last executing test programs: 5.693634689s ago: executing program 1 (id=1430): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x7) 5.601927615s ago: executing program 2 (id=1432): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x1c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0xeff9, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5.484341954s ago: executing program 2 (id=1433): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_usb_connect(0x4, 0x90, &(0x7f0000000040)=ANY=[@ANYBLOB="12010104138d8b200819201300000102030109027e0001000200000904ae0e051966858f0b240600013a6af75c82820524000964000d240f01100000000400fdff0606241a8d000809050308000402080607250182070100090509001000a903080725018134000009050c10000408018d0725010007060007250100094f0e09050b100002"], 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x3, 0x2, 0x2}) 4.962223717s ago: executing program 1 (id=1437): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) close(0xffffffffffffffff) close(0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x46}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d143"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e29, @multicast1}, 0xb) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x33) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async, rerun: 32) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x80) (async, rerun: 32) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="edf20bd727e727206d"], 0x564) (async, rerun: 64) close(r5) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) (async, rerun: 64) sendmsg$inet(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e", 0x1}], 0x1}, 0x4000001) (async, rerun: 64) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40010122) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x3, 0x8, &(0x7f0000000100)="81839c93f294064c", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) (async, rerun: 64) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (rerun: 64) 4.366511911s ago: executing program 1 (id=1440): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000000c0)=0xffffffff, 0x4) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000007c0)=ANY=[@ANYRES8=r4]) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x301}, 0x14}}, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 4.194999735s ago: executing program 2 (id=1441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x3, 0x840) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000540)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) 3.860625002s ago: executing program 2 (id=1444): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) copy_file_range(r1, 0x0, r1, 0x0, 0x10, 0x2000000) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe8, 0x3e, 0x4, 0x10, 0x409, 0x63, 0x834b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x33, 0x2, 0x0, 0xed, 0x43, 0x60}}]}}]}}, 0x0) 2.926051835s ago: executing program 0 (id=1448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5810}, 0x0) (fail_nth: 6) 2.720301722s ago: executing program 0 (id=1449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x0, 0x800, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) 2.598585967s ago: executing program 0 (id=1450): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b062dbd7000004000003000000005003500fe00000005003400400000000a0001007770616e300000000500330003000000050036"], 0x40}, 0x1, 0x8000000, 0x0, 0x20040095}, 0x0) (fail_nth: 6) 2.554578064s ago: executing program 0 (id=1451): setfsgid(0xee00) r0 = syz_clone(0x0, 0x0, 0x36, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7, @local, 0x7}]}, &(0x7f0000000080)=0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/time_for_children\x00') 2.380178143s ago: executing program 2 (id=1452): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x3, 0x840) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000540)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) 2.196131335s ago: executing program 2 (id=1453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac08}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000179090001006d617371000000000c00028008000140000000050900010073797a30000000000900020073797a32"], 0x74}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r5, &(0x7f00000000c0)='./mnt\x00', r5, 0x0, 0x177) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x1804) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0010000000000904000001ff01320009050d", @ANYRES32], 0x0) 2.129371354s ago: executing program 1 (id=1454): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x1ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1.957562565s ago: executing program 1 (id=1455): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="6f46c908341889a11ea3992276d5ab9e10824f9fcfb7f6d042618c6866e3801459b03d38ea918910602c461a2efae322fa6119ac242a51d6da28c74d466e336b26c77454129b8f099137cbe49f4f0d25a1887a2a71ab45b6bed147c61d2108915369d90861af6441ec422495a54e", 0x6e}], 0x1, 0x0, 0x0, 0x84}], 0x1, 0x4040000) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x40010}, 0x4008090) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) (async) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@canfd={{}, 0x2e, 0x0, 0x0, 0x0, "4e4e488e419039dda425818c34de45852abd1372621b404219373c9a72cdb611ef256a70bf66c39d7082f2809cbc3da9bb3c86e0c5e53cff15d561c53fe9ae3a"}, 0x48}}, 0x811) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x1407, 0x400, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.933681413s ago: executing program 3 (id=1456): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x4}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000140)="240000001e00fffffff881ff00081d000000000000000800090a00", 0x1b) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) 1.862732586s ago: executing program 1 (id=1457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.801936548s ago: executing program 3 (id=1458): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x5453, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x22001, 0x20) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x220c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) listen(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0x410, r11, 0x1, 0x70bd2e, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x1b4, 0x84, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8}]}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8001}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x800}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xbb}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0xffff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xf}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xf9d}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x800001}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x7, 0x1, @random="6ae4df"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="7c3b72002bc9fd43703d552423"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000000}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3c00000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x19}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x401}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ee4a4cbbac50"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x54a}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x1ec, 0x84, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="0021b4d69d51"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xd955}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffa}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xccb80000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="7be7c2cc6ea0"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x19, 0x1, @random="05182c45102bfd2366326c86cb2267462b496e7843"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x80}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xd07}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xf, 0x1, @random="0abc7ed39e1e6cac5dcea9"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x13929175}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xc85}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ae3ad86dc01a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="bef03ba0261f"}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x80000000}, @NL80211_BAND_LC={0x8, 0x5, 0x2d7}, @NL80211_BAND_LC={0x8, 0x5, 0x401}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xc93a}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x18b}, {0x8, 0x0, 0x80000000}, {0x8, 0x0, 0xec}, {0x8, 0x0, 0xfff}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x80}, {0x8, 0x0, 0x838}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x7}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}]}, 0x410}, 0x1, 0x0, 0x0, 0x4005800}, 0x800) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/128, 0x80}], 0x1}, 0x32161) 1.762053199s ago: executing program 3 (id=1459): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)}, 0x20000000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x200, 0x1d2) open_by_handle_at(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000fe0000000b"], 0x0) fchdir(r4) r6 = fanotify_init(0x1, 0x2) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0x9, {0x6, 0xcbff, 0x0, {0x5, 0x5, 0x200000003, 0x1, 0x7, 0x6, 0x1, 0x6, 0x101, 0x1000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fanotify_mark(r6, 0x41, 0x38, r7, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x400002) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) r11 = fspick(r7, &(0x7f0000000180)='./file1\x00', 0x92e8df6b08716cb9) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f00080003"], 0x78) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000000906010235000000000000000300000009000200a49a7fc8c873797a31000000000900020073797a390000000004000780cce8d27b590fd58a6a49f40a54e3d9924ca7419d6027434618e8311c02a8f0e7d8dc96628ff8a13107bde8da040ecac19ebc294240a0e53be37fb982"], 0x30}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040), 0x4) close(r9) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)) 1.6749939s ago: executing program 3 (id=1460): ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x4, 0x1a, '\x00', [@generic={0xfe, 0x70, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b08"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x400, 0xb]}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @hopopts={{0xa0, 0x29, 0x36, {0x5e, 0x10, '\x00', [@generic={0xff, 0x41, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70"}, @pad1, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x2, 0x4, 0x966]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3}}]}}}, @rthdr={{0x18}}], 0x1d8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 5) 1.480349879s ago: executing program 0 (id=1461): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x3, 0x840) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000540)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="414601", @ANYRES32=r3], 0x4) 1.33543166s ago: executing program 0 (id=1462): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000000c0)=0xffffffff, 0x4) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r4, 0x8070ae9f, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000007c0)=ANY=[@ANYRES8=r4]) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x301}, 0x14}}, 0x80) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) 31.756007ms ago: executing program 3 (id=1463): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x1ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1464): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000200)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0xf, 0x2, 0xffff}, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xb}, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r1, 0x4b32, 0xf1a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r3, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "b8fcb4f57722209fcfd6112a4f2412a0"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="67c900"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xfffffff9}, @NL80211_ATTR_MAC={0xa, 0x6, @random="75c56c5be402"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd1}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000200)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0xf, 0x2, 0xffff}, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xb}, 0x0, 0x0, 0x0}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDSETLED(r1, 0x4b32, 0xf1a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r3, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "b8fcb4f57722209fcfd6112a4f2412a0"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="67c900"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xfffffff9}, @NL80211_ATTR_MAC={0xa, 0x6, @random="75c56c5be402"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd1}, 0x0) (async) kernel console output (not intermixed with test programs): 0306201 0 returned -14 [ 475.710289][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 475.721185][ T9258] netlink: 'syz.2.1212': attribute type 33 has an invalid length. [ 475.729300][ T9258] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1212'. [ 476.111922][ T9269] binder: 9268:9269 ioctl c0306201 0 returned -14 [ 476.396494][ T9281] netlink: 'syz.2.1221': attribute type 33 has an invalid length. [ 476.407166][ T9281] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1221'. [ 476.697789][ T9293] binder: 9292:9293 ioctl c0306201 0 returned -14 [ 477.178124][ T9314] netlink: 'syz.1.1232': attribute type 33 has an invalid length. [ 477.185970][ T9314] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1232'. [ 477.232486][ T10] usb 2-1: USB disconnect, device number 27 [ 477.422170][ T9320] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3406083130 (6812166260 ns) > initial count (5082761854 ns). Using initial count to start timer. [ 477.715309][ T9331] tmpfs: Unknown parameter 'noinode32' [ 477.813862][ T9335] netlink: 'syz.2.1242': attribute type 33 has an invalid length. [ 477.838592][ T9335] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1242'. [ 477.879800][ T5881] Bluetooth: hci1: command tx timeout [ 477.879976][ T5874] Bluetooth: hci0: command 0x0405 tx timeout [ 477.892140][ T5882] Bluetooth: hci2: command 0x0406 tx timeout [ 477.901131][ T5880] Bluetooth: hci3: command tx timeout [ 477.996569][ T9339] FAULT_INJECTION: forcing a failure. [ 477.996569][ T9339] name failslab, interval 1, probability 0, space 0, times 0 [ 478.006363][ T9344] overlay: Unknown parameter '32 [ 478.006363][ T9344] time [ 478.006363][ T9344] string [ 478.006363][ T9344] statistic [ 478.006363][ T9344] state [ 478.006363][ T9344] realm [ 478.006363][ T9344] rateest [ 478.006363][ T9344] quota [ 478.006363][ T9344] pkttype [ 478.006363][ T9344] physdev [ 478.006363][ T9344] cgroup [ 478.006363][ T9344] cgroup [ 478.006363][ T9344] cgroup [ 478.006363][ T9344] owner [ 478.006363][ T9344] nfacct [ 478.006363][ T9344] nfacct [ 478.006363][ T9344] mac [ 478.006363][ T9344] limit [ 478.006363][ T9344] ipvs [ 478.006363][ T9344] helper [ 478.006363][ T9344] devgroup [ 478.006363][ T9344] cpu [ 478.006363][ T9344] conntrack [ 478.006363][ T9344] conntrack [ 478.006363][ T9344] conntrack [ 478.006363][ T9344] connlabel [ 478.006363][ T9344] connbytes [ 478.006363][ T9344] comment [ 478.006363][ T9344] bpf [ 478.006363][ T9344] bpf [ 478.006363][ T9344] connmark [ 478.006363][ T9344] mark [ 478.006363][ T9344] rpfilter [ 478.006363][ T9344] ah [ 478.006363][ T9344] tcpmss [ 478.006363][ T9344] socket [ 478.006363][ T9344] socket [ 478.006363][ T9344] socket [ 478.006363][ T9344] socket [ 478.006363][ T9344] sctp [ 478.006363][ T9344] recent [ 478.006363][ T9344] recent [ 478.006363][ T9344] policy [ 478.006363][ T9344] osf [ 478.006363][ T9344] multiport [ 478.006363][ T9344] length [ 478.006363][ T9344] l2tp [ 478.006363][ T9344] iprange [ 478.006363][ T9344] ipcomp [ 478.006363][ T9344] ttl [ 478.006363][ T9344] hashlimit [ 478.006363][ T9344] hashlimit [ 478.006363][ T9344] hashlimit [ 478.006363][ T9344] esp [ 478.006363][ T9344] ecn [ 478.006363][ T9344] tos [ 478.006363][ T9344] dscp [ 478.006363][ T9344] dccp [ 478.006363][ T9344] connlimit [ 478.006363][ T9344] cluster [ 478.006363][ T9344] addrtype [ 478.006363][ T9344] addrtype [ 478.006363][ T9344] set [ 478.006363][ T9344] set [ 478.006363][ T9344] set [ 478.006363][ T9344] set [ 478.006363][ T9344] set [ 478.006363][ T9344] icmp [ 478.026841][ T9339] CPU: 0 UID: 0 PID: 9339 Comm: syz.1.1243 Not tainted syzkaller #0 PREEMPT(full) [ 478.026866][ T9339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 478.026876][ T9339] Call Trace: [ 478.026883][ T9339] [ 478.026891][ T9339] dump_stack_lvl+0xe8/0x150 [ 478.026917][ T9339] should_fail_ex+0x412/0x560 [ 478.026944][ T9339] should_failslab+0xa8/0x100 [ 478.026962][ T9339] __kmalloc_noprof+0xe8/0x760 [ 478.026983][ T9339] ? security_task_alloc+0x4d/0x330 [ 478.027011][ T9339] security_task_alloc+0x4d/0x330 [ 478.027034][ T9339] copy_process+0x16de/0x3cf0 [ 478.027065][ T9339] ? copy_process+0x921/0x3cf0 [ 478.027095][ T9339] ? __pfx_copy_process+0x10/0x10 [ 478.027122][ T9339] ? mutex_init_lockep+0xf9/0x130 [ 478.027146][ T9339] vhost_task_create+0x1f9/0x380 [ 478.027162][ T9339] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 478.027184][ T9339] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 478.027206][ T9339] ? __pfx_vhost_task_create+0x10/0x10 [ 478.027230][ T9339] ? __pfx_vhost_task_fn+0x10/0x10 [ 478.027250][ T9339] ? __lock_acquire+0x6b5/0x2cf0 [ 478.027271][ T9339] ? kasan_save_track+0x4f/0x80 [ 478.027290][ T9339] ? kasan_save_track+0x3e/0x80 [ 478.027308][ T9339] ? kasan_save_free_info+0x46/0x50 [ 478.027324][ T9339] ? __kasan_slab_free+0x5c/0x80 [ 478.027343][ T9339] ? kfree+0x1c1/0x610 [ 478.027363][ T9339] kvm_mmu_post_init_vm+0x14c/0x300 [ 478.027382][ T9339] kvm_arch_vcpu_ioctl_run+0x108/0x1dc0 [ 478.027412][ T9339] ? register_lock_class+0x31/0x2e0 [ 478.027431][ T9339] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 478.027449][ T9339] ? __lock_acquire+0x6b5/0x2cf0 [ 478.027470][ T9339] ? __mutex_lock+0x319/0x1300 [ 478.027496][ T9339] ? kasan_quarantine_put+0xbb/0x1f0 [ 478.027528][ T9339] ? do_raw_write_lock+0x11d/0x260 [ 478.027558][ T9339] kvm_vcpu_ioctl+0xa62/0xfd0 [ 478.027585][ T9339] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 478.027604][ T9339] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 478.027641][ T9339] ? __fget_files+0x2a/0x420 [ 478.027662][ T9339] ? __fget_files+0x2a/0x420 [ 478.027680][ T9339] ? __fget_files+0x3a0/0x420 [ 478.027696][ T9339] ? __fget_files+0x2a/0x420 [ 478.027724][ T9339] ? bpf_lsm_file_ioctl+0x9/0x20 [ 478.027745][ T9339] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 478.027766][ T9339] __se_sys_ioctl+0xfc/0x170 [ 478.027784][ T9339] do_syscall_64+0xe2/0xf80 [ 478.027803][ T9339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.027818][ T9339] ? trace_irq_disable+0x37/0x100 [ 478.027832][ T9339] ? clear_bhb_loop+0x40/0x90 [ 478.027851][ T9339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.027866][ T9339] RIP: 0033:0x7ff4c459acb9 [ 478.027882][ T9339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.027896][ T9339] RSP: 002b:00007ff4c545d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.027913][ T9339] RAX: ffffffffffffffda RBX: 00007ff4c4815fa0 RCX: 00007ff4c459acb9 [ 478.027924][ T9339] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 478.027934][ T9339] RBP: 00007ff4c545d090 R08: 0000000000000000 R09: 0000000000000000 [ 478.027943][ T9339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.027951][ T9339] R13: 00007ff4c4816038 R14: 00007ff4c4815fa0 R15: 00007ffe13b1a6c8 [ 478.027978][ T9339] [ 478.563962][ T9353] netlink: 'syz.0.1250': attribute type 83 has an invalid length. [ 478.633293][ T9356] netlink: 'syz.0.1250': attribute type 83 has an invalid length. [ 478.676052][ T9361] netlink: 'syz.3.1253': attribute type 33 has an invalid length. [ 478.704717][ T9361] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1253'. [ 479.395141][ T9387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.404429][ T9387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.408235][ T9386] overlay: ./file0 is not a directory [ 479.414327][ T9387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1260'. [ 479.429436][ T9388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1260'. [ 479.628484][ T5813] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 479.744456][ T9405] FAULT_INJECTION: forcing a failure. [ 479.744456][ T9405] name failslab, interval 1, probability 0, space 0, times 0 [ 479.757522][ T9405] CPU: 0 UID: 0 PID: 9405 Comm: syz.1.1269 Not tainted syzkaller #0 PREEMPT(full) [ 479.757545][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 479.757554][ T9405] Call Trace: [ 479.757562][ T9405] [ 479.757568][ T9405] dump_stack_lvl+0xe8/0x150 [ 479.757594][ T9405] should_fail_ex+0x412/0x560 [ 479.757640][ T9405] should_failslab+0xa8/0x100 [ 479.757658][ T9405] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 479.757679][ T9405] ? __get_vm_area_node+0x13f/0x300 [ 479.757701][ T9405] __get_vm_area_node+0x13f/0x300 [ 479.757724][ T9405] __vmalloc_node_range_noprof+0x372/0x1730 [ 479.757745][ T9405] ? copy_process+0x508/0x3cf0 [ 479.757770][ T9405] ? percpu_ref_get_many+0x19/0x140 [ 479.757796][ T9405] ? percpu_ref_get_many+0x19/0x140 [ 479.757818][ T9405] ? __memcg_slab_post_alloc_hook+0x1ff/0x820 [ 479.757839][ T9405] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 479.757865][ T9405] ? memcpy_and_pad+0x48/0x80 [ 479.757888][ T9405] __vmalloc_node_noprof+0xc2/0x100 [ 479.757909][ T9405] ? copy_process+0x508/0x3cf0 [ 479.757926][ T9405] ? copy_process+0x508/0x3cf0 [ 479.757948][ T9405] dup_task_struct+0x228/0x9a0 [ 479.757969][ T9405] ? _raw_spin_unlock_irq+0x23/0x50 [ 479.757991][ T9405] copy_process+0x508/0x3cf0 [ 479.758038][ T9405] ? __pfx_copy_process+0x10/0x10 [ 479.758065][ T9405] ? mutex_init_lockep+0xf9/0x130 [ 479.758090][ T9405] vhost_task_create+0x1f9/0x380 [ 479.758108][ T9405] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 479.758130][ T9405] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 479.758154][ T9405] ? __pfx_vhost_task_create+0x10/0x10 [ 479.758178][ T9405] ? __pfx_vhost_task_fn+0x10/0x10 [ 479.758199][ T9405] ? __lock_acquire+0x6b5/0x2cf0 [ 479.758220][ T9405] ? kasan_save_track+0x4f/0x80 [ 479.758239][ T9405] ? kasan_save_track+0x3e/0x80 [ 479.758257][ T9405] ? kasan_save_free_info+0x46/0x50 [ 479.758273][ T9405] ? __kasan_slab_free+0x5c/0x80 [ 479.758293][ T9405] ? kfree+0x1c1/0x610 [ 479.758312][ T9405] kvm_mmu_post_init_vm+0x14c/0x300 [ 479.758332][ T9405] kvm_arch_vcpu_ioctl_run+0x108/0x1dc0 [ 479.758363][ T9405] ? register_lock_class+0x31/0x2e0 [ 479.758381][ T9405] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 479.758398][ T9405] ? __lock_acquire+0x6b5/0x2cf0 [ 479.758419][ T9405] ? __mutex_lock+0x319/0x1300 [ 479.758445][ T9405] ? kasan_quarantine_put+0xbb/0x1f0 [ 479.758478][ T9405] ? do_raw_write_lock+0x11d/0x260 [ 479.758514][ T9405] kvm_vcpu_ioctl+0xa62/0xfd0 [ 479.758543][ T9405] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 479.758562][ T9405] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 479.758601][ T9405] ? __fget_files+0x2a/0x420 [ 479.758630][ T9405] ? __fget_files+0x2a/0x420 [ 479.758647][ T9405] ? __fget_files+0x3a0/0x420 [ 479.758664][ T9405] ? __fget_files+0x2a/0x420 [ 479.758682][ T9405] ? bpf_lsm_file_ioctl+0x9/0x20 [ 479.758697][ T9405] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 479.758711][ T9405] __se_sys_ioctl+0xfc/0x170 [ 479.758722][ T9405] do_syscall_64+0xe2/0xf80 [ 479.758734][ T9405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.758743][ T9405] ? trace_irq_disable+0x37/0x100 [ 479.758752][ T9405] ? clear_bhb_loop+0x40/0x90 [ 479.758764][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.758773][ T9405] RIP: 0033:0x7ff4c459acb9 [ 479.758783][ T9405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.758791][ T9405] RSP: 002b:00007ff4c545d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.758802][ T9405] RAX: ffffffffffffffda RBX: 00007ff4c4815fa0 RCX: 00007ff4c459acb9 [ 479.758808][ T9405] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 479.758814][ T9405] RBP: 00007ff4c545d090 R08: 0000000000000000 R09: 0000000000000000 [ 479.758820][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.758825][ T9405] R13: 00007ff4c4816038 R14: 00007ff4c4815fa0 R15: 00007ffe13b1a6c8 [ 479.758840][ T9405] [ 479.758893][ T9405] syz.1.1269: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 480.150818][ T5813] usb 4-1: device descriptor read/64, error -71 [ 480.174953][ T9405] CPU: 1 UID: 0 PID: 9405 Comm: syz.1.1269 Not tainted syzkaller #0 PREEMPT(full) [ 480.174975][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 480.174985][ T9405] Call Trace: [ 480.174992][ T9405] [ 480.174999][ T9405] dump_stack_lvl+0xe8/0x150 [ 480.175025][ T9405] warn_alloc+0x249/0x340 [ 480.175053][ T9405] ? __pfx_warn_alloc+0x10/0x10 [ 480.175076][ T9405] ? __get_vm_area_node+0x13f/0x300 [ 480.175100][ T9405] ? __get_vm_area_node+0x2b5/0x300 [ 480.175126][ T9405] __vmalloc_node_range_noprof+0x397/0x1730 [ 480.175152][ T9405] ? percpu_ref_get_many+0x19/0x140 [ 480.175178][ T9405] ? percpu_ref_get_many+0x19/0x140 [ 480.175200][ T9405] ? __memcg_slab_post_alloc_hook+0x1ff/0x820 [ 480.175224][ T9405] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 480.175250][ T9405] ? memcpy_and_pad+0x48/0x80 [ 480.175273][ T9405] __vmalloc_node_noprof+0xc2/0x100 [ 480.175293][ T9405] ? copy_process+0x508/0x3cf0 [ 480.175312][ T9405] ? copy_process+0x508/0x3cf0 [ 480.175331][ T9405] dup_task_struct+0x228/0x9a0 [ 480.175351][ T9405] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.175373][ T9405] copy_process+0x508/0x3cf0 [ 480.175418][ T9405] ? __pfx_copy_process+0x10/0x10 [ 480.175445][ T9405] ? mutex_init_lockep+0xf9/0x130 [ 480.175469][ T9405] vhost_task_create+0x1f9/0x380 [ 480.175486][ T9405] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 480.175508][ T9405] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 480.175530][ T9405] ? __pfx_vhost_task_create+0x10/0x10 [ 480.175553][ T9405] ? __pfx_vhost_task_fn+0x10/0x10 [ 480.175573][ T9405] ? __lock_acquire+0x6b5/0x2cf0 [ 480.175595][ T9405] ? kasan_save_track+0x4f/0x80 [ 480.175615][ T9405] ? kasan_save_track+0x3e/0x80 [ 480.175643][ T9405] ? kasan_save_free_info+0x46/0x50 [ 480.175659][ T9405] ? __kasan_slab_free+0x5c/0x80 [ 480.175677][ T9405] ? kfree+0x1c1/0x610 [ 480.175696][ T9405] kvm_mmu_post_init_vm+0x14c/0x300 [ 480.175715][ T9405] kvm_arch_vcpu_ioctl_run+0x108/0x1dc0 [ 480.175745][ T9405] ? register_lock_class+0x31/0x2e0 [ 480.175764][ T9405] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 480.175782][ T9405] ? __lock_acquire+0x6b5/0x2cf0 [ 480.175803][ T9405] ? __mutex_lock+0x319/0x1300 [ 480.175831][ T9405] ? kasan_quarantine_put+0xbb/0x1f0 [ 480.175864][ T9405] ? do_raw_write_lock+0x11d/0x260 [ 480.175898][ T9405] kvm_vcpu_ioctl+0xa62/0xfd0 [ 480.175925][ T9405] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 480.175944][ T9405] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 480.175982][ T9405] ? __fget_files+0x2a/0x420 [ 480.176002][ T9405] ? __fget_files+0x2a/0x420 [ 480.176019][ T9405] ? __fget_files+0x3a0/0x420 [ 480.176037][ T9405] ? __fget_files+0x2a/0x420 [ 480.176056][ T9405] ? bpf_lsm_file_ioctl+0x9/0x20 [ 480.176076][ T9405] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 480.176098][ T9405] __se_sys_ioctl+0xfc/0x170 [ 480.176117][ T9405] do_syscall_64+0xe2/0xf80 [ 480.176136][ T9405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.176150][ T9405] ? trace_irq_disable+0x37/0x100 [ 480.176164][ T9405] ? clear_bhb_loop+0x40/0x90 [ 480.176182][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.176197][ T9405] RIP: 0033:0x7ff4c459acb9 [ 480.176214][ T9405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.176227][ T9405] RSP: 002b:00007ff4c545d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.176245][ T9405] RAX: ffffffffffffffda RBX: 00007ff4c4815fa0 RCX: 00007ff4c459acb9 [ 480.176256][ T9405] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 480.176265][ T9405] RBP: 00007ff4c545d090 R08: 0000000000000000 R09: 0000000000000000 [ 480.176274][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.176283][ T9405] R13: 00007ff4c4816038 R14: 00007ff4c4815fa0 R15: 00007ffe13b1a6c8 [ 480.176311][ T9405] [ 480.176455][ T9405] Mem-Info: [ 480.407623][ T5813] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 480.414268][ T9405] active_anon:8413 inactive_anon:0 isolated_anon:0 [ 480.414268][ T9405] active_file:18836 inactive_file:40000 isolated_file:0 [ 480.414268][ T9405] unevictable:768 dirty:114 writeback:0 [ 480.414268][ T9405] slab_reclaimable:11772 slab_unreclaimable:93060 [ 480.414268][ T9405] mapped:25291 shmem:2086 pagetables:1218 [ 480.414268][ T9405] sec_pagetables:0 bounce:0 [ 480.414268][ T9405] kernel_misc_reclaimable:0 [ 480.414268][ T9405] free:1323471 free_pcp:9661 free_cma:0 [ 480.550997][ T5813] usb 4-1: device descriptor read/64, error -71 [ 480.560096][ T9405] Node 0 active_anon:36452kB inactive_anon:0kB active_file:75344kB inactive_file:159796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104164kB dirty:452kB writeback:0kB shmem:9808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:12116kB pagetables:4820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 480.676746][ T9405] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 480.687098][ T5813] usb usb4-port1: attempt power cycle [ 480.746714][ T9405] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.786786][ T9405] lowmem_reserve[]: 0 2483 2485 2485 2485 [ 480.796926][ T9405] Node 0 DMA32 free:1332320kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41640kB inactive_anon:0kB active_file:75344kB inactive_file:159796kB unevictable:1536kB writepending:452kB zspages:0kB present:3129332kB managed:2543152kB mlocked:0kB bounce:0kB free_pcp:30912kB local_pcp:14460kB free_cma:0kB [ 480.856710][ T9405] lowmem_reserve[]: 0 0 1 1 1 [ 480.861474][ T9405] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.946872][ T9405] lowmem_reserve[]: 0 0 0 0 0 [ 480.951754][ T9405] Node 1 Normal free:3946204kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 481.025322][ T9405] lowmem_reserve[]: 0 0 0 0 0 [ 481.030361][ T9405] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 481.043283][ T9405] Node 0 DMA32: 352*4kB (U) 1821*8kB (UME) 769*16kB (UME) 327*32kB (UME) 328*64kB (UME) 230*128kB (ME) 127*256kB (M) 63*512kB (UME) 13*1024kB (ME) 9*2048kB (UME) 279*4096kB (UM) = 1328472kB [ 481.063693][ T9405] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 481.080301][ T5813] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 481.091466][ T9405] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 12*16kB (UME) 8*32kB (UM) 10*64kB (UME) 5*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 960*4096kB (M) = 3946204kB [ 481.111602][ T5813] usb 4-1: device descriptor read/8, error -71 [ 481.119674][ T9405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.129953][ T9405] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 481.139410][ T9405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 481.149389][ T9405] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 481.158821][ T9405] 65578 total pagecache pages [ 481.163653][ T9405] 0 pages in swap cache [ 481.167955][ T9405] Free swap = 124996kB [ 481.172190][ T9405] Total swap = 124996kB [ 481.176498][ T9405] 2097051 pages RAM [ 481.180471][ T9405] 0 pages HighMem/MovableOnly [ 481.185235][ T9405] 429173 pages reserved [ 481.190412][ T9405] 0 pages cma reserved [ 481.357528][ T5813] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 481.377355][ T5813] usb 4-1: device descriptor read/8, error -71 [ 481.487201][ T5813] usb usb4-port1: unable to enumerate USB device [ 481.952154][ T9461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.302551][ T9474] netlink: 'syz.0.1292': attribute type 21 has an invalid length. [ 482.310873][ T9474] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1292'. [ 482.320035][ T9474] netlink: 'syz.0.1292': attribute type 5 has an invalid length. [ 482.329715][ T9474] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1292'. [ 482.443449][ T9478] syzkaller1: entered promiscuous mode [ 482.452375][ T9478] syzkaller1: entered allmulticast mode [ 482.780862][ T9490] FAULT_INJECTION: forcing a failure. [ 482.780862][ T9490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.794788][ T9490] CPU: 1 UID: 0 PID: 9490 Comm: syz.3.1299 Not tainted syzkaller #0 PREEMPT(full) [ 482.794811][ T9490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 482.794820][ T9490] Call Trace: [ 482.794827][ T9490] [ 482.794834][ T9490] dump_stack_lvl+0xe8/0x150 [ 482.794859][ T9490] should_fail_ex+0x412/0x560 [ 482.794883][ T9490] _copy_from_iter+0x1d3/0x1670 [ 482.794906][ T9490] ? __pfx__copy_from_iter+0x10/0x10 [ 482.794920][ T9490] ? __lock_acquire+0x6b5/0x2cf0 [ 482.794938][ T9490] tun_get_user+0x516/0x3dd0 [ 482.794962][ T9490] ? __pfx_tun_get_user+0x10/0x10 [ 482.794973][ T9490] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 482.794985][ T9490] ? lockdep_hardirqs_on+0x7a/0x110 [ 482.794996][ T9490] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 