last executing test programs: 15.606758997s ago: executing program 1 (id=954): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0x13) (async) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async, rerun: 64) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) (rerun: 64) ftruncate(r4, 0x1000006) (async) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x1000000}) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) (async) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x102, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x3, 0xa, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x32}, @in=@multicast1=0x4d4, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1d, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 32) lseek(r5, 0x5, 0x2) getdents64(r5, 0x0, 0x22) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) (async) socket(0x11, 0x3, 0x10) r6 = syz_io_uring_setup(0x18db, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x0, 0x177}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200251001000500110007ffe00014001680100001800c00040007000000cafc7f00"], 0x3c}, 0x1, 0x0, 0x0, 0xc051}, 0x48880) 15.388431775s ago: executing program 1 (id=955): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bind$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x13) dup(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x776) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r3, &(0x7f0000000480)="3130303030308c8beb415274694a523e6bc34634a82078c30435af51d6c32537a8ead0a4d4809c48bd10b2da04b7c90e021e052726accc40aeb961715f55e02901683ac46d99a50d79baf8d209496f796520b61513aa938d6b539faf63df8ea4d06723b560eb0b7b97bde3612811d85e0ff5", 0x72) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r5 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) write(r4, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x14) write(r6, &(0x7f0000000280)='0', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x758e6000) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14.470353203s ago: executing program 1 (id=959): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4, @loopback, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000005c0)="99b8d642e609ff7f000000000000", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="7434f65b0a55ea615e98a3a14417ad", 0xf}, {&(0x7f0000000540)="b2056b3b5dd0883be34349fd20e1", 0xe}], 0x2}}], 0x2, 0x48081) 14.392048002s ago: executing program 1 (id=960): r0 = socket(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_MAC={0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x8081) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 7.811735713s ago: executing program 0 (id=996): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) unshare(0x2040400) getsockname$netlink(r0, &(0x7f0000000140), &(0x7f0000000180)=0xc) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2002c080) ioctl$KVM_CAP_VM_TYPES(r0, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000240)={0x3, 0x40}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'vlan1\x00', {0x2, 0x0, @local}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7.249076786s ago: executing program 2 (id=999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x11, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x10}}, 0xb4}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000101401002cbd7000bedbdf2508"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4000c014) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r7, 0x1, 0x3, 0x6, @remote}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x800, 0x20008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xa1ffffff, 0x4, 0x6}}]}]}]}, 0x4c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000340)={0x0, @sco={0x1f, @none}, @can, @qipcrtr={0x2a, 0x2, 0x7fff}, 0x128, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)='wlan0\x00', 0x9, 0x4, 0x200}) setsockopt$inet_mreq(r8, 0x0, 0x20, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x100, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004040) sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x100, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000) 6.140109877s ago: executing program 0 (id=1004): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000013c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0x300000f, 0x10010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f00000014c0)=""/95, 0x5f, 0x60000040, &(0x7f0000001540)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000111000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, 0x0, 0x3b) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) unshare(0x8040480) r5 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) 5.221619274s ago: executing program 0 (id=1006): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0xffff}], 0x1, 0x1, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (fail_nth: 58) landlock_restrict_self(r0, 0xb) 4.885257536s ago: executing program 0 (id=1007): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x4, 0x2, 0x81}, {0x20, 0x0, 0x8, 0xffff700c}, {0x5, 0xba, 0x2, 0xffff}]}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x3b, 0x4f, 0x31, 0x10, 0x93b, 0xa104, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc8, 0x3, 0x20, 0x2, "", [{{0x9, 0x4, 0x61, 0xd, 0x0, 0x25, 0xea, 0xfb, 0xb}}]}}]}}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 3.904115803s ago: executing program 3 (id=1010): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40481, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x1, 0x3, 0x2, 0x1}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r1], 0x14}}, 0x44014) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000980)=""/167, 0xa7}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x2}, 0x804}], 0x1, 0x2, 0x0) recvmmsg(r1, &(0x7f00000006c0), 0x4000183, 0x142, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3ffffffe}}, 0x0) close(r0) open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x4, @private1, 0x2}}}, &(0x7f00000004c0)=0x84) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x20821, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x2b7c082, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="020c9f03030000002bbd7000fedbdf25010016005e220000"], 0x18}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_AIE_OFF(r4, 0x7002) 3.903721632s ago: executing program 2 (id=1011): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x74, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) (async) r2 = syz_usb_connect$midi(0x0, 0xc0, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x7104, 0x2202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x1, 0x1, 0xd, 0x80, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x4c, [@midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x5, 0x3, [{0x7, 0x81}, {0x6, 0x5}, {0xc8, 0x8f}], 0x2}], [{{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x0, 0x4, 0x70, {0x10, 0x25, 0x1, 0xc, "3db9a507166bdc22159524e2"}}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x81, 0x60, 0x5, {0xe, 0x25, 0x1, 0xa, "8d01ad30dda87a8ccbc9"}}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0x80, 0x9, {0x12, 0x25, 0x1, 0xe, "906d111338ca363f00dbfdfbdb0e"}}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x6, 0x9, 0x8, {0x13, 0x25, 0x1, 0xf, "2aa126bbfb677a8223b32750b5765f"}}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x8, 0x6, 0x1, {0xb, 0x25, 0x1, 0x7, "7a137c1dcf09c3"}}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x6, 0x1, 0x7, {0xb, 0x25, 0x1, 0x7, "c640d0791697f2"}}}]}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x4, 0x10, 0x9, 0x8, 0x3}, 0xd1, &(0x7f0000000200)={0x5, 0xf, 0xd1, 0x6, [@generic={0x89, 0x10, 0x4, "f72ab7bc6e402604782b485fcc6ad9c4f2b1b3fc7682ee7333f76f1acd30efe272ddc9f3442236ccf3e199915d5c67c7963540eca7cf33344c1642282c62b49b3e3158ea924caa97fd78846ce696787cc1c3eb686da7ceca5b86abc6ba75ff193e55a2c2e9a31c22e3d96057bfbad31d36de5ca6c0eb92cb7319c270868afe81f7ececa8d41d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2, 0x8, 0x7fff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x9, 0x1, 0x6}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x4, 0xf00f, 0x1, [0xff000f, 0xc000, 0x46773ced64a5faf3, 0xff00cf]}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x8, 0xff0f, 0x9, [0xf]}]}, 0x6, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x861}}, {0xe7, &(0x7f0000000400)=@string={0xe7, 0x3, "2f43ce91bd54c77ccc5c331c2a6ef7554dab4b32f4d4dcbfb4f294bfdb4a867ffddc0d01483288383fdb67371c70db0e879d624daa02a7fb3fb9bea91711f066d927ce0b7924e91d2d58cddf573866ff38205b448241cd0f974a6dbc05a2d10cd243beacf8b835e1b755264669674cc960d4e868eb13cf6884282f33407ccb370e75a219eb910962c0f0adb8f87995d03d4fee798323efcf4d3281f68131410f3939e49304f2caf74fa037e1663d562127d77982f476c32b1b221772ba7f11bec85c87fd31b42ea1fe5e0ff1ef5eba00bed3762f36b8c879e694c41c15fe630506db2f5f4c"}}, {0xde, &(0x7f0000000500)=@string={0xde, 0x3, "d6d9b75087eb762893823d8448194f70064fb4320fb426300c3ddf88cf4fcecdca1064d00db7abed0915c5bb751035bdf260ac4772cec3c027703ee4a8d05241a366c7b64a6554b0edbe7fdf1126cd5b76a75a19b601386aef65f983eaee4fcb73ed0ac059391dc98dc20d3dd20e7b6ad7f0ca58dca44d96b09d1d076daa3bb66514c842b1688c81d15cfd029a7a1f84d4770920c9be0c8433f21e4647b9905317f4a24d02ec51c10df69905d839dd807cd4dd2d23417b8f2641c2347e827006ca3748ca92287696e96e0e03ca2d1a8cb7c7c67b6fcd707ed926bc4f"}}]}) syz_usb_control_io$uac2(r2, &(0x7f0000000780)={0x14, &(0x7f0000000680)={0x0, 0x30, 0x15, {0x15, 0xa, "13c42d1479e8bf3e4b6f45e987940869f2ebad"}}, &(0x7f00000006c0)={0x0, 0x3, 0x83, @string={0x83, 0x3, "806816c5bb864908ce7d5e01811a8b2f45ff824502315dfc310f6de84a835358bca56951f642f982d59a381c83c37c3b0dd65e4fea1b948ab4b4ac8187c53e1039f9666cdbf12c0d7f3a04e131184deef2a783cda794525196b7b94e91873c8599f530d1948f416961971e8061044edad89df41a394f31f2f9e1e291f1e42c5e2d"}}}, &(0x7f00000009c0)={0x44, &(0x7f00000007c0)={0x40, 0x17, 0x15, "d3bafaeb0c947afbd746aae7819c20ee43f94911c0"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000880)={0x20, 0x81, 0x2, 'M['}, &(0x7f00000008c0)={0x20, 0x82, 0x1, 'y'}, &(0x7f0000000900)={0x20, 0x83, 0x2, "0301"}, &(0x7f0000000940)={0x20, 0x84, 0x1, "86"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "fab955"}}) 3.566481308s ago: executing program 4 (id=1012): pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x41, 0x0, @thr={0x0, &(0x7f0000000540)="defaef60a57d439b367f0faca2a391f4c61187d8b269fec8c41edf63471330d67d835f0217456be91740339614e4cdd25d6b5da77574db94658cbadb6128e64e0acb1e3288a3008cc57d1a26b89c"}}, &(0x7f0000000600)=0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000680)={{}, {r3, r4+10000000}}, &(0x7f00000006c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(0x0, 0x3ff, 0x2000005, 0xf8d8b7d7096f8e76, r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a300000000014000580080001"], 0xe8}}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000440)={0x7, 0x1b, 0x1}, 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x208, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x208, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x5, 0x2, 0x0, 'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x7fff, 0xf, 0x10001, 'syz1\x00', 'syz0\x00', {0x1}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x15}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0x0, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xffffff00], 'veth1_to_bond\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x76, 0xf7, 0x6, 0x66}, 0xd002, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 3.389877549s ago: executing program 4 (id=1013): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = fanotify_init(0x200, 0x800) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x801) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000005c0)={0x0, 0x7f, 0x0, [0x50c0, 0x3, 0x89db, 0x6e26, 0x14], [0x51b, 0x9, 0x1, 0x400, 0x1, 0xe90000, 0x611, 0xeb, 0x7, 0x8, 0x10000, 0x7, 0x5, 0x101, 0xffffffff, 0x100000001, 0x4, 0xfffffffffffffffa, 0x35, 0x7, 0xffff, 0x8, 0x6, 0x3, 0xda, 0x8, 0xb9, 0x1, 0x310, 0x6, 0x3, 0x10000, 0xf6, 0x0, 0xc, 0x48f72a45, 0x7, 0x9, 0xe7, 0x7, 0x2, 0x3ff, 0x1, 0x80, 0xff, 0x3, 0xb, 0x101, 0x5372, 0x1000, 0x8, 0x9, 0x5, 0x2, 0x3, 0x6, 0x0, 0xd, 0x1, 0x1, 0x2, 0x5, 0x0, 0x100, 0x2, 0x8, 0x401, 0x5, 0x4, 0xffffffff, 0x8, 0x8, 0x3, 0x2, 0x10001, 0x6, 0x1ff, 0x5, 0x76, 0x6d4, 0x4, 0x100, 0xa, 0xb17f, 0x94, 0x6619, 0x7, 0x6d, 0x1, 0x2, 0xd97, 0xa, 0x10001, 0x1, 0x7ff, 0xff, 0x0, 0x2, 0x5c, 0x1, 0x8, 0x7, 0x5, 0x2, 0x9785, 0x2, 0x5, 0x4, 0x3, 0x6, 0xacb, 0x5, 0x8000000000000001, 0x34ef, 0x1, 0x6, 0x0, 0x0, 0x6d77, 0x6, 0x7]}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000a00)=ANY=[@ANYRES32=r2, @ANYBLOB="5a99f144", @ANYRESDEC=r3, @ANYBLOB=':max']) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002480)='pids.events\x00', 0x275a, 0x0) fanotify_mark(r1, 0x161, 0x40000874, r4, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10001, 0x0, &(0x7f00008c3000/0x4000)=nil}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x2, 0x2, 0x4000000000000005, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0xb0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x2}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x7}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x1}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0xd22d}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xe2}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xffffff22}]}}]}, 0xb0}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x70, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {0xfff1, 0xffff}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x7caf, 0x9, 0x8001}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}]}]}}]}, 0x70}}, 0x40804) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r7, @ANYRES64=r10, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRESOCT=r3, @ANYBLOB="069750b01fe24db4f209f2a3a83741b6f62bacec81e7097b0dfb6981254e2d530000dc8694332eecb266ac5ecdd4c3b16d01c21a73166b54f346d36c6c7ed951e541cd5e12217cd2187d10a58be54b89e0f067b2f157e9d1575f2667da0d"], 0xd8}, 0x1, 0x0, 0x0, 0x4890}, 0x0) r11 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f00000002c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1000000) mknod(&(0x7f0000000180)='./bus\x00', 0x8000, 0x0) 2.812562298s ago: executing program 3 (id=1014): r0 = fsopen(&(0x7f0000000700)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00X\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 2.600490407s ago: executing program 3 (id=1015): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf003040", @ANYRES64=r0], 0xb2) (fail_nth: 61) 2.266045516s ago: executing program 2 (id=1016): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000020000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) 2.265620976s ago: executing program 3 (id=1017): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r5 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x11, r5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0xc002, 0x1000, &(0x7f0000fff000/0x1000)=nil}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x492492492492846, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) 2.216120419s ago: executing program 4 (id=1018): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x400000, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82002, 0x105) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) 1.948148426s ago: executing program 2 (id=1019): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x5c5842, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) unshare(0x22020400) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x2000fb) (async) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) (async) r8 = syz_open_pts(r7, 0x141601) fcntl$setstatus(r8, 0x4, 0x102800) (async) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) (async) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1b) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000002680)={r9, 0x2}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000080)={r9, 0x3, 0x3}, 0x8) recvfrom$l2tp6(r5, &(0x7f00000000c0)=""/254, 0xfe, 0x62, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, 0x20) landlock_restrict_self(r4, 0x8) 1.874232122s ago: executing program 4 (id=1020): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x1f00, 0x0, {0x80}}, 0x26}}, 0x0) 1.739587049s ago: executing program 4 (id=1021): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) pipe2(&(0x7f0000000140), 0x80) close_range(r3, 0xffffffffffffffff, 0x200000000000000) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket(0x10, 0x803, 0x2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000000f000000", @ANYBLOB="44000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001002d1a10000b1877000000000000070003000a0000000100e10d000005080026006c09000008000c006400000008000d00000000000a00340002020202020200000800"], 0x90}}, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x8, {0x0, 0x3, 0x0, '\x00', {0x11, 0x0, 0xae3, 0x6, 0x0, 0xffffffffffffffff, 0xc000, '\x00', 0x6, 0x7e, 0x1000000000001, 0x4, {0x5, 0x5}, {0x20400000000000b, 0x45}, {0x5, 0x35}, {0xffffffffffffffff, 0xa00}, 0x10007, 0x6, 0x80000000, 0x5}}}}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000280)={0x2}) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000002c0)={0xc, 0x1, 0x1000, 0xf, 0x4, "56e3f978aa4be0c0"}) write$P9_RSTATu(r7, &(0x7f00000002c0)=ANY=[], 0x2f9) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r5, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 1.524605455s ago: executing program 0 (id=1022): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000f102040000000b00f1ffffff"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 1.280312851s ago: executing program 1 (id=960): r0 = socket(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_MAC={0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x8081) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) 1.267525806s ago: executing program 2 (id=1023): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x24, 0x12, 0x0, 0x801, 0x70bd2d, 0x25dfdbfe, {0x7}, [@nested={0x10, 0xb2, 0x0, 0x1, [@nested={0xc, 0x1f, 0x0, 0x1, [@typed={0x4, 0x149}, @nested={0x4, 0x44}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040044}, 0x8880) ioctl(r0, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4140aecd, &(0x7f0000000100)) fsopen(&(0x7f00000000c0)='bdev\x00', 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000000)) 1.080965151s ago: executing program 1 (id=1024): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="24c077a08411dd59bec95955fb300365959ac1efe5afdffc582af2a361a78f76462e7b9276f8f9fe01ef3efe8b971f9fa24e403be886b49e0af8fcb271b61019fb1ddb79788cda8f9c0d01627eec16cacdb3293d9fb955965bc050fc9430f12312990c3c9565c2425177a93a50956213fd8555d7205244e3014303386afc74f1aa8675324802a978c1d5474e2368dc54e9ca12fa", 0x94}], 0x1) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0xb, 0x2, 0x100, 0x2, 0x2}, 0x30, 0x0) read(r1, &(0x7f0000000f40)=""/4094, 0xffe) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000009, 0x2172, 0xffffffffffffffff, 0x60f4b000) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x8, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x3, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1004, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) (async) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x400c004}, 0x40f6045) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="10002abd7000fddbdf25430000000c002aea9902f113c0bbdf183199004c000000080000000c0058006f000000000000000c00580047000000000000000c0058003100000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r8 = socket(0x2, 0x3, 0x47e) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x2c}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) (async) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) sendto$inet(r8, &(0x7f0000001200)="8f1cacdec92bfb69e0d0073f76f2505b63319864b42cbaa24a10094ae6bcffd235d24bf63f13bb4d0a8f071420b32b82c94ecfc549b316c8b67582266063c1efcd64eab2f58a6067e54620977f7bc46cc147f6cee36d2b83309010669d41f09fd350af14a16f09025dfb7a1bf64bb86d2c7a71e33f008b17791471039886a903f96b7bbdb33c0d2c568e972a4659a456e6890300d6c4456d95316fdfac74593bee49080a35595d6edd5adcc747399bcd111492f409f66247a1b66ce4811b3287414ec09414e691b0d5", 0xc9, 0x4000084, &(0x7f0000001300)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async, rerun: 64) syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r10, 0x0, 0x5, 0x3) 873.576048ms ago: executing program 0 (id=1025): syz_clone3(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mlock2(&(0x7f0000505000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$packet(0x11, 0x2, 0x300) 645.679118ms ago: executing program 2 (id=1026): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0x0) r2 = add_key$user(&(0x7f0000000840), &(0x7f0000001f00)={'syz', 0x0}, &(0x7f00000003c0)="01", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r1, r2}, 0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={'sha256\x00'}}) read$FUSE(r0, 0x0, 0x0) 469.353246ms ago: executing program 4 (id=1027): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa34f, 0x1000, 0x2, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000400)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x0, 0x258, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x8000, 0x6, 0x15e, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000004, 0x142, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x21000000, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8256, 0x2, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r6, '\x00', {0xfff9, 0x8001, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f}) 368.390283ms ago: executing program 3 (id=1028): r0 = socket(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000280)=0x1f40) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023622}) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d73797374656d0000080002"], 0x30}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x1008, 0x0, 0x0, 0x2830}, 0x30, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4008011}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000140)={0x2, [0x0, 0x0]}) 0s ago: executing program 3 (id=1029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): : 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.838618][ T8039] R13: 00007f0b06a26038 R14: 00007f0b06a25fa0 R15: 00007f0b06b4fa48 [ 187.838634][ T8039] [ 187.940451][ T5680] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 188.093608][ T5680] usb 1-1: device descriptor read/64, error -71 [ 188.242304][ T12] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 188.274889][ T8033] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 188.371728][ T5680] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 188.500438][ T5680] usb 1-1: device descriptor read/64, error -71 [ 188.613254][ T5680] usb usb1-port1: attempt power cycle [ 188.949505][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 188.960521][ T5680] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 188.984202][ T5680] usb 1-1: device descriptor read/8, error -71 [ 189.220654][ T5680] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 189.244881][ T5680] usb 1-1: device descriptor read/8, error -71 [ 189.320087][ T8066] FAULT_INJECTION: forcing a failure. [ 189.320087][ T8066] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 189.320131][ T8066] CPU: 1 UID: 0 PID: 8066 Comm: syz.1.726 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.320155][ T8066] Tainted: [L]=SOFTLOCKUP [ 189.320162][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.320173][ T8066] Call Trace: [ 189.320181][ T8066] [ 189.320189][ T8066] dump_stack_lvl+0xe8/0x150 [ 189.320219][ T8066] should_fail_ex+0x410/0x560 [ 189.320246][ T8066] prepare_alloc_pages+0x223/0x600 [ 189.320273][ T8066] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 189.320305][ T8066] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 189.320332][ T8066] ? __pfx_policy_nodemask+0x10/0x10 [ 189.320352][ T8066] ? trace_kmalloc+0x2a/0xf0 [ 189.320371][ T8066] ? __pfx__copy_from_iter+0x10/0x10 [ 189.320390][ T8066] ? __kmalloc_noprof+0x38c/0x720 [ 189.320409][ T8066] alloc_pages_mpol+0x21e/0x390 [ 189.320438][ T8066] alloc_pages_noprof+0xb1/0x2b0 [ 189.320463][ T8066] af_alg_sendmsg+0x13b1/0x2250 [ 189.320511][ T8066] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 189.320542][ T8066] ? aa_sock_msg_perm+0x144/0x210 [ 189.320570][ T8066] ? apparmor_socket_sendmsg+0x98/0x360 [ 189.320589][ T8066] ? skcipher_sendmsg+0x26/0xf0 [ 189.320609][ T8066] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 189.320628][ T8066] sock_sendmsg_nosec+0x13a/0x180 [ 189.320652][ T8066] ____sys_sendmsg+0x54e/0x850 [ 189.320682][ T8066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.320717][ T8066] ? import_iovec+0x73/0xa0 [ 189.320743][ T8066] ___sys_sendmsg+0x2a5/0x360 [ 189.320767][ T8066] ? __lock_acquire+0x747/0x2de0 [ 189.320790][ T8066] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.320820][ T8066] ? kstrtouint+0x6e/0xe0 [ 189.320862][ T8066] ? __fget_files+0x2a/0x420 [ 189.320887][ T8066] ? __fget_files+0x3a2/0x420 [ 189.320921][ T8066] __sys_sendmmsg+0x273/0x4d0 [ 189.320953][ T8066] ? __pfx___sys_sendmmsg+0x10/0x10 [ 189.320987][ T8066] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.321025][ T8066] ? ksys_write+0x242/0x270 [ 189.321054][ T8066] ? __pfx_ksys_write+0x10/0x10 [ 189.321087][ T8066] __x64_sys_sendmmsg+0xa0/0xc0 [ 189.321115][ T8066] do_syscall_64+0x166/0x520 [ 189.321137][ T8066] ? trace_irq_disable+0x3b/0x140 [ 189.321156][ T8066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.321175][ T8066] ? clear_bhb_loop+0x70/0xc0 [ 189.321197][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.321216][ T8066] RIP: 0033:0x7fc1c779e159 [ 189.321233][ T8066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.321248][ T8066] RSP: 002b:00007fc1c8593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 189.321268][ T8066] RAX: ffffffffffffffda RBX: 00007fc1c7a26090 RCX: 00007fc1c779e159 [ 189.321290][ T8066] RDX: 0000000000000001 RSI: 00002000000021c0 RDI: 0000000000000005 [ 189.321302][ T8066] RBP: 00007fc1c8593090 R08: 0000000000000000 R09: 0000000000000000 [ 189.321313][ T8066] R10: 0000000000080001 R11: 0000000000000246 R12: 0000000000000002 [ 189.321324][ T8066] R13: 00007fc1c7a26128 R14: 00007fc1c7a26090 R15: 00007fc1c7b4fa48 [ 189.321354][ T8066] [ 189.353311][ T5680] usb usb1-port1: unable to enumerate USB device [ 189.690589][ T5349] usb 5-1: failed to enable PITCH for EP 0x1 [ 189.691328][ T5349] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 189.757114][ T8070] netlink: 'syz.4.725': attribute type 8 has an invalid length. [ 189.950549][ T44] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 190.100518][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 190.101391][ T44] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 190.104628][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.104643][ T44] usb 2-1: Product: syz [ 190.104651][ T44] usb 2-1: Manufacturer: syz [ 190.104657][ T44] usb 2-1: SerialNumber: syz [ 190.107004][ T44] usb 2-1: config 0 descriptor?? [ 190.119370][ T44] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 190.286371][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888053221400: rx timeout, send abort [ 190.565885][ T8087] FAULT_INJECTION: forcing a failure. [ 190.565885][ T8087] name failslab, interval 1, probability 0, space 0, times 0 [ 190.565916][ T8087] CPU: 0 UID: 0 PID: 8087 Comm: syz.4.733 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.565939][ T8087] Tainted: [L]=SOFTLOCKUP [ 190.565945][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.565956][ T8087] Call Trace: [ 190.565963][ T8087] [ 190.565970][ T8087] dump_stack_lvl+0xe8/0x150 [ 190.566001][ T8087] should_fail_ex+0x410/0x560 [ 190.566027][ T8087] should_failslab+0xa8/0x100 [ 190.566051][ T8087] __kmalloc_cache_noprof+0xa3/0x600 [ 190.566072][ T8087] ? vhost_iotlb_alloc+0x54/0x180 [ 190.566089][ T8087] ? vhost_iotlb_alloc+0x54/0x180 [ 190.566105][ T8087] ? lock_acquire+0x115/0x350 [ 190.566127][ T8087] vhost_iotlb_alloc+0x54/0x180 [ 190.566147][ T8087] vhost_init_device_iotlb+0x40/0x2a0 [ 190.566188][ T8087] vhost_net_set_features+0x162/0x2d0 [ 190.566214][ T8087] vhost_net_ioctl+0x9f7/0x17d0 [ 190.566244][ T8087] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 190.566277][ T8087] ? ksys_write+0x1fc/0x270 [ 190.566311][ T8087] ? bpf_lsm_file_ioctl+0x9/0x20 [ 190.566336][ T8087] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 190.566358][ T8087] __se_sys_ioctl+0xfc/0x170 [ 190.566379][ T8087] do_syscall_64+0x166/0x520 [ 190.566402][ T8087] ? trace_irq_disable+0x3b/0x140 [ 190.566421][ T8087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.566440][ T8087] ? clear_bhb_loop+0x70/0xc0 [ 190.566462][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.566481][ T8087] RIP: 0033:0x7fdbef99e159 [ 190.566499][ T8087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.566514][ T8087] RSP: 002b:00007fdbf07d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.566534][ T8087] RAX: ffffffffffffffda RBX: 00007fdbefc25fa0 RCX: 00007fdbef99e159 [ 190.566548][ T8087] RDX: 00002000000001c0 RSI: 000000004008af00 RDI: 0000000000000003 [ 190.566560][ T8087] RBP: 00007fdbf07d6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.566571][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.566582][ T8087] R13: 00007fdbefc26038 R14: 00007fdbefc25fa0 R15: 00007fdbefd4fa48 [ 190.566612][ T8087] [ 190.786463][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888053221000: rx timeout, send abort [ 190.787758][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888053221400: abort rx timeout. Force session deactivation [ 190.845589][ T44] gspca_sonixj: reg_w1 err -71 [ 190.845667][ T44] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 190.857765][ T44] usb 2-1: USB disconnect, device number 22 [ 190.870126][ T5623] udevd[5623]: setting owner of /dev/bus/usb/002/022 to uid=0, gid=0 failed: No such file or directory [ 191.064118][ T8098] kvm: MWAIT instruction emulated as NOP! [ 191.286513][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888053221000: abort rx timeout. Force session deactivation [ 191.724891][ T8124] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 191.811016][ T8124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.928689][ T8124] macvtap1: entered allmulticast mode [ 192.492272][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 192.610900][ T8136] FAULT_INJECTION: forcing a failure. [ 192.610900][ T8136] name failslab, interval 1, probability 0, space 0, times 0 [ 192.610924][ T8136] CPU: 1 UID: 0 PID: 8136 Comm: syz.0.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.610939][ T8136] Tainted: [L]=SOFTLOCKUP [ 192.610942][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.610948][ T8136] Call Trace: [ 192.610952][ T8136] [ 192.610957][ T8136] dump_stack_lvl+0xe8/0x150 [ 192.610978][ T8136] should_fail_ex+0x410/0x560 [ 192.610994][ T8136] should_failslab+0xa8/0x100 [ 192.611009][ T8136] __kmalloc_noprof+0xfe/0x720 [ 192.611018][ T8136] ? enqueue_to_backlog+0x6ab/0xef0 [ 192.611030][ T8136] ? ___neigh_create+0x6d2/0x22b0 [ 192.611041][ T8136] ? ___neigh_create+0x6d2/0x22b0 [ 192.611055][ T8136] ___neigh_create+0x6d2/0x22b0 [ 192.611072][ T8136] ? __ipv6_neigh_lookup_noref+0x4e5/0x6c0 [ 192.611095][ T8136] ? lockdep_hardirqs_on+0x7b/0x110 [ 192.611108][ T8136] ? __local_bh_enable_ip+0xd6/0x140 [ 192.611125][ T8136] ip6_finish_output2+0xe0f/0x1460 [ 192.611143][ T8136] ? ip6_output+0x11e/0x540 [ 192.611155][ T8136] ip6_output+0x337/0x540 [ 192.611169][ T8136] ip6_mr_output+0x53e/0x1170 [ 192.611185][ T8136] ? ip6_mr_output+0x1f3/0x1170 [ 192.611198][ T8136] ? __pfx_ip6_mr_output+0x10/0x10 [ 192.611212][ T8136] ? __ip6_local_out+0x15c/0x940 [ 192.611228][ T8136] ? __ip6_local_out+0x8f8/0x940 [ 192.611242][ T8136] ? __ip6_local_out+0x15c/0x940 [ 192.611257][ T8136] ? __pfx___ip6_local_out+0x10/0x10 [ 192.611280][ T8136] ? ip6_local_out+0x16e/0x190 [ 192.611293][ T8136] ? ip6_send_skb+0x10a/0x380 [ 192.611306][ T8136] ip6_send_skb+0x1cd/0x380 [ 192.611320][ T8136] rawv6_push_pending_frames+0x69f/0x860 [ 192.611335][ T8136] ? ip6_append_data+0x1a6/0x270 [ 192.611352][ T8136] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 192.611372][ T8136] rawv6_sendmsg+0x134f/0x18c0 [ 192.611392][ T8136] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 192.611417][ T8136] ? lock_acquire+0x115/0x350 [ 192.611431][ T8136] ? aa_sock_msg_perm+0xf5/0x210 [ 192.611443][ T8136] ? sock_rps_record_flow+0x19/0x350 [ 192.611455][ T8136] ? inet_sendmsg+0x298/0x320 [ 192.611465][ T8136] ? apparmor_socket_sendmsg+0x98/0x360 [ 192.611477][ T8136] ? __pfx_inet_sendmsg+0x10/0x10 [ 192.611486][ T8136] sock_sendmsg_nosec+0x10e/0x180 [ 192.611499][ T8136] ____sys_sendmsg+0x54e/0x850 [ 192.611516][ T8136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.611534][ T8136] ? import_iovec+0x73/0xa0 [ 192.611549][ T8136] ___sys_sendmsg+0x2a5/0x360 [ 192.611562][ T8136] ? __lock_acquire+0x747/0x2de0 [ 192.611574][ T8136] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.611594][ T8136] ? kstrtouint+0x6e/0xe0 [ 192.611618][ T8136] ? __fget_files+0x2a/0x420 [ 192.611631][ T8136] ? __fget_files+0x3a2/0x420 [ 192.611650][ T8136] __sys_sendmmsg+0x273/0x4d0 [ 192.611666][ T8136] ? __pfx___sys_sendmmsg+0x10/0x10 [ 192.611685][ T8136] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.611706][ T8136] ? ksys_write+0x242/0x270 [ 192.611722][ T8136] ? __pfx_ksys_write+0x10/0x10 [ 192.611740][ T8136] __x64_sys_sendmmsg+0xa0/0xc0 [ 192.611755][ T8136] do_syscall_64+0x166/0x520 [ 192.611768][ T8136] ? trace_irq_disable+0x3b/0x140 [ 192.611778][ T8136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.611788][ T8136] ? clear_bhb_loop+0x70/0xc0 [ 192.611800][ T8136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.611810][ T8136] RIP: 0033:0x7fe4eff9e159 [ 192.611820][ T8136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.611828][ T8136] RSP: 002b:00007fe4ee1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 192.611840][ T8136] RAX: ffffffffffffffda RBX: 00007fe4f0225fa0 RCX: 00007fe4eff9e159 [ 192.611847][ T8136] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 192.611853][ T8136] RBP: 00007fe4ee1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.611860][ T8136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.611865][ T8136] R13: 00007fe4f0226038 R14: 00007fe4f0225fa0 R15: 00007fe4f034fa48 [ 192.611882][ T8136] [ 193.620523][ T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 193.773241][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.773274][ T25] usb 2-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 193.774735][ T25] usb 2-1: language id specifier not provided by device, defaulting to English [ 193.778166][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.778180][ T25] usb 2-1: Product: @ [ 193.778187][ T25] usb 2-1: SerialNumber: syz [ 194.198629][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.198685][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.233657][ T8160] netlink: 52 bytes leftover after parsing attributes in process `syz.2.757'. [ 194.239916][ T8160] netlink: 52 bytes leftover after parsing attributes in process `syz.2.757'. [ 194.307283][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.307318][ T25] usb 2-1: MIDIStreaming interface descriptor not found [ 194.447600][ T25] usb 2-1: USB disconnect, device number 23 [ 194.540798][ T5729] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 194.677724][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 194.706265][ T5729] usb 3-1: unable to get BOS descriptor or descriptor too short [ 194.706313][ T5729] usb 3-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 194.730836][ T5729] usb 3-1: config 8 has an invalid interface number: 129 but max is 1 [ 194.730862][ T5729] usb 3-1: config 8 has an invalid interface number: 158 but max is 1 [ 194.730879][ T5729] usb 3-1: config 8 has no interface number 0 [ 194.730893][ T5729] usb 3-1: config 8 has no interface number 1 [ 194.730940][ T5729] usb 3-1: config 8 interface 158 has no altsetting 0 [ 194.733169][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.733182][ T5729] usb 3-1: Product: syz [ 194.733189][ T5729] usb 3-1: Manufacturer: syz [ 194.733197][ T5729] usb 3-1: SerialNumber: syz [ 194.897705][ T8172] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 194.978168][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.978473][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.014621][ T5729] cxacru 3-1:8.129: cxacru_bind: interface has incorrect endpoints [ 195.014765][ T5729] cxacru 3-1:8.129: usbatm_usb_probe: bind failed: -19! [ 195.044471][ T5729] cxacru 3-1:8.158: cxacru_bind: interface has incorrect endpoints [ 195.044601][ T5729] cxacru 3-1:8.158: usbatm_usb_probe: bind failed: -19! [ 195.099300][ T5729] usb 3-1: USB disconnect, device number 21 [ 195.351890][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 195.351908][ T30] audit: type=1326 audit(1790480913.785:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9e159 code=0x7ffc0000 [ 195.352021][ T30] audit: type=1326 audit(1790480913.785:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9e159 code=0x7ffc0000 [ 195.354534][ T30] audit: type=1326 audit(1790480913.785:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe4eff9e159 code=0x7ffc0000 [ 195.356510][ T30] audit: type=1326 audit(1790480913.785:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9e159 code=0x7ffc0000 [ 195.356556][ T30] audit: type=1326 audit(1790480913.785:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9e159 code=0x7ffc0000 [ 195.356968][ T30] audit: type=1326 audit(1790480913.785:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fe4eff9e159 code=0x7ffc0000 [ 195.357010][ T30] audit: type=1326 audit(1790480913.785:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9e159 code=0x7ffc0000 [ 195.357048][ T30] audit: type=1326 audit(1790480913.785:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe4eff9e159 code=0x7ffc0000 [ 195.366628][ T30] audit: type=1326 audit(1790480913.785:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4eff9e159 code=0x7ffc0000 [ 195.366676][ T30] audit: type=1326 audit(1790480913.785:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4eff9e159 code=0x7ffc0000 [ 195.500082][ T8194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.506289][ T8196] fuse: Bad value for 'user_id' [ 195.506307][ T8196] fuse: Bad value for 'user_id' [ 195.641247][ T25] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 195.729547][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 195.792343][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 195.793202][ T25] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 195.794900][ T25] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 195.794921][ T25] usb 1-1: config 0 has no interface number 0 [ 195.794961][ T25] usb 1-1: config 0 interface 12 has no altsetting 0 [ 195.807416][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.807437][ T25] usb 1-1: Product: syz [ 195.807450][ T25] usb 1-1: Manufacturer: syz [ 195.807462][ T25] usb 1-1: SerialNumber: syz [ 195.817972][ T25] usb 1-1: config 0 descriptor?? [ 196.028150][ T8207] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 196.028177][ T8207] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 196.029999][ T8207] vhci_hcd vhci_hcd.0: Device attached [ 196.210598][ T5729] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 196.222343][ T5710] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 196.270756][ T5729] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 196.416964][ T5710] usb 3-1: unable to get BOS descriptor or descriptor too short [ 196.417014][ T5710] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 196.440782][ T5710] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.440814][ T5710] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 196.440855][ T5710] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.443522][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 196.446679][ T5710] usb 3-1: Product: syz [ 196.446694][ T5710] usb 3-1: Manufacturer: syz [ 196.468349][ T8190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.468819][ T8190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.547929][ T8190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.561929][ T5710] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 196.578856][ T25] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 196.578921][ T25] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 196.578937][ T25] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 196.579015][ T25] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 196.617250][ T25] usb 1-1: USB disconnect, device number 31 [ 196.734908][ T5710] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 196.736367][ T5710] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 196.736873][ T5710] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 196.737411][ T5710] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 196.737864][ T5710] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 196.738337][ T5710] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 196.738914][ T5710] uvcvideo 3-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 196.800476][ T8208] vhci_hcd: connection closed [ 196.813374][ T5710] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 196.815398][ T1276] vhci_hcd vhci_hcd.1: stop threads [ 196.815409][ T1276] vhci_hcd vhci_hcd.1: release socket [ 196.815444][ T1276] vhci_hcd vhci_hcd.1: disconnect device [ 196.816731][ T5710] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 196.817005][ T5710] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 196.876232][ T5710] usb 3-1: USB disconnect, device number 22 [ 197.117912][ T8216] netlink: 'syz.4.776': attribute type 10 has an invalid length. [ 197.212821][ T8216] team0 (unregistering): Port device team_slave_0 removed [ 197.233289][ T8216] team0 (unregistering): Port device team_slave_1 removed [ 197.452078][ T8223] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 197.600425][ T25] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 197.646416][ T8223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.723624][ T8227] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 197.752697][ T25] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 197.753624][ T25] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 197.753646][ T25] usb 1-1: config 4 has an invalid descriptor of length 255, skipping remainder of the config [ 197.753664][ T25] usb 1-1: config 4 has no interface number 0 [ 197.753703][ T25] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 197.753947][ T8228] macvtap3: entered allmulticast mode [ 197.758897][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.758918][ T25] usb 1-1: Product: syz [ 197.758931][ T25] usb 1-1: Manufacturer: syz [ 197.758944][ T25] usb 1-1: SerialNumber: syz [ 197.970715][ T8230] netlink: 44 bytes leftover after parsing attributes in process `syz.1.780'. [ 198.003918][ T8236] program syz.2.781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.211533][ T5710] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 198.212802][ T25] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 198.218601][ T25] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 198.220993][ T25] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 198.221045][ T25] usb 1-1: media controller created [ 198.223201][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.336699][ T25] DVB: Unable to find symbol dib7000p_attach() [ 198.336716][ T25] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 198.370492][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 198.371194][ T5710] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.372174][ T5710] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 198.372219][ T5710] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.372238][ T5710] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.372260][ T5710] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.372281][ T5710] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.372318][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.533079][ T25] rc_core: IR keymap rc-dib0700-rc5 not found [ 198.533099][ T25] Registered IR keymap rc-empty [ 198.533380][ T25] dvb-usb: could not initialize remote control. [ 198.533388][ T25] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 198.603062][ T5710] usb 2-1: usb_control_msg returned -32 [ 198.603109][ T5710] usbtmc 2-1:16.0: can't read capabilities [ 198.893614][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 199.586020][ T8232] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 199.592818][ T5680] usb 2-1: USB disconnect, device number 24 [ 199.956793][ T8266] FAULT_INJECTION: forcing a failure. [ 199.956793][ T8266] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 199.956836][ T8266] CPU: 0 UID: 0 PID: 8266 Comm: syz.3.788 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.956862][ T8266] Tainted: [L]=SOFTLOCKUP [ 199.956869][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.956879][ T8266] Call Trace: [ 199.956887][ T8266] [ 199.956895][ T8266] dump_stack_lvl+0xe8/0x150 [ 199.956927][ T8266] should_fail_ex+0x410/0x560 [ 199.956954][ T8266] prepare_alloc_pages+0x223/0x600 [ 199.956981][ T8266] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 199.957007][ T8266] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 199.957032][ T8266] ? __pfx_policy_nodemask+0x10/0x10 [ 199.957054][ T8266] ? lock_acquire+0x115/0x350 [ 199.957080][ T8266] alloc_pages_mpol+0x21e/0x390 [ 199.957108][ T8266] folio_alloc_mpol_noprof+0x39/0x160 [ 199.957134][ T8266] vma_alloc_folio_noprof+0xe1/0x1e0 [ 199.957161][ T8266] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 199.957195][ T8266] do_wp_page+0x117d/0x4b80 [ 199.957237][ T8266] ? __pfx_do_wp_page+0x10/0x10 [ 199.957259][ T8266] ? do_raw_spin_lock+0x12b/0x2f0 [ 199.957295][ T8266] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 199.957330][ T8266] handle_mm_fault+0x15d7/0x3750 [ 199.957365][ T8266] ? handle_mm_fault+0xf1/0x3750 [ 199.957400][ T8266] ? __pfx_handle_mm_fault+0x10/0x10 [ 199.957437][ T8266] ? __pfx___up_read+0x10/0x10 [ 199.957463][ T8266] ? lock_mm_and_find_vma+0xa7/0x340 [ 199.957494][ T8266] do_user_addr_fault+0x746/0x1340 [ 199.957532][ T8266] exc_page_fault+0x6a/0xc0 [ 199.957558][ T8266] asm_exc_page_fault+0x26/0x30 [ 199.957576][ T8266] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 199.957595][ T8266] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 199.957610][ T8266] RSP: 0018:ffffc9000885fba8 EFLAGS: 00050202 [ 199.957627][ T8266] RAX: ffffffff84df6201 RBX: 0000000000100001 RCX: 00000000000b1181 [ 199.957641][ T8266] RDX: 0000000000000000 RSI: ffff888050a4ee80 RDI: 000020000004f000 [ 199.957653][ T8266] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000001 [ 199.957665][ T8266] R10: dffffc0000000000 R11: ffffed100a160000 R12: 0000200000100181 [ 199.957678][ T8266] R13: 00007ffffffff000 R14: ffff888050a00000 R15: 0000200000000180 [ 199.957699][ T8266] ? _copy_from_user+0x91/0xb0 [ 199.957730][ T8266] _copy_to_user+0x8a/0xb0 [ 199.957755][ T8266] map_get_next_key+0x4ac/0x610 [ 199.957778][ T8266] ? map_get_next_key+0x27d/0x610 [ 199.957812][ T8266] __sys_bpf+0xb83/0xd90 [ 199.957841][ T8266] ? __pfx___sys_bpf+0x10/0x10 [ 199.957873][ T8266] ? __fget_files+0x2a/0x420 [ 199.957914][ T8266] ? ksys_write+0x242/0x270 [ 199.957944][ T8266] ? __pfx_ksys_write+0x10/0x10 [ 199.957975][ T8266] __x64_sys_bpf+0xba/0xd0 [ 199.957998][ T8266] do_syscall_64+0x166/0x520 [ 199.958020][ T8266] ? trace_irq_disable+0x3b/0x140 [ 199.958039][ T8266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.958057][ T8266] ? clear_bhb_loop+0x70/0xc0 [ 199.958080][ T8266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.958099][ T8266] RIP: 0033:0x7f7f1959e159 [ 199.958115][ T8266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.958129][ T8266] RSP: 002b:00007f7f1a4d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.958147][ T8266] RAX: ffffffffffffffda RBX: 00007f7f19825fa0 RCX: 00007f7f1959e159 [ 199.958160][ T8266] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000004 [ 199.958172][ T8266] RBP: 00007f7f1a4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.958183][ T8266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.958194][ T8266] R13: 00007f7f19826038 R14: 00007f7f19825fa0 R15: 00007f7f1994fa48 [ 199.958224][ T8266] [ 200.003851][ T5349] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 200.425869][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.426386][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.436013][ T25] usb 1-1: USB disconnect, device number 32 [ 200.498103][ T25] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 200.561092][ T8276] bridge0: port 3(wlan1) entered blocking state [ 200.561187][ T8276] bridge0: port 3(wlan1) entered disabled state [ 200.561472][ T8276] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 200.607742][ T8276] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 200.657455][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.657776][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.381486][ T5729] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 201.409600][ T8255] Bluetooth: hci1: command 0x0406 tx timeout [ 201.409636][ T8255] Bluetooth: hci2: command 0x0406 tx timeout [ 201.409669][ T8255] Bluetooth: hci0: command 0x0406 tx timeout [ 201.409693][ T8255] Bluetooth: hci3: command 0x0406 tx timeout [ 201.499900][ T8292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.504889][ T8292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.650897][ T8292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.795'. [ 202.330451][ T5695] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 202.482897][ T5695] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.482927][ T5695] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 202.487313][ T5695] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 202.487341][ T5695] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.489572][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.489586][ T5695] usb 1-1: Product: syz [ 202.489593][ T5695] usb 1-1: Manufacturer: syz [ 202.489600][ T5695] usb 1-1: SerialNumber: syz [ 202.565782][ T8280] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 202.701186][ T8306] IPv6: addrconf: prefix option has invalid lifetime [ 202.743999][ T8301] netlink: 14 bytes leftover after parsing attributes in process `syz.1.797'. [ 202.786806][ T5695] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.786857][ T5695] usb 1-1: MIDIStreaming interface descriptor not found [ 202.977515][ T5695] usb 1-1: USB disconnect, device number 33 [ 203.583323][ T8319] syzkaller0: entered promiscuous mode [ 203.583338][ T8319] syzkaller0: entered allmulticast mode [ 203.691284][ T8324] binder: 8323:8324 ioctl c0306201 0 returned -14 [ 203.980483][ T5695] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 203.985624][ T8331] netlink: 'syz.1.804': attribute type 10 has an invalid length. [ 204.031785][ T8331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.061018][ T8331] team0: Port device bond0 added [ 204.130789][ T5695] usb 1-1: Using ep0 maxpacket: 8 [ 204.135847][ T5695] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 204.139174][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.175684][ T5695] pvrusb2: Hardware description: Terratec Grabster AV400 [ 204.175695][ T5695] pvrusb2: ********** [ 204.175698][ T5695] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 204.175704][ T5695] pvrusb2: Important functionality might not be entirely working. [ 204.175709][ T5695] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 204.175714][ T5695] pvrusb2: ********** [ 204.515202][ T8335] FAULT_INJECTION: forcing a failure. [ 204.515202][ T8335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.515235][ T8335] CPU: 0 UID: 0 PID: 8335 Comm: syz.2.805 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.515260][ T8335] Tainted: [L]=SOFTLOCKUP [ 204.515267][ T8335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.515278][ T8335] Call Trace: [ 204.515285][ T8335] [ 204.515293][ T8335] dump_stack_lvl+0xe8/0x150 [ 204.515324][ T8335] should_fail_ex+0x410/0x560 [ 204.515349][ T8335] _copy_to_user+0x31/0xb0 [ 204.515375][ T8335] __do_replace+0x7fb/0x9a0 [ 204.515408][ T8335] ? __pfx___do_replace+0x10/0x10 [ 204.515432][ T8335] ? _copy_from_user+0x94/0xb0 [ 204.515458][ T8335] do_ip6t_set_ctl+0xb45/0xe30 [ 204.515487][ T8335] ? rcu_is_watching+0x16/0xb0 [ 204.515510][ T8335] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 204.515546][ T8335] ? __mutex_unlock_slowpath+0x731/0x900 [ 204.515577][ T8335] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.515604][ T8335] ? ksys_write+0x1e6/0x270 [ 204.515635][ T8335] nf_setsockopt+0x26f/0x290 [ 204.515668][ T8335] rawv6_setsockopt+0x276/0x5e0 [ 204.515695][ T8335] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 204.515723][ T8335] ? sock_common_setsockopt+0x36/0xc0 [ 204.515744][ T8335] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 204.515767][ T8335] do_sock_setsockopt+0x17c/0x1b0 [ 204.515796][ T8335] __x64_sys_setsockopt+0x13d/0x1b0 [ 204.515825][ T8335] do_syscall_64+0x166/0x520 [ 204.515856][ T8335] ? trace_irq_disable+0x3b/0x140 [ 204.515875][ T8335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.515893][ T8335] ? clear_bhb_loop+0x70/0xc0 [ 204.515916][ T8335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.515934][ T8335] RIP: 0033:0x7f0b0679e159 [ 204.515952][ T8335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.515967][ T8335] RSP: 002b:00007f0b076f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 204.515987][ T8335] RAX: ffffffffffffffda RBX: 00007f0b06a25fa0 RCX: 00007f0b0679e159 [ 204.516000][ T8335] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 204.516011][ T8335] RBP: 00007f0b076f8090 R08: 00000000000003a0 R09: 0000000000000000 [ 204.516023][ T8335] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 204.516035][ T8335] R13: 00007f0b06a26038 R14: 00007f0b06a25fa0 R15: 00007f0b06b4fa48 [ 204.516064][ T8335] [ 204.516175][ T8335] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 204.790774][ T25] usb 1-1: USB disconnect, device number 34 [ 204.791409][ T25] pvrusb2: Device being rendered inoperable [ 205.507667][ T8347] IPv6: addrconf: prefix option has invalid lifetime [ 205.842323][ T8353] FAULT_INJECTION: forcing a failure. [ 205.842323][ T8353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.842346][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.0.810 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.842360][ T8353] Tainted: [L]=SOFTLOCKUP [ 205.842364][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.842370][ T8353] Call Trace: [ 205.842374][ T8353] [ 205.842379][ T8353] dump_stack_lvl+0xe8/0x150 [ 205.842398][ T8353] should_fail_ex+0x410/0x560 [ 205.842413][ T8353] prepare_alloc_pages+0x223/0x600 [ 205.842428][ T8353] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 205.842441][ T8353] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 205.842455][ T8353] ? __pfx_policy_nodemask+0x10/0x10 [ 205.842467][ T8353] ? trace_kmalloc+0x2a/0xf0 [ 205.842478][ T8353] ? __pfx__copy_from_iter+0x10/0x10 [ 205.842488][ T8353] ? __kmalloc_noprof+0x38c/0x720 [ 205.842499][ T8353] alloc_pages_mpol+0x21e/0x390 [ 205.842514][ T8353] alloc_pages_noprof+0xb1/0x2b0 [ 205.842528][ T8353] af_alg_sendmsg+0x13b1/0x2250 [ 205.842554][ T8353] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 205.842570][ T8353] ? aa_sock_msg_perm+0x144/0x210 [ 205.842586][ T8353] ? apparmor_socket_sendmsg+0x98/0x360 [ 205.842596][ T8353] ? skcipher_sendmsg+0x26/0xf0 [ 205.842606][ T8353] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 205.842616][ T8353] sock_sendmsg_nosec+0x13a/0x180 [ 205.842629][ T8353] ____sys_sendmsg+0x54e/0x850 [ 205.842646][ T8353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.842664][ T8353] ? import_iovec+0x73/0xa0 [ 205.842678][ T8353] ___sys_sendmsg+0x2a5/0x360 [ 205.842691][ T8353] ? __lock_acquire+0x747/0x2de0 [ 205.842704][ T8353] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.842720][ T8353] ? kstrtouint+0x6e/0xe0 [ 205.842744][ T8353] ? __fget_files+0x2a/0x420 [ 205.842764][ T8353] ? __fget_files+0x3a2/0x420 [ 205.842782][ T8353] __sys_sendmmsg+0x273/0x4d0 [ 205.842798][ T8353] ? __pfx___sys_sendmmsg+0x10/0x10 [ 205.842817][ T8353] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 205.842838][ T8353] ? ksys_write+0x242/0x270 [ 205.842854][ T8353] ? __pfx_ksys_write+0x10/0x10 [ 205.842872][ T8353] __x64_sys_sendmmsg+0xa0/0xc0 [ 205.842889][ T8353] do_syscall_64+0x166/0x520 [ 205.842902][ T8353] ? trace_irq_disable+0x3b/0x140 [ 205.842912][ T8353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.842922][ T8353] ? clear_bhb_loop+0x70/0xc0 [ 205.842935][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.842945][ T8353] RIP: 0033:0x7fe4eff9e159 [ 205.842955][ T8353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.842964][ T8353] RSP: 002b:00007fe4ee1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 205.842975][ T8353] RAX: ffffffffffffffda RBX: 00007fe4f0226090 RCX: 00007fe4eff9e159 [ 205.842983][ T8353] RDX: 0000000000000001 RSI: 00002000000021c0 RDI: 0000000000000005 [ 205.842989][ T8353] RBP: 00007fe4ee1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 205.842995][ T8353] R10: 0000000000080001 R11: 0000000000000246 R12: 0000000000000002 [ 205.843001][ T8353] R13: 00007fe4f0226128 R14: 00007fe4f0226090 R15: 00007fe4f034fa48 [ 205.843017][ T8353] [ 206.306454][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 206.724537][ T8374] fuse: Bad value for 'fd' [ 206.873774][ T8378] IPv6: addrconf: prefix option has invalid lifetime [ 206.907458][ T8378] dvmrp12: entered allmulticast mode [ 206.952809][ T8380] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 207.263797][ T8387] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 207.597864][ T8395] netlink: 204 bytes leftover after parsing attributes in process `syz.2.826'. [ 207.611536][ T8395] netlink: 84 bytes leftover after parsing attributes in process `syz.2.826'. [ 207.878099][ T8410] sg_write: data in/out 278540/136 bytes for SCSI command 0x0-- guessing data in; [ 207.878099][ T8410] program syz.0.830 not setting count and/or reply_len properly [ 207.878837][ T8410] FAULT_INJECTION: forcing a failure. [ 207.878837][ T8410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.878865][ T8410] CPU: 1 UID: 0 PID: 8410 Comm: syz.0.830 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.878892][ T8410] Tainted: [L]=SOFTLOCKUP [ 207.878899][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.878910][ T8410] Call Trace: [ 207.878917][ T8410] [ 207.878925][ T8410] dump_stack_lvl+0xe8/0x150 [ 207.878956][ T8410] should_fail_ex+0x410/0x560 [ 207.878983][ T8410] _copy_from_iter+0x1d3/0x1660 [ 207.879008][ T8410] ? pfn_valid+0x125/0x4c0 [ 207.879037][ T8410] ? pfn_valid+0x446/0x4c0 [ 207.879061][ T8410] ? __pfx__copy_from_iter+0x10/0x10 [ 207.879082][ T8410] ? bvec_try_merge_page+0x1d4/0x280 [ 207.879121][ T8410] ? bio_add_page+0x2f4/0x700 [ 207.879149][ T8410] copy_page_from_iter+0x219/0x2d0 [ 207.879175][ T8410] blk_rq_map_user_iov+0xcb1/0x1840 [ 207.879216][ T8410] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 207.879253][ T8410] ? import_ubuf+0xfb/0x1d0 [ 207.879278][ T8410] blk_rq_map_user_io+0x2ae/0x440 [ 207.879306][ T8410] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 207.879341][ T8410] ? sg_common_write+0xb2c/0x1310 [ 207.879372][ T8410] ? __mutex_unlock_slowpath+0x731/0x900 [ 207.879398][ T8410] ? alloc_pages_noprof+0x140/0x2b0 [ 207.879426][ T8410] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 207.879462][ T8410] sg_common_write+0xc73/0x1310 [ 207.879502][ T8410] ? __pfx_sg_common_write+0x10/0x10 [ 207.879531][ T8410] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 207.879553][ T8410] ? ___ratelimit+0x584/0x8e0 [ 207.879581][ T8410] sg_write+0xaf3/0xf10 [ 207.879613][ T8410] ? __pfx_sg_write+0x10/0x10 [ 207.879640][ T8410] ? __pfx_aa_file_perm+0x10/0x10 [ 207.879692][ T8410] ? bpf_lsm_file_permission+0x9/0x20 [ 207.879717][ T8410] ? security_file_permission+0x75/0x260 [ 207.879738][ T8410] ? rw_verify_area+0x203/0x4c0 [ 207.879766][ T8410] ? __pfx_sg_write+0x10/0x10 [ 207.879790][ T8410] vfs_write+0x296/0xba0 [ 207.879825][ T8410] ? __pfx_vfs_write+0x10/0x10 [ 207.879853][ T8410] ? __fget_files+0x2a/0x420 [ 207.879880][ T8410] ? __fget_files+0x2a/0x420 [ 207.879904][ T8410] ? __fget_files+0x3a2/0x420 [ 207.879927][ T8410] ? __fget_files+0x2a/0x420 [ 207.879959][ T8410] ksys_write+0x150/0x270 [ 207.879987][ T8410] ? __pfx_ksys_write+0x10/0x10 [ 207.880025][ T8410] do_syscall_64+0x166/0x520 [ 207.880048][ T8410] ? trace_irq_disable+0x3b/0x140 [ 207.880066][ T8410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.880085][ T8410] ? clear_bhb_loop+0x70/0xc0 [ 207.880107][ T8410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.880132][ T8410] RIP: 0033:0x7fe4eff9e159 [ 207.880149][ T8410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.880165][ T8410] RSP: 002b:00007fe4ee1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.880185][ T8410] RAX: ffffffffffffffda RBX: 00007fe4f0225fa0 RCX: 00007fe4eff9e159 [ 207.880199][ T8410] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000004 [ 207.880211][ T8410] RBP: 00007fe4ee1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 207.880223][ T8410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.880234][ T8410] R13: 00007fe4f0226038 R14: 00007fe4f0225fa0 R15: 00007fe4f034fa48 [ 207.880263][ T8410] [ 208.010798][ T8411] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5627] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[8411] [ 208.014703][ T8409] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5627] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[8409] [ 208.289621][ T8416] IPv6: addrconf: prefix option has invalid lifetime [ 208.632161][ T8414] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 208.980857][ T8432] FAULT_INJECTION: forcing a failure. [ 208.980857][ T8432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.980891][ T8432] CPU: 1 UID: 0 PID: 8432 Comm: syz.2.836 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.980917][ T8432] Tainted: [L]=SOFTLOCKUP [ 208.980924][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.980939][ T8432] Call Trace: [ 208.980946][ T8432] [ 208.980954][ T8432] dump_stack_lvl+0xe8/0x150 [ 208.980985][ T8432] should_fail_ex+0x410/0x560 [ 208.981012][ T8432] _copy_from_iter+0x1d3/0x1660 [ 208.981034][ T8432] ? __alloc_skb+0x27a/0x7a0 [ 208.981059][ T8432] ? __alloc_skb+0x27a/0x7a0 [ 208.981083][ T8432] ? __alloc_skb+0x27a/0x7a0 [ 208.981106][ T8432] ? __pfx__copy_from_iter+0x10/0x10 [ 208.981125][ T8432] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 208.981153][ T8432] ? __alloc_skb+0x27a/0x7a0 [ 208.981188][ T8432] ? __alloc_skb+0x27a/0x7a0 [ 208.981217][ T8432] ? __alloc_skb+0x4d0/0x7a0 [ 208.981237][ T8432] ? skb_put+0x112/0x210 [ 208.981263][ T8432] pfkey_sendmsg+0x25f/0x11d0 [ 208.981302][ T8432] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 208.981333][ T8432] ? aa_sk_perm+0x713/0x900 [ 208.981361][ T8432] ? __lock_acquire+0x747/0x2de0 [ 208.981381][ T8432] ? __pfx_aa_sk_perm+0x10/0x10 [ 208.981406][ T8432] ? aa_sock_msg_perm+0x144/0x210 [ 208.981434][ T8432] ? apparmor_socket_sendmsg+0x98/0x360 [ 208.981457][ T8432] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 208.981483][ T8432] sock_sendmsg_nosec+0x13a/0x180 [ 208.981506][ T8432] ____sys_sendmsg+0x54e/0x850 [ 208.981544][ T8432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.981579][ T8432] ? import_iovec+0x73/0xa0 [ 208.981606][ T8432] ___sys_sendmsg+0x2a5/0x360 [ 208.981630][ T8432] ? __lock_acquire+0x747/0x2de0 [ 208.981652][ T8432] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.981676][ T8432] ? __lock_acquire+0x747/0x2de0 [ 208.981699][ T8432] ? kstrtouint+0x6e/0xe0 [ 208.981758][ T8432] __sys_sendmmsg+0x273/0x4d0 [ 208.981789][ T8432] ? __pfx___sys_sendmmsg+0x10/0x10 [ 208.981823][ T8432] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 208.981863][ T8432] ? ksys_write+0x242/0x270 [ 208.981893][ T8432] ? __pfx_ksys_write+0x10/0x10 [ 208.981926][ T8432] __x64_sys_sendmmsg+0xa0/0xc0 [ 208.981954][ T8432] do_syscall_64+0x166/0x520 [ 208.981977][ T8432] ? trace_irq_disable+0x3b/0x140 [ 208.981996][ T8432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.982014][ T8432] ? clear_bhb_loop+0x70/0xc0 [ 208.982036][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.982055][ T8432] RIP: 0033:0x7f0b0679e159 [ 208.982072][ T8432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.982087][ T8432] RSP: 002b:00007f0b076f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 208.982107][ T8432] RAX: ffffffffffffffda RBX: 00007f0b06a25fa0 RCX: 00007f0b0679e159 [ 208.982120][ T8432] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 208.982132][ T8432] RBP: 00007f0b076f8090 R08: 0000000000000000 R09: 0000000000000000 [ 208.982144][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.982155][ T8432] R13: 00007f0b06a26038 R14: 00007f0b06a25fa0 R15: 00007f0b06b4fa48 [ 208.982186][ T8432] [ 209.239703][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.240132][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.967842][ T8450] IPv6: addrconf: prefix option has invalid lifetime [ 210.130886][ T8455] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 210.208195][ T8457] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 211.005107][ T8471] ip_tables: iptables: counters copy to user failed while replacing table [ 211.377071][ T8489] batadv0: entered promiscuous mode [ 211.377321][ T8489] vlan3: entered promiscuous mode [ 211.419324][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.431113][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.523085][ T8494] IPv6: addrconf: prefix option has invalid lifetime [ 211.784622][ T8503] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 211.882108][ T8509] fuse: Bad value for 'group_id' [ 211.882126][ T8509] fuse: Bad value for 'group_id' [ 211.928281][ T8510] fuse: Bad value for 'fd' [ 211.943093][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 212.086626][ T8518] FAULT_INJECTION: forcing a failure. [ 212.086626][ T8518] name failslab, interval 1, probability 0, space 0, times 0 [ 212.086659][ T8518] CPU: 0 UID: 0 PID: 8518 Comm: syz.3.866 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.086687][ T8518] Tainted: [L]=SOFTLOCKUP [ 212.086694][ T8518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.086705][ T8518] Call Trace: [ 212.086713][ T8518] [ 212.086721][ T8518] dump_stack_lvl+0xe8/0x150 [ 212.086752][ T8518] should_fail_ex+0x410/0x560 [ 212.086787][ T8518] should_failslab+0xa8/0x100 [ 212.086813][ T8518] __kmalloc_cache_noprof+0xa3/0x600 [ 212.086832][ T8518] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 212.086859][ T8518] ? io_drain_req+0xa6/0x560 [ 212.086882][ T8518] ? io_drain_req+0xa6/0x560 [ 212.086915][ T8518] io_drain_req+0xa6/0x560 [ 212.086946][ T8518] io_submit_sqes+0x147a/0x2310 [ 212.086998][ T8518] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 212.087029][ T8518] ? __fget_files+0x3a2/0x420 [ 212.087058][ T8518] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 212.087080][ T8518] ? fput+0xa0/0xd0 [ 212.087103][ T8518] ? ksys_write+0x242/0x270 [ 212.087132][ T8518] ? __pfx_ksys_write+0x10/0x10 [ 212.087165][ T8518] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 212.087190][ T8518] do_syscall_64+0x166/0x520 [ 212.087214][ T8518] ? trace_irq_disable+0x3b/0x140 [ 212.087233][ T8518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.087252][ T8518] ? clear_bhb_loop+0x70/0xc0 [ 212.087275][ T8518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.087293][ T8518] RIP: 0033:0x7f7f1959e159 [ 212.087310][ T8518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.087325][ T8518] RSP: 002b:00007f7f1a4d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 212.087345][ T8518] RAX: ffffffffffffffda RBX: 00007f7f19825fa0 RCX: 00007f7f1959e159 [ 212.087359][ T8518] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 212.087371][ T8518] RBP: 00007f7f1a4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.087382][ T8518] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002 [ 212.087394][ T8518] R13: 00007f7f19826038 R14: 00007f7f19825fa0 R15: 00007f7f1994fa48 [ 212.087424][ T8518] [ 212.423440][ T8525] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 212.493445][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 212.675215][ T8534] IPv6: addrconf: prefix option has invalid lifetime [ 212.822207][ T5695] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 212.938450][ T8548] FAULT_INJECTION: forcing a failure. [ 212.938450][ T8548] name failslab, interval 1, probability 0, space 0, times 0 [ 212.938483][ T8548] CPU: 0 UID: 0 PID: 8548 Comm: syz.1.877 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.938508][ T8548] Tainted: [L]=SOFTLOCKUP [ 212.938515][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.938524][ T8548] Call Trace: [ 212.938532][ T8548] [ 212.938539][ T8548] dump_stack_lvl+0xe8/0x150 [ 212.938570][ T8548] should_fail_ex+0x410/0x560 [ 212.938595][ T8548] should_failslab+0xa8/0x100 [ 212.938619][ T8548] __kmalloc_cache_noprof+0xa3/0x600 [ 212.938640][ T8548] ? __kmalloc_cache_noprof+0x14d/0x600 [ 212.938657][ T8548] ? find_css_set+0xc79/0x1e00 [ 212.938676][ T8548] ? find_css_set+0xc79/0x1e00 [ 212.938703][ T8548] find_css_set+0xc79/0x1e00 [ 212.938739][ T8548] ? __pfx_find_css_set+0x10/0x10 [ 212.938772][ T8548] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 212.938811][ T8548] cgroup_migrate_prepare_dst+0x118/0x620 [ 212.938842][ T8548] cgroup_attach_task+0x480/0x870 [ 212.938870][ T8548] ? __pfx_cgroup_attach_task+0x10/0x10 [ 212.938898][ T8548] ? get_task_cred+0x23/0x300 [ 212.938917][ T8548] ? get_task_cred+0x23/0x300 [ 212.938934][ T8548] ? get_task_cred+0x23/0x300 [ 212.938955][ T8548] ? get_task_cred+0x2c1/0x300 [ 212.938972][ T8548] ? get_task_cred+0x23/0x300 [ 212.938994][ T8548] __cgroup1_procs_write+0x2dc/0x3d0 [ 212.939026][ T8548] ? __pfx___cgroup1_procs_write+0x10/0x10 [ 212.939050][ T8548] ? kernfs_root+0x1c/0x230 [ 212.939065][ T8548] ? kernfs_root+0x1c/0x230 [ 212.939106][ T8548] ? kernfs_root+0x1ea/0x230 [ 212.939126][ T8548] ? __pfx_cgroup1_procs_write+0x10/0x10 [ 212.939148][ T8548] cgroup_file_write+0x331/0x8f0 [ 212.939181][ T8548] ? __pfx_cgroup_file_write+0x10/0x10 [ 212.939209][ T8548] ? __kmalloc_noprof+0x38c/0x720 [ 212.939236][ T8548] ? __pfx_cgroup_file_write+0x10/0x10 [ 212.939259][ T8548] kernfs_fop_write_iter+0x3a4/0x540 [ 212.939289][ T8548] vfs_write+0x612/0xba0 [ 212.939325][ T8548] ? __pfx_vfs_write+0x10/0x10 [ 212.939364][ T8548] ? __fget_files+0x2a/0x420 [ 212.939398][ T8548] ksys_write+0x150/0x270 [ 212.939428][ T8548] ? __pfx_ksys_write+0x10/0x10 [ 212.939467][ T8548] do_syscall_64+0x166/0x520 [ 212.939490][ T8548] ? trace_irq_disable+0x3b/0x140 [ 212.939508][ T8548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.939527][ T8548] ? clear_bhb_loop+0x70/0xc0 [ 212.939550][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.939568][ T8548] RIP: 0033:0x7fc1c779e159 [ 212.939585][ T8548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.939600][ T8548] RSP: 002b:00007fc1c85b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.939620][ T8548] RAX: ffffffffffffffda RBX: 00007fc1c7a25fa0 RCX: 00007fc1c779e159 [ 212.939633][ T8548] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000004 [ 212.939644][ T8548] RBP: 00007fc1c85b4090 R08: 0000000000000000 R09: 0000000000000000 [ 212.939654][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.939666][ T8548] R13: 00007fc1c7a26038 R14: 00007fc1c7a25fa0 R15: 00007fc1c7b4fa48 [ 212.939699][ T8548] [ 212.950999][ T8546] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.023433][ T5695] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.082704][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.082736][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.082755][ T5695] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.082795][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.209506][ T8552] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 213.245207][ T5695] usb 3-1: config 0 descriptor?? [ 213.307914][ T8552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.431133][ T8552] macvtap2: entered allmulticast mode [ 213.447119][ T8552] bond2: (slave geneve2): making interface the new active one [ 213.451270][ T8552] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 213.622310][ T8561] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.751679][ T5695] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 213.915064][ T8530] netlink: 'syz.2.870': attribute type 1 has an invalid length. [ 214.303271][ T8590] FAULT_INJECTION: forcing a failure. [ 214.303271][ T8590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.303305][ T8590] CPU: 0 UID: 0 PID: 8590 Comm: syz.3.884 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.303328][ T8590] Tainted: [L]=SOFTLOCKUP [ 214.303332][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.303338][ T8590] Call Trace: [ 214.303343][ T8590] [ 214.303348][ T8590] dump_stack_lvl+0xe8/0x150 [ 214.303381][ T8590] should_fail_ex+0x410/0x560 [ 214.303407][ T8590] copy_fpstate_to_sigframe+0xa83/0xd20 [ 214.303436][ T8590] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 214.303467][ T8590] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 214.303496][ T8590] ? do_raw_spin_unlock+0xf5/0x200 [ 214.303527][ T8590] ? timerqueue_linked_add+0x2b6/0x2e0 [ 214.303540][ T8590] ? fpu__alloc_mathframe+0xac/0x130 [ 214.303555][ T8590] get_sigframe+0x603/0x830 [ 214.303573][ T8590] ? __pfx_get_sigframe+0x10/0x10 [ 214.303586][ T8590] ? irqentry_exit+0x218/0x910 [ 214.303598][ T8590] ? trace_irq_disable+0x3b/0x140 [ 214.303614][ T8590] x64_setup_rt_frame+0x163/0xc50 [ 214.303630][ T8590] ? _raw_spin_unlock_irq+0x29/0x50 [ 214.303643][ T8590] ? _raw_spin_unlock_irq+0x2e/0x50 [ 214.303653][ T8590] ? get_signal+0x10dd/0x12c0 [ 214.303670][ T8590] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 214.303688][ T8590] arch_do_signal_or_restart+0x456/0x860 [ 214.303704][ T8590] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 214.303721][ T8590] ? ksys_write+0x242/0x270 [ 214.303740][ T8590] exit_to_user_mode_loop+0x10e/0x770 [ 214.303751][ T8590] ? rcu_is_watching+0x16/0xb0 [ 214.303765][ T8590] do_syscall_64+0x328/0x520 [ 214.303778][ T8590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.303788][ T8590] ? clear_bhb_loop+0x70/0xc0 [ 214.303800][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.303810][ T8590] RIP: 0033:0x7f7f1955e98e [ 214.303820][ T8590] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 214.303828][ T8590] RSP: 002b:00007f7f1a4d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.303840][ T8590] RAX: 0000000000000001 RBX: 00007f7f1a4d66c0 RCX: 00007f7f1955e98e [ 214.303846][ T8590] RDX: 0000000000000001 RSI: 00007f7f1a4d6090 RDI: 0000000000000003 [ 214.303852][ T8590] RBP: 00007f7f1a4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.303858][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.303864][ T8590] R13: 00007f7f19826038 R14: 00007f7f19825fa0 R15: 00007f7f1994fa48 [ 214.303879][ T8590] [ 214.841710][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 214.927952][ T8600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.939155][ T8600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.969796][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.888'. [ 214.991072][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 214.991851][ T25] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 214.995388][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.995401][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.995429][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.059990][ T25] usb 2-1: config 0 descriptor?? [ 215.293671][ T8607] kvm: pic: non byte write [ 215.318954][ T8607] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 215.341708][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'. [ 215.401603][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.403134][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.912603][ T5687] usb 3-1: USB disconnect, device number 24 [ 215.971990][ T8618] plantronics 0003:047F:FFFF.0005: pid 8618 passed too short report [ 216.060778][ T8624] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 216.233719][ T8626] FAULT_INJECTION: forcing a failure. [ 216.233719][ T8626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.233751][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.0.896 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.233776][ T8626] Tainted: [L]=SOFTLOCKUP [ 216.233783][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.233794][ T8626] Call Trace: [ 216.233801][ T8626] [ 216.233809][ T8626] dump_stack_lvl+0xe8/0x150 [ 216.233840][ T8626] should_fail_ex+0x410/0x560 [ 216.233866][ T8626] _copy_from_user+0x2d/0xb0 [ 216.233892][ T8626] __copy_msghdr+0x390/0x590 [ 216.233923][ T8626] ___sys_sendmsg+0x213/0x360 [ 216.233947][ T8626] ? __lock_acquire+0x747/0x2de0 [ 216.233971][ T8626] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.234002][ T8626] ? kstrtouint+0x6e/0xe0 [ 216.234046][ T8626] ? __fget_files+0x2a/0x420 [ 216.234070][ T8626] ? __fget_files+0x3a2/0x420 [ 216.234102][ T8626] __sys_sendmmsg+0x273/0x4d0 [ 216.234133][ T8626] ? __pfx___sys_sendmmsg+0x10/0x10 [ 216.234165][ T8626] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 216.234204][ T8626] ? ksys_write+0x242/0x270 [ 216.234241][ T8626] ? __pfx_ksys_write+0x10/0x10 [ 216.234275][ T8626] __x64_sys_sendmmsg+0xa0/0xc0 [ 216.234303][ T8626] do_syscall_64+0x166/0x520 [ 216.234326][ T8626] ? trace_irq_disable+0x3b/0x140 [ 216.234344][ T8626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.234363][ T8626] ? clear_bhb_loop+0x70/0xc0 [ 216.234386][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.234404][ T8626] RIP: 0033:0x7fe4eff9e159 [ 216.234421][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.234437][ T8626] RSP: 002b:00007fe4ee1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 216.234457][ T8626] RAX: ffffffffffffffda RBX: 00007fe4f0225fa0 RCX: 00007fe4eff9e159 [ 216.234470][ T8626] RDX: 0000000000000001 RSI: 00002000000018c0 RDI: 0000000000000003 [ 216.234481][ T8626] RBP: 00007fe4ee1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 216.234492][ T8626] R10: 0000000000004880 R11: 0000000000000246 R12: 0000000000000001 [ 216.234503][ T8626] R13: 00007fe4f0226038 R14: 00007fe4f0225fa0 R15: 00007fe4f034fa48 [ 216.234533][ T8626] [ 216.480640][ T25] usb 2-1: USB disconnect, device number 25 [ 216.889522][ T8639] sg_write: data in/out 475148/136 bytes for SCSI command 0x0-- guessing data in; [ 216.889522][ T8639] program syz.0.899 not setting count and/or reply_len properly [ 216.890193][ T8639] FAULT_INJECTION: forcing a failure. [ 216.890193][ T8639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.890222][ T8639] CPU: 0 UID: 0 PID: 8639 Comm: syz.0.899 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.890247][ T8639] Tainted: [L]=SOFTLOCKUP [ 216.890254][ T8639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.890265][ T8639] Call Trace: [ 216.890288][ T8639] [ 216.890296][ T8639] dump_stack_lvl+0xe8/0x150 [ 216.890329][ T8639] should_fail_ex+0x410/0x560 [ 216.890354][ T8639] _copy_from_iter+0x1d3/0x1660 [ 216.890378][ T8639] ? pfn_valid+0x125/0x4c0 [ 216.890405][ T8639] ? pfn_valid+0x446/0x4c0 [ 216.890427][ T8639] ? __pfx__copy_from_iter+0x10/0x10 [ 216.890446][ T8639] ? bvec_try_merge_page+0x1d4/0x280 [ 216.890474][ T8639] ? bio_add_page+0x2f4/0x700 [ 216.890501][ T8639] copy_page_from_iter+0x219/0x2d0 [ 216.890528][ T8639] blk_rq_map_user_iov+0xcb1/0x1840 [ 216.890569][ T8639] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 216.890609][ T8639] ? import_ubuf+0xfb/0x1d0 [ 216.890634][ T8639] blk_rq_map_user_io+0x2ae/0x440 [ 216.890662][ T8639] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 216.890697][ T8639] ? sg_common_write+0xb2c/0x1310 [ 216.890729][ T8639] ? __mutex_unlock_slowpath+0x731/0x900 [ 216.890756][ T8639] ? alloc_pages_noprof+0x140/0x2b0 [ 216.890782][ T8639] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 216.890818][ T8639] sg_common_write+0xc73/0x1310 [ 216.890859][ T8639] ? __pfx_sg_common_write+0x10/0x10 [ 216.890888][ T8639] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 216.890910][ T8639] ? ___ratelimit+0x584/0x8e0 [ 216.890938][ T8639] sg_write+0xaf3/0xf10 [ 216.890971][ T8639] ? __pfx_sg_write+0x10/0x10 [ 216.890999][ T8639] ? __pfx_aa_file_perm+0x10/0x10 [ 216.891053][ T8639] ? bpf_lsm_file_permission+0x9/0x20 [ 216.891078][ T8639] ? security_file_permission+0x75/0x260 [ 216.891099][ T8639] ? rw_verify_area+0x203/0x4c0 [ 216.891127][ T8639] ? __pfx_sg_write+0x10/0x10 [ 216.891151][ T8639] vfs_write+0x296/0xba0 [ 216.891186][ T8639] ? __pfx_vfs_write+0x10/0x10 [ 216.891214][ T8639] ? __fget_files+0x2a/0x420 [ 216.891242][ T8639] ? __fget_files+0x2a/0x420 [ 216.891265][ T8639] ? __fget_files+0x3a2/0x420 [ 216.891295][ T8639] ? __fget_files+0x2a/0x420 [ 216.891328][ T8639] ksys_write+0x150/0x270 [ 216.891357][ T8639] ? __pfx_ksys_write+0x10/0x10 [ 216.891395][ T8639] do_syscall_64+0x166/0x520 [ 216.891418][ T8639] ? trace_irq_disable+0x3b/0x140 [ 216.891436][ T8639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.891456][ T8639] ? clear_bhb_loop+0x70/0xc0 [ 216.891479][ T8639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.891497][ T8639] RIP: 0033:0x7fe4eff9e159 [ 216.891515][ T8639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.891530][ T8639] RSP: 002b:00007fe4ee1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.891550][ T8639] RAX: ffffffffffffffda RBX: 00007fe4f0225fa0 RCX: 00007fe4eff9e159 [ 216.891564][ T8639] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000007 [ 216.891576][ T8639] RBP: 00007fe4ee1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 216.891587][ T8639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.891598][ T8639] R13: 00007fe4f0226038 R14: 00007fe4f0225fa0 R15: 00007fe4f034fa48 [ 216.891629][ T8639] [ 217.641689][ T5695] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 217.817007][ T5695] usb 2-1: Using ep0 maxpacket: 32 [ 217.818750][ T5695] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.818780][ T5695] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 217.843048][ T5695] usb 2-1: config 165 has an invalid interface number: 162 but max is 0 [ 217.843071][ T5695] usb 2-1: config 165 has no interface number 0 [ 217.843116][ T5695] usb 2-1: config 165 interface 162 has no altsetting 0 [ 217.849397][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.849430][ T5695] usb 2-1: Product: syz [ 217.849444][ T5695] usb 2-1: Manufacturer: syz [ 217.849456][ T5695] usb 2-1: SerialNumber: syz [ 218.210992][ T8657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.901'. [ 218.245168][ T5695] usb 2-1: USB disconnect, device number 26 [ 218.285210][ T5349] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 218.589104][ T8665] input: syz1 as /devices/virtual/input/input16 [ 218.589547][ T8665] FAULT_INJECTION: forcing a failure. [ 218.589547][ T8665] name failslab, interval 1, probability 0, space 0, times 0 [ 218.589577][ T8665] CPU: 1 UID: 0 PID: 8665 Comm: syz.4.905 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.589602][ T8665] Tainted: [L]=SOFTLOCKUP [ 218.589609][ T8665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.589620][ T8665] Call Trace: [ 218.589627][ T8665] [ 218.589636][ T8665] dump_stack_lvl+0xe8/0x150 [ 218.589668][ T8665] should_fail_ex+0x410/0x560 [ 218.589695][ T8665] should_failslab+0xa8/0x100 [ 218.589719][ T8665] ? __kernfs_new_node+0xe6/0x980 [ 218.589739][ T8665] kmem_cache_alloc_noprof+0xa1/0x600 [ 218.589770][ T8665] ? __kernfs_new_node+0xe6/0x980 [ 218.589794][ T8665] __kernfs_new_node+0xe6/0x980 [ 218.589823][ T8665] ? __pfx___kernfs_new_node+0x10/0x10 [ 218.589842][ T8665] ? kernfs_root+0x1c/0x230 [ 218.589867][ T8665] ? kernfs_root+0x1c/0x230 [ 218.589884][ T8665] ? kernfs_root+0x1c/0x230 [ 218.589899][ T8665] ? kernfs_root+0x1c/0x230 [ 218.589922][ T8665] kernfs_new_node+0xea/0x140 [ 218.589946][ T8665] __kernfs_create_file+0x4b/0x2e0 [ 218.589972][ T8665] sysfs_add_file_mode_ns+0x237/0x300 [ 218.590005][ T8665] sysfs_merge_group+0x183/0x320 [ 218.590025][ T8665] ? __pfx_sysfs_merge_group+0x10/0x10 [ 218.590042][ T8665] ? device_add_attrs+0x5c3/0x600 [ 218.590066][ T8665] ? __pfx_device_add_attrs+0x10/0x10 [ 218.590092][ T8665] dpm_sysfs_add+0xd2/0x270 [ 218.590116][ T8665] device_add+0x4ca/0xb80 [ 218.590139][ T8665] cdev_device_add+0x1c6/0x380 [ 218.590166][ T8665] evdev_connect+0x354/0x400 [ 218.590190][ T8665] input_register_device+0xd08/0x1150 [ 218.590228][ T8665] uinput_create_device+0x53e/0x690 [ 218.590260][ T8665] uinput_ioctl_handler+0x433/0x15a0 [ 218.590299][ T8665] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 218.590334][ T8665] ? __fget_files+0x2a/0x420 [ 218.590359][ T8665] ? __fget_files+0x3a2/0x420 [ 218.590389][ T8665] ? bpf_lsm_file_ioctl+0x9/0x20 [ 218.590416][ T8665] ? __pfx_uinput_ioctl+0x10/0x10 [ 218.590439][ T8665] __se_sys_ioctl+0xfc/0x170 [ 218.590461][ T8665] do_syscall_64+0x166/0x520 [ 218.590485][ T8665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.590504][ T8665] ? clear_bhb_loop+0x70/0xc0 [ 218.590537][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.590557][ T8665] RIP: 0033:0x7fdbef99e159 [ 218.590575][ T8665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.590591][ T8665] RSP: 002b:00007fdbf07d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.590611][ T8665] RAX: ffffffffffffffda RBX: 00007fdbefc25fa0 RCX: 00007fdbef99e159 [ 218.590625][ T8665] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 218.590636][ T8665] RBP: 00007fdbf07d6090 R08: 0000000000000000 R09: 0000000000000000 [ 218.590648][ T8665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.590659][ T8665] R13: 00007fdbefc26038 R14: 00007fdbefc25fa0 R15: 00007fdbefd4fa48 [ 218.590691][ T8665] [ 218.961501][ T8662] xt_CT: No such helper "snmp_trap" [ 218.999195][ T8665] input: failed to attach handler evdev to device input16, error: -12 [ 219.253320][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.906'. [ 220.128675][ T8683] FAULT_INJECTION: forcing a failure. [ 220.128675][ T8683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.128697][ T8683] CPU: 1 UID: 0 PID: 8683 Comm: syz.0.910 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.128711][ T8683] Tainted: [L]=SOFTLOCKUP [ 220.128715][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.128721][ T8683] Call Trace: [ 220.128725][ T8683] [ 220.128729][ T8683] dump_stack_lvl+0xe8/0x150 [ 220.128749][ T8683] should_fail_ex+0x410/0x560 [ 220.128764][ T8683] _copy_from_user+0x2d/0xb0 [ 220.128778][ T8683] __sys_sendto+0x2a9/0x5a0 [ 220.128792][ T8683] ? ksys_write+0x1e6/0x270 [ 220.128808][ T8683] ? __pfx___sys_sendto+0x10/0x10 [ 220.128819][ T8683] ? __mutex_unlock_slowpath+0x731/0x900 [ 220.128847][ T8683] ? __pfx_ksys_write+0x10/0x10 [ 220.128864][ T8683] __x64_sys_sendto+0xde/0x100 [ 220.128878][ T8683] do_syscall_64+0x166/0x520 [ 220.128891][ T8683] ? trace_irq_disable+0x3b/0x140 [ 220.128901][ T8683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.128911][ T8683] ? clear_bhb_loop+0x70/0xc0 [ 220.128923][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.128933][ T8683] RIP: 0033:0x7fe4eff9e159 [ 220.128944][ T8683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.128955][ T8683] RSP: 002b:00007fe4ee1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 220.128966][ T8683] RAX: ffffffffffffffda RBX: 00007fe4f0225fa0 RCX: 00007fe4eff9e159 [ 220.128973][ T8683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 220.128979][ T8683] RBP: 00007fe4ee1f6090 R08: 00002000000000c0 R09: 000000000000006e [ 220.128986][ T8683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.128992][ T8683] R13: 00007fe4f0226038 R14: 00007fe4f0225fa0 R15: 00007fe4f034fa48 [ 220.129011][ T8683] [ 220.431772][ T8686] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 220.431834][ T8686] FAULT_INJECTION: forcing a failure. [ 220.431834][ T8686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.431855][ T8686] CPU: 1 UID: 0 PID: 8686 Comm: syz.1.911 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.431869][ T8686] Tainted: [L]=SOFTLOCKUP [ 220.431873][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.431879][ T8686] Call Trace: [ 220.431883][ T8686] [ 220.431888][ T8686] dump_stack_lvl+0xe8/0x150 [ 220.431907][ T8686] should_fail_ex+0x410/0x560 [ 220.431923][ T8686] _copy_to_user+0x31/0xb0 [ 220.431938][ T8686] simple_read_from_buffer+0xe1/0x170 [ 220.431960][ T8686] proc_fail_nth_read+0x1bb/0x230 [ 220.431977][ T8686] ? common_file_perm+0x20e/0x2b0 [ 220.431999][ T8686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.432011][ T8686] ? rw_verify_area+0x24a/0x4c0 [ 220.432027][ T8686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.432036][ T8686] vfs_read+0x213/0xa80 [ 220.432053][ T8686] ? __pfx___mutex_lock+0x10/0x10 [ 220.432068][ T8686] ? __pfx_vfs_read+0x10/0x10 [ 220.432082][ T8686] ? __fget_files+0x2a/0x420 [ 220.432098][ T8686] ? __fget_files+0x3a2/0x420 [ 220.432110][ T8686] ? __fget_files+0x2a/0x420 [ 220.432127][ T8686] ksys_read+0x150/0x270 [ 220.432142][ T8686] ? __pfx_ksys_read+0x10/0x10 [ 220.432162][ T8686] do_syscall_64+0x166/0x520 [ 220.432174][ T8686] ? trace_irq_disable+0x3b/0x140 [ 220.432185][ T8686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.432195][ T8686] ? clear_bhb_loop+0x70/0xc0 [ 220.432208][ T8686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.432217][ T8686] RIP: 0033:0x7fc1c775e98e [ 220.432228][ T8686] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.432236][ T8686] RSP: 002b:00007fc1c85b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.432248][ T8686] RAX: ffffffffffffffda RBX: 00007fc1c85b46c0 RCX: 00007fc1c775e98e [ 220.432255][ T8686] RDX: 000000000000000f RSI: 00007fc1c85b40a0 RDI: 0000000000000004 [ 220.432261][ T8686] RBP: 00007fc1c85b4090 R08: 0000000000000000 R09: 0000000000000000 [ 220.432267][ T8686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.432273][ T8686] R13: 00007fc1c7a26038 R14: 00007fc1c7a25fa0 R15: 00007fc1c7b4fa48 [ 220.432289][ T8686] [ 220.819765][ T8696] netlink: 64 bytes leftover after parsing attributes in process `syz.3.914'. [ 220.819804][ T8696] netlink: 64 bytes leftover after parsing attributes in process `syz.3.914'. [ 220.881887][ T8698] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 221.021630][ T8704] input: syz0 as /devices/virtual/input/input17 [ 221.958299][ T8720] netlink: 'syz.2.923': attribute type 1 has an invalid length. [ 221.982300][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 222.141351][ T8734] sg_write: data in/out 278540/136 bytes for SCSI command 0x0-- guessing data in; [ 222.141351][ T8734] program syz.1.927 not setting count and/or reply_len properly [ 222.142111][ T8734] FAULT_INJECTION: forcing a failure. [ 222.142111][ T8734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.142141][ T8734] CPU: 0 UID: 0 PID: 8734 Comm: syz.1.927 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.142165][ T8734] Tainted: [L]=SOFTLOCKUP [ 222.142172][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.142183][ T8734] Call Trace: [ 222.142190][ T8734] [ 222.142199][ T8734] dump_stack_lvl+0xe8/0x150 [ 222.142229][ T8734] should_fail_ex+0x410/0x560 [ 222.142256][ T8734] _copy_from_iter+0x1d3/0x1660 [ 222.142281][ T8734] ? pfn_valid+0x125/0x4c0 [ 222.142310][ T8734] ? pfn_valid+0x446/0x4c0 [ 222.142333][ T8734] ? __pfx__copy_from_iter+0x10/0x10 [ 222.142353][ T8734] ? bvec_try_merge_page+0x1d4/0x280 [ 222.142385][ T8734] ? bio_add_page+0x2f4/0x700 [ 222.142414][ T8734] copy_page_from_iter+0x219/0x2d0 [ 222.142440][ T8734] blk_rq_map_user_iov+0xcb1/0x1840 [ 222.142483][ T8734] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 222.142522][ T8734] ? import_ubuf+0xfb/0x1d0 [ 222.142548][ T8734] blk_rq_map_user_io+0x2ae/0x440 [ 222.142577][ T8734] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 222.142612][ T8734] ? sg_common_write+0xb2c/0x1310 [ 222.142643][ T8734] ? __mutex_unlock_slowpath+0x731/0x900 [ 222.142669][ T8734] ? alloc_pages_noprof+0x140/0x2b0 [ 222.142696][ T8734] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 222.142739][ T8734] sg_common_write+0xc73/0x1310 [ 222.142780][ T8734] ? __pfx_sg_common_write+0x10/0x10 [ 222.142810][ T8734] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 222.142832][ T8734] ? ___ratelimit+0x584/0x8e0 [ 222.142859][ T8734] sg_write+0xaf3/0xf10 [ 222.142892][ T8734] ? __pfx_sg_write+0x10/0x10 [ 222.142919][ T8734] ? __pfx_aa_file_perm+0x10/0x10 [ 222.142968][ T8734] ? bpf_lsm_file_permission+0x9/0x20 [ 222.142991][ T8734] ? security_file_permission+0x75/0x260 [ 222.143012][ T8734] ? rw_verify_area+0x203/0x4c0 [ 222.143039][ T8734] ? __pfx_sg_write+0x10/0x10 [ 222.143063][ T8734] vfs_write+0x296/0xba0 [ 222.143098][ T8734] ? __pfx_vfs_write+0x10/0x10 [ 222.143127][ T8734] ? __fget_files+0x2a/0x420 [ 222.143154][ T8734] ? __fget_files+0x2a/0x420 [ 222.143176][ T8734] ? __fget_files+0x3a2/0x420 [ 222.143199][ T8734] ? __fget_files+0x2a/0x420 [ 222.143229][ T8734] ksys_write+0x150/0x270 [ 222.143257][ T8734] ? __pfx_ksys_write+0x10/0x10 [ 222.143293][ T8734] do_syscall_64+0x166/0x520 [ 222.143317][ T8734] ? trace_irq_disable+0x3b/0x140 [ 222.143336][ T8734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.143356][ T8734] ? clear_bhb_loop+0x70/0xc0 [ 222.143378][ T8734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.143397][ T8734] RIP: 0033:0x7fc1c779e159 [ 222.143415][ T8734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.143430][ T8734] RSP: 002b:00007fc1c85b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 222.143449][ T8734] RAX: ffffffffffffffda RBX: 00007fc1c7a25fa0 RCX: 00007fc1c779e159 [ 222.143462][ T8734] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000004 [ 222.143473][ T8734] RBP: 00007fc1c85b4090 R08: 0000000000000000 R09: 0000000000000000 [ 222.143484][ T8734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.143495][ T8734] R13: 00007fc1c7a26038 R14: 00007fc1c7a25fa0 R15: 00007fc1c7b4fa48 [ 222.143525][ T8734] [ 222.143777][ T8720] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.251500][ T8726] bridge1: entered promiscuous mode [ 222.277053][ T8726] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 222.284029][ T8729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.293478][ T8730] lo: entered allmulticast mode [ 222.308692][ T8724] lo: left allmulticast mode [ 222.818725][ T8751] FAULT_INJECTION: forcing a failure. [ 222.818725][ T8751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.818746][ T8751] CPU: 1 UID: 0 PID: 8751 Comm: syz.2.932 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.818761][ T8751] Tainted: [L]=SOFTLOCKUP [ 222.818765][ T8751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.818770][ T8751] Call Trace: [ 222.818775][ T8751] [ 222.818779][ T8751] dump_stack_lvl+0xe8/0x150 [ 222.818799][ T8751] should_fail_ex+0x410/0x560 [ 222.818815][ T8751] _copy_from_user+0x2d/0xb0 [ 222.818829][ T8751] ___sys_sendmsg+0x1c6/0x360 [ 222.818843][ T8751] ? __lock_acquire+0x747/0x2de0 [ 222.818857][ T8751] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.818869][ T8751] ? __lock_acquire+0x747/0x2de0 [ 222.818881][ T8751] ? kstrtouint+0x6e/0xe0 [ 222.818911][ T8751] __sys_sendmmsg+0x273/0x4d0 [ 222.818927][ T8751] ? __pfx___sys_sendmmsg+0x10/0x10 [ 222.818945][ T8751] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 222.818966][ T8751] ? ksys_write+0x242/0x270 [ 222.818982][ T8751] ? __pfx_ksys_write+0x10/0x10 [ 222.818999][ T8751] __x64_sys_sendmmsg+0xa0/0xc0 [ 222.819014][ T8751] do_syscall_64+0x166/0x520 [ 222.819026][ T8751] ? trace_irq_disable+0x3b/0x140 [ 222.819036][ T8751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.819046][ T8751] ? clear_bhb_loop+0x70/0xc0 [ 222.819059][ T8751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.819069][ T8751] RIP: 0033:0x7f0b0679e159 [ 222.819079][ T8751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.819088][ T8751] RSP: 002b:00007f0b076f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 222.819099][ T8751] RAX: ffffffffffffffda RBX: 00007f0b06a25fa0 RCX: 00007f0b0679e159 [ 222.819107][ T8751] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 222.819113][ T8751] RBP: 00007f0b076f8090 R08: 0000000000000000 R09: 0000000000000000 [ 222.819120][ T8751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.819125][ T8751] R13: 00007f0b06a26038 R14: 00007f0b06a25fa0 R15: 00007f0b06b4fa48 [ 222.819140][ T8751] [ 223.326434][ T8754] netlink: 'syz.4.929': attribute type 8 has an invalid length. [ 224.170893][ T8780] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 224.672913][ T8784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.094063][ T8797] syzkaller0: entered promiscuous mode [ 225.094085][ T8797] syzkaller0: entered allmulticast mode [ 225.166679][ T8801] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.946'. [ 225.205785][ T8801] syzkaller0: entered promiscuous mode [ 225.205800][ T8801] syzkaller0: entered allmulticast mode [ 225.230867][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.230910][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.230941][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.230971][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231000][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231028][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231057][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231086][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231115][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231144][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231172][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231201][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231229][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231258][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231287][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231316][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231344][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231373][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231401][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231438][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231467][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231495][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231524][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231552][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231592][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231621][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231649][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231678][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231707][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231735][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231767][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231808][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231837][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231866][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231894][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231925][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231954][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.231983][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.232011][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.232040][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.232068][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.232096][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.232125][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.232153][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.232181][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.232210][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.232238][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.232266][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.232295][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.238782][ T8808] random: crng reseeded on system resumption [ 225.243907][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.243962][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244012][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244062][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244110][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244160][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244209][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244258][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244316][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244364][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244419][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244468][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244517][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244565][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244614][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 225.244663][ T8805] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 226.024371][ T8814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.949'. [ 226.859277][ T8840] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 227.443736][ T8577] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.592818][ T8577] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.713576][ T8577] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.754767][ T8847] bridge2: entered promiscuous mode [ 227.754790][ T8847] bridge2: entered allmulticast mode [ 227.826154][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.829964][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.845229][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.848683][ T8577] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.874210][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.874858][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.324291][ T8861] warning: `syz.3.965' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 228.525462][ T8577] dvmrp12: left allmulticast mode [ 228.933962][ T8882] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 228.954854][ T8866] fuse: Bad value for 'fd' [ 229.268697][ T8577] bond2 (unregistering): (slave geneve2): Releasing active interface [ 229.358069][ T8889] FAULT_INJECTION: forcing a failure. [ 229.358069][ T8889] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 229.358102][ T8889] CPU: 0 UID: 0 PID: 8889 Comm: syz.3.969 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.358126][ T8889] Tainted: [L]=SOFTLOCKUP [ 229.358132][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.358143][ T8889] Call Trace: [ 229.358150][ T8889] [ 229.358158][ T8889] dump_stack_lvl+0xe8/0x150 [ 229.358189][ T8889] should_fail_ex+0x410/0x560 [ 229.358215][ T8889] prepare_alloc_pages+0x223/0x600 [ 229.358242][ T8889] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 229.358266][ T8889] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 229.358291][ T8889] ? __pfx_policy_nodemask+0x10/0x10 [ 229.358312][ T8889] ? __get_vm_area_node+0x155/0x2f0 [ 229.358336][ T8889] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 229.358362][ T8889] ? __vmalloc_noprof+0xd2/0x120 [ 229.358386][ T8889] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 229.358407][ T8889] ? bpf_prog_alloc+0x3c/0x1a0 [ 229.358426][ T8889] ? __sys_bpf+0xd0d/0xd90 [ 229.358444][ T8889] ? __x64_sys_bpf+0xba/0xd0 [ 229.358460][ T8889] ? do_syscall_64+0x166/0x520 [ 229.358482][ T8889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.358505][ T8889] alloc_pages_mpol+0x21e/0x390 [ 229.358533][ T8889] alloc_pages_noprof+0xb1/0x2b0 [ 229.358558][ T8889] get_free_pages_noprof+0xf/0x80 [ 229.358579][ T8889] __kasan_populate_vmalloc+0x38/0x1c0 [ 229.358597][ T8889] ? do_raw_spin_unlock+0xf5/0x200 [ 229.358626][ T8889] alloc_vmap_area+0xd1a/0x1420 [ 229.358667][ T8889] ? __pfx_alloc_vmap_area+0x10/0x10 [ 229.358690][ T8889] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 229.358711][ T8889] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 229.358729][ T8889] ? __get_vm_area_node+0x155/0x2f0 [ 229.358759][ T8889] __get_vm_area_node+0x200/0x2f0 [ 229.358792][ T8889] __vmalloc_node_range_noprof+0x343/0x1540 [ 229.358819][ T8889] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 229.358841][ T8889] ? __lock_acquire+0x747/0x2de0 [ 229.358884][ T8889] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.358920][ T8889] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 229.358949][ T8889] __vmalloc_noprof+0xd2/0x120 [ 229.358975][ T8889] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 