last executing test programs: 4.015019354s ago: executing program 0 (id=1194): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x119, 0x32, 0x0, 0x4c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000026c0)=ANY=[@ANYBLOB="02", @ANYRES32=0x0, @ANYBLOB="040004000000000010000400000000002000010000000000"], 0x2c, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 3.438945608s ago: executing program 1 (id=1200): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg0\x00'}) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000380)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.312460683s ago: executing program 1 (id=1202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xa4}}, 0x24014) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 3.195955991s ago: executing program 0 (id=1203): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f604514) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="c2ff3df100001da668a443ada6e80886da67e76b6122e1e1d98505a00ee219e5953a66d8c0c26d9656346b7c0483cafc92aa0840b94d5b83b8b8260c0c9cef89a7c3c61d31ab4688ad225967ea40aca33d3b21e9b0047c3abca4098ffa44a103c6ae494d3ab479c57640ca3c3869ef9fe9a352707708db0adfec100b6f13cec76283582b8c20194000d47ddf5491020b54b284d698222f93253e624a4965db91a733ce11e22fd77e83384c0d7fdd8f427ecab1c731f53d425773d35b069ee66412c4adbbe86a1bbb7d3d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xb) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101000, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.193845923s ago: executing program 3 (id=1204): r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={0x0}, 0x1) close(r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x20008844) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c000100feffffff0800000033df0bb41afeffc6c4b569be858442c6f7a2589ae318dc74516a990e9ac46d514deb30449a930e5ac67b5d2a12e40cc8d6fdd638af6fd78e8261e2e6e28941ed06c5527bf7fe8e33a0e6439d2df3b15d3238d634456164403e0fcc0fdde38decd5496f03f56b502381a18a2f3add50ed84ace019ade252800286588222c656c50a29cc0928641678289d4b1fd182f253e9fc209367"], 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) shutdown(r7, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) syz_io_uring_modify_offsets$generic(r1, r2, 0x34, 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f004, 0x20000000}) sendto$inet6(r7, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) close(r7) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000940)={0x4, 0xfffffffe, 0x10, 0x6, 0x100, &(0x7f0000000440)="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"}) 3.159649407s ago: executing program 1 (id=1206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c001980", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) (fail_nth: 5) 2.949988331s ago: executing program 1 (id=1207): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x6, 0xb, 0x102}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) r1 = fsopen(&(0x7f00000002c0)='btrfs\x00', 0x1) r2 = getpgrp(0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x6, 0x80, 'syz0\x00', 0xfff}, 0x5, 0x0, 0x1, r2, 0x0, 0x8, 'syz1\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @local}) 2.832979868s ago: executing program 0 (id=1209): r0 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000a40)=[{r0, 0x2}], 0x1, 0x7f) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) 2.832416129s ago: executing program 1 (id=1210): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="00174a"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf76, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x14}], 0x1}, 0x4000) 2.623915063s ago: executing program 2 (id=1212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "018f741f9dfe7638cc917c572daa02affd"}]}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3084, &(0x7f00000002c0), 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') r3 = add_key$user(&(0x7f00000012c0), &(0x7f0000001300)={'syz', 0x3}, &(0x7f0000001340)="b117efc787578065c8b7e64030577e7fa0761111fc46815913cc3ced3194c0f189bd5c3eb42ab1db675bf18611b0cb8713aacf011be0edf2217b3f751e10caebbdc94054dd6aa089520935635b74de889c9b68766cf394660765e5389bad29df3cde1a083ba04e047f2d8e9bb84be50246a8bddb5ab07216b22fd0d4a6a1", 0x7e, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000013c0)={r3, 0x35, 0xa8}, &(0x7f0000001400)={'enc=', 'pkcs1', ' hash=', {'blake2s-256\x00'}}, &(0x7f0000001480)="1111df60a025479782365520874a505d0fed3a3a4d48979be808dc0bf24e45e3dd9106eea775b970b0e7b1217e7adb1da335deea3d", &(0x7f00000014c0)=""/168) stat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10e4}}, 0xc000) write$proc_mixer(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r2, @ANYBLOB="e1ea49430c27d663fe363d5af6c1f419ef923af6505568bc7d"], 0x4000) close(r1) 2.599182867s ago: executing program 0 (id=1213): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x119, 0x32, 0x0, 0x4c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000026c0)=ANY=[@ANYBLOB="02", @ANYRES32=0x0, @ANYBLOB="040004000000000010000400000000002000010000000000"], 0x2c, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 2.423344991s ago: executing program 3 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000440)}, 0x10) 2.22317773s ago: executing program 4 (id=1216): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) eventfd(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x80000000004, 0x0, 0xfffffffffffff30a, 0x5, 0x9}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000000)) 2.16646647s ago: executing program 3 (id=1217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xa4}}, 0x24014) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 2.09451963s ago: executing program 4 (id=1218): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x6, 0xb, 0x102}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) r1 = fsopen(0x0, 0x1) r2 = getpgrp(0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x6, 0x80, 'syz0\x00', 0xfff}, 0x5, 0x0, 0x1, r2, 0x0, 0x8, 'syz1\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @local}) 2.075233803s ago: executing program 2 (id=1219): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f604514) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="c2ff3df100001da668a443ada6e80886da67e76b6122e1e1d98505a00ee219e5953a66d8c0c26d9656346b7c0483cafc92aa0840b94d5b83b8b8260c0c9cef89a7c3c61d31ab4688ad225967ea40aca33d3b21e9b0047c3abca4098ffa44a103c6ae494d3ab479c57640ca3c3869ef9fe9a352707708db0adfec100b6f13cec76283582b8c20194000d47ddf5491020b54b284d698222f93253e624a4965db91a733ce11e22fd77e83384c0d7fdd8f427ecab1c731f53d425773d35b069ee66412c4adbbe86a1bbb7d3d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xb) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101000, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.980470007s ago: executing program 3 (id=1220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioprio_set$pid(0x2, 0x0, 0x6000) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x80000) r5 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) (fail_nth: 4) recvmmsg(r8, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001e00)=""/4096, 0x1000}], 0x1}, 0x8000}], 0x1, 0x40000003, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r9, 0x406, 0xffffffffffffffff) connect$inet(r6, 0x0, 0x0) r10 = fsmount(r5, 0x0, 0x1) fchdir(r10) lseek(0xffffffffffffffff, 0x8582, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) 1.972913429s ago: executing program 4 (id=1221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x24014) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 1.845445058s ago: executing program 4 (id=1222): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$hidraw(0x0, 0x8000000000000001, 0x48100) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 849.35631ms ago: executing program 2 (id=1223): r0 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000a40)=[{r0, 0x2}], 0x1, 0x7f) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) 622.441039ms ago: executing program 3 (id=1224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a31000000000800"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000"], 0xa4}}, 0x24014) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 552.123104ms ago: executing program 2 (id=1225): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40101100900000000000010902270001010080fa0904000003ff000000070501020002000705820200020007058303400001"], 0x0) (async) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40101100900000000000010902270001010080fa0904000003ff000000070501020002000705820200020007058303400001"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r0) clock_gettime(0x0, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000240)=0xe, &(0x7f0000000280)=0x1) (async) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000240)=0xe, &(0x7f0000000280)=0x1) pselect6(0x40, &(0x7f0000000080)={0x2, 0x1, 0x2, 0x80, 0x7, 0xffffffffffffff81, 0x2, 0x4}, &(0x7f00000000c0)={0x9, 0x6, 0x2, 0x436f6268, 0x6, 0x7ff, 0x100000000, 0x3}, &(0x7f0000000100)={0xf1, 0x73, 0x9, 0x7bed, 0x8, 0xfffffffffffffffd, 0xa, 0x1}, &(0x7f0000000180)={r1, r2+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) syz_usb_connect(0x2, 0x5b0, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x22, 0xf7, 0xd7, 0xff, 0x15eb, 0x1, 0xbf41, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59e, 0x2, 0xb5, 0x4, 0x40, 0x7, "", [{{0x9, 0x4, 0xbd, 0x38, 0x8, 0x5b, 0x52, 0xaf, 0x2, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "e61c3f"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3, 0x3ff, 0x6}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@obex={0x5, 0x24, 0x15, 0x334d}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "8ffb19"}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0x0, 0x81}, [@obex={0x5, 0x24, 0x15, 0x3}]}], [{{0x9, 0x5, 0x2, 0x1, 0x200, 0x7, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x7}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x8, 0x48, 0x9, [@generic={0x1e, 0x23, "dd990a558d6bf8403c6abd96e9409db6b0dea65fbd7627fc590db67a"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x3147}]}}, {{0x9, 0x5, 0x8, 0x0, 0x7ef, 0x9, 0xb, 0x80, [@generic={0x89, 0x1, "e1fbaf2bfe36baa63a827a2ca83ffcf48611e716a2c126668e7b150c115d8a7ab63c73a91166264344f0874fdc3b2b732e1b0c3c7a803bd9deaa42680afaf627569c9084fc2650098c89a1804c88a5334ed12f832fb2b86cb0003faca45b3c3690cecf8d820cba74a64b88e5a9b38d9c3e85a9a59453e46814f4bfd16c14bede2d2abf461167a1"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x5, 0x3, 0x8, [@generic={0x7c, 0x1, "b8ce05a371e720a5650ec6668d92ff40027e05c32aa308a5483e04d9c6c48ee27dd0a1a976d1fc266e85426bfef40b7a2e561d0ecafbfeeef6c63125a27bb5177d8adfd6b48d9d1b7a2e465cdd1d65ffef6c0daaef90844d1e9f2fbf0a33b26cbda84e356d45f79ecc044c0d27670a20e5c8dbb283fdcbb1777c"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x9, 0x2, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x10, 0x3, 0x4, [@generic={0xc1, 0x14, "00b23a0c297acc47cc72b539f1d7a011a4f0d8ce1af2487eb0f471fdb5be57acce0eacac399bb291b5badfd22594b7c6cace634ede0c696e54d421f614826bc33b8c292189cec71e7ad7282ec577dfd55d5bfe149cb3bf94d38213ccb6c9646c114b735c11beedf0d23d63bd3596b5339fd7fca870744c4c1e809f2fa682e1a5db6e93b087e06d42acced98538c42f9c7bd316dd96cccb21178cdd5ad41a37e90a4cb82ccfedcc743ff1235cf8a7e969f30bedc42deae67589556953b09fd7"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x6}]}}, {{0x9, 0x5, 0xb, 0x1c, 0x20, 0x9, 0x7}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x40, 0x5, 0x9, [@generic={0xe, 0x23, "49e40f35f0984ebe4ae14e4f"}, @generic={0xd4, 0xaec7a552584b95fd, "38ea918a9145b8057773be8a149d373de1562eb08928b74b2136dcae260d4dc71f6c7b122d8cd4942ec712d37be0ea541a937b6d34fd0491792413ac14368b3f5e5cf37dd7ccf1fe3ef3ad514dcd728d4b5e4abe478c1c3b7c2661b52b5254625133e74c9e52c29cbbd594e359f66e29bdd41c5faee0fc77edca89ce78639e70655fa89f64a5dd756d3944e13cb4e274774c3084d64152d955c70528c2052f424df1b2b33fe4da0059101a8011668a4e9b720830496c6197e4aab8b4834c8c43170aa0b393105a5a8aba3adaf5ba65e5ad42"}]}}]}}, {{0x9, 0x4, 0x24, 0x6c, 0xa, 0x7a, 0x73, 0xaa, 0x74, [], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0x0, 0x8, [@generic={0x2, 0x4}, @generic={0x84, 0x31, "b03f684faf61ec4c3a22938ce4461cc37591a7c5fed2296a862d5f567b6dd9c07c595d53b33e30c46dfde1051bf990dec6174939c5e0cc133d265eae5fa5eb461f308188349d96bf628cd2bababb2147af4273cc2a0bc8a9649db0307d49cc2b8b7ff85f2c74af1d9ad07247a3eecaf03d898be6c41af247eb4adc47bb6936dbd423"}]}}, {{0x9, 0x5, 0x86, 0xc, 0x200, 0x4, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x6, 0x10, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x1}]}}, {{0x9, 0x5, 0x7, 0x413c34265e07c3b5, 0x400, 0x10, 0x6, 0x4, [@generic={0x70, 0x5, "436b18c81d0bd7d57e767c6bf2606c4c9c5145a0f2cc582e0f79ec446014673ca03ba478f9fd66fbff63c2e2aeb2ce2809ff913cbe3fc2244e0009c6cf5e650884a62f1b6e7279ca99e3672431b0bb13cdeda30d332017e658f2f9039ddef3fcf4e156e9df414cd63dcb11ec9706"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0xf6, 0x39, [@generic={0x1d, 0x23, "1e67f785a1161fc25d653a3f82b699e6cebb7a38ea6702310420c8"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x7, 0x2, 0xe, [@generic={0x8c, 0x8, "719e8c3024daa3dfbb077f84c966cd0b1db9923beb5c0a4df0f880f380f101a60a86ed7e0afc5c7e2e44a3d31b253c151411592cc3f40ba69aa3be5c1a2e9ec5a38258e5cd90e35b29ae77047bd643630fddf704bd9e9fc2bfa2657d7293f6602e0a18d5cc3f7e96642a065f68df8390a22e8677d82eaa824ac703b080b678513cb00b89d44b38cd1763"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb1, 0x2}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x3a, 0x1, 0x64}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xb, 0x5, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x5, 0x81, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x81, 0x0, 0x2, 0x10, 0x5}, 0x33, &(0x7f0000000940)={0x5, 0xf, 0x33, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x3, 0x8, 0x467}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x101, 0xf, 0x6, [0xffc060, 0xff]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x8, 0x3, 0x6}, @ptm_cap={0x3}]}, 0x4, [{0x6c, &(0x7f0000000980)=@string={0x6c, 0x3, "391928613114acab86a354331e719bf10b5d846d3c04d5f0aef914504f4c4557a8c090e51a4b318d2f52bc3713e3bb611795a4449fe204d43304b6df5aac96b6d801ed3fca00c3cdc94fc733716dfb1d7446dd83b1bb5710396de4ebc07dd36d34685c2db28499b65ff3"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x860}}, {0xc7, &(0x7f0000000a40)=@string={0xc7, 0x3, "ce2373661d1f0df27389a3a29a228f584a1790a629ae6a034eb9bbee845df1abe915319f0ff36464a5be4ff220a90eab047a0195d4da18e677fd23fc8a47322201e04ce65f4e694e92b172c3c62c5571eba6f151387c4bbcdf20c93823ae47925c38d95b7b016e153a8da1a15eaf4a7a17c26a2541a07dfde8d599870a2c761aac433b463e18e28defb50c7c56e5e0e07f0615f15778ec41d7fc8adfffc6248ea5ca1b3fcb4745023bbd79084bf64cb154906336a3535ab56c11bb336f734fced3b73a89fe"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0xac84}}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 486.443684ms ago: executing program 3 (id=1226): r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={0x0}, 0x1) close(r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x20008844) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c000100feffffff0800000033df0bb41afeffc6c4b569be858442c6f7a2589ae318dc74516a990e9ac46d514deb30449a930e5ac67b5d2a12e40cc8d6fdd638af6fd78e8261e2e6e28941ed06c5527bf7fe8e33a0e6439d2df3b15d3238d634456164403e0fcc0fdde38decd5496f03f56b502381a18a2f3add50ed84ace019ade252800286588222c656c50a29cc0928641678289d4b1fd182f253e9fc209367"], 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) shutdown(r7, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) syz_io_uring_modify_offsets$generic(r1, r2, 0x34, 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f004, 0x20000000}) sendto$inet6(r7, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) close(r7) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2f8}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000940)={0x4, 0xfffffffe, 0x10, 0x6, 0x100, &(0x7f0000000440)="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"}) 326.056462ms ago: executing program 0 (id=1227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000440)}, 0x10) 325.820493ms ago: executing program 2 (id=1228): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 271.519381ms ago: executing program 0 (id=1229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xaed8e000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019340)=""/102400, 0x19000) 192.474904ms ago: executing program 1 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073"], 0xa4}}, 0x24014) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 184.063198ms ago: executing program 2 (id=1231): r0 = socket$unix(0x1, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = fcntl$dupfd(r0, 0x406, r2) r10 = socket$inet(0x2, 0x6, 0xd) r11 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x34, r13, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}]}, 0x34}}, 0x20004800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r13, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x9, 0x1}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "08f650addfec23ea1b004b3073"}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xf, 0x4, "b69db352ff8479995860b8"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) r16 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) r17 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) sendmsg$netlink(r9, &(0x7f0000002180)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc, &(0x7f0000002040)=[{&(0x7f0000000b00)={0x11c4, 0x22, 0x20, 0x70bd29, 0x25dfdbfe, "", [@generic="1c54f40bf95e3666fbaaa6e8cc442f121592dbe811350eabf68bf0c2cb05a5da7e3d3c48e014", @generic="a9e19596f2bfebd594732f916e2db481f0ed28d6191fc097dcba154f1807489fce930508b234849f1fe997c1ddd55350e9ba092eb3bc4d379ded310f88fc627a3491f80db069d2fa35bb1c8a657c002c316cb443c64accd8055a36a1690e95076c17d6592b781533224aaf8cef665163b658a7ccea4fb1459f989983795a9355013a4b6ba02ff2f06e27879cd6d729d5779ef982f1d7f82b18a6b24bd5c8cd996531fd05efc244bc8613a4", @typed={0x8, 