482.795006][ T9490] ? save_netdev_trace_buffer+0x4e2/0x610 [ 482.795024][ T9490] ? kstrtoull+0x12f/0x1d0 [ 482.795048][ T9490] ? ref_tracker_alloc+0x363/0x4d0 [ 482.795069][ T9490] ? tun_chr_write_iter+0x60/0x210 [ 482.795084][ T9490] ? vfs_write+0x61d/0xb90 [ 482.795104][ T9490] ? ksys_write+0x150/0x270 [ 482.795124][ T9490] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 482.795143][ T9490] ? tun_get+0x1c/0x2f0 [ 482.795156][ T9490] ? tun_get+0x1c/0x2f0 [ 482.795166][ T9490] ? tun_get+0x1c/0x2f0 [ 482.795186][ T9490] tun_chr_write_iter+0x113/0x210 [ 482.795199][ T9490] vfs_write+0x61d/0xb90 [ 482.795216][ T9490] ? __pfx_vfs_write+0x10/0x10 [ 482.795233][ T9490] ? __fget_files+0x2a/0x420 [ 482.795249][ T9490] ksys_write+0x150/0x270 [ 482.795263][ T9490] ? __pfx_ksys_write+0x10/0x10 [ 482.795282][ T9490] do_syscall_64+0xe2/0xf80 [ 482.795293][ T9490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.795302][ T9490] ? trace_irq_disable+0x37/0x100 [ 482.795312][ T9490] ? clear_bhb_loop+0x40/0x90 [ 482.795322][ T9490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.795331][ T9490] RIP: 0033:0x7f15d459acb9 [ 482.795341][ T9490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.795350][ T9490] RSP: 002b:00007f15d54e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 482.795361][ T9490] RAX: ffffffffffffffda RBX: 00007f15d4815fa0 RCX: 00007f15d459acb9 [ 482.795367][ T9490] RDX: 000000000000340a RSI: 0000200000000280 RDI: 0000000000000003 [ 482.795373][ T9490] RBP: 00007f15d54e5090 R08: 0000000000000000 R09: 0000000000000000 [ 482.795379][ T9490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.795384][ T9490] R13: 00007f15d4816038 R14: 00007f15d4815fa0 R15: 00007fffc9a82998 [ 482.795398][ T9490] [ 483.187386][ T9500] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1303'. [ 483.385235][ T9505] FAULT_INJECTION: forcing a failure. [ 483.385235][ T9505] name failslab, interval 1, probability 0, space 0, times 0 [ 483.398196][ T9505] CPU: 0 UID: 0 PID: 9505 Comm: syz.3.1304 Not tainted syzkaller #0 PREEMPT(full) [ 483.398227][ T9505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 483.398237][ T9505] Call Trace: [ 483.398244][ T9505] [ 483.398251][ T9505] dump_stack_lvl+0xe8/0x150 [ 483.398277][ T9505] should_fail_ex+0x412/0x560 [ 483.398304][ T9505] should_failslab+0xa8/0x100 [ 483.398322][ T9505] __kmalloc_noprof+0xe8/0x760 [ 483.398343][ T9505] ? tomoyo_encode+0x28b/0x550 [ 483.398365][ T9505] tomoyo_encode+0x28b/0x550 [ 483.398385][ T9505] tomoyo_realpath_from_path+0x58d/0x5d0 [ 483.398411][ T9505] ? tomoyo_path_number_perm+0x219/0x630 [ 483.398433][ T9505] tomoyo_path_number_perm+0x246/0x630 [ 483.398457][ T9505] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 483.398477][ T9505] ? __lock_acquire+0x6b5/0x2cf0 [ 483.398512][ T9505] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 483.398552][ T9505] ? __fget_files+0x2a/0x420 [ 483.398574][ T9505] ? __fget_files+0x2a/0x420 [ 483.398590][ T9505] ? __fget_files+0x3a0/0x420 [ 483.398606][ T9505] ? __fget_files+0x2a/0x420 [ 483.398628][ T9505] security_file_ioctl+0xc3/0x2a0 [ 483.398651][ T9505] __se_sys_ioctl+0x47/0x170 [ 483.398669][ T9505] do_syscall_64+0xe2/0xf80 [ 483.398687][ T9505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.398698][ T9505] ? trace_irq_disable+0x37/0x100 [ 483.398707][ T9505] ? clear_bhb_loop+0x40/0x90 [ 483.398719][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.398728][ T9505] RIP: 0033:0x7f15d459acb9 [ 483.398738][ T9505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.398746][ T9505] RSP: 002b:00007f15d54e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.398757][ T9505] RAX: ffffffffffffffda RBX: 00007f15d4815fa0 RCX: 00007f15d459acb9 [ 483.398764][ T9505] RDX: 0000200000000580 RSI: 0000000040946400 RDI: 0000000000000003 [ 483.398770][ T9505] RBP: 00007f15d54e5090 R08: 0000000000000000 R09: 0000000000000000 [ 483.398776][ T9505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.398781][ T9505] R13: 00007f15d4816038 R14: 00007f15d4815fa0 R15: 00007fffc9a82998 [ 483.398796][ T9505] [ 483.398808][ T9505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 483.629584][ T9505] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 483.903960][ T9522] tmpfs: Unknown parameter '' [ 484.147115][ T5876] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 484.296740][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 484.303772][ T5876] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 484.322356][ T5876] usb 3-1: config 0 has no interface number 0 [ 484.331077][ T5876] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 484.342577][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.350647][ T5876] usb 3-1: Product: syz [ 484.354820][ T5876] usb 3-1: Manufacturer: syz [ 484.360057][ T5876] usb 3-1: SerialNumber: syz [ 484.368560][ T838] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 484.370281][ T5876] usb 3-1: config 0 descriptor?? [ 484.395767][ T5876] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 484.415354][ T838] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 484.571663][ T9538] dvmrp1: entered allmulticast mode [ 484.585885][ T9538] dvmrp1: left allmulticast mode [ 484.612683][ T5876] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 484.633672][ T5876] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 484.839712][ T9546] netlink: 'syz.0.1321': attribute type 4 has an invalid length. [ 484.855752][ T9546] netlink: 'syz.0.1321': attribute type 4 has an invalid length. [ 484.871569][ T9546] netlink: 'syz.0.1321': attribute type 4 has an invalid length. [ 484.905695][ T9547] netlink: 'syz.0.1321': attribute type 4 has an invalid length. [ 485.167845][ T838] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 485.212214][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 485.212547][ T5813] usb 3-1: USB disconnect, device number 39 [ 485.247847][ T5813] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 485.275915][ T5813] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 485.289905][ T5813] quatech2 3-1:0.51: device disconnected [ 485.336429][ T9557] binder: 9556:9557 ioctl c0306201 0 returned -14 [ 485.346979][ T838] usb 4-1: Using ep0 maxpacket: 32 [ 485.354143][ T838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.367962][ T838] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 485.386915][ T838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.395009][ T838] usb 4-1: Product: syz [ 485.399598][ T838] usb 4-1: Manufacturer: syz [ 485.405293][ T838] usb 4-1: SerialNumber: syz [ 485.414314][ T838] usb 4-1: config 0 descriptor?? [ 485.433232][ T838] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 485.631407][ T838] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 485.638697][ T838] quatech2 4-1:0.0: probe with driver quatech2 failed with error -8 [ 485.842903][ T838] usb 4-1: USB disconnect, device number 40 [ 485.930422][ T9587] input: syz0 as /devices/virtual/input/input26 [ 486.512204][ T9605] FAULT_INJECTION: forcing a failure. [ 486.512204][ T9605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.527605][ T9605] CPU: 0 UID: 0 PID: 9605 Comm: syz.1.1339 Not tainted syzkaller #0 PREEMPT(full) [ 486.527639][ T9605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 486.527649][ T9605] Call Trace: [ 486.527656][ T9605] [ 486.527663][ T9605] dump_stack_lvl+0xe8/0x150 [ 486.527689][ T9605] should_fail_ex+0x412/0x560 [ 486.527715][ T9605] _copy_from_iter+0x1d3/0x1670 [ 486.527749][ T9605] ? __pfx__copy_from_iter+0x10/0x10 [ 486.527771][ T9605] ? __lock_acquire+0x6b5/0x2cf0 [ 486.527801][ T9605] tun_get_user+0x516/0x3dd0 [ 486.527836][ T9605] ? __pfx_tun_get_user+0x10/0x10 [ 486.527854][ T9605] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 486.527873][ T9605] ? lockdep_hardirqs_on+0x7a/0x110 [ 486.527891][ T9605] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 486.527909][ T9605] ? save_netdev_trace_buffer+0x4e2/0x610 [ 486.527931][ T9605] ? kstrtoull+0x12f/0x1d0 [ 486.527967][ T9605] ? ref_tracker_alloc+0x363/0x4d0 [ 486.527988][ T9605] ? tun_chr_write_iter+0x60/0x210 [ 486.528004][ T9605] ? vfs_write+0x61d/0xb90 [ 486.528023][ T9605] ? ksys_write+0x150/0x270 [ 486.528043][ T9605] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 486.528069][ T9605] ? tun_get+0x1c/0x2f0 [ 486.528091][ T9605] ? tun_get+0x1c/0x2f0 [ 486.528108][ T9605] ? tun_get+0x1c/0x2f0 [ 486.528129][ T9605] tun_chr_write_iter+0x113/0x210 [ 486.528151][ T9605] vfs_write+0x61d/0xb90 [ 486.528179][ T9605] ? __pfx_vfs_write+0x10/0x10 [ 486.528211][ T9605] ? __fget_files+0x2a/0x420 [ 486.528238][ T9605] ksys_write+0x150/0x270 [ 486.528259][ T9605] ? __pfx_ksys_write+0x10/0x10 [ 486.528297][ T9605] do_syscall_64+0xe2/0xf80 [ 486.528315][ T9605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.528331][ T9605] ? trace_irq_disable+0x37/0x100 [ 486.528346][ T9605] ? clear_bhb_loop+0x40/0x90 [ 486.528364][ T9605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.528384][ T9605] RIP: 0033:0x7ff4c459acb9 [ 486.528400][ T9605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.528412][ T9605] RSP: 002b:00007ff4c545d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.528430][ T9605] RAX: ffffffffffffffda RBX: 00007ff4c4815fa0 RCX: 00007ff4c459acb9 [ 486.528442][ T9605] RDX: 000000000000340a RSI: 0000200000000280 RDI: 0000000000000005 [ 486.528452][ T9605] RBP: 00007ff4c545d090 R08: 0000000000000000 R09: 0000000000000000 [ 486.528462][ T9605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.528471][ T9605] R13: 00007ff4c4816038 R14: 00007ff4c4815fa0 R15: 00007ffe13b1a6c8 [ 486.528497][ T9605] [ 486.982088][ T9612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1342'. [ 486.991661][ T9612] Unknown options in mask b7f2 [ 487.044327][ T9615] tmpfs: Unknown parameter '' [ 487.266467][ T9622] FAULT_INJECTION: forcing a failure. [ 487.266467][ T9622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.279660][ T9622] CPU: 1 UID: 0 PID: 9622 Comm: syz.1.1346 Not tainted syzkaller #0 PREEMPT(full) [ 487.279681][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 487.279690][ T9622] Call Trace: [ 487.279696][ T9622] [ 487.279700][ T9622] dump_stack_lvl+0xe8/0x150 [ 487.279717][ T9622] should_fail_ex+0x412/0x560 [ 487.279734][ T9622] _copy_from_user+0x2d/0xb0 [ 487.279746][ T9622] ucma_listen+0x8f/0x270 [ 487.279759][ T9622] ? __pfx_ucma_listen+0x10/0x10 [ 487.279774][ T9622] ucma_write+0x24e/0x2f0 [ 487.279786][ T9622] ? __pfx_ucma_write+0x10/0x10 [ 487.279796][ T9622] ? security_file_permission+0x75/0x260 [ 487.279810][ T9622] ? rw_verify_area+0x255/0x4d0 [ 487.279823][ T9622] ? __pfx_ucma_write+0x10/0x10 [ 487.279834][ T9622] vfs_write+0x29a/0xb90 [ 487.279851][ T9622] ? __pfx_vfs_write+0x10/0x10 [ 487.279865][ T9622] ? __fget_files+0x2a/0x420 [ 487.279879][ T9622] ? __fget_files+0x2a/0x420 [ 487.279889][ T9622] ? __fget_files+0x3a0/0x420 [ 487.279900][ T9622] ? __fget_files+0x2a/0x420 [ 487.279915][ T9622] ksys_write+0x150/0x270 [ 487.279929][ T9622] ? __pfx_ksys_write+0x10/0x10 [ 487.279948][ T9622] do_syscall_64+0xe2/0xf80 [ 487.279960][ T9622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.279976][ T9622] ? trace_irq_disable+0x37/0x100 [ 487.279986][ T9622] ? clear_bhb_loop+0x40/0x90 [ 487.279997][ T9622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.280006][ T9622] RIP: 0033:0x7ff4c459acb9 [ 487.280016][ T9622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.280024][ T9622] RSP: 002b:00007ff4c545d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 487.280034][ T9622] RAX: ffffffffffffffda RBX: 00007ff4c4815fa0 RCX: 00007ff4c459acb9 [ 487.280041][ T9622] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 487.280046][ T9622] RBP: 00007ff4c545d090 R08: 0000000000000000 R09: 0000000000000000 [ 487.280051][ T9622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.280057][ T9622] R13: 00007ff4c4816038 R14: 00007ff4c4815fa0 R15: 00007ffe13b1a6c8 [ 487.280070][ T9622] [ 487.500869][ T5969] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 487.588159][ T9628] openvswitch: netlink: Key type 31 is not supported [ 487.634765][ T9631] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1350'. [ 487.657663][ T5969] usb 3-1: Using ep0 maxpacket: 32 [ 487.664670][ T5969] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 487.673318][ T5969] usb 3-1: config 0 has no interface number 0 [ 487.681921][ T5969] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 487.691603][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.699893][ T5969] usb 3-1: Product: syz [ 487.710068][ T5969] usb 3-1: Manufacturer: syz [ 487.714696][ T5969] usb 3-1: SerialNumber: syz [ 487.722586][ T5969] usb 3-1: config 0 descriptor?? [ 487.730988][ T5969] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 487.937724][ T5969] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 487.961614][ T5969] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 488.529931][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 488.530331][ T5813] usb 3-1: USB disconnect, device number 40 [ 488.561156][ T5813] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 488.582705][ T5813] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 488.608587][ T5813] quatech2 3-1:0.51: device disconnected [ 488.848576][ T5150] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 488.858020][ T5150] CPU: 0 UID: 0 PID: 5150 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 488.858043][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 488.858054][ T5150] Workqueue: hci1 hci_rx_work [ 488.858081][ T5150] Call Trace: [ 488.858095][ T5150] [ 488.858102][ T5150] dump_stack_lvl+0xe8/0x150 [ 488.858128][ T5150] sysfs_create_dir_ns+0x271/0x2a0 [ 488.858151][ T5150] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 488.858172][ T5150] ? do_raw_spin_unlock+0xf5/0x210 [ 488.858195][ T5150] kobject_add_internal+0x62b/0xd00 [ 488.858226][ T5150] kobject_add+0x163/0x240 [ 488.858254][ T5150] ? __pfx_kobject_add+0x10/0x10 [ 488.858277][ T5150] ? _raw_spin_unlock+0x28/0x50 [ 488.858299][ T5150] ? get_device_parent+0x366/0x3a0 [ 488.858320][ T5150] device_add+0x408/0xb70 [ 488.858342][ T5150] hci_conn_add_sysfs+0xd5/0x210 [ 488.858366][ T5150] le_conn_complete_evt+0xf1d/0x1430 [ 488.858401][ T5150] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 488.858423][ T5150] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 488.858447][ T5150] ? __pfx___mutex_lock+0x10/0x10 [ 488.858468][ T5150] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 488.858487][ T5150] ? skb_pull_data+0xfb/0x200 [ 488.858514][ T5150] hci_le_enh_conn_complete_evt+0x189/0x490 [ 488.858540][ T5150] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 488.858569][ T5150] hci_event_packet+0x7af/0x12c0 [ 488.858595][ T5150] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 488.858617][ T5150] ? __pfx_hci_event_packet+0x10/0x10 [ 488.858642][ T5150] ? kcov_remote_start+0x49a/0x7a0 [ 488.858662][ T5150] ? hci_send_to_monitor+0xe2/0x590 [ 488.858682][ T5150] hci_rx_work+0x3ee/0x1030 [ 488.858714][ T5150] ? process_one_work+0x87c/0x15a0 [ 488.858733][ T5150] process_one_work+0x949/0x15a0 [ 488.858775][ T5150] ? __pfx_process_one_work+0x10/0x10 [ 488.858792][ T5150] ? do_raw_spin_lock+0x12b/0x2f0 [ 488.858817][ T5150] ? assign_work+0x3d5/0x5e0 [ 488.858840][ T5150] worker_thread+0x9af/0xee0 [ 488.858884][ T5150] kthread+0x388/0x470 [ 488.858900][ T5150] ? __pfx_worker_thread+0x10/0x10 [ 488.858920][ T5150] ? __pfx_kthread+0x10/0x10 [ 488.858938][ T5150] ret_from_fork+0x51b/0xa40 [ 488.858959][ T5150] ? __pfx_ret_from_fork+0x10/0x10 [ 488.858977][ T5150] ? __switch_to+0xc7d/0x1400 [ 488.859001][ T5150] ? __pfx_kthread+0x10/0x10 [ 488.859018][ T5150] ret_from_fork_asm+0x1a/0x30 [ 488.859052][ T5150] [ 488.859079][ T5150] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 489.116968][ T5150] Bluetooth: hci1: failed to register connection device [ 489.458481][ T5150] Bluetooth: hci1: hcon ffff888029b90000 sent 0 < count 6 [ 489.757220][ T5813] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 489.851260][ T9719] tmpfs: Unknown parameter '' [ 489.909966][ T5813] usb 3-1: unable to get BOS descriptor or descriptor too short [ 489.918196][ T5813] usb 3-1: not running at top speed; connect to a high speed hub [ 489.927104][ T5813] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.937448][ T5813] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 489.948460][ T5813] usb 3-1: too many endpoints for config 1 interface 1 altsetting 23: 170, using maximum allowed: 30 [ 489.961252][ T5813] usb 3-1: config 1 interface 1 altsetting 23 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 489.975590][ T5813] usb 3-1: config 1 interface 1 has no altsetting 0 [ 489.984202][ T5813] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.993385][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 490.001708][ T5813] usb 3-1: Product: syz [ 490.005903][ T5813] usb 3-1: Manufacturer: syz [ 490.011670][ T5813] usb 3-1: SerialNumber: syz [ 490.022338][ T9711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 490.096761][ T838] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 490.247446][ T838] usb 4-1: Using ep0 maxpacket: 32 [ 490.255036][ T5813] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 490.279075][ T838] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 490.299862][ T838] usb 4-1: config 0 has no interface number 0 [ 490.315101][ T838] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 490.330269][ T5813] usb 3-1: USB disconnect, device number 41 [ 490.345071][ T838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.368526][ T838] usb 4-1: Product: syz [ 490.372772][ T838] usb 4-1: Manufacturer: syz [ 490.383516][ T838] usb 4-1: SerialNumber: syz [ 490.405420][ T838] usb 4-1: config 0 descriptor?? [ 490.416453][ T838] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 490.573129][ T9726] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.1378'. [ 490.637333][ T838] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 490.677679][ T5150] Bluetooth: hci1: command 0x2016 tx timeout [ 490.682037][ T838] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 490.751622][ T5880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 490.767203][ T5880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 490.776450][ T5880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 490.784909][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 490.792954][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 490.854040][ T9729] sg_write: process 719 (syz.1.1379) changed security contexts after opening file descriptor, this is not allowed. [ 491.079553][ T9728] chnl_net:caif_netlink_parms(): no params data found [ 491.137438][ T5969] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 491.259482][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 491.259913][ T24] usb 4-1: USB disconnect, device number 41 [ 491.290552][ T9728] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.298015][ T9728] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.304227][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 491.305335][ T9728] bridge_slave_0: entered allmulticast mode [ 491.316621][ T5969] usb 2-1: Using ep0 maxpacket: 32 [ 491.324342][ T9728] bridge_slave_0: entered promiscuous mode [ 491.337739][ T9728] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.340506][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.346102][ T9728] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.364095][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 491.365064][ T9728] bridge_slave_1: entered allmulticast mode [ 491.380616][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.383348][ T9728] bridge_slave_1: entered promiscuous mode [ 491.399324][ T24] quatech2 4-1:0.51: device disconnected [ 491.419919][ T5969] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 491.442662][ T9728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.453847][ T5969] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 491.457271][ T9728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.463382][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.493755][ T5969] usb 2-1: config 0 descriptor?? [ 491.510604][ T9728] team0: Port device team_slave_0 added [ 491.519099][ T9728] team0: Port device team_slave_1 added [ 491.551458][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.558751][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.584796][ T9728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.597776][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.604767][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.631565][ T9728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.685446][ T9728] hsr_slave_0: entered promiscuous mode [ 491.692224][ T9728] hsr_slave_1: entered promiscuous mode [ 491.698679][ T9728] debugfs: 'hsr0' already exists in 'hsr' [ 491.704450][ T9728] Cannot create hsr debugfs directory [ 491.846608][ T9728] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.911460][ T5969] hid (null): report_id 54409 is invalid [ 491.911619][ T9728] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.926830][ T5969] hid (null): report_id 1880715515 is invalid [ 491.934294][ T5969] hid (null): unknown global tag 0xd [ 491.941966][ T5969] hid (null): global environment stack overflow [ 491.978572][ T5969] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0006/input/input27 [ 492.014967][ T9728] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.085874][ T5969] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0006/input/input28 [ 492.117314][ T9753] FAULT_INJECTION: forcing a failure. [ 492.117314][ T9753] name failslab, interval 1, probability 0, space 0, times 0 [ 492.139811][ T9753] CPU: 1 UID: 0 PID: 9753 Comm: syz.3.1383 Not tainted syzkaller #0 PREEMPT(full) [ 492.139832][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 492.139840][ T9753] Call Trace: [ 492.139846][ T9753] [ 492.139853][ T9753] dump_stack_lvl+0xe8/0x150 [ 492.139877][ T9753] should_fail_ex+0x412/0x560 [ 492.139902][ T9753] should_failslab+0xa8/0x100 [ 492.139919][ T9753] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 492.139941][ T9753] ? __get_vm_area_node+0x13f/0x300 [ 492.139962][ T9753] __get_vm_area_node+0x13f/0x300 [ 492.139984][ T9753] __vmalloc_node_range_noprof+0x372/0x1730 [ 492.140002][ T9753] ? copy_process+0x508/0x3cf0 [ 492.140024][ T9753] ? percpu_ref_get_many+0x19/0x140 [ 492.140046][ T9753] ? percpu_ref_get_many+0x19/0x140 [ 492.140066][ T9753] ? __memcg_slab_post_alloc_hook+0x1ff/0x820 [ 492.140087][ T9753] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 492.140111][ T9753] ? memcpy_and_pad+0x48/0x80 [ 492.140133][ T9753] __vmalloc_node_noprof+0xc2/0x100 [ 492.140158][ T9753] ? copy_process+0x508/0x3cf0 [ 492.140175][ T9753] ? copy_process+0x508/0x3cf0 [ 492.140196][ T9753] dup_task_struct+0x228/0x9a0 [ 492.140215][ T9753] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.140237][ T9753] copy_process+0x508/0x3cf0 [ 492.140279][ T9753] ? __pfx_copy_process+0x10/0x10 [ 492.140306][ T9753] ? mutex_init_lockep+0xf9/0x130 [ 492.140332][ T9753] vhost_task_create+0x1f9/0x380 [ 492.140349][ T9753] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 492.140372][ T9753] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 492.140395][ T9753] ? __pfx_vhost_task_create+0x10/0x10 [ 492.140421][ T9753] ? __pfx_vhost_task_fn+0x10/0x10 [ 492.140442][ T9753] ? __lock_acquire+0x6b5/0x2cf0 [ 492.140464][ T9753] ? kasan_save_track+0x4f/0x80 [ 492.140483][ T9753] ? kasan_save_track+0x3e/0x80 [ 492.140500][ T9753] ? kasan_save_free_info+0x46/0x50 [ 492.140516][ T9753] ? __kasan_slab_free+0x5c/0x80 [ 492.140533][ T9753] ? kfree+0x1c1/0x610 [ 492.140553][ T9753] kvm_mmu_post_init_vm+0x14c/0x300 [ 492.140573][ T9753] kvm_arch_vcpu_ioctl_run+0x108/0x1dc0 [ 492.140606][ T9753] ? register_lock_class+0x31/0x2e0 [ 492.140626][ T9753] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 492.140653][ T9753] ? __lock_acquire+0x6b5/0x2cf0 [ 492.140676][ T9753] ? __mutex_lock+0x319/0x1300 [ 492.140702][ T9753] ? kasan_quarantine_put+0xbb/0x1f0 [ 492.140736][ T9753] ? do_raw_write_lock+0x11d/0x260 [ 492.140770][ T9753] kvm_vcpu_ioctl+0xa62/0xfd0 [ 492.140797][ T9753] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 492.140817][ T9753] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 492.140857][ T9753] ? __fget_files+0x2a/0x420 [ 492.140879][ T9753] ? __fget_files+0x2a/0x420 [ 492.140897][ T9753] ? __fget_files+0x3a0/0x420 [ 492.140915][ T9753] ? __fget_files+0x2a/0x420 [ 492.140937][ T9753] ? bpf_lsm_file_ioctl+0x9/0x20 [ 492.140958][ T9753] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 492.140981][ T9753] __se_sys_ioctl+0xfc/0x170 [ 492.141000][ T9753] do_syscall_64+0xe2/0xf80 [ 492.141019][ T9753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.141035][ T9753] ? trace_irq_disable+0x37/0x100 [ 492.141051][ T9753] ? clear_bhb_loop+0x40/0x90 [ 492.141071][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.141086][ T9753] RIP: 0033:0x7f15d459acb9 [ 492.141103][ T9753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.141116][ T9753] RSP: 002b:00007f15d54c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.141135][ T9753] RAX: ffffffffffffffda RBX: 00007f15d4816090 RCX: 00007f15d459acb9 [ 492.141146][ T9753] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 492.141156][ T9753] RBP: 00007f15d54c4090 R08: 0000000000000000 R09: 0000000000000000 [ 492.141166][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.141176][ T9753] R13: 00007f15d4816128 R14: 00007f15d4816090 R15: 00007fffc9a82998 [ 492.141204][ T9753] [ 492.169730][ T9728] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.180046][ T5969] kye 0003:0458:5011.0006: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 492.306796][ T9753] syz.3.1383: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 492.418034][ T5969] usb 2-1: USB disconnect, device number 28 [ 492.470106][ T9753] ,cpuset=/,mems_allowed=0-1 [ 492.589179][ T9753] CPU: 0 UID: 0 PID: 9753 Comm: syz.3.1383 Not tainted syzkaller #0 PREEMPT(full) [ 492.589199][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 492.589209][ T9753] Call Trace: [ 492.589216][ T9753] [ 492.589223][ T9753] dump_stack_lvl+0xe8/0x150 [ 492.589247][ T9753] warn_alloc+0x249/0x340 [ 492.589274][ T9753] ? __pfx_warn_alloc+0x10/0x10 [ 492.589296][ T9753] ? __get_vm_area_node+0x13f/0x300 [ 492.589320][ T9753] ? __get_vm_area_node+0x2b5/0x300 [ 492.589346][ T9753] __vmalloc_node_range_noprof+0x397/0x1730 [ 492.589373][ T9753] ? percpu_ref_get_many+0x19/0x140 [ 492.589399][ T9753] ? percpu_ref_get_many+0x19/0x140 [ 492.589420][ T9753] ? __memcg_slab_post_alloc_hook+0x1ff/0x820 [ 492.589444][ T9753] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 492.589472][ T9753] ? memcpy_and_pad+0x48/0x80 [ 492.589494][ T9753] __vmalloc_node_noprof+0xc2/0x100 [ 492.589514][ T9753] ? copy_process+0x508/0x3cf0 [ 492.589532][ T9753] ? copy_process+0x508/0x3cf0 [ 492.589553][ T9753] dup_task_struct+0x228/0x9a0 [ 492.589573][ T9753] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.589594][ T9753] copy_process+0x508/0x3cf0 [ 492.589637][ T9753] ? __pfx_copy_process+0x10/0x10 [ 492.589664][ T9753] ? mutex_init_lockep+0xf9/0x130 [ 492.589688][ T9753] vhost_task_create+0x1f9/0x380 [ 492.589705][ T9753] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 492.589727][ T9753] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 492.589751][ T9753] ? __pfx_vhost_task_create+0x10/0x10 [ 492.589773][ T9753] ? __pfx_vhost_task_fn+0x10/0x10 [ 492.589795][ T9753] ? __lock_acquire+0x6b5/0x2cf0 [ 492.589818][ T9753] ? kasan_save_track+0x4f/0x80 [ 492.589836][ T9753] ? kasan_save_track+0x3e/0x80 [ 492.589862][ T9753] ? kasan_save_free_info+0x46/0x50 [ 492.589879][ T9753] ? __kasan_slab_free+0x5c/0x80 [ 492.589898][ T9753] ? kfree+0x1c1/0x610 [ 492.589919][ T9753] kvm_mmu_post_init_vm+0x14c/0x300 [ 492.589940][ T9753] kvm_arch_vcpu_ioctl_run+0x108/0x1dc0 [ 492.589971][ T9753] ? register_lock_class+0x31/0x2e0 [ 492.589990][ T9753] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 492.590010][ T9753] ? __lock_acquire+0x6b5/0x2cf0 [ 492.590033][ T9753] ? __mutex_lock+0x319/0x1300 [ 492.590059][ T9753] ? kasan_quarantine_put+0xbb/0x1f0 [ 492.590092][ T9753] ? do_raw_write_lock+0x11d/0x260 [ 492.590123][ T9753] kvm_vcpu_ioctl+0xa62/0xfd0 [ 492.590152][ T9753] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 492.590172][ T9753] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 492.590211][ T9753] ? __fget_files+0x2a/0x420 [ 492.590233][ T9753] ? __fget_files+0x2a/0x420 [ 492.590251][ T9753] ? __fget_files+0x3a0/0x420 [ 492.590269][ T9753] ? __fget_files+0x2a/0x420 [ 492.590289][ T9753] ? bpf_lsm_file_ioctl+0x9/0x20 [ 492.590309][ T9753] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 492.590331][ T9753] __se_sys_ioctl+0xfc/0x170 [ 492.590350][ T9753] do_syscall_64+0xe2/0xf80 [ 492.590370][ T9753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.590386][ T9753] ? trace_irq_disable+0x37/0x100 [ 492.590401][ T9753] ? clear_bhb_loop+0x40/0x90 [ 492.590421][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.590436][ T9753] RIP: 0033:0x7f15d459acb9 [ 492.590451][ T9753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.590464][ T9753] RSP: 002b:00007f15d54c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.590481][ T9753] RAX: ffffffffffffffda RBX: 00007f15d4816090 RCX: 00007f15d459acb9 [ 492.590493][ T9753] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 492.590502][ T9753] RBP: 00007f15d54c4090 R08: 0000000000000000 R09: 0000000000000000 [ 492.590512][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.590521][ T9753] R13: 00007f15d4816128 R14: 00007f15d4816090 R15: 00007fffc9a82998 [ 492.590547][ T9753] [ 492.590574][ T9753] Mem-Info: [ 492.767580][ T5150] Bluetooth: hci1: command 0x2016 tx timeout [ 492.773071][ T9753] active_anon:5630 inactive_anon:0 isolated_anon:0 [ 492.773071][ T9753] active_file:19241 inactive_file:40006 isolated_file:0 [ 492.773071][ T9753] unevictable:768 dirty:265 writeback:0 [ 492.773071][ T9753] slab_reclaimable:11621 slab_unreclaimable:95575 [ 492.773071][ T9753] mapped:27530 shmem:1364 pagetables:1124 [ 492.773071][ T9753] sec_pagetables:0 bounce:0 [ 492.773071][ T9753] kernel_misc_reclaimable:0 [ 492.773071][ T9753] free:1322678 free_pcp:9136 free_cma:0 [ 492.846813][ T5150] Bluetooth: hci4: command tx timeout [ 492.866866][ T9753] Node 0 active_anon:22568kB inactive_anon:0kB active_file:76964kB inactive_file:159820kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102012kB dirty:1072kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12308kB pagetables:4268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 493.075872][ T9753] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 493.129627][ T9753] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 493.186599][ T9753] lowmem_reserve[]: 0 2483 2485 2485 2485 [ 493.193591][ T9753] Node 0 DMA32 free:1329116kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22268kB inactive_anon:0kB active_file:76964kB inactive_file:159820kB unevictable:1536kB writepending:1072kB zspages:0kB present:3129332kB managed:2543152kB mlocked:0kB bounce:0kB free_pcp:38164kB local_pcp:19200kB free_cma:0kB [ 493.275109][ T9753] lowmem_reserve[]: 0 0 1 1 1 [ 493.280403][ T9753] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 493.312792][ T9753] lowmem_reserve[]: 0 0 0 0 0 [ 493.331098][ T9753] Node 1 Normal free:3946204kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 493.365059][ T9753] lowmem_reserve[]: 0 0 0 0 0 [ 493.370192][ T9753] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 493.383293][ T9753] Node 0 DMA32: 727*4kB (UM) 1972*8kB (UME) 796*16kB (UME) 441*32kB (UME) 322*64kB (UME) 203*128kB (UME) 144*256kB (UME) 70*512kB (UME) 27*1024kB (UME) 19*2048kB (UME) 268*4096kB (M) = 1329116kB [ 493.407031][ T5867] syz-executor (5867) used greatest stack depth: 18856 bytes left [ 493.419763][ T9753] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 493.431817][ T9753] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 12*16kB (UME) 8*32kB (UM) 10*64kB (UME) 5*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 960*4096kB (M) = 3946204kB [ 493.433866][ T9728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 493.454115][ T9753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.467145][ T9753] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 493.478820][ T9753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.488911][ T9753] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 493.500708][ T9753] 60609 total pagecache pages [ 493.505426][ T9753] 0 pages in swap cache [ 493.511082][ T9753] Free swap = 124996kB [ 493.515341][ T9753] Total swap = 124996kB [ 493.520962][ T9728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 493.526746][ T9753] 2097051 pages RAM [ 493.531924][ T9753] 0 pages HighMem/MovableOnly [ 493.537066][ T9753] 429173 pages reserved [ 493.541236][ T9728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 493.547996][ T9753] 0 pages cma reserved [ 493.551131][ T6467] bridge_slave_1: left allmulticast mode [ 493.563319][ T6467] bridge_slave_1: left promiscuous mode [ 493.571536][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.582798][ T6467] bridge_slave_0: left allmulticast mode [ 493.588621][ T6467] bridge_slave_0: left promiscuous mode [ 493.595938][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.336385][ T9784] FAULT_INJECTION: forcing a failure. [ 494.336385][ T9784] name failslab, interval 1, probability 0, space 0, times 0 [ 494.361187][ T6467] ***** Releasing 0 refcount on 0000000000000000 [ 494.373659][ T9784] CPU: 0 UID: 0 PID: 9784 Comm: syz.2.1393 Not tainted syzkaller #0 PREEMPT(full) [ 494.373684][ T9784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 494.373694][ T9784] Call Trace: [ 494.373701][ T9784] [ 494.373709][ T9784] dump_stack_lvl+0xe8/0x150 [ 494.373735][ T9784] should_fail_ex+0x412/0x560 [ 494.373763][ T9784] should_failslab+0xa8/0x100 [ 494.373782][ T9784] __kmalloc_noprof+0xe8/0x760 [ 494.373805][ T9784] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 494.373830][ T9784] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 494.373855][ T9784] genl_family_rcv_msg_doit+0xd9/0x330 [ 494.373879][ T9784] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 494.373901][ T9784] ? __pfx_genl_get_cmd+0x10/0x10 [ 494.373916][ T9784] ? stack_trace_save+0xa9/0x100 [ 494.373933][ T9784] ? __pfx_nl80211_del_pmk+0x10/0x10 [ 494.373959][ T9784] ? trim_netdev_trace+0x2a2/0x3d0 [ 494.373989][ T9784] genl_rcv_msg+0x61c/0x7a0 [ 494.374013][ T9784] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.374029][ T9784] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 494.374048][ T9784] ? __pfx_nl80211_del_pmk+0x10/0x10 [ 494.374066][ T9784] ? __pfx_nl80211_post_doit+0x10/0x10 [ 494.374088][ T9784] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 494.374106][ T9784] ? do_syscall_64+0xe2/0xf80 [ 494.374124][ T9784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.374147][ T9784] netlink_rcv_skb+0x232/0x4b0 [ 494.374170][ T9784] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.374189][ T9784] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.374207][ T9784] ? genl_rcv+0x19/0x40 [ 494.374239][ T9784] ? down_read+0x272/0x2e0 [ 494.374259][ T9784] ? genl_rcv+0xd/0x40 [ 494.374277][ T9784] genl_rcv+0x28/0x40 [ 494.374292][ T9784] netlink_unicast+0x80f/0x9b0 [ 494.374320][ T9784] ? __pfx_netlink_unicast+0x10/0x10 [ 494.374342][ T9784] ? netlink_sendmsg+0x650/0xb40 [ 494.374362][ T9784] ? skb_put+0x11b/0x210 [ 494.374383][ T9784] netlink_sendmsg+0x813/0xb40 [ 494.374413][ T9784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.374436][ T9784] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 494.374465][ T9784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.374493][ T9784] sock_sendmsg_nosec+0x18f/0x1d0 [ 494.374517][ T9784] ____sys_sendmsg+0x589/0x8c0 [ 494.374536][ T9784] ? __might_fault+0xaf/0x130 [ 494.374562][ T9784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.374590][ T9784] ? import_iovec+0x73/0xa0 [ 494.374611][ T9784] ___sys_sendmsg+0x2a5/0x360 [ 494.374630][ T9784] ? __lock_acquire+0x6b5/0x2cf0 [ 494.374654][ T9784] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.374707][ T9784] ? __fget_files+0x2a/0x420 [ 494.374725][ T9784] ? __fget_files+0x3a0/0x420 [ 494.374755][ T9784] __x64_sys_sendmsg+0x1bd/0x2a0 [ 494.374777][ T9784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.374806][ T9784] ? __pfx_ksys_write+0x10/0x10 [ 494.374840][ T9784] do_syscall_64+0xe2/0xf80 [ 494.374858][ T9784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.374874][ T9784] ? trace_irq_disable+0x37/0x100 [ 494.374890][ T9784] ? clear_bhb_loop+0x40/0x90 [ 494.374910][ T9784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.374926][ T9784] RIP: 0033:0x7f17f619acb9 [ 494.374943][ T9784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.374956][ T9784] RSP: 002b:00007f17f70e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.374973][ T9784] RAX: ffffffffffffffda RBX: 00007f17f6415fa0 RCX: 00007f17f619acb9 [ 494.374985][ T9784] RDX: 0000000004000000 RSI: 0000200000006940 RDI: 0000000000000004 [ 494.374995][ T9784] RBP: 00007f17f70e3090 R08: 0000000000000000 R09: 0000000000000000 [ 494.375005][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.375013][ T9784] R13: 00007f17f6416038 R14: 00007f17f6415fa0 R15: 00007ffe9b1bf628 [ 494.375041][ T9784] [ 494.762375][ T6467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.774922][ T6467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.788093][ T6467] bond0 (unregistering): Released all slaves [ 494.805630][ T9728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 494.815848][ T9789] FAULT_INJECTION: forcing a failure. [ 494.815848][ T9789] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 494.858340][ T9789] CPU: 1 UID: 0 PID: 9789 Comm: syz.1.1394 Not tainted syzkaller #0 PREEMPT(full) [ 494.858364][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 494.858374][ T9789] Call Trace: [ 494.858381][ T9789] [ 494.858389][ T9789] dump_stack_lvl+0xe8/0x150 [ 494.858415][ T9789] should_fail_ex+0x412/0x560 [ 494.858444][ T9789] pfn_reader_user_pin+0x69d/0x11a0 [ 494.858473][ T9789] ? __pfx_pfn_reader_user_pin+0x10/0x10 [ 494.858492][ T9789] ? kasan_save_track+0x4f/0x80 [ 494.858512][ T9789] ? interval_tree_span_iter_first+0xea/0xd70 [ 494.858541][ T9789] iopt_pages_fill_xarray+0x529/0xf20 [ 494.858573][ T9789] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 494.858624][ T9789] ? __kmalloc_cache_noprof+0x31c/0x660 [ 494.858646][ T9789] ? iopt_area_add_access+0x1f2/0x4c0 [ 494.858663][ T9789] ? __kmalloc_cache_noprof+0x15b/0x660 [ 494.858688][ T9789] iopt_area_add_access+0x210/0x4c0 [ 494.858720][ T9789] iommufd_access_pin_pages+0x6e0/0xc30 [ 494.858756][ T9789] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 494.858778][ T9789] ? iommufd_test+0x40c7/0x5540 [ 494.858799][ T9789] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 494.858827][ T9789] iommufd_test+0x411c/0x5540 [ 494.858857][ T9789] ? __lock_acquire+0x6b5/0x2cf0 [ 494.858878][ T9789] ? __pfx_iommufd_test+0x10/0x10 [ 494.858908][ T9789] ? tomoyo_path_number_perm+0x219/0x630 [ 494.858933][ T9789] ? tomoyo_path_number_perm+0x219/0x630 [ 494.858961][ T9789] ? __might_fault+0xaf/0x130 [ 494.858982][ T9789] ? __might_fault+0xaf/0x130 [ 494.859024][ T9789] iommufd_fops_ioctl+0x4b5/0x5d0 [ 494.859044][ T9789] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 494.859065][ T9789] ? __fget_files+0x2a/0x420 [ 494.859092][ T9789] ? __fget_files+0x2a/0x420 [ 494.859115][ T9789] ? bpf_lsm_file_ioctl+0x9/0x20 [ 494.859136][ T9789] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 494.859153][ T9789] __se_sys_ioctl+0xfc/0x170 [ 494.859172][ T9789] do_syscall_64+0xe2/0xf80 [ 494.859192][ T9789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.859207][ T9789] ? trace_irq_disable+0x37/0x100 [ 494.859224][ T9789] ? clear_bhb_loop+0x40/0x90 [ 494.859244][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.859259][ T9789] RIP: 0033:0x7ff4c459acb9 [ 494.859276][ T9789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.859289][ T9789] RSP: 002b:00007ff4c545d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.859306][ T9789] RAX: ffffffffffffffda RBX: 00007ff4c4815fa0 RCX: 00007ff4c459acb9 [ 494.859318][ T9789] RDX: 0000200000000a40 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 494.859329][ T9789] RBP: 00007ff4c545d090 R08: 0000000000000000 R09: 0000000000000000 [ 494.859339][ T9789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.859348][ T9789] R13: 00007ff4c4816038 R14: 00007ff4c4815fa0 R15: 00007ffe13b1a6c8 [ 494.859379][ T9789] [ 494.931074][ T9728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.017996][ T50] Bluetooth: hci4: command tx timeout [ 495.033240][ T9728] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.220087][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.227308][ T6474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.252788][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.260007][ T6474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.478760][ T838] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 495.547467][ T6467] hsr_slave_0: left promiscuous mode [ 495.554868][ T6467] hsr_slave_1: left promiscuous mode [ 495.561617][ T6467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.572196][ T6467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.584597][ T6467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.592276][ T6467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.614754][ T6467] veth1_macvtap: left promiscuous mode [ 495.620792][ T6467] veth0_macvtap: left promiscuous mode [ 495.626587][ T6467] veth1_vlan: left promiscuous mode [ 495.632186][ T6467] veth0_vlan: left promiscuous mode [ 495.638988][ T838] usb 4-1: Using ep0 maxpacket: 16 [ 495.650295][ T838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.662654][ T838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.696176][ T838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 495.726977][ T838] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 495.756336][ T838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.792600][ T838] usb 4-1: config 0 descriptor?? [ 496.182566][ T9826] tmpfs: Unknown parameter '' [ 496.218530][ T9806] random: crng reseeded on system resumption [ 496.229766][ T6467] team0 (unregistering): Port device team_slave_1 removed [ 496.255588][ T838] input: HID 0955:7214 Haptics as /devices/virtual/input/input29 [ 496.299134][ T6467] team0 (unregistering): Port device team_slave_0 removed [ 496.303097][ T838] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 496.319776][ T838] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 496.426768][ T5938] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 496.596832][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 496.603778][ T5938] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 496.622391][ T5938] usb 3-1: config 0 has no interface number 0 [ 496.639846][ T5938] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 496.657169][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.675543][ T5938] usb 3-1: Product: syz [ 496.680834][ T5938] usb 3-1: Manufacturer: syz [ 496.685459][ T5938] usb 3-1: SerialNumber: syz [ 496.724861][ T5938] usb 3-1: config 0 descriptor?? [ 496.734483][ T5938] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 496.918039][ T9728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.955667][ T5938] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 497.019199][ T5938] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 497.078787][ T50] Bluetooth: hci4: command tx timeout [ 497.109363][ T9728] veth0_vlan: entered promiscuous mode [ 497.169413][ T9728] veth1_vlan: entered promiscuous mode [ 497.219143][ T6467] IPVS: stop unused estimator thread 0... [ 497.234273][ T9728] veth0_macvtap: entered promiscuous mode [ 497.234718][ T9] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 497.241001][ T5988] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 497.259891][ T5969] usb 4-1: USB disconnect, device number 42 [ 497.279532][ T9] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 497.290324][ T9728] veth1_macvtap: entered promiscuous mode [ 497.310298][ T9] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 497.340535][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 497.354663][ T838] usb 3-1: USB disconnect, device number 42 [ 497.372808][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.384587][ T838] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 497.397203][ T9] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 497.414109][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.442922][ T838] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 497.456732][ T5988] usb 2-1: Using ep0 maxpacket: 32 [ 497.463811][ T5988] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 497.477630][ T838] quatech2 3-1:0.51: device disconnected [ 497.491312][ T5988] usb 2-1: config 0 has no interface number 0 [ 497.514643][ T5988] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 497.531482][ T150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.539048][ T5988] usb 2-1: config 0 interface 196 has no altsetting 0 [ 497.550382][ T5988] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 497.563878][ T150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.570206][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.581014][ T150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.593544][ T150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.596742][ T5988] usb 2-1: Product: syz [ 497.616960][ T5988] usb 2-1: Manufacturer: syz [ 497.626149][ T5988] usb 2-1: SerialNumber: syz [ 497.649498][ T5988] usb 2-1: config 0 descriptor?? [ 497.660176][ T9828] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 497.732633][ T6467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.750845][ T6467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.795620][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.808242][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.952002][ T9831] FAULT_INJECTION: forcing a failure. [ 497.952002][ T9831] name failslab, interval 1, probability 0, space 0, times 0 [ 497.971738][ T9831] CPU: 0 UID: 0 PID: 9831 Comm: syz.0.1376 Not tainted syzkaller #0 PREEMPT(full) [ 497.971762][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 497.971773][ T9831] Call Trace: [ 497.971780][ T9831] [ 497.971787][ T9831] dump_stack_lvl+0xe8/0x150 [ 497.971815][ T9831] should_fail_ex+0x412/0x560 [ 497.971843][ T9831] should_failslab+0xa8/0x100 [ 497.971862][ T9831] __kmalloc_noprof+0xe8/0x760 [ 497.971883][ T9831] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 497.971909][ T9831] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 497.971934][ T9831] genl_family_rcv_msg_doit+0xd9/0x330 [ 497.971958][ T9831] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 497.971984][ T9831] ? apparmor_capable+0x137/0x1a0 [ 497.972006][ T9831] ? bpf_lsm_capable+0x9/0x20 [ 497.972021][ T9831] ? security_capable+0x7e/0x2c0 [ 497.972050][ T9831] genl_rcv_msg+0x61c/0x7a0 [ 497.972073][ T9831] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.972090][ T9831] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 497.972109][ T9831] ? __pfx_nl80211_set_station+0x10/0x10 [ 497.972130][ T9831] ? __pfx_nl80211_post_doit+0x10/0x10 [ 497.972151][ T9831] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 497.972168][ T9831] ? do_syscall_64+0xe2/0xf80 [ 497.972186][ T9831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.972211][ T9831] netlink_rcv_skb+0x232/0x4b0 [ 497.972233][ T9831] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.972251][ T9831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.972269][ T9831] ? genl_rcv+0x19/0x40 [ 497.972301][ T9831] ? down_read+0x272/0x2e0 [ 497.972328][ T9831] ? genl_rcv+0xd/0x40 [ 497.972346][ T9831] genl_rcv+0x28/0x40 [ 497.972361][ T9831] netlink_unicast+0x80f/0x9b0 [ 497.972388][ T9831] ? __pfx_netlink_unicast+0x10/0x10 [ 497.972409][ T9831] ? netlink_sendmsg+0x650/0xb40 [ 497.972429][ T9831] ? skb_put+0x11b/0x210 [ 497.972450][ T9831] netlink_sendmsg+0x813/0xb40 [ 497.972479][ T9831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.972502][ T9831] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 497.972528][ T9831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.972548][ T9831] sock_sendmsg_nosec+0x18f/0x1d0 [ 497.972572][ T9831] ____sys_sendmsg+0x589/0x8c0 [ 497.972591][ T9831] ? __might_fault+0xaf/0x130 [ 497.972616][ T9831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.972643][ T9831] ? import_iovec+0x73/0xa0 [ 497.972665][ T9831] ___sys_sendmsg+0x2a5/0x360 [ 497.972682][ T9831] ? __lock_acquire+0x6b5/0x2cf0 [ 497.972707][ T9831] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.972759][ T9831] ? __fget_files+0x2a/0x420 [ 497.972779][ T9831] ? __fget_files+0x3a0/0x420 [ 497.972808][ T9831] __x64_sys_sendmsg+0x1bd/0x2a0 [ 497.972830][ T9831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.972858][ T9831] ? __pfx_ksys_write+0x10/0x10 [ 497.972891][ T9831] do_syscall_64+0xe2/0xf80 [ 497.972910][ T9831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.972926][ T9831] ? trace_irq_disable+0x37/0x100 [ 497.972941][ T9831] ? clear_bhb_loop+0x40/0x90 [ 497.972961][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.972977][ T9831] RIP: 0033:0x7fd82a59acb9 [ 497.972993][ T9831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.973006][ T9831] RSP: 002b:00007fd82b430028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.973024][ T9831] RAX: ffffffffffffffda RBX: 00007fd82a815fa0 RCX: 00007fd82a59acb9 [ 497.973036][ T9831] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 497.973046][ T9831] RBP: 00007fd82b430090 R08: 