580][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 211.443084][ T5835] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.443120][ T5835] usb 4-1: config 0 interface 0 has no altsetting 0 [ 211.530495][ T5835] usb 4-1: New USB device found, idVendor=0742, idProduct=2626, bcdDevice= 0.00 [ 211.530529][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 211.530622][ T5835] usb 4-1: Product: syz [ 211.576196][ T5835] usb 4-1: config 0 descriptor?? [ 211.835679][ T6820] FAULT_INJECTION: forcing a failure. [ 211.835679][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 211.835716][ T6820] CPU: 0 UID: 0 PID: 6820 Comm: syz.2.293 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 211.835740][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.835752][ T6820] Call Trace: [ 211.835765][ T6820] [ 211.835774][ T6820] dump_stack_lvl+0xe8/0x150 [ 211.835806][ T6820] should_fail_ex+0x46b/0x600 [ 211.835846][ T6820] should_failslab+0xa8/0x100 [ 211.835873][ T6820] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 211.835896][ T6820] ? __alloc_skb+0x1d0/0x7d0 [ 211.835915][ T6820] ? lockdep_hardirqs_on+0x7a/0x110 [ 211.835954][ T6820] __alloc_skb+0x1d0/0x7d0 [ 211.835975][ T6820] ? trace_sched_exit_tp+0x3a/0x130 [ 211.836015][ T6820] alloc_skb_with_frags+0xc8/0x760 [ 211.836050][ T6820] sock_alloc_send_pskb+0x884/0x9a0 [ 211.836098][ T6820] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 211.836126][ T6820] ? __lock_acquire+0x6b5/0x2cf0 [ 211.836163][ T6820] ? irqentry_exit+0x218/0x730 [ 211.836187][ T6820] __ip_append_data+0x29ba/0x3d30 [ 211.836232][ T6820] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 211.836259][ T6820] ? ipv4_mtu+0x23/0x650 [ 211.836291][ T6820] ? ipv4_mtu+0x23/0x650 [ 211.836314][ T6820] ? __pfx___ip_append_data+0x10/0x10 [ 211.836337][ T6820] ? ipv4_mtu+0x23/0x650 [ 211.836356][ T6820] ? __pfx_ipv4_mtu+0x10/0x10 [ 211.836376][ T6820] ? ip_setup_cork+0x57e/0xa50 [ 211.836402][ T6820] ip_make_skb+0x250/0x470 [ 211.836431][ T6820] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 211.836455][ T6820] ? __pfx_ip_make_skb+0x10/0x10 [ 211.836476][ T6820] ? xfrm_lookup_with_ifid+0x185c/0x1bc0 [ 211.836540][ T6820] udp_sendmsg+0x18fd/0x21a0 [ 211.836590][ T6820] ? __pfx_udp_sendmsg+0x10/0x10 [ 211.836621][ T6820] ? smack_socket_sendmsg+0x1a9/0x590 [ 211.836684][ T6820] ? sock_rps_record_flow+0x19/0x350 [ 211.836710][ T6820] ? inet_sendmsg+0x29c/0x370 [ 211.836731][ T6820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.836757][ T6820] ____sys_sendmsg+0x7da/0x9c0 [ 211.836789][ T6820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.836824][ T6820] ? import_iovec+0x73/0xa0 [ 211.836853][ T6820] ___sys_sendmsg+0x2a5/0x360 [ 211.836877][ T6820] ? __lock_acquire+0x6b5/0x2cf0 [ 211.836909][ T6820] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.836941][ T6820] ? kstrtouint+0x6e/0xe0 [ 211.837007][ T6820] ? __fget_files+0x2a/0x420 [ 211.837038][ T6820] ? __fget_files+0x3a6/0x420 [ 211.837080][ T6820] __sys_sendmmsg+0x282/0x4e0 [ 211.837111][ T6820] ? __pfx___sys_sendmmsg+0x10/0x10 [ 211.837146][ T6820] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 211.837189][ T6820] ? ksys_write+0x248/0x270 [ 211.837216][ T6820] ? __pfx_ksys_write+0x10/0x10 [ 211.837245][ T6820] __x64_sys_sendmmsg+0xa0/0xc0 [ 211.837270][ T6820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.837291][ T6820] do_syscall_64+0x15f/0xf80 [ 211.837313][ T6820] ? clear_bhb_loop+0x40/0x90 [ 211.837338][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.837359][ T6820] RIP: 0033:0x7f2d842ccdd9 [ 211.837378][ T6820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.837394][ T6820] RSP: 002b:00007f2d8251e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 211.837418][ T6820] RAX: ffffffffffffffda RBX: 00007f2d84545fa0 RCX: 00007f2d842ccdd9 [ 211.837432][ T6820] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 211.837443][ T6820] RBP: 00007f2d8251e090 R08: 0000000000000000 R09: 0000000000000000 [ 211.837454][ T6820] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 211.837466][ T6820] R13: 00007f2d84546038 R14: 00007f2d84545fa0 R15: 00007fff51ac1e18 [ 211.837501][ T6820] [ 211.911943][ T5891] rtl8150 1-1:1.0: couldn't reset the device [ 211.912339][ T5891] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 211.966411][ T5891] usb 1-1: USB disconnect, device number 17 [ 212.154593][ T5835] usbhid 4-1:0.0: can't add hid device: -71 [ 212.154725][ T5835] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 212.295649][ T5835] usb 4-1: USB disconnect, device number 7 [ 213.376381][ T5799] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 213.864565][ T5799] usb 5-1: Using ep0 maxpacket: 32 [ 213.867916][ T5799] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 213.867958][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.903740][ T5799] usb 5-1: config 0 descriptor?? [ 213.933373][ T5799] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 214.074378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 214.232461][ T5835] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 214.384708][ T5835] usb 3-1: device descriptor read/64, error -71 [ 214.624474][ T5835] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 214.774626][ T5835] usb 3-1: device descriptor read/64, error -71 [ 214.885217][ T5835] usb usb3-port1: attempt power cycle [ 214.895400][ T5799] gspca_vc032x: reg_w err -110 [ 214.895420][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895431][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895440][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895449][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895458][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895467][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895475][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895485][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895493][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895503][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895511][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895520][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895529][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895538][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895546][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895555][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895564][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895572][ T5799] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.895581][ T5799] gspca_vc032x: Unknown sensor... [ 214.895676][ T5799] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 215.228619][ T5785] usb 5-1: USB disconnect, device number 13 [ 215.254530][ T5835] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 215.275262][ T5835] usb 3-1: device descriptor read/8, error -71 [ 215.545442][ T5835] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 215.695124][ T5785] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 215.769579][ T5835] usb 3-1: device descriptor read/8, error -71 [ 215.834509][ T5785] usb 5-1: device descriptor read/64, error -71 [ 215.872203][ T6850] FAULT_INJECTION: forcing a failure. [ 215.872203][ T6850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.872242][ T6850] CPU: 1 UID: 0 PID: 6850 Comm: syz.2.303 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 215.872265][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.872278][ T6850] Call Trace: [ 215.872286][ T6850] [ 215.872295][ T6850] dump_stack_lvl+0xe8/0x150 [ 215.872327][ T6850] should_fail_ex+0x46b/0x600 [ 215.872366][ T6850] _copy_from_iter+0x1d3/0x1670 [ 215.872422][ T6850] ? __pfx__copy_from_iter+0x10/0x10 [ 215.872464][ T6850] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 215.872494][ T6850] ? __lock_acquire+0x6b5/0x2cf0 [ 215.872528][ T6850] ? _parse_integer_limit+0x1ae/0x1f0 [ 215.872555][ T6850] ? skb_put+0x11b/0x210 [ 215.872583][ T6850] hci_sock_sendmsg+0x426/0xf40 [ 215.872619][ T6850] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 