last executing test programs: 1m31.619402043s ago: executing program 2 (id=256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1a, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7eaa000000000000711011000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1m30.132775655s ago: executing program 2 (id=258): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040f91306000000000000010902240001000040b109040004090300010009210101000122050009048103ff030c00fd"], 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1562, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x455d, 0x7721, 0x12, 0x0, 0x4a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0x40345410, &(0x7f0000000080)={{0x3, 0x3}}) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@nl, &(0x7f0000000200)=0x80) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80e85411, 0xfffffffffffffffe) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x10012, r4, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00004f9000/0x3000)=nil, 0xffffffffffffffbe, &(0x7f0000000640)='+d\x81\x00t`\xadg\xc4\x17\x8c\b\x00\x00\x00\x00\x00\x00\xf7\xab\x94\xd5tlci\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00sd\x84\xb8\xc2\xac\xb5\xde\xbe/\xadFI|\xa4\x80\xfbA\xce\xdc\x8f\x05/X\xc5\xa3\xceU\x0e\xc3\xb1\xe0\xa4\x03\x17|\xbcFp\xa0izA\xe9\xf3\x0e\x8a\xcf\xf1w\xc9-\x10\x93\xdaD\x96%\x19\xa3\x1d\xfa\xe2e\xb2\x14\xe8\xa3f\xe2\x84)K\x9dKQ\xed\n\n\xaf\xa8F\xea\xc9f\xe0w\x83K\xc8\bM\x84\\\x14\xc6\xa4\xdd\xac\x8eS\x10\xb2_\xb9D\xc7t\xd1\x04\x8d\x92\xeb\x1b\xff\x8e4\xb6\x8eq\x1dx\xf6\x19\xf3\xb2\xcd8E\xe4Q\xf3\xd3\xb21\xc9\xd6\x8d\xfa\x1cT\xa2\x1c\xe3\xd7\xcd\xb1\x00\rE\xfa?An\xce\xfc\xa7\n9\x8c\xbco\x05\x88 \xdf\x98\x0f[\xa2R\xca\xe1\xd6U{/?[\x8a\x1dF\x8d\xc0\x19G\xb1w\xef\xba\x95\xf4?D\xf4_3_SH\x80\xe9\'\xc6jJ') syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m26.251355422s ago: executing program 2 (id=270): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"b3472eb9cd42d2030000002000", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000080)={0x72, 0xa0, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) semop(0x0, &(0x7f0000000000)=[{0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x2) 1m25.557680208s ago: executing program 2 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000200)={0xb6, 0xfdfd}) 1m24.865229831s ago: executing program 2 (id=278): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mbind(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x3) mremap(&(0x7f00008e6000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00000c1000/0x3000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0xc4, 0x0, 0x0, 0x0) 1m24.637734478s ago: executing program 2 (id=280): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040f91306000000000000010902240001000040b109040004090300010009210101000122050009048103ff030c00fd"], 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1562, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x455d, 0x7721, 0x12, 0x0, 0x4a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0x40345410, &(0x7f0000000080)={{0x3, 0x3}}) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@nl, &(0x7f0000000200)=0x80) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80e85411, 0xfffffffffffffffe) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x10012, r4, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00004f9000/0x3000)=nil, 0xffffffffffffffbe, &(0x7f0000000640)='+d\x81\x00t`\xadg\xc4\x17\x8c\b\x00\x00\x00\x00\x00\x00\xf7\xab\x94\xd5tlci\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00sd\x84\xb8\xc2\xac\xb5\xde\xbe/\xadFI|\xa4\x80\xfbA\xce\xdc\x8f\x05/X\xc5\xa3\xceU\x0e\xc3\xb1\xe0\xa4\x03\x17|\xbcFp\xa0izA\xe9\xf3\x0e\x8a\xcf\xf1w\xc9-\x10\x93\xdaD\x96%\x19\xa3\x1d\xfa\xe2e\xb2\x14\xe8\xa3f\xe2\x84)K\x9dKQ\xed\n\n\xaf\xa8F\xea\xc9f\xe0w\x83K\xc8\bM\x84\\\x14\xc6\xa4\xdd\xac\x8eS\x10\xb2_\xb9D\xc7t\xd1\x04\x8d\x92\xeb\x1b\xff\x8e4\xb6\x8eq\x1dx\xf6\x19\xf3\xb2\xcd8E\xe4Q\xf3\xd3\xb21\xc9\xd6\x8d\xfa\x1cT\xa2\x1c\xe3\xd7\xcd\xb1\x00\rE\xfa?An\xce\xfc\xa7\n9\x8c\xbco\x05\x88 \xdf\x98\x0f[\xa2R\xca\xe1\xd6U{/?[\x8a\x1dF\x8d\xc0\x19G\xb1w\xef\xba\x95\xf4?D\xf4_3_SH\x80\xe9\'\xc6jJ') syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m8.88369127s ago: executing program 32 (id=280): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040f91306000000000000010902240001000040b109040004090300010009210101000122050009048103ff030c00fd"], 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1562, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x455d, 0x7721, 0x12, 0x0, 0x4a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0x40345410, &(0x7f0000000080)={{0x3, 0x3}}) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@nl, &(0x7f0000000200)=0x80) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80e85411, 0xfffffffffffffffe) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x10012, r4, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00004f9000/0x3000)=nil, 0xffffffffffffffbe, &(0x7f0000000640)='+d\x81\x00t`\xadg\xc4\x17\x8c\b\x00\x00\x00\x00\x00\x00\xf7\xab\x94\xd5tlci\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00sd\x84\xb8\xc2\xac\xb5\xde\xbe/\xadFI|\xa4\x80\xfbA\xce\xdc\x8f\x05/X\xc5\xa3\xceU\x0e\xc3\xb1\xe0\xa4\x03\x17|\xbcFp\xa0izA\xe9\xf3\x0e\x8a\xcf\xf1w\xc9-\x10\x93\xdaD\x96%\x19\xa3\x1d\xfa\xe2e\xb2\x14\xe8\xa3f\xe2\x84)K\x9dKQ\xed\n\n\xaf\xa8F\xea\xc9f\xe0w\x83K\xc8\bM\x84\\\x14\xc6\xa4\xdd\xac\x8eS\x10\xb2_\xb9D\xc7t\xd1\x04\x8d\x92\xeb\x1b\xff\x8e4\xb6\x8eq\x1dx\xf6\x19\xf3\xb2\xcd8E\xe4Q\xf3\xd3\xb21\xc9\xd6\x8d\xfa\x1cT\xa2\x1c\xe3\xd7\xcd\xb1\x00\rE\xfa?An\xce\xfc\xa7\n9\x8c\xbco\x05\x88 \xdf\x98\x0f[\xa2R\xca\xe1\xd6U{/?[\x8a\x1dF\x8d\xc0\x19G\xb1w\xef\xba\x95\xf4?D\xf4_3_SH\x80\xe9\'\xc6jJ') syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 57.337947357s ago: executing program 4 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = syz_io_uring_setup(0x86c, &(0x7f0000000300)={0x0, 0xa2c3, 0x10, 0x3, 0x13f}, &(0x7f00000001c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x180}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet6_buf(r6, 0x29, 0xcd, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) io_uring_enter(r0, 0xdb4, 0xdb9b, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000001000000000100010085000000200000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000009b00000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 55.655916386s ago: executing program 4 (id=355): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9, &(0x7f0000000300)=[{0x0, 0x7fff, 0xf}], 0x1, 0x1, 0x24, 0x0, 0x42, 0x6a}) (fail_nth: 4) 55.251960606s ago: executing program 4 (id=357): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000002300)=[{}], &(0x7f0000000080)=0x8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000100000/0x3000)=nil, 0x3000, &(0x7f0000000000)='smape\x00') lseek(0xffffffffffffffff, 0x2000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x32d8, 0x0, 0xe, 0x0, 0x0) 49.716211463s ago: executing program 4 (id=378): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x9, 0xffffffffffffffff}) 49.508151553s ago: executing program 4 (id=380): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201313000000642a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x21) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 47.117819213s ago: executing program 4 (id=388): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000002300)=[{}], &(0x7f0000000080)=0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r5, 0x2000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x32d8, 0x0, 0xe, 0x0, 0x0) 32.03443444s ago: executing program 33 (id=388): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bd, 0x80, 0x1, 0x385}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000002300)=[{}], &(0x7f0000000080)=0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r5, 0x2000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x32d8, 0x0, 0xe, 0x0, 0x0) 10.360060991s ago: executing program 1 (id=491): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000104c05d50300000000000109022400010000a00009040000020300000009210000000122450009058103400000993906ff8368712e197b4a784fa4d4a818f172e7181abcd6d9018808159a7000ef0a02d31675e95b6239a6653d59bd89a9b3ed16ec8fa51ee973a9a7c4efaf416c0ec3a2d96e41015c5fdef445e76bc143b3e16f012a1051b9c5a41d0a31df5f4b4bd56f75d4e24becb711a602bd4cd7da288f1a1b7fe98106ef9cc3873a3cdeaa359f92cad03c381a9884ba3f27fc38be18c8a9195d17ffb5645a7eb984726caafa237fdc79d9bbaa359f40441fa9a3e6b109e214ae04f11e743e4b55694fe808fe"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00E'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = dup2(r0, r0) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000001540)={0x3, 0xffffffff, 0x8, 0xfff, 0x7, 0x2}) r3 = syz_usb_connect(0x4, 0x4e9, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x35, 0xc5, 0x93, 0x8, 0x572, 0x1328, 0x8cc0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d7, 0x1, 0xfb, 0x7, 0x70, 0x10, [{{0x9, 0x4, 0x6, 0x8, 0x10, 0x78, 0x3d, 0xc7, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x3ff, 0x81}, [@processing_unit={0xa, 0x24, 0x7, 0x1, 0x6, 0x0, "af2979"}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x4, 0x10, "09a0b339f567"}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x3, 0xe, '}'}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0x1965, 0xe, '6'}]}], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x1, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x6}]}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x1, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x15}]}}, {{0x9, 0x5, 0x9, 0x2, 0xb77c712af61f7bc1, 0x1, 0x5, 0x3, [@generic={0x2d, 0x24, "e5cc8ec58d4c61ab4474d046c7d45eb09a7d0c9ba028ef3c27b6fd20159fd27edb5e586bd03b828a465f06"}]}}, {{0x9, 0x5, 0x3, 0x12, 0x220, 0x2, 0xa, 0x0, [@generic={0x80, 0x8, "db529c3a2cbd093cce6ed3838a408a9d2bd401af2885e0e48efca52fc0fb1a05bc3fb0a2d6937fc1de7a3ded4f845eb421b19dea991ac02de64d93a3ecc7a0ce70316177c5c455f96e3ffcc74453a9167fe68427c1b27efd24c7c39df08992bdd6ca0b772957d2400c18419850937f370cc5d92940448acaed606300c914"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x80, 0xd, 0x6f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0xd}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x5, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7f, 0x8, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xa7}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x0, 0x3, 0xd1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0xcf5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x1ef, 0x1, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x65, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0x6, 0xf7, 0xf7, [@generic={0x21, 0xa, "65cf38e6f7d8e51aaddcd338b3cf2b0d574cc1a4f2bb574e8dbea60c08950c"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x3b, 0xf8, 0x5, [@generic={0xed, 0x3, "d05a816be58ed83aecb1ec401b3f6aa30d5fb85cc025c49cfb62c3dbfb0972c3423f6bea59a7962dec28b30388b7581d0505538dd17dd63ba4f4dc2cafe46a3beec6bd111f0eeb258e76584903016c03cc3775de47f6330a039ff7b24bbd1ddf0ac778ae8e8586b383f7bf7247b71015e9182e7da98937a4cd8ee7be4af19aafd985d6837b21fbd6a7f758bf180fae70a5413143c23017574f00f3a485e976c7506ac26431b2e769fc7da7b571436d9ec3bd145b4b344d74ae13f01fa7f33b9f73e96fc34a6eeea44ec8f990ac532555e1a53e64ce20b9d543602616eaa321bf48346203831c67e36a237e"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x50, 0x1, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x80}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0xad, 0x7, 0x8, [@generic={0xe9, 0xe, "e3cfe83f0bbab885f18d63fdb7ff8cac03831abc2eb25524bc6623c667bdcd096a68d6753ac9763afcf5e991de365f0e28112c7d58745de79a883a31adef8adfb261ffcf585d7b994da19ef996fe2a72551b96cdb5e68b83db17609a533758797bb3d46762aa6f64564830bd88edbd8713097db399badfe496900823866dd2d2e9560a6ed3b60fc73204b6ce3691e8377060959088a35b469f52908bb8981529d167768322cff29e004c16344214e88a90f3fcaf76949ae5ae06a13224ddf86c826fd720df9202b5a0b64898fa36a9a371db33afab31e835b8ac438aa029531332db843776bba2"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x8a, 0x1, 0x8, [@generic={0xf, 0x22, "d2c71f161ff18d502d2f2a6505"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x2, 0x0, 0x7, [@generic={0x99, 0xc, "a77e9ab9a56a300cdd72698826996dad99d741f8f66b62cbe6e6ff0167585f221cb61b665e19d5b76a67114aad4b42817929d53140e2a95cf04ef3e52cb1662c7528d7e0745c1067d4ab6888b8e4917b48e02f151ae0f67bfd47dbb8d07301ca8464e16eebdaf1576f34bedd67abc367b442d9e9a6151b93a143da701325e9d822af09c50c293e389b77c32bb07610d248d3d8d96b8cbf"}, @generic={0x53, 0x31, "f4b756c8f8a0f86cdeca4aed0480946845e8bc135f270b48a43ca7088070b66ccc42c71f6a722acb00e28378431b791933f54fc9c13db2b7670c2a307b17fa5002a5873f754fb444697ba8b781b9b35fbd"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x9, 0x41, 0xf, [@generic={0x20, 0x23, "b9e0f58345544cc2d1563e65be5d2830d4504fd576a222d55c19ac05f83c"}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xb, 0xce, 0x7, 0x40, 0x8}, 0x9a, &(0x7f0000000300)={0x5, 0xf, 0x9a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "b06d174ef578faaf20331d702fdaac11"}, @generic={0x70, 0x10, 0x2, "910165a24c4ad3e20d2c82ed668a99e5dfe7dcf8a054b3c09443bb27700bd859bc391a6b19e72668652424d42bfe3ea61de2be4e92b7a3df2ce30c55685b3ee9b3f729032b97c3b5914be94110be16e0a14f496e81e27d68036c6174a3535facf3c6aa0268adfb0d4cdddc0a7a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x7, 0x2, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x9, 0x1}]}, 0x6, [{0x4b, &(0x7f0000000400)=@string={0x4b, 0x3, "6e14cbc50a8ca814996446da13ff8568cac42fd0578551e598148feed44d6ebef4906e15665092c60d3a3b61ad341977395959d2dd29423880fa35b760607c6fdf0a1838ac43b2ec99"}}, {0x52, &(0x7f0000000480)=@string={0x52, 0x3, "411ceefb1339fd35f57a620880553a264a410a2b012a3116f0cdeb87d482dfcc217b14c4b689733c596fc697451351217735281ca4ab8fd2d993903e4db4624b49fc40495ca0221c07b70e191eac42b2"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1407}}, {0xe9, &(0x7f0000000b00)=@string={0xe9, 0x3, "39a595775edd46048069caacdf8a84eb2f2a068b286c1d8aa88a9241a5fceb677e0f230399f2d6418767990ce009e1aad8c5a40e826d4a1f7d67d1661ae4acb0e31b733b4379a36b422e6af1741d949b867d471205937e01ba03ab7acca7e830f7bbfdc50381929dbc32ef257cd8f03b07bf0fea67eb615374d41c0f2daa790f070b99f8d1dcb8abb7a7ea8dbbafc09aa6bd9dce2a0a9d678ad4fbcbbd21b757ff20ccc8f96b506c5e33cb49c8d118a2c7f841e585edbb33a6db4b24430d4e84cbf1042a55b153d2503a477c36f0c58f2e95f24774eaf37f31dd0296eac516ec4c244ba726d914"}}, {0x86, &(0x7f0000000500)=@string={0x86, 0x3, "77de85b999d8e9fd0a6bb48643d9adae60ab959a17b7d842378edb1d5f86510180cc1afec864caa6fa1aaa281ae78d964d9a45151ed00e11e284c8c1d14a3ccd4d691608c3c13a483d6eb2d9fcaaed8cbee10c071f51f5a7625d1425edfea94bdebb833fea9a97129d3f6f106720d37a543284dbab7c27cc90818776fc69be700dee70fa"}}, {0x74, &(0x7f0000000c00)=@string={0x74, 0x3, "a7c76c2f8daa0910cb2ff616f6f1ba4dc6ddbd70282b6e103671f18a14eeda092adf29bfbf0a5f77cb7a4eb5cd2a4cf6ef860c5a2ee839a0c02f75d557dbabf0580bcd6645a9cd48970ed35dc0b7605c87bf98ec419b71a07bf59a93a06a630594182affc19145cab5919d4157553ccf2da9"}}]}) syz_usb_control_io$sierra_net(r3, &(0x7f0000000dc0)={0x14, &(0x7f0000000d00)={0x20, 0xd, 0x73, {0x73, 0x23, "915acc194baf8bc96c8571ac196f60f5a231d5c0e75ee08a1479bf589771b5265f69b1532cb2e30acbb4eb9f28d9e7cca42eab441fc0d79e84e467532534a540f6f967e078dd3bef9c54ff88fd9fbafcd63cf3492ce0fd13bf2e6b1354a510894a7bb8c7865a46aa79902f0e717b867491"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}}, &(0x7f0000001340)={0x1c, &(0x7f0000000e00)={0x20, 0xb, 0x96, "150adad77957ffee1c999eaeb6f44415f0d511a0eebc95c8cf3327dced8ffcd42b1a1da26d3061164ca4839501ee7550ebe80eea3c4a725efb83040e153194b46d6718a5cd13d870f4da9d6a237799f2c470fe0f647fc64ac37221ec6115b881ce266ea99aab035cd771d1d6b6687cd285655237e715f30bf9384689a8e0f236f57d2120ee79f19518ecaff398c52615e21dc72d9064"}, &(0x7f0000000ec0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001300)={0x21, 0x0, 0x3, "15230a"}}) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000200)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000001400)={0x14, &(0x7f0000001380)={0x0, 0x22, 0x16, {0x16, 0x23, "014ffe54b9825996157ed36d19cfec88c1e66ad6"}}, &(0x7f00000013c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001500)={0x1c, &(0x7f0000001440)={0x0, 0x14, 0xc, "fbdf910eed95d721aed41079"}, &(0x7f0000001480)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000014c0)={0x0, 0x8, 0x1, 0x9}}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x103, 0x105) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183f000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) 7.279315606s ago: executing program 1 (id=498): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x18) 7.072685348s ago: executing program 1 (id=501): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x3) 6.845971786s ago: executing program 1 (id=503): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000002"], 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000997aa910c6250290ba41010203010902120001000000000904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3, 0x6, 0x5b, 0x20, 0x93a, 0x260e, 0xe573, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe, 0x0, 0x0, 0x38, 0x5a, 0x57}}]}}]}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@bridge_dellink={0x34, 0x13, 0x5, 0xfffffffd, 0xfffffffe, {0x7, 0x0, 0x0, r4, 0x20921}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0xac0}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r5, 0x0, 0x997}, 0x18) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a00)={'bond0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="02030c65420002000fd4ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) 5.679500137s ago: executing program 0 (id=506): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 5.565009092s ago: executing program 0 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d66"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0xa, 0x5, 0x0) r4 = dup(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x1000000}, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000001280)={&(0x7f0000000240)=@in6={0xa, 0x4e24, 0x100, @loopback}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="db", 0x1}], 0x1, &(0x7f0000000040)=[@init={0x18, 0x84, 0x0, {0x2, 0x1, 0x6, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x38, 0x4990}, 0x2400c8c5) 4.131346062s