last executing test programs: 1m7.315340804s ago: executing program 3 (id=81): syz_usb_connect(0x0, 0x4c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff010000001e0000005600000025000000190040000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m6.647580254s ago: executing program 3 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000701010000000000000000030000010900010073797a31"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1m6.577258746s ago: executing program 3 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mydev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x9, @raw_data="aa179d127cc12f7c5b29f32256ebeff786cccceb19fa22925fcf3af12d7d5a101acd2a42d0301157c3b24b8922602a0a0076ad3400412477725ab739112c1cff64ae0208cb4ba2162d1973356c9a0b49bf4fb843971ccf92de30293c8ef5fbadb0d6599952e221c8ebba3bb61276db2708129b3bd5314123494f35fcb3efc377a21a5844db1f7b05e82f1abaf99cb574ace5abf67399cb9589520bd78a99ba4e8e48c733bc20abaf44ee9f2af2f9e292dde134661f7972426bf657bda5a91f1790c57e039ab315e6"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf250400000008000100", @ANYRES32=0x0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x4000) bind$bt_hci(r1, &(0x7f0000000840)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000880)="05000000010000", 0x7) 1m6.490637198s ago: executing program 3 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) keyctl$read(0x2, 0x0, &(0x7f00000043c0)=""/4090, 0xffffff2d) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r1, 0x5, 0x0, 0x0, {{0x8e}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x86, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x9e8, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0x9, 0x30, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0xb, 0x1c, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x74, 0x78, {0x7, 0x25, 0x1, 0x8, 0x2, 0x74e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x1, 0xfb, {0x7, 0x25, 0x1, 0x0, 0x6, 0x6}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}}) read(r3, &(0x7f00000003c0)=""/16384, 0x4000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000040)={@id={0x2, 0x0, @auto="7687e4ee12a503b6210d472d0828b425"}}) 1m3.331242635s ago: executing program 3 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)=""/4097, 0x1001}, {&(0x7f0000001ec0)=""/4104, 0x1008}], 0x2}, 0x900000}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xb87d}], 0x8, 0x10000, 0x0) 1m3.139365674s ago: executing program 3 (id=116): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0x6, 0xb0, {0xb0, 0x31, "960af34cf6cecd151c2e1b5f0d39207827d9917354fd4101f6cb09f69f2211ec2b04f59e10e58dbbcf5feab4833ad08a5232e36b6977241970142266f290987236da8c526bd65b13479ac930dbec4a510e52be8d0304675bb45d21e850d70b4f72defef4d571c579ca37fcf37b289a6f430857f8977bcf1d495c010a7d331df09209d74916251f55ef254f6400c9e73e0df2f65139348703be86d90a6df653286d2e120bd9449baac8bc90bdf166"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x87f}}, &(0x7f0000000100)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x1, 0x0, 0x1, [0xf, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x2, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xb, 0x7fff}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x8, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "4c52612038ba57c1369e34f57219908c"}, @ptm_cap={0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x7, 0x2, "6f0cac25", "3bb75fff"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x1, 0x7f, 0xdd, 0x8f, 0x7, 0x4}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x8, 0x92, "3a11e0cc811863ee41c4d62ebfc5fe0401ac26056148a8eb125e2cf4155dcd4410903b05d9b406b83d6f4a08fbc8894306679288a7126525b1abc1d996204eb8b447134bcd00e1d999271b0f97f5e9b6115e7f9f8ec8006e5945fcfcfb3d1fde1f1e891228cd0ea7ef6785ccfcda91dcd7b790ad4c892903a7ea5b27b9e3e26048d57b04b70c1d8528d0b2e7f1bb97e3185a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x20, 0x1c, [0xf00]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000540)={0x40, 0xb, 0x2, "1a06"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "99e7"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1}}) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000880)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000009c0)=@urb_type_control={0x2, {0x1, 0x1}, 0xffffff01, 0xc1, 0x0, 0x0, 0xffffbc1d, 0x81, 0x0, 0x5, 0x400000, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000040)=ANY=[]) 48.113214294s ago: executing program 32 (id=116): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0x6, 0xb0, {0xb0, 0x31, "960af34cf6cecd151c2e1b5f0d39207827d9917354fd4101f6cb09f69f2211ec2b04f59e10e58dbbcf5feab4833ad08a5232e36b6977241970142266f290987236da8c526bd65b13479ac930dbec4a510e52be8d0304675bb45d21e850d70b4f72defef4d571c579ca37fcf37b289a6f430857f8977bcf1d495c010a7d331df09209d74916251f55ef254f6400c9e73e0df2f65139348703be86d90a6df653286d2e120bd9449baac8bc90bdf166"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x87f}}, &(0x7f0000000100)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x1, 0x0, 0x1, [0xf, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x2, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xb, 0x7fff}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x8, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "4c52612038ba57c1369e34f57219908c"}, @ptm_cap={0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x7, 0x2, "6f0cac25", "3bb75fff"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf8, 0x1, 0x7f, 0xdd, 0x8f, 0x7, 0x4}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x8, 0x92, "3a11e0cc811863ee41c4d62ebfc5fe0401ac26056148a8eb125e2cf4155dcd4410903b05d9b406b83d6f4a08fbc8894306679288a7126525b1abc1d996204eb8b447134bcd00e1d999271b0f97f5e9b6115e7f9f8ec8006e5945fcfcfb3d1fde1f1e891228cd0ea7ef6785ccfcda91dcd7b790ad4c892903a7ea5b27b9e3e26048d57b04b70c1d8528d0b2e7f1bb97e3185a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x20, 0x1c, [0xf00]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000540)={0x40, 0xb, 0x2, "1a06"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "99e7"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1}}) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000880)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e008104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000009c0)=@urb_type_control={0x2, {0x1, 0x1}, 0xffffff01, 0xc1, 0x0, 0x0, 0xffffbc1d, 0x81, 0x0, 0x5, 0x400000, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000040)=ANY=[]) 5.312019574s ago: executing program 2 (id=455): bind$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000005c0)={0x0, 0x0, "d607f8f9957b00000064323723e7eecdf40c363423eb3d259266ec9c37865c6c1a3e40ce1b22bb33270450001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e65852548deb01efd54f11ed2c4998d99ece2ab1e39566153c97e4af37017ea6b16b694b94a6e4606c3fb19d1d2bd3c8c4e97b90400000000000000c2000000000000008e6827d61dcc3a633bf6ff250b5a293eb2a39e48660edb720a010000000000000044febf7ddc73fd4a5a000001c55f7f46c7084e17c809268103a0584ab40a68e528329d97afc3652e325c1eb4a3ab2e156a9744480000000800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef6bc502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e880500000000000000023610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba9379d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee950500000000000000fbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3402cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e60078c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948aa74ebc946d57a8bde89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4cc025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce09959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f002bf14cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040895c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a4b134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de548350800000000000000a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b7545b76317b47683f6b0f80dfdeecbf8767c7e0500000086093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) nanosleep(&(0x7f00000015c0)={0x0, 0x989680}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfs_mnt\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000000c0)='addr=127.0.0.1,proto=tcp,port=2049,mountport=2049,mountproto=tcp,mountvers=0,vers=3,clientaddr=127.0.0.1\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x20, r5, 0x7, 0x3, 0x1fff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 4.874969417s ago: executing program 2 (id=460): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="50000000100001040100000000000000000000000081000000000000000000000c0003006d6163736563300008000500020000001c0012800b0001006d616373656300000c00028005000f0002000000", 0x50) 4.611115689s ago: executing program 2 (id=462): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x20) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='myproc\x00', 0x587000, 0x4) write(0xffffffffffffffff, &(0x7f0000000300)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='dummy_udc.0', 0xb) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='nfs\x00', 0x0, &(0x7f0000000700)='addr=127.0.0.1,vers=2\x80\x00\x00\x00to=udp\x00') mount(&(0x7f0000000080)=@filename='./mnt\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='pstore\x00', 0x1808802, &(0x7f0000000140)='nfs\x00') 4.235595309s ago: executing program 2 (id=464): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000580)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000880)=0xdf8, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000900)="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", 0x77b}], 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x6, 0x4) sendmsg$inet(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001140)="0f73c3a8d65a9f90609ee68eaf9d475825caba2168ebc46d395fbe17ae04597d4e75e29438f5", 0x26}, {&(0x7f0000001200)="de3f3eea325636445a5103446f88aa0617ddd9da101ec6f758ed9f70a5502afca77880dc3a29dca0437c771b43949617753b5cd196bbc84863d6a8", 0x3b}, {0x0}], 0x3}, 0x844) 4.043262739s ago: executing program 2 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100020000004025057a120001010200010902200001010080320904"], 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000280)=0x6) 3.121419457s ago: executing program 4 (id=472): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000140)={&(0x7f0000000100)=""/5, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x3, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000680)=[@nested_load_code={0x12e, 0x97, {0x0, "660f71f2f548b8e200000000000000b9800000c00f3235000400000f30420fe0510235100000060f23f8260f0119c443cd0a200366400f3881106766f044f61f66ba7af90c0c100fc28def66bafc0cb15f3a0fbaaa000000002046790166baa10066edc74424000f000000c7442402d4000000c7442406000000000f011424"}}], 0x97}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x8100, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000780)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000007c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x20280, 0x0) r5 = eventfd2(0xeffffffb, 0x80800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000840)={0x9, 0x0, 0x0, r5, 0x2}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000008c0)={[0xc45, 0x9, 0x9, 0x80000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) fstatfs(r1, &(0x7f0000000500)=""/172) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000440)={0x0, 0x300, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, r2, 0x7, 0x400000, 0x0, {0x2, 0x0, 0x20}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r8 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r9 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r8) r10 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r9) r11 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r10) add_key(&(0x7f00000003c0)='rxrpc\x00', 0x0, &(0x7f0000000400)="0000000001000002ff6900000000006ef829b975b4afa65a1100ecd9df1eaa01000000180000000200020086", 0x2c, r11) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) keyctl$negate(0xd, r10, 0x4, r11) socket$phonet_pipe(0x23, 0x5, 0x2) 2.659249276s ago: executing program 2 (id=475): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRES32=0xffffffffffffffff], 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc0045b0f, &(0x7f00000000c0)={0x3, 0x3, 0x7, 0x40000ff, 0x1, 0x6c1}) r3 = getpgid(0x0) syz_pidfd_open(r3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x6, 0x1) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001003, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x1}) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x204}, {}, {0x0, 0x0, 0x4000}, 0x0, 0x0, 0x2, 0x0, 0x6}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x158}}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000100)=@mmap={0x555, 0x2, 0x4, 0x0, 0x9, {0x77359400}, {0x4, 0x8, 0x4, 0xa2, 0x80, 0x6, "63ab6ded"}, 0xffff, 0x1, {}, 0x5}) syz_usb_connect(0x2, 0x39, &(0x7f00000018c0)=ANY=[@ANYBLOB="12010002000000400902270001010080320904000003ff0000000705830300"/40, @ANYBLOB="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", @ANYRES8=r0, @ANYRESOCT=r1, @ANYRES8=r3], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) 2.638095321s ago: executing program 1 (id=476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x68}, 0x1, 0x0, 0x300}, 0x850) 2.451281388s ago: executing program 0 (id=477): unshare(0x22020600) r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000340)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000480)=@IORING_OP_LINKAT={0x27, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', 0xffffffffffffffff, 0x400}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x7f000000}}}, 0x0) 2.315103383s ago: executing program 1 (id=478): r0 = syz_open_dev$video(&(0x7f0000000100), 0x101, 0xab02) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='dummy_udc.0', 0xb) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000240)=0xffff0000, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x3, @loopback, 0x400014}, 0x1c) splice(r0, 0x0, r3, 0x0, 0x0, 0xb) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08fd24bd7000fddbdf25b99100000800100104000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4015}, 0x20040100) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) 2.18405378s ago: executing program 0 (id=479): add_key(&(0x7f0000000680)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf53018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0xbe, 0xffffffffffffffff) 1.922272645s ago: executing program 4 (id=480): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0xffffc000, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) 1.499330541s ago: executing program 0 (id=481): r0 = socket$inet6(0x10, 0x2, 0x2) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000200021002bbd7000000000000a060000000000000000000014000100"], 0x30}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x16}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x1, 0x0, 0x8}]}, 0x10) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x37) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000c1401002abd7000fbdbdf2508003d0002000000080006"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008080) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000080)) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x400000b0, 0x0, 0x7ffd}, {0x400000b1, 0x0, 0x4951fa4}]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.458658199s ago: executing program 1 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x103}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) listen(r1, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000500)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.036830772s ago: executing program 0 (id=483): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000065c0), 0x2000, 0x0) openat$cuse(0xffffff9c, &(0x7f0000008480), 0x2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000006840)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000068c0)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x6}}}, &(0x7f0000006900)=0x0) syz_ublk_setup_queues(r0, r2, &(0x7f0000006940)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f00000069c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa1f6, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x43, 0xffffffff}}], 0x1, 0x0, 0x0) (fail_nth: 35) 818.518459ms ago: executing program 4 (id=484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x3}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40400a0}, 0x0) 625.041431ms ago: executing program 4 (id=485): add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) 592.8729ms ago: executing program 0 (id=486): inotify_init1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x3f, 0x0}, 0x5b4}, {{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7080000, @remote, 0x7, 0x1000001}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x2, 0xc040) 399.12195ms ago: executing program 4 (id=487): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)="8c3b1e1c3b0ae533b6461b21ec0fab8e39", 0x11}, 0x1, 0x0, 0x300000000000000, 0x80}, 0x8000) 382.897637ms ago: executing program 0 (id=488): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000000001000000", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000200)="0000000001000000", 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f00000000c0)={'wlan1\x00'}) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x3, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r3 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r2, 0x1, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x40, &(0x7f0000000080)="900100"/64) ioctl$sock_SIOCOUTQNSD(r3, 0x40106183, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_GET_SE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r5, 0xb13, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4080) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x2) write$binfmt_aout(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="03040007b5"], 0xc8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000440)="0000000001000000", 0x8) connect(r7, &(0x7f0000000500)=@in={0x2, 0x4e20, @loopback}, 0x80) 366.189809ms ago: executing program 1 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 262.735996ms ago: executing program 4 (id=490): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000740)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) close(0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x1}, 