215.872655][ T6850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.872679][ T6850] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 215.872707][ T6850] sock_write_iter+0x4a1/0x4f0 [ 215.872739][ T6850] ? __pfx_sock_write_iter+0x10/0x10 [ 215.872798][ T6850] vfs_write+0x629/0xba0 [ 215.872832][ T6850] ? __pfx_vfs_write+0x10/0x10 [ 215.872867][ T6850] ? __fget_files+0x2a/0x420 [ 215.872909][ T6850] ksys_write+0x156/0x270 [ 215.872944][ T6850] ? __pfx_ksys_write+0x10/0x10 [ 215.872978][ T6850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.873001][ T6850] do_syscall_64+0x15f/0xf80 [ 215.873021][ T6850] ? trace_irq_disable+0x3b/0x140 [ 215.873047][ T6850] ? clear_bhb_loop+0x40/0x90 [ 215.873073][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.873094][ T6850] RIP: 0033:0x7f2d842ccdd9 [ 215.873115][ T6850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.873133][ T6850] RSP: 002b:00007f2d8251e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.873157][ T6850] RAX: ffffffffffffffda RBX: 00007f2d84545fa0 RCX: 00007f2d842ccdd9 [ 215.873171][ T6850] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004 [ 215.873183][ T6850] RBP: 00007f2d8251e090 R08: 0000000000000000 R09: 0000000000000000 [ 215.873194][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.873205][ T6850] R13: 00007f2d84546038 R14: 00007f2d84545fa0 R15: 00007fff51ac1e18 [ 215.873235][ T6850] [ 215.875246][ T5835] usb usb3-port1: unable to enumerate USB device [ 216.164468][ T5785] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 216.294483][ T5785] usb 5-1: device descriptor read/64, error -71 [ 216.401310][ T6856] netlink: 80 bytes leftover after parsing attributes in process `syz.0.305'. [ 216.414085][ T5785] usb usb5-port1: attempt power cycle [ 216.760456][ T6857] FAULT_INJECTION: forcing a failure. [ 216.760456][ T6857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.760495][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.2.306 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 216.760518][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.760531][ T6857] Call Trace: [ 216.760539][ T6857] [ 216.760549][ T6857] dump_stack_lvl+0xe8/0x150 [ 216.760583][ T6857] should_fail_ex+0x46b/0x600 [ 216.760624][ T6857] _copy_to_user+0x31/0xb0 [ 216.760658][ T6857] simple_read_from_buffer+0xe1/0x170 [ 216.760698][ T6857] proc_fail_nth_read+0x1be/0x230 [ 216.760734][ T6857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.760770][ T6857] ? rw_verify_area+0x2ac/0x4e0 [ 216.760792][ T6857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.760827][ T6857] vfs_read+0x212/0xa80 [ 216.760861][ T6857] ? __pfx_vfs_read+0x10/0x10 [ 216.760889][ T6857] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 216.760923][ T6857] ? lockdep_hardirqs_on+0x7a/0x110 [ 216.760953][ T6857] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 216.760985][ T6857] ? mutex_lock_nested+0x152/0x1d0 [ 216.761010][ T6857] ? fdget_pos+0x252/0x320 [ 216.761041][ T6857] ksys_read+0x156/0x270 [ 216.761067][ T6857] ? __pfx_ksys_read+0x10/0x10 [ 216.761101][ T6857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.761124][ T6857] do_syscall_64+0x15f/0xf80 [ 216.761144][ T6857] ? trace_irq_disable+0x3b/0x140 [ 216.761167][ T6857] ? clear_bhb_loop+0x40/0x90 [ 216.761203][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.761234][ T6857] RIP: 0033:0x7f2d8428d60e [ 216.761254][ T6857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.761272][ T6857] RSP: 002b:00007f2d824fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.761302][ T6857] RAX: ffffffffffffffda RBX: 00007f2d824fd6c0 RCX: 00007f2d8428d60e [ 216.761317][ T6857] RDX: 000000000000000f RSI: 00007f2d824fd0a0 RDI: 0000000000000004 [ 216.761331][ T6857] RBP: 00007f2d824fd090 R08: 0000000000000000 R09: 0000000000000000 [ 216.761344][ T6857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.761357][ T6857] R13: 00007f2d84546128 R14: 00007f2d84546090 R15: 00007fff51ac1e18 [ 216.761393][ T6857] [ 216.781655][ T6861] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 216.781698][ T6861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.803957][ T5785] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 216.835751][ T5785] usb 5-1: device descriptor read/8, error -71 [ 216.851641][ T6861] netlink: 'syz.0.308': attribute type 149 has an invalid length. [ 216.851665][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 217.244417][ T5785] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 217.246466][ T5607] Bluetooth: hci4: command 0x0406 tx timeout [ 217.248734][ T5607] Bluetooth: hci2: command 0x0406 tx timeout [ 217.248740][ T5600] Bluetooth: hci3: command 0x0406 tx timeout [ 217.248774][ T5607] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.265595][ T5785] usb 5-1: device descriptor read/8, error -71 [ 217.286147][ T6863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.374818][ T5785] usb usb5-port1: unable to enumerate USB device [ 220.154693][ T5835] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 220.294475][ T5835] usb 1-1: device descriptor read/64, error -71 [ 220.704476][ T5835] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 220.825811][ T6901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.846302][ T5835] usb 1-1: device descriptor read/64, error -71 [ 220.955142][ T5835] usb usb1-port1: attempt power cycle [ 221.056017][ T6907] FAULT_INJECTION: forcing a failure. [ 221.056017][ T6907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.056051][ T6907] CPU: 1 UID: 0 PID: 6907 Comm: syz.4.324 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.056075][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.056087][ T6907] Call Trace: [ 221.056095][ T6907] [ 221.056104][ T6907] dump_stack_lvl+0xe8/0x150 [ 221.056135][ T6907] should_fail_ex+0x46b/0x600 [ 221.056174][ T6907] _copy_to_user+0x31/0xb0 [ 221.056210][ T6907] simple_read_from_buffer+0xe1/0x170 [ 221.056246][ T6907] proc_fail_nth_read+0x1be/0x230 [ 221.056281][ T6907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.056317][ T6907] ? rw_verify_area+0x2ac/0x4e0 [ 221.056339][ T6907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.056371][ T6907] vfs_read+0x212/0xa80 [ 221.056402][ T6907] ? __pfx_vfs_read+0x10/0x10 [ 221.056426][ T6907] ? bpf_lsm_socket_bind+0x9/0x20 [ 221.056451][ T6907] ? __sys_bind+0x30c/0x410 [ 221.056500][ T6907] ? __pfx___sys_bind+0x10/0x10 [ 221.056538][ T6907] ksys_read+0x156/0x270 [ 221.056564][ T6907] ? __pfx_ksys_read+0x10/0x10 [ 221.056595][ T6907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.056619][ T6907] do_syscall_64+0x15f/0xf80 [ 221.056638][ T6907] ? trace_irq_disable+0x3b/0x140 [ 221.056661][ T6907] ? clear_bhb_loop+0x40/0x90 [ 221.056686][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.056707][ T6907] RIP: 0033:0x7f5e5ea1d60e [ 221.056728][ T6907] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 221.056745][ T6907] RSP: 002b:00007f5e5ccb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.056767][ T6907] RAX: ffffffffffffffda RBX: 00007f5e5ccb66c0 RCX: 00007f5e5ea1d60e [ 221.056781][ T6907] RDX: 000000000000000f RSI: 00007f5e5ccb60a0 RDI: 0000000000000004 [ 221.056793][ T6907] RBP: 00007f5e5ccb6090 R08: 0000000000000000 R09: 0000000000000000 [ 221.056806][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.056817][ T6907] R13: 00007f5e5ecd6038 R14: 00007f5e5ecd5fa0 R15: 00007ffc2bfbe6d8 [ 221.056850][ T6907] [ 221.188203][ T6911] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 221.188248][ T6911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.344647][ T5835] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 221.367421][ T5835] usb 1-1: device descriptor read/8, error -71 [ 221.374661][ T5729] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 221.404931][ T6911] netlink: 'syz.4.326': attribute type 149 has an invalid length. [ 221.404957][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 221.493408][ T6915] FAULT_INJECTION: forcing a failure. [ 221.493408][ T6915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.493445][ T6915] CPU: 0 UID: 0 PID: 6915 Comm: syz.2.327 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.493468][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.493480][ T6915] Call Trace: [ 221.493488][ T6915] [ 221.493498][ T6915] dump_stack_lvl+0xe8/0x150 [ 221.493529][ T6915] should_fail_ex+0x46b/0x600 [ 221.493568][ T6915] _copy_to_user+0x31/0xb0 [ 221.493596][ T6915] bpf_obj_get_info_by_fd+0x26c1/0x3310 [ 221.493623][ T6915] ? __lock_acquire+0x6b5/0x2cf0 [ 221.493668][ T6915] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 221.493701][ T6915] ? __lock_acquire+0x6b5/0x2cf0 [ 221.493739][ T6915] ? __lock_acquire+0x6b5/0x2cf0 [ 221.493804][ T6915] ? bpf_lsm_bpf+0x9/0x20 [ 221.493829][ T6915] ? security_bpf+0x7e/0x2d0 [ 221.493862][ T6915] __sys_bpf+0x66e/0x950 [ 221.493889][ T6915] ? __pfx___sys_bpf+0x10/0x10 [ 221.493913][ T6915] ? rt_mutex_slowunlock+0x1cb/0x300 [ 221.493960][ T6915] ? ksys_write+0x248/0x270 [ 221.493984][ T6915] ? __pfx_ksys_write+0x10/0x10 [ 221.494012][ T6915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.494035][ T6915] __x64_sys_bpf+0x7c/0x90 [ 221.494059][ T6915] do_syscall_64+0x15f/0xf80 [ 221.494078][ T6915] ? trace_irq_disable+0x3b/0x140 [ 221.494102][ T6915] ? clear_bhb_loop+0x40/0x90 [ 221.494129][ T6915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.494151][ T6915] RIP: 0033:0x7f2d842ccdd9 [ 221.494171][ T6915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.494189][ T6915] RSP: 002b:00007f2d8251e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.494212][ T6915] RAX: ffffffffffffffda RBX: 00007f2d84545fa0 RCX: 00007f2d842ccdd9 [ 221.494237][ T6915] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 000000000000000f [ 221.494251][ T6915] RBP: 00007f2d8251e090 R08: 0000000000000000 R09: 0000000000000000 [ 221.494264][ T6915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.494277][ T6915] R13: 00007f2d84546038 R14: 00007f2d84545fa0 R15: 00007fff51ac1e18 [ 221.494318][ T6915] [ 221.524451][ T5729] usb 2-1: device descriptor read/64, error -71 [ 221.624436][ T5835] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 221.675453][ T5835] usb 1-1: device descriptor read/8, error -71 [ 221.774548][ T5729] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 221.795258][ T5835] usb usb1-port1: unable to enumerate USB device [ 221.904532][ T5729] usb 2-1: device descriptor read/64, error -71 [ 222.015872][ T5729] usb usb2-port1: attempt power cycle [ 222.405911][ T5729] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 222.425503][ T5729] usb 2-1: device descriptor read/8, error -71 [ 222.665684][ T5729] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 222.686690][ T5729] usb 2-1: device descriptor read/8, error -71 [ 222.865403][ T5729] usb usb2-port1: unable to enumerate USB device [ 222.895491][ T6945] FAULT_INJECTION: forcing a failure. [ 222.895491][ T6945] name failslab, interval 1, probability 0, space 0, times 0 [ 222.895527][ T6945] CPU: 1 UID: 0 PID: 6945 Comm: syz.3.337 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 222.895551][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.895564][ T6945] Call Trace: [ 222.895572][ T6945] [ 222.895581][ T6945] dump_stack_lvl+0xe8/0x150 [ 222.895613][ T6945] should_fail_ex+0x46b/0x600 [ 222.895653][ T6945] should_failslab+0xa8/0x100 [ 222.895681][ T6945] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 222.895706][ T6945] ? alloc_vmap_area+0x229/0x1480 [ 222.895735][ T6945] alloc_vmap_area+0x229/0x1480 [ 222.895773][ T6945] ? __pfx_alloc_vmap_area+0x10/0x10 [ 222.895798][ T6945] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 222.895824][ T6945] ? __get_vm_area_node+0x171/0x350 [ 222.895844][ T6945] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 222.895873][ T6945] __get_vm_area_node+0x226/0x350 [ 222.895902][ T6945] __vmalloc_node_range_noprof+0x36a/0x1750 [ 222.895925][ T6945] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 222.895966][ T6945] ? __lock_acquire+0x6b5/0x2cf0 [ 222.896011][ T6945] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 222.896039][ T6945] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 222.896062][ T6945] ? __lock_acquire+0x6b5/0x2cf0 [ 222.896094][ T6945] ? _parse_integer_limit+0x1ae/0x1f0 [ 222.896128][ T6945] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 222.896158][ T6945] __vmalloc_noprof+0xd2/0x120 [ 222.896180][ T6945] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 222.896219][ T6945] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 222.896242][ T6945] bpf_prog_alloc+0x3c/0x1a0 [ 222.896264][ T6945] bpf_prog_load+0x779/0x1a10 [ 222.896294][ T6945] ? __pfx_bpf_prog_load+0x10/0x10 [ 222.896314][ T6945] ? __might_fault+0xaf/0x130 [ 222.896345][ T6945] ? bpf_lsm_bpf+0x9/0x20 [ 222.896363][ T6945] ? security_bpf+0x7e/0x2d0 [ 222.896388][ T6945] __sys_bpf+0x618/0x950 [ 222.896408][ T6945] ? __pfx___sys_bpf+0x10/0x10 [ 222.896424][ T6945] ? rt_mutex_slowunlock+0x1cb/0x300 [ 222.896459][ T6945] ? ksys_write+0x248/0x270 [ 222.896478][ T6945] ? __pfx_ksys_write+0x10/0x10 [ 222.896500][ T6945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.896517][ T6945] __x64_sys_bpf+0x7c/0x90 [ 222.896535][ T6945] do_syscall_64+0x15f/0xf80 [ 222.896550][ T6945] ? trace_irq_disable+0x3b/0x140 [ 222.896567][ T6945] ? clear_bhb_loop+0x40/0x90 [ 222.896586][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.896602][ T6945] RIP: 0033:0x7fbe1f3fcdd9 [ 222.896618][ T6945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.896632][ T6945] RSP: 002b:00007fbe1d64e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.896651][ T6945] RAX: ffffffffffffffda RBX: 00007fbe1f675fa0 RCX: 00007fbe1f3fcdd9 [ 222.896662][ T6945] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 222.896673][ T6945] RBP: 00007fbe1d64e090 R08: 0000000000000000 R09: 0000000000000000 [ 222.896683][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.896692][ T6945] R13: 00007fbe1f676038 R14: 00007fbe1f675fa0 R15: 00007ffc11963a28 [ 222.896718][ T6945] [ 222.897045][ T6945] syz.3.337: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 222.897310][ T6945] CPU: 1 UID: 0 PID: 6945 Comm: syz.3.337 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 222.897334][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.897346][ T6945] Call Trace: [ 222.897354][ T6945] [ 222.897362][ T6945] dump_stack_lvl+0xe8/0x150 [ 222.897389][ T6945] warn_alloc+0x263/0x3e0 [ 222.897417][ T6945] ? kasan_quarantine_put+0xbb/0x1f0 [ 222.897441][ T6945] ? __pfx_warn_alloc+0x10/0x10 [ 222.897461][ T6945] ? __get_vm_area_node+0x23f/0x350 [ 222.897476][ T6945] ? __get_vm_area_node+0x171/0x350 [ 222.897494][ T6945] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 222.897516][ T6945] ? __get_vm_area_node+0x23f/0x350 [ 222.897538][ T6945] __vmalloc_node_range_noprof+0x38f/0x1750 [ 222.897559][ T6945] ? __lock_acquire+0x6b5/0x2cf0 [ 222.897595][ T6945] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 222.897617][ T6945] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 222.897635][ T6945] ? __lock_acquire+0x6b5/0x2cf0 [ 222.897658][ T6945] ? _parse_integer_limit+0x1ae/0x1f0 [ 222.897684][ T6945] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 222.897702][ T6945] __vmalloc_noprof+0xd2/0x120 [ 222.897718][ T6945] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 222.897740][ T6945] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 222.897763][ T6945] bpf_prog_alloc+0x3c/0x1a0 [ 222.897784][ T6945] bpf_prog_load+0x779/0x1a10 [ 222.897813][ T6945] ? __pfx_bpf_prog_load+0x10/0x10 [ 222.897833][ T6945] ? __might_fault+0xaf/0x130 [ 222.897864][ T6945] ? bpf_lsm_bpf+0x9/0x20 [ 222.897882][ T6945] ? security_bpf+0x7e/0x2d0 [ 222.897905][ T6945] __sys_bpf+0x618/0x950 [ 222.897926][ T6945] ? __pfx___sys_bpf+0x10/0x10 [ 222.897951][ T6945] ? rt_mutex_slowunlock+0x1cb/0x300 [ 222.897985][ T6945] ? ksys_write+0x248/0x270 [ 222.898004][ T6945] ? __pfx_ksys_write+0x10/0x10 [ 222.898025][ T6945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.898043][ T6945] __x64_sys_bpf+0x7c/0x90 [ 222.898060][ T6945] do_syscall_64+0x15f/0xf80 [ 222.898074][ T6945] ? trace_irq_disable+0x3b/0x140 [ 222.898093][ T6945] ? clear_bhb_loop+0x40/0x90 [ 222.898112][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.898128][ T6945] RIP: 0033:0x7fbe1f3fcdd9 [ 222.898143][ T6945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.898157][ T6945] RSP: 002b:00007fbe1d64e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.898172][ T6945] RAX: ffffffffffffffda RBX: 00007fbe1f675fa0 RCX: 00007fbe1f3fcdd9 [ 222.898184][ T6945] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 222.898195][ T6945] RBP: 00007fbe1d64e090 R08: 0000000000000000 R09: 0000000000000000 [ 222.898210][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.898219][ T6945] R13: 00007fbe1f676038 R14: 00007fbe1f675fa0 R15: 00007ffc11963a28 [ 222.898246][ T6945] [ 222.898267][ T6945] Mem-Info: [ 222.900092][ T6945] active_anon:188 inactive_anon:6237 isolated_anon:0 [ 222.900092][ T6945] active_file:9876 inactive_file:43009 isolated_file:0 [ 222.900092][ T6945] unevictable:768 dirty:323 writeback:0 [ 222.900092][ T6945] slab_reclaimable:11541 slab_unreclaimable:105767 [ 222.900092][ T6945] mapped:31326 shmem:1292 pagetables:1295 [ 222.900092][ T6945] sec_pagetables:0 bounce:0 [ 222.900092][ T6945] kernel_misc_reclaimable:0 [ 222.900092][ T6945] free:1312173 free_pcp:6740 free_cma:0 [ 222.900152][ T6945] Node 0 active_anon:752kB inactive_anon:24948kB active_file:39284kB inactive_file:172036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125304kB dirty:1292kB writeback:0kB shmem:3632kB kernel_stack:13552kB pagetables:5064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 222.900204][ T6945] Node 1 active_anon:0kB inactive_anon:0kB active_file:220kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 222.900608][ T6945] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.900673][ T6945] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 222.900729][ T6945] Node 0 DMA32 free:1306392kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:752kB inactive_anon:24948kB active_file:39284kB inactive_file:172036kB unevictable:1536kB writepending:1292kB zspages:0kB present:3129332kB managed:2566632kB mlocked:0kB bounce:0kB free_pcp:26736kB local_pcp:17428kB free_cma:0kB [ 222.900794][ T6945] lowmem_reserve[]: 0 0 0 0 0 [ 222.900829][ T6945] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:216kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.900887][ T6945] lowmem_reserve[]: 0 0 0 0 0 [ 222.900923][ T6945] Node 1 Normal free:3926940kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:220kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:224kB free_cma:0kB [ 222.900995][ T6945] lowmem_reserve[]: 0 0 0 0 0 [ 222.901029][ T6945] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 222.901153][ T6945] Node 0 DMA32: 1914*4kB (UM) 1113*8kB (UM) 475*16kB (UME) 314*32kB (UME) 153*64kB (UM) 85*128kB (UME) 55*256kB (UME) 37*512kB (UME) 22*1024kB (UM) 12*2048kB (UM) 286*4096kB (UM) = 1306464kB [ 222.903379][ T6945] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 222.903485][ T6945] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 6*16kB (UM) 2*32kB (UM) 6*64kB (UM) 2*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3926844kB [ 222.903649][ T6945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.903667][ T6945] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.903685][ T6945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.903702][ T6945] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.903719][ T6945] 54173 total pagecache pages [ 222.903727][ T6945] 0 pages in swap cache [ 222.903734][ T6945] Free swap = 124996kB [ 222.903742][ T6945] Total swap = 124996kB [ 222.903751][ T6945] 2097051 pages RAM [ 222.903758][ T6945] 0 pages HighMem/MovableOnly [ 222.903766][ T6945] 423724 pages reserved [ 222.903774][ T6945] 0 pages cma reserved [ 223.141248][ T6947] netlink: 'syz.0.338': attribute type 1 has an invalid length. [ 223.141291][ T6947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.154661][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 223.229713][ T6950] netlink: 'syz.0.338': attribute type 149 has an invalid length. [ 223.229738][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 223.248090][ T1006] libceph: connect (1)[c::]:6789 error -101 [ 223.271895][ T1006] libceph: mon0 (1)[c::]:6789 connect error [ 223.306032][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 223.312650][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.312684][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.312721][ T31] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 223.312743][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.337310][ T31] usb 3-1: config 0 descriptor?? [ 223.346098][ T1006] libceph: connect (1)[c::]:6789 error -101 [ 223.396483][ T1006] libceph: mon0 (1)[c::]:6789 connect error [ 223.572897][ T6930] ceph: No mds server is up or the cluster is laggy [ 223.721980][ T1006] libceph: connect (1)[c::]:6789 error -101 [ 223.722483][ T1006] libceph: mon0 (1)[c::]:6789 connect error [ 224.418024][ T1006] libceph: connect (1)[c::]:6789 error -101 [ 224.418248][ T1006] libceph: mon0 (1)[c::]:6789 connect error [ 224.898945][ T31] nintendo 0003:057E:200E.0004: item fetching failed at offset 3/5 [ 224.899830][ T31] nintendo 0003:057E:200E.0004: HID parse failed [ 225.010042][ T31] nintendo 0003:057E:200E.0004: probe - fail = -22 [ 225.010172][ T31] nintendo 0003:057E:200E.0004: probe with driver nintendo failed with error -22 [ 225.043089][ T6959] FAULT_INJECTION: forcing a failure. [ 225.043089][ T6959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.043162][ T6959] CPU: 0 UID: 0 PID: 6959 Comm: syz.0.341 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 225.043187][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.043198][ T6959] Call Trace: [ 225.043207][ T6959] [ 225.043216][ T6959] dump_stack_lvl+0xe8/0x150 [ 225.043246][ T6959] should_fail_ex+0x46b/0x600 [ 225.043293][ T6959] _copy_from_iter+0x1d3/0x1670 [ 225.043335][ T6959] ? trace_kmem_cache_alloc+0x29/0xe0 [ 225.043358][ T6959] ? __alloc_skb+0x27d/0x7d0 [ 225.043379][ T6959] ? __pfx__copy_from_iter+0x10/0x10 [ 225.043410][ T6959] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 225.043433][ T6959] ? __alloc_skb+0x27d/0x7d0 [ 225.043459][ T6959] ? netlink_sendmsg+0x650/0xb40 [ 225.043479][ T6959] ? skb_put+0x11b/0x210 [ 225.043503][ T6959] netlink_sendmsg+0x6c0/0xb40 [ 225.043536][ T6959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.043559][ T6959] ? unwind_get_return_address+0x4d/0x90 [ 225.043589][ T6959] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.043614][ T6959] ____sys_sendmsg+0x94c/0x9c0 [ 225.043643][ T6959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.043676][ T6959] ? import_iovec+0x73/0xa0 [ 225.043702][ T6959] ___sys_sendmsg+0x2a5/0x360 [ 225.043726][ T6959] ? __lock_acquire+0x6b5/0x2cf0 [ 225.043759][ T6959] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.043821][ T6959] ? __fget_files+0x2a/0x420 [ 225.043849][ T6959] ? __fget_files+0x3a6/0x420 [ 225.043888][ T6959] __x64_sys_sendmsg+0x1c3/0x2a0 [ 225.043916][ T6959] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.043950][ T6959] ? __pfx_ksys_write+0x10/0x10 [ 225.043980][ T6959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.044003][ T6959] do_syscall_64+0x15f/0xf80 [ 225.044021][ T6959] ? trace_irq_disable+0x3b/0x140 [ 225.044046][ T6959] ? clear_bhb_loop+0x40/0x90 [ 225.044071][ T6959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.044092][ T6959] RIP: 0033:0x7f619522cdd9 [ 225.044113][ T6959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.044130][ T6959] RSP: 002b:00007f6193486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.044154][ T6959] RAX: ffffffffffffffda RBX: 00007f61954a5fa0 RCX: 00007f619522cdd9 [ 225.044169][ T6959] RDX: 0000000004004090 RSI: 0000200000000280 RDI: 0000000000000009 [ 225.044183][ T6959] RBP: 00007f6193486090 R08: 0000000000000000 R09: 0000000000000000 [ 225.044196][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.044207][ T6959] R13: 00007f61954a6038 R14: 00007f61954a5fa0 R15: 00007ffc5e332fe8 [ 225.044241][ T6959] [ 225.206301][ T6942] Option ' /msr' to dns_resolver key: bad/missing value [ 225.613930][ T6967] fuse: Unknown parameter 'use00000000000000000000' [ 226.625553][ T31] usb 3-1: USB disconnect, device number 11 [ 226.964479][ T5728] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 228.094543][ T5728] usb 5-1: device descriptor read/64, error -71 [ 228.108041][ T6981] netlink: 48 bytes leftover after parsing attributes in process `syz.0.346'. [ 228.345209][ T5728] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 228.474488][ T5728] usb 5-1: device descriptor read/64, error -71 [ 228.560283][ T6991] netlink: 'syz.2.351': attribute type 1 has an invalid length. [ 228.560326][ T6991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.585339][ T5728] usb usb5-port1: attempt power cycle [ 228.613327][ T6991] netlink: 'syz.2.351': attribute type 149 has an invalid length. [ 228.613344][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 228.974833][ T5842] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 229.024476][ T5835] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 229.104581][ T5842] usb 2-1: device descriptor read/64, error -71 [ 229.186692][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 229.189483][ T5835] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 229.189514][ T5835] usb 1-1: config 0 has no interface number 0 [ 229.189563][ T5835] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.189586][ T5835] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 229.189613][ T5835] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 229.189642][ T5835] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 229.189667][ T5835] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 229.189692][ T5835] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.189715][ T5835] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 229.189739][ T5835] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 118, changing to 10 [ 229.189766][ T5835] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25956, setting to 1024 [ 229.189793][ T5835] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.192912][ T5835] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 229.192940][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.192976][ T5835] usb 1-1: Product: syz [ 229.192991][ T5835] usb 1-1: Manufacturer: syz [ 229.193007][ T5835] usb 1-1: SerialNumber: syz [ 229.248642][ T5835] usb 1-1: config 0 descriptor?? [ 229.317604][ T6996] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 229.317953][ T6996] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 229.335838][ T5835] usb 1-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 229.335864][ T5835] usb 1-1: couldn't find an output bulk endpoint. Bailing out. [ 229.504472][ T5842] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 229.602924][ T5835] usb 1-1: USB disconnect, device number 22 [ 229.634845][ T5842] usb 2-1: device descriptor read/64, error -71 [ 229.704455][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 229.745367][ T5842] usb usb2-port1: attempt power cycle [ 229.984440][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 230.013907][ T31] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 230.013936][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.013948][ T31] usb 3-1: Product: syz [ 230.013956][ T31] usb 3-1: Manufacturer: syz [ 230.013967][ T31] usb 3-1: SerialNumber: syz [ 230.049305][ T31] usb 3-1: config 0 descriptor?? [ 231.068090][ T31] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 231.638424][ T31] gspca_stk1135: reg_w 0x2 err -110 [ 231.639475][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 231.639486][ T31] gspca_stk1135: Sensor write failed [ 231.639517][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 231.639527][ T31] gspca_stk1135: Sensor write failed [ 231.639558][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 231.639568][ T31] gspca_stk1135: Sensor read failed [ 231.639599][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 231.639609][ T31] gspca_stk1135: Sensor read failed [ 231.639616][ T31] gspca_stk1135: Detected sensor type unknown (0x0) [ 231.639653][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 231.639663][ T31] gspca_stk1135: Sensor read failed [ 231.639700][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 231.639710][ T31] gspca_stk1135: Sensor read failed [ 231.639740][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 231.639750][ T31] gspca_stk1135: Sensor write failed [ 231.639781][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 231.639790][ T31] gspca_stk1135: Sensor write failed [ 231.639886][ T31] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 231.873692][ T5842] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 231.885517][ T5842] usb 2-1: device descriptor read/8, error -71 [ 232.124708][ T5842] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 232.146586][ T5842] usb 2-1: device descriptor read/8, error -71 [ 232.255087][ T5842] usb usb2-port1: unable to enumerate USB device [ 233.155096][ T5842] usb 3-1: USB disconnect, device number 12 [ 235.037853][ T1006] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 235.148757][ T7032] warning: `syz.1.366' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 235.204815][ T1006] usb 3-1: device descriptor read/64, error -71 [ 235.396440][ T5606] Bluetooth: hci2: unexpected event 0x04 length: 245 > 10 [ 235.396471][ T5606] Bluetooth: hci2: connection err: -111 [ 235.454611][ T1006] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 235.564455][ T5799] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 235.594761][ T1006] usb 3-1: device descriptor read/64, error -71 [ 235.707562][ T1006] usb usb3-port1: attempt power cycle [ 235.764763][ T5799] usb 1-1: Using ep0 maxpacket: 16 [ 235.771445][ T5799] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 235.771477][ T5799] usb 1-1: config 0 has no interface number 0 [ 235.771527][ T5799] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 235.771572][ T5799] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 235.778261][ T5799] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 235.778293][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.778314][ T5799] usb 1-1: Product: syz [ 235.778329][ T5799] usb 1-1: Manufacturer: syz [ 235.778343][ T5799] usb 1-1: SerialNumber: syz [ 235.813365][ T5799] usb 1-1: config 0 descriptor?? [ 235.814854][ T7042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 235.816626][ T7042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.048924][ T7042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.049051][ T7042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.065323][ T1006] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 236.065990][ T5585] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 236.085656][ T1006] usb 3-1: device descriptor read/8, error -71 [ 236.154480][ T5729] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 236.238953][ T5585] usb 2-1: Using ep0 maxpacket: 32 [ 236.271120][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 236.295602][ T7042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.368'. [ 236.305799][ T5729] usb 5-1: device descriptor read/64, error -71 [ 236.308430][ T5585] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.308541][ T5585] usb 2-1: config 0 interface 0 has no altsetting 0 [ 236.316342][ T5585] usb 2-1: New USB device found, idVendor=0742, idProduct=2626, bcdDevice= 0.00 [ 236.316371][ T5585] usb 2-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 236.316447][ T5585] usb 2-1: Product: syz [ 236.334898][ T1006] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 236.357502][ T1006] usb 3-1: device descriptor read/8, error -71 [ 