229.358998][ T8889] bpf_prog_alloc_no_stats+0x47/0x560 [ 229.359018][ T8889] ? bpf_prog_alloc+0x2a/0x1a0 [ 229.359041][ T8889] bpf_prog_alloc+0x3c/0x1a0 [ 229.359072][ T8889] bpf_prog_load+0x7f8/0x1c20 [ 229.359105][ T8889] ? __pfx_bpf_prog_load+0x10/0x10 [ 229.359149][ T8889] __sys_bpf+0xd0d/0xd90 [ 229.359174][ T8889] ? __pfx___sys_bpf+0x10/0x10 [ 229.359202][ T8889] ? __fget_files+0x2a/0x420 [ 229.359253][ T8889] ? ksys_write+0x242/0x270 [ 229.359282][ T8889] ? __pfx_ksys_write+0x10/0x10 [ 229.359313][ T8889] __x64_sys_bpf+0xba/0xd0 [ 229.359333][ T8889] do_syscall_64+0x166/0x520 [ 229.359355][ T8889] ? trace_irq_disable+0x3b/0x140 [ 229.359371][ T8889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.359387][ T8889] ? clear_bhb_loop+0x70/0xc0 [ 229.359407][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.359423][ T8889] RIP: 0033:0x7f7f1959e159 [ 229.359439][ T8889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.359453][ T8889] RSP: 002b:00007f7f1a4d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.359471][ T8889] RAX: ffffffffffffffda RBX: 00007f7f19825fa0 RCX: 00007f7f1959e159 [ 229.359483][ T8889] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 229.359494][ T8889] RBP: 00007f7f1a4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 229.359504][ T8889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.359514][ T8889] R13: 00007f7f19826038 R14: 00007f7f19825fa0 R15: 00007f7f1994fa48 [ 229.359542][ T8889] [ 229.503827][ T8889] syz.3.969: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 229.503915][ T8889] CPU: 1 UID: 0 PID: 8889 Comm: syz.3.969 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.503942][ T8889] Tainted: [L]=SOFTLOCKUP [ 229.503949][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.503959][ T8889] Call Trace: [ 229.503966][ T8889] [ 229.503972][ T8889] dump_stack_lvl+0xe8/0x150 [ 229.504005][ T8889] warn_alloc+0x24d/0x270 [ 229.504024][ T8889] ? lockdep_hardirqs_on+0x7b/0x110 [ 229.504054][ T8889] ? __pfx_warn_alloc+0x10/0x10 [ 229.504070][ T8889] ? kfree+0x1c5/0x650 [ 229.504099][ T8889] ? __get_vm_area_node+0x219/0x2f0 [ 229.504131][ T8889] __vmalloc_node_range_noprof+0x36b/0x1540 [ 229.504159][ T8889] ? __lock_acquire+0x747/0x2de0 [ 229.504199][ T8889] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.504234][ T8889] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 229.504254][ T8889] __vmalloc_noprof+0xd2/0x120 [ 229.504278][ T8889] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 229.504300][ T8889] bpf_prog_alloc_no_stats+0x47/0x560 [ 229.504319][ T8889] ? bpf_prog_alloc+0x2a/0x1a0 [ 229.504342][ T8889] bpf_prog_alloc+0x3c/0x1a0 [ 229.504364][ T8889] bpf_prog_load+0x7f8/0x1c20 [ 229.504396][ T8889] ? __pfx_bpf_prog_load+0x10/0x10 [ 229.504440][ T8889] __sys_bpf+0xd0d/0xd90 [ 229.504467][ T8889] ? __pfx___sys_bpf+0x10/0x10 [ 229.504496][ T8889] ? __fget_files+0x2a/0x420 [ 229.504536][ T8889] ? ksys_write+0x242/0x270 [ 229.504570][ T8889] ? __pfx_ksys_write+0x10/0x10 [ 229.504599][ T8889] __x64_sys_bpf+0xba/0xd0 [ 229.504620][ T8889] do_syscall_64+0x166/0x520 [ 229.504642][ T8889] ? trace_irq_disable+0x3b/0x140 [ 229.504660][ T8889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.504678][ T8889] ? clear_bhb_loop+0x70/0xc0 [ 229.504699][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.504717][ T8889] RIP: 0033:0x7f7f1959e159 [ 229.504734][ T8889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.504749][ T8889] RSP: 002b:00007f7f1a4d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.504768][ T8889] RAX: ffffffffffffffda RBX: 00007f7f19825fa0 RCX: 00007f7f1959e159 [ 229.504781][ T8889] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 229.504792][ T8889] RBP: 00007f7f1a4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 229.504803][ T8889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.504813][ T8889] R13: 00007f7f19826038 R14: 00007f7f19825fa0 R15: 00007f7f1994fa48 [ 229.504842][ T8889] [ 229.504849][ T8889] Mem-Info: [ 229.504858][ T8889] active_anon:10044 inactive_anon:13 isolated_anon:22 [ 229.504858][ T8889] active_file:73 inactive_file:53190 isolated_file:0 [ 229.504858][ T8889] unevictable:1802 dirty:136 writeback:0 [ 229.504858][ T8889] slab_reclaimable:11300 slab_unreclaimable:97782 [ 229.504858][ T8889] mapped:32450 shmem:3993 pagetables:1366 [ 229.504858][ T8889] sec_pagetables:6 bounce:0 [ 229.504858][ T8889] kernel_misc_reclaimable:0 [ 229.504858][ T8889] free:1302548 free_pcp:12162 free_cma:0 [ 229.504902][ T8889] Node 0 active_anon:40176kB inactive_anon:52kB active_file:292kB inactive_file:212560kB unevictable:7208kB isolated(anon):88kB isolated(file):0kB mapped:129800kB dirty:540kB writeback:0kB shmem:15972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13008kB pagetables:5328kB sec_pagetables:24kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 229.504950][ T8889] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 229.504995][ T8889] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.505043][ T8889] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 229.505076][ T8889] Node 0 DMA32 free:1263924kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:40176kB inactive_anon:52kB active_file:292kB inactive_file:212560kB unevictable:7208kB writepending:540kB zspages:724kB present:3129332kB managed:2546884kB mlocked:7284kB bounce:0kB free_pcp:40984kB local_pcp:20616kB free_cma:0kB [ 229.505127][ T8889] lowmem_reserve[]: 0 0 0 0 0 [ 229.505157][ T8889] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.505204][ T8889] lowmem_reserve[]: 0 0 0 0 0 [ 229.513236][ T8889] Node 1 Normal free:3930908kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:7664kB local_pcp:240kB free_cma:0kB [ 229.513293][ T8889] lowmem_reserve[]: 0 0 0 0 0 [ 229.513352][ T8889] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 229.513453][ T8889] Node 0 DMA32: 698*4kB (UME) 1265*8kB (UME) 397*16kB (UME) 429*32kB (UME) 234*64kB (UME) 96*128kB (UME) 38*256kB (UM) 12*512kB (UME) 12*1024kB (M) 6*2048kB (UM) 284*4096kB (UM) = 1263968kB [ 229.513597][ T8889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 229.513686][ T8889] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 6*16kB (U) 6*32kB (UM) 4*64kB (UM) 4*128kB (UM) 7*256kB (UM) 2*512kB (UM) 1*1024kB (U) 1*2048kB (M) 958*4096kB (M) = 3930960kB [ 229.513822][ T8889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.513836][ T8889] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.513850][ T8889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.513864][ T8889] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.513877][ T8889] 57327 total pagecache pages [ 229.513884][ T8889] 25 pages in swap cache [ 229.513890][ T8889] Free swap = 124472kB [ 229.513897][ T8889] Total swap = 124996kB [ 229.513903][ T8889] 2097051 pages RAM [ 229.513910][ T8889] 0 pages HighMem/MovableOnly [ 229.513916][ T8889] 428714 pages reserved [ 229.513922][ T8889] 0 pages cma reserved [ 229.588851][ T8577] team0: Port device bond0 removed [ 229.667956][ T8577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.857495][ T8577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.877027][ T8577] bond0 (unregistering): Released all slaves [ 229.950590][ T5618] Bluetooth: hci4: command tx timeout [ 230.125175][ T8577] bond1 (unregistering): Released all slaves [ 230.280279][ T2352] pvrusb2: request_firmware fatal error with code=-110 [ 230.292646][ T2352] pvrusb2: Failure uploading firmware1 [ 230.292660][ T2352] pvrusb2: Device initialization was not successful. [ 230.292667][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 230.292675][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 230.312517][ T5678] pvrusb2: Device being rendered inoperable [ 230.457363][ T8577] bond2 (unregistering): Released all slaves [ 230.632237][ T8898] vlan3: entered promiscuous mode [ 230.632258][ T8898] bond0: entered promiscuous mode [ 230.632271][ T8898] bond_slave_0: entered promiscuous mode [ 230.632464][ T8898] bond_slave_1: entered promiscuous mode [ 230.725661][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 231.069952][ T8905] pimreg: entered allmulticast mode [ 231.329274][ T8905] bond2: option all_slaves_active: invalid value (9) [ 231.343632][ T8905] bond2 (unregistering): Released all slaves [ 231.423198][ T8925] hub 8-0:1.0: USB hub found [ 231.425114][ T8925] hub 8-0:1.0: 1 port detected [ 231.669633][ T8577] hsr_slave_0: left promiscuous mode [ 231.679125][ T8577] hsr_slave_1: left promiscuous mode [ 231.686109][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.686124][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.687216][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.687236][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.733919][ T8577] veth1_macvtap: left promiscuous mode [ 231.733941][ T8577] veth0_macvtap: left promiscuous mode [ 231.734029][ T8577] veth1_vlan: left promiscuous mode [ 231.734078][ T8577] veth0_vlan: left promiscuous mode [ 232.029562][ T8943] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 232.030426][ T5618] Bluetooth: hci4: command tx timeout [ 232.371431][ T5695] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 232.500653][ T5695] usb 4-1: device descriptor read/64, error -71 [ 232.721852][ T8577] team0 (unregistering): Port device team_slave_1 removed [ 232.740455][ T5695] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 232.744958][ T8577] team0 (unregistering): Port device team_slave_0 removed [ 232.865587][ T8943] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 232.870493][ T5695] usb 4-1: device descriptor read/64, error -71 [ 232.889167][ T8945] bridge2: entered promiscuous mode [ 232.977497][ T8955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.988103][ T5695] usb usb4-port1: attempt power cycle [ 233.004581][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 233.275575][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.275685][ T8849] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.275805][ T8849] bridge_slave_0: entered allmulticast mode [ 233.282087][ T8849] bridge_slave_0: entered promiscuous mode [ 233.300637][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.300743][ T8849] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.300861][ T8849] bridge_slave_1: entered allmulticast mode [ 233.306123][ T8849] bridge_slave_1: entered promiscuous mode [ 233.331087][ T5695] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 233.360953][ T5695] usb 4-1: device descriptor read/8, error -71 [ 233.532896][ T8849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.557837][ T8849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.602409][ T5695] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 233.622060][ T5695] usb 4-1: device descriptor read/8, error -71 [ 233.730842][ T5695] usb usb4-port1: unable to enumerate USB device [ 233.799601][ T8849] team0: Port device team_slave_0 added [ 233.813856][ T8849] team0: Port device team_slave_1 added [ 233.817753][ T9000] tipc: Failed to remove unknown binding: 66,0,0/0:1126674739/1126674741 [ 233.817779][ T9000] tipc: Failed to remove unknown binding: 66,0,0/0:1126674739/1126674740 [ 233.855248][ T9000] tipc: Failed to remove unknown binding: 66,0,0/0:1126674739/1126674741 [ 233.855276][ T9000] tipc: Failed to remove unknown binding: 66,0,0/0:1126674739/1126674740 [ 233.901658][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.901674][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.901690][ T8849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.904430][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.904439][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.904452][ T8849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.111169][ T5618] Bluetooth: hci4: command tx timeout [ 234.131891][ T8849] hsr_slave_0: entered promiscuous mode [ 234.134921][ T8849] hsr_slave_1: entered promiscuous mode [ 234.238524][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 234.392186][ T9015] syzkaller0: entered promiscuous mode [ 234.392208][ T9015] syzkaller0: entered allmulticast mode [ 234.680634][ T9022] netlink: 5 bytes leftover after parsing attributes in process `syz.2.999'. [ 234.868682][ T5618] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 234.977217][ T9037] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1000'. [ 235.019661][ T9022] syzkaller0: entered promiscuous mode [ 235.019684][ T9022] syzkaller0: entered allmulticast mode [ 235.985984][ T50] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 236.143193][ T50] usb 4-1: New USB device found, idVendor=04b8, idProduct=2202, bcdDevice= 0.40 [ 236.165893][ T50] usb 4-1: config 1 has an invalid interface number: 97 but max is 0 [ 236.165911][ T50] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 236.165920][ T50] usb 4-1: config 1 has no interface number 0 [ 236.165936][ T50] usb 4-1: too many endpoints for config 1 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 236.165954][ T50] usb 4-1: config 1 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 236.165966][ T50] usb 4-1: config 1 interface 97 has no altsetting 0 [ 236.192289][ T5618] Bluetooth: hci4: command tx timeout [ 236.244869][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.244885][ T50] usb 4-1: Product: syz [ 236.244893][ T50] usb 4-1: Manufacturer: syz [ 236.244899][ T50] usb 4-1: SerialNumber: syz [ 236.478992][ T50] usb 4-1: USB disconnect, device number 23 [ 236.636411][ T9054] FAULT_INJECTION: forcing a failure. [ 236.636411][ T9054] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.636448][ T9054] CPU: 0 UID: 0 PID: 9054 Comm: syz.0.1006 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.636473][ T9054] Tainted: [L]=SOFTLOCKUP [ 236.636479][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.636489][ T9054] Call Trace: [ 236.636497][ T9054] [ 236.636505][ T9054] dump_stack_lvl+0xe8/0x150 [ 236.636535][ T9054] should_fail_ex+0x410/0x560 [ 236.636562][ T9054] prepare_alloc_pages+0x223/0x600 [ 236.636592][ T9054] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 236.636616][ T9054] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.636640][ T9054] ? __pfx_policy_nodemask+0x10/0x10 [ 236.636661][ T9054] ? trace_kmalloc+0x2a/0xf0 [ 236.636681][ T9054] ? __pfx__copy_from_iter+0x10/0x10 [ 236.636699][ T9054] ? __kmalloc_noprof+0x38c/0x720 [ 236.636719][ T9054] alloc_pages_mpol+0x21e/0x390 [ 236.636747][ T9054] alloc_pages_noprof+0xb1/0x2b0 [ 236.636772][ T9054] af_alg_sendmsg+0x13b1/0x2250 [ 236.636819][ T9054] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 236.636848][ T9054] ? aa_sock_msg_perm+0x144/0x210 [ 236.636876][ T9054] ? apparmor_socket_sendmsg+0x98/0x360 [ 236.636894][ T9054] ? skcipher_sendmsg+0x26/0xf0 [ 236.636914][ T9054] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 236.636932][ T9054] sock_sendmsg_nosec+0x13a/0x180 [ 236.636956][ T9054] ____sys_sendmsg+0x54e/0x850 [ 236.636986][ T9054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.637020][ T9054] ? import_iovec+0x73/0xa0 [ 236.637046][ T9054] ___sys_sendmsg+0x2a5/0x360 [ 236.637069][ T9054] ? __lock_acquire+0x747/0x2de0 [ 236.637092][ T9054] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.637122][ T9054] ? kstrtouint+0x6e/0xe0 [ 236.637166][ T9054] ? __fget_files+0x2a/0x420 [ 236.637189][ T9054] ? __fget_files+0x3a2/0x420 [ 236.637223][ T9054] __sys_sendmmsg+0x273/0x4d0 [ 236.637253][ T9054] ? __pfx___sys_sendmmsg+0x10/0x10 [ 236.637287][ T9054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.637336][ T9054] ? ksys_write+0x242/0x270 [ 236.637365][ T9054] ? __pfx_ksys_write+0x10/0x10 [ 236.637397][ T9054] __x64_sys_sendmmsg+0xa0/0xc0 [ 236.637425][ T9054] do_syscall_64+0x166/0x520 [ 236.637446][ T9054] ? trace_irq_disable+0x3b/0x140 [ 236.637464][ T9054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.637483][ T9054] ? clear_bhb_loop+0x70/0xc0 [ 236.637505][ T9054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.637523][ T9054] RIP: 0033:0x7fe4eff9e159 [ 236.637541][ T9054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.637555][ T9054] RSP: 002b:00007fe4ee1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 236.637575][ T9054] RAX: ffffffffffffffda RBX: 00007fe4f0226090 RCX: 00007fe4eff9e159 [ 236.637588][ T9054] RDX: 0000000000000001 RSI: 00002000000021c0 RDI: 0000000000000005 [ 236.637599][ T9054] RBP: 00007fe4ee1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 236.637610][ T9054] R10: 0000000000080001 R11: 0000000000000246 R12: 0000000000000002 [ 236.637621][ T9054] R13: 00007fe4f0226128 R14: 00007fe4f0226090 R15: 00007fe4f034fa48 [ 236.637652][ T9054] [ 238.076110][ T9071] nvme_tcp: malformed address passed: ::8009 [ 238.167996][ T8849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.181433][ T5349] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 238.189388][ T8849] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.190163][ T8849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.227020][ T8849] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.230263][ T8849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.259248][ T8849] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.262853][ T8849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.285489][ T8849] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.305714][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'. [ 238.332329][ T5349] usb 3-1: Using ep0 maxpacket: 16 [ 238.332964][ T5349] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 238.335185][ T5349] usb 3-1: config 0 interface 0 has no altsetting 0 [ 238.335219][ T5349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.338849][ T5349] usb 3-1: config 0 descriptor?? [ 238.563785][ T8849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.601010][ T5349] input: HID 258a:6a88 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:258A:6A88.0006/input/input18 [ 238.645526][ T8849] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.657897][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.657998][ T8571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.695974][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.696089][ T8571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.826252][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.826749][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.838847][ T5349] itetech 0003:258A:6A88.