ago: executing program 3 (id=510): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r2, 0x0, 0x18) 3.978933009s ago: executing program 0 (id=511): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2100, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x3) 3.878049043s ago: executing program 0 (id=512): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fcntl$getflags(0xffffffffffffffff, 0x408) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.877708253s ago: executing program 3 (id=513): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000a600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) read$FUSE(r0, &(0x7f0000006580)={0x2020}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x30) syz_fuse_handle_req(r0, &(0x7f00000043c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x401, {0x1, 0x1, 0x0, {0xffffffffffffffff, 0x2, 0x8, 0x0, 0x7, 0x200000000001, 0x1000, 0x0, 0x7fff, 0x8000, 0x0, 0x0, 0xee00, 0xb099, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.718785744s ago: executing program 0 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d66"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0xa, 0x5, 0x0) dup(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x1000000}, 0x0) 3.671286342s ago: executing program 1 (id=515): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201313000000642ade97fa02fa00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x21) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.618266545s ago: executing program 3 (id=516): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000038c0), r1) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) 2.446797064s ago: executing program 3 (id=517): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000038c0), r1) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) (fail_nth: 3) 2.431234986s ago: executing program 0 (id=518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xa801, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x4, 0x1ff, 0x42000}, 0xe659f7491c23917f) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="eb7a2bbd700093b7dfe82100000009001f0070687931000000000a00010077"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) readv(r8, &(0x7f0000000200)=[{&(0x7f0000000100)=""/80, 0x50}, {&(0x7f0000000180)=""/68, 0x44}], 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003080)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x9, 0x64de, 0x20000000, 0x40}, 0x4, 0x2}, [{0x7, 0x4, 0x6, 0x40, 0x7f, 0x5}, {0x1, 0x7, 0x1, 0x3, 0x4, 0x3}, {0x82ff, 0x1, 0x9, 0x74, 0x971, 0xffffffff}, {0xffffffff, 0x9, 0x7, 0x6, 0xf, 0x81}, {0x4, 0x6, 0xffff88c0, 0x2, 0x5, 0xa}, {0x0, 0x3, 0x7, 0x8, 0x1, 0x2}, {0x5, 0x5, 0x121, 0xdf, 0x25, 0x33}, {0x1, 0x81, 0x9, 0x8, 0xc2}, {0x3, 0xd745, 0x6, 0x8, 0x6, 0x3}, {0xd7, 0x2, 0x8, 0xf90, 0x4, 0x9}, {0xde6, 0x5, 0x2f, 0x400, 0x200, 0x6}, {0x3, 0x4, 0x3, 0x8, 0x27, 0xffff8ec6}, {0x5, 0x7fffffff, 0x6, 0x3, 0x6}, {0xc4b0, 0x401, 0x0, 0x7, 0x9, 0x1}, {0x4, 0x10, 0x8b, 0x6, 0x6, 0x3ff}, {0x552, 0x183, 0x7, 0x6, 0x7fffffff, 0x3191}, {0x4, 0xf171, 0x1000, 0x1000, 0x5, 0x1}, {0xbf9, 0x4, 0x6, 0x9, 0xa0d, 0x2}, {0x7, 0x2, 0x1, 0x1400, 0xe, 0x7244c32e}, {0x1, 0x5, 0x5, 0x1, 0x1, 0x88}, {0x0, 0xf57, 0x401, 0x400000, 0x80000000, 0x3}, {0x7, 0x2, 0x9, 0x80, 0x1, 0x6}, {0x2, 0xaa8a, 0x28, 0x800, 0x0, 0x1}, {0x2, 0x485, 0xb, 0x6, 0x0, 0x596}, {0x79, 0x400, 0x1, 0xf, 0xfff, 0x40}, {0x15, 0x1, 0xce, 0xa0, 0x0, 0x400}, {0x8001, 0x4, 0xdf43, 0x9, 0x8, 0xa}, {0x9, 0x4, 0x9, 0x80000000, 0x1, 0x5}, {0xea, 0x10001, 0xfffffffc, 0x6, 0x80, 0xfffffffd}, {0x8, 0x4, 0x4, 0x6, 0x400, 0x7f}, {0x2, 0x80000000, 0x5, 0x2, 0x81, 0x7}, {0xfff, 0x10, 0x9, 0x9, 0x0, 0xfff}, {0x3ff, 0x2, 0x2c, 0xfffffff8, 0x9, 0x3}, {0x4, 0x5, 0xc42, 0x35, 0x5e4f36b2, 0xa}, {0x4, 0xa, 0xa, 0x400, 0x7fffffff, 0x7}, {0x1ff, 0xd7, 0x9, 0x7f, 0x3, 0x4}, {0x0, 0x8, 0x9, 0x2, 0x4, 0xffffff40}, {0x4, 0x2f, 0x7, 0x1cd, 0x8000, 0x5}, {0xf, 0x101, 0x7, 0x20d, 0x9, 0x8}, {0x7, 0x40, 0x7, 0x8000, 0x7, 0x3}, {0x1000, 0x7, 0xff, 0x2, 0x2}, {0x7, 0x6, 0x0, 0x4, 0xb6f, 0x47ee}, {0x4, 0x0, 0x4, 0x83c, 0x0, 0x4}, {0x0, 0xb6f, 0xffffffff, 0xc4, 0x5, 0x7}, {0x9, 0x6b9b, 0x8, 0x8, 0x40, 0xc000}, {0xffff0000, 0x4, 0x5, 0x7, 0x4, 0x9}, {0x81, 0x7, 0x9, 0x2, 0x6, 0x1}, {0x6, 0x3, 0x8, 0x10000, 0x3, 0x2}, {0x80000000, 0x8, 0x7, 0x2, 0xffff, 0x2}, {0x3, 0x1000, 0x81, 0x2, 0x5}, {0x80, 0x6, 0x80, 0x8, 0x2, 0xfffffffd}, {0x8000, 0x0, 0xc153, 0x80, 0x9, 0xffffffff}, {0x7b, 0x7f, 0x3, 0x6, 0x10, 0x4c8}, {0x3, 0xbdcc, 0x1ff, 0x5, 0x5, 0x3}, {0x9, 0xfff, 0x6, 0x9, 0x4, 0x9}, {0x8, 0x3, 0x0, 0x5, 0x4, 0x1}, {0x21e2, 0x7fffffff, 0x2, 0x2, 0x7, 0xfffffa0d}, {0x4, 0x81, 0xfffffffe, 0x3, 0x7, 0x8}, {0x400, 0x3ff, 0x0, 0x0, 0x894, 0x6}, {0x8001, 0x9, 0x401, 0x3, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x2, 0xffffffff, 0xc9}, {0x67c3, 0x8, 0x2, 0x7, 0x7, 0xffffffff}, {0x7, 0x9, 0x86b8, 0xfffffffb, 0x1, 0x5}, {0x6, 0x5, 0x2485, 0x6, 0x9, 0xd10}, {0x2, 0x20, 0x1, 0x2fc, 0x5, 0xb4}, {0xffffffff, 0x6, 0x2, 0x3, 0xfffffff9, 0x400}, {0x5, 0x7, 0x5, 0x6, 0x8, 0xa}, {0x401, 0xef73, 0x3, 0x1000, 0xffff905c, 0x5}, {0x5, 0x80, 0x8001, 0x5e8, 0x0, 0xe487}, {0x3f83, 0xd, 0x7, 0x3, 0x20000fdd, 0x9}, {0x80000000, 0x9, 0x7, 0x4, 0x8, 0x1}, {0x8, 0x4, 0x4, 0x425, 0x8001, 0xac5}, {0x800, 0x4, 0x9, 0x3, 0x9, 0x10001}, {0x1, 0x7, 0xff, 0x4, 0x6, 0x84}, {0x2, 0x800000, 0x10001, 0x5, 0x2, 0xbc6a}, {0x2, 0x5, 0xfffffff9, 0x4, 0x5, 0x3}, {0xff, 0x2abb, 0x1, 0x4, 0x7, 0xffffffff}, {0x5, 0x66, 0x7, 0x2, 0x4, 0xfffffff8}, {0x6, 0x2, 0x2, 0x4, 0x3}, {0x2, 0x40, 0xc, 0x628a, 0x4, 0x6f6}, {0x9, 0x0, 0xffff, 0x5, 0x7, 0x8000}, {0xd2a, 0x7f, 0x0, 0x3, 0xc6d, 0x6}, {0x10000, 0x20, 0x9b64, 0x8, 0x0, 0x1a7b85}, {0x200, 0x2, 0x8, 0xc4, 0x4, 0xfffff4e8}, {0x3, 0x4, 0x8, 0xc3, 0x200, 0x5}, {0x5, 0x0, 0x80000001, 0x80000001, 0xb, 0x9}, {0x80, 0x1000, 0x3, 0x5, 0x40, 0x4}, {0x0, 0x10, 0x7ff, 0x80, 0x7, 0x1ff}, {0x0, 0x7fff, 0x0, 0x400, 0x800, 0x2}, {0x69000, 0x5, 0xff, 0x5, 0x5, 0x7}, {0xffffa0a0, 0x8, 0x6, 0x400, 0x7, 0x71}, {0x6d, 0x7fffffff, 0x0, 0x8, 0x58a8, 0x7}, {0x9, 0x392ba84f, 0x0, 0x9, 0x6, 0xf}, {0x5, 0x278, 0x3, 0x2, 0xd, 0x10001}, {0x99fa, 0x2, 0x1ff, 0x8, 0x9, 0x4e}, {0x4, 0x1, 0x2, 0x3ff, 0xbb3e, 0x2}, {0x7, 0x100, 0x1, 0x7, 0x9, 0x4e60}, {0x0, 0x5, 0x0, 0x6, 0x1b5, 0xf86}, {0x8, 0xd9, 0x1000, 0x7, 0x42, 0x8}, {0xfffffffc, 0x3, 0x620000, 0x800, 0x2, 0x2}, {0x4d4, 0x42, 0x7, 0x100, 0x4}, {0x8, 0x200, 0xfffffff6, 0x3111, 0x10, 0x10001}, {0x1, 0x9, 0x4, 0x6, 0x9, 0xf}, {0x401, 0x6, 0x722, 0x5, 0x654, 0x5}, {0x9, 0x5, 0xf3, 0x950, 0x6, 0x7ff}, {0x54, 0x9, 0x9, 0x100, 0x1ff, 0x3}, {0x3, 0x2, 0xffffffe8, 0xdec, 0x0, 0x9}, {0x3, 0x7f, 0x0, 0x5, 0x9151, 0xc4ac}, {0x0, 0x40, 0x8172, 0x8, 0xc, 0x2}, {0x6, 0x40, 0x3, 0x1, 0xfffffff7, 0x400}, {0x8000, 0x5, 0x80000001, 0x1b33, 0x6, 0xff}, {0x7, 0x6089, 0x2, 0x100, 0x7fff, 0x8}, {0x1000, 0x0, 0x40, 0x400000, 0x1ff}, {0x101, 0xfff, 0x1ac8, 0x7ff, 0x10000, 0xe4}, {0x100, 0x8, 0x3, 0x10, 0x2, 0x1ff}, {0xa, 0x0, 0x9, 0x2}, {0x6, 0x8, 0x5c, 0x83c, 0x5, 0x7}, {0x10001, 0x1, 0x9, 0x4, 0xc3, 0x8}, {0x9, 0x2, 0x7ff, 0x3, 0xb18b, 0x674}, {0x7, 0x4, 0x6, 0x6, 0x9, 0x4}, {0x0, 0x3, 0x9, 0x6, 0x6f, 0x1}, {0x2, 0x80000001, 0xf6af, 0x1ff, 0x3}, {0x9, 0x7, 0x4, 0x3af, 0x1, 0x200}, {0x3, 0x8001, 0x0, 0x8, 0x2, 0x7}, {0x6, 0x2, 0x7, 0x2, 0x5, 0x4}, {0x62ee20ae, 0x1, 0x6, 0x0, 0x4, 0x197ade1a}, {0x51, 0x2, 0x8, 0x62d042ad, 0x1, 0xfffffffe}, {0x1, 0xd6, 0xffffffff, 0x9, 0x3, 0x100}], [{0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4}, {}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x4, 0x2}, {0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x1}, {0x3}, {0x4}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {}, {}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3, 0x7342405ae2986837}, {0x6, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x5ce80c8d34f71b55}, {}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) close(0x3) 2.271841718s ago: executing program 1 (id=519): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"b3472eb9cd42d2030000002000", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000080)={0x72, 0xa0, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) semop(0x0, &(0x7f0000000000)=[{0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x2) 2.185972296s ago: executing program 3 (id=520): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2100, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x3) 0s ago: executing program 3 (id=521): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1b0) r1 = fanotify_init(0x1, 0x101801) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80, 0x4) fcntl$setlease(r0, 0x400, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r5, 0x0, 0xee01) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000480)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) fchown(r5, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): ngs: Mfr=1, Product=2, SerialNumber=3 [ 127.133278][ T5929] usb 3-1: Product: syz [ 127.133285][ T5929] usb 3-1: Manufacturer: syz [ 127.133292][ T5929] usb 3-1: SerialNumber: syz [ 127.140083][ T6266] dvb-usb: bulk message failed: -22 (1/0) [ 127.140104][ T6266] dw2102: i2c transfer failed. [ 127.195489][ T5929] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 127.262293][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 127.346262][ T806] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.414242][ T6318] capability: warning: `syz.0.114' uses deprecated v2 capabilities in a way that may be insecure [ 127.449036][ T6266] dvb-usb: bulk message failed: -22 (1/0) [ 127.449052][ T6266] dw2102: i2c transfer failed. [ 127.508979][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.530486][ T806] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 127.530596][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.530617][ T806] usb 4-1: Product: syz [ 127.530631][ T806] usb 4-1: Manufacturer: syz [ 127.530643][ T806] usb 4-1: SerialNumber: syz [ 127.531098][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.601711][ T806] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 127.606674][ T6320] FAULT_INJECTION: forcing a failure. [ 127.606674][ T6320] name failslab, interval 1, probability 0, space 0, times 0 [ 127.606782][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz.0.115 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.606803][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.606814][ T6320] Call Trace: [ 127.606821][ T6320] [ 127.606828][ T6320] dump_stack_lvl+0x189/0x250 [ 127.606854][ T6320] ? __pfx____ratelimit+0x10/0x10 [ 127.606883][ T6320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.606905][ T6320] ? __pfx__printk+0x10/0x10 [ 127.606928][ T6320] ? __pfx___might_resched+0x10/0x10 [ 127.606947][ T6320] ? fs_reclaim_acquire+0x7d/0x100 [ 127.606967][ T6320] should_fail_ex+0x46c/0x600 [ 127.606993][ T6320] ? sk_prot_alloc+0x57/0x220 [ 127.607012][ T6320] should_failslab+0xa8/0x100 [ 127.607030][ T6320] ? sk_prot_alloc+0x57/0x220 [ 127.607047][ T6320] kmem_cache_alloc_noprof+0x84/0x6c0 [ 127.607077][ T6320] sk_prot_alloc+0x57/0x220 [ 127.607103][ T6320] ? sk_alloc+0x27/0x390 [ 127.607124][ T6320] sk_alloc+0x3a/0x390 [ 127.607146][ T6320] inet_create+0x7a0/0x1010 [ 127.607168][ T6320] ? inet_create+0x9c/0x1010 [ 127.607193][ T6320] __sock_create+0x4b3/0x9d0 [ 127.607220][ T6320] mptcp_subflow_create_socket+0xf0/0x800 [ 127.607247][ T6320] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 127.607263][ T6320] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 127.607283][ T6320] ? lockdep_hardirqs_on+0x98/0x140 [ 127.607308][ T6320] __mptcp_nmpc_sk+0x148/0x780 [ 127.607330][ T6320] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 127.607347][ T6320] ? rt_spin_unlock+0x161/0x200 [ 127.607370][ T6320] ? lock_sock_nested+0x5f/0x130 [ 127.607393][ T6320] ? lock_sock_nested+0xdd/0x130 [ 127.607419][ T6320] mptcp_setsockopt+0xedb/0x35d0 [ 127.607449][ T6320] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 127.607480][ T6320] ? __fget_files+0x2a/0x420 [ 127.607500][ T6320] ? sock_common_setsockopt+0x36/0xc0 [ 127.607517][ T6320] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 127.607536][ T6320] do_sock_setsockopt+0x17c/0x1b0 [ 127.607560][ T6320] __x64_sys_setsockopt+0x145/0x1b0 [ 127.607585][ T6320] do_syscall_64+0xfa/0xf80 [ 127.607603][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.607621][ T6320] ? clear_bhb_loop+0x60/0xb0 [ 127.607645][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.607662][ T6320] RIP: 0033:0x7fefa5f7f749 [ 127.607678][ T6320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.607691][ T6320] RSP: 002b:00007fefa41e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 127.607710][ T6320] RAX: ffffffffffffffda RBX: 00007fefa61d5fa0 RCX: 00007fefa5f7f749 [ 127.607722][ T6320] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000003 [ 127.607733][ T6320] RBP: 00007fefa41e6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.607743][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.607753][ T6320] R13: 00007fefa61d6038 R14: 00007fefa61d5fa0 R15: 00007fff6190ccf8 [ 127.607783][ T6320] [ 128.096860][ T5891] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.548350][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 128.548550][ T9] ath9k_htc: Failed to initialize the device [ 128.577197][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 128.577219][ T5929] dw2102: i2c transfer failed. [ 128.581788][ T6266] usb 3-1: USB disconnect, device number 6 [ 128.622189][ T6266] usb 3-1: ath9k_htc: USB layer deinitialized [ 128.836261][ T928] dvb-usb: bulk message failed: -22 (1/0) [ 128.836282][ T928] dw2102: i2c transfer failed. [ 128.987760][ T928] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.096343][ T6266] dvb-usb: bulk message failed: -22 (1/0) [ 129.096366][ T6266] dw2102: i2c transfer failed. [ 129.140553][ T928] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 129.140611][ T928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.143484][ T928] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 129.143512][ T928] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 129.143531][ T928] usb 1-1: Manufacturer: syz [ 129.218609][ T928] usb 1-1: config 0 descriptor?? [ 129.290389][ T806] usb 2-1: USB disconnect, device number 7 [ 129.300099][ T49] usb 4-1: USB disconnect, device number 6 [ 129.364520][ T6328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.118'. [ 129.556421][ T928] rc_core: IR keymap rc-hauppauge not found [ 129.556443][ T928] Registered IR keymap rc-empty [ 129.558720][ T928] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 129.562137][ T928] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input6 [ 129.815400][ T806] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 129.839766][ T5883] usb 1-1: USB disconnect, device number 6 [ 130.006328][ T928] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.159753][ T928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.159789][ T928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.159829][ T928] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 130.159851][ T928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.211949][ T928] usb 3-1: config 0 descriptor?? [ 130.450813][ T5891] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 130.456500][ T5891] ath9k_htc: Failed to initialize the device [ 130.678097][ T49] usb 4-1: ath9k_htc: USB layer deinitialized [ 130.794425][ T6332] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 130.921303][ T6353] FAULT_INJECTION: forcing a failure. [ 130.921303][ T6353] name failslab, interval 1, probability 0, space 0, times 0 [ 130.921334][ T6353] CPU: 0 UID: 0 PID: 6353 Comm: syz.4.125 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.921354][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.921367][ T6353] Call Trace: [ 130.921374][ T6353] [ 130.921381][ T6353] dump_stack_lvl+0x189/0x250 [ 130.921407][ T6353] ? __pfx____ratelimit+0x10/0x10 [ 130.921433][ T6353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.921455][ T6353] ? __pfx__printk+0x10/0x10 [ 130.921485][ T6353] ? __pfx___might_resched+0x10/0x10 [ 130.921502][ T6353] ? fs_reclaim_acquire+0x7d/0x100 [ 130.921522][ T6353] should_fail_ex+0x46c/0x600 [ 130.921550][ T6353] should_failslab+0xa8/0x100 [ 130.921570][ T6353] __kmalloc_noprof+0xe0/0x7e0 [ 130.921593][ T6353] ? tomoyo_encode+0x28b/0x550 [ 130.921616][ T6353] tomoyo_encode+0x28b/0x550 [ 130.921638][ T6353] tomoyo_realpath_from_path+0x58d/0x5d0 [ 130.921664][ T6353] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 130.921684][ T6353] tomoyo_path_number_perm+0x1e8/0x5a0 [ 130.921702][ T6353] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 130.921722][ T6353] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 130.921736][ T6353] ? lockdep_hardirqs_on+0x98/0x140 [ 130.921772][ T6353] ? __fget_files+0x2a/0x420 [ 130.921790][ T6353] ? __fget_files+0x3a6/0x420 [ 130.921802][ T6353] ? __fget_files+0x2a/0x420 [ 130.921819][ T6353] security_file_ioctl+0xcb/0x2d0 [ 130.921838][ T6353] __se_sys_ioctl+0x47/0x170 [ 130.921859][ T6353] do_syscall_64+0xfa/0xf80 [ 130.921874][ T6353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.921888][ T6353] ? clear_bhb_loop+0x60/0xb0 [ 130.921904][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.921918][ T6353] RIP: 0033:0x7f17b34ef749 [ 130.921931][ T6353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.921943][ T6353] RSP: 002b:00007f17b1756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.921959][ T6353] RAX: ffffffffffffffda RBX: 00007f17b3745fa0 RCX: 00007f17b34ef749 [ 130.921969][ T6353] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 130.921979][ T6353] RBP: 00007f17b1756090 R08: 0000000000000000 R09: 0000000000000000 [ 130.921987][ T6353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.921996][ T6353] R13: 00007f17b3746038 R14: 00007f17b3745fa0 R15: 00007fffbad3e158 [ 130.922021][ T6353] [ 130.948314][ T6353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.006509][ T928] razer 0003:1532:010E.0004: unknown main item tag 0x3 [ 131.782353][ T928] razer 0003:1532:010E.0004: failed to enable macro keys: -71 [ 131.788136][ T928] razer 0003:1532:010E.0004: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 131.847088][ T928] usb 3-1: USB disconnect, device number 7 [ 