0000000000000000 R09: 0000000000000000 [ 497.973055][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.973065][ T9831] R13: 00007fd82a816038 R14: 00007fd82a815fa0 R15: 00007fffb977bc58 [ 497.973093][ T9831] [ 498.541568][ T9828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.550991][ T9828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.564710][ T5988] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 498.585127][ T5988] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 498.844627][ T838] usb 2-1: USB disconnect, device number 29 [ 498.918485][ T838] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 499.116611][ T9868] FAULT_INJECTION: forcing a failure. [ 499.116611][ T9868] name failslab, interval 1, probability 0, space 0, times 0 [ 499.129667][ T9868] CPU: 1 UID: 0 PID: 9868 Comm: syz.0.1411 Not tainted syzkaller #0 PREEMPT(full) [ 499.129691][ T9868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 499.129700][ T9868] Call Trace: [ 499.129708][ T9868] [ 499.129714][ T9868] dump_stack_lvl+0xe8/0x150 [ 499.129742][ T9868] should_fail_ex+0x412/0x560 [ 499.129770][ T9868] should_failslab+0xa8/0x100 [ 499.129788][ T9868] ? skb_clone+0x212/0x3a0 [ 499.129808][ T9868] kmem_cache_alloc_noprof+0x87/0x650 [ 499.129827][ T9868] ? dev_queue_xmit_nit+0x2d/0xad0 [ 499.129855][ T9868] skb_clone+0x212/0x3a0 [ 499.129873][ T9868] ? dev_queue_xmit_nit+0x27d/0xad0 [ 499.129894][ T9868] dev_queue_xmit_nit+0x29a/0xad0 [ 499.129913][ T9868] ? dev_queue_xmit_nit+0x2d/0xad0 [ 499.129943][ T9868] dev_hard_start_xmit+0x1c1/0x7f0 [ 499.129981][ T9868] __dev_queue_xmit+0x14ed/0x32b0 [ 499.130007][ T9868] ? __dev_queue_xmit+0x2a7/0x32b0 [ 499.130041][ T9868] ? __lock_acquire+0x6b5/0x2cf0 [ 499.130065][ T9868] ? __pfx___dev_queue_xmit+0x10/0x10 [ 499.130088][ T9868] ? nf_hook+0xa1/0x3a0 [ 499.130104][ T9868] ? iptable_mangle_hook+0x189/0x4c0 [ 499.130137][ T9868] ? ip_output+0x29f/0x450 [ 499.130156][ T9868] ? ip_output+0x29f/0x450 [ 499.130180][ T9868] ? ip_finish_output2+0x951/0xff0 [ 499.130206][ T9868] ip_finish_output2+0xb52/0xff0 [ 499.130229][ T9868] ? ip_finish_output2+0x3d0/0xff0 [ 499.130262][ T9868] ip_output+0x29f/0x450 [ 499.130282][ T9868] ? ip_output+0x5b/0x450 [ 499.130300][ T9868] ? __ip_queue_xmit+0x5c/0x1be0 [ 499.130318][ T9868] __ip_queue_xmit+0x1198/0x1be0 [ 499.130339][ T9868] ? tcp_options_write+0x607/0x12c0 [ 499.130356][ T9868] ? csum_tcpudp_nofold+0x1f/0x60 [ 499.130376][ T9868] ? __ip_queue_xmit+0x5c/0x1be0 [ 499.130398][ T9868] ? __pfx_ip_queue_xmit+0x10/0x10 [ 499.130414][ T9868] __tcp_transmit_skb+0x272b/0x3d90 [ 499.130459][ T9868] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 499.130491][ T9868] ? tcp_small_queue_check+0x1c1/0x3b0 [ 499.130514][ T9868] tcp_write_xmit+0x16e8/0x6980 [ 499.130584][ T9868] __tcp_push_pending_frames+0x97/0x380 [ 499.130601][ T9868] ? tcp_push+0x41d/0x660 [ 499.130624][ T9868] tcp_sendmsg_locked+0x48bf/0x53d0 [ 499.130703][ T9868] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 499.130739][ T9868] ? __local_bh_enable_ip+0xd0/0x130 [ 499.130764][ T9868] tcp_sendmsg+0x2f/0x50 [ 499.130785][ T9868] sock_sendmsg_nosec+0x128/0x1d0 [ 499.130811][ T9868] ____sys_sendmsg+0x589/0x8c0 [ 499.130829][ T9868] ? __might_fault+0xaf/0x130 [ 499.130855][ T9868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.130884][ T9868] ? import_iovec+0x73/0xa0 [ 499.130907][ T9868] ___sys_sendmsg+0x2a5/0x360 [ 499.130924][ T9868] ? __lock_acquire+0x6b5/0x2cf0 [ 499.130950][ T9868] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.130975][ T9868] ? kstrtouint+0x6e/0xe0 [ 499.131024][ T9868] ? __fget_files+0x2a/0x420 [ 499.131043][ T9868] ? __fget_files+0x3a0/0x420 [ 499.131073][ T9868] __sys_sendmmsg+0x27c/0x4e0 [ 499.131099][ T9868] ? __pfx___sys_sendmmsg+0x10/0x10 [ 499.131115][ T9868] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 499.131164][ T9868] ? ksys_write+0x242/0x270 [ 499.131190][ T9868] ? __pfx_ksys_write+0x10/0x10 [ 499.131219][ T9868] __x64_sys_sendmmsg+0xa0/0xc0 [ 499.131246][ T9868] do_syscall_64+0xe2/0xf80 [ 499.131265][ T9868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.131280][ T9868] ? trace_irq_disable+0x37/0x100 [ 499.131295][ T9868] ? clear_bhb_loop+0x40/0x90 [ 499.131315][ T9868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.131331][ T9868] RIP: 0033:0x7fd82a59acb9 [ 499.131348][ T9868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.131360][ T9868] RSP: 002b:00007fd82b430028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 499.131378][ T9868] RAX: ffffffffffffffda RBX: 00007fd82a815fa0 RCX: 00007fd82a59acb9 [ 499.131389][ T9868] RDX: 0000000000000002 RSI: 0000200000002140 RDI: 0000000000000004 [ 499.131399][ T9868] RBP: 00007fd82b430090 R08: 0000000000000000 R09: 0000000000000000 [ 499.131408][ T9868] R10: 0000000000002090 R11: 0000000000000246 R12: 0000000000000001 [ 499.131417][ T9868] R13: 00007fd82a816038 R14: 00007fd82a815fa0 R15: 00007fffb977bc58 [ 499.131447][ T9868] [ 499.136072][ T9829] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 499.186946][ T50] Bluetooth: hci4: command tx timeout [ 499.410572][ T9829] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 499.615166][ T9874] tmpfs: Unknown parameter '' [ 499.644577][ T9829] usb 4-1: config 0 has no interface number 0 [ 499.652331][ T9829] usb 4-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 499.692837][ T9829] usb 4-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.713144][ T9829] usb 4-1: config 0 interface 110 has no altsetting 0 [ 499.732284][ T9829] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 499.743938][ T9829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.764220][ T9829] usb 4-1: Product: syz [ 499.774338][ T9829] usb 4-1: Manufacturer: syz [ 499.779206][ T9829] usb 4-1: SerialNumber: syz [ 499.811888][ T9893] batadv_slave_0: entered promiscuous mode [ 499.815638][ T9829] usb 4-1: config 0 descriptor?? [ 499.856850][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 499.877388][ T9893] batadv_slave_0: left promiscuous mode [ 500.017789][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 500.036392][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 500.048137][ T24] usb 1-1: config 0 has no interface number 0 [ 500.062152][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 500.084526][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.116816][ T24] usb 1-1: Product: syz [ 500.121117][ T24] usb 1-1: Manufacturer: syz [ 500.130440][ T24] usb 1-1: SerialNumber: syz [ 500.139213][ T24] usb 1-1: config 0 descriptor?? [ 500.150536][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 500.249337][ T9907] binder: 9906:9907 ioctl c0306201 0 returned -14 [ 500.331558][ T9908] binder: 9906:9908 ioctl c0306201 0 returned -14 [ 500.338527][ T9908] binder: 9906:9908 ioctl c0306201 2000000001c0 returned -14 [ 500.349600][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 500.363016][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 500.754545][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 500.754964][ T10] usb 1-1: USB disconnect, device number 2 [ 500.792962][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 500.811909][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 500.838284][ T10] quatech2 1-1:0.51: device disconnected [ 501.051615][ T9916] FAULT_INJECTION: forcing a failure. [ 501.051615][ T9916] name failslab, interval 1, probability 0, space 0, times 0 [ 501.064443][ T9916] CPU: 0 UID: 0 PID: 9916 Comm: syz.2.1424 Not tainted syzkaller #0 PREEMPT(full) [ 501.064457][ T9916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 501.064464][ T9916] Call Trace: [ 501.064468][ T9916] [ 501.064473][ T9916] dump_stack_lvl+0xe8/0x150 [ 501.064490][ T9916] should_fail_ex+0x412/0x560 [ 501.064507][ T9916] should_failslab+0xa8/0x100 [ 501.064518][ T9916] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 501.064532][ T9916] ? dup_task_struct+0x57/0x9a0 [ 501.064547][ T9916] dup_task_struct+0x57/0x9a0 [ 501.064560][ T9916] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.064573][ T9916] copy_process+0x508/0x3cf0 [ 501.064599][ T9916] ? __pfx_copy_process+0x10/0x10 [ 501.064616][ T9916] ? mutex_init_lockep+0xf9/0x130 [ 501.064632][ T9916] vhost_task_create+0x1f9/0x380 [ 501.064642][ T9916] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 501.064657][ T9916] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 501.064671][ T9916] ? __pfx_vhost_task_create+0x10/0x10 [ 501.064685][ T9916] ? __pfx_vhost_task_fn+0x10/0x10 [ 501.064696][ T9916] ? __lock_acquire+0x6b5/0x2cf0 [ 501.064710][ T9916] ? kasan_save_track+0x4f/0x80 [ 501.064722][ T9916] ? kasan_save_track+0x3e/0x80 [ 501.064734][ T9916] ? kasan_save_free_info+0x46/0x50 [ 501.064745][ T9916] ? __kasan_slab_free+0x5c/0x80 [ 501.064757][ T9916] ? kfree+0x1c1/0x610 [ 501.064769][ T9916] kvm_mmu_post_init_vm+0x14c/0x300 [ 501.064780][ T9916] kvm_arch_vcpu_ioctl_run+0x108/0x1dc0 [ 501.064798][ T9916] ? register_lock_class+0x31/0x2e0 [ 501.064809][ T9916] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 501.064820][ T9916] ? __lock_acquire+0x6b5/0x2cf0 [ 501.064833][ T9916] ? __mutex_lock+0x319/0x1300 [ 501.064849][ T9916] ? kasan_quarantine_put+0xbb/0x1f0 [ 501.064868][ T9916] ? do_raw_write_lock+0x11d/0x260 [ 501.064886][ T9916] kvm_vcpu_ioctl+0xa62/0xfd0 [ 501.064903][ T9916] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 501.064915][ T9916] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 501.064936][ T9916] ? __fget_files+0x2a/0x420 [ 501.064951][ T9916] ? __fget_files+0x2a/0x420 [ 501.064962][ T9916] ? __fget_files+0x3a0/0x420 [ 501.064973][ T9916] ? __fget_files+0x2a/0x420 [ 501.064985][ T9916] ? bpf_lsm_file_ioctl+0x9/0x20 [ 501.064998][ T9916] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 501.065012][ T9916] __se_sys_ioctl+0xfc/0x170 [ 501.065022][ T9916] do_syscall_64+0xe2/0xf80 [ 501.065034][ T9916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.065043][ T9916] ? trace_irq_disable+0x37/0x100 [ 501.065053][ T9916] ? clear_bhb_loop+0x40/0x90 [ 501.065064][ T9916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.065073][ T9916] RIP: 0033:0x7f17f619acb9 [ 501.065082][ T9916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.065090][ T9916] RSP: 002b:00007f17f70e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.065101][ T9916] RAX: ffffffffffffffda RBX: 00007f17f6415fa0 RCX: 00007f17f619acb9 [ 501.065108][ T9916] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 501.065113][ T9916] RBP: 00007f17f70e3090 R08: 0000000000000000 R09: 0000000000000000 [ 501.065119][ T9916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.065124][ T9916] R13: 00007f17f6416038 R14: 00007f17f6415fa0 R15: 00007ffe9b1bf628 [ 501.065141][ T9916] [ 501.410396][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.417776][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.542676][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 501.661610][ T9936] binder: 9935:9936 ioctl c0306201 0 returned -14 [ 501.719669][ T9939] binder: 9935:9939 ioctl c0306201 0 returned -14 [ 501.728489][ T9939] FAULT_INJECTION: forcing a failure. [ 501.728489][ T9939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.741878][ T9939] CPU: 0 UID: 0 PID: 9939 Comm: syz.0.1431 Not tainted syzkaller #0 PREEMPT(full) [ 501.741900][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 501.741910][ T9939] Call Trace: [ 501.741917][ T9939] [ 501.741924][ T9939] dump_stack_lvl+0xe8/0x150 [ 501.741948][ T9939] should_fail_ex+0x412/0x560 [ 501.741975][ T9939] _copy_to_user+0x31/0xb0 [ 501.741995][ T9939] binder_ioctl_write_read+0x99ec/0xa4c0 [ 501.742013][ T9939] ? is_bpf_text_address+0x26/0x2b0 [ 501.742032][ T9939] ? is_bpf_text_address+0x292/0x2b0 [ 501.742045][ T9939] ? is_bpf_text_address+0x26/0x2b0 [ 501.742061][ T9939] ? kernel_text_address+0xa5/0xe0 [ 501.742075][ T9939] ? __kernel_text_address+0xd/0x30 [ 501.742087][ T9939] ? unwind_get_return_address+0x4d/0x90 [ 501.742112][ T9939] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 501.742125][ T9939] ? arch_stack_walk+0xfb/0x150 [ 501.742149][ T9939] ? stack_trace_save+0xa9/0x100 [ 501.742162][ T9939] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 501.742172][ T9939] ? kasan_save_free_info+0x46/0x50 [ 501.742189][ T9939] ? stack_depot_save_flags+0x33/0x810 [ 501.742211][ T9939] ? __lock_acquire+0x6b5/0x2cf0 [ 501.742237][ T9939] ? binder_debug+0x155/0x1d0 [ 501.742251][ T9939] ? __pfx_binder_debug+0x10/0x10 [ 501.742261][ T9939] ? do_raw_spin_lock+0x12b/0x2f0 [ 501.742284][ T9939] ? _raw_spin_unlock+0x28/0x50 [ 501.742297][ T9939] ? binder_get_thread+0x177/0x6d0 [ 501.742311][ T9939] binder_ioctl+0x41d/0x1aa0 [ 501.742325][ T9939] ? tomoyo_path_number_perm+0x219/0x630 [ 501.742347][ T9939] ? do_vfs_ioctl+0x1166/0x1530 [ 501.742358][ T9939] ? __pfx_binder_ioctl+0x10/0x10 [ 501.742370][ T9939] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 501.742389][ T9939] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 501.742417][ T9939] ? __fget_files+0x2a/0x420 [ 501.742433][ T9939] ? __fget_files+0x2a/0x420 [ 501.742447][ T9939] ? __fget_files+0x3a0/0x420 [ 501.742460][ T9939] ? __fget_files+0x2a/0x420 [ 501.742476][ T9939] ? bpf_lsm_file_ioctl+0x9/0x20 [ 501.742494][ T9939] ? __pfx_binder_ioctl+0x10/0x10 [ 501.742505][ T9939] __se_sys_ioctl+0xfc/0x170 [ 501.742518][ T9939] do_syscall_64+0xe2/0xf80 [ 501.742532][ T9939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.742544][ T9939] ? trace_irq_disable+0x37/0x100 [ 501.742555][ T9939] ? clear_bhb_loop+0x40/0x90 [ 501.742570][ T9939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.742581][ T9939] RIP: 0033:0x7fd82a59acb9 [ 501.742593][ T9939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.742603][ T9939] RSP: 002b:00007fd82b40f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.742617][ T9939] RAX: ffffffffffffffda RBX: 00007fd82a816090 RCX: 00007fd82a59acb9 [ 501.742628][ T9939] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 501.742637][ T9939] RBP: 00007fd82b40f090 R08: 0000000000000000 R09: 0000000000000000 [ 501.742646][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.742652][ T9939] R13: 00007fd82a816128 R14: 00007fd82a816090 R15: 00007fffb977bc58 [ 501.742672][ T9939] [ 501.742681][ T9939] binder: 9935:9939 ioctl c0306201 2000000001c0 returned -14 [ 501.860125][ T24] usb 4-1: USB disconnect, device number 43 [ 502.056787][ T5931] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 502.155495][ T9948] netlink: 'syz.3.1436': attribute type 46 has an invalid length. [ 502.218263][ T5931] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 502.227092][ T5931] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.237299][ T5931] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 502.246254][ T5931] usb 3-1: config 1 has no interface number 1 [ 502.254712][ T5931] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 502.267903][ T5931] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 502.284429][ T5931] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.294292][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.316812][ T5931] usb 3-1: Product: syz [ 502.321015][ T5931] usb 3-1: Manufacturer: syz [ 502.325612][ T5931] usb 3-1: SerialNumber: syz [ 502.410370][ T24] hid-generic 0005:0006:5508.0008: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 502.497622][ T9958] fido_id[9958]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 502.508079][ T24] hid-generic 0005:0006:5508.0009: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 502.567628][ T5931] usb 3-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 502.575111][ T5931] usb 3-1: MIDIStreaming interface descriptor not found [ 502.595635][ T24] hid-generic 0005:0006:5508.000A: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 502.636559][ T24] hid-generic 0005:0006:5508.000B: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 502.676140][ T24] hid-generic 0005:0006:5508.000C: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 502.710838][ T24] hid-generic 0005:0006:5508.000D: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 502.741590][ T24] hid-generic 0005:0006:5508.000E: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 502.793802][ T9962] fido_id[9962]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 502.833449][ T24] hid-generic 0005:0006:5508.000F: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 502.882178][ T5931] usb 3-1: USB disconnect, device number 43 [ 502.981130][ T9974] tmpfs: Unknown parameter '' [ 503.053983][ T9976] fido_id[9976]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 503.222479][ T9977] fido_id[9977]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 