last executing test programs: 38.602657845s ago: executing program 2 (id=527): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)=0x10000002) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) close_range(r1, 0xffffffffffffffff, 0x0) 38.28119615s ago: executing program 2 (id=529): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) socket(0xb, 0x80000, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a010400000000000000000a0000010900010073797a310000000058000480340001800c0001007061796cf9ff6400240002800800014000000009080003400000004f08000440000000370800024000000002200001800800010064757000140086607029920280080002400000001308000140000000100900020073797a320000000014000000110001000000000000000000f300000a", @ANYBLOB="cfa74bf5319f4a44935888afb46c59a6fcfb3c00958576530aa4323cfbdc52eb2cf511541e57529f"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x240048d0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount_setattr(r6, &(0x7f0000000640)='./file0\x00', 0x9000, &(0x7f0000000300)={0x9, 0xd, 0x100000}, 0x20) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r5, r2, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000780)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @ptr={0x70742a85, 0x0, &(0x7f0000000680)=""/228, 0xe4, 0x2, 0x28}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/35, 0x23, 0x0, 0xc}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x36c}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000200)={0x1008, "b546ba7bb959ebab028d00", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x4f, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000880)={'veth1_vlan\x00', 0xe7a2}) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000180)={0x202, 0x6}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) 37.892249103s ago: executing program 2 (id=531): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x4000001d}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0) renameat2(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 37.6647128s ago: executing program 2 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) (fail_nth: 4) 37.313048795s ago: executing program 2 (id=537): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4, @ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) ioctl$I2C_PEC(r4, 0x708, 0x1a) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000003400000000004001e8040000000", 0x24) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000140)={r4, 0x1, 0x0, 0xfffffffff0000000}) ioctl$SNDCTL_TMR_START(r1, 0x5402) close(r2) 36.295258727s ago: executing program 2 (id=543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x300, &(0x7f0000000580)={&(0x7f0000000100)={0x50, r1, 0x101, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="de"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044014}, 0x8004) 35.841145656s ago: executing program 32 (id=543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x300, &(0x7f0000000580)={&(0x7f0000000100)={0x50, r1, 0x101, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="de"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044014}, 0x8004) 6.869454538s ago: executing program 1 (id=706): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000039c0)=[{&(0x7f00000009c0)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb050e93d3e5b49fae5ab325f9ef32ecf74e90c787c94eac11609ac713e24e6cf8bad0db853cbb8235b0c803c417ede8f7b85eaad8aea5b2fe9813fee217a97a", 0x88}, {&(0x7f00000006c0)="080c04", 0x3}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc4", 0x38}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913", 0x36}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac141432"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000038c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="e0ebb7702414d317be522c524a412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e60fbb37b4fe035bbb09987304800"/77, 0xff5c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002840)="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"}], 0x0, &(0x7f0000000600)=[@iv={0x0, 0x117, 0x2, 0x0, "37e471d4ccf5718be54c245221d5c4145b3d721744522b2b613deac182ccf772a7c7330b6173094b388b89a264b96c5e6b1558919104c056cd4dd14f779684d2df2ef2c9554dc2b91f90698e2a6b9313c1369a"}]}], 0x32, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x88001, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r6, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, "16"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r6, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2083020000001995"], 0x0, 0x0}) syz_usb_control_io(r6, &(0x7f0000000b80)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x4, 0xc, 0x7f, 0x5, 0x3ff, 0xffff}}}, &(0x7f0000000fc0)={0x84, &(0x7f0000000bc0)={0x20, 0x14, 0x3, "438910"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0xe7}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.828321507s ago: executing program 3 (id=715): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x158, r2, 0x400, 0x1, 0x2, {0x4e}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x401}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xbb}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x95}, {0x6, 0x11, 0xc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x802}, {0x6}}]}, 0x158}}, 0x4000000) r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000300)={0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) 5.683759712s ago: executing program 3 (id=716): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000002980)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000000080)="e06e28afb1", 0x5}], 0x1, &(0x7f0000002200)=[@sndrcv={0x30, 0x84, 0x1, {0x3, 0x9, 0x1b, 0x1000, 0xfffffffe, 0x7fff, 0x6, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @local}], 0x48, 0x80}], 0x1, 0x8005) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'ipvlan0\x00', 0xab5049d67dc7d24c}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000d8b5c56eda695ac000000000100000a64000000060a01040000000000be00000200000038000480340001800c00010070617961640024000280b27100400000000008000540000000010800034000000000080002400000f2000900010873797a30000000000900020073797a3200000000140000001100010000000000000000000000000a975b94b5778944ddbac772b4449e60075085fcb6cb1990427b72fb890de5b7f68e64ac91ec48a551b2ffe930e0bd507739"], 0x8c}}, 0x4000) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = gettid() r5 = getpgrp(r4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x16, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) futex_waitv(&(0x7f0000001740)=[{0xf, &(0x7f0000001380)=0xfffffffffffeffff, 0x6}], 0x1, 0x0, 0x0, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000380)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x200000, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={r7, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e22, 0x8, @empty, 0xa}}, 0x4, 0x3}, &(0x7f0000000180)=0x90) 5.341150151s ago: executing program 3 (id=717): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) sendmsg$NFT_MSG_GETSET(r1, 0x0, 0x20000040) 5.191441024s ago: executing program 3 (id=719): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000000)) syz_usb_connect(0x0, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000ea7c5708f0031d58b3120000000109026100040007200709045805007ec8ee020904fa0200ff"], 0x0) 3.547258338s ago: executing program 3 (id=726): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x7, 0x5, 0x5, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0x102, 0x401, 0x5, 0x5, 0x8, [0x80000005, 0x9]}}) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000002179135e0e6cb2b824ca945f64009425ff0325010ebc000000000000808000f0fffeffe80949d7aaffde7f10b300100001408d08e1560000000000040000", 0x58}], 0x1) syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec1bb2106c04e014010001020301090201b69e0000000009046900000e01000018240201020252d9b3e692554a3a5f176723b3ddb141ebfe3a50a2a79cd9330c08473403db91a1c4f0336314693a8fbb1d7a8d2ad5b2f805eff5a1d92be695a565b16467094dd58828d58b17f10aad57"], 0x0) 3.187162269s ago: executing program 1 (id=727): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x600, {0x0, 0x0, 0x3f2}}, 0x30) 3.019933997s ago: executing program 1 (id=729): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x0, "ab10478d983a58ec866864c40fa09f3c6ebb61039cf8892607433e90f17a81db", 0x2, 0x6, 0x1, 0x8000}, 0x3c) (async) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000080)={@broadcast, @broadcast, 0x1, "c11dc40e5e0887a05c6988b1d705fda0c0230cbc8e8be7d63031ad8bee678ab5", 0x100, 0x6, 0x0, 0x5}, 0x3c) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000000c0)=[{0x1, 0x77, {0x3, 0x1}, {0x2, 0x1, 0x2}, 0x0, 0xff}, {0x0, 0x3, {0x2, 0xff}, {}, 0xfe}, {0x3, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0x0, 0x3}, 0x1, 0xff}, {0x0, 0x1, {0x2, 0x1}, {0x2, 0x0, 0x1}, 0xff, 0x3}, {0x2, 0x0, {0x2, 0xf0}, {0x0, 0xff}, 0xfd}, {0x3, 0x0, {0x1}, {0x1, 0xff, 0x4}, 0xfd, 0x2}, {0x2, 0x7, {0x2, 0xf0, 0x2}, {0x3}, 0x8d122aa3b9ca29cb, 0xfd}, {0x1, 0x3, {0x1, 0xf0, 0x3}, {0x0, 0x0, 0x2}, 0xfe, 0xfe}], 0x100) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000001c0)={@remote, @multicast1, 0x0, "daaac320abec9f4746d85dfa7a44f82863653091c9834bd82a8e8e798b7d3fc6", 0x23, 0x0, 0x7, 0x564}, 0x3c) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4090) (async) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000340)={0x5, 0x0, {0x51, 0x74d, 0x9, {0x0, 0x4}, {0x0, 0x3}, @cond=[{0x7, 0x9, 0x3, 0xbb5, 0x7, 0x4}, {0x4, 0x3, 0x0, 0x0, 0x97f6, 0x9}]}, {0x53, 0x7, 0xa6da, {0x1, 0x80}, {0xc010, 0x5}, @rumble={0xfffc, 0x5022}}}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000003c0)=0x1, 0x4) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000400)={0x8, 0x2, 0x9, 0x1, 0x341}, 0x14) (async, rerun: 32) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) (rerun: 32) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x254, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xc4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfea}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdd0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x93e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x171}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3bdd}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd03e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x38}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x254}}, 0x1) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000007c0)) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000009c0)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x3, 0x9, 0x21, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, 0x20, 0x8, 0x1, 0x3}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4088010}, 0x8000) (async) shutdown(r1, 0x0) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)=@newqdisc={0x11c, 0x24, 0x2, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x7, 0x1}, {0x8, 0xc}, {0xb}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xf}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5ad}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1a}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x40}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, r2, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24008010}, 0x40081) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x70, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_KEK={0x17, 0xf2, "784d7af53aa1718f9309cf6ec0b67ca268c357"}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x0, 0x4, 0x0, {0x3, 0x0, 0x0, 0x7f, 0x0, 0x1}, 0x800, 0x49b7, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async, rerun: 32) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000010c0)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000001100)=0x28) (async, rerun: 32) r7 = syz_usbip_server_init(0x5) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f0000001140)={{r0}, "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"}) (async) r8 = accept4$bt_l2cap(r0, &(0x7f0000002140), &(0x7f0000002180)=0xe, 0x80000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000021c0)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002200)=0x0) sendmsg$nfc_llcp(r0, &(0x7f0000002840)={&(0x7f0000002240)={0x27, r9, 0xffffffffffffffff, 0x7, 0x3, 0xf3, "4991cecc8e96c2390662055de627bf77e35114de50371a97aa9ba34d3335636c95ef0782396089a316b3efa067392055abac588ffc1de9f2a8a0f72b435f40", 0x38}, 0x60, &(0x7f00000026c0)=[{&(0x7f00000022c0)="0a3649926347689b7a25f8a028282e082058f990635878cbf843136dcfe9e8056fdcbe5e9eac7435b4d8839afc05e3caa515b7d8f5e191c805d5dad5f86e16978c271a21ac53a55448510c8c5fdc2916be5bc9e1809863e7af43e3bb20a4fa527d749f20bb5b2ac8756868073f25620c8e109fe6360f279aa434e0799d9053d4bef1c60fd97ac69186ea2b32b46fc58530e75c8b4b05e2567f017dd6af0ee3f672f4c8095ae2cc92987a2cb72f", 0xad}, {&(0x7f0000002380)="50c38c945b4769ba3c4c897d31860ed50899531e1ec66b557e0d63e490903244f58fd29fc15a7a574a1a9e5ee13a8794afcc2d75a3fe6aefb571d053582978e8b7fa6f2def98d34d040b53fda287a2ea4fe672b71d74ec1a21140053901c712e56b9e4dbd3d8223e72c20a1882f0f8fb96952e512085954b0203", 0x7a}, {&(0x7f0000002400)="0b6432e3f8aec55a1568220d08b382c068405d69dd749456508770422fc54b4931eccb5610bd29459b508173b3766957e855c6954336d9d961060f5daf6f0b525b4e7f722ab445a049dd7e4ec09ab1e9400b93cec3ecb8a0316a75c5219c5abee91b96692ffbcd", 0x67}, {&(0x7f0000002480)="fe7f925a07df507c996616925425e7c8f6ac83a4818be7f6233b64df659904c33d1718eb2ceb1ff422d5f1899454972a36b1a86e72f5716cdbe23e30cce4b353ea8fda6dca19478d", 0x48}, {&(0x7f0000002500)="a2d1eea01d153071010f8582b7a86fdfbadb53639140b8f5e266fd41dd3f07d87006b433f0bb5d564b3a401af031a3644e24ef6706bbe7afabc28d977f768c3de0a452b62a371cc2f925af2d8b9b48c9ca91beb6759dce3b64dd9e7e", 0x5c}, {&(0x7f0000002580)="4b32cf1b05c1c0b209259c7469093888ad3db40a52b76aad2d70947c87def702a0a32071ae37caa76b539f9186f1761e8ed39a31512cfe52701c3ff53a61bd5b318953f2147f9256d15b96b7cc0ab1a9859ce29a31f9704ba0f694c9d580a7bd8450a82007dd904f8c1fb9e308673af430f812ec88ce773a903fc42685397498da849bc1c3cc38a67f1f2b514e2b833274d8c0a47b32ce6a92210b0349462bcda94e0947ab44d9d4ba0d2239dfcdbdc2ffe7edd6d0f69c16ad47b11e69782a9c38e915be1ff629bae5ad12a8eabb2d03936d", 0xd2}, {&(0x7f0000002680)="ee2d08e7d47cc04ef0f9caf7826deb5bbc84c84a943b52c0dc74055fdc", 0x1d}], 0x7, &(0x7f0000002740)={0xd8, 0x3a, 0x8, "3b68753e6e9028a52b0e9f8ebc071667754e42792167ee53c5cb0607c8231753581ffa655a29f76dd97fad8101b0edb635b0e67c76f994eca98cb183d58f8a81870b4ce0f41fc79d2f02a76b844b596d45b60af7e3685a378c9b09541bfff72a748e1d1af23321a13c9f10eb40c5b6a0d7b87aae964471885144c5f577a239cffd7e2b09d174f3982c27aa9b91207404ac9e4d2024e59f411af94131096b5de2f9461f2c78f10ff1f7ef06ede0f51edfaf5ac976b09390a9c46c2fc1ec73b67834"}, 0xd8, 0x40000}, 0x0) 2.811847196s ago: executing program 4 (id=732): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='htcp', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d", 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6bac166", 0x4}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r2, @multicast1, @rand_addr=0x64010100}, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000000906010200000000000000000500ffff513007800900020073797a310000000005000100070000003455003ee639e0e0f4562a0db57a44ed4a56c0452585fa8f527716c871aeadd4455270774f7097a82395ccabf47c72aebbc2c229ab3cc362aad70a90571a95a253da9706128ccc90e84f9dc791a31bdc30c13f52664e2759fd64cd3d78fbb98fff02006e09c594205a2acbfcc8b62cd3457ef76d76f0f09e3f02f1daf28b942539b215eaace3813eb5dc29593382ec21a77fbc813556a63e0d752132ba1d8de377060f003c2418826ab156a34c35e230b716e77e3bc1c3cdd3ed06e83169ede0488d854bcff22c8f37a490b821696e2faccab7e33a4d2d9dceefaa1695e578010186ed74e292e4b6f7ada87f099b9f23fe36fd1de0862883d085968b8738e94d6e154100c3992c691d2348c42dc0505e7c781a1b51ffcac539d9cbba1bc888d0c2bdcf727c482604ec51"], 0x2c}}, 0x4000080) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x79) 2.672214238s ago: executing program 1 (id=734): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r1, 0x0, 0x0) ioctl$int_out(r1, 0x0, &(0x7f0000000000)) ioctl$RTC_UIE_OFF(r0, 0x7004) syz_socket_connect_nvme_tcp() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, 0x0, &(0x7f0000000100)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_usb_connect(0x4, 0xe5, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x17, 0x3, 0x44, 0x10, 0x403, 0xf440, 0x6b71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x1, 0x8, 0xc1, 0xf0, 0x10, "", [{{0x9, 0x4, 0x55, 0x4, 0x3, 0xac, 0xce, 0xed, 0x9, [], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0xbe, 0x9, 0x9, [@generic={0x9f, 0x23, "e930f56dafa83ab5c74feb347cb48ab131223a9746450ecce9f367e60643f97bcad139a7de9d7cf5c5802bbe06a2428bb954a528d3d68e5af845afcf3c0872e390e556a6614ad24d8ab5407e41a262432173909f3aa92a400db530e6555365e950cda8136519de0b4f4274aaf2a3405775cfa7c2942d2dd90013b986f76f5c4c4b455a1de45e471f6eacb2d0d70e6dcef5879c0d88449c5950350e50a9"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x9, 0xe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x8}]}}, {{0x9, 0x5, 0x680a34690a61fdbb, 0x0, 0x400, 0x9, 0x1, 0x5}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0xff, 0x8, 0x5, 0x20, 0x1}, 0xf, &(0x7f0000000440)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1a, 0x6, 0x2}]}, 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2801}}, {0xd5, &(0x7f00000004c0)=@string={0xd5, 0x3, "e60ab22f8af0ce5370dbdfeaa3426ac5d3cf4bb08f8361b5901cafa3c6d40b2e5a240d2085e4791244c092dd85c8ed7da5481b0552658dcb4e84944129535192cdd3fb788b4f3621c530ee8715c96cb4ccedadf880482f77dc6eb3701ecf59e0d73d7724fcac7a22087c85341e64c744fe67d2ae0c6bab71301ede46de0d61e8416d2aece64f9e7829208cff2a3a96d921b29e65560c9a9db706fa7d6cfef0ff45337afd473a433dc5e41075a26684aa69b81ad638e15d187c6796581c778fa13504947d9abfaf40f43a667e54b19716479a7d"}}, {0x8e, &(0x7f00000005c0)=@string={0x8e, 0x3, "55b2384f825a3d5ffef9c8d7d99645b30bf0b9a761e5a4b9f22c275e37c4e60446523d0cdab7eff8c00587e16d11a55b0d8531bf50a59c41f2ec15dccd7fedd34ed04c9416d1ee334ae5dfc35cffdf224e576623fa181004a54355028d358db4c80b107d12017c772ed76b559d99ab9c983877fc272f974a0d97a4351f6aedb2168bb01a461c6bae40854252"}}, {0xdf, &(0x7f0000000680)=@string={0xdf, 