last executing test programs: 9.061398077s ago: executing program 2 (id=559): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0002}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.128493548s ago: executing program 1 (id=564): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, 0x15, 0x1, 0x70bd28, 0x25dfdbfb, {0x23}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000010) 7.923285973s ago: executing program 3 (id=565): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.786948747s ago: executing program 2 (id=566): socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r0], 0x38}}, 0x0) syz_usb_connect$uac1(0x2, 0x79, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xdba, 0x5000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x9, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xf7, 0xd, {0x7, 0x25, 0x1, 0xc, 0xc, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x9, 0x8, {0x7, 0x25, 0x1, 0x4, 0x6, 0x6}}}}}}}}]}}, 0x0) 7.708890121s ago: executing program 1 (id=567): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x8080000, 0x18000, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0x30000, 0x1c000, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x2ec, &(0x7f0000001080)={0x0, 0x4009880, 0x100, 0x2, 0x217}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x12}) io_uring_enter(r4, 0x742f, 0x77ae, 0x1, 0x0, 0x0) read$ptp(r1, &(0x7f00000000c0)=""/23, 0x17) 7.609226378s ago: executing program 3 (id=569): lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x361, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x81, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x3, "c2091efc95cdf07b310f9d3d44d4cdd6af62cbdecfa63417b382d4a7d1dc54218e3b977b765090c6d21c652283211f82398b0fb71053f6f70449c8f73e83e333a8e3b6a6667d3915f681418e035b276d3880238ecb37a0b74c53170f019d708aed14cc060505329e4a38da9e53b3221d5b717dbfc15f266476993b963f19be1ef8b6d9ed1586e9f1889ce1908f6a70b7"}, 0x98, 0x800) msgget(0x1, 0x40) 6.879632272s ago: executing program 1 (id=575): syz_io_uring_setup(0xc6c, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x400006, 0x20e}, &(0x7f0000000240), &(0x7f0000000140), &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000020000000200000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0}, 0x38) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) nanosleep(&(0x7f00000000c0), 0x0) r1 = socket$inet6(0xa, 0x80000, 0xffff) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xce23, 0x5, @empty, 0x4}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f00000001c0), 0x0) 6.55846166s ago: executing program 1 (id=579): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.05998773s ago: executing program 1 (id=583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0xa8, r1, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x3}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000bf0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d6716f94407100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a3d25ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000f00)={{0x12, 0x1, 0x201, 0x10, 0x52, 0x76, 0x20, 0x10c4, 0x8856, 0xe453, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xe8, 0x6, 0x30, 0x40, "", [{{0x9, 0x4, 0xca, 0x81, 0x1, 0xb0, 0x83, 0xea, 0x7f, [], [{{0x9, 0x5, 0x3, 0x3, 0x10, 0x3, 0x0, 0x9}}]}}]}}]}}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r4, 0x3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.059209565s ago: executing program 2 (id=584): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000480)={0x5, 0xffffffffffffffff, 'id1\x00'}) openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x40201, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0'}, 0xb) 5.975391156s ago: executing program 3 (id=585): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net\x00') io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x8080000, 0x18000, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0x30000, 0x1c000, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x2ec, &(0x7f0000001080)={0x0, 0x4009880, 0x100, 0x2, 0x217}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x12}) io_uring_enter(r4, 0x742f, 0x77ae, 0x1, 0x0, 0x0) read$ptp(r1, &(0x7f00000000c0)=""/23, 0x17) 5.791769584s ago: executing program 2 (id=588): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c800) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x2088, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60cf, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 5.436793329s ago: executing program 2 (id=591): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) fsopen(&(0x7f0000000180)='omfs\x00', 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5.203025151s ago: executing program 3 (id=593): ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x64, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x73251c587dd540e9}}}}]}]}, 0x78}}, 0x0) semop(0x0, &(0x7f0000000140)=[{0x4, 0x6, 0x1800}, {0x4, 0x3, 0x3000}, {0x3, 0xfffb, 0x1000}], 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) semop(0x0, &(0x7f0000000180)=[{0x3, 0x5, 0x3000}], 0x1) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x5000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000001c0)={0x81, 0x0, 0x1, 'queue0\x00', 0xbc49}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000001280)={0x2020}, 0x2020) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0xbf}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0xd1, 0xe6, 0x5d, 0x10, 0x411, 0x12, 0x15b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x2, 0x80, 0x4, "", [{{0x9, 0x4, 0x6, 0x0, 0x0, 0xb7, 0xc9, 0xa2, 0x3}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 5.011589673s ago: executing program 0 (id=596): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, 0x15, 0x1, 0x70bd28, 0x25dfdbfb, {0x23}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000010) 4.163397842s ago: executing program 0 (id=598): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x40201, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0'}, 0xb) 4.044723351s ago: executing program 0 (id=599): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) fsopen(&(0x7f0000000180)='omfs\x00', 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 3.924329812s ago: executing program 2 (id=600): ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x64, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x73251c587dd540e9}}}}]}]}, 0x78}}, 0x0) semop(0x0, &(0x7f0000000140)=[{0x4, 0x6, 0x1800}, {0x4, 0x3, 0x3000}, {0x3, 0xfffb, 0x1000}], 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, 0x0, 0x0) semop(0x0, &(0x7f0000000180)=[{0x3, 0x5, 0x3000}], 0x1) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x5000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000001c0)={0x81, 0x0, 0x1, 'queue0\x00', 0xbc49}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000001280)={0x2020}, 0x2020) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0xbf}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0xd1, 0xe6, 0x5d, 0x10, 0x411, 0x12, 0x15b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x2, 0x80, 0x4, "", [{{0x9, 0x4, 0x6, 0x0, 0x0, 0xb7, 0xc9, 0xa2, 0x3}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 2.574268667s ago: executing program 1 (id=602): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ecb590404"], 0x7) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f0000000340)) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000380)=""/27, 0x1b}], 0x2, &(0x7f0000000400)=""/131, 0x83}, 0x8}], 0x1, 0x2003, &(0x7f0000000500)={0x77359400}) socket$inet6(0xa, 0x1, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4, 0xffffffffffffffff}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.338731499s ago: executing program 0 (id=604): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x8080000, 0x18000, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0x30000, 0x1c000, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x2ec, &(0x7f0000001080)={0x0, 0x4009880, 0x100, 0x2, 0x217}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x12}) io_uring_enter(r4, 0x742f, 0x77ae, 0x1, 0x0, 0x0) read$ptp(r1, &(0x7f00000000c0)=""/23, 0x17) 2.21123834s ago: executing program 4 (id=605): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r1 = socket(0x1d, 0x6, 0x0) r2 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x2000) getsockopt$MRT(r1, 0x0, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)="e476645fa2fdb647264298ee48dc530a2b5a579d9a5266ec200ed7d14cc91e23fb7da9666dd139b54ffcdd00075cb57fc530f3f76632823b88e12ff2af1b2d7665fd10582c9891979ceffe98819ba7b121619007bb9bf72c41eb72c0408b5db3764b492cd3620bb76afcda15caa81c1b59b3d70f9902286059c24cd243f26d4fa6b906e5d8f5d8f34f9e4dee58db8d9d781a8a8b42204cad64250984df5926ca00005d7d04dfb3928bc056029bbaf5250b402eff3184844d7200f0bbca2af0dda050d0f58d08df3ef1ae3658df24cfccd7cca764bc146d6c3fa01952fb513900c030c0da", 0xe4, r0}, 0x68) r3 = accept(r0, &(0x7f0000000280)=@sco={0x1f, @none}, &(0x7f0000000300)=0x80) unshare(0x40000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) shmctl$SHM_LOCK(r2, 0xb) r5 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@fallback=r3, r0, 0x28, 0x40, 0x0, @void, @value=r5}, 0x20) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000004c0)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000001640)) write$binfmt_script(r0, &(0x7f0000001680)={'#! ', './file0', [{0x20, '])\xc6#*'}, {}, {0x20, '+$'}], 0xa, "4ed63f"}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000016c0)={'batadv0\x00', 0x0}) r7 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT_ANY(r7, 0xf, &(0x7f0000001700)=""/180) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000017c0)={{{@in6=@mcast1, @in6=@private2, 0x4e23, 0x40a, 0x4e21, 0x6, 0x8, 0xa0, 0x20, 0x0, r6}, {0xaa, 0x7, 0x9, 0x8, 0xfffffffffffffffa, 0x8000000000000001, 0x1, 0x100000001}, {0x4, 0xc38c, 0xb7842cc, 0x3}, 0xffff8dff, 0x6e6bb3, 0x2, 0x1, 0x0, 0x3}, {{@in=@empty, 0x4d6, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x0, 0x4, 0x1, 0xa, 0xffe00000, 0x6c, 0x7}}, 0xe8) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r8, &(0x7f00000018c0)="081214dc5e9d8d1dfc3536818f6570f34b6e9ca490b4dab2eb710120e0838323b18b90911ceb116b9e65b7ba0f421cecd991fa89c568970dcfc53b3202c0e79072ee8fbab5ef1c0412855e660b557207225b0f0038433efd311a6184fdf63d51881d2c7c2d588c0c06f9a91555614510461746556786b06314a2f7e38de3969b27109c25c38eb3772f729760c7d09b20664cc533cdf5e841b544795399c23cba0b82c1bdead255a795f3c4f5a29c44192d0d5a1b09fdae1cdfda3e001046be53949df7c31ea3425127b8ddb0c4a0c163e420cea898471a70402f52a86a30432ee698b1b92a231fa859f784c9bae72bbd3c3a1dde8089", 0xf6, 0x4, &(0x7f00000019c0), 0x12) syz_open_procfs(0x0, &(0x7f0000001a00)='net/arp\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a80)={0x100, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3c}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x28}, {0x6, 0x16, 0x4d}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x43b}, {0x6, 0x16, 0x10}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xc3a2}, {0x8, 0xb, 0x9}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4040004) r9 = gettid() syz_open_procfs$namespace(r9, &(0x7f0000001c00)='ns/mnt\x00') socket$inet_udp(0x2, 0x2, 0x0) prlimit64(r9, 0x5, 0x0, &(0x7f0000001c40)) 2.186141806s ago: executing program 4 (id=606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x19, &(0x7f00000001c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @printk={@ld={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x9}, 0x94) 2.116464651s ago: executing program 4 (id=607): syz_emit_ethernet(0x1f, &(0x7f0000000200)=ANY=[@ANYBLOB="19e0ffffffff006c000000000011424203"], 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000480)={0x6, 0x1, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000000000000400003df733000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) sendmsg$netlink(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2400000026000305"], 0x24}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x110000a, 0x1}, {0x5f32, 0x8}]}}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x81031, 0xffffffffffffffff, 0x10000000) (async) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6, 0x0) (async) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000ffc000/0x4000)=nil, 0x3) (async) r4 = userfaultfd(0x800) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4000, 0x3}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x53, 0x3, 0x74, @mcast2, @loopback={0x12}, 0x10, 0x700, 0xe3e1, 0xcfe}}) 1.927309393s ago: executing program 4 (id=608): ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="020000", 0x3}], 0x1, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)) 1.845414239s ago: executing program 3 (id=609): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40201, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0'}, 0xb) 1.610725975s ago: executing program 0 (id=610): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) fsopen(&(0x7f0000000180)='omfs\x00', 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.508728871s ago: executing program 3 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="80000000000101040000000000010000020000002400018014000180084fe41f6f9193aa497a1352535c1a42000100e000800108000200000200000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e000308000740fffffffcbc7f2c75957e514e6fac2aef541c0010", @ANYRESHEX], 0x80}, 0x1, 0x0, 0x0, 0x814}, 0x4803) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206030002000000000000000000000705000100070000000900020073797a310000000014000780050015000600000008001200000000000500050002000000050004000100000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x1000000000000, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4309(rfc7539esp(cbc-camellia-aesni-avx2,sha1-generic))'}, 0x58) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000000040)={0x2, "0c1ff6e901feef34505e0b968835d1cc1ccd9c94e9e4c8e31a913e0c0a6ca0af", 0x90d622594bdbe26a, 0x1000, 0x2, 0x3, 0x2, 0x2, 0xd4c90ea, 0x4ea}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc000, 0x7) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x3aea62e64da0d344, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r8, &(0x7f0000000480)={0x6, 0x118, 0xfa00, {{0x7, 0x10000, "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", 0x80, 0x8, 0x8, 0x0, 0x9, 0x6, 0xe, 0x1}, r9}}, 0x120) read$FUSE(r7, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000180)={0x50, 0x0, r10, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x62}, 0x94) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000140)={0x29, 0x4, 0x0, {0x1, 0xe, 0x1, 0x0, [0x0]}}, 0x29) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r11 = syz_open_procfs(0x0, &(0x7f0000000280)='net/rt_cache\x00') pread64(r11, &(0x7f00000000c0)=""/144, 0x90, 0x2f) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd60010100009c1100fe8000000000000000000000000000bbff0200000000000000000000000000014e200e22"], 0x0) 1.383255157s ago: executing program 4 (id=612): bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="b5", 0x1, 0x45, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000380)=""/31, 0x1f, 0x721, 0x0, 0x0) 1.172784444s ago: executing program 4 (id=613): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0x4000423) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617066d5e9"], 0xe8}}, 0x0) (async) inotify_add_watch(r1, &(0x7f00000001c0)='.