last executing test programs: 6m39.626516239s ago: executing program 0 (id=1): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0xffffffff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) accept(r0, &(0x7f0000000240), &(0x7f00000003c0)=0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='e:-_group/myevent sched.sched_switch', 0x24) r3 = syz_open_dev$radio(&(0x7f00000004c0), 0x3, 0x2) ioctl$NILFS_IOCTL_GET_SUINFO(r3, 0x80186e84, &(0x7f0000000580)={&(0x7f0000000500)=[{0x6, 0xc}, {0xffffffff, 0x6}, {0x10001, 0x800, 0x2}, {0x3, 0x1, 0x2}, {0x7fffffffffffffff, 0x7f6, 0x1}, {0x3, 0x5}], 0x6, 0x10, 0x6, 0x7fffffffffffffff}) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f"], 0x0) mount$bind(&(0x7f0000000400)='./tracefs/dynamic_events\x00', &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480), 0xe200, 0x0) fcntl$notify(r3, 0x402, 0x40000004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000002000000040000000700000000000000", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='macvlan0\x00', 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008880)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000300000001000000000000110400000001"], 0x0, 0x2b, 0x0, 0x1, 0xea0d}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x36, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x501d41, 0x0) r5 = io_uring_setup(0x2003454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 6m36.628653686s ago: executing program 0 (id=7): timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 6m34.64456481s ago: executing program 0 (id=8): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="1080", 0x2, r1) unshare(0x6a040000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x7e, r3}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 6m19.374830123s ago: executing program 32 (id=8): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="1080", 0x2, r1) unshare(0x6a040000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x7e, r3}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 14.761086729s ago: executing program 5 (id=659): socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (fail_nth: 3) 14.480590815s ago: executing program 5 (id=660): socket$netlink(0x10, 0x3, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) lseek(r0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xfa, 0xe6, 0x88, 0x10, 0x17cc, 0x1969, 0x3415, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x30, 0x31, "", [{{0x9, 0x4, 0x0, 0x1, 0x0, 0xc1, 0x79, 0xf5, 0x81}}]}}]}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) ioctl(0xffffffffffffffff, 0x890c, &(0x7f0000000100)="000000000000000000000000000000000f0000006c61706230") 14.290639369s ago: executing program 3 (id=661): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x6}) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0xfffffdb0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x1, 0xfffffffff323ca54, 0x0, 0x0, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1}}, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1080, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x8, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f00000012c0)={0x3, 0x0, 0x300d, 0x8, 0x1, 0x3, 0x7}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x9}, 0x8}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x28, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) statx(r11, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) r12 = creat(&(0x7f0000000080)='./file0\x00', 0x14) ioctl$FE_SET_FRONTEND_TUNE_MODE(r12, 0x6f51, &(0x7f00000000c0)) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x0, 0x1}) 12.341206027s ago: executing program 5 (id=664): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x7d930e54, 0xe0b, 0x7ff, 0x3, 0x1, 0x0, 0x0, 0x100, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (fail_nth: 1) 11.699726818s ago: executing program 3 (id=666): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = memfd_secret(0x0) fstatfs(r2, &(0x7f0000000280)=""/212) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x10001011, r1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r1, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) readv(r3, &(0x7f0000002740)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00f8ff", @ANYRES16=r6, @ANYBLOB="010023bd7000fbdbdf250c00000008000300", @ANYRES32=r9, @ANYBLOB="10005080050002000300000004000600"], 0x2c}, 0x1, 0x0, 0x0, 0x200060f5}, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r10 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000001540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000001701000004000000020000000000000018000000000000001701000003000000000000000000000010000000000000001701"], 0x168, 0x40000}], 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r12, 0xae71, 0x0) socket$packet(0x11, 0x3, 0x300) 11.180713604s ago: executing program 5 (id=667): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x4b9, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), 0x0, 0x0) 9.405055173s ago: executing program 5 (id=671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x40) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000004c0)={0xd, 0x2, {0x22, @struct={0x4, 0x4}, 0x0, 0x1, 0xfffffffffffffffe, 0x8, 0x5, 0x10000, 0xc0, @struct={0x200, 0x200}, 0x8001, 0x2, [0x5, 0x95000000, 0x8000000000000000, 0x10000, 0x6, 0x800]}, {0x7, @struct={0x2, 0x9}, 0x0, 0x5, 0x0, 0x9, 0xe0, 0x101, 0x3e, @struct={0x0, 0x6}, 0x101, 0xffff, [0x1, 0x30, 0x0, 0xbf, 0x6, 0x10000]}, {0x7, @usage=0x8, 0x0, 0x17, 0x7, 0x4, 0x7f, 0xac3, 0x400, @struct={0x400, 0x1}, 0xf, 0x8, [0xfff, 0x6c1, 0x2b40, 0x8000000000000001, 0x5, 0xa4]}, {0x3, 0x35}}) ioctl$SG_IO(r2, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x300, 0x50, &(0x7f0000000440)=""/80}, &(0x7f0000000380)="259374c94982", 0x0, 0x2, 0x1c, 0xffffffffffffffff, 0x0}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_usb_connect(0x0, 0x30c, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xa3, 0xf4, 0x64, 0x10, 0x1608, 0x30e, 0xfd7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2fa, 0x3, 0x7, 0xc, 0xf0, 0x8, "", [{{0x9, 0x4, 0xbf, 0x9, 0x5, 0x7, 0xdc, 0x4a, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "0f14"}, {0x5, 0x24, 0x0, 0xfad1}, {0xd, 0x24, 0xf, 0x1, 0x46, 0x80, 0xfffb}, {0x6, 0x24, 0x1a, 0x33, 0x20}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x2, 0x8, 0x2, 0x7, 0x7}]}], [{{0x9, 0x5, 0xc, 0x2, 0x8, 0x7c, 0x6, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x4, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}]}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x4, 0x5, 0x40}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0xad, 0xc, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x3, 0xfd, 0x8}}]}}, {{0x9, 0x4, 0x57, 0x40, 0x1, 0x25, 0x23, 0xc9, 0x7, [], [{{0x9, 0x5, 0x3, 0x0, 0x400, 0x0, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x69, 0x6}, @generic={0x98, 0x8, "5fed7520e447e7eeaaec58747e3778201758b6335a81bb61df6c8516cb16f05ac8fd792a48ee3fff928b9c4c9dda5740ce06a6bbbcae717d9042d073189ff1ba105c571fcae8979a837de727485d111018e47f03e6ff6d4dd626ad202124f1b59a82b392e376b1ee06dc3aeaec02164bf939863a0da2879e9940d9d0c611c68d2d76bcabf7c7c2c6f75582f8723b330332837266c04a"}]}}]}}, {{0x9, 0x4, 0x1d, 0x4, 0x4, 0xfd, 0x0, 0x26, 0xa, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "f148d68c9245"}, {0x5, 0x24, 0x0, 0xfff2}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x7, 0x42, 0x31}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x2}]}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0xe9, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0x5}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x9, 0x6}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x2, 0x0, 0xd2, [@generic={0x8b, 0x23, "5f9373d63528161ee8e92c206fa93de0618db134230597484feed25ba8addb7370113876195baf25b988bb101c0b4a867592acb8e6fe4b4d1984a61d7bbd35e6d7bdc0904f2e6e244ca8165299f88d8cba74f484f197c4d40acdfcfcc806e102235b52f32dfe672579adbe28e6b744b378e9e7e73a29963aa3f060a872cd3f6568f49d12c916388282"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x9, 0x1, 0x0, [@generic={0x5e, 0x2, "92499ed06fe377b9aedd9f770faf1cc7fb10a22a7f2403a67bf876e0497546e833bbc2e45f88320c5690be0ed96ba2c8397f39ecf91e07b55a0f4d890875ad6a510aace310b7fb7fdaba04979ffaf95f93f2a5e74a282748f4a145e0"}, @generic={0x8a, 0x5, "a24c1871e6e66356695ee93c73ec29fed1fd5dd71656958e18561e5803b3e2ac8fb94c6a3615dfdbda04a3e40af37ad30043105c66fe04a9037b2a83bcfe6be1b2741f24bece5ba9360faa7c9297aede70f3ad10ce445337096b8e7f9c633423b93fc4f453f06a6a1fad790aaace6ce05a755d9a6d2763c669bcd254173fee62d6ac522f61ed6603"}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x300, 0x2, 0x0, 0x0, 0x20, 0xc}, 0x5, &(0x7f00000007c0)={0x5, 0xf, 0x5}, 0x7, [{0xaf, &(0x7f0000000800)=@string={0xaf, 0x3, "3d8e8f441df1b2e06350b53141312285be59d53f96811a3db643e452d550b195fb10cabc24c9757f6d5359309796d0f9a523218de876f86cdd75644955d42d5ab66f47ca872013e242e9b640e200d69ed784061258cda65061688159ecdddff4d71671e9493e024491331af9add191ed4beda8317dbf6b82282058ec12dcebbe39908a1630d4a109c892070eeaefcb5273f00b0944cbd2e4083bfcfea1a0fbe4e4defe91d5da4e7e69657e7c0e"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xd8, &(0x7f0000000900)=@string={0xd8, 0x3, "a6c3761f1444df849fa3aa11d8cf3d9045d09ed8773f00fba530aed8fb613b564170ef464c22ebd0382e7de2fbf12e2484a276233ee64cc71c18e8bea7fd23d313b7f3aa459e40ca66ff040ab3a25c2726214e8ffc1dca0b97d60ec7fb683d5b686b9f4c6952b4785214e59011bc6217e84065709544d8f12746a3135bf43859f6260136d00fa680166c1e312f12f51d7083f05dbf351ea3a09ea3038c6b809b154e4046fef1da4140a0be854c44c6c45816c390a675e555a142677c962d4eb93f110dd5fd44708be6aa809ad7650994a97015f932f2"}}, {0x50, &(0x7f0000000a00)=@string={0x50, 0x3, "562fb976ed223a79ee714158293bb064f832429dcf41e05252942fb852033de1b173826907cbd39b945ce9da8b184e3ee1172b8797ef03297523bd485baf2260a97db982b2af6a8f6d34217510a5"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x812}}, {0x7b, &(0x7f0000000ac0)=@string={0x7b, 0x3, "9a842c575eb8cae1171eaa6de879f5668ea806f94026c2b62a88579930ad251a0e0c08fd9dba1643f81679097955823bf6ff356efffbddea11bae5d93fe2bbc57033a9dfd2d9bde39037d9de145fc123d6a51c3d62fb06b8fd0571b5a8b00bf805cd35401b2c82aec5400093e94d92005bc2dc5c3130e3c0f5"}}, {0xac, &(0x7f0000000b40)=@string={0xac, 0x3, "8081772176999b16e0540667827d073c6899e1580be0656bff8b460bacbc0d9942a56cce3e16af08386810cfd2e6090eba6ace604dcbc3d79b0b77429bb9d7d87a5bee48e030ae42c2bcc6d992fe38c3393e2f7424906874262aef75c6fb3be5cd4965eed62678c080bca183adb0b848ef3b510e7c81eb3938907d1ec34a44b7797a5cff74e901b12b071259beda690050e0d3956811355d49a0bc659d14d367f60366141e702d2fc31a"}}]}) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_target_port\x00', 0x80041, 0x0) 9.002590221s ago: executing program 3 (id=673): timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 8.995207108s ago: executing program 4 (id=674): accept$alg(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 8.963233516s ago: executing program 1 (id=675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.024646978s ago: executing program 3 (id=677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000004a00010200000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000010) r6 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @local}}, 0x101, 0x5, 0x2978, 0x9, 0x40, 0x9, 0x9}, &(0x7f0000000340)=0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000540)=@assoc_value={r7, 0x80}, &(0x7f0000000580)=0x8) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000004, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.617153855s ago: executing program 5 (id=679): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a320000000014000000110001"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000080a010000000000000000000a0000000900010073797a310000"], 0x68}}, 0x0) write(r1, &(0x7f0000000300)='vhci_hcd.0', 0xa) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000480)={0x80000000, 0xffffffffffffffff, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ab104d2ff379ac409300000000"], 0x50) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x8) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r9, 0x5406, &(0x7f0000000200)={0xfff, 0xa925, 0x9, 0x8007, 0x8, "7a3800e5ffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, &(0x7f00000006c0)=0x16) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0xe, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x544, r8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r10}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r4, r0, 0x7}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) 6.598718558s ago: executing program 4 (id=680): creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(r0, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000480)={&(0x7f0000000380)}, 0x0, &(0x7f00000004c0)}, &(0x7f0000000580)=0x18) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, 0x0) 5.162657597s ago: executing program 4 (id=681): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) 3.495697941s ago: executing program 2 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x40) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000004c0)={0xd, 0x2, {0x22, @struct={0x4, 0x4}, 0x0, 0x1, 0xfffffffffffffffe, 0x8, 0x5, 0x10000, 0xc0, @struct={0x200, 0x200}, 0x8001, 0x2, [0x5, 0x95000000, 0x8000000000000000, 0x10000, 0x6, 0x800]}, {0x7, @struct={0x2, 0x9}, 0x0, 0x5, 0x0, 0x9, 0xe0, 0x101, 0x3e, @struct={0x0, 0x6}, 0x101, 0xffff, [0x1, 0x30, 0x0, 0xbf, 0x6, 0x10000]}, {0x7, @usage=0x8, 0x0, 0x17, 0x7, 0x4, 0x7f, 0xac3, 0x400, @struct={0x400, 0x1}, 0xf, 0x8, [0xfff, 0x6c1, 0x2b40, 0x8000000000000001, 0x5, 0xa4]}, {0x3, 0x35}}) ioctl$SG_IO(r2, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x300, 0x50, &(0x7f0000000440)=""/80}, &(0x7f0000000380)="259374c94982", 0x0, 0x2, 0x1c, 0xffffffffffffffff, 0x0}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) 3.300598041s ago: executing program 2 (id=690): accept$alg(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2.927895027s ago: executing program 1 (id=691): creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(r0, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000480)={&(0x7f0000000380)}, 0x0, &(0x7f00000004c0)}, &(0x7f0000000580)=0x18) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, 0x0) 2.888337192s ago: executing program 2 (id=692): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@get={0x1, 0x0, 0x9e4e}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200280, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x7f, "5dab000089b3040000236b28ca8d00", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec6811f625cbbd4a55a1418c1fe5cbbd20b990c63ba007e69518e03b5ce67f", 0x76}, {&(0x7f0000000380)="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", 0x399}], 0x2}, 0x8841) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x2000000000000000, 0x0, 0x4004840}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000740)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300f5a237e7a85b25f5e9bc9504c8fdb1ace1308dc90f848c61969bf5bf2d864aa0818b4f3f7a7205db2eb62906bf2c3b4fb1a6fa9a18a271b7019a8d9e7d54e3fc8ed08df5ae756094b6405bafa447c31717f9e403c87fcf82d8ccf788dac62415d9ea6b7ae529d7d8ab306bceb5bb3f98c8bf104b36cc140947dc23d672acd367a81d65046d780788f60c9156a71ae9b3e4", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.585521283s ago: executing program 1 (id=693): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40186f40, &(0x7f0000000180)={0xffffffff, 0x0, 0x3f, 0x1, '\x00', 0x10003}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000240)=0x100000001) r2 = socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRES8=r2, @ANYRES64=r0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000070000000000000000000000181200003f8b2d72bf0cb7c153a7608f4b9aee7e8dc2a1f22cddd46b65a272b99b3dad6bb05e09cd1e646b7a4c46b1d2d2c585ff872a99a404002e3ba6e02de0ce17499efaef1677e034613d124e201a8b8574b9b35c649f335e74e278f236304c42cf50d1f8ac9f00403578dd578fdf1f836cb9476562b47aeca657b57256fe9fd8534df62b074ab8028aee657cc74c63fc7db6b5328f80efb6be5dc44ef10b6a405b787bfb", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000085000000a00000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r6, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="65844100c5dc"], 0xdd12}], 0x1}, 0x200488d4) r7 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r7], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40080040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x2c, r8, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1400881d}, 0x4008004) 1.241024093s ago: executing program 2 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x3c, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0) timer_create(0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) acct(&(0x7f0000000100)='./file0\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x0, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x6, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x2, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x30f, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x107ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x7, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x6, 0x0, 0x401, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x10001, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x40000004, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0xffffffffffff0001}}, './file0\x00'}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x5, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000280)={0xffff1000, 0x12000}) 492.916068ms ago: executing program 3 (id=695): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x6) (async) syz_usb_connect(0x3, 0x2e, &(0x7f00000018c0)=ANY=[@ANYBLOB="12010102d1ea840821042f001bcf3e96617809021c0001f90650050904fb400002"], &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) (async, rerun: 32) recvmsg(0xffffffffffffffff, 0x0, 0x20f2) (rerun: 32) 369.585217ms ago: executing program 1 (id=696): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffffffc) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xade}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000) r2 = dup(r0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010101}, 0x10) (async) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) (async) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000003c0)={'veth1_to_batadv\x00', {0x2, 0x4e20, @multicast2}}) (async) getpeername$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@delqdisc={0x34, 0x25, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10}, {0xfff1, 0x2}, {0xfff1, 0xfff8}}, [@TCA_RATE={0x6, 0x5, {0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x79f}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004010) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000580)=0x0) r5 = syz_open_procfs(r4, &(0x7f00000005c0)='mounts\x00') setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000600)={0x42, 0x3, 0x1}, 0x10) (async) r6 = creat(&(0x7f0000000640)='./file0\x00', 0x8c) recvfrom(r6, &(0x7f0000000680)=""/50, 0x32, 0x122, &(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0xfff, @mcast1, 0x8, 0x3}, 0x80) (async) execve(&(0x7f0000000740)='./file0\x00', &(0x7f0000000900)={[&(0x7f0000000780)='drbg_pr_sha512\x00', &(0x7f00000007c0)='/\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000880)='mounts\x00', &(0x7f00000008c0)='\x00']}, &(0x7f0000000a40)={[&(0x7f0000000940)='b\x00', &(0x7f0000000980)='b\x00', &(0x7f00000009c0)='b\x00', &(0x7f0000000a00)='[!