236.372901][ T5585] usb 2-1: config 0 descriptor?? [ 236.478174][ T1006] usb usb3-port1: unable to enumerate USB device [ 236.544492][ T5729] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 236.674537][ T5729] usb 5-1: device descriptor read/64, error -71 [ 236.784826][ T5729] usb usb5-port1: attempt power cycle [ 236.878844][ T5585] usbhid 2-1:0.0: can't add hid device: -71 [ 236.879057][ T5585] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 236.925387][ T5585] usb 2-1: USB disconnect, device number 22 [ 237.127622][ T5729] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 237.156778][ T5729] usb 5-1: device descriptor read/8, error -71 [ 237.426225][ T5729] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 237.445611][ T5729] usb 5-1: device descriptor read/8, error -71 [ 237.554989][ T5729] usb usb5-port1: unable to enumerate USB device [ 237.615108][ T7068] FAULT_INJECTION: forcing a failure. [ 237.615108][ T7068] name failslab, interval 1, probability 0, space 0, times 0 [ 237.615145][ T7068] CPU: 0 UID: 0 PID: 7068 Comm: syz.2.378 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 237.615170][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.615182][ T7068] Call Trace: [ 237.615190][ T7068] [ 237.615199][ T7068] dump_stack_lvl+0xe8/0x150 [ 237.615231][ T7068] should_fail_ex+0x46b/0x600 [ 237.615271][ T7068] should_failslab+0xa8/0x100 [ 237.615298][ T7068] __kmalloc_noprof+0xdf/0x7b0 [ 237.615322][ T7068] ? tomoyo_encode+0x28b/0x550 [ 237.615359][ T7068] tomoyo_encode+0x28b/0x550 [ 237.615397][ T7068] tomoyo_realpath_from_path+0x58d/0x5d0 [ 237.615430][ T7068] ? tomoyo_domain+0xd8/0x130 [ 237.615456][ T7068] ? tomoyo_path_number_perm+0x219/0x630 [ 237.615482][ T7068] tomoyo_path_number_perm+0x246/0x630 [ 237.615512][ T7068] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 237.615537][ T7068] ? __lock_acquire+0x6b5/0x2cf0 [ 237.615566][ T7068] ? do_raw_spin_lock+0x12b/0x2f0 [ 237.615627][ T7068] ? __fget_files+0x2a/0x420 [ 237.615667][ T7068] ? __fget_files+0x2a/0x420 [ 237.615695][ T7068] ? __fget_files+0x3a6/0x420 [ 237.615725][ T7068] ? __fget_files+0x2a/0x420 [ 237.615759][ T7068] security_file_ioctl+0xc3/0x2a0 [ 237.615791][ T7068] __se_sys_ioctl+0x47/0x170 [ 237.615816][ T7068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.615839][ T7068] do_syscall_64+0x15f/0xf80 [ 237.615858][ T7068] ? trace_irq_disable+0x3b/0x140 [ 237.615883][ T7068] ? clear_bhb_loop+0x40/0x90 [ 237.615917][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.615938][ T7068] RIP: 0033:0x7f2d842ccdd9 [ 237.615958][ T7068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.615976][ T7068] RSP: 002b:00007f2d8251e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.615999][ T7068] RAX: ffffffffffffffda RBX: 00007f2d84545fa0 RCX: 00007f2d842ccdd9 [ 237.616015][ T7068] RDX: 0000200000000080 RSI: 0000000040305828 RDI: 0000000000000003 [ 237.616027][ T7068] RBP: 00007f2d8251e090 R08: 0000000000000000 R09: 0000000000000000 [ 237.616039][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.616052][ T7068] R13: 00007f2d84546038 R14: 00007f2d84545fa0 R15: 00007fff51ac1e18 [ 237.616087][ T7068] [ 237.616137][ T7068] ERROR: Out of memory at tomoyo_realpath_from_path. [ 237.673364][ T5606] Bluetooth: hci4: unexpected event 0x04 length: 245 > 10 [ 237.673458][ T5606] Bluetooth: hci4: connection err: -111 [ 237.752125][ T5799] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 237.752155][ T5799] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 237.752423][ T5799] asix 1-1:0.34: probe with driver asix failed with error -71 [ 237.828307][ T5799] usb 1-1: USB disconnect, device number 23 [ 239.334443][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 239.467179][ T31] usb 3-1: device descriptor read/64, error -71 [ 239.554514][ T5585] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 239.733893][ T5585] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 239.733929][ T5585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.733951][ T5585] usb 4-1: Product: syz [ 239.733967][ T5585] usb 4-1: Manufacturer: syz [ 239.733982][ T5585] usb 4-1: SerialNumber: syz [ 239.759226][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 239.796128][ T5799] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 239.884621][ T31] usb 3-1: device descriptor read/64, error -71 [ 239.944544][ T5799] usb 1-1: Using ep0 maxpacket: 32 [ 240.006467][ T31] usb usb3-port1: attempt power cycle [ 240.294551][ T5799] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 240.294586][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.294606][ T5799] usb 1-1: Product: syz [ 240.294694][ T5799] usb 1-1: Manufacturer: syz [ 240.294711][ T5799] usb 1-1: SerialNumber: syz [ 240.350383][ T5799] usb 1-1: config 0 descriptor?? [ 240.460840][ T5799] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 240.504651][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 240.526215][ T31] usb 3-1: device descriptor read/8, error -71 [ 240.670055][ T5606] Bluetooth: hci4: unexpected event 0x04 length: 245 > 10 [ 240.670101][ T5606] Bluetooth: hci4: connection err: -111 [ 240.787085][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 240.868513][ T31] usb 3-1: device descriptor read/8, error -71 [ 240.983838][ T31] usb usb3-port1: unable to enumerate USB device [ 241.037262][ T5585] rtl8150 4-1:1.0: couldn't reset the device [ 241.037941][ T5585] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 241.163059][ T5585] usb 4-1: USB disconnect, device number 8 [ 241.858576][ T7106] kAFS: unable to lookup cell 'syz1' [ 241.882519][ T5799] gspca_stk1135: reg_w 0x7 err -110 [ 241.883563][ T5799] gspca_stk1135: serial bus timeout: status=0x00 [ 241.883577][ T5799] gspca_stk1135: Sensor write failed [ 241.883605][ T5799] gspca_stk1135: serial bus timeout: status=0x00 [ 241.883615][ T5799] gspca_stk1135: Sensor write failed [ 241.883641][ T5799] gspca_stk1135: serial bus timeout: status=0x00 [ 241.883650][ T5799] gspca_stk1135: Sensor read failed [ 241.883790][ T5799] gspca_stk1135: serial bus timeout: status=0x00 [ 241.883800][ T5799] gspca_stk1135: Sensor read failed [ 241.883807][ T5799] gspca_stk1135: Detected sensor type unknown (0x0) [ 241.883837][ T5799] gspca_stk1135: serial bus timeout: status=0x00 [ 241.883846][ T5799] gspca_stk1135: Sensor read failed [ 241.883870][ T5799] gspca_stk1135: serial bus timeout: status=0x00 [ 241.883878][ T5799] gspca_stk1135: Sensor read failed [ 241.883914][ T5799] gspca_stk1135: serial bus timeout: status=0x00 [ 241.883922][ T5799] gspca_stk1135: Sensor write failed [ 241.883947][ T5799] gspca_stk1135: serial bus timeout: status=0x00 [ 241.883956][ T5799] gspca_stk1135: Sensor write failed [ 241.884044][ T5799] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 242.134514][ T5835] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 242.284481][ T5842] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 242.284660][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 242.308823][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.308853][ T5835] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 242.374239][ T5835] usb 3-1: New USB device found, idVendor=0742, idProduct=2626, bcdDevice= 0.00 [ 242.374274][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 242.391854][ T5835] usb 3-1: Product: syz [ 242.405054][ T5835] usb 3-1: config 0 descriptor?? [ 242.434518][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 242.484748][ T5842] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 242.559687][ T5842] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 242.559722][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.559743][ T5842] usb 4-1: Product: syz [ 242.559757][ T5842] usb 4-1: Manufacturer: syz [ 242.559771][ T5842] usb 4-1: SerialNumber: syz [ 242.618400][ T5842] usb 4-1: config 0 descriptor?? [ 243.827997][ T5585] usb 1-1: USB disconnect, device number 24 [ 244.539599][ T5606] Bluetooth: hci4: unexpected event 0x04 length: 245 > 10 [ 244.539647][ T5606] Bluetooth: hci4: connection err: -111 [ 244.594863][ T5799] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 244.724506][ T5799] usb 1-1: device descriptor read/64, error -71 [ 244.819408][ T31] usb 3-1: USB disconnect, device number 21 [ 244.894568][ T5835] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 244.964422][ T5799] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 245.842912][ T5729] usb 4-1: USB disconnect, device number 9 [ 245.845235][ T5835] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 245.845255][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.845267][ T5835] usb 2-1: Product: syz [ 245.845275][ T5835] usb 2-1: Manufacturer: syz [ 245.845283][ T5835] usb 2-1: SerialNumber: syz [ 245.893352][ T5799] usb 1-1: device descriptor read/64, error -71 [ 246.033343][ T5799] usb usb1-port1: attempt power cycle [ 246.125291][ T5585] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 246.254517][ T5585] usb 3-1: device descriptor read/64, error -71 [ 246.492025][ T5835] rtl8150 2-1:1.0: couldn't reset the device [ 246.504126][ T5835] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 246.504803][ T5585] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 246.538087][ T5799] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 246.555274][ T5799] usb 1-1: device descriptor read/8, error -71 [ 246.580674][ T5835] usb 2-1: USB disconnect, device number 23 [ 246.664524][ T5585] usb 3-1: device descriptor read/64, error -71 [ 246.777898][ T5585] usb usb3-port1: attempt power cycle [ 246.806097][ T5799] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 246.825468][ T5799] usb 1-1: device descriptor read/8, error -71 [ 246.935258][ T5799] usb usb1-port1: unable to enumerate USB device [ 247.006020][ T5728] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 247.124569][ T5585] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 247.145407][ T5585] usb 3-1: device descriptor read/8, error -71 [ 247.154698][ T5728] usb 4-1: Using ep0 maxpacket: 32 [ 247.168949][ T5728] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 247.172171][ T5728] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 247.172204][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.172225][ T5728] usb 4-1: Product: syz [ 247.172240][ T5728] usb 4-1: Manufacturer: syz [ 247.172255][ T5728] usb 4-1: SerialNumber: syz [ 247.225428][ T5728] usb 4-1: config 0 descriptor?? [ 247.324477][ T5835] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 247.394590][ T5585] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 247.418591][ T5585] usb 3-1: device descriptor read/8, error -71 [ 247.474538][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 247.480351][ T5835] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 247.480382][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.480403][ T5835] usb 2-1: Product: syz [ 247.480417][ T5835] usb 2-1: Manufacturer: syz [ 247.480431][ T5835] usb 2-1: SerialNumber: syz [ 247.525657][ T5835] usb 2-1: config 0 descriptor?? [ 247.537692][ T5585] usb usb3-port1: unable to enumerate USB device [ 247.555145][ T5835] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 248.784962][ T5835] gspca_stk1135: reg_w 0x5 err -110 [ 248.786029][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 248.786042][ T5835] gspca_stk1135: Sensor write failed [ 248.786073][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 248.786091][ T5835] gspca_stk1135: Sensor write failed [ 248.786122][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 248.786132][ T5835] gspca_stk1135: Sensor read failed [ 248.786163][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 248.786172][ T5835] gspca_stk1135: Sensor read failed [ 248.786179][ T5835] gspca_stk1135: Detected sensor type unknown (0x0) [ 248.786211][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 248.786221][ T5835] gspca_stk1135: Sensor read failed [ 248.786250][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 248.786260][ T5835] gspca_stk1135: Sensor read failed [ 248.786290][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 248.786300][ T5835] gspca_stk1135: Sensor write failed [ 248.786330][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 248.786339][ T5835] gspca_stk1135: Sensor write failed [ 248.786435][ T5835] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 249.381453][ T5606] Bluetooth: hci3: unexpected event 0x04 length: 245 > 10 [ 249.381566][ T5606] Bluetooth: hci3: connection err: -111 [ 249.567537][ T7179] FAULT_INJECTION: forcing a failure. [ 249.567537][ T7179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.567576][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.2.418 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 249.567599][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.567610][ T7179] Call Trace: [ 249.567618][ T7179] [ 249.567628][ T7179] dump_stack_lvl+0xe8/0x150 [ 249.567677][ T7179] should_fail_ex+0x46b/0x600 [ 249.567723][ T7179] _copy_from_iter+0x1d3/0x1670 [ 249.567763][ T7179] ? trace_kmem_cache_alloc+0x29/0xe0 [ 249.567785][ T7179] ? __alloc_skb+0x27d/0x7d0 [ 249.567807][ T7179] ? __pfx__copy_from_iter+0x10/0x10 [ 249.567845][ T7179] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 249.567868][ T7179] ? __alloc_skb+0x27d/0x7d0 [ 249.567896][ T7179] ? netlink_sendmsg+0x650/0xb40 [ 249.567918][ T7179] ? skb_put+0x11b/0x210 [ 249.567952][ T7179] netlink_sendmsg+0x6c0/0xb40 [ 249.567986][ T7179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.568010][ T7179] ? unwind_get_return_address+0x4d/0x90 [ 249.568043][ T7179] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.568068][ T7179] ____sys_sendmsg+0x94c/0x9c0 [ 249.568099][ T7179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.568132][ T7179] ? import_iovec+0x73/0xa0 [ 249.568159][ T7179] ___sys_sendmsg+0x2a5/0x360 [ 249.568183][ T7179] ? __lock_acquire+0x6b5/0x2cf0 [ 249.568227][ T7179] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.568290][ T7179] ? __fget_files+0x2a/0x420 [ 249.568319][ T7179] ? __fget_files+0x3a6/0x420 [ 249.568360][ T7179] __x64_sys_sendmsg+0x1c3/0x2a0 [ 249.568388][ T7179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.568424][ T7179] ? __pfx_ksys_write+0x10/0x10 [ 249.568458][ T7179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.568481][ T7179] do_syscall_64+0x15f/0xf80 [ 249.568501][ T7179] ? trace_irq_disable+0x3b/0x140 [ 249.568523][ T7179] ? clear_bhb_loop+0x40/0x90 [ 249.568557][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.568578][ T7179] RIP: 0033:0x7f2d842ccdd9 [ 249.568599][ T7179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.568617][ T7179] RSP: 002b:00007f2d8251e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.568640][ T7179] RAX: ffffffffffffffda RBX: 00007f2d84545fa0 RCX: 00007f2d842ccdd9 [ 249.568655][ T7179] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 249.568668][ T7179] RBP: 00007f2d8251e090 R08: 0000000000000000 R09: 0000000000000000 [ 249.568681][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.568693][ T7179] R13: 00007f2d84546038 R14: 00007f2d84545fa0 R15: 00007fff51ac1e18 [ 249.568728][ T7179] [ 249.723601][ T7177] ------------[ cut here ]------------ [ 249.723614][ T7177] debug_locks && !