\x00', 0x60000223) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfd9fb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x42005}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xf}, @IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 0s ago: executing program 0 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x2400c041}, 0x8000) (async) socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {}, 0xef}) (async) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) kernel console output (not intermixed with test programs): 000000000000 [ 132.248486][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.248496][ T6295] R13: 00007f09480f6038 R14: 00007f09480f5fa0 R15: 00007fffc5ab3258 [ 132.248523][ T6295] [ 132.253871][ T6295] ERROR: Out of memory at tomoyo_realpath_from_path. [ 132.696056][ T5890] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.768538][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768656][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.906128][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 132.910962][ T5890] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 132.910992][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.911012][ T5890] usb 5-1: Product: syz [ 132.911027][ T5890] usb 5-1: Manufacturer: syz [ 132.911048][ T5890] usb 5-1: SerialNumber: syz [ 132.991967][ T5890] usb 5-1: config 0 descriptor?? [ 133.987549][ T5890] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 134.019857][ T6301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.388669][ T5890] usb 5-1: USB disconnect, device number 6 [ 134.446401][ T6308] mmap: syz.1.127 (6308) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.391808][ T6312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.476441][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.131'. [ 139.296043][ T5890] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 140.100233][ T6344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.175787][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 140.223414][ T5890] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 140.223469][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 140.223497][ T5890] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.223522][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 140.223549][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 140.225192][ T5890] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 140.225243][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 140.225270][ T5890] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.225295][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 140.225321][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 140.239601][ T5890] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 140.239655][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 140.239682][ T5890] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.239706][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 140.239730][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 140.455554][ T5890] usb 2-1: string descriptor 0 read error: -22 [ 140.455680][ T5890] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 140.455697][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.561071][ T5890] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 140.605762][ T6350] FAULT_INJECTION: forcing a failure. [ 140.605762][ T6350] name failslab, interval 1, probability 0, space 0, times 0 [ 140.605789][ T6350] CPU: 1 UID: 0 PID: 6350 Comm: syz.3.143 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 140.605809][ T6350] Tainted: [L]=SOFTLOCKUP [ 140.605815][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 140.605824][ T6350] Call Trace: [ 140.605830][ T6350] [ 140.605836][ T6350] dump_stack_lvl+0xe8/0x150 [ 140.605865][ T6350] should_fail_ex+0x46b/0x600 [ 140.605914][ T6350] should_failslab+0xa8/0x100 [ 140.605938][ T6350] __kmalloc_noprof+0xdf/0x7b0 [ 140.605958][ T6350] ? tomoyo_encode+0x28b/0x550 [ 140.605988][ T6350] tomoyo_encode+0x28b/0x550 [ 140.606017][ T6350] tomoyo_realpath_from_path+0x58d/0x5d0 [ 140.606050][ T6350] ? tomoyo_domain+0xd8/0x130 [ 140.606072][ T6350] ? tomoyo_path_number_perm+0x219/0x630 [ 140.606097][ T6350] tomoyo_path_number_perm+0x246/0x630 [ 140.606123][ T6350] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.606146][ T6350] ? __lock_acquire+0x6b5/0x2cf0 [ 140.606166][ T6350] ? do_raw_spin_lock+0x12b/0x2f0 [ 140.606204][ T6350] ? __fget_files+0x2a/0x420 [ 140.606227][ T6350] ? __fget_files+0x2a/0x420 [ 140.606251][ T6350] ? __fget_files+0x3a6/0x420 [ 140.606271][ T6350] ? __fget_files+0x2a/0x420 [ 140.606295][ T6350] security_file_ioctl+0xc3/0x2a0 [ 140.606322][ T6350] __se_sys_ioctl+0x47/0x170 [ 140.606337][ T6350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.606354][ T6350] do_syscall_64+0x15f/0xf80 [ 140.606388][ T6350] ? trace_irq_disable+0x3b/0x140 [ 140.606402][ T6350] ? clear_bhb_loop+0x40/0x90 [ 140.606420][ T6350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.606434][ T6350] RIP: 0033:0x7f393adec819 [ 140.606447][ T6350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.606458][ T6350] RSP: 002b:00007f3939046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.606474][ T6350] RAX: ffffffffffffffda RBX: 00007f393b065fa0 RCX: 00007f393adec819 [ 140.606484][ T6350] RDX: 0000200000000340 RSI: 00000000000089e2 RDI: 0000000000000004 [ 140.606495][ T6350] RBP: 00007f3939046090 R08: 0000000000000000 R09: 0000000000000000 [ 140.606504][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.606512][ T6350] R13: 00007f393b066038 R14: 00007f393b065fa0 R15: 00007ffd3f24d3d8 [ 140.606534][ T6350] [ 140.634473][ T6350] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.104345][ T6376] FAULT_INJECTION: forcing a failure. [ 142.104345][ T6376] name failslab, interval 1, probability 0, space 0, times 0 [ 142.104385][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.0.154 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 142.104414][ T6376] Tainted: [L]=SOFTLOCKUP [ 142.104422][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 142.104435][ T6376] Call Trace: [ 142.104443][ T6376] [ 142.104452][ T6376] dump_stack_lvl+0xe8/0x150 [ 142.104494][ T6376] should_fail_ex+0x46b/0x600 [ 142.104527][ T6376] should_failslab+0xa8/0x100 [ 142.104552][ T6376] __kmalloc_noprof+0xdf/0x7b0 [ 142.104572][ T6376] ? kfree+0x4d/0x6c0 [ 142.104602][ T6376] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 142.104634][ T6376] tomoyo_realpath_from_path+0xe3/0x5d0 [ 142.104662][ T6376] ? tomoyo_domain+0xd8/0x130 [ 142.104694][ T6376] ? tomoyo_path_number_perm+0x219/0x630 [ 142.104729][ T6376] tomoyo_path_number_perm+0x246/0x630 [ 142.104768][ T6376] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.104802][ T6376] ? __lock_acquire+0x6b5/0x2cf0 [ 142.104831][ T6376] ? do_raw_spin_lock+0x12b/0x2f0 [ 142.104888][ T6376] ? __fget_files+0x2a/0x420 [ 142.104921][ T6376] ? __fget_files+0x2a/0x420 [ 142.104948][ T6376] ? __fget_files+0x3a6/0x420 [ 142.104976][ T6376] ? __fget_files+0x2a/0x420 [ 142.105010][ T6376] security_file_ioctl+0xc3/0x2a0 [ 142.105049][ T6376] __se_sys_ioctl+0x47/0x170 [ 142.105077][ T6376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.105101][ T6376] do_syscall_64+0x15f/0xf80 [ 142.105133][ T6376] ? trace_irq_disable+0x3b/0x140 [ 142.105162][ T6376] ? clear_bhb_loop+0x40/0x90 [ 142.105190][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.105212][ T6376] RIP: 0033:0x7fd51170c819 [ 142.105232][ T6376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.105250][ T6376] RSP: 002b:00007fd50f966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.105273][ T6376] RAX: ffffffffffffffda RBX: 00007fd511985fa0 RCX: 00007fd51170c819 [ 142.105289][ T6376] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 142.105303][ T6376] RBP: 00007fd50f966090 R08: 0000000000000000 R09: 0000000000000000 [ 142.105316][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.105328][ T6376] R13: 00007fd511986038 R14: 00007fd511985fa0 R15: 00007fff9bc2f998 [ 142.105363][ T6376] [ 142.388827][ T5962] usb 2-1: USB disconnect, device number 4 [ 142.438881][ T6376] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.276076][ T6379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.529461][ T6385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.248629][ T6397] Zero length message leads to an empty skb [ 144.745934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.012629][ T48] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.178291][ T48] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.178311][ T48] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.179541][ T48] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.179561][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.179588][ T48] usb 2-1: SerialNumber: syz [ 145.538483][ T48] usb 2-1: 0:2 : does not exist [ 145.538719][ T48] usb 2-1: unit 5: unexpected type 0x09 [ 145.797769][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 145.919662][ T48] usb 2-1: USB disconnect, device number 5 [ 146.162054][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 146.162077][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 146.162301][ T6418] netlink: 'syz.0.167': attribute type 18 has an invalid length. [ 146.162317][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 146.582807][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.781045][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'. [ 147.229546][ T6430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.821641][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 147.935804][ T6445] netlink: 284 bytes leftover after parsing attributes in process `syz.1.177'. [ 148.415919][ T6455] netlink: 'syz.1.182': attribute type 13 has an invalid length. [ 148.650558][ T6464] FAULT_INJECTION: forcing a failure. [ 148.650558][ T6464] name failslab, interval 1, probability 0, space 0, times 0 [ 148.650623][ T6464] CPU: 1 UID: 0 PID: 6464 Comm: syz.0.179 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 148.650652][ T6464] Tainted: [L]=SOFTLOCKUP [ 148.650659][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.650672][ T6464] Call Trace: [ 148.650680][ T6464] [ 148.650690][ T6464] dump_stack_lvl+0xe8/0x150 [ 148.650764][ T6464] should_fail_ex+0x46b/0x600 [ 148.650797][ T6464] should_failslab+0xa8/0x100 [ 148.650822][ T6464] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 148.650858][ T6464] ? __alloc_skb+0x1d0/0x7d0 [ 148.650881][ T6464] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 148.650922][ T6464] __alloc_skb+0x1d0/0x7d0 [ 148.650952][ T6464] __ip6_append_data+0x2c7c/0x3e90 [ 148.651004][ T6464] ? __pfx_raw6_getfrag+0x10/0x10 [ 148.651036][ T6464] ? ip6_mtu+0x7d/0x490 [ 148.651072][ T6464] ? ip6_mtu+0x7d/0x490 [ 148.651103][ T6464] ? __pfx___ip6_append_data+0x10/0x10 [ 148.651132][ T6464] ? ip6_setup_cork+0x544/0xf30 [ 148.651161][ T6464] ? ip6_append_data+0x1b7/0x280 [ 148.651193][ T6464] ip6_append_data+0x10f/0x280 [ 148.651224][ T6464] ? __pfx_raw6_getfrag+0x10/0x10 [ 148.651257][ T6464] rawv6_sendmsg+0x12d3/0x18e0 [ 148.651304][ T6464] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 148.651348][ T6464] ? irqentry_exit+0x218/0x730 [ 148.651399][ T6464] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 148.651429][ T6464] ? inet_sendmsg+0x2f4/0x370 [ 148.651461][ T6464] ____sys_sendmsg+0x7da/0x9c0 [ 148.651496][ T6464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.651535][ T6464] ? import_iovec+0x73/0xa0 [ 148.651569][ T6464] ___sys_sendmsg+0x2a5/0x360 [ 148.651596][ T6464] ? __lock_acquire+0x6b5/0x2cf0 [ 148.651628][ T6464] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.651696][ T6464] ? __fget_files+0x2a/0x420 [ 148.651732][ T6464] ? __fget_files+0x3a6/0x420 [ 148.651775][ T6464] __x64_sys_sendmsg+0x1c3/0x2a0 [ 148.651806][ T6464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.651846][ T6464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.651879][ T6464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.651903][ T6464] do_syscall_64+0x15f/0xf80 [ 148.651937][ T6464] ? clear_bhb_loop+0x40/0x90 [ 148.651977][ T6464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.651999][ T6464] RIP: 0033:0x7fd51170c819 [ 148.652019][ T6464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.652036][ T6464] RSP: 002b:00007fd50f924028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.652058][ T6464] RAX: ffffffffffffffda RBX: 00007fd511986180 RCX: 00007fd51170c819 [ 148.652073][ T6464] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 148.652086][ T6464] RBP: 00007fd50f924090 R08: 0000000000000000 R09: 0000000000000000 [ 148.652099][ T6464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.652111][ T6464] R13: 00007fd511986218 R14: 00007fd511986180 R15: 00007fff9bc2f998 [ 148.652144][ T6464] [ 149.996282][ T5962] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 150.016019][ T5890] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.736139][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 150.739537][ T5890] usb 2-1: config index 0 descriptor too short (expected 8210, got 18) [ 150.739564][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.739584][ T5890] usb 2-1: config 0 has no interfaces? [ 150.739674][ T5890] usb 2-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 150.739698][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.756823][ T5962] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 150.756853][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.771882][ T5890] usb 2-1: config 0 descriptor?? [ 150.788510][ T5962] usb 4-1: config 0 descriptor?? [ 150.835253][ T5962] cp210x 4-1:0.0: cp210x converter detected [ 151.144788][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 151.162984][ T5962] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 151.163024][ T5962] cp210x 4-1:0.0: querying part number failed [ 151.298046][ T6480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.639939][ T5890] usb 2-1: string descriptor 0 read error: -71 [ 151.661772][ T5962] usb 4-1: cp210x converter now attached to ttyUSB0 [ 151.674282][ T5890] usb 2-1: USB disconnect, device number 6 [ 151.755453][ T5962] usb 4-1: USB disconnect, device number 7 [ 151.853708][ T5962] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 151.854609][ T5962] cp210x 4-1:0.0: device disconnected [ 152.176613][ T822] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.326733][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 152.356990][ T822] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 152.357022][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.357043][ T822] usb 3-1: Product: syz [ 152.357058][ T822] usb 3-1: Manufacturer: syz [ 152.357073][ T822] usb 3-1: SerialNumber: syz [ 152.404463][ T822] usb 3-1: config 0 descriptor?? [ 152.437984][ T822] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 152.584677][ T6518] warning: `syz.1.201' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 152.888194][ T6500] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.888334][ T6500] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.027488][ T6500] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.324143][ T6500] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.324232][ T6500] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.432572][ T6500] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.519784][ T6500] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.519929][ T6500] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.580953][ T6541] FAULT_INJECTION: forcing a failure. [ 153.580953][ T6541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.580991][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.1.209 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 153.581522][ T6541] Tainted: [L]=SOFTLOCKUP [ 153.581532][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 153.581553][ T6541] Call Trace: [ 153.581563][ T6541] [ 153.581573][ T6541] dump_stack_lvl+0xe8/0x150 [ 153.581628][ T6541] should_fail_ex+0x46b/0x600 [ 153.582031][ T6541] _copy_from_iter+0x1d3/0x1670 [ 153.582077][ T6541] ? rcu_is_watching+0x15/0xb0 [ 153.582106][ T6541] ? __pfx__copy_from_iter+0x10/0x10 [ 153.582129][ T6541] ? trace_kmalloc+0x2a/0xf0 [ 153.582166][ T6541] ? __kvmalloc_node_noprof+0x3df/0x8e0 [ 153.582188][ T6541] ? proc_sys_call_handler+0x3d2/0x830 [ 153.582284][ T6541] proc_sys_call_handler+0x426/0x830 [ 153.582325][ T6541] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 153.582370][ T6541] do_iter_readv_writev+0x62b/0x8d0 [ 153.582396][ T6541] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 153.582436][ T6541] vfs_writev+0x345/0x9a0 [ 153.582472][ T6541] ? __pfx_vfs_writev+0x10/0x10 [ 153.582513][ T6541] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 153.582549][ T6541] ? mutex_lock_nested+0x152/0x1d0 [ 153.582582][ T6541] ? fdget_pos+0x252/0x320 [ 153.582620][ T6541] do_writev+0x15a/0x2e0 [ 153.582650][ T6541] ? __pfx_do_writev+0x10/0x10 [ 153.582687][ T6541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.582711][ T6541] do_syscall_64+0x15f/0xf80 [ 153.582740][ T6541] ? trace_irq_disable+0x3b/0x140 [ 153.582762][ T6541] ? clear_bhb_loop+0x40/0x90 [ 153.582789][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.582811][ T6541] RIP: 0033:0x7fe6bf7bc819 [ 153.582831][ T6541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.582849][ T6541] RSP: 002b:00007fe6bda16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 153.582872][ T6541] RAX: ffffffffffffffda RBX: 00007fe6bfa35fa0 RCX: 00007fe6bf7bc819 [ 153.582887][ T6541] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 153.582900][ T6541] RBP: 00007fe6bda16090 R08: 0000000000000000 R09: 0000000000000000 [ 153.582912][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.582924][ T6541] R13: 00007fe6bfa36038 R14: 00007fe6bfa35fa0 R15: 00007fff8b6aa278 [ 153.582967][ T6541] [ 153.797236][ T6500] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.934264][ T6500] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.934401][ T6500] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.022080][ T6500] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.148805][ T6500] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 154.148956][ T6500] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 154.220492][ T6500] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 154.436069][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.650296][ T5962] usb 3-1: USB disconnect, device number 8 [ 155.431639][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.566085][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.682686][ T6563] FAULT_INJECTION: forcing a failure. [ 155.682686][ T6563] name failslab, interval 1, probability 0, space 0, times 0 [ 155.682724][ T6563] CPU: 0 UID: 0 PID: 6563 Comm: syz.3.220 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 155.682752][ T6563] Tainted: [L]=SOFTLOCKUP [ 155.682760][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.682773][ T6563] Call Trace: [ 155.682782][ T6563] [ 155.682791][ T6563] dump_stack_lvl+0xe8/0x150 [ 155.682830][ T6563] should_fail_ex+0x46b/0x600 [ 155.682861][ T6563] should_failslab+0xa8/0x100 [ 155.682886][ T6563] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 155.682919][ T6563] ? __alloc_skb+0x1d0/0x7d0 [ 155.682942][ T6563] ? lockdep_hardirqs_on+0x7a/0x110 [ 155.682978][ T6563] __alloc_skb+0x1d0/0x7d0 [ 155.683007][ T6563] netlink_sendmsg+0x5d4/0xb40 [ 155.683049][ T6563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.683079][ T6563] ? unwind_get_return_address+0x4d/0x90 [ 155.683109][ T6563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.683144][ T6563] ____sys_sendmsg+0x94c/0x9c0 [ 155.683177][ T6563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.683215][ T6563] ? import_iovec+0x73/0xa0 [ 155.683248][ T6563] ___sys_sendmsg+0x2a5/0x360 [ 155.683275][ T6563] ? __lock_acquire+0x6b5/0x2cf0 [ 155.683305][ T6563] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.683369][ T6563] ? __fget_files+0x2a/0x420 [ 155.683397][ T6563] ? __fget_files+0x3a6/0x420 [ 155.683437][ T6563] __x64_sys_sendmsg+0x1c3/0x2a0 [ 155.683467][ T6563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.683506][ T6563] ? __pfx_ksys_write+0x10/0x10 [ 155.683535][ T6563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.683559][ T6563] do_syscall_64+0x15f/0xf80 [ 155.683589][ T6563] ? trace_irq_disable+0x3b/0x140 [ 155.683611][ T6563] ? clear_bhb_loop+0x40/0x90 [ 155.683638][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.683659][ T6563] RIP: 0033:0x7f393adec819 [ 155.683679][ T6563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.683696][ T6563] RSP: 002b:00007f3939046028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.683718][ T6563] RAX: ffffffffffffffda RBX: 00007f393b065fa0 RCX: 00007f393adec819 [ 155.683733][ T6563] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 155.683746][ T6563] RBP: 00007f3939046090 R08: 0000000000000000 R09: 0000000000000000 [ 155.683758][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.683771][ T6563] R13: 00007f393b066038 R14: 00007f393b065fa0 R15: 00007ffd3f24d3d8 [ 155.683804][ T6563] [ 155.955994][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.206127][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.516038][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.581691][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.651466][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.048423][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.260290][ T6598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.412207][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 158.549399][ T6606] hsr0: entered promiscuous mode [ 158.550567][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 158.597309][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.615381][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 159.637613][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.726040][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.928304][ T36] audit: type=1326 audit(1776680740.957:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 159.928362][ T36] audit: type=1326 audit(1776680740.957:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 159.928423][ T36] audit: type=1326 audit(1776680740.997:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 159.928467][ T36] audit: type=1326 audit(1776680740.997:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 159.928515][ T36] audit: type=1326 audit(1776680741.007:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 159.929178][ T36] audit: type=1326 audit(1776680741.007:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 159.931279][ T36] audit: type=1326 audit(1776680741.007:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 159.931498][ T36] audit: type=1326 audit(1776680741.007:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 159.931742][ T36] audit: type=1326 audit(1776680741.007:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 159.931916][ T36] audit: type=1326 audit(1776680741.007:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6618 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 160.115981][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.182388][ T6625] input: syz0 as /devices/virtual/input/input7 [ 160.437874][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 161.017592][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.254'. [ 162.087995][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 162.454149][ T6668] input: syz0 as /devices/virtual/input/input8 [ 162.616070][ T5931] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.768428][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.768456][ T5931] usb 2-1: config 0 has no interfaces? [ 162.768487][ T5931] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 162.768510][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.837172][ T5931] usb 2-1: config 0 descriptor?? [ 162.855133][ T6683] tipc: Started in network mode [ 162.855162][ T6683] tipc: Node identity ac14142f, cluster identity 4711 [ 162.991342][ T6683] tipc: Enabled bearer , priority 10 [ 162.991537][ T6683] tipc: Enabling of bearer rejected, already enabled [ 162.991800][ T6683] tipc: Enabling of bearer rejected, already enabled [ 162.992045][ T6683] tipc: Enabling of bearer rejected, already enabled [ 162.992280][ T6683] tipc: Enabling of bearer rejected, already enabled [ 162.992610][ T6683] tipc: Enabling of bearer rejected, already enabled [ 162.992873][ T6683] tipc: Enabling of bearer rejected, already enabled [ 162.993119][ T6683] tipc: Enabling of bearer rejected, already enabled [ 162.993356][ T6683] tipc: Enabling of bearer rejected, already enabled [ 162.994426][ T6683] tipc: Enabling of bearer rejected, already enabled [ 162.994672][ T6683] tipc: Enabling of bearer rejected, already enabled [ 162.994927][ T6683] tipc: Enabling of bearer rejected, already enabled [ 162.995187][ T6683] tipc: Enabling of bearer rejected, already enabled [ 162.995525][ T6683] tipc: Enabling of bearer rejected, already enabled [ 162.995780][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.156884][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.157197][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.157431][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.157660][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.163643][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.163893][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.164131][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.241072][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.241422][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.241670][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.241874][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.242086][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.242291][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.242505][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.242697][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.242946][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.243164][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.243416][ T6683] tipc: Enabling of bearer rejected, already enabled [ 163.590265][ T6695] batadv_slave_1: entered promiscuous mode [ 163.602747][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 163.701756][ T6693] virtio-fs: tag not found [ 163.864501][ T6694] batadv_slave_1: left promiscuous mode [ 164.122925][ T5962] tipc: Node number set to 2886997039 [ 164.421448][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.424704][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.666037][ T5962] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 166.012633][ T5897] usb 2-1: USB disconnect, device number 7 [ 166.116178][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.287'. [ 166.693056][ T6747] FAULT_INJECTION: forcing a failure. [ 166.693056][ T6747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.693127][ T6747] CPU: 1 UID: 0 PID: 6747 Comm: syz.1.288 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 166.693156][ T6747] Tainted: [L]=SOFTLOCKUP [ 166.693164][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 166.693178][ T6747] Call Trace: [ 166.693186][ T6747] [ 166.693196][ T6747] dump_stack_lvl+0xe8/0x150 [ 166.693239][ T6747] should_fail_ex+0x46b/0x600 [ 166.693272][ T6747] _copy_from_user+0x2d/0xb0 [ 166.693304][ T6747] memdup_user+0x5e/0xd0 [ 166.693335][ T6747] strndup_user+0x68/0xd0 [ 166.693367][ T6747] __se_sys_mount+0x9d/0x420 [ 166.693398][ T6747] ? ksys_write+0x248/0x270 [ 166.693422][ T6747] ? __pfx___se_sys_mount+0x10/0x10 [ 166.693459][ T6747] ? __x64_sys_mount+0x20/0xc0 [ 166.693487][ T6747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.693511][ T6747] do_syscall_64+0x15f/0xf80 [ 166.693545][ T6747] ? clear_bhb_loop+0x40/0x90 [ 166.693573][ T6747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.693595][ T6747] RIP: 0033:0x7fe6bf7bc819 [ 166.693615][ T6747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.693634][ T6747] RSP: 002b:00007fe6bd9d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 166.693657][ T6747] RAX: ffffffffffffffda RBX: 00007fe6bfa36180 RCX: 00007fe6bf7bc819 [ 166.693683][ T6747] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 166.693697][ T6747] RBP: 00007fe6bd9d4090 R08: 0000200000000a00 R09: 0000000000000000 [ 166.693712][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.693724][ T6747] R13: 00007fe6bfa36218 R14: 00007fe6bfa36180 R15: 00007fff8b6aa278 [ 166.693759][ T6747] [ 167.170474][ T6743] FAULT_INJECTION: forcing a failure. [ 167.170474][ T6743] name failslab, interval 1, probability 0, space 0, times 0 [ 167.170512][ T6743] CPU: 1 UID: 0 PID: 6743 Comm: syz.0.289 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 167.170540][ T6743] Tainted: [L]=SOFTLOCKUP [ 167.170548][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.170561][ T6743] Call Trace: [ 167.170569][ T6743] [ 167.170578][ T6743] dump_stack_lvl+0xe8/0x150 [ 167.170618][ T6743] should_fail_ex+0x46b/0x600 [ 167.170657][ T6743] should_failslab+0xa8/0x100 [ 167.170681][ T6743] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 167.170716][ T6743] ? __alloc_skb+0x1d0/0x7d0 [ 167.170738][ T6743] ? lockdep_hardirqs_on+0x7a/0x110 [ 167.170793][ T6743] __alloc_skb+0x1d0/0x7d0 [ 167.170822][ T6743] netlink_sendmsg+0x5d4/0xb40 [ 167.170858][ T6743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.170886][ T6743] ? unwind_get_return_address+0x4d/0x90 [ 167.170916][ T6743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.170957][ T6743] ____sys_sendmsg+0x94c/0x9c0 [ 167.170992][ T6743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.171030][ T6743] ? import_iovec+0x73/0xa0 [ 167.171063][ T6743] ___sys_sendmsg+0x2a5/0x360 [ 167.171090][ T6743] ? __lock_acquire+0x6b5/0x2cf0 [ 167.171121][ T6743] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.171188][ T6743] ? __fget_files+0x2a/0x420 [ 167.171218][ T6743] ? __fget_files+0x3a6/0x420 [ 167.171260][ T6743] __x64_sys_sendmsg+0x1c3/0x2a0 [ 167.171293][ T6743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.171332][ T6743] ? __pfx_ksys_write+0x10/0x10 [ 167.171363][ T6743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.171388][ T6743] do_syscall_64+0x15f/0xf80 [ 167.171418][ T6743] ? trace_irq_disable+0x3b/0x140 [ 167.171441][ T6743] ? clear_bhb_loop+0x40/0x90 [ 167.171469][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.171490][ T6743] RIP: 0033:0x7fd51170c819 [ 167.171511][ T6743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.171528][ T6743] RSP: 002b:00007fd50f966028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.171550][ T6743] RAX: ffffffffffffffda RBX: 00007fd511985fa0 RCX: 00007fd51170c819 [ 167.171566][ T6743] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 167.171579][ T6743] RBP: 00007fd50f966090 R08: 0000000000000000 R09: 0000000000000000 [ 167.171592][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.171605][ T6743] R13: 00007fd511986038 R14: 00007fd511985fa0 R15: 00007fff9bc2f998 [ 167.171644][ T6743] [ 167.716082][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 168.926045][ T9] usb 3-1: device not accepting address 9, error -71 [ 169.776561][ T6775] FAULT_INJECTION: forcing a failure. [ 169.776561][ T6775] name failslab, interval 1, probability 0, space 0, times 0 [ 169.776593][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: syz.2.300 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 169.776645][ T6775] Tainted: [L]=SOFTLOCKUP [ 169.776653][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.776665][ T6775] Call Trace: [ 169.776673][ T6775] [ 169.776682][ T6775] dump_stack_lvl+0xe8/0x150 [ 169.776721][ T6775] should_fail_ex+0x46b/0x600 [ 169.776752][ T6775] should_failslab+0xa8/0x100 [ 169.776776][ T6775] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 169.776809][ T6775] ? __alloc_skb+0x1d0/0x7d0 [ 169.776830][ T6775] ? lockdep_hardirqs_on+0x7a/0x110 [ 169.776868][ T6775] __alloc_skb+0x1d0/0x7d0 [ 169.776896][ T6775] send_monitor_note+0x107/0x530 [ 169.776936][ T6775] ? __pfx_send_monitor_note+0x10/0x10 [ 169.776970][ T6775] ? bpf_lsm_capable+0x9/0x20 [ 169.776993][ T6775] ? security_capable+0x7e/0x2c0 [ 169.777024][ T6775] hci_sock_bind+0x7be/0x1080 [ 169.777074][ T6775] ? tomoyo_socket_bind_permission+0x14f/0x290 [ 169.777102][ T6775] ? __pfx_hci_sock_bind+0x10/0x10 [ 169.777130][ T6775] ? hook_socket_bind+0x107/0x190 [ 169.777163][ T6775] ? bpf_lsm_socket_bind+0x9/0x20 [ 169.777199][ T6775] __sys_bind+0x2e9/0x410 [ 169.777224][ T6775] ? __pfx___sys_bind+0x10/0x10 [ 169.777272][ T6775] ? __pfx_ksys_write+0x10/0x10 [ 169.777297][ T6775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.777325][ T6775] __x64_sys_bind+0x7a/0x90 [ 169.777348][ T6775] do_syscall_64+0x15f/0xf80 [ 169.777378][ T6775] ? trace_irq_disable+0x3b/0x140 [ 169.777399][ T6775] ? clear_bhb_loop+0x40/0x90 [ 169.777425][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.777446][ T6775] RIP: 0033:0x7f4d39c6c819 [ 169.777467][ T6775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.777483][ T6775] RSP: 002b:00007f4d37ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 169.777506][ T6775] RAX: ffffffffffffffda RBX: 00007f4d39ee5fa0 RCX: 00007f4d39c6c819 [ 169.777521][ T6775] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000005 [ 169.777534][ T6775] RBP: 00007f4d37ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 169.777547][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.777559][ T6775] R13: 00007f4d39ee6038 R14: 00007f4d39ee5fa0 R15: 00007ffe9db4b188 [ 169.777593][ T6775] [ 170.091257][ T48] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.568807][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.568869][ T48] usb 2-1: config 0 has no interfaces? [ 170.568908][ T48] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 170.568993][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.786494][ T48] usb 2-1: config 0 descriptor?? [ 171.288866][ T36] kauditd_printk_skb: 152 callbacks suppressed [ 171.288885][ T36] audit: type=1326 audit(1776680752.357:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d39c6c819 code=0x7ffc0000 [ 171.288930][ T36] audit: type=1326 audit(1776680752.367:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d39c6c819 code=0x7ffc0000 [ 171.288970][ T36] audit: type=1326 audit(1776680752.367:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d39c6c819 code=0x7ffc0000 [ 171.289498][ T36] audit: type=1326 audit(1776680752.367:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d39c6c819 code=0x7ffc0000 [ 171.289542][ T36] audit: type=1326 audit(1776680752.367:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d39c6c819 code=0x7ffc0000 [ 171.289878][ T36] audit: type=1326 audit(1776680752.367:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f4d39c6c819 