+\x00']}) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000a80)={0x1, 'pimreg1\x00', {}, 0x1b2e}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x38) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, &(0x7f0000000ac0)=0x3000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x401, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000040) (async) setns(0xffffffffffffffff, 0x20000000) sendto$unix(r2, &(0x7f0000000c40)="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", 0x1000, 0x40804, &(0x7f0000001c40)=@file={0x0, './file0\x00'}, 0x6e) (async) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000001cc0)) (async) close_range(r5, r2, 0x2) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x78, r1, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "28f32963af61ef69d758765ed242cb2a"}, @NL80211_ATTR_PMKID={0x14, 0x55, "bce812daab6b0709832969a7a0f96e5c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "c93a8efb4b1e1bbd72abaa815bcbde72"}, @NL80211_ATTR_SSID={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x51) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000001e40)={0x7, 0x0, @pic={0x9, 0x0, 0x4, 0x9, 0xfa, 0xe, 0x2, 0x0, 0x8, 0xd, 0x8, 0x7d, 0x0, 0x5, 0x81, 0xdd}}) (async) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000002080)=0x1, 0x4) (async) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x3c, 0xa, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) 273.99µs ago: executing program 1 (id=697): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x10a, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "fe76904a64bd78eb2334882d8e5bc207"}, @NL80211_ATTR_SSID={0x14, 0x34, @random="6934d7488d55808d82c4b6e1c6015b35"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x65}, @NL80211_ATTR_PMKID={0x14, 0x55, "44bef8306fa26659d4c434023f687a57"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x538c70733639c2b9}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x48}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000005}, 0xc084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x69}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xffff}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_SSIDS={0x7c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x6, 0x0, @random="1932"}, {0xa, 0x0, @default_ap_ssid}, {0xf, 0x0, @random="bb67bb22afbab36f5b809b"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000004c0)=0xfc4, 0x4) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb4, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24004880}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={r0, 0x20, &(0x7f0000000880)={&(0x7f0000000740)=""/219, 0xdb, 0x0, &(0x7f0000000840)=""/8, 0x8}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=r5, 0x4) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000940)=""/20) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6a}]}, 0xa4}}, 0x4088841) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000b40)={0x2, 0x9, 0x3d, 0x0, 0x7, 0x4, 0x0, &(0x7f0000000b00)=[{0x7, 0x101, 0x8}, {0x1b, 0xfe, 0x61af80}, {0x18, 0x101, 0x7}, {0x8, 0xfe, 0x10000}]}) recvmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f0000000b80)=@can, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c00)=""/87, 0x57}, {&(0x7f0000000c80)=""/186, 0xba}, {&(0x7f0000000d40)=""/182, 0xb6}, {&(0x7f0000000e00)=""/151, 0x97}], 0x4, &(0x7f0000000f00)=""/103, 0x67}, 0x8}], 0x1, 0x40000100, &(0x7f0000000fc0)={0x0, 0x989680}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000001000)={0x0, 0x1, [@local]}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001040), 0x20580, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000001080), &(0x7f00000010c0)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x30000010}, 0x15) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000001200)={0x800, r7, 0x1e, {0xe61b, 0x90cc000000000000}, 0x9}, 0x1) mount(&(0x7f0000001240)=@rnullb, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='cramfs\x00', 0x8000, &(0x7f0000001300)='PPPPPP') pwritev(r6, &(0x7f0000001500)=[{&(0x7f0000001340)="221cac8b8e004612a5aa8b444c8cbad0df89a1a00bf3194c2522432f3a0b341fabdc887914ba3d4e39db91c9fc1da4b363", 0x31}, {&(0x7f0000001380)="8bf66587ce6ab1a80083b9f68c3cdb271438cc730783e8", 0x17}, {&(0x7f00000013c0)="be8684650dd757e163bc20f3a7433d", 0xf}, {&(0x7f0000001400)="884da19c0b4cc17c3f8443b02022dcd3b670539dfe376f0cb07fc02cf8a2fdb406df00f12d7421f5b6188777b81e83e9205406a3b0b3078ffdcf888622a812760df0162a762abecb39760dd61da5fdd4e6e9c1a5c04d39d2ff894b6bbc29272998f3bd54517a000d5e74d48593be80a8c01580583a722126e8e3738644c48739f64b6ce7b591482cb413133e22295b992c19659155e66e9edab6ed5dfc66bc9af1808defa7f4aee8eefea1ce2da4cadf54f945aeb329f18090fd58e6bd29f247deabd2f5a0a7fda32f9754cf10e1a6e976490e429aaa7075", 0xd8}], 0x4, 0xfffffffc, 0x10) lstat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000001600), &(0x7f0000001640)=0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x810, r0, 0xb6bc1000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), r7) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x40, r9, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x1) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000017c0)={'pcm3724\x00', [0x1000, 0x4, 0x6, 0x40, 0x6, 0xfffffc01, 0x48d, 0x6, 0x2bb, 0x8, 0xc3, 0xd2, 0xf8, 0xf, 0x9791, 0x6, 0x2, 0x4, 0x8, 0x4, 0x80000001, 0x5, 0xe3d1, 0x7, 0xcda, 0x9, 0xf, 0x0, 0x667c, 0x8001, 0x3, 0x80000000]}) 0s ago: executing program 2 (id=698): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (fail_nth: 3) kernel console output (not intermixed with test programs): 60.306980][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.307004][ T7407] Call Trace: [ 360.307076][ T7407] [ 360.307142][ T7407] dump_stack_lvl+0xe8/0x150 [ 360.307316][ T7407] should_fail_ex+0x467/0x600 [ 360.307413][ T7407] get_futex_key+0x8e1/0x1580 [ 360.307500][ T7407] ? __pfx_get_futex_key+0x10/0x10 [ 360.307556][ T7407] ? kstrtouint+0x6e/0xe0 [ 360.307635][ T7407] futex_wake_op+0x15c/0xdd0 [ 360.307683][ T7407] ? get_pid_task+0x20/0x1f0 [ 360.307747][ T7407] ? get_pid_task+0x20/0x1f0 [ 360.307780][ T7407] ? __pfx_futex_wake_op+0x10/0x10 [ 360.307818][ T7407] ? do_raw_spin_lock+0x12b/0x2f0 [ 360.307912][ T7407] do_futex+0x480/0x4e0 [ 360.307936][ T7407] ? lockdep_hardirqs_on+0x7a/0x110 [ 360.308053][ T7407] ? __pfx_do_futex+0x10/0x10 [ 360.308079][ T7407] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 360.308155][ T7407] __se_sys_futex+0x3a8/0x450 [ 360.308187][ T7407] ? ksys_write+0x248/0x270 [ 360.308287][ T7407] ? __pfx___se_sys_futex+0x10/0x10 [ 360.308314][ T7407] ? __pfx_ksys_write+0x10/0x10 [ 360.308345][ T7407] ? __x64_sys_futex+0x21/0xf0 [ 360.308371][ T7407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.308415][ T7407] do_syscall_64+0x174/0x580 [ 360.308471][ T7407] ? trace_irq_disable+0x3b/0x140 [ 360.308566][ T7407] ? clear_bhb_loop+0x70/0xc0 [ 360.308594][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.308617][ T7407] RIP: 0033:0x7f900716e0d9 [ 360.308645][ T7407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.308671][ T7407] RSP: 002b:00007f90053c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 360.308724][ T7407] RAX: ffffffffffffffda RBX: 00007f90073f5fa0 RCX: 00007f900716e0d9 [ 360.308740][ T7407] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000140 [ 360.308754][ T7407] RBP: 00007f90053c6090 R08: 0000000000000000 R09: 0000000000000000 [ 360.308768][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.308780][ T7407] R13: 00007f90073f6038 R14: 00007f90073f5fa0 R15: 00007fff3481c9f8 [ 360.308815][ T7407] [ 360.665098][ T7392] bond1 (unregistering): Released all slaves [ 360.839523][ T7412] capability: warning: `syz.5.360' uses deprecated v2 capabilities in a way that may be insecure [ 361.055560][ T7395] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 361.057235][ T7395] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 361.057290][ T7395] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 361.090134][ T7414] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 361.090161][ T7414] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.254561][ T7414] vhci_hcd vhci_hcd.0: Device attached [ 361.260252][ T7418] vhci_hcd: connection closed [ 361.393042][ T3286] vhci_hcd vhci_hcd.1: stop threads [ 361.398386][ T3286] vhci_hcd vhci_hcd.1: release socket [ 361.495489][ T3286] vhci_hcd vhci_hcd.1: disconnect device [ 361.514070][ T5757] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 365.401163][ T7437] FAULT_INJECTION: forcing a failure. [ 365.401163][ T7437] name failslab, interval 1, probability 0, space 0, times 0 [ 365.401211][ T7437] CPU: 1 UID: 0 PID: 7437 Comm: syz.3.365 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 365.401242][ T7437] Tainted: [L]=SOFTLOCKUP [ 365.401249][ T7437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.401262][ T7437] Call Trace: [ 365.401270][ T7437] [ 365.401280][ T7437] dump_stack_lvl+0xe8/0x150 [ 365.401319][ T7437] should_fail_ex+0x467/0x600 [ 365.401357][ T7437] should_failslab+0xa8/0x100 [ 365.401479][ T7437] __kmalloc_cache_noprof+0xa0/0x6b0 [ 365.401532][ T7437] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 365.401630][ T7437] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 365.401667][ T7437] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 365.401703][ T7437] mptcp_sendmsg_fastopen+0x17b/0x540 [ 365.401806][ T7437] mptcp_sendmsg+0x1a69/0x1d10 [ 365.401841][ T7437] ? __lock_acquire+0x683/0x2ce0 [ 365.401873][ T7437] ? __lock_acquire+0x683/0x2ce0 [ 365.401897][ T7437] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 365.401965][ T7437] ? __lock_acquire+0x683/0x2ce0 [ 365.401992][ T7437] ? __lock_acquire+0x683/0x2ce0 [ 365.402013][ T7437] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 365.402055][ T7437] ? inet_sendmsg+0x298/0x320 [ 365.402106][ T7437] ? __pfx_inet_sendmsg+0x10/0x10 [ 365.402128][ T7437] sock_sendmsg_nosec+0x10e/0x180 [ 365.402230][ T7437] ____sys_sendmsg+0x565/0x870 [ 365.402268][ T7437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.402306][ T7437] ? import_iovec+0x73/0xa0 [ 365.402369][ T7437] ___sys_sendmsg+0x2a5/0x360 [ 365.402396][ T7437] ? __lock_acquire+0x683/0x2ce0 [ 365.402423][ T7437] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.402457][ T7437] ? kstrtouint+0x6e/0xe0 [ 365.402517][ T7437] ? __fget_files+0x2a/0x420 [ 365.402562][ T7437] ? __fget_files+0x3a8/0x420 [ 365.402595][ T7437] __sys_sendmmsg+0x279/0x4d0 [ 365.402629][ T7437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 365.402668][ T7437] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 365.402710][ T7437] ? ksys_write+0x248/0x270 [ 365.402741][ T7437] ? __pfx_ksys_write+0x10/0x10 [ 365.402775][ T7437] __x64_sys_sendmmsg+0xa0/0xc0 [ 365.402804][ T7437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.402828][ T7437] do_syscall_64+0x174/0x580 [ 365.402860][ T7437] ? trace_irq_disable+0x3b/0x140 [ 365.402895][ T7437] ? clear_bhb_loop+0x70/0xc0 [ 365.402924][ T7437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.402947][ T7437] RIP: 0033:0x7f1a3b6ce0d9 [ 365.402968][ T7437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.402987][ T7437] RSP: 002b:00007f1a39926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 365.403010][ T7437] RAX: ffffffffffffffda RBX: 00007f1a3b955fa0 RCX: 00007f1a3b6ce0d9 [ 365.403027][ T7437] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 365.403040][ T7437] RBP: 00007f1a39926090 R08: 0000000000000000 R09: 0000000000000000 [ 365.403054][ T7437] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 365.403067][ T7437] R13: 00007f1a3b956038 R14: 00007f1a3b955fa0 R15: 00007ffdfd749a48 [ 365.403102][ T7437] [ 367.194950][ T5912] usb 3-1: USB disconnect, device number 17 [ 367.328148][ T7448] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 367.328182][ T7448] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 368.074405][ T4901] Bluetooth: hci4: unexpected cc 0x2011 length: 3 > 1 [ 368.074450][ T4901] Bluetooth: hci4: unexpected event for opcode 0x2011 [ 368.270950][ T7475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 368.271349][ T7475] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 368.271622][ T7475] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 368.271893][ T7475] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 368.272171][ T7475] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 369.075931][ T5912] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 369.119139][ T7491] ======================================================= [ 369.119139][ T7491] WARNING: The mand mount option has been deprecated and [ 369.119139][ T7491] and is ignored by this kernel. Remove the mand [ 369.119139][ T7491] option from the mount to silence this warning. [ 369.119139][ T7491] ======================================================= [ 369.121956][ T7491] tmpfs: Bad value for 'nr_inodes' [ 369.161039][ T7491] FAULT_INJECTION: forcing a failure. [ 369.161039][ T7491] name failslab, interval 1, probability 0, space 0, times 0 [ 369.161082][ T7491] CPU: 1 UID: 0 PID: 7491 Comm: syz.5.377 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 369.161115][ T7491] Tainted: [L]=SOFTLOCKUP [ 369.161123][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.161138][ T7491] Call Trace: [ 369.161147][ T7491] [ 369.161158][ T7491] dump_stack_lvl+0xe8/0x150 [ 369.161201][ T7491] should_fail_ex+0x467/0x600 [ 369.161245][ T7491] should_failslab+0xa8/0x100 [ 369.161275][ T7491] __kmalloc_cache_noprof+0xa0/0x6b0 [ 369.161302][ T7491] ? tipc_service_create+0x7d/0x250 [ 369.161446][ T7491] ? tipc_service_create+0x7d/0x250 [ 369.161495][ T7491] tipc_service_create+0x7d/0x250 [ 369.161534][ T7491] ? tipc_nametbl_insert_publ+0x45e/0x1380 [ 369.161581][ T7491] tipc_nametbl_insert_publ+0x47e/0x1380 [ 369.161630][ T7491] ? rt_spin_lock+0x20e/0x400 [ 369.161675][ T7491] ? tipc_nametbl_publish+0x76/0x210 [ 369.161748][ T7491] tipc_nametbl_publish+0xdd/0x210 [ 369.161792][ T7491] ? tipc_nametbl_publish+0x76/0x210 [ 369.161839][ T7491] tipc_sk_publish+0x176/0x380 [ 369.161897][ T7491] ? __pfx_tipc_sk_publish+0x10/0x10 [ 369.161923][ T7491] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 369.162015][ T7491] ? lockdep_hardirqs_on+0x7a/0x110 [ 369.162060][ T7491] tipc_sk_bind+0x1ee/0x300 [ 369.162109][ T7491] __sys_bind+0x2e9/0x410 [ 369.162138][ T7491] ? __pfx___sys_bind+0x10/0x10 [ 369.162226][ T7491] ? __pfx_ksys_write+0x10/0x10 [ 369.162264][ T7491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.162293][ T7491] __x64_sys_bind+0x7a/0x90 [ 369.162320][ T7491] do_syscall_64+0x174/0x580 [ 369.162360][ T7491] ? clear_bhb_loop+0x70/0xc0 [ 369.162392][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.162427][ T7491] RIP: 0033:0x7f900716e0d9 [ 369.162451][ T7491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.162471][ T7491] RSP: 002b:00007f9005384028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 369.162499][ T7491] RAX: ffffffffffffffda RBX: 00007f90073f6180 RCX: 00007f900716e0d9 [ 369.162518][ T7491] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 369.162534][ T7491] RBP: 00007f9005384090 R08: 0000000000000000 R09: 0000000000000000 [ 369.162550][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.162564][ T7491] R13: 00007f90073f6218 R14: 00007f90073f6180 R15: 00007fff3481c9f8 [ 369.162607][ T7491] [ 369.166188][ T7491] tipc: Service creation failed, no memory [ 371.052263][ T4901] Bluetooth: hci5: command 0x0c1a tx timeout [ 371.052309][ T4901] Bluetooth: hci2: command 0x2016 tx timeout [ 371.052341][ T4901] Bluetooth: hci4: command 0x0c1a tx timeout [ 371.052371][ T4901] Bluetooth: hci1: command 0x2016 tx timeout [ 371.052401][ T4901] Bluetooth: hci0: command 0x0c1a tx timeout [ 373.646145][ T7526] FAULT_INJECTION: forcing a failure. [ 373.646145][ T7526] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 373.646186][ T7526] CPU: 1 UID: 0 PID: 7526 Comm: syz.4.387 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 373.646215][ T7526] Tainted: [L]=SOFTLOCKUP [ 373.646223][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.646236][ T7526] Call Trace: [ 373.646244][ T7526] [ 373.646254][ T7526] dump_stack_lvl+0xe8/0x150 [ 373.646293][ T7526] should_fail_ex+0x467/0x600 [ 373.646331][ T7526] _copy_from_user+0x2d/0xb0 [ 373.646357][ T7526] kstrtouint_from_user+0xd6/0x180 [ 373.646458][ T7526] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 373.646490][ T7526] ? __lock_acquire+0x683/0x2ce0 [ 373.646530][ T7526] proc_fail_nth_write+0x8e/0x210 [ 373.646632][ T7526] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 373.646665][ T7526] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 373.646688][ T7526] vfs_write+0x29f/0xbb0 [ 373.646725][ T7526] ? __pfx_vfs_write+0x10/0x10 [ 373.646755][ T7526] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 373.646789][ T7526] ? lockdep_hardirqs_on+0x7a/0x110 [ 373.646822][ T7526] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 373.646856][ T7526] ? mutex_lock_nested+0x152/0x1d0 [ 373.646880][ T7526] ? fdget_pos+0x252/0x320 [ 373.646911][ T7526] ksys_write+0x156/0x270 [ 373.646941][ T7526] ? __pfx_ksys_write+0x10/0x10 [ 373.647010][ T7526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.647035][ T7526] do_syscall_64+0x174/0x580 [ 373.647067][ T7526] ? trace_irq_disable+0x3b/0x140 [ 373.647103][ T7526] ? clear_bhb_loop+0x70/0xc0 [ 373.647130][ T7526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.647158][ T7526] RIP: 0033:0x7fd1f47fe90e [ 373.647178][ T7526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 373.647195][ T7526] RSP: 002b:00007fd1f2a53fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.647219][ T7526] RAX: ffffffffffffffda RBX: 00007fd1f2a546c0 RCX: 00007fd1f47fe90e [ 373.647235][ T7526] RDX: 0000000000000001 RSI: 00007fd1f2a540a0 RDI: 0000000000000007 [ 373.647248][ T7526] RBP: 00007fd1f2a54090 R08: 0000000000000000 R09: 0000000000000000 [ 373.647261][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.647274][ T7526] R13: 00007fd1f4ac6218 R14: 00007fd1f4ac6180 R15: 00007fff3383c0f8 [ 373.647308][ T7526] [ 374.156471][ T7532] sock: sock_timestamping_bind_phc: sock