0xe) listen(r1, 0x5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90012000e00050014420a008000400003e3ee"], 0x17) accept4(r1, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/174, 0xae}], 0x1, 0xd, 0xa) 159.010043ms ago: executing program 1 (id=491): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000006c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000700)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000740)="04", 0x1, 0x2404c081, &(0x7f0000000780)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000a00)='nv', 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x4e24, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @rand_addr=0x64010102}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x40040) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) shutdown(r0, 0x1) 0s ago: executing program 1 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000002480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000024c0)='./proc\x00', &(0x7f0000002500)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002540)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r0, &(0x7f0000002580)='100', 0x3) syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002640)='./file0\x00', 0x31) mount(0x0, &(0x7f0000002680)='./file0\x00', &(0x7f00000026c0)='nfsd\x00', 0x1214040, 0x0) (fail_nth: 54) kernel console output (not intermixed with test programs): 0 [ 119.353609][ T6639] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 119.353640][ T6639] genl_family_rcv_msg_doit+0x233/0x340 [ 119.353670][ T6639] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 119.353703][ T6639] ? bpf_lsm_capable+0x9/0x20 [ 119.353738][ T6639] ? security_capable+0x7e/0x2c0 [ 119.353776][ T6639] genl_rcv_msg+0x614/0x7a0 [ 119.353811][ T6639] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.353831][ T6639] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 119.353855][ T6639] ? __asan_memcpy+0x40/0x70 [ 119.353885][ T6639] netlink_rcv_skb+0x226/0x4a0 [ 119.353914][ T6639] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.353937][ T6639] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.353979][ T6639] ? down_read+0x2b9/0x320 [ 119.354008][ T6639] genl_rcv+0x28/0x40 [ 119.354027][ T6639] netlink_unicast+0x8ef/0xa80 [ 119.354069][ T6639] netlink_sendmsg+0x7f0/0xb20 [ 119.354100][ T6639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.354129][ T6639] ? aa_sock_msg_perm+0x144/0x210 [ 119.354161][ T6639] ? apparmor_socket_sendmsg+0x98/0x360 [ 119.354188][ T6639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.354213][ T6639] sock_sendmsg_nosec+0x14e/0x190 [ 119.354241][ T6639] ____sys_sendmsg+0x54e/0x850 [ 119.354267][ T6639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.354295][ T6639] ? import_iovec+0x73/0xa0 [ 119.354319][ T6639] ___sys_sendmsg+0x2a6/0x360 [ 119.354338][ T6639] ? __lock_acquire+0x747/0x2de0 [ 119.354365][ T6639] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.354422][ T6639] ? __fget_files+0x3a2/0x420 [ 119.354445][ T6639] ? __fget_files+0x2a/0x420 [ 119.354476][ T6639] __x64_sys_sendmsg+0x1b1/0x290 [ 119.354498][ T6639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.354536][ T6639] do_syscall_64+0x166/0x520 [ 119.354555][ T6639] ? trace_irq_disable+0x3b/0x140 [ 119.354575][ T6639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.354591][ T6639] ? clear_bhb_loop+0x70/0xc0 [ 119.354612][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.354628][ T6639] RIP: 0033:0x7f5e15b9fb19 [ 119.354644][ T6639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.354657][ T6639] RSP: 002b:00007f5e16a52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.354675][ T6639] RAX: ffffffffffffffda RBX: 00007f5e15e25fa0 RCX: 00007f5e15b9fb19 [ 119.354687][ T6639] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 119.354700][ T6639] RBP: 00007f5e16a52090 R08: 0000000000000000 R09: 0000000000000000 [ 119.354710][ T6639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.354721][ T6639] R13: 00007f5e15e26038 R14: 00007f5e15e25fa0 R15: 00007ffc5a65a638 [ 119.354751][ T6639] [ 119.518667][ T55] Bluetooth: hci4: command tx timeout [ 119.768084][ T6647] netlink: 156 bytes leftover after parsing attributes in process `syz.1.232'. [ 119.829858][ T6647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.956531][ T6515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.313098][ T6515] veth0_vlan: entered promiscuous mode [ 120.325599][ T6515] veth1_vlan: entered promiscuous mode [ 120.356515][ T6515] veth0_macvtap: entered promiscuous mode [ 120.361938][ T6515] veth1_macvtap: entered promiscuous mode [ 120.379490][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.396229][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.418875][ T5931] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.418995][ T5931] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.419024][ T5931] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.419052][ T5931] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.454300][ T196] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 120.487966][ T11] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.511284][ T5911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.511304][ T5911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.542799][ T5911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.542826][ T5911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.638075][ T11] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 120.640126][ T196] usb 2-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=0.00 [ 120.641002][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.641030][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.641050][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.641110][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.641347][ T196] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.641366][ T196] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.645170][ T11] usb 3-1: config 0 descriptor?? [ 120.646566][ T196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.646588][ T196] usb 2-1: Product: syz [ 120.646602][ T196] usb 2-1: Manufacturer: syz [ 120.646616][ T196] usb 2-1: SerialNumber: syz [ 121.015372][ T4955] Bluetooth: hci2: unexpected event 0x04 length: 0 < 10 [ 121.066580][ T11] hid_parser_main: 4 callbacks suppressed [ 121.066601][ T11] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.070428][ T11] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.070462][ T11] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.070512][ T11] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.070538][ T11] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.070563][ T11] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.070588][ T11] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.070613][ T11] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.070658][ T11] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.070683][ T11] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 121.104685][ T11] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 121.231948][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.254244][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.283131][ T6668] CIFS: Attempting to mount //127.0.0.1/share [ 121.313493][ T4955] Bluetooth: hci2: unexpected event 0x04 length: 0 < 10 [ 121.350276][ T6695] CIFS: VFS: data area offset 3 overlaps SMB2 header 129 [ 121.350741][ T6695] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 121.361316][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.379024][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.393907][ T6668] CIFS: VFS: cifs_mount failed w/return code = -5 [ 121.402897][ T6696] CIFS: Attempting to mount //127.0.0.1/share [ 121.553973][ T6706] fuse-io-uring is disabled by module parameter [ 121.554030][ T6706] fuse-io-uring is disabled by module parameter [ 121.554062][ T6706] fuse-io-uring is disabled by module parameter [ 121.554118][ T6706] fuse-io-uring is disabled by module parameter [ 121.554141][ T6706] fuse-io-uring is disabled by module parameter [ 121.554158][ T6706] fuse-io-uring is disabled by module parameter [ 121.554175][ T6706] fuse-io-uring is disabled by module parameter [ 121.554201][ T6706] fuse-io-uring is disabled by module parameter [ 121.554256][ T6706] fuse-io-uring is disabled by module parameter [ 121.554282][ T6706] fuse-io-uring is disabled by module parameter [ 121.597200][ T4955] Bluetooth: hci4: command tx timeout [ 121.698747][ T11] usb 2-1: USB disconnect, device number 15 [ 121.700522][ T55] Bluetooth: hci5: CSR: Local version failed (-71) [ 122.056988][ T2063] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 122.210075][ T2063] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.210896][ T2063] usb 5-1: New USB device found: idVendor=4301, idProduct=86d9, bcdDevice=d3.02 [ 122.215064][ T2063] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 122.215101][ T2063] usb 5-1: can't read configurations, error -71 [ 122.281650][ T6712] FAULT_INJECTION: forcing a failure. [ 122.281650][ T6712] name failslab, interval 1, probability 0, space 0, times 0 [ 122.281672][ T6712] CPU: 0 UID: 0 PID: 6712 Comm: syz.1.245 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.281687][ T6712] Tainted: [L]=SOFTLOCKUP [ 122.281690][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 122.281696][ T6712] Call Trace: [ 122.281700][ T6712] [ 122.281705][ T6712] dump_stack_lvl+0xe8/0x150 [ 122.281726][ T6712] should_fail_ex+0x3eb/0x540 [ 122.281741][ T6712] should_failslab+0xa8/0x100 [ 122.281775][ T6712] __kmalloc_noprof+0xf9/0x710 [ 122.281788][ T6712] ? io_cache_alloc_new+0x40/0x100 [ 122.281802][ T6712] ? io_cache_alloc_new+0x40/0x100 [ 122.281820][ T6712] io_cache_alloc_new+0x40/0x100 [ 122.281836][ T6712] io_uring_cmd_prep+0x39a/0x600 [ 122.281852][ T6712] io_submit_sqes+0xd6e/0x2500 [ 122.281886][ T6712] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 122.281908][ T6712] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 122.281920][ T6712] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 122.281936][ T6712] ? __fget_files+0x2a/0x420 [ 122.281953][ T6712] ? fput+0xa0/0xd0 [ 122.281966][ T6712] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 122.281983][ T6712] do_syscall_64+0x166/0x520 [ 122.281996][ T6712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.282006][ T6712] ? clear_bhb_loop+0x70/0xc0 [ 122.282019][ T6712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.282029][ T6712] RIP: 0033:0x7f5e15b9fb19 [ 122.282039][ T6712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.282048][ T6712] RSP: 002b:00007f5e16a51f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 122.282060][ T6712] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5e15b9fb19 [ 122.282067][ T6712] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 122.282072][ T6712] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000008 [ 122.282078][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000a80 [ 122.282084][ T6712] R13: 0000200000000a88 R14: 0000000000000465 R15: 0000000000000000 [ 122.282100][ T6712] [ 122.519186][ T6716] FAULT_INJECTION: forcing a failure. [ 122.519186][ T6716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.519222][ T6716] CPU: 0 UID: 0 PID: 6716 Comm: syz.1.246 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.519237][ T6716] Tainted: [L]=SOFTLOCKUP [ 122.519241][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 122.519249][ T6716] Call Trace: [ 122.519254][ T6716] [ 122.519259][ T6716] dump_stack_lvl+0xe8/0x150 [ 122.519280][ T6716] should_fail_ex+0x3eb/0x540 [ 122.519294][ T6716] _copy_from_user+0x2d/0xb0 [ 122.519307][ T6716] io_epoll_ctl_prep+0x17c/0x290 [ 122.519324][ T6716] io_submit_sqes+0xd6e/0x2500 [ 122.519357][ T6716] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 122.519374][ T6716] ? sched_clock+0x41/0x60 [ 122.519392][ T6716] ? __pfx_clockevents_program_event+0x10/0x10 [ 122.519409][ T6716] ? __pfx_sched_clock_cpu+0x10/0x10 [ 122.519421][ T6716] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 122.519440][ T6716] ? __irq_exit_rcu+0xc6/0x220 [ 122.519453][ T6716] ? lockdep_softirqs_on+0x11e/0x190 [ 122.519465][ T6716] ? handle_softirqs+0x6d0/0x8d0 [ 122.519479][ T6716] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 122.519496][ T6716] do_syscall_64+0x166/0x520 [ 122.519510][ T6716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.519520][ T6716] ? clear_bhb_loop+0x70/0xc0 [ 122.519533][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.519543][ T6716] RIP: 0033:0x7f5e15b9fb19 [ 122.519553][ T6716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.519561][ T6716] RSP: 002b:00007f5e13ddff38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 122.519573][ T6716] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5e15b9fb19 [ 122.519580][ T6716] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000021 [ 122.519586][ T6716] RBP: 0000000000000016 R08: 0000000000000000 R09: 0000000000000008 [ 122.519592][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000a80 [ 122.519598][ T6716] R13: 0000200000000a88 R14: 00000000000003c9 R15: 0000000000000000 [ 122.519614][ T6716] [ 122.806061][ T6721] binder: Failure when writing BR_NOOP at beginning of buffer. [ 122.806287][ T6721] binder: Read failure Err(EFAULT) in pid:144 [ 122.828496][ T6722] binder: Failure when writing BR_NOOP at beginning of buffer. [ 122.828515][ T6722] binder: Read failure Err(EFAULT) in pid:144 [ 122.906537][ T6728] netlink: 84 bytes leftover after parsing attributes in process `syz.4.248'. [ 122.906581][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.248'. [ 123.136401][ T6736] FAULT_INJECTION: forcing a failure. [ 123.136401][ T6736] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 123.136431][ T6736] CPU: 1 UID: 0 PID: 6736 Comm: syz.1.251 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.136446][ T6736] Tainted: [L]=SOFTLOCKUP [ 123.136450][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 123.136456][ T6736] Call Trace: [ 123.136460][ T6736] [ 123.136465][ T6736] dump_stack_lvl+0xe8/0x150 [ 123.136487][ T6736] should_fail_ex+0x3eb/0x540 [ 123.136511][ T6736] prepare_alloc_pages+0x21e/0x5f0 [ 123.136551][ T6736] __alloc_frozen_pages_noprof+0x189/0x450 [ 123.136584][ T6736] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.136618][ T6736] ? policy_nodemask+0x31b/0x980 [ 123.136636][ T6736] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 123.136656][ T6736] ? trace_kmalloc+0x2a/0xf0 [ 123.136679][ T6736] alloc_pages_mpol+0x21e/0x390 [ 123.136712][ T6736] alloc_pages_noprof+0xb1/0x2b0 [ 123.136743][ T6736] get_free_pages_noprof+0xf/0x80 [ 123.136767][ T6736] __kvm_mmu_topup_memory_cache+0x252/0x600 [ 123.136796][ T6736] mmu_topup_memory_caches+0xdc/0x1a0 [ 123.136816][ T6736] kvm_mmu_load+0x9d/0x21e0 [ 123.136836][ T6736] ? kvm_msr_allowed+0x9a/0x490 [ 123.136853][ T6736] ? kvm_msr_allowed+0x3f4/0x490 [ 123.136870][ T6736] ? kvm_msr_allowed+0x9a/0x490 [ 123.136887][ T6736] ? kvm_msr_allowed+0x9a/0x490 [ 123.136913][ T6736] ? kvm_apic_has_interrupt+0x740/0x770 [ 123.136945][ T6736] vcpu_run+0x4f5b/0x7a90 [ 123.136997][ T6736] ? __pfx_vcpu_run+0x10/0x10 [ 123.137016][ T6736] ? lock_acquire+0x115/0x350 [ 123.137047][ T6736] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 123.137083][ T6736] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 123.137096][ T6736] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 123.137108][ T6736] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 123.137123][ T6736] kvm_vcpu_ioctl+0xa61/0xfd0 [ 123.137138][ T6736] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.137175][ T6736] ? __fget_files+0x2a/0x420 [ 123.137202][ T6736] ? __fget_files+0x2a/0x420 [ 123.137226][ T6736] ? __fget_files+0x2a/0x420 [ 123.137244][ T6736] ? bpf_lsm_file_ioctl+0x9/0x20 [ 123.137259][ T6736] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 123.137271][ T6736] __se_sys_ioctl+0xfc/0x170 [ 123.137288][ T6736] do_syscall_64+0x166/0x520 [ 123.137307][ T6736] ? trace_irq_disable+0x3b/0x140 [ 123.137330][ T6736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.137351][ T6736] ? clear_bhb_loop+0x70/0xc0 [ 123.137375][ T6736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.137391][ T6736] RIP: 0033:0x7f5e15b9fb19 [ 123.137402][ T6736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.137411][ T6736] RSP: 002b:00007f5e16a52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.137423][ T6736] RAX: ffffffffffffffda RBX: 00007f5e15e25fa0 RCX: 00007f5e15b9fb19 [ 123.137430][ T6736] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 123.137437][ T6736] RBP: 00007f5e16a52090 R08: 0000000000000000 R09: 0000000000000000 [ 123.137443][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.137453][ T6736] R13: 00007f5e15e26038 R14: 00007f5e15e25fa0 R15: 00007ffc5a65a638 [ 123.137485][ T6736] [ 123.231768][ T6696] CIFS: VFS: cifs_mount failed w/return code = -512 [ 123.315715][ T11] usb 3-1: USB disconnect, device number 8 [ 123.320265][ T2063] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.508512][ T2063] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 123.509565][ T2063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.513060][ T2063] usb 5-1: config 0 descriptor?? [ 123.583078][ T6741] FAULT_INJECTION: forcing a failure. [ 123.583078][ T6741] name failslab, interval 1, probability 0, space 0, times 0 [ 123.583191][ T6741] CPU: 0 UID: 0 PID: 6741 Comm: syz.2.253 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.583216][ T6741] Tainted: [L]=SOFTLOCKUP [ 123.583222][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 123.583232][ T6741] Call Trace: [ 123.583238][ T6741] [ 123.583246][ T6741] dump_stack_lvl+0xe8/0x150 [ 123.583281][ T6741] should_fail_ex+0x3eb/0x540 [ 123.583308][ T6741] should_failslab+0xa8/0x100 [ 123.583338][ T6741] __kmalloc_noprof+0xf9/0x710 [ 123.583356][ T6741] ? rcu_is_watching+0x16/0xb0 [ 123.583381][ T6741] ? tomoyo_realpath_from_path+0xf2/0x640 [ 123.583399][ T6741] ? tomoyo_realpath_from_path+0xf2/0x640 [ 123.583424][ T6741] tomoyo_realpath_from_path+0xf2/0x640 [ 123.583446][ T6741] ? get_mm_exe_file+0x1c/0x170 [ 123.583474][ T6741] tomoyo_get_exe+0x60/0x90 [ 123.583498][ T6741] tomoyo_write_control+0x802/0x13d0 [ 