code=0x7ffc0000 [ 171.290251][ T36] audit: type=1326 audit(1776680752.367:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d39c6c819 code=0x7ffc0000 [ 171.292719][ T36] audit: type=1326 audit(1776680752.367:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d39c6c819 code=0x7ffc0000 [ 171.292768][ T36] audit: type=1326 audit(1776680752.367:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d39c6c819 code=0x7ffc0000 [ 171.292812][ T36] audit: type=1326 audit(1776680752.367:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d39c6c819 code=0x7ffc0000 [ 171.744750][ T6793] virtio-fs: tag not found [ 172.050368][ T6810] FAULT_INJECTION: forcing a failure. [ 172.050368][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 172.050413][ T6810] CPU: 1 UID: 0 PID: 6810 Comm: syz.3.313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 172.050438][ T6810] Tainted: [L]=SOFTLOCKUP [ 172.050445][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.050457][ T6810] Call Trace: [ 172.050464][ T6810] [ 172.050473][ T6810] dump_stack_lvl+0xe8/0x150 [ 172.050509][ T6810] should_fail_ex+0x46b/0x600 [ 172.050539][ T6810] should_failslab+0xa8/0x100 [ 172.050561][ T6810] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 172.050584][ T6810] ? __get_vm_area_node+0x171/0x350 [ 172.050636][ T6810] __get_vm_area_node+0x171/0x350 [ 172.050673][ T6810] __vmalloc_node_range_noprof+0x36a/0x1750 [ 172.050705][ T6810] ? copy_process+0x89b/0x4460 [ 172.050735][ T6810] ? percpu_ref_get_many+0x19/0x140 [ 172.050811][ T6810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 172.050849][ T6810] ? rcu_is_watching+0x15/0xb0 [ 172.050880][ T6810] ? memcpy_and_pad+0x48/0x80 [ 172.050920][ T6810] __vmalloc_node_noprof+0xc2/0x100 [ 172.050955][ T6810] ? copy_process+0x89b/0x4460 [ 172.050987][ T6810] ? copy_process+0x89b/0x4460 [ 172.051024][ T6810] dup_task_struct+0x298/0x840 [ 172.051057][ T6810] ? rt_spin_unlock+0x160/0x200 [ 172.051085][ T6810] copy_process+0x89b/0x4460 [ 172.051138][ T6810] ? get_pid_task+0x20/0x1f0 [ 172.051171][ T6810] ? __lock_acquire+0x6b5/0x2cf0 [ 172.051200][ T6810] ? __pfx_copy_process+0x10/0x10 [ 172.051247][ T6810] kernel_clone+0x283/0x870 [ 172.051272][ T6810] ? __pfx_kernel_clone+0x10/0x10 [ 172.051292][ T6810] ? do_raw_spin_lock+0x12b/0x2f0 [ 172.051333][ T6810] __x64_sys_clone+0x1b6/0x230 [ 172.051360][ T6810] ? __pfx___x64_sys_clone+0x10/0x10 [ 172.051409][ T6810] ? __pfx_ksys_write+0x10/0x10 [ 172.051440][ T6810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.051465][ T6810] do_syscall_64+0x15f/0xf80 [ 172.051494][ T6810] ? trace_irq_disable+0x3b/0x140 [ 172.051516][ T6810] ? clear_bhb_loop+0x40/0x90 [ 172.051544][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.051566][ T6810] RIP: 0033:0x7f393adec819 [ 172.051586][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.051604][ T6810] RSP: 002b:00007f3939045fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 172.051627][ T6810] RAX: ffffffffffffffda RBX: 00007f393b065fa0 RCX: 00007f393adec819 [ 172.051642][ T6810] RDX: 0000200000001080 RSI: 0000000000000000 RDI: 00000000241c4000 [ 172.051656][ T6810] RBP: 00007f3939046090 R08: 0000200000001100 R09: 0000200000001100 [ 172.051674][ T6810] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 172.051687][ T6810] R13: 00007f393b066038 R14: 00007f393b065fa0 R15: 00007ffd3f24d3d8 [ 172.051722][ T6810] [ 172.057402][ T6810] syz.3.313: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset= [ 172.068268][ T48] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 172.073828][ T6810] /,mems_allowed=0-1 [ 172.073989][ T6810] CPU: 1 UID: 0 PID: 6810 Comm: syz.3.313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 172.074017][ T6810] Tainted: [L]=SOFTLOCKUP [ 172.074024][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.074036][ T6810] Call Trace: [ 172.074044][ T6810] [ 172.074052][ T6810] dump_stack_lvl+0xe8/0x150 [ 172.074188][ T6810] warn_alloc+0x263/0x3e0 [ 172.074315][ T6810] ? __pfx_warn_alloc+0x10/0x10 [ 172.074397][ T6810] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 172.074429][ T6810] ? __get_vm_area_node+0x171/0x350 [ 172.074531][ T6810] ? __get_vm_area_node+0x2e1/0x350 [ 172.074651][ T6810] __vmalloc_node_range_noprof+0x38f/0x1750 [ 172.074742][ T6810] ? percpu_ref_get_many+0x19/0x140 [ 172.074897][ T6810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 172.075009][ T6810] ? rcu_is_watching+0x15/0xb0 [ 172.075061][ T6810] ? memcpy_and_pad+0x48/0x80 [ 172.075101][ T6810] __vmalloc_node_noprof+0xc2/0x100 [ 172.075189][ T6810] ? copy_process+0x89b/0x4460 [ 172.075282][ T6810] ? copy_process+0x89b/0x4460 [ 172.075332][ T6810] dup_task_struct+0x298/0x840 [ 172.075398][ T6810] ? rt_spin_unlock+0x160/0x200 [ 172.075474][ T6810] copy_process+0x89b/0x4460 [ 172.075594][ T6810] ? get_pid_task+0x20/0x1f0 [ 172.075702][ T6810] ? __lock_acquire+0x6b5/0x2cf0 [ 172.075777][ T6810] ? __pfx_copy_process+0x10/0x10 [ 172.075882][ T6810] kernel_clone+0x283/0x870 [ 172.075905][ T6810] ? __pfx_kernel_clone+0x10/0x10 [ 172.075923][ T6810] ? do_raw_spin_lock+0x12b/0x2f0 [ 172.075961][ T6810] __x64_sys_clone+0x1b6/0x230 [ 172.075986][ T6810] ? __pfx___x64_sys_clone+0x10/0x10 [ 172.076037][ T6810] ? __pfx_ksys_write+0x10/0x10 [ 172.076087][ T6810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.076110][ T6810] do_syscall_64+0x15f/0xf80 [ 172.076139][ T6810] ? trace_irq_disable+0x3b/0x140 [ 172.076193][ T6810] ? clear_bhb_loop+0x40/0x90 [ 172.076255][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.076313][ T6810] RIP: 0033:0x7f393adec819 [ 172.076363][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.076411][ T6810] RSP: 002b:00007f3939045fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 172.076468][ T6810] RAX: ffffffffffffffda RBX: 00007f393b065fa0 RCX: 00007f393adec819 [ 172.076535][ T6810] RDX: 0000200000001080 RSI: 0000000000000000 RDI: 00000000241c4000 [ 172.076567][ T6810] RBP: 00007f3939046090 R08: 0000200000001100 R09: 0000200000001100 [ 172.076609][ T6810] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 172.076646][ T6810] R13: 00007f393b066038 R14: 00007f393b065fa0 R15: 00007ffd3f24d3d8 [ 172.076746][ T6810] [ 172.077172][ T6810] Mem-Info: [ 172.077183][ T6810] active_anon:255 inactive_anon:8083 isolated_anon:0 [ 172.077183][ T6810] active_file:9007 inactive_file:41105 isolated_file:0 [ 172.077183][ T6810] unevictable:768 dirty:285 writeback:0 [ 172.077183][ T6810] slab_reclaimable:11713 slab_unreclaimable:103408 [ 172.077183][ T6810] mapped:31789 shmem:3287 pagetables:1306 [ 172.077183][ T6810] sec_pagetables:0 bounce:0 [ 172.077183][ T6810] kernel_misc_reclaimable:0 [ 172.077183][ T6810] free:1321749 free_pcp:1934 free_cma:0 [ 172.077321][ T6810] Node 0 active_anon:1020kB inactive_anon:32332kB active_file:35824kB inactive_file:164420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127156kB dirty:1140kB writeback:0kB shmem:11612kB kernel_stack:13176kB pagetables:5104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 172.077453][ T6810] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:96kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 172.077575][ T6810] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.077689][ T6810] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 172.077781][ T6810] Node 0 DMA32 free:1330396kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1020kB inactive_anon:32332kB active_file:35824kB inactive_file:164420kB unevictable:1536kB writepending:1140kB zspages:0kB present:3129332kB managed:2564916kB mlocked:0kB bounce:0kB free_pcp:7736kB local_pcp:1880kB free_cma:0kB [ 172.077922][ T6810] lowmem_reserve[]: 0 0 0 0 0 [ 172.078011][ T6810] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.078310][ T6810] lowmem_reserve[]: 0 0 0 0 0 [ 172.078444][ T6810] Node 1 Normal free:3941240kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.078660][ T6810] lowmem_reserve[]: 0 0 0 0 0 [ 172.078760][ T6810] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.079099][ T6810] Node 0 DMA32: 2550*4kB (UE) 1429*8kB (UME) 767*16kB (UME) 469*32kB (UME) 270*64kB (UME) 124*128kB (UME) 76*256kB (UME) 32*512kB (UM) 12*1024kB (UM) 4*2048kB (UM) 291*4096kB (UM) = 1330320kB [ 172.079410][ T6810] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 172.079696][ T6810] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 14*16kB (UM) 9*32kB (UM) 5*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3941240kB [ 172.080212][ T6810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.080256][ T6810] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.080272][ T6810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.080288][ T6810] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.080304][ T6810] 53395 total pagecache pages [ 172.080321][ T6810] 0 pages in swap cache [ 172.080342][ T6810] Free swap = 124996kB [ 172.080363][ T6810] Total swap = 124996kB [ 172.080393][ T6810] 2097051 pages RAM [ 172.080413][ T6810] 0 pages HighMem/MovableOnly [ 172.080427][ T6810] 424174 pages reserved [ 172.080448][ T6810] 0 pages cma reserved [ 172.196299][ T48] usb 1-1: device descriptor read/64, error -71 [ 172.476138][ T48] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 172.723950][ T48] usb 1-1: device descriptor read/64, error -71 [ 172.848482][ T48] usb usb1-port1: attempt power cycle [ 173.143381][ T6812] FAULT_INJECTION: forcing a failure. [ 173.143381][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 173.143417][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: syz.3.315 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 173.143445][ T6812] Tainted: [L]=SOFTLOCKUP [ 173.143452][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 173.143464][ T6812] Call Trace: [ 173.143472][ T6812] [ 173.143481][ T6812] dump_stack_lvl+0xe8/0x150 [ 173.143521][ T6812] should_fail_ex+0x46b/0x600 [ 173.143554][ T6812] should_failslab+0xa8/0x100 [ 173.143579][ T6812] __kmalloc_noprof+0xdf/0x7b0 [ 173.143600][ T6812] ? tomoyo_encode+0x28b/0x550 [ 173.143631][ T6812] tomoyo_encode+0x28b/0x550 [ 173.143662][ T6812] tomoyo_realpath_from_path+0x58d/0x5d0 [ 173.143700][ T6812] ? tomoyo_path_number_perm+0x219/0x630 [ 173.143734][ T6812] tomoyo_path_number_perm+0x246/0x630 [ 173.143776][ T6812] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.143808][ T6812] ? __lock_acquire+0x6b5/0x2cf0 [ 173.143836][ T6812] ? do_raw_spin_lock+0x12b/0x2f0 [ 173.143912][ T6812] ? __fget_files+0x2a/0x420 [ 173.143944][ T6812] ? __fget_files+0x2a/0x420 [ 173.143971][ T6812] ? __fget_files+0x3a6/0x420 [ 173.143998][ T6812] ? __fget_files+0x2a/0x420 [ 173.144033][ T6812] security_file_ioctl+0xc3/0x2a0 [ 173.144085][ T6812] __se_sys_ioctl+0x47/0x170 [ 173.144107][ T6812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.144131][ T6812] do_syscall_64+0x15f/0xf80 [ 173.144162][ T6812] ? trace_irq_disable+0x3b/0x140 [ 173.144183][ T6812] ? clear_bhb_loop+0x40/0x90 [ 173.144210][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.144231][ T6812] RIP: 0033:0x7f393adec819 [ 173.144251][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.144268][ T6812] RSP: 002b:00007f3939046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.144292][ T6812] RAX: ffffffffffffffda RBX: 00007f393b065fa0 RCX: 00007f393adec819 [ 173.144307][ T6812] RDX: 0000200000000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 173.144320][ T6812] RBP: 00007f3939046090 R08: 0000000000000000 R09: 0000000000000000 [ 173.144333][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.144345][ T6812] R13: 00007f393b066038 R14: 00007f393b065fa0 R15: 00007ffd3f24d3d8 [ 173.144381][ T6812] [ 173.144514][ T6812] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.305225][ T5933] usb 2-1: USB disconnect, device number 8 [ 173.386335][ T48] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 173.408957][ T48] usb 1-1: device descriptor read/8, error -71 [ 173.672743][ T48] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 173.687402][ T48] usb 1-1: device descriptor read/8, error -71 [ 173.798182][ T48] usb usb1-port1: unable to enumerate USB device [ 174.020497][ T6832] FAULT_INJECTION: forcing a failure. [ 174.020497][ T6832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.020530][ T6832] CPU: 0 UID: 0 PID: 6832 Comm: syz.4.320 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 174.020553][ T6832] Tainted: [L]=SOFTLOCKUP [ 174.020559][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 174.020569][ T6832] Call Trace: [ 174.020581][ T6832] [ 174.020588][ T6832] dump_stack_lvl+0xe8/0x150 [ 174.020624][ T6832] should_fail_ex+0x46b/0x600 [ 174.020650][ T6832] strncpy_from_user+0x36/0x2b0 [ 174.020675][ T6832] do_getname+0x77/0x250 [ 174.020701][ T6832] do_faccessat+0x635/0xde0 [ 174.020738][ T6832] ? __pfx_do_faccessat+0x10/0x10 [ 174.020784][ T6832] ? __pfx_ksys_write+0x10/0x10 [ 174.020809][ T6832] __x64_sys_faccessat2+0x9a/0xb0 [ 174.020831][ T6832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.020851][ T6832] do_syscall_64+0x15f/0xf80 [ 174.020879][ T6832] ? trace_irq_disable+0x3b/0x140 [ 174.020901][ T6832] ? clear_bhb_loop+0x40/0x90 [ 174.020922][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.020938][ T6832] RIP: 0033:0x7f0947e7c819 [ 174.020966][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.020980][ T6832] RSP: 002b:00007f0946094028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 174.020998][ T6832] RAX: ffffffffffffffda RBX: 00007f09480f6180 RCX: 00007f0947e7c819 [ 174.021010][ T6832] RDX: 0000000000000004 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 174.021022][ T6832] RBP: 00007f0946094090 R08: 0000000000000000 R09: 0000000000000000 [ 174.021033][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.021043][ T6832] R13: 00007f09480f6218 R14: 00007f09480f6180 R15: 00007fffc5ab3258 [ 174.021071][ T6832] [ 174.400319][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 174.604689][ T6844] FAULT_INJECTION: forcing a failure. [ 174.604689][ T6844] name failslab, interval 1, probability 0, space 0, times 0 [ 174.604744][ T6844] CPU: 0 UID: 0 PID: 6844 Comm: syz.1.327 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 174.604773][ T6844] Tainted: [L]=SOFTLOCKUP [ 174.604780][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 174.604792][ T6844] Call Trace: [ 174.604800][ T6844] [ 174.604809][ T6844] dump_stack_lvl+0xe8/0x150 [ 174.604850][ T6844] should_fail_ex+0x46b/0x600 [ 174.604880][ T6844] should_failslab+0xa8/0x100 [ 174.604905][ T6844] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 174.604940][ T6844] ? __alloc_skb+0x1d0/0x7d0 [ 174.604961][ T6844] ? lockdep_hardirqs_on+0x7a/0x110 [ 174.604998][ T6844] __alloc_skb+0x1d0/0x7d0 [ 174.605027][ T6844] netlink_sendmsg+0x5d4/0xb40 [ 174.605062][ T6844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.605089][ T6844] ? unwind_get_return_address+0x4d/0x90 [ 174.605118][ T6844] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.605160][ T6844] ____sys_sendmsg+0x94c/0x9c0 [ 174.605194][ T6844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.605231][ T6844] ? import_iovec+0x73/0xa0 [ 174.605263][ T6844] ___sys_sendmsg+0x2a5/0x360 [ 174.605289][ T6844] ? __lock_acquire+0x6b5/0x2cf0 [ 174.605318][ T6844] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.605384][ T6844] ? __fget_files+0x2a/0x420 [ 174.605412][ T6844] ? __fget_files+0x3a6/0x420 [ 174.605453][ T6844] __x64_sys_sendmsg+0x1c3/0x2a0 [ 174.605489][ T6844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.605527][ T6844] ? __pfx_ksys_write+0x10/0x10 [ 174.605557][ T6844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.605580][ T6844] do_syscall_64+0x15f/0xf80 [ 174.605610][ T6844] ? trace_irq_disable+0x3b/0x140 [ 174.605631][ T6844] ? clear_bhb_loop+0x40/0x90 [ 174.605658][ T6844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.605680][ T6844] RIP: 0033:0x7fe6bf7bc819 [ 174.605699][ T6844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.605716][ T6844] RSP: 002b:00007fe6bda16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.605738][ T6844] RAX: ffffffffffffffda RBX: 00007fe6bfa35fa0 RCX: 00007fe6bf7bc819 [ 174.605753][ T6844] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 174.605766][ T6844] RBP: 00007fe6bda16090 R08: 0000000000000000 R09: 0000000000000000 [ 174.605778][ T6844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.605790][ T6844] R13: 00007fe6bfa36038 R14: 00007fe6bfa35fa0 R15: 00007fff8b6aa278 [ 174.605823][ T6844] [ 174.917827][ T6847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.324'. [ 175.142832][ T6852] FAULT_INJECTION: forcing a failure. [ 175.142832][ T6852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.142877][ T6852] CPU: 0 UID: 0 PID: 6852 Comm: syz.0.329 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 