last executing test programs: 1m46.998047504s ago: executing program 1 (id=548): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4008af25, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000183282, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xa096a000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket$nl_rdma(0x10, 0x3, 0x14) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000d40)=[{{&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}], 0x2, 0x2400c0a2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000420001000000000000000000030100000f0000003c00010000112233445566778899aabb86dd4000001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2b670400028004000380"], 0x5c}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400) poll(&(0x7f0000000080)=[{r2, 0x500}, {r5, 0x1040}], 0x2, 0xf) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002d00)=ANY=[@ANYBLOB="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", @ANYBLOB="d03d2221f4e88e1efbfd73d64e6955591554a50e1f841be38fc5fbeae9ee3cad86c4837bc96af8177e88046e2bc37286e98d9a3ab0cbc725191874e25a60", @ANYBLOB="00562653ef2b152c7200"/19, @ANYRESOCT=r4, @ANYRES32], 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f000000"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x38, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x33}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000001c0)=0xa69a, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) 1m43.388398236s ago: executing program 1 (id=557): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3adf}) socket$igmp(0x2, 0x3, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0x1, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x7fffffff, 0xfffffffffffffffd, 0x2, 0x0, 0x3, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x26}, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') (fail_nth: 1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000840)='\n', 0x1) 1m40.595641865s ago: executing program 1 (id=561): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0xa5, &(0x7f0000000140)=""/165}, 0x94) 1m38.023840369s ago: executing program 1 (id=571): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)='0', 0x1}, {&(0x7f00000000c0)='U\th', 0x3}], 0x2, 0x2008000, 0x1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000aff067bdd15d4361a395fb251b0000ecffffff000000000080f2ffffff00000000000080f800008989d07c316bb4a15236cae0f0f54142f36d5f3139c592"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 1m37.569894264s ago: executing program 1 (id=575): ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="000000000a0089cac9a74bdd4234f3d6ade2816cde6744adede54f69446bcae5c9b541a913ac3ef0b3ac16bd29cd2b2c2cac5db865c88fd02848f7cc928ebb8acdf067d417a3365e912915be75c4a9a4ba769e0f560e271c414165fad237b8a2915e3fbefe44ee8116d077973b35b4edd6ab1c84f7"]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) memfd_create(&(0x7f0000000100)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(\x9b\n\xc2k4\x7f\x12\xa9eISOs\x8c\xb4\xe7FeQ\xc6$`\xec\xb7J z\x8d\xba\x83L\x92j_U\xfa\b\xea\xbfbYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe1G\x16n4\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8\xe5\x97\xd9b\xf5\xe3@\xdb9\xf8\xff\xc0\xc2\xb9L\xcdW\f\xfc\xa0\r?\x95\x00\x84\xa9,&\xa9\x818\xf8\xb2\xf9dQ\xc4\x05B\xa4\n\x1a\n\x13\x1b\xbb+xr\xbb\xfe\x15x\x83\xafw3\xb2H\x97\xac\x15qG\x02{\x15\x8a\xc0\x8c3\x05\x82\xdd4\x17\xf2\xf9\x11%}\xbeZ\x8e\x8d#\xebQ\xe1\xf3\xfe:\x04\x9a\xac\xb3.\x02k\x9f0q\xf7\xee]c\x85\x9a\xb6s\x193w[\xec\x89\x9b\xad', 0x3) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) fsopen(&(0x7f0000000040)='msdos\x00', 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) syz_clone3(&(0x7f0000001600)={0x122800800, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0], 0x2}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="d7866143596da4f800000000000000000900020073797a3000000000"], 0x30}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x158, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x30}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40010}, 0x20) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1m31.203069467s ago: executing program 1 (id=591): r0 = socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8800) write$cgroup_pid(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r6, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) 12.647489478s ago: executing program 0 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) chroot(&(0x7f0000000100)='./config/usb_gadget/g1\x00') mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000140)='gadgetfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x396}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000380)={{r0, &(0x7f0000000180)='\x00', 0x4040, &(0x7f00000001c0)={@align=0x7fffffffffffffff, {0x4e7, 0xfffc, 0x8, 0xe}}, 0x7f2, &(0x7f0000000200), &(0x7f0000000240)=0x2}, {[0xf, 0x9, 0x0, 0x6]}, 0x9, 0xd6, &(0x7f0000000280)=""/214}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mount$cgroup(0x0, &(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000040), 0x1006, &(0x7f0000000080)={[{@clone_children}, {}, {@none}, {@none}, {@clone_children}, {@none}], [{@permit_directio}, {@appraise_type}]}) 9.022816042s ago: executing program 0 (id=759): socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) io_uring_setup(0x136a, &(0x7f00000001c0)={0x0, 0xd7e7, 0x40, 0x1, 0xef}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 8.6224132s ago: executing program 0 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3f, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x10, 0x2, 0x0, 0x0, @binary="81555deb70e322dba3c4afe1"}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="7e8bc99c"], 0x20) ptrace(0x10, r3) syz_clone(0x80011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x5c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4004084) 6.698419006s ago: executing program 0 (id=763): syz_io_uring_setup(0x3b87, &(0x7f0000000240)={0x0, 0x9b5, 0x40, 0x23, 0x2bc}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r2], 0x234}}, 0x0) 6.192644351s ago: executing program 3 (id=766): syz_open_dev$swradio(0x0, 0x0, 0x2) mknod(&(0x7f0000000040)='./dev/mtdblock0\x00', 0x8, 0x1000) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./dev/mtdblock0\x00', &(0x7f0000000180)='xfs\x00', 0x0, 0x0) 5.804106234s ago: executing program 3 (id=768): bpf$PROG_LOAD(0x90, &(0x7f0000000080)={0x15, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 5.617558877s ago: executing program 4 (id=769): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x60, 0xff}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x8, 0xffffffffbfffffff, 0xffffffffffffffed, 0x3}, {0x3, 0x0, 0x2, 0xfffbfffffffffffe}, {0xfffffffe, 0x0, 0x796}, 0x1, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74bc}, 0x0, 0x1a0b0}, [@mark={0xc, 0x15, {0x350759}}]}, 0x104}, 0x1, 0x0, 0x0, 0x40040}, 0x8080) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000059000000000800000091111a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 5.519668761s ago: executing program 3 (id=770): r0 = open(&(0x7f0000000040)='./file0\x00', 0x111201, 0xb6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flock(r0, 0x1) 5.165316605s ago: executing program 4 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getgroups(0x6, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xee00, 0xee01]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r4, r5, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000180)=[r2, r5]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000020, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0x40103e05, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) socket$inet6(0x10, 0x2, 0x4) 5.070692178s ago: executing program 2 (id=773): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @sdr={0x34524742, 0x6}}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x800, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x1b, 0x4, "339f020bbc82b38b00000000000000000007090ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe58d147e04d52853bf3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d200", "4f000000dd9d9ac2f63a7ad700", [0x5]}}) 4.369625082s ago: executing