132.012602][ T6357] fido_id[6357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 132.065769][ T6364] autofs: Unknown parameter '[«ž¥c·|¹¤dZEƽ‘v³5ˆ§Ýà”m³ëöߕĪÐæ' [ 132.429489][ T6374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.132'. [ 132.559532][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 132.584062][ T6383] IPv6: addrconf: prefix option has invalid lifetime [ 132.913668][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.913743][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.472978][ T6399] FAULT_INJECTION: forcing a failure. [ 133.472978][ T6399] name failslab, interval 1, probability 0, space 0, times 0 [ 133.473009][ T6399] CPU: 1 UID: 0 PID: 6399 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.473031][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.473041][ T6399] Call Trace: [ 133.473048][ T6399] [ 133.473056][ T6399] dump_stack_lvl+0x189/0x250 [ 133.473083][ T6399] ? __pfx____ratelimit+0x10/0x10 [ 133.473109][ T6399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.473131][ T6399] ? __pfx__printk+0x10/0x10 [ 133.473166][ T6399] should_fail_ex+0x46c/0x600 [ 133.473193][ T6399] ? __send_signal_locked+0x22c/0xec0 [ 133.473217][ T6399] should_failslab+0xa8/0x100 [ 133.473235][ T6399] ? __send_signal_locked+0x22c/0xec0 [ 133.473257][ T6399] kmem_cache_alloc_noprof+0x84/0x6c0 [ 133.473282][ T6399] ? sig_get_ucounts+0x26/0x450 [ 133.473298][ T6399] ? sig_get_ucounts+0x3e4/0x450 [ 133.473319][ T6399] __send_signal_locked+0x22c/0xec0 [ 133.473353][ T6399] force_sig_info_to_task+0x31e/0x4b0 [ 133.473388][ T6399] force_sig_fault+0xdc/0x130 [ 133.473409][ T6399] ? __pfx_force_sig_fault+0x10/0x10 [ 133.473433][ T6399] ? fixup_vdso_exception+0x2cc/0x300 [ 133.473460][ T6399] __bad_area_nosemaphore+0x3b3/0x780 [ 133.473480][ T6399] ? up_read+0x23/0x40 [ 133.473507][ T6399] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 133.473530][ T6399] ? rcu_is_watching+0x15/0xb0 [ 133.473548][ T6399] ? trace_page_fault_user+0x84/0x1c0 [ 133.473571][ T6399] exc_page_fault+0x82/0x100 [ 133.473592][ T6399] asm_exc_page_fault+0x26/0x30 [ 133.473609][ T6399] RIP: 0033:0x7f67b799e79a [ 133.473625][ T6399] Code: 90 8b 45 04 ba 03 00 00 00 c1 e0 04 03 45 64 39 c6 48 0f 42 f0 45 31 c9 31 ff e8 e1 0f 14 00 8b 75 00 ba 03 00 00 00 45 89 e0 <49> 89 45 00 41 b9 00 00 00 10 b9 01 80 00 00 31 ff c1 e6 06 e8 bd [ 133.473639][ T6399] RSP: 002b:00007f67b5d3dfd0 EFLAGS: 00010217 [ 133.473656][ T6399] RAX: ffffffffffffffff RBX: 00007f67b7d35fa0 RCX: 00007f67b7adf783 [ 133.473667][ T6399] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.473678][ T6399] RBP: 0000200000000280 R08: 00000000ffffffff R09: 0000000000000000 [ 133.473689][ T6399] R10: 0000000000008001 R11: 0000000000000246 R12: ffffffffffffffff [ 133.473701][ T6399] R13: 0000000000000000 R14: 00000000000005c2 R15: 0000000000000000 [ 133.473732][ T6399] [ 133.546246][ T928] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.676347][ T928] usb 1-1: device descriptor read/64, error -71 [ 133.697234][ T6405] binder: 6404:6405 ioctl 4018620d 0 returned -22 [ 133.936292][ T928] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.066316][ T928] usb 1-1: device descriptor read/64, error -71 [ 134.178163][ T928] usb usb1-port1: attempt power cycle [ 135.376234][ T928] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.407091][ T928] usb 1-1: device descriptor read/8, error -71 [ 137.828522][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 137.892440][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.150'. [ 139.066369][ T928] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 139.086805][ T928] usb 1-1: device descriptor read/8, error -71 [ 139.206560][ T928] usb usb1-port1: unable to enumerate USB device [ 140.102109][ T6442] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 140.281132][ T6462] FAULT_INJECTION: forcing a failure. [ 140.281132][ T6462] name failslab, interval 1, probability 0, space 0, times 0 [ 140.281161][ T6462] CPU: 0 UID: 0 PID: 6462 Comm: syz.2.159 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 140.281179][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.281189][ T6462] Call Trace: [ 140.281196][ T6462] [ 140.281203][ T6462] dump_stack_lvl+0x189/0x250 [ 140.281230][ T6462] ? __pfx____ratelimit+0x10/0x10 [ 140.281252][ T6462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.281272][ T6462] ? __pfx__printk+0x10/0x10 [ 140.281295][ T6462] ? __pfx___might_resched+0x10/0x10 [ 140.281311][ T6462] ? fs_reclaim_acquire+0x7d/0x100 [ 140.281330][ T6462] should_fail_ex+0x46c/0x600 [ 140.281355][ T6462] should_failslab+0xa8/0x100 [ 140.281372][ T6462] __kmalloc_noprof+0xe0/0x7e0 [ 140.281403][ T6462] ? tomoyo_encode+0x28b/0x550 [ 140.281425][ T6462] tomoyo_encode+0x28b/0x550 [ 140.281447][ T6462] tomoyo_realpath_from_path+0x58d/0x5d0 [ 140.281467][ T6462] ? tomoyo_domain+0xd9/0x130 [ 140.281489][ T6462] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 140.281511][ T6462] tomoyo_path_number_perm+0x1e8/0x5a0 [ 140.281533][ T6462] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.281555][ T6462] ? sb_end_write+0xe9/0x1c0 [ 140.281574][ T6462] ? vfs_write+0x965/0xb40 [ 140.281634][ T6462] ? ksys_write+0x1e7/0x260 [ 140.281662][ T6462] security_file_ioctl+0xcb/0x2d0 [ 140.281688][ T6462] __se_sys_ioctl+0x47/0x170 [ 140.281714][ T6462] do_syscall_64+0xfa/0xf80 [ 140.281733][ T6462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.281751][ T6462] ? clear_bhb_loop+0x60/0xb0 [ 140.281772][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.281787][ T6462] RIP: 0033:0x7f67b7adf749 [ 140.281803][ T6462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.281817][ T6462] RSP: 002b:00007f67b5d3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.281836][ T6462] RAX: ffffffffffffffda RBX: 00007f67b7d35fa0 RCX: 00007f67b7adf749 [ 140.281848][ T6462] RDX: 00002000000000c0 RSI: 000000000000541b RDI: 0000000000000003 [ 140.281860][ T6462] RBP: 00007f67b5d3e090 R08: 0000000000000000 R09: 0000000000000000 [ 140.281871][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.281882][ T6462] R13: 00007f67b7d36038 R14: 00007f67b7d35fa0 R15: 00007ffde589d3f8 [ 140.281914][ T6462] [ 140.285339][ T6462] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.670237][ T6472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'. [ 140.767580][ T6475] process 'syz.3.161' launched './file1' with NULL argv: empty string added [ 141.010661][ T5891] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 141.262321][ T6326] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.559022][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 141.694363][ T5891] usb 5-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 141.694759][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.694833][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x37, changing to 0x7 [ 141.694888][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 240, changing to 11 [ 141.695414][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 49986, setting to 1024 [ 141.695473][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.856348][ T5891] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 141.856377][ T5891] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 141.856396][ T5891] usb 5-1: Manufacturer: syz [ 142.019378][ T6326] usb 2-1: Using ep0 maxpacket: 16 [ 142.152967][ T6326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.153000][ T6326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.153021][ T6326] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 142.153251][ T6326] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 142.153316][ T6326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.247263][ T6326] usb 2-1: config 0 descriptor?? [ 143.263081][ T5891] usb 5-1: config 0 descriptor?? [ 147.345724][ T6326] usbhid 2-1:0.0: can't add hid device: -71 [ 147.346453][ T6326] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 147.808068][ T6326] usb 2-1: USB disconnect, device number 8 [ 148.188037][ T5891] rc_core: IR keymap rc-hauppauge not found [ 148.188057][ T5891] Registered IR keymap rc-empty [ 148.190269][ T5891] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 148.218457][ T5891] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 148.265475][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 148.281677][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 148.317101][ T5891] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 148.336562][ T5891] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 148.356580][ T5891] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 148.376597][ T5891] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 148.396651][ T5891] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 148.397424][ T6510] FAULT_INJECTION: forcing a failure. [ 148.397424][ T6510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.397452][ T6510] CPU: 0 UID: 0 PID: 6510 Comm: syz.1.175 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.397472][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.397483][ T6510] Call Trace: [ 148.397490][ T6510] [ 148.397507][ T6510] dump_stack_lvl+0x189/0x250 [ 148.397534][ T6510] ? __pfx____ratelimit+0x10/0x10 [ 148.397559][ T6510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.397581][ T6510] ? __pfx__printk+0x10/0x10 [ 148.397600][ T6510] ? __might_fault+0xb0/0x130 [ 148.397641][ T6510] should_fail_ex+0x46c/0x600 [ 148.397671][ T6510] _copy_from_user+0x2d/0xb0 [ 148.397690][ T6510] kstrtouint_from_user+0xc4/0x170 [ 148.397713][ T6510] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 148.397736][ T6510] ? __f2fs_ioctl+0x11f0/0xb840 [ 148.397768][ T6510] proc_fail_nth_write+0x88/0x200 [ 148.397792][ T6510] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.397822][ T6510] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.397847][ T6510] vfs_write+0x287/0xb40 [ 148.397881][ T6510] ? __pfx_vfs_write+0x10/0x10 [ 148.397900][ T6510] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 148.397935][ T6510] ? mutex_lock_nested+0x154/0x1d0 [ 148.397955][ T6510] ? fdget_pos+0x253/0x320 [ 148.397983][ T6510] ksys_write+0x14b/0x260 [ 148.398009][ T6510] ? __pfx_ksys_write+0x10/0x10 [ 148.398037][ T6510] ? do_syscall_64+0xbe/0xf80 [ 148.398058][ T6510] do_syscall_64+0xfa/0xf80 [ 148.398077][ T6510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.398094][ T6510] ? clear_bhb_loop+0x60/0xb0 [ 148.398116][ T6510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.398134][ T6510] RIP: 0033:0x7f168c55e1ff [ 148.398150][ T6510] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 148.398164][ T6510] RSP: 002b:00007f168a7a5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 148.398183][ T6510] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f168c55e1ff [ 148.398196][ T6510] RDX: 0000000000000001 RSI: 00007f168a7a50a0 RDI: 0000000000000007 [ 148.398207][ T6510] RBP: 00007f168a7a5090 R08: 0000000000000000 R09: 0000000000000000 [ 148.398218][ T6510] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 148.398229][ T6510] R13: 00007f168c7b6128 R14: 00007f168c7b6090 R15: 00007ffd95821b48 [ 148.398262][ T6510] [ 148.416640][ T5891] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 148.436538][ T5891] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 148.456583][ T5891] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 148.476611][ T5891] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 148.526327][ T5891] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 148.557945][ T5891] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 148.557970][ T5891] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 148.777727][ T5891] usb 5-1: USB disconnect, device number 11 [ 150.156578][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 150.244754][ T6527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.179'. [ 151.117526][ T6542] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.928492][ T5939] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.176514][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 152.265922][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.266727][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.267081][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 152.267966][ T5939] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 152.268344][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.568549][ T5939] usb 2-1: config 0 descriptor?? [ 156.378255][ T5939] usbhid 2-1:0.0: can't add hid device: -71 [ 156.378670][ T5939] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 156.810904][ T5939] usb 2-1: USB disconnect, device number 9 [ 157.271096][ T5939] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 157.418545][ T5939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.418603][ T5939] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 157.418640][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.461151][ T5939] usb 1-1: config 0 descriptor?? [ 157.472990][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.193'. [ 157.511368][ T5939] pwc: Askey VC010 type 2 USB webcam detected. [ 158.068169][ T5939] pwc: recv_control_msg error -32 req 02 val 2b00 [ 158.274538][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.274983][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.292849][ T5939] pwc: recv_control_msg error -32 req 02 val 2c00 [ 158.437112][ T5939] pwc: recv_control_msg error -71 req 04 val 1000 [ 158.437634][ T5939] pwc: recv_control_msg error -71 req 04 val 1300 [ 158.439669][ T5939] pwc: recv_control_msg error -71 req 04 val 1400 [ 158.440566][ T5939] pwc: recv_control_msg error -71 req 02 val 2000 [ 158.441055][ T5939] pwc: recv_control_msg error -71 req 02 val 2100 [ 158.441917][ T5939] pwc: recv_control_msg error -71 req 04 val 1500 [ 158.487833][ T5939] pwc: recv_control_msg error -71 req 02 val 2500 [ 158.489185][ T5939] pwc: recv_control_msg error -71 req 02 val 2400 [ 158.489698][ T5939] pwc: recv_control_msg error -71 req 02 val 2600 [ 158.491691][ T5939] pwc: recv_control_msg error -71 req 02 val 2900 [ 158.492239][ T5939] pwc: recv_control_msg error -71 req 02 val 2800 [ 158.492977][ T5939] pwc: recv_control_msg error -71 req 04 val 1100 [ 158.493472][ T5939] pwc: recv_control_msg error -71 req 04 val 1200 [ 159.158391][ T5939] pwc: Registered as video103. [ 159.199467][ T5939] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 159.201988][ T6601] 9p: Bad value for 'rfdno' [ 159.242477][ T5939] usb 1-1: USB disconnect, device number 11 [ 159.735034][ T6613] sock: sock_set_timeout: `syz.1.203' (pid 6613) tries to set negative timeout [ 160.648397][ T6631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.209'. [ 160.692888][ T6633] netlink: 92 bytes leftover after parsing attributes in process `syz.3.210'. [ 160.692955][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 160.714496][ T6633] netlink: 332 bytes leftover after parsing attributes in process `syz.3.210'. [ 160.714565][ T6633] netlink: 332 bytes leftover after parsing attributes in process `syz.3.210'. [ 161.025837][ T6640] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.126198][ T6649] sock: sock_set_timeout: `syz.3.216' (pid 6649) tries to set negative timeout [ 162.275883][ T5807] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.391281][ T6653] 9pnet_fd: Insufficient options for proto=fd [ 162.466296][ T5807] usb 3-1: device descriptor read/64, error -71 [ 162.637543][ T6662] netlink: 'syz.0.222': attribute type 11 has an invalid length. [ 162.726995][ T5807] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 162.756255][ T928] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 162.866270][ T5807] usb 3-1: device descriptor read/64, error -71 [ 162.928331][ T928] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 162.928359][ T928] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 162.928378][ T928] usb 2-1: config 0 has no interface number 1 [ 162.928433][ T928] usb 2-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 162.928448][ T928] usb 2-1: too many endpoints for config 0 interface 129 altsetting 3: 255, using maximum allowed: 30 [ 162.928468][ T928] usb 2-1: config 0 interface 129 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 162.928482][ T928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.928490][ T928] usb 2-1: config 0 interface 129 has no altsetting 0 [ 162.928508][ T928] usb 2-1: New USB device found, idVendor=13f9, idProduct=0006, bcdDevice= 0.00 [ 162.928519][ T928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.932252][ T928] usb 2-1: config 0 descriptor?? [ 162.965374][ T928] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 162.976872][ T5807] usb usb3-port1: attempt power cycle [ 163.316317][ T5807] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 163.337525][ T5807] usb 3-1: device descriptor read/8, error -71 [ 163.706942][ T6680] binder: BINDER_SET_CONTEXT_MGR already set [ 163.706957][ T6680] binder: 6672:6680 ioctl 4018620d 200000000040 returned -16 [ 164.735971][ T5807] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 164.845832][ T5807] usb 3-1: device descriptor read/8, error -71 [ 164.961021][ T5807] usb usb3-port1: unable to enumerate USB device [ 164.969342][ T37] audit: type=1326 audit(1765938665.395:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6683 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0060a6f749 code=0x7ffc0000 [ 164.969394][ T37] audit: type=1326 audit(1765938665.395:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6683 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0060a6f749 code=0x7ffc0000 [ 165.629724][ T6695] FAULT_INJECTION: forcing a failure. [ 165.629724][ T6695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.629760][ T6695] CPU: 1 UID: 0 PID: 6695 Comm: syz.2.231 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 165.629785][ T6695] Tainted: [L]=SOFTLOCKUP [ 165.629791][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.629802][ T6695] Call Trace: [ 165.629809][ T6695] [ 165.629817][ T6695] dump_stack_lvl+0x189/0x250 [ 165.629844][ T6695] ? __pfx____ratelimit+0x10/0x10 [ 165.629870][ T6695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.629892][ T6695] ? __pfx__printk+0x10/0x10 [ 165.629923][ T6695] should_fail_ex+0x46c/0x600 [ 165.629952][ T6695] _copy_from_user+0x2d/0xb0 [ 165.629970][ T6695] __copy_msghdr+0x3c5/0x5b0 [ 165.629997][ T6695] ___sys_sendmsg+0x1a5/0x2a0 [ 165.630020][ T6695] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.630079][ T6695] ? __fget_files+0x2a/0x420 [ 165.630097][ T6695] ? __fget_files+0x3a6/0x420 [ 165.630126][ T6695] __sys_sendmmsg+0x22d/0x430 [ 165.630153][ T6695] ? __pfx___sys_sendmmsg+0x10/0x10 [ 165.630185][ T6695] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 165.630232][ T6695] ? ksys_write+0x230/0x260 [ 165.630258][ T6695] ? __pfx_ksys_write+0x10/0x10 [ 165.630287][ T6695] __x64_sys_sendmmsg+0xa0/0xc0 [ 165.630310][ T6695] do_syscall_64+0xfa/0xf80 [ 165.630329][ T6695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.630346][ T6695] ? clear_bhb_loop+0x60/0xb0 [ 165.630368][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.630385][ T6695] RIP: 0033:0x7f67b7adf749 [ 165.630401][ T6695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.630415][ T6695] RSP: 002b:00007f67b5d3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 165.630434][ T6695] RAX: ffffffffffffffda RBX: 00007f67b7d35fa0 RCX: 00007f67b7adf749 [ 165.630446][ T6695] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 165.630457][ T6695] RBP: 00007f67b5d3e090 R08: 0000000000000000 R09: 0000000000000000 [ 165.630468][ T6695] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 165.630482][ T6695] R13: 00007f67b7d36038 R14: 00007f67b7d35fa0 R15: 00007ffde589d3f8 [ 165.630513][ T6695] [ 166.158061][ T6700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.230'. [ 167.467133][ T928] usb 2-1: string descriptor 0 read error: -71 [ 167.470716][ T928] usbhid 2-1:0.129: couldn't find an input interrupt endpoint [ 167.536418][ T928] usb 2-1: USB disconnect, device number 10 [ 167.883412][ T6719] autofs: Unknown parameter '[«ž¥c·|¹¤dZEƽ‘v³5ˆ§Ýà”m³ëöߕĪÐæ' [ 168.468239][ T6557] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 168.950396][ T6557] usb 4-1: device descriptor read/64, error -71 [ 169.320476][ T6557] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 169.666278][ T6557] usb 4-1: device descriptor read/64, error -71 [ 169.776901][ T6557] usb usb4-port1: attempt power cycle [ 170.077619][ T6742] netlink: 'syz.2.245': attribute type 11 has an invalid length. [ 170.119213][ T6557] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.166025][ T6557] usb 4-1: device descriptor read/8, error -71 [ 170.237609][ T6744] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 170.396254][ T6557] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 170.417166][ T3518] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.419836][ T6557] usb 4-1: device descriptor read/8, error -71 [ 170.425979][ T3518] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.426025][ T3518] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.426058][ T3518] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.504012][ T6754] FAULT_INJECTION: forcing a failure. [ 170.504012][ T6754] name failslab, interval 1, probability 0, space 0, times 0 [ 170.504056][ T6754] CPU: 1 UID: 0 PID: 6754 Comm: syz.2.249 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 170.504080][ T6754] Tainted: [L]=SOFTLOCKUP [ 170.504086][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.504096][ T6754] Call Trace: [ 170.504102][ T6754] [ 170.504109][ T6754] dump_stack_lvl+0x189/0x250 [ 170.504137][ T6754] ? __pfx____ratelimit+0x10/0x10 [ 170.504162][ T6754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.504183][ T6754] ? __pfx__printk+0x10/0x10 [ 170.504202][ T6754] ? __pfx___might_resched+0x10/0x10 [ 170.504213][ T6754] ? fs_reclaim_acquire+0x7d/0x100 [ 170.504225][ T6754] should_fail_ex+0x46c/0x600 [ 170.504240][ T6754] ? security_file_alloc+0x34/0x330 [ 170.504253][ T6754] should_failslab+0xa8/0x100 [ 170.504263][ T6754] ? security_file_alloc+0x34/0x330 [ 170.504274][ T6754] kmem_cache_alloc_noprof+0x84/0x6c0 [ 170.504290][ T6754] security_file_alloc+0x34/0x330 [ 170.504303][ T6754] init_file+0x99/0x310 [ 170.504316][ T6754] alloc_empty_file+0x6e/0x1d0 [ 170.504326][ T6754] path_openat+0x10e/0x3df0 [ 170.504343][ T6754] ? __lock_acquire+0x6b6/0x2cf0 [ 170.504361][ T6754] ? __pfx_stack_trace_save+0x10/0x10 [ 170.504377][ T6754] ? __lock_acquire+0x6b6/0x2cf0 [ 170.504388][ T6754] ? __pfx_path_openat+0x10/0x10 [ 170.504405][ T6754] ? do_raw_spin_lock+0x121/0x290 [ 170.504432][ T6754] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 170.504450][ T6754] ? lockdep_hardirqs_on+0x98/0x140 [ 170.504468][ T6754] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 170.504490][ T6754] do_filp_open+0x1fa/0x410 [ 170.504513][ T6754] ? __pfx_do_filp_open+0x10/0x10 [ 170.504524][ T6754] ? rt_mutex_slowunlock+0x493/0x8a0 [ 170.504548][ T6754] ? alloc_fd+0x64f/0x6c0 [ 170.504563][ T6754] do_sys_openat2+0x121/0x200 [ 170.504576][ T6754] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.504587][ T6754] ? ksys_write+0x230/0x260 [ 170.504600][ T6754] ? __pfx_ksys_write+0x10/0x10 [ 170.504614][ T6754] __x64_sys_open+0x11e/0x150 [ 170.504626][ T6754] do_syscall_64+0xfa/0xf80 [ 170.504637][ T6754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.504646][ T6754] ? clear_bhb_loop+0x60/0xb0 [ 170.504657][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.504666][ T6754] RIP: 0033:0x7f67b7adf749 [ 170.504677][ T6754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.504684][ T6754] RSP: 002b:00007f67b5d3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 170.504697][ T6754] RAX: ffffffffffffffda RBX: 00007f67b7d35fa0 RCX: 00007f67b7adf749 [ 170.504704][ T6754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 170.504709][ T6754] RBP: 00007f67b5d3e090 R08: 0000000000000000 R09: 0000000000000000 [ 170.504715][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.504720][ T6754] R13: 00007f67b7d36038 R14: 00007f67b7d35fa0 R15: 00007ffde589d3f8 [ 170.504736][ T6754] [ 170.527183][ T6557] usb usb4-port1: unable to enumerate USB device [ 171.105656][ T6763] FAULT_INJECTION: forcing a failure. [ 171.105656][ T6763] name failslab, interval 1, probability 0, space 0, times 0 [ 171.105690][ T6763] CPU: 1 UID: 0 PID: 6763 Comm: syz.0.252 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 171.105715][ T6763] Tainted: [L]=SOFTLOCKUP [ 171.105721][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.105731][ T6763] Call Trace: [ 171.105739][ T6763] [ 171.105747][ T6763] dump_stack_lvl+0x189/0x250 [ 171.105774][ T6763] ? __pfx____ratelimit+0x10/0x10 [ 171.105798][ T6763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.105821][ T6763] ? __pfx__printk+0x10/0x10 [ 171.105852][ T6763] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 171.105879][ T6763] should_fail_ex+0x46c/0x600 [ 171.105906][ T6763] ? dst_alloc+0x105/0x170 [ 171.105929][ T6763] should_failslab+0xa8/0x100 [ 171.105948][ T6763] ? dst_alloc+0x105/0x170 [ 171.105969][ T6763] kmem_cache_alloc_noprof+0x84/0x6c0 [ 171.105991][ T6763] ? ip6_pol_route+0x162/0x1180 [ 171.106017][ T6763] ? __pfx_ip6_dst_gc+0x10/0x10 [ 171.106039][ T6763] dst_alloc+0x105/0x170 [ 171.106073][ T6763] ip6_pol_route+0xa21/0x1180 [ 171.106094][ T6763] ? ip6_pol_route+0x162/0x1180 [ 171.106116][ T6763] ? __pfx_ip6_pol_route+0x10/0x10 [ 171.106140][ T6763] ? is_bpf_text_address+0x26/0x2b0 [ 171.106176][ T6763] fib6_rule_lookup+0x52f/0x6f0 [ 171.106202][ T6763] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 171.106224][ T6763] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 171.106276][ T6763] ip6_route_input+0x6de/0xad0 [ 171.106306][ T6763] ? __pfx_ip6_route_input+0x10/0x10 [ 171.106363][ T6763] ? ip6_rcv_finish_core+0x222/0x420 [ 171.106385][ T6763] ip6_rcv_finish+0x141/0x2e0 [ 171.106406][ T6763] NF_HOOK+0x30c/0x3a0 [ 171.106421][ T6763] ? skb_orphan+0x4f/0xd0 [ 171.106439][ T6763] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 171.106455][ T6763] ? NF_HOOK+0x9a/0x3a0 [ 171.106471][ T6763] ? __pfx_NF_HOOK+0x10/0x10 [ 171.106491][ T6763] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 171.106521][ T6763] __netif_receive_skb+0xd3/0x380 [ 171.106538][ T6763] ? jump_label_transform+0x78/0x100 [ 171.106559][ T6763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.106582][ T6763] ? netif_receive_skb+0x105/0x750 [ 171.106607][ T6763] netif_receive_skb+0x1bb/0x750 [ 171.106636][ T6763] ? __pfx_netif_receive_skb+0x10/0x10 [ 171.106666][ T6763] ? __lock_acquire+0x6b6/0x2cf0 [ 171.106689][ T6763] ? tun_rx_batched+0x166/0x730 [ 171.106714][ T6763] tun_rx_batched+0x1bf/0x730 [ 171.106743][ T6763] ? __pfx_tun_rx_batched+0x10/0x10 [ 171.106762][ T6763] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 171.106783][ T6763] ? lockdep_hardirqs_on+0x98/0x140 [ 171.106812][ T6763] ? tun_get_user+0x266d/0x3de0 [ 171.106847][ T6763] ? tun_get_user+0x266d/0x3de0 [ 171.106868][ T6763] tun_get_user+0x2abd/0x3de0 [ 171.106895][ T6763] ? tun_get_user+0x6fc/0x3de0 [ 171.106934][ T6763] ? __pfx_tun_get_user+0x10/0x10 [ 171.106956][ T6763] ? __lock_acquire+0x6b6/0x2cf0 [ 171.106981][ T6763] ? kstrtoull+0x12f/0x1d0 [ 171.107014][ T6763] ? ref_tracker_alloc+0x2fe/0x450 [ 171.107041][ T6763] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 171.107075][ T6763] ? tun_get+0x1c/0x2f0 [ 171.107103][ T6763] ? tun_get+0x1c/0x2f0 [ 171.107122][ T6763] ? tun_get+0x1c/0x2f0 [ 171.107149][ T6763] tun_chr_write_iter+0x119/0x200 [ 171.107174][ T6763] vfs_write+0x5d5/0xb40 [ 171.107204][ T6763] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 171.107226][ T6763] ? __pfx_vfs_write+0x10/0x10 [ 171.107263][ T6763] ? __fget_files+0x2a/0x420 [ 171.107293][ T6763] ksys_write+0x14b/0x260 [ 171.107319][ T6763] ? __pfx_ksys_write+0x10/0x10 [ 171.107347][ T6763] ? do_syscall_64+0xbe/0xf80 [ 171.107369][ T6763] do_syscall_64+0xfa/0xf80 [ 171.107388][ T6763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.107405][ T6763] ? clear_bhb_loop+0x60/0xb0 [ 171.107428][ T6763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.107445][ T6763] RIP: 0033:0x7fefa5f7e1ff [ 171.107461][ T6763] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 171.107475][ T6763] RSP: 002b:00007fefa41e6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 171.107494][ T6763] RAX: ffffffffffffffda RBX: 00007fefa61d5fa0 RCX: 00007fefa5f7e1ff [ 171.107507][ T6763] RDX: 000000000000007a RSI: 0000200000000180 RDI: 00000000000000c8 [ 171.107519][ T6763] RBP: 00007fefa41e6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.107530][ T6763] R10: 000000000000007a R11: 0000000000000293 R12: 0000000000000001 [ 171.107541][ T6763] R13: 00007fefa61d6038 R14: 00007fefa61d5fa0 R15: 00007fff6190ccf8 [ 171.107576][ T6763] [ 173.116367][ T6778] netlink: 'syz.0.257': attribute type 11 has an invalid length. [ 173.436255][ T6557] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.870063][ T6557] usb 3-1: config 0 has an invalid interface number: 129 but max is 0 [ 174.870091][ T6557] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 174.870111][ T6557] usb 3-1: config 0 has no interface number 1 [ 174.870157][ T6557] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 174.870172][ T6557] usb 3-1: too many endpoints for config 0 interface 129 altsetting 3: 255, using maximum allowed: 30 [ 174.870194][ T6557] usb 3-1: config 0 interface 129 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 174.870207][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 174.870216][ T6557] usb 3-1: config 0 interface 129 has no altsetting 0 [ 174.870235][ T6557] usb 3-1: New USB device found, idVendor=13f9, idProduct=0006, bcdDevice= 0.00 [ 174.870246][ T6557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.874039][ T6557] usb 3-1: config 0 descriptor?? [ 174.907367][ T6786] mmap: syz.0.261 (6786) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.011206][ T6557] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 175.517827][ T6797] syz.0.264 (6797) used greatest stack depth: 17744 bytes left [ 175.783693][ T6803] xt_l2tp: v2 sid > 0xffff: 2162688 [ 176.822333][ T6557] usb 3-1: string descriptor 0 read error: -71 [ 176.885688][ T6557] usbhid 3-1:0.129: couldn't find an input interrupt endpoint [ 176.898797][ T6557] usb 3-1: USB disconnect, device number 12 [ 177.627064][ T6826] FAULT_INJECTION: forcing a failure. [ 177.627064][ T6826] name failslab, interval 1, probability 0, space 0, times 0 [ 177.627093][ T6826] CPU: 1 UID: 0 PID: 6826 Comm: syz.3.272 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 177.627112][ T6826] Tainted: [L]=SOFTLOCKUP [ 177.627116][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.627125][ T6826] Call Trace: [ 177.627130][ T6826] [ 177.627137][ T6826] dump_stack_lvl+0x189/0x250 [ 177.627158][ T6826] ? __pfx____ratelimit+0x10/0x10 [ 177.627178][ T6826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.627195][ T6826] ? __pfx__printk+0x10/0x10 [ 177.627213][ T6826] ? __pfx___might_resched+0x10/0x10 [ 177.627233][ T6826] should_fail_ex+0x46c/0x600 [ 177.627253][ T6826] ? preload_this_cpu_lock+0x49/0xc0 [ 177.627267][ T6826] should_failslab+0xa8/0x100 [ 177.627281][ T6826] ? preload_this_cpu_lock+0x49/0xc0 [ 177.627292][ T6826] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 177.627310][ T6826] ? alloc_vmap_area+0x2a0/0x14e0 [ 177.627325][ T6826] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 177.627341][ T6826] ? alloc_vmap_area+0x2a0/0x14e0 [ 177.627359][ T6826] preload_this_cpu_lock+0x49/0xc0 [ 177.627375][ T6826] alloc_vmap_area+0x44f/0x14e0 [ 177.627408][ T6826] ? __pfx_alloc_vmap_area+0x10/0x10 [ 177.627426][ T6826] ? __kmalloc_cache_node_noprof+0x2aa/0x700 [ 177.627446][ T6826] ? __get_vm_area_node+0x172/0x350 [ 177.627462][ T6826] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 177.627490][ T6826] __get_vm_area_node+0x227/0x350 [ 177.627513][ T6826] __vmalloc_node_range_noprof+0x371/0x16a0 [ 177.627530][ T6826] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 177.627562][ T6826] ? unwind_get_return_address+0x4d/0x90 [ 177.627581][ T6826] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 177.627600][ T6826] ? __lock_acquire+0x6b6/0x2cf0 [ 177.627623][ T6826] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 177.627637][ T6826] __vmalloc_noprof+0xd2/0x120 [ 177.627653][ T6826] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 177.627670][ T6826] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 177.627688][ T6826] bpf_prog_alloc+0x3c/0x1a0 [ 177.627705][ T6826] bpf_prog_load+0x735/0x1a10 [ 177.627729][ T6826] ? __pfx_bpf_prog_load+0x10/0x10 [ 177.627761][ T6826] ? bpf_lsm_bpf+0x9/0x20 [ 177.627772][ T6826] ? security_bpf+0x7e/0x300 [ 177.627794][ T6826] __sys_bpf+0x507/0x860 [ 177.627812][ T6826] ? __pfx___sys_bpf+0x10/0x10 [ 177.627826][ T6826] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 177.627860][ T6826] ? ksys_write+0x230/0x260 [ 177.627884][ T6826] ? __pfx_ksys_write+0x10/0x10 [ 177.627909][ T6826] __x64_sys_bpf+0x7c/0x90 [ 177.627923][ T6826] do_syscall_64+0xfa/0xf80 [ 177.627937][ T6826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.627952][ T6826] ? clear_bhb_loop+0x60/0xb0 [ 177.627968][ T6826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.627980][ T6826] RIP: 0033:0x7f0060a6f749 [ 177.627994][ T6826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.628005][ T6826] RSP: 002b:00007f005ecce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.628020][ T6826] RAX: ffffffffffffffda RBX: 00007f0060cc5fa0 RCX: 00007f0060a6f749 [ 177.628029][ T6826] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 177.628037][ T6826] RBP: 00007f005ecce090 R08: 0000000000000000 R09: 0000000000000000 [ 177.628044][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.628053][ T6826] R13: 00007f0060cc6038 R14: 00007f0060cc5fa0 R15: 00007ffe070e43b8 [ 177.628076][ T6826] [ 178.088854][ T6557] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 178.196292][ T806] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 178.208533][ T6557] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 178.350535][ T806] usb 5-1: config 0 has no interfaces? [ 178.353230][ T806] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.353257][ T806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.353276][ T806] usb 5-1: SerialNumber: syz [ 178.380037][ T806] usb 5-1: config 0 descriptor?? [ 178.545989][ T6842] FAULT_INJECTION: forcing a failure. [ 178.545989][ T6842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.546024][ T6842] CPU: 0 UID: 0 PID: 6842 Comm: syz.0.277 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 178.546058][ T6842] Tainted: [L]=SOFTLOCKUP [ 178.546065][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.546075][ T6842] Call Trace: [ 178.546082][ T6842] [ 178.546094][ T6842] dump_stack_lvl+0x189/0x250 [ 178.546119][ T6842] ? __pfx____ratelimit+0x10/0x10 [ 178.546152][ T6842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.546172][ T6842] ? __pfx__printk+0x10/0x10 [ 178.546190][ T6842] ? __might_fault+0xb0/0x130 [ 178.546225][ T6842] should_fail_ex+0x46c/0x600 [ 178.546252][ T6842] _copy_from_user+0x2d/0xb0 [ 178.546270][ T6842] __se_sys_mount+0x18b/0x410 [ 178.546295][ T6842] ? __pfx___se_sys_mount+0x10/0x10 [ 178.546317][ T6842] ? do_syscall_64+0xbe/0xf80 [ 178.546333][ T6842] ? __x64_sys_mount+0x20/0xc0 [ 178.546353][ T6842] do_syscall_64+0xfa/0xf80 [ 178.546370][ T6842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.546387][ T6842] ? clear_bhb_loop+0x60/0xb0 [ 178.546408][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.546425][ T6842] RIP: 0033:0x7fefa5f7f749 [ 178.546441][ T6842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.546456][ T6842] RSP: 002b:00007fefa41c5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 178.546475][ T6842] RAX: ffffffffffffffda RBX: 00007fefa61d6090 RCX: 00007fefa5f7f749 [ 178.546494][ T6842] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 178.546506][ T6842] RBP: 00007fefa41c5090 R08: 00002000000021c0 R09: 0000000000000000 [ 178.546517][ T6842] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001 [ 178.546528][ T6842] R13: 00007fefa61d6128 R14: 00007fefa61d6090 R15: 00007fff6190ccf8 [ 178.546559][ T6842] [ 178.594388][ T806] usb 5-1: USB disconnect, device number 12 [ 178.616550][ T6842] 9p: Bad value for 'rfdno' [ 179.075568][ T49] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 