175.142904][ T6852] Tainted: [L]=SOFTLOCKUP [ 175.142909][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 175.142919][ T6852] Call Trace: [ 175.142925][ T6852] [ 175.142932][ T6852] dump_stack_lvl+0xe8/0x150 [ 175.142965][ T6852] should_fail_ex+0x46b/0x600 [ 175.142990][ T6852] _copy_from_user+0x2d/0xb0 [ 175.143014][ T6852] sctp_setsockopt+0x1c4/0x12c0 [ 175.143039][ T6852] ? sock_common_setsockopt+0x36/0xc0 [ 175.143057][ T6852] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 175.143075][ T6852] do_sock_setsockopt+0x17c/0x1b0 [ 175.143102][ T6852] __x64_sys_setsockopt+0x143/0x1b0 [ 175.143127][ T6852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.143146][ T6852] do_syscall_64+0x15f/0xf80 [ 175.143170][ T6852] ? trace_irq_disable+0x3b/0x140 [ 175.143188][ T6852] ? clear_bhb_loop+0x40/0x90 [ 175.143208][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.143225][ T6852] RIP: 0033:0x7fd51170c819 [ 175.143241][ T6852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.143257][ T6852] RSP: 002b:00007fd50f966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 175.143276][ T6852] RAX: ffffffffffffffda RBX: 00007fd511985fa0 RCX: 00007fd51170c819 [ 175.143290][ T6852] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 175.143300][ T6852] RBP: 00007fd50f966090 R08: 0000000000000098 R09: 0000000000000000 [ 175.143311][ T6852] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 175.143323][ T6852] R13: 00007fd511986038 R14: 00007fd511985fa0 R15: 00007fff9bc2f998 [ 175.143350][ T6852] [ 175.171139][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.378589][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.378620][ T9] usb 2-1: config 0 has no interfaces? [ 175.378651][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 175.378687][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.487306][ T9] usb 2-1: config 0 descriptor?? [ 175.847980][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 176.009339][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 176.014119][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.014175][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 176.014200][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.043684][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 176.043714][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.043733][ T9] usb 3-1: Product: syz [ 176.043747][ T9] usb 3-1: Manufacturer: syz [ 176.043762][ T9] usb 3-1: SerialNumber: syz [ 176.103019][ T9] usb 3-1: config 0 descriptor?? [ 176.119610][ T9] mcba_usb 3-1:0.0: Can't find endpoints [ 176.301656][ T6867] virtio-fs: tag not found [ 176.349431][ T5933] usb 3-1: USB disconnect, device number 11 [ 176.991265][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 176.991294][ T6880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.338'. [ 176.991314][ T6880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.338'. [ 177.325306][ T6871] macvlan2: entered promiscuous mode [ 177.325341][ T6871] macvlan2: entered allmulticast mode [ 177.325355][ T6871] veth0_virt_wifi: entered allmulticast mode [ 177.676471][ T36] kauditd_printk_skb: 92 callbacks suppressed [ 177.676492][ T36] audit: type=1326 audit(1776680758.757:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6889 comm="syz.2.341" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d39c6c819 code=0x0 [ 178.068742][ T5962] usb 2-1: USB disconnect, device number 9 [ 178.291256][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 178.291277][ T6907] netlink: 204 bytes leftover after parsing attributes in process `syz.1.347'. [ 178.291325][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 178.926091][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 178.949521][ T6921] 9p: Unknown access argument Ö: -22 [ 179.096396][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 179.098265][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.098310][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 179.098335][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 179.098360][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 179.098388][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 179.098408][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.100918][ T9] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 179.100945][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.100966][ T9] usb 2-1: Product: syz [ 179.100981][ T9] usb 2-1: Manufacturer: syz [ 179.100996][ T9] usb 2-1: SerialNumber: syz [ 179.217699][ T9] usb 2-1: config 0 descriptor?? [ 179.218872][ T6917] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 179.223671][ T9] ati_remote 2-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 179.266029][ T822] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 179.430872][ T822] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 179.430902][ T822] usb 1-1: config 0 has no interface number 0 [ 179.457906][ T822] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 179.457937][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.457957][ T822] usb 1-1: Product: syz [ 179.457972][ T822] usb 1-1: Manufacturer: syz [ 179.457986][ T822] usb 1-1: SerialNumber: syz [ 179.504496][ T822] usb 1-1: config 0 descriptor?? [ 180.077376][ T822] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 180.077408][ T822] usb 1-1: Firmware version (0.0) predates our first public release. [ 180.077428][ T822] usb 1-1: Please update to version 0.2 or newer [ 180.833383][ T822] usb 1-1: USB disconnect, device number 12 [ 181.169732][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 181.169755][ T6907] netlink: 204 bytes leftover after parsing attributes in process `syz.1.347'. [ 181.169809][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 181.553755][ T9] usb 2-1: USB disconnect, device number 10 [ 181.609337][ T5933] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 181.791317][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.791346][ T5933] usb 4-1: config 0 has no interfaces? [ 181.791379][ T5933] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 181.791402][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.906837][ T5933] usb 4-1: config 0 descriptor?? [ 181.986109][ T5890] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 182.159550][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 182.159590][ T5890] usb 3-1: can't read configurations, error -61 [ 182.297614][ T5890] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 182.450678][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 182.450721][ T5890] usb 3-1: can't read configurations, error -61 [ 182.478495][ T5890] usb usb3-port1: attempt power cycle [ 182.649881][ T6964] FAULT_INJECTION: forcing a failure. [ 182.649881][ T6964] name failslab, interval 1, probability 0, space 0, times 0 [ 182.649946][ T6964] CPU: 1 UID: 0 PID: 6964 Comm: syz.1.363 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 182.649975][ T6964] Tainted: [L]=SOFTLOCKUP [ 182.649983][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 182.649998][ T6964] Call Trace: [ 182.650007][ T6964] [ 182.650016][ T6964] dump_stack_lvl+0xe8/0x150 [ 182.650058][ T6964] should_fail_ex+0x46b/0x600 [ 182.650090][ T6964] should_failslab+0xa8/0x100 [ 182.650115][ T6964] kmem_cache_alloc_noprof+0x87/0x680 [ 182.650150][ T6964] ? security_inode_alloc+0x39/0x310 [ 182.650191][ T6964] security_inode_alloc+0x39/0x310 [ 182.650222][ T6964] inode_init_always_gfp+0x99a/0xd50 [ 182.650259][ T6964] ? __pfx_sock_alloc_inode+0x10/0x10 [ 182.650292][ T6964] alloc_inode+0x82/0x1b0 [ 182.650320][ T6964] __sock_create+0x12d/0x9d0 [ 182.650352][ T6964] mptcp_subflow_create_socket+0xfb/0x800 [ 182.650380][ T6964] ? irqentry_exit+0x218/0x730 [ 182.650413][ T6964] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 182.650436][ T6964] ? rcu_is_watching+0x15/0xb0 [ 182.650474][ T6964] __mptcp_nmpc_sk+0x14e/0x790 [ 182.650500][ T6964] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 182.650525][ T6964] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 182.650566][ T6964] mptcp_listen+0x112/0x610 [ 182.650623][ T6964] __x64_sys_listen+0x1cd/0x240 [ 182.650647][ T6964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.650672][ T6964] do_syscall_64+0x15f/0xf80 [ 182.650706][ T6964] ? clear_bhb_loop+0x40/0x90 [ 182.650741][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.650764][ T6964] RIP: 0033:0x7fe6bf7bc819 [ 182.650786][ T6964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.650804][ T6964] RSP: 002b:00007fe6bd9d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 182.650827][ T6964] RAX: ffffffffffffffda RBX: 00007fe6bfa36180 RCX: 00007fe6bf7bc819 [ 182.650843][ T6964] RDX: 0000000000000000 RSI: 0000000000008000 RDI: 0000000000000005 [ 182.650856][ T6964] RBP: 00007fe6bd9d4090 R08: 0000000000000000 R09: 0000000000000000 [ 182.650869][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.650881][ T6964] R13: 00007fe6bfa36218 R14: 00007fe6bfa36180 R15: 00007fff8b6aa278 [ 182.650917][ T6964] [ 182.651142][ T6964] socket: no more sockets [ 183.580838][ T6960] virtio-fs: tag not found [ 183.769524][ T5890] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 183.803453][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 183.803491][ T5890] usb 3-1: can't read configurations, error -61 [ 183.936662][ T5890] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 183.975091][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 183.975129][ T5890] usb 3-1: can't read configurations, error -61 [ 183.976147][ T5890] usb usb3-port1: unable to enumerate USB device [ 184.345111][ T6971] FAULT_INJECTION: forcing a failure. [ 184.345111][ T6971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.345147][ T6971] CPU: 0 UID: 0 PID: 6971 Comm: syz.4.366 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 184.345172][ T6971] Tainted: [L]=SOFTLOCKUP [ 184.345179][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.345197][ T6971] Call Trace: [ 184.345205][ T6971] [ 184.345213][ T6971] dump_stack_lvl+0xe8/0x150 [ 184.345249][ T6971] should_fail_ex+0x46b/0x600 [ 184.345277][ T6971] _copy_from_user+0x2d/0xb0 [ 184.345304][ T6971] snd_rawmidi_kernel_write1+0x395/0x620 [ 184.345343][ T6971] snd_rawmidi_write+0x5d3/0xc10 [ 184.345381][ T6971] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 184.345408][ T6971] ? __asan_memset+0x22/0x50 [ 184.345435][ T6971] ? __import_iovec+0x40e/0x7e0 [ 184.345470][ T6971] ? rw_verify_area+0x25b/0x4e0 [ 184.345502][ T6971] vfs_writev+0x4c6/0x9a0 [ 184.345526][ T6971] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 184.345554][ T6971] ? __pfx_vfs_writev+0x10/0x10 [ 184.345592][ T6971] ? __fget_files+0x2a/0x420 [ 184.345622][ T6971] ? __fget_files+0x3a6/0x420 [ 184.345647][ T6971] ? __fget_files+0x2a/0x420 [ 184.345681][ T6971] do_writev+0x15a/0x2e0 [ 184.345707][ T6971] ? __pfx_do_writev+0x10/0x10 [ 184.345739][ T6971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.345761][ T6971] do_syscall_64+0x15f/0xf80 [ 184.345788][ T6971] ? trace_irq_disable+0x3b/0x140 [ 184.345807][ T6971] ? clear_bhb_loop+0x40/0x90 [ 184.345830][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.345849][ T6971] RIP: 0033:0x7f0947e7c819 [ 184.345866][ T6971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.345881][ T6971] RSP: 002b:00007f09460d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 184.345901][ T6971] RAX: ffffffffffffffda RBX: 00007f09480f5fa0 RCX: 00007f0947e7c819 [ 184.345915][ T6971] RDX: 000000000000002f RSI: 0000200000000840 RDI: 0000000000000003 [ 184.345927][ T6971] RBP: 00007f09460d6090 R08: 0000000000000000 R09: 0000000000000000 [ 184.345938][ T6971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.345950][ T6971] R13: 00007f09480f6038 R14: 00007f09480f5fa0 R15: 00007fffc5ab3258 [ 184.345981][ T6971] [ 185.086071][ T5933] usb 4-1: USB disconnect, device number 8 [ 185.199988][ T6982] FAULT_INJECTION: forcing a failure. [ 185.199988][ T6982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.200017][ T6982] CPU: 1 UID: 0 PID: 6982 Comm: syz.3.372 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 185.200039][ T6982] Tainted: [L]=SOFTLOCKUP [ 185.200044][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.200054][ T6982] Call Trace: [ 185.200059][ T6982] [ 185.200066][ T6982] dump_stack_lvl+0xe8/0x150 [ 185.200099][ T6982] should_fail_ex+0x46b/0x600 [ 185.200122][ T6982] strncpy_from_user+0x36/0x2b0 [ 185.200143][ T6982] do_getname+0x77/0x250 [ 185.200163][ T6982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.200181][ T6982] __se_sys_mkdirat+0x24/0x150 [ 185.200198][ T6982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.200215][ T6982] do_syscall_64+0x15f/0xf80 [ 185.200237][ T6982] ? trace_irq_disable+0x3b/0x140 [ 185.200254][ T6982] ? clear_bhb_loop+0x40/0x90 [ 185.200273][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.200289][ T6982] RIP: 0033:0x7f393adec819 [ 185.200303][ T6982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.200317][ T6982] RSP: 002b:00007f3939046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 185.200334][ T6982] RAX: ffffffffffffffda RBX: 00007f393b065fa0 RCX: 00007f393adec819 [ 185.200346][ T6982] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 185.200357][ T6982] RBP: 00007f3939046090 R08: 0000000000000000 R09: 0000000000000000 [ 185.200367][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.200376][ T6982] R13: 00007f393b066038 R14: 00007f393b065fa0 R15: 00007ffd3f24d3d8 [ 185.200400][ T6982] [ 185.498642][ T48] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 185.661888][ T48] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 185.661921][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.696874][ T48] usb 2-1: config 0 descriptor?? [ 185.713646][ T48] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 185.921656][ T6979] netlink: 128 bytes leftover after parsing attributes in process `syz.1.370'. [ 186.974505][ T48] gspca_sunplus: reg_w_riv err -110 [ 186.974598][ T48] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 187.116838][ T5931] IPVS: starting estimator thread 0... [ 187.216226][ T7009] IPVS: using max 7 ests per chain, 16800 per kthread [ 187.532144][ T7017] IPVS: Scheduler module ip_vs_sip not found [ 187.924406][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 188.389561][ T7041] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 188.541410][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.395'. [ 188.543192][ T7049] Unknown options in mask b7f2 [ 189.070970][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 190.730502][ T7083] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.734597][ T7083] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.734857][ T7083] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.735061][ T7083] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.735362][ T7083] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 190.820118][ T5971] usb 2-1: USB disconnect, device number 11 [ 190.873350][ T7111] FAULT_INJECTION: forcing a failure. [ 190.873350][ T7111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.873394][ T7111] CPU: 0 UID: 0 PID: 7111 Comm: syz.4.416 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 190.873433][ T7111] Tainted: [L]=SOFTLOCKUP [ 190.873442][ T7111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 190.873455][ T7111] Call Trace: [ 190.873463][ T7111] [ 190.873472][ T7111] dump_stack_lvl+0xe8/0x150 [ 190.873514][ T7111] should_fail_ex+0x46b/0x600 [ 190.873546][ T7111] _copy_to_user+0x31/0xb0 [ 190.873579][ T7111] simple_read_from_buffer+0xe1/0x170 [ 190.873616][ T7111] proc_fail_nth_read+0x1be/0x230 [ 190.873651][ T7111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.873684][ T7111] ? rw_verify_area+0x2ac/0x4e0 [ 190.873716][ T7111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.873747][ T7111] vfs_read+0x212/0xa80 [ 190.873790][ T7111] ? __pfx_vfs_read+0x10/0x10 [ 190.873826][ T7111] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 190.873858][ T7111] ? lockdep_hardirqs_on+0x7a/0x110 [ 190.873889][ T7111] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 190.873922][ T7111] ? mutex_lock_nested+0x152/0x1d0 [ 190.873945][ T7111] ? fdget_pos+0x252/0x320 [ 190.873985][ T7111] ksys_read+0x156/0x270 [ 190.874021][ T7111] ? __pfx_ksys_read+0x10/0x10 [ 190.874066][ T7111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.874091][ T7111] do_syscall_64+0x15f/0xf80 [ 190.874122][ T7111] ? trace_irq_disable+0x3b/0x140 [ 190.874145][ T7111] ? clear_bhb_loop+0x40/0x90 [ 190.874173][ T7111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.874194][ T7111] RIP: 0033:0x7f0947e3d04e [ 190.874216][ T7111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 190.874235][ T7111] RSP: 