0x5b, 0x0, 0x0, @fd=r3}, @generic="6b233a170619930d0da712de3adbf640e8cb4033613bedaa2ed887289ce54bf542687bdf5805fa1ddf4e33d4b45d", @nested={0x46, 0x53, 0x0, 0x1, [@nested={0x4, 0x11f}, @generic="5876080a532101e468aa093459815a90839474571db775ac9ac7e7f96e5f5931f6aff35ee680b5ad6947c4ea1257e0a62fedc0df0b7d", @nested={0x4, 0xd}, @nested={0x4, 0x92}]}, @generic="0e52cd63cc7b2e7e30d9c3bbce0cca3c9aa3862409e625d297c60834712608a34aa7b03bbf6bba91d08d9ed4594e1d49a33db66282007756959bd6a51e22c56a1923de825b15d76820ec1fe67aad3874bd62edc743d01b94eb81a0199bae", @typed={0x1004, 0xf2, 0x0, 0x0, @binary="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"}]}, 0x11c4}, {&(0x7f0000001d00)={0x328, 0x2b, 0x200, 0x70bd26, 0x25dfdbff, "", [@generic="783b99aeaa50cce9da4b093760e661a6545249c734d8f3bf221001f4a431f7bcf237c41529b0388d", @typed={0x10, 0x150, 0x0, 0x0, @str='/dev/random\x00'}, @typed={0x4, 0x112}, @nested={0x1f2, 0x107, 0x0, 0x1, [@typed={0xef, 0x90, 0x0, 0x0, @binary="5374c9e9cf20a66af7270108345e6ccbcbb096c745b20e27b59332235fd20adaf46751ca16ea08f6e9f50859b8797edafb75148bd6afb0e97d8377193ca8899c9da1d3912d0c2275a2647e7cb191060fae2f0708cfbeca793d913430d7cd7063e09205e5c2f33ba1d34d6f5446bf3cec12444b6db0e782437f90d1518dd5af68cd2c563df7096dff89d6052e37ab3cd7222cb1350e3280f4b1eced0df51838713192d485df72e74de5c62436a2177e4050f0b906ba4c245df0d1c9e4bee966a678d38e7ac0304c6c1e80a744e71609129caa3a8daf3fdf860cd3a13ca5a2551c9e6a6494d2af0e9d16d3a8"}, @generic="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", @typed={0x4, 0x87}]}, @generic="2330a84a7f7e0f1d532c84d13d527a9794f03735d50ec623a3f633b8723b63c361aa41d37882877834a2e58902393d8fd88b1a2e398cf797dfd760dd77a0cebe48701e58709ed563b6c1a1181afb835e3a8536f458e18c9fbf577fe9d7874ccfc768840517889a2a96761e83f03291f0c7bc8ffb1cbdc01e6ed0b922ee7a991225cf825f0ec7f4c8df7133f5eeecfd8ca1b2c412ae2633a91367b6c3cef84d26f28b088727f8ffa8de679d51e2c47774baf8660222f75cb63e384bdd3de8effec372921b3897cebb22fb4b9b1bc62ba4e953125895e80b28ca4cfaa13bf2719e030bb3ed465c"]}, 0x328}], 0x2, &(0x7f0000002100)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r10, r3, r11, 0xffffffffffffffff, r7]}}, @rights={{0x30, 0x1, 0x1, [r16, r7, r7, r3, r7, r17, r7, 0xffffffffffffffff]}}], 0x60, 0x4090}, 0x40001) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) r19 = dup(r18) syz_ublk_setup_queues(r19, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x1f0, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 86.952453ms ago: executing program 4 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xa4}}, 0x24014) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 0s ago: executing program 4 (id=1233): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x49, 0x3, 0x90, 0x6}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x76, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp\x00') lseek(r4, 0x38, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x12, &(0x7f0000000000)="11106e00", 0x4) kernel console output (not intermixed with test programs): 86][ T5741] usb 1-1: Manufacturer: syz [ 176.869100][ T5741] usb 1-1: SerialNumber: syz [ 176.922889][ T7074] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 176.981824][ T5741] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 176.982280][ T5741] ti_usb_3410_5052 1-1:2.0: missing endpoints [ 177.186587][ T7087] netlink: 48 bytes leftover after parsing attributes in process `syz.2.422'. [ 177.252449][ T9] usb 1-1: USB disconnect, device number 12 [ 180.297013][ T7106] SQUASHFS error: Failed to read block 0x0: -5 [ 180.297071][ T7106] unable to read squashfs_super_block [ 182.525756][ T7137] netlink: 48 bytes leftover after parsing attributes in process `syz.2.438'. [ 183.264628][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 183.339790][ T5732] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 183.474929][ T7160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.447'. [ 183.509714][ T5732] usb 4-1: Using ep0 maxpacket: 32 [ 183.536938][ T5732] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 183.536970][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.589067][ T7162] FAULT_INJECTION: forcing a failure. [ 183.589067][ T7162] name failslab, interval 1, probability 0, space 0, times 0 [ 183.589100][ T7162] CPU: 1 UID: 0 PID: 7162 Comm: syz.2.448 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 183.589122][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.589132][ T7162] Call Trace: [ 183.589139][ T7162] [ 183.589147][ T7162] dump_stack_lvl+0xe8/0x150 [ 183.589178][ T7162] should_fail_ex+0x467/0x600 [ 183.589211][ T7162] should_failslab+0xa8/0x100 [ 183.589235][ T7162] kmem_cache_alloc_noprof+0xa4/0x650 [ 183.589254][ T7162] ? skb_clone+0x212/0x3a0 [ 183.589278][ T7162] ? skb_clone+0x212/0x3a0 [ 183.589308][ T7162] skb_clone+0x212/0x3a0 [ 183.589337][ T7162] __netlink_deliver_tap+0x413/0x860 [ 183.589372][ T7162] ? netlink_deliver_tap+0x2e/0x1b0 [ 183.589396][ T7162] netlink_deliver_tap+0x19c/0x1b0 [ 183.589419][ T7162] netlink_unicast+0x7b8/0x990 [ 183.589452][ T7162] netlink_sendmsg+0x813/0xb40 [ 183.589481][ T7162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.589504][ T7162] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 183.589535][ T7162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.589556][ T7162] sock_sendmsg_nosec+0x13a/0x180 [ 183.589586][ T7162] ____sys_sendmsg+0x565/0x870 [ 183.589608][ T7162] ? __might_fault+0xaf/0x130 [ 183.589634][ T7162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.589667][ T7162] ? import_iovec+0x73/0xa0 [ 183.589692][ T7162] ___sys_sendmsg+0x2a5/0x360 [ 183.589713][ T7162] ? __lock_acquire+0x683/0x2ce0 [ 183.589737][ T7162] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.589797][ T7162] ? __fget_files+0x2a/0x420 [ 183.589815][ T7162] ? __fget_files+0x3a8/0x420 [ 183.589845][ T7162] __x64_sys_sendmsg+0x1b7/0x290 [ 183.589871][ T7162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.589911][ T7162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.589932][ T7162] do_syscall_64+0x174/0x580 [ 183.589954][ T7162] ? trace_irq_disable+0x3b/0x140 [ 183.589973][ T7162] ? clear_bhb_loop+0x40/0x90 [ 183.589995][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.590013][ T7162] RIP: 0033:0x7f33452fe019 [ 183.590031][ T7162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.590045][ T7162] RSP: 002b:00007f3343556028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.590073][ T7162] RAX: ffffffffffffffda RBX: 00007f3345585fa0 RCX: 00007f33452fe019 [ 183.590085][ T7162] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 183.590098][ T7162] RBP: 00007f3343556090 R08: 0000000000000000 R09: 0000000000000000 [ 183.590108][ T7162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.590118][ T7162] R13: 00007f3345586038 R14: 00007f3345585fa0 R15: 00007fff2951ce08 [ 183.590147][ T7162] [ 183.693759][ T5732] usb 4-1: config 0 descriptor?? [ 183.709417][ T5732] gspca_main: sq930x-2.14.0 probing 041e:403c [ 183.893415][ T7165] fuse: Unknown parameter '' [ 184.246842][ T7175] futex_wake_op: syz.0.451 tries to shift op by 144; fix this program [ 184.276897][ T7175] futex_wake_op: syz.0.451 tries to shift op by 144; fix this program [ 184.460614][ T7174] SQUASHFS error: Failed to read block 0x0: -5 [ 184.460878][ T7174] unable to read squashfs_super_block [ 184.487734][ T7146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.488300][ T7146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.549550][ T5732] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 184.549646][ T5732] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 184.573757][ T5732] usb 4-1: USB disconnect, device number 11 [ 185.725572][ T7202] FAULT_INJECTION: forcing a failure. [ 185.725572][ T7202] name failslab, interval 1, probability 0, space 0, times 0 [ 185.725607][ T7202] CPU: 0 UID: 0 PID: 7202 Comm: syz.0.455 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 185.725629][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.725640][ T7202] Call Trace: [ 185.725647][ T7202] [ 185.725655][ T7202] dump_stack_lvl+0xe8/0x150 [ 185.725686][ T7202] should_fail_ex+0x467/0x600 [ 185.725719][ T7202] should_failslab+0xa8/0x100 [ 185.725743][ T7202] __kmalloc_noprof+0xfe/0x780 [ 185.725762][ T7202] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 185.725781][ T7202] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 185.725815][ T7202] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 185.725841][ T7202] genl_family_rcv_msg_doit+0xda/0x340 [ 185.725862][ T7202] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 185.725888][ T7202] ? rcu_is_watching+0x15/0xb0 [ 185.725911][ T7202] ? cap_capable+0x123/0x460 [ 185.725930][ T7202] ? safesetid_security_capable+0xa9/0x1a0 [ 185.725952][ T7202] ? bpf_lsm_capable+0x9/0x20 [ 185.725971][ T7202] ? security_capable+0x7e/0x2c0 [ 185.725992][ T7202] genl_rcv_msg+0x614/0x7a0 [ 185.726011][ T7202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.726022][ T7202] ? ref_tracker_free+0x668/0x820 [ 185.726036][ T7202] ? __pfx_fou_nl_del_doit+0x10/0x10 [ 185.726053][ T7202] ? __pfx_ref_tracker_free+0x10/0x10 [ 185.726066][ T7202] ? __asan_memcpy+0x40/0x70 [ 185.726085][ T7202] ? __skb_clone+0x5c/0x6c0 [ 185.726106][ T7202] netlink_rcv_skb+0x226/0x4a0 [ 185.726126][ T7202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.726140][ T7202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.726166][ T7202] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.726182][ T7202] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.726202][ T7202] genl_rcv+0x28/0x40 [ 185.726214][ T7202] netlink_unicast+0x7f5/0x990 [ 185.726238][ T7202] netlink_sendmsg+0x813/0xb40 [ 185.726261][ T7202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.726279][ T7202] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 185.726300][ T7202] ? __kernel_text_address+0xd/0x30 [ 185.726315][ T7202] ? unwind_get_return_address+0x4d/0x90 [ 185.726333][ T7202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.726349][ T7202] sock_sendmsg_nosec+0x13a/0x180 [ 185.726372][ T7202] ____sys_sendmsg+0x565/0x870 [ 185.726388][ T7202] ? __might_fault+0xaf/0x130 [ 185.726413][ T7202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.726436][ T7202] ? import_iovec+0x73/0xa0 [ 185.726456][ T7202] ___sys_sendmsg+0x2a5/0x360 [ 185.726471][ T7202] ? __lock_acquire+0x683/0x2ce0 [ 185.726490][ T7202] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.726533][ T7202] ? __fget_files+0x2a/0x420 [ 185.726547][ T7202] ? __fget_files+0x3a8/0x420 [ 185.726569][ T7202] __x64_sys_sendmsg+0x1b7/0x290 [ 185.726588][ T7202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.726618][ T7202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.726634][ T7202] do_syscall_64+0x174/0x580 [ 185.726652][ T7202] ? trace_irq_disable+0x3b/0x140 [ 185.726666][ T7202] ? clear_bhb_loop+0x40/0x90 [ 185.726683][ T7202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.726696][ T7202] RIP: 0033:0x7f7f8944e019 [ 185.726710][ T7202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.726722][ T7202] RSP: 002b:00007f7f87685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.726737][ T7202] RAX: ffffffffffffffda RBX: 00007f7f896d6090 RCX: 00007f7f8944e019 [ 185.726747][ T7202] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 185.726755][ T7202] RBP: 00007f7f87685090 R08: 0000000000000000 R09: 0000000000000000 [ 185.726764][ T7202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.726772][ T7202] R13: 00007f7f896d6128 R14: 00007f7f896d6090 R15: 00007ffe556ebd08 [ 185.726796][ T7202] [ 185.913398][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 186.035415][ T7216] FAULT_INJECTION: forcing a failure. [ 186.035415][ T7216] name failslab, interval 1, probability 0, space 0, times 0 [ 186.035447][ T7216] CPU: 1 UID: 0 PID: 7216 Comm: syz.3.460 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 186.035468][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.035479][ T7216] Call Trace: [ 186.035486][ T7216] [ 186.035493][ T7216] dump_stack_lvl+0xe8/0x150 [ 186.035523][ T7216] should_fail_ex+0x467/0x600 [ 186.035556][ T7216] should_failslab+0xa8/0x100 [ 186.035580][ T7216] kmem_cache_alloc_noprof+0xa4/0x650 [ 186.035598][ T7216] ? skb_clone+0x212/0x3a0 [ 186.035621][ T7216] ? skb_clone+0x212/0x3a0 [ 186.035648][ T7216] skb_clone+0x212/0x3a0 [ 186.035675][ T7216] __netlink_deliver_tap+0x413/0x860 [ 186.035710][ T7216] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.035733][ T7216] netlink_deliver_tap+0x19c/0x1b0 [ 186.035760][ T7216] netlink_unicast+0x7b8/0x990 [ 186.035792][ T7216] netlink_sendmsg+0x813/0xb40 [ 186.035823][ T7216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.035847][ T7216] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 186.035874][ T7216] ? __kernel_text_address+0xd/0x30 [ 186.035893][ T7216] ? unwind_get_return_address+0x4d/0x90 [ 186.035917][ T7216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.035938][ T7216] sock_sendmsg_nosec+0x13a/0x180 [ 186.035967][ T7216] ____sys_sendmsg+0x565/0x870 [ 186.035989][ T7216] ? __might_fault+0xaf/0x130 [ 186.036015][ T7216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.036046][ T7216] ? import_iovec+0x73/0xa0 [ 186.036071][ T7216] ___sys_sendmsg+0x2a5/0x360 [ 186.036092][ T7216] ? __lock_acquire+0x683/0x2ce0 [ 186.036115][ T7216] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.036172][ T7216] ? __fget_files+0x2a/0x420 [ 186.036191][ T7216] ? __fget_files+0x3a8/0x420 [ 186.036220][ T7216] __x64_sys_sendmsg+0x1b7/0x290 [ 186.036249][ T7216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.036289][ T7216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.036309][ T7216] do_syscall_64+0x174/0x580 [ 186.036339][ T7216] ? trace_irq_disable+0x3b/0x140 [ 186.036357][ T7216] ? clear_bhb_loop+0x40/0x90 [ 186.036379][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.036396][ T7216] RIP: 0033:0x7f98857ee019 [ 186.036413][ T7216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.036432][ T7216] RSP: 002b:00007f9883a04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.036452][ T7216] RAX: ffffffffffffffda RBX: 00007f9885a76180 RCX: 00007f98857ee019 [ 186.036465][ T7216] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000007 [ 186.036477][ T7216] RBP: 00007f9883a04090 R08: 0000000000000000 R09: 0000000000000000 [ 186.036487][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.036498][ T7216] R13: 00007f9885a76218 R14: 00007f9885a76180 R15: 00007fff7f6bd018 [ 186.036529][ T7216] [ 186.205733][ T7218] netlink: 'syz.2.461': attribute type 2 has an invalid length. [ 186.669009][ T7225] fuse: Unknown parameter '' [ 186.939779][ T7229] cgroup: Invalid name [ 187.356609][ T7229] Trying to write to read-only block-device nullb0 [ 187.894143][ T7240] SQUASHFS error: Failed to read block 0x0: -5 [ 187.894186][ T7240] unable to read squashfs_super_block [ 188.799237][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 188.892848][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.477'. [ 190.966844][ T7293] SQUASHFS error: Failed to read block 0x0: -5 [ 190.966895][ T7293] unable to read squashfs_super_block [ 193.417517][ T7337] SQUASHFS error: Failed to read block 0x0: -5 [ 193.417568][ T7337] unable to read squashfs_super_block [ 194.047658][ T5836] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 194.383163][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.416908][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.690085][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 194.717986][ T5836] usb 2-1: config 0 interface 0 altsetting 88 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.718020][ T5836] usb 2-1: config 0 interface 0 altsetting 88 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.718032][ T5836] usb 2-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.718046][ T5836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.718066][ T5836] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 194.718077][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.815438][ T5836] usb 2-1: config 0 descriptor?? [ 194.994115][ T7356] program syz.4.514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.144155][ T5836] usbhid 2-1:0.0: can't add hid device: -71 [ 195.144278][ T5836] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 195.168186][ T5836] usb 2-1: USB disconnect, device number 12 [ 195.187426][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.517'. [ 195.214566][ T7368] befs: (nullb0): invalid magic header [ 195.493921][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'. [ 195.667828][ T7378] bond3: entered promiscuous mode [ 195.667879][ T7378] bond3: entered allmulticast mode [ 195.668348][ T7378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.364557][ T7409] FAULT_INJECTION: forcing a failure. [ 196.364557][ T7409] name failslab, interval 1, probability 0, space 0, times 0 [ 196.364590][ T7409] CPU: 0 UID: 0 PID: 7409 Comm: syz.2.528 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.364612][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.364622][ T7409] Call Trace: [ 196.364629][ T7409] [ 196.364637][ T7409] dump_stack_lvl+0xe8/0x150 [ 196.364669][ T7409] should_fail_ex+0x467/0x600 [ 196.364702][ T7409] should_failslab+0xa8/0x100 [ 196.364726][ T7409] kmem_cache_alloc_noprof+0xa4/0x650 [ 196.364746][ T7409] ? skb_clone+0x212/0x3a0 [ 196.364768][ T7409] ? skb_clone+0x212/0x3a0 [ 196.364797][ T7409] skb_clone+0x212/0x3a0 [ 196.364824][ T7409] __netlink_deliver_tap+0x413/0x860 [ 196.364859][ T7409] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.364883][ T7409] netlink_deliver_tap+0x19c/0x1b0 [ 196.364908][ T7409] netlink_unicast+0x7b8/0x990 [ 196.364940][ T7409] netlink_sendmsg+0x813/0xb40 [ 196.364973][ T7409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.364998][ T7409] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 