program 0 (id=774): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x10000, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000380)={0x0, r4}, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000280)={0x1, "8a6035ceeae3ecc42317afadeeffffffffffff030020518d1a00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000003c0)={0x7, "06000000000000d4c6004734c50a7d0020000000005c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r8, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1000, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2000042, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_any}, {@dfltgid={'dfltgid', 0x3d, r11}}, {@privport}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000040)={"130f2672afa0e0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r9, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"31ecffff1bdb69e2e10700000000000000b24d0000000000770006008abd00", r12}) connect$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) 3.686660967s ago: executing program 2 (id=775): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000000)={0x180a, 0x0, 0x1f, 0x8, 0x0, r1, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0xfba2, r1, &(0x7f0000000080)="cb0b76df41217a6d0573c6", 0xb, 0x9}]) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r7 = msgget$private(0x0, 0x3ac) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgrcv(r7, 0x0, 0x0, 0x2, 0x0) msgsnd(r7, &(0x7f0000000200)=ANY=[], 0x8f, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$IPC_SET(r7, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc9ef}, 0x0, 0x0, 0xd, 0xd3, 0x4, 0x8000000000000000, 0x8, 0x2, 0x1, 0x5}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x72bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x80, 0xcb, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040084) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d00)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x3, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @restrict={0x10, 0x0, 0x0, 0xb, 0x1}, @restrict={0xa}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x55, 0x0, 0x17}, @enum64={0x7, 0x4, 0x0, 0x13, 0x1, 0x3, [{0x6, 0x10, 0x7}, {0x3, 0x3ff}, {0x5, 0x4, 0x1}, {0x8, 0x83, 0x910}]}, @var={0xd, 0x0, 0x0, 0xe, 0x4, 0x1}, @union={0x2, 0x2, 0x0, 0x5, 0x0, 0x46e9, [{0x3, 0x0, 0x5}, {0x8, 0x0, 0x8}]}, @const={0x7}, @union={0x8, 0x1, 0x0, 0x5, 0x0, 0x4, [{0xc, 0x5, 0x53}]}]}, {0x0, [0x2e]}}, &(0x7f0000000d00)=""/4096, 0xef, 0x1000, 0x0, 0xfff, 0x10000, @value=r0}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e00)={0x6, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x73}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x9, 0xa1, &(0x7f0000000340)=""/161, 0x41000, 0x8, '\x00', r6, 0x25, r8, 0x8, &(0x7f0000001d40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001d80)={0x0, 0xf, 0x9, 0xfffffff7}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001dc0)=[{0x5, 0x3, 0x3, 0x8}, {0x3, 0x3, 0xc, 0x3}, {0x4, 0x5, 0x4, 0x1}], 0x10, 0x7e5}, 0x94) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x144, 0x7, 0xa, 0x2, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xde, 0x7, 0x1, 0x0, "7e1f1063d4e168cff1ffe7cd80360097fcdeb7d860e223c35a7bbc76a593db86d92bbb937fa389d497b95b77e46e7e1a34b2fb18bfe7c4403de0cd950d5a12f7d7c4023f7cadaf5b39ca76538d967b035efbd21c083307b0d49418ffb3f83e223b3bb88705d3fa4ec977dc53ed83b72d190c1953fa16e1afb43dd43f39cff30404a39e3f33ce8a756440879c5f81d3c9a5dc917f108bb6eebb5e864b206a3b94966a0f729f833b932d1ad85545206d246a9b72cab46b932df897351ad712ff5fabf783c20376529b4009fe2ce8141897d1ec8efdf81993968ef3"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x10040811}, 0x4040000) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) 3.591184348s ago: executing program 4 (id=776): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x1000000, 0x8, 0x7f}], "44942d"}, @datasec={0x9, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r4 = io_uring_setup(0x136a, &(0x7f00000001c0)={0x0, 0xd7e7, 0x40, 0x1, 0xef}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8046}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000800) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r8, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000009c0)=0x7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3}, 0x94) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {&(0x7f0000000100)="e9c6f7127202b8c4a0ce9e32cf5d023b5fa8329577f94db463bd5f30255537b3bc40f28b4c987df99c9892e0697f7fc5ae3c72bad07d0df4f0cc93cee37cc5018cc0ee6abefc22a31ac641865dc946615434fa25569d6038a044e9bdcb9142b4300b9043c1ced565b2fd9424f45a18011fa80f88b2ddb88775ccd24b96bfb46250dbe0ebfc67c8121922d566f5a2a2cadb67462b70f17b40c8aacdaac40b9335564ae027a513eb6a13ca85ce76d55f341e32d842d6d08eb9813de1023ff2e2339c8d061febe4fc6b1699448d09d7", 0xce}, {&(0x7f0000000240)="ce6245afa4e6b3d42a79ff184bd82864608ccd7c973130a7301b4717581e23a76dd790321f44f2d41c01cb7d6246d4740d4b7a70e0b5c52a920f80d3f0c54e7be39534ea42c8798a4b77a1e6581427bace0388502b3c9363be762734c35ffb5ff767a555d2", 0x65}, {&(0x7f00000002c0)="eb3c06c1a010e65184adfa4355d8fc6d1d016ef7216df25d2ee939e1a9a1c9c359a92f18ff6ef6f86577f8ddee83772c76506df5bb235a385a45b6df1f6b163a1a5bba035c215d5e7bd48200cff1fe21a0f3222fad76c21cad06d46fc426074761db6dc7c90e9759", 0x68}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x4014) 2.915516288s ago: executing program 3 (id=777): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x27dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1a}, @IFLA_BR_STP_STATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 2.648049454s ago: executing program 3 (id=778): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x27dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1a}, @IFLA_BR_STP_STATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 2.414732702s ago: executing program 2 (id=779): socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) io_uring_setup(0x136a, &(0x7f00000001c0)={0x0, 0xd7e7, 0x40, 0x1, 0xef}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r1, 0x0, &(0x7f0000000440)) 1.847068453s ago: executing program 3 (id=780): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x156, 0x0) dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffea9, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) 1.768048456s ago: executing program 0 (id=781): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/vendor\x00', 0x0, 0x0) read(r2, &(0x7f0000001200), 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) r4 = socket(0x3, 0x1, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) r9 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r9, 0x0, &(0x7f0000000240)={0x44, &(0x7f00000008c0)={0x20, 0xb, 0x1, 'g'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) r10 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac620940601001378010202659f7386ec4d11061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b00200007039a0705d1731eabd00000000340007a0a84"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) r11 = io_uring_setup(0x7, 0x0) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x28}}], 0x54, 0x4041480) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000040)={@loopback, 0x19, r12}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom1\x00', 0x800, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) socket$netlink(0x10, 0x3, 0x7) 1.72163794s ago: executing program 2 (id=782): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000340)=@phonet={0x23, 0x1, 0x8}, 0x80, 0x0, 0x5d, 0x0, 0x1a}, 0x0) 1.587547724s ago: executing program 4 (id=783): socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) io_uring_setup(0x136a, &(0x7f00000001c0)={0x0, 0xd7e7, 0x40, 0x1, 0xef}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_setup(0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 1.483908782s ago: executing program 2 (id=784): syz_io_uring_setup(0x3b87, &(0x7f0000000240)={0x0, 0x9b5, 0x40, 0x23, 0x2bc}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r2], 0x234}}, 0x0) 1.385451399s ago: executing program 4 (id=785): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3f, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x10, 0x2, 0x0, 