0x3, "d4b3623f5bd7ccc36822cecb5ef74d6f9232c6b25f0729881fda624e4714d6b23ed30f2c3461c7d2913ad2004b687c83796200aa1dddd73097824528ea39c776b71ab303646d4d4b9079d51a2c998a5c3491c2457974f2795e40b6e3c125fa71cd9ca4a9c6afd8f404055418589631e61a5028802a19f933e206c764f55b596ad3871b1b303a149492d14036295dfc0c74c28e3a4561c44f86106794ffd5f87a5ff7f2d842a65d1dd808cb8d3cfffbcc6812c1ae0ab5add26eb716b5f2bfef7e8b51c2c5e6b315c5c2c2ba84a673d9e90905da1f7ec925530dfa8d9013"}}, {0xf0, &(0x7f0000000780)=ANY=[@ANYBLOB="f003c1e9c2968c62c9a36bdf344145de57fe3c7f5ec17d55bfc62e25eebd5d8df676545cb0e13e7e8c36d2d68209b0db807879364a8a32f1d188a7b345713b0e0270b78e9fddad72a4252dc8db12635a467ffc627dc62e9ace09c522366c2ead7100780000d1aac4dd8f028e576216362a2739835d4445bb527a6b8ac3b5757d954ea107e268af270dbe72594b0c4d218f3255194f137bb20aaef0461ff1eba4b6d0c051721a7b6217043bacd2475dd4fe9313606450f3190b2f80470f90187a796722e11ce964f4bfefca7c695d4948f218525f10b8136967e4db62b255a38a3d7cf33632e667734521fd474f7dd9d8"]}]}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="541a0000", @ANYRES16=r3, @ANYBLOB="01000000000200000000060000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080091000000000006001600020000000500120000000000"], 0x54}}, 0x0) syz_usb_connect(0x6, 0x3f, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) 2.451866423s ago: executing program 4 (id=735): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='afs\x00', 0x804000, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3f2}}, 0x30) 2.328186666s ago: executing program 4 (id=737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d18, &(0x7f00000002c0)) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x28) (async) sendto(0xffffffffffffffff, &(0x7f0000000540)="0cc31a4098ddc80dadd3a0aa2bea9050d9f47bcde4cbb8170d3d61aabbdbd869e8a75ab95a3b8e8b960477dbbbbf5cb0fd4a98ea0032d054de676f19c5e1f84def57482d1b3eb94a2a1d3c0a733709610ece6cb54ae7f8c3ed385c3890244d348c9bcfb556ee478845ff23d8a9f2a492531e7c7ce719ef1983bdaf4008386323fc593be590321dbe51aa4ecabebf49ab7edb835efc0f722637337e20cc541399dc617deafa840b68f2b22e5f7c6afb3825871b966ab90a79a4d6d72f29a1e43abdf4d25f6352dfa26c576830c49b18ece887b47c37affa1c3f24fdb0e14151550796aaa09b4669e71d9f4255f63905467b709f7a7185347a078538e4443f0dad324393274e857979db0a9e3894857aacabc2f2ccd9457fda98a520e2b8c83085a206c8aea9dd18a0b66c87b3b61f95fafed84303436c7ae3782f714dc364c10102788b02d3aed05cb29fe974b75e7bf53dfd2554d7b700dcbf24a6fa021732b747a2c7d6d2a649e1ca523f91ba57da29e6e5050da7ec9466884aea64349e0c65b40bd78fe25622a5f854d351fd3282e85e37989b73e1a3b9fe874ad7131850117f285afe15040fd20cd9c861c95b2c1f9844ac1f8b3cd0a7f22269e235866434acb5f4d9d0b64301cd5b4e8c2da68caacd3f7dda0f325120ad99c05a55736067c87cceda7b850758e60ab8829b0dbfdc1ca8322e6716e643e00c2f665781461f08282a0aa366d9927036d685c3a721530dafe21e62906c5710c3214621d6374d9f5eef47eca1e5080e21832e6d639822a3bf99784f7b19e2dfaa7b8ba39dc5212c94585af38e7a50cbf6d619e3f1b8e4c17351203fa037ca4ce7ef32fd8b4387b8583ebd32a0c5aeb05fced1e492670cabc370aba18abe561e2bfcfa6d92c0c3d0419f5f4936772b6a0026a623914f09b04cf5d7c2b3ab010c676e9932f5807240a765b3d92d2bcdd63a91bd0f1c795fe0ecdda5e50ec8fd0a68115986168fb8bb67fa020ed3c416a716fb12d5d918b8522931dcf2bfd0c7bf7d9c56c490c9880309240d0c2cf1a3cafb647e1a9e1fde434cdbcae9eeac3f8c652a85d6aea69b3e9a922cb2727ed8f50e6babd152b96ca623be94c4aedf7e6848650026a7e1df48e00f45714233d9ae79f4e5e13ac220d553da", 0x333, 0x40000001, 0x0, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) (async, rerun: 32) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)={0x3, 0x0, [{0xc0000000, 0x1, 0x1, 0x0, 0x5, 0x2a, 0xfff}, {0x40000004, 0xfffffe00, 0xa, 0x40, 0x5, 0x0, 0x6}, {0x40000001, 0x2, 0x2, 0x80000001, 0x0, 0x8d, 0x6}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x20}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd4, 0x16, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4a}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x30a}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x170}}, 0x0) (async) open_by_handle_at(0xffffffffffffffff, 0x0, 0x52002) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b000100000000090432", @ANYRESHEX=r6], 0x0) (async) fsetxattr$security_capability(r5, &(0x7f0000000380), &(0x7f00000003c0)=@v1={0x1000000, [{0xc2dd, 0x3}]}, 0xc, 0x2) 2.133908383s ago: executing program 3 (id=738): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1978, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x26, 0x30, 0x23}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x7, 0x4, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x4, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x0, 0xbe1}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x1, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0xf3, 0x1, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x20, 0x79, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.121651551s ago: executing program 4 (id=739): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = socket(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000000)=0x9, 0x38) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r5, 0x0) accept4$nfc_llcp(r1, &(0x7f00000002c0), &(0x7f0000000340)=0x60, 0x800) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)={0x1, 0x0, [{0x27ddc99d2b6db97c, 0x34, &(0x7f00000003c0)=""/52}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000080)={0x1}) 1.836860867s ago: executing program 1 (id=740): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000039c0)=[{&(0x7f00000009c0)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb050e93d3e5b49fae5ab325f9ef32ecf74e90c787c94eac11609ac713e24e6cf8bad0db853cbb8235b0c803c417ede8f7b85eaad8aea5b2fe9813fee217a97a", 0x88}, {&(0x7f00000006c0)="080c04", 0x3}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6524229e48a311e4aab2a", 0x95}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac", 0x34}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac1414"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.742052072s ago: executing program 4 (id=741): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000003400000000004001e8040000000", 0x24) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x0, 0xfffffffff0000000}) ioctl$SNDCTL_TMR_START(r1, 0x5402) close(r2) 1.620095564s ago: executing program 4 (id=742): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0xc0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.460044518s ago: executing program 0 (id=743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) (fail_nth: 4) 1.440787624s ago: executing program 0 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) 1.312849877s ago: executing program 0 (id=745): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)={0x1, 0x0, [{0x27ddc99d2b6db97c, 0x34, &(0x7f00000003c0)=""/52}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000080)={0x1}) (fail_nth: 4) 1.14106633s ago: executing program 1 (id=746): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) 1.120774473s ago: executing program 0 (id=747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_bond\x00', 0x100}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000540)="2e9b5b0007e03dd65193", 0xa}, {&(0x7f00000001c0)="b7000018110d0000e44ba0d5", 0xc}], 0x2) 560.681237ms ago: executing program 33 (id=746): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) 396.649317ms ago: executing program 0 (id=749): getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x61, "e732a18ea3d46b0dd5c50d567d3ae4019a424b25b99049c5ea647497ba2b15fb701885c93f4880b2dec5708e73af2d7f7d193c8fae71038e2e86c798870df38be15e75bd415a2655f9bbf58ddeb7203f28ea364c820e008bb0c2f15fd9184449ae"}, &(0x7f0000000080)=0x69) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x61, "e732a18ea3d46b0dd5c50d567d3ae4019a424b25b99049c5ea647497ba2b15fb701885c93f4880b2dec5708e73af2d7f7d193c8fae71038e2e86c798870df38be15e75bd415a2655f9bbf58ddeb7203f28ea364c820e008bb0c2f15fd9184449ae"}, &(0x7f0000000080)=0x69) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={r0, 0x8, 0x2, [0x8, 0x2564]}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={r0, @in6={{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}}, 0xd20c, 0x6}, &(0x7f0000000180)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={r0, @in6={{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}}, 0xd20c, 0x6}, &(0x7f0000000180)=0x90) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3bd", 0x2}], 0x1}, 0x20000000}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r3, 0x5, 0xa872}, &(0x7f0000000200)=0xc) 0s ago: executing program 0 (id=750): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000003400000000004001e8040000000", 0x24) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x0, 0xfffffffff0000000}) ioctl$SNDCTL_TMR_START(r1, 0x5402) close(r2) kernel console output (not intermixed with test programs): ] ? trace_kmem_cache_alloc+0x29/0xe0 [ 185.294478][ T7280] ? __alloc_skb+0x27d/0x7d0 [ 185.294491][ T7280] ? __pfx__copy_from_iter+0x10/0x10 [ 185.294505][ T7280] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 185.294520][ T7280] ? __alloc_skb+0x27d/0x7d0 [ 185.294534][ T7280] ? netlink_sendmsg+0x650/0xb40 [ 185.294547][ T7280] ? skb_put+0x11b/0x210 [ 185.294561][ T7280] netlink_sendmsg+0x6c0/0xb40 [ 185.294579][ T7280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.294593][ T7280] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 185.294613][ T7280] ? aa_sock_msg_perm+0x122/0x200 [ 185.294629][ T7280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.294641][ T7280] sock_sendmsg_nosec+0x112/0x150 [ 185.294653][ T7280] ____sys_sendmsg+0x55c/0x870 [ 185.294670][ T7280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.294687][ T7280] ? import_iovec+0x73/0xa0 [ 185.294703][ T7280] ___sys_sendmsg+0x2a5/0x360 [ 185.294717][ T7280] ? __lock_acquire+0x6b5/0x2d10 [ 185.294730][ T7280] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.294766][ T7280] ? __fget_files+0x2a/0x420 [ 185.294779][ T7280] ? __fget_files+0x3a6/0x420 [ 185.294795][ T7280] __x64_sys_sendmsg+0x1c3/0x2a0 [ 185.294811][ T7280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.294829][ T7280] ? __pfx_ksys_write+0x10/0x10 [ 185.294847][ T7280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.294860][ T7280] do_syscall_64+0x15f/0xf80 [ 185.294875][ T7280] ? trace_irq_disable+0x3b/0x140 [ 185.294891][ T7280] ? clear_bhb_loop+0x40/0x90 [ 185.294904][ T7280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.294915][ T7280] RIP: 0033:0x7f26e452cdd9 [ 185.294927][ T7280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.294937][ T7280] RSP: 002b:00007f26e277e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.294950][ T7280] RAX: ffffffffffffffda RBX: 00007f26e47a5fa0 RCX: 00007f26e452cdd9 [ 185.294958][ T7280] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 185.294965][ T7280] RBP: 00007f26e277e090 R08: 0000000000000000 R09: 0000000000000000 [ 185.294973][ T7280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.294979][ T7280] R13: 00007f26e47a6038 R14: 00007f26e47a5fa0 R15: 00007ffce710b518 [ 185.294998][ T7280] [ 185.891405][ T7289] FAULT_INJECTION: forcing a failure. [ 185.891405][ T7289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.891457][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.2.523 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 185.891472][ T7289] Tainted: [L]=SOFTLOCKUP [ 185.891476][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.891483][ T7289] Call Trace: [ 185.891488][ T7289] [ 185.891493][ T7289] dump_stack_lvl+0xe8/0x150 [ 185.891511][ T7289] should_fail_ex+0x46b/0x600 [ 185.891528][ T7289] _copy_from_iter+0x1d3/0x1670 [ 185.891550][ T7289] ? trace_kmem_cache_alloc+0x29/0xe0 [ 185.891564][ T7289] ? __alloc_skb+0x27d/0x7d0 [ 185.891577][ T7289] ? __pfx__copy_from_iter+0x10/0x10 [ 185.891590][ T7289] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 185.891604][ T7289] ? __alloc_skb+0x27d/0x7d0 [ 185.891618][ T7289] ? netlink_sendmsg+0x650/0xb40 [ 185.891632][ T7289] ? skb_put+0x11b/0x210 [ 185.891646][ T7289] netlink_sendmsg+0x6c0/0xb40 [ 185.891663][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.891677][ T7289] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 185.891696][ T7289] ? aa_sock_msg_perm+0x122/0x200 [ 185.891714][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.891727][ T7289] sock_sendmsg_nosec+0x112/0x150 [ 185.891739][ T7289] ____sys_sendmsg+0x55c/0x870 [ 185.891756][ T7289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.891774][ T7289] ? import_iovec+0x73/0xa0 [ 185.891790][ T7289] ___sys_sendmsg+0x2a5/0x360 [ 185.891803][ T7289] ? __lock_acquire+0x6b5/0x2d10 [ 185.891816][ T7289] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.891845][ T7289] ? __fget_files+0x2a/0x420 [ 185.891858][ T7289] ? __fget_files+0x3a6/0x420 [ 185.891875][ T7289] __x64_sys_sendmsg+0x1c3/0x2a0 [ 185.891890][ T7289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.891908][ T7289] ? __pfx_ksys_write+0x10/0x10 [ 185.891926][ T7289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.891938][ T7289] do_syscall_64+0x15f/0xf80 [ 185.891953][ T7289] ? trace_irq_disable+0x3b/0x140 [ 185.891969][ T7289] ? clear_bhb_loop+0x40/0x90 [ 185.891982][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.891992][ T7289] RIP: 0033:0x7f26e452cdd9 [ 185.892004][ T7289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.892013][ T7289] RSP: 002b:00007f26e277e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.892027][ T7289] RAX: ffffffffffffffda RBX: 00007f26e47a5fa0 RCX: 00007f26e452cdd9 [ 185.892035][ T7289] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 185.892043][ T7289] RBP: 00007f26e277e090 R08: 0000000000000000 R09: 0000000000000000 [ 185.892050][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.892057][ T7289] R13: 00007f26e47a6038 R14: 00007f26e47a5fa0 R15: 00007ffce710b518 [ 185.892072][ T7289] [ 185.976823][ T5697] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 186.126771][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 186.129205][ T5697] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.130304][ T5697] usb 1-1: config 128 has an invalid interface number: 6 but max is 3 [ 186.130327][ T5697] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 186.130346][ T5697] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 186.130366][ T5697] usb 1-1: config 128 has no interface number 0 [ 186.130406][ T5697] usb 1-1: config 128 interface 6 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.130431][ T5697] usb 1-1: config 128 interface 6 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.130455][ T5697] usb 1-1: config 128 interface 6 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.133949][ T5697] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 186.133976][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.133995][ T5697] usb 1-1: Product: syz [ 186.134009][ T5697] usb 1-1: Manufacturer: syz [ 186.134023][ T5697] usb 1-1: SerialNumber: syz [ 186.392163][ T5763] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 186.567147][ T5763] usb 2-1: Using ep0 maxpacket: 16 [ 186.576037][ T5763] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 186.576070][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.576089][ T5763] usb 2-1: Product: syz [ 186.576104][ T5763] usb 2-1: Manufacturer: syz [ 186.576118][ T5763] usb 2-1: SerialNumber: syz [ 186.611520][ T5763] usb 2-1: config 0 descriptor?? [ 186.621540][ T5763] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 186.719620][ T5809] bond_slave_0: entered promiscuous mode [ 186.719675][ T5809] bond_slave_1: entered promiscuous mode [ 186.770349][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'. [ 186.822200][ T7307] x_tables: ip_tables: SET.0 target: invalid size 64 (kernel) != (user) 256 [ 186.872487][ T7304] binder: 7303:7304 ioctl 400c330d 200000000180 returned -22 [ 186.924585][ T5697] usb 1-1: USB disconnect, device number 31 [ 187.015192][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.6/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.141364][ T32] bond_slave_0: left promiscuous mode [ 187.141421][ T32] bond_slave_1: left promiscuous mode [ 187.411154][ T7317] FAULT_INJECTION: forcing a failure. [ 187.411154][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 187.411190][ T7317] CPU: 0 UID: 0 PID: 7317 Comm: syz.2.534 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 187.411216][ T7317] Tainted: [L]=SOFTLOCKUP [ 187.411224][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.411234][ T7317] Call Trace: [ 187.411240][ T7317] [ 187.411248][ T7317] dump_stack_lvl+0xe8/0x150 [ 187.411276][ T7317] should_fail_ex+0x46b/0x600 [ 187.411327][ T7317] should_failslab+0xa8/0x100 [ 187.411356][ T7317] __kmalloc_noprof+0xdf/0x7b0 [ 187.411388][ T7317] ? tomoyo_encode+0x28b/0x550 [ 187.411418][ T7317] tomoyo_encode+0x28b/0x550 [ 187.411448][ T7317] tomoyo_realpath_from_path+0x58d/0x5d0 [ 187.411485][ T7317] tomoyo_path_perm+0x283/0x560 [ 187.411508][ T7317] ? tomoyo_path_perm+0x251/0x560 [ 187.411532][ T7317] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 187.411583][ T7317] ? hook_sb_umount+0x1e5/0x3b0 [ 187.411608][ T7317] ? __pfx_hook_sb_umount+0x10/0x10 [ 187.411631][ T7317] tomoyo_sb_umount+0xa4/0xf0 [ 187.411651][ T7317] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 187.411675][ T7317] ? bpf_lsm_capable+0x9/0x20 [ 187.411699][ T7317] ? security_capable+0x7e/0x2c0 [ 187.411726][ T7317] security_sb_umount+0xb3/0x260 [ 187.411754][ T7317] path_umount+0x36d/0xb40 [ 187.411773][ T7317] ? user_path_at+0xd4/0x160 [ 187.411803][ T7317] __x64_sys_umount+0x12a/0x170 [ 187.411821][ T7317] ? __pfx___x64_sys_umount+0x10/0x10 [ 187.411848][ T7317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.411869][ T7317] do_syscall_64+0x15f/0xf80 [ 187.411894][ T7317] ? trace_irq_disable+0x3b/0x140 [ 187.411917][ T7317] ? clear_bhb_loop+0x40/0x90 [ 187.411939][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.411957][ T7317] RIP: 0033:0x7f26e452cdd9 [ 187.411975][ T7317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.411991][ T7317] RSP: 002b:00007f26e277e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 187.412012][ T7317] RAX: ffffffffffffffda RBX: 00007f26e47a5fa0 RCX: 00007f26e452cdd9 [ 187.412026][ T7317] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00002000000002c0 [ 187.412038][ T7317] RBP: 00007f26e277e090 R08: 0000000000000000 R09: 0000000000000000 [ 