196.365027][ T7409] ? __kernel_text_address+0xd/0x30 [ 196.365045][ T7409] ? unwind_get_return_address+0x4d/0x90 [ 196.365069][ T7409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.365098][ T7409] sock_sendmsg_nosec+0x13a/0x180 [ 196.365127][ T7409] ____sys_sendmsg+0x565/0x870 [ 196.365149][ T7409] ? __might_fault+0xaf/0x130 [ 196.365174][ T7409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.365205][ T7409] ? import_iovec+0x73/0xa0 [ 196.365230][ T7409] ___sys_sendmsg+0x2a5/0x360 [ 196.365252][ T7409] ? __lock_acquire+0x683/0x2ce0 [ 196.365275][ T7409] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.365334][ T7409] ? __fget_files+0x2a/0x420 [ 196.365353][ T7409] ? __fget_files+0x3a8/0x420 [ 196.365382][ T7409] __x64_sys_sendmsg+0x1b7/0x290 [ 196.365409][ T7409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.365450][ T7409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.365471][ T7409] do_syscall_64+0x174/0x580 [ 196.365494][ T7409] ? trace_irq_disable+0x3b/0x140 [ 196.365513][ T7409] ? clear_bhb_loop+0x40/0x90 [ 196.365536][ T7409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.365555][ T7409] RIP: 0033:0x7f33452fe019 [ 196.365572][ T7409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.365587][ T7409] RSP: 002b:00007f3343556028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.365607][ T7409] RAX: ffffffffffffffda RBX: 00007f3345585fa0 RCX: 00007f33452fe019 [ 196.365622][ T7409] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 196.365633][ T7409] RBP: 00007f3343556090 R08: 0000000000000000 R09: 0000000000000000 [ 196.365645][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.365656][ T7409] R13: 00007f3345586038 R14: 00007f3345585fa0 R15: 00007fff2951ce08 [ 196.365687][ T7409] [ 196.405221][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 196.528309][ T7411] SQUASHFS error: Failed to read block 0x0: -5 [ 196.532502][ T7411] unable to read squashfs_super_block [ 196.561935][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 196.574758][ T31] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 196.574786][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.665091][ T7409] netlink: 48 bytes leftover after parsing attributes in process `syz.2.528'. [ 196.699830][ T31] usb 1-1: config 0 descriptor?? [ 196.746356][ T31] gspca_main: sunplus-2.14.0 probing 041e:400b [ 196.963254][ T7368] binder: 7367:7368 ioctl 4018620d 0 returned -22 [ 196.964362][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 197.031511][ T31] gspca_sunplus: reg_w_riv err -71 [ 197.031610][ T31] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 197.076783][ T31] usb 1-1: USB disconnect, device number 13 [ 197.491574][ T7421] IPv6: Can't replace route, no match found [ 197.799601][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 197.952885][ T31] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 197.952914][ T31] usb 4-1: config 0 has no interface number 0 [ 197.952957][ T31] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 197.952980][ T31] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.957432][ T31] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 197.957463][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.957483][ T31] usb 4-1: Product: syz [ 197.957498][ T31] usb 4-1: Manufacturer: syz [ 197.957512][ T31] usb 4-1: SerialNumber: syz [ 197.994009][ T31] usb 4-1: config 0 descriptor?? [ 198.000209][ T7421] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 198.006961][ T31] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 198.069952][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 198.121987][ T36] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 198.191657][ T31] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 198.217798][ T7442] SQUASHFS error: Failed to read block 0x0: -5 [ 198.217846][ T7442] unable to read squashfs_super_block [ 198.312452][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.312513][ T36] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 198.312570][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.472548][ T36] usb 1-1: config 0 descriptor?? [ 198.526907][ T5836] usb 4-1: USB disconnect, device number 12 [ 198.571887][ T36] pwc: Askey VC010 type 2 USB webcam detected. [ 198.596502][ T5836] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 198.597316][ T5836] cyberjack 4-1:0.69: device disconnected [ 198.915126][ T36] pwc: recv_control_msg error -32 req 02 val 2b00 [ 198.938594][ T5732] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 198.998876][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'. [ 199.089595][ T5732] usb 5-1: Using ep0 maxpacket: 32 [ 199.091904][ T5732] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.091930][ T5732] usb 5-1: config 0 has no interface number 0 [ 199.091972][ T5732] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 199.091994][ T5732] usb 5-1: config 0 interface 1 has no altsetting 0 [ 199.094532][ T5732] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 199.094557][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.094576][ T5732] usb 5-1: Product: syz [ 199.094589][ T5732] usb 5-1: Manufacturer: syz [ 199.094602][ T5732] usb 5-1: SerialNumber: syz [ 199.179206][ T5732] usb 5-1: config 0 descriptor?? [ 199.399374][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.412942][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.819731][ T7445] netlink: 48 bytes leftover after parsing attributes in process `syz.4.541'. [ 199.907908][ T5732] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 200.005071][ T36] pwc: recv_control_msg error -71 req 02 val 2700 [ 200.005979][ T36] pwc: recv_control_msg error -71 req 02 val 2c00 [ 200.006475][ T36] pwc: recv_control_msg error -71 req 04 val 1000 [ 200.008290][ T36] pwc: recv_control_msg error -71 req 04 val 1300 [ 200.012860][ T36] pwc: recv_control_msg error -71 req 04 val 1400 [ 200.013341][ T36] pwc: recv_control_msg error -71 req 02 val 2000 [ 200.013781][ T36] pwc: recv_control_msg error -71 req 02 val 2100 [ 200.015465][ T36] pwc: recv_control_msg error -71 req 04 val 1500 [ 200.018000][ T36] pwc: recv_control_msg error -71 req 02 val 2500 [ 200.018526][ T36] pwc: recv_control_msg error -71 req 02 val 2400 [ 200.018951][ T36] pwc: recv_control_msg error -71 req 02 val 2600 [ 200.019709][ T36] pwc: recv_control_msg error -71 req 02 val 2900 [ 200.115146][ T36] pwc: recv_control_msg error -71 req 02 val 2800 [ 200.115815][ T36] pwc: recv_control_msg error -71 req 04 val 1100 [ 200.116245][ T36] pwc: recv_control_msg error -71 req 04 val 1200 [ 200.150122][ T5732] cx231xx 5-1:0.1: Failed to read PCB config [ 200.150270][ T5732] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 200.180435][ T5732] usb 5-1: USB disconnect, device number 3 [ 200.396517][ T7476] fuse: Unknown parameter '' [ 200.447745][ T36] pwc: Registered as video103. [ 200.457807][ T36] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 200.485812][ T36] usb 1-1: USB disconnect, device number 14 [ 200.647198][ T7484] SQUASHFS error: Failed to read block 0x0: -5 [ 200.647251][ T7484] unable to read squashfs_super_block [ 200.895598][ T7489] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 200.895598][ T7489] program syz.4.557 not setting count and/or reply_len properly [ 201.190927][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.559'. [ 201.534785][ T7510] 9p: Bad value for 'rfdno' [ 202.180779][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 202.202729][ T7528] bond0: Unable to set down delay as MII monitoring is disabled [ 203.184002][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 203.228578][ T7543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.574'. [ 204.148174][ T7545] SQUASHFS error: Failed to read block 0x0: -5 [ 204.148223][ T7545] unable to read squashfs_super_block [ 204.424696][ T7554] cgroup: Unknown subsys name 'cpuset' [ 205.113650][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'. [ 205.116923][ T7566] netlink: 48 bytes leftover after parsing attributes in process `syz.0.584'. [ 205.266020][ T7559] netlink: 56 bytes leftover after parsing attributes in process `syz.1.581'. [ 205.268537][ T7567] bond0: Unable to set down delay as MII monitoring is disabled [ 205.781526][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.587'. [ 205.819798][ T7578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.587'. [ 206.609151][ T7584] FAULT_INJECTION: forcing a failure. [ 206.609151][ T7584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.609186][ T7584] CPU: 1 UID: 0 PID: 7584 Comm: syz.4.590 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 206.609208][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.609218][ T7584] Call Trace: [ 206.609225][ T7584] [ 206.609233][ T7584] dump_stack_lvl+0xe8/0x150 [ 206.609266][ T7584] should_fail_ex+0x467/0x600 [ 206.609300][ T7584] _copy_to_user+0x31/0xb0 [ 206.609324][ T7584] __se_sys_cachestat+0x9eb/0xae0 [ 206.609345][ T7584] ? __se_sys_cachestat+0x3d3/0xae0 [ 206.609367][ T7584] ? __pfx___se_sys_cachestat+0x10/0x10 [ 206.609412][ T7584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.609436][ T7584] do_syscall_64+0x174/0x580 [ 206.609457][ T7584] ? trace_irq_disable+0x3b/0x140 [ 206.609474][ T7584] ? clear_bhb_loop+0x40/0x90 [ 206.609496][ T7584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.609514][ T7584] RIP: 0033:0x7fadcb22e019 [ 206.609532][ T7584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.609546][ T7584] RSP: 002b:00007fadc9486028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 206.609567][ T7584] RAX: ffffffffffffffda RBX: 00007fadcb4b5fa0 RCX: 00007fadcb22e019 [ 206.609580][ T7584] RDX: 000020000009de80 RSI: 0000200000000040 RDI: 0000000000000003 [ 206.609594][ T7584] RBP: 00007fadc9486090 R08: 0000000000000000 R09: 0000000000000000 [ 206.609605][ T7584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.609616][ T7584] R13: 00007fadcb4b6038 R14: 00007fadcb4b5fa0 R15: 00007fff603828b8 [ 206.609646][ T7584] [ 206.691942][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 206.695165][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 206.696871][ T5604] Bluetooth: hci0: command 0x0406 tx timeout [ 206.696908][ T5604] Bluetooth: hci2: command 0x0406 tx timeout [ 207.119569][ T5836] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 207.260622][ T5732] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 207.294542][ T5836] usb 5-1: config 1 has an invalid descriptor of length 225, skipping remainder of the config [ 207.294571][ T5836] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.323107][ T5836] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.323137][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.323158][ T5836] usb 5-1: SerialNumber: syz [ 207.404734][ T7601] netlink: 48 bytes leftover after parsing attributes in process `syz.0.595'. [ 207.443140][ T5732] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 207.443168][ T5732] usb 4-1: config 0 has no interface number 0 [ 207.443267][ T5732] usb 4-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.448294][ T5732] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 207.448323][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.448396][ T5732] usb 4-1: Product: syz [ 207.448418][ T5732] usb 4-1: Manufacturer: syz [ 207.448430][ T5732] usb 4-1: SerialNumber: syz [ 207.512517][ T7602] bridge0: port 3(gretap0) entered blocking state [ 207.512625][ T7602] bridge0: port 3(gretap0) entered disabled state [ 207.526906][ T7602] gretap0: entered allmulticast mode [ 207.539799][ T5732] usb 4-1: config 0 descriptor?? [ 207.568557][ T5732] asix 4-1:0.251: probe with driver asix failed with error -22 [ 207.638460][ T7602] gretap0: entered promiscuous mode [ 207.653155][ T7602] bridge0: port 3(gretap0) entered blocking state [ 207.653319][ T7602] bridge0: port 3(gretap0) entered forwarding state [ 207.654338][ T5836] usb 5-1: 0:2 : does not exist [ 207.654419][ T5836] usb 5-1: unit 5 not found! [ 207.808559][ T5746] usb 4-1: USB disconnect, device number 13 [ 207.827979][ T5836] usb 5-1: USB disconnect, device number 4 [ 207.925428][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.009892][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 208.009922][ T7607] bond0: Unable to set down delay as MII monitoring is disabled [ 208.953950][ T7624] SQUASHFS error: Failed to read block 0x0: -5 [ 208.954001][ T7624] unable to read squashfs_super_block [ 209.073303][ T7632] netlink: 'syz.4.606': attribute type 30 has an invalid length. [ 209.328769][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 209.344887][ T7638] bond0: Unable to set down delay as MII monitoring is disabled [ 209.526684][ T7643] syz.0.609 uses obsolete (PF_INET,SOCK_PACKET) [ 210.011017][ T7660] FAULT_INJECTION: forcing a failure. [ 210.011017][ T7660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.011052][ T7660] CPU: 0 UID: 0 PID: 7660 Comm: syz.2.612 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 210.011073][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.011084][ T7660] Call Trace: [ 210.011091][ T7660] [ 210.011100][ T7660] dump_stack_lvl+0xe8/0x150 [ 210.011132][ T7660] should_fail_ex+0x467/0x600 [ 210.011165][ T7660] strncpy_from_user+0x36/0x2c0 [ 210.011195][ T7660] do_getname+0x77/0x250 [ 210.011226][ T7660] __x64_sys_newstat+0x107/0x1e0 [ 210.011244][ T7660] ? __pfx___x64_sys_newstat+0x10/0x10 [ 210.011282][ T7660] ? __pfx_ksys_write+0x10/0x10 [ 210.011313][ T7660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.011333][ T7660] do_syscall_64+0x174/0x580 [ 210.011358][ T7660] ? trace_irq_disable+0x3b/0x140 [ 210.011377][ T7660] ? clear_bhb_loop+0x40/0x90 [ 210.011399][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.011418][ T7660] RIP: 0033:0x7f33452fe019 [ 210.011435][ T7660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.011450][ T7660] RSP: 002b:00007f3343535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 210.011470][ T7660] RAX: ffffffffffffffda RBX: 00007f3345586090 RCX: 00007f33452fe019 [ 210.011489][ T7660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000010500 [ 210.011502][ T7660] RBP: 00007f3343535090 R08: 0000000000000000 R09: 0000000000000000 [ 210.011513][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.011525][ T7660] R13: 00007f3345586128 R14: 00007f3345586090 R15: 00007fff2951ce08 [ 210.011563][ T7660] [ 210.314418][ T7652] loop4: detected capacity change from 0 to 7 [ 210.563132][ T7652] Dev loop4: unable to read RDB block 7 [ 210.563172][ T7652] loop4: AHDI p1 p2 p3 [ 210.563194][ T7652] loop4: partition table partially beyond EOD, truncated [ 210.609257][ T7652] loop4: p1 start 1601398130 is beyond EOD, truncated [ 210.609285][ T7652] loop4: p2 start 1702059890 is beyond EOD, truncated [ 211.338623][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 211.505406][ T7680] SQUASHFS error: Failed to read block 0x0: -5 [ 211.505458][ T7680] unable to read squashfs_super_block [ 211.632672][ T7695] tipc: Withdrawal distribution failure [ 211.667517][ T7686] bond0: Unable to set down delay as MII monitoring is disabled [ 212.152435][ T5732] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 212.312275][ T5732] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 212.312313][ T5732] usb 2-1: can't read configurations, error -61 [ 212.439677][ T5732] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 212.494007][ T7728] FAULT_INJECTION: forcing a failure. [ 212.494007][ T7728] name failslab, interval 1, probability 0, space 0, times 0 [ 212.494040][ T7728] CPU: 1 UID: 0 PID: 7728 Comm: syz.2.638 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.494062][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.494073][ T7728] Call Trace: [ 212.494080][ T7728] [ 212.494088][ T7728] dump_stack_lvl+0xe8/0x150 [ 212.494119][ T7728] should_fail_ex+0x467/0x600 [ 212.494157][ T7728] should_failslab+0xa8/0x100 [ 212.494181][ T7728] kmem_cache_alloc_noprof+0xa4/0x650 [ 212.494200][ T7728] ? __inet_bhash2_update_saddr+0x1b8/0x2010 [ 212.494224][ T7728] ? __inet_bhash2_update_saddr+0x1b8/0x2010 [ 212.494253][ T7728] __inet_bhash2_update_saddr+0x1b8/0x2010 [ 212.494289][ T7728] ? tcp_chrono_stop+0x2e7/0x6f0 [ 212.494328][ T7728] ? tcp_write_queue_purge+0x257/0x360 [ 212.494350][ T7728] ? tcp_fastopen_active_disable_ofo_check+0x57/0x750 [ 212.494374][ T7728] tcp_disconnect+0x4aa/0x2040 [ 212.494395][ T7728] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 212.494423][ T7728] __inet_stream_connect+0x329/0xe00 [ 212.494449][ T7728] ? __pfx___inet_stream_connect+0x10/0x10 [ 212.494464][ T7728] ? __local_bh_enable+0x1e1/0x2f0 [ 212.494494][ T7728] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 212.494515][ T7728] ? lockdep_hardirqs_on+0x7a/0x110 [ 212.494541][ T7728] inet_stream_connect+0x66/0xa0 [ 212.494562][ T7728] __sys_connect+0x336/0x470 [ 212.494585][ T7728] ? __pfx___sys_connect+0x10/0x10 [ 212.494616][ T7728] ? __pfx_ksys_write+0x10/0x10 [ 212.494642][ T7728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.494661][ T7728] __x64_sys_connect+0x7a/0x90 [ 212.494682][ T7728] do_syscall_64+0x174/0x580 [ 212.494703][ T7728] ? trace_irq_disable+0x3b/0x140 [ 212.494721][ T7728] ? clear_bhb_loop+0x40/0x90 [ 212.494743][ T7728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.494762][ T7728] RIP: 0033:0x7f33452fe019 [ 212.494780][ T7728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.494795][ T7728] RSP: 002b:00007f3343556028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 212.494815][ T7728] RAX: ffffffffffffffda RBX: 00007f3345585fa0 RCX: 00007f33452fe019 [ 212.494831][ T7728] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 212.494843][ T7728] RBP: 00007f3343556090 R08: 0000000000000000 R09: 0000000000000000 [ 212.494855][ T7728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.494867][ T7728] R13: 00007f3345586038 R14: 