180.054046][ T49] usb 3-1: config 0 has an invalid interface number: 129 but max is 0 [ 180.054073][ T49] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 180.054093][ T49] usb 3-1: config 0 has no interface number 1 [ 180.054150][ T49] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 180.054176][ T49] usb 3-1: too many endpoints for config 0 interface 129 altsetting 3: 255, using maximum allowed: 30 [ 180.054213][ T49] usb 3-1: config 0 interface 129 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 180.054235][ T49] usb 3-1: config 0 interface 0 has no altsetting 0 [ 180.054252][ T49] usb 3-1: config 0 interface 129 has no altsetting 0 [ 180.054283][ T49] usb 3-1: New USB device found, idVendor=13f9, idProduct=0006, bcdDevice= 0.00 [ 180.054303][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.074795][ T49] usb 3-1: config 0 descriptor?? [ 180.685713][ T49] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 185.216430][ T5965] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.124388][ T49] usb 3-1: string descriptor 0 read error: -32 [ 186.539914][ T49] usbhid 3-1:0.129: couldn't find an input interrupt endpoint [ 187.171201][ T5965] usb 2-1: Using ep0 maxpacket: 16 [ 187.233034][ T5965] usb 2-1: device descriptor read/all, error -71 [ 188.380407][ T806] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 188.536422][ T806] usb 1-1: Using ep0 maxpacket: 16 [ 188.548041][ T806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.548083][ T806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.548138][ T806] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 188.548207][ T806] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 188.548276][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.654760][ T6892] FAULT_INJECTION: forcing a failure. [ 188.654760][ T6892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.654798][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.1.288 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 188.654823][ T6892] Tainted: [L]=SOFTLOCKUP [ 188.654829][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.654840][ T6892] Call Trace: [ 188.654847][ T6892] [ 188.654855][ T6892] dump_stack_lvl+0x189/0x250 [ 188.654882][ T6892] ? __pfx____ratelimit+0x10/0x10 [ 188.654912][ T6892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.654935][ T6892] ? __pfx__printk+0x10/0x10 [ 188.654953][ T6892] ? __might_fault+0xb0/0x130 [ 188.654987][ T6892] should_fail_ex+0x46c/0x600 [ 188.655016][ T6892] _copy_from_user+0x2d/0xb0 [ 188.655034][ T6892] __se_sys_mount+0x18b/0x410 [ 188.655060][ T6892] ? __pfx___se_sys_mount+0x10/0x10 [ 188.655083][ T6892] ? do_syscall_64+0xbe/0xf80 [ 188.655099][ T6892] ? __x64_sys_mount+0x20/0xc0 [ 188.655119][ T6892] do_syscall_64+0xfa/0xf80 [ 188.655136][ T6892] ? rcu_is_watching+0x15/0xb0 [ 188.655152][ T6892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.655170][ T6892] ? clear_bhb_loop+0x60/0xb0 [ 188.655191][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.655208][ T6892] RIP: 0033:0x7f168c55f749 [ 188.655225][ T6892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.655239][ T6892] RSP: 002b:00007f168a7a5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.655258][ T6892] RAX: ffffffffffffffda RBX: 00007f168c7b6090 RCX: 00007f168c55f749 [ 188.655271][ T6892] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 188.655282][ T6892] RBP: 00007f168a7a5090 R08: 0000200000000400 R09: 0000000000000000 [ 188.655294][ T6892] R10: 0000000000008002 R11: 0000000000000246 R12: 0000000000000001 [ 188.655308][ T6892] R13: 00007f168c7b6128 R14: 00007f168c7b6090 R15: 00007ffd95821b48 [ 188.655339][ T6892] [ 189.461368][ T806] usb 1-1: config 0 descriptor?? [ 193.487138][ T5964] usb 3-1: USB disconnect, device number 13 [ 193.510974][ T806] usbhid 1-1:0.0: can't add hid device: -71 [ 193.511299][ T806] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 193.836279][ T806] usb 1-1: USB disconnect, device number 12 [ 194.352835][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.352908][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.101228][ T6912] FAULT_INJECTION: forcing a failure. [ 195.101228][ T6912] name failslab, interval 1, probability 0, space 0, times 0 [ 195.101262][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.1.293 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 195.101287][ T6912] Tainted: [L]=SOFTLOCKUP [ 195.101293][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.101303][ T6912] Call Trace: [ 195.101311][ T6912] [ 195.101319][ T6912] dump_stack_lvl+0x189/0x250 [ 195.101345][ T6912] ? __pfx____ratelimit+0x10/0x10 [ 195.101371][ T6912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.101393][ T6912] ? __pfx__printk+0x10/0x10 [ 195.101418][ T6912] ? __pfx___might_resched+0x10/0x10 [ 195.101436][ T6912] ? fs_reclaim_acquire+0x7d/0x100 [ 195.101457][ T6912] should_fail_ex+0x46c/0x600 [ 195.101484][ T6912] ? getname_flags+0xb8/0x540 [ 195.101499][ T6912] should_failslab+0xa8/0x100 [ 195.101517][ T6912] ? getname_flags+0xb8/0x540 [ 195.101532][ T6912] kmem_cache_alloc_noprof+0x84/0x6c0 [ 195.101558][ T6912] ? __pfx_vfs_write+0x10/0x10 [ 195.101585][ T6912] getname_flags+0xb8/0x540 [ 195.101607][ T6912] do_sys_openat2+0xbc/0x200 [ 195.101630][ T6912] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.101654][ T6912] ? ksys_write+0x230/0x260 [ 195.101679][ T6912] ? __pfx_ksys_write+0x10/0x10 [ 195.101705][ T6912] __x64_sys_openat+0x138/0x170 [ 195.101730][ T6912] do_syscall_64+0xfa/0xf80 [ 195.101749][ T6912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.101767][ T6912] ? clear_bhb_loop+0x60/0xb0 [ 195.101789][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.101806][ T6912] RIP: 0033:0x7f168c55df90 [ 195.101822][ T6912] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 195.101835][ T6912] RSP: 002b:00007f168a783f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 195.101855][ T6912] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f168c55df90 [ 195.101868][ T6912] RDX: 0000000000000002 RSI: 00007f168a783fa0 RDI: 00000000ffffff9c [ 195.101886][ T6912] RBP: 00007f168a783fa0 R08: 0000000000000000 R09: 00007f168a783cd5 [ 195.101898][ T6912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 195.101909][ T6912] R13: 00007f168c7b6218 R14: 00007f168c7b6180 R15: 00007ffd95821b48 [ 195.101941][ T6912] [ 196.096385][ T6903] nbd4: detected capacity change from 0 to 63 [ 196.101702][ T6917] block nbd4: NBD_DISCONNECT [ 196.103253][ T6917] block nbd4: Disconnected due to user request. [ 196.125347][ T6917] block nbd4: shutting down sockets [ 196.163279][ T32] blk_print_req_error: 138 callbacks suppressed [ 196.163301][ T32] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 196.163326][ T32] buffer_io_error: 138 callbacks suppressed [ 196.163336][ T32] Buffer I/O error on dev nbd4, logical block 0, async page read [ 196.163393][ T32] Buffer I/O error on dev nbd4, logical block 1, async page read [ 196.163410][ T32] Buffer I/O error on dev nbd4, logical block 2, async page read [ 196.163426][ T32] Buffer I/O error on dev nbd4, logical block 3, async page read [ 196.165046][ T5961] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 196.165075][ T5961] Buffer I/O error on dev nbd4, logical block 0, async page read [ 196.165128][ T5961] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 196.165150][ T5961] Buffer I/O error on dev nbd4, logical block 1, async page read [ 196.165197][ T5961] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 196.165218][ T5961] Buffer I/O error on dev nbd4, logical block 2, async page read [ 196.165262][ T5961] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 196.165281][ T5961] Buffer I/O error on dev nbd4, logical block 3, async page read [ 196.165337][ T5961] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 196.165357][ T5961] Buffer I/O error on dev nbd4, logical block 0, async page read [ 196.165402][ T5961] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 196.165422][ T5961] Buffer I/O error on dev nbd4, logical block 1, async page read [ 196.165467][ T5961] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 196.165520][ T5961] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 196.165580][ T5961] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 196.171463][ T5961] ldm_validate_partition_table(): Disk read failed. [ 196.172059][ T5961] Dev nbd4: unable to read RDB block 0 [ 196.172915][ T5961] nbd4: unable to read partition table [ 196.197601][ T5961] ldm_validate_partition_table(): Disk read failed. [ 196.198202][ T5961] Dev nbd4: unable to read RDB block 0 [ 196.198972][ T5961] nbd4: unable to read partition table [ 196.236945][ T6921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.299'. [ 196.412568][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.427698][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.450056][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.451654][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.452515][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.602218][ T6929] FAULT_INJECTION: forcing a failure. [ 196.602218][ T6929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.602253][ T6929] CPU: 0 UID: 0 PID: 6929 Comm: syz.0.304 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 196.602277][ T6929] Tainted: [L]=SOFTLOCKUP [ 196.602283][ T6929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.602293][ T6929] Call Trace: [ 196.602300][ T6929] [ 196.602307][ T6929] dump_stack_lvl+0x189/0x250 [ 196.602333][ T6929] ? __pfx____ratelimit+0x10/0x10 [ 196.602358][ T6929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.602379][ T6929] ? __pfx__printk+0x10/0x10 [ 196.602410][ T6929] should_fail_ex+0x46c/0x600 [ 196.602439][ T6929] _copy_to_user+0x31/0xb0 [ 196.602459][ T6929] simple_read_from_buffer+0xe1/0x170 [ 196.602482][ T6929] proc_fail_nth_read+0x1b6/0x220 [ 196.602509][ T6929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.602536][ T6929] ? rw_verify_area+0x2ac/0x4e0 [ 196.602558][ T6929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.602582][ T6929] vfs_read+0x206/0xa30 [ 196.602612][ T6929] ? __pfx_vfs_read+0x10/0x10 [ 196.602630][ T6929] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 196.602663][ T6929] ? mutex_lock_nested+0x154/0x1d0 [ 196.602683][ T6929] ? fdget_pos+0x253/0x320 [ 196.602711][ T6929] ksys_read+0x14b/0x260 [ 196.602732][ T6929] ? __fget_files+0x2a/0x420 [ 196.602752][ T6929] ? __pfx_ksys_read+0x10/0x10 [ 196.602777][ T6929] ? do_syscall_64+0xbe/0xf80 [ 196.602797][ T6929] do_syscall_64+0xfa/0xf80 [ 196.602816][ T6929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.602834][ T6929] ? clear_bhb_loop+0x60/0xb0 [ 196.602856][ T6929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.602872][ T6929] RIP: 0033:0x7fefa5f7e15c [ 196.602888][ T6929] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 196.602903][ T6929] RSP: 002b:00007fefa41e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.602922][ T6929] RAX: ffffffffffffffda RBX: 00007fefa61d5fa0 RCX: 00007fefa5f7e15c [ 196.602934][ T6929] RDX: 000000000000000f RSI: 00007fefa41e60a0 RDI: 0000000000000004 [ 196.602945][ T6929] RBP: 00007fefa41e6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.602956][ T6929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.602967][ T6929] R13: 00007fefa61d6038 R14: 00007fefa61d5fa0 R15: 00007fff6190ccf8 [ 196.602999][ T6929] [ 198.662401][ T37] audit: type=1326 audit(1765938699.065:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6942 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b34ef749 code=0x7ffc0000 [ 198.662452][ T37] audit: type=1326 audit(1765938699.065:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6942 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b34ef749 code=0x7ffc0000 [ 198.662487][ T37] audit: type=1326 audit(1765938699.095:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6942 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f17b34ef749 code=0x7ffc0000 [ 198.662566][ T37] audit: type=1326 audit(1765938699.095:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6942 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b34ef749 code=0x7ffc0000 [ 198.662605][ T37] audit: type=1326 audit(1765938699.095:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6942 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b34ef749 code=0x7ffc0000 [ 198.662650][ T37] audit: type=1326 audit(1765938699.095:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6942 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17b34ef749 code=0x7ffc0000 [ 198.662689][ T37] audit: type=1326 audit(1765938699.105:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6942 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b34ef749 code=0x7ffc0000 [ 198.662728][ T37] audit: type=1326 audit(1765938699.105:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6942 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b34ef749 code=0x7ffc0000 [ 198.662765][ T37] audit: type=1326 audit(1765938699.105:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6942 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17b34ef749 code=0x7ffc0000 [ 198.662794][ T5811] Bluetooth: hci5: command tx timeout [ 198.662800][ T37] audit: type=1326 audit(1765938699.105:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6942 comm="syz.4.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b34ef749 code=0x7ffc0000 [ 198.746705][ T6944] pim6reg: entered allmulticast mode [ 198.895474][ T6938] macsec1: entered promiscuous mode [ 198.895504][ T6938] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 199.287847][ T6953] netlink: 'syz.1.313': attribute type 11 has an invalid length. [ 199.681783][ T6954] loop7: detected capacity change from 0 to 7 [ 199.761776][ T5960] Dev loop7: unable to read RDB block 7 [ 199.761829][ T5960] loop7: unable to read partition table [ 199.762080][ T5960] loop7: partition table beyond EOD, truncated [ 199.791320][ T6954] Dev loop7: unable to read RDB block 7 [ 199.791367][ T6954] loop7: unable to read partition table [ 199.791610][ T6954] loop7: partition table beyond EOD, truncated [ 199.794177][ T6954] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 199.967189][ T6965] FAULT_INJECTION: forcing a failure. [ 199.967189][ T6965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.967223][ T6965] CPU: 0 UID: 0 PID: 6965 Comm: syz.0.316 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 199.967248][ T6965] Tainted: [L]=SOFTLOCKUP [ 199.967254][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.967264][ T6965] Call Trace: [ 199.967271][ T6965] [ 199.967280][ T6965] dump_stack_lvl+0x189/0x250 [ 199.967307][ T6965] ? __pfx____ratelimit+0x10/0x10 [ 199.967332][ T6965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.967355][ T6965] ? __pfx__printk+0x10/0x10 [ 199.967374][ T6965] ? __might_fault+0xb0/0x130 [ 199.967409][ T6965] should_fail_ex+0x46c/0x600 [ 199.967438][ T6965] _copy_from_iter+0x1cd/0x1630 [ 199.967466][ T6965] ? __build_skb_around+0x22d/0x3c0 [ 199.967492][ T6965] ? __pfx__copy_from_iter+0x10/0x10 [ 199.967513][ T6965] ? __alloc_skb+0x2f1/0x430 [ 199.967541][ T6965] ? __pfx___alloc_skb+0x10/0x10 [ 199.967562][ T6965] ? netlink_sendmsg+0x642/0xb30 [ 199.967583][ T6965] ? skb_put+0x11b/0x210 [ 199.967607][ T6965] netlink_sendmsg+0x6b2/0xb30 [ 199.967638][ T6965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.967669][ T6965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.967691][ T6965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.967714][ T6965] __sock_sendmsg+0x21c/0x270 [ 199.967740][ T6965] ____sys_sendmsg+0x508/0x810 [ 199.967767][ T6965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.967798][ T6965] ? import_iovec+0x74/0xa0 [ 199.967819][ T6965] ___sys_sendmsg+0x21f/0x2a0 [ 199.967843][ T6965] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.967900][ T6965] ? __fget_files+0x2a/0x420 [ 199.967919][ T6965] ? __fget_files+0x3a6/0x420 [ 199.967948][ T6965] __x64_sys_sendmsg+0x1a1/0x260 [ 199.967972][ T6965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.968004][ T6965] ? __pfx_ksys_write+0x10/0x10 [ 199.968031][ T6965] ? do_syscall_64+0xbe/0xf80 [ 199.968054][ T6965] do_syscall_64+0xfa/0xf80 [ 199.968072][ T6965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.968090][ T6965] ? clear_bhb_loop+0x60/0xb0 [ 199.968112][ T6965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.968130][ T6965] RIP: 0033:0x7fefa5f7f749 [ 199.968146][ T6965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.968161][ T6965] RSP: 002b:00007fefa41e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.968181][ T6965] RAX: ffffffffffffffda RBX: 00007fefa61d5fa0 RCX: 00007fefa5f7f749 [ 199.968194][ T6965] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 199.968206][ T6965] RBP: 00007fefa41e6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.968218][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.968229][ T6965] R13: 00007fefa61d6038 R14: 00007fefa61d5fa0 R15: 00007fff6190ccf8 [ 199.968261][ T6965] [ 200.168856][ T6972] autofs: Unknown parameter '[«ž¥c·|¹¤dZEƽ‘v³5ˆ§Ýà”m³ëöߕĪÐæ' [ 200.402292][ T6970] nbd4: detected capacity change from 0 to 63 [ 200.403378][ T6975] block nbd4: NBD_DISCONNECT [ 200.412495][ T6975] block nbd4: Disconnected due to user request. [ 200.412517][ T6975] block nbd4: shutting down sockets [ 200.481480][ T5961] ldm_validate_partition_table(): Disk read failed. [ 200.482107][ T5961] Dev nbd4: unable to read RDB block 0 [ 200.482867][ T5961] nbd4: unable to read partition table [ 200.511373][ T5961] ldm_validate_partition_table(): Disk read failed. [ 200.512010][ T5961] Dev nbd4: unable to read RDB block 0 [ 200.512798][ T5961] nbd4: unable to read partition table [ 200.534719][ T6980] dns_resolver: Unsupported content type (89) [ 200.584112][ T1166] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.584147][ T1166] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.666775][ T5811] Bluetooth: hci5: command tx timeout [ 200.679335][ T928] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 200.701804][ T6967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.317'. [ 200.838725][ T928] usb 1-1: too many endpoints for config 0 interface 0 altsetting 1: 65, using maximum