not bind to device [ 377.622824][ T7543] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 377.622861][ T7543] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 377.622879][ T7543] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 378.794128][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.794204][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.310292][ T5601] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 380.583833][ T7555] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.584276][ T7555] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.584699][ T7555] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 380.585092][ T7555] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.585554][ T7555] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 380.587222][ T7562] FAULT_INJECTION: forcing a failure. [ 380.587222][ T7562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.587258][ T7562] CPU: 0 UID: 0 PID: 7562 Comm: syz.1.397 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 380.587288][ T7562] Tainted: [L]=SOFTLOCKUP [ 380.587297][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 380.587310][ T7562] Call Trace: [ 380.587319][ T7562] [ 380.587328][ T7562] dump_stack_lvl+0xe8/0x150 [ 380.587372][ T7562] should_fail_ex+0x467/0x600 [ 380.587412][ T7562] _copy_to_user+0x31/0xb0 [ 380.587440][ T7562] simple_read_from_buffer+0xe1/0x170 [ 380.587550][ T7562] proc_fail_nth_read+0x1be/0x230 [ 380.587580][ T7562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.587609][ T7562] ? rw_verify_area+0x250/0x4d0 [ 380.587637][ T7562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.587661][ T7562] vfs_read+0x219/0xa90 [ 380.587695][ T7562] ? __pfx_vfs_read+0x10/0x10 [ 380.587722][ T7562] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 380.587755][ T7562] ? lockdep_hardirqs_on+0x7a/0x110 [ 380.587786][ T7562] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 380.587814][ T7562] ? mutex_lock_nested+0x152/0x1d0 [ 380.587837][ T7562] ? fdget_pos+0x252/0x320 [ 380.587868][ T7562] ksys_read+0x156/0x270 [ 380.587896][ T7562] ? __pfx_ksys_read+0x10/0x10 [ 380.587928][ T7562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.587952][ T7562] do_syscall_64+0x174/0x580 [ 380.587982][ T7562] ? trace_irq_disable+0x3b/0x140 [ 380.588017][ T7562] ? clear_bhb_loop+0x70/0xc0 [ 380.588044][ T7562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.588065][ T7562] RIP: 0033:0x7f1fc850e90e [ 380.588085][ T7562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.588104][ T7562] RSP: 002b:00007f1fc67a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.588130][ T7562] RAX: ffffffffffffffda RBX: 00007f1fc67a66c0 RCX: 00007f1fc850e90e [ 380.588147][ T7562] RDX: 000000000000000f RSI: 00007f1fc67a60a0 RDI: 0000000000000004 [ 380.588161][ T7562] RBP: 00007f1fc67a6090 R08: 0000000000000000 R09: 0000000000000000 [ 380.588174][ T7562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.588187][ T7562] R13: 00007f1fc87d6038 R14: 00007f1fc87d5fa0 R15: 00007ffc2ecdffd8 [ 380.588222][ T7562] [ 382.621730][ T4901] Bluetooth: hci2: command 0x2016 tx timeout [ 382.621828][ T4901] Bluetooth: hci4: command 0x0c1a tx timeout [ 382.622774][ T4901] Bluetooth: hci1: command 0x2016 tx timeout [ 382.622916][ T4901] Bluetooth: hci0: command 0x0c1a tx timeout [ 382.631718][ T5601] Bluetooth: hci5: command 0x0c1a tx timeout [ 385.339130][ T5318] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 385.449566][ T5757] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 385.509193][ T5318] usb 5-1: Using ep0 maxpacket: 16 [ 385.565563][ T5318] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 385.568682][ T5318] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.568717][ T5318] usb 5-1: config 0 interface 0 has no altsetting 0 [ 385.568754][ T5318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.620278][ T5757] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.622110][ T5757] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.622138][ T5757] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 385.622176][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.672693][ T5318] usb 5-1: config 0 descriptor?? [ 385.706148][ T5757] usb 3-1: config 0 descriptor?? [ 386.162488][ T5318] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 386.235542][ T5318] nzxt-smart2 0003:1E71:2009.000A: init_device failed: -38 [ 386.254857][ T5318] nzxt-smart2 0003:1E71:2009.000A: probe with driver nzxt-smart2 failed with error -38 [ 386.301304][ T5601] Bluetooth: hci0: command 0x0c1a tx timeout [ 386.687553][ T5318] usb 3-1: USB disconnect, device number 18 [ 386.884252][ T199] usb 5-1: USB disconnect, device number 13 [ 387.165836][ T7610] FAULT_INJECTION: forcing a failure. [ 387.165836][ T7610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.165876][ T7610] CPU: 1 UID: 0 PID: 7610 Comm: syz.5.411 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.165907][ T7610] Tainted: [L]=SOFTLOCKUP [ 387.165915][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.165928][ T7610] Call Trace: [ 387.165937][ T7610] [ 387.165946][ T7610] dump_stack_lvl+0xe8/0x150 [ 387.165986][ T7610] should_fail_ex+0x467/0x600 [ 387.166025][ T7610] _copy_to_user+0x31/0xb0 [ 387.166054][ T7610] simple_read_from_buffer+0xe1/0x170 [ 387.166084][ T7610] proc_fail_nth_read+0x1be/0x230 [ 387.166118][ T7610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.166146][ T7610] ? rw_verify_area+0x250/0x4d0 [ 387.166175][ T7610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.166200][ T7610] vfs_read+0x219/0xa90 [ 387.166243][ T7610] ? __pfx_vfs_read+0x10/0x10 [ 387.166272][ T7610] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 387.166306][ T7610] ? lockdep_hardirqs_on+0x7a/0x110 [ 387.166338][ T7610] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 387.166371][ T7610] ? mutex_lock_nested+0x152/0x1d0 [ 387.166394][ T7610] ? fdget_pos+0x252/0x320 [ 387.166426][ T7610] ksys_read+0x156/0x270 [ 387.166456][ T7610] ? __pfx_ksys_read+0x10/0x10 [ 387.166492][ T7610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.166517][ T7610] do_syscall_64+0x174/0x580 [ 387.166550][ T7610] ? trace_irq_disable+0x3b/0x140 [ 387.166585][ T7610] ? clear_bhb_loop+0x70/0xc0 [ 387.166613][ T7610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.166636][ T7610] RIP: 0033:0x7f900712e90e [ 387.166658][ T7610] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 387.166678][ T7610] RSP: 002b:00007f90053c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 387.166702][ T7610] RAX: ffffffffffffffda RBX: 00007f90053c66c0 RCX: 00007f900712e90e [ 387.166719][ T7610] RDX: 000000000000000f RSI: 00007f90053c60a0 RDI: 0000000000000003 [ 387.166733][ T7610] RBP: 00007f90053c6090 R08: 0000000000000000 R09: 0000000000000000 [ 387.166746][ T7610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.166760][ T7610] R13: 00007f90073f6038 R14: 00007f90073f5fa0 R15: 00007fff3481c9f8 [ 387.166795][ T7610] [ 387.913336][ T7618] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 387.953365][ T7618] bond1 (unregistering): Released all slaves [ 388.379677][ T5596] Bluetooth: hci0: command 0x0c1a tx timeout [ 388.533578][ T7631] dummy0: entered promiscuous mode [ 388.533597][ T7631] dummy0: entered allmulticast mode [ 389.354840][ T7643] input: syz0 as /devices/virtual/input/input20 [ 391.072432][ T7651] netlink: zone id is out of range [ 391.072821][ T7651] netlink: zone id is out of range [ 391.154713][ T7651] netlink: zone id is out of range [ 391.205861][ T7651] netlink: zone id is out of range [ 391.206752][ T7651] netlink: zone id is out of range [ 391.207157][ T7651] netlink: zone id is out of range [ 391.207226][ T7651] netlink: zone id is out of range [ 391.207943][ T7651] netlink: zone id is out of range [ 391.208175][ T7651] netlink: zone id is out of range [ 391.208661][ T7651] netlink: zone id is out of range [ 391.325818][ T7657] FAULT_INJECTION: forcing a failure. [ 391.325818][ T7657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.325856][ T7657] CPU: 1 UID: 0 PID: 7657 Comm: syz.2.423 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 391.325884][ T7657] Tainted: [L]=SOFTLOCKUP [ 391.325891][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.325904][ T7657] Call Trace: [ 391.325912][ T7657] [ 391.325919][ T7657] dump_stack_lvl+0xe8/0x150 [ 391.325951][ T7657] should_fail_ex+0x467/0x600 [ 391.325981][ T7657] _copy_from_user+0x2d/0xb0 [ 391.326001][ T7657] __sys_bpf+0x2e7/0xd90 [ 391.326100][ T7657] ? vfs_write+0x960/0xbb0 [ 391.326122][ T7657] ? __pfx___sys_bpf+0x10/0x10 [ 391.326162][ T7657] ? ksys_write+0x202/0x270 [ 391.326184][ T7657] ? __pfx_ksys_write+0x10/0x10 [ 391.326209][ T7657] __x64_sys_bpf+0xba/0xd0 [ 391.326266][ T7657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.326288][ T7657] do_syscall_64+0x174/0x580 [ 391.326315][ T7657] ? trace_irq_disable+0x3b/0x140 [ 391.326416][ T7657] ? clear_bhb_loop+0x70/0xc0 [ 391.326443][ T7657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.326462][ T7657] RIP: 0033:0x7f1de8fee0d9 [ 391.326479][ T7657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.326494][ T7657] RSP: 002b:00007f1de7246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.326514][ T7657] RAX: ffffffffffffffda RBX: 00007f1de9275fa0 RCX: 00007f1de8fee0d9 [ 391.326526][ T7657] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000001 [ 391.326536][ T7657] RBP: 00007f1de7246090 R08: 0000000000000000 R09: 0000000000000000 [ 391.326547][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.326556][ T7657] R13: 00007f1de9276038 R14: 00007f1de9275fa0 R15: 00007ffe8cc8fb88 [ 391.326581][ T7657] [ 391.960951][ T7666] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 393.579056][ T1575] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 393.750367][ T1575] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 393.751789][ T1575] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.751821][ T1575] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 393.751872][ T1575] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 393.769535][ T1575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.769617][ T1575] usb 2-1: Product: syz [ 393.769672][ T1575] usb 2-1: Manufacturer: syz [ 393.769722][ T1575] usb 2-1: SerialNumber: syz [ 393.780860][ T7671] netlink: 'syz.2.428': attribute type 2 has an invalid length. [ 393.780944][ T7671] netlink: 'syz.2.428': attribute type 8 has an invalid length. [ 393.780978][ T7671] netlink: 132 bytes leftover after parsing attributes in process `syz.2.428'. [ 393.931975][ T1575] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 394.150584][ T1575] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 394.150813][ T1575] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 394.177946][ T1575] usb 2-1: USB disconnect, device number 9 [ 399.312259][ T7730] binder: 7729:7730 ioctl c0306201 0 returned -14 [ 400.591040][ T1575] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 400.609016][ T5757] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 400.744613][ T1575] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 400.746104][ T1575] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.746131][ T1575] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 400.746184][ T1575] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.762267][ T5757] usb 2-1: Using ep0 maxpacket: 16 [ 400.765428][ T5757] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 400.773494][ T1575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.773520][ T1575] usb 3-1: Product: syz [ 400.773534][ T1575] usb 3-1: Manufacturer: syz [ 400.773547][ T1575] usb 3-1: SerialNumber: syz [ 400.814194][ T5757] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.814311][ T5757] usb 2-1: config 0 interface 0 has no altsetting 0 [ 400.814409][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.953025][ T5757] usb 2-1: config 0 descriptor?? [ 400.973495][ T1575] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 401.103630][ T199] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 401.176819][ T1575] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 401.176966][ T1575] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 401.210507][ T1575] usb 3-1: USB disconnect, device number 19 [ 401.350524][ T199] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 401.381516][ T199] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.381548][ T199] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 401.485541][ T199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.485579][ T199] usb 6-1: Product: syz [ 401.485591][ T199] usb 6-1: Manufacturer: syz [ 401.485602][ T199] usb 6-1: SerialNumber: syz [ 401.543177][ T5757] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 401.556053][ T199] usb 6-1: config 0 descriptor?? [ 401.600951][ T5757] nzxt-smart2 0003:1E71:2009.000B: init_device failed: -38 [ 401.702517][ T5757] nzxt-smart2 0003:1E71:2009.000B: probe with driver nzxt-smart2 failed with error -38 [ 402.352900][ T199] usb 2-1: USB disconnect, device number 10 [ 404.050427][ T5701] usb 6-1: USB disconnect, device number 4 [ 404.824876][ T5596] Bluetooth: hci1: unexpected cc 0x2011 length: 3 > 1 [ 404.824914][ T5596] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 404.879057][ T5722] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 404.904513][ T7782] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 404.904863][ T7782] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.905157][ T7782] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 404.906840][ T7782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.938083][ T7782] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 405.009007][ T5722] usb 6-1: device descriptor read/64, error -71 [ 405.249187][ T5722] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 405.464405][ T5722] usb 6-1: device descriptor read/64, error -71 [ 405.694327][ T5722] usb usb6-port1: attempt power cycle [ 406.082567][ T5722] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 406.119903][ T5722] usb 6-1: device descriptor read/8, error -71 [ 406.399755][ T5722] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 406.419800][ T5722] usb 6-1: device descriptor read/8, error -71 [ 406.529566][ T5722] usb usb6-port1: unable to enumerate USB device [ 406.602257][ T7806] netlink: 768 bytes leftover after parsing attributes in process `syz.1.466'. [ 406.859033][ T5596] Bluetooth: hci0: command 0x0c1a tx timeout [ 406.942799][ T5601] Bluetooth: hci2: command 0x2016 tx timeout [ 406.942825][ T4901] Bluetooth: hci4: command 0x0c1a tx timeout [ 406.942846][ T5601] Bluetooth: hci1: command 0x2016 tx timeout [ 406.942894][ T5596] Bluetooth: hci5: command 0x0c1a tx timeout [ 407.119486][ T199] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 407.312624][ T199] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 407.317541][ T199] usb 5-1: config 0 has an invalid interface number: 177 but max is 0 [ 407.317575][ T199] usb 5-1: config 0 has no interface number 0 [ 407.317614][ T199] usb 5-1: too many endpoints for config 0 interface 177 altsetting 216: 122, using maximum allowed: 30 [ 407.317661][ T199] usb 5-1: config 0 interface 177 altsetting 216 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 407.317697][ T199] usb 5-1: config 0 interface 177 has no altsetting 0 [ 407.317737][ T199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.420995][ T199] usb 5-1: config 0 descriptor?? [ 407.916980][ T199] gspca_main: spca508-2.14.0 probing 8086:0110 [ 407.918296][ T199] gspca_spca508: reg_read err -71 [ 407.920864][ T199] gspca_spca508: reg_read err -71 [ 407.922057][ T199] gspca_spca508: reg_read err -71 [ 407.922692][ T199] gspca_spca508: reg_read err -71 [ 407.926077][ T199] gspca_spca508: reg_read err -71 [ 407.927322][ T199] gspca_spca508: reg write: error -71 [ 407.927655][ T199] spca508 5-1:0.177: probe with driver spca508 failed with error -71 [ 408.014331][ T199] usb 5-1: USB disconnect, device number 14 [ 408.339129][ T5757] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 408.530201][ T5757] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 408.533630][ T5757] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 408.533659][ T5757] usb 4-1: config 0 has no interface number 0 [ 408.533707][ T5757] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 408.533737][ T5757] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 408.533776][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.616890][ T5757] usb 4-1: config 0 descriptor?? [ 408.730660][ T5757] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 408.822214][ T7818] FAULT_INJECTION: forcing a failure. [ 408.822214][ T7818] name failslab, interval 1, probability 0, space 0, times 0 [ 408.822253][ T7818] CPU: 1 UID: 0 PID: 7818 Comm: syz.3.469 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 408.822283][ T7818] Tainted: [L]=SOFTLOCKUP [ 408.822292][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.822305][ T7818] Call Trace: [ 408.822314][ T7818] [ 408.822323][ T7818] dump_stack_lvl+0xe8/0x150 [ 408.822371][ T7818] should_fail_ex+0x467/0x600 [ 408.822412][ T7818] should_failslab+0xa8/0x100 [ 408.822440][ T7818] kmem_cache_alloc_noprof+0xa4/0x650 [ 408.822551][ T7818] ? alloc_empty_file+0x5b/0x1d0 [ 408.822584][ T7818] ? alloc_empty_file+0x5b/0x1d0 [ 408.822627][ T7818] alloc_empty_file+0x5b/0x1d0 [ 408.822663][ T7818] path_openat+0x8f/0x3850 [ 408.822784][ T7818] ? kasan_save_track+0x3e/0x80 [ 408.822869][ T7818] ? __kasan_slab_alloc+0x6c/0x80 [ 408.822889][ T7818] ? kmem_cache_alloc_noprof+0x355/0x650 [ 408.822921][ T7818] ? do_getname+0x2e/0x250 [ 408.822973][ T7818] ? do_sys_openat2+0xcc/0x200 [ 408.823004][ T7818] ? __x64_sys_openat+0x138/0x170 [ 408.823023][ T7818] ? do_syscall_64+0x174/0x580 [ 408.823054][ T7818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.823098][ T7818] do_file_open+0x23e/0x4a0 [ 408.823123][ T7818] ? lockdep_hardirqs_on+0x7a/0x110 [ 408.823159][ T7818] ? __pfx_do_file_open+0x10/0x10 [ 408.823211][ T7818] ? alloc_fd+0x654/0x6d0 [ 408.823281][ T7818] do_sys_openat2+0x115/0x200 [ 408.823320][ T7818] ? __pfx_do_sys_openat2+0x10/0x10 [ 408.823365][ T7818] ? ksys_write+0x248/0x270 [ 408.823394][ T7818] ? __pfx_ksys_write+0x10/0x10 [ 408.823425][ T7818] __x64_sys_openat+0x138/0x170 [ 408.823450][ T7818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.823474][ T7818] do_syscall_64+0x174/0x580 [ 408.823506][ T7818] ? trace_irq_disable+0x3b/0x140 [ 408.823541][ T7818] ? clear_bhb_loop+0x70/0xc0 [ 408.823569][ T7818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.823591][ T7818] RIP: 0033:0x7f1a3b68e90e [ 408.823612][ T7818] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.823630][ T7818] RSP: 