503.237989][ T9917] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 503.355228][ T9983] fido_id[9983]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 503.396764][ T9917] usb 2-1: Using ep0 maxpacket: 32 [ 503.407563][ T9917] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 503.421672][ T9988] fuse: Bad value for 'group_id' [ 503.428021][ T9988] fuse: Bad value for 'group_id' [ 503.449702][ T9917] usb 2-1: config 0 has no interface number 0 [ 503.459153][ T9917] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 503.482982][ T9917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.494656][ T9917] usb 2-1: Product: syz [ 503.499329][ T9917] usb 2-1: Manufacturer: syz [ 503.503944][ T9917] usb 2-1: SerialNumber: syz [ 503.526069][ T9991] virtiofs: Unknown parameter 'always 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 18 nlmon0 : 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 20 batadv0 : 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 21 vxcan0 : 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 22 vxcan1 : 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 23 veth0 : 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 24 veth1 : 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 25 wg0 : 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 26 wg1 : 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 27 wg2 : 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 28 veth0_to_bridge: 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 29 bridge_slave_0: 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 30 veth1_to_bridge: 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 31 bridge_slave_1: 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 32 veth0_to_bond: 1 V3 [ 503.526069][ T9991] 010000E0 1 0:00000000 0 [ 503.526069][ T9991] 33 bond_slave_0: 1 V3 [ 503.526069][ T9991] 010000E0 1 0:0 [ 503.534503][ T9989] fido_id[9989]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 503.548486][ T9917] usb 2-1: config 0 descriptor?? [ 503.770351][ T9917] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 503.826231][ T9996] fido_id[9996]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 503.846760][ T9829] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 503.978018][ T9917] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 503.995288][ T9917] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 504.006752][ T9829] usb 3-1: Using ep0 maxpacket: 16 [ 504.033761][ T9829] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 504.056057][ T9829] usb 3-1: config 4 has no interface number 0 [ 504.065492][ T9829] usb 3-1: config 4 interface 51 has no altsetting 0 [ 504.087867][ T9829] usb 3-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b [ 504.097912][ T9829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.106011][ T9829] usb 3-1: Product: syz [ 504.110435][ T9829] usb 3-1: Manufacturer: syz [ 504.115110][ T9829] usb 3-1: SerialNumber: syz [ 504.137713][ T9829] upd78f0730 3-1:4.51: upd78f0730 converter detected [ 504.167278][ T9829] usb 3-1: upd78f0730 converter now attached to ttyUSB2 [ 504.355347][ T9829] usb 3-1: USB disconnect, device number 44 [ 504.373754][ T9829] upd78f0730 ttyUSB2: upd78f0730 converter now disconnected from ttyUSB2 [ 504.405878][ T9829] upd78f0730 3-1:4.51: device disconnected [ 504.427934][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 504.433708][ T24] usb 2-1: USB disconnect, device number 30 [ 504.460674][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 504.470796][T10003] FAULT_INJECTION: forcing a failure. [ 504.470796][T10003] name failslab, interval 1, probability 0, space 0, times 0 [ 504.498657][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 504.504309][T10003] CPU: 0 UID: 0 PID: 10003 Comm: syz.0.1448 Not tainted syzkaller #0 PREEMPT(full) [ 504.504332][T10003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 504.504342][T10003] Call Trace: [ 504.504349][T10003] [ 504.504356][T10003] dump_stack_lvl+0xe8/0x150 [ 504.504384][T10003] should_fail_ex+0x412/0x560 [ 504.504410][T10003] should_failslab+0xa8/0x100 [ 504.504428][T10003] __kmalloc_noprof+0xe8/0x760 [ 504.504449][T10003] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 504.504472][T10003] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 504.504496][T10003] genl_family_rcv_msg_doit+0xd9/0x330 [ 504.504518][T10003] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 504.504542][T10003] ? apparmor_capable+0x137/0x1a0 [ 504.504564][T10003] ? bpf_lsm_capable+0x9/0x20 [ 504.504578][T10003] ? security_capable+0x7e/0x2c0 [ 504.504605][T10003] genl_rcv_msg+0x61c/0x7a0 [ 504.504628][T10003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.504643][T10003] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 504.504661][T10003] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 504.504676][T10003] ? __pfx_nl80211_post_doit+0x10/0x10 [ 504.504696][T10003] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 504.504712][T10003] ? do_syscall_64+0xe2/0xf80 [ 504.504729][T10003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.504753][T10003] netlink_rcv_skb+0x232/0x4b0 [ 504.504775][T10003] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.504793][T10003] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.504809][T10003] ? genl_rcv+0x19/0x40 [ 504.504839][T10003] ? down_read+0x272/0x2e0 [ 504.504858][T10003] ? genl_rcv+0xd/0x40 [ 504.504875][T10003] genl_rcv+0x28/0x40 [ 504.504889][T10003] netlink_unicast+0x80f/0x9b0 [ 504.504922][T10003] ? __pfx_netlink_unicast+0x10/0x10 [ 504.504943][T10003] ? netlink_sendmsg+0x650/0xb40 [ 504.504961][T10003] ? skb_put+0x11b/0x210 [ 504.504981][T10003] netlink_sendmsg+0x813/0xb40 [ 504.505009][T10003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.505030][T10003] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 504.505057][T10003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.505076][T10003] sock_sendmsg_nosec+0x18f/0x1d0 [ 504.505100][T10003] ____sys_sendmsg+0x589/0x8c0 [ 504.505117][T10003] ? __might_fault+0xaf/0x130 [ 504.505141][T10003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.505167][T10003] ? import_iovec+0x73/0xa0 [ 504.505187][T10003] ___sys_sendmsg+0x2a5/0x360 [ 504.505204][T10003] ? __lock_acquire+0x6b5/0x2cf0 [ 504.505227][T10003] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.505277][T10003] ? __fget_files+0x2a/0x420 [ 504.505295][T10003] ? __fget_files+0x3a0/0x420 [ 504.505321][T10003] __x64_sys_sendmsg+0x1bd/0x2a0 [ 504.505342][T10003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.505369][T10003] ? __pfx_ksys_write+0x10/0x10 [ 504.505401][T10003] do_syscall_64+0xe2/0xf80 [ 504.505417][T10003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.505432][T10003] ? trace_irq_disable+0x37/0x100 [ 504.505447][T10003] ? clear_bhb_loop+0x40/0x90 [ 504.505465][T10003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.505480][T10003] RIP: 0033:0x7fd82a59acb9 [ 504.505495][T10003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.505508][T10003] RSP: 002b:00007fd82b430028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.505524][T10003] RAX: ffffffffffffffda RBX: 00007fd82a815fa0 RCX: 00007fd82a59acb9 [ 504.505535][T10003] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 504.505544][T10003] RBP: 00007fd82b430090 R08: 0000000000000000 R09: 0000000000000000 [ 504.505554][T10003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.505562][T10003] R13: 00007fd82a816038 R14: 00007fd82a815fa0 R15: 00007fffb977bc58 [ 504.505589][T10003] [ 504.721401][T10007] FAULT_INJECTION: forcing a failure. [ 504.721401][T10007] name failslab, interval 1, probability 0, space 0, times 0 [ 504.721466][T10007] CPU: 0 UID: 0 PID: 10007 Comm: syz.0.1450 Not tainted syzkaller #0 PREEMPT(full) [ 504.721483][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 504.721492][T10007] Call Trace: [ 504.721499][T10007] [ 504.721505][T10007] dump_stack_lvl+0xe8/0x150 [ 504.721531][T10007] should_fail_ex+0x412/0x560 [ 504.721558][T10007] should_failslab+0xa8/0x100 [ 504.721576][T10007] __kmalloc_cache_noprof+0x88/0x660 [ 504.721596][T10007] ? __pfx___mutex_lock+0x10/0x10 [ 504.721615][T10007] ? mac802154_llsec_seclevel_add+0x331/0x450 [ 504.721636][T10007] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 504.721662][T10007] mac802154_llsec_seclevel_add+0x331/0x450 [ 504.721696][T10007] mac802154_add_seclevel+0x75/0xb0 [ 504.721717][T10007] llsec_add_seclevel+0x30e/0x3e0 [ 504.721744][T10007] ? __pfx_llsec_add_seclevel+0x10/0x10 [ 504.721768][T10007] ? __nla_parse+0x40/0x60 [ 504.721788][T10007] ? __pfx_llsec_add_seclevel+0x10/0x10 [ 504.721809][T10007] ieee802154_nl_llsec_change+0x85/0x120 [ 504.721832][T10007] genl_family_rcv_msg_doit+0x22a/0x330 [ 504.721856][T10007] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 504.721884][T10007] ? bpf_lsm_capable+0x9/0x20 [ 504.721907][T10007] ? security_capable+0x7e/0x2c0 [ 504.721936][T10007] genl_rcv_msg+0x61c/0x7a0 [ 504.721959][T10007] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.721975][T10007] ? __pfx_ieee802154_llsec_add_seclevel+0x10/0x10 [ 504.722009][T10007] netlink_rcv_skb+0x232/0x4b0 [ 504.722031][T10007] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.722049][T10007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.722067][T10007] ? genl_rcv+0x19/0x40 [ 504.722097][T10007] ? down_read+0x272/0x2e0 [ 504.722115][T10007] ? genl_rcv+0xd/0x40 [ 504.722133][T10007] genl_rcv+0x28/0x40 [ 504.722146][T10007] netlink_unicast+0x80f/0x9b0 [ 504.722173][T10007] ? __pfx_netlink_unicast+0x10/0x10 [ 504.722193][T10007] ? netlink_sendmsg+0x650/0xb40 [ 504.722211][T10007] ? skb_put+0x11b/0x210 [ 504.722232][T10007] netlink_sendmsg+0x813/0xb40 [ 504.722261][T10007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.722283][T10007] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 504.722308][T10007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.722327][T10007] sock_sendmsg_nosec+0x18f/0x1d0 [ 504.722351][T10007] ____sys_sendmsg+0x589/0x8c0 [ 504.722369][T10007] ? __might_fault+0xaf/0x130 [ 504.722393][T10007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.722419][T10007] ? import_iovec+0x73/0xa0 [ 504.722440][T10007] ___sys_sendmsg+0x2a5/0x360 [ 504.722457][T10007] ? __lock_acquire+0x6b5/0x2cf0 [ 504.722481][T10007] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.722531][T10007] ? __fget_files+0x2a/0x420 [ 504.722550][T10007] ? __fget_files+0x3a0/0x420 [ 504.722577][T10007] __x64_sys_sendmsg+0x1bd/0x2a0 [ 504.722599][T10007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.722626][T10007] ? __pfx_ksys_write+0x10/0x10 [ 504.722658][T10007] do_syscall_64+0xe2/0xf80 [ 504.722677][T10007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.722691][T10007] ? trace_irq_disable+0x37/0x100 [ 504.722705][T10007] ? clear_bhb_loop+0x40/0x90 [ 504.722723][T10007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.722738][T10007] RIP: 0033:0x7fd82a59acb9 [ 504.722754][T10007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.722766][T10007] RSP: 002b:00007fd82b430028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.722783][T10007] RAX: ffffffffffffffda RBX: 00007fd82a815fa0 RCX: 00007fd82a59acb9 [ 504.722794][T10007] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 504.722804][T10007] RBP: 00007fd82b430090 R08: 0000000000000000 R09: 0000000000000000 [ 504.722812][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.722821][T10007] R13: 00007fd82a816038 R14: 00007fd82a815fa0 R15: 00007fffb977bc58 [ 504.722848][T10007] [ 505.231140][T10021] fuse: Bad value for 'group_id' [ 505.240695][ T24] quatech2 2-1:0.51: device disconnected [ 505.306858][T10021] fuse: Bad value for 'group_id' [ 505.457921][T10030] vxcan1: entered allmulticast mode [ 505.566736][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 505.641581][T10036] FAULT_INJECTION: forcing a failure. [ 505.641581][T10036] name failslab, interval 1, probability 0, space 0, times 0 [ 505.654260][T10036] CPU: 0 UID: 0 PID: 10036 Comm: syz.3.1460 Not tainted syzkaller #0 PREEMPT(full) [ 505.654281][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 505.654290][T10036] Call Trace: [ 505.654297][T10036] [ 505.654305][T10036] dump_stack_lvl+0xe8/0x150 [ 505.654327][T10036] should_fail_ex+0x412/0x560 [ 505.654344][T10036] should_failslab+0xa8/0x100 [ 505.654356][T10036] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 505.654370][T10036] ? __get_vm_area_node+0x13f/0x300 [ 505.654392][T10036] __get_vm_area_node+0x13f/0x300 [ 505.654415][T10036] __vmalloc_node_range_noprof+0x372/0x1730 [ 505.654437][T10036] ? copy_process+0x508/0x3cf0 [ 505.654459][T10036] ? percpu_ref_get_many+0x19/0x140 [ 505.654474][T10036] ? percpu_ref_get_many+0x19/0x140 [ 505.654486][T10036] ? __memcg_slab_post_alloc_hook+0x1ff/0x820 [ 505.654501][T10036] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 505.654517][T10036] ? memcpy_and_pad+0x48/0x80 [ 505.654531][T10036] __vmalloc_node_noprof+0xc2/0x100 [ 505.654543][T10036] ? copy_process+0x508/0x3cf0 [ 505.654554][T10036] ? copy_process+0x508/0x3cf0 [ 505.654567][T10036] dup_task_struct+0x228/0x9a0 [ 505.654580][T10036] ? _raw_spin_unlock_irq+0x23/0x50 [ 505.654593][T10036] copy_process+0x508/0x3cf0 [ 505.654618][T10036] ? __pfx_copy_process+0x10/0x10 [ 505.654635][T10036] ? mutex_init_lockep+0xf9/0x130 [ 505.654651][T10036] vhost_task_create+0x1f9/0x380 [ 505.654661][T10036] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 505.654675][T10036] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 505.654689][T10036] ? __pfx_vhost_task_create+0x10/0x10 [ 505.654702][T10036] ? __pfx_vhost_task_fn+0x10/0x10 [ 505.654714][T10036] ? __lock_acquire+0x6b5/0x2cf0 [ 505.654727][T10036] ? kasan_save_track+0x4f/0x80 [ 505.654740][T10036] ? kasan_save_track+0x3e/0x80 [ 505.654751][T10036] ? kasan_save_free_info+0x46/0x50 [ 505.654762][T10036] ? __kasan_slab_free+0x5c/0x80 [ 505.654774][T10036] ? kfree+0x1c1/0x610 [ 505.654785][T10036] kvm_mmu_post_init_vm+0x14c/0x300 [ 505.654797][T10036] kvm_arch_vcpu_ioctl_run+0x108/0x1dc0 [ 505.654815][T10036] ? register_lock_class+0x31/0x2e0 [ 505.654827][T10036] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 505.654838][T10036] ? __lock_acquire+0x6b5/0x2cf0 [ 505.654851][T10036] ? __mutex_lock+0x319/0x1300 [ 505.654868][T10036] ? kasan_quarantine_put+0xbb/0x1f0 [ 505.654971][T10036] ? do_raw_write_lock+0x11d/0x260 [ 505.655008][T10036] kvm_vcpu_ioctl+0xa62/0xfd0 [ 505.655028][T10036] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 505.655043][T10036] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 505.655070][T10036] ? __fget_files+0x2a/0x420 [ 505.655084][T10036] ? __fget_files+0x2a/0x420 [ 505.655095][T10036] ? __fget_files+0x3a0/0x420 [ 505.655106][T10036] ? __fget_files+0x2a/0x420 [ 505.655119][T10036] ? bpf_lsm_file_ioctl+0x9/0x20 [ 505.655141][T10036] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 505.655155][T10036] __se_sys_ioctl+0xfc/0x170 [ 505.655166][T10036] do_syscall_64+0xe2/0xf80 [ 505.655179][T10036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.655189][T10036] ? clear_bhb_loop+0x40/0x90 [ 505.655200][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.655215][T10036] RIP: 0033:0x7f15d459acb9 [ 505.655227][T10036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.655234][T10036] RSP: 002b:00007f15d54e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.655246][T10036] RAX: ffffffffffffffda RBX: 00007f15d4815fa0 RCX: 00007f15d459acb9 [ 505.655252][T10036] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 505.655258][T10036] RBP: 00007f15d54e5090 R08: 0000000000000000 R09: 0000000000000000 [ 505.655264][T10036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.655270][T10036] R13: 00007f15d4816038 R14: 00007f15d4815fa0 R15: 00007fffc9a82998 [ 505.655285][T10036] [ 505.655298][T10036] syz.3.1460: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 505.776798][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 505.792426][T10036] ,cpuset= [ 505.976763][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 505.999812][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 506.081121][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.081324][T10036] /,mems_allowed=0-1 [ 506.097345][T10036] CPU: 0 UID: 0 PID: 10036 Comm: syz.3.1460 Not tainted syzkaller #0 PREEMPT(full) [ 506.097365][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 506.097374][T10036] Call Trace: [ 506.097382][T10036] [ 506.097389][T10036] dump_stack_lvl+0xe8/0x150 [ 506.097414][T10036] warn_alloc+0x249/0x340 [ 506.097442][T10036] ? __pfx_warn_alloc+0x10/0x10 [ 506.097465][T10036] ? __get_vm_area_node+0x13f/0x300 [ 