allowed: 30 [ 200.838774][ T928] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.838801][ T928] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 200.838827][ T928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 200.838860][ T928] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 200.838882][ T928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.845798][ T928] usb 1-1: config 0 descriptor?? [ 200.942604][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.323'. [ 201.042390][ T1166] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.043601][ T1166] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.313020][ T928] hid-multitouch 0003:1FD2:6007.0006: item fetching failed at offset 1/3 [ 201.313978][ T928] hid-multitouch 0003:1FD2:6007.0006: probe with driver hid-multitouch failed with error -22 [ 201.526605][ T31] usb 1-1: USB disconnect, device number 13 [ 201.550119][ T1166] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.550147][ T1166] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.655786][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 201.899883][ T7015] nbd1: detected capacity change from 0 to 63 [ 201.931521][ T7015] block nbd1: NBD_DISCONNECT [ 201.942574][ T7015] block nbd1: Disconnected due to user request. [ 201.942783][ T7015] block nbd1: shutting down sockets [ 201.981080][ C0] blk_print_req_error: 280 callbacks suppressed [ 201.981101][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.981130][ C0] buffer_io_error: 286 callbacks suppressed [ 201.981141][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 201.981222][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.981244][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 201.981306][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.981329][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 201.981392][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 201.981416][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 202.016489][ T5960] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.016520][ T5960] Buffer I/O error on dev nbd1, logical block 0, async page read [ 202.016577][ T5960] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.016598][ T5960] Buffer I/O error on dev nbd1, logical block 1, async page read [ 202.016646][ T5960] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.016704][ T5960] Buffer I/O error on dev nbd1, logical block 2, async page read [ 202.016752][ T5960] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.016773][ T5960] Buffer I/O error on dev nbd1, logical block 3, async page read [ 202.016829][ T5960] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.016851][ T5960] Buffer I/O error on dev nbd1, logical block 0, async page read [ 202.016898][ T5960] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.016919][ T5960] Buffer I/O error on dev nbd1, logical block 1, async page read [ 202.017778][ T5960] ldm_validate_partition_table(): Disk read failed. [ 202.018388][ T5960] Dev nbd1: unable to read RDB block 0 [ 202.019199][ T5960] nbd1: unable to read partition table [ 202.038032][ T5960] ldm_validate_partition_table(): Disk read failed. [ 202.038627][ T5960] Dev nbd1: unable to read RDB block 0 [ 202.039370][ T5960] nbd1: unable to read partition table [ 202.135368][ T1166] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.135400][ T1166] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.300535][ T7026] FAULT_INJECTION: forcing a failure. [ 202.300535][ T7026] name failslab, interval 1, probability 0, space 0, times 0 [ 202.300585][ T7026] CPU: 1 UID: 0 PID: 7026 Comm: syz.0.335 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 202.300616][ T7026] Tainted: [L]=SOFTLOCKUP [ 202.300622][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.300633][ T7026] Call Trace: [ 202.300641][ T7026] [ 202.300649][ T7026] dump_stack_lvl+0x189/0x250 [ 202.300675][ T7026] ? __pfx____ratelimit+0x10/0x10 [ 202.300712][ T7026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.300735][ T7026] ? __pfx__printk+0x10/0x10 [ 202.300760][ T7026] ? __pfx___might_resched+0x10/0x10 [ 202.300784][ T7026] should_fail_ex+0x46c/0x600 [ 202.300812][ T7026] ? fanotify_handle_event+0x1b63/0x3f20 [ 202.300836][ T7026] should_failslab+0xa8/0x100 [ 202.300855][ T7026] ? fanotify_handle_event+0x1b63/0x3f20 [ 202.300879][ T7026] kmem_cache_alloc_noprof+0x84/0x6c0 [ 202.300904][ T7026] ? check_path+0x21/0x40 [ 202.300925][ T7026] fanotify_handle_event+0x1b63/0x3f20 [ 202.300965][ T7026] ? fanotify_handle_event+0x1020/0x3f20 [ 202.300998][ T7026] ? __pfx_fanotify_handle_event+0x10/0x10 [ 202.301024][ T7026] ? lockdep_hardirqs_on+0x98/0x140 [ 202.301049][ T7026] ? fsnotify+0x72c/0x1ac0 [ 202.301076][ T7026] ? __pfx_fanotify_handle_event+0x10/0x10 [ 202.301103][ T7026] fsnotify+0x141e/0x1ac0 [ 202.301142][ T7026] ? fsnotify+0x72c/0x1ac0 [ 202.301161][ T7026] ? __pfx_fsnotify+0x10/0x10 [ 202.301188][ T7026] ? __pfx___free_frozen_pages+0x10/0x10 [ 202.301218][ T7026] __fsnotify_parent+0x470/0x540 [ 202.301246][ T7026] ? __pfx___fsnotify_parent+0x10/0x10 [ 202.301277][ T7026] ? rw_verify_area+0x2ac/0x4e0 [ 202.301305][ T7026] vfs_read+0x80e/0xa30 [ 202.301336][ T7026] ? __pfx_vfs_read+0x10/0x10 [ 202.301355][ T7026] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 202.301387][ T7026] ? mutex_lock_nested+0x154/0x1d0 [ 202.301407][ T7026] ? fdget_pos+0x253/0x320 [ 202.301436][ T7026] ksys_read+0x14b/0x260 [ 202.301462][ T7026] ? __pfx_ksys_read+0x10/0x10 [ 202.301488][ T7026] ? do_syscall_64+0xbe/0xf80 [ 202.301510][ T7026] do_syscall_64+0xfa/0xf80 [ 202.301529][ T7026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.301547][ T7026] ? clear_bhb_loop+0x60/0xb0 [ 202.301575][ T7026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.301593][ T7026] RIP: 0033:0x7fefa5f7f749 [ 202.301610][ T7026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.301626][ T7026] RSP: 002b:00007fefa41e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.301645][ T7026] RAX: ffffffffffffffda RBX: 00007fefa61d5fa0 RCX: 00007fefa5f7f749 [ 202.301658][ T7026] RDX: 0000000000002020 RSI: 0000200000000240 RDI: 0000000000000003 [ 202.301670][ T7026] RBP: 00007fefa41e6090 R08: 0000000000000000 R09: 0000000000000000 [ 202.301681][ T7026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.301692][ T7026] R13: 00007fefa61d6038 R14: 00007fefa61d5fa0 R15: 00007fff6190ccf8 [ 202.301725][ T7026] [ 202.310323][ T7021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.333'. [ 202.560230][ T6920] chnl_net:caif_netlink_parms(): no params data found [ 202.586295][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 202.747000][ T5811] Bluetooth: hci5: command tx timeout [ 202.751641][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 202.751669][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.751680][ T10] usb 2-1: Product: syz [ 202.751687][ T10] usb 2-1: Manufacturer: syz [ 202.751694][ T10] usb 2-1: SerialNumber: syz [ 202.795155][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 202.835238][ T6432] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 203.051658][ T7024] Zero length message leads to an empty skb [ 203.166250][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.316243][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 203.324949][ T31] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 203.324978][ T31] usb 5-1: config 179 has no interface number 0 [ 203.325026][ T31] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 203.325053][ T31] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 203.325080][ T31] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 203.325106][ T31] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 203.325130][ T31] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 203.325154][ T31] usb 5-1: config 179 interface 65 has no altsetting 0 [ 203.325185][ T31] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 203.325207][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.659203][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.660117][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.019841][ T6432] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 204.020036][ T6432] ath9k_htc: Failed to initialize the device [ 204.034519][ T928] usb 2-1: USB disconnect, device number 13 [ 204.081174][ T928] usb 2-1: ath9k_htc: USB layer deinitialized [ 204.251606][ T31] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 204.325320][ T5154] input input9: unable to receive magic message: -71 [ 204.372909][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 204.443193][ T5154] input input9: unable to receive magic message: -71 [ 204.472887][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 204.494226][ T31] usb 5-1: USB disconnect, device number 13 [ 204.494331][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 204.834455][ T5816] Bluetooth: hci5: command tx timeout [ 204.867598][ T6920] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.867748][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.867975][ T6920] bridge_slave_0: entered allmulticast mode [ 204.901517][ T6920] bridge_slave_0: entered promiscuous mode [ 205.009664][ T7054] nbd4: detected capacity change from 0 to 63 [ 205.047296][ T7060] block nbd4: NBD_DISCONNECT [ 205.047435][ T7060] block nbd4: Disconnected due to user request. [ 205.047453][ T7060] block nbd4: shutting down sockets [ 205.070850][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.070978][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.071205][ T6920] bridge_slave_1: entered allmulticast mode [ 205.076976][ T6920] bridge_slave_1: entered promiscuous mode [ 205.139711][ T5960] ldm_validate_partition_table(): Disk read failed. [ 205.140276][ T5960] Dev nbd4: unable to read RDB block 0 [ 205.140918][ T5960] nbd4: unable to read partition table [ 205.184710][ T5960] ldm_validate_partition_table(): Disk read failed. [ 205.185359][ T5960] Dev nbd4: unable to read RDB block 0 [ 205.199719][ T5960] nbd4: unable to read partition table [ 205.430720][ T7058] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 205.430753][ T7058] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 205.460574][ T7058] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 205.700678][ T7068] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 205.703581][ T7068] block device autoloading is deprecated and will be removed. [ 206.818103][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 207.122197][ T5816] Bluetooth: hci3: connection err: -111 [ 207.122330][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 207.124294][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 207.577637][ T7091] FAULT_INJECTION: forcing a failure. [ 207.577637][ T7091] name failslab, interval 1, probability 0, space 0, times 0 [ 207.577672][ T7091] CPU: 1 UID: 0 PID: 7091 Comm: syz.4.355 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 207.577698][ T7091] Tainted: [L]=SOFTLOCKUP [ 207.577704][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.577715][ T7091] Call Trace: [ 207.577723][ T7091] [ 207.577731][ T7091] dump_stack_lvl+0x189/0x250 [ 207.577758][ T7091] ? __pfx____ratelimit+0x10/0x10 [ 207.577785][ T7091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.577807][ T7091] ? __pfx__printk+0x10/0x10 [ 207.577831][ T7091] ? __pfx___might_resched+0x10/0x10 [ 207.577855][ T7091] should_fail_ex+0x46c/0x600 [ 207.577883][ T7091] should_failslab+0xa8/0x100 [ 207.577903][ T7091] __kmalloc_noprof+0xe0/0x7e0 [ 207.577928][ T7091] ? do_pagemap_cmd+0x3ed/0xbb0 [ 207.577954][ T7091] do_pagemap_cmd+0x3ed/0xbb0 [ 207.577975][ T7091] ? lockdep_hardirqs_on+0x98/0x140 [ 207.578000][ T7091] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 207.578048][ T7091] ? __fget_files+0x3a6/0x420 [ 207.578066][ T7091] ? __fget_files+0x2a/0x420 [ 207.578087][ T7091] ? bpf_lsm_file_ioctl+0x9/0x20 [ 207.578113][ T7091] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 207.578132][ T7091] __se_sys_ioctl+0xff/0x170 [ 207.578158][ T7091] do_syscall_64+0xfa/0xf80 [ 207.578180][ T7091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.578205][ T7091] ? clear_bhb_loop+0x60/0xb0 [ 207.578227][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.578244][ T7091] RIP: 0033:0x7f17b34ef749 [ 207.578260][ T7091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.578276][ T7091] RSP: 002b:00007f17b1756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.578296][ T7091] RAX: ffffffffffffffda RBX: 00007f17b3745fa0 RCX: 00007f17b34ef749 [ 207.578310][ T7091] RDX: 0000200000000400 RSI: 00000000c0606610 RDI: 0000000000000003 [ 207.578322][ T7091] RBP: 00007f17b1756090 R08: 0000000000000000 R09: 0000000000000000 [ 207.578333][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.578344][ T7091] R13: 00007f17b3746038 R14: 00007f17b3745fa0 R15: 00007fffbad3e158 [ 207.578375][ T7091] [ 207.975542][ T6920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.100422][ T6920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.736566][ T1166] bridge_slave_1: left allmulticast mode [ 208.736721][ T1166] bridge_slave_1: left promiscuous mode [ 208.745353][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.822853][ T1166] bridge_slave_0: left allmulticast mode [ 209.822883][ T1166] bridge_slave_0: left promiscuous mode [ 209.823136][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.839897][ T7126] openvswitch: netlink: Tunnel attr 147 out of range max 16 [ 210.840800][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 212.206332][ T7143] nbd1: detected capacity change from 0 to 63 [ 212.208798][ T7144] block nbd1: NBD_DISCONNECT [ 212.208921][ T7144] block nbd1: Disconnected due to user request. [ 212.208938][ T7144] block nbd1: shutting down sockets [ 212.209970][ T5960] blk_print_req_error: 286 callbacks suppressed [ 212.209981][ T5960] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.209996][ T5960] buffer_io_error: 286 callbacks suppressed [ 212.210002][ T5960] Buffer I/O error on dev nbd1, logical block 0, async page read [ 212.210039][ T5960] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.210052][ T5960] Buffer I/O error on dev nbd1, logical block 1, async page read [ 212.210084][ T5960] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.210097][ T5960] Buffer I/O error on dev nbd1, logical block 2, async page read [ 212.210125][ T5960] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.210136][ T5960] Buffer I/O error on dev nbd1, logical block 3, async page read [ 212.210170][ T5960] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.210182][ T5960] Buffer I/O error on dev nbd1, logical block 0, async page read [ 212.210209][ T5960] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.210220][ T5960] Buffer I/O error on dev nbd1, logical block 1, async page read [ 212.210247][ T5960] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.210258][ T5960] Buffer I/O error on dev nbd1, logical block 2, async page read [ 212.210285][ T5960] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.210297][ T5960] Buffer I/O error on dev nbd1, logical block 3, async page read [ 212.210328][ T5960] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.210340][ T5960] Buffer I/O error on dev nbd1, logical block 0, async page read [ 212.210367][ T5960] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 212.210378][ T5960] Buffer I/O error on dev nbd1, logical block 1, async page read [ 212.210907][ T5960] ldm_validate_partition_table(): Disk read failed. [ 212.211268][ T5960] Dev nbd1: unable to read RDB block 0 [ 212.267924][ T5960] nbd1: unable to read partition table [ 212.272874][ T5960] ldm_validate_partition_table(): Disk read failed. [ 212.273500][ T5960] Dev nbd1: unable to read RDB block 0 [ 212.282256][ T5960] nbd1: unable to read partition table [ 213.187157][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.267114][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.289134][ T1166] bond0 (unregistering): Released all slaves [ 213.332011][ T6920] team0: Port device team_slave_0 added [ 213.427548][ T6920] team0: Port device team_slave_1 added [ 213.946382][ T5965] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 214.108792][ T5965] usb 4-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 214.108819][ T5965] usb 4-1: config 1 interface 0 has no altsetting 0 [ 214.110587][ T5965] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.40 [ 214.110603][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.110614][ T5965] usb 4-1: Product: syz [ 214.110621][ T5965] usb 4-1: SerialNumber: syz [ 214.114691][ T7158] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 214.344299][ T7162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.380'. [ 214.381109][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.381127][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.381152][ T6920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.454593][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.454613][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.454640][ T6920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.577460][ T5965] usbhid 4-1:1.0: can't add hid device: -71 [ 214.577593][ T5965] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 214.602085][ T5965] usb 4-1: USB disconnect, device number 11 [ 216.423786][ T7192] ufs: You didn't specify the type of your ufs filesystem [ 216.423786][ T7192] [ 216.423786][ T7192] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 216.423786][ T7192] [ 216.423786][ T7192] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 216.423814][ T7192] ufs: ufstype=old is supported read-only [ 216.436929][ T7192] ufs: ufs_fill_super(): bad magic number [ 216.840955][ T6920] hsr_slave_0: entered promiscuous mode [ 216.842447][ T6920] hsr_slave_1: entered promiscuous mode [ 216.869941][ T6920] debugfs: 'hsr0' already exists in 'hsr' [ 216.869969][ T6920] Cannot create hsr debugfs directory [ 217.061808][ T1166] hsr_slave_0: left promiscuous mode [ 217.112305][ T1166] hsr_slave_1: left promiscuous mode [ 217.113366][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.113488][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.139679][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.139706][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.491985][ T1166] veth1_macvtap: left promiscuous mode [ 217.492279][ T1166] veth0_macvtap: left promiscuous mode [ 217.492577][ T1166] veth1_vlan: left promiscuous mode [ 217.492932][ T1166] veth0_vlan: left promiscuous mode [ 219.527641][ T5929] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 219.967448][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 219.992213][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.992255][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.992654][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 219.992700][ T5929] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 219.993012][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.692590][ T5929] usb 1-1: config 0 descriptor?? [ 224.990906][ T5929] usbhid 1-1:0.0: can't add hid device: -71 [ 224.992521][ T5929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 225.040252][ T5929] usb 1-1: USB disconnect, device number 14 [ 228.557060][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 228.818337][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 229.196344][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 229.376494][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 229.380926][ T10] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 229.380954][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.380964][ T10] usb 1-1: Product: syz [ 229.380972][ T10] usb 1-1: Manufacturer: syz [ 229.380980][ T10] usb 1-1: SerialNumber: syz [ 229.384783][ T10] usb 1-1: config 0 descriptor?? [ 229.391878][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 229.998543][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.999043][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.216409][ T10] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 230.216516][ T10] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 230.257079][ T10] usb 1-1: USB disconnect, device number 15 [ 230.916908][ T5965] kernel write not supported for file /input/event0 (pid: 5965 comm: kworker/1:9) [ 231.761901][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.764959][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.795683][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.808677][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.809415][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.902269][ T7220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.397'. [ 233.726251][ T5876] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 233.881301][ T5811] Bluetooth: hci1: command tx timeout [ 233.886295][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 233.888874][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 233.888905][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 233.922821][ T5876] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 233.922850][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.922870][ T5876] usb 1-1: Product: syz [ 233.922883][ T5876] usb 1-1: Manufacturer: syz [ 233.922897][ T5876] usb 1-1: SerialNumber: syz [ 233.961079][ T5876] usb 1-1: config 0 descriptor?? [ 233.976024][ T5876] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 233.976063][ T5876] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 234.018883][ T5929] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 234.179646][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.179681][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.183814][ T5929] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 234.183844][ T5929] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 234.183872][ T5929] usb 4-1: Manufacturer: syz [ 234.202762][ T5929] usb 4-1: config 0 descriptor?? [ 234.263879][ T5876] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 234.265192][ T5876] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 234.448446][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 234.448580][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 234.455242][ T5929] usb 4-1: USB disconnect, device number 12 [ 234.564993][ T5876] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 234.565030][ T5876] em28xx 1-1:0.0: No AC97 audio processor [ 234.616937][ T5876] usb 1-1: USB disconnect, device number 16 [ 234.619083][ T5876] em28xx 1-1:0.0: Disconnecting em28xx [ 234.648388][ T5876] em28xx 1-1:0.0: Freeing device [ 235.172991][ T7364] dummy0: entered allmulticast mode [ 235.241712][ T7361] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 235.350422][ T7374] FAULT_INJECTION: forcing a failure. [ 235.350422][ T7374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.350456][ T7374] CPU: 1 UID: 0 PID: 7374 Comm: syz.1.442 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 235.350475][ T7374] Tainted: [L]=SOFTLOCKUP [ 235.350481][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.350490][ T7374] Call Trace: [ 235.350496][ T7374] [ 235.350503][ T7374] dump_stack_lvl+0x189/0x250 [ 235.350526][ T7374] ? __pfx____ratelimit+0x10/0x10 [ 235.350548][ T7374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.350565][ T7374] ? __pfx__printk+0x10/0x10 [ 235.350580][ T7374] ? __might_fault+0xb0/0x130 [ 235.350609][ T7374] should_fail_ex+0x46c/0x600 [ 235.350652][ T7374] core_sys_select+0x72b/0xa20 [ 235.350681][ T7374] ? __pfx_core_sys_select+0x10/0x10 [ 235.350707][ T7374] ? __seccomp_filter+0xab2/0x1e20 [ 235.350744][ T7374] ? __pfx_set_user_sigmask+0x10/0x10 [ 235.350758][ T7374] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 235.350776][ T7374] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 235.350798][ T7374] __se_sys_pselect6+0x27a/0x300 [ 235.350822][ T7374] ? __pfx___se_sys_pselect6+0x10/0x10 [ 235.350847][ T7374] ? __x64_sys_pselect6+0x21/0xf0 [ 235.350869][ T7374] do_syscall_64+0xfa/0xf80 [ 235.350883][ T7374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.350898][ T7374] ? clear_bhb_loop+0x60/0xb0 [ 235.350916][ T7374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.350931][ T7374] RIP: 0033:0x7f168c55f749 [ 235.350946][ T7374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.350960][ T7374] RSP: 002b:00007f168a7c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 235.350977][ T7374] RAX: ffffffffffffffda RBX: 00007f168c7b5fa0 RCX: 00007f168c55f749 [ 235.350987][ T7374] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000040 [ 235.350996][ T7374] RBP: 00007f168a7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 235.351004][ T7374] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 235.351012][ T7374] R13: 00007f168c7b6038 R14: 00007f168c7b5fa0 R15: 00007ffd95821b48 [ 235.351035][ T7374] [ 235.494234][ T7361] kvm: pic: level sensitive irq not supported [ 235.496618][ T7361] kvm: pic: non byte read [ 235.504504][ T7361] kvm: pic: level sensitive irq not supported [ 235.504705][ T7361] kvm: pic: non byte read [ 235.505328][ T7361] kvm: pic: level sensitive irq not supported [ 235.506877][ T7361] kvm: pic: non byte read [ 235.507337][ T7361] kvm: pic: level sensitive irq not supported [ 235.508122][ T7361] kvm: pic: non byte read [ 235.509835][ T7361] kvm: pic: level sensitive irq not supported [ 235.509900][ T7361] kvm: pic: non byte read [ 235.510311][ T7361] kvm: pic: level sensitive irq not supported [ 235.513898][ T7361] kvm: pic: non byte read [ 235.514254][ T7361] kvm: pic: level sensitive irq not supported [ 235.514306][ T7361] kvm: pic: non byte read [ 235.514511][ T7361] kvm: pic: level sensitive irq not supported [ 235.514690][ T7361] kvm: pic: non byte read [ 235.951572][ T7364] dummy0: left allmulticast mode [ 235.956406][ T5811] Bluetooth: hci1: command tx timeout [ 236.437828][ T1166] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.699647][ T7288] chnl_net:caif_netlink_parms(): no params data found [ 236.765648][ T6920] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 236.946784][ T6920] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 237.238801][ T1166] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.261645][ T7402] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 237.380650][ T6920] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.598771][ T6920] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 237.645732][ T7405] nbd3: detected capacity change from 0 to 63 [ 237.741913][ T5811] block nbd3: Receive control failed (result -104) [ 237.963880][ T1166] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.026283][ T5811] Bluetooth: hci1: command tx timeout [ 238.284085][ T7424] nbd: nbd3 already in use [ 238.315410][ T7424] block nbd3: NBD_DISCONNECT [ 238.315440][ T7424] block nbd3: Send disconnect failed -32 [ 238.315459][ T7424] block nbd3: shutting down sockets [ 238.349127][ C1] blk_print_req_error: 135 callbacks suppressed [ 238.349142][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 238.349162][ C1] buffer_io_error: 138 callbacks suppressed [ 238.349172][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 238.350647][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 238.350740][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 238.350830][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 238.350856][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 238.350915][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 238.350928][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 238.353540][ T7272] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 238.353625][ T7272] Buffer I/O error on dev nbd3, logical block 0, async page read [ 238.353682][ T7272] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 238.353703][ T7272] Buffer I/O error on dev nbd3, logical block 1, async page read [ 238.353753][ T7272] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 238.353830][ T7272] Buffer I/O error on dev nbd3, logical block 2, async page read [ 238.353881][ T7272] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 238.353902][ T7272] Buffer I/O error on dev nbd3, logical block 3, async page read [ 238.354006][ T7272] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 238.354028][ T7272] Buffer I/O error on dev nbd3, logical block 0, async page read [ 238.354077][ T7272] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 238.354098][ T7272] Buffer I/O error on dev nbd3, logical block 1, async page read [ 238.355265][ T7272] ldm_validate_partition_table(): Disk read failed. [ 238.360667][ T7272] Dev nbd3: unable to read RDB block 0 [ 238.560732][ T7272] nbd3: unable to read partition table [ 238.572026][ T7272] ldm_validate_partition_table(): Disk read failed. [ 238.572557][ T7272] Dev nbd3: unable to read RDB block 0 [ 238.573200][ T7272] nbd3: unable to read partition table [ 238.732402][ T1166] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.864881][ T7436] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4067999968 (130175998976 ns) > initial count (41385856192 ns). Using initial count to start timer. [ 238.865512][ T7436] FAULT_INJECTION: forcing a failure. [ 238.865512][ T7436] name failslab, interval 1, probability 0, space 0, times 0 [ 238.865543][ T7436] CPU: 1 UID: 0 PID: 7436 Comm: syz.3.461 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 238.865569][ T7436] Tainted: [L]=SOFTLOCKUP [ 238.865575][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.865586][ T7436] Call Trace: [ 238.865595][ T7436] [ 238.865604][ T7436] dump_stack_lvl+0x189/0x250 [ 238.865622][ T7436] ? __pfx____ratelimit+0x10/0x10 [ 238.865637][ T7436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.865650][ T7436] ? __pfx__printk+0x10/0x10 [ 238.865663][ T7436] ? __pfx___might_resched+0x10/0x10 [ 238.865673][ T7436] ? fs_reclaim_acquire+0x7d/0x100 [ 238.865686][ T7436] should_fail_ex+0x46c/0x600 [ 238.865701][ T7436] ? dup_task_struct+0x57/0x9a0 [ 238.865712][ T7436] should_failslab+0xa8/0x100 [ 238.865723][ T7436] ? dup_task_struct+0x57/0x9a0 [ 238.865732][ T7436] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 238.865747][ T7436] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 238.865762][ T7436] dup_task_struct+0x57/0x9a0 [ 238.865777][ T7436] ? rt_spin_unlock+0x161/0x200 [ 238.865790][ T7436] copy_process+0x4ea/0x3960 [ 238.865815][ T7436] ? __pfx_copy_process+0x10/0x10 [ 238.865834][ T7436] vhost_task_create+0x1ce/0x320 [ 238.865847][ T7436] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 238.865862][ T7436] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 238.865875][ T7436] ? __pfx_vhost_task_create+0x10/0x10 [ 238.865892][ T7436] ? __pfx_vhost_task_fn+0x10/0x10 [ 238.865906][ T7436] ? __lock_acquire+0x6b6/0x2cf0 [ 238.865922][ T7436] ? mutex_lock_nested+0x154/0x1d0 [ 238.865933][ T7436] ? kvm_mmu_post_init_vm+0x91/0x300 [ 238.865950][ T7436] kvm_mmu_post_init_vm+0x14c/0x300 [ 238.865965][ T7436] kvm_arch_vcpu_ioctl_run+0xdc/0x1c90 [ 238.865975][ T7436] ? __lock_acquire+0x6b6/0x2cf0 [ 238.865991][ T7436] ? do_raw_spin_lock+0x121/0x290 [ 238.866004][ T7436] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 238.866016][ T7436] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 238.866025][ T7436] ? lockdep_hardirqs_on+0x98/0x140 [ 238.866036][ T7436] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 238.866045][ T7436] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.866060][ T7436] ? rt_mutex_slowunlock+0x493/0x8a0 [ 238.866084][ T7436] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 238.866099][ T7436] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.866115][ T7436] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 238.866136][ T7436] ? rt_write_unlock+0x73/0x230 [ 238.866161][ T7436] ? rt_write_unlock+0x191/0x230 [ 238.866183][ T7436] kvm_vcpu_ioctl+0x99d/0xed0 [ 238.866212][ T7436] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 238.866241][ T7436] ? __asan_memset+0x22/0x50 [ 238.866260][ T7436] ? smack_file_ioctl+0x305/0x340 [ 238.866282][ T7436] ? __pfx_smack_file_ioctl+0x10/0x10 [ 238.866300][ T7436] ? __fget_files+0x3a6/0x420 [ 238.866310][ T7436] ? __fget_files+0x2a/0x420 [ 238.866321][ T7436] ? bpf_lsm_file_ioctl+0x9/0x20 [ 238.866336][ T7436] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 238.866349][ T7436] __se_sys_ioctl+0xff/0x170 [ 238.866363][ T7436] do_syscall_64+0xfa/0xf80 [ 238.866373][ T7436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.866383][ T7436] ? clear_bhb_loop+0x60/0xb0 [ 238.866395][ T7436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.866405][ T7436] RIP: 0033:0x7f0060a6f749 [ 238.866415][ T7436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.866424][ T7436] RSP: 002b:00007f005ecce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.866436][ T7436] RAX: ffffffffffffffda RBX: 00007f0060cc5fa0 RCX: 00007f0060a6f749 [ 238.866443][ T7436] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 238.866449][ T7436] RBP: 00007f005ecce090 R08: 0000000000000000 R09: 0000000000000000 [ 238.866455][ T7436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.866461][ T7436] R13: 00007f0060cc6038 R14: 00007f0060cc5fa0 R15: 00007ffe070e43b8 [ 238.866478][ T7436] [ 239.116384][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.141045][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.141284][ T7288] bridge_slave_0: entered allmulticast mode [ 239.144112][ T7288] bridge_slave_0: entered promiscuous mode [ 239.245335][ T5964] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 239.245371][ T5964] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 239.245396][ T5964] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 239.245420][ T5964] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 239.245444][ T5964] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 239.245468][ T5964] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 239.245491][ T5964] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 239.245523][ T5964] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 239.245547][ T5964] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 239.245571][ T5964] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 239.371028][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.371158][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.371384][ T7288] bridge_slave_1: entered allmulticast mode [ 239.435630][ T7288] bridge_slave_1: entered promiscuous mode [ 239.439595][ T5964] hid-generic 00A0:0006:0003.0007: hidraw0: HID v0.05 Device [syz1] on syz1 [ 239.617024][ T7446] fido_id[7446]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 239.768262][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.782435][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.827085][ T7450] nbd3: detected capacity change from 0 to 63 [ 240.172421][ T61] Bluetooth: hci1: command tx timeout [ 240.610378][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 241.056688][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 241.064913][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.065013][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.065099][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 241.065144][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 241.065166][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.511679][ T10] usb 2-1: config 0 descriptor?? [ 245.691749][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 245.692207][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 246.193977][ T10] usb 2-1: USB disconnect, device number 14 [ 246.210479][ T5811] block nbd3: Receive control failed (result -104) [ 247.074203][ T7288] team0: Port device team_slave_0 added [ 247.098083][ T5965] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 247.142454][ T7288] team0: Port device team_slave_1 added [ 247.256406][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 247.258202][ T5965] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 247.258218][ T5965] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.258228][ T5965] usb 1-1: config 0 has no interface number 0 [ 247.260099][ T5965] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 247.260116][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.260126][ T5965] usb 1-1: Product: syz [ 247.260133][ T5965] usb 1-1: Manufacturer: syz [ 247.260148][ T5965] usb 1-1: SerialNumber: syz [ 247.332357][ T5965] usb 1-1: config 0 descriptor?? [ 247.545038][ T5965] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 