002b:00007f1a39925b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 408.823652][ T7818] RAX: ffffffffffffffda RBX: 00007f1a399266c0 RCX: 00007f1a3b68e90e [ 408.823668][ T7818] RDX: 0000000000000002 RSI: 00007f1a39925c00 RDI: ffffffffffffff9c [ 408.823683][ T7818] RBP: 00007f1a39926090 R08: 0000000000000000 R09: 0000000000000000 [ 408.823695][ T7818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.823708][ T7818] R13: 00007f1a3b956038 R14: 00007f1a3b955fa0 R15: 00007ffdfd749a48 [ 408.823740][ T7818] [ 408.836935][ T199] usb 4-1: USB disconnect, device number 14 [ 413.580148][ T1575] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 413.734112][ T1575] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 413.735662][ T1575] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 413.735690][ T1575] usb 5-1: config 0 has no interface number 0 [ 413.735737][ T1575] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 413.735767][ T1575] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 413.735867][ T1575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.759402][ T5757] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 413.869431][ T1575] usb 5-1: config 0 descriptor?? [ 413.889029][ T5757] usb 6-1: device descriptor read/64, error -71 [ 413.989986][ T1575] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 414.138041][ T1575] usb 5-1: USB disconnect, device number 15 [ 414.139563][ T5757] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 414.279120][ T5757] usb 6-1: device descriptor read/64, error -71 [ 414.391827][ T5757] usb usb6-port1: attempt power cycle [ 414.749398][ T5757] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 414.769744][ T5757] usb 6-1: device descriptor read/8, error -71 [ 415.029639][ T5757] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 415.049839][ T5757] usb 6-1: device descriptor read/8, error -71 [ 415.159850][ T5757] usb usb6-port1: unable to enumerate USB device [ 415.338385][ T7869] loop5: detected capacity change from 0 to 7 [ 415.441453][ T7869] Dev loop5: unable to read RDB block 7 [ 415.441500][ T7869] loop5: unable to read partition table [ 415.441710][ T7869] loop5: partition table beyond EOD, truncated [ 415.444216][ T7869] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 415.729509][ T7880] netlink: 80 bytes leftover after parsing attributes in process `syz.1.487'. [ 421.759125][ T1575] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 421.926783][ T1575] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 421.928457][ T1575] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.928488][ T1575] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 421.963452][ T1575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.963484][ T1575] usb 2-1: Product: syz [ 421.963521][ T1575] usb 2-1: Manufacturer: syz [ 421.963533][ T1575] usb 2-1: SerialNumber: syz [ 422.217517][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 422.241657][ T7905] trusted_key: encrypted_key: master key parameter '' is invalid [ 423.069087][ T5721] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 423.155223][ T5596] Bluetooth: hci4: unexpected cc 0x2011 length: 3 > 1 [ 423.155261][ T5596] Bluetooth: hci4: unexpected event for opcode 0x2011 [ 423.199170][ T5721] usb 6-1: device descriptor read/64, error -71 [ 423.311114][ T7918] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 423.314928][ T7918] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 423.315176][ T7918] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 423.347669][ T7918] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 423.355466][ T7918] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 423.449044][ T5721] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 424.022413][ T5721] usb 6-1: device descriptor read/64, error -71 [ 424.139592][ T5721] usb usb6-port1: attempt power cycle [ 424.540195][ T5721] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 424.563761][ T5721] usb 6-1: device descriptor read/8, error -71 [ 424.637499][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.504'. [ 424.799805][ T5721] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 424.822996][ T5721] usb 6-1: device descriptor read/8, error -71 [ 424.929771][ T5721] usb usb6-port1: unable to enumerate USB device [ 425.663029][ T5596] Bluetooth: hci1: command 0x2016 tx timeout [ 425.663076][ T5596] Bluetooth: hci4: command 0x0c1a tx timeout [ 425.663165][ T5596] Bluetooth: hci0: command 0x0c1a tx timeout [ 425.663198][ T5596] Bluetooth: hci5: command 0x0c1a tx timeout [ 425.663228][ T5596] Bluetooth: hci2: command 0x2016 tx timeout [ 427.017161][ T1575] usb 2-1: USB disconnect, device number 11 [ 427.692600][ T7946] FAULT_INJECTION: forcing a failure. [ 427.692600][ T7946] name failslab, interval 1, probability 0, space 0, times 0 [ 427.692645][ T7946] CPU: 0 UID: 0 PID: 7946 Comm: syz.1.506 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 427.692681][ T7946] Tainted: [L]=SOFTLOCKUP [ 427.692690][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.692706][ T7946] Call Trace: [ 427.692715][ T7946] [ 427.692753][ T7946] dump_stack_lvl+0xe8/0x150 [ 427.692797][ T7946] should_fail_ex+0x467/0x600 [ 427.692842][ T7946] should_failslab+0xa8/0x100 [ 427.692875][ T7946] kmem_cache_alloc_node_noprof+0xae/0x670 [ 427.692919][ T7946] ? __alloc_skb+0x1d7/0x7a0 [ 427.693044][ T7946] ? __alloc_skb+0x1d7/0x7a0 [ 427.693077][ T7946] __alloc_skb+0x1d7/0x7a0 [ 427.693109][ T7946] alloc_skb_with_frags+0xc6/0x760 [ 427.693181][ T7946] sock_alloc_send_pskb+0x884/0x9a0 [ 427.693225][ T7946] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 427.693323][ T7946] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 427.693368][ T7946] ? packet_cached_dev_get+0x1c/0x2b0 [ 427.693462][ T7946] ? packet_cached_dev_get+0x1c/0x2b0 [ 427.693499][ T7946] packet_sendmsg+0x30f5/0x4e80 [ 427.693560][ T7946] ? __lock_acquire+0x683/0x2ce0 [ 427.693595][ T7946] ? do_raw_spin_lock+0x12b/0x2f0 [ 427.693636][ T7946] ? unwind_next_frame+0x8f/0x2550 [ 427.693711][ T7946] ? smack_socket_sendmsg+0x1a9/0x590 [ 427.693754][ T7946] ? __pfx_packet_sendmsg+0x10/0x10 [ 427.693799][ T7946] ? __lock_acquire+0x683/0x2ce0 [ 427.693828][ T7946] ? __lock_acquire+0x683/0x2ce0 [ 427.693858][ T7946] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 427.693951][ T7946] ? __kernel_text_address+0xd/0x30 [ 427.694027][ T7946] ? unwind_get_return_address+0x4d/0x90 [ 427.694057][ T7946] ? __pfx_packet_sendmsg+0x10/0x10 [ 427.694102][ T7946] sock_sendmsg_nosec+0x13a/0x180 [ 427.694145][ T7946] ____sys_sendmsg+0x565/0x870 [ 427.694176][ T7946] ? __might_fault+0xaf/0x130 [ 427.694245][ T7946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.694280][ T7946] ? import_iovec+0x73/0xa0 [ 427.694311][ T7946] ___sys_sendmsg+0x2a5/0x360 [ 427.694342][ T7946] ? __lock_acquire+0x683/0x2ce0 [ 427.694372][ T7946] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.694445][ T7946] ? __fget_files+0x2a/0x420 [ 427.694471][ T7946] ? __fget_files+0x3a8/0x420 [ 427.694508][ T7946] __x64_sys_sendmsg+0x1b7/0x290 [ 427.694543][ T7946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.694597][ T7946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.694625][ T7946] do_syscall_64+0x174/0x580 [ 427.694661][ T7946] ? trace_irq_disable+0x3b/0x140 [ 427.694700][ T7946] ? clear_bhb_loop+0x70/0xc0 [ 427.694742][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.694768][ T7946] RIP: 0033:0x7f1fc854e0d9 [ 427.694792][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.694815][ T7946] RSP: 002b:00007f1fc67a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.694842][ T7946] RAX: ffffffffffffffda RBX: 00007f1fc87d5fa0 RCX: 00007f1fc854e0d9 [ 427.694862][ T7946] RDX: 00000000200488d4 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 427.694878][ T7946] RBP: 00007f1fc67a6090 R08: 0000000000000000 R09: 0000000000000000 [ 427.694894][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.694908][ T7946] R13: 00007f1fc87d6038 R14: 00007f1fc87d5fa0 R15: 00007ffc2ecdffd8 [ 427.694947][ T7946] [ 430.687740][ T5722] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 430.819755][ T5722] usb 3-1: device descriptor read/64, error -71 [ 430.869455][ T5721] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 431.079075][ T5722] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 431.111698][ T5721] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 431.120253][ T5721] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.120310][ T5721] usb 6-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.120362][ T5721] usb 6-1: config 1 interface 0 has no altsetting 0 [ 431.141176][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.141205][ T5721] usb 6-1: Product: syz [ 431.141221][ T5721] usb 6-1: Manufacturer: syz [ 431.141236][ T5721] usb 6-1: SerialNumber: syz [ 431.209045][ T5722] usb 3-1: device descriptor read/64, error -71 [ 431.320233][ T5722] usb usb3-port1: attempt power cycle [ 431.432858][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.513'. [ 431.484916][ T7961] net_ratelimit: 9 callbacks suppressed [ 431.485068][ T7961] netlink: zone id is out of range [ 431.485724][ T7961] netlink: zone id is out of range [ 431.486739][ T7961] netlink: zone id is out of range [ 431.487753][ T7961] netlink: zone id is out of range [ 431.488852][ T7961] netlink: zone id is out of range [ 431.499457][ T7961] netlink: zone id is out of range [ 431.499565][ T7961] netlink: zone id is out of range [ 431.500711][ T7961] netlink: zone id is out of range [ 431.501139][ T7961] netlink: zone id is out of range [ 431.516351][ T7954] trusted_key: encrypted_key: master key parameter '' is invalid [ 431.531489][ T7961] netlink: zone id is out of range [ 431.739312][ T5722] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 431.770352][ T5722] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 431.772252][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 431.772288][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.772328][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.832442][ T5722] usb 3-1: config 0 descriptor?? [ 432.257650][ T5722] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 432.257708][ T5722] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 432.257737][ T5722] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 432.257765][ T5722] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 432.257793][ T5722] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 432.257819][ T5722] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 432.257846][ T5722] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 432.385690][ T5722] isku 0003:1E7D:319C.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 433.031825][ T7965] bond1: option lacp_rate: invalid value (4) [ 433.035086][ T5721] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input21 [ 433.114041][ T7965] bond1 (unregistering): Released all slaves [ 433.239031][ T5757] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 433.295516][ T4937] bcm5974 6-1:1.0: could not read from device [ 433.499961][ T5757] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 433.501705][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.501731][ T5757] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 433.501769][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.602919][ T5757] usb 5-1: config 0 descriptor?? [ 435.039472][ T4937] bcm5974 6-1:1.0: could not read from device [ 435.239342][ T5721] usb 6-1: USB disconnect, device number 17 [ 435.432104][ T5757] usb 5-1: USB disconnect, device number 16 [ 437.065018][ T8012] binder: 8009:8012 ioctl c0306201 0 returned -14 [ 437.166135][ T5912] usb 3-1: USB disconnect, device number 22 [ 437.284767][ T5914] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 439.609147][ T5722] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 439.630196][ T5914] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 439.631700][ T5914] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.631754][ T5914] usb 6-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 439.631785][ T5914] usb 6-1: config 1 interface 0 has no altsetting 0 [ 439.634746][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.634773][ T5914] usb 6-1: Product: syz [ 439.634788][ T5914] usb 6-1: Manufacturer: syz [ 439.634804][ T5914] usb 6-1: SerialNumber: syz [ 439.767134][ T5722] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 439.768775][ T5722] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.768803][ T5722] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 439.770271][ T5722] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 439.831330][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.831361][ T5722] usb 5-1: Product: syz [ 439.831377][ T5722] usb 5-1: Manufacturer: syz [ 439.831394][ T5722] usb 5-1: SerialNumber: syz [ 440.498357][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.516219][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.614370][ T8024] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 440.850620][ T5722] usb 5-1: can't set config #1, error -71 [ 441.007604][ T5722] usb 5-1: USB disconnect, device number 17 [ 441.066016][ T5914] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input22 [ 442.562776][ T4937] bcm5974 6-1:1.0: could not read from device [ 442.707829][ T4937] bcm5974 6-1:1.0: could not read from device [ 442.728224][ T5914] usb 6-1: USB disconnect, device number 18 [ 442.977635][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.539'. [ 443.011914][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.539'. [ 443.129084][ T5757] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 443.279835][ T5757] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 443.281232][ T5757] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.281259][ T5757] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 443.281304][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.351537][ T5757] usb 2-1: config 0 descriptor?? [ 445.321740][ T8061] FAULT_INJECTION: forcing a failure. [ 445.321740][ T8061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.321790][ T8061] CPU: 1 UID: 0 PID: 8061 Comm: syz.5.541 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 445.321822][ T8061] Tainted: [L]=SOFTLOCKUP [ 445.321831][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.321844][ T8061] Call Trace: [ 445.321853][ T8061] [ 445.321862][ T8061] dump_stack_lvl+0xe8/0x150 [ 445.321900][ T8061] should_fail_ex+0x467/0x600 [ 445.321940][ T8061] _copy_from_iter+0x1d3/0x1660 [ 445.322051][ T8061] ? rcu_is_watching+0x15/0xb0 [ 445.322124][ T8061] ? trace_kmem_cache_alloc+0x29/0xe0 [ 445.322172][ T8061] ? __pfx__copy_from_iter+0x10/0x10 [ 445.322207][ T8061] ? __alloc_skb+0x276/0x7a0 [ 445.322229][ T8061] ? __alloc_skb+0x276/0x7a0 [ 445.322258][ T8061] ? netlink_sendmsg+0x650/0xb40 [ 445.322326][ T8061] ? skb_put+0x112/0x210 [ 445.322353][ T8061] netlink_sendmsg+0x6c0/0xb40 [ 445.322391][ T8061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.322421][ T8061] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 445.322453][ T8061] ? __kernel_text_address+0xd/0x30 [ 445.322488][ T8061] ? unwind_get_return_address+0x4d/0x90 [ 445.322514][ T8061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.322542][ T8061] sock_sendmsg_nosec+0x13a/0x180 [ 445.322580][ T8061] ____sys_sendmsg+0x565/0x870 [ 445.322607][ T8061] ? __might_fault+0xaf/0x130 [ 445.322637][ T8061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.322674][ T8061] ? import_iovec+0x73/0xa0 [ 445.322702][ T8061] ___sys_sendmsg+0x2a5/0x360 [ 445.322729][ T8061] ? __lock_acquire+0x683/0x2ce0 [ 445.322757][ T8061] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.322822][ T8061] ? __fget_files+0x2a/0x420 [ 445.322844][ T8061] ? __fget_files+0x3a8/0x420 [ 445.322875][ T8061] __x64_sys_sendmsg+0x1b7/0x290 [ 445.322907][ T8061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.322954][ T8061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.322979][ T8061] do_syscall_64+0x174/0x580 [ 445.323013][ T8061] ? trace_irq_disable+0x3b/0x140 [ 445.323048][ T8061] ? clear_bhb_loop+0x70/0xc0 [ 445.323077][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.323099][ T8061] RIP: 0033:0x7f900716e0d9 [ 445.323121][ T8061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.323140][ T8061] RSP: 002b:00007f9005384028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.323174][ T8061] RAX: ffffffffffffffda RBX: 00007f90073f6180 RCX: 00007f900716e0d9 [ 445.323191][ T8061] RDX: 00000000000000c4 RSI: 0000200000000140 RDI: 0000000000000003 [ 445.323206][ T8061] RBP: 00007f9005384090 R08: 0000000000000000 R09: 0000000000000000 [ 445.323220][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.323233][ T8061] R13: 00007f90073f6218 R14: 00007f90073f6180 R15: 00007fff3481c9f8 [ 445.323269][ T8061] [ 445.958653][ T5912] usb 2-1: USB disconnect, device number 12 [ 446.265698][ T8066] faux_driver vgem: [drm] Unknown color mode 1024; guessing buffer size. [ 446.469126][ T5914] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 447.713579][ T5914] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 447.980785][ T5914] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.980817][ T5914] usb 6-1: config 1 interface 0 has no altsetting 0 [ 448.023851][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.023882][ T5914] usb 6-1: Product: syz [ 448.023898][ T5914] usb 6-1: Manufacturer: syz [ 448.023914][ T5914] usb 6-1: SerialNumber: syz [ 448.028331][ T8074] input: syz0 as /devices/virtual/input/input24 [ 448.485700][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.544'. [ 448.507985][ T8063] trusted_key: encrypted_key: master key parameter '' is invalid [ 450.318827][ T5914] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input25 [ 450.350782][ T4937] bcm5974 6-1:1.0: could not read from device [ 450.429745][ T5914] usb 6-1: USB disconnect, device number 19 [ 450.429869][ T4937] bcm5974 6-1:1.0: could not read from device [ 450.512910][ T8088] FAULT_INJECTION: forcing a failure. [ 450.512910][ T8088] name failslab, interval 1, probability 0, space 0, times 0 [ 450.512951][ T8088] CPU: 1 UID: 0 PID: 8088 Comm: syz.5.551 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 450.512982][ T8088] Tainted: [L]=SOFTLOCKUP [ 450.512991][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.513004][ T8088] Call Trace: [ 450.513013][ T8088] [ 450.513023][ T8088] dump_stack_lvl+0xe8/0x150 [ 450.513062][ T8088] should_fail_ex+0x467/0x600 [ 450.513101][ T8088] should_failslab+0xa8/0x100 [ 450.513130][ T8088] __kmalloc_noprof+0xfe/0x780 [ 450.513152][ T8088] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 450.513195][ T8088] ? iter_file_splice_write+0x1ed/0x1240 [ 450.513270][ T8088] ? iter_file_splice_write+0x1ed/0x1240 [ 450.513302][ T8088] iter_file_splice_write+0x1ed/0x1240 [ 450.513324][ T8088] ? __lock_acquire+0x683/0x2ce0 [ 450.513373][ T8088] ? __pfx_iter_file_splice_write+0x10/0x10 [ 450.513396][ T8088] ? direct_splice_actor+0x49/0x160 [ 450.513421][ T8088] ? direct_splice_actor+0x49/0x160 [ 450.513460][ T8088] ? __pfx_iter_file_splice_write+0x10/0x10 [ 450.513487][ T8088] direct_splice_actor+0x104/0x160 [ 450.513514][ T8088] splice_direct_to_actor+0x586/0xcc0 [ 450.513564][ T8088] ? __pfx_direct_splice_actor+0x10/0x10 [ 450.513590][ T8088] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 450.513627][ T8088] do_splice_direct+0x19b/0x2a0 [ 450.513655][ T8088] ? __pfx_do_splice_direct+0x10/0x10 [ 450.513681][ T8088] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 450.513717][ T8088] ? rw_verify_area+0x209/0x4d0 [ 450.513748][ T8088] do_sendfile+0x540/0x7e0 [ 450.513781][ T8088] ? lockdep_hardirqs_on+0x7a/0x110 [ 450.513823][ T8088] ? __pfx_do_sendfile+0x10/0x10 [ 450.513872][ T8088] __se_sys_sendfile64+0x144/0x1a0 [ 450.513909][ T8088] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 450.513953][ T8088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.513979][ T8088] do_syscall_64+0x174/0x580 [ 450.514011][ T8088] ? trace_irq_disable+0x3b/0x140 [ 450.514047][ T8088] ? clear_bhb_loop+0x70/0xc0 [ 450.514076][ T8088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.514099][ T8088] RIP: 0033:0x7f900716e0d9 [ 450.514120][ T8088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.514140][ T8088] RSP: 002b:00007f90053c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 450.514227][ T8088] RAX: ffffffffffffffda RBX: 00007f90073f5fa0 RCX: 00007f900716e0d9 [ 450.514245][ T8088] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 450.514258][ T8088] RBP: 00007f90053c6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.514272][ T8088] R10: 000000007fffffff R11: 0000000000000246 R12: 0000000000000001 [ 450.514287][ T8088] R13: 00007f90073f6038 R14: 00007f90073f5fa0 R15: 00007fff3481c9f8 [ 450.514324][ T8088] [ 450.569941][ T5721] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 450.754500][ T5721] usb 2-1: Using ep0 maxpacket: 8 [ 450.759132][ T5721] usb 2-1: New USB device found, idVendor=05b2, idProduct=00ff, bcdDevice= 0.00 [ 450.827374][ T5721] usb 2-1: too many endpoints for config 0 interface 0 altsetting 67: 66, using maximum allowed: 30 [ 450.827522][ T5721] usb 2-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.827598][ T5721] usb 2-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 450.827681][ T5721] usb 2-1: config 0 interface 0 has no altsetting 0 [ 450.827775][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.949454][ T5721] usb 2-1: config 0 descriptor?? [ 453.621616][ T5721] hid-generic 0003:05B2:00FF.000D: unknown main item tag 0x0 [ 453.621656][ T5721] hid-generic 0003:05B2:00FF.000D: unknown main item tag 0x0 [ 453.621684][ T5721] hid-generic 0003:05B2:00FF.000D: unknown main item tag 0x0 [ 453.621711][ T5721] hid-generic 0003:05B2:00FF.000D: unknown main item tag 0x0 [ 453.621737][ T5721] hid-generic 0003:05B2:00FF.000D: unknown main item tag 0x0 [ 453.621763][ T5721] hid-generic 0003:05B2:00FF.000D: unknown main item tag 0x0 [ 453.621802][ T5721] hid-generic 0003:05B2:00FF.000D: unknown main item tag 0x0 [ 453.621828][ T5721] hid-generic 0003:05B2:00FF.000D: unknown main item tag 0x0 [ 453.621856][ T5721] hid-generic 0003:05B2:00FF.000D: unknown main item tag 0x0 [ 453.621884][ T5721] hid-generic 0003:05B2:00FF.000D: unknown main item tag 0x0 [ 453.756477][ T5721] hid-generic 0003:05B2:00FF.000D: hidraw0: USB HID v0.01 Device [HID 05b2:00ff] on usb-dummy_hcd.1-1/input0 [ 454.089834][ T5721] usb 2-1: USB disconnect, device number 13 [ 455.343542][ T8109] netlink: 'syz.2.555': attribute type 3 has an invalid length. [ 455.343567][ T8109] netlink: 132 bytes leftover after parsing attributes in process `syz.2.555'. [ 455.433357][ T8105] fido_id[8105]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 455.810989][ T5701] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 455.993700][ T5701] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 456.003778][ T5701] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 456.003810][ T5701] usb 3-1: config 0 has no interface number 0 [ 456.003863][ T5701] usb 3-1: config 0 interface 41 has no altsetting 0 [ 456.029066][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.029096][ T5701] usb 3-1: Product: syz [ 456.029113][ T5701] usb 3-1: Manufacturer: syz [ 456.029129][ T5701] usb 3-1: SerialNumber: syz [ 456.068259][ T8108] FAULT_INJECTION: forcing a failure. [ 456.068259][ T8108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.068302][ T8108] CPU: 0 UID: 0 PID: 8108 Comm: syz.5.556 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 456.068333][ T8108] Tainted: [L]=SOFTLOCKUP [ 456.068342][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.068355][ T8108] Call Trace: [ 456.068364][ T8108] [ 456.068373][ T8108] dump_stack_lvl+0xe8/0x150 [ 456.068413][ T8108] should_fail_ex+0x467/0x600 [ 456.068452][ T8108] core_sys_select+0x8c0/0xb40 [ 456.068560][ T8108] ? get_pid_task+0x20/0x1f0 [ 456.068606][ T8108] ? __pfx_core_sys_select+0x10/0x10 [ 456.068675][ T8108] ? __pfx_set_user_sigmask+0x10/0x10 [ 456.068735][ T8108] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 456.068770][ T8108] __se_sys_pselect6+0x267/0x320 [ 456.068809][ T8108] ? __pfx___se_sys_pselect6+0x10/0x10 [ 456.068843][ T8108] ? __pfx_ksys_write+0x10/0x10 [ 456.068873][ T8108] ? __x64_sys_pselect6+0x21/0xf0 [ 456.068897][ T8108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.068916][ T8108] do_syscall_64+0x174/0x580 [ 456.068941][ T8108] ? trace_irq_disable+0x3b/0x140 [ 456.068968][ T8108] ? clear_bhb_loop+0x70/0xc0 [ 456.068989][ T8108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.069006][ T8108] RIP: 0033:0x7f900716e0d9 [ 456.069024][ T8108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.069039][ T8108] RSP: 002b:00007f90053a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 456.069058][ T8108] RAX: ffffffffffffffda RBX: 00007f90073f6090 RCX: 00007f900716e0d9 [ 456.069071][ T8108] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 456.069083][ T8108] RBP: 00007f90053a5090 R08: 0000000000000000 R09: 0000000000000000 [ 456.069094][ T8108] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 456.069104][ T8108] R13: 00007f90073f6128 R14: 00007f90073f6090 R15: 00007fff3481c9f8 [ 456.069131][ T8108] [ 456.320762][ T5701] usb 3-1: config 0 descriptor?? [ 457.131202][ T5701] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 457.222716][ T5701] usb 3-1: USB disconnect, device number 23 [ 457.629179][ T5914] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 459.069895][ T5914] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 459.077813][ T5914] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.077846][ T5914] usb 4-1: config 1 interface 0 has no altsetting 0 [ 459.175605][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.175637][ T5914] usb 4-1: Product: syz [ 459.175653][ T5914] usb 4-1: Manufacturer: syz [ 459.175668][ T5914] usb 4-1: SerialNumber: syz [ 459.443499][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 459.524122][ T8134] trusted_key: encrypted_key: master key parameter '' is invalid [ 462.044787][ T8162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.565'. [ 462.047306][ T8162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.565'. [ 462.936549][ T5914] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input26 [ 463.077634][ T4937] bcm5974 4-1:1.0: could not read from device [ 463.168195][ T8164] FAULT_INJECTION: forcing a failure. [ 463.168195][ T8164] name failslab, interval 1, probability 0, space 0, times 0 [ 463.168327][ T8164] CPU: 0 UID: 0 PID: 8164 Comm: syz.2.567 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 463.168358][ T8164] Tainted: [L]=SOFTLOCKUP [ 463.168365][ T8164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 463.168379][ T8164] Call Trace: [ 463.168387][ T8164] [ 463.168397][ T8164] dump_stack_lvl+0xe8/0x150 [ 463.168438][ T8164] should_fail_ex+0x467/0x600 [ 463.168479][ T8164] should_failslab+0xa8/0x100 [ 463.168507][ T8164] __kmalloc_cache_noprof+0xa0/0x6b0 [ 463.168531][ T8164] ? snd_pcm_oss_change_params_locked+0x16d/0x3c80 [ 463.168656][ T8164] ? snd_pcm_oss_change_params_locked+0x16d/0x3c80 [ 463.168700][ T8164] snd_pcm_oss_change_params_locked+0x16d/0x3c80 [ 463.168737][ T8164] ? __lock_acquire+0x683/0x2ce0 [ 463.168769][ T8164] ? tomoyo_path_number_perm+0x219/0x5f0 [ 463.168807][ T8164] ? tomoyo_path_number_perm+0x219/0x5f0 [ 463.168860][ T8164] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 463.168906][ T8164] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 463.168942][ T8164] ? lockdep_hardirqs_on+0x7a/0x110 [ 463.168973][ T8164] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 463.169005][ T8164] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 463.169041][ T8164] ? snd_pcm_oss_get_active_substream+0x136/0x280 [ 463.169098][ T8164] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 463.169128][ T8164] snd_pcm_oss_get_formats+0x34/0x420 [ 463.169156][ T8164] snd_pcm_oss_set_format+0x41/0x510 [ 463.169192][ T8164] ? __might_fault+0xaf/0x130 [ 463.169220][ T8164] snd_pcm_oss_ioctl+0xbec/0xe00 [ 463.169257][ T8164] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 463.169293][ T8164] __se_sys_ioctl+0xff/0x170 [ 463.169321][ T8164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.169345][ T8164] do_syscall_64+0x174/0x580 [ 463.169387][ T8164] ? trace_irq_disable+0x3b/0x140 [ 463.169424][ T8164] ? clear_bhb_loop+0x70/0xc0 [ 463.169452][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.169475][ T8164] RIP: 0033:0x7f1de8fee0d9 [ 463.169496][ T8164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.169516][ T8164] RSP: 002b:00007f1de7246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.169540][ T8164] RAX: ffffffffffffffda RBX: 00007f1de9275fa0 RCX: 00007f1de8fee0d9 [ 463.169556][ T8164] RDX: 0000200000001180 RSI: 00000000c0045005 RDI: 0000000000000005 [ 463.169570][ T8164] RBP: 00007f1de7246090 R08: 0000000000000000 R09: 0000000000000000 [ 463.169583][ T8164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.169596][ T8164] R13: 00007f1de9276038 R14: 00007f1de9275fa0 R15: 00007ffe8cc8fb88 [ 463.169629][ T8164] [ 463.490951][ T4937] bcm5974 4-1:1.0: could not read from device [ 463.496817][ T5914] usb 4-1: USB disconnect, device number 15 [ 463.556565][ T8169] net_ratelimit: 28 callbacks suppressed [ 463.556587][ T8169] netlink: zone id is out of range [ 463.557092][ T8169] netlink: zone id is out of range [ 463.557836][ T8169] netlink: zone id is out of range [ 463.558573][ T8169] netlink: zone id is out of range [ 463.591597][ T8169] netlink: zone id is out of range [ 463.592032][ T8169] netlink: zone id is out of range [ 463.592118][ T8169] netlink: zone id is out of range [ 463.592807][ T8169] netlink: zone id is out of range [ 463.593074][ T8169] netlink: zone id is out of range [ 463.593619][ T8169] netlink: zone id is out of range [ 464.004199][ T8174] fuse: Bad value for 'fd' [ 465.340712][ T8184] FAULT_INJECTION: forcing a failure. [ 465.340712][ T8184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.340752][ T8184] CPU: 1 UID: 0 PID: 8184 Comm: syz.3.571 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 465.340793][ T8184] Tainted: [L]=SOFTLOCKUP [ 465.340802][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.340817][ T8184] Call Trace: [ 465.340825][ T8184] [ 465.340835][ T8184] dump_stack_lvl+0xe8/0x150 [ 465.340875][ T8184] should_fail_ex+0x467/0x600 [ 465.340913][ T8184] _copy_from_user+0x2d/0xb0 [ 465.340937][ T8184] vhost_net_ioctl+0x29b/0x17e0 [ 465.341075][ T8184] ? smack_file_ioctl+0x263/0x360 [ 465.341144][ T8184] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 465.341185][ T8184] ? __fget_files+0x2a/0x420 [ 465.341207][ T8184] ? __fget_files+0x3a8/0x420 [ 465.341228][ T8184] ? __fget_files+0x2a/0x420 [ 465.341253][ T8184] ? bpf_lsm_file_ioctl+0x9/0x20 [ 465.341367][ T8184] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 465.341396][ T8184] __se_sys_ioctl+0xff/0x170 [ 465.341425][ T8184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.341450][ T8184] do_syscall_64+0x174/0x580 [ 465.341482][ T8184] ? trace_irq_disable+0x3b/0x140 [ 465.341517][ T8184] ? clear_bhb_loop+0x70/0xc0 [ 465.341545][ T8184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.341568][ T8184] RIP: 0033:0x7f1a3b6ce0d9 [ 465.341589][ T8184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.341608][ T8184] RSP: 002b:00007f1a39926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.341632][ T8184] RAX: ffffffffffffffda RBX: 00007f1a3b955fa0 RCX: 00007f1a3b6ce0d9 [ 465.341649][ T8184] RDX: 0000000000000000 RSI: 000000004008af00 RDI: 0000000000000003 [ 465.341662][ T8184] RBP: 00007f1a39926090 R08: 0000000000000000 R09: 0000000000000000 [ 465.341675][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.341687][ T8184] R13: 00007f1a3b956038 R14: 00007f1a3b955fa0 R15: 00007ffdfd749a48 [ 465.341721][ T8184] [ 465.602214][ T8189] FAULT_INJECTION: forcing a failure. [ 465.602214][ T8189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.602253][ T8189] CPU: 1 UID: 0 PID: 8189 Comm: syz.1.574 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 465.602282][ T8189] Tainted: [L]=SOFTLOCKUP [ 465.602290][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.602302][ T8189] Call Trace: [ 465.602310][ T8189] [ 465.602320][ T8189] dump_stack_lvl+0xe8/0x150 [ 465.602355][ T8189] should_fail_ex+0x467/0x600 [ 465.602393][ T8189] _copy_from_user+0x2d/0xb0 [ 465.602418][ T8189] memdup_user+0x5e/0xd0 [ 465.602519][ T8189] __se_sys_kexec_load+0x109/0x160 [ 465.602575][ T8189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.602600][ T8189] do_syscall_64+0x174/0x580 [ 465.602640][ T8189] ? trace_irq_disable+0x3b/0x140 [ 465.602673][ T8189] ? clear_bhb_loop+0x70/0xc0 [ 465.602701][ T8189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.602724][ T8189] RIP: 0033:0x7f1fc854e0d9 [ 465.602745][ T8189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.602775][ T8189] RSP: 002b:00007f1fc67a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 465.602798][ T8189] RAX: ffffffffffffffda RBX: 00007f1fc87d5fa0 RCX: 00007f1fc854e0d9 [ 465.602815][ T8189] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 00000000000000f5 [ 465.602829][ T8189] RBP: 00007f1fc67a6090 R08: 0000000000000000 R09: 0000000000000000 [ 465.602842][ T8189] R10: 00000000003e0000 R11: 0000000000000246 R12: 0000000000000001 [ 465.602855][ T8189] R13: 00007f1fc87d6038 R14: 00007f1fc87d5fa0 R15: 00007ffc2ecdffd8 [ 465.602890][ T8189] [ 466.013756][ T37] audit: type=1400 audit(1786520178.870:9): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8186 comm="syz.5.573" src=65532 dest=20002 netif=wpan0 [ 467.186444][ T8216] fuse: Bad value for 'fd' [ 469.880010][ T37] audit: type=1326 audit(1786520181.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.5.584" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900716e0d9 code=0x7ffc0000 [ 469.880073][ T37] audit: type=1326 audit(1786520181.900:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.5.584" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900716e0d9 code=0x7ffc0000 [ 469.881313][ T37] audit: type=1326 audit(1786520182.780:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.5.584" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900716e0d9 code=0x7ffc0000 [ 469.889252][ T37] audit: type=1326 audit(1786520182.790:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.5.584" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f900716e0d9 code=0x7ffc0000 [ 469.967963][ T37] audit: type=1326 audit(1786520182.790:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.5.584" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900716e0d9 code=0x7ffc0000 [ 469.968117][ T37] audit: type=1326 audit(1786520182.860:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.5.584" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900716e0d9 code=0x7ffc0000 [ 469.968536][ T37] audit: type=1326 audit(1786520182.790:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.5.584" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f900716e0d9 code=0x7ffc0000 [ 470.076291][ T37] audit: type=1326 audit(1786520182.950:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8222 comm="syz.5.584" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f900716e0d9 code=0x7ffc0000 [ 470.475080][ T8244] fuse: Unknown parameter '' [ 471.530512][ T8262] fuse: Bad value for 'fd' [ 472.601976][ T8268] tmpfs: Bad value for 'nr_inodes' [ 472.982070][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 473.208392][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 473.208439][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 473.231020][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.231088][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.347663][ T8270] FAULT_INJECTION: forcing a failure. [ 473.347663][ T8270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.347710][ T8270] CPU: 0 UID: 0 PID: 8270 Comm: syz.5.598 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 473.347744][ T8270] Tainted: [L]=SOFTLOCKUP [ 473.347753][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.347769][ T8270] Call Trace: [ 473.347778][ T8270] [ 473.347789][ T8270] dump_stack_lvl+0xe8/0x150 [ 473.347833][ T8270] should_fail_ex+0x467/0x600 [ 473.347876][ T8270] _copy_from_iter+0x1d3/0x1660 [ 473.347921][ T8270] ? rcu_is_watching+0x15/0xb0 [ 473.347953][ T8270] ? trace_kmem_cache_alloc+0x29/0xe0 [ 473.348003][ T8270] ? __pfx__copy_from_iter+0x10/0x10 [ 473.348043][ T8270] ? __alloc_skb+0x276/0x7a0 [ 473.348069][ T8270] ? __alloc_skb+0x276/0x7a0 [ 473.348101][ T8270] ? netlink_sendmsg+0x650/0xb40 [ 473.348134][ T8270] ? skb_put+0x112/0x210 [ 473.348164][ T8270] netlink_sendmsg+0x6c0/0xb40 [ 473.348216][ T8270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.348251][ T8270] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 473.348288][ T8270] ? __kernel_text_address+0xd/0x30 [ 473.348328][ T8270] ? unwind_get_return_address+0x4d/0x90 [ 473.348359][ T8270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.348389][ T8270] sock_sendmsg_nosec+0x13a/0x180 [ 473.348430][ T8270] ____sys_sendmsg+0x565/0x870 [ 473.348460][ T8270] ? __might_fault+0xaf/0x130 [ 473.348492][ T8270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.348535][ T8270] ? import_iovec+0x73/0xa0 [ 473.348567][ T8270] ___sys_sendmsg+0x2a5/0x360 [ 473.348597][ T8270] ? __lock_acquire+0x683/0x2ce0 [ 473.348628][ T8270] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.348699][ T8270] ? __fget_files+0x2a/0x420 [ 473.348724][ T8270] ? __fget_files+0x3a8/0x420 [ 473.348761][ T8270] __x64_sys_sendmsg+0x1b7/0x290 [ 473.348796][ T8270] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.348849][ T8270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.348874][ T8270] do_syscall_64+0x174/0x580 [ 473.348911][ T8270] ? trace_irq_disable+0x3b/0x140 [ 473.348950][ T8270] ? clear_bhb_loop+0x70/0xc0 [ 473.348983][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.349010][ T8270] RIP: 0033:0x7f900716e0d9 [ 473.349034][ T8270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.349056][ T8270] RSP: 002b:00007f90053c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.349083][ T8270] RAX: ffffffffffffffda RBX: 00007f90073f5fa0 RCX: 00007f900716e0d9 [ 473.349101][ T8270] RDX: 0000000020000080 RSI: 0000200000004c40 RDI: 0000000000000004 [ 473.349117][ T8270] RBP: 00007f90053c6090 R08: 0000000000000000 R09: 0000000000000000 [ 473.349133][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.349147][ T8270] R13: 00007f90073f6038 R14: 00007f90073f5fa0 R15: 00007fff3481c9f8 [ 473.349194][ T8270] [ 473.673057][ T9] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 473.673404][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 473.673488][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 473.720964][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 473.721065][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 473.726816][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 473.754084][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 473.754183][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 473.777358][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 473.935228][ T9] usb 3-1: USB disconnect, device number 24 [ 474.004667][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 474.027484][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 474.040357][ T9] keyspan 3-1:1.0: device disconnected [ 474.078312][ T8276] net_ratelimit: 9 callbacks suppressed [ 474.078334][ T8276] netlink: zone id is out of range [ 474.078747][ T8276] netlink: zone id is out of range [ 474.095995][ T8276] netlink: zone id is out of range [ 474.097380][ T8276] netlink: zone id is out of range [ 474.128298][ T8276] netlink: zone id is out of range [ 474.128696][ T8276] netlink: zone id is out of range [ 474.128765][ T8276] netlink: zone id is out of range [ 474.140833][ T8276] netlink: zone id is out of range [ 474.141072][ T8276] netlink: zone id is out of range [ 474.141575][ T8276] netlink: zone id is out of range [ 474.199158][ T8279] fuse: Unknown parameter '' [ 474.267991][ T8282] netlink: 768 bytes leftover after parsing attributes in process `syz.4.603'. [ 474.481073][ T5602] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 474.607271][ T8294] FAULT_INJECTION: forcing a failure. [ 474.607271][ T8294] name fail_futex, interval 1, probability 0, space 0, times 0 [ 474.607338][ T8294] CPU: 0 UID: 0 PID: 8294 Comm: syz.3.605 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 474.607371][ T8294] Tainted: [L]=SOFTLOCKUP [ 474.607379][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 474.607393][ T8294] Call Trace: [ 474.607401][ T8294] [ 474.607411][ T8294] dump_stack_lvl+0xe8/0x150 [ 474.607450][ T8294] should_fail_ex+0x467/0x600 [ 474.607490][ T8294] get_futex_key+0x8e1/0x1580 [ 474.607528][ T8294] ? __pfx_get_futex_key+0x10/0x10 [ 474.607554][ T8294] ? kstrtouint+0x6e/0xe0 [ 474.607602][ T8294] futex_wake_op+0x15c/0xdd0 [ 474.607643][ T8294] ? get_pid_task+0x20/0x1f0 [ 474.607673][ T8294] ? get_pid_task+0x20/0x1f0 [ 474.607710][ T8294] ? __pfx_futex_wake_op+0x10/0x10 [ 474.607751][ T8294] ? do_raw_spin_lock+0x12b/0x2f0 [ 474.607799][ T8294] do_futex+0x480/0x4e0 [ 474.607824][ T8294] ? lockdep_hardirqs_on+0x7a/0x110 [ 474.607863][ T8294] ? __pfx_do_futex+0x10/0x10 [ 474.607890][ T8294] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 474.607924][ T8294] __se_sys_futex+0x3a8/0x450 [ 474.607956][ T8294] ? ksys_write+0x248/0x270 [ 474.607984][ T8294] ? __pfx___se_sys_futex+0x10/0x10 [ 474.608012][ T8294] ? __pfx_ksys_write+0x10/0x10 [ 474.608045][ T8294] ? __x64_sys_futex+0x21/0xf0 [ 474.608072][ T8294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.608099][ T8294] do_syscall_64+0x174/0x580 [ 474.608131][ T8294] ? trace_irq_disable+0x3b/0x140 [ 474.608167][ T8294] ? clear_bhb_loop+0x70/0xc0 [ 474.608196][ T8294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.608218][ T8294] RIP: 0033:0x7f1a3b6ce0d9 [ 474.608239][ T8294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.608260][ T8294] RSP: 002b:00007f1a39905028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 474.608284][ T8294] RAX: ffffffffffffffda RBX: 00007f1a3b956090 RCX: 00007f1a3b6ce0d9 [ 474.608300][ T8294] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000140 [ 474.608315][ T8294] RBP: 00007f1a39905090 R08: 0000200000000000 R09: 0000000000000000 [ 474.608329][ T8294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.608342][ T8294] R13: 00007f1a3b956128 R14: 00007f1a3b956090 R15: 00007ffdfd749a48 [ 474.608376][ T8294] [ 474.641217][ T5602] usb 2-1: device descriptor read/64, error -71 [ 474.899062][ T5318] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 474.949065][ T5602] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 475.075402][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 475.081277][ T5602] usb 2-1: device descriptor read/64, error -71 [ 475.088975][ T5318] usb 3-1: Using ep0 maxpacket: 16 [ 475.089975][ T5318] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 475.091514][ T5318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.091540][ T5318] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 475.091580][ T5318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.147761][ T5318] usb 3-1: config 0 descriptor?? [ 475.180444][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.607'. [ 475.190983][ T5602] usb usb2-port1: attempt power cycle [ 475.568973][ T5318] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 475.662629][ T5602] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 475.843932][ T5602] usb 2-1: device descriptor read/8, error -71 [ 476.433263][ T5602] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 476.449706][ T5602] usb 2-1: device descriptor read/8, error -71 [ 476.559519][ T5602] usb usb2-port1: unable to enumerate USB device [ 476.607159][ T5318] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 476.628690][ T5318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.628718][ T5318] usb 5-1: Product: syz [ 476.628733][ T5318] usb 5-1: Manufacturer: syz [ 476.628747][ T5318] usb 5-1: SerialNumber: syz [ 476.688154][ T8309] FAULT_INJECTION: forcing a failure. [ 476.688154][ T8309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.688183][ T8309] CPU: 0 UID: 0 PID: 8309 Comm: syz.5.611 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 476.688205][ T8309] Tainted: [L]=SOFTLOCKUP [ 476.688211][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.688221][ T8309] Call Trace: [ 476.688227][ T8309] [ 476.688233][ T8309] dump_stack_lvl+0xe8/0x150 [ 476.688262][ T8309] should_fail_ex+0x467/0x600 [ 476.688290][ T8309] _copy_from_user+0x2d/0xb0 [ 476.688308][ T8309] ___sys_sendmsg+0x1c6/0x360 [ 476.688327][ T8309] ? __lock_acquire+0x683/0x2ce0 [ 476.688346][ T8309] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.688393][ T8309] ? __fget_files+0x2a/0x420 [ 476.688409][ T8309] ? __fget_files+0x3a8/0x420 [ 476.688431][ T8309] __x64_sys_sendmsg+0x1b7/0x290 [ 476.688452][ T8309] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.688484][ T8309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.688502][ T8309] do_syscall_64+0x174/0x580 [ 476.688525][ T8309] ? trace_irq_disable+0x3b/0x140 [ 476.688573][ T8309] ? clear_bhb_loop+0x70/0xc0 [ 476.688602][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.688624][ T8309] RIP: 0033:0x7f900716e0d9 [ 476.688645][ T8309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.688664][ T8309] RSP: 002b:00007f90053c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.688690][ T8309] RAX: ffffffffffffffda RBX: 00007f90073f5fa0 RCX: 00007f900716e0d9 [ 476.688703][ T8309] RDX: 0000000000000840 RSI: 0000200000000840 RDI: 0000000000000004 [ 476.688713][ T8309] RBP: 00007f90053c6090 R08: 0000000000000000 R09: 0000000000000000 [ 476.688723][ T8309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.688732][ T8309] R13: 00007f90073f6038 R14: 00007f90073f5fa0 R15: 00007fff3481c9f8 [ 476.688756][ T8309] [ 476.791490][ T5318] ums-karma 5-1:1.0: USB Mass Storage device detected [ 476.946189][ T5318] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 476.946189][ T5318] Please send a copy of this message to and [ 477.265026][ T5318] ums-karma 5-1:1.0: probe with driver ums-karma failed with error -5 [ 477.340211][ T5318] usb 5-1: USB disconnect, device number 18 [ 477.625016][ T9] usb 3-1: USB disconnect, device number 25 [ 477.707557][ T8320] fuse: Unknown parameter '' [ 478.893130][ T8336] 9p: Bad value for 'wfdno' [ 479.615201][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.617'. [ 479.633561][ T8329] net_ratelimit: 9 callbacks suppressed [ 479.633577][ T8329] netlink: zone id is out of range [ 479.643837][ T8329] netlink: zone id is out of range [ 479.644377][ T8329] netlink: zone id is out of range [ 479.644992][ T8329] netlink: zone id is out of range [ 479.650106][ T8329] netlink: zone id is out of range [ 479.650434][ T8329] netlink: zone id is out of range [ 479.650494][ T8329] netlink: zone id is out of range [ 479.651015][ T8329] netlink: zone id is out of range [ 479.651184][ T8329] netlink: zone id is out of range [ 479.651504][ T8329] netlink: zone id is out of range [ 479.796887][ T8324] netlink: 96 bytes leftover after parsing attributes in process `syz.5.613'. [ 480.060741][ T5596] Bluetooth: hci5: command 0x0c1a tx timeout [ 480.183132][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 480.541577][ T8347] vivid-002: disconnect [ 480.545860][ T8346] vivid-002: reconnect [ 480.876654][ T8354] netlink: 52 bytes leftover after parsing attributes in process `syz.1.622'. [ 480.876793][ T8354] netlink: 52 bytes leftover after parsing attributes in process `syz.1.622'. [ 480.876814][ T8354] netlink: 52 bytes leftover after parsing attributes in process `syz.1.622'. [ 481.692450][ T8349] No such timeout policy "s" [ 482.537240][ T8370] netlink: 32 bytes leftover after parsing attributes in process `syz.2.627'. [ 484.203432][ T8380] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 484.567832][ T5701] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 485.079144][ T5701] usb 3-1: Using ep0 maxpacket: 32 [ 485.098616][ T5701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 485.098677][ T5701] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.142095][ T5701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.142124][ T5701] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 485.142174][ T5701] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.305815][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.305845][ T5701] usb 3-1: Product: syz [ 485.305861][ T5701] usb 3-1: Manufacturer: syz [ 485.305877][ T5701] usb 3-1: SerialNumber: syz [ 485.562818][ T8383] net_ratelimit: 10 callbacks suppressed [ 485.562842][ T8383] netlink: zone id is out of range [ 485.569982][ T8383] netlink: zone id is out of range [ 485.604013][ T8383] netlink: zone id is out of range [ 485.604696][ T8383] netlink: zone id is out of range [ 485.625795][ T8383] netlink: zone id is out of range [ 485.651982][ T8383] netlink: zone id is out of range [ 485.652159][ T8383] netlink: zone id is out of range [ 485.652891][ T8383] netlink: zone id is out of range [ 485.653248][ T8383] netlink: zone id is out of range [ 485.668754][ T8383] netlink: zone id is out of range [ 485.709931][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'. [ 486.785031][ T8388] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 487.189399][ T199] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 488.221399][ T199] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 488.229225][ T199] usb 5-1: config 0 has no interfaces? [ 488.229272][ T199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.327778][ T5701] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 488.327834][ T5701] cdc_ncm 3-1:1.0: bind() failure [ 488.354137][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'. [ 488.354179][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'. [ 488.354218][ T8399] netlink: 'syz.1.634': attribute type 4 has an invalid length. [ 488.401360][ T199] usb 5-1: config 0 descriptor?? [ 488.401914][ T5701] usb 3-1: USB disconnect, device number 26 [ 488.453427][ T8397] FAULT_INJECTION: forcing a failure. [ 488.453427][ T8397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.453466][ T8397] CPU: 1 UID: 0 PID: 8397 Comm: syz.3.632 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 488.453495][ T8397] Tainted: [L]=SOFTLOCKUP [ 488.453503][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 488.453517][ T8397] Call Trace: [ 488.453525][ T8397] [ 488.453535][ T8397] dump_stack_lvl+0xe8/0x150 [ 488.453573][ T8397] should_fail_ex+0x467/0x600 [ 488.453611][ T8397] _copy_from_user+0x2d/0xb0 [ 488.453637][ T8397] kstrtouint_from_user+0xd6/0x180 [ 488.453672][ T8397] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 488.453702][ T8397] ? __lock_acquire+0x683/0x2ce0 [ 488.453741][ T8397] proc_fail_nth_write+0x8e/0x210 [ 488.453774][ T8397] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 488.453806][ T8397] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 488.453836][ T8397] vfs_write+0x29f/0xbb0 [ 488.453872][ T8397] ? __pfx_vfs_write+0x10/0x10 [ 488.453901][ T8397] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 488.453932][ T8397] ? lockdep_hardirqs_on+0x7a/0x110 [ 488.453969][ T8397] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 488.454001][ T8397] ? mutex_lock_nested+0x152/0x1d0 [ 488.454024][ T8397] ? fdget_pos+0x252/0x320 [ 488.454056][ T8397] ksys_write+0x156/0x270 [ 488.454085][ T8397] ? __pfx_ksys_write+0x10/0x10 [ 488.454119][ T8397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.454143][ T8397] do_syscall_64+0x174/0x580 [ 488.454175][ T8397] ? trace_irq_disable+0x3b/0x140 [ 488.454209][ T8397] ? clear_bhb_loop+0x70/0xc0 [ 488.454237][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.454259][ T8397] RIP: 0033:0x7f1a3b68e90e [ 488.454279][ T8397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 488.454300][ T8397] RSP: 002b:00007f1a398e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 488.454324][ T8397] RAX: ffffffffffffffda RBX: 00007f1a398e46c0 RCX: 00007f1a3b68e90e [ 488.454340][ T8397] RDX: 0000000000000001 RSI: 00007f1a398e40a0 RDI: 0000000000000009 [ 488.454353][ T8397] RBP: 00007f1a398e4090 R08: 0000000000000000 R09: 0000000000000000 [ 488.454367][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.454380][ T8397] R13: 00007f1a3b956218 R14: 00007f1a3b956180 R15: 00007ffdfd749a48 [ 488.454415][ T8397] [ 489.023198][ T8388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.065597][ T8404] FAULT_INJECTION: forcing a failure. [ 489.065597][ T8404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.065644][ T8404] CPU: 0 UID: 0 PID: 8404 Comm: syz.3.636 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 489.065675][ T8404] Tainted: [L]=SOFTLOCKUP [ 489.065683][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 489.065696][ T8404] Call Trace: [ 489.065705][ T8404] [ 489.065714][ T8404] dump_stack_lvl+0xe8/0x150 [ 489.065751][ T8404] should_fail_ex+0x467/0x600 [ 489.065787][ T8404] _copy_from_user+0x2d/0xb0 [ 489.065812][ T8404] sw_sync_ioctl+0x110/0x1110 [ 489.065920][ T8404] ? smack_file_ioctl+0x263/0x360 [ 489.065959][ T8404] ? __pfx_smack_file_ioctl+0x10/0x10 [ 489.065995][ T8404] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 489.066025][ T8404] ? __fget_files+0x2a/0x420 [ 489.066047][ T8404] ? __fget_files+0x3a8/0x420 [ 489.066068][ T8404] ? __fget_files+0x2a/0x420 [ 489.066093][ T8404] ? bpf_lsm_file_ioctl+0x9/0x20 [ 489.066127][ T8404] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 489.066149][ T8404] __se_sys_ioctl+0xff/0x170 [ 489.066178][ T8404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.066204][ T8404] do_syscall_64+0x174/0x580 [ 489.066237][ T8404] ? trace_irq_disable+0x3b/0x140 [ 489.066273][ T8404] ? clear_bhb_loop+0x70/0xc0 [ 489.066302][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.066324][ T8404] RIP: 0033:0x7f1a3b6ce0d9 [ 489.066345][ T8404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.066365][ T8404] RSP: 002b:00007f1a39926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.066389][ T8404] RAX: ffffffffffffffda RBX: 00007f1a3b955fa0 RCX: 00007f1a3b6ce0d9 [ 489.066406][ T8404] RDX: 00002000000002c0 RSI: 0000000040045701 RDI: 0000000000000004 [ 489.066421][ T8404] RBP: 00007f1a39926090 R08: 0000000000000000 R09: 0000000000000000 [ 489.066435][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.066448][ T8404] R13: 00007f1a3b956038 R14: 00007f1a3b955fa0 R15: 00007ffdfd749a48 [ 489.066482][ T8404] [ 489.478448][ T8387] kcov: kcov: vm_insert_page() failed [ 490.663969][ T5318] usb 5-1: USB disconnect, device number 19 [ 492.299833][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.327427][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.599961][ T5318] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 492.691171][ T8429] FAULT_INJECTION: forcing a failure. [ 492.691171][ T8429] name failslab, interval 1, probability 0, space 0, times 0 [ 492.691216][ T8429] CPU: 1 UID: 0 PID: 8429 Comm: syz.4.641 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 492.691250][ T8429] Tainted: [L]=SOFTLOCKUP [ 492.691259][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.691275][ T8429] Call Trace: [ 492.691285][ T8429] [ 492.691295][ T8429] dump_stack_lvl+0xe8/0x150 [ 492.691343][ T8429] should_fail_ex+0x467/0x600 [ 492.691388][ T8429] should_failslab+0xa8/0x100 [ 492.691428][ T8429] __kmalloc_noprof+0xfe/0x780 [ 492.691451][ T8429] ? rcu_is_watching+0x15/0xb0 [ 492.691483][ T8429] ? tomoyo_realpath_from_path+0xef/0x640 [ 492.691514][ T8429] ? tomoyo_realpath_from_path+0xef/0x640 [ 492.691555][ T8429] tomoyo_realpath_from_path+0xef/0x640 [ 492.691603][ T8429] tomoyo_path_perm+0x283/0x560 [ 492.691644][ T8429] ? tomoyo_path_perm+0x251/0x560 [ 492.691686][ T8429] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 492.691788][ T8429] security_inode_getattr+0x12b/0x310 [ 492.691924][ T8429] vfs_getattr+0x23/0x70 [ 492.691965][ T8429] vfs_statx_path+0x2b/0x230 [ 492.691989][ T8429] ? vfs_statx+0x107/0x200 [ 492.692027][ T8429] vfs_statx+0x12e/0x200 [ 492.692065][ T8429] ? __pfx_vfs_statx+0x10/0x10 [ 492.692099][ T8429] ? strncpy_from_user+0x150/0x2c0 [ 492.692138][ T8429] ? do_getname+0x151/0x250 [ 492.692178][ T8429] vfs_fstatat+0x11b/0x170 [ 492.692219][ T8429] __x64_sys_newfstatat+0x151/0x200 [ 492.692263][ T8429] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 492.692346][ T8429] ? __pfx_ksys_write+0x10/0x10 [ 492.692387][ T8429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.692416][ T8429] do_syscall_64+0x174/0x580 [ 492.692460][ T8429] ? trace_irq_disable+0x3b/0x140 [ 492.692499][ T8429] ? clear_bhb_loop+0x70/0xc0 [ 492.692530][ T8429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.692555][ T8429] RIP: 0033:0x7fd1f483e0d9 [ 492.692579][ T8429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.692601][ T8429] RSP: 002b:00007fd1f2a96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 492.692627][ T8429] RAX: ffffffffffffffda RBX: 00007fd1f4ac5fa0 RCX: 00007fd1f483e0d9 [ 492.692645][ T8429] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 492.692662][ T8429] RBP: 00007fd1f2a96090 R08: 0000000000000000 R09: 0000000000000000 [ 492.692677][ T8429] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 492.692691][ T8429] R13: 00007fd1f4ac6038 R14: 00007fd1f4ac5fa0 R15: 00007fff3383c0f8 [ 492.692732][ T8429] [ 492.724731][ T8429] ERROR: Out of memory at tomoyo_realpath_from_path. [ 492.735646][ T8428] net_ratelimit: 9 callbacks suppressed [ 492.735666][ T8428] netlink: zone id is out of range [ 492.745637][ T8428] netlink: zone id is out of range [ 492.746279][ T8428] netlink: zone id is out of range [ 492.746852][ T8428] netlink: zone id is out of range [ 492.768573][ T5318] usb 6-1: Using ep0 maxpacket: 16 [ 492.769849][ T5318] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 492.774055][ T5318] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.774119][ T5318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 492.774467][ T5318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 492.774533][ T5318] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 492.774614][ T5318] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.805596][ T5318] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 492.805671][ T5318] usb 6-1: Manufacturer: syz [ 492.833888][ T8428] netlink: zone id is out of range [ 492.835000][ T8428] netlink: zone id is out of range [ 492.871230][ T8428] netlink: zone id is out of range [ 492.923089][ T8428] netlink: zone id is out of range [ 492.962660][ T8428] netlink: zone id is out of range [ 492.963931][ T8428] netlink: zone id is out of range [ 493.223748][ T5318] usb 6-1: config 0 descriptor?? [ 493.792160][ T5318] rc_core: IR keymap rc-hauppauge not found [ 493.792198][ T5318] Registered IR keymap rc-empty [ 493.793133][ T5318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 494.475555][ T5318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 494.508609][ T5318] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 494.512088][ T5318] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input27 [ 494.734887][ T5318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 494.799161][ T5318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 494.820137][ T5318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 494.839108][ T5318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 494.859076][ T5318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 494.889469][ T5318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 494.909017][ T5318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 494.929014][ T5318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 494.949390][ T5318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 494.969659][ T5318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 494.994975][ T5318] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 494.995004][ T5318] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 495.051895][ T5318] usb 6-1: USB disconnect, device number 20 [ 495.100820][ T8456] FAULT_INJECTION: forcing a failure. [ 495.100820][ T8456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.100859][ T8456] CPU: 0 UID: 0 PID: 8456 Comm: syz.1.649 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 495.100889][ T8456] Tainted: [L]=SOFTLOCKUP [ 495.100897][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.100912][ T8456] Call Trace: [ 495.100921][ T8456] [ 495.100930][ T8456] dump_stack_lvl+0xe8/0x150 [ 495.100969][ T8456] should_fail_ex+0x467/0x600 [ 495.101006][ T8456] _copy_from_iter+0x1d3/0x1660 [ 495.101045][ T8456] ? rcu_is_watching+0x15/0xb0 [ 495.101072][ T8456] ? trace_kmem_cache_alloc+0x29/0xe0 [ 495.101112][ T8456] ? __pfx__copy_from_iter+0x10/0x10 [ 495.101148][ T8456] ? __alloc_skb+0x276/0x7a0 [ 495.101170][ T8456] ? __alloc_skb+0x276/0x7a0 [ 495.101199][ T8456] ? netlink_sendmsg+0x650/0xb40 [ 495.101228][ T8456] ? skb_put+0x112/0x210 [ 495.101255][ T8456] netlink_sendmsg+0x6c0/0xb40 [ 495.101293][ T8456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.101324][ T8456] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 495.101356][ T8456] ? __kernel_text_address+0xd/0x30 [ 495.101392][ T8456] ? unwind_get_return_address+0x4d/0x90 [ 495.101422][ T8456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.101450][ T8456] sock_sendmsg_nosec+0x13a/0x180 [ 495.101486][ T8456] ____sys_sendmsg+0x565/0x870 [ 495.101512][ T8456] ? __might_fault+0xaf/0x130 [ 495.101540][ T8456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.101578][ T8456] ? import_iovec+0x73/0xa0 [ 495.101606][ T8456] ___sys_sendmsg+0x2a5/0x360 [ 495.101640][ T8456] ? __lock_acquire+0x683/0x2ce0 [ 495.101665][ T8456] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.101727][ T8456] ? __fget_files+0x2a/0x420 [ 495.101747][ T8456] ? __fget_files+0x3a8/0x420 [ 495.101777][ T8456] __x64_sys_sendmsg+0x1b7/0x290 [ 495.101806][ T8456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.101850][ T8456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.101874][ T8456] do_syscall_64+0x174/0x580 [ 495.101905][ T8456] ? trace_irq_disable+0x3b/0x140 [ 495.101939][ T8456] ? clear_bhb_loop+0x70/0xc0 [ 495.101965][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.101988][ T8456] RIP: 0033:0x7f1fc854e0d9 [ 495.102008][ T8456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.102028][ T8456] RSP: 002b:00007f1fc67a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.102051][ T8456] RAX: ffffffffffffffda RBX: 00007f1fc87d5fa0 RCX: 00007f1fc854e0d9 [ 495.102066][ T8456] RDX: 0000000000004800 RSI: 0000200000001200 RDI: 0000000000000003 [ 495.102080][ T8456] RBP: 00007f1fc67a6090 R08: 0000000000000000 R09: 0000000000000000 [ 495.102093][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.102105][ T8456] R13: 00007f1fc87d6038 R14: 00007f1fc87d5fa0 R15: 00007ffc2ecdffd8 [ 495.102138][ T8456] [ 496.191667][ T5318] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 496.481337][ T5318] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 496.482950][ T5318] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.483004][ T5318] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 496.483037][ T5318] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 496.483062][ T5318] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.483105][ T5318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.523165][ T8480] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5591] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8480] [ 496.821934][ T5722] IPVS: starting estimator thread 0... [ 496.956014][ T8482] IPVS: using max 8 ests per chain, 19200 per kthread [ 497.320192][ T8452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.320785][ T8452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.849144][ T5318] gud 6-1:1.0: Failed to add properties (error=-71) [ 497.849191][ T5318] gud 6-1:1.0: probe with driver gud failed with error -71 [ 497.902671][ T5701] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 498.009523][ T5318] usb 6-1: USB disconnect, device number 21 [ 498.077427][ T5701] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 498.092843][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.092904][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.092949][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.246430][ T5701] usb 5-1: config 0 descriptor?? [ 498.284341][ T5701] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 499.171191][ T9] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 499.294438][ T5722] usb 5-1: USB disconnect, device number 20 [ 499.350372][ T9] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 499.352142][ T9] usb 6-1: config 9 interface 0 has no altsetting 0 [ 499.356313][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.356333][ T9] usb 6-1: Product: syz [ 499.356344][ T9] usb 6-1: Manufacturer: syz [ 499.356356][ T9] usb 6-1: SerialNumber: syz [ 499.465865][ T8510] fuse: Bad value for 'fd' [ 499.789899][ T5701] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 499.796031][ T8508] usb usb8: usbfs: process 8508 (syz.3.661) did not claim interface 0 before use [ 499.955367][ T5701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 499.955430][ T5701] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.957293][ T5701] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 499.957352][ T5701] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 499.957378][ T5701] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 499.966298][ T5701] usb 3-1: string descriptor 0 read error: -22 [ 499.966663][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.116347][ T9] snd-usb-caiaq 6-1:9.0: can't set alt interface. [ 500.116432][ T9] usb 6-1: unable to init card! (ret=-5) [ 500.135317][ T9] snd-usb-caiaq 6-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 500.160099][ T9] usb 6-1: USB disconnect, device number 22 [ 500.306251][ T8511] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 500.635467][ T5701] cdc_ncm 3-1:1.0: bind() failure [ 500.845004][ T5701] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 500.845081][ T5701] cdc_ncm 3-1:1.1: bind() failure [ 500.907204][ T5701] usb 3-1: USB disconnect, device number 27 [ 501.668247][ T37] audit: type=1326 audit(1786520214.560:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.3.666" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3b6ce0d9 code=0x7ffc0000 [ 501.709124][ T37] audit: type=1326 audit(1786520214.600:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.3.666" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3b6ce0d9 code=0x7ffc0000 [ 501.709176][ T37] audit: type=1326 audit(1786520214.560:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.3.666" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3b6ce0d9 code=0x7ffc0000 [ 501.709222][ T37] audit: type=1326 audit(1786520214.600:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.3.666" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f1a3b6ce0d9 code=0x7ffc0000 [ 501.709270][ T37] audit: type=1326 audit(1786520214.600:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.3.666" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3b6ce0d9 code=0x7ffc0000 [ 501.709318][ T37] audit: type=1326 audit(1786520214.600:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.3.666" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3b6ce0d9 code=0x7ffc0000 [ 501.710586][ T37] audit: type=1326 audit(1786520214.610:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.3.666" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3b6ce0d9 code=0x7ffc0000 [ 501.710641][ T37] audit: type=1326 audit(1786520214.610:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.3.666" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3b6ce0d9 code=0x7ffc0000 [ 501.711053][ T37] audit: type=1326 audit(1786520214.610:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.3.666" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3b6ce0d9 code=0x7ffc0000 [ 501.712653][ T37] audit: type=1326 audit(1786520214.610:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8520 comm="syz.3.666" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f1a3b6ce0d9 code=0x7ffc0000 [ 501.716202][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.716275][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.335447][ T8530] FAULT_INJECTION: forcing a failure. [ 503.335447][ T8530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.335506][ T8530] CPU: 1 UID: 0 PID: 8530 Comm: syz.2.668 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 503.335529][ T8530] Tainted: [L]=SOFTLOCKUP [ 503.335535][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.335545][ T8530] Call Trace: [ 503.335551][ T8530] [ 503.335558][ T8530] dump_stack_lvl+0xe8/0x150 [ 503.335587][ T8530] should_fail_ex+0x467/0x600 [ 503.335613][ T8530] _copy_from_user+0x2d/0xb0 [ 503.335638][ T8530] ___sys_sendmsg+0x1c6/0x360 [ 503.335658][ T8530] ? __lock_acquire+0x683/0x2ce0 [ 503.335677][ T8530] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.335720][ T8530] ? __fget_files+0x2a/0x420 [ 503.335735][ T8530] ? __fget_files+0x3a8/0x420 [ 503.335757][ T8530] __x64_sys_sendmsg+0x1b7/0x290 [ 503.335779][ T8530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.335811][ T8530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.335828][ T8530] do_syscall_64+0x174/0x580 [ 503.335856][ T8530] ? trace_irq_disable+0x3b/0x140 [ 503.335888][ T8530] ? clear_bhb_loop+0x70/0xc0 [ 503.335908][ T8530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.335923][ T8530] RIP: 0033:0x7f1de8fee0d9 [ 503.335938][ T8530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.335952][ T8530] RSP: 002b:00007f1de7246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.335968][ T8530] RAX: ffffffffffffffda RBX: 00007f1de9275fa0 RCX: 00007f1de8fee0d9 [ 503.336010][ T8530] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000005 [ 503.336024][ T8530] RBP: 00007f1de7246090 R08: 0000000000000000 R09: 0000000000000000 [ 503.336038][ T8530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.336051][ T8530] R13: 00007f1de9276038 R14: 00007f1de9275fa0 R15: 00007ffe8cc8fb88 [ 503.336084][ T8530] [ 503.553614][ T8530] ieee802154 phy0 wpan0: encryption failed: -90 [ 503.712133][ T8532] net_ratelimit: 9 callbacks suppressed [ 503.712153][ T8532] netlink: zone id is out of range [ 503.712744][ T8532] netlink: zone id is out of range [ 503.717900][ T8532] netlink: zone id is out of range [ 503.718720][ T8532] netlink: zone id is out of range [ 503.721545][ T8532] netlink: zone id is out of range [ 503.758304][ T8532] netlink: zone id is out of range [ 503.758407][ T8532] netlink: zone id is out of range [ 503.770538][ T8532] netlink: zone id is out of range [ 503.770732][ T8532] netlink: zone id is out of range [ 503.771069][ T8532] netlink: zone id is out of range [ 504.109318][ T5318] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 504.258984][ T5318] usb 6-1: Using ep0 maxpacket: 16 [ 504.259895][ T5318] usb 6-1: New USB device found, idVendor=1608, idProduct=030e, bcdDevice=fd.7d [ 504.267197][ T5318] usb 6-1: config 7 has an invalid interface number: 191 but max is 2 [ 504.267228][ T5318] usb 6-1: config 7 has an invalid interface number: 87 but max is 2 [ 504.267249][ T5318] usb 6-1: config 7 has an invalid interface number: 29 but max is 2 [ 504.267270][ T5318] usb 6-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 504.267357][ T5318] usb 6-1: config 7 has no interface number 0 [ 504.267373][ T5318] usb 6-1: config 7 has no interface number 1 [ 504.267391][ T5318] usb 6-1: config 7 has no interface number 2 [ 504.267462][ T5318] usb 6-1: config 7 interface 191 altsetting 9 bulk endpoint 0xC has invalid maxpacket 8 [ 504.267490][ T5318] usb 6-1: config 7 interface 191 altsetting 9 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 504.267517][ T5318] usb 6-1: config 7 interface 191 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 504.267543][ T5318] usb 6-1: config 7 interface 191 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 504.267582][ T5318] usb 6-1: config 7 interface 87 altsetting 64 has a duplicate endpoint with address 0x3, skipping [ 504.267620][ T5318] usb 6-1: config 7 interface 29 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 504.267645][ T5318] usb 6-1: config 7 interface 29 altsetting 4 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 504.270336][ T5318] usb 6-1: config 7 interface 29 altsetting 4 endpoint 0x82 has invalid maxpacket 28952, setting to 64 [ 504.270371][ T5318] usb 6-1: config 7 interface 29 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 504.270400][ T5318] usb 6-1: config 7 interface 191 has no altsetting 0 [ 504.270419][ T5318] usb 6-1: config 7 interface 87 has no altsetting 0 [ 504.270438][ T5318] usb 6-1: config 7 interface 29 has no altsetting 0 [ 504.477542][ T5318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.477577][ T5318] usb 6-1: Product: 쎦ὶ䐔蓟ꎟᆪ쿘逽큅㽷ffゥ懻嘻灁䛯≌탫⸸␮ꊄ⍶음᠜뻨ﶧ팣뜓ꫳ鹅쩀ｦ਄ꊳ❜Ω轎᷼ொ횗윎棻嬽歨䲟剩碴ᑒ郥밑ᝢ䃨灥䒕䘧Ꭳ夸⛶㘁࿐肦氖ㄞሯ᷵荰巰㖿ꌞ麠Σ殌鮀丕䙀䇚ꁀ薾䑌쓆ᙘ郃疦嗥䊡籧ⶖ륎ᄿ픍䓽議ꫦ骀旗鐉炩洛 [ 504.477617][ T5318] usb 6-1: Manufacturer: 䰊 [ 504.477636][ T5318] usb 6-1: SerialNumber: ⽖皹⋭示燮塁㬩撰㋸鵂䇏勠鑒렯͒玱概쬇鯓岔ᢋ㹎១蜫⤃⍵䢽꽛怢綩芹꾲轪㑭甡ꔐ [ 504.570828][ T8535] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 504.571080][ T8535] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 504.571334][ T8535] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 505.232088][ T5318] io_ti 6-1:7.191: required endpoints missing [ 505.396959][ T5318] io_ti 6-1:7.87: required endpoints missing [ 505.457370][ T5318] io_ti 6-1:7.29: required endpoints missing [ 505.504950][ T5318] usb 6-1: USB disconnect, device number 23 [ 508.138287][ T8566] vhci_hcd vhci_hcd.0: remove, state 4 [ 508.138817][ T8566] usb usb34: USB disconnect, device number 1 [ 508.930069][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.685'. [ 508.930353][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.685'. [ 508.930560][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.685'. [ 509.290336][ T5722] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 509.445794][ T5722] usb 4-1: device descriptor read/64, error -71 [ 509.679066][ T5722] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 509.831594][ T5722] usb 4-1: device descriptor read/64, error -71 [ 509.945498][ T5722] usb usb4-port1: attempt power cycle [ 510.316007][ T5722] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 510.347956][ T5722] usb 4-1: device descriptor read/8, error -71 [ 511.007550][ T5722] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 511.649046][ T5722] usb 4-1: device descriptor read/8, error -71 [ 511.651764][ T7582] vhci_hcd vhci_hcd.0: stop threads [ 511.651785][ T7582] vhci_hcd vhci_hcd.0: release socket [ 511.651819][ T7582] vhci_hcd vhci_hcd.0: disconnect device [ 511.712885][ T3416] vhci_hcd vhci_hcd.0: stop threads [ 511.712906][ T3416] vhci_hcd vhci_hcd.0: release socket [ 511.712940][ T3416] vhci_hcd vhci_hcd.0: disconnect device [ 511.759366][ T5722] usb usb4-port1: unable to enumerate USB device [ 511.762764][ T8566] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 511.782648][ T3416] vhci_hcd vhci_hcd.0: stop threads [ 511.782667][ T3416] vhci_hcd vhci_hcd.0: release socket [ 511.782740][ T3416] vhci_hcd vhci_hcd.0: disconnect device [ 511.782883][ T3416] vhci_hcd vhci_hcd.0: stop threads [ 511.782916][ T3416] vhci_hcd vhci_hcd.0: release socket [ 511.782990][ T3416] vhci_hcd vhci_hcd.0: disconnect device [ 511.783088][ T3416] vhci_hcd vhci_hcd.0: stop threads [ 511.783129][ T3416] vhci_hcd vhci_hcd.0: release socket [ 511.783204][ T3416] vhci_hcd vhci_hcd.0: disconnect device [ 511.783307][ T3416] vhci_hcd vhci_hcd.0: stop threads [ 511.783339][ T3416] vhci_hcd vhci_hcd.0: release socket [ 511.783412][ T3416] vhci_hcd vhci_hcd.0: disconnect device [ 511.783510][ T3416] vhci_hcd vhci_hcd.0: stop threads [ 511.783542][ T3416] vhci_hcd vhci_hcd.0: release socket [ 511.783620][ T3416] vhci_hcd vhci_hcd.0: disconnect device [ 511.811673][ T3416] vhci_hcd vhci_hcd.0: stop threads [ 511.811736][ T3416] vhci_hcd vhci_hcd.0: release socket [ 511.811802][ T3416] vhci_hcd vhci_hcd.0: disconnect device [ 511.830085][ T8607] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.692'. [ 512.269418][ T8609] ubi0: attaching mtd0 [ 512.269447][ T8609] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 512.522552][ T8566] vhci_hcd vhci_hcd.0: remove, state 4 [ 512.522587][ T8566] usb usb33: USB disconnect, device number 1 [ 513.199434][ T199] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 513.342259][ T8566] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 513.349093][ T199] usb 4-1: Using ep0 maxpacket: 8 [ 513.374598][ T199] usb 4-1: unable to get BOS descriptor or descriptor too short [ 513.374661][ T199] usb 4-1: New USB device found, idVendor=0421, idProduct=002f, bcdDevice=cf.1b [ 513.374717][ T199] usb 4-1: too many configurations: 120, using maximum allowed: 8 [ 513.388091][ T199] usb 4-1: config 249 has an invalid interface number: 251 but max is 0 [ 513.388121][ T199] usb 4-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 513.388142][ T199] usb 4-1: config 249 has no interface number 0 [ 513.388179][ T199] usb 4-1: config 249 interface 251 has no altsetting 0 [ 513.442368][ T199] usb 4-1: config 249 has an invalid interface number: 251 but max is 0 [ 513.442398][ T199] usb 4-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 513.442419][ T199] usb 4-1: config 249 has no interface number 0 [ 513.442454][ T199] usb 4-1: config 249 interface 251 has no altsetting 0 [ 513.487334][ T199] usb 4-1: config 249 has an invalid interface number: 251 but max is 0 [ 513.487375][ T199] usb 4-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 513.487397][ T199] usb 4-1: config 249 has no interface number 0 [ 513.487432][ T199] usb 4-1: config 249 interface 251 has no altsetting 0 [ 513.504943][ T199] usb 4-1: config 249 has an invalid interface number: 251 but max is 0 [ 513.504972][ T199] usb 4-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 513.504995][ T199] usb 4-1: config 249 has no interface number 0 [ 513.505029][ T199] usb 4-1: config 249 interface 251 has no altsetting 0 [ 513.555466][ T199] usb 4-1: config 249 has an invalid interface number: 251 but max is 0 [ 513.555489][ T199] usb 4-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 513.555504][ T199] usb 4-1: config 249 has no interface number 0 [ 513.555532][ T199] usb 4-1: config 249 interface 251 has no altsetting 0 [ 513.608969][ T199] usb 4-1: config 249 has an invalid interface number: 251 but max is 0 [ 513.609003][ T199] usb 4-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 513.609026][ T199] usb 4-1: config 249 has no interface number 0 [ 513.609066][ T199] usb 4-1: config 249 interface 251 has no altsetting 0 [ 513.612506][ T67] vhci_hcd vhci_hcd.0: stop threads [ 513.612529][ T67] vhci_hcd vhci_hcd.0: release socket [ 513.612567][ T67] vhci_hcd vhci_hcd.0: disconnect device [ 513.613679][ T67] vhci_hcd vhci_hcd.0: stop threads [ 513.613699][ T67] vhci_hcd vhci_hcd.0: release socket [ 513.615577][ T67] vhci_hcd vhci_hcd.0: disconnect device [ 513.615637][ T67] vhci_hcd vhci_hcd.0: stop threads [ 513.615721][ T67] vhci_hcd vhci_hcd.0: release socket [ 513.615755][ T67] vhci_hcd vhci_hcd.0: disconnect device [ 513.615800][ T67] vhci_hcd vhci_hcd.0: stop threads [ 513.615815][ T67] vhci_hcd vhci_hcd.0: release socket [ 513.615923][ T67] vhci_hcd vhci_hcd.0: disconnect device [ 513.615968][ T67] vhci_hcd vhci_hcd.0: stop threads [ 513.615983][ T67] vhci_hcd vhci_hcd.0: release socket [ 513.616080][ T67] vhci_hcd vhci_hcd.0: disconnect device [ 513.616128][ T67] vhci_hcd vhci_hcd.0: stop threads [ 513.616144][ T67] vhci_hcd vhci_hcd.0: release socket [ 513.677410][ T199] usb 4-1: config 249 has an invalid interface number: 251 but max is 0 [ 513.677434][ T199] usb 4-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 513.677451][ T199] usb 4-1: config 249 has no interface number 0 [ 513.677477][ T199] usb 4-1: config 249 interface 251 has no altsetting 0 [ 513.710471][ T199] usb 4-1: config 249 has an invalid interface number: 251 but max is 0 [ 513.710504][ T199] usb 4-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 513.710525][ T199] usb 4-1: config 249 has no interface number 0 [ 513.710560][ T199] usb 4-1: config 249 interface 251 has no altsetting 0 [ 513.858742][ T199] usb 4-1: New USB device strings: Mfr=62, Product=150, SerialNumber=97 [ 513.858773][ T199] usb 4-1: Product: syz [ 513.858789][ T199] usb 4-1: Manufacturer: syz [ 513.858804][ T199] usb 4-1: SerialNumber: syz [ 513.875904][ T8626] FAULT_INJECTION: forcing a failure. [ 513.875904][ T8626] name failslab, interval 1, probability 0, space 0, times 0 [ 513.876004][ T8626] CPU: 1 UID: 0 PID: 8626 Comm: syz.2.698 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 513.876081][ T8626] Tainted: [L]=SOFTLOCKUP [ 513.876111][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.876146][ T8626] Call Trace: [ 513.876168][ T8626] [ 513.876195][ T8626] dump_stack_lvl+0xe8/0x150 [ 513.876294][ T8626] should_fail_ex+0x467/0x600 [ 513.876398][ T8626] should_failslab+0xa8/0x100 [ 513.876473][ T8626] kmem_cache_alloc_noprof+0xa4/0x650 [ 513.876561][ T8626] ? do_getname+0x2e/0x250 [ 513.876674][ T8626] ? do_getname+0x2e/0x250 [ 513.876778][ T8626] do_getname+0x2e/0x250 [ 513.876864][ T8626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.876934][ T8626] __se_sys_symlink+0x3a/0x2b0 [ 513.877026][ T8626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.877051][ T8626] do_syscall_64+0x174/0x580 [ 513.877132][ T8626] ? trace_irq_disable+0x3b/0x140 [ 513.877222][ T8626] ? clear_bhb_loop+0x70/0xc0 [ 513.877296][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.877350][ T8626] RIP: 0033:0x7f1de8fee0d9 [ 513.877422][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.877468][ T8626] RSP: 002b:00007f1de7246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 513.877532][ T8626] RAX: ffffffffffffffda RBX: 00007f1de9275fa0 RCX: 00007f1de8fee0d9 [ 513.877575][ T8626] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 513.877619][ T8626] RBP: 00007f1de7246090 R08: 0000000000000000 R09: 0000000000000000 [ 513.877653][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.877693][ T8626] R13: 00007f1de9276038 R14: 00007f1de9275fa0 R15: 00007ffe8cc8fb88 [ 513.877782][ T8626] [ 514.113323][ T67] ================================================================== [ 514.113414][ T67] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0xa0/0x450 [ 514.113561][ T67] Read of size 8 at addr ffff888021f697b8 by task kworker/u8:4/67 [ 514.113580][ T67] [ 514.113624][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 514.113661][ T67] Tainted: [L]=SOFTLOCKUP [ 514.113669][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.113684][ T67] Workqueue: usbip_event event_handler [ 514.113713][ T67] Call Trace: [ 514.113722][ T67] [ 514.113731][ T67] dump_stack_lvl+0xe8/0x150 [ 514.113765][ T67] print_address_description+0x55/0x1e0 [ 514.113804][ T67] ? vhci_cleanup_unlink_list+0xa0/0x450 [ 514.113833][ T67] print_report+0x58/0x70 [ 514.113860][ T67] kasan_report+0x117/0x150 [ 514.113886][ T67] ? vhci_cleanup_unlink_list+0xa0/0x450 [ 514.113922][ T67] vhci_cleanup_unlink_list+0xa0/0x450 [ 514.113963][ T67] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 514.113999][ T67] vhci_shutdown_connection+0x287/0x630 [ 514.114034][ T67] event_handler+0x2b0/0x4a0 [ 514.114061][ T67] ? process_scheduled_works+0xa20/0x14e0 [ 514.114087][ T67] process_scheduled_works+0xa8e/0x14e0 [ 514.114123][ T67] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.114151][ T67] ? assign_work+0x3cf/0x5d0 [ 514.114176][ T67] worker_thread+0xa47/0xfb0 [ 514.114215][ T67] kthread+0x388/0x470 [ 514.114246][ T67] ? __pfx_worker_thread+0x10/0x10 [ 514.114269][ T67] ? __pfx_kthread+0x10/0x10 [ 514.114301][ T67] ret_from_fork+0x514/0xb70 [ 514.114398][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 514.114430][ T67] ? __switch_to+0xc89/0x1420 [ 514.114499][ T67] ? __pfx_kthread+0x10/0x10 [ 514.114529][ T67] ret_from_fork_asm+0x1a/0x30 [ 514.114570][ T67] [ 514.114578][ T67] [ 514.114583][ T67] Allocated by task 1: [ 514.114621][ T67] kasan_save_track+0x3e/0x80 [ 514.114654][ T67] __kasan_kmalloc+0x93/0xb0 [ 514.114673][ T67] __kmalloc_noprof+0x41a/0x780 [ 514.114691][ T67] __usb_create_hcd+0x67/0x900 [ 514.114762][ T67] vhci_hcd_probe+0x104/0x3f0 [ 514.114786][ T67] platform_probe+0xf9/0x190 [ 514.114874][ T67] really_probe+0x254/0xae0 [ 514.114924][ T67] __driver_probe_device+0x1e8/0x360 [ 514.114959][ T67] driver_probe_device+0x4f/0x240 [ 514.114986][ T67] __device_attach_driver+0x270/0x410 [ 514.115014][ T67] bus_for_each_drv+0x25b/0x2f0 [ 514.115033][ T67] __device_attach+0x2c7/0x450 [ 514.115058][ T67] device_initial_probe+0xa1/0xd0 [ 514.115084][ T67] bus_probe_device+0x12d/0x220 [ 514.115102][ T67] device_add+0x7d7/0xb80 [ 514.115123][ T67] platform_device_add+0x4bd/0x860 [ 514.115144][ T67] platform_device_register_full+0x62d/0x71[ 514.115144][ T67] platform_device_register_full+0x62d/0x710 [ 514.115167][ T67] vhci_hcd_init+0x227/0x370 [ 514.115271][ T67] do_one_initcall+0x250/0x870 [ 514.115299][ T67] do_initcall_level+0x10a/0x1a0 [ 514.115339][ T67] do_initcalls+0x59/0xa0 [ 514.115359][ T67] kernel_init_freeable+0x29d/0x3e0 [ 514.115382][ T67] kernel_init+0x1d/0x1d0 [ 514.115402][ T67] ret_from_fork+0x514/0xb70 [ 514.115431][ T67] ret_from_fork_asm+0x1a/0x30 [ 514.115462][ T67] [ 514.115467][ T67] Freed by task 8566: [ 514.115479][ T67] kasan_save_track+0x3e/0x80 [ 514.115509][ T67] kasan_save_free_info+0x40/0x50 [ 514.115537][ T67] __kasan_slab_free+0x5c/0x80 [ 514.115555][ T67] kfree+0x1c5/0x6c0 [ 514.115583][ T67] vhci_hcd_remove+0xed/0x110 [ 514.115608][ T67] device_release_driver_internal+0x48b/0x880 [ 514.115634][ T67] unbind_store+0x1a4/0x1d0 [ 514.115654][ T67] kernfs_fop_write_iter+0x3a5/0x540 [ 514.115714][ T67] vfs_write+0x61e/0xbb0 [ 514.115736][ T67] ksys_write+0x156/0x270 [ 514.115758][ T67] do_syscall_64+0x174/0x580 [ 514.115787][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.115808][ T67] [ 514.115814][ T67] Last potentially related work creation: [ 514.115823][ T67] kasan_save_stack+0x3e/0x60 [ 514.115853][ T67] kasan_record_aux_stack+0xbd/0xd0 [ 514.115879][ T67] insert_work+0x3d/0x330 [ 514.115899][ T67] __queue_work+0xd1d/0x10f0 [ 514.115961][ T67] queue_work_on+0x106/0x1d0 [ 514.115985][ T67] unlink1+0x33d/0x3e0 [ 514.116007][ T67] usb_hcd_unlink_urb+0xda/0x1d0 [ 514.116030][ T67] usb_kill_urb+0x10b/0x2f0 [ 514.116059][ T67] hub_quiesce+0x20f/0x320 [ 514.116077][ T67] hub_suspend+0x904/0xad0 [ 514.116095][ T67] usb_suspend_both+0x285/0x1040 [ 514.116143][ T67] usb_runtime_suspend+0x58/0x110 [ 514.116169][ T67] __rpm_callback+0x2d6/0x930 [ 514.116242][ T67] rpm_suspend+0x8a0/0x17a0 [ 514.116265][ T67] __pm_runtime_suspend+0x12c/0x1a0 [ 514.116289][ T67] usb_new_device+0xade/0x1680 [ 514.116343][ T67] register_root_hub+0x250/0x5c0 [ 514.116369][ T67] usb_add_hcd+0xac7/0xf80 [ 514.116393][ T67] vhci_hcd_probe+0x141/0x3f0 [ 514.116420][ T67] platform_probe+0xf9/0x190 [ 514.116442][ T67] really_probe+0x254/0xae0 [ 514.116468][ T67] __driver_probe_device+0x1e8/0x360 [ 514.116494][ T67] driver_probe_device+0x4f/0x240 [ 514.116522][ T67] __device_attach_driver+0x270/0x410 [ 514.116550][ T67] bus_for_each_drv+0x25b/0x2f0 [ 514.116568][ T67] __device_attach+0x2c7/0x450 [ 514.116592][ T67] device_initial_probe+0xa1/0xd0 [ 514.116616][ T67] bus_probe_device+0x12d/0x220 [ 514.116635][ T67] device_add+0x7d7/0xb80 [ 514.116657][ T67] platform_device_add+0x4bd/0x860 [ 514.116677][ T67] platform_device_register_full+0x62d/0x710 [ 514.116701][ T67] vhci_hcd_init+0x227/0x370 [ 514.116723][ T67] do_one_initcall+0x250/0x870 [ 514.116751][ T67] do_initcall_level+0x10a/0x1a0 [ 514.116774][ T67] do_initcalls+0x59/0xa0 [ 514.116796][ T67] kernel_init_freeable+0x29d/0x3e0 [ 514.116820][ T67] kernel_init+0x1d/0x1d0 [ 514.116839][ T67] ret_from_fork+0x514/0xb70 [ 514.116866][ T67] ret_from_fork_asm+0x1a/0x30 [ 514.116896][ T67] [ 514.116901][ T67] Second to last potentially related work creation: [ 514.116947][ T67] kasan_save_stack+0x3e/0x60 [ 514.116977][ T67] kasan_record_aux_stack+0xbd/0xd0 [ 514.117004][ T67] insert_work+0x3d/0x330 [ 514.117022][ T67] __queue_work+0xd1d/0x10f0 [ 514.117043][ T67] queue_work_on+0x106/0x1d0 [ 514.117065][ T67] usb_hcd_submit_urb+0xa2d/0x1b40 [ 514.117088][ T67] usb_start_wait_urb+0x13f/0x5b0 [ 514.117116][ T67] usb_control_msg+0x234/0x3e0 [ 514.117149][ T67] hub_ext_port_status+0x114/0x810 [ 514.117168][ T67] hub_activate+0x740/0x1b10 [ 514.117181][ T67] process_scheduled_works+0xa8e/0x14e0 [ 514.117195][ T67] worker_thread+0xa47/0xfb0 [ 514.117211][ T67] kthread+0x388/0x470 [ 514.117230][ T67] ret_from_fork+0x514/0xb70 [ 514.117249][ T67] ret_from_fork_asm+0x1a/0x30 [ 514.117270][ T67] [ 514.117274][ T67] The buggy address belongs to the object at ffff888021f68000 [ 514.117274][ T67] which belongs to the cache kmalloc-8k of size 8192 [ 514.117287][ T67] The buggy address is located 6072 bytes inside of [ 514.117287][ T67] freed 8192-byte region [ffff888021f68000, ffff888021f6a000) [ 514.117303][ T67] [ 514.117307][ T67] The buggy address belongs to the physical page: [ 514.117328][ T67] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21f68 [ 514.117342][ T67] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 514.117355][ T67] flags: 0x80000000000040(head|node=0|zone=1) [ 514.117371][ T67] page_type: f5(slab) [ 514.117386][ T67] raw: 0080000000000040 ffff88813ffb2280 dead000000000100 dead000000000122 [ 514.117400][ T67] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 514.117414][ T67] head: 0080000000000040 ffff88813ffb2280 dead000000000100 dead000000000122 [ 514.117428][ T67] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 514.117445][ T67] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 514.117458][ T67] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 514.117466][ T67] page dumped because: kasan: bad access detected [ 514.117477][ T67] page_owner tracks the page as allocated [ 514.117482][ T67] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kworker/1:1), ts 6139566100, free_ts 0 [ 514.117509][ T67] post_alloc_hook+0x1f9/0x250 [ 514.117573][ T67] get_page_from_freelist+0x262a/0x26a0 [ 514.117589][ T67] __alloc_frozen_pages_noprof+0x18d/0x380 [ 514.117605][ T67] allocate_slab+0x79/0x5e0 [ 514.117623][ T67] refill_objects+0x2d8/0x350 [ 514.117641][ T67] __pcs_replace_empty_main+0x330/0x690 [ 514.117659][ T67] __kvmalloc_node_noprof+0x703/0x8a0 [ 514.117674][ T67] bucket_table_alloc+0x75/0x380 [ 514.117698][ T67] rhashtable_rehash_alloc+0x8e/0x170 [ 514.117712][ T67] rht_deferred_worker+0x482/0x2250 [ 514.117735][ T67] process_scheduled_works+0xa8e/0x14e0 [ 514.117750][ T67] worker_thread+0xa47/0xfb0 [ 514.117765][ T67] kthread+0x388/0x470 [ 514.117784][ T67] ret_from_fork+0x514/0xb70 [ 514.117804][ T67] ret_from_fork_asm+0x1a/0x30 [ 514.117826][ T67] page_owner free stack trace missing [ 514.117831][ T67] [ 514.117835][ T67] Memory state around the buggy address: [ 514.117843][ T67] ffff888021f69680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.117853][ T67] ffff888021f69700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.117884][ T67] >ffff888021f69780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.117892][ T67] ^ [ 514.117901][ T67] ffff888021f69800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.117911][ T67] ffff888021f69880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 514.117919][ T67] ================================================================== [ 514.433263][ T67] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 514.433290][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 514.433320][ T67] Tainted: [L]=SOFTLOCKUP [ 514.433328][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.433344][ T67] Workqueue: usbip_event event_handler [ 514.433377][ T67] Call Trace: [ 514.433389][ T67] [ 514.433398][ T67] vpanic+0x56c/0xa60 [ 514.433433][ T67] ? __pfx_vpanic+0x10/0x10 [ 514.433463][ T67] ? __pfx___schedule+0x10/0x10 [ 514.433495][ T67] panic+0xc5/0xd0 [ 514.433539][ T67] ? __pfx_panic+0x10/0x10 [ 514.433573][ T67] ? preempt_schedule_thunk+0x16/0x40 [ 514.433603][ T67] ? vhci_cleanup_unlink_list+0xa0/0x450 [ 514.433634][ T67] check_panic_on_warn+0x89/0xb0 [ 514.433813][ T67] ? vhci_cleanup_unlink_list+0xa0/0x450 [ 514.433844][ T67] end_report+0x73/0x170 [ 514.433868][ T67] ? vhci_cleanup_unlink_list+0xa0/0x450 [ 514.433897][ T67] kasan_report+0x128/0x150 [ 514.433920][ T67] ? vhci_cleanup_unlink_list+0xa0/0x450 [ 514.433954][ T67] vhci_cleanup_unlink_list+0xa0/0x450 [ 514.433986][ T67] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 514.434020][ T67] vhci_shutdown_connection+0x287/0x630 [ 514.434054][ T67] event_handler+0x2b0/0x4a0 [ 514.434081][ T67] ? process_scheduled_works+0xa20/0x14e0 [ 514.434107][ T67] process_scheduled_works+0xa8e/0x14e0 [ 514.434146][ T67] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.434172][ T67] ? assign_work+0x3cf/0x5d0 [ 514.434198][ T67] worker_thread+0xa47/0xfb0 [ 514.434238][ T67] kthread+0x388/0x470 [ 514.434268][ T67] ? __pfx_worker_thread+0x10/0x10 [ 514.434293][ T67] ? __pfx_kthread+0x10/0x10 [ 514.434324][ T67] ret_from_fork+0x514/0xb70 [ 514.434357][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 514.434389][ T67] ? __switch_to+0xc89/0x1420 [ 514.434417][ T67] ? __pfx_kthread+0x10/0x10 [ 514.434447][ T67] ret_from_fork_asm+0x1a/0x30 [ 514.434490][ T67] [ 514.434668][ T67] Kernel Offset: disabled