123.583519][ T6741] ? lock_acquire+0x115/0x350 [ 123.583547][ T6741] ? tomoyo_write_control+0x175/0x13d0 [ 123.583594][ T6741] ? __pfx_tomoyo_write_control+0x10/0x10 [ 123.583625][ T6741] ? __pfx_tomoyo_write+0x10/0x10 [ 123.583645][ T6741] vfs_write+0x296/0xba0 [ 123.583678][ T6741] ? __pfx_vfs_write+0x10/0x10 [ 123.583703][ T6741] ? __fget_files+0x2a/0x420 [ 123.583721][ T6741] ? __fget_files+0x3a2/0x420 [ 123.583745][ T6741] ? __fget_files+0x2a/0x420 [ 123.583772][ T6741] ? fdget+0x1ac/0x250 [ 123.583801][ T6741] ksys_write+0x150/0x270 [ 123.583820][ T6741] ? __pfx_ksys_write+0x10/0x10 [ 123.583840][ T6741] do_syscall_64+0x166/0x520 [ 123.583853][ T6741] ? trace_irq_disable+0x3b/0x140 [ 123.583867][ T6741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.583877][ T6741] ? clear_bhb_loop+0x70/0xc0 [ 123.583892][ T6741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.583911][ T6741] RIP: 0033:0x7fdd33f9fb19 [ 123.583931][ T6741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.583947][ T6741] RSP: 002b:00007fdd321f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.583969][ T6741] RAX: ffffffffffffffda RBX: 00007fdd34225fa0 RCX: 00007fdd33f9fb19 [ 123.583978][ T6741] RDX: 000000000000ff40 RSI: 00002000000002c0 RDI: 0000000000000003 [ 123.583985][ T6741] RBP: 00007fdd321f6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.583991][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.583997][ T6741] R13: 00007fdd34226038 R14: 00007fdd34225fa0 R15: 00007ffcfc3872c8 [ 123.584015][ T6741] [ 123.584053][ T6741] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.681205][ T4955] Bluetooth: hci4: command tx timeout [ 123.730747][ T6721] syz.0.247 (6721) used greatest stack depth: 12224 bytes left [ 123.736886][ T2063] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 123.990495][ T2063] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 123.990521][ T2063] [drm] Initialized udl on minor 1 [ 124.078090][ T11] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 124.228625][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 124.233027][ T11] usb 2-1: New USB device found: idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 124.237875][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.237953][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.241298][ T6768] tipc: Can't bind to reserved service type 3 [ 124.243400][ T11] usb 2-1: config 0 descriptor?? [ 124.263667][ T11] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 124.546972][ T5749] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 124.707597][ T5749] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 124.708570][ T5749] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 124.708593][ T5749] usb 3-1: config 1 has no interface number 0 [ 124.710440][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.710462][ T5749] usb 3-1: Product: syz [ 124.710476][ T5749] usb 3-1: Manufacturer: syz [ 124.710487][ T5749] usb 3-1: SerialNumber: syz [ 124.727480][ T5749] usb 3-1: 3:0 : does not exist [ 124.727504][ T5749] usb 3-1: 3:0 : does not exist [ 124.849345][ T11] gspca_vc032x: reg_r err -32 [ 124.849416][ T11] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 124.928491][ T11] usb 3-1: USB disconnect, device number 9 [ 125.208119][ T6773] FAULT_INJECTION: forcing a failure. [ 125.208119][ T6773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 125.208145][ T6773] CPU: 1 UID: 0 PID: 6773 Comm: syz.1.256 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.208176][ T6773] Tainted: [L]=SOFTLOCKUP [ 125.208184][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.208196][ T6773] Call Trace: [ 125.208204][ T6773] [ 125.208213][ T6773] dump_stack_lvl+0xe8/0x150 [ 125.208245][ T6773] should_fail_ex+0x3eb/0x540 [ 125.208260][ T6773] prepare_alloc_pages+0x21e/0x5f0 [ 125.208284][ T6773] __alloc_frozen_pages_noprof+0x189/0x450 [ 125.208313][ T6773] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 125.208338][ T6773] ? __alloc_frozen_pages_noprof+0x274/0x450 [ 125.208372][ T6773] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 125.208400][ T6773] __alloc_pages_noprof+0x10/0x100 [ 125.208414][ T6773] alloc_pages_bulk_noprof+0x6df/0x8f0 [ 125.208429][ T6773] ? alloc_pages_mpol+0x256/0x390 [ 125.208451][ T6773] ? alloc_pages_noprof+0x140/0x2b0 [ 125.208484][ T6773] __kasan_populate_vmalloc+0xb7/0x1c0 [ 125.208517][ T6773] alloc_vmap_area+0xd10/0x1410 [ 125.208553][ T6773] ? __pfx_alloc_vmap_area+0x10/0x10 [ 125.208571][ T6773] ? __get_vm_area_node+0x195/0x330 [ 125.208585][ T6773] ? __get_vm_area_node+0x195/0x330 [ 125.208609][ T6773] __get_vm_area_node+0x24a/0x330 [ 125.208647][ T6773] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 125.208670][ T6773] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 125.208694][ T6773] ? __mutex_trylock_common+0x15f/0x270 [ 125.208712][ T6773] ? __pfx___mutex_trylock_common+0x10/0x10 [ 125.208728][ T6773] ? rcu_is_watching+0x16/0xb0 [ 125.208759][ T6773] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 125.208787][ T6773] ? __mutex_unlock_slowpath+0x731/0x900 [ 125.208824][ T6773] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 125.208847][ T6773] vmalloc_noprof+0xb2/0xe0 [ 125.208858][ T6773] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 125.208872][ T6773] snd_dma_alloc_dir_pages+0x120/0x220 [ 125.208886][ T6773] do_alloc_pages+0x11c/0x260 [ 125.208902][ T6773] snd_pcm_lib_malloc_pages+0x33a/0x780 [ 125.208934][ T6773] snd_pcm_hw_params+0x887/0x1c00 [ 125.208979][ T6773] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 125.209003][ T6773] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 125.209017][ T6773] ? snd_pcm_kernel_ioctl+0x336/0xb20 [ 125.209032][ T6773] ? snd_pcm_drop+0x544/0x730 [ 125.209046][ T6773] snd_pcm_oss_change_params_locked+0x1e90/0x3c80 [ 125.209104][ T6773] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 125.209135][ T6773] ? do_futex+0x3e7/0x4e0 [ 125.209167][ T6773] ? __fget_files+0x2a/0x420 [ 125.209183][ T6773] snd_pcm_oss_get_active_substream+0x20b/0x280 [ 125.209198][ T6773] snd_pcm_oss_ioctl+0x89e/0xdf0 [ 125.209223][ T6773] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 125.209254][ T6773] __se_sys_ioctl+0xfc/0x170 [ 125.209286][ T6773] do_syscall_64+0x166/0x520 [ 125.209305][ T6773] ? trace_irq_disable+0x3b/0x140 [ 125.209319][ T6773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.209330][ T6773] ? clear_bhb_loop+0x70/0xc0 [ 125.209342][ T6773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.209353][ T6773] RIP: 0033:0x7f5e15b9fb19 [ 125.209370][ T6773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.209388][ T6773] RSP: 002b:00007f5e16a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.209409][ T6773] RAX: ffffffffffffffda RBX: 00007f5e15e26090 RCX: 00007f5e15b9fb19 [ 125.209425][ T6773] RDX: 0000000000000000 RSI: 0000000080045005 RDI: 0000000000000006 [ 125.209438][ T6773] RBP: 00007f5e15c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 125.209452][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.209459][ T6773] R13: 00007f5e15e26128 R14: 00007f5e15e26090 R15: 00007ffc5a65a638 [ 125.209478][ T6773] [ 125.210400][ T6773] syz.1.256: vmalloc error: size 2097152, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 125.210607][ T6773] CPU: 1 UID: 0 PID: 6773 Comm: syz.1.256 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.210634][ T6773] Tainted: [L]=SOFTLOCKUP [ 125.210642][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.210653][ T6773] Call Trace: [ 125.210661][ T6773] [ 125.210669][ T6773] dump_stack_lvl+0xe8/0x150 [ 125.210690][ T6773] warn_alloc+0x24d/0x270 [ 125.210707][ T6773] ? kasan_quarantine_put+0xbb/0x1f0 [ 125.210723][ T6773] ? __pfx_warn_alloc+0x10/0x10 [ 125.210745][ T6773] ? __get_vm_area_node+0x263/0x330 [ 125.210789][ T6773] ? __get_vm_area_node+0x263/0x330 [ 125.210827][ T6773] __vmalloc_node_range_noprof+0x396/0x16f0 [ 125.210841][ T6773] ? __mutex_trylock_common+0x15f/0x270 [ 125.210858][ T6773] ? __pfx___mutex_trylock_common+0x10/0x10 [ 125.210875][ T6773] ? rcu_is_watching+0x16/0xb0 [ 125.210919][ T6773] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 125.210940][ T6773] ? __mutex_unlock_slowpath+0x731/0x900 [ 125.210973][ T6773] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 125.210990][ T6773] vmalloc_noprof+0xb2/0xe0 [ 125.211001][ T6773] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 125.211015][ T6773] snd_dma_alloc_dir_pages+0x120/0x220 [ 125.211030][ T6773] do_alloc_pages+0x11c/0x260 [ 125.211056][ T6773] snd_pcm_lib_malloc_pages+0x33a/0x780 [ 125.211089][ T6773] snd_pcm_hw_params+0x887/0x1c00 [ 125.211130][ T6773] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 125.211147][ T6773] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 125.211162][ T6773] ? snd_pcm_kernel_ioctl+0x336/0xb20 [ 125.211175][ T6773] ? snd_pcm_drop+0x544/0x730 [ 125.211195][ T6773] snd_pcm_oss_change_params_locked+0x1e90/0x3c80 [ 125.211259][ T6773] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 125.211286][ T6773] ? do_futex+0x3e7/0x4e0 [ 125.211312][ T6773] ? __fget_files+0x2a/0x420 [ 125.211327][ T6773] snd_pcm_oss_get_active_substream+0x20b/0x280 [ 125.211344][ T6773] snd_pcm_oss_ioctl+0x89e/0xdf0 [ 125.211375][ T6773] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 125.211406][ T6773] __se_sys_ioctl+0xfc/0x170 [ 125.211436][ T6773] do_syscall_64+0x166/0x520 [ 125.211450][ T6773] ? trace_irq_disable+0x3b/0x140 [ 125.211462][ T6773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.211473][ T6773] ? clear_bhb_loop+0x70/0xc0 [ 125.211486][ T6773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.211501][ T6773] RIP: 0033:0x7f5e15b9fb19 [ 125.211519][ T6773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.211536][ T6773] RSP: 002b:00007f5e16a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.211557][ T6773] RAX: ffffffffffffffda RBX: 00007f5e15e26090 RCX: 00007f5e15b9fb19 [ 125.211573][ T6773] RDX: 0000000000000000 RSI: 0000000080045005 RDI: 0000000000000006 [ 125.211585][ T6773] RBP: 00007f5e15c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 125.211592][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.211599][ T6773] R13: 00007f5e15e26128 R14: 00007f5e15e26090 R15: 00007ffc5a65a638 [ 125.211617][ T6773] [ 125.211642][ T6773] Mem-Info: [ 125.211651][ T6773] active_anon:6629 inactive_anon:0 isolated_anon:0 [ 125.211651][ T6773] active_file:0 inactive_file:55989 isolated_file:0 [ 125.211651][ T6773] unevictable:0 dirty:232 writeback:0 [ 125.211651][ T6773] slab_reclaimable:11321 slab_unreclaimable:96604 [ 125.211651][ T6773] mapped:30631 shmem:536 pagetables:1273 [ 125.211651][ T6773] sec_pagetables:0 bounce:0 [ 125.211651][ T6773] kernel_misc_reclaimable:0 [ 125.211651][ T6773] free:1306828 free_pcp:8997 free_cma:0 [ 125.211712][ T6773] Node 0 active_anon:26516kB inactive_anon:0kB active_file:0kB inactive_file:223756kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122524kB dirty:928kB writeback:0kB shmem:2144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13244kB pagetables:4940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 125.211778][ T6773] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 125.211814][ T6773] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.211875][ T6773] lowmem_reserve[]: 0 2460 2461 2461 2461 [ 125.211921][ T6773] Node 0 DMA32 free:1263944kB boost:0kB min:33912kB low:42388kB high:50864kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26516kB inactive_anon:0kB active_file:0kB inactive_file:223756kB unevictable:0kB writepending:928kB zspages:600kB present:3129332kB managed:2519324kB mlocked:0kB bounce:0kB free_pcp:35988kB local_pcp:19316kB free_cma:0kB [ 125.211955][ T6773] lowmem_reserve[]: 0 0 1 1 1 [ 125.211995][ T6773] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1312kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.212070][ T6773] lowmem_reserve[]: 0 0 0 0 0 [ 125.212089][ T6773] Node 1 Normal free:3948008kB boost:0kB min:55968kB low:69960kB high:83952kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.212133][ T6773] lowmem_reserve[]: 0 0 0 0 0 [ 125.212168][ T6773] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 125.212296][ T6773] Node 0 DMA32: 142*4kB (M) 176*8kB (UME) 101*16kB (M) 128*32kB (UME) 131*64kB (M) 99*128kB (UME) 67*256kB (M) 13*512kB (M) 3*1024kB (UM) 4*2048kB (UM) 293*4096kB (M) = 1263944kB [ 125.212431][ T6773] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 125.212533][ T6773] Node 1 Normal: 4*4kB (UM) 9*8kB (UM) 9*16kB (UM) 8*32kB (UM) 14*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 961*4096kB (M) = 3948008kB [ 125.212681][ T6773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.212690][ T6773] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.212699][ T6773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.212707][ T6773] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.212716][ T6773] 56520 total pagecache pages [ 125.212725][ T6773] 3 pages in swap cache [ 125.212732][ T6773] Free swap = 124824kB [ 125.212739][ T6773] Total swap = 124996kB [ 125.212747][ T6773] 2097051 pages RAM [ 125.212754][ T6773] 0 pages HighMem/MovableOnly [ 125.212762][ T6773] 435276 pages reserved [ 125.212798][ T6773] 0 pages cma reserved [ 125.768804][ T5738] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 125.931729][ T5738] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.932426][ T5738] usb 3-1: not running at top speed; connect to a high speed hub [ 125.932457][ T5738] usb 3-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 125.934473][ T5738] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.934495][ T5738] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.934535][ T5738] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.937038][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 125.937082][ T5738] usb 3-1: Product: syz [ 125.937095][ T5738] usb 3-1: Manufacturer: syz [ 125.994987][ T5738] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 126.183133][ T5738] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 3: -71 (exp. 1). [ 126.184682][ T5738] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 3: -71 (exp. 1). [ 126.191659][ T5738] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 10 on unit 3: -71 (exp. 1). [ 126.193251][ T5738] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 3: -71 (exp. 1). [ 126.206065][ T5738] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 3: -71 (exp. 1). [ 126.206565][ T5738] uvcvideo 3-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 3: -71 (exp. 1). [ 126.207430][ T5738] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 16 on unit 3: -71 (exp. 1). [ 126.208007][ T5738] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 3: -71 (exp. 1). [ 126.208593][ T5738] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 3: -71 (exp. 1). [ 126.209107][ T5738] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 15 on unit 3: -71 (exp. 1). [ 126.209311][ T5738] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 126.209841][ T5738] uvcvideo 3-1:1.0: Failed to create links for entity 3 [ 126.209859][ T5738] uvcvideo 3-1:1.0: Failed to register entities (-22). [ 126.222085][ T5738] usb 3-1: USB disconnect, device number 10 [ 126.744642][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 126.847701][ T5738] usb 2-1: USB disconnect, device number 16 [ 126.896248][ T6781] jffs2: notice: (6781) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.047760][ T196] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 127.198715][ T196] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 127.199774][ T196] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 127.199799][ T196] usb 3-1: config 1 has no interface number 0 [ 127.201776][ T196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.201799][ T196] usb 3-1: Product: syz [ 127.201813][ T196] usb 3-1: Manufacturer: syz [ 127.201852][ T196] usb 3-1: SerialNumber: syz [ 127.210454][ T196] usb 3-1: 3:0 : does not exist [ 127.210476][ T196] usb 3-1: 3:0 : does not exist [ 127.237924][ T5738] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 127.388238][ T5738] usb 2-1: New USB device found: idVendor=1e7d, idProduct=2d50, bcdDevice=0.00 [ 127.389295][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 127.389314][ T5738] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.389340][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.391949][ T5738] usb 2-1: config 0 descriptor?? [ 127.409963][ T6779] FAULT_INJECTION: forcing a failure. [ 127.409963][ T6779] name failslab, interval 1, probability 0, space 0, times 0 [ 127.410022][ T6779] CPU: 0 UID: 0 PID: 6779 Comm: syz.2.268 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.410048][ T6779] Tainted: [L]=SOFTLOCKUP [ 127.410054][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.410065][ T6779] Call Trace: [ 127.410073][ T6779] [ 127.410080][ T6779] dump_stack_lvl+0xe8/0x150 [ 127.410114][ T6779] should_fail_ex+0x3eb/0x540 [ 127.410142][ T6779] should_failslab+0xa8/0x100 [ 127.410171][ T6779] __kmalloc_noprof+0xf9/0x710 [ 127.410195][ T6779] ? tomoyo_encode+0x2ad/0x570 [ 127.410212][ T6779] ? tomoyo_encode+0x2ad/0x570 [ 127.410236][ T6779] tomoyo_encode+0x2ad/0x570 [ 127.410259][ T6779] tomoyo_realpath_from_path+0x5fd/0x640 [ 127.410288][ T6779] ? tomoyo_path_number_perm+0x219/0x5f0 [ 127.410315][ T6779] tomoyo_path_number_perm+0x246/0x5f0 [ 127.410343][ T6779] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.410367][ T6779] ? __lock_acquire+0x747/0x2de0 [ 127.410424][ T6779] ? __fget_files+0x2a/0x420 [ 127.410449][ T6779] ? __fget_files+0x2a/0x420 [ 127.410472][ T6779] ? __fget_files+0x2a/0x420 [ 127.410498][ T6779] security_file_ioctl+0xc3/0x2a0 [ 127.410526][ T6779] __se_sys_ioctl+0x47/0x170 [ 127.410554][ T6779] do_syscall_64+0x166/0x520 [ 127.410576][ T6779] ? trace_irq_disable+0x3b/0x140 [ 127.410600][ T6779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.410619][ T6779] ? clear_bhb_loop+0x70/0xc0 [ 127.410641][ T6779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.410659][ T6779] RIP: 0033:0x7fdd33f9fb19 [ 127.410678][ T6779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.410693][ T6779] RSP: 002b:00007fdd321f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.410713][ T6779] RAX: ffffffffffffffda RBX: 00007fdd34225fa0 RCX: 00007fdd33f9fb19 [ 127.410727][ T6779] RDX: 0000200000000380 RSI: 00000000c4c85512 RDI: 0000000000000004 [ 127.410739][ T6779] RBP: 00007fdd321f6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.410758][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.410769][ T6779] R13: 00007fdd34226038 R14: 00007fdd34225fa0 R15: 00007ffcfc3872c8 [ 127.410800][ T6779] [ 127.410843][ T6779] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.414416][ T196] usb 3-1: USB disconnect, device number 11 [ 127.705544][ T33] audit: type=1326 audit(1793684521.971:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz.0.271" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafd0d9fb19 code=0x0 [ 127.806183][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 127.806222][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 127.807162][ T5738] hid_parser_main: 5 callbacks suppressed [ 127.807181][ T5738] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 127.807215][ T5738] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 127.807241][ T5738] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 127.807272][ T5738] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 127.807322][ T5738] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 127.807352][ T5738] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 127.807377][ T5738] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 127.807403][ T5738] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 127.807452][ T5738] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 127.807478][ T5738] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 127.808904][ T5738] kovaplus 0003:1E7D:2D50.0004: item fetching failed at offset 127/235 [ 127.809556][ T5738] kovaplus 0003:1E7D:2D50.0004: parse failed [ 127.809615][ T5738] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -22 [ 129.000465][ T2063] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 129.016599][ T2063] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 129.036250][ T2063] usb 5-1: USB disconnect, device number 3 [ 129.118018][ T6796] genirq: Flags mismatch irq 9. 