187.412050][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.412061][ T7317] R13: 00007f26e47a6038 R14: 00007f26e47a5fa0 R15: 00007ffce710b518 [ 187.412091][ T7317] [ 187.413681][ T7317] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.610331][ T7320] netlink: 'syz.3.535': attribute type 83 has an invalid length. [ 187.979267][ T5763] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 187.986069][ T5763] usb 2-1: USB disconnect, device number 20 [ 188.196335][ T7327] FAULT_INJECTION: forcing a failure. [ 188.196335][ T7327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.196372][ T7327] CPU: 1 UID: 0 PID: 7327 Comm: syz.3.538 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 188.196398][ T7327] Tainted: [L]=SOFTLOCKUP [ 188.196405][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.196416][ T7327] Call Trace: [ 188.196423][ T7327] [ 188.196431][ T7327] dump_stack_lvl+0xe8/0x150 [ 188.196460][ T7327] should_fail_ex+0x46b/0x600 [ 188.196488][ T7327] _copy_to_user+0x31/0xb0 [ 188.196525][ T7327] simple_read_from_buffer+0xe1/0x170 [ 188.196554][ T7327] proc_fail_nth_read+0x1be/0x230 [ 188.196579][ T7327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.196604][ T7327] ? rw_verify_area+0x2ac/0x4e0 [ 188.196627][ T7327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.196653][ T7327] vfs_read+0x212/0xa80 [ 188.196681][ T7327] ? __pfx_vfs_read+0x10/0x10 [ 188.196707][ T7327] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 188.196731][ T7327] ? lockdep_hardirqs_on+0x7a/0x110 [ 188.196755][ T7327] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 188.196779][ T7327] ? mutex_lock_nested+0x152/0x1d0 [ 188.196795][ T7327] ? fdget_pos+0x252/0x320 [ 188.196823][ T7327] ksys_read+0x156/0x270 [ 188.196847][ T7327] ? __pfx_ksys_read+0x10/0x10 [ 188.196877][ T7327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.196898][ T7327] do_syscall_64+0x15f/0xf80 [ 188.196922][ T7327] ? trace_irq_disable+0x3b/0x140 [ 188.196947][ T7327] ? clear_bhb_loop+0x40/0x90 [ 188.196971][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.196989][ T7327] RIP: 0033:0x7fde7761d60e [ 188.197007][ T7327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 188.197024][ T7327] RSP: 002b:00007fde758b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.197045][ T7327] RAX: ffffffffffffffda RBX: 00007fde758b66c0 RCX: 00007fde7761d60e [ 188.197059][ T7327] RDX: 000000000000000f RSI: 00007fde758b60a0 RDI: 0000000000000004 [ 188.197071][ T7327] RBP: 00007fde758b6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.197083][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.197095][ T7327] R13: 00007fde778d6038 R14: 00007fde778d5fa0 R15: 00007ffcb81561a8 [ 188.197127][ T7327] [ 188.506814][ T5763] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 188.687285][ T5763] usb 4-1: Using ep0 maxpacket: 16 [ 188.706220][ T5763] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.706247][ T5763] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 188.736964][ T5763] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.736993][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.737011][ T5763] usb 4-1: Product: syz [ 188.737023][ T5763] usb 4-1: Manufacturer: syz [ 188.737035][ T5763] usb 4-1: SerialNumber: syz [ 188.964006][ T32] usb 4-1: USB disconnect, device number 19 [ 189.231929][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 189.262081][ T7347] FAULT_INJECTION: forcing a failure. [ 189.262081][ T7347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.262117][ T7347] CPU: 1 UID: 0 PID: 7347 Comm: syz.0.547 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 189.262143][ T7347] Tainted: [L]=SOFTLOCKUP [ 189.262150][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.262170][ T7347] Call Trace: [ 189.262182][ T7347] [ 189.262189][ T7347] dump_stack_lvl+0xe8/0x150 [ 189.262217][ T7347] should_fail_ex+0x46b/0x600 [ 189.262244][ T7347] _copy_from_iter+0x1d3/0x1670 [ 189.262276][ T7347] ? trace_kmem_cache_alloc+0x29/0xe0 [ 189.262299][ T7347] ? __alloc_skb+0x27d/0x7d0 [ 189.262321][ T7347] ? __pfx__copy_from_iter+0x10/0x10 [ 189.262342][ T7347] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 189.262365][ T7347] ? __alloc_skb+0x27d/0x7d0 [ 189.262390][ T7347] ? netlink_sendmsg+0x650/0xb40 [ 189.262412][ T7347] ? skb_put+0x11b/0x210 [ 189.262436][ T7347] netlink_sendmsg+0x6c0/0xb40 [ 189.262465][ T7347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.262490][ T7347] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 189.262522][ T7347] ? aa_sock_msg_perm+0x122/0x200 [ 189.262548][ T7347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.262569][ T7347] sock_sendmsg_nosec+0x112/0x150 [ 189.262590][ T7347] ____sys_sendmsg+0x55c/0x870 [ 189.262619][ T7347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.262650][ T7347] ? import_iovec+0x73/0xa0 [ 189.262677][ T7347] ___sys_sendmsg+0x2a5/0x360 [ 189.262699][ T7347] ? __lock_acquire+0x6b5/0x2d10 [ 189.262722][ T7347] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.262774][ T7347] ? __fget_files+0x2a/0x420 [ 189.262794][ T7347] ? __fget_files+0x3a6/0x420 [ 189.262823][ T7347] __x64_sys_sendmsg+0x1c3/0x2a0 [ 189.262849][ T7347] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.262880][ T7347] ? __pfx_ksys_write+0x10/0x10 [ 189.262912][ T7347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.262931][ T7347] do_syscall_64+0x15f/0xf80 [ 189.262956][ T7347] ? trace_irq_disable+0x3b/0x140 [ 189.262981][ T7347] ? clear_bhb_loop+0x40/0x90 [ 189.263002][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.263021][ T7347] RIP: 0033:0x7f80526bcdd9 [ 189.263038][ T7347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.263054][ T7347] RSP: 002b:00007f80508f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.263074][ T7347] RAX: ffffffffffffffda RBX: 00007f8052936090 RCX: 00007f80526bcdd9 [ 189.263088][ T7347] RDX: 0000000000008004 RSI: 0000200000000300 RDI: 0000000000000003 [ 189.263101][ T7347] RBP: 00007f80508f5090 R08: 0000000000000000 R09: 0000000000000000 [ 189.263113][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.263125][ T7347] R13: 00007f8052936128 R14: 00007f8052936090 R15: 00007ffcdb962c08 [ 189.263153][ T7347] [ 189.619840][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.663494][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.664117][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 189.695540][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.705621][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.715360][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.881279][ T3344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.298783][ T7375] FAULT_INJECTION: forcing a failure. [ 190.298783][ T7375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.298815][ T7375] CPU: 1 UID: 0 PID: 7375 Comm: syz.3.556 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 190.298835][ T7375] Tainted: [L]=SOFTLOCKUP [ 190.298841][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.298849][ T7375] Call Trace: [ 190.298854][ T7375] [ 190.298860][ T7375] dump_stack_lvl+0xe8/0x150 [ 190.298883][ T7375] should_fail_ex+0x46b/0x600 [ 190.298904][ T7375] _copy_from_iter+0x1d3/0x1670 [ 190.298929][ T7375] ? trace_kmem_cache_alloc+0x29/0xe0 [ 190.298947][ T7375] ? __alloc_skb+0x27d/0x7d0 [ 190.298965][ T7375] ? __pfx__copy_from_iter+0x10/0x10 [ 190.298980][ T7375] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 190.298999][ T7375] ? __alloc_skb+0x27d/0x7d0 [ 190.299017][ T7375] ? netlink_sendmsg+0x650/0xb40 [ 190.299034][ T7375] ? skb_put+0x11b/0x210 [ 190.299053][ T7375] netlink_sendmsg+0x6c0/0xb40 [ 190.299075][ T7375] ? irqentry_exit+0x218/0x780 [ 190.299101][ T7375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.299128][ T7375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.299154][ T7375] sock_sendmsg_nosec+0x112/0x150 [ 190.299171][ T7375] ____sys_sendmsg+0x55c/0x870 [ 190.299194][ T7375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.299218][ T7375] ? import_iovec+0x73/0xa0 [ 190.299240][ T7375] ___sys_sendmsg+0x2a5/0x360 [ 190.299257][ T7375] ? __lock_acquire+0x6b5/0x2d10 [ 190.299276][ T7375] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.299319][ T7375] ? __fget_files+0x2a/0x420 [ 190.299335][ T7375] ? __fget_files+0x3a6/0x420 [ 190.299358][ T7375] __x64_sys_sendmsg+0x1c3/0x2a0 [ 190.299378][ T7375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.299403][ T7375] ? __pfx_ksys_write+0x10/0x10 [ 190.299429][ T7375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.299446][ T7375] do_syscall_64+0x15f/0xf80 [ 190.299466][ T7375] ? trace_irq_disable+0x3b/0x140 [ 190.299488][ T7375] ? clear_bhb_loop+0x40/0x90 [ 190.299507][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.299523][ T7375] RIP: 0033:0x7fde7765cdd9 [ 190.299538][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.299553][ T7375] RSP: 002b:00007fde758b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.299572][ T7375] RAX: ffffffffffffffda RBX: 00007fde778d5fa0 RCX: 00007fde7765cdd9 [ 190.299582][ T7375] RDX: 0000000000008842 RSI: 00002000000002c0 RDI: 0000000000000004 [ 190.299591][ T7375] RBP: 00007fde758b6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.299600][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.299610][ T7375] R13: 00007fde778d6038 R14: 00007fde778d5fa0 R15: 00007ffcb81561a8 [ 190.299632][ T7375] [ 190.629695][ T5763] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 190.686133][ T3344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.780529][ T5763] usb 4-1: Using ep0 maxpacket: 32 [ 190.782391][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.782411][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.782434][ T5763] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 190.782446][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.844656][ T5763] usb 4-1: config 0 descriptor?? [ 191.277125][ T5763] hid (null): unknown global tag 0xe [ 191.297818][ T5763] ft260 0003:0403:6030.0004: unknown global tag 0xe [ 191.297844][ T5763] ft260 0003:0403:6030.0004: item 0 0 1 14 parsing failed [ 191.320032][ T5763] ft260 0003:0403:6030.0004: failed to parse HID [ 191.320147][ T5763] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -22 [ 191.402363][ T7396] FAULT_INJECTION: forcing a failure. [ 191.402363][ T7396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.402399][ T7396] CPU: 0 UID: 0 PID: 7396 Comm: syz.1.562 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 191.402429][ T7396] Tainted: [L]=SOFTLOCKUP [ 191.402436][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.402447][ T7396] Call Trace: [ 191.402454][ T7396] [ 191.402462][ T7396] dump_stack_lvl+0xe8/0x150 [ 191.402490][ T7396] should_fail_ex+0x46b/0x600 [ 191.402514][ T7396] _copy_from_iter+0x1d3/0x1670 [ 191.402542][ T7396] ? trace_kmem_cache_alloc+0x29/0xe0 [ 191.402565][ T7396] ? __alloc_skb+0x27d/0x7d0 [ 191.402589][ T7396] ? __pfx__copy_from_iter+0x10/0x10 [ 191.402611][ T7396] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 191.402635][ T7396] ? __alloc_skb+0x27d/0x7d0 [ 191.402660][ T7396] ? netlink_sendmsg+0x650/0xb40 [ 191.402683][ T7396] ? skb_put+0x11b/0x210 [ 191.402707][ T7396] netlink_sendmsg+0x6c0/0xb40 [ 191.402734][ T7396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.402758][ T7396] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 191.402790][ T7396] ? aa_sock_msg_perm+0x122/0x200 [ 191.402816][ T7396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.402838][ T7396] sock_sendmsg_nosec+0x112/0x150 [ 191.402859][ T7396] ____sys_sendmsg+0x55c/0x870 [ 191.402887][ T7396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.402917][ T7396] ? import_iovec+0x73/0xa0 [ 191.402944][ T7396] ___sys_sendmsg+0x2a5/0x360 [ 191.402966][ T7396] ? __lock_acquire+0x6b5/0x2d10 [ 191.402989][ T7396] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.403032][ T7396] ? __fget_files+0x2a/0x420 [ 191.403067][ T7396] ? __fget_files+0x3a6/0x420 [ 191.403094][ T7396] __x64_sys_sendmsg+0x1c3/0x2a0 [ 191.403119][ T7396] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.403148][ T7396] ? __pfx_ksys_write+0x10/0x10 [ 191.403180][ T7396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.403200][ T7396] do_syscall_64+0x15f/0xf80 [ 191.403225][ T7396] ? trace_irq_disable+0x3b/0x140 [ 191.403251][ T7396] ? clear_bhb_loop+0x40/0x90 [ 191.403273][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.403291][ T7396] RIP: 0033:0x7f4e2f4dcdd9 [ 191.403310][ T7396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.403325][ T7396] RSP: 002b:00007f4e2d736028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.403346][ T7396] RAX: ffffffffffffffda RBX: 00007f4e2f755fa0 RCX: 00007f4e2f4dcdd9 [ 191.403359][ T7396] RDX: 00000000040488d0 RSI: 0000200000000c40 RDI: 0000000000000004 [ 191.403368][ T7396] RBP: 00007f4e2d736090 R08: 0000000000000000 R09: 0000000000000000 [ 191.403377][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.403386][ T7396] R13: 00007f4e2f756038 R14: 00007f4e2f755fa0 R15: 00007ffdfcf4f818 [ 191.403408][ T7396] [ 191.545244][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.545772][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.599989][ T5763] usb 4-1: USB disconnect, device number 20 [ 191.730614][ T3344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.827209][ T5618] Bluetooth: hci0: command tx timeout [ 192.022412][ T5600] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 192.075958][ T3344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.169086][ T5600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.169121][ T5600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.174970][ T5600] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 192.175000][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.175020][ T5600] usb 2-1: Product: syz [ 192.175034][ T5600] usb 2-1: Manufacturer: syz [ 192.175048][ T5600] usb 2-1: SerialNumber: syz [ 192.254351][ T5600] usb 2-1: config 0 descriptor?? [ 192.278778][ T5600] uvcvideo 2-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 192.278823][ T5600] uvcvideo 2-1:0.0: No valid video chain found. [ 192.428402][ T7406] FAULT_INJECTION: forcing a failure. [ 192.428402][ T7406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.428438][ T7406] CPU: 0 UID: 0 PID: 7406 Comm: syz.3.566 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 192.428465][ T7406] Tainted: [L]=SOFTLOCKUP [ 192.428472][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.428482][ T7406] Call Trace: [ 192.428490][ T7406] [ 192.428498][ T7406] dump_stack_lvl+0xe8/0x150 [ 192.428525][ T7406] should_fail_ex+0x46b/0x600 [ 192.428552][ T7406] _copy_from_iter+0x1d3/0x1670 [ 192.428585][ T7406] ? trace_kmem_cache_alloc+0x29/0xe0 [ 192.428609][ T7406] ? __alloc_skb+0x27d/0x7d0 [ 192.428631][ T7406] ? __pfx__copy_from_iter+0x10/0x10 [ 192.428653][ T7406] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 192.428676][ T7406] ? __alloc_skb+0x27d/0x7d0 [ 192.428701][ T7406] ? netlink_sendmsg+0x650/0xb40 [ 192.428721][ T7406] ? skb_put+0x11b/0x210 [ 192.428745][ T7406] netlink_sendmsg+0x6c0/0xb40 [ 192.428772][ T7406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.428796][ T7406] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 192.428829][ T7406] ? aa_sock_msg_perm+0x122/0x200 [ 192.428855][ T7406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.428875][ T7406] sock_sendmsg_nosec+0x112/0x150 [ 192.428895][ T7406] ____sys_sendmsg+0x55c/0x870 [ 192.428917][ T7406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.428941][ T7406] ? import_iovec+0x73/0xa0 [ 192.428969][ T7406] ___sys_sendmsg+0x2a5/0x360 [ 192.428992][ T7406] ? __lock_acquire+0x6b5/0x2d10 [ 192.429022][ T7406] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.429077][ T7406] ? __fget_files+0x2a/0x420 [ 192.429095][ T7406] ? __fget_files+0x3a6/0x420 [ 192.429119][ T7406] __x64_sys_sendmsg+0x1c3/0x2a0 [ 192.429142][ T7406] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.429169][ T7406] ? __pfx_ksys_write+0x10/0x10 [ 192.429199][ T7406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.429218][ T7406] do_syscall_64+0x15f/0xf80 [ 192.429242][ T7406] ? trace_irq_disable+0x3b/0x140 [ 192.429262][ T7406] ? clear_bhb_loop+0x40/0x90 [ 192.429281][ T7406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.429300][ T7406] RIP: 0033:0x7fde7765cdd9 [ 192.429319][ T7406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.429335][ T7406] RSP: 002b:00007fde758b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.429355][ T7406] RAX: ffffffffffffffda RBX: 00007fde778d5fa0 RCX: 00007fde7765cdd9 [ 192.429370][ T7406] RDX: 00000000300048c0 RSI: 0000200000000700 RDI: 0000000000000004 [ 192.429383][ T7406] RBP: 00007fde758b6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.429395][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.429406][ T7406] R13: 00007fde778d6038 R14: 00007fde778d5fa0 R15: 00007ffcb81561a8 [ 192.429433][ T7406] [ 192.463012][ T5763] usb 2-1: USB disconnect, device number 21 [ 193.474165][ T3344] bridge_slave_1: left allmulticast mode [ 193.474296][ T3344] bridge_slave_1: left promiscuous mode [ 193.496568][ T3344] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.641141][ T7421] option changes via remount are deprecated (pid=7420 comm=syz.1.571) [ 193.643001][ T3344] bridge_slave_0: left allmulticast mode [ 193.643033][ T3344] bridge_slave_0: left promiscuous mode [ 193.643289][ T3344] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.798416][ T7423] FAULT_INJECTION: forcing a failure. [ 193.798416][ T7423] name failslab, interval 1, probability 0, space 0, times 0 [ 193.798453][ T7423] CPU: 1 UID: 0 PID: 7423 Comm: syz.3.573 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 193.798479][ T7423] Tainted: [L]=SOFTLOCKUP [ 193.798486][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.798497][ T7423] Call Trace: [ 193.798504][ T7423] [ 193.798512][ T7423] dump_stack_lvl+0xe8/0x150 [ 193.798540][ T7423] should_fail_ex+0x46b/0x600 [ 193.798567][ T7423] should_failslab+0xa8/0x100 [ 193.798598][ T7423] __kmalloc_cache_noprof+0x84/0x690 [ 193.798624][ T7423] ? big_key_preparse+0x200/0x500 [ 193.798645][ T7423] big_key_preparse+0x200/0x500 [ 