0x0, @binary="81555deb70e322dba3c4afe1"}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r3}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="7e8bc99c"], 0x20) ptrace(0x10, r4) syz_clone(0x80011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x5c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4004084) 1.365927973s ago: executing program 2 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getgroups(0x6, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xee00, 0xee01]) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r5, r6, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000180)=[r3, r6]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000020, 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0x40103e05, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) socket$inet6(0x10, 0x2, 0x4) 0s ago: executing program 4 (id=787): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r4 = dup(r2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x5, &(0x7f0000000140)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000003280)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): ] RSP: 002b:00007fa00dad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.042537][ T6204] RAX: ffffffffffffffda RBX: 00007fa00fb05fa0 RCX: 00007fa00f87e0d9 [ 163.042556][ T6204] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 163.042572][ T6204] RBP: 00007fa00dad6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.042587][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.042601][ T6204] R13: 00007fa00fb06038 R14: 00007fa00fb05fa0 R15: 00007ffcff740c48 [ 163.042640][ T6204] [ 163.103718][ T5715] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 163.132625][ T5715] usb 4-1: device descriptor read/8, error -71 [ 163.261196][ T5715] usb usb4-port1: unable to enumerate USB device [ 163.716922][ T6210] 9p: Bad value for 'wfdno' [ 164.288271][ T6215] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.124'. [ 164.589626][ T6219] netlink: 'syz.4.123': attribute type 2 has an invalid length. [ 165.886480][ T6224] netlink: 'syz.2.124': attribute type 2 has an invalid length. [ 167.346703][ T6225] FAULT_INJECTION: forcing a failure. [ 167.346703][ T6225] name failslab, interval 1, probability 0, space 0, times 0 [ 167.346742][ T6225] CPU: 1 UID: 0 PID: 6225 Comm: syz.0.125 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 167.346772][ T6225] Tainted: [L]=SOFTLOCKUP [ 167.346779][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.346792][ T6225] Call Trace: [ 167.346799][ T6225] [ 167.346809][ T6225] dump_stack_lvl+0xe8/0x150 [ 167.346851][ T6225] should_fail_ex+0x46b/0x600 [ 167.346885][ T6225] should_failslab+0xa8/0x100 [ 167.346916][ T6225] kmem_cache_alloc_node_noprof+0xae/0x670 [ 167.346942][ T6225] ? __alloc_skb+0x1db/0x7a0 [ 167.346972][ T6225] ? __alloc_skb+0x1db/0x7a0 [ 167.347009][ T6225] __alloc_skb+0x1db/0x7a0 [ 167.347054][ T6225] netlink_sendmsg+0x5d4/0xb40 [ 167.347088][ T6225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.347113][ T6225] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 167.347147][ T6225] ? __kernel_text_address+0xd/0x30 [ 167.347168][ T6225] ? unwind_get_return_address+0x4d/0x90 [ 167.347195][ T6225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.347216][ T6225] sock_sendmsg_nosec+0x13a/0x180 [ 167.347248][ T6225] ____sys_sendmsg+0x565/0x870 [ 167.347269][ T6225] ? __might_fault+0xaf/0x130 [ 167.347302][ T6225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.347334][ T6225] ? import_iovec+0x73/0xa0 [ 167.347369][ T6225] ___sys_sendmsg+0x2a5/0x360 [ 167.347390][ T6225] ? __lock_acquire+0x683/0x2ce0 [ 167.347419][ T6225] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.347476][ T6225] ? __fget_files+0x2a/0x420 [ 167.347503][ T6225] ? __fget_files+0x3a8/0x420 [ 167.347540][ T6225] __x64_sys_sendmsg+0x1b7/0x290 [ 167.347566][ T6225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.347612][ T6225] do_syscall_64+0x166/0x520 [ 167.347635][ T6225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.347658][ T6225] ? clear_bhb_loop+0x70/0xc0 [ 167.347686][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.347709][ T6225] RIP: 0033:0x7fa00f87e0d9 [ 167.347729][ T6225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.347747][ T6225] RSP: 002b:00007fa00dad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.347770][ T6225] RAX: ffffffffffffffda RBX: 00007fa00fb05fa0 RCX: 00007fa00f87e0d9 [ 167.347785][ T6225] RDX: 0000000020040840 RSI: 0000200000000080 RDI: 0000000000000003 [ 167.347799][ T6225] RBP: 00007fa00dad6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.347813][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.347826][ T6225] R13: 00007fa00fb06038 R14: 00007fa00fb05fa0 R15: 00007ffcff740c48 [ 167.347859][ T6225] [ 168.322313][ T4900] Bluetooth: hci2: unexpected cc 0x0c25 length: 1 < 3 [ 168.622133][ T6142] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 168.793241][ T6142] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 168.803292][ T6142] usb 2-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.803331][ T6142] usb 2-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 168.803361][ T6142] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.803399][ T6142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.997882][ T6142] usb 2-1: config 0 descriptor?? [ 169.177222][ T6263] netlink: 'syz.4.137': attribute type 2 has an invalid length. [ 171.440997][ T6142] usbhid 2-1:0.0: can't add hid device: -71 [ 171.441130][ T6142] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 171.564657][ T6142] usb 2-1: USB disconnect, device number 3 [ 172.496500][ T6295] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.139'. [ 172.755668][ T6142] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 173.142519][ T6305] netlink: 'syz.4.139': attribute type 2 has an invalid length. [ 173.842612][ T6142] usb 1-1: device descriptor read/64, error -71 [ 174.053342][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 174.053371][ T37] audit: type=1326 audit(1787266166.312:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6297 comm="syz.1.148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe16003e0d9 code=0x0 [ 174.216568][ T6310] netlink: 'syz.3.149': attribute type 2 has an invalid length. [ 175.161738][ T6142] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 175.961855][ T5826] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 176.118845][ T5826] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.119765][ T5826] usb 3-1: not running at top speed; connect to a high speed hub [ 176.119800][ T5826] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 176.129704][ T5826] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 176.162313][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.162342][ T5826] usb 3-1: Product: syz [ 176.162359][ T5826] usb 3-1: Manufacturer: syz [ 176.162375][ T5826] usb 3-1: SerialNumber: syz [ 176.411967][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.419212][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.012471][ T200] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.192871][ T200] usb 5-1: Using ep0 maxpacket: 8 [ 178.199679][ T200] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.199733][ T200] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 178.248117][ T200] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 178.248149][ T200] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 178.248170][ T200] usb 5-1: config 4 has no interface number 0 [ 178.306895][ T200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.306924][ T200] usb 5-1: Product: syz [ 178.307000][ T200] usb 5-1: Manufacturer: syz [ 178.307016][ T200] usb 5-1: SerialNumber: syz [ 178.493899][ T6334] netlink: 48 bytes leftover after parsing attributes in process `syz.1.154'. [ 179.128171][ T5826] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 179.171126][ T5826] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 179.491745][ T127] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 179.611309][ T200] uvcvideo 5-1:4.147: probe with driver uvcvideo failed with error -22 [ 179.641844][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 179.646053][ T127] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 179.702355][ T200] usb 5-1: USB disconnect, device number 5 [ 179.731799][ T5780] udevd[5780]: setting mode of /dev/bus/usb/005/005 to 020664 failed: No such file or directory [ 179.731990][ T5780] udevd[5780]: setting owner of /dev/bus/usb/005/005 to uid=0, gid=0 failed: No such file or directory [ 179.778658][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.778684][ T127] usb 2-1: Product: syz [ 179.778699][ T127] usb 2-1: Manufacturer: syz [ 179.778713][ T127] usb 2-1: SerialNumber: syz [ 179.831527][ T127] usb 2-1: config 0 descriptor?? [ 179.859039][ T5826] usb 3-1: USB disconnect, device number 7 [ 179.911360][ T127] usb 2-1: selecting invalid altsetting 1 [ 179.911381][ T127] technisat-usb2: could not set alternate setting to 0 [ 180.741877][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.337547][ T127] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 181.369228][ T127] usb 2-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 181.369330][ T127] usb 2-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 181.382542][ T6353] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.160'. [ 181.832055][ T6358] netlink: 'syz.2.160': attribute type 2 has an invalid length. [ 183.229013][ T6363] netlink: 'syz.2.161': attribute type 2 has an invalid length. [ 186.145372][ T6370] syzkaller0: entered promiscuous mode [ 186.145398][ T6370] syzkaller0: entered allmulticast mode [ 186.347711][ T6374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.531932][ T4900] Bluetooth: hci1: unexpected cc 0x2024 length: 100 > 1 [ 187.925727][ T6397] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.171'. [ 188.162754][ T6400] binder: 6398:6400 ioctl 541b 0 returned -22 [ 188.245669][ T6403] netlink: 'syz.0.171': attribute type 2 has an invalid length. [ 190.179536][ T37] audit: type=1326 audit(1787266182.442:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.2.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2c995f459 code=0x7ffc0000 [ 190.179587][ T37] audit: type=1326 audit(1787266182.442:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.2.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2c995f459 code=0x7ffc0000 [ 190.179618][ T37] audit: type=1326 audit(1787266182.442:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.2.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2c995f459 code=0x7ffc0000 [ 190.179649][ T37] audit: type=1326 audit(1787266182.442:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.2.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2c995f459 code=0x7ffc0000 [ 190.179680][ T37] audit: type=1326 audit(1787266182.442:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.2.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2c995f459 code=0x7ffc0000 [ 190.179711][ T37] audit: type=1326 audit(1787266182.442:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.2.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2c995f459 code=0x7ffc0000 [ 190.179748][ T37] audit: type=1326 audit(1787266182.442:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.2.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2c995f459 code=0x7ffc0000 [ 190.179779][ T37] audit: type=1326 audit(1787266182.442:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.2.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2c995f459 code=0x7ffc0000 [ 190.179811][ T37] audit: type=1326 audit(1787266182.442:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.2.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2c995f459 code=0x7ffc0000 [ 190.179842][ T37] audit: type=1326 audit(1787266182.442:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.2.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2c995f459 code=0x7ffc0000 [ 192.767483][ T6430] netlink: 'syz.1.181': attribute type 2 has an invalid length. [ 194.956132][ T6444] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.185'. [ 195.493250][ T6452] netlink: 'syz.3.185': attribute type 2 has an invalid length. [ 197.517781][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 198.417800][ T6477] netlink: 'syz.4.193': attribute type 2 has an invalid length. [ 199.081622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 199.151615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 199.211612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 199.281614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 199.351623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 199.411621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 199.481634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 199.930369][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.930441][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.353763][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 202.040937][ T6511] overlayfs: missing 'lowerdir' [ 202.901691][ T5696] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 202.984382][ T6514] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 203.090052][ T5696] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 203.144159][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.144189][ T5696] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.147431][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 203.162108][ T5696] usb 1-1: SerialNumber: syz [ 203.366034][ T6522] netlink: 'syz.1.204': attribute type 2 has an invalid length. [ 204.538586][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 205.791038][ T5696] usb 1-1: 0:2 : does not exist [ 205.791140][ T5696] usb 1-1: unit 5 not found! [ 206.051501][ T6541] netlink: 'syz.0.211': attribute type 2 has an invalid length. [ 207.055545][ T5696] usb 1-1: USB disconnect, device number 7 [ 207.568157][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.960790][ T6569] 9p: Bad value for 'wfdno' [ 209.231391][ T6574] overlayfs: missing 'lowerdir' [ 210.647081][ T6545] macsec1: entered promiscuous mode [ 210.647107][ T6545] virt_wifi0: entered promiscuous mode [ 210.893121][ T6585] netlink: 'syz.4.220': attribute type 2 has an invalid length. [ 214.218998][ T4900] Bluetooth: hci4: unexpected cc 0x2024 length: 100 > 1 [ 214.729656][ T36] bond_slave_0: entered promiscuous mode [ 214.729708][ T36] bond_slave_1: entered promiscuous mode [ 216.229946][ T6615] overlayfs: missing 'lowerdir' [ 218.194899][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.222'. [ 219.040177][ T6633] netlink: 'syz.0.232': attribute type 2 has an invalid length. [ 221.739904][ T5715] bond_slave_0: entered promiscuous mode [ 221.739965][ T5715] bond_slave_1: entered promiscuous mode [ 221.915266][ T6656] FAULT_INJECTION: forcing a failure. [ 221.915266][ T6656] name failslab, interval 1, probability 0, space 0, times 0 [ 221.915307][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: syz.1.240 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 221.915337][ T6656] Tainted: [L]=SOFTLOCKUP [ 221.915345][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.915379][ T6656] Call Trace: [ 221.915388][ T6656] [ 221.915398][ T6656] dump_stack_lvl+0xe8/0x150 [ 221.915438][ T6656] should_fail_ex+0x46b/0x600 [ 221.915474][ T6656] should_failslab+0xa8/0x100 [ 221.915505][ T6656] __kmalloc_noprof+0xfe/0x780 [ 221.915530][ T6656] ? rcu_is_watching+0x16/0xb0 [ 221.915558][ T6656] ? tomoyo_realpath_from_path+0xef/0x640 [ 221.915588][ T6656] ? tomoyo_realpath_from_path+0xef/0x640 [ 221.915628][ T6656] tomoyo_realpath_from_path+0xef/0x640 [ 221.915670][ T6656] ? tomoyo_path_number_perm+0x219/0x5f0 [ 221.915696][ T6656] tomoyo_path_number_perm+0x246/0x5f0 [ 221.915725][ T6656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.915749][ T6656] ? __lock_acquire+0x683/0x2ce0 [ 221.915789][ T6656] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 221.915810][ T6656] ? hook_file_ioctl+0x1f3/0x600 [ 221.915866][ T6656] ? __fget_files+0x2a/0x420 [ 221.915898][ T6656] ? __fget_files+0x2a/0x420 [ 221.915924][ T6656] ? __fget_files+0x3a8/0x420 [ 221.915951][ T6656] ? __fget_files+0x2a/0x420 [ 221.915984][ T6656] security_file_ioctl+0xc3/0x2a0 [ 221.916014][ T6656] __se_sys_ioctl+0x47/0x170 [ 221.916051][ T6656] do_syscall_64+0x166/0x520 [ 221.916073][ T6656] ? trace_irq_disable+0x3b/0x140 [ 221.916095][ T6656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.916119][ T6656] ? clear_bhb_loop+0x70/0xc0 [ 221.916155][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.916177][ T6656] RIP: 0033:0x7fe16003e0d9 [ 221.916195][ T6656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.916212][ T6656] RSP: 002b:00007fe15e296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.916234][ T6656] RAX: ffffffffffffffda RBX: 00007fe1602c5fa0 RCX: 00007fe16003e0d9 [ 221.916250][ T6656] RDX: 0000000000000000 RSI: 00000000400442c9 RDI: 0000000000000003 [ 221.916262][ T6656] RBP: 00007fe15e296090 R08: 0000000000000000 R09: 0000000000000000 [ 221.916275][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.916287][ T6656] R13: 00007fe1602c6038 R14: 00007fe1602c5fa0 R15: 00007ffff53fd4d8 [ 221.916320][ T6656] [ 221.920169][ T6656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.381949][ T6667] overlayfs: missing 'lowerdir' [ 223.191816][ T5595] Bluetooth: hci0: command 0x0406 tx timeout [ 223.192225][ T5595] Bluetooth: hci1: command 0x0406 tx timeout [ 223.208075][ T5595] Bluetooth: hci2: command 0x0406 tx timeout [ 223.250897][ T5595] Bluetooth: hci4: command 0x0406 tx timeout [ 223.713778][ T6678] netlink: 'syz.1.244': attribute type 2 has an invalid length. [ 226.279684][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 226.310267][ T6669] netlink: 204 bytes leftover after parsing attributes in process `syz.0.242'. [ 226.658375][ T6691] capability: warning: `syz.2.248' uses deprecated v2 capabilities in a way that may be insecure [ 226.741815][ T6696] No control pipe specified [ 226.748973][ T36] bond_slave_0: entered promiscuous mode [ 226.749025][ T36] bond_slave_1: entered promiscuous mode [ 226.969215][ T5585] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 227.211717][ T31] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 227.370125][ T31] usb 4-1: No LPM exit latency info found, disabling LPM. [ 227.370174][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.390877][ T31] usb 4-1: config 0 has no interfaces? [ 227.414168][ T31] usb 4-1: string descriptor 0 read error: -22 [ 227.414337][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.445489][ T31] usb 4-1: config 0 descriptor?? [ 229.248075][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.248631][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.343609][ T200] usb 4-1: USB disconnect, device number 7 [ 231.555575][ T6738] No control pipe specified [ 231.662800][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 233.091712][ T200] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 233.189666][ T37] kauditd_printk_skb: 845 callbacks suppressed [ 233.189702][ T37] audit: type=1326 audit(1787266225.452:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.1.272" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16003e0d9 code=0x7ffc0000 [ 233.189756][ T37] audit: type=1326 audit(1787266225.452:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.1.272" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16003e0d9 code=0x7ffc0000 [ 233.190423][ T37] audit: type=1326 audit(1787266225.452:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.1.272" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16003e0d9 code=0x7ffc0000 [ 233.190474][ T37] audit: type=1326 audit(1787266225.452:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.1.272" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16003e0d9 code=0x7ffc0000 [ 233.206535][ T37] audit: type=1326 audit(1787266225.472:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.1.272" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe16003e0d9 code=0x7ffc0000 [ 233.206679][ T37] audit: type=1326 audit(1787266225.472:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.1.272" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16003e0d9 code=0x7ffc0000 [ 233.213507][ T37] audit: type=1326 audit(1787266225.482:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.1.272" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16003e0d9 code=0x7ffc0000 [ 233.213652][ T37] audit: type=1326 audit(1787266225.482:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.1.272" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16003e0d9 code=0x7ffc0000 [ 233.221083][ T37] audit: type=1326 audit(1787266225.472:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.1.272" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16003e0d9 code=0x7ffc0000 [ 233.221222][ T37] audit: type=1326 audit(1787266225.482:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6761 comm="syz.1.272" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fe16003e0d9 code=0x7ffc0000 [ 233.272576][ T200] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 233.277747][ T200] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 233.277775][ T200] usb 3-1: Product: syz [ 233.277792][ T200] usb 3-1: Manufacturer: syz [ 233.277808][ T200] usb 3-1: SerialNumber: syz [ 233.516511][ T200] usb 3-1: config 0 descriptor?? [ 233.589257][ T200] ch341 3-1:0.0: ch341-uart converter detected [ 234.730029][ T6771] loop7: detected capacity change from 0 to 16384 [ 234.851833][ T200] usb 3-1: failed to receive control message: -71 [ 234.851901][ T200] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 234.857788][ T200] usb 3-1: USB disconnect, device number 8 [ 235.029952][ T6774] loop7: detected capacity change from 16384 to 0 [ 235.071373][ T200] ch341 3-1:0.0: device disconnected [ 235.465086][ T6791] netlink: 428 bytes leftover after parsing attributes in process `syz.3.279'. [ 235.465136][ T6791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.279'. [ 235.573504][ T6782] capability: warning: `syz.0.275' uses 32-bit capabilities (legacy support in use) [ 235.576871][ T6796] No control pipe specified [ 236.074170][ T6804] FAULT_INJECTION: forcing a failure. [ 236.074170][ T6804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.074216][ T6804] CPU: 0 UID: 0 PID: 6804 Comm: syz.1.282 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 236.074242][ T6804] Tainted: [L]=SOFTLOCKUP [ 236.074249][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.074267][ T6804] Call Trace: [ 236.074274][ T6804] [ 236.074286][ T6804] dump_stack_lvl+0xe8/0x150 [ 236.074321][ T6804] should_fail_ex+0x46b/0x600 [ 236.074351][ T6804] _copy_to_user+0x31/0xb0 [ 236.074380][ T6804] simple_read_from_buffer+0xe1/0x170 [ 236.074408][ T6804] proc_fail_nth_read+0x1be/0x230 [ 236.074442][ T6804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.074476][ T6804] ? rw_verify_area+0x250/0x4d0 [ 236.074506][ T6804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.074535][ T6804] vfs_read+0x219/0xa90 [ 236.074569][ T6804] ? __pfx_vfs_read+0x10/0x10 [ 236.074594][ T6804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 236.074615][ T6804] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 236.074632][ T6804] ? mutex_lock_nested+0x152/0x1d0 [ 236.074654][ T6804] ? fdget_pos+0x252/0x320 [ 236.074683][ T6804] ksys_read+0x156/0x270 [ 236.074710][ T6804] ? __pfx_ksys_read+0x10/0x10 [ 236.074755][ T6804] do_syscall_64+0x166/0x520 [ 236.074775][ T6804] ? trace_irq_disable+0x3b/0x140 [ 236.074793][ T6804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.074812][ T6804] ? clear_bhb_loop+0x70/0xc0 [ 236.074834][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.074852][ T6804] RIP: 0033:0x7fe15fffe90e [ 236.074870][ T6804] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.074885][ T6804] RSP: 002b:00007fe15e274fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.074904][ T6804] RAX: ffffffffffffffda RBX: 00007fe15e2756c0 RCX: 00007fe15fffe90e [ 236.074917][ T6804] RDX: 000000000000000f RSI: 00007fe15e2750a0 RDI: 0000000000000004 [ 236.074928][ T6804] RBP: 00007fe15e275090 R08: 0000000000000000 R09: 0000000000000000 [ 236.074939][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.074949][ T6804] R13: 00007fe1602c6128 R14: 00007fe1602c6090 R15: 00007ffff53fd4d8 [ 236.074976][ T6804] [ 240.431354][ T6832] netlink: 'syz.1.289': attribute type 2 has an invalid length. [ 243.685144][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 245.038937][ T36] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 