002b:00007f09460b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.874258][ T7111] RAX: ffffffffffffffda RBX: 00007f09460b56c0 RCX: 00007f0947e3d04e [ 190.874282][ T7111] RDX: 000000000000000f RSI: 00007f09460b50a0 RDI: 0000000000000004 [ 190.874308][ T7111] RBP: 00007f09460b5090 R08: 0000000000000000 R09: 0000000000000000 [ 190.874320][ T7111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.874332][ T7111] R13: 00007f09480f6128 R14: 00007f09480f6090 R15: 00007fffc5ab3258 [ 190.874364][ T7111] [ 191.301477][ T7118] netlink: 'syz.1.417': attribute type 10 has an invalid length. [ 191.381695][ T59] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 191.512958][ T7118] team0: Device veth1_vlan failed to register rx_handler [ 191.820287][ T7136] netlink: 'syz.3.426': attribute type 4 has an invalid length. [ 191.886472][ T7140] comedi: valid board names for 8255 driver are: [ 191.886486][ T7140] 8255 [ 191.886490][ T7140] comedi: valid board names for vmk80xx driver are: [ 191.886497][ T7140] vmk80xx [ 191.886502][ T7140] comedi: valid board names for usbduxsigma driver are: [ 191.886508][ T7140] usbduxsigma [ 191.886513][ T7140] comedi: valid board names for usbduxfast driver are: [ 191.886519][ T7140] usbduxfast [ 191.886524][ T7140] comedi: valid board names for usbdux driver are: [ 191.886530][ T7140] usbdux [ 191.886534][ T7140] comedi: valid board names for ni6501 driver are: [ 191.886540][ T7140] ni6501 [ 191.886544][ T7140] comedi: valid board names for dt9812 driver are: [ 191.886551][ T7140] dt9812 [ 191.886556][ T7140] comedi: valid board names for ni_labpc_cs driver are: [ 191.886563][ T7140] ni_labpc_cs [ 191.886568][ T7140] comedi: valid board names for ni_daq_700 driver are: [ 191.886574][ T7140] ni_daq_700 [ 191.886580][ T7140] comedi: valid board names for labpc_pci driver are: [ 191.886586][ T7140] labpc_pci [ 191.886591][ T7140] comedi: valid board names for adl_pci9118 driver are: [ 191.886598][ T7140] pci9118dg [ 191.886602][ T7140] pci9118hg [ 191.886607][ T7140] pci9118hr [ 191.886612][ T7140] comedi: valid board names for 8255_pci driver are: [ 191.886619][ T7140] 8255_pci [ 191.886624][ T7140] comedi: valid board names for s526 driver are: [ 191.886630][ T7140] s526 [ 191.886636][ T7140] comedi: valid board names for multiq3 driver are: [ 191.886642][ T7140] multiq3 [ 191.886647][ T7140] comedi: valid board names for pcmuio driver are: [ 191.886653][ T7140] pcmuio48 [ 191.886659][ T7140] pcmuio96 [ 191.886663][ T7140] comedi: valid board names for pcmmio driver are: [ 191.886670][ T7140] pcmmio [ 191.886675][ T7140] comedi: valid board names for pcmda12 driver are: [ 191.886681][ T7140] pcmda12 [ 191.886686][ T7140] comedi: valid board names for pcmad driver are: [ 191.886693][ T7140] pcmad12 [ 191.886698][ T7140] pcmad16 [ 191.886703][ T7140] comedi: valid board names for ni_labpc driver are: [ 191.886710][ T7140] lab-pc-1200 [ 191.886715][ T7140] lab-pc-1200ai [ 191.886721][ T7140] lab-pc+ [ 191.886726][ T7140] comedi: valid board names for atmio16 driver are: [ 191.886732][ T7140] atmio16 [ 191.886737][ T7140] atmio16d [ 191.886742][ T7140] comedi: valid board names for ni_at_ao driver are: [ 191.886749][ T7140] at-ao-6 [ 191.886753][ T7140] at-ao-10 [ 191.886758][ T7140] comedi: valid board names for ni_at_a2150 driver are: [ 191.886766][ T7140] ni_at_a2150 [ 191.886771][ T7140] comedi: valid board names for adq12b driver are: [ 191.886778][ T7140] adq12b [ 191.886783][ T7140] comedi: valid board names for mpc624 driver are: [ 191.886790][ T7140] mpc624 [ 191.886795][ T7140] comedi: valid board names for c6xdigio driver are: [ 191.886801][ T7140] c6xdigio [ 191.886806][ T7140] comedi: valid board names for aio_iiro_16 driver are: [ 191.886812][ T7140] aio_iiro_16 [ 191.886817][ T7140] comedi: valid board names for aio_aio12_8 driver are: [ 191.886824][ T7140] aio_aio12_8 [ 191.886829][ T7140] aio_ai12_8 [ 191.886834][ T7140] aio_ao12_4 [ 191.886841][ T7140] comedi: valid board names for fl512 driver are: [ 191.886849][ T7140] fl512 [ 191.886853][ T7140] comedi: valid board names for dmm32at driver are: [ 191.886859][ T7140] dmm32at [ 191.886863][ T7140] comedi: valid board names for dt282x driver are: [ 191.886869][ T7140] dt2821 [ 191.886874][ T7140] dt2821-f [ 191.886878][ T7140] dt2821-g [ 191.886882][ T7140] dt2823 [ 191.886887][ T7140] dt2824-pgh [ 191.886891][ T7140] dt2824-pgl [ 191.886895][ T7140] dt2825 [ 191.886900][ T7140] dt2827 [ 191.886904][ T7140] dt2828 [ 192.104012][ T7140] dt2829 [ 192.104054][ T7140] dt21-ez [ 192.104114][ T7140] dt23-ez [ 192.104127][ T7140] dt24-ez [ 192.104144][ T7140] dt24-ez-pgl [ 192.104167][ T7140] comedi: valid board names for dt2817 driver are: [ 192.104194][ T7140] dt2817 [ 192.104211][ T7140] comedi: valid board names for dt2815 driver are: [ 192.104230][ T7140] dt2815 [ 192.104248][ T7140] comedi: valid board names for dt2814 driver are: [ 192.104268][ T7140] dt2814 [ 192.104285][ T7140] comedi: valid board names for dt2811 driver are: [ 192.104305][ T7140] dt2811-pgh [ 192.104323][ T7140] dt2811-pgl [ 192.104342][ T7140] comedi: valid board names for dt2801 driver are: [ 192.104362][ T7140] dt2801 [ 192.104380][ T7140] comedi: valid board names for das6402 driver are: [ 192.104408][ T7140] das6402-12 [ 192.104421][ T7140] das6402-16 [ 192.104426][ T7140] comedi: valid board names for das1800 driver are: [ 192.104445][ T7140] das-1701st [ 192.104462][ T7140] das-1701st-da [ 192.104479][ T7140] das-1702st [ 192.104497][ T7140] das-1702st-da [ 192.104509][ T7140] das-1702hr [ 192.104527][ T7140] das-1702hr-da [ 192.104544][ T7140] das-1701ao [ 192.104555][ T7140] das-1702ao [ 192.104572][ T7140] das-1801st [ 192.104591][ T7140] das-1801st-da [ 192.104610][ T7140] das-1802st [ 192.104633][ T7140] das-1802st-da [ 192.104656][ T7140] das-1802hr [ 192.104674][ T7140] das-1802hr-da [ 192.104699][ T7140] das-1801hc [ 192.104723][ T7140] das-1802hc [ 192.104740][ T7140] das-1801ao [ 192.104751][ T7140] das-1802ao [ 192.104771][ T7140] comedi: valid board names for das800 driver are: [ 192.104790][ T7140] das-800 [ 192.104807][ T7140] cio-das800 [ 192.104824][ T7140] das-801 [ 192.104842][ T7140] cio-das801 [ 192.104855][ T7140] das-802 [ 192.104872][ T7140] cio-das802 [ 192.104889][ T7140] cio-das802/16 [ 192.104906][ T7140] comedi: valid board names for isa-das08 driver are: [ 192.104927][ T7140] isa-das08 [ 192.104944][ T7140] das08-pgm [ 192.104955][ T7140] das08-pgh [ 192.104972][ T7140] das08-pgl [ 192.104989][ T7140] das08-aoh [ 192.105006][ T7140] das08-aol [ 192.105212][ T7140] das08-aom [ 192.105231][ T7140] das08/jr-ao [ 192.105248][ T7140] das08jr-16-ao [ 192.105266][ T7140] pc104-das08 [ 192.105278][ T7140] das08jr/16 [ 192.105297][ T7140] comedi: valid board names for das16m1 driver are: [ 192.105321][ T7140] das16m1 [ 192.105333][ T7140] comedi: valid board names for dac02 driver are: [ 192.105358][ T7140] dac02 [ 192.105370][ T7140] comedi: valid board names for rti802 driver are: [ 192.105389][ T7140] rti802 [ 192.105412][ T7140] comedi: valid board names for rti800 driver are: [ 192.105433][ T7140] rti800 [ 192.105450][ T7140] rti815 [ 192.105462][ T7140] comedi: valid board names for pcm3724 driver are: [ 192.105516][ T7140] pcm3724 [ 192.113441][ T7140] comedi: valid board names for pcl818 driver are: [ 192.113452][ T7140] pcl818l [ 192.113458][ T7140] pcl818h [ 192.113465][ T7140] pcl818hd [ 192.113470][ T7140] pcl818hg [ 192.113476][ T7140] pcl818 [ 192.113482][ T7140] pcl718 [ 192.113487][ T7140] pcm3718 [ 192.113493][ T7140] comedi: valid board names for pcl816 driver are: [ 192.113502][ T7140] pcl816 [ 192.113507][ T7140] pcl814b [ 192.113513][ T7140] comedi: valid board names for pcl812 driver are: [ 192.113522][ T7140] pcl812 [ 192.113527][ T7140] pcl812pg [ 192.113534][ T7140] acl8112pg [ 192.113539][ T7140] acl8112dg [ 192.113545][ T7140] acl8112hg [ 192.113550][ T7140] a821pgl [ 192.113556][ T7140] a821pglnda [ 192.113562][ T7140] a821pgh [ 192.113568][ T7140] a822pgl [ 192.113573][ T7140] a822pgh [ 192.113579][ T7140] a823pgl [ 192.113584][ T7140] a823pgh [ 192.113590][ T7140] pcl813 [ 192.113595][ T7140] pcl813b [ 192.113601][ T7140] acl8113 [ 192.113606][ T7140] iso813 [ 192.113612][ T7140] acl8216 [ 192.113617][ T7140] a826pg [ 192.113623][ T7140] comedi: valid board names for pcl730 driver are: [ 192.113632][ T7140] pcl730 [ 192.113637][ T7140] iso730 [ 192.113643][ T7140] acl7130 [ 192.113649][ T7140] pcm3730 [ 192.113654][ T7140] pcl725 [ 192.113660][ T7140] p8r8dio [ 192.113666][ T7140] acl7225b [ 192.113671][ T7140] p16r16dio [ 192.113677][ T7140] pcl733 [ 192.113682][ T7140] pcl734 [ 192.113688][ T7140] opmm-1616-xt [ 192.113694][ T7140] pearl-mm-p [ 192.113700][ T7140] ir104-pbf [ 192.113706][ T7140] comedi: valid board names for pcl726 driver are: [ 192.113714][ T7140] pcl726 [ 192.113720][ T7140] pcl727 [ 192.113726][ T7140] pcl728 [ 192.113731][ T7140] acl6126 [ 192.113737][ T7140] acl6128 [ 192.113742][ T7140] comedi: valid board names for pcl724 driver are: [ 192.113751][ T7140] pcl724 [ 192.113756][ T7140] pcl722 [ 192.113762][ T7140] pcl731 [ 192.113768][ T7140] acl7122 [ 192.113774][ T7140] acl7124 [ 192.113779][ T7140] pet48dio [ 192.113785][ T7140] pcmio48 [ 192.113791][ T7140] onyx-mm-dio [ 192.113797][ T7140] comedi: valid board names for pcl711 driver are: [ 192.113805][ T7140] pcl711 [ 192.113810][ T7140] pcl711b [ 192.113816][ T7140] acl8112hg [ 192.113822][ T7140] acl8112dg [ 192.113827][ T7140] comedi: valid board names for amplc_pc263 driver are: [ 192.113836][ T7140] pc263 [ 192.113842][ T7140] comedi: valid board names for amplc_pc236 driver are: [ 192.113851][ T7140] pc36at [ 192.113856][ T7140] comedi: valid board names for amplc_dio200 driver are: [ 192.113865][ T7140] pc212e [ 192.113871][ T7140] pc214e [ 192.113877][ T7140] pc215e [ 192.113883][ T7140] pc218e [ 192.113888][ T7140] pc272e [ 192.113894][ T7140] comedi: valid board names for comedi_parport driver are: [ 192.113902][ T7140] comedi_parport [ 192.113908][ T7140] comedi: valid board names for comedi_test driver are: [ 192.113917][ T7140] comedi_test [ 192.113922][ T7140] comedi: valid board names for comedi_bond driver are: [ 192.113931][ T7140] comedi_bond [ 192.195961][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.766119][ T5816] Bluetooth: hci3: command 0x0c1a tx timeout [ 192.766158][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.766216][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 193.553774][ T7170] FAULT_INJECTION: forcing a failure. [ 193.553774][ T7170] name failslab, interval 1, probability 0, space 0, times 0 [ 193.553810][ T7170] CPU: 0 UID: 0 PID: 7170 Comm: syz.4.439 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 193.553837][ T7170] Tainted: [L]=SOFTLOCKUP [ 193.553844][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 193.553857][ T7170] Call Trace: [ 193.553865][ T7170] [ 193.553873][ T7170] dump_stack_lvl+0xe8/0x150 [ 193.553910][ T7170] should_fail_ex+0x46b/0x600 [ 193.553940][ T7170] should_failslab+0xa8/0x100 [ 193.553963][ T7170] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 193.553995][ T7170] ? __alloc_skb+0x1d0/0x7d0 [ 193.554024][ T7170] ? lockdep_hardirqs_on+0x7a/0x110 [ 193.554069][ T7170] __alloc_skb+0x1d0/0x7d0 [ 193.554111][ T7170] netlink_sendmsg+0x5d4/0xb40 [ 193.554151][ T7170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.554188][ T7170] ? unwind_get_return_address+0x4d/0x90 [ 193.554214][ T7170] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 193.554244][ T7170] ____sys_sendmsg+0x94c/0x9c0 [ 193.554275][ T7170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.554307][ T7170] ? import_iovec+0x73/0xa0 [ 193.554335][ T7170] ___sys_sendmsg+0x2a5/0x360 [ 193.554359][ T7170] ? __lock_acquire+0x6b5/0x2cf0 [ 193.554385][ T7170] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.554441][ T7170] ? __fget_files+0x2a/0x420 [ 193.554465][ T7170] ? __fget_files+0x3a6/0x420 [ 193.554501][ T7170] __x64_sys_sendmsg+0x1c3/0x2a0 [ 193.554528][ T7170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.554561][ T7170] ? __pfx_ksys_write+0x10/0x10 [ 193.554586][ T7170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.554607][ T7170] do_syscall_64+0x15f/0xf80 [ 193.554632][ T7170] ? trace_irq_disable+0x3b/0x140 [ 193.554651][ T7170] ? clear_bhb_loop+0x40/0x90 [ 193.554676][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.554694][ T7170] RIP: 0033:0x7f0947e7c819 [ 193.554712][ T7170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.554729][ T7170] RSP: 002b:00007f09460d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.554749][ T7170] RAX: ffffffffffffffda RBX: 00007f09480f5fa0 RCX: 00007f0947e7c819 [ 193.554763][ T7170] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 193.554775][ T7170] RBP: 00007f09460d6090 R08: 0000000000000000 R09: 0000000000000000 [ 193.554786][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.554797][ T7170] R13: 00007f09480f6038 R14: 00007f09480f5fa0 R15: 00007fffc5ab3258 [ 193.554821][ T7170] [ 194.281753][ T7179] FAULT_INJECTION: forcing a failure. [ 194.281753][ T7179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.281792][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.4.443 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 194.281821][ T7179] Tainted: [L]=SOFTLOCKUP [ 194.281829][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 194.281842][ T7179] Call Trace: [ 194.281851][ T7179] [ 194.281861][ T7179] dump_stack_lvl+0xe8/0x150 [ 194.281914][ T7179] should_fail_ex+0x46b/0x600 [ 194.281952][ T7179] _copy_to_user+0x31/0xb0 [ 194.281994][ T7179] simple_read_from_buffer+0xe1/0x170 [ 194.282025][ T7179] proc_fail_nth_read+0x1be/0x230 [ 194.282057][ T7179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.282088][ T7179] ? rw_verify_area+0x2ac/0x4e0 [ 194.282117][ T7179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.282143][ T7179] vfs_read+0x212/0xa80 [ 194.282181][ T7179] ? __pfx_vfs_read+0x10/0x10 [ 194.282213][ T7179] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 194.282242][ T7179] ? lockdep_hardirqs_on+0x7a/0x110 [ 194.282268][ T7179] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 194.282297][ T7179] ? mutex_lock_nested+0x152/0x1d0 [ 194.282317][ T7179] ? fdget_pos+0x252/0x320 [ 194.282351][ T7179] ksys_read+0x156/0x270 [ 194.282382][ T7179] ? __pfx_ksys_read+0x10/0x10 [ 194.282421][ T7179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.282442][ T7179] do_syscall_64+0x15f/0xf80 [ 194.282468][ T7179] ? trace_irq_disable+0x3b/0x140 [ 194.282487][ T7179] ? clear_bhb_loop+0x40/0x90 [ 194.282512][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.282530][ T7179] RIP: 0033:0x7f0947e3d04e [ 194.282549][ T7179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.282564][ T7179] RSP: 002b:00007f09460d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 194.282584][ T7179] RAX: ffffffffffffffda RBX: 00007f09460d66c0 RCX: 00007f0947e3d04e [ 194.282599][ T7179] RDX: 000000000000000f RSI: 00007f09460d60a0 RDI: 0000000000000004 [ 194.282611][ T7179] RBP: 00007f09460d6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.282622][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.282633][ T7179] R13: 00007f09480f6038 R14: 00007f09480f5fa0 R15: 00007fffc5ab3258 [ 194.282663][ T7179] [ 194.388315][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.388396][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.419451][ T7155] syz.0.431 (7155) used greatest stack depth: 15872 bytes left [ 195.390577][ T7182] netlink: 72 bytes leftover after parsing attributes in process `syz.1.441'. [ 195.424735][ T59] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 195.425496][ T59] Bluetooth: hci2: Injecting HCI hardware error event [ 195.443182][ T5823] Bluetooth: hci2: hardware error 0x00 [ 196.098935][ T7171] FAULT_INJECTION: forcing a failure. [ 196.098935][ T7171] name fail_futex, interval 1, probability 0, space 0, times 1 [ 196.098974][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.3.438 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 196.099000][ T7171] Tainted: [L]=SOFTLOCKUP [ 196.099013][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.099025][ T7171] Call Trace: [ 196.099032][ T7171] [ 196.099040][ T7171] dump_stack_lvl+0xe8/0x150 [ 196.099077][ T7171] should_fail_ex+0x46b/0x600 [ 196.099106][ T7171] get_futex_key+0x8d1/0x1590 [ 196.099133][ T7171] ? perf_lock_task_context+0x785/0x850 [ 196.099165][ T7171] ? __pfx_get_futex_key+0x10/0x10 [ 196.099186][ T7171] ? __lock_acquire+0x6b5/0x2cf0 [ 196.099211][ T7171] ? __lock_acquire+0x6b5/0x2cf0 [ 196.099241][ T7171] futex_wake+0x114/0x580 [ 196.099275][ T7171] ? __pfx_futex_wake+0x10/0x10 [ 196.099304][ T7171] ? do_raw_spin_lock+0x12b/0x2f0 [ 196.099352][ T7171] do_futex+0x395/0x420 [ 196.099377][ T7171] ? __might_fault+0xaf/0x130 [ 196.099402][ T7171] ? __pfx_do_futex+0x10/0x10 [ 196.099443][ T7171] ? __might_fault+0xaf/0x130 [ 196.099465][ T7171] mm_release+0x101/0x290 [ 196.099497][ T7171] exit_mm+0x51/0x250 [ 196.099518][ T7171] ? unwind_deferred_task_exit+0x67/0xa0 [ 196.099546][ T7171] do_exit+0x6a2/0x22c0 [ 196.099571][ T7171] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 196.099603][ T7171] ? __pfx_do_exit+0x10/0x10 [ 196.099624][ T7171] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 196.099646][ T7171] ? reacquire_held_locks+0x104/0x190 [ 196.099672][ T7171] ? rt_spin_lock+0x1e0/0x400 [ 196.099705][ T7171] do_group_exit+0x21b/0x2d0 [ 196.099728][ T7171] ? rt_spin_unlock+0x160/0x200 [ 196.099753][ T7171] get_signal+0x125c/0x1310 [ 196.099806][ T7171] arch_do_signal_or_restart+0xbc/0x830 [ 196.099838][ T7171] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 196.099872][ T7171] ? ksys_write+0x248/0x270 [ 196.099897][ T7171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.099919][ T7171] exit_to_user_mode_loop+0x86/0x480 [ 196.099939][ T7171] ? rcu_is_watching+0x15/0xb0 [ 196.099965][ T7171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.099986][ T7171] do_syscall_64+0x33e/0xf80 [ 196.100041][ T7171] ? clear_bhb_loop+0x40/0x90 [ 196.100066][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.100088][ T7171] RIP: 0033:0x7f393adec819 [ 196.100107][ T7171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.100123][ T7171] RSP: 002b:00007f3939025028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 196.100145][ T7171] RAX: fffffffffffffe00 RBX: 00007f393b066090 RCX: 00007f393adec819 [ 196.100160][ T7171] RDX: fffffffffffffd0b RSI: 0000200000000080 RDI: 0000000000000003 [ 196.100174][ T7171] RBP: 00007f3939025090 R08: 0000000000000000 R09: fffffffffffffd25 [ 196.100188][ T7171] R10: 00000000c9100120 R11: 0000000000000246 R12: 0000000000000001 [ 196.100201][ T7171] R13: 00007f393b066128 R14: 00007f393b066090 R15: 00007ffd3f24d3d8 [ 196.100232][ T7171] [ 196.922152][ T7195] FAULT_INJECTION: forcing a failure. [ 196.922152][ T7195] name failslab, interval 1, probability 0, space 0, times 0 [ 196.922187][ T7195] CPU: 1 UID: 0 PID: 7195 Comm: syz.0.449 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 196.922213][ T7195] Tainted: [L]=SOFTLOCKUP [ 196.922220][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.922232][ T7195] Call Trace: [ 196.922239][ T7195] [ 196.922247][ T7195] dump_stack_lvl+0xe8/0x150 [ 196.922282][ T7195] should_fail_ex+0x46b/0x600 [ 196.922310][ T7195] should_failslab+0xa8/0x100 [ 196.922332][ T7195] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 196.922362][ T7195] ? __alloc_skb+0x1d0/0x7d0 [ 196.922382][ T7195] ? lockdep_hardirqs_on+0x7a/0x110 [ 196.922415][ T7195] __alloc_skb+0x1d0/0x7d0 [ 196.922440][ T7195] netlink_sendmsg+0x5d4/0xb40 [ 196.922472][ T7195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.922494][ T7195] ? unwind_get_return_address+0x4d/0x90 [ 196.922520][ T7195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.922550][ T7195] ____sys_sendmsg+0x94c/0x9c0 [ 196.922580][ T7195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.922613][ T7195] ? import_iovec+0x73/0xa0 [ 196.922643][ T7195] ___sys_sendmsg+0x2a5/0x360 [ 196.922667][ T7195] ? __lock_acquire+0x6b5/0x2cf0 [ 196.922700][ T7195] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.922757][ T7195] ? __fget_files+0x2a/0x420 [ 196.922782][ T7195] ? __fget_files+0x3a6/0x420 [ 196.922816][ T7195] __x64_sys_sendmsg+0x1c3/0x2a0 [ 196.922844][ T7195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.922877][ T7195] ? __pfx_ksys_write+0x10/0x10 [ 196.922903][ T7195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.922924][ T7195] do_syscall_64+0x15f/0xf80 [ 196.922952][ T7195] ? trace_irq_disable+0x3b/0x140 [ 196.922971][ T7195] ? clear_bhb_loop+0x40/0x90 [ 196.922994][ T7195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.923013][ T7195] RIP: 0033:0x7fd51170c819 [ 196.923030][ T7195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.923047][ T7195] RSP: 002b:00007fd50f966028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.923067][ T7195] RAX: ffffffffffffffda RBX: 00007fd511985fa0 RCX: 00007fd51170c819 [ 196.923082][ T7195] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 196.923093][ T7195] RBP: 00007fd50f966090 R08: 0000000000000000 R09: 0000000000000000 [ 196.923108][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.923119][ T7195] R13: 00007fd511986038 R14: 00007fd511985fa0 R15: 00007fff9bc2f998 [ 196.923149][ T7195] [ 198.122110][ T5823] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 199.260264][ T5897] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 199.469833][ T5897] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 199.469864][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.469884][ T5897] usb 3-1: Product: syz [ 199.469898][ T5897] usb 3-1: Manufacturer: syz [ 199.469912][ T5897] usb 3-1: SerialNumber: syz [ 199.561888][ T5897] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 199.752520][ T5931] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 199.983043][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.983652][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.194076][ T36] audit: type=1804 audit(1776680781.187:267): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.477" name="/newroot/67/file0" dev="tmpfs" ino=364 res=1 errno=0 [ 201.335215][ T5931] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 201.417960][ T822] usb 3-1: USB disconnect, device number 16 [ 201.516797][ T7275] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 201.516823][ T7275] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.517007][ T5931] ath9k_htc: Failed to initialize the device [ 201.582116][ T822] usb 3-1: ath9k_htc: USB layer deinitialized [ 201.638280][ T7275] vhci_hcd vhci_hcd.0: Device attached [ 201.653539][ T7279] vhci_hcd: connection closed [ 201.678747][ T7285] Bluetooth: MGMT ver 1.23 [ 201.678785][ T7285] Bluetooth: hci0: invalid len left 7, exp >= 108 [ 201.738154][ T7223] vhci_hcd vhci_hcd.1: stop threads [ 201.744144][ T7223] vhci_hcd vhci_hcd.1: release socket [ 201.744274][ T7223] vhci_hcd vhci_hcd.1: disconnect device [ 201.779237][ T7284] Bluetooth: hci0: invalid len left 7, exp >= 108 [ 202.099931][ T7296] netlink: 100 bytes leftover after parsing attributes in process `syz.2.490'. [ 202.377279][ T822] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 202.528029][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 202.548333][ T822] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 202.548361][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.548386][ T822] usb 1-1: Product: syz [ 202.548407][ T822] usb 1-1: Manufacturer: syz [ 202.548420][ T822] usb 1-1: SerialNumber: syz [ 202.557863][ T822] usb 1-1: config 0 descriptor?? [ 202.561275][ T7303] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.561457][ T7303] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.635828][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 202.643622][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 202.654641][ T822] port100 1-1:0.0: NFC: Could not get supported command types [ 202.766640][ T7302] delete_channel: no stack [ 203.778746][ T7338] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 203.785728][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.505'. [ 204.286041][ T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 204.438665][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 204.442570][ T9] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 204.442596][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.442615][ T9] usb 2-1: Product: syz [ 204.442628][ T9] usb 2-1: Manufacturer: syz [ 204.442641][ T9] usb 2-1: SerialNumber: syz [ 204.726966][ T9] usb 2-1: MBOX3: Invalid descriptor size=103. [ 204.745042][ T9] usb 2-1: MBOX3: Invalid descriptor size=103. [ 204.761036][ T9] usb 2-1: MBOX3: Invalid descriptor size=103. [ 204.764795][ T9] usb 2-1: USB disconnect, device number 12 [ 206.546773][ T7406] netlink: 23 bytes leftover after parsing attributes in process `syz.1.534'. [ 206.611386][ T7409] netlink: 68 bytes leftover after parsing attributes in process `syz.1.534'. [ 206.885127][ T7381] atomic_op ffff888035c25a18 conn xmit_atomic 0000000000000000 [ 207.165975][ T5931] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 207.209440][ T48] usb 1-1: USB disconnect, device number 13 [ 207.328320][ T5931] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 207.334476][ T5931] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 207.334505][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.334524][ T5931] usb 2-1: Product: syz [ 207.334538][ T5931] usb 2-1: Manufacturer: syz [ 207.334551][ T5931] usb 2-1: SerialNumber: syz [ 207.411412][ T36] audit: type=1326 audit(1776680788.487:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7433 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 207.411462][ T36] audit: type=1326 audit(1776680788.487:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7433 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 207.411499][ T36] audit: type=1326 audit(1776680788.487:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7433 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 207.411536][ T36] audit: type=1326 audit(1776680788.487:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7433 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 207.412145][ T36] audit: type=1326 audit(1776680788.487:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7433 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 207.412228][ T36] audit: type=1326 audit(1776680788.487:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7433 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 207.412265][ T36] audit: type=1326 audit(1776680788.487:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7433 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 207.412298][ T36] audit: type=1326 audit(1776680788.487:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7433 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 207.412327][ T36] audit: type=1326 audit(1776680788.487:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7433 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 207.412609][ T36] audit: type=1326 audit(1776680788.487:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7433 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f393adec819 code=0x7ffc0000 [ 207.775097][ T5931] usb 2-1: MBOX3: Invalid descriptor size=103. [ 207.815382][ T5931] usb 2-1: MBOX3: Invalid descriptor size=103. [ 207.890405][ T7441] FAULT_INJECTION: forcing a failure. [ 207.890405][ T7441] name failslab, interval 1, probability 0, space 0, times 0 [ 207.890440][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: syz.4.549 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 207.890465][ T7441] Tainted: [L]=SOFTLOCKUP [ 207.890472][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 207.890484][ T7441] Call Trace: [ 207.890491][ T7441] [ 207.890499][ T7441] dump_stack_lvl+0xe8/0x150 [ 207.890532][ T7441] should_fail_ex+0x46b/0x600 [ 207.890560][ T7441] should_failslab+0xa8/0x100 [ 207.890595][ T7441] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 207.890643][ T7441] ? __alloc_skb+0x1d0/0x7d0 [ 207.890663][ T7441] ? lockdep_hardirqs_on+0x7a/0x110 [ 207.890697][ T7441] __alloc_skb+0x1d0/0x7d0 [ 207.890723][ T7441] netlink_sendmsg+0x5d4/0xb40 [ 207.890755][ T7441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.890799][ T7441] ? unwind_get_return_address+0x4d/0x90 [ 207.890828][ T7441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.890871][ T7441] ____sys_sendmsg+0x94c/0x9c0 [ 207.890905][ T7441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.890943][ T7441] ? import_iovec+0x73/0xa0 [ 207.890977][ T7441] ___sys_sendmsg+0x2a5/0x360 [ 207.891002][ T7441] ? __lock_acquire+0x6b5/0x2cf0 [ 207.891036][ T7441] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.891100][ T7441] ? __fget_files+0x2a/0x420 [ 207.891128][ T7441] ? __fget_files+0x3a6/0x420 [ 207.891169][ T7441] __x64_sys_sendmsg+0x1c3/0x2a0 [ 207.891199][ T7441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.891237][ T7441] ? __pfx_ksys_write+0x10/0x10 [ 207.891267][ T7441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.891292][ T7441] do_syscall_64+0x15f/0xf80 [ 207.891321][ T7441] ? trace_irq_disable+0x3b/0x140 [ 207.891343][ T7441] ? clear_bhb_loop+0x40/0x90 [ 207.891370][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.891392][ T7441] RIP: 0033:0x7f0947e7c819 [ 207.891413][ T7441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.891431][ T7441] RSP: 002b:00007f09460d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.891454][ T7441] RAX: ffffffffffffffda RBX: 00007f09480f5fa0 RCX: 00007f0947e7c819 [ 207.891470][ T7441] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 207.891483][ T7441] RBP: 00007f09460d6090 R08: 0000000000000000 R09: 0000000000000000 [ 207.891497][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.891509][ T7441] R13: 00007f09480f6038 R14: 00007f09480f5fa0 R15: 00007fffc5ab3258 [ 207.891544][ T7441] [ 207.942652][ T5931] usb 2-1: MBOX3: Invalid descriptor size=103. [ 208.199818][ T5931] usb 2-1: USB disconnect, device number 13 [ 208.673201][ T7459] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 208.719316][ T7459] netlink: 72 bytes leftover after parsing attributes in process `syz.3.557'. [ 209.061812][ T7476] FAULT_INJECTION: forcing a failure. [ 209.061812][ T7476] name failslab, interval 1, probability 0, space 0, times 0 [ 209.061851][ T7476] CPU: 0 UID: 0 PID: 7476 Comm: syz.1.562 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 209.061880][ T7476] Tainted: [L]=SOFTLOCKUP [ 209.061887][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 209.061901][ T7476] Call Trace: [ 209.061909][ T7476] [ 209.061918][ T7476] dump_stack_lvl+0xe8/0x150 [ 209.061959][ T7476] should_fail_ex+0x46b/0x600 [ 209.062001][ T7476] should_failslab+0xa8/0x100 [ 209.062022][ T7476] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 209.062050][ T7476] ? __alloc_skb+0x1d0/0x7d0 [ 209.062068][ T7476] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.062102][ T7476] __alloc_skb+0x1d0/0x7d0 [ 209.062125][ T7476] netlink_sendmsg+0x5d4/0xb40 [ 209.062157][ T7476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.062181][ T7476] ? unwind_get_return_address+0x4d/0x90 [ 209.062206][ T7476] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.062238][ T7476] ____sys_sendmsg+0x94c/0x9c0 [ 209.062268][ T7476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.062299][ T7476] ? import_iovec+0x73/0xa0 [ 209.062328][ T7476] ___sys_sendmsg+0x2a5/0x360 [ 209.062351][ T7476] ? __lock_acquire+0x6b5/0x2cf0 [ 209.062377][ T7476] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.062433][ T7476] ? __fget_files+0x2a/0x420 [ 209.062457][ T7476] ? __fget_files+0x3a6/0x420 [ 209.062497][ T7476] __x64_sys_sendmsg+0x1c3/0x2a0 [ 209.062523][ T7476] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.062556][ T7476] ? __pfx_ksys_write+0x10/0x10 [ 209.062584][ T7476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.062608][ T7476] do_syscall_64+0x15f/0xf80 [ 209.062633][ T7476] ? trace_irq_disable+0x3b/0x140 [ 209.062651][ T7476] ? clear_bhb_loop+0x40/0x90 [ 209.062675][ T7476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.062693][ T7476] RIP: 0033:0x7fe6bf7bc819 [ 209.062711][ T7476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.062728][ T7476] RSP: 002b:00007fe6bda16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.062748][ T7476] RAX: ffffffffffffffda RBX: 00007fe6bfa35fa0 RCX: 00007fe6bf7bc819 [ 209.062762][ T7476] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 209.062774][ T7476] RBP: 00007fe6bda16090 R08: 0000000000000000 R09: 0000000000000000 [ 209.062786][ T7476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.062797][ T7476] R13: 00007fe6bfa36038 R14: 00007fe6bfa35fa0 R15: 00007fff8b6aa278 [ 209.062827][ T7476] [ 209.064625][ T7475] FAULT_INJECTION: forcing a failure. [ 209.064625][ T7475] name failslab, interval 1, probability 0, space 0, times 0 [ 209.064658][ T7475] CPU: 0 UID: 0 PID: 7475 Comm: syz.0.561 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 209.064684][ T7475] Tainted: [L]=SOFTLOCKUP [ 209.064691][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 209.064702][ T7475] Call Trace: [ 209.064709][ T7475] [ 209.064717][ T7475] dump_stack_lvl+0xe8/0x150 [ 209.064753][ T7475] should_fail_ex+0x46b/0x600 [ 209.064782][ T7475] should_failslab+0xa8/0x100 [ 209.064804][ T7475] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 