193.798668][ T7423] ? __pfx_big_key_preparse+0x10/0x10 [ 193.798694][ T7423] key_update+0x220/0x550 [ 193.798718][ T7423] ? irqentry_exit+0x218/0x780 [ 193.798748][ T7423] ? __pfx_key_update+0x10/0x10 [ 193.798786][ T7423] ? rep_movs_alternative+0x4a/0xa0 [ 193.798812][ T7423] keyctl_update_key+0xf6/0x140 [ 193.798843][ T7423] __se_sys_keyctl+0x5bd/0x9e0 [ 193.798868][ T7423] ? __pfx___se_sys_keyctl+0x10/0x10 [ 193.798891][ T7423] ? lockdep_hardirqs_on+0x7a/0x110 [ 193.798915][ T7423] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 193.798939][ T7423] ? rt_mutex_slowunlock+0x1cb/0x300 [ 193.798957][ T7423] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 193.798984][ T7423] ? fput+0xa0/0xd0 [ 193.799005][ T7423] ? ksys_write+0x248/0x270 [ 193.799031][ T7423] ? __pfx_ksys_write+0x10/0x10 [ 193.799061][ T7423] ? __x64_sys_keyctl+0x20/0xc0 [ 193.799083][ T7423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.799104][ T7423] do_syscall_64+0x15f/0xf80 [ 193.799135][ T7423] ? trace_irq_disable+0x3b/0x140 [ 193.799160][ T7423] ? clear_bhb_loop+0x40/0x90 [ 193.799184][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.799202][ T7423] RIP: 0033:0x7fde7765cdd9 [ 193.799220][ T7423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.799235][ T7423] RSP: 002b:00007fde758b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 193.799264][ T7423] RAX: ffffffffffffffda RBX: 00007fde778d5fa0 RCX: 00007fde7765cdd9 [ 193.799278][ T7423] RDX: 00002000000000c0 RSI: 0000000000afe1c3 RDI: 0000000000000002 [ 193.799292][ T7423] RBP: 00007fde758b6090 R08: 0000000000000000 R09: 0000000000000000 [ 193.799304][ T7423] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 193.799316][ T7423] R13: 00007fde778d6038 R14: 00007fde778d5fa0 R15: 00007ffcb81561a8 [ 193.799345][ T7423] [ 193.897313][ T5618] Bluetooth: hci0: command tx timeout [ 194.251496][ T7439] FAULT_INJECTION: forcing a failure. [ 194.251496][ T7439] name failslab, interval 1, probability 0, space 0, times 0 [ 194.251532][ T7439] CPU: 0 UID: 0 PID: 7439 Comm: syz.1.578 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 194.251558][ T7439] Tainted: [L]=SOFTLOCKUP [ 194.251564][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.251574][ T7439] Call Trace: [ 194.251581][ T7439] [ 194.251588][ T7439] dump_stack_lvl+0xe8/0x150 [ 194.251615][ T7439] should_fail_ex+0x46b/0x600 [ 194.251640][ T7439] should_failslab+0xa8/0x100 [ 194.251665][ T7439] __kmalloc_cache_noprof+0x84/0x690 [ 194.251689][ T7439] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 194.251711][ T7439] ? __request_module+0x2d0/0x630 [ 194.251734][ T7439] __request_module+0x2d0/0x630 [ 194.251757][ T7439] ? __pfx___request_module+0x10/0x10 [ 194.251775][ T7439] ? kasan_quarantine_put+0xbb/0x1f0 [ 194.251807][ T7439] ? security_capable+0x7e/0x2c0 [ 194.251834][ T7439] ? dev_load+0x21/0x1f0 [ 194.251854][ T7439] dev_load+0x190/0x1f0 [ 194.251872][ T7439] ? __pfx_ioctl_standard_call+0x10/0x10 [ 194.251894][ T7439] wext_ioctl_dispatch+0x9d/0x410 [ 194.251920][ T7439] wext_handle_ioctl+0x10f/0x1d0 [ 194.251945][ T7439] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 194.251979][ T7439] sock_ioctl+0x15c/0x7f0 [ 194.252009][ T7439] ? __pfx_sock_ioctl+0x10/0x10 [ 194.252042][ T7439] ? __fget_files+0x2a/0x420 [ 194.252062][ T7439] ? __fget_files+0x3a6/0x420 [ 194.252082][ T7439] ? __fget_files+0x2a/0x420 [ 194.252105][ T7439] ? bpf_lsm_file_ioctl+0x9/0x20 [ 194.252124][ T7439] ? __pfx_sock_ioctl+0x10/0x10 [ 194.252149][ T7439] __se_sys_ioctl+0xff/0x170 [ 194.252174][ T7439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.252198][ T7439] do_syscall_64+0x15f/0xf80 [ 194.252223][ T7439] ? clear_bhb_loop+0x40/0x90 [ 194.252245][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.252262][ T7439] RIP: 0033:0x7f4e2f4dcdd9 [ 194.252280][ T7439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.252297][ T7439] RSP: 002b:00007f4e2d736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.252318][ T7439] RAX: ffffffffffffffda RBX: 00007f4e2f755fa0 RCX: 00007f4e2f4dcdd9 [ 194.252333][ T7439] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000003 [ 194.252345][ T7439] RBP: 00007f4e2d736090 R08: 0000000000000000 R09: 0000000000000000 [ 194.252358][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.252369][ T7439] R13: 00007f4e2f756038 R14: 00007f4e2f755fa0 R15: 00007ffdfcf4f818 [ 194.252397][ T7439] [ 194.321012][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.321201][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.970081][ T7450] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 194.970218][ T7450] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 195.317937][ T3344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.397616][ T3344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.445553][ T3344] bond0 (unregistering): Released all slaves [ 195.504298][ T7456] FAULT_INJECTION: forcing a failure. [ 195.504298][ T7456] name failslab, interval 1, probability 0, space 0, times 0 [ 195.504322][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: syz.0.583 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 195.504338][ T7456] Tainted: [L]=SOFTLOCKUP [ 195.504341][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.504348][ T7456] Call Trace: [ 195.504352][ T7456] [ 195.504357][ T7456] dump_stack_lvl+0xe8/0x150 [ 195.504376][ T7456] should_fail_ex+0x46b/0x600 [ 195.504393][ T7456] should_failslab+0xa8/0x100 [ 195.504410][ T7456] __kmalloc_cache_noprof+0x84/0x690 [ 195.504426][ T7456] ? dvb_dmxdev_add_pid+0x147/0x630 [ 195.504443][ T7456] dvb_dmxdev_add_pid+0x147/0x630 [ 195.504458][ T7456] ? rt_spin_unlock+0x160/0x200 [ 195.504473][ T7456] dvb_dmxdev_pes_filter_set+0x42c/0x5d0 [ 195.504488][ T7456] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 195.504503][ T7456] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 195.504518][ T7456] dvb_demux_do_ioctl+0x48e/0x540 [ 195.504533][ T7456] dvb_usercopy+0x199/0x2e0 [ 195.504547][ T7456] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 195.504560][ T7456] ? __pfx_dvb_usercopy+0x10/0x10 [ 195.504578][ T7456] ? __fget_files+0x3a6/0x420 [ 195.504591][ T7456] ? __fget_files+0x2a/0x420 [ 195.504604][ T7456] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 195.504618][ T7456] dvb_demux_ioctl+0x29/0x40 [ 195.504632][ T7456] __se_sys_ioctl+0xff/0x170 [ 195.504655][ T7456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.504673][ T7456] do_syscall_64+0x15f/0xf80 [ 195.504697][ T7456] ? trace_irq_disable+0x3b/0x140 [ 195.504729][ T7456] ? clear_bhb_loop+0x40/0x90 [ 195.504752][ T7456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.504767][ T7456] RIP: 0033:0x7f80526bcdd9 [ 195.504779][ T7456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.504788][ T7456] RSP: 002b:00007f8050916028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.504802][ T7456] RAX: ffffffffffffffda RBX: 00007f8052935fa0 RCX: 00007f80526bcdd9 [ 195.504811][ T7456] RDX: 0000200000000180 RSI: 0000000040146f2c RDI: 0000000000000003 [ 195.504818][ T7456] RBP: 00007f8050916090 R08: 0000000000000000 R09: 0000000000000000 [ 195.504826][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.504833][ T7456] R13: 00007f8052936038 R14: 00007f8052935fa0 R15: 00007ffcdb962c08 [ 195.504852][ T7456] [ 195.746539][ T7453] warning: `syz.3.582' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 196.002014][ T5618] Bluetooth: hci0: command tx timeout [ 196.587155][ T5600] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 196.874363][ T7508] fuse: Bad value for 'fd' [ 196.875055][ T7508] fuse: Bad value for 'fd' [ 197.341051][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 197.636280][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.636578][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.638268][ T7350] bridge_slave_0: entered allmulticast mode [ 197.641548][ T7350] bridge_slave_0: entered promiscuous mode [ 197.650897][ T7519] FAULT_INJECTION: forcing a failure. [ 197.650897][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 197.650931][ T7519] CPU: 1 UID: 0 PID: 7519 Comm: syz.1.596 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 197.650958][ T7519] Tainted: [L]=SOFTLOCKUP [ 197.650964][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.650979][ T7519] Call Trace: [ 197.650986][ T7519] [ 197.650993][ T7519] dump_stack_lvl+0xe8/0x150 [ 197.651021][ T7519] should_fail_ex+0x46b/0x600 [ 197.651049][ T7519] should_failslab+0xa8/0x100 [ 197.651076][ T7519] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 197.651100][ T7519] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 197.651121][ T7519] ? dup_task_struct+0x52/0x840 [ 197.651151][ T7519] dup_task_struct+0x52/0x840 [ 197.651175][ T7519] ? rt_spin_unlock+0x160/0x200 [ 197.651197][ T7519] copy_process+0x89b/0x4450 [ 197.651250][ T7519] ? __pfx_copy_process+0x10/0x10 [ 197.651286][ T7519] vhost_task_create+0x1f9/0x380 [ 197.651306][ T7519] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 197.651332][ T7519] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 197.651359][ T7519] ? __pfx_vhost_task_create+0x10/0x10 [ 197.651386][ T7519] ? __pfx_vhost_task_fn+0x10/0x10 [ 197.651409][ T7519] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 197.651434][ T7519] ? lockdep_hardirqs_on+0x7a/0x110 [ 197.651458][ T7519] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 197.651483][ T7519] ? mutex_lock_nested+0x152/0x1d0 [ 197.651505][ T7519] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 197.651535][ T7519] kvm_mmu_post_init_vm+0x147/0x2d0 [ 197.651565][ T7519] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 197.651599][ T7519] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 197.651622][ T7519] ? do_raw_spin_lock+0x12b/0x2f0 [ 197.651658][ T7519] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 197.651682][ T7519] ? lockdep_hardirqs_on+0x7a/0x110 [ 197.651706][ T7519] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 197.651730][ T7519] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 197.651756][ T7519] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 197.651777][ T7519] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 197.651799][ T7519] ? lockdep_hardirqs_on+0x7a/0x110 [ 197.651822][ T7519] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 197.651851][ T7519] ? rt_write_unlock+0x190/0x230 [ 197.651873][ T7519] kvm_vcpu_ioctl+0xa65/0xfe0 [ 197.651904][ T7519] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 197.651946][ T7519] ? __fget_files+0x2a/0x420 [ 197.651971][ T7519] ? __fget_files+0x2a/0x420 [ 197.651990][ T7519] ? __fget_files+0x3a6/0x420 [ 197.652010][ T7519] ? __fget_files+0x2a/0x420 [ 197.652034][ T7519] ? bpf_lsm_file_ioctl+0x9/0x20 [ 197.652053][ T7519] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 197.652077][ T7519] __se_sys_ioctl+0xff/0x170 [ 197.652102][ T7519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.652122][ T7519] do_syscall_64+0x15f/0xf80 [ 197.652147][ T7519] ? trace_irq_disable+0x3b/0x140 [ 197.652172][ T7519] ? clear_bhb_loop+0x40/0x90 [ 197.652195][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.652213][ T7519] RIP: 0033:0x7f4e2f4dcdd9 [ 197.652231][ T7519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.652247][ T7519] RSP: 002b:00007f4e2d715028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.652266][ T7519] RAX: ffffffffffffffda RBX: 00007f4e2f756090 RCX: 00007f4e2f4dcdd9 [ 197.652280][ T7519] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 197.652292][ T7519] RBP: 00007f4e2d715090 R08: 0000000000000000 R09: 0000000000000000 [ 197.652304][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.652316][ T7519] R13: 00007f4e2f756128 R14: 00007f4e2f756090 R15: 00007ffdfcf4f818 [ 197.652346][ T7519] [ 197.656419][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.662214][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.662500][ T7350] bridge_slave_1: entered allmulticast mode [ 197.737538][ T7350] bridge_slave_1: entered promiscuous mode [ 198.056774][ T5618] Bluetooth: hci0: command tx timeout [ 198.593042][ T7350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.642135][ T7350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.717096][ T5600] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 198.880480][ T5600] usb 4-1: Using ep0 maxpacket: 16 [ 198.889947][ T5600] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 198.889978][ T5600] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 198.889998][ T5600] usb 4-1: Product: syz [ 198.890017][ T5600] usb 4-1: Manufacturer: syz [ 198.890031][ T5600] usb 4-1: SerialNumber: syz [ 198.931061][ T5600] usb 4-1: config 0 descriptor?? [ 199.013512][ T7560] FAULT_INJECTION: forcing a failure. [ 199.013512][ T7560] name failslab, interval 1, probability 0, space 0, times 0 [ 199.013548][ T7560] CPU: 1 UID: 0 PID: 7560 Comm: syz.0.607 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 199.013575][ T7560] Tainted: [L]=SOFTLOCKUP [ 199.013590][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.013600][ T7560] Call Trace: [ 199.013608][ T7560] [ 199.013616][ T7560] dump_stack_lvl+0xe8/0x150 [ 199.013643][ T7560] should_fail_ex+0x46b/0x600 [ 199.013671][ T7560] should_failslab+0xa8/0x100 [ 199.013691][ T7560] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 199.013710][ T7560] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 199.013730][ T7560] ? dup_task_struct+0x52/0x840 [ 199.013762][ T7560] dup_task_struct+0x52/0x840 [ 199.013786][ T7560] ? rt_spin_unlock+0x160/0x200 [ 199.013810][ T7560] copy_process+0x89b/0x4450 [ 199.013844][ T7560] ? __pfx_copy_process+0x10/0x10 [ 199.013865][ T7560] vhost_task_create+0x1f9/0x380 [ 199.013886][ T7560] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 199.013913][ T7560] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 199.013941][ T7560] ? __pfx_vhost_task_create+0x10/0x10 [ 199.013973][ T7560] ? __pfx_vhost_task_fn+0x10/0x10 [ 199.013993][ T7560] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 199.014008][ T7560] ? lockdep_hardirqs_on+0x7a/0x110 [ 199.014023][ T7560] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 199.014044][ T7560] ? mutex_lock_nested+0x152/0x1d0 [ 199.014063][ T7560] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 199.014094][ T7560] kvm_mmu_post_init_vm+0x147/0x2d0 [ 199.014124][ T7560] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 199.014157][ T7560] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 199.014171][ T7560] ? do_raw_spin_lock+0x12b/0x2f0 [ 199.014192][ T7560] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 199.014208][ T7560] ? lockdep_hardirqs_on+0x7a/0x110 [ 199.014232][ T7560] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 199.014257][ T7560] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 199.014285][ T7560] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 199.014308][ T7560] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 199.014329][ T7560] ? lockdep_hardirqs_on+0x7a/0x110 [ 199.014343][ T7560] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 199.014357][ T7560] ? rt_write_unlock+0x190/0x230 [ 199.014373][ T7560] kvm_vcpu_ioctl+0xa65/0xfe0 [ 199.014405][ T7560] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 199.014456][ T7560] ? __fget_files+0x2a/0x420 [ 199.014481][ T7560] ? __fget_files+0x2a/0x420 [ 199.014493][ T7560] ? __fget_files+0x3a6/0x420 [ 199.014505][ T7560] ? __fget_files+0x2a/0x420 [ 199.014519][ T7560] ? bpf_lsm_file_ioctl+0x9/0x20 [ 199.014531][ T7560] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 199.014555][ T7560] __se_sys_ioctl+0xff/0x170 [ 199.014582][ T7560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.014604][ T7560] do_syscall_64+0x15f/0xf80 [ 199.014628][ T7560] ? trace_irq_disable+0x3b/0x140 [ 199.014651][ T7560] ? clear_bhb_loop+0x40/0x90 [ 199.014670][ T7560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.014689][ T7560] RIP: 0033:0x7f80526bcdd9 [ 199.014707][ T7560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.014725][ T7560] RSP: 002b:00007f8050916028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.014746][ T7560] RAX: ffffffffffffffda RBX: 00007f8052935fa0 RCX: 00007f80526bcdd9 [ 199.014760][ T7560] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 199.014772][ T7560] RBP: 00007f8050916090 R08: 0000000000000000 R09: 0000000000000000 [ 199.014785][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.014797][ T7560] R13: 00007f8052936038 R14: 00007f8052935fa0 R15: 00007ffcdb962c08 [ 199.014828][ T7560] [ 199.021750][ T7350] team0: Port device team_slave_0 added [ 199.181704][ T3344] hsr_slave_0: left promiscuous mode [ 199.226045][ T5600] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 199.227431][ T3344] hsr_slave_1: left promiscuous mode [ 199.255472][ T3344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.269850][ T3344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.296383][ T3344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.296492][ T3344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.339410][ T5600] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 199.339439][ T5600] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 199.444861][ T3344] veth0_macvtap: left promiscuous mode [ 199.445645][ T3344] veth1_vlan: left promiscuous mode [ 199.446462][ T3344] veth0_vlan: left promiscuous mode [ 199.530155][ T7566] binder: 7561:7566 ioctl c018620c 200000000240 returned -22 [ 200.497379][ T3344] team0 (unregistering): Port device team_slave_1 removed [ 200.537604][ T3344] team0 (unregistering): Port device team_slave_0 removed [ 200.781509][ T7350] team0: Port device team_slave_1 added [ 200.783355][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 200.927859][ T5600] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 200.942018][ T5600] usb 4-1: USB disconnect, device number 21 [ 201.110040][ T7595] autofs: Unknown parameter '@' [ 201.161019][ T7598] comedi: valid board names for 8255 driver are: [ 201.161039][ T7598] 8255 [ 201.161045][ T7598] comedi: valid board names for vmk80xx driver are: [ 201.161053][ T7598] vmk80xx [ 201.161059][ T7598] comedi: valid board names for usbduxsigma driver are: [ 201.161068][ T7598] usbduxsigma [ 