00200000 (comedi_parport) vs. 00002080 (acpi) [ 130.008697][ T4955] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.010631][ T6789] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 130.887646][ T6789] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.895371][ T6789] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.895522][ T6789] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.911735][ T6789] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.921002][ T6789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.921154][ T6789] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.923482][ T6789] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.946478][ T6789] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.946799][ T6789] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 130.949556][ T6789] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 130.992378][ T2063] usb 2-1: USB disconnect, device number 17 [ 131.242457][ T6818] netlink: 'syz.2.280': attribute type 15 has an invalid length. [ 131.242485][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 131.242795][ T6818] netlink: 'syz.2.280': attribute type 15 has an invalid length. [ 131.242811][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 131.243053][ T6818] netlink: 'syz.2.280': attribute type 15 has an invalid length. [ 131.243068][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 131.243316][ T6818] netlink: 'syz.2.280': attribute type 15 has an invalid length. [ 131.243329][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 131.243540][ T6818] netlink: 'syz.2.280': attribute type 15 has an invalid length. [ 131.243553][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 131.288875][ T6818] netlink: 'syz.2.280': attribute type 15 has an invalid length. [ 131.288917][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 131.289218][ T6818] netlink: 'syz.2.280': attribute type 15 has an invalid length. [ 131.289231][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 131.289471][ T6818] netlink: 'syz.2.280': attribute type 15 has an invalid length. [ 131.289483][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 131.289702][ T6818] netlink: 'syz.2.280': attribute type 15 has an invalid length. [ 131.289715][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 131.289960][ T6818] netlink: 'syz.2.280': attribute type 15 has an invalid length. [ 131.289973][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 131.898529][ T6830] FAULT_INJECTION: forcing a failure. [ 131.898529][ T6830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.898556][ T6830] CPU: 1 UID: 0 PID: 6830 Comm: syz.1.283 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.898580][ T6830] Tainted: [L]=SOFTLOCKUP [ 131.898587][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.898597][ T6830] Call Trace: [ 131.898605][ T6830] [ 131.898612][ T6830] dump_stack_lvl+0xe8/0x150 [ 131.898643][ T6830] should_fail_ex+0x3eb/0x540 [ 131.898668][ T6830] _copy_from_user+0x2d/0xb0 [ 131.898689][ T6830] ___sys_recvmsg+0x173/0x5a0 [ 131.898715][ T6830] ? __pfx____sys_recvmsg+0x10/0x10 [ 131.898739][ T6830] ? lock_acquire+0x115/0x350 [ 131.898788][ T6830] do_recvmmsg+0x31a/0x800 [ 131.898818][ T6830] ? __pfx_do_recvmmsg+0x10/0x10 [ 131.898851][ T6830] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.898876][ T6830] ? fdget+0x1ac/0x250 [ 131.898914][ T6830] __x64_sys_recvmmsg+0x198/0x250 [ 131.898939][ T6830] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 131.898973][ T6830] do_syscall_64+0x166/0x520 [ 131.898995][ T6830] ? trace_irq_disable+0x3b/0x140 [ 131.899018][ T6830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.899037][ T6830] ? clear_bhb_loop+0x70/0xc0 [ 131.899060][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.899079][ T6830] RIP: 0033:0x7f5e15b9fb19 [ 131.899098][ T6830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.899114][ T6830] RSP: 002b:00007f5e16a52028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 131.899135][ T6830] RAX: ffffffffffffffda RBX: 00007f5e15e25fa0 RCX: 00007f5e15b9fb19 [ 131.899150][ T6830] RDX: 000000000000072a RSI: 0000200000002d80 RDI: 0000000000000004 [ 131.899162][ T6830] RBP: 00007f5e16a52090 R08: 0000000000000000 R09: 0000000000000000 [ 131.899175][ T6830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.899186][ T6830] R13: 00007f5e15e26038 R14: 00007f5e15e25fa0 R15: 00007ffc5a65a638 [ 131.899217][ T6830] [ 132.038550][ T4955] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.484589][ T196] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 132.631075][ T196] usb 3-1: Using ep0 maxpacket: 8 [ 132.632771][ T196] usb 3-1: New USB device found: idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 132.639824][ T196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.639868][ T196] usb 3-1: Product: syz [ 132.639883][ T196] usb 3-1: Manufacturer: syz [ 132.639897][ T196] usb 3-1: SerialNumber: syz [ 132.684760][ T196] usb 3-1: config 0 descriptor?? [ 132.711513][ T196] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 132.711556][ T196] pctv452e: pctv452e_power_ctrl: 1 [ 132.711556][ T196] [ 132.711620][ T196] usb 3-1: selecting invalid altsetting 3 [ 132.711635][ T196] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 132.711635][ T196] [ 132.719129][ T196] dvb-usb: bulk message failed: -22 (5/0) [ 132.735873][ T196] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.736771][ T196] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 132.736834][ T196] usb 3-1: media controller created [ 132.737234][ T196] dvb-usb: bulk message failed: -22 (8/0) [ 132.737248][ T196] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 132.737376][ T196] dvb-usb: MAC address reading failed. [ 132.743127][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.743247][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.909829][ T196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.918364][ T4955] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.918406][ T4955] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.973236][ T55] Bluetooth: hci4: command 0x0c1a tx timeout ** 1751 printk messages dropped ** [ 133.269095][ T196] DVB: Unable to find symbol stb0899_attach() [ 133.269103][ T196] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 133.517807][ T196] rc_core: IR keymap rc-tt-1500 not found [ 133.517821][ T196] Registered IR keymap rc-empty [ 133.532329][ T196] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1 [ 133.564894][ T196] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1/input10 [ 133.612130][ T196] dvb-usb: schedule remote query interval to 100 msecs. [ 133.612155][ T196] pctv452e: pctv452e_power_ctrl: 0 [ 133.612155][ T196] [ 133.612166][ T196] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 133.647287][ T196] usb 3-1: USB disconnect, device number 12 [ 133.808967][ T196] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 134.150121][ T6863] FAULT_INJECTION: forcing a failure. [ 134.150121][ T6863] name failslab, interval 1, probability 0, space 0, times 0 [ 134.150158][ T6863] CPU: 1 UID: 0 PID: 6863 Comm: syz.2.295 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.150190][ T6863] Tainted: [L]=SOFTLOCKUP [ 134.150199][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.150212][ T6863] Call Trace: [ 134.150221][ T6863] [ 134.150231][ T6863] dump_stack_lvl+0xe8/0x150 [ 134.150268][ T6863] should_fail_ex+0x3eb/0x540 [ 134.150301][ T6863] should_failslab+0xa8/0x100 [ 134.150331][ T6863] ? security_file_alloc+0x34/0x310 [ 134.150358][ T6863] kmem_cache_alloc_noprof+0x9c/0x600 [ 134.150380][ T6863] ? rcu_is_watching+0x16/0xb0 [ 134.150408][ T6863] ? security_file_alloc+0x34/0x310 [ 134.150439][ T6863] security_file_alloc+0x34/0x310 [ 134.150466][ T6863] init_file+0x90/0x2b0 [ 134.150491][ T6863] alloc_empty_file+0x74/0x1d0 [ 134.150514][ T6863] path_openat+0x96/0x20f0 [ 134.150569][ T6863] do_file_open+0x23e/0x4a0 [ 134.150604][ T6863] ? __pfx_do_file_open+0x10/0x10 [ 134.150653][ T6863] ? _raw_spin_unlock+0x28/0x50 [ 134.150674][ T6863] ? alloc_fd+0x6af/0x760 [ 134.150708][ T6863] do_sys_openat2+0x115/0x200 [ 134.150731][ T6863] ? __se_sys_futex+0x3a8/0x450 [ 134.150762][ T6863] ? __pfx_do_sys_openat2+0x10/0x10 [ 134.150790][ T6863] ? rcu_is_watching+0x16/0xb0 [ 134.150822][ T6863] __x64_sys_openat+0x138/0x170 [ 134.150853][ T6863] do_syscall_64+0x166/0x520 [ 134.150878][ T6863] ? trace_irq_disable+0x3b/0x140 [ 134.150902][ T6863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.150923][ T6863] ? clear_bhb_loop+0x70/0xc0 [ 134.150948][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.150969][ T6863] RIP: 0033:0x7fdd33f9fb19 [ 134.150990][ T6863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.151008][ T6863] RSP: 002b:00007fdd321f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.151031][ T6863] RAX: ffffffffffffffda RBX: 00007fdd34225fa0 RCX: 00007fdd33f9fb19 [ 134.151047][ T6863] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 134.151061][ T6863] RBP: 00007fdd34037b70 R08: 0000000000000000 R09: 0000000000000000 [ 134.151074][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.151088][ T6863] R13: 00007fdd34226038 R14: 00007fdd34225fa0 R15: 00007ffcfc3872c8 [ 134.151120][ T6863] [ 134.931134][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.931181][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.009368][ T4955] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.169939][ T6900] 0ªX¹¦Dö»: renamed from eql (while UP) [ 135.210558][ T6903] FAULT_INJECTION: forcing a failure. [ 135.210558][ T6903] name failslab, interval 1, probability 0, space 0, times 0 [ 135.210589][ T6903] CPU: 0 UID: 0 PID: 6903 Comm: syz.4.312 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.210616][ T6903] Tainted: [L]=SOFTLOCKUP [ 135.210626][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.210637][ T6903] Call Trace: [ 135.210652][ T6903] [ 135.210661][ T6903] dump_stack_lvl+0xe8/0x150 [ 135.210695][ T6903] should_fail_ex+0x3eb/0x540 [ 135.210722][ T6903] should_failslab+0xa8/0x100 [ 135.210753][ T6903] __kmalloc_cache_noprof+0x9e/0x600 [ 135.210778][ T6903] ? tomoyo_open_control+0x617/0x770 [ 135.210798][ T6903] ? tomoyo_open_control+0x617/0x770 [ 135.210827][ T6903] tomoyo_open_control+0x617/0x770 [ 135.210850][ T6903] ? __pfx_tomoyo_open+0x10/0x10 [ 135.210871][ T6903] do_dentry_open+0x80e/0x1360 [ 135.210902][ T6903] vfs_open_consume+0x4a/0x350 [ 135.210922][ T6903] ? path_openat+0x16e1/0x20f0 [ 135.210952][ T6903] path_openat+0x16fc/0x20f0 [ 135.210998][ T6903] do_file_open+0x23e/0x4a0 [ 135.211031][ T6903] ? __pfx_do_file_open+0x10/0x10 [ 135.211079][ T6903] ? _raw_spin_unlock+0x28/0x50 [ 135.211101][ T6903] ? alloc_fd+0x6af/0x760 [ 135.211136][ T6903] do_sys_openat2+0x115/0x200 [ 135.211159][ T6903] ? __pfx_do_sys_openat2+0x10/0x10 [ 135.211182][ T6903] ? ksys_write+0x242/0x270 [ 135.211211][ T6903] ? __pfx_ksys_write+0x10/0x10 [ 135.211241][ T6903] __x64_sys_openat+0x138/0x170 [ 135.211268][ T6903] do_syscall_64+0x166/0x520 [ 135.211291][ T6903] ? trace_irq_disable+0x3b/0x140 [ 135.211316][ T6903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.211336][ T6903] ? clear_bhb_loop+0x70/0xc0 [ 135.211361][ T6903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.211381][ T6903] RIP: 0033:0x7f2695d9fb19 [ 135.211408][ T6903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.211425][ T6903] RSP: 002b:00007f2696d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.211447][ T6903] RAX: ffffffffffffffda RBX: 00007f2696025fa0 RCX: 00007f2695d9fb19 [ 135.211468][ T6903] RDX: 0000000000000001 RSI: 00002000000050c0 RDI: ffffffffffffff9c [ 135.211487][ T6903] RBP: 00007f2696d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 135.211500][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.211511][ T6903] R13: 00007f2696026038 R14: 00007f2696025fa0 R15: 00007ffea588aa68 [ 135.211540][ T6903] [ 135.265808][ T5371] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 135.412439][ T5371] usb 2-1: device descriptor read/64, error -71 [ 135.585655][ T6906] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 135.646583][ T5371] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 135.774233][ T5371] usb 2-1: device descriptor read/64, error -71 [ 135.884724][ T5371] usb usb2-port1: attempt power cycle [ 136.215657][ T5371] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 136.233205][ T5718] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 136.237129][ T5371] usb 2-1: device descriptor read/8, error -71 [ 136.340326][ T6921] No source specified [ 136.372748][ T5718] usb 3-1: Using ep0 maxpacket: 16 [ 136.375101][ T5718] usb 3-1: New USB device found: idVendor=1e7d, idProduct=2db4, bcdDevice=0.00 [ 136.376915][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.376940][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.377017][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.385952][ T6923] comedi comedi1: 8255: I/O base address not correctly aligned [ 136.441362][ T5718] usb 3-1: config 0 descriptor?? [ 136.470937][ T5371] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 136.493244][ T5371] usb 2-1: device descriptor read/8, error -71 [ 136.584203][ C0] net_ratelimit: 579 callbacks suppressed [ 136.586591][ T6930] device-mapper: table: 248:3: snapshot: Chunk size not set (-EINVAL) [ 136.586613][ T6930] device-mapper: ioctl: error adding target to table [ 136.608932][ T5371] usb usb2-port1: unable to enumerate USB device [ 136.858732][ T5718] hid_parser_main: 105 callbacks suppressed [ 136.858775][ T5718] konepure 0003:1E7D:2DB4.0005: unknown main item tag 0x0 [ 136.858807][ T5718] konepure 0003:1E7D:2DB4.0005: unknown main item tag 0x0 [ 136.858835][ T5718] konepure 0003:1E7D:2DB4.0005: unknown main item tag 0x0 [ 136.858860][ T5718] konepure 0003:1E7D:2DB4.0005: unknown main item tag 0x0 [ 136.872351][ T5718] konepure 0003:1E7D:2DB4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 136.912693][ T5371] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.972630][ T4955] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.972682][ T4955] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.050301][ T2063] usb 3-1: USB disconnect, device number 13 [ 137.051969][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.084965][ T5371] usb 5-1: New USB device found: idVendor=0545, idProduct=8080, bcdDevice=3.0a [ 137.089046][ T5371] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.112894][ T5371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.112915][ T5371] usb 5-1: Product: syz [ 137.112930][ T5371] usb 5-1: Manufacturer: syz [ 137.112944][ T5371] usb 5-1: SerialNumber: syz [ 137.121430][ T6941] fido_id[6941]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 137.197293][ T5371] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 137.223111][ T5371] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 137.796737][ T6946] FAULT_INJECTION: forcing a failure. [ 137.796737][ T6946] name failslab, interval 1, probability 0, space 0, times 0 [ 137.796854][ T6946] CPU: 0 UID: 0 PID: 6946 Comm: syz.2.326 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.796883][ T6946] Tainted: [L]=SOFTLOCKUP [ 137.796892][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.796905][ T6946] Call Trace: [ 137.796916][ T6946] [ 137.796925][ T6946] dump_stack_lvl+0xe8/0x150 [ 137.796959][ T6946] should_fail_ex+0x3eb/0x540 [ 137.796986][ T6946] should_failslab+0xa8/0x100 [ 137.797021][ T6946] __kmalloc_noprof+0xf9/0x710 [ 137.797046][ T6946] ? ops_init+0x7b/0x5d0 [ 137.797064][ T6946] ? ops_init+0x7b/0x5d0 [ 137.797089][ T6946] ops_init+0x7b/0x5d0 [ 137.797117][ T6946] setup_net+0x118/0x350 [ 137.797150][ T6946] ? __pfx_setup_net+0x10/0x10 [ 137.797180][ T6946] ? down_read_killable+0x1b6/0x3b0 [ 137.797211][ T6946] ? __ns_common_init+0x384/0x590 [ 137.797246][ T6946] copy_net_ns+0x536/0x770 [ 137.797280][ T6946] create_new_namespaces+0x3f0/0x6b0 [ 137.797310][ T6946] ? security_capable+0x7e/0x2c0 [ 137.797348][ T6946] unshare_nsproxy_namespaces+0x144/0x190 [ 137.797379][ T6946] ksys_unshare+0x532/0x890 [ 137.797408][ T6946] ? __pfx_ksys_unshare+0x10/0x10 [ 137.797438][ T6946] ? rcu_is_watching+0x16/0xb0 [ 137.797472][ T6946] __x64_sys_unshare+0x38/0x50 [ 137.797498][ T6946] do_syscall_64+0x166/0x520 [ 137.797522][ T6946] ? trace_irq_disable+0x3b/0x140 [ 137.797548][ T6946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.797570][ T6946] ? clear_bhb_loop+0x70/0xc0 [ 137.797595][ T6946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.797617][ T6946] RIP: 0033:0x7fdd33f9fb19 [ 137.797637][ T6946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.797655][ T6946] RSP: 002b:00007fdd321f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 137.797677][ T6946] RAX: ffffffffffffffda RBX: 00007fdd34225fa0 RCX: 00007fdd33f9fb19 [ 137.797694][ T6946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 137.797707][ T6946] RBP: 00007fdd34037b70 R08: 0000000000000000 R09: 0000000000000000 [ 137.797721][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.797734][ T6946] R13: 00007fdd34226038 R14: 00007fdd34225fa0 R15: 00007ffcfc3872c8 [ 137.797769][ T6946] [ 138.304910][ T6954] __nla_validate_parse: 31 callbacks suppressed [ 138.304925][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 139.264917][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 139.305831][ T6972] loop6: detected capacity change from 0 to 2640 [ 139.339872][ T5657] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.340603][ T5657] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.341239][ T5657] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.341861][ T5657] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.343573][ T5657] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.508007][ T6975] use of bytesused == 0 is deprecated and will be removed in the future, [ 139.508025][ T6975] use the actual size instead. [ 139.690680][ T5371] usb 5-1: USB disconnect, device number 4 [ 140.306775][ T6992] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'. [ 140.552496][ T6991] FAULT_INJECTION: forcing a failure. [ 140.552496][ T6991] name failslab, interval 1, probability 0, space 0, times 0 [ 140.552531][ T6991] CPU: 1 UID: 0 PID: 6991 Comm: syz.2.340 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.552560][ T6991] Tainted: [L]=SOFTLOCKUP [ 140.552568][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 140.552581][ T6991] Call Trace: [ 140.552590][ T6991] [ 140.552599][ T6991] dump_stack_lvl+0xe8/0x150 [ 140.552636][ T6991] should_fail_ex+0x3eb/0x540 [ 140.552663][ T6991] should_failslab+0xa8/0x100 [ 140.552698][ T6991] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 140.552723][ T6991] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 140.552746][ T6991] ? xas_split_alloc+0x19c/0x4c0 [ 140.552771][ T6991] ? xas_split_alloc+0x19c/0x4c0 [ 140.552803][ T6991] xas_split_alloc+0x19c/0x4c0 [ 140.552843][ T6991] __folio_split+0xc2e/0x2250 [ 140.552884][ T6991] ? __pfx___folio_split+0x10/0x10 [ 140.552907][ T6991] ? __up_read+0x29c/0x930 [ 140.552940][ T6991] ? folio_alloc_swap+0x2cc/0x12e0 [ 140.552973][ T6991] shmem_writeout+0x571/0x1850 [ 140.553011][ T6991] ? __pfx_shmem_writeout+0x10/0x10 [ 140.553037][ T6991] ? folio_mapping+0x16f/0x1f0 [ 140.553064][ T6991] ? folio_clear_dirty_for_io+0x162/0x820 [ 140.553105][ T6991] ? try_to_unmap_flush_dirty+0x96/0x100 [ 140.553131][ T6991] shrink_folio_list+0x2f65/0x4d90 [ 140.553193][ T6991] ? __pfx_shrink_folio_list+0x10/0x10 [ 140.553213][ T6991] ? rcu_is_watching+0x16/0xb0 [ 140.553242][ T6991] ? lock_release+0x4b/0x3c0 [ 140.553263][ T6991] ? lock_release+0x4b/0x3c0 [ 140.553293][ T6991] ? is_bpf_text_address+0x292/0x2b0 [ 140.553324][ T6991] ? is_bpf_text_address+0x26/0x2b0 [ 140.553383][ T6991] ? stack_trace_save+0xa9/0x100 [ 140.553406][ T6991] ? __pfx_stack_trace_save+0x10/0x10 [ 140.553437][ T6991] ? check_noncircular+0xdb/0x150 [ 140.553469][ T6991] ? __pfx___css_rstat_updated+0x10/0x10 [ 140.553505][ T6991] reclaim_folio_list+0x100/0x430 [ 140.553543][ T6991] ? __pfx_reclaim_folio_list+0x10/0x10 [ 140.553581][ T6991] reclaim_pages+0x452/0x530 [ 140.553612][ T6991] ? __pfx_reclaim_pages+0x10/0x10 [ 140.553636][ T6991] ? do_raw_spin_unlock+0xf5/0x200 [ 140.553670][ T6991] madvise_cold_or_pageout_pte_range+0x18de/0x2390 [ 140.553722][ T6991] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 140.553753][ T6991] ? lru_gen_update_size+0x719/0xd00 [ 140.553800][ T6991] walk_pgd_range+0x102d/0x1dc0 [ 140.553864][ T6991] ? __pfx_walk_pgd_range+0x10/0x10 [ 140.553893][ T6991] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 140.553928][ T6991] __walk_page_range+0x16d/0x720 [ 140.553977][ T6991] walk_page_range_vma_unsafe+0x309/0x410 [ 140.554015][ T6991] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 140.554049][ T6991] ? mlock_drain_local+0x79/0x490 [ 140.554079][ T6991] ? walk_page_range_vma+0x6b/0x90 [ 140.554110][ T6991] madvise_vma_behavior+0x2d41/0x4cb0 [ 140.554146][ T6991] ? __lock_acquire+0x747/0x2de0 [ 140.554178][ T6991] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 140.554225][ T6991] ? __lock_acquire+0x747/0x2de0 [ 140.554255][ T6991] ? __lock_acquire+0x747/0x2de0 [ 140.554297][ T6991] ? lock_acquire+0x115/0x350 [ 140.554357][ T6991] ? mas_prev_slot+0xb76/0xbf0 [ 140.554401][ T6991] ? find_vma_prev+0x123/0x1b0 [ 140.554434][ T6991] ? __pfx_find_vma_prev+0x10/0x10 [ 140.554485][ T6991] madvise_walk_vmas+0x57d/0xb70 [ 140.554522][ T6991] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 140.554552][ T6991] ? blk_start_plug+0x6e/0x1b0 [ 140.554585][ T6991] madvise_do_behavior+0x385/0x540 [ 140.554615][ T6991] ? __pfx_madvise_do_behavior+0x10/0x10 [ 140.554647][ T6991] ? down_read+0x2b9/0x320 [ 140.554682][ T6991] do_madvise+0x327/0x3a0 [ 140.554711][ T6991] ? __pfx_do_madvise+0x10/0x10 [ 140.554746][ T6991] ? __se_sys_futex+0x3a8/0x450 [ 140.554784][ T6991] ? rcu_is_watching+0x16/0xb0 [ 140.554819][ T6991] __x64_sys_madvise+0xa6/0xc0 [ 140.554847][ T6991] do_syscall_64+0x166/0x520 [ 140.554872][ T6991] ? trace_irq_disable+0x3b/0x140 [ 140.554897][ T6991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.554917][ T6991] ? clear_bhb_loop+0x70/0xc0 [ 140.554943][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.554963][ T6991] RIP: 0033:0x7fdd33f9fb19 [ 140.554984][ T6991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.555002][ T6991] RSP: 002b:00007fdd321f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 140.555025][ T6991] RAX: ffffffffffffffda RBX: 00007fdd34225fa0 RCX: 00007fdd33f9fb19 [ 140.555042][ T6991] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 140.555057][ T6991] RBP: 00007fdd34037b70 R08: 0000000000000000 R09: 0000000000000000 [ 140.555071][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.555083][ T6991] R13: 00007fdd34226038 R14: 00007fdd34225fa0 R15: 00007ffcfc3872c8 [ 140.555118][ T6991] [ 141.302193][ T7003] capability: warning: `syz.2.344' uses deprecated v2 capabilities in a way that may be insecure [ 141.378850][ T6997] XFS (nullb0): no-recovery mounts must be read-only. [ 141.544003][ T6080] net_ratelimit: 1157 callbacks suppressed [ 141.552111][ T196] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 141.663539][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 141.680015][ T196] usb 3-1: device descriptor read/64, error -71 [ 141.916303][ T196] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 142.047676][ T196] usb 3-1: device descriptor read/64, error -71 [ 142.154742][ T196] usb usb3-port1: attempt power cycle [ 142.259847][ T7040] device-mapper: table: 248:4: ram3 too small for target: start=1024, len=8272, dev_size=8192 [ 142.259870][ T7040] device-mapper: core: Cannot calculate initial queue limits [ 142.259879][ T7040] device-mapper: ioctl: unable to set up device queue for new table. [ 142.489095][ T196] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 142.509667][ T196] usb 3-1: device descriptor read/8, error -71 [ 142.748319][ T196] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 142.766433][ T196] usb 3-1: device descriptor read/8, error -71 [ 142.875883][ T196] usb usb3-port1: unable to enumerate USB device [ 143.103006][ T5371] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.250498][ T5371] usb 5-1: New USB device found: idVendor=1286, idProduct=2046, bcdDevice=1.00 [ 143.251778][ T5371] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.251801][ T5371] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.254891][ T5371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.254911][ T5371] usb 5-1: Product: syz [ 143.254926][ T5371] usb 5-1: Manufacturer: syz [ 143.254941][ T5371] usb 5-1: SerialNumber: syz [ 143.280507][ T5371] usb 5-1: NFC: intf ffff88802d44e000 id ffffffff90c92320 [ 143.362730][ T5371] nfcmrvl 5-1:1.0: NFC: registered with nci successfully [ 143.485431][ T6003] nfcmrvl 5-1:1.0: NFC: send entry, len 4 [ 143.485708][ T6003] usb 5-1: NFC: urb ffff888027679200 submission failed (90) [ 143.533717][ T7066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.540452][ T5371] usb 5-1: USB disconnect, device number 5 [ 143.560082][ T5371] usb 5-1: NFC: intf ffff88802d44e000 [ 143.920696][ T7098] FAULT_INJECTION: forcing a failure. [ 143.920696][ T7098] name failslab, interval 1, probability 0, space 0, times 0 [ 143.920724][ T7098] CPU: 1 UID: 0 PID: 7098 Comm: syz.1.363 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.920750][ T7098] Tainted: [L]=SOFTLOCKUP [ 143.920757][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 143.920769][ T7098] Call Trace: [ 143.920777][ T7098] [ 143.920786][ T7098] dump_stack_lvl+0xe8/0x150 [ 143.920819][ T7098] should_fail_ex+0x3eb/0x540 [ 143.920845][ T7098] should_failslab+0xa8/0x100 [ 143.920873][ T7098] ? __kernfs_new_node+0xe6/0x980 [ 143.920893][ T7098] kmem_cache_alloc_noprof+0x9c/0x600 [ 143.920918][ T7098] ? __kernfs_new_node+0xe6/0x980 [ 143.920944][ T7098] __kernfs_new_node+0xe6/0x980 [ 143.920974][ T7098] ? __pfx___kernfs_new_node+0x10/0x10 [ 143.920995][ T7098] ? kernfs_root+0x1c/0x230 [ 143.921021][ T7098] ? kernfs_root+0x1c/0x230 [ 143.921039][ T7098] ? kernfs_root+0x1c/0x230 [ 143.921056][ T7098] ? kernfs_root+0x1c/0x230 [ 143.921079][ T7098] kernfs_new_node+0xea/0x140 [ 143.921101][ T7098] __kernfs_create_file+0x4b/0x2e0 [ 143.921126][ T7098] sysfs_add_file_mode_ns+0x237/0x300 [ 143.921159][ T7098] internal_create_group+0x679/0x1180 [ 143.921191][ T7098] ? __pfx_internal_create_group+0x10/0x10 [ 143.921213][ T7098] ? up_write+0x19d/0x4a0 [ 143.921243][ T7098] sysfs_create_groups+0x59/0x120 [ 143.921266][ T7098] device_add_attrs+0x12c/0x600 [ 143.921288][ T7098] ? __pfx_device_add_attrs+0x10/0x10 [ 143.921307][ T7098] ? kobject_put+0x50f/0x550 [ 143.921338][ T7098] ? device_add_class_symlinks+0x21f/0x240 [ 143.921361][ T7098] device_add+0x488/0xb80 [ 143.921384][ T7098] input_register_device+0xa1f/0x11b0 [ 143.921414][ T7098] uinput_create_device+0x53e/0x690 [ 143.921454][ T7098] uinput_ioctl_handler+0x433/0x15a0 [ 143.921483][ T7098] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 143.921518][ T7098] ? __fget_files+0x2a/0x420 [ 143.921550][ T7098] ? bpf_lsm_file_ioctl+0x9/0x20 [ 143.921575][ T7098] ? __pfx_uinput_ioctl+0x10/0x10 [ 143.921600][ T7098] __se_sys_ioctl+0xfc/0x170 [ 143.921629][ T7098] do_syscall_64+0x166/0x520 [ 143.921652][ T7098] ? trace_irq_disable+0x3b/0x140 [ 143.921675][ T7098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.921695][ T7098] ? clear_bhb_loop+0x70/0xc0 [ 143.921719][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.921739][ T7098] RIP: 0033:0x7f5e15b9fb19 [ 143.921757][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.921772][ T7098] RSP: 002b:00007f5e16a52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.921792][ T7098] RAX: ffffffffffffffda RBX: 00007f5e15e25fa0 RCX: 00007f5e15b9fb19 [ 143.921807][ T7098] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000a [ 143.921820][ T7098] RBP: 00007f5e15c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 143.921832][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.921845][ T7098] R13: 00007f5e15e26038 R14: 00007f5e15e25fa0 R15: 00007ffc5a65a638 [ 143.921878][ T7098] [ 144.324960][ T7105] Bluetooth: MGMT ver 1.23 [ 144.374663][ T7108] binder: Failure when writing BR_NOOP at beginning of buffer. [ 144.374682][ T7108] binder: Read failure Err(EFAULT) in pid:300 [ 144.806553][ T2063] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 144.953756][ T2063] usb 3-1: Using ep0 maxpacket: 32 [ 144.955815][ T2063] usb 3-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 144.959447][ T2063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.959467][ T2063] usb 3-1: Product: syz [ 144.959480][ T2063] usb 3-1: Manufacturer: syz [ 144.959494][ T2063] usb 3-1: SerialNumber: syz [ 145.007517][ T2063] usb 3-1: config 0 descriptor?? [ 145.021895][ T2063] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 145.057391][ T7132] FAULT_INJECTION: forcing a failure. [ 145.057391][ T7132] name failslab, interval 1, probability 0, space 0, times 0 [ 145.057433][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.4.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.057460][ T7132] Tainted: [L]=SOFTLOCKUP [ 145.057467][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 145.057479][ T7132] Call Trace: [ 145.057490][ T7132] [ 145.057499][ T7132] dump_stack_lvl+0xe8/0x150 [ 145.057531][ T7132] should_fail_ex+0x3eb/0x540 [ 145.057558][ T7132] should_failslab+0xa8/0x100 [ 145.057588][ T7132] __kmalloc_cache_noprof+0x9e/0x600 [ 145.057613][ T7132] ? io_wq_create+0x6b/0x7b0 [ 145.057634][ T7132] ? io_wq_create+0x6b/0x7b0 [ 145.057669][ T7132] io_wq_create+0x6b/0x7b0 [ 145.057691][ T7132] ? __init_waitqueue_head+0xa8/0x150 [ 145.057723][ T7132] io_uring_alloc_task_context+0x271/0x6c0 [ 145.057750][ T7132] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 145.057787][ T7132] ? alloc_file_pseudo+0x151/0x1e0 [ 145.057812][ T7132] __io_uring_add_tctx_node+0x499/0x640 [ 145.057847][ T7132] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 145.057880][ T7132] ? __anon_inode_getfile+0x169/0x200 [ 145.057907][ T7132] io_uring_create+0x591/0x980 [ 145.057933][ T7132] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 145.057953][ T7132] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 145.057980][ T7132] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 145.058015][ T7132] ? __pfx_ksys_write+0x10/0x10 [ 145.058052][ T7132] do_syscall_64+0x166/0x520 [ 145.058074][ T7132] ? trace_irq_disable+0x3b/0x140 [ 145.058106][ T7132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.058126][ T7132] ? clear_bhb_loop+0x70/0xc0 [ 145.058150][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.058170][ T7132] RIP: 0033:0x7f2695d9fb19 [ 145.058188][ T7132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.058205][ T7132] RSP: 002b:00007f2696d0eee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 145.058226][ T7132] RAX: ffffffffffffffda RBX: 00002000000001c8 RCX: 00007f2695d9fb19 [ 145.058241][ T7132] RDX: 0000200000000248 RSI: 00002000000001c8 RDI: 000000000000048f [ 145.058255][ T7132] RBP: 00002000000001c0 R08: 0000000000000000 R09: 0000000000000000 [ 145.058267][ T7132] R10: 0000200000000250 R11: 0000000000000206 R12: 0000200000000248 [ 145.058280][ T7132] R13: 0000200000000250 R14: 00007f2696d0efd8 R15: 0000000000000000 [ 145.058312][ T7132] ** 863 printk messages dropped ** ** 264 printk messages dropped ** ** 250 printk messages dropped ** ** 227 printk messages dropped ** ** 244 printk messages dropped ** ** 248 printk messages dropped ** ** 63 printk messages dropped ** ** 331 printk messages dropped ** ** 291 printk messages dropped ** ** 293 printk messages dropped ** ** 249 printk messages dropped ** ** 228 printk messages dropped ** ** 219 printk messages dropped ** ** 251 printk messages dropped ** ** 218 printk messages dropped ** ** 233 printk messages dropped ** ** 237 printk messages dropped ** ** 205 printk messages dropped ** ** 214 printk messages dropped ** ** 237 printk messages dropped ** ** 222 printk messages dropped ** ** 242 printk messages dropped ** ** 264 printk messages dropped ** ** 243 printk messages dropped ** ** 236 printk messages dropped ** ** 267 printk messages dropped ** ** 250 printk messages dropped ** ** 253 printk messages dropped ** ** 272 printk messages dropped ** ** 258 printk messages dropped ** ** 244 printk messages dropped ** ** 268 printk messages dropped ** ** 246 printk messages dropped ** ** 244 printk messages dropped ** ** 274 printk messages dropped ** ** 47 printk messages dropped ** [ 146.454116][ T7142] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.675176][ T196] net_ratelimit: 765 callbacks suppressed [ 146.781616][ T7142] wg1 speed is unknown, defaulting to 1000 ** 353 printk messages dropped ** ** 237 printk messages dropped ** ** 75 printk messages dropped ** [ 148.395107][ T7165] netlink: 68 bytes leftover after parsing attributes in process `syz.0.382'. [ 148.676249][ T7165] nbd: device at index 0 is going down [ 148.809084][ T7172] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 148.810704][ T7172] FAULT_INJECTION: forcing a failure. [ 148.810704][ T7172] name failslab, interval 1, probability 0, space 0, times 0 [ 148.810732][ T7172] CPU: 0 UID: 0 PID: 7172 Comm: syz.1.385 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.810758][ T7172] Tainted: [L]=SOFTLOCKUP [ 148.810765][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 148.810776][ T7172] Call Trace: [ 148.810784][ T7172] [ 148.810794][ T7172] dump_stack_lvl+0xe8/0x150 [ 148.810829][ T7172] should_fail_ex+0x3eb/0x540 [ 148.810856][ T7172] should_failslab+0xa8/0x100 [ 148.810884][ T7172] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 148.810915][ T7172] kmem_cache_alloc_noprof+0x9c/0x600 [ 148.810936][ T7172] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 148.810962][ T7172] ? kmem_cache_alloc_noprof+0x151/0x600 [ 148.810982][ T7172] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 148.811018][ T7172] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 148.811060][ T7172] mmu_topup_memory_caches+0x21/0x1a0 [ 148.811083][ T7172] kvm_mmu_load+0x9d/0x21e0 [ 148.811106][ T7172] ? kvm_write_guest_offset_cached+0x36e/0x470 [ 148.811136][ T7172] ? kvm_lapic_sync_to_vapic+0x664/0x880 [ 148.811167][ T7172] ? __pfx_kvm_lapic_sync_to_vapic+0x10/0x10 [ 148.811200][ T7172] ? vmx_update_cr8_intercept+0x35d/0x570 [ 148.811232][ T7172] vcpu_run+0x4f5b/0x7a90 [ 148.811328][ T7172] ? __pfx_vcpu_run+0x10/0x10 [ 148.811349][ T7172] ? lock_acquire+0x115/0x350 [ 148.811375][ T7172] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 148.811401][ T7172] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 148.811437][ T7172] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 148.811462][ T7172] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 148.811495][ T7172] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 148.811523][ T7172] kvm_vcpu_ioctl+0xa61/0xfd0 [ 148.811552][ T7172] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 148.811595][ T7172] ? __fget_files+0x2a/0x420 [ 148.811622][ T7172] ? __fget_files+0x2a/0x420 [ 148.811647][ T7172] ? __fget_files+0x2a/0x420 [ 148.811675][ T7172] ? bpf_lsm_file_ioctl+0x9/0x20 [ 148.811701][ T7172] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 148.811723][ T7172] __se_sys_ioctl+0xfc/0x170 [ 148.811754][ T7172] do_syscall_64+0x166/0x520 [ 148.811778][ T7172] ? trace_irq_disable+0x3b/0x140 [ 148.811802][ T7172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.811823][ T7172] ? clear_bhb_loop+0x70/0xc0 [ 148.811848][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.811868][ T7172] RIP: 0033:0x7f5e15b9fb19 [ 148.811887][ T7172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.811904][ T7172] RSP: 002b:00007f5e16a52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.811926][ T7172] RAX: ffffffffffffffda RBX: 00007f5e15e25fa0 RCX: 00007f5e15b9fb19 [ 148.811941][ T7172] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 148.811954][ T7172] RBP: 00007f5e16a52090 R08: 0000000000000000 R09: 0000000000000000 [ 148.811966][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.811978][ T7172] R13: 00007f5e15e26038 R14: 00007f5e15e25fa0 R15: 00007ffc5a65a638 [ 148.812012][ T7172] [ 148.846138][ T11] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 149.016575][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 149.027124][ T11] usb 5-1: New USB device found: idVendor=056a, idProduct=0000, bcdDevice=0.00 [ 149.046999][ T11] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 149.047036][ T11] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.047061][ T11] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.047082][ T11] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 149.047107][ T11] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.047182][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.103623][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'. [ 149.246868][ T7179] netlink: 56 bytes leftover after parsing attributes in process `syz.0.387'. [ 149.282057][ T11] usb 5-1: config 0 descriptor?? [ 149.460806][ T2063] gspca_stk1135: reg_w 0x1b err -71 [ 149.461856][ T2063] gspca_stk1135: serial bus timeout: status=0x00 [ 149.461869][ T2063] gspca_stk1135: Sensor write failed [ 149.461899][ T2063] gspca_stk1135: serial bus timeout: status=0x00 [ 149.461909][ T2063] gspca_stk1135: Sensor write failed [ 149.461943][ T2063] gspca_stk1135: serial bus timeout: status=0x00 [ 149.461953][ T2063] gspca_stk1135: Sensor read failed [ 149.461982][ T2063] gspca_stk1135: serial bus timeout: status=0x00 [ 149.461991][ T2063] gspca_stk1135: Sensor read failed [ 149.461999][ T2063] gspca_stk1135: Detected sensor type unknown (0x0) [ 149.462031][ T2063] gspca_stk1135: serial bus timeout: status=0x00 [ 149.462040][ T2063] gspca_stk1135: Sensor read failed [ 149.462068][ T2063] gspca_stk1135: serial bus timeout: status=0x00 [ 149.462076][ T2063] gspca_stk1135: Sensor read failed [ 149.462103][ T2063] gspca_stk1135: serial bus timeout: status=0x00 [ 149.462113][ T2063] gspca_stk1135: Sensor write failed [ 149.462139][ T2063] gspca_stk1135: serial bus timeout: status=0x00 [ 149.462148][ T2063] gspca_stk1135: Sensor write failed [ 149.462220][ T2063] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 149.464955][ T2063] usb 3-1: USB disconnect, device number 18 [ 149.499202][ T7168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.568256][ T7168] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 149.843415][ T11] wacom 0003:056A:0000.0006: ignoring exceeding usage max [ 149.857253][ T11] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 149.857288][ T11] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 149.857316][ T11] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 149.857364][ T11] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 149.857392][ T11] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 149.857417][ T11] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 149.857569][ T11] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 149.857600][ T11] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 149.857626][ T11] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 149.857678][ T11] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 149.862192][ T11] wacom 0003:056A:0000.0006: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 149.955430][ T11] wacom 0003:056A:0000.0006: hidraw0: USB HID v0.81 Device [HID 056a:0000] on usb-dummy_hcd.4-1/input0 [ 149.980726][ T11] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0000.0006/input/input13 [ 150.096937][ T11] usb 5-1: USB disconnect, device number 6 [ 150.200268][ T7202] fido_id[7202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 150.407854][ T7209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.392'. [ 150.506470][ T7215] netlink: 128 bytes leftover after parsing attributes in process `syz.2.395'. [ 150.649531][ T7213] FAULT_INJECTION: forcing a failure. [ 150.649531][ T7213] name failslab, interval 1, probability 0, space 0, times 0 [ 150.649556][ T7213] CPU: 0 UID: 0 PID: 7213 Comm: syz.0.394 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.649582][ T7213] Tainted: [L]=SOFTLOCKUP [ 150.649590][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 150.649603][ T7213] Call Trace: [ 150.649611][ T7213] [ 150.649620][ T7213] dump_stack_lvl+0xe8/0x150 [ 150.649658][ T7213] should_fail_ex+0x3eb/0x540 [ 150.649684][ T7213] should_failslab+0xa8/0x100 [ 150.649716][ T7213] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 150.649742][ T7213] ? __kasan_kmalloc+0x93/0xb0 [ 150.649768][ T7213] ? __request_module+0x2ec/0x630 [ 150.649804][ T7213] ? __request_module+0x2ec/0x630 [ 150.649832][ T7213] ? __kmalloc_cache_noprof+0x148/0x600 [ 150.649860][ T7213] kstrdup+0x42/0x100 [ 150.649881][ T7213] __request_module+0x2ec/0x630 [ 150.649913][ T7213] ? __pfx___request_module+0x10/0x10 [ 150.649941][ T7213] ? __mutex_unlock_slowpath+0x731/0x900 [ 150.649988][ T7213] load_settype+0x3a/0xe0 [ 150.650009][ T7213] ip_set_create+0x4d6/0x1a50 [ 150.650030][ T7213] ? ip_set_create+0x4ef/0x1a50 [ 150.650061][ T7213] ? __pfx_ip_set_create+0x10/0x10 [ 150.650113][ T7213] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 150.650144][ T7213] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 150.650190][ T7213] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 150.650252][ T7213] ? hook_capable+0x1c3/0x5e0 [ 150.650281][ T7213] netlink_rcv_skb+0x226/0x4a0 [ 150.650311][ T7213] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 150.650344][ T7213] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.650385][ T7213] ? bpf_lsm_capable+0x9/0x20 [ 150.650413][ T7213] ? security_capable+0x7e/0x2c0 [ 150.650451][ T7213] nfnetlink_rcv+0x2b9/0x28c0 [ 150.650485][ T7213] ? __dev_queue_xmit+0x29b/0x3920 [ 150.650515][ T7213] ? __local_bh_enable_ip+0xd6/0x140 [ 150.650542][ T7213] ? lockdep_hardirqs_on+0x7b/0x110 [ 150.650568][ T7213] ? __dev_queue_xmit+0x29b/0x3920 [ 150.650593][ T7213] ? __local_bh_enable_ip+0xd6/0x140 [ 150.650618][ T7213] ? __dev_queue_xmit+0x29b/0x3920 [ 150.650643][ T7213] ? __dev_queue_xmit+0x1efb/0x3920 [ 150.650673][ T7213] ? __dev_queue_xmit+0x29b/0x3920 [ 150.650705][ T7213] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 150.650744][ T7213] ? __pfx___dev_queue_xmit+0x10/0x10 [ 150.650780][ T7213] ? __copy_skb_header+0xa3/0x4a0 [ 150.650814][ T7213] ? __asan_memcpy+0x40/0x70 [ 150.650839][ T7213] ? __skb_clone+0x5c/0x760 [ 150.650867][ T7213] ? __skb_clone+0x4a2/0x760 [ 150.650896][ T7213] ? skb_clone+0x246/0x3a0 [ 150.650922][ T7213] ? __netlink_deliver_tap+0x681/0x6e0 [ 150.650951][ T7213] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.650988][ T7213] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.651017][ T7213] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.651054][ T7213] netlink_unicast+0x8ef/0xa80 [ 150.651098][ T7213] netlink_sendmsg+0x7f0/0xb20 [ 150.651135][ T7213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.651169][ T7213] ? aa_sock_msg_perm+0x144/0x210 [ 150.651207][ T7213] ? apparmor_socket_sendmsg+0x98/0x360 [ 150.651238][ T7213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.651267][ T7213] sock_sendmsg_nosec+0x14e/0x190 [ 150.651298][ T7213] ____sys_sendmsg+0x54e/0x850 [ 150.651327][ T7213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.651360][ T7213] ? import_iovec+0x73/0xa0 [ 150.651387][ T7213] ___sys_sendmsg+0x2a6/0x360 [ 150.651408][ T7213] ? __lock_acquire+0x747/0x2de0 [ 150.651437][ T7213] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.651464][ T7213] ? futex_wait+0x2a2/0x390 [ 150.651518][ T7213] ? __fget_files+0x3a2/0x420 [ 150.651543][ T7213] ? __fget_files+0x2a/0x420 [ 150.651578][ T7213] __x64_sys_sendmsg+0x1b1/0x290 [ 150.651604][ T7213] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.651650][ T7213] do_syscall_64+0x166/0x520 [ 150.651675][ T7213] ? trace_irq_disable+0x3b/0x140 [ 150.651700][ T7213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.651722][ T7213] ? clear_bhb_loop+0x70/0xc0 [ 150.651749][ T7213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.651770][ T7213] RIP: 0033:0x7fafd0d9fb19 [ 150.651800][ T7213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.651818][ T7213] RSP: 002b:00007fafd1b81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.651840][ T7213] RAX: ffffffffffffffda RBX: 00007fafd1025fa0 RCX: 00007fafd0d9fb19 [ 150.651855][ T7213] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 150.651870][ T7213] RBP: 00007fafd0e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 150.651883][ T7213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.651896][ T7213] R13: 00007fafd1026038 R14: 00007fafd1025fa0 R15: 00007ffd2b9000b8 [ 150.651930][ T7213] [ 150.665451][ T7213] Can't find ip_set type [ 150.985571][ T7222] FAULT_INJECTION: forcing a failure. [ 150.985571][ T7222] name failslab, interval 1, probability 0, space 0, times 0 [ 150.985603][ T7222] CPU: 0 UID: 0 PID: 7222 Comm: syz.1.396 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.985631][ T7222] Tainted: [L]=SOFTLOCKUP [ 150.985638][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 150.985651][ T7222] Call Trace: [ 150.985659][ T7222] [ 150.985668][ T7222] dump_stack_lvl+0xe8/0x150 [ 150.985703][ T7222] should_fail_ex+0x3eb/0x540 [ 150.985731][ T7222] should_failslab+0xa8/0x100 [ 150.985771][ T7222] __kmalloc_noprof+0xf9/0x710 [ 150.985794][ T7222] ? rcu_is_watching+0x16/0xb0 [ 150.985823][ T7222] ? tomoyo_realpath_from_path+0xf2/0x640 [ 150.985844][ T7222] ? tomoyo_realpath_from_path+0xf2/0x640 [ 150.985872][ T7222] tomoyo_realpath_from_path+0xf2/0x640 [ 150.985905][ T7222] tomoyo_check_open_permission+0x229/0x470 [ 150.985936][ T7222] ? tomoyo_check_open_permission+0x1d3/0x470 [ 150.985963][ T7222] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 150.985994][ T7222] ? __asan_memset+0x22/0x50 [ 150.986023][ T7222] ? seqcount_lockdep_reader_access+0xea/0x100 [ 150.986074][ T7222] ? devcgroup_check_permission+0x31/0x8f0 [ 150.986101][ T7222] security_file_open+0xa9/0x240 [ 150.986129][ T7222] do_dentry_open+0x495/0x1360 [ 150.986161][ T7222] vfs_open_consume+0x4a/0x350 [ 150.986180][ T7222] ? path_openat+0x16e1/0x20f0 [ 150.986211][ T7222] path_openat+0x16fc/0x20f0 [ 150.986257][ T7222] do_file_open+0x23e/0x4a0 [ 150.986290][ T7222] ? __pfx_do_file_open+0x10/0x10 [ 150.986340][ T7222] ? _raw_spin_unlock+0x28/0x50 [ 150.986360][ T7222] ? alloc_fd+0x6af/0x760 [ 150.986394][ T7222] do_sys_openat2+0x115/0x200 [ 150.986417][ T7222] ? __se_sys_futex+0x3a8/0x450 [ 150.986448][ T7222] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.986474][ T7222] ? rcu_is_watching+0x16/0xb0 [ 150.986506][ T7222] __x64_sys_openat+0x138/0x170 [ 150.986534][ T7222] do_syscall_64+0x166/0x520 [ 150.986558][ T7222] ? trace_irq_disable+0x3b/0x140 [ 150.986583][ T7222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.986605][ T7222] ? clear_bhb_loop+0x70/0xc0 [ 150.986630][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.986651][ T7222] RIP: 0033:0x7f5e15b9fb19 [ 150.986670][ T7222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.986687][ T7222] RSP: 002b:00007f5e16a52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.986709][ T7222] RAX: ffffffffffffffda RBX: 00007f5e15e25fa0 RCX: 00007f5e15b9fb19 [ 150.986725][ T7222] RDX: 0000000000088440 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 150.986740][ T7222] RBP: 00007f5e15c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 150.986754][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.986772][ T7222] R13: 00007f5e15e26038 R14: 00007f5e15e25fa0 R15: 00007ffc5a65a638 [ 150.986805][ T7222] [ 150.991035][ T7222] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.466389][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 151.467555][ T7235] can: request_module (can-proto-3) failed. [ 151.497866][ T7241] ovs-dp0: entered promiscuous mode [ 151.684540][ T5919] net_ratelimit: 574 callbacks suppressed [ 151.769609][ T7253] overlayfs: missing 'workdir' [ 152.070671][ T7262] fuse: Unknown parameter 'ÿú' [ 152.476835][ T5371] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 152.626494][ T5371] usb 3-1: Using ep0 maxpacket: 8 [ 152.627701][ T5371] usb 3-1: New USB device found: idVendor=17ef, idProduct=6047, bcdDevice=0.00 [ 152.628870][ T5371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 152.628898][ T5371] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 152.628957][ T5371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.633565][ T5371] usb 3-1: config 0 descriptor?? [ 152.688961][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'. [ 152.881803][ T7285] FAULT_INJECTION: forcing a failure. [ 152.881803][ T7285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.881834][ T7285] CPU: 0 UID: 0 PID: 7285 Comm: syz.1.419 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.881861][ T7285] Tainted: [L]=SOFTLOCKUP [ 152.881869][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 152.881881][ T7285] Call Trace: [ 152.881889][ T7285] [ 152.881897][ T7285] dump_stack_lvl+0xe8/0x150 [ 152.881934][ T7285] should_fail_ex+0x3eb/0x540 [ 152.881961][ T7285] _copy_from_iter+0x1d3/0x1680 [ 152.881991][ T7285] ? __alloc_skb+0x27a/0x7a0 [ 152.882012][ T7285] ? __alloc_skb+0x27a/0x7a0 [ 152.882033][ T7285] ? __alloc_skb+0x27a/0x7a0 [ 152.882051][ T7285] ? __pfx__copy_from_iter+0x10/0x10 [ 152.882079][ T7285] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 152.882100][ T7285] ? __alloc_skb+0x27a/0x7a0 [ 152.882117][ T7285] ? __alloc_skb+0x27a/0x7a0 [ 152.882141][ T7285] ? netlink_sendmsg+0x64f/0xb20 [ 152.882176][ T7285] ? skb_put+0x112/0x210 [ 152.882199][ T7285] netlink_sendmsg+0x6bb/0xb20 [ 152.882234][ T7285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.882266][ T7285] ? aa_sock_msg_perm+0x144/0x210 [ 152.882300][ T7285] ? apparmor_socket_sendmsg+0x98/0x360 [ 152.882329][ T7285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.882355][ T7285] sock_sendmsg_nosec+0x14e/0x190 [ 152.882385][ T7285] ____sys_sendmsg+0x54e/0x850 [ 152.882412][ T7285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.882443][ T7285] ? import_iovec+0x73/0xa0 [ 152.882468][ T7285] ___sys_sendmsg+0x2a6/0x360 [ 152.882487][ T7285] ? __lock_acquire+0x747/0x2de0 [ 152.882515][ T7285] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.882572][ T7285] ? __fget_files+0x3a2/0x420 [ 152.882595][ T7285] ? __fget_files+0x2a/0x420 [ 152.882628][ T7285] __x64_sys_sendmsg+0x1b1/0x290 [ 152.882653][ T7285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.882696][ T7285] do_syscall_64+0x166/0x520 [ 152.882720][ T7285] ? trace_irq_disable+0x3b/0x140 [ 152.882744][ T7285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.882765][ T7285] ? clear_bhb_loop+0x70/0xc0 [ 152.882789][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.882809][ T7285] RIP: 0033:0x7f5e15b9fb19 [ 152.882828][ T7285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.882845][ T7285] RSP: 002b:00007f5e16a52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.882866][ T7285] RAX: ffffffffffffffda RBX: 00007f5e15e25fa0 RCX: 00007f5e15b9fb19 [ 152.882881][ T7285] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000006 [ 152.882895][ T7285] RBP: 00007f5e16a52090 R08: 0000000000000000 R09: 0000000000000000 [ 152.882908][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.882920][ T7285] R13: 00007f5e15e26038 R14: 00007f5e15e25fa0 R15: 00007ffc5a65a638 [ 152.882953][ T7285] [ 153.127686][ T7287] jffs2: notice: (7287) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 153.146006][ T7290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.421'. [ 153.146069][ T7290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.421'. [ 153.205453][ T5371] lenovo 0003:17EF:6047.