506.097489][T10036] ? __get_vm_area_node+0x2b5/0x300 [ 506.097515][T10036] __vmalloc_node_range_noprof+0x397/0x1730 [ 506.097541][T10036] ? percpu_ref_get_many+0x19/0x140 [ 506.097566][T10036] ? percpu_ref_get_many+0x19/0x140 [ 506.097588][T10036] ? __memcg_slab_post_alloc_hook+0x1ff/0x820 [ 506.097613][T10036] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 506.097639][T10036] ? memcpy_and_pad+0x48/0x80 [ 506.097663][T10036] __vmalloc_node_noprof+0xc2/0x100 [ 506.097683][T10036] ? copy_process+0x508/0x3cf0 [ 506.097701][T10036] ? copy_process+0x508/0x3cf0 [ 506.097723][T10036] dup_task_struct+0x228/0x9a0 [ 506.097745][T10036] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.097767][T10036] copy_process+0x508/0x3cf0 [ 506.097812][T10036] ? __pfx_copy_process+0x10/0x10 [ 506.097840][T10036] ? mutex_init_lockep+0xf9/0x130 [ 506.097865][T10036] vhost_task_create+0x1f9/0x380 [ 506.097882][T10036] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 506.097903][T10036] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 506.097926][T10036] ? __pfx_vhost_task_create+0x10/0x10 [ 506.097950][T10036] ? __pfx_vhost_task_fn+0x10/0x10 [ 506.097971][T10036] ? __lock_acquire+0x6b5/0x2cf0 [ 506.097994][T10036] ? kasan_save_track+0x4f/0x80 [ 506.098013][T10036] ? kasan_save_track+0x3e/0x80 [ 506.098032][T10036] ? kasan_save_free_info+0x46/0x50 [ 506.098055][T10036] ? __kasan_slab_free+0x5c/0x80 [ 506.098074][T10036] ? kfree+0x1c1/0x610 [ 506.098095][T10036] kvm_mmu_post_init_vm+0x14c/0x300 [ 506.098114][T10036] kvm_arch_vcpu_ioctl_run+0x108/0x1dc0 [ 506.098145][T10036] ? register_lock_class+0x31/0x2e0 [ 506.098165][T10036] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 506.098184][T10036] ? __lock_acquire+0x6b5/0x2cf0 [ 506.098207][T10036] ? __mutex_lock+0x319/0x1300 [ 506.098233][T10036] ? kasan_quarantine_put+0xbb/0x1f0 [ 506.098266][T10036] ? do_raw_write_lock+0x11d/0x260 [ 506.098300][T10036] kvm_vcpu_ioctl+0xa62/0xfd0 [ 506.098327][T10036] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 506.098347][T10036] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 506.098391][T10036] ? __fget_files+0x2a/0x420 [ 506.098413][T10036] ? __fget_files+0x2a/0x420 [ 506.098431][T10036] ? __fget_files+0x3a0/0x420 [ 506.098449][T10036] ? __fget_files+0x2a/0x420 [ 506.098471][T10036] ? bpf_lsm_file_ioctl+0x9/0x20 [ 506.098492][T10036] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 506.098514][T10036] __se_sys_ioctl+0xfc/0x170 [ 506.098533][T10036] do_syscall_64+0xe2/0xf80 [ 506.098551][T10036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.098567][T10036] ? clear_bhb_loop+0x40/0x90 [ 506.098587][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.098602][T10036] RIP: 0033:0x7f15d459acb9 [ 506.098618][T10036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.098631][T10036] RSP: 002b:00007f15d54e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.098649][T10036] RAX: ffffffffffffffda RBX: 00007f15d4815fa0 RCX: 00007f15d459acb9 [ 506.098660][T10036] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 506.098670][T10036] RBP: 00007f15d54e5090 R08: 0000000000000000 R09: 0000000000000000 [ 506.098680][T10036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.098689][T10036] R13: 00007f15d4816038 R14: 00007f15d4815fa0 R15: 00007fffc9a82998 [ 506.098718][T10036] [ 506.098778][T10036] Mem-Info: [ 506.124282][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.125030][T10036] active_anon:5804 inactive_anon:0 isolated_anon:0 [ 506.125030][T10036] active_file:19439 inactive_file:40012 isolated_file:0 [ 506.125030][T10036] unevictable:768 dirty:526 writeback:0 [ 506.125030][T10036] slab_reclaimable:11385 slab_unreclaimable:93256 [ 506.125030][T10036] mapped:25688 shmem:1359 pagetables:1160 [ 506.125030][T10036] sec_pagetables:0 bounce:0 [ 506.125030][T10036] kernel_misc_reclaimable:0 [ 506.125030][T10036] free:1323927 free_pcp:9422 free_cma:0 [ 506.156090][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 506.162490][T10036] Node 0 active_anon:23216kB inactive_anon:0kB active_file:77756kB inactive_file:159844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102752kB dirty:2100kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12200kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 506.184140][T10044] tmpfs: Unknown parameter '' [ 506.200502][T10036] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 506.204293][ T24] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 506.210095][T10036] Node 0 [ 506.214477][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.220475][T10036] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.220694][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 16 [ 506.252159][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 255, changing to 11 [ 506.257894][ T24] usb 2-1: config 0 descriptor?? [ 506.271448][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 59391, setting to 1024 [ 506.278716][T10036] lowmem_reserve[]: [ 506.284204][ T9] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 506.286285][T10036] 0 [ 506.292505][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.305912][T10036] 2483 [ 506.318274][ T9] usb 3-1: Product: syz [ 506.324206][T10036] 2485 [ 506.345585][ T9] usb 3-1: Manufacturer: syz [ 506.349696][T10036] 2485 [ 506.354038][ T9] usb 3-1: SerialNumber: syz [ 506.359405][T10036] 2485 [ 506.366063][ T9] usb 3-1: config 0 descriptor?? [ 506.377150][T10036] [ 506.379862][T10019] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 506.382646][T10036] Node 0 [ 506.390798][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 506.395228][T10036] DMA32 free:1333632kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23316kB inactive_anon:0kB active_file:77756kB inactive_file:159844kB unevictable:1536kB writepending:2100kB zspages:0kB present:3129332kB managed:2543152kB mlocked:0kB bounce:0kB free_pcp:38300kB local_pcp:19652kB free_cma:0kB [ 506.401069][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 506.404495][T10036] lowmem_reserve[]: [ 506.426574][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 506.436399][T10036] 0 [ 506.643735][ T9] usb 3-1: USB disconnect, device number 45 [ 506.690080][T10036] 0 1 1 1 [ 506.837805][ T9829] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 506.840909][T10036] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.879421][T10036] lowmem_reserve[]: 0 0 0 0 0 [ 506.879531][T10029] random: crng reseeded on system resumption [ 506.884183][T10036] Node 1 Normal free:3946204kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 506.923635][T10036] lowmem_reserve[]: 0 0 0 0 0 [ 506.928419][T10036] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 506.941118][T10036] Node 0 DMA32: 548*4kB (UM) 2030*8kB (UME) 486*16kB (ME) 448*32kB (UME) 316*64kB (UME) 213*128kB (UME) 148*256kB (UME) 77*512kB (UME) 29*1024kB (UME) 17*2048kB (UME) 269*4096kB (M) = 1331680kB [ 506.961240][T10036] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 506.974706][T10036] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 12*16kB (UME) 8*32kB (UM) 10*64kB (UME) 5*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 960*4096kB (M) = 3946204kB [ 506.986594][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 506.992568][T10036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.015181][T10036] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 507.025983][T10036] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 507.037684][ T9829] usb 1-1: Using ep0 maxpacket: 32 [ 507.046343][T10036] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 507.047034][ T9829] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 507.056243][T10036] 60811 total pagecache pages [ 507.069409][T10036] 0 pages in swap cache [ 507.073691][T10036] Free swap = 124996kB [ 507.082388][ T24] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 507.084171][T10036] Total swap = 124996kB [ 507.092047][ T9829] usb 1-1: config 0 has no interface number 0 [ 507.095637][T10036] 2097051 pages RAM [ 507.101234][ T24] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 507.105298][T10036] 0 pages HighMem/MovableOnly [ 507.119901][ T9829] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 507.125449][T10036] 429173 pages reserved [ 507.130034][ T9829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.133973][T10036] 0 pages cma reserved [ 507.142389][ T9829] usb 1-1: Product: syz [ 507.156442][ T9829] usb 1-1: Manufacturer: syz [ 507.161372][ T9829] usb 1-1: SerialNumber: syz [ 507.168955][ T9829] usb 1-1: config 0 descriptor?? [ 507.176229][ T9829] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 507.261101][T10047] fuse: Bad value for 'group_id' [ 507.269740][T10047] fuse: Bad value for 'group_id' [ 507.364921][ T796] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 507.377027][ T5988] usb 2-1: USB disconnect, device number 31 [ 507.386537][ T796] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 507.411711][ T5988] ------------[ cut here ]------------ [ 507.417205][ T5988] workqueue: work disable count underflowed [ 507.423110][ T5988] WARNING: kernel/workqueue.c:4413 at enable_work+0x1b3/0x220, CPU#1: kworker/1:7/5988 [ 507.432753][ T5988] Modules linked in: [ 507.436810][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 507.446164][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 507.456206][ T5988] Workqueue: usb_hub_wq hub_event [ 507.461227][ T5988] RIP: 0010:enable_work+0x1b3/0x220 [ 507.466419][ T5988] Code: 83 8d 36 00 4d 85 f6 75 48 e8 79 8d 36 00 eb 47 e8 72 8d 36 00 90 0f 0b 90 e9 d0 fe ff ff e8 64 8d 36 00 48 8d 3d 2d 2c 88 0e <67> 48 0f b9 3a e9 e6 fe ff ff e8 4e 8d 36 00 90 0f 0b 90 e9 1a ff [ 507.486020][ T5988] RSP: 0018:ffffc900051571a0 EFLAGS: 00010083 [ 507.492093][ T5988] RAX: ffffffff818c953c RBX: 0000000000000000 RCX: 0000000000100000 [ 507.500057][ T5988] RDX: ffffc90016b84000 RSI: 0000000000007eb9 RDI: ffffffff9014c170 [ 507.508012][ T5988] RBP: 0000000000000000 R08: ffff88807a6f273f R09: 1ffff1100f4de4e7 [ 507.515975][ T5988] R10: dffffc0000000000 R11: ffffed100f4de4e8 R12: 1ffff1100f4de4e7 [ 507.523938][ T5988] R13: 001fffffffc00001 R14: ffff88807a6f2738 R15: dffffc0000000000 [ 507.531909][ T5988] FS: 0000000000000000(0000) GS:ffff8881253a1000(0000) knlGS:0000000000000000 [ 507.540827][ T5988] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 507.547396][ T5988] CR2: 000000110c3bbb7f CR3: 00000000768aa000 CR4: 00000000003526f0 [ 507.555431][ T5988] Call Trace: [ 507.558693][ T5988] [ 507.561616][ T5988] __cancel_work_sync+0xf7/0x110 [ 507.566549][ T5988] thermal_zone_device_unregister+0x23e/0x3f0 [ 507.572616][ T5988] power_supply_unregister+0xf9/0x140 [ 507.577980][ T5988] ? __pfx_shield_remove+0x10/0x10 [ 507.583079][ T5988] shield_remove+0x72/0x120 [ 507.587572][ T5988] hid_device_remove+0x228/0x370 [ 507.592498][ T5988] ? __pfx_hid_device_remove+0x10/0x10 [ 507.597943][ T5988] device_release_driver_internal+0x46f/0x860 [ 507.604008][ T5988] bus_remove_device+0x34d/0x440 [ 507.608946][ T5988] device_del+0x527/0x8f0 [ 507.613272][ T5988] ? __pfx_device_del+0x10/0x10 [ 507.618109][ T5988] hid_destroy_device+0x6b/0x1b0 [ 507.623061][ T5988] usbhid_disconnect+0x9f/0xc0 [ 507.627827][ T5988] usb_unbind_interface+0x26e/0x910 [ 507.633023][ T5988] ? __pfx_usb_unbind_interface+0x10/0x10 [ 507.638733][ T5988] device_release_driver_internal+0x4d9/0x860 [ 507.644791][ T5988] bus_remove_device+0x34d/0x440 [ 507.649738][ T5988] device_del+0x527/0x8f0 [ 507.654059][ T5988] ? __pfx_device_del+0x10/0x10 [ 507.658895][ T5988] ? kobject_put+0x51d/0x560 [ 507.663480][ T5988] usb_disable_device+0x3d4/0x8d0 [ 507.668495][ T5988] usb_disconnect+0x32f/0x990 [ 507.673162][ T5988] hub_event+0x1cc9/0x4f30 [ 507.677602][ T5988] ? __pfx_hub_event+0x10/0x10 [ 507.682351][ T5988] ? process_one_work+0x87c/0x15a0 [ 507.687469][ T5988] ? process_one_work+0x87c/0x15a0 [ 507.692576][ T5988] process_one_work+0x949/0x15a0 [ 507.697514][ T5988] ? __pfx_process_one_work+0x10/0x10 [ 507.702872][ T5988] ? do_raw_spin_lock+0x12b/0x2f0 [ 507.707886][ T5988] ? assign_work+0x3d5/0x5e0 [ 507.712472][ T5988] worker_thread+0x9af/0xee0 [ 507.717082][ T5988] kthread+0x388/0x470 [ 507.721142][ T5988] ? __pfx_worker_thread+0x10/0x10 [ 507.726242][ T5988] ? __pfx_kthread+0x10/0x10 [ 507.730822][ T5988] ret_from_fork+0x51b/0xa40 [ 507.735406][ T5988] ? __pfx_ret_from_fork+0x10/0x10 [ 507.740513][ T5988] ? __switch_to+0xc7d/0x1400 [ 507.745182][ T5988] ? __pfx_kthread+0x10/0x10 [ 507.749758][ T5988] ret_from_fork_asm+0x1a/0x30 [ 507.754524][ T5988] [ 507.757549][ T5988] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 507.764824][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 507.774180][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 507.784225][ T5988] Workqueue: usb_hub_wq hub_event [ 507.789255][ T5988] Call Trace: [ 507.792525][ T5988] [ 507.795443][ T5988] vpanic+0x1e0/0x670 [ 507.799420][ T5988] panic+0xc5/0xd0 [ 507.803135][ T5988] ? __pfx_panic+0x10/0x10 [ 507.807547][ T5988] ? ret_from_fork_asm+0x1a/0x30 [ 507.812475][ T5988] __warn+0x315/0x4a0 [ 507.816441][ T5988] ? enable_work+0x1b3/0x220 [ 507.821030][ T5988] ? enable_work+0x1b3/0x220 [ 507.825619][ T5988] __report_bug+0x29a/0x540 [ 507.830117][ T5988] ? enable_work+0x1b3/0x220 [ 507.834714][ T5988] ? __pfx___report_bug+0x10/0x10 [ 507.839735][ T5988] ? __flush_work+0xa26/0xc50 [ 507.844404][ T5988] ? __flush_work+0x100/0xc50 [ 507.849074][ T5988] report_bug_entry+0x19a/0x290 [ 507.853914][ T5988] ? enable_work+0x1b3/0x220 [ 507.858841][ T5988] ? enable_work+0x1b8/0x220 [ 507.863417][ T5988] handle_bug+0xca/0x200 [ 507.867653][ T5988] exc_invalid_op+0x1a/0x50 [ 507.872149][ T5988] asm_exc_invalid_op+0x1a/0x20 [ 507.876983][ T5988] RIP: 0010:enable_work+0x1b3/0x220 [ 507.882171][ T5988] Code: 83 8d 36 00 4d 85 f6 75 48 e8 79 8d 36 00 eb 47 e8 72 8d 36 00 90 0f 0b 90 e9 d0 fe ff ff e8 64 8d 36 00 48 8d 3d 2d 2c 88 0e <67> 48 0f b9 3a e9 e6 fe ff ff e8 4e 8d 36 00 90 0f 0b 90 e9 1a ff [ 507.902196][ T5988] RSP: 0018:ffffc900051571a0 EFLAGS: 00010083 [ 507.908262][ T5988] RAX: ffffffff818c953c RBX: 0000000000000000 RCX: 0000000000100000 [ 507.916218][ T5988] RDX: ffffc90016b84000 RSI: 0000000000007eb9 RDI: ffffffff9014c170 [ 507.924625][ T5988] RBP: 0000000000000000 R08: ffff88807a6f273f R09: 1ffff1100f4de4e7 [ 507.932580][ T5988] R10: dffffc0000000000 R11: ffffed100f4de4e8 R12: 1ffff1100f4de4e7 [ 507.940545][ T5988] R13: 001fffffffc00001 R14: ffff88807a6f2738 R15: dffffc0000000000 [ 507.948513][ T5988] ? enable_work+0x1ac/0x220 [ 507.953112][ T5988] __cancel_work_sync+0xf7/0x110 [ 507.958041][ T5988] thermal_zone_device_unregister+0x23e/0x3f0 [ 507.964103][ T5988] power_supply_unregister+0xf9/0x140 [ 507.969467][ T5988] ? __pfx_shield_remove+0x10/0x10 [ 507.974582][ T5988] shield_remove+0x72/0x120 [ 507.979098][ T5988] hid_device_remove+0x228/0x370 [ 507.984311][ T5988] ? __pfx_hid_device_remove+0x10/0x10 [ 507.989778][ T5988] device_release_driver_internal+0x46f/0x860 [ 507.995954][ T5988] bus_remove_device+0x34d/0x440 [ 508.000897][ T5988] device_del+0x527/0x8f0 [ 508.005236][ T5988] ? __pfx_device_del+0x10/0x10 [ 508.010080][ T5988] hid_destroy_device+0x6b/0x1b0 [ 508.015014][ T5988] usbhid_disconnect+0x9f/0xc0 [ 508.019775][ T5988] usb_unbind_interface+0x26e/0x910 [ 508.024971][ T5988] ? __pfx_usb_unbind_interface+0x10/0x10 [ 508.030681][ T5988] device_release_driver_internal+0x4d9/0x860 [ 508.036750][ T5988] bus_remove_device+0x34d/0x440 [ 508.041708][ T5988] device_del+0x527/0x8f0 [ 508.046035][ T5988] ? __pfx_device_del+0x10/0x10 [ 508.050961][ T5988] ? kobject_put+0x51d/0x560 [ 508.055560][ T5988] usb_disable_device+0x3d4/0x8d0 [ 508.061010][ T5988] usb_disconnect+0x32f/0x990 [ 508.065702][ T5988] hub_event+0x1cc9/0x4f30 [ 508.070141][ T5988] ? __pfx_hub_event+0x10/0x10 [ 508.074889][ T5988] ? process_one_work+0x87c/0x15a0 [ 508.079998][ T5988] ? process_one_work+0x87c/0x15a0 [ 508.085101][ T5988] process_one_work+0x949/0x15a0 [ 508.090043][ T5988] ? __pfx_process_one_work+0x10/0x10 [ 508.095397][ T5988] ? do_raw_spin_lock+0x12b/0x2f0 [ 508.100418][ T5988] ? assign_work+0x3d5/0x5e0 [ 508.104997][ T5988] worker_thread+0x9af/0xee0 [ 508.109595][ T5988] kthread+0x388/0x470 [ 508.113648][ T5988] ? __pfx_worker_thread+0x10/0x10 [ 508.118742][ T5988] ? __pfx_kthread+0x10/0x10 [ 508.123313][ T5988] ret_from_fork+0x51b/0xa40 [ 508.127891][ T5988] ? __pfx_ret_from_fork+0x10/0x10 [ 508.132986][ T5988] ? __switch_to+0xc7d/0x1400 [ 508.137652][ T5988] ? __pfx_kthread+0x10/0x10 [ 508.142233][ T5988] ret_from_fork_asm+0x1a/0x30 [ 508.146996][ T5988] [ 508.150347][ T5988] Kernel Offset: disabled [ 508.154654][ T5988] Rebooting in 86400 seconds..