(!get_current()->pi_blocked_on) [ 249.723622][ T7177] WARNING: kernel/locking/spinlock_rt.c:40 at rt_spin_lock+0x31c/0x400, CPU#1: syz.4.417/7177 [ 249.723663][ T7177] Modules linked in: [ 249.723683][ T7177] CPU: 1 UID: 0 PID: 7177 Comm: syz.4.417 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 249.723705][ T7177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.723738][ T7177] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 249.723762][ T7177] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d0 70 01 00 cc e8 9a e2 14 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 7e e2 14 f6 [ 249.723779][ T7177] RSP: 0018:ffffc90008e8f5a0 EFLAGS: 00010282 [ 249.723795][ T7177] RAX: 1ffff11005130917 RBX: 1ffff920011d1eb8 RCX: 0000000000000046 [ 249.723810][ T7177] RDX: 0000000000000000 RSI: ffffffff8d860c1e RDI: ffffffff8ba74c60 [ 249.723823][ T7177] RBP: ffffc90008e8f660 R08: ffffffff8220f054 R09: ffff88801a029758 [ 249.723837][ T7177] R10: dffffc0000000000 R11: fffffbfff1f11a5f R12: ffff8880289848b8 [ 249.723851][ T7177] R13: dffffc0000000000 R14: ffff88801a029700 R15: ffffc90008e8f5e0 [ 249.723865][ T7177] FS: 00007f5e5ccb66c0(0000) GS:ffff88812627c000(0000) knlGS:0000000000000000 [ 249.723881][ T7177] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.723902][ T7177] CR2: 000055555dc4ea28 CR3: 000000003a0fa000 CR4: 00000000003526f0 [ 249.723922][ T7177] Call Trace: [ 249.723929][ T7177] [ 249.723941][ T7177] ? __pfx_rt_spin_lock+0x10/0x10 [ 249.723967][ T7177] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 249.723996][ T7177] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.724024][ T7177] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 249.724056][ T7177] ? fill_pool+0x156/0x580 [ 249.724083][ T7177] get_from_partial_node+0x54/0x480 [ 249.724114][ T7177] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 249.724148][ T7177] ? fill_pool+0x156/0x580 [ 249.724173][ T7177] ___slab_alloc+0xb2/0x670 [ 249.724211][ T7177] kmem_cache_alloc_noprof+0xea/0x680 [ 249.724232][ T7177] ? fill_pool+0x156/0x580 [ 249.724263][ T7177] fill_pool+0x156/0x580 [ 249.724343][ T7177] ? __pfx_fill_pool+0x10/0x10 [ 249.724383][ T7177] ? debug_objects_fill_pool+0x6f/0xd0 [ 249.724413][ T7177] ? debug_objects_fill_pool+0x6f/0xd0 [ 249.724447][ T7177] debug_objects_fill_pool+0x97/0xd0 [ 249.724474][ T7177] debug_object_assert_init+0x34/0x340 [ 249.724509][ T7177] hrtimer_start_range_ns+0x3f/0xef0 [ 249.724537][ T7177] ? preempt_schedule_thunk+0x16/0x30 [ 249.724566][ T7177] ? preempt_schedule_common+0x82/0xd0 [ 249.724603][ T7177] futex_lock_pi+0x8df/0xb10 [ 249.724636][ T7177] ? __pfx_futex_lock_pi+0x10/0x10 [ 249.724661][ T7177] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 249.724681][ T7177] ? __lock_acquire+0x6b5/0x2cf0 [ 249.724728][ T7177] ? __pfx_futex_wake_mark+0x10/0x10 [ 249.724773][ T7177] do_futex+0x292/0x420 [ 249.724806][ T7177] ? __pfx_do_futex+0x10/0x10 [ 249.724842][ T7177] __se_sys_futex+0x3a8/0x450 [ 249.724876][ T7177] ? __pfx___se_sys_futex+0x10/0x10 [ 249.724913][ T7177] ? __task_pid_nr_ns+0x28/0x470 [ 249.724944][ T7177] ? __x64_sys_futex+0x21/0xf0 [ 249.724971][ T7177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.724992][ T7177] do_syscall_64+0x15f/0xf80 [ 249.725012][ T7177] ? clear_bhb_loop+0x40/0x90 [ 249.725036][ T7177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.725054][ T7177] RIP: 0033:0x7f5e5ea5cdd9 [ 249.725073][ T7177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.725088][ T7177] RSP: 002b:00007f5e5ccb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 249.725108][ T7177] RAX: ffffffffffffffda RBX: 00007f5e5ecd5fa0 RCX: 00007f5e5ea5cdd9 [ 249.725122][ T7177] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200 [ 249.725134][ T7177] RBP: 00007f5e5eaf2d69 R08: 0000000000000000 R09: 0000000000000001 [ 249.725146][ T7177] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 249.725158][ T7177] R13: 00007f5e5ecd6038 R14: 00007f5e5ecd5fa0 R15: 00007ffc2bfbe6d8 [ 249.725192][ T7177] [ 249.725204][ T7177] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.725220][ T7177] CPU: 1 UID: 0 PID: 7177 Comm: syz.4.417 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 249.725244][ T7177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.725255][ T7177] Call Trace: [ 249.725264][ T7177] [ 249.725273][ T7177] vpanic+0x56c/0xa60 [ 249.725300][ T7177] ? __pfx__printk+0x10/0x10 [ 249.725330][ T7177] ? __pfx_vpanic+0x10/0x10 [ 249.725353][ T7177] ? is_bpf_text_address+0x292/0x2b0 [ 249.725382][ T7177] ? is_bpf_text_address+0x26/0x2b0 [ 249.725421][ T7177] panic+0xc5/0xd0 [ 249.725445][ T7177] ? __pfx_panic+0x10/0x10 [ 249.725490][ T7177] __warn+0x315/0x4c0 [ 249.725514][ T7177] ? rt_spin_lock+0x31c/0x400 [ 249.725544][ T7177] ? rt_spin_lock+0x31c/0x400 [ 249.725573][ T7177] __report_bug+0x29a/0x540 [ 249.725614][ T7177] ? rt_spin_lock+0x31c/0x400 [ 249.725642][ T7177] ? __pfx___report_bug+0x10/0x10 [ 249.725675][ T7177] ? __lock_acquire+0x6b5/0x2cf0 [ 249.725717][ T7177] ? __lock_acquire+0x6b5/0x2cf0 [ 249.725748][ T7177] ? rt_spin_lock+0x31c/0x400 [ 249.725775][ T7177] report_bug+0x16a/0x220 [ 249.725809][ T7177] ? rt_spin_lock+0x31c/0x400 [ 249.725834][ T7177] ? rt_spin_lock+0x31e/0x400 [ 249.725861][ T7177] handle_bug+0x9c/0x200 [ 249.725887][ T7177] exc_invalid_op+0x1a/0x50 [ 249.725922][ T7177] asm_exc_invalid_op+0x1a/0x20 [ 249.725942][ T7177] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 249.725968][ T7177] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d0 70 01 00 cc e8 9a e2 14 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 7e e2 14 f6 [ 249.725987][ T7177] RSP: 0018:ffffc90008e8f5a0 EFLAGS: 00010282 [ 249.726006][ T7177] RAX: 1ffff11005130917 RBX: 1ffff920011d1eb8 RCX: 0000000000000046 [ 249.726023][ T7177] RDX: 0000000000000000 RSI: ffffffff8d860c1e RDI: ffffffff8ba74c60 [ 249.726039][ T7177] RBP: ffffc90008e8f660 R08: ffffffff8220f054 R09: ffff88801a029758 [ 249.726055][ T7177] R10: dffffc0000000000 R11: fffffbfff1f11a5f R12: ffff8880289848b8 [ 249.726071][ T7177] R13: dffffc0000000000 R14: ffff88801a029700 R15: ffffc90008e8f5e0 [ 249.726095][ T7177] ? get_from_partial_node+0x54/0x480 [ 249.726141][ T7177] ? __pfx_rt_spin_lock+0x10/0x10 [ 249.726170][ T7177] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 249.726205][ T7177] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.726237][ T7177] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 249.726274][ T7177] ? fill_pool+0x156/0x580 [ 249.726303][ T7177] get_from_partial_node+0x54/0x480 [ 249.726337][ T7177] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 249.726376][ T7177] ? fill_pool+0x156/0x580 [ 249.726406][ T7177] ___slab_alloc+0xb2/0x670 [ 249.726448][ T7177] kmem_cache_alloc_noprof+0xea/0x680 [ 249.726472][ T7177] ? fill_pool+0x156/0x580 [ 249.726509][ T7177] fill_pool+0x156/0x580 [ 249.726547][ T7177] ? __pfx_fill_pool+0x10/0x10 [ 249.726587][ T7177] ? debug_objects_fill_pool+0x6f/0xd0 [ 249.726617][ T7177] ? debug_objects_fill_pool+0x6f/0xd0 [ 249.726651][ T7177] debug_objects_fill_pool+0x97/0xd0 [ 249.726682][ T7177] debug_object_assert_init+0x34/0x340 [ 249.726721][ T7177] hrtimer_start_range_ns+0x3f/0xef0 [ 249.726754][ T7177] ? preempt_schedule_thunk+0x16/0x30 [ 249.726787][ T7177] ? preempt_schedule_common+0x82/0xd0 [ 249.726830][ T7177] futex_lock_pi+0x8df/0xb10 [ 249.726868][ T7177] ? __pfx_futex_lock_pi+0x10/0x10 [ 249.726906][ T7177] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 249.726928][ T7177] ? __lock_acquire+0x6b5/0x2cf0 [ 249.726978][ T7177] ? __pfx_futex_wake_mark+0x10/0x10 [ 249.727031][ T7177] do_futex+0x292/0x420 [ 249.727069][ T7177] ? __pfx_do_futex+0x10/0x10 [ 249.727113][ T7177] __se_sys_futex+0x3a8/0x450 [ 249.727153][ T7177] ? __pfx___se_sys_futex+0x10/0x10 [ 249.727187][ T7177] ? __task_pid_nr_ns+0x28/0x470 [ 249.727222][ T7177] ? __x64_sys_futex+0x21/0xf0 [ 249.727255][ T7177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.727280][ T7177] do_syscall_64+0x15f/0xf80 [ 249.727302][ T7177] ? clear_bhb_loop+0x40/0x90 [ 249.727331][ T7177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.727352][ T7177] RIP: 0033:0x7f5e5ea5cdd9 [ 249.727372][ T7177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.727391][ T7177] RSP: 002b:00007f5e5ccb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 249.727412][ T7177] RAX: ffffffffffffffda RBX: 00007f5e5ecd5fa0 RCX: 00007f5e5ea5cdd9 [ 249.727428][ T7177] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200 [ 249.727442][ T7177] RBP: 00007f5e5eaf2d69 R08: 0000000000000000 R09: 0000000000000001 [ 249.727456][ T7177] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 249.727470][ T7177] R13: 00007f5e5ecd6038 R14: 00007f5e5ecd5fa0 R15: 00007ffc2bfbe6d8 [ 249.727507][ T7177] [ 249.728040][ T7177] Kernel Offset: disabled