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 153.737758][ T7297] rxe_eth0 speed is unknown, defaulting to 1000 [ 153.754827][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.755628][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.979293][ T7297] wg1 speed is unknown, defaulting to 1000 [ 154.431870][ T7313] device-mapper: ioctl: Unable to rename non-existent device, syzb1 to uuid CRP-syzb1 [ 154.653323][ T11] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 154.771127][ T7318] FAULT_INJECTION: forcing a failure. [ 154.771127][ T7318] name failslab, interval 1, probability 0, space 0, times 0 [ 154.771156][ T7318] CPU: 1 UID: 0 PID: 7318 Comm: syz.1.429 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.771184][ T7318] Tainted: [L]=SOFTLOCKUP [ 154.771192][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 154.771205][ T7318] Call Trace: [ 154.771213][ T7318] [ 154.771223][ T7318] dump_stack_lvl+0xe8/0x150 [ 154.771258][ T7318] should_fail_ex+0x3eb/0x540 [ 154.771285][ T7318] should_failslab+0xa8/0x100 [ 154.771319][ T7318] __kmalloc_cache_noprof+0x9e/0x600 [ 154.771345][ T7318] ? __kmalloc_cache_noprof+0x148/0x600 [ 154.771367][ T7318] ? kvm_dev_ioctl+0xb74/0x1700 [ 154.771386][ T7318] ? kvm_dev_ioctl+0xb74/0x1700 [ 154.771412][ T7318] kvm_dev_ioctl+0xb74/0x1700 [ 154.771437][ T7318] ? __fget_files+0x2a/0x420 [ 154.771461][ T7318] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 154.771482][ T7318] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.771508][ T7318] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 154.771527][ T7318] __se_sys_ioctl+0xfc/0x170 [ 154.771561][ T7318] do_syscall_64+0x166/0x520 [ 154.771586][ T7318] ? trace_irq_disable+0x3b/0x140 [ 154.771612][ T7318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.771633][ T7318] ? clear_bhb_loop+0x70/0xc0 [ 154.771658][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.771679][ T7318] RIP: 0033:0x7f5e15b9fb19 [ 154.771700][ T7318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.771720][ T7318] RSP: 002b:00007f5e16a52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.771742][ T7318] RAX: ffffffffffffffda RBX: 00007f5e15e25fa0 RCX: 00007f5e15b9fb19 [ 154.771758][ T7318] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 154.771772][ T7318] RBP: 00007f5e15c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 154.771786][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.771799][ T7318] R13: 00007f5e15e26038 R14: 00007f5e15e25fa0 R15: 00007ffc5a65a638 [ 154.771832][ T7318] [ 154.813278][ T11] usb 5-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=1.00 [ 154.814985][ T11] usb 5-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 154.815039][ T11] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 30991, setting to 64 [ 154.815087][ T11] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 154.825669][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.825711][ T11] usb 5-1: Product: syz [ 154.825726][ T11] usb 5-1: Manufacturer: syz [ 154.825740][ T11] usb 5-1: SerialNumber: syz [ 155.151564][ T5738] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 155.300469][ T5738] usb 2-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 155.302118][ T5738] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 155.302141][ T5738] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.302159][ T5738] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.302179][ T5738] usb 2-1: config 1 has no interface number 1 [ 155.307421][ T5738] usb 2-1: string descriptor 0 read error: -22 [ 155.307599][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.311914][ T5371] usb 3-1: USB disconnect, device number 19 [ 155.427765][ T5738] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.501677][ T5738] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.501745][ T5738] usb 2-1: MIDIStreaming interface descriptor not found [ 155.642394][ T7321] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 156.163253][ T2063] usb 2-1: USB disconnect, device number 22 [ 156.193520][ C0] usb 5-1: received EP1 urb->status = -71 [ 156.305458][ T33] audit: type=1326 audit(1793684550.994:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.0.432" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafd0d9fb19 code=0x0 [ 156.398018][ T7334] validate_nla: 26 callbacks suppressed [ 156.398036][ T7334] netlink: 'syz.2.433': attribute type 4 has an invalid length. [ 156.692476][ C1] net_ratelimit: 580 callbacks suppressed [ 156.695426][ T11] usb 5-1: unable to init card! (ret=-19) [ 156.709467][ T11] usb 5-1: USB disconnect, device number 7 [ 157.314617][ T7359] netlink: 'syz.0.443': attribute type 4 has an invalid length. [ 157.439703][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 157.440387][ T7379] FAULT_INJECTION: forcing a failure. [ 157.440387][ T7379] name failslab, interval 1, probability 0, space 0, times 0 [ 157.440415][ T7379] CPU: 1 UID: 0 PID: 7379 Comm: syz.2.449 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.440442][ T7379] Tainted: [L]=SOFTLOCKUP [ 157.440449][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 157.440460][ T7379] Call Trace: [ 157.440468][ T7379] [ 157.440477][ T7379] dump_stack_lvl+0xe8/0x150 [ 157.440512][ T7379] should_fail_ex+0x3eb/0x540 [ 157.440538][ T7379] should_failslab+0xa8/0x100 [ 157.440570][ T7379] __kmalloc_cache_noprof+0x9e/0x600 [ 157.440596][ T7379] ? register_netdevice+0x588/0x2280 [ 157.440619][ T7379] ? register_netdevice+0x588/0x2280 [ 157.440650][ T7379] register_netdevice+0x588/0x2280 [ 157.440682][ T7379] ? alloc_netdev_mqs+0xd5b/0x1240 [ 157.440706][ T7379] ? trace_kmalloc+0x2a/0xf0 [ 157.440733][ T7379] ? __pfx___mutex_lock+0x10/0x10 [ 157.440768][ T7379] ? __pfx_register_netdevice+0x10/0x10 [ 157.440790][ T7379] ? alloc_netdev_mqs+0xd5b/0x1240 [ 157.440834][ T7379] internal_dev_create+0x28f/0x480 [ 157.440865][ T7379] ovs_vport_add+0xea/0x230 [ 157.440893][ T7379] new_vport+0x1a/0x190 [ 157.440917][ T7379] ovs_dp_cmd_new+0x693/0xb00 [ 157.440954][ T7379] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 157.440982][ T7379] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 157.441004][ T7379] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 157.441037][ T7379] genl_family_rcv_msg_doit+0x233/0x340 [ 157.441069][ T7379] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 157.441107][ T7379] ? bpf_lsm_capable+0x9/0x20 [ 157.441134][ T7379] ? security_capable+0x7e/0x2c0 [ 157.441164][ T7379] genl_rcv_msg+0x614/0x7a0 [ 157.441191][ T7379] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.441211][ T7379] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 157.441234][ T7379] ? __asan_memcpy+0x40/0x70 [ 157.441264][ T7379] netlink_rcv_skb+0x226/0x4a0 [ 157.441293][ T7379] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.441317][ T7379] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.441362][ T7379] ? down_read+0x2b9/0x320 [ 157.441391][ T7379] genl_rcv+0x28/0x40 [ 157.441411][ T7379] netlink_unicast+0x8ef/0xa80 [ 157.441455][ T7379] netlink_sendmsg+0x7f0/0xb20 [ 157.441490][ T7379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.441522][ T7379] ? aa_sock_msg_perm+0x144/0x210 [ 157.441557][ T7379] ? apparmor_socket_sendmsg+0x98/0x360 [ 157.441585][ T7379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.441612][ T7379] sock_sendmsg_nosec+0x14e/0x190 [ 157.441642][ T7379] ____sys_sendmsg+0x54e/0x850 [ 157.441670][ T7379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.441702][ T7379] ? import_iovec+0x73/0xa0 [ 157.441726][ T7379] ___sys_sendmsg+0x2a6/0x360 [ 157.441752][ T7379] ? __lock_acquire+0x747/0x2de0 [ 157.441779][ T7379] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.441837][ T7379] ? __fget_files+0x3a2/0x420 [ 157.441860][ T7379] ? __fget_files+0x2a/0x420 [ 157.441894][ T7379] __x64_sys_sendmsg+0x1b1/0x290 [ 157.441920][ T7379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.441965][ T7379] do_syscall_64+0x166/0x520 [ 157.441988][ T7379] ? trace_irq_disable+0x3b/0x140 [ 157.442012][ T7379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.442033][ T7379] ? clear_bhb_loop+0x70/0xc0 [ 157.442057][ T7379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.442078][ T7379] RIP: 0033:0x7fdd33f9fb19 [ 157.442098][ T7379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.442115][ T7379] RSP: 002b:00007fdd321f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.442137][ T7379] RAX: ffffffffffffffda RBX: 00007fdd34225fa0 RCX: 00007fdd33f9fb19 [ 157.442152][ T7379] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 157.442165][ T7379] RBP: 00007fdd321f6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.442178][ T7379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.442190][ T7379] R13: 00007fdd34226038 R14: 00007fdd34225fa0 R15: 00007ffcfc3872c8 [ 157.442222][ T7379] [ 157.901637][ T7388] sd 0:0:1:0: PR command failed: 1026 [ 157.901675][ T7388] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 157.901737][ T7388] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 158.369010][ T7408] netlink: 'syz.0.459': attribute type 1 has an invalid length. [ 158.474041][ T2063] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 158.633275][ T2063] usb 2-1: Using ep0 maxpacket: 32 [ 158.634153][ T2063] usb 2-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 158.635674][ T2063] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 158.635729][ T2063] usb 2-1: config 0 has no interface number 0 [ 158.635769][ T2063] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 158.638921][ T2063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.638947][ T2063] usb 2-1: Product: syz [ 158.638971][ T2063] usb 2-1: Manufacturer: syz [ 158.638985][ T2063] usb 2-1: SerialNumber: syz [ 158.708565][ T2063] usb 2-1: config 0 descriptor?? [ 158.709597][ T7397] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 158.899398][ T7419] Config c/1 of g1 needs at least one function. [ 158.899724][ T7419] udc dummy_udc.0: failed to start g1: -22 [ 158.899739][ T7419] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 158.933634][ T7397] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 158.950293][ T7419] UDC core: g1: couldn't find an available UDC or it's busy [ 159.163281][ T2063] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 159.163650][ T2063] asix 2-1:0.188: probe with driver asix failed with error -71 [ 159.205889][ T2063] usb 2-1: USB disconnect, device number 23 [ 159.420244][ T7431] netlink: 'syz.0.466': attribute type 4 has an invalid length. [ 159.509464][ T5749] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 159.659594][ T5749] usb 3-1: New USB device found: idVendor=0525, idProduct=127a, bcdDevice=1.00 [ 159.663295][ T5749] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.665112][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 159.665132][ T5749] usb 3-1: Product: syz [ 159.665313][ T5749] usb 3-1: Manufacturer: syz [ 159.708628][ T5749] usb_debug 3-1:1.0: debug converter detected [ 159.713340][ T5749] usb 3-1: debug converter now attached to ttyUSB0 [ 159.843855][ T7437] syzkaller1: entered promiscuous mode [ 159.843872][ T7437] syzkaller1: entered allmulticast mode [ 159.936656][ T2063] usb 3-1: USB disconnect, device number 20 [ 159.953534][ T2063] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 159.954333][ T2063] usb_debug 3-1:1.0: device disconnected [ 160.113743][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 160.116184][ T7443] FAULT_INJECTION: forcing a failure. [ 160.116184][ T7443] name failslab, interval 1, probability 0, space 0, times 0 [ 160.116216][ T7443] CPU: 1 UID: 0 PID: 7443 Comm: syz.1.471 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.116243][ T7443] Tainted: [L]=SOFTLOCKUP [ 160.116250][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 160.116265][ T7443] Call Trace: [ 160.116273][ T7443] [ 160.116282][ T7443] dump_stack_lvl+0xe8/0x150 [ 160.116316][ T7443] should_fail_ex+0x3eb/0x540 [ 160.116343][ T7443] should_failslab+0xa8/0x100 [ 160.116375][ T7443] __kmalloc_cache_noprof+0x9e/0x600 [ 160.116399][ T7443] ? __kmalloc_cache_noprof+0x148/0x600 [ 160.116421][ T7443] ? nft_netdev_hook_alloc+0x246/0x5a0 [ 160.116440][ T7443] ? nft_netdev_hook_alloc+0x246/0x5a0 [ 160.116467][ T7443] nft_netdev_hook_alloc+0x246/0x5a0 [ 160.116498][ T7443] nf_tables_parse_netdev_hooks+0x14c/0xa10 [ 160.116531][ T7443] nft_flowtable_parse_hook+0x551/0xab0 [ 160.116566][ T7443] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 160.116593][ T7443] ? nft_pernet+0x23/0x240 [ 160.116620][ T7443] ? nft_pernet+0x23/0x240 [ 160.116654][ T7443] nf_tables_newflowtable+0xc54/0x25e0 [ 160.116692][ T7443] ? nft_pernet+0x23/0x240 [ 160.116730][ T7443] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 160.116756][ T7443] ? lock_acquire+0x115/0x350 [ 160.116790][ T7443] ? __nla_parse+0x40/0x60 [ 160.116817][ T7443] nfnetlink_rcv+0x1288/0x28c0 [ 160.116878][ T7443] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 160.116950][ T7443] ? skb_clone+0x246/0x3a0 [ 160.116988][ T7443] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.117015][ T7443] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.117049][ T7443] netlink_unicast+0x8ef/0xa80 [ 160.117092][ T7443] netlink_sendmsg+0x7f0/0xb20 [ 160.117126][ T7443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.117158][ T7443] ? aa_sock_msg_perm+0x144/0x210 [ 160.117190][ T7443] ? apparmor_socket_sendmsg+0x98/0x360 [ 160.117218][ T7443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.117245][ T7443] sock_sendmsg_nosec+0x14e/0x190 [ 160.117275][ T7443] ____sys_sendmsg+0x54e/0x850 [ 160.117302][ T7443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.117334][ T7443] ? import_iovec+0x73/0xa0 [ 160.117358][ T7443] ___sys_sendmsg+0x2a6/0x360 [ 160.117378][ T7443] ? __lock_acquire+0x747/0x2de0 [ 160.117405][ T7443] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.117464][ T7443] ? __fget_files+0x3a2/0x420 [ 160.117487][ T7443] ? __fget_files+0x2a/0x420 [ 160.117520][ T7443] __x64_sys_sendmsg+0x1b1/0x290 [ 160.117545][ T7443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.117590][ T7443] do_syscall_64+0x166/0x520 [ 160.117614][ T7443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.117634][ T7443] ? clear_bhb_loop+0x70/0xc0 [ 160.117665][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.117684][ T7443] RIP: 0033:0x7f5e15b9fb19 [ 160.117703][ T7443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.117721][ T7443] RSP: 002b:00007f5e16a52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.117742][ T7443] RAX: ffffffffffffffda RBX: 00007f5e15e25fa0 RCX: 00007f5e15b9fb19 [ 160.117758][ T7443] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 160.117771][ T7443] RBP: 00007f5e16a52090 R08: 0000000000000000 R09: 0000000000000000 [ 160.117784][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.117796][ T7443] R13: 00007f5e15e26038 R14: 00007f5e15e25fa0 R15: 00007ffc5a65a638 [ 160.117830][ T7443] [ 160.488809][ T7450] FAULT_INJECTION: forcing a failure. [ 160.488809][ T7450] name failslab, interval 1, probability 0, space 0, times 0 [ 160.488839][ T7450] CPU: 0 UID: 0 PID: 7450 Comm: syz.1.473 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.488866][ T7450] Tainted: [L]=SOFTLOCKUP [ 160.488876][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 160.488887][ T7450] Call Trace: [ 160.488895][ T7450] [ 160.488903][ T7450] dump_stack_lvl+0xe8/0x150 [ 160.488937][ T7450] should_fail_ex+0x3eb/0x540 [ 160.488963][ T7450] should_failslab+0xa8/0x100 [ 160.488990][ T7450] ? __kernfs_new_node+0xe6/0x980 [ 160.489009][ T7450] kmem_cache_alloc_noprof+0x9c/0x600 [ 160.489039][ T7450] ? __kernfs_new_node+0xe6/0x980 [ 160.489064][ T7450] __kernfs_new_node+0xe6/0x980 [ 160.489093][ T7450] ? __pfx___kernfs_new_node+0x10/0x10 [ 160.489113][ T7450] ? kernfs_root+0x1c/0x230 [ 160.489137][ T7450] ? kernfs_root+0x1c/0x230 [ 160.489155][ T7450] ? kernfs_root+0x1c/0x230 [ 160.489171][ T7450] ? kernfs_root+0x1c/0x230 [ 160.489194][ T7450] kernfs_new_node+0xea/0x140 [ 160.489218][ T7450] __kernfs_create_file+0x4b/0x2e0 [ 160.489244][ T7450] sysfs_add_file_mode_ns+0x237/0x300 [ 160.489279][ T7450] internal_create_group+0x679/0x1180 [ 160.489309][ T7450] ? kernfs_add_one+0xfc/0x510 [ 160.489328][ T7450] ? __pfx_internal_create_group+0x10/0x10 [ 160.489349][ T7450] ? kernfs_activate_one+0x22d/0x340 [ 160.489372][ T7450] sysfs_create_groups+0x59/0x120 [ 160.489394][ T7450] device_add_attrs+0x1b1/0x600 [ 160.489415][ T7450] ? __pfx_device_add_attrs+0x10/0x10 [ 160.489439][ T7450] ? device_add_class_symlinks+0x21f/0x240 [ 160.489463][ T7450] device_add+0x488/0xb80 [ 160.489486][ T7450] netdev_register_kobject+0x197/0x350 [ 160.489519][ T7450] register_netdevice+0x17be/0x2280 [ 160.489558][ T7450] ? __pfx_register_netdevice+0x10/0x10 [ 160.489594][ T7450] ? alloc_netdev_mqs+0xe92/0x1240 [ 160.489624][ T7450] register_netdev+0x40/0x60 [ 160.489648][ T7450] gprs_attach+0x182/0x530 [ 160.489675][ T7450] pep_setsockopt+0x328/0x4b0 [ 160.489700][ T7450] ? __pfx_pep_setsockopt+0x10/0x10 [ 160.489725][ T7450] ? sock_common_setsockopt+0x36/0xc0 [ 160.489751][ T7450] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 160.489778][ T7450] do_sock_setsockopt+0x17c/0x1b0 [ 160.489800][ T7450] __x64_sys_setsockopt+0x13d/0x1b0 [ 160.489823][ T7450] do_syscall_64+0x166/0x520 [ 160.489843][ T7450] ? trace_irq_disable+0x3b/0x140 [ 160.489863][ T7450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.489923][ T7450] ? clear_bhb_loop+0x70/0xc0 [ 160.489950][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.489968][ T7450] RIP: 0033:0x7f5e15b9fb19 [ 160.489986][ T7450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.490001][ T7450] RSP: 002b:00007f5e16a52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.490022][ T7450] RAX: ffffffffffffffda RBX: 00007f5e15e25fa0 RCX: 00007f5e15b9fb19 [ 160.490044][ T7450] RDX: 0000000000000001 RSI: 0000000000000113 RDI: 0000000000000003 [ 160.490056][ T7450] RBP: 00007f5e16a52090 R08: 0000000000000004 R09: 0000000000000000 [ 160.490068][ T7450] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 160.490080][ T7450] R13: 00007f5e15e26038 R14: 00007f5e15e25fa0 R15: 00007ffc5a65a638 [ 160.490111][ T7450] [ 161.023668][ T11] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 161.175366][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 161.176193][ T11] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 161.184283][ T11] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 161.184374][ T11] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 161.184400][ T11] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 161.184423][ T11] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 161.184455][ T11] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 161.184477][ T11] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.184558][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.273747][ T7466] PKCS7: Unknown OID: [29] 1.2.156.10195.1.401 [ 161.403465][ T7463] configfs-gadget.g1 gadget.0: HOST MAC 52:14:1a:f8:a1:dc [ 161.403497][ T7463] configfs-gadget.g1 gadget.0: MAC 96:31:92:a7:86:d0 [ 161.408488][ T7463] FAULT_INJECTION: forcing a failure. [ 161.408488][ T7463] name failslab, interval 1, probability 0, space 0, times 0 [ 161.409245][ T7463] CPU: 1 UID: 0 PID: 7463 Comm: syz.1.