00007f3345585fa0 R15: 00007fff2951ce08 [ 212.494899][ T7728] [ 212.713581][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 212.713610][ T7731] bond0: Unable to set down delay as MII monitoring is disabled [ 212.720332][ T5732] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 212.720370][ T5732] usb 2-1: can't read configurations, error -61 [ 212.739585][ T5732] usb usb2-port1: attempt power cycle [ 212.803578][ T7734] FAULT_INJECTION: forcing a failure. [ 212.803578][ T7734] name failslab, interval 1, probability 0, space 0, times 0 [ 212.803611][ T7734] CPU: 0 UID: 0 PID: 7734 Comm: syz.0.639 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.803633][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.803645][ T7734] Call Trace: [ 212.803651][ T7734] [ 212.803659][ T7734] dump_stack_lvl+0xe8/0x150 [ 212.803690][ T7734] should_fail_ex+0x467/0x600 [ 212.803723][ T7734] should_failslab+0xa8/0x100 [ 212.803745][ T7734] kmem_cache_alloc_node_noprof+0xae/0x670 [ 212.803766][ T7734] ? __alloc_skb+0x1d7/0x7a0 [ 212.803785][ T7734] ? __alloc_skb+0x1d7/0x7a0 [ 212.803807][ T7734] __alloc_skb+0x1d7/0x7a0 [ 212.803830][ T7734] netlink_sendmsg+0x5d4/0xb40 [ 212.803861][ T7734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.803885][ T7734] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 212.803911][ T7734] ? __kernel_text_address+0xd/0x30 [ 212.803929][ T7734] ? unwind_get_return_address+0x4d/0x90 [ 212.803951][ T7734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.803972][ T7734] sock_sendmsg_nosec+0x13a/0x180 [ 212.804000][ T7734] ____sys_sendmsg+0x565/0x870 [ 212.804022][ T7734] ? __might_fault+0xaf/0x130 [ 212.804047][ T7734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.804076][ T7734] ? import_iovec+0x73/0xa0 [ 212.804097][ T7734] ___sys_sendmsg+0x2a5/0x360 [ 212.804115][ T7734] ? __lock_acquire+0x683/0x2ce0 [ 212.804137][ T7734] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.804189][ T7734] ? __fget_files+0x2a/0x420 [ 212.804207][ T7734] ? __fget_files+0x3a8/0x420 [ 212.804231][ T7734] __x64_sys_sendmsg+0x1b7/0x290 [ 212.804270][ T7734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.804306][ T7734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.804326][ T7734] do_syscall_64+0x174/0x580 [ 212.804348][ T7734] ? trace_irq_disable+0x3b/0x140 [ 212.804366][ T7734] ? clear_bhb_loop+0x40/0x90 [ 212.804387][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.804405][ T7734] RIP: 0033:0x7f7f8944e019 [ 212.804423][ T7734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.804437][ T7734] RSP: 002b:00007f7f876a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.804457][ T7734] RAX: ffffffffffffffda RBX: 00007f7f896d5fa0 RCX: 00007f7f8944e019 [ 212.804469][ T7734] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 212.804481][ T7734] RBP: 00007f7f876a6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.804492][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.804502][ T7734] R13: 00007f7f896d6038 R14: 00007f7f896d5fa0 R15: 00007ffe556ebd08 [ 212.804530][ T7734] [ 212.947716][ T7737] netlink: 'syz.4.642': attribute type 21 has an invalid length. [ 212.947906][ T7737] netlink: 132 bytes leftover after parsing attributes in process `syz.4.642'. [ 212.972799][ T7738] SQUASHFS error: Failed to read block 0x0: -5 [ 212.972847][ T7738] unable to read squashfs_super_block [ 213.388711][ T5732] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 213.468429][ T5732] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 213.468468][ T5732] usb 2-1: can't read configurations, error -61 [ 213.578412][ T7749] FAULT_INJECTION: forcing a failure. [ 213.578412][ T7749] name failslab, interval 1, probability 0, space 0, times 0 [ 213.578468][ T7749] CPU: 0 UID: 0 PID: 7749 Comm: syz.4.646 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 213.578491][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.578502][ T7749] Call Trace: [ 213.578510][ T7749] [ 213.578518][ T7749] dump_stack_lvl+0xe8/0x150 [ 213.578551][ T7749] should_fail_ex+0x467/0x600 [ 213.578584][ T7749] should_failslab+0xa8/0x100 [ 213.578608][ T7749] __kmalloc_noprof+0xfe/0x780 [ 213.578629][ T7749] ? iovec_from_user+0x87/0x250 [ 213.578650][ T7749] ? iovec_from_user+0x87/0x250 [ 213.578676][ T7749] iovec_from_user+0x87/0x250 [ 213.578702][ T7749] __import_iovec+0x15e/0x7e0 [ 213.578734][ T7749] import_iovec+0x73/0xa0 [ 213.578760][ T7749] ___sys_recvmsg+0x4c9/0x5a0 [ 213.578783][ T7749] ? sched_clock+0x3f/0x60 [ 213.578812][ T7749] ? __pfx____sys_recvmsg+0x10/0x10 [ 213.578840][ T7749] ? __fget_files+0x2a/0x420 [ 213.578877][ T7749] ? __fget_files+0x3a8/0x420 [ 213.578907][ T7749] do_recvmmsg+0x320/0x7f0 [ 213.578939][ T7749] ? __pfx_do_recvmmsg+0x10/0x10 [ 213.578981][ T7749] ? irqentry_exit+0x218/0x8f0 [ 213.579012][ T7749] __x64_sys_recvmmsg+0x198/0x250 [ 213.579039][ T7749] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 213.579062][ T7749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.579090][ T7749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.579109][ T7749] do_syscall_64+0x174/0x580 [ 213.579134][ T7749] ? clear_bhb_loop+0x40/0x90 [ 213.579164][ T7749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.579182][ T7749] RIP: 0033:0x7fadcb22e019 [ 213.579200][ T7749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.579216][ T7749] RSP: 002b:00007fadc9444028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 213.579236][ T7749] RAX: ffffffffffffffda RBX: 00007fadcb4b6180 RCX: 00007fadcb22e019 [ 213.579250][ T7749] RDX: 0000000000003aa0 RSI: 00002000000047c0 RDI: 0000000000000006 [ 213.579262][ T7749] RBP: 00007fadc9444090 R08: 0000000000000000 R09: 0000000000000000 [ 213.579274][ T7749] R10: 0000000060002000 R11: 0000000000000246 R12: 0000000000000001 [ 213.579285][ T7749] R13: 00007fadcb4b6218 R14: 00007fadcb4b6180 R15: 00007fff603828b8 [ 213.579316][ T7749] [ 214.054293][ T5732] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 214.126145][ T5732] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 214.126183][ T5732] usb 2-1: can't read configurations, error -61 [ 214.157740][ T5732] usb usb2-port1: unable to enumerate USB device [ 214.211300][ T7750] mmap: syz.2.648 (7750): VmData 37724160 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 214.475422][ T7763] cgroup: Unknown subsys name 'cpuset' [ 214.651596][ T5711] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.695006][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 214.695035][ T7767] bond0: Unable to set down delay as MII monitoring is disabled [ 214.781110][ T5711] usb 5-1: device descriptor read/64, error -71 [ 215.029661][ T5711] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 215.086447][ T7781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.660'. [ 215.162469][ T5711] usb 5-1: device descriptor read/64, error -71 [ 215.280710][ T5711] usb usb5-port1: attempt power cycle [ 215.425916][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 215.425965][ T7793] unable to read squashfs_super_block [ 215.619106][ T7798] cgroup: Unknown subsys name 'cpuset' [ 215.619672][ T5711] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 215.640387][ T5711] usb 5-1: device descriptor read/8, error -71 [ 215.701452][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 215.701481][ T7803] bond0: Unable to set down delay as MII monitoring is disabled [ 215.879589][ T5711] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 215.905020][ T5711] usb 5-1: device descriptor read/8, error -71 [ 216.054512][ T5711] usb usb5-port1: unable to enumerate USB device [ 217.226949][ T7821] vlan2: entered promiscuous mode [ 217.227053][ T7821] bridge0: entered promiscuous mode [ 217.552027][ T7834] cgroup: Unknown subsys name 'cpuset' [ 217.626390][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 217.626419][ T7841] bond0: Unable to set up delay as MII monitoring is disabled [ 217.701597][ T7842] SQUASHFS error: Failed to read block 0x0: -5 [ 217.701647][ T7842] unable to read squashfs_super_block [ 218.309739][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 218.472100][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 218.472131][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 218.472151][ T10] usb 4-1: config 220 has no interface number 2 [ 218.472234][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 218.472264][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 218.472282][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 218.472300][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 218.475301][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 218.475330][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.475350][ T10] usb 4-1: Product: syz [ 218.475363][ T10] usb 4-1: Manufacturer: syz [ 218.475376][ T10] usb 4-1: SerialNumber: syz [ 218.861129][ T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 218.861177][ T10] uvcvideo 4-1:220.0: No valid video chain found. [ 218.861254][ T10] usb 4-1: selecting invalid altsetting 0 [ 218.950557][ T10] usb 4-1: selecting invalid altsetting 0 [ 218.950594][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 218.957786][ T10] usb 4-1: USB disconnect, device number 14 [ 219.088876][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 219.230952][ T7881] cgroup: Unknown subsys name 'cpuset' [ 219.261134][ T7882] FAULT_INJECTION: forcing a failure. [ 219.261134][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 219.267613][ T7882] CPU: 1 UID: 0 PID: 7882 Comm: syz.0.692 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 219.267632][ T7882] Tainted: [L]=SOFTLOCKUP [ 219.267636][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.267643][ T7882] Call Trace: [ 219.267647][ T7882] [ 219.267653][ T7882] dump_stack_lvl+0xe8/0x150 [ 219.267675][ T7882] should_fail_ex+0x467/0x600 [ 219.267695][ T7882] should_failslab+0xa8/0x100 [ 219.267709][ T7882] __kmalloc_noprof+0xfe/0x780 [ 219.267720][ T7882] ? tomoyo_encode+0x2ad/0x570 [ 219.267733][ T7882] ? tomoyo_encode+0x2ad/0x570 [ 219.267749][ T7882] tomoyo_encode+0x2ad/0x570 [ 219.267765][ T7882] tomoyo_realpath_from_path+0x5fa/0x640 [ 219.267783][ T7882] ? tomoyo_path_number_perm+0x219/0x5f0 [ 219.267794][ T7882] tomoyo_path_number_perm+0x246/0x5f0 [ 219.267807][ T7882] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.267817][ T7882] ? __lock_acquire+0x683/0x2ce0 [ 219.267836][ T7882] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 219.267850][ T7882] ? hook_file_ioctl+0x1f3/0x600 [ 219.267864][ T7882] ? lockdep_hardirqs_on+0x7a/0x110 [ 219.267886][ T7882] ? __fget_files+0x2a/0x420 [ 219.267899][ T7882] ? __fget_files+0x2a/0x420 [ 219.267909][ T7882] ? __fget_files+0x3a8/0x420 [ 219.267918][ T7882] ? __fget_files+0x2a/0x420 [ 219.267930][ T7882] security_file_ioctl+0xc3/0x2a0 [ 219.267944][ T7882] __se_sys_ioctl+0x47/0x170 [ 219.267957][ T7882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.267968][ T7882] do_syscall_64+0x174/0x580 [ 219.267981][ T7882] ? trace_irq_disable+0x3b/0x140 [ 219.267991][ T7882] ? clear_bhb_loop+0x40/0x90 [ 219.268004][ T7882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.268013][ T7882] RIP: 0033:0x7f7f8944e019 [ 219.268024][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.268032][ T7882] RSP: 002b:00007f7f876a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.268044][ T7882] RAX: ffffffffffffffda RBX: 00007f7f896d5fa0 RCX: 00007f7f8944e019 [ 219.268051][ T7882] RDX: 0000200000000000 RSI: 0000000000008982 RDI: 0000000000000008 [ 219.268058][ T7882] RBP: 00007f7f876a6090 R08: 0000000000000000 R09: 0000000000000000 [ 219.268064][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.268070][ T7882] R13: 00007f7f896d6038 R14: 00007f7f896d5fa0 R15: 00007ffe556ebd08 [ 219.268086][ T7882] [ 219.268097][ T7882] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.311828][ T7894] SQUASHFS error: Failed to read block 0x0: -5 [ 220.311878][ T7894] unable to read squashfs_super_block [ 220.560922][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.795223][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 220.832026][ T7900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.881937][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 220.914710][ T7916] cgroup: Unknown subsys name 'cpuset' [ 221.242357][ T7909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.630913][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 222.063313][ T7935] FAULT_INJECTION: forcing a failure. [ 222.063313][ T7935] name fail_futex, interval 1, probability 0, space 0, times 1 [ 222.063382][ T7935] CPU: 1 UID: 0 PID: 7935 Comm: syz.0.711 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 222.063409][ T7935] Tainted: [L]=SOFTLOCKUP [ 222.063416][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.063427][ T7935] Call Trace: [ 222.063434][ T7935] [ 222.063443][ T7935] dump_stack_lvl+0xe8/0x150 [ 222.063476][ T7935] should_fail_ex+0x467/0x600 [ 222.063509][ T7935] get_futex_key+0x1b3/0x1580 [ 222.063534][ T7935] ? perf_lock_task_context+0x79b/0x850 [ 222.063562][ T7935] ? __pfx_get_futex_key+0x10/0x10 [ 222.063582][ T7935] ? __lock_acquire+0x683/0x2ce0 [ 222.063603][ T7935] ? __lock_acquire+0x683/0x2ce0 [ 222.063629][ T7935] futex_wake+0x119/0x600 [ 222.063660][ T7935] ? __pfx_futex_wake+0x10/0x10 [ 222.063683][ T7935] ? do_raw_spin_lock+0x12b/0x2f0 [ 222.063724][ T7935] do_futex+0x458/0x4e0 [ 222.063751][ T7935] ? __pfx_do_futex+0x10/0x10 [ 222.063778][ T7935] ? __might_fault+0xaf/0x130 [ 222.063800][ T7935] mm_release+0x101/0x290 [ 222.063824][ T7935] exit_mm+0x50/0x240 [ 222.063844][ T7935] do_exit+0x6cd/0x2360 [ 222.063910][ T7935] ? lockdep_hardirqs_on+0x7a/0x110 [ 222.063933][ T7935] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 222.063962][ T7935] ? __pfx_do_exit+0x10/0x10 [ 222.063989][ T7935] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 222.064007][ T7935] ? rt_spin_lock+0x1e0/0x400 [ 222.064033][ T7935] ? rt_spin_unlock+0x157/0x200 [ 222.064054][ T7935] do_group_exit+0x22d/0x2f0 [ 222.064072][ T7935] ? rt_spin_unlock+0x163/0x200 [ 222.064093][ T7935] get_signal+0x121b/0x12c0 [ 222.064138][ T7935] arch_do_signal_or_restart+0xbb/0x860 [ 222.064167][ T7935] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 222.064199][ T7935] ? __x64_sys_recvmmsg+0x198/0x250 [ 222.064233][ T7935] exit_to_user_mode_loop+0x104/0x730 [ 222.064252][ T7935] ? rcu_is_watching+0x15/0xb0 [ 222.064275][ T7935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.064294][ T7935] do_syscall_64+0x353/0x580 [ 222.064317][ T7935] ? trace_irq_disable+0x3b/0x140 [ 222.064336][ T7935] ? clear_bhb_loop+0x40/0x90 [ 222.064357][ T7935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.064376][ T7935] RIP: 0033:0x7f7f8944e019 [ 222.064393][ T7935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.064408][ T7935] RSP: 002b:00007f7f876a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 222.064428][ T7935] RAX: fffffffffffffe00 RBX: 00007f7f896d5fa0 RCX: 00007f7f8944e019 [ 222.064443][ T7935] RDX: 0000000000000001 RSI: 0000200000005600 RDI: 0000000000000004 [ 222.064455][ T7935] RBP: 00007f7f876a6090 R08: 0000000000000000 R09: 0000000000000000 [ 222.064467][ T7935] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 222.064478][ T7935] R13: 00007f7f896d6038 R14: 00007f7f896d5fa0 R15: 00007ffe556ebd08 [ 222.064508][ T7935] [ 222.767448][ T7954] SQUASHFS error: Failed to read block 0x0: -5 [ 222.767497][ T7954] unable to read squashfs_super_block [ 222.903247][ T7959] cgroup: Unknown subsys name 'cpuset' [ 223.164294][ T7967] CIFS: VFS: UNC: path must begin with // or \\ [ 223.164589][ T7967] CIFS: VFS: Malformed UNC in devname [ 223.546406][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.720'. [ 223.781505][ T7970] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.321323][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 224.367767][ T7996] netlink: 36 bytes leftover after parsing attributes in process `syz.4.726'. [ 225.222528][ T8003] netlink: 48 bytes leftover after parsing attributes in process `syz.1.730'. [ 225.591232][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 225.657941][ T8020] SQUASHFS error: Failed to read block 0x0: -5 [ 225.657993][ T8020] unable to read squashfs_super_block [ 225.857223][ T8018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.429741][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.742'. [ 227.306275][ T8046] net_ratelimit: 10 callbacks suppressed [ 227.306295][ T8046] netlink: zone id is out of range [ 227.306488][ T8046] netlink: zone id is out of range [ 227.433697][ T8052] netlink: 48 bytes leftover after parsing attributes in process `syz.2.748'. [ 227.453218][ T8055] vlan2: entered promiscuous mode [ 227.453247][ T8055] bridge0: entered promiscuous mode [ 227.704221][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'. [ 227.799821][ T5335] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 227.965343][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.965378][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.965416][ T5335] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 227.965439][ T5335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.968265][ T8060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.026202][ T5335] usb 2-1: config 0 descriptor?? [ 228.419252][ T8063] overlayfs: upper fs does not support file handles, falling back to index=off. [ 228.632679][ T8073] SQUASHFS error: Failed to read block 0x0: -5 [ 228.632722][ T8073] unable to read squashfs_super_block [ 228.738503][ T5335] usbhid 2-1:0.0: can't add hid device: -71 [ 228.738636][ T5335] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 228.772037][ T5335] usb 2-1: USB disconnect, device number 17 [ 229.221470][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 230.228437][ T8088] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 230.228469][ T8088] netlink: 232 bytes