201.161074][ T7598] comedi: valid board names for usbduxfast driver are: [ 201.161082][ T7598] usbduxfast [ 201.161088][ T7598] comedi: valid board names for usbdux driver are: [ 201.161097][ T7598] usbdux [ 201.161103][ T7598] comedi: valid board names for ni6501 driver are: [ 201.161110][ T7598] ni6501 [ 201.161117][ T7598] comedi: valid board names for dt9812 driver are: [ 201.161124][ T7598] dt9812 [ 201.161131][ T7598] comedi: valid board names for ni_labpc_cs driver are: [ 201.161139][ T7598] ni_labpc_cs [ 201.161145][ T7598] comedi: valid board names for ni_daq_700 driver are: [ 201.161152][ T7598] ni_daq_700 [ 201.161158][ T7598] comedi: valid board names for labpc_pci driver are: [ 201.161165][ T7598] labpc_pci [ 201.161172][ T7598] comedi: valid board names for adl_pci9118 driver are: [ 201.161179][ T7598] pci9118dg [ 201.161185][ T7598] pci9118hg [ 201.161191][ T7598] pci9118hr [ 201.161198][ T7598] comedi: valid board names for 8255_pci driver are: [ 201.161206][ T7598] 8255_pci [ 201.161213][ T7598] comedi: valid board names for s526 driver are: [ 201.161221][ T7598] s526 [ 201.161227][ T7598] comedi: valid board names for multiq3 driver are: [ 201.161235][ T7598] multiq3 [ 201.161241][ T7598] comedi: valid board names for pcmuio driver are: [ 201.161249][ T7598] pcmuio48 [ 201.161255][ T7598] pcmuio96 [ 201.161262][ T7598] comedi: valid board names for pcmmio driver are: [ 201.161270][ T7598] pcmmio [ 201.161275][ T7598] comedi: valid board names for pcmda12 driver are: [ 201.161284][ T7598] pcmda12 [ 201.161290][ T7598] comedi: valid board names for pcmad driver are: [ 201.161298][ T7598] pcmad12 [ 201.161304][ T7598] pcmad16 [ 201.161310][ T7598] comedi: valid board names for ni_labpc driver are: [ 201.161319][ T7598] lab-pc-1200 [ 201.161325][ T7598] lab-pc-1200ai [ 201.161331][ T7598] lab-pc+ [ 201.161337][ T7598] comedi: valid board names for atmio16 driver are: [ 201.161345][ T7598] atmio16 [ 201.161351][ T7598] atmio16d [ 201.161357][ T7598] comedi: valid board names for ni_at_ao driver are: [ 201.161366][ T7598] at-ao-6 [ 201.161372][ T7598] at-ao-10 [ 201.161378][ T7598] comedi: valid board names for ni_at_a2150 driver are: [ 201.161386][ T7598] ni_at_a2150 [ 201.161392][ T7598] comedi: valid board names for adq12b driver are: [ 201.161400][ T7598] adq12b [ 201.161405][ T7598] comedi: valid board names for mpc624 driver are: [ 201.161413][ T7598] mpc624 [ 201.161419][ T7598] comedi: valid board names for c6xdigio driver are: [ 201.161426][ T7598] c6xdigio [ 201.161433][ T7598] comedi: valid board names for aio_iiro_16 driver are: [ 201.161441][ T7598] aio_iiro_16 [ 201.186850][ T7598] comedi: valid board names for aio_aio12_8 driver are: [ 201.186866][ T7598] aio_aio12_8 [ 201.186872][ T7598] aio_ai12_8 [ 201.186878][ T7598] aio_ao12_4 [ 201.186885][ T7598] comedi: valid board names for fl512 driver are: [ 201.186893][ T7598] fl512 [ 201.186899][ T7598] comedi: valid board names for dmm32at driver are: [ 201.186907][ T7598] dmm32at [ 201.186913][ T7598] comedi: valid board names for dt282x driver are: [ 201.186921][ T7598] dt2821 [ 201.186928][ T7598] dt2821-f [ 201.186933][ T7598] dt2821-g [ 201.186939][ T7598] dt2823 [ 201.186945][ T7598] dt2824-pgh [ 201.186951][ T7598] dt2824-pgl [ 201.186957][ T7598] dt2825 [ 201.186962][ T7598] dt2827 [ 201.186968][ T7598] dt2828 [ 201.186973][ T7598] dt2829 [ 201.186979][ T7598] dt21-ez [ 201.186985][ T7598] dt23-ez [ 201.186990][ T7598] dt24-ez [ 201.186996][ T7598] dt24-ez-pgl [ 201.187002][ T7598] comedi: valid board names for dt2817 driver are: [ 201.187009][ T7598] dt2817 [ 201.187015][ T7598] comedi: valid board names for dt2815 driver are: [ 201.187023][ T7598] dt2815 [ 201.187028][ T7598] comedi: valid board names for dt2814 driver are: [ 201.187036][ T7598] dt2814 [ 201.187042][ T7598] comedi: valid board names for dt2811 driver are: [ 201.187050][ T7598] dt2811-pgh [ 201.187056][ T7598] dt2811-pgl [ 201.187062][ T7598] comedi: valid board names for dt2801 driver are: [ 201.187071][ T7598] dt2801 [ 201.187077][ T7598] comedi: valid board names for das6402 driver are: [ 201.187085][ T7598] das6402-12 [ 201.187091][ T7598] das6402-16 [ 201.187097][ T7598] comedi: valid board names for das1800 driver are: [ 201.187105][ T7598] das-1701st [ 201.188684][ T7598] das-1701st-da [ 201.188694][ T7598] das-1702st [ 201.188700][ T7598] das-1702st-da [ 201.188717][ T7598] das-1702hr [ 201.188724][ T7598] das-1702hr-da [ 201.188730][ T7598] das-1701ao [ 201.188736][ T7598] das-1702ao [ 201.188742][ T7598] das-1801st [ 201.188748][ T7598] das-1801st-da [ 201.188754][ T7598] das-1802st [ 201.188760][ T7598] das-1802st-da [ 201.188766][ T7598] das-1802hr [ 201.188771][ T7598] das-1802hr-da [ 201.188778][ T7598] das-1801hc [ 201.188784][ T7598] das-1802hc [ 201.188790][ T7598] das-1801ao [ 201.188796][ T7598] das-1802ao [ 201.188802][ T7598] comedi: valid board names for das800 driver are: [ 201.188810][ T7598] das-800 [ 201.188816][ T7598] cio-das800 [ 201.188823][ T7598] das-801 [ 201.188828][ T7598] cio-das801 [ 201.188835][ T7598] das-802 [ 201.188840][ T7598] cio-das802 [ 201.188846][ T7598] cio-das802/16 [ 201.188853][ T7598] comedi: valid board names for isa-das08 driver are: [ 201.188861][ T7598] isa-das08 [ 201.188867][ T7598] das08-pgm [ 201.188873][ T7598] das08-pgh [ 201.188879][ T7598] das08-pgl [ 201.188884][ T7598] das08-aoh [ 201.188890][ T7598] das08-aol [ 201.188896][ T7598] das08-aom [ 201.188901][ T7598] das08/jr-ao [ 201.188907][ T7598] das08jr-16-ao [ 201.188913][ T7598] pc104-das08 [ 201.188919][ T7598] das08jr/16 [ 201.188925][ T7598] comedi: valid board names for das16m1 driver are: [ 201.188933][ T7598] das16m1 [ 201.188939][ T7598] comedi: valid board names for dac02 driver are: [ 201.188947][ T7598] dac02 [ 201.188953][ T7598] comedi: valid board names for rti802 driver are: [ 201.188960][ T7598] rti802 [ 201.188966][ T7598] comedi: valid board names for rti800 driver are: [ 201.188974][ T7598] rti800 [ 201.188980][ T7598] rti815 [ 201.188985][ T7598] comedi: valid board names for pcm3724 driver are: [ 201.188993][ T7598] pcm3724 [ 201.188999][ T7598] comedi: valid board names for pcl818 driver are: [ 201.189007][ T7598] pcl818l [ 201.189013][ T7598] pcl818h [ 201.189018][ T7598] pcl818hd [ 201.189025][ T7598] pcl818hg [ 201.189030][ T7598] pcl818 [ 201.189036][ T7598] pcl718 [ 201.189041][ T7598] pcm3718 [ 201.189047][ T7598] comedi: valid board names for pcl816 driver are: [ 201.189054][ T7598] pcl816 [ 201.189060][ T7598] pcl814b [ 201.189066][ T7598] comedi: valid board names for pcl812 driver are: [ 201.189073][ T7598] pcl812 [ 201.189079][ T7598] pcl812pg [ 201.189085][ T7598] acl8112pg [ 201.189090][ T7598] acl8112dg [ 201.189096][ T7598] acl8112hg [ 201.189102][ T7598] a821pgl [ 201.189108][ T7598] a821pglnda [ 201.189113][ T7598] a821pgh [ 201.189119][ T7598] a822pgl [ 201.189125][ T7598] a822pgh [ 201.189131][ T7598] a823pgl [ 201.189136][ T7598] a823pgh [ 201.189142][ T7598] pcl813 [ 201.189148][ T7598] pcl813b [ 201.189153][ T7598] acl8113 [ 201.189159][ T7598] iso813 [ 201.189165][ T7598] acl8216 [ 201.189171][ T7598] a826pg [ 201.189176][ T7598] comedi: valid board names for pcl730 driver are: [ 201.189183][ T7598] pcl730 [ 201.189189][ T7598] iso730 [ 201.189195][ T7598] acl7130 [ 201.189201][ T7598] pcm3730 [ 201.189206][ T7598] pcl725 [ 201.189212][ T7598] p8r8dio [ 201.189217][ T7598] acl7225b [ 201.189223][ T7598] p16r16dio [ 201.189229][ T7598] pcl733 [ 201.189235][ T7598] pcl734 [ 201.189240][ T7598] opmm-1616-xt [ 201.189247][ T7598] pearl-mm-p [ 201.189253][ T7598] ir104-pbf [ 201.189259][ T7598] comedi: valid board names for pcl726 driver are: [ 201.189267][ T7598] pcl726 [ 201.189272][ T7598] pcl727 [ 201.189279][ T7598] pcl728 [ 201.189284][ T7598] acl6126 [ 201.189289][ T7598] acl6128 [ 201.189295][ T7598] comedi: valid board names for pcl724 driver are: [ 201.189303][ T7598] pcl724 [ 201.189309][ T7598] pcl722 [ 201.189315][ T7598] pcl731 [ 201.189320][ T7598] acl7122 [ 201.189326][ T7598] acl7124 [ 201.189332][ T7598] pet48dio [ 201.189344][ T7598] pcmio48 [ 201.189350][ T7598] onyx-mm-dio [ 201.189356][ T7598] comedi: valid board names for pcl711 driver are: [ 201.189364][ T7598] pcl711 [ 201.189370][ T7598] pcl711b [ 201.189376][ T7598] acl8112hg [ 201.189381][ T7598] acl8112dg [ 201.189387][ T7598] comedi: valid board names for amplc_pc263 driver are: [ 201.189395][ T7598] pc263 [ 201.189401][ T7598] comedi: valid board names for amplc_pc236 driver are: [ 201.189409][ T7598] pc36at [ 201.189415][ T7598] comedi: valid board names for amplc_dio200 driver are: [ 201.189424][ T7598] pc212e [ 201.189429][ T7598] pc214e [ 201.189435][ T7598] pc215e [ 201.189440][ T7598] pc218e [ 201.189447][ T7598] pc272e [ 201.189452][ T7598] comedi: valid board names for comedi_parport driver are: [ 201.189460][ T7598] comedi_parport [ 201.189467][ T7598] comedi: valid board names for comedi_test driver are: [ 201.189475][ T7598] comedi_test [ 201.189481][ T7598] comedi: valid board names for comedi_bond driver are: [ 201.189489][ T7598] comedi_bond [ 201.365419][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.365436][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.365461][ T7350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.403809][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.403826][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.403852][ T7350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.408101][ T5704] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 201.603663][ T5704] usb 4-1: config 0 interface 0 has no altsetting 0 [ 201.603702][ T5704] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 201.603725][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.633136][ T5704] usb 4-1: config 0 descriptor?? [ 201.762497][ T5704] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 201.921330][ T4964] bcm5974 4-1:0.0: could not read from device [ 202.100167][ T4964] bcm5974 4-1:0.0: could not read from device [ 202.126853][ T5704] usb 4-1: USB disconnect, device number 22 [ 202.343277][ T7350] hsr_slave_0: entered promiscuous mode [ 202.351823][ T7350] hsr_slave_1: entered promiscuous mode [ 203.166133][ T7627] netlink: 'syz.0.625': attribute type 83 has an invalid length. [ 203.241420][ T7624] netlink: 'syz.0.625': attribute type 83 has an invalid length. [ 203.541162][ T7625] mmap: syz.3.624 (7625) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 203.599151][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 204.065700][ T7643] autofs: Unknown parameter '@' [ 204.262446][ T7653] 9pnet_virtio: no channels available for device ./file0 [ 204.526859][ T5600] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 204.676766][ T5600] usb 4-1: Using ep0 maxpacket: 8 [ 204.678927][ T5600] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 204.678953][ T5600] usb 4-1: config 0 has no interface number 0 [ 204.678996][ T5600] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 204.679020][ T5600] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.679049][ T5600] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 204.679073][ T5600] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 204.679095][ T5600] usb 4-1: config 0 interface 186 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 204.679120][ T5600] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.681915][ T5600] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 204.681944][ T5600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.681965][ T5600] usb 4-1: Product: syz [ 204.681979][ T5600] usb 4-1: Manufacturer: syz [ 204.681994][ T5600] usb 4-1: SerialNumber: syz [ 204.730456][ T5600] usb 4-1: config 0 descriptor?? [ 204.829372][ T5600] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 204.986206][ T5704] usb 4-1: USB disconnect, device number 23 [ 205.026323][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 205.061261][ T7350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.114924][ T7350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.127331][ T7671] FAULT_INJECTION: forcing a failure. [ 205.127331][ T7671] name failslab, interval 1, probability 0, space 0, times 0 [ 205.127375][ T7671] CPU: 1 UID: 0 PID: 7671 Comm: syz.1.632 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 205.127400][ T7671] Tainted: [L]=SOFTLOCKUP [ 205.127407][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.127418][ T7671] Call Trace: [ 205.127425][ T7671] [ 205.127433][ T7671] dump_stack_lvl+0xe8/0x150 [ 205.127460][ T7671] should_fail_ex+0x46b/0x600 [ 205.127487][ T7671] should_failslab+0xa8/0x100 [ 205.127514][ T7671] __kmalloc_cache_noprof+0x84/0x690 [ 205.127539][ T7671] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 205.127563][ T7671] ? __request_module+0x2d0/0x630 [ 205.127589][ T7671] __request_module+0x2d0/0x630 [ 205.127619][ T7671] ? __pfx___request_module+0x10/0x10 [ 205.127638][ T7671] ? kasan_quarantine_put+0xbb/0x1f0 [ 205.127677][ T7671] ? security_capable+0x7e/0x2c0 [ 205.127705][ T7671] ? dev_load+0x21/0x1f0 [ 205.127725][ T7671] dev_load+0x190/0x1f0 [ 205.127744][ T7671] ? __pfx_ioctl_standard_call+0x10/0x10 [ 205.127795][ T7671] wext_ioctl_dispatch+0x9d/0x410 [ 205.127821][ T7671] wext_handle_ioctl+0x10f/0x1d0 [ 205.127845][ T7671] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 205.127890][ T7671] sock_ioctl+0x15c/0x7f0 [ 205.127921][ T7671] ? __pfx_sock_ioctl+0x10/0x10 [ 205.127947][ T7671] ? __fget_files+0x2a/0x420 [ 205.127969][ T7671] ? __fget_files+0x3a6/0x420 [ 205.127988][ T7671] ? __fget_files+0x2a/0x420 [ 205.128009][ T7671] ? bpf_lsm_file_ioctl+0x9/0x20 [ 205.128029][ T7671] ? __pfx_sock_ioctl+0x10/0x10 [ 205.128054][ T7671] __se_sys_ioctl+0xff/0x170 [ 205.128085][ T7671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.128103][ T7671] do_syscall_64+0x15f/0xf80 [ 205.128126][ T7671] ? trace_irq_disable+0x3b/0x140 [ 205.128156][ T7671] ? clear_bhb_loop+0x40/0x90 [ 205.128180][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.128199][ T7671] RIP: 0033:0x7f4e2f4dcdd9 [ 205.128216][ T7671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.128232][ T7671] RSP: 002b:00007f4e2d736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.128257][ T7671] RAX: ffffffffffffffda RBX: 00007f4e2f755fa0 RCX: 00007f4e2f4dcdd9 [ 205.128268][ T7671] RDX: 0000200000000080 RSI: 0000000000008b19 RDI: 0000000000000003 [ 205.128275][ T7671] RBP: 00007f4e2d736090 R08: 0000000000000000 R09: 0000000000000000 [ 205.128283][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.128290][ T7671] R13: 00007f4e2f756038 R14: 00007f4e2f755fa0 R15: 00007ffdfcf4f818 [ 205.128307][ T7671] [ 205.194108][ T7350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.260267][ T7350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.274891][ T7350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.412391][ T7350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.416375][ T7350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.481222][ T7350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.617011][ T5704] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 205.683849][ T7686] FAULT_INJECTION: forcing a failure. [ 205.683849][ T7686] name failslab, interval 1, probability 0, space 0, times 0 [ 205.683879][ T7686] CPU: 1 UID: 0 PID: 7686 Comm: syz.3.635 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 205.683899][ T7686] Tainted: [L]=SOFTLOCKUP [ 205.683904][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.683912][ T7686] Call Trace: [ 205.683918][ T7686] [ 205.683924][ T7686] dump_stack_lvl+0xe8/0x150 [ 205.683946][ T7686] should_fail_ex+0x46b/0x600 [ 205.683969][ T7686] should_failslab+0xa8/0x100 [ 205.683990][ T7686] __kmalloc_noprof+0xdf/0x7b0 [ 205.684011][ T7686] ? input_ff_create+0x7b/0x300 [ 205.684031][ T7686] input_ff_create+0x7b/0x300 [ 205.684050][ T7686] uinput_create_device+0x282/0x680 [ 205.684073][ T7686] uinput_ioctl_handler+0x41a/0x14a0 [ 205.684094][ T7686] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 205.684119][ T7686] ? __fget_files+0x2a/0x420 [ 205.684136][ T7686] ? __fget_files+0x3a6/0x420 [ 205.684158][ T7686] ? bpf_lsm_file_ioctl+0x9/0x20 [ 205.684177][ T7686] ? __pfx_uinput_ioctl+0x10/0x10 [ 205.684191][ T7686] __se_sys_ioctl+0xff/0x170 [ 205.684222][ T7686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.684238][ T7686] do_syscall_64+0x15f/0xf80 [ 205.684258][ T7686] ? trace_irq_disable+0x3b/0x140 [ 205.684278][ T7686] ? clear_bhb_loop+0x40/0x90 [ 205.684295][ T7686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.684309][ T7686] RIP: 0033:0x7fde7765cdd9 [ 205.684324][ T7686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.684336][ T7686] RSP: 002b:00007fde758b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.684354][ T7686] RAX: ffffffffffffffda RBX: 00007fde778d5fa0 RCX: 00007fde7765cdd9 [ 205.684364][ T7686] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 205.684374][ T7686] RBP: 00007fde758b6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.684383][ T7686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.684391][ T7686] R13: 00007fde778d6038 R14: 00007fde778d5fa0 R15: 00007ffcb81561a8 [ 205.684434][ T7686] [ 205.776826][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 205.795527][ T5704] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 205.798040][ T5704] usb 2-1: New USB device found, idVendor=0499, idProduct=500e, bcdDevice= 0.40 [ 205.798067][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.798087][ T5704] usb 2-1: Product: ӿ [ 205.798100][ T5704] usb 2-1: Manufacturer: 疆實層撦㷆倷퍢㵓؃ἰ鐭呶퇦辽䄃虸흐⒣ᔜ츊쮜㩈찳⠻ៜ㈍ˆ䮑춗뀤瀴汏ੱ㹩劫伀ײ閂﯐씺൳嘸㼫檁툦賓䍰ﮅ灭 [ 205.798122][ T5704] usb 2-1: SerialNumber: 뜃㿆癒␪ꨞ⼈涉苵뭜덾׽槩໩⪸砐ᄱ➊䝑軀鸰轕ᶂ≣쥕싮폺蓑蔾顲♌噷鉳뀄ꯑ醯⬙䩡єᏐ퍖坜榡ŜⓎ⃩㚖驃ᴿѧ [ 205.863222][ T7688] autofs: Unknown parameter '@' [ 205.946784][ T5717] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 205.950003][ T5704] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 205.950520][ T5704] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 206.009740][ T5704] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.027236][ T5704] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 206.051778][ T5704] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.193446][ T5717] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.193530][ T5717] usb 1-1: too many configurations: 134, using maximum allowed: 8 [ 206.219748][ T5717] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 206.219785][ T5717] usb 1-1: can't read configurations, error -61 [ 206.261145][ T5704] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 206.281640][ T5704] usb 2-1: USB disconnect, device number 22 [ 206.295082][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.346865][ T5717] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 206.353272][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.414703][ T7694] FAULT_INJECTION: forcing a failure. [ 206.414703][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 206.414741][ T7694] CPU: 1 UID: 0 PID: 7694 Comm: syz.3.638 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 206.414769][ T7694] Tainted: [L]=SOFTLOCKUP [ 206.414776][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.414786][ T7694] Call Trace: [ 206.414793][ T7694] [ 206.414801][ T7694] dump_stack_lvl+0xe8/0x150 [ 206.414830][ T7694] should_fail_ex+0x46b/0x600 [ 206.414859][ T7694] should_failslab+0xa8/0x100 [ 206.414887][ T7694] __kmalloc_noprof+0xdf/0x7b0 [ 206.414911][ T7694] ? tomoyo_encode+0x28b/0x550 [ 206.414941][ T7694] tomoyo_encode+0x28b/0x550 [ 206.414971][ T7694] tomoyo_realpath_from_path+0x58d/0x5d0 [ 206.415006][ T7694] ? tomoyo_path_number_perm+0x219/0x630 [ 206.415030][ T7694] tomoyo_path_number_perm+0x246/0x630 [ 206.415054][ T7694] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 206.415120][ T7694] ? __pfx_from_kuid+0x10/0x10 [ 206.415164][ T7694] tomoyo_path_chown+0x46/0xc0 [ 206.415186][ T7694] security_path_chown+0x139/0x340 [ 206.415206][ T7694] chown_common+0x40c/0x6c0 [ 206.415236][ T7694] ? __pfx_chown_common+0x10/0x10 [ 206.415257][ T7694] ? mnt_get_write_access+0x262/0x2d0 [ 206.415277][ T7694] do_fchownat+0x14c/0x250 [ 206.415289][ T7694] ? __pfx_do_fchownat+0x10/0x10 [ 206.415301][ T7694] ? __pfx_ksys_write+0x10/0x10 [ 206.415318][ T7694] __x64_sys_fchownat+0xb5/0xd0 [ 206.415329][ T7694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.415341][ T7694] do_syscall_64+0x15f/0xf80 [ 206.415357][ T7694] ? trace_irq_disable+0x3b/0x140 [ 206.415372][ T7694] ? clear_bhb_loop+0x40/0x90 [ 206.415386][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.415397][ T7694] RIP: 0033:0x7fde7765cdd9 [ 206.415409][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.415419][ T7694] RSP: 002b:00007fde75895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 206.415433][ T7694] RAX: ffffffffffffffda RBX: 00007fde778d6090 RCX: 00007fde7765cdd9 [ 206.415442][ T7694] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 206.415450][ T7694] RBP: 00007fde75895090 R08: 0000000000001000 R09: 0000000000000000 [ 206.415458][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.415465][ T7694] R13: 00007fde778d6128 R14: 00007fde778d6090 R15: 00007ffcb81561a8 [ 206.415482][ T7694] [ 206.415514][ T7694] ERROR: Out of memory at tomoyo_realpath_from_path. [ 206.480728][ T7350] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.528614][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.528831][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.542816][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.543050][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.732137][ T5717] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.732217][ T5717] usb 1-1: too many configurations: 134, using maximum allowed: 8 [ 206.736238][ T5717] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 206.736270][ T5717] usb 1-1: can't read configurations, error -61 [ 206.736594][ T5717] usb usb1-port1: attempt power cycle [ 207.117167][ T5717] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 207.145584][ T5717] usb 1-1: unable to get BOS descriptor or descriptor too short [ 207.145666][ T5717] usb 1-1: too many configurations: 134, using maximum allowed: 8 [ 207.164340][ T5717] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 207.164378][ T5717] usb 1-1: can't read configurations, error -61 [ 207.287156][ T5717] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 207.311610][ T5717] usb 1-1: unable to get BOS descriptor or descriptor too short [ 207.311681][ T5717] usb 1-1: too many configurations: 134, using maximum allowed: 8 [ 207.313340][ T5717] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 207.313373][ T5717] usb 1-1: can't read configurations, error -61 [ 207.313753][ T5717] usb usb1-port1: unable to enumerate USB device [ 207.395000][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.660279][ T7350] veth0_vlan: entered promiscuous mode [ 207.675046][ T7350] veth1_vlan: entered promiscuous mode [ 207.734826][ T7350] veth0_macvtap: entered promiscuous mode [ 207.745862][ T7350] veth1_macvtap: entered promiscuous mode [ 207.802717][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.865039][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.931574][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.932785][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.933884][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.969372][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.015913][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.015934][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.199277][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.199298][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.204050][ T7751] program syz.1.652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.204334][ T7751] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 209.205906][ T7751] netlink: 'syz.1.652': attribute type 1 has an invalid length. [ 209.353808][ T9] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 209.512835][ T9] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 209.512856][ T9] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 209.512869][ T9] usb 1-1: config 150 has no interface number 0 [ 209.512893][ T9] usb 1-1: config 150 interface 204 has no altsetting 0 [ 209.516044][ T9] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 209.516061][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.516073][ T9] usb 1-1: Product: syz [ 209.516081][ T9] usb 1-1: Manufacturer: syz [ 209.516089][ T9] usb 1-1: SerialNumber: syz [ 209.632126][ T7765] FAULT_INJECTION: forcing a failure. [ 209.632126][ T7765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.632162][ T7765] CPU: 1 UID: 0 PID: 7765 Comm: syz.4.546 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 209.632188][ T7765] Tainted: [L]=SOFTLOCKUP [ 209.632193][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.632202][ T7765] Call Trace: [ 209.632208][ T7765] [ 209.632214][ T7765] dump_stack_lvl+0xe8/0x150 [ 209.632236][ T7765] should_fail_ex+0x46b/0x600 [ 209.632257][ T7765] _copy_from_iter+0x1d3/0x1670 [ 209.632281][ T7765] ? trace_kmem_cache_alloc+0x29/0xe0 [ 209.632299][ T7765] ? __alloc_skb+0x27d/0x7d0 [ 209.632315][ T7765] ? __pfx__copy_from_iter+0x10/0x10 [ 209.632332][ T7765] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 209.632349][ T7765] ? __alloc_skb+0x27d/0x7d0 [ 209.632368][ T7765] ? netlink_sendmsg+0x650/0xb40 [ 209.632385][ T7765] ? skb_put+0x11b/0x210 [ 209.632404][ T7765] netlink_sendmsg+0x6c0/0xb40 [ 209.632428][ T7765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.632447][ T7765] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 209.632473][ T7765] ? aa_sock_msg_perm+0x122/0x200 [ 209.632495][ T7765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.632512][ T7765] sock_sendmsg_nosec+0x112/0x150 [ 209.632530][ T7765] ____sys_sendmsg+0x55c/0x870 [ 209.632553][ T7765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.632580][ T7765] ? import_iovec+0x73/0xa0 [ 209.632602][ T7765] ___sys_sendmsg+0x2a5/0x360 [ 209.632619][ T7765] ? __lock_acquire+0x6b5/0x2d10 [ 209.632637][ T7765] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.632678][ T7765] ? __fget_files+0x2a/0x420 [ 209.632696][ T7765] ? __fget_files+0x3a6/0x420 [ 209.632719][ T7765] __x64_sys_sendmsg+0x1c3/0x2a0 [ 209.632740][ T7765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.632764][ T7765] ? __pfx_ksys_write+0x10/0x10 [ 209.632789][ T7765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.632804][ T7765] do_syscall_64+0x15f/0xf80 [ 209.632823][ T7765] ? trace_irq_disable+0x3b/0x140 [ 209.632843][ T7765] ? clear_bhb_loop+0x40/0x90 [ 209.632860][ T7765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.632875][ T7765] RIP: 0033:0x7f4b1997cdd9 [ 209.632889][ T7765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.632901][ T7765] RSP: 002b:00007f4b17bce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.632917][ T7765] RAX: ffffffffffffffda RBX: 00007f4b19bf5fa0 RCX: 00007f4b1997cdd9 [ 209.632928][ T7765] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 209.632937][ T7765] RBP: 00007f4b17bce090 R08: 0000000000000000 R09: 0000000000000000 [ 209.632946][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.632955][ T7765] R13: 00007f4b19bf6038 R14: 00007f4b19bf5fa0 R15: 00007ffc1a75db28 [ 209.632977][ T7765] [ 209.997071][ T9] xr_serial 1-1:150.204: skipping garbage [ 209.997124][ T9] xr_serial 1-1:150.204: xr_serial converter detected [ 210.074677][ T9] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 210.074738][ T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 210.119866][ T9] usb 1-1: USB disconnect, device number 37 [ 210.154809][ T9] xr_serial 1-1:150.204: device disconnected [ 210.285994][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 210.383971][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 210.466898][ T5600] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 210.648926][ T5600] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.648981][ T5600] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x48, changing to 0x8 [ 210.649008][ T5600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 210.649034][ T5600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 210.649055][ T5600] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 210.651336][ T5600] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 210.651366][ T5600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 210.651386][ T5600] usb 5-1: Product: syz [ 210.651396][ T5600] usb 5-1: Manufacturer: syz [ 210.651404][ T5600] usb 5-1: SerialNumber: syz [ 210.657178][ T5600] usb 5-1: config 0 descriptor?? [ 210.684684][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.664'. [ 210.720052][ T5600] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 210.720134][ T5600] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 210.722855][ T5600] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 210.793999][ T7794] nftables ruleset with unbound set [ 211.399629][ T7817] FAULT_INJECTION: forcing a failure. [ 211.399629][ T7817] name failslab, interval 1, probability 0, space 0, times 0 [ 211.399665][ T7817] CPU: 0 UID: 0 PID: 7817 Comm: syz.0.670 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 211.399692][ T7817] Tainted: [L]=SOFTLOCKUP [ 211.399699][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.399710][ T7817] Call Trace: [ 211.399717][ T7817] [ 211.399725][ T7817] dump_stack_lvl+0xe8/0x150 [ 211.399752][ T7817] should_fail_ex+0x46b/0x600 [ 211.399780][ T7817] should_failslab+0xa8/0x100 [ 211.399806][ T7817] __kmalloc_cache_noprof+0x84/0x690 [ 211.399832][ T7817] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 211.399856][ T7817] ? __request_module+0x2d0/0x630 [ 211.399880][ T7817] __request_module+0x2d0/0x630 [ 211.399906][ T7817] ? __pfx___request_module+0x10/0x10 [ 211.399923][ T7817] ? kasan_quarantine_put+0xbb/0x1f0 [ 211.399956][ T7817] ? security_capable+0x7e/0x2c0 [ 211.399982][ T7817] ? dev_load+0x21/0x1f0 [ 211.400001][ T7817] dev_load+0x190/0x1f0 [ 211.400019][ T7817] ? __pfx_ioctl_standard_call+0x10/0x10 [ 211.400044][ T7817] wext_ioctl_dispatch+0x9d/0x410 [ 211.400070][ T7817] wext_handle_ioctl+0x10f/0x1d0 [ 211.400096][ T7817] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 211.400132][ T7817] sock_ioctl+0x15c/0x7f0 [ 211.400161][ T7817] ? __pfx_sock_ioctl+0x10/0x10 [ 211.400187][ T7817] ? __fget_files+0x2a/0x420 [ 211.400208][ T7817] ? __fget_files+0x3a6/0x420 [ 211.400229][ T7817] ? __fget_files+0x2a/0x420 [ 211.400253][ T7817] ? bpf_lsm_file_ioctl+0x9/0x20 [ 211.400274][ T7817] ? __pfx_sock_ioctl+0x10/0x10 [ 211.400301][ T7817] __se_sys_ioctl+0xff/0x170 [ 211.400327][ T7817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.400347][ T7817] do_syscall_64+0x15f/0xf80 [ 211.400376][ T7817] ? trace_irq_disable+0x3b/0x140 [ 211.400402][ T7817] ? clear_bhb_loop+0x40/0x90 [ 211.400424][ T7817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.400442][ T7817] RIP: 0033:0x7f80526bcdd9 [ 211.400460][ T7817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.400476][ T7817] RSP: 002b:00007f8050916028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.400496][ T7817] RAX: ffffffffffffffda RBX: 00007f8052935fa0 RCX: 00007f80526bcdd9 [ 211.400520][ T7817] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000003 [ 211.400533][ T7817] RBP: 00007f8050916090 R08: 0000000000000000 R09: 0000000000000000 [ 211.400545][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.400557][ T7817] R13: 00007f8052936038 R14: 00007f8052935fa0 R15: 00007ffcdb962c08 [ 211.400586][ T7817] [ 211.572714][ T7822] FAULT_INJECTION: forcing a failure. [ 211.572714][ T7822] name failslab, interval 1, probability 0, space 0, times 0 [ 211.572750][ T7822] CPU: 0 UID: 0 PID: 7822 Comm: syz.0.672 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 211.572783][ T7822] Tainted: [L]=SOFTLOCKUP [ 211.572790][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.572801][ T7822] Call Trace: [ 211.572809][ T7822] [ 211.572816][ T7822] dump_stack_lvl+0xe8/0x150 [ 211.572842][ T7822] should_fail_ex+0x46b/0x600 [ 211.572869][ T7822] should_failslab+0xa8/0x100 [ 211.572895][ T7822] kmem_cache_alloc_noprof+0x87/0x680 [ 211.572920][ T7822] ? skb_clone+0x212/0x3a0 [ 211.572948][ T7822] skb_clone+0x212/0x3a0 [ 211.572975][ T7822] __netlink_deliver_tap+0x424/0x8b0 [ 211.573008][ T7822] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.573032][ T7822] netlink_deliver_tap+0x19c/0x1b0 [ 211.573056][ T7822] netlink_unicast+0x754/0x920 [ 211.573085][ T7822] netlink_sendmsg+0x813/0xb40 [ 211.573115][ T7822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.573140][ T7822] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 211.573173][ T7822] ? aa_sock_msg_perm+0x122/0x200 [ 211.573202][ T7822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.573224][ T7822] sock_sendmsg_nosec+0x112/0x150 [ 211.573245][ T7822] ____sys_sendmsg+0x55c/0x870 [ 211.573274][ T7822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.573321][ T7822] ? import_iovec+0x73/0xa0 [ 211.573350][ T7822] ___sys_sendmsg+0x2a5/0x360 [ 211.573372][ T7822] ? __lock_acquire+0x6b5/0x2d10 [ 211.573396][ T7822] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.573449][ T7822] ? __fget_files+0x2a/0x420 [ 211.573470][ T7822] ? __fget_files+0x3a6/0x420 [ 211.573499][ T7822] __x64_sys_sendmsg+0x1c3/0x2a0 [ 211.573524][ T7822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.573556][ T7822] ? __pfx_ksys_write+0x10/0x10 [ 211.573588][ T7822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.573608][ T7822] do_syscall_64+0x15f/0xf80 [ 211.573632][ T7822] ? trace_irq_disable+0x3b/0x140 [ 211.573657][ T7822] ? clear_bhb_loop+0x40/0x90 [ 211.573680][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.573699][ T7822] RIP: 0033:0x7f80526bcdd9 [ 211.573717][ T7822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.573732][ T7822] RSP: 002b:00007f8050916028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.573758][ T7822] RAX: ffffffffffffffda RBX: 00007f8052935fa0 RCX: 00007f80526bcdd9 [ 211.573772][ T7822] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 211.573784][ T7822] RBP: 00007f8050916090 R08: 0000000000000000 R09: 0000000000000000 [ 211.573796][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.573808][ T7822] R13: 00007f8052936038 R14: 00007f8052935fa0 R15: 00007ffcdb962c08 [ 211.573841][ T7822] [ 212.254701][ T7837] autofs: Bad value for 'fd' [ 212.286940][ T5697] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 212.467846][ T5697] usb 4-1: Using ep0 maxpacket: 16 [ 212.473379][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.473403][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.473415][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 212.473440][ T5697] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 212.473453][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.535270][ T5697] usb 4-1: config 0 descriptor?? [ 213.000982][ T5697] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0005/input/input14 [ 213.070351][ T7841] syzkaller1: entered promiscuous mode [ 213.070370][ T7841] syzkaller1: entered allmulticast mode [ 213.173949][ T7775] syz.4.656 (7775) used greatest stack depth: 17280 bytes left [ 213.174681][ T7802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.358237][ T5697] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 213.526198][ T5697] usb 5-1: USB disconnect, device number 2 [ 213.601813][ T7850] netlink: 'syz.4.679': attribute type 6 has an invalid length. [ 213.601829][ T7850] netlink: 168 bytes leftover after parsing attributes in process `syz.4.679'. [ 213.751539][ T7848] tipc: Enabling of bearer rejected, failed to enable media [ 213.754532][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.780215][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.800485][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.801040][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.873545][ T7858] FAULT_INJECTION: forcing a failure. [ 213.873545][ T7858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.873576][ T7858] CPU: 1 UID: 0 PID: 7858 Comm: syz.4.681 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 213.873608][ T7858] Tainted: [L]=SOFTLOCKUP [ 213.873613][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.873621][ T7858] Call Trace: [ 213.873627][ T7858] [ 213.873634][ T7858] dump_stack_lvl+0xe8/0x150 [ 213.873654][ T7858] should_fail_ex+0x46b/0x600 [ 213.873676][ T7858] _copy_to_user+0x31/0xb0 [ 213.873699][ T7858] simple_read_from_buffer+0xe1/0x170 [ 213.873721][ T7858] proc_fail_nth_read+0x1be/0x230 [ 213.873742][ T7858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.873764][ T7858] ? rw_verify_area+0x2ac/0x4e0 [ 213.873785][ T7858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.873806][ T7858] vfs_read+0x212/0xa80 [ 213.873830][ T7858] ? __pfx_vfs_read+0x10/0x10 [ 213.873849][ T7858] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 213.873869][ T7858] ? lockdep_hardirqs_on+0x7a/0x110 [ 213.873889][ T7858] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 213.873908][ T7858] ? mutex_lock_nested+0x152/0x1d0 [ 213.873922][ T7858] ? fdget_pos+0x252/0x320 [ 213.873946][ T7858] ksys_read+0x156/0x270 [ 213.873966][ T7858] ? __pfx_ksys_read+0x10/0x10 [ 213.873989][ T7858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.874005][ T7858] do_syscall_64+0x15f/0xf80 [ 213.874025][ T7858] ? clear_bhb_loop+0x40/0x90 [ 213.874043][ T7858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.874058][ T7858] RIP: 0033:0x7f4b1993d60e [ 213.874075][ T7858] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.874088][ T7858] RSP: 002b:00007f4b17bcdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.874105][ T7858] RAX: ffffffffffffffda RBX: 00007f4b17bce6c0 RCX: 00007f4b1993d60e [ 213.874115][ T7858] RDX: 000000000000000f RSI: 00007f4b17bce0a0 RDI: 0000000000000004 [ 213.874124][ T7858] RBP: 00007f4b17bce090 R08: 0000000000000000 R09: 0000000000000000 [ 213.874133][ T7858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.874141][ T7858] R13: 00007f4b19bf6038 R14: 00007f4b19bf5fa0 R15: 00007ffc1a75db28 [ 213.874164][ T7858] [ 214.419219][ T7869] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 214.507623][ T7873] autofs: Bad value for 'fd' [ 214.864483][ T7884] FAULT_INJECTION: forcing a failure. [ 214.864483][ T7884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.864518][ T7884] CPU: 1 UID: 0 PID: 7884 Comm: syz.0.690 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 214.864543][ T7884] Tainted: [L]=SOFTLOCKUP [ 214.864548][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 214.864557][ T7884] Call Trace: [ 214.864562][ T7884] [ 214.864568][ T7884] dump_stack_lvl+0xe8/0x150 [ 214.864590][ T7884] should_fail_ex+0x46b/0x600 [ 214.864611][ T7884] _copy_from_iter+0x1d3/0x1670 [ 214.864635][ T7884] ? trace_kmem_cache_alloc+0x29/0xe0 [ 214.864654][ T7884] ? __alloc_skb+0x27d/0x7d0 [ 214.864672][ T7884] ? __pfx__copy_from_iter+0x10/0x10 [ 214.864689][ T7884] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 214.864707][ T7884] ? __alloc_skb+0x27d/0x7d0 [ 214.864726][ T7884] ? netlink_sendmsg+0x650/0xb40 [ 214.864743][ T7884] ? skb_put+0x11b/0x210 [ 214.864761][ T7884] netlink_sendmsg+0x6c0/0xb40 [ 214.864785][ T7884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.864803][ T7884] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 214.864830][ T7884] ? aa_sock_msg_perm+0x122/0x200 [ 214.864852][ T7884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.864869][ T7884] sock_sendmsg_nosec+0x112/0x150 [ 214.864886][ T7884] ____sys_sendmsg+0x55c/0x870 [ 214.864910][ T7884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.864935][ T7884] ? import_iovec+0x73/0xa0 [ 214.864957][ T7884] ___sys_sendmsg+0x2a5/0x360 [ 214.864975][ T7884] ? __lock_acquire+0x6b5/0x2d10 [ 214.864993][ T7884] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.865033][ T7884] ? __fget_files+0x2a/0x420 [ 214.865053][ T7884] ? __fget_files+0x3a6/0x420 [ 214.865077][ T7884] __x64_sys_sendmsg+0x1c3/0x2a0 [ 214.865096][ T7884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.865121][ T7884] ? __pfx_ksys_write+0x10/0x10 [ 214.865146][ T7884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.865161][ T7884] do_syscall_64+0x15f/0xf80 [ 214.865181][ T7884] ? trace_irq_disable+0x3b/0x140 [ 214.865201][ T7884] ? clear_bhb_loop+0x40/0x90 [ 214.865220][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.865235][ T7884] RIP: 0033:0x7f80526bcdd9 [ 214.865259][ T7884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.865273][ T7884] RSP: 002b:00007f8050916028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.865292][ T7884] RAX: ffffffffffffffda RBX: 00007f8052935fa0 RCX: 00007f80526bcdd9 [ 214.865304][ T7884] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003 [ 214.865314][ T7884] RBP: 00007f8050916090 R08: 0000000000000000 R09: 0000000000000000 [ 214.865325][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.865335][ T7884] R13: 00007f8052936038 R14: 00007f8052935fa0 R15: 00007ffcdb962c08 [ 214.865360][ T7884] [ 215.409907][ T5809] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 215.547792][ T5704] usb 4-1: reset high-speed USB device number 24 using dummy_hcd [ 215.567493][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 215.592994][ T5809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.595146][ T5809] usb 2-1: config 4 has an invalid interface number: 128 but max is 2 [ 215.595171][ T5809] usb 2-1: config 4 has an invalid interface number: 8 but max is 2 [ 215.595191][ T5809] usb 2-1: config 4 has an invalid interface number: 255 but max is 2 [ 215.595210][ T5809] usb 2-1: config 4 has no interface number 0 [ 215.595230][ T5809] usb 2-1: config 4 has no interface number 1 [ 215.595246][ T5809] usb 2-1: config 4 has no interface number 2 [ 215.595298][ T5809] usb 2-1: config 4 interface 128 has no altsetting 0 [ 215.595316][ T5809] usb 2-1: config 4 interface 8 has no altsetting 0 [ 215.595332][ T5809] usb 2-1: config 4 interface 255 has no altsetting 0 [ 215.604910][ T5809] usb 2-1: New USB device found, idVendor=1410, idProduct=a008, bcdDevice=1a.26 [ 215.604938][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.604958][ T5809] usb 2-1: Product: syz [ 215.604972][ T5809] usb 2-1: Manufacturer: syz [ 215.604987][ T5809] usb 2-1: SerialNumber: syz [ 215.757993][ T7894] FAULT_INJECTION: forcing a failure. [ 215.757993][ T7894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.758084][ T7894] CPU: 0 UID: 0 PID: 7894 Comm: syz.0.694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 215.758111][ T7894] Tainted: [L]=SOFTLOCKUP [ 215.758118][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.758129][ T7894] Call Trace: [ 215.758137][ T7894] [ 215.758145][ T7894] dump_stack_lvl+0xe8/0x150 [ 215.758173][ T7894] should_fail_ex+0x46b/0x600 [ 215.758204][ T7894] _copy_from_iter+0x1d3/0x1670 [ 215.758236][ T7894] ? trace_kmem_cache_alloc+0x29/0xe0 [ 215.758260][ T7894] ? __alloc_skb+0x27d/0x7d0 [ 215.758283][ T7894] ? __pfx__copy_from_iter+0x10/0x10 [ 215.758305][ T7894] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 215.758329][ T7894] ? __alloc_skb+0x27d/0x7d0 [ 215.758355][ T7894] ? netlink_sendmsg+0x650/0xb40 [ 215.758377][ T7894] ? skb_put+0x11b/0x210 [ 215.758403][ T7894] netlink_sendmsg+0x6c0/0xb40 [ 215.758440][ T7894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.758465][ T7894] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 215.758507][ T7894] ? aa_sock_msg_perm+0x122/0x200 [ 215.758535][ T7894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.758557][ T7894] sock_sendmsg_nosec+0x112/0x150 [ 215.758580][ T7894] ____sys_sendmsg+0x55c/0x870 [ 215.758609][ T7894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.758641][ T7894] ? import_iovec+0x73/0xa0 [ 215.758670][ T7894] ___sys_sendmsg+0x2a5/0x360 [ 215.758693][ T7894] ? __lock_acquire+0x6b5/0x2d10 [ 215.758716][ T7894] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.758771][ T7894] ? __fget_files+0x2a/0x420 [ 215.758793][ T7894] ? __fget_files+0x3a6/0x420 [ 215.758824][ T7894] __x64_sys_sendmsg+0x1c3/0x2a0 [ 215.758851][ T7894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.758883][ T7894] ? __pfx_ksys_write+0x10/0x10 [ 215.758915][ T7894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.758937][ T7894] do_syscall_64+0x15f/0xf80 [ 215.758961][ T7894] ? trace_irq_disable+0x3b/0x140 [ 215.758988][ T7894] ? clear_bhb_loop+0x40/0x90 [ 215.759011][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.759031][ T7894] RIP: 0033:0x7f80526bcdd9 [ 215.759049][ T7894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.759065][ T7894] RSP: 002b:00007f8050916028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.759086][ T7894] RAX: ffffffffffffffda RBX: 00007f8052935fa0 RCX: 00007f80526bcdd9 [ 215.759101][ T7894] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 215.759113][ T7894] RBP: 00007f8050916090 R08: 0000000000000000 R09: 0000000000000000 [ 215.759125][ T7894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.759137][ T7894] R13: 00007f8052936038 R14: 00007f8052935fa0 R15: 00007ffcdb962c08 [ 215.759167][ T7894] [ 216.095138][ T7898] autofs: Bad value for 'fd' [ 216.156988][ T5704] usb 4-1: device firmware changed [ 216.227853][ T5600] usb 4-1: USB disconnect, device number 24 [ 216.242806][ T5809] usb 2-1: USB disconnect, device number 23 [ 216.286316][ T7903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.697'. [ 217.305357][ T7920] FAULT_INJECTION: forcing a failure. [ 217.305357][ T7920] name failslab, interval 1, probability 0, space 0, times 0 [ 217.305394][ T7920] CPU: 1 UID: 0 PID: 7920 Comm: syz.1.700 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 217.305420][ T7920] Tainted: [L]=SOFTLOCKUP [ 217.305427][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.305437][ T7920] Call Trace: [ 217.305445][ T7920] [ 217.305453][ T7920] dump_stack_lvl+0xe8/0x150 [ 217.305480][ T7920] should_fail_ex+0x46b/0x600 [ 217.305506][ T7920] should_failslab+0xa8/0x100 [ 217.305533][ T7920] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 217.305556][ T7920] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 217.305577][ T7920] ? dup_task_struct+0x52/0x840 [ 217.305609][ T7920] dup_task_struct+0x52/0x840 [ 217.305633][ T7920] ? rt_spin_unlock+0x160/0x200 [ 217.305657][ T7920] copy_process+0x89b/0x4450 [ 217.305712][ T7920] ? __pfx_copy_process+0x10/0x10 [ 217.305750][ T7920] vhost_task_create+0x1f9/0x380 [ 217.305771][ T7920] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 217.305801][ T7920] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 217.305830][ T7920] ? __pfx_vhost_task_create+0x10/0x10 [ 217.305857][ T7920] ? __pfx_vhost_task_fn+0x10/0x10 [ 217.305881][ T7920] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 217.305906][ T7920] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.305931][ T7920] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.305956][ T7920] ? mutex_lock_nested+0x152/0x1d0 [ 217.305976][ T7920] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 217.306006][ T7920] kvm_mmu_post_init_vm+0x147/0x2d0 [ 217.306036][ T7920] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 217.306080][ T7920] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 217.306105][ T7920] ? do_raw_spin_lock+0x12b/0x2f0 [ 217.306143][ T7920] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 217.306168][ T7920] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.306192][ T7920] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.306218][ T7920] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 217.306245][ T7920] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 217.306268][ T7920] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 217.306293][ T7920] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.306317][ T7920] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.306342][ T7920] ? rt_write_unlock+0x190/0x230 [ 217.306366][ T7920] kvm_vcpu_ioctl+0xa65/0xfe0 [ 217.306399][ T7920] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 217.306442][ T7920] ? __fget_files+0x2a/0x420 [ 217.306466][ T7920] ? __fget_files+0x2a/0x420 [ 217.306485][ T7920] ? __fget_files+0x3a6/0x420 [ 217.306505][ T7920] ? __fget_files+0x2a/0x420 [ 217.306530][ T7920] ? bpf_lsm_file_ioctl+0x9/0x20 [ 217.306550][ T7920] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 217.306576][ T7920] __se_sys_ioctl+0xff/0x170 [ 217.306602][ T7920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.306623][ T7920] do_syscall_64+0x15f/0xf80 [ 217.306644][ T7920] ? trace_irq_disable+0x3b/0x140 [ 217.306669][ T7920] ? clear_bhb_loop+0x40/0x90 [ 217.306692][ T7920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.306709][ T7920] RIP: 0033:0x7f4e2f4dcdd9 [ 217.306727][ T7920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.306744][ T7920] RSP: 002b:00007f4e2d715028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.306764][ T7920] RAX: ffffffffffffffda RBX: 00007f4e2f756090 RCX: 00007f4e2f4dcdd9 [ 217.306779][ T7920] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 217.306790][ T7920] RBP: 00007f4e2d715090 R08: 0000000000000000 R09: 0000000000000000 [ 217.306803][ T7920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.306815][ T7920] R13: 00007f4e2f756128 R14: 00007f4e2f756090 R15: 00007ffdfcf4f818 [ 217.306846][ T7920] [ 217.358071][ T5600] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 217.506763][ T5600] usb 4-1: Using ep0 maxpacket: 16 [ 217.510327][ T5600] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.510352][ T5600] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.513120][ T5600] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.513147][ T5600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.513166][ T5600] usb 4-1: Product: syz [ 217.513178][ T5600] usb 4-1: Manufacturer: syz [ 217.513192][ T5600] usb 4-1: SerialNumber: syz [ 217.532350][ T5600] usb 4-1: 0:2 : does not exist [ 217.781604][ T5600] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 218.004676][ T5600] usb 4-1: USB disconnect, device number 25 [ 218.236049][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.619866][ T5717] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 218.696884][ T5618] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 218.697131][ T5618] Bluetooth: hci0: Injecting HCI hardware error event [ 218.707684][ T5626] Bluetooth: hci0: hardware error 0x00 [ 218.773201][ T5717] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.774128][ T5717] usb 2-1: not running at top speed; connect to a high speed hub [ 218.780900][ T5717] usb 2-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 218.780925][ T5717] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.796838][ T5717] usb 2-1: string descriptor 0 read error: -22 [ 218.796966][ T5717] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.796990][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.918047][ T5717] usb 2-1: 0:2 : does not exist [ 219.412766][ T7985] ipvlan0: entered allmulticast mode [ 219.412789][ T7985] veth0_vlan: entered allmulticast mode [ 219.416394][ T7985] netlink: 36 bytes leftover after parsing attributes in process `syz.3.716'. [ 219.416416][ T7985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.716'. [ 220.078976][ T8001] FAULT_INJECTION: forcing a failure. [ 220.078976][ T8001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.079014][ T8001] CPU: 1 UID: 0 PID: 8001 Comm: syz.4.718 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 220.079041][ T8001] Tainted: [L]=SOFTLOCKUP [ 220.079047][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 220.079057][ T8001] Call Trace: [ 220.079065][ T8001] [ 220.079073][ T8001] dump_stack_lvl+0xe8/0x150 [ 220.079101][ T8001] should_fail_ex+0x46b/0x600 [ 220.079130][ T8001] _copy_from_user+0x2d/0xb0 [ 220.079157][ T8001] kstrtouint_from_user+0xd6/0x180 [ 220.079181][ T8001] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 220.079219][ T8001] proc_fail_nth_write+0x8e/0x210 [ 220.079243][ T8001] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 220.079270][ T8001] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 220.079295][ T8001] vfs_write+0x2a3/0xba0 [ 220.079329][ T8001] ? __pfx_vfs_write+0x10/0x10 [ 220.079356][ T8001] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 220.079383][ T8001] ? lockdep_hardirqs_on+0x7a/0x110 [ 220.079408][ T8001] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 220.079432][ T8001] ? mutex_lock_nested+0x152/0x1d0 [ 220.079451][ T8001] ? fdget_pos+0x252/0x320 [ 220.079482][ T8001] ksys_write+0x156/0x270 [ 220.079509][ T8001] ? __pfx_ksys_write+0x10/0x10 [ 220.079541][ T8001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.079561][ T8001] do_syscall_64+0x15f/0xf80 [ 220.079641][ T8001] ? trace_irq_disable+0x3b/0x140 [ 220.079669][ T8001] ? clear_bhb_loop+0x40/0x90 [ 220.079693][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.079712][ T8001] RIP: 0033:0x7f4b1993d60e [ 220.079731][ T8001] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.079751][ T8001] RSP: 002b:00007f4b17bacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.079772][ T8001] RAX: ffffffffffffffda RBX: 00007f4b17bad6c0 RCX: 00007f4b1993d60e [ 220.079786][ T8001] RDX: 0000000000000001 RSI: 00007f4b17bad0a0 RDI: 0000000000000005 [ 220.079799][ T8001] RBP: 00007f4b17bad090 R08: 0000000000000000 R09: 0000000000000000 [ 220.079811][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.079823][ T8001] R13: 00007f4b19bf6128 R14: 00007f4b19bf6090 R15: 00007ffc1a75db28 [ 220.079852][ T8001] [ 220.336879][ T5697] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 220.496967][ T5697] usb 4-1: Using ep0 maxpacket: 8 [ 220.508742][ T5697] usb 4-1: config 0 has an invalid interface number: 88 but max is 3 [ 220.508770][ T5697] usb 4-1: config 0 has an invalid interface number: 250 but max is 3 [ 220.508810][ T5697] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.508829][ T5697] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 220.508850][ T5697] usb 4-1: config 0 has no interface number 0 [ 220.508866][ T5697] usb 4-1: config 0 has no interface number 1 [ 220.508923][ T5697] usb 4-1: config 0 interface 88 has no altsetting 0 [ 220.508941][ T5697] usb 4-1: config 0 interface 250 has no altsetting 0 [ 220.508973][ T5697] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 220.508996][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.619203][ T5697] usb 4-1: config 0 descriptor?? [ 220.830452][ T5697] usb 4-1: string descriptor 0 read error: -71 [ 220.871845][ T5697] usb 4-1: selecting invalid altsetting 0 [ 220.871870][ T5697] usb 4-1: Could not set interface, error -22 [ 220.895623][ T5697] usb 4-1: USB disconnect, device number 26 [ 220.995141][ T8016] option changes via remount are deprecated (pid=8015 comm=syz.4.721) [ 221.035324][ T5717] usb 2-1: 5:0: bogus dB values (-11873/-10690), disabling dB reporting [ 221.047262][ T5717] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 221.074571][ T5717] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 221.088209][ T5717] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 221.109007][ T5626] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 221.285868][ T5717] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 221.468603][ T5717] usb 2-1: USB disconnect, device number 24 [ 221.558910][ T8034] FAULT_INJECTION: forcing a failure. [ 221.558910][ T8034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.558946][ T8034] CPU: 0 UID: 0 PID: 8034 Comm: syz.4.725 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 221.558972][ T8034] Tainted: [L]=SOFTLOCKUP [ 221.558979][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.558990][ T8034] Call Trace: [ 221.558997][ T8034] [ 221.559006][ T8034] dump_stack_lvl+0xe8/0x150 [ 221.559032][ T8034] should_fail_ex+0x46b/0x600 [ 221.559058][ T8034] _copy_from_iter+0x1d3/0x1670 [ 221.559086][ T8034] ? sock_alloc_send_pskb+0x8a2/0x9a0 [ 221.559116][ T8034] ? __pfx__copy_from_iter+0x10/0x10 [ 221.559148][ T8034] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 221.559177][ T8034] skb_copy_datagram_from_iter+0xf5/0x710 [ 221.559205][ T8034] ? dev_get_by_index+0x22/0x2f0 [ 221.559230][ T8034] ? skb_put+0x11b/0x210 [ 221.559256][ T8034] packet_sendmsg+0x35be/0x4fd0 [ 221.559296][ T8034] ? __lock_acquire+0x6b5/0x2d10 [ 221.559322][ T8034] ? __lock_acquire+0x6b5/0x2d10 [ 221.559354][ T8034] ? __pfx_packet_sendmsg+0x10/0x10 [ 221.559384][ T8034] ? aa_sk_perm+0x703/0x950 [ 221.559417][ T8034] ? __pfx_aa_sk_perm+0x10/0x10 [ 221.559440][ T8034] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 221.559472][ T8034] ? aa_sock_msg_perm+0x122/0x200 [ 221.559499][ T8034] ? __pfx_packet_sendmsg+0x10/0x10 [ 221.559520][ T8034] sock_sendmsg_nosec+0x112/0x150 [ 221.559541][ T8034] __sys_sendto+0x402/0x590 [ 221.559569][ T8034] ? __pfx___sys_sendto+0x10/0x10 [ 221.559614][ T8034] ? ksys_write+0x248/0x270 [ 221.559641][ T8034] ? __pfx_ksys_write+0x10/0x10 [ 221.559671][ T8034] __x64_sys_sendto+0xde/0x100 [ 221.559694][ T8034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.559715][ T8034] do_syscall_64+0x15f/0xf80 [ 221.559741][ T8034] ? trace_irq_disable+0x3b/0x140 [ 221.559768][ T8034] ? clear_bhb_loop+0x40/0x90 [ 221.559799][ T8034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.559818][ T8034] RIP: 0033:0x7f4b1997cdd9 [ 221.559837][ T8034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.559855][ T8034] RSP: 002b:00007f4b17bce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 221.559877][ T8034] RAX: ffffffffffffffda RBX: 00007f4b19bf5fa0 RCX: 00007f4b1997cdd9 [ 221.559892][ T8034] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 221.559905][ T8034] RBP: 00007f4b17bce090 R08: 00002000000000c0 R09: 0000000000000014 [ 221.559919][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.559932][ T8034] R13: 00007f4b19bf6038 R14: 00007f4b19bf5fa0 R15: 00007ffc1a75db28 [ 221.559962][ T8034] [ 221.881200][ T5600] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 222.036753][ T5600] usb 4-1: Using ep0 maxpacket: 16 [ 222.043196][ T5600] usb 4-1: config index 0 descriptor too short (expected 46593, got 71) [ 222.043227][ T5600] usb 4-1: config 0 has too many interfaces: 158, using maximum allowed: 32 [ 222.050520][ T5600] usb 4-1: config 0 has an invalid descriptor of length 58, skipping remainder of the config [ 222.050554][ T5600] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 158 [ 222.050577][ T5600] usb 4-1: config 0 has no interface number 0 [ 222.059149][ T5600] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 222.059179][ T5600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.059200][ T5600] usb 4-1: Product: syz [ 222.059215][ T5600] usb 4-1: Manufacturer: syz [ 222.059230][ T5600] usb 4-1: SerialNumber: syz [ 222.100098][ T5600] usb 4-1: config 0 descriptor?? [ 222.124959][ T5600] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22 [ 222.165416][ T8047] FAULT_INJECTION: forcing a failure. [ 222.165416][ T8047] name failslab, interval 1, probability 0, space 0, times 0 [ 222.165453][ T8047] CPU: 1 UID: 0 PID: 8047 Comm: syz.0.731 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 222.165479][ T8047] Tainted: [L]=SOFTLOCKUP [ 222.165486][ T8047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.165497][ T8047] Call Trace: [ 222.165505][ T8047] [ 222.165514][ T8047] dump_stack_lvl+0xe8/0x150 [ 222.165541][ T8047] should_fail_ex+0x46b/0x600 [ 222.165570][ T8047] should_failslab+0xa8/0x100 [ 222.165598][ T8047] kmem_cache_alloc_noprof+0x87/0x680 [ 222.165623][ T8047] ? skb_clone+0x212/0x3a0 [ 222.165654][ T8047] skb_clone+0x212/0x3a0 [ 222.165694][ T8047] __netlink_deliver_tap+0x424/0x8b0 [ 222.165731][ T8047] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.165757][ T8047] netlink_deliver_tap+0x19c/0x1b0 [ 222.165790][ T8047] netlink_unicast+0x754/0x920 [ 222.165822][ T8047] netlink_sendmsg+0x813/0xb40 [ 222.165855][ T8047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.165882][ T8047] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 222.165917][ T8047] ? aa_sock_msg_perm+0x122/0x200 [ 222.165945][ T8047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.165968][ T8047] sock_sendmsg_nosec+0x112/0x150 [ 222.165991][ T8047] ____sys_sendmsg+0x55c/0x870 [ 222.166022][ T8047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.166056][ T8047] ? import_iovec+0x73/0xa0 [ 222.166085][ T8047] ___sys_sendmsg+0x2a5/0x360 [ 222.166109][ T8047] ? __lock_acquire+0x6b5/0x2d10 [ 222.166138][ T8047] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.166197][ T8047] ? __fget_files+0x2a/0x420 [ 222.166219][ T8047] ? __fget_files+0x3a6/0x420 [ 222.166252][ T8047] __x64_sys_sendmsg+0x1c3/0x2a0 [ 222.166280][ T8047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.166312][ T8047] ? __pfx_ksys_write+0x10/0x10 [ 222.166344][ T8047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.166365][ T8047] do_syscall_64+0x15f/0xf80 [ 222.166391][ T8047] ? trace_irq_disable+0x3b/0x140 [ 222.166417][ T8047] ? clear_bhb_loop+0x40/0x90 [ 222.166439][ T8047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.166457][ T8047] RIP: 0033:0x7f80526bcdd9 [ 222.166476][ T8047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.166493][ T8047] RSP: 002b:00007f8050916028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.166515][ T8047] RAX: ffffffffffffffda RBX: 00007f8052935fa0 RCX: 00007f80526bcdd9 [ 222.166529][ T8047] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 222.166542][ T8047] RBP: 00007f8050916090 R08: 0000000000000000 R09: 0000000000000000 [ 222.166554][ T8047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.166568][ T8047] R13: 00007f8052936038 R14: 00007f8052935fa0 R15: 00007ffcdb962c08 [ 222.166598][ T8047] [ 222.310823][ T5600] usb 4-1: USB disconnect, device number 27 [ 222.422765][ T8054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.732'. [ 222.648393][ T38] audit: type=1326 audit(1778120322.034:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8058 comm="syz.0.736" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80526bcdd9 code=0x0 [ 223.138333][ T5704] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 223.313093][ T5704] usb 4-1: unable to get BOS descriptor or descriptor too short [ 223.314418][ T5704] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 223.314445][ T5704] usb 4-1: config 1 has no interface number 0 [ 223.314489][ T5704] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 223.314522][ T5704] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 223.314562][ T5704] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 223.376368][ T5704] usb 4-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice= 0.40 [ 223.376401][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.376423][ T5704] usb 4-1: Product: syz [ 223.376439][ T5704] usb 4-1: Manufacturer: syz [ 223.376455][ T5704] usb 4-1: SerialNumber: syz [ 223.525225][ T8078] FAULT_INJECTION: forcing a failure. [ 223.525225][ T8078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.525251][ T8078] CPU: 1 UID: 0 PID: 8078 Comm: syz.0.743 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 223.525267][ T8078] Tainted: [L]=SOFTLOCKUP [ 223.525272][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.525279][ T8078] Call Trace: [ 223.525284][ T8078] [ 223.525289][ T8078] dump_stack_lvl+0xe8/0x150 [ 223.525308][ T8078] should_fail_ex+0x46b/0x600 [ 223.525325][ T8078] _copy_from_iter+0x1d3/0x1670 [ 223.525347][ T8078] ? trace_kmem_cache_alloc+0x29/0xe0 [ 223.525362][ T8078] ? __alloc_skb+0x27d/0x7d0 [ 223.525376][ T8078] ? __pfx__copy_from_iter+0x10/0x10 [ 223.525390][ T8078] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 223.525405][ T8078] ? __alloc_skb+0x27d/0x7d0 [ 223.525420][ T8078] ? netlink_sendmsg+0x650/0xb40 [ 223.525434][ T8078] ? skb_put+0x11b/0x210 [ 223.525449][ T8078] netlink_sendmsg+0x6c0/0xb40 [ 223.525467][ T8078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.525482][ T8078] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 223.525502][ T8078] ? aa_sock_msg_perm+0x122/0x200 [ 223.525518][ T8078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.525532][ T8078] sock_sendmsg_nosec+0x112/0x150 [ 223.525545][ T8078] ____sys_sendmsg+0x55c/0x870 [ 223.525565][ T8078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.525593][ T8078] ? import_iovec+0x73/0xa0 [ 223.525626][ T8078] ___sys_sendmsg+0x2a5/0x360 [ 223.525648][ T8078] ? __lock_acquire+0x6b5/0x2d10 [ 223.525670][ T8078] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.525717][ T8078] ? __fget_files+0x2a/0x420 [ 223.525739][ T8078] ? __fget_files+0x3a6/0x420 [ 223.525770][ T8078] __x64_sys_sendmsg+0x1c3/0x2a0 [ 223.525794][ T8078] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.525826][ T8078] ? __pfx_ksys_write+0x10/0x10 [ 223.525868][ T8078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.525889][ T8078] do_syscall_64+0x15f/0xf80 [ 223.525913][ T8078] ? trace_irq_disable+0x3b/0x140 [ 223.525939][ T8078] ? clear_bhb_loop+0x40/0x90 [ 223.525962][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.525981][ T8078] RIP: 0033:0x7f80526bcdd9 [ 223.525998][ T8078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.526015][ T8078] RSP: 002b:00007f8050916028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.526034][ T8078] RAX: ffffffffffffffda RBX: 00007f8052935fa0 RCX: 00007f80526bcdd9 [ 223.526047][ T8078] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 223.526060][ T8078] RBP: 00007f8050916090 R08: 0000000000000000 R09: 0000000000000000 [ 223.526073][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.526086][ T8078] R13: 00007f8052936038 R14: 00007f8052935fa0 R15: 00007ffcdb962c08 [ 223.526113][ T8078] [ 223.648887][ T38] audit: type=1326 audit(1778120323.044:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8066 comm="syz.3.738" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde7765cdd9 code=0x0 [ 223.751307][ T8082] FAULT_INJECTION: forcing a failure. [ 223.751307][ T8082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.751345][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.0.745 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 223.751371][ T8082] Tainted: [L]=SOFTLOCKUP [ 223.751378][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.751390][ T8082] Call Trace: [ 223.751398][ T8082] [ 223.751407][ T8082] dump_stack_lvl+0xe8/0x150 [ 223.751437][ T8082] should_fail_ex+0x46b/0x600 [ 223.751466][ T8082] _copy_to_user+0x31/0xb0 [ 223.751495][ T8082] simple_read_from_buffer+0xe1/0x170 [ 223.751523][ T8082] proc_fail_nth_read+0x1be/0x230 [ 223.751560][ T8082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.751588][ T8082] ? rw_verify_area+0x2ac/0x4e0 [ 223.751613][ T8082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 223.751636][ T8082] vfs_read+0x212/0xa80 [ 223.751668][ T8082] ? __pfx_vfs_read+0x10/0x10 [ 223.751694][ T8082] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 223.751721][ T8082] ? lockdep_hardirqs_on+0x7a/0x110 [ 223.751747][ T8082] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 223.751771][ T8082] ? mutex_lock_nested+0x152/0x1d0 [ 223.751791][ T8082] ? fdget_pos+0x252/0x320 [ 223.751821][ T8082] ksys_read+0x156/0x270 [ 223.751847][ T8082] ? __pfx_ksys_read+0x10/0x10 [ 223.751881][ T8082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.751902][ T8082] do_syscall_64+0x15f/0xf80 [ 223.751926][ T8082] ? trace_irq_disable+0x3b/0x140 [ 223.751952][ T8082] ? clear_bhb_loop+0x40/0x90 [ 223.751975][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.751994][ T8082] RIP: 0033:0x7f805267d60e [ 223.752014][ T8082] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 223.752031][ T8082] RSP: 002b:00007f8050915fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 223.752052][ T8082] RAX: ffffffffffffffda RBX: 00007f80509166c0 RCX: 00007f805267d60e [ 223.752066][ T8082] RDX: 000000000000000f RSI: 00007f80509160a0 RDI: 0000000000000004 [ 223.752080][ T8082] RBP: 00007f8050916090 R08: 0000000000000000 R09: 0000000000000000 [ 223.752093][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.752106][ T8082] R13: 00007f8052936038 R14: 00007f8052935fa0 R15: 00007ffcdb962c08 [ 223.752136][ T8082] [ 223.786615][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.793089][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.873440][ T5762] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 224.110979][ T5762] usb 5-1: device descriptor read/64, error -71 [ 224.112879][ T5704] usb 4-1: 1:0 : does not exist [ 224.112953][ T5704] usb 4-1: BAAD SPEAKERPHONE c_chmask mismatch [ 224.188866][ T5704] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 224.191350][ T5704] snd-usb-caiaq 4-1:1.1: can't set alt interface. [ 224.191371][ T5704] usb 4-1: unable to init card! (ret=-5) [ 224.193070][ T5704] snd-usb-caiaq 4-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 224.264065][ T5704] snd-usb-caiaq 4-1:1.2: can't set alt interface. [ 224.264091][ T5704] usb 4-1: unable to init card! (ret=-5) [ 224.280197][ T5704] snd-usb-caiaq 4-1:1.2: probe with driver snd-usb-caiaq failed with error -5 [ 224.302929][ T5704] usb 4-1: USB disconnect, device number 28 [ 224.338255][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.395925][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.429509][ T5762] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 224.556800][ T5762] usb 5-1: device descriptor read/64, error -71 [ 224.598604][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.645964][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.664653][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.685523][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.685888][ T5762] usb usb5-port1: attempt power cycle [ 224.733954][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.897924][ C1] BUG: workqueue function usb_giveback_urb_bh changed kcov_mode from 0 to 2 [ 224.899243][ C1] BUG: workqueue function usb_giveback_urb_bh changed kcov_mode from 2 to 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 225.237537][ T5762] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 225.263976][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.275149][ T5762] usb 5-1: device descriptor read/8, error -71 [ 225.522400][ T5762] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 225.932728][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.890022][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.970905][ T5762] usb 5-1: device descriptor read/8, error -71 [ 228.079773][ T5762] usb usb5-port1: unable to enumerate USB device [ 228.357404][ T13] bridge_slave_1: left allmulticast mode [ 228.357441][ T13] bridge_slave_1: left promiscuous mode [ 228.360173][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.442033][ T13] bridge_slave_0: left allmulticast mode [ 228.442092][ T13] bridge_slave_0: left promiscuous mode [ 228.442354][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.177442][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.257693][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.278617][ T13] bond0 (unregistering): Released all slaves [ 229.319156][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 229.962232][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 230.186818][ T13] hsr_slave_0: left promiscuous mode [ 230.226850][ T13] hsr_slave_1: left promiscuous mode [ 230.227954][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.227980][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.267983][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.268014][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.349080][ T13] veth1_macvtap: left promiscuous mode [ 230.349183][ T13] veth0_macvtap: left promiscuous mode [ 230.349462][ T13] veth1_vlan: left promiscuous mode [ 230.372606][ T13] veth0_vlan: left promiscuous mode [ 231.113564][ T13] team0 (unregistering): Port device team_slave_1 removed [ 231.167558][ T13] team0 (unregistering): Port device team_slave_0 removed [ 231.340759][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 231.825361][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8 [ 232.645851][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.893021][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.131934][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.333031][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.893383][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.174058][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.214782][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 234.483142][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.781804][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.810133][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10