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.409277][ T7463] Tainted: [L]=SOFTLOCKUP [ 161.409285][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 161.409298][ T7463] Call Trace: [ 161.409307][ T7463] [ 161.409317][ T7463] dump_stack_lvl+0xe8/0x150 [ 161.409353][ T7463] should_fail_ex+0x3eb/0x540 [ 161.409381][ T7463] should_failslab+0xa8/0x100 [ 161.409415][ T7463] __kmalloc_noprof+0xf9/0x710 [ 161.409444][ T7463] ? __mutex_unlock_slowpath+0x731/0x900 [ 161.409471][ T7463] ? usb_gstrings_attach+0xea/0xde0 [ 161.409497][ T7463] ? usb_gstrings_attach+0xea/0xde0 [ 161.409529][ T7463] usb_gstrings_attach+0xea/0xde0 [ 161.409571][ T7463] ecm_bind+0x28e/0xa30 [ 161.409613][ T7463] usb_add_function+0x2e1/0x9f0 [ 161.409639][ T7463] ? check_remote_wakeup_config+0x58/0x1c0 [ 161.409669][ T7463] configfs_composite_bind+0xde0/0x1410 [ 161.409713][ T7463] ? __pfx_configfs_composite_bind+0x10/0x10 [ 161.409742][ T7463] gadget_bind_driver+0x2ca/0x9e0 [ 161.409776][ T7463] ? __pfx_gadget_bind_driver+0x10/0x10 [ 161.409798][ T7463] really_probe+0x254/0xae0 [ 161.409831][ T7463] __driver_probe_device+0x1e8/0x360 [ 161.409860][ T7463] driver_probe_device+0x4f/0x240 [ 161.409891][ T7463] __driver_attach+0x34e/0x630 [ 161.409920][ T7463] bus_for_each_dev+0x23b/0x2c0 [ 161.409951][ T7463] ? __pfx___driver_attach+0x10/0x10 [ 161.409976][ T7463] ? __pfx_bus_for_each_dev+0x10/0x10 [ 161.410019][ T7463] ? do_raw_spin_unlock+0xf5/0x200 [ 161.410058][ T7463] bus_add_driver+0x38f/0x6e0 [ 161.410101][ T7463] driver_register+0x23a/0x320 [ 161.410133][ T7463] usb_gadget_register_driver_owner+0xf9/0x270 [ 161.410159][ T7463] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 161.410185][ T7463] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 161.410210][ T7463] configfs_write_iter+0x337/0x430 [ 161.410237][ T7463] vfs_write+0x612/0xba0 [ 161.410274][ T7463] ? __pfx_vfs_write+0x10/0x10 [ 161.410305][ T7463] ? __fget_files+0x3a2/0x420 [ 161.410332][ T7463] ? __fget_files+0x2a/0x420 [ 161.410363][ T7463] ? fdget+0x1ac/0x250 [ 161.410396][ T7463] ksys_write+0x150/0x270 [ 161.410427][ T7463] ? __pfx_ksys_write+0x10/0x10 [ 161.410468][ T7463] do_syscall_64+0x166/0x520 [ 161.410494][ T7463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.410517][ T7463] ? clear_bhb_loop+0x70/0xc0 [ 161.410544][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.410567][ T7463] RIP: 0033:0x7f5e15b9fb19 [ 161.410588][ T7463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.410606][ T7463] RSP: 002b:00007f5e16a52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.410628][ T7463] RAX: ffffffffffffffda RBX: 00007f5e15e25fa0 RCX: 00007f5e15b9fb19 [ 161.410643][ T7463] RDX: 000000000000000b RSI: 00002000000005c0 RDI: 0000000000000005 [ 161.410657][ T7463] RBP: 00007f5e15c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 161.410671][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.410685][ T7463] R13: 00007f5e15e26038 R14: 00007f5e15e25fa0 R15: 00007ffc5a65a638 [ 161.410723][ T7463] [ 161.537563][ T7463] udc dummy_udc.0: failed to start g1: -12 [ 161.537582][ T7463] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -12 [ 161.543831][ T7463] UDC core: g1: couldn't find an available UDC or it's busy [ 161.710963][ C0] net_ratelimit: 790 callbacks suppressed [ 162.215349][ T7496] netlink: 'syz.1.482': attribute type 4 has an invalid length. [ 162.437830][ T7498] FAULT_INJECTION: forcing a failure. [ 162.437830][ T7498] name failslab, interval 1, probability 0, space 0, times 0 [ 162.437864][ T7498] CPU: 0 UID: 0 PID: 7498 Comm: syz.0.483 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.437890][ T7498] Tainted: [L]=SOFTLOCKUP [ 162.437898][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 162.437910][ T7498] Call Trace: [ 162.437918][ T7498] [ 162.437933][ T7498] dump_stack_lvl+0xe8/0x150 [ 162.437969][ T7498] should_fail_ex+0x3eb/0x540 [ 162.437995][ T7498] should_failslab+0xa8/0x100 [ 162.438022][ T7498] ? security_file_alloc+0x34/0x310 [ 162.438045][ T7498] kmem_cache_alloc_noprof+0x9c/0x600 [ 162.438066][ T7498] ? rcu_is_watching+0x16/0xb0 [ 162.438092][ T7498] ? security_file_alloc+0x34/0x310 [ 162.438123][ T7498] security_file_alloc+0x34/0x310 [ 162.438148][ T7498] init_file+0x90/0x2b0 [ 162.438173][ T7498] alloc_empty_file+0x74/0x1d0 [ 162.438195][ T7498] alloc_file_pseudo+0x110/0x1e0 [ 162.438220][ T7498] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 162.438253][ T7498] __shmem_file_setup+0x2e9/0x370 [ 162.438279][ T7498] ? __pfx___shmem_file_setup+0x10/0x10 [ 162.438315][ T7498] shmem_zero_setup_desc+0x91/0x100 [ 162.438342][ T7498] mmap_region+0x1191/0x2820 [ 162.438367][ T7498] ? lock_acquire+0x115/0x350 [ 162.438411][ T7498] ? __pfx_mmap_region+0x10/0x10 [ 162.438439][ T7498] ? kernel_text_address+0xa5/0xe0 [ 162.438460][ T7498] ? __css_rstat_updated+0x237/0x540 [ 162.438485][ T7498] ? __kernel_text_address+0xd/0x30 [ 162.438510][ T7498] ? mas_ascend+0x2f9/0x8b0 [ 162.438579][ T7498] ? mas_prev_slot+0xb76/0xbf0 [ 162.438664][ T7498] ? arch_get_unmapped_area_topdown+0xade/0xc30 [ 162.438712][ T7498] ? mm_get_unmapped_area+0xd3/0x100 [ 162.438742][ T7498] ? shmem_get_unmapped_area+0x3ef/0x8f0 [ 162.438766][ T7498] ? cap_mmap_addr+0xaa/0xf0 [ 162.438789][ T7498] ? bpf_lsm_mmap_addr+0x9/0x50 [ 162.438813][ T7498] ? security_mmap_addr+0x71/0x240 [ 162.438841][ T7498] ? memfd_check_seals_mmap+0x8e/0x1f0 [ 162.438867][ T7498] do_mmap+0xe0a/0x1300 [ 162.438904][ T7498] ? __pfx_do_mmap+0x10/0x10 [ 162.438951][ T7498] ? vm_mmap_pgoff+0x1ed/0x520 [ 162.438971][ T7498] ? down_write_killable+0x179/0x230 [ 162.439002][ T7498] ? __pfx_down_write_killable+0x10/0x10 [ 162.439029][ T7498] ? apparmor_mmap_file+0x2e7/0x390 [ 162.439061][ T7498] vm_mmap_pgoff+0x27a/0x520 [ 162.439091][ T7498] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 162.439115][ T7498] ? __fget_files+0x2a/0x420 [ 162.439143][ T7498] ? __fget_files+0x3a2/0x420 [ 162.439166][ T7498] ? __fget_files+0x2a/0x420 [ 162.439193][ T7498] ksys_mmap_pgoff+0x4dc/0x760 [ 162.439228][ T7498] do_syscall_64+0x166/0x520 [ 162.439251][ T7498] ? trace_irq_disable+0x3b/0x140 [ 162.439275][ T7498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.439296][ T7498] ? clear_bhb_loop+0x70/0xc0 [ 162.439320][ T7498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.439340][ T7498] RIP: 0033:0x7fafd0d9f882 [ 162.439360][ T7498] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 162.439377][ T7498] RSP: 002b:00007fafd1b80f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 162.439398][ T7498] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fafd0d9f882 [ 162.439413][ T7498] RDX: 0000000000000001 RSI: 000000000000a000 RDI: 0000000000000000 [ 162.439425][ T7498] RBP: 0000000000008001 R08: 0000000000000003 R09: 0000000000000000 [ 162.439437][ T7498] R10: 0000000000008001 R11: 0000000000000246 R12: 00002000000069c0 [ 162.439450][ T7498] R13: 00002000000069c8 R14: 000000000000062c R15: 0000000000000000 [ 162.439483][ T7498] [ 163.078850][ T7518] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 163.170297][ T5745] usb 1-1: Failed to load image "edgeport/down.fw" err -110 [ 163.176184][ T5745] usb 1-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 163.176205][ T5745] usb 1-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 163.219122][ T7521] netlink: 'syz.1.491': attribute type 4 has an invalid length. [ 163.294863][ T5300] usb0: bond_netdev_event received NETDEV_PRE_UP [ 163.294898][ T5300] net usb0: siw: event 14 [ 163.295021][ T5300] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000028: 0000 [#1] SMP KASAN PTI [ 163.317565][ T5300] KASAN: null-ptr-deref in range [0x0000000000000140-0x0000000000000147] [ 163.325994][ T5300] CPU: 1 UID: 0 PID: 5300 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 163.336490][ T5300] Tainted: [L]=SOFTLOCKUP [ 163.340802][ T5300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 163.346938][ C0] virtqueue callback for ffff8880293c1c00 (ffffffff86dce640) [ 163.346969][ C0] No more buffers in queue [ 163.347321][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 163.347344][ C0] No more buffers in queue [ 163.372729][ T5300] RIP: 0010:dev_driver_string+0x26/0xd0 [ 163.378279][ T5300] Code: 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 45 b6 77 fb 4c 8d 73 68 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 ab 3a ef fb 4d 8b 36 4d 85 f6 74 [ 163.394886][ C0] eth0: xmit ffff888059e93780 42:01:0a:80:00:01 [ 163.394917][ C0] Added buffer head 4 to ffff8880293c1a00 [ 163.394947][ C0] virtqueue callback for ffff8880293c1a00 (ffffffff86dce780) [ 163.394972][ C0] Sent skb ffff888059e93780 [ 163.395007][ C0] No more buffers in queue [ 163.425996][ T5300] RSP: 0018:ffffc900034175a0 EFLAGS: 00010206 [ 163.432056][ T5300] RAX: 0000000000000028 RBX: 00000000000000d8 RCX: ffff888028f60000 [ 163.440019][ T5300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000d8 [ 163.447988][ T5300] RBP: ffffc90003417780 R08: ffffc900034176ff R09: 0000000000000000 [ 163.455952][ T5300] R10: ffffc90003417680 R11: fffff52000682ee0 R12: ffffffff91b762b8 [ 163.463920][ T5300] R13: dffffc0000000000 R14: 0000000000000140 R15: dffffc0000000000 [ 163.471883][ T5300] FS: 00007f3241b31780(0000) GS:ffff88812346a000(0000) knlGS:0000000000000000 [ 163.480803][ T5300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.487375][ T5300] CR2: 00007f5e15df8078 CR3: 000000007fad6000 CR4: 00000000003526f0 [ 163.495348][ T5300] Call Trace: [ 163.498621][ T5300] [ 163.501540][ T5300] __dynamic_dev_dbg+0x1ae/0x2e0 [ 163.506474][ T5300] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 163.511925][ T5300] ? ib_device_get_by_netdev+0x47f/0x4f0 [ 163.517556][ T5300] ? ib_device_get_by_netdev+0x81/0x4f0 [ 163.523098][ T5300] ? hsr_netdev_notify+0x280/0xcc0 [ 163.528206][ T5300] ? ip6_route_dev_notify+0x9a/0x5b0 [ 163.533488][ T5300] ? notifier_call_chain+0x3aa/0x3d0 [ 163.538850][ T5300] eth_open+0x170/0x1b0 [ 163.543004][ T5300] __dev_open+0x46f/0x850 [ 163.547331][ T5300] ? __pfx___dev_open+0x10/0x10 [ 163.552173][ T5300] ? __dev_change_flags+0x2e2/0x820 [ 163.557361][ T5300] ? __local_bh_enable_ip+0xd6/0x140 [ 163.562650][ T5300] __dev_change_flags+0x329/0x820 [ 163.567667][ T5300] ? __pfx___dev_change_flags+0x10/0x10 [ 163.573201][ T5300] ? __pfx___mutex_lock+0x10/0x10 [ 163.578222][ T5300] netif_change_flags+0x7c/0x1b0 [ 163.583159][ T5300] dev_change_flags+0x128/0x260 [ 163.587997][ T5300] devinet_ioctl+0x966/0x1c50 [ 163.592674][ T5300] ? __pfx_devinet_ioctl+0x10/0x10 [ 163.597781][ T5300] ? get_user_ifreq+0x12b/0x180 [ 163.602651][ T5300] inet_ioctl+0x42a/0x560 [ 163.606981][ T5300] ? __pfx_inet_ioctl+0x10/0x10 [ 163.611831][ T5300] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 163.616869][ T5300] sock_do_ioctl+0x101/0x320 [ 163.621461][ T5300] ? __pfx_sock_do_ioctl+0x10/0x10 [ 163.626594][ T5300] sock_ioctl+0x57a/0x7e0 [ 163.630919][ T5300] ? __pfx_sock_ioctl+0x10/0x10 [ 163.635761][ T5300] ? fd_install+0x39e/0x4e0 [ 163.640259][ T5300] ? fd_install+0x95/0x4e0 [ 163.644669][ T5300] ? bpf_lsm_file_ioctl+0x9/0x20 [ 163.649600][ T5300] ? __pfx_sock_ioctl+0x10/0x10 [ 163.654443][ T5300] __se_sys_ioctl+0xfc/0x170 [ 163.659031][ T5300] do_syscall_64+0x166/0x520 [ 163.663617][ T5300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.669672][ T5300] ? clear_bhb_loop+0x70/0xc0 [ 163.674341][ T5300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.680220][ T5300] RIP: 0033:0x7f3241c31378 [ 163.684642][ T5300] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 163.704244][ T5300] RSP: 002b:00007fff2c6ecca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.712677][ T5300] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00007f3241c31378 [ 163.720643][ T5300] RDX: 00007fff2c6fcea0 RSI: 0000000000008914 RDI: 0000000000000018 [ 163.728602][ T5300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.736559][ T5300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff2c70d040 [ 163.744520][ T5300] R13: 00007f3241b31708 R14: 0000000000000028 R15: 0000000000008914 [ 163.752490][ T5300] [ 163.755497][ T5300] Modules linked in: [ 163.761142][ T5300] ---[ end trace 0000000000000000 ]--- [ 163.772929][ T5939] ieee80211 phy8: mac80211_hwsim_config (freq=2427(2427 - 0)/noht idle=0 ps=0 smps=static) [ 163.796566][ T7524] FAULT_INJECTION: forcing a failure. [ 163.796566][ T7524] name failslab, interval 1, probability 0, space 0, times 0 [ 163.796596][ T7524] CPU: 1 UID: 0 PID: 7524 Comm: syz.1.492 Tainted: G D L syzkaller #0 PREEMPT(full) [ 163.796624][ T7524] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 163.796631][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 163.796643][ T7524] Call Trace: [ 163.796651][ T7524] [ 163.796658][ T7524] dump_stack_lvl+0xe8/0x150 [ 163.796689][ T7524] should_fail_ex+0x3eb/0x540 [ 163.796712][ T7524] should_failslab+0xa8/0x100 [ 163.796739][ T7524] ? security_inode_alloc+0x39/0x310 [ 163.796759][ T7524] kmem_cache_alloc_noprof+0x9c/0x600 [ 163.796781][ T7524] ? security_inode_alloc+0x39/0x310 [ 163.796802][ T7524] security_inode_alloc+0x39/0x310 [ 163.796822][ T7524] inode_init_always_gfp+0x97e/0xd30 [ 163.796847][ T7524] alloc_inode+0x82/0x1b0 [ 163.796868][ T7524] new_inode+0x1f/0x170 [ 163.796890][ T7524] simple_fill_super+0x3a2/0x720 [ 163.796916][ T7524] nfsd_fill_super+0x8a/0x450 [ 163.796940][ T7524] ? __pfx_nfsd_fill_super+0x10/0x10 [ 163.796962][ T7524] get_tree_keyed+0xe5/0x170 [ 163.796987][ T7524] vfs_get_tree+0x92/0x2a0 [ 163.797013][ T7524] do_new_mount+0x325/0xb00 [ 163.797037][ T7524] ? __pfx_do_new_mount+0x10/0x10 [ 163.797060][ T7524] ? ns_capable+0x84/0xe0 [ 163.797083][ T7524] ? path_mount+0x647/0x1050 [ 163.797105][ T7524] ? user_path_at+0xd4/0x160 [ 163.797130][ T7524] __se_sys_mount+0x31d/0x420 [ 163.797163][ T7524] ? __pfx___se_sys_mount+0x10/0x10 [ 163.797187][ T7524] ? rcu_is_watching+0x16/0xb0 [ 163.797212][ T7524] ? __x64_sys_mount+0x20/0xc0 [ 163.797244][ T7524] do_syscall_64+0x166/0x520 [ 163.797268][ T7524] ? trace_irq_disable+0x3b/0x140 [ 163.797292][ T7524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.797311][ T7524] ? clear_bhb_loop+0x70/0xc0 [ 163.797333][ T7524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.797352][ T7524] RIP: 0033:0x7f5e15b9fb19 [ 163.797370][ T7524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.797386][ T7524] RSP: 002b:00007f5e16a52028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.797407][ T7524] RAX: ffffffffffffffda RBX: 00007f5e15e25fa0 RCX: 00007f5e15b9fb19 [ 163.797423][ T7524] RDX: 00002000000026c0 RSI: 0000200000002680 RDI: 0000000000000000 [ 163.797437][ T7524] RBP: 00007f5e16a52090 R08: 0000000000000000 R09: 0000000000000000 [ 163.797450][ T7524] R10: 0000000001214040 R11: 0000000000000246 R12: 0000000000000002 [ 163.797462][ T7524] R13: 00007f5e15e26038 R14: 00007f5e15e25fa0 R15: 00007ffc5a65a638 [ 163.797485][ T7524] [ 163.840679][ T7459] bus: 'gadget': remove driver raw-gadget.1 [ 163.840705][ T7459] kernfs bind: removing [ 163.840738][ T7459] kernfs unbind: removing [ 163.840765][ T7459] kernfs uevent: removing [ 163.840789][ T7459] kernfs gadget.2: removing [ 163.840817][ T7459] kernfs driver: removing [ 163.840850][ T7459] udc dummy_udc.2: unbinding gadget driver [USB Raw Gadget] [ 163.840871][ T7459] raw-gadget.1 gadget.2: gadget suspended [ 163.840899][ T7459] dummy_hcd dummy_hcd.2: port status 0x00010100 has changes [ 163.840942][ T7459] raw-gadget.1 gadget.2: gadget disconnected [ 163.840968][ T7459] kobject: 'dummy_udc.2' (ffff88802c886018): kobject_uevent_env [ 163.841008][ T7459] kobject: 'dummy_udc.2' (ffff88802c886018): fill_kobj_path: path = '/devices/platform/dummy_udc.2/udc/dummy_udc.2' [ 163.841051][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 163.841070][ C1] kcov: kcov_start: t = ffff88802ae19f40, size = 262144, area = ffffc90002101000 [ 163.841101][ C1] kcov: kcov_move_area: ffffc900161a7000 1048576 <= ffffc90002101000 28 [ 163.841234][ T7459] kobject: 'gadget.2' (ffff88802b7a4cd8): kobject_uevent_env [ 163.841271][ T7459] kobject: 'gadget.2' (ffff88802b7a4cd8): fill_kobj_path: path = '/devices/platform/dummy_udc.2/gadget.2' [ 163.841370][ T7459] kernfs module: removing [ 163.841430][ T7459] kernfs gadget:raw-gadget.1: removing [ 163.841464][ T7459] kobject: 'raw-gadget.1' (ffff88807d088400): kobject_cleanup, parent ffff888021a96350 [ 163.841483][ T7459] kobject: 'raw-gadget.1' (ffff88807d088400): auto cleanup kobject_del [ 163.841497][ T7459] kobject: 'raw-gadget.1' (ffff88807d088400): auto cleanup 'remove' event [ 163.841511][ T7459] kobject: 'raw-gadget.1' (ffff88807d088400): kobject_uevent_env [ 163.841546][ T7459] kobject: 'raw-gadget.1' (ffff88807d088400): fill_kobj_path: path = '/bus/gadget/drivers/raw-gadget.1' [ 163.841646][ T7459] kernfs raw-gadget.1: removing [ 163.841662][ T7459] kobject: 'raw-gadget.1' (ffff88807d088400): calling ktype release [ 163.841677][ T7459] driver: 'raw-gadget.1': driver_release [ 163.841696][ T7459] kobject: 'raw-gadget.1': free name [ 163.845313][ C0] dummy_hcd dummy_hcd.2: no ep configured for urb ffff88802a275f00 [ 163.845352][ C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 163.845371][ C0] kcov: kcov_start: t = ffff888021283e80, size = 262144, area = ffffc90002101000 [ 163.845401][ C0] kcov: kcov_move_area: ffffc900161a7000 1048576 <= ffffc90002101000 17 [ 163.858007][ T5300] RIP: 0010:dev_driver_string+0x26/0xd0 [ 163.858047][ T5300] Code: 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 45 b6 77 fb 4c 8d 73 68 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 ab 3a ef fb 4d 8b 36 4d 85 f6 74 [ 163.858064][ T5300] RSP: 0018:ffffc900034175a0 EFLAGS: 00010206 [ 163.858082][ T5300] RAX: 0000000000000028 RBX: 00000000000000d8 RCX: ffff888028f60000 [ 163.858096][ T5300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000d8 [ 163.858107][ T5300] RBP: ffffc90003417780 R08: ffffc900034176ff R09: 0000000000000000 [ 163.858121][ T5300] R10: ffffc90003417680 R11: fffff52000682ee0 R12: ffffffff91b762b8 [ 163.858135][ T5300] R13: dffffc0000000000 R14: 0000000000000140 R15: dffffc0000000000 [ 163.858150][ T5300] FS: 00007f3241b31780(0000) GS:ffff88812346a000(0000) knlGS:0000000000000000 [ 163.858166][ T5300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.858178][ T5300] CR2: 00007f5e15df5158 CR3: 000000007fad6000 CR4: 00000000003526f0 [ 163.858197][ T5300] Kernel panic - not syncing: Fatal exception [ 164.404232][ T5300] Kernel Offset: disabled [ 164.408566][ T5300] Rebooting in 86400 seconds..