209.064835][ T7475] ? __alloc_skb+0x1d0/0x7d0 [ 209.064856][ T7475] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.064888][ T7475] __alloc_skb+0x1d0/0x7d0 [ 209.064914][ T7475] netlink_sendmsg+0x5d4/0xb40 [ 209.064946][ T7475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.064970][ T7475] ? unwind_get_return_address+0x4d/0x90 [ 209.064997][ T7475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.065028][ T7475] ____sys_sendmsg+0x94c/0x9c0 [ 209.065059][ T7475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.065093][ T7475] ? import_iovec+0x73/0xa0 [ 209.065121][ T7475] ___sys_sendmsg+0x2a5/0x360 [ 209.065145][ T7475] ? __lock_acquire+0x6b5/0x2cf0 [ 209.065172][ T7475] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.065229][ T7475] ? __fget_files+0x2a/0x420 [ 209.065256][ T7475] ? __fget_files+0x3a6/0x420 [ 209.065290][ T7475] __x64_sys_sendmsg+0x1c3/0x2a0 [ 209.065317][ T7475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.065350][ T7475] ? __pfx_ksys_write+0x10/0x10 [ 209.065377][ T7475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.065400][ T7475] do_syscall_64+0x15f/0xf80 [ 209.065427][ T7475] ? trace_irq_disable+0x3b/0x140 [ 209.065447][ T7475] ? clear_bhb_loop+0x40/0x90 [ 209.065475][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.065519][ T7475] RIP: 0033:0x7fd51170c819 [ 209.065536][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.065553][ T7475] RSP: 002b:00007fd50f966028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.065572][ T7475] RAX: ffffffffffffffda RBX: 00007fd511985fa0 RCX: 00007fd51170c819 [ 209.065586][ T7475] RDX: 0000000000000808 RSI: 00002000000001c0 RDI: 0000000000000003 [ 209.065598][ T7475] RBP: 00007fd50f966090 R08: 0000000000000000 R09: 0000000000000000 [ 209.065609][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.065620][ T7475] R13: 00007fd511986038 R14: 00007fd511985fa0 R15: 00007fff9bc2f998 [ 209.065651][ T7475] [ 210.407204][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 210.568094][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 210.587930][ T9] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 210.587959][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.587978][ T9] usb 3-1: Product: syz [ 210.587991][ T9] usb 3-1: Manufacturer: syz [ 210.588005][ T9] usb 3-1: SerialNumber: syz [ 210.874718][ T9] usb 3-1: MBOX3: Invalid descriptor size=103. [ 210.930944][ T9] usb 3-1: MBOX3: Invalid descriptor size=103. [ 210.935831][ T9] usb 3-1: MBOX3: Invalid descriptor size=103. [ 210.958430][ T9] usb 3-1: USB disconnect, device number 17 [ 211.172513][ T7516] netlink: 52 bytes leftover after parsing attributes in process `syz.0.577'. [ 211.390433][ T7524] FAULT_INJECTION: forcing a failure. [ 211.390433][ T7524] name failslab, interval 1, probability 0, space 0, times 0 [ 211.390469][ T7524] CPU: 1 UID: 0 PID: 7524 Comm: syz.4.581 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 211.390496][ T7524] Tainted: [L]=SOFTLOCKUP [ 211.390503][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 211.390516][ T7524] Call Trace: [ 211.390524][ T7524] [ 211.390532][ T7524] dump_stack_lvl+0xe8/0x150 [ 211.390571][ T7524] should_fail_ex+0x46b/0x600 [ 211.390600][ T7524] should_failslab+0xa8/0x100 [ 211.390623][ T7524] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 211.390655][ T7524] ? __alloc_skb+0x1d0/0x7d0 [ 211.390676][ T7524] ? lockdep_hardirqs_on+0x7a/0x110 [ 211.390709][ T7524] __alloc_skb+0x1d0/0x7d0 [ 211.390736][ T7524] netlink_sendmsg+0x5d4/0xb40 [ 211.390786][ T7524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.390814][ T7524] ? unwind_get_return_address+0x4d/0x90 [ 211.390845][ T7524] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.390883][ T7524] ____sys_sendmsg+0x94c/0x9c0 [ 211.390918][ T7524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.390956][ T7524] ? import_iovec+0x73/0xa0 [ 211.390989][ T7524] ___sys_sendmsg+0x2a5/0x360 [ 211.391017][ T7524] ? __lock_acquire+0x6b5/0x2cf0 [ 211.391049][ T7524] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.391119][ T7524] ? __fget_files+0x2a/0x420 [ 211.391148][ T7524] ? __fget_files+0x3a6/0x420 [ 211.391189][ T7524] __x64_sys_sendmsg+0x1c3/0x2a0 [ 211.391221][ T7524] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.391266][ T7524] ? __pfx_ksys_write+0x10/0x10 [ 211.391297][ T7524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.391323][ T7524] do_syscall_64+0x15f/0xf80 [ 211.391354][ T7524] ? trace_irq_disable+0x3b/0x140 [ 211.391377][ T7524] ? clear_bhb_loop+0x40/0x90 [ 211.391405][ T7524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.391428][ T7524] RIP: 0033:0x7f0947e7c819 [ 211.391448][ T7524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.391467][ T7524] RSP: 002b:00007f09460d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.391490][ T7524] RAX: ffffffffffffffda RBX: 00007f09480f5fa0 RCX: 00007f0947e7c819 [ 211.391507][ T7524] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004 [ 211.391520][ T7524] RBP: 00007f09460d6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.391534][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.391547][ T7524] R13: 00007f09480f6038 R14: 00007f09480f5fa0 R15: 00007fffc5ab3258 [ 211.391581][ T7524] [ 212.009358][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 212.182705][ T5931] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 212.376068][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 212.386846][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short [ 212.392242][ T5931] usb 2-1: config 232 has an invalid interface number: 202 but max is 0 [ 212.392312][ T5931] usb 2-1: config 232 has no interface number 0 [ 212.392442][ T5931] usb 2-1: config 232 interface 202 has no altsetting 0 [ 212.429583][ T5931] usb 2-1: New USB device found, idVendor=10c4, idProduct=8856, bcdDevice=e4.53 [ 212.429614][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.429626][ T5931] usb 2-1: Product: syz [ 212.429636][ T5931] usb 2-1: Manufacturer: syz [ 212.429644][ T5931] usb 2-1: SerialNumber: syz [ 212.683421][ T7555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.683451][ T7555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.751386][ T5931] cp210x 2-1:232.202: cp210x converter detected [ 212.756546][ T5931] cp210x 2-1:232.202: failed to get vendor val 0x370b size 1: -71 [ 212.756622][ T5931] cp210x 2-1:232.202: querying part number failed [ 213.033802][ T7555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.034735][ T7555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.477601][ T5931] usb 2-1: cp210x converter now attached to ttyUSB0 [ 213.546554][ T5931] usb 2-1: USB disconnect, device number 14 [ 213.660523][ T7559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.741308][ T5931] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 213.742166][ T5931] cp210x 2-1:232.202: device disconnected [ 213.845942][ T822] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 213.996744][ T822] usb 4-1: Using ep0 maxpacket: 16 [ 214.002418][ T822] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.003839][ T822] usb 4-1: config 4 has an invalid interface number: 6 but max is 0 [ 214.003862][ T822] usb 4-1: config 4 has no interface number 0 [ 214.044355][ T822] usb 4-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=15.b8 [ 214.044383][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.044402][ T822] usb 4-1: Product: syz [ 214.044416][ T822] usb 4-1: Manufacturer: syz [ 214.044429][ T822] usb 4-1: SerialNumber: syz [ 215.104520][ T822] rtl8150 4-1:4.6: couldn't find required endpoints [ 215.109037][ T822] rtl8150 4-1:4.6: probe with driver rtl8150 failed with error -5 [ 215.155684][ T822] usb 4-1: USB disconnect, device number 9 [ 215.184062][ T7573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.226996][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.227025][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.323821][ T5823] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 215.416879][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.416906][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.547948][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 215.636043][ T5931] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 215.705949][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 215.748389][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 215.754219][ T9] usb 3-1: config 4 has an invalid interface number: 6 but max is 0 [ 215.754242][ T9] usb 3-1: config 4 has no interface number 0 [ 215.804097][ T5931] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 215.804127][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.804145][ T5931] usb 2-1: Product: syz [ 215.804159][ T5931] usb 2-1: Manufacturer: syz [ 215.804172][ T5931] usb 2-1: SerialNumber: syz [ 215.835363][ T9] usb 3-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=15.b8 [ 215.835443][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.835490][ T9] usb 3-1: Product: syz [ 215.835521][ T9] usb 3-1: Manufacturer: syz [ 215.835559][ T9] usb 3-1: SerialNumber: syz [ 215.915417][ T5931] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 215.974165][ T5933] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 217.154639][ T5931] usb 2-1: USB disconnect, device number 15 [ 217.472041][ T5933] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 217.472258][ T5933] ath9k_htc: Failed to initialize the device [ 217.489559][ T5931] usb 2-1: ath9k_htc: USB layer deinitialized [ 217.589498][ T7606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.928957][ T9] rtl8150 3-1:4.6: couldn't find required endpoints [ 217.929220][ T9] rtl8150 3-1:4.6: probe with driver rtl8150 failed with error -5 [ 217.938271][ T7576] ------------[ cut here ]------------ [ 217.938286][ T7576] kcov->t != t [ 217.938305][ T7576] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.1.602/7576 [ 217.938358][ T7576] Modules linked in: [ 217.938385][ T7576] CPU: 1 UID: 0 PID: 7576 Comm: syz.1.602 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 217.938415][ T7576] Tainted: [L]=SOFTLOCKUP [ 217.938423][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 217.938438][ T7576] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 217.938474][ T7576] Code: 10 00 00 48 8b bb 90 00 00 00 e8 f6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 19 6e 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 7b 64 69 09 48 89 df be 03 00 [ 217.938493][ T7576] RSP: 0018:ffffc900053dfd20 EFLAGS: 00010283 [ 217.938512][ T7576] RAX: 5631468a59940200 RBX: ffff8880370aef00 RCX: 0000000000000000 [ 217.938529][ T7576] RDX: 000000004f210036 RSI: ffffffff8ba732c0 RDI: 00000000ffffffff [ 217.938545][ T7576] RBP: ffffc900053dfe78 R08: ffffffff8b2df740 R09: ffffffff8dfc80c0 [ 217.938562][ T7576] R10: dffffc0000000000 R11: fffffbfff1f1753f R12: dffffc0000000000 [ 217.938579][ T7576] R13: 0000000000000000 R14: ffff8880370aef08 R15: ffff88802adabd80 [ 217.938595][ T7576] FS: 000055558f5a6500(0000) GS:ffff888126204000(0000) knlGS:0000000000000000 [ 217.938623][ T7576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.938651][ T7576] CR2: 0000001b2fd24224 CR3: 0000000050ace000 CR4: 00000000003526f0 [ 217.938670][ T7576] Call Trace: [ 217.938678][ T7576] [ 217.938701][ T7576] do_exit+0x150/0x22c0 [ 217.938725][ T7576] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.938754][ T7576] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.938786][ T7576] ? reacquire_held_locks+0x104/0x190 [ 217.938812][ T7576] ? rt_spin_lock+0x1e0/0x400 [ 217.938834][ T7576] ? __pfx_do_exit+0x10/0x10 [ 217.938857][ T7576] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 217.938889][ T7576] ? rt_spin_unlock+0x160/0x200 [ 217.938914][ T7576] do_group_exit+0x21b/0x2d0 [ 217.938940][ T7576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.938962][ T7576] __x64_sys_exit_group+0x3f/0x40 [ 217.938986][ T7576] x64_sys_call+0x221a/0x2240 [ 217.939008][ T7576] do_syscall_64+0x15f/0xf80 [ 217.939034][ T7576] ? trace_irq_disable+0x3b/0x140 [ 217.939053][ T7576] ? clear_bhb_loop+0x40/0x90 [ 217.939077][ T7576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.939096][ T7576] RIP: 0033:0x7fe6bf7bc819 [ 217.939113][ T7576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.939128][ T7576] RSP: 002b:00007fff8b6aa5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 217.939148][ T7576] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe6bf7bc819 [ 217.939161][ T7576] RDX: 0000001b2fd24000 RSI: 0000000000000013 RDI: 0000000000000000 [ 217.939174][ T7576] RBP: 00007fff8b6aa61c R08: 0000000000000006 R09: 0000000000000058 [ 217.939187][ T7576] R10: 00000000003ff528 R11: 0000000000000246 R12: 0000000000000049 [ 217.939198][ T7576] R13: 0000000000000058 R14: 0000000000034371 R15: 00007fff8b6aa670 [ 217.939227][ T7576] [ 217.939237][ T7576] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.939253][ T7576] CPU: 1 UID: 0 PID: 7576 Comm: syz.1.602 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 217.939278][ T7576] Tainted: [L]=SOFTLOCKUP [ 217.939285][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 217.939297][ T7576] Call Trace: [ 217.939304][ T7576] [ 217.939312][ T7576] vpanic+0x56c/0xa60 [ 217.939332][ T7576] ? __pfx__printk+0x10/0x10 [ 217.939356][ T7576] ? __pfx_vpanic+0x10/0x10 [ 217.939375][ T7576] ? is_bpf_text_address+0x292/0x2b0 [ 217.939397][ T7576] ? is_bpf_text_address+0x26/0x2b0 [ 217.939429][ T7576] panic+0xc5/0xd0 [ 217.939447][ T7576] ? __pfx_panic+0x10/0x10 [ 217.939482][ T7576] __warn+0x315/0x4c0 [ 217.939500][ T7576] ? kcov_task_exit+0xf5/0x160 [ 217.939530][ T7576] ? kcov_task_exit+0xf5/0x160 [ 217.939559][ T7576] __report_bug+0x29a/0x540 [ 217.939593][ T7576] ? kcov_task_exit+0xf5/0x160 [ 217.939632][ T7576] ? __pfx___report_bug+0x10/0x10 [ 217.939663][ T7576] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 217.939691][ T7576] ? rt_spin_lock+0x1e0/0x400 [ 217.939715][ T7576] ? rt_spin_lock+0x1e0/0x400 [ 217.939740][ T7576] ? kcov_task_exit+0xf5/0x160 [ 217.939769][ T7576] report_bug+0x16a/0x220 [ 217.939796][ T7576] ? kcov_task_exit+0xf5/0x160 [ 217.939823][ T7576] ? kcov_task_exit+0xf7/0x160 [ 217.939851][ T7576] handle_bug+0x9c/0x200 [ 217.939870][ T7576] exc_invalid_op+0x1a/0x50 [ 217.939889][ T7576] asm_exc_invalid_op+0x1a/0x20 [ 217.939907][ T7576] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 217.939936][ T7576] Code: 10 00 00 48 8b bb 90 00 00 00 e8 f6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 19 6e 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 7b 64 69 09 48 89 df be 03 00 [ 217.939952][ T7576] RSP: 0018:ffffc900053dfd20 EFLAGS: 00010283 [ 217.939968][ T7576] RAX: 5631468a59940200 RBX: ffff8880370aef00 RCX: 0000000000000000 [ 217.939982][ T7576] RDX: 000000004f210036 RSI: ffffffff8ba732c0 RDI: 00000000ffffffff [ 217.940013][ T7576] RBP: ffffc900053dfe78 R08: ffffffff8b2df740 R09: ffffffff8dfc80c0 [ 217.940029][ T7576] R10: dffffc0000000000 R11: fffffbfff1f1753f R12: dffffc0000000000 [ 217.940044][ T7576] R13: 0000000000000000 R14: ffff8880370aef08 R15: ffff88802adabd80 [ 217.940066][ T7576] ? rt_spin_lock+0x1e0/0x400 [ 217.940099][ T7576] do_exit+0x150/0x22c0 [ 217.940122][ T7576] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.940151][ T7576] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 217.940183][ T7576] ? reacquire_held_locks+0x104/0x190 [ 217.940210][ T7576] ? rt_spin_lock+0x1e0/0x400 [ 217.940234][ T7576] ? __pfx_do_exit+0x10/0x10 [ 217.940257][ T7576] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 217.940291][ T7576] ? rt_spin_unlock+0x160/0x200 [ 217.940318][ T7576] do_group_exit+0x21b/0x2d0 [ 217.940345][ T7576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.940368][ T7576] __x64_sys_exit_group+0x3f/0x40 [ 217.940394][ T7576] x64_sys_call+0x221a/0x2240 [ 217.940416][ T7576] do_syscall_64+0x15f/0xf80 [ 217.940445][ T7576] ? trace_irq_disable+0x3b/0x140 [ 217.940466][ T7576] ? clear_bhb_loop+0x40/0x90 [ 217.940492][ T7576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.940512][ T7576] RIP: 0033:0x7fe6bf7bc819 [ 217.940530][ T7576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.940548][ T7576] RSP: 002b:00007fff8b6aa5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 217.940567][ T7576] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe6bf7bc819 [ 217.940581][ T7576] RDX: 0000001b2fd24000 RSI: 0000000000000013 RDI: 0000000000000000 [ 217.940594][ T7576] RBP: 00007fff8b6aa61c R08: 0000000000000006 R09: 0000000000000058 [ 217.940615][ T7576] R10: 00000000003ff528 R11: 0000000000000246 R12: 0000000000000049 [ 217.940628][ T7576] R13: 0000000000000058 R14: 0000000000034371 R15: 00007fff8b6aa670 [ 217.940660][ T7576] [ 217.941247][ T7576] Kernel Offset: disabled