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 238.878157][ T5349] usb 3-1: USB disconnect, device number 26 [ 239.007178][ T9098] fido_id[9098]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 239.154285][ T8849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.308082][ T9110] sg_write: data in/out 278540/136 bytes for SCSI command 0x0-- guessing data in; [ 239.308082][ T9110] program syz.3.1015 not setting count and/or reply_len properly [ 239.330501][ T9110] FAULT_INJECTION: forcing a failure. [ 239.330501][ T9110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.330532][ T9110] CPU: 1 UID: 0 PID: 9110 Comm: syz.3.1015 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.330556][ T9110] Tainted: [L]=SOFTLOCKUP [ 239.330563][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.330573][ T9110] Call Trace: [ 239.330580][ T9110] [ 239.330588][ T9110] dump_stack_lvl+0xe8/0x150 [ 239.330617][ T9110] should_fail_ex+0x410/0x560 [ 239.330642][ T9110] _copy_from_iter+0x1d3/0x1660 [ 239.330676][ T9110] ? pfn_valid+0x125/0x4c0 [ 239.330705][ T9110] ? pfn_valid+0x446/0x4c0 [ 239.330727][ T9110] ? __pfx__copy_from_iter+0x10/0x10 [ 239.330747][ T9110] ? bvec_try_merge_page+0x1d4/0x280 [ 239.330778][ T9110] ? bio_add_page+0x2f4/0x700 [ 239.330805][ T9110] copy_page_from_iter+0x219/0x2d0 [ 239.330831][ T9110] blk_rq_map_user_iov+0xcb1/0x1840 [ 239.330871][ T9110] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 239.330909][ T9110] ? import_ubuf+0xfb/0x1d0 [ 239.330934][ T9110] blk_rq_map_user_io+0x2ae/0x440 [ 239.330960][ T9110] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 239.330994][ T9110] ? sg_common_write+0xb2c/0x1310 [ 239.331026][ T9110] ? __mutex_unlock_slowpath+0x731/0x900 [ 239.331052][ T9110] ? alloc_pages_noprof+0x140/0x2b0 [ 239.331079][ T9110] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 239.331115][ T9110] sg_common_write+0xc73/0x1310 [ 239.331152][ T9110] ? __pfx_sg_common_write+0x10/0x10 [ 239.331182][ T9110] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 239.331204][ T9110] ? ___ratelimit+0x584/0x8e0 [ 239.331231][ T9110] sg_write+0xaf3/0xf10 [ 239.331264][ T9110] ? __pfx_sg_write+0x10/0x10 [ 239.331292][ T9110] ? __pfx_aa_file_perm+0x10/0x10 [ 239.331344][ T9110] ? bpf_lsm_file_permission+0x9/0x20 [ 239.331369][ T9110] ? security_file_permission+0x75/0x260 [ 239.331390][ T9110] ? rw_verify_area+0x203/0x4c0 [ 239.331419][ T9110] ? __pfx_sg_write+0x10/0x10 [ 239.331443][ T9110] vfs_write+0x296/0xba0 [ 239.331478][ T9110] ? __pfx_vfs_write+0x10/0x10 [ 239.331506][ T9110] ? __fget_files+0x2a/0x420 [ 239.331532][ T9110] ? __fget_files+0x2a/0x420 [ 239.331555][ T9110] ? __fget_files+0x3a2/0x420 [ 239.331579][ T9110] ? __fget_files+0x2a/0x420 [ 239.331610][ T9110] ksys_write+0x150/0x270 [ 239.331639][ T9110] ? __pfx_ksys_write+0x10/0x10 [ 239.331682][ T9110] do_syscall_64+0x166/0x520 [ 239.331705][ T9110] ? trace_irq_disable+0x3b/0x140 [ 239.331723][ T9110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.331743][ T9110] ? clear_bhb_loop+0x70/0xc0 [ 239.331766][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.331786][ T9110] RIP: 0033:0x7f7f1959e159 [ 239.331803][ T9110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.331818][ T9110] RSP: 002b:00007f7f1a4d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.331838][ T9110] RAX: ffffffffffffffda RBX: 00007f7f19825fa0 RCX: 00007f7f1959e159 [ 239.331850][ T9110] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000004 [ 239.331862][ T9110] RBP: 00007f7f1a4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.331873][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.331884][ T9110] R13: 00007f7f19826038 R14: 00007f7f19825fa0 R15: 00007f7f1994fa48 [ 239.331914][ T9110] [ 239.458401][ T8849] veth0_vlan: entered promiscuous mode [ 239.508516][ T8849] veth1_vlan: entered promiscuous mode [ 239.724324][ T9116] bridge2: entered promiscuous mode [ 239.724346][ T9116] bridge2: entered allmulticast mode [ 239.728448][ T9116] team0: Port device bridge2 added [ 239.738154][ T8849] veth0_macvtap: entered promiscuous mode [ 239.769411][ T8849] veth1_macvtap: entered promiscuous mode [ 239.837542][ T8849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.875427][ T8849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.944452][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.944505][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.944535][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.951930][ T5695] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 239.983620][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.112833][ T5695] usb 4-1: Using ep0 maxpacket: 8 [ 240.116286][ T5695] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 240.117317][ T5695] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 240.117340][ T5695] usb 4-1: config 179 has no interface number 0 [ 240.117819][ T5695] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 240.117835][ T5695] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 240.117848][ T5695] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.117860][ T5695] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 240.117872][ T5695] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 240.117893][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.146201][ T9115] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 240.315949][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.315969][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.399115][ T8572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.399136][ T8572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.713160][ T5678] usb 4-1: USB disconnect, device number 24 [ 240.713523][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 240.713578][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 241.152646][ T5729] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 241.306219][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 241.308208][ T5729] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 241.319881][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.319905][ T5729] usb 2-1: Product: syz [ 241.319918][ T5729] usb 2-1: Manufacturer: syz [ 241.319930][ T5729] usb 2-1: SerialNumber: syz [ 241.459571][ T9167] ovs-system: entered promiscuous mode [ 241.472980][ T9167] openvswitch: ovs-system: Dropping previously announced user features [ 241.473694][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1028'. [ 241.630214][ T5729] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 241.643435][ T5695] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 241.676885][ T5729] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 241.677275][ T5729] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 241.703335][ T5729] usb 2-1: media controller created [ 241.794507][ T5695] usb 3-1: Using ep0 maxpacket: 8 [ 241.796909][ T5695] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 241.847542][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.847567][ T5695] usb 3-1: Product: syz [ 241.847580][ T5695] usb 3-1: Manufacturer: syz [ 241.847593][ T5695] usb 3-1: SerialNumber: syz [ 241.887055][ T5695] usb 3-1: config 0 descriptor?? [ 241.908703][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.938419][ T5695] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 241.938466][ T5695] pctv452e: pctv452e_power_ctrl: 1 [ 241.938466][ T5695] [ 241.938513][ T5695] usb 3-1: selecting invalid altsetting 3 [ 241.938526][ T5695] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 241.938526][ T5695] [ 241.938540][ T5695] dvb-usb: bulk message failed: -22 (5/0) [ 241.995843][ T5695] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.020277][ T5695] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 242.028934][ T5695] usb 3-1: media controller created [ 242.029245][ T5695] dvb-usb: bulk message failed: -22 (8/0) [ 242.029260][ T5695] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 242.029345][ T5695] dvb-usb: MAC address reading failed. [ 242.076572][ T5695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.167033][ T9165] ------------[ cut here ]------------ [ 242.167049][ T9165] usb 2-1: BOGUS control dir, pipe 80001b80 doesn't match bRequestType c0 [ 242.167068][ T9165] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.2.1026/9165 [ 242.193289][ T9165] Modules linked in: [ 242.197823][ T9165] CPU: 1 UID: 0 PID: 9165 Comm: syz.2.1026 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.208737][ T9165] Tainted: [L]=SOFTLOCKUP [ 242.213307][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.223396][ T9165] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 242.229045][ T9165] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 242.248710][ T9165] RSP: 0018:ffffc90004777718 EFLAGS: 00010246 [ 242.254963][ T9165] RAX: 0000000000000000 RBX: ffff88803456a600 RCX: 0000000080001b80 [ 242.263033][ T9165] RDX: ffff888077baa000 RSI: ffffffff8cc533c0 RDI: ffffffff90881950 [ 242.271163][ T9165] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 242.279141][ T9165] R10: ffffc90004777800 R11: fffff520008eef0c R12: 1ffff1100f07edf0 [ 242.287178][ T9165] R13: ffff8880783f6f80 R14: ffff888077baa000 R15: 0000000080001b80 [ 242.295793][ T9165] FS: 00007f0b076f86c0(0000) GS:ffff888124dc8000(0000) knlGS:0000000000000000 [ 242.304872][ T9165] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.311503][ T9165] CR2: 00007ff8f028a440 CR3: 0000000053906000 CR4: 00000000003526f0 [ 242.319485][ T9165] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 242.327494][ T9165] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 242.335529][ T9165] Call Trace: [ 242.338811][ T9165] [ 242.341826][ T9165] usb_start_wait_urb+0x13f/0x5b0 [ 242.346877][ T9165] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 242.352658][ T9165] usb_control_msg+0x234/0x3e0 [ 242.357452][ T9165] gl861_ctrl_msg+0x207/0x420 [ 242.362223][ T9165] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 242.367448][ T9165] ? aa_file_perm+0x4ed/0x15f0 [ 242.372750][ T9165] gl861_i2c_master_xfer+0x439/0x6a0 [ 242.379309][ T9165] __i2c_transfer+0x7bf/0x1fe0 [ 242.384859][ T9165] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 242.387843][ T5695] DVB: Unable to find symbol stb0899_attach() [ 242.387855][ T5695] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 242.406244][ T9165] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 242.412512][ T9165] ? rt_mutex_lock_nested+0x156/0x1c0 [ 242.418286][ T9165] ? i2c_transfer+0xc7/0x2d0 [ 242.423004][ T9165] i2c_transfer+0x1cb/0x2d0 [ 242.427544][ T9165] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 242.433639][ T9165] ? __lock_acquire+0x747/0x2de0 [ 242.438806][ T9165] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 242.445030][ T9165] ? i2cdev_read+0xe8/0x250 [ 242.449551][ T9165] i2cdev_read+0x10d/0x250 [ 242.454021][ T9165] ? __pfx_i2cdev_read+0x10/0x10 [ 242.458973][ T9165] vfs_read+0x213/0xa80 [ 242.463186][ T9165] ? __pfx_vfs_read+0x10/0x10 [ 242.467888][ T9165] ? __fget_files+0x2a/0x420 [ 242.472638][ T9165] ? __fget_files+0x2a/0x420 [ 242.477242][ T9165] ? __fget_files+0x3a2/0x420 [ 242.481996][ T9165] ? __fget_files+0x2a/0x420 [ 242.486612][ T9165] ksys_read+0x150/0x270 [ 242.490933][ T9165] ? __pfx_ksys_read+0x10/0x10 [ 242.495726][ T9165] do_syscall_64+0x166/0x520 [ 242.500400][ T9165] ? trace_irq_disable+0x3b/0x140 [ 242.505435][ T9165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.511685][ T9165] ? clear_bhb_loop+0x70/0xc0 [ 242.516382][ T9165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.522453][ T9165] RIP: 0033:0x7f0b0679e159 [ 242.526885][ T9165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.546586][ T9165] RSP: 002b:00007f0b076f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.555054][ T9165] RAX: ffffffffffffffda RBX: 00007f0b06a25fa0 RCX: 00007f0b0679e159 [ 242.563109][ T9165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 242.571126][ T9165] RBP: 00007f0b0683506b R08: 0000000000000000 R09: 0000000000000000 [ 242.579102][ T9165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.587135][ T9165] R13: 00007f0b06a26038 R14: 00007f0b06a25fa0 R15: 00007f0b06b4fa48 [ 242.595443][ T9165] [ 242.598487][ T9165] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 242.605781][ T9165] CPU: 1 UID: 0 PID: 9165 Comm: syz.2.1026 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.616629][ T9165] Tainted: [L]=SOFTLOCKUP [ 242.621444][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.631490][ T9165] Call Trace: [ 242.634763][ T9165] [ 242.637687][ T9165] vpanic+0x56d/0xa60 [ 242.641671][ T9165] ? __pfx__printk+0x10/0x10 [ 242.646255][ T9165] ? __pfx_vpanic+0x10/0x10 [ 242.650762][ T9165] ? is_bpf_text_address+0x292/0x2b0 [ 242.656043][ T9165] ? is_bpf_text_address+0x26/0x2b0 [ 242.661247][ T9165] panic+0xc5/0xd0 [ 242.664964][ T9165] ? __pfx_panic+0x10/0x10 [ 242.669387][ T9165] __warn+0x315/0x4c0 [ 242.673366][ T9165] ? usb_submit_urb+0x1057/0x18b0 [ 242.678385][ T9165] ? usb_submit_urb+0x1057/0x18b0 [ 242.683401][ T9165] __report_bug+0x276/0x570 [ 242.687902][ T9165] ? usb_submit_urb+0x1057/0x18b0 [ 242.692920][ T9165] ? __pfx___report_bug+0x10/0x10 [ 242.697946][ T9165] ? stack_depot_save_flags+0x404/0x7f0 [ 242.703510][ T9165] report_bug_entry+0x19b/0x290 [ 242.708367][ T9165] ? usb_submit_urb+0x1100/0x18b0 [ 242.713403][ T9165] ? usb_submit_urb+0x1105/0x18b0 [ 242.718424][ T9165] handle_bug+0xce/0x200 [ 242.722680][ T9165] exc_invalid_op+0x1a/0x50 [ 242.727180][ T9165] asm_exc_invalid_op+0x1a/0x20 [ 242.732026][ T9165] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 242.737652][ T9165] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 242.757244][ T9165] RSP: 0018:ffffc90004777718 EFLAGS: 00010246 [ 242.763304][ T9165] RAX: 0000000000000000 RBX: ffff88803456a600 RCX: 0000000080001b80 [ 242.771262][ T9165] RDX: ffff888077baa000 RSI: ffffffff8cc533c0 RDI: ffffffff90881950 [ 242.779226][ T9165] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 242.787196][ T9165] R10: ffffc90004777800 R11: fffff520008eef0c R12: 1ffff1100f07edf0 [ 242.795183][ T9165] R13: ffff8880783f6f80 R14: ffff888077baa000 R15: 0000000080001b80 [ 242.803157][ T9165] ? usb_submit_urb+0x1091/0x18b0 [ 242.808182][ T9165] usb_start_wait_urb+0x13f/0x5b0 [ 242.813204][ T9165] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 242.818760][ T9165] usb_control_msg+0x234/0x3e0 [ 242.823525][ T9165] gl861_ctrl_msg+0x207/0x420 [ 242.828204][ T9165] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 242.833401][ T9165] ? aa_file_perm+0x4ed/0x15f0 [ 242.838168][ T9165] gl861_i2c_master_xfer+0x439/0x6a0 [ 242.843453][ T9165] __i2c_transfer+0x7bf/0x1fe0 [ 242.848226][ T9165] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 242.854039][ T9165] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 242.859835][ T9165] ? rt_mutex_lock_nested+0x156/0x1c0 [ 242.865199][ T9165] ? i2c_transfer+0xc7/0x2d0 [ 242.869786][ T9165] i2c_transfer+0x1cb/0x2d0 [ 242.874280][ T9165] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 242.879910][ T9165] ? __lock_acquire+0x747/0x2de0 [ 242.884836][ T9165] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 242.890979][ T9165] ? i2cdev_read+0xe8/0x250 [ 242.895478][ T9165] i2cdev_read+0x10d/0x250 [ 242.899881][ T9165] ? __pfx_i2cdev_read+0x10/0x10 [ 242.904808][ T9165] vfs_read+0x213/0xa80 [ 242.908967][ T9165] ? __pfx_vfs_read+0x10/0x10 [ 242.913639][ T9165] ? __fget_files+0x2a/0x420 [ 242.918227][ T9165] ? __fget_files+0x2a/0x420 [ 242.922814][ T9165] ? __fget_files+0x3a2/0x420 [ 242.927483][ T9165] ? __fget_files+0x2a/0x420 [ 242.932070][ T9165] ksys_read+0x150/0x270 [ 242.936312][ T9165] ? __pfx_ksys_read+0x10/0x10 [ 242.941097][ T9165] do_syscall_64+0x166/0x520 [ 242.945688][ T9165] ? trace_irq_disable+0x3b/0x140 [ 242.950698][ T9165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.956749][ T9165] ? clear_bhb_loop+0x70/0xc0 [ 242.961420][ T9165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.967300][ T9165] RIP: 0033:0x7f0b0679e159 [ 242.971701][ T9165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.991295][ T9165] RSP: 002b:00007f0b076f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.999697][ T9165] RAX: ffffffffffffffda RBX: 00007f0b06a25fa0 RCX: 00007f0b0679e159 [ 243.007654][ T9165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 243.015608][ T9165] RBP: 00007f0b0683506b R08: 0000000000000000 R09: 0000000000000000 [ 243.023565][ T9165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.031521][ T9165] R13: 00007f0b06a26038 R14: 00007f0b06a25fa0 R15: 00007f0b06b4fa48 [ 243.039493][ T9165] [ 243.042753][ T9165] Kernel Offset: disabled [ 243.047065][ T9165] Rebooting in 86400 seconds..