leftover after parsing attributes in process `syz.1.763'. [ 230.228485][ T8088] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 230.412024][ T8095] netlink: 48 bytes leftover after parsing attributes in process `syz.1.765'. [ 230.413287][ T8096] bridge0: port 3(gretap0) entered blocking state [ 230.415360][ T8096] bridge0: port 3(gretap0) entered disabled state [ 230.416876][ T8096] gretap0: entered allmulticast mode [ 230.521723][ T8096] gretap0: entered promiscuous mode [ 230.522350][ T8096] bridge0: port 3(gretap0) entered blocking state [ 230.522483][ T8096] bridge0: port 3(gretap0) entered forwarding state [ 231.126215][ T8113] FAULT_INJECTION: forcing a failure. [ 231.126215][ T8113] name failslab, interval 1, probability 0, space 0, times 0 [ 231.126252][ T8113] CPU: 1 UID: 0 PID: 8113 Comm: syz.3.768 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 231.126278][ T8113] Tainted: [L]=SOFTLOCKUP [ 231.126284][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.126295][ T8113] Call Trace: [ 231.126302][ T8113] [ 231.126310][ T8113] dump_stack_lvl+0xe8/0x150 [ 231.126342][ T8113] should_fail_ex+0x467/0x600 [ 231.126378][ T8113] should_failslab+0xa8/0x100 [ 231.126403][ T8113] kmem_cache_alloc_node_noprof+0xae/0x670 [ 231.126424][ T8113] ? __alloc_skb+0x1d7/0x7a0 [ 231.126443][ T8113] ? __alloc_skb+0x1d7/0x7a0 [ 231.126467][ T8113] __alloc_skb+0x1d7/0x7a0 [ 231.126492][ T8113] netlink_sendmsg+0x5d4/0xb40 [ 231.126525][ T8113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.126550][ T8113] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 231.126577][ T8113] ? __kernel_text_address+0xd/0x30 [ 231.126596][ T8113] ? unwind_get_return_address+0x4d/0x90 [ 231.126620][ T8113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.126641][ T8113] sock_sendmsg_nosec+0x13a/0x180 [ 231.126671][ T8113] ____sys_sendmsg+0x565/0x870 [ 231.126692][ T8113] ? __might_fault+0xaf/0x130 [ 231.126717][ T8113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.126747][ T8113] ? import_iovec+0x73/0xa0 [ 231.126773][ T8113] ___sys_sendmsg+0x2a5/0x360 [ 231.126794][ T8113] ? __lock_acquire+0x683/0x2ce0 [ 231.126817][ T8113] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.126873][ T8113] ? __fget_files+0x2a/0x420 [ 231.126893][ T8113] ? __fget_files+0x3a8/0x420 [ 231.126921][ T8113] __x64_sys_sendmsg+0x1b7/0x290 [ 231.126956][ T8113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.126996][ T8113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.127016][ T8113] do_syscall_64+0x174/0x580 [ 231.127039][ T8113] ? trace_irq_disable+0x3b/0x140 [ 231.127058][ T8113] ? clear_bhb_loop+0x40/0x90 [ 231.127081][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.127100][ T8113] RIP: 0033:0x7f98857ee019 [ 231.127117][ T8113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.127132][ T8113] RSP: 002b:00007f9883a25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.127152][ T8113] RAX: ffffffffffffffda RBX: 00007f9885a76090 RCX: 00007f98857ee019 [ 231.127165][ T8113] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 231.127178][ T8113] RBP: 00007f9883a25090 R08: 0000000000000000 R09: 0000000000000000 [ 231.127190][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.127201][ T8113] R13: 00007f9885a76128 R14: 00007f9885a76090 R15: 00007fff7f6bd018 [ 231.127230][ T8113] [ 231.838434][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 232.836398][ T5741] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 232.894708][ T5741] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 233.225499][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 233.564881][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 233.564899][ T37] audit: type=1326 audit(1785810898.405:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.2.782" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33452fe019 code=0x7ffc0000 [ 233.566696][ T37] audit: type=1326 audit(1785810898.405:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.2.782" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33452fe019 code=0x7ffc0000 [ 233.619566][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 233.621630][ T37] audit: type=1326 audit(1785810898.465:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.2.782" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f33452fe019 code=0x7ffc0000 [ 233.621677][ T37] audit: type=1326 audit(1785810898.465:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.2.782" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33452fe019 code=0x7ffc0000 [ 233.622575][ T37] audit: type=1326 audit(1785810898.465:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.2.782" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33452fe019 code=0x7ffc0000 [ 233.622618][ T37] audit: type=1326 audit(1785810898.465:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.2.782" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33452fe019 code=0x7ffc0000 [ 233.622654][ T37] audit: type=1326 audit(1785810898.465:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.2.782" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f33452fe019 code=0x7ffc0000 [ 233.622691][ T37] audit: type=1326 audit(1785810898.465:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.2.782" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33452fe019 code=0x7ffc0000 [ 233.623011][ T37] audit: type=1326 audit(1785810898.465:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.2.782" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f33452fe019 code=0x7ffc0000 [ 233.630213][ T37] audit: type=1326 audit(1785810898.475:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.2.782" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33452fe019 code=0x7ffc0000 [ 233.796855][ T8147] ieee802154 phy0 wpan0: encryption failed: -22 [ 233.933524][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 233.973598][ T10] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 233.973628][ T10] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 233.973642][ T10] usb 1-1: config 0 has no interface number 0 [ 233.973668][ T10] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.973682][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 233.973696][ T10] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 234.006312][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 234.006343][ T10] usb 1-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 234.006362][ T10] usb 1-1: Product: syz [ 234.006376][ T10] usb 1-1: Manufacturer: syz [ 234.083747][ T10] usb 1-1: config 0 descriptor?? [ 234.144591][ T8139] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.881838][ T10] usb 1-1: USB disconnect, device number 15 [ 235.378032][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 235.509585][ T5746] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 235.628954][ T8181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.795'. [ 235.659645][ T5746] usb 2-1: Using ep0 maxpacket: 32 [ 235.661807][ T5746] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 235.664301][ T5746] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 235.664329][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.664350][ T5746] usb 2-1: Product: syz [ 235.664363][ T5746] usb 2-1: Manufacturer: syz [ 235.664378][ T5746] usb 2-1: SerialNumber: syz [ 235.992485][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.992973][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.994807][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.003429][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.011988][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.018751][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.033934][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.034491][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.072143][ T5746] usb 2-1: selecting invalid altsetting 1 [ 236.077455][ T5746] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 236.077596][ T5746] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 236.201013][ T5746] usb 2-1: USB disconnect, device number 18 [ 237.991766][ T5741] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 238.309572][ T5741] usb 2-1: Using ep0 maxpacket: 32 [ 238.331472][ T5741] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 238.331502][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.331522][ T5741] usb 2-1: Product: syz [ 238.331536][ T5741] usb 2-1: Manufacturer: syz [ 238.331550][ T5741] usb 2-1: SerialNumber: syz [ 239.340095][ T5741] usb 2-1: config 0 descriptor?? [ 239.395056][ T5741] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 239.700413][ T8261] netlink: 'syz.4.827': attribute type 5 has an invalid length. [ 239.876453][ T5741] gspca_ov534_9: reg_w failed -71 [ 241.130357][ T8270] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 241.660308][ T5741] gspca_ov534_9: Unknown sensor 0000 [ 241.660401][ T5741] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 241.686252][ T5741] usb 2-1: USB disconnect, device number 19 [ 242.945405][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 242.945433][ T8269] tipc: Enabling of bearer rejected, media not registered [ 243.636460][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.846'. [ 243.716175][ T8314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.074823][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 244.443764][ T8338] bridge0: port 3(gretap0) entered blocking state [ 244.443876][ T8338] bridge0: port 3(gretap0) entered disabled state [ 244.444084][ T8338] gretap0: entered allmulticast mode [ 244.538957][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'. [ 244.588880][ T8338] gretap0: entered promiscuous mode [ 244.619547][ T8338] bridge0: port 3(gretap0) entered blocking state [ 244.619669][ T8338] bridge0: port 3(gretap0) entered forwarding state [ 244.952440][ T8360] program syz.3.865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.952486][ T8360] FAULT_INJECTION: forcing a failure. [ 244.952486][ T8360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.952515][ T8360] CPU: 0 UID: 0 PID: 8360 Comm: syz.3.865 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 244.952558][ T8360] Tainted: [L]=SOFTLOCKUP [ 244.952564][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.952576][ T8360] Call Trace: [ 244.952583][ T8360] [ 244.952591][ T8360] dump_stack_lvl+0xe8/0x150 [ 244.952623][ T8360] should_fail_ex+0x467/0x600 [ 244.952657][ T8360] _copy_from_user+0x2d/0xb0 [ 244.952680][ T8360] scsi_ioctl+0x1893/0x2130 [ 244.952705][ T8360] ? __pfx_scsi_ioctl+0x10/0x10 [ 244.952755][ T8360] ? kasan_quarantine_put+0xbb/0x1f0 [ 244.952782][ T8360] ? tomoyo_path_number_perm+0x219/0x5f0 [ 244.952804][ T8360] ? tomoyo_path_number_perm+0x219/0x5f0 [ 244.952827][ T8360] ? do_vfs_ioctl+0x1184/0x1550 [ 244.952852][ T8360] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 244.952888][ T8360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 244.952910][ T8360] ? hook_file_ioctl+0x1f3/0x600 [ 244.952940][ T8360] sg_ioctl+0x1534/0x21e0 [ 244.952971][ T8360] ? __pfx_smack_file_ioctl+0x10/0x10 [ 244.952991][ T8360] ? __pfx_sg_ioctl+0x10/0x10 [ 244.953022][ T8360] ? __fget_files+0x2a/0x420 [ 244.953041][ T8360] ? __fget_files+0x3a8/0x420 [ 244.953059][ T8360] ? __fget_files+0x2a/0x420 [ 244.953081][ T8360] ? bpf_lsm_file_ioctl+0x9/0x20 [ 244.953100][ T8360] ? __pfx_sg_ioctl+0x10/0x10 [ 244.953123][ T8360] __se_sys_ioctl+0xff/0x170 [ 244.953146][ T8360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.953167][ T8360] do_syscall_64+0x174/0x580 [ 244.953190][ T8360] ? trace_irq_disable+0x3b/0x140 [ 244.953208][ T8360] ? clear_bhb_loop+0x40/0x90 [ 244.953231][ T8360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.953249][ T8360] RIP: 0033:0x7f98857ee019 [ 244.953267][ T8360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.953282][ T8360] RSP: 002b:00007f9883a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.953303][ T8360] RAX: ffffffffffffffda RBX: 00007f9885a75fa0 RCX: 00007f98857ee019 [ 244.953317][ T8360] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 244.953329][ T8360] RBP: 00007f9883a46090 R08: 0000000000000000 R09: 0000000000000000 [ 244.953349][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.953360][ T8360] R13: 00007f9885a76038 R14: 00007f9885a75fa0 R15: 00007fff7f6bd018 [ 244.953391][ T8360] [ 245.630641][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.873'. [ 245.879026][ T8395] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 246.247015][ T8414] FAULT_INJECTION: forcing a failure. [ 246.247015][ T8414] name failslab, interval 1, probability 0, space 0, times 0 [ 246.247052][ T8414] CPU: 0 UID: 0 PID: 8414 Comm: syz.3.885 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 246.247077][ T8414] Tainted: [L]=SOFTLOCKUP [ 246.247084][ T8414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.247095][ T8414] Call Trace: [ 246.247101][ T8414] [ 246.247109][ T8414] dump_stack_lvl+0xe8/0x150 [ 246.247140][ T8414] should_fail_ex+0x467/0x600 [ 246.247236][ T8414] should_failslab+0xa8/0x100 [ 246.247260][ T8414] kmem_cache_alloc_noprof+0xa4/0x650 [ 246.247280][ T8414] ? do_getname+0x2e/0x250 [ 246.247304][ T8414] ? do_getname+0x2e/0x250 [ 246.247330][ T8414] ? rt_mutex_slowunlock+0x219/0x460 [ 246.247353][ T8414] do_getname+0x2e/0x250 [ 246.247375][ T8414] ? getname_flags+0x11/0x20 [ 246.247402][ T8414] do_sys_openat2+0xcc/0x200 [ 246.247424][ T8414] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.247444][ T8414] ? ksys_write+0x248/0x270 [ 246.247466][ T8414] ? __pfx_ksys_write+0x10/0x10 [ 246.247491][ T8414] __x64_sys_openat+0x138/0x170 [ 246.247512][ T8414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.247532][ T8414] do_syscall_64+0x174/0x580 [ 246.247555][ T8414] ? trace_irq_disable+0x3b/0x140 [ 246.247572][ T8414] ? clear_bhb_loop+0x40/0x90 [ 246.247592][ T8414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.247610][ T8414] RIP: 0033:0x7f98857ee019 [ 246.247627][ T8414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.247640][ T8414] RSP: 002b:00007f9883a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.247658][ T8414] RAX: ffffffffffffffda RBX: 00007f9885a75fa0 RCX: 00007f98857ee019 [ 246.247671][ T8414] RDX: 0000000000084000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 246.247684][ T8414] RBP: 00007f9883a46090 R08: 0000000000000000 R09: 0000000000000000 [ 246.247695][ T8414] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 246.247706][ T8414] R13: 00007f9885a76038 R14: 00007f9885a75fa0 R15: 00007fff7f6bd018 [ 246.247733][ T8414] [ 246.612488][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 247.328417][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.900'. [ 247.930426][ T8475] fuse: Bad value for 'group_id' [ 247.930446][ T8475] fuse: Bad value for 'group_id' [ 248.101552][ T8483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.910'. [ 248.142403][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.915'. [ 248.319519][ T5741] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 248.471545][ T5741] usb 1-1: too many configurations: 222, using maximum allowed: 8 [ 248.474770][ T5741] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 248.474805][ T5741] usb 1-1: can't read configurations, error -61 [ 248.610347][ T5741] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 248.750035][ T8512] netlink: 48 bytes leftover after parsing attributes in process `syz.4.927'. [ 248.766434][ T5741] usb 1-1: too many configurations: 222, using maximum allowed: 8 [ 248.774492][ T5741] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 248.774529][ T5741] usb 1-1: can't read configurations, error -61 [ 248.781341][ T5741] usb usb1-port1: attempt power cycle [ 248.859722][ T8516] FAULT_INJECTION: forcing a failure. [ 248.859722][ T8516] name failslab, interval 1, probability 0, space 0, times 0 [ 248.859757][ T8516] CPU: 0 UID: 0 PID: 8516 Comm: syz.2.926 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 248.859782][ T8516] Tainted: [L]=SOFTLOCKUP [ 248.859788][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.859800][ T8516] Call Trace: [ 248.859807][ T8516] [ 248.859814][ T8516] dump_stack_lvl+0xe8/0x150 [ 248.859845][ T8516] should_fail_ex+0x467/0x600 [ 248.859877][ T8516] should_failslab+0xa8/0x100 [ 248.859899][ T8516] kmem_cache_alloc_noprof+0xa4/0x650 [ 248.859919][ T8516] ? skb_clone+0x212/0x3a0 [ 248.859941][ T8516] ? skb_clone+0x212/0x3a0 [ 248.859969][ T8516] skb_clone+0x212/0x3a0 [ 248.859989][ T8516] ? nfnetlink_rcv+0x4b0/0x28d0 [ 248.860014][ T8516] nfnetlink_rcv+0x4e2/0x28d0 [ 248.860033][ T8516] ? __local_bh_enable+0x1e1/0x2f0 [ 248.860063][ T8516] ? lockdep_hardirqs_on+0x7a/0x110 [ 248.860084][ T8516] ? __dev_queue_xmit+0x294/0x3880 [ 248.860108][ T8516] ? __dev_queue_xmit+0x1ee9/0x3880 [ 248.860140][ T8516] ? __dev_queue_xmit+0x294/0x3880 [ 248.860162][ T8516] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 248.860198][ T8516] ? ref_tracker_free+0x668/0x820 [ 248.860219][ T8516] ? __pfx_ref_tracker_free+0x10/0x10 [ 248.860237][ T8516] ? __asan_memcpy+0x40/0x70 [ 248.860261][ T8516] ? __skb_clone+0x5c/0x6c0 [ 248.860287][ T8516] ? __skb_clone+0x449/0x6c0 [ 248.860315][ T8516] ? skb_clone+0x246/0x3a0 [ 248.860341][ T8516] ? __netlink_deliver_tap+0x811/0x860 [ 248.860363][ T8516] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.860398][ T8516] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.860419][ T8516] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.860445][ T8516] netlink_unicast+0x7f5/0x990 [ 248.860474][ T8516] netlink_sendmsg+0x813/0xb40 [ 248.860504][ T8516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.860529][ T8516] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 248.860557][ T8516] ? __kernel_text_address+0xd/0x30 [ 248.860575][ T8516] ? unwind_get_return_address+0x4d/0x90 [ 248.860599][ T8516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.860621][ T8516] sock_sendmsg_nosec+0x13a/0x180 [ 248.860651][ T8516] ____sys_sendmsg+0x565/0x870 [ 248.860677][ T8516] ? __might_fault+0xaf/0x130 [ 248.860704][ T8516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.860735][ T8516] ? import_iovec+0x73/0xa0 [ 248.860769][ T8516] ___sys_sendmsg+0x2a5/0x360 [ 248.860791][ T8516] ? __lock_acquire+0x683/0x2ce0 [ 248.860814][ T8516] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.860871][ T8516] ? __fget_files+0x2a/0x420 [ 248.860889][ T8516] ? __fget_files+0x3a8/0x420 [ 248.860918][ T8516] __x64_sys_sendmsg+0x1b7/0x290 [ 248.860943][ T8516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.860983][ T8516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.861004][ T8516] do_syscall_64+0x174/0x580 [ 248.861027][ T8516] ? trace_irq_disable+0x3b/0x140 [ 248.861046][ T8516] ? clear_bhb_loop+0x40/0x90 [ 248.861068][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.861086][ T8516] RIP: 0033:0x7f33452fe019 [ 248.861103][ T8516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.861118][ T8516] RSP: 002b:00007f3343556028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.861138][ T8516] RAX: ffffffffffffffda RBX: 00007f3345585fa0 RCX: 00007f33452fe019 [ 248.861152][ T8516] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 248.861164][ T8516] RBP: 00007f3343556090 R08: 0000000000000000 R09: 0000000000000000 [ 248.861176][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.861188][ T8516] R13: 00007f3345586038 R14: 00007f3345585fa0 R15: 00007fff2951ce08 [ 248.861218][ T8516] [ 249.192103][ T5741] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 249.211779][ T5741] usb 1-1: too many configurations: 222, using maximum allowed: 8 [ 249.215960][ T5741] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 249.215994][ T5741] usb 1-1: can't read configurations, error -61 [ 249.382380][ T5741] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 249.412374][ T5741] usb 1-1: too many configurations: 222, using maximum allowed: 8 [ 249.419737][ T5741] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 249.419772][ T5741] usb 1-1: can't read configurations, error -61 [ 249.423329][ T5741] usb usb1-port1: unable to enumerate USB device [ 250.479126][ T8547] netlink: 48 bytes leftover after parsing attributes in process `syz.1.941'. [ 250.791266][ T8556] FAULT_INJECTION: forcing a failure. [ 250.791266][ T8556] name failslab, interval 1, probability 0, space 0, times 0 [ 250.791302][ T8556] CPU: 1 UID: 0 PID: 8556 Comm: syz.2.945 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 250.791328][ T8556] Tainted: [L]=SOFTLOCKUP [ 250.791334][ T8556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.791344][ T8556] Call Trace: [ 250.791351][ T8556] [ 250.791359][ T8556] dump_stack_lvl+0xe8/0x150 [ 250.791390][ T8556] should_fail_ex+0x467/0x600 [ 250.791423][ T8556] should_failslab+0xa8/0x100 [ 250.791448][ T8556] __kmalloc_noprof+0xfe/0x780 [ 250.791467][ T8556] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 250.791489][ T8556] ? tomoyo_encode+0x2ad/0x570 [ 250.791510][ T8556] ? tomoyo_encode+0x2ad/0x570 [ 250.791539][ T8556] tomoyo_encode+0x2ad/0x570 [ 250.791573][ T8556] tomoyo_mount_permission+0x3a4/0x9e0 [ 250.791595][ T8556] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 250.791621][ T8556] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 250.791640][ T8556] ? kasan_save_track+0x4f/0x80 [ 250.791713][ T8556] ? kasan_quarantine_put+0xbb/0x1f0 [ 250.791735][ T8556] security_sb_mount+0xe4/0x320 [ 250.791764][ T8556] path_mount+0xbc/0x1040 [ 250.791788][ T8556] ? user_path_at+0xd4/0x160 [ 250.791812][ T8556] __se_sys_mount+0x31d/0x420 [ 250.791837][ T8556] ? __pfx___se_sys_mount+0x10/0x10 [ 250.791864][ T8556] ? __x64_sys_mount+0x20/0xc0 [ 250.791882][ T8556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.791902][ T8556] do_syscall_64+0x174/0x580 [ 250.791925][ T8556] ? trace_irq_disable+0x3b/0x140 [ 250.791944][ T8556] ? clear_bhb_loop+0x40/0x90 [ 250.791967][ T8556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.791984][ T8556] RIP: 0033:0x7f33452fe019 [ 250.792002][ T8556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.792018][ T8556] RSP: 002b:00007f3343556028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.792038][ T8556] RAX: ffffffffffffffda RBX: 00007f3345585fa0 RCX: 00007f33452fe019 [ 250.792051][ T8556] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000 [ 250.792064][ T8556] RBP: 00007f3343556090 R08: 0000000000000000 R09: 0000000000000000 [ 250.792075][ T8556] R10: 00000000008b7840 R11: 0000000000000246 R12: 0000000000000001 [ 250.792086][ T8556] R13: 00007f3345586038 R14: 00007f3345585fa0 R15: 00007fff2951ce08 [ 250.792121][ T8556] [ 250.958037][ T8558] FAULT_INJECTION: forcing a failure. [ 250.958037][ T8558] name failslab, interval 1, probability 0, space 0, times 0 [ 250.958079][ T8558] CPU: 1 UID: 0 PID: 8558 Comm: syz.3.947 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 250.958108][ T8558] Tainted: [L]=SOFTLOCKUP [ 250.958114][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.958126][ T8558] Call Trace: [ 250.958133][ T8558] [ 250.958141][ T8558] dump_stack_lvl+0xe8/0x150 [ 250.958172][ T8558] should_fail_ex+0x467/0x600 [ 250.958205][ T8558] should_failslab+0xa8/0x100 [ 250.958228][ T8558] __kmalloc_noprof+0xfe/0x780 [ 250.958249][ T8558] ? security_task_alloc+0x4d/0x330 [ 250.958289][ T8558] ? security_task_alloc+0x4d/0x330 [ 250.958310][ T8558] ? copy_process+0xd3c/0x4390 [ 250.958336][ T8558] security_task_alloc+0x4d/0x330 [ 250.958359][ T8558] ? copy_process+0xd3c/0x4390 [ 250.958379][ T8558] copy_process+0x1c4d/0x4390 [ 250.958408][ T8558] ? copy_process+0xd3c/0x4390 [ 250.958447][ T8558] ? __pfx_copy_process+0x10/0x10 [ 250.958481][ T8558] vhost_task_create+0x1f9/0x380 [ 250.958507][ T8558] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 250.958526][ T8558] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 250.958547][ T8558] ? __pfx_vhost_task_create+0x10/0x10 [ 250.958581][ T8558] ? __pfx_vhost_task_fn+0x10/0x10 [ 250.958610][ T8558] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.958633][ T8558] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.958656][ T8558] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 250.958678][ T8558] ? mutex_lock_nested+0x152/0x1d0 [ 250.958695][ T8558] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 250.958720][ T8558] kvm_mmu_post_init_vm+0x147/0x2b0 [ 250.958743][ T8558] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 250.958783][ T8558] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 250.958803][ T8558] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.958839][ T8558] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.958861][ T8558] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.958883][ T8558] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 250.958906][ T8558] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 250.958925][ T8558] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.958947][ T8558] ? lock_acquire+0x106/0x350 [ 250.958967][ T8558] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 250.958994][ T8558] ? rt_write_unlock+0x19c/0x360 [ 250.959018][ T8558] ? rt_write_unlock+0x1a8/0x360 [ 250.959039][ T8558] kvm_vcpu_ioctl+0xa64/0xfe0 [ 250.959072][ T8558] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 250.959090][ T8558] ? hook_file_ioctl+0x1f3/0x600 [ 250.959119][ T8558] ? __asan_memset+0x22/0x50 [ 250.959144][ T8558] ? smack_file_ioctl+0x331/0x360 [ 250.959164][ T8558] ? __pfx_smack_file_ioctl+0x10/0x10 [ 250.959193][ T8558] ? __fget_files+0x2a/0x420 [ 250.959212][ T8558] ? __fget_files+0x3a8/0x420 [ 250.959229][ T8558] ? __fget_files+0x2a/0x420 [ 250.959250][ T8558] ? bpf_lsm_file_ioctl+0x9/0x20 [ 250.959267][ T8558] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 250.959287][ T8558] __se_sys_ioctl+0xff/0x170 [ 250.959310][ T8558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.959330][ T8558] do_syscall_64+0x174/0x580 [ 250.959351][ T8558] ? trace_irq_disable+0x3b/0x140 [ 250.959369][ T8558] ? clear_bhb_loop+0x40/0x90 [ 250.959388][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.959405][ T8558] RIP: 0033:0x7f98857ee019 [ 250.959422][ T8558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.959437][ T8558] RSP: 002b:00007f9883a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.959457][ T8558] RAX: ffffffffffffffda RBX: 00007f9885a75fa0 RCX: 00007f98857ee019 [ 250.959470][ T8558] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 250.959481][ T8558] RBP: 00007f9883a46090 R08: 0000000000000000 R09: 0000000000000000 [ 250.959491][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.959502][ T8558] R13: 00007f9885a76038 R14: 00007f9885a75fa0 R15: 00007fff7f6bd018 [ 250.959533][ T8558] [ 251.038420][ T8565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.952'. [ 251.671668][ T8582] lo: entered promiscuous mode [ 251.692151][ T8582] tunl0: entered promiscuous mode [ 251.714568][ T8582] gre0: entered promiscuous mode [ 251.815618][ T8587] netlink: 48 bytes leftover after parsing attributes in process `syz.2.960'. [ 251.855879][ T8582] bridge0: port 3(gretap0) entered disabled state [ 251.908329][ T8582] erspan0: entered promiscuous mode [ 251.919888][ T8582] ip_vti0: entered promiscuous mode [ 251.923584][ T8582] ip6_vti0: entered promiscuous mode [ 251.947423][ T8582] sit0: entered promiscuous mode [ 251.981010][ T8582] ip6tnl0: entered promiscuous mode [ 251.999977][ T8582] ip6gre0: entered promiscuous mode [ 252.043627][ T8582] syz_tun: entered promiscuous mode [ 252.113497][ T8582] ip6gretap0: entered promiscuous mode [ 252.149008][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.215609][ T8582] bridge0: port 1(1x9) entered disabled state [ 252.235807][ T8582] bridge0: entered promiscuous mode [ 252.280422][ T8582] bond0: entered promiscuous mode [ 252.280446][ T8582] bond_slave_0: entered promiscuous mode [ 252.280616][ T8582] bond_slave_1: entered promiscuous mode [ 252.362802][ T8582] team0: entered promiscuous mode [ 252.363546][ T8582] team_slave_0: entered promiscuous mode [ 252.363785][ T8582] team_slave_1: entered promiscuous mode [ 252.566312][ T8582] dummy0: entered promiscuous mode [ 252.628006][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.968'. [ 252.686154][ T8609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.968'. [ 252.709565][ T8582] nlmon0: entered promiscuous mode [ 252.714861][ T8582] batadv0: entered promiscuous mode [ 252.732570][ T8582] vxcan0: entered promiscuous mode [ 252.734021][ T8582] vxcan1: entered promiscuous mode [ 252.735321][ T8582] veth0: entered promiscuous mode [ 252.738893][ T8582] veth1: entered promiscuous mode [ 252.777486][ T8582] wg0: entered promiscuous mode [ 252.810590][ T8582] wg1: entered promiscuous mode [ 252.865514][ T8582] wg2: entered promiscuous mode [ 252.868412][ T8582] veth0_to_bridge: entered promiscuous mode [ 252.897923][ T8582] veth1_to_bridge: entered promiscuous mode [ 252.917150][ T8582] veth0_to_bond: entered promiscuous mode [ 252.924880][ T8582] veth1_to_bond: entered promiscuous mode [ 252.935870][ T8582] veth0_to_team: entered promiscuous mode [ 252.943108][ T8582] veth1_to_team: entered promiscuous mode [ 252.962248][ T8582] veth0_to_batadv: entered promiscuous mode [ 252.968903][ T8582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.968957][ T8582] batadv_slave_0: entered promiscuous mode [ 252.993529][ T8582] veth1_to_batadv: entered promiscuous mode [ 252.997898][ T8582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.997980][ T8582] batadv_slave_1: entered promiscuous mode [ 253.028715][ T8582] xfrm0: entered promiscuous mode [ 253.038259][ T8582] veth0_to_hsr: entered promiscuous mode [ 253.053838][ T8582] veth1_to_hsr: entered promiscuous mode [ 253.087387][ T8582] hsr0: entered promiscuous mode [ 253.103170][ T8582] veth1_virt_wifi: entered promiscuous mode [ 253.107387][ T8582] veth0_virt_wifi: entered promiscuous mode [ 253.134215][ T8582] virt_wifi0: entered promiscuous mode [ 253.174864][ T8582] vlan0: entered promiscuous mode [ 253.186106][ T8582] vlan1: entered promiscuous mode [ 253.235483][ T8582] macvlan0: entered promiscuous mode [ 253.289642][ T8582] macvlan1: entered promiscuous mode [ 253.308700][ T8582] ipvlan0: entered promiscuous mode [ 253.308925][ T8582] ipvlan1: entered promiscuous mode [ 253.420797][ T8582] macvtap0: entered promiscuous mode [ 253.437282][ T8582] macsec0: entered promiscuous mode [ 253.446989][ T8582] geneve0: entered promiscuous mode [ 253.459363][ T8582] geneve1: entered promiscuous mode [ 253.575798][ T8582] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 253.679643][ T8582] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 253.769809][ T8582] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 253.829716][ T8582] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 254.020535][ T8582] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 254.164984][ T8582] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 254.173413][ T8582] bridge1: entered promiscuous mode [ 254.179311][ T8608] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 254.270009][ T163] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.270059][ T163] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.270093][ T163] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.270126][ T163] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.257557][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.257600][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.357109][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.986'. [ 256.413677][ T8666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.986'. [ 256.481126][ T8663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.974822][ T8686] mmap: syz.1.995 (8686) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 257.117318][ T8694] FAULT_INJECTION: forcing a failure. [ 257.117318][ T8694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.117354][ T8694] CPU: 1 UID: 0 PID: 8694 Comm: syz.2.997 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 257.117380][ T8694] Tainted: [L]=SOFTLOCKUP [ 257.117386][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.117397][ T8694] Call Trace: [ 257.117404][ T8694] [ 257.117412][ T8694] dump_stack_lvl+0xe8/0x150 [ 257.117444][ T8694] should_fail_ex+0x467/0x600 [ 257.117477][ T8694] strncpy_from_user+0x36/0x2c0 [ 257.117509][ T8694] path_setxattrat+0x191/0x450 [ 257.117542][ T8694] ? __pfx_path_setxattrat+0x10/0x10 [ 257.117589][ T8694] ? ksys_write+0x248/0x270 [ 257.117633][ T8694] ? __pfx_ksys_write+0x10/0x10 [ 257.117660][ T8694] __x64_sys_lsetxattr+0xbf/0xe0 [ 257.117682][ T8694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.117703][ T8694] do_syscall_64+0x174/0x580 [ 257.117726][ T8694] ? trace_irq_disable+0x3b/0x140 [ 257.117745][ T8694] ? clear_bhb_loop+0x40/0x90 [ 257.117767][ T8694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.117785][ T8694] RIP: 0033:0x7f33452fe019 [ 257.117802][ T8694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.117817][ T8694] RSP: 002b:00007f3343535028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 257.117837][ T8694] RAX: ffffffffffffffda RBX: 00007f3345586090 RCX: 00007f33452fe019 [ 257.117851][ T8694] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 257.117863][ T8694] RBP: 00007f3343535090 R08: 0000000000000002 R09: 0000000000000000 [ 257.117875][ T8694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.117886][ T8694] R13: 00007f3345586128 R14: 00007f3345586090 R15: 00007fff2951ce08 [ 257.117916][ T8694] [ 257.430786][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1000'. [ 257.444293][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1001'. [ 257.484535][ T8707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1000'. [ 257.541991][ T8701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.294195][ T8724] fuse: Unknown parameter '' [ 259.077258][ T8737] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1011'. [ 259.125015][ T8737] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1011'. [ 259.232442][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'. [ 259.600047][ T8749] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1014'. [ 260.163468][ T8744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.661098][ T8756] FAULT_INJECTION: forcing a failure. [ 261.661098][ T8756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.661132][ T8756] CPU: 1 UID: 0 PID: 8756 Comm: syz.3.1019 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 261.661158][ T8756] Tainted: [L]=SOFTLOCKUP [ 261.661164][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.661176][ T8756] Call Trace: [ 261.661183][ T8756] [ 261.661191][ T8756] dump_stack_lvl+0xe8/0x150 [ 261.661223][ T8756] should_fail_ex+0x467/0x600 [ 261.661255][ T8756] _copy_to_user+0x31/0xb0 [ 261.661280][ T8756] simple_read_from_buffer+0xe1/0x170 [ 261.661306][ T8756] proc_fail_nth_read+0x1be/0x230 [ 261.661330][ T8756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.661354][ T8756] ? rw_verify_area+0x250/0x4d0 [ 261.661378][ T8756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.661397][ T8756] vfs_read+0x219/0xa90 [ 261.661426][ T8756] ? __pfx_vfs_read+0x10/0x10 [ 261.661451][ T8756] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 261.661475][ T8756] ? lockdep_hardirqs_on+0x7a/0x110 [ 261.661498][ T8756] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 261.661521][ T8756] ? mutex_lock_nested+0x152/0x1d0 [ 261.661539][ T8756] ? fdget_pos+0x252/0x320 [ 261.661567][ T8756] ksys_read+0x156/0x270 [ 261.661592][ T8756] ? __pfx_ksys_read+0x10/0x10 [ 261.661623][ T8756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.661643][ T8756] do_syscall_64+0x174/0x580 [ 261.661665][ T8756] ? trace_irq_disable+0x3b/0x140 [ 261.661684][ T8756] ? clear_bhb_loop+0x40/0x90 [ 261.661706][ T8756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.661724][ T8756] RIP: 0033:0x7f98857ae84e [ 261.661741][ T8756] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 261.661757][ T8756] RSP: 002b:00007f9883a45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 261.661776][ T8756] RAX: ffffffffffffffda RBX: 00007f9883a466c0 RCX: 00007f98857ae84e [ 261.661790][ T8756] RDX: 000000000000000f RSI: 00007f9883a460a0 RDI: 0000000000000004 [ 261.661802][ T8756] RBP: 00007f9883a46090 R08: 0000000000000000 R09: 0000000000000000 [ 261.661813][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.661824][ T8756] R13: 00007f9885a76038 R14: 00007f9885a75fa0 R15: 00007fff7f6bd018 [ 261.661856][ T8756] [ 265.869648][ T8801] nfs: Deprecated parameter 'nointr' [ 266.410386][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 266.451519][ T8811] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1034'. [ 269.059623][ T5732] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 269.209523][ T5732] usb 2-1: Using ep0 maxpacket: 32 [ 269.216061][ T5732] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 269.216091][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.216111][ T5732] usb 2-1: Product: syz [ 269.216125][ T5732] usb 2-1: Manufacturer: syz [ 269.216139][ T5732] usb 2-1: SerialNumber: syz [ 269.243139][ T5732] usb 2-1: config 0 descriptor?? [ 269.257374][ T5732] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 269.257478][ T5732] dvb-usb: bulk message failed: -22 (4/0) [ 269.257492][ T5732] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 269.257615][ T5732] dvb-usb: bulk message failed: -22 (5/0) [ 269.257628][ T5732] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 269.276619][ T5732] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.277677][ T5732] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 269.277729][ T5732] usb 2-1: media controller created [ 269.304897][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.585248][ T5732] usb 2-1: selecting invalid altsetting 3 [ 269.585269][ T5732] ttusb2: set interface to alts=3 failed [ 269.681565][ T5732] DVB: Unable to find symbol tda10086_attach() [ 269.681580][ T5732] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 269.683628][ T5732] dvb-usb: bulk message failed: -22 (4/0) [ 269.683646][ T5732] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 269.683789][ T5732] dvb-usb: bulk message failed: -22 (5/0) [ 269.683804][ T5732] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 269.683870][ T5732] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 269.702696][ T5732] usb 2-1: USB disconnect, device number 20 [ 269.912770][ T5732] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 270.009545][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 270.162139][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.162168][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 270.164614][ T31] usb 1-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 270.164633][ T31] usb 1-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 270.164644][ T31] usb 1-1: Product: syz [ 270.164651][ T31] usb 1-1: Manufacturer: syz [ 270.164659][ T31] usb 1-1: SerialNumber: syz [ 270.225629][ T31] usb 1-1: config 0 descriptor?? [ 270.443419][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 270.451344][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 270.679521][ T5711] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 270.919498][ T5711] usb 2-1: device descriptor read/64, error -71 [ 271.127924][ T5732] usb 1-1: USB disconnect, device number 20 [ 271.159659][ T5711] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 271.290148][ T5711] usb 2-1: device descriptor read/64, error -71 [ 271.399862][ T5711] usb usb2-port1: attempt power cycle [ 271.428443][ T8932] FAULT_INJECTION: forcing a failure. [ 271.428443][ T8932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.428466][ T8932] CPU: 0 UID: 0 PID: 8932 Comm: syz.0.1080 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 271.428482][ T8932] Tainted: [L]=SOFTLOCKUP [ 271.428485][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.428492][ T8932] Call Trace: [ 271.428496][ T8932] [ 271.428501][ T8932] dump_stack_lvl+0xe8/0x150 [ 271.428534][ T8932] should_fail_ex+0x467/0x600 [ 271.428565][ T8932] _copy_to_user+0x31/0xb0 [ 271.428589][ T8932] simple_read_from_buffer+0xe1/0x170 [ 271.428613][ T8932] proc_fail_nth_read+0x1be/0x230 [ 271.428638][ T8932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.428661][ T8932] ? rw_verify_area+0x250/0x4d0 [ 271.428677][ T8932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.428688][ T8932] vfs_read+0x219/0xa90 [ 271.428704][ T8932] ? __pfx_vfs_read+0x10/0x10 [ 271.428718][ T8932] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 271.428733][ T8932] ? lockdep_hardirqs_on+0x7a/0x110 [ 271.428745][ T8932] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 271.428758][ T8932] ? mutex_lock_nested+0x152/0x1d0 [ 271.428768][ T8932] ? fdget_pos+0x252/0x320 [ 271.428783][ T8932] ksys_read+0x156/0x270 [ 271.428797][ T8932] ? __pfx_ksys_read+0x10/0x10 [ 271.428813][ T8932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.428832][ T8932] do_syscall_64+0x174/0x580 [ 271.428845][ T8932] ? trace_irq_disable+0x3b/0x140 [ 271.428856][ T8932] ? clear_bhb_loop+0x40/0x90 [ 271.428868][ T8932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.428878][ T8932] RIP: 0033:0x7f7f8940e84e [ 271.428889][ T8932] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 271.428898][ T8932] RSP: 002b:00007f7f87684fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.428910][ T8932] RAX: ffffffffffffffda RBX: 00007f7f876856c0 RCX: 00007f7f8940e84e [ 271.428917][ T8932] RDX: 000000000000000f RSI: 00007f7f876850a0 RDI: 0000000000000004 [ 271.428923][ T8932] RBP: 00007f7f87685090 R08: 0000000000000000 R09: 0000000000000000 [ 271.428930][ T8932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.428936][ T8932] R13: 00007f7f896d6128 R14: 00007f7f896d6090 R15: 00007ffe556ebd08 [ 271.428951][ T8932] [ 271.937976][ T5711] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 271.950963][ T5711] usb 2-1: device descriptor read/8, error -71 [ 272.219556][ T5711] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 272.242196][ T5711] usb 2-1: device descriptor read/8, error -71 [ 272.360934][ T5711] usb usb2-port1: unable to enumerate USB device [ 273.202217][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'. [ 273.202234][ T8968] tipc: Enabling of bearer rejected, media not registered [ 273.323699][ T8972] binder: 8971:8972 ioctl c038943b 2000000008c0 returned -22 [ 273.970967][ T8992] Scaler: ================= START STATUS ================= [ 273.970982][ T8992] Scaler: ================== END STATUS ================== [ 274.590037][ T9003] FAULT_INJECTION: forcing a failure. [ 274.590037][ T9003] name failslab, interval 1, probability 0, space 0, times 0 [ 274.590072][ T9003] CPU: 1 UID: 0 PID: 9003 Comm: syz.1.1106 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 274.590096][ T9003] Tainted: [L]=SOFTLOCKUP [ 274.590102][ T9003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.590112][ T9003] Call Trace: [ 274.590118][ T9003] [ 274.590125][ T9003] dump_stack_lvl+0xe8/0x150 [ 274.590156][ T9003] should_fail_ex+0x467/0x600 [ 274.590187][ T9003] should_failslab+0xa8/0x100 [ 274.590211][ T9003] __kmalloc_node_track_caller_noprof+0x102/0x7c0 [ 274.590232][ T9003] ? argv_split+0x2e/0x400 [ 274.590252][ T9003] ? argv_split+0x2e/0x400 [ 274.590280][ T9003] kstrndup+0x7e/0x160 [ 274.590303][ T9003] ? __pfx___trace_uprobe_create+0x10/0x10 [ 274.590330][ T9003] argv_split+0x2e/0x400 [ 274.590351][ T9003] ? trace_probe_create+0xed/0x130 [ 274.590375][ T9003] ? __pfx___trace_uprobe_create+0x10/0x10 [ 274.590402][ T9003] trace_probe_create+0x94/0x130 [ 274.590426][ T9003] ? __pfx___trace_eprobe_create+0x10/0x10 [ 274.590445][ T9003] ? __pfx_trace_probe_create+0x10/0x10 [ 274.590474][ T9003] ? lockdep_hardirqs_on+0x7a/0x110 [ 274.590498][ T9003] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 274.590521][ T9003] ? mutex_lock_nested+0x152/0x1d0 [ 274.590538][ T9003] ? create_dyn_event+0x7d/0x160 [ 274.590563][ T9003] create_dyn_event+0xb3/0x160 [ 274.590586][ T9003] trace_parse_run_command+0x1f3/0x380 [ 274.590605][ T9003] ? __pfx_create_dyn_event+0x10/0x10 [ 274.590627][ T9003] ? __pfx_dyn_event_write+0x10/0x10 [ 274.590647][ T9003] vfs_write+0x29f/0xbb0 [ 274.590677][ T9003] ? __pfx_vfs_write+0x10/0x10 [ 274.590701][ T9003] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 274.590722][ T9003] ? lockdep_hardirqs_on+0x7a/0x110 [ 274.590742][ T9003] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 274.590765][ T9003] ? mutex_lock_nested+0x152/0x1d0 [ 274.590783][ T9003] ? fdget_pos+0x252/0x320 [ 274.590812][ T9003] ksys_write+0x156/0x270 [ 274.590837][ T9003] ? __pfx_ksys_write+0x10/0x10 [ 274.590869][ T9003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.590889][ T9003] do_syscall_64+0x174/0x580 [ 274.590912][ T9003] ? trace_irq_disable+0x3b/0x140 [ 274.590931][ T9003] ? clear_bhb_loop+0x40/0x90 [ 274.590954][ T9003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.590971][ T9003] RIP: 0033:0x7f6a69dee019 [ 274.590988][ T9003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.591004][ T9003] RSP: 002b:00007f6a68025028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.591023][ T9003] RAX: ffffffffffffffda RBX: 00007f6a6a076090 RCX: 00007f6a69dee019 [ 274.591037][ T9003] RDX: 000000000000000f RSI: 0000200000000100 RDI: 0000000000000006 [ 274.591047][ T9003] RBP: 00007f6a68025090 R08: 0000000000000000 R09: 0000000000000000 [ 274.591057][ T9003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.591068][ T9003] R13: 00007f6a6a076128 R14: 00007f6a6a076090 R15: 00007fff43e0e8d8 [ 274.591097][ T9003] [ 274.847790][ T9011] openvswitch: netlink: IP tunnel dst address not specified [ 275.201801][ T9008] nvme nvme0: failed to connect socket: -111 [ 275.548330][ T9019] program syz.1.1111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.929835][ T9030] SQUASHFS error: Failed to read block 0x0: -5 [ 275.929883][ T9030] unable to read squashfs_super_block [ 277.657017][ T9043] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1118'. [ 278.365441][ T9011] syz.3.1108 (9011): drop_caches: 2 [ 278.758517][ T9062] fuse: Unknown parameter '' [ 279.474671][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1133'. [ 279.493915][ T9082] SQUASHFS error: Failed to read block 0x0: -5 [ 279.493955][ T9082] unable to read squashfs_super_block [ 279.763016][ T9096] fuse: Unknown parameter '' [ 280.169634][ T5732] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 280.319499][ T5732] usb 1-1: Using ep0 maxpacket: 32 [ 280.324376][ T5732] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 280.324406][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.324425][ T5732] usb 1-1: Product: syz [ 280.324439][ T5732] usb 1-1: Manufacturer: syz [ 280.324452][ T5732] usb 1-1: SerialNumber: syz [ 280.328515][ T5732] usb 1-1: config 0 descriptor?? [ 280.373874][ T5732] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 280.373982][ T5732] dvb-usb: bulk message failed: -22 (4/0) [ 280.373997][ T5732] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 280.374117][ T5732] dvb-usb: bulk message failed: -22 (5/0) [ 280.374130][ T5732] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 280.423689][ T5732] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 280.424426][ T5732] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 280.424459][ T5732] usb 1-1: media controller created [ 280.453885][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.483339][ T5732] usb 1-1: selecting invalid altsetting 3 [ 280.483353][ T5732] ttusb2: set interface to alts=3 failed [ 280.528039][ T5732] DVB: Unable to find symbol tda10086_attach() [ 280.528049][ T5732] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 280.528680][ T5732] dvb-usb: bulk message failed: -22 (4/0) [ 280.528693][ T5732] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 280.528757][ T5732] dvb-usb: bulk message failed: -22 (5/0) [ 280.528764][ T5732] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 280.528798][ T5732] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 281.267050][ T9130] fuse: Unknown parameter '' [ 281.380845][ T9134] SQUASHFS error: Failed to read block 0x0: -5 [ 281.380912][ T9134] unable to read squashfs_super_block [ 281.602943][ T9140] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 281.992418][ T9148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1160'. [ 282.167719][ T9154] 9p: Bad value for 'wfdno' [ 282.370641][ T9160] fuse: Unknown parameter '' [ 282.964083][ T5732] usb 1-1: USB disconnect, device number 21 [ 282.982380][ T9173] FAULT_INJECTION: forcing a failure. [ 282.982380][ T9173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.982415][ T9173] CPU: 0 UID: 0 PID: 9173 Comm: syz.3.1171 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 282.982442][ T9173] Tainted: [L]=SOFTLOCKUP [ 282.982448][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.982459][ T9173] Call Trace: [ 282.982467][ T9173] [ 282.982475][ T9173] dump_stack_lvl+0xe8/0x150 [ 282.982507][ T9173] should_fail_ex+0x467/0x600 [ 282.982540][ T9173] _copy_from_iter+0x1d3/0x1660 [ 282.982571][ T9173] ? rcu_is_watching+0x15/0xb0 [ 282.982594][ T9173] ? trace_kmem_cache_alloc+0x29/0xe0 [ 282.982617][ T9173] ? __pfx__copy_from_iter+0x10/0x10 [ 282.982636][ T9173] ? __alloc_skb+0x276/0x7a0 [ 282.982655][ T9173] ? __alloc_skb+0x276/0x7a0 [ 282.982679][ T9173] ? netlink_sendmsg+0x650/0xb40 [ 282.982703][ T9173] ? skb_put+0x112/0x210 [ 282.982726][ T9173] netlink_sendmsg+0x6c0/0xb40 [ 282.982758][ T9173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.982782][ T9173] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 282.982809][ T9173] ? __kernel_text_address+0xd/0x30 [ 282.982827][ T9173] ? unwind_get_return_address+0x4d/0x90 [ 282.982852][ T9173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.982873][ T9173] sock_sendmsg_nosec+0x13a/0x180 [ 282.982902][ T9173] ____sys_sendmsg+0x565/0x870 [ 282.982924][ T9173] ? __might_fault+0xaf/0x130 [ 282.982949][ T9173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.982980][ T9173] ? import_iovec+0x73/0xa0 [ 282.983004][ T9173] ___sys_sendmsg+0x2a5/0x360 [ 282.983026][ T9173] ? __lock_acquire+0x683/0x2ce0 [ 282.983049][ T9173] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.983101][ T9173] ? __fget_files+0x2a/0x420 [ 282.983120][ T9173] ? __fget_files+0x3a8/0x420 [ 282.983148][ T9173] __x64_sys_sendmsg+0x1b7/0x290 [ 282.983173][ T9173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.983213][ T9173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.983232][ T9173] do_syscall_64+0x174/0x580 [ 282.983255][ T9173] ? trace_irq_disable+0x3b/0x140 [ 282.983273][ T9173] ? clear_bhb_loop+0x40/0x90 [ 282.983291][ T9173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.983307][ T9173] RIP: 0033:0x7f98857ee019 [ 282.983325][ T9173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.983339][ T9173] RSP: 002b:00007f9883a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.983359][ T9173] RAX: ffffffffffffffda RBX: 00007f9885a75fa0 RCX: 00007f98857ee019 [ 282.983373][ T9173] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 282.983385][ T9173] RBP: 00007f9883a46090 R08: 0000000000000000 R09: 0000000000000000 [ 282.983396][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.983407][ T9173] R13: 00007f9885a76038 R14: 00007f9885a75fa0 R15: 00007fff7f6bd018 [ 282.983437][ T9173] [ 283.336626][ T5732] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 283.549704][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 283.774832][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 283.821344][ T9189] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1178'. [ 284.561493][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 284.641737][ T9188] fuse: Unknown parameter '' [ 285.042880][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 285.044410][ T9] usb 4-1: config 12 has an invalid interface number: 99 but max is 0 [ 285.044435][ T9] usb 4-1: config 12 has no interface number 0 [ 285.044489][ T9] usb 4-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid wMaxPacketSize 0 [ 285.044512][ T9] usb 4-1: config 12 interface 99 has no altsetting 0 [ 285.048016][ T9] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 285.048044][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.048064][ T9] usb 4-1: Product: syz [ 285.048078][ T9] usb 4-1: Manufacturer: syz [ 285.048093][ T9] usb 4-1: SerialNumber: syz [ 285.725425][ T9202] comedi comedi4: bad chanlist[0]=0x00200000 chan=0 range length=2 [ 285.969307][ T9] usb 4-1: no audio or video endpoints found [ 286.035855][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 286.035872][ T37] audit: type=1326 audit(1785810948.876:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.4.1186" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadcb22e019 code=0x0 [ 286.036124][ T9] usb 4-1: USB disconnect, device number 15 [ 286.666301][ T9223] SQUASHFS error: Failed to read block 0x0: -5 [ 286.666354][ T9223] unable to read squashfs_super_block [ 286.778458][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1189'. [ 286.822286][ T9224] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1189'. [ 287.809629][ T9230] fuse: Unknown parameter '' [ 287.834025][ T9229] FAULT_INJECTION: forcing a failure. [ 287.834025][ T9229] name failslab, interval 1, probability 0, space 0, times 0 [ 287.834061][ T9229] CPU: 0 UID: 0 PID: 9229 Comm: syz.3.1191 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 287.834087][ T9229] Tainted: [L]=SOFTLOCKUP [ 287.834092][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.834102][ T9229] Call Trace: [ 287.834110][ T9229] [ 287.834117][ T9229] dump_stack_lvl+0xe8/0x150 [ 287.834147][ T9229] should_fail_ex+0x467/0x600 [ 287.834178][ T9229] should_failslab+0xa8/0x100 [ 287.834202][ T9229] kmem_cache_alloc_noprof+0xa4/0x650 [ 287.834242][ T9229] ? skb_clone+0x212/0x3a0 [ 287.834265][ T9229] ? skb_clone+0x212/0x3a0 [ 287.834293][ T9229] skb_clone+0x212/0x3a0 [ 287.834318][ T9229] __netlink_deliver_tap+0x413/0x860 [ 287.834354][ T9229] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.834378][ T9229] netlink_deliver_tap+0x19c/0x1b0 [ 287.834401][ T9229] netlink_unicast+0x7b8/0x990 [ 287.834431][ T9229] netlink_sendmsg+0x813/0xb40 [ 287.834462][ T9229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.834486][ T9229] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 287.834513][ T9229] ? __kernel_text_address+0xd/0x30 [ 287.834532][ T9229] ? unwind_get_return_address+0x4d/0x90 [ 287.834554][ T9229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.834575][ T9229] sock_sendmsg_nosec+0x13a/0x180 [ 287.834605][ T9229] ____sys_sendmsg+0x565/0x870 [ 287.834627][ T9229] ? __might_fault+0xaf/0x130 [ 287.834654][ T9229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.834686][ T9229] ? import_iovec+0x73/0xa0 [ 287.834711][ T9229] ___sys_sendmsg+0x2a5/0x360 [ 287.834733][ T9229] ? __lock_acquire+0x683/0x2ce0 [ 287.834756][ T9229] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.834817][ T9229] ? __fget_files+0x2a/0x420 [ 287.834836][ T9229] ? __fget_files+0x3a8/0x420 [ 287.834864][ T9229] __x64_sys_sendmsg+0x1b7/0x290 [ 287.834890][ T9229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.834931][ T9229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.834950][ T9229] do_syscall_64+0x174/0x580 [ 287.834981][ T9229] ? trace_irq_disable+0x3b/0x140 [ 287.834999][ T9229] ? clear_bhb_loop+0x40/0x90 [ 287.835021][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.835040][ T9229] RIP: 0033:0x7f98857ee019 [ 287.835057][ T9229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.835073][ T9229] RSP: 002b:00007f9883a46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.835092][ T9229] RAX: ffffffffffffffda RBX: 00007f9885a75fa0 RCX: 00007f98857ee019 [ 287.835105][ T9229] RDX: 0000000000044054 RSI: 0000200000000000 RDI: 0000000000000003 [ 287.835117][ T9229] RBP: 00007f9883a46090 R08: 0000000000000000 R09: 0000000000000000 [ 287.835128][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.835139][ T9229] R13: 00007f9885a76038 R14: 00007f9885a75fa0 R15: 00007fff7f6bd018 [ 287.835170][ T9229] [ 287.836743][ T9229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1191'. [ 287.836756][ T9212] syz.1.1185 (9212): drop_caches: 2 [ 288.907465][ T9260] fuse: Unknown parameter '' [ 288.918308][ T9261] FAULT_INJECTION: forcing a failure. [ 288.918308][ T9261] name failslab, interval 1, probability 0, space 0, times 0 [ 288.918344][ T9261] CPU: 0 UID: 0 PID: 9261 Comm: syz.1.1206 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 288.918371][ T9261] Tainted: [L]=SOFTLOCKUP [ 288.918377][ T9261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.918387][ T9261] Call Trace: [ 288.918394][ T9261] [ 288.918401][ T9261] dump_stack_lvl+0xe8/0x150 [ 288.918433][ T9261] should_fail_ex+0x467/0x600 [ 288.918464][ T9261] should_failslab+0xa8/0x100 [ 288.918488][ T9261] kmem_cache_alloc_noprof+0xa4/0x650 [ 288.918507][ T9261] ? skb_clone+0x212/0x3a0 [ 288.918532][ T9261] ? skb_clone+0x212/0x3a0 [ 288.918561][ T9261] skb_clone+0x212/0x3a0 [ 288.918587][ T9261] __netlink_deliver_tap+0x413/0x860 [ 288.918619][ T9261] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.918641][ T9261] netlink_deliver_tap+0x19c/0x1b0 [ 288.918664][ T9261] netlink_unicast+0x7b8/0x990 [ 288.918694][ T9261] netlink_sendmsg+0x813/0xb40 [ 288.918719][ T9261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.918742][ T9261] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 288.918768][ T9261] ? __kernel_text_address+0xd/0x30 [ 288.918786][ T9261] ? unwind_get_return_address+0x4d/0x90 [ 288.918809][ T9261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.918830][ T9261] sock_sendmsg_nosec+0x13a/0x180 [ 288.918857][ T9261] ____sys_sendmsg+0x565/0x870 [ 288.918878][ T9261] ? __might_fault+0xaf/0x130 [ 288.918912][ T9261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.918943][ T9261] ? import_iovec+0x73/0xa0 [ 288.918968][ T9261] ___sys_sendmsg+0x2a5/0x360 [ 288.918989][ T9261] ? __lock_acquire+0x683/0x2ce0 [ 288.919013][ T9261] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.919070][ T9261] ? __fget_files+0x2a/0x420 [ 288.919089][ T9261] ? __fget_files+0x3a8/0x420 [ 288.919118][ T9261] __x64_sys_sendmsg+0x1b7/0x290 [ 288.919143][ T9261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.919182][ T9261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.919202][ T9261] do_syscall_64+0x174/0x580 [ 288.919223][ T9261] ? trace_irq_disable+0x3b/0x140 [ 288.919241][ T9261] ? clear_bhb_loop+0x40/0x90 [ 288.919263][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.919280][ T9261] RIP: 0033:0x7f6a69dee019 [ 288.919297][ T9261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.919311][ T9261] RSP: 002b:00007f6a68046028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.919330][ T9261] RAX: ffffffffffffffda RBX: 00007f6a6a075fa0 RCX: 00007f6a69dee019 [ 288.919341][ T9261] RDX: 00000000040080c0 RSI: 0000200000000300 RDI: 0000000000000003 [ 288.919351][ T9261] RBP: 00007f6a68046090 R08: 0000000000000000 R09: 0000000000000000 [ 288.919361][ T9261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.919371][ T9261] R13: 00007f6a6a076038 R14: 00007f6a6a075fa0 R15: 00007fff43e0e8d8 [ 288.919398][ T9261] [ 288.948407][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 289.039847][ T9262] SQUASHFS error: Failed to read block 0x0: -5 [ 289.039906][ T9262] unable to read squashfs_super_block [ 289.482909][ T9275] netlink: 4300 bytes leftover after parsing attributes in process `syz.2.1212'. [ 289.500792][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 289.518212][ T9275] ALSA: mixer_oss: invalid OSS volume '0xffffffffffffffff0x00000000000' [ 289.518224][ T9275] ALSA: mixer_oss: invalid OSS volume 'Bl)^' [ 289.518232][ T9275] ALSA: mixer_oss: invalid OSS volume '' [ 289.518239][ T9275] ALSA: mixer_oss: invalid OSS volume 'NHoҫפi>/@WX~' [ 289.518247][ T9275] ALSA: mixer_oss: invalid OSS volume '=Q`W+4@yE qA' [ 289.518254][ T9275] ALSA: mixer_oss: invalid OSS volume '|y udiq' [ 289.518263][ T9275] ALSA: mixer_oss: invalid OSS volume 'Yͅ|$Q7%rpDX' [ 289.518273][ T9275] ALSA: mixer_oss: invalid OSS volume '' [ 289.518302][ T9275] ALSA: mixer_oss: invalid OSS volume 'f/,xZ<ײFWVP>`}' [ 289.518310][ T9275] ALSA: mixer_oss: invalid OSS volume 'G{`C-J'Q4' [ 289.518320][ T9275] ALSA: mixer_oss: invalid OSS volume 'XhщU\dUJ(' [ 289.518342][ T9275] ALSA: mixer_oss: invalid OSS volume '9,ICx{8493_t' [ 289.518349][ T9275] ALSA: mixer_oss: invalid OSS volume ' eU/0?0)%5_E~}2' [ 289.518369][ T9275] ALSA: mixer_oss: invalid OSS volume ')Ny,N7@R(' [ 289.518377][ T9275] ALSA: mixer_oss: invalid OSS volume 'Y }-CQs6u+#5' [ 289.518390][ T9275] ALSA: mixer_oss: invalid OSS volume 'ق>_)U2?`0d' [ 289.518398][ T9275] ALSA: mixer_oss: invalid OSS volume 'I|J'6Xڇ1h|V' [ 289.518413][ T9275] ALSA: mixer_oss: invalid OSS volume 'v~0mvOM' [ 289.518419][ T9275] ALSA: mixer_oss: invalid OSS volume '}' [ 289.518725][ T9275] ALSA: mixer_oss: invalid OSS volume '#Zp1P,5HA|è$j' [ 289.663435][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 289.663464][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.744822][ T9] usb 2-1: config 0 descriptor?? [ 289.757243][ T9] cp210x 2-1:0.0: cp210x converter detected [ 290.030718][ T9289] fuse: Unknown parameter '' [ 290.163377][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 290.247440][ T9297] FAULT_INJECTION: forcing a failure. [ 290.247440][ T9297] name failslab, interval 1, probability 0, space 0, times 0 [ 290.247502][ T9297] CPU: 1 UID: 0 PID: 9297 Comm: syz.3.1220 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 290.247529][ T9297] Tainted: [L]=SOFTLOCKUP [ 290.247536][ T9297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.247546][ T9297] Call Trace: [ 290.247554][ T9297] [ 290.247561][ T9297] dump_stack_lvl+0xe8/0x150 [ 290.247594][ T9297] should_fail_ex+0x467/0x600 [ 290.247628][ T9297] should_failslab+0xa8/0x100 [ 290.247653][ T9297] kmem_cache_alloc_noprof+0xa4/0x650 [ 290.247671][ T9297] ? irqentry_exit+0x218/0x8f0 [ 290.247694][ T9297] ? sk_prot_alloc+0x57/0x210 [ 290.247716][ T9297] ? sk_prot_alloc+0x57/0x210 [ 290.247744][ T9297] sk_prot_alloc+0x57/0x210 [ 290.247763][ T9297] ? sk_alloc+0x27/0x390 [ 290.247785][ T9297] sk_alloc+0x3a/0x390 [ 290.247810][ T9297] inet6_create+0x81a/0x1280 [ 290.247826][ T9297] ? inet6_create+0x80/0x1280 [ 290.247842][ T9297] __sock_create+0x4b3/0x9d0 [ 290.247865][ T9297] mptcp_subflow_create_socket+0xfd/0x810 [ 290.247889][ T9297] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 290.247917][ T9297] __mptcp_nmpc_sk+0x155/0x790 [ 290.247933][ T9297] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 290.247946][ T9297] ? __pfx___schedule+0x10/0x10 [ 290.247967][ T9297] mptcp_connect+0x6f/0x7a0 [ 290.247988][ T9297] __inet_stream_connect+0x258/0xe00 [ 290.248011][ T9297] ? __pfx___inet_stream_connect+0x10/0x10 [ 290.248031][ T9297] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 290.248052][ T9297] inet_stream_connect+0x66/0xa0 [ 290.248067][ T9297] __sys_connect+0x336/0x470 [ 290.248085][ T9297] ? __pfx___sys_connect+0x10/0x10 [ 290.248109][ T9297] ? __pfx_ksys_write+0x10/0x10 [ 290.248124][ T9297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.248142][ T9297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.248157][ T9297] __x64_sys_connect+0x7a/0x90 [ 290.248173][ T9297] do_syscall_64+0x174/0x580 [ 290.248190][ T9297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.248204][ T9297] ? clear_bhb_loop+0x40/0x90 [ 290.248220][ T9297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.248233][ T9297] RIP: 0033:0x7f98857ee019 [ 290.248247][ T9297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.248258][ T9297] RSP: 002b:00007f9883a04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 290.248274][ T9297] RAX: ffffffffffffffda RBX: 00007f9885a76180 RCX: 00007f98857ee019 [ 290.248284][ T9297] RDX: 000000000000001c RSI: 0000200000000000 RDI: 000000000000000a [ 290.248293][ T9297] RBP: 00007f9883a04090 R08: 0000000000000000 R09: 0000000000000000 [ 290.248302][ T9297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.248310][ T9297] R13: 00007f9885a76218 R14: 00007f9885a76180 R15: 00007fff7f6bd018 [ 290.248333][ T9297] [ 291.155527][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 291.228355][ T5732] usb 2-1: USB disconnect, device number 25 [ 291.279216][ T5732] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 291.505789][ T5732] cp210x 2-1:0.0: device disconnected [ 291.509594][ T9309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.515410][ T9309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.727930][ T9318] SQUASHFS error: Failed to read block 0x0: -5 [ 291.727981][ T9318] unable to read squashfs_super_block [ 293.349937][ T5711] ------------[ cut here ]------------ [ 293.349952][ T5711] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 293.349974][ T5711] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#1: kworker/1:5/5711 [ 293.350013][ T5711] Modules linked in: [ 293.350033][ T5711] CPU: 1 UID: 0 PID: 5711 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 293.350059][ T5711] Tainted: [L]=SOFTLOCKUP [ 293.350066][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.350078][ T5711] Workqueue: events drm_fb_helper_damage_work [ 293.350103][ T5711] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 293.350127][ T5711] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 eb b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 293.350142][ T5711] RSP: 0018:ffffc9000572f7e0 EFLAGS: 00010246 [ 293.350158][ T5711] RAX: 1ffff11004b65000 RBX: 0000000000000000 RCX: 0000000000000000 [ 293.350171][ T5711] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 293.350184][ T5711] RBP: ffffc9000572f8c8 R08: 0000000000000000 R09: 0000000000000000 [ 293.350197][ T5711] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 293.350210][ T5711] R13: ffff888025b28000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 293.350224][ T5711] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 293.350239][ T5711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.350253][ T5711] CR2: 00007f7f87684f88 CR3: 0000000043d14000 CR4: 00000000003526f0 [ 293.350269][ T5711] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 293.350281][ T5711] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 293.350294][ T5711] Call Trace: [ 293.350302][ T5711] [ 293.350314][ T5711] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 293.350336][ T5711] ? rt_spin_unlock+0x157/0x200 [ 293.350356][ T5711] ? __pfx_autoremove_wake_function+0x10/0x10 [ 293.350386][ T5711] ? rt_spin_unlock+0x163/0x200 [ 293.350408][ T5711] ? drm_vblank_get+0x147/0x280 [ 293.350432][ T5711] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 293.350463][ T5711] drm_fb_helper_damage_work+0x6cf/0xf00 [ 293.350495][ T5711] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 293.350539][ T5711] ? process_scheduled_works+0xa20/0x14e0 [ 293.350567][ T5711] ? rcu_is_watching+0x15/0xb0 [ 293.350591][ T5711] ? process_scheduled_works+0xa20/0x14e0 [ 293.350611][ T5711] process_scheduled_works+0xa8e/0x14e0 [ 293.350660][ T5711] ? __pfx_process_scheduled_works+0x10/0x10 [ 293.350689][ T5711] ? assign_work+0x3cf/0x5d0 [ 293.350716][ T5711] worker_thread+0xa47/0xfb0 [ 293.350753][ T5711] ? __kthread_parkme+0x71/0x1f0 [ 293.350786][ T5711] kthread+0x388/0x470 [ 293.350812][ T5711] ? __pfx_worker_thread+0x10/0x10 [ 293.350833][ T5711] ? __pfx_kthread+0x10/0x10 [ 293.350859][ T5711] ret_from_fork+0x514/0xb70 [ 293.350890][ T5711] ? __pfx_ret_from_fork+0x10/0x10 [ 293.350916][ T5711] ? __switch_to+0xc89/0x1420 [ 293.350943][ T5711] ? __pfx_kthread+0x10/0x10 [ 293.350970][ T5711] ret_from_fork_asm+0x1a/0x30 [ 293.351005][ T5711] [ 293.351015][ T5711] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 293.351030][ T5711] CPU: 1 UID: 0 PID: 5711 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 293.351055][ T5711] Tainted: [L]=SOFTLOCKUP [ 293.351061][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.351073][ T5711] Workqueue: events drm_fb_helper_damage_work [ 293.351093][ T5711] Call Trace: [ 293.351101][ T5711] [ 293.351107][ T5711] vpanic+0x56c/0xa60 [ 293.351126][ T5711] ? __pfx__printk+0x10/0x10 [ 293.351148][ T5711] ? __pfx_vpanic+0x10/0x10 [ 293.351164][ T5711] ? is_bpf_text_address+0x292/0x2b0 [ 293.351185][ T5711] ? is_bpf_text_address+0x26/0x2b0 [ 293.351218][ T5711] panic+0xc5/0xd0 [ 293.351235][ T5711] ? __pfx_panic+0x10/0x10 [ 293.351263][ T5711] ? ret_from_fork_asm+0x1a/0x30 [ 293.351285][ T5711] __warn+0x315/0x4c0 [ 293.351302][ T5711] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 293.351328][ T5711] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 293.351349][ T5711] __report_bug+0x276/0x570 [ 293.351378][ T5711] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 293.351404][ T5711] ? __pfx___report_bug+0x10/0x10 [ 293.351437][ T5711] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 293.351467][ T5711] ? lockdep_hardirqs_on+0x7a/0x110 [ 293.351491][ T5711] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 293.351518][ T5711] report_bug_entry+0x19a/0x290 [ 293.351543][ T5711] ? drm_crtc_wait_one_vblank+0x51a/0x560 [ 293.351563][ T5711] ? drm_crtc_wait_one_vblank+0x51f/0x560 [ 293.351584][ T5711] handle_bug+0xce/0x200 [ 293.351611][ T5711] exc_invalid_op+0x1a/0x50 [ 293.351636][ T5711] asm_exc_invalid_op+0x1a/0x20 [ 293.351654][ T5711] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 293.351676][ T5711] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 eb b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 293.351691][ T5711] RSP: 0018:ffffc9000572f7e0 EFLAGS: 00010246 [ 293.351707][ T5711] RAX: 1ffff11004b65000 RBX: 0000000000000000 RCX: 0000000000000000 [ 293.351721][ T5711] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 293.351735][ T5711] RBP: ffffc9000572f8c8 R08: 0000000000000000 R09: 0000000000000000 [ 293.351747][ T5711] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 293.351761][ T5711] R13: ffff888025b28000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 293.351798][ T5711] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 293.351819][ T5711] ? rt_spin_unlock+0x157/0x200 [ 293.351838][ T5711] ? __pfx_autoremove_wake_function+0x10/0x10 [ 293.351868][ T5711] ? rt_spin_unlock+0x163/0x200 [ 293.351890][ T5711] ? drm_vblank_get+0x147/0x280 [ 293.351914][ T5711] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 293.351937][ T5711] drm_fb_helper_damage_work+0x6cf/0xf00 [ 293.351970][ T5711] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 293.352015][ T5711] ? process_scheduled_works+0xa20/0x14e0 [ 293.352043][ T5711] ? rcu_is_watching+0x15/0xb0 [ 293.352067][ T5711] ? process_scheduled_works+0xa20/0x14e0 [ 293.352088][ T5711] process_scheduled_works+0xa8e/0x14e0 [ 293.352136][ T5711] ? __pfx_process_scheduled_works+0x10/0x10 [ 293.352162][ T5711] ? assign_work+0x3cf/0x5d0 [ 293.352188][ T5711] worker_thread+0xa47/0xfb0 [ 293.352225][ T5711] ? __kthread_parkme+0x71/0x1f0 [ 293.352260][ T5711] kthread+0x388/0x470 [ 293.352286][ T5711] ? __pfx_worker_thread+0x10/0x10 [ 293.352307][ T5711] ? __pfx_kthread+0x10/0x10 [ 293.352334][ T5711] ret_from_fork+0x514/0xb70 [ 293.352363][ T5711] ? __pfx_ret_from_fork+0x10/0x10 [ 293.352390][ T5711] ? __switch_to+0xc89/0x1420 [ 293.352416][ T5711] ? __pfx_kthread+0x10/0x10 [ 293.352443][ T5711] ret_from_fork_asm+0x1a/0x30 [ 293.352486][ T5711] [ 293.352789][ T5711] Kernel Offset: disabled