247.545083][ T5965] uvcvideo 1-1:0.105: No valid video chain found. [ 247.562484][ T7475] netlink: 168 bytes leftover after parsing attributes in process `syz.1.474'. [ 247.743252][ T5964] usb 1-1: USB disconnect, device number 17 [ 247.813142][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.813159][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.813185][ T7288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.973413][ T7497] Invalid ELF header magic: != ELF [ 247.997631][ T7497] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 248.075002][ T7499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.479'. [ 248.131005][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.131022][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.131047][ T7288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.230106][ T7497] bond1: entered promiscuous mode [ 248.230708][ T7497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.575957][ T1166] bridge_slave_1: left allmulticast mode [ 248.575986][ T1166] bridge_slave_1: left promiscuous mode [ 248.593246][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.637229][ T1166] bridge_slave_0: left allmulticast mode [ 249.637248][ T1166] bridge_slave_0: left promiscuous mode [ 249.637405][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.408424][ T7533] FAULT_INJECTION: forcing a failure. [ 252.408424][ T7533] name failslab, interval 1, probability 0, space 0, times 0 [ 252.408459][ T7533] CPU: 1 UID: 0 PID: 7533 Comm: syz.0.490 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 252.408483][ T7533] Tainted: [L]=SOFTLOCKUP [ 252.408490][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.408513][ T7533] Call Trace: [ 252.408524][ T7533] [ 252.408532][ T7533] dump_stack_lvl+0x189/0x250 [ 252.408560][ T7533] ? __pfx____ratelimit+0x10/0x10 [ 252.408587][ T7533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.408610][ T7533] ? __pfx__printk+0x10/0x10 [ 252.408635][ T7533] ? __pfx_skb_network_protocol+0x10/0x10 [ 252.408659][ T7533] ? do_syscall_64+0xfa/0xf80 [ 252.408677][ T7533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.408699][ T7533] should_fail_ex+0x46c/0x600 [ 252.408733][ T7533] ? skb_clone+0x212/0x3a0 [ 252.408755][ T7533] should_failslab+0xa8/0x100 [ 252.408773][ T7533] ? skb_clone+0x212/0x3a0 [ 252.408793][ T7533] kmem_cache_alloc_noprof+0x84/0x6c0 [ 252.408826][ T7533] skb_clone+0x212/0x3a0 [ 252.408846][ T7533] ? dev_queue_xmit_nit+0x27d/0xad0 [ 252.408870][ T7533] dev_queue_xmit_nit+0x29a/0xad0 [ 252.408892][ T7533] ? dev_queue_xmit_nit+0x2d/0xad0 [ 252.408924][ T7533] dev_hard_start_xmit+0x1be/0x840 [ 252.408967][ T7533] __dev_queue_xmit+0x14b4/0x31d0 [ 252.409008][ T7533] ? __dev_queue_xmit+0x259/0x31d0 [ 252.409039][ T7533] ? _copy_from_iter+0x215/0x1630 [ 252.409062][ T7533] ? skb_copy_bits+0x89/0xc40 [ 252.409084][ T7533] ? __pfx___dev_queue_xmit+0x10/0x10 [ 252.409106][ T7533] ? sock_alloc_send_pskb+0x877/0x990 [ 252.409139][ T7533] ? packet_parse_headers+0x7ff/0xb60 [ 252.409157][ T7533] ? packet_parse_headers+0x8b8/0xb60 [ 252.409186][ T7533] ? __pfx_packet_parse_headers+0x10/0x10 [ 252.409205][ T7533] ? skb_copy_datagram_from_iter+0x60c/0x720 [ 252.409235][ T7533] ? packet_xmit+0x68/0x330 [ 252.409256][ T7533] packet_sendmsg+0x3e33/0x5080 [ 252.409323][ T7533] ? smack_socket_sendmsg+0x1fa/0x520 [ 252.409352][ T7533] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 252.409385][ T7533] ? __pfx_packet_sendmsg+0x10/0x10 [ 252.409418][ T7533] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 252.409450][ T7533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.409472][ T7533] ? __pfx_packet_sendmsg+0x10/0x10 [ 252.409497][ T7533] __sock_sendmsg+0x21c/0x270 [ 252.409526][ T7533] __sys_sendto+0x3c7/0x520 [ 252.409549][ T7533] ? __pfx___sys_sendto+0x10/0x10 [ 252.409599][ T7533] ? ksys_write+0x230/0x260 [ 252.409627][ T7533] ? __pfx_ksys_write+0x10/0x10 [ 252.409655][ T7533] __x64_sys_sendto+0xde/0x100 [ 252.409679][ T7533] do_syscall_64+0xfa/0xf80 [ 252.409698][ T7533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.409721][ T7533] ? clear_bhb_loop+0x60/0xb0 [ 252.409744][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.409762][ T7533] RIP: 0033:0x7fefa5f7f749 [ 252.409778][ T7533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.409793][ T7533] RSP: 002b:00007fefa41e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 252.409813][ T7533] RAX: ffffffffffffffda RBX: 00007fefa61d5fa0 RCX: 00007fefa5f7f749 [ 252.409827][ T7533] RDX: 000000000000000f RSI: 00002000000000c0 RDI: 0000000000000004 [ 252.409838][ T7533] RBP: 00007fefa41e6090 R08: 0000200000000200 R09: 0000000000000014 [ 252.409851][ T7533] R10: 000000000000c190 R11: 0000000000000246 R12: 0000000000000001 [ 252.409862][ T7533] R13: 00007fefa61d6038 R14: 00007fefa61d5fa0 R15: 00007fff6190ccf8 [ 252.409896][ T7533] [ 253.136335][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 253.296207][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 253.300536][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.300564][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.300588][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 253.300668][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.354525][ T31] usb 2-1: config 0 descriptor?? [ 253.862631][ T31] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0008/input/input10 [ 254.083892][ T31] sony 0003:054C:03D5.0008: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 254.654137][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.663735][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.665085][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.677965][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.678812][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.737069][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.816923][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.870800][ T1166] bond0 (unregistering): Released all slaves [ 255.077367][ T7542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.493'. [ 255.145537][ T7288] hsr_slave_0: entered promiscuous mode [ 255.218927][ T7288] hsr_slave_1: entered promiscuous mode [ 255.219503][ T7288] debugfs: 'hsr0' already exists in 'hsr' [ 255.219519][ T7288] Cannot create hsr debugfs directory [ 255.328039][ T7556] ceph: No source [ 255.770594][ T7538] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 255.800835][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.800906][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.839296][ T5807] usb 2-1: USB disconnect, device number 15 [ 255.889246][ T7565] ufs: You didn't specify the type of your ufs filesystem [ 255.889246][ T7565] [ 255.889246][ T7565] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 255.889246][ T7565] [ 255.889246][ T7565] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 255.889799][ T7565] ufs: ufstype=old is supported read-only [ 255.890763][ T7565] ufs: ufs_fill_super(): bad magic number [ 256.648877][ T6920] syz-executor (6920) used greatest stack depth: 17592 bytes left [ 256.913922][ T61] Bluetooth: hci3: command tx timeout [ 257.055877][ T5807] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 257.489218][ T7582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.504'. [ 257.616191][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 257.623934][ T5807] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 257.623964][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.623982][ T5807] usb 2-1: Product: syz [ 257.623990][ T5807] usb 2-1: Manufacturer: syz [ 257.623998][ T5807] usb 2-1: SerialNumber: syz [ 257.631477][ T5807] usb 2-1: config 0 descriptor?? [ 257.846902][ T5807] usb 2-1: can't set first interface for hiFace device. [ 257.846947][ T5807] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 257.870375][ T5807] usb 2-1: USB disconnect, device number 16 [ 258.341558][ T7596] 9p: Unknown Cache mode or invalid value f [ 258.979295][ T7599] ufs: You didn't specify the type of your ufs filesystem [ 258.979295][ T7599] [ 258.979295][ T7599] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 258.979295][ T7599] [ 258.979295][ T7599] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 258.979343][ T7599] ufs: ufstype=old is supported read-only [ 258.979600][ T7599] ufs: ufs_fill_super(): bad magic number [ 258.987880][ T5811] Bluetooth: hci3: command tx timeout [ 259.148045][ T7596] syz.0.508 (7596) used greatest stack depth: 17336 bytes left [ 259.176270][ T5807] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 259.326904][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 259.349367][ T5807] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 259.349397][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.349417][ T5807] usb 2-1: Product: syz [ 259.349430][ T5807] usb 2-1: Manufacturer: syz [ 259.349445][ T5807] usb 2-1: SerialNumber: syz [ 259.417175][ T5807] usb 2-1: config 0 descriptor?? [ 259.440566][ T5807] usb 2-1: can't set config #0, error -71 [ 259.448553][ T5807] usb 2-1: USB disconnect, device number 17 [ 259.574328][ T7612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.515'. [ 259.927368][ T7618] 9p: Unknown Cache mode or invalid value f [ 260.765065][ T7622] FAULT_INJECTION: forcing a failure. [ 260.765065][ T7622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.765107][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.3.517 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 260.765132][ T7622] Tainted: [L]=SOFTLOCKUP [ 260.765139][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.765150][ T7622] Call Trace: [ 260.765158][ T7622] [ 260.765166][ T7622] dump_stack_lvl+0x189/0x250 [ 260.765192][ T7622] ? __pfx____ratelimit+0x10/0x10 [ 260.765218][ T7622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.765241][ T7622] ? __pfx__printk+0x10/0x10 [ 260.765260][ T7622] ? __might_fault+0xb0/0x130 [ 260.765297][ T7622] should_fail_ex+0x46c/0x600 [ 260.765326][ T7622] _copy_from_iter+0x1cd/0x1630 [ 260.765356][ T7622] ? __build_skb_around+0x22d/0x3c0 [ 260.765381][ T7622] ? __pfx__copy_from_iter+0x10/0x10 [ 260.765402][ T7622] ? __alloc_skb+0x2f1/0x430 [ 260.765424][ T7622] ? __pfx___alloc_skb+0x10/0x10 [ 260.765446][ T7622] ? netlink_sendmsg+0x642/0xb30 [ 260.765468][ T7622] ? skb_put+0x11b/0x210 [ 260.765491][ T7622] netlink_sendmsg+0x6b2/0xb30 [ 260.765523][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.765555][ T7622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.765577][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.765601][ T7622] __sock_sendmsg+0x21c/0x270 [ 260.765630][ T7622] ____sys_sendmsg+0x508/0x810 [ 260.765658][ T7622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.765688][ T7622] ? import_iovec+0x74/0xa0 [ 260.765709][ T7622] ___sys_sendmsg+0x21f/0x2a0 [ 260.765733][ T7622] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.765792][ T7622] ? __fget_files+0x2a/0x420 [ 260.765810][ T7622] ? __fget_files+0x3a6/0x420 [ 260.765839][ T7622] __x64_sys_sendmsg+0x1a1/0x260 [ 260.765863][ T7622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.765895][ T7622] ? __pfx_ksys_write+0x10/0x10 [ 260.765923][ T7622] ? do_syscall_64+0xbe/0xf80 [ 260.765945][ T7622] do_syscall_64+0xfa/0xf80 [ 260.765964][ T7622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.765982][ T7622] ? clear_bhb_loop+0x60/0xb0 [ 260.766004][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.766022][ T7622] RIP: 0033:0x7f0060a6f749 [ 260.766038][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.766057][ T7622] RSP: 002b:00007f005ecce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.766074][ T7622] RAX: ffffffffffffffda RBX: 00007f0060cc5fa0 RCX: 00007f0060a6f749 [ 260.766085][ T7622] RDX: 0000000004000000 RSI: 0000200000000700 RDI: 0000000000000004 [ 260.766095][ T7622] RBP: 00007f005ecce090 R08: 0000000000000000 R09: 0000000000000000 [ 260.766112][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.766122][ T7622] R13: 00007f0060cc6038 R14: 00007f0060cc5fa0 R15: 00007ffe070e43b8 [ 260.766150][ T7622] [ 261.066172][ T61] Bluetooth: hci3: command tx timeout [ 263.207399][ T61] Bluetooth: hci3: command tx timeout [ 264.044030][ T3495] ------------[ cut here ]------------ [ 264.044053][ T3495] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d9/0x710, CPU#1: kworker/u8:12/3495 [ 264.044095][ T3495] Modules linked in: [ 264.044115][ T3495] CPU: 1 UID: 0 PID: 3495 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 264.044143][ T3495] Tainted: [L]=SOFTLOCKUP [ 264.044151][ T3495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.044165][ T3495] Workqueue: events_unbound cfg80211_wiphy_work [ 264.044191][ T3495] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 264.044215][ T3495] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 27 be 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 a9 2b 13 09 89 c0 48 c7 c7 a0 63 b2 [ 264.044252][ T3495] RSP: 0018:ffffc9000d14f938 EFLAGS: 00010202 [ 264.044268][ T3495] RAX: 0000000000000002 RBX: ffff8880306bdac0 RCX: 0000000000000000 [ 264.044283][ T3495] RDX: 0000000000000000 RSI: ffffffff8b3f56c0 RDI: ffffffff8b3f5680 [ 264.044297][ T3495] RBP: ffff888037f2bc80 R08: ffffffff8ad5d5d1 R09: ffffffff8d5ae880 [ 264.044314][ T3495] R10: dffffc0000000000 R11: fffffbfff1db664f R12: ffff88805ed95d08 [ 264.044329][ T3495] R13: ffff88805e6e07c0 R14: 0000000000000000 R15: ffff88805ed95d20 [ 264.044343][ T3495] FS: 0000000000000000(0000) GS:ffff888126e03000(0000) knlGS:0000000000000000 [ 264.044360][ T3495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.044374][ T3495] CR2: 00007fbf1841aa77 CR3: 0000000036d32000 CR4: 00000000003526f0 [ 264.044393][ T3495] Call Trace: [ 264.044401][ T3495] [ 264.044415][ T3495] ieee80211_iface_work+0x211/0x12d0 [ 264.044452][ T3495] cfg80211_wiphy_work+0x2ab/0x450 [ 264.044479][ T3495] ? process_scheduled_works+0x9ef/0x1770 [ 264.044507][ T3495] process_scheduled_works+0xad1/0x1770 [ 264.044563][ T3495] ? __pfx_process_scheduled_works+0x10/0x10 [ 264.044616][ T3495] worker_thread+0x8a0/0xda0 [ 264.044656][ T3495] ? __kthread_parkme+0x7b/0x200 [ 264.044693][ T3495] kthread+0x711/0x8a0 [ 264.044724][ T3495] ? __pfx_worker_thread+0x10/0x10 [ 264.044748][ T3495] ? __pfx_kthread+0x10/0x10 [ 264.044773][ T3495] ? rt_spin_unlock+0x150/0x200 [ 264.044807][ T3495] ? rt_spin_unlock+0x161/0x200 [ 264.044830][ T3495] ? __pfx_kthread+0x10/0x10 [ 264.044860][ T3495] ret_from_fork+0x599/0xb30 [ 264.044887][ T3495] ? __pfx_ret_from_fork+0x10/0x10 [ 264.044924][ T3495] ? __switch_to_asm+0x39/0x70 [ 264.044951][ T3495] ? __switch_to_asm+0x33/0x70 [ 264.044978][ T3495] ? __pfx_kthread+0x10/0x10 [ 264.045006][ T3495] ret_from_fork_asm+0x1a/0x30 [ 264.045055][ T3495] [ 264.045073][ T3495] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.045091][ T3495] CPU: 1 UID: 0 PID: 3495 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 264.045119][ T3495] Tainted: [L]=SOFTLOCKUP [ 264.045127][ T3495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.045141][ T3495] Workqueue: events_unbound cfg80211_wiphy_work [ 264.045167][ T3495] Call Trace: [ 264.045175][ T3495] [ 264.045183][ T3495] dump_stack_lvl+0x99/0x250 [ 264.045210][ T3495] ? __asan_memcpy+0x40/0x70 [ 264.045238][ T3495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.045266][ T3495] ? __pfx__printk+0x10/0x10 [ 264.045302][ T3495] vpanic+0x237/0x6d0 [ 264.045330][ T3495] ? __pfx_vpanic+0x10/0x10 [ 264.045355][ T3495] ? is_bpf_text_address+0x292/0x2b0 [ 264.045381][ T3495] ? is_bpf_text_address+0x26/0x2b0 [ 264.045418][ T3495] panic+0xb9/0xc0 [ 264.045446][ T3495] ? __pfx_panic+0x10/0x10 [ 264.045484][ T3495] ? ret_from_fork_asm+0x1a/0x30 [ 264.045521][ T3495] __warn+0x317/0x4b0 [ 264.045547][ T3495] ? kcov_remote_start+0x5d9/0x710 [ 264.045579][ T3495] ? kcov_remote_start+0x5d9/0x710 [ 264.045600][ T3495] __report_bug+0x288/0x500 [ 264.045632][ T3495] ? kcov_remote_start+0x5d9/0x710 [ 264.045661][ T3495] ? __pfx___report_bug+0x10/0x10 [ 264.045708][ T3495] ? rt_spin_lock+0x1c1/0x3e0 [ 264.045735][ T3495] ? kcov_remote_start+0x5d9/0x710 [ 264.045756][ T3495] report_bug+0x16a/0x220 [ 264.045788][ T3495] ? kcov_remote_start+0x5d9/0x710 [ 264.045808][ T3495] ? kcov_remote_start+0x5db/0x710 [ 264.045829][ T3495] handle_bug+0x98/0x200 [ 264.045853][ T3495] exc_invalid_op+0x1a/0x50 [ 264.045875][ T3495] asm_exc_invalid_op+0x1a/0x20 [ 264.045895][ T3495] RIP: 0010:kcov_remote_start+0x5d9/0x710 [ 264.045917][ T3495] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 81 27 be 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 a9 2b 13 09 89 c0 48 c7 c7 a0 63 b2 [ 264.045934][ T3495] RSP: 0018:ffffc9000d14f938 EFLAGS: 00010202 [ 264.045952][ T3495] RAX: 0000000000000002 RBX: ffff8880306bdac0 RCX: 0000000000000000 [ 264.045967][ T3495] RDX: 0000000000000000 RSI: ffffffff8b3f56c0 RDI: ffffffff8b3f5680 [ 264.045983][ T3495] RBP: ffff888037f2bc80 R08: ffffffff8ad5d5d1 R09: ffffffff8d5ae880 [ 264.045999][ T3495] R10: dffffc0000000000 R11: fffffbfff1db664f R12: ffff88805ed95d08 [ 264.046014][ T3495] R13: ffff88805e6e07c0 R14: 0000000000000000 R15: ffff88805ed95d20 [ 264.046037][ T3495] ? rt_spin_lock+0x1c1/0x3e0 [ 264.046072][ T3495] ? kcov_remote_start+0xe1/0x710 [ 264.046095][ T3495] ieee80211_iface_work+0x211/0x12d0 [ 264.046135][ T3495] cfg80211_wiphy_work+0x2ab/0x450 [ 264.046162][ T3495] ? process_scheduled_works+0x9ef/0x1770 [ 264.046187][ T3495] process_scheduled_works+0xad1/0x1770 [ 264.046247][ T3495] ? __pfx_process_scheduled_works+0x10/0x10 [ 264.046288][ T3495] worker_thread+0x8a0/0xda0 [ 264.046331][ T3495] ? __kthread_parkme+0x7b/0x200 [ 264.046368][ T3495] kthread+0x711/0x8a0 [ 264.046401][ T3495] ? __pfx_worker_thread+0x10/0x10 [ 264.046425][ T3495] ? __pfx_kthread+0x10/0x10 [ 264.046450][ T3495] ? rt_spin_unlock+0x150/0x200 [ 264.046481][ T3495] ? rt_spin_unlock+0x161/0x200 [ 264.046507][ T3495] ? __pfx_kthread+0x10/0x10 [ 264.046537][ T3495] ret_from_fork+0x599/0xb30 [ 264.046563][ T3495] ? __pfx_ret_from_fork+0x10/0x10 [ 264.046603][ T3495] ? __switch_to_asm+0x39/0x70 [ 264.046630][ T3495] ? __switch_to_asm+0x33/0x70 [ 264.046657][ T3495] ? __pfx_kthread+0x10/0x10 [ 264.046688][ T3495] ret_from_fork_asm+0x1a/0x30 [ 264.046736][ T3495] [ 264.047157][ T3495] Kernel Offset: disabled