245.866295][ T36] usb 1-1: New USB device found, idVendor=05ac, idProduct=aecb, bcdDevice=c4.69 [ 245.884687][ T36] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 245.884719][ T36] usb 1-1: config 0 has no interface number 0 [ 245.884754][ T36] usb 1-1: config 0 interface 196 has no altsetting 0 [ 245.888236][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.888296][ T36] usb 1-1: Product: syz [ 245.888307][ T36] usb 1-1: Manufacturer: syz [ 245.888318][ T36] usb 1-1: SerialNumber: syz [ 245.969966][ T36] usb 1-1: config 0 descriptor?? [ 247.277285][ T127] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 247.430475][ T127] usb 2-1: USB disconnect, device number 4 [ 249.306352][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 249.702884][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 250.354771][ T36] ipheth 1-1:0.196: Unable to find alternate settings interface [ 250.422994][ T36] usb 1-1: USB disconnect, device number 8 [ 252.131767][ T5826] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 252.284392][ T5826] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 252.287308][ T5826] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.287366][ T5826] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.287393][ T5826] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 252.287439][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.730148][ T5826] cxacru 3-1:1.0: cxacru_bind: interface has incorrect endpoints [ 252.730299][ T5826] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 252.914227][ T6933] tmpfs: Bad value for 'mpol' [ 253.735971][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 254.277159][ T5715] usb 3-1: USB disconnect, device number 9 [ 255.159867][ T6950] netlink: 'syz.1.321': attribute type 2 has an invalid length. [ 257.110535][ T6955] FAULT_INJECTION: forcing a failure. [ 257.110535][ T6955] name failslab, interval 1, probability 0, space 0, times 0 [ 257.110575][ T6955] CPU: 1 UID: 0 PID: 6955 Comm: syz.1.322 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 257.110606][ T6955] Tainted: [L]=SOFTLOCKUP [ 257.110614][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.110628][ T6955] Call Trace: [ 257.110636][ T6955] [ 257.110645][ T6955] dump_stack_lvl+0xe8/0x150 [ 257.110683][ T6955] should_fail_ex+0x46b/0x600 [ 257.110720][ T6955] should_failslab+0xa8/0x100 [ 257.110751][ T6955] __kmalloc_noprof+0xfe/0x780 [ 257.110775][ T6955] ? rcu_is_watching+0x16/0xb0 [ 257.110803][ T6955] ? tomoyo_realpath_from_path+0xef/0x640 [ 257.110832][ T6955] ? tomoyo_realpath_from_path+0xef/0x640 [ 257.110872][ T6955] tomoyo_realpath_from_path+0xef/0x640 [ 257.110913][ T6955] ? tomoyo_path_number_perm+0x219/0x5f0 [ 257.110940][ T6955] tomoyo_path_number_perm+0x246/0x5f0 [ 257.110970][ T6955] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 257.110995][ T6955] ? __lock_acquire+0x683/0x2ce0 [ 257.111035][ T6955] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 257.111057][ T6955] ? hook_file_ioctl+0x1f3/0x600 [ 257.111113][ T6955] ? __fget_files+0x2a/0x420 [ 257.111144][ T6955] ? __fget_files+0x2a/0x420 [ 257.111179][ T6955] ? __fget_files+0x3a8/0x420 [ 257.111206][ T6955] ? __fget_files+0x2a/0x420 [ 257.111238][ T6955] security_file_ioctl+0xc3/0x2a0 [ 257.111269][ T6955] __se_sys_ioctl+0x47/0x170 [ 257.111307][ T6955] do_syscall_64+0x166/0x520 [ 257.111329][ T6955] ? trace_irq_disable+0x3b/0x140 [ 257.111351][ T6955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.111375][ T6955] ? clear_bhb_loop+0x70/0xc0 [ 257.111406][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.111429][ T6955] RIP: 0033:0x7fe16003e0d9 [ 257.111449][ T6955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.111468][ T6955] RSP: 002b:00007fe15e296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.111492][ T6955] RAX: ffffffffffffffda RBX: 00007fe1602c5fa0 RCX: 00007fe16003e0d9 [ 257.111508][ T6955] RDX: 0000200000000a00 RSI: 00000000400c4d07 RDI: 0000000000000003 [ 257.111523][ T6955] RBP: 00007fe15e296090 R08: 0000000000000000 R09: 0000000000000000 [ 257.111536][ T6955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.111548][ T6955] R13: 00007fe1602c6038 R14: 00007fe1602c5fa0 R15: 00007ffff53fd4d8 [ 257.111582][ T6955] [ 257.114691][ T6955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 257.114889][ T6955] MTRR 1 not used [ 257.811860][ T5585] Bluetooth: hci0: unexpected cc 0x2024 length: 100 > 1 [ 257.811894][ T5585] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 258.794215][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 259.344630][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 259.937758][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 260.385145][ T6968] bond1 (unregistering): Released all slaves [ 260.671666][ T36] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 260.823754][ T36] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 260.823833][ T36] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 260.825291][ T36] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.825349][ T36] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.825379][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.826806][ T36] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.826863][ T36] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.826894][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.907249][ T36] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.907313][ T36] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.907360][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.938735][ T36] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.938807][ T36] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.938838][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.950984][ T36] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 260.951037][ T36] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 260.951060][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 261.004534][ T36] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.004598][ T36] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.004628][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 261.020727][ T36] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.020799][ T36] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.020830][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 261.068110][ T36] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 261.068164][ T36] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 261.068190][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 261.104136][ T36] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 261.104164][ T36] usb 4-1: Product: syz [ 261.104178][ T36] usb 4-1: Manufacturer: syz [ 261.104192][ T36] usb 4-1: SerialNumber: syz [ 261.182338][ T36] usb 4-1: config 0 descriptor?? [ 261.369841][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.369906][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.738254][ T7013] netlink: 'syz.0.339': attribute type 2 has an invalid length. [ 261.971263][ T36] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 262.475240][ T7010] fuse: Unknown parameter 'f' [ 262.958960][ T5715] usb 4-1: USB disconnect, device number 8 [ 263.009557][ T7023] netlink: 'syz.1.340': attribute type 2 has an invalid length. [ 264.073347][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 264.190637][ T5715] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 264.195290][ T5585] Bluetooth: hci2: unexpected cc 0x2024 length: 100 > 1 [ 264.195326][ T5585] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 265.826912][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 266.397144][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 266.604272][ T7056] FAULT_INJECTION: forcing a failure. [ 266.604272][ T7056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.604315][ T7056] CPU: 0 UID: 0 PID: 7056 Comm: syz.1.352 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 266.604345][ T7056] Tainted: [L]=SOFTLOCKUP [ 266.604354][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.604367][ T7056] Call Trace: [ 266.604375][ T7056] [ 266.604385][ T7056] dump_stack_lvl+0xe8/0x150 [ 266.604423][ T7056] should_fail_ex+0x46b/0x600 [ 266.604460][ T7056] _copy_from_user+0x2d/0xb0 [ 266.604500][ T7056] ___sys_sendmsg+0x1c6/0x360 [ 266.604524][ T7056] ? __lock_acquire+0x683/0x2ce0 [ 266.604554][ T7056] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.604616][ T7056] ? __fget_files+0x2a/0x420 [ 266.604643][ T7056] ? __fget_files+0x3a8/0x420 [ 266.604683][ T7056] __x64_sys_sendmsg+0x1b7/0x290 [ 266.604709][ T7056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.604754][ T7056] do_syscall_64+0x166/0x520 [ 266.604778][ T7056] ? trace_irq_disable+0x3b/0x140 [ 266.604800][ T7056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.604824][ T7056] ? clear_bhb_loop+0x70/0xc0 [ 266.604864][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.604887][ T7056] RIP: 0033:0x7fe16003e0d9 [ 266.604908][ T7056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.604927][ T7056] RSP: 002b:00007fe15e296028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.604950][ T7056] RAX: ffffffffffffffda RBX: 00007fe1602c5fa0 RCX: 00007fe16003e0d9 [ 266.604967][ T7056] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 266.604981][ T7056] RBP: 00007fe15e296090 R08: 0000000000000000 R09: 0000000000000000 [ 266.604998][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.605011][ T7056] R13: 00007fe1602c6038 R14: 00007fe1602c5fa0 R15: 00007ffff53fd4d8 [ 266.605045][ T7056] [ 266.892096][ T7058] ICMPv6: NA: aa:aa:aa:aa:aa:bb advertised our address fe80::aa on syz_tun! [ 266.893209][ T7059] ICMPv6: NA: aa:aa:aa:aa:aa:bb advertised our address fe80::aa on syz_tun! [ 267.436088][ T7069] netlink: 'syz.3.356': attribute type 2 has an invalid length. [ 268.601052][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 269.217285][ T5588] Bluetooth: hci3: command 0x0406 tx timeout [ 269.304015][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 270.647946][ T7087] FAULT_INJECTION: forcing a failure. [ 270.647946][ T7087] name failslab, interval 1, probability 0, space 0, times 0 [ 270.647986][ T7087] CPU: 1 UID: 0 PID: 7087 Comm: syz.1.363 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 270.648017][ T7087] Tainted: [L]=SOFTLOCKUP [ 270.648024][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.648037][ T7087] Call Trace: [ 270.648044][ T7087] [ 270.648054][ T7087] dump_stack_lvl+0xe8/0x150 [ 270.648091][ T7087] should_fail_ex+0x46b/0x600 [ 270.648129][ T7087] should_failslab+0xa8/0x100 [ 270.648160][ T7087] __kmalloc_noprof+0xfe/0x780 [ 270.648184][ T7087] ? vfs_write+0x231/0xbb0 [ 270.648213][ T7087] ? kernfs_fop_write_iter+0x158/0x540 [ 270.648236][ T7087] ? kernfs_fop_write_iter+0x158/0x540 [ 270.648267][ T7087] kernfs_fop_write_iter+0x158/0x540 [ 270.648298][ T7087] vfs_write+0x61e/0xbb0 [ 270.648347][ T7087] ? __pfx_vfs_write+0x10/0x10 [ 270.648381][ T7087] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 270.648410][ T7087] ? mutex_lock_nested+0x152/0x1d0 [ 270.648438][ T7087] ? fdget_pos+0x252/0x320 [ 270.648476][ T7087] ksys_write+0x156/0x270 [ 270.648510][ T7087] ? __pfx_ksys_write+0x10/0x10 [ 270.648552][ T7087] do_syscall_64+0x166/0x520 [ 270.648574][ T7087] ? trace_irq_disable+0x3b/0x140 [ 270.648596][ T7087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.648619][ T7087] ? clear_bhb_loop+0x70/0xc0 [ 270.648649][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.648673][ T7087] RIP: 0033:0x7fe16003e0d9 [ 270.648693][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.648711][ T7087] RSP: 002b:00007fe15e296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.648734][ T7087] RAX: ffffffffffffffda RBX: 00007fe1602c5fa0 RCX: 00007fe16003e0d9 [ 270.648750][ T7087] RDX: 000000000000001f RSI: 00002000000000c0 RDI: 0000000000000003 [ 270.648764][ T7087] RBP: 00007fe15e296090 R08: 0000000000000000 R09: 0000000000000000 [ 270.648777][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.648790][ T7087] R13: 00007fe1602c6038 R14: 00007fe1602c5fa0 R15: 00007ffff53fd4d8 [ 270.648826][ T7087] [ 271.130198][ T7097] netlink: 'syz.3.365': attribute type 2 has an invalid length. [ 273.223423][ T5715] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 273.393737][ T5715] usb 5-1: Using ep0 maxpacket: 8 [ 273.394737][ T5715] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 273.398669][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.398698][ T5715] usb 5-1: config 0 has no interfaces? [ 273.456169][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 273.456200][ T5715] usb 5-1: Product: syz [ 273.456216][ T5715] usb 5-1: Manufacturer: syz [ 273.456233][ T5715] usb 5-1: SerialNumber: syz [ 273.515783][ T5715] usb 5-1: config 0 descriptor?? [ 274.144349][ T36] usb 5-1: USB disconnect, device number 6 [ 274.752296][ T7125] 9p: Bad value for 'wfdno' [ 275.886947][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 276.011700][ T5826] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 276.593642][ T5826] usb 3-1: device descriptor read/64, error -71 [ 276.783064][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 277.006724][ T5826] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 277.496623][ T5826] usb 3-1: device descriptor read/64, error -71 [ 277.604234][ T5826] usb usb3-port1: attempt power cycle [ 280.642053][ T7170] FAULT_INJECTION: forcing a failure. [ 280.642053][ T7170] name failslab, interval 1, probability 0, space 0, times 0 [ 280.642094][ T7170] CPU: 1 UID: 0 PID: 7170 Comm: syz.3.388 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 280.642122][ T7170] Tainted: [L]=SOFTLOCKUP [ 280.642130][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.642142][ T7170] Call Trace: [ 280.642150][ T7170] [ 280.642159][ T7170] dump_stack_lvl+0xe8/0x150 [ 280.642200][ T7170] should_fail_ex+0x46b/0x600 [ 280.642236][ T7170] should_failslab+0xa8/0x100 [ 280.642266][ T7170] __kmalloc_noprof+0xfe/0x780 [ 280.642290][ T7170] ? rcu_is_watching+0x16/0xb0 [ 280.642319][ T7170] ? tomoyo_realpath_from_path+0xef/0x640 [ 280.642348][ T7170] ? tomoyo_realpath_from_path+0xef/0x640 [ 280.642385][ T7170] tomoyo_realpath_from_path+0xef/0x640 [ 280.642425][ T7170] ? tomoyo_path_number_perm+0x219/0x5f0 [ 280.642450][ T7170] tomoyo_path_number_perm+0x246/0x5f0 [ 280.642479][ T7170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 280.642503][ T7170] ? __lock_acquire+0x683/0x2ce0 [ 280.642541][ T7170] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 280.642563][ T7170] ? hook_file_ioctl+0x1f3/0x600 [ 280.642621][ T7170] ? __fget_files+0x2a/0x420 [ 280.642651][ T7170] ? __fget_files+0x2a/0x420 [ 280.642676][ T7170] ? __fget_files+0x3a8/0x420 [ 280.642703][ T7170] ? __fget_files+0x2a/0x420 [ 280.642735][ T7170] security_file_ioctl+0xc3/0x2a0 [ 280.642765][ T7170] __se_sys_ioctl+0x47/0x170 [ 280.642803][ T7170] do_syscall_64+0x166/0x520 [ 280.642825][ T7170] ? trace_irq_disable+0x3b/0x140 [ 280.642857][ T7170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.642880][ T7170] ? clear_bhb_loop+0x70/0xc0 [ 280.642907][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.642930][ T7170] RIP: 0033:0x7fbba0bce0d9 [ 280.642951][ T7170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.642970][ T7170] RSP: 002b:00007fbb9ee26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.642992][ T7170] RAX: ffffffffffffffda RBX: 00007fbba0e55fa0 RCX: 00007fbba0bce0d9 [ 280.643008][ T7170] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 280.643021][ T7170] RBP: 00007fbb9ee26090 R08: 0000000000000000 R09: 0000000000000000 [ 280.643034][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.643047][ T7170] R13: 00007fbba0e56038 R14: 00007fbba0e55fa0 R15: 00007ffebc3ac798 [ 280.643081][ T7170] [ 280.648549][ T7170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 281.226101][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 281.961451][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 283.838149][ T5826] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 283.981710][ T5826] usb 3-1: device descriptor read/64, error -71 [ 284.221755][ T5826] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 284.329437][ T7214] netlink: 'syz.4.402': attribute type 21 has an invalid length. [ 284.364780][ T5826] usb 3-1: device descriptor read/64, error -71 [ 284.473459][ T5826] usb usb3-port1: attempt power cycle [ 284.603536][ T7222] netlink: 'syz.1.403': attribute type 2 has an invalid length. [ 286.259056][ T7233] netlink: 'syz.4.406': attribute type 2 has an invalid length. [ 287.311755][ T5826] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 287.464595][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 287.955977][ T5826] usb 3-1: device descriptor read/8, error -71 [ 288.230114][ T7240] netlink: 'syz.4.408': attribute type 2 has an invalid length. [ 292.507230][ T5585] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 293.292289][ T5688] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 293.495921][ T5688] usb 1-1: No LPM exit latency info found, disabling LPM. [ 293.495970][ T5688] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.498826][ T5688] usb 1-1: config 0 has no interfaces? [ 293.549100][ T5688] usb 1-1: string descriptor 0 read error: -22 [ 293.549274][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.722565][ T5688] usb 1-1: config 0 descriptor?? [ 293.903863][ T7274] netlink: 'syz.3.418': attribute type 2 has an invalid length. [ 294.661693][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.667119][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.714382][ T5590] usb 1-1: USB disconnect, device number 9 [ 295.808294][ T7278] jffs2: notice: (7278) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 298.345418][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 299.482131][ T7299] 9p: Bad value for 'wfdno' [ 299.640034][ T7305] FAULT_INJECTION: forcing a failure. [ 299.640034][ T7305] name failslab, interval 1, probability 0, space 0, times 0 [ 299.640085][ T7305] CPU: 0 UID: 0 PID: 7305 Comm: syz.0.428 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 299.640113][ T7305] Tainted: [L]=SOFTLOCKUP [ 299.640119][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.640130][ T7305] Call Trace: [ 299.640138][ T7305] [ 299.640146][ T7305] dump_stack_lvl+0xe8/0x150 [ 299.640182][ T7305] should_fail_ex+0x46b/0x600 [ 299.640214][ T7305] should_failslab+0xa8/0x100 [ 299.640242][ T7305] __kmalloc_noprof+0xfe/0x780 [ 299.640264][ T7305] ? rcu_is_watching+0x16/0xb0 [ 299.640290][ T7305] ? tomoyo_realpath_from_path+0xef/0x640 [ 299.640317][ T7305] ? tomoyo_realpath_from_path+0xef/0x640 [ 299.640353][ T7305] tomoyo_realpath_from_path+0xef/0x640 [ 299.640391][ T7305] ? tomoyo_path_number_perm+0x219/0x5f0 [ 299.640414][ T7305] tomoyo_path_number_perm+0x246/0x5f0 [ 299.640442][ T7305] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 299.640464][ T7305] ? __lock_acquire+0x683/0x2ce0 [ 299.640499][ T7305] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 299.640520][ T7305] ? hook_file_ioctl+0x1f3/0x600 [ 299.640570][ T7305] ? __fget_files+0x2a/0x420 [ 299.640599][ T7305] ? __fget_files+0x2a/0x420 [ 299.640623][ T7305] ? __fget_files+0x3a8/0x420 [ 299.640646][ T7305] ? __fget_files+0x2a/0x420 [ 299.640675][ T7305] security_file_ioctl+0xc3/0x2a0 [ 299.640701][ T7305] __se_sys_ioctl+0x47/0x170 [ 299.640734][ T7305] do_syscall_64+0x166/0x520 [ 299.640753][ T7305] ? trace_irq_disable+0x3b/0x140 [ 299.640773][ T7305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.640794][ T7305] ? clear_bhb_loop+0x70/0xc0 [ 299.640819][ T7305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.640838][ T7305] RIP: 0033:0x7fa00f87e0d9 [ 299.640857][ T7305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.640873][ T7305] RSP: 002b:00007fa00dad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.640895][ T7305] RAX: ffffffffffffffda RBX: 00007fa00fb05fa0 RCX: 00007fa00f87e0d9 [ 299.640910][ T7305] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 299.640922][ T7305] RBP: 00007fa00dad6090 R08: 0000000000000000 R09: 0000000000000000 [ 299.640934][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.640945][ T7305] R13: 00007fa00fb06038 R14: 00007fa00fb05fa0 R15: 00007ffcff740c48 [ 299.640981][ T7305] [ 299.918913][ T7305] ERROR: Out of memory at tomoyo_realpath_from_path. [ 299.920631][ T7305] input: syz0 as /devices/virtual/input/input6 [ 300.492249][ T7313] binder: 7311:7313 ioctl 541b 0 returned -22 [ 300.576238][ T7316] netlink: 'syz.4.429': attribute type 2 has an invalid length. [ 301.623892][ T37] kauditd_printk_skb: 80 callbacks suppressed [ 301.623910][ T37] audit: type=1326 audit(1787266293.892:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7311 comm="syz.3.431" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbba0b6f459 code=0x7ffc0000 [ 301.623955][ T37] audit: type=1326 audit(1787266293.892:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7311 comm="syz.3.431" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbba0b6f459 code=0x7ffc0000 [ 301.623998][ T37] audit: type=1326 audit(1787266293.892:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7311 comm="syz.3.431" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbba0b6f459 code=0x7ffc0000 [ 301.624041][ T37] audit: type=1326 audit(1787266293.892:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7311 comm="syz.3.431" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbba0b6f459 code=0x7ffc0000 [ 301.624082][ T37] audit: type=1326 audit(1787266293.892:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7311 comm="syz.3.431" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbba0b6f459 code=0x7ffc0000 [ 301.624124][ T37] audit: type=1326 audit(1787266293.892:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7311 comm="syz.3.431" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbba0b6f459 code=0x7ffc0000 [ 301.624165][ T37] audit: type=1326 audit(1787266293.892:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7311 comm="syz.3.431" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbba0b6f459 code=0x7ffc0000 [ 301.624206][ T37] audit: type=1326 audit(1787266293.892:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7311 comm="syz.3.431" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbba0b6f459 code=0x7ffc0000 [ 301.626379][ T37] audit: type=1326 audit(1787266293.892:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7311 comm="syz.3.431" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbba0b6f459 code=0x7ffc0000 [ 301.626686][ T37] audit: type=1326 audit(1787266293.892:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7311 comm="syz.3.431" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbba0b6f459 code=0x7ffc0000 [ 301.922959][ T5588] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 302.392747][ T36] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 302.911853][ T7331] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 302.911877][ T7331] netlink: 244 bytes leftover after parsing attributes in process `syz.0.434'. [ 302.911902][ T7331] NCSI netlink: No device for ifindex 0 [ 303.037750][ T36] usb 5-1: No LPM exit latency info found, disabling LPM. [ 303.037808][ T36] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.038642][ T36] usb 5-1: config 0 has no interfaces? [ 303.044155][ T36] usb 5-1: string descriptor 0 read error: -22 [ 303.044318][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.085887][ T36] usb 5-1: config 0 descriptor?? [ 303.375582][ T7323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.440803][ T7323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.300035][ T5688] usb 5-1: USB disconnect, device number 7 [ 304.640048][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 317.509387][ T5715] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 318.381977][ T7445] tmpfs: Bad value for 'mpol' [ 318.513648][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 318.661718][ T5716] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 319.556111][ T7456] No control pipe specified [ 319.900089][ T5716] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.921879][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.921926][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.921951][ T5716] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.922005][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.976839][ T5716] usb 5-1: config 0 descriptor?? [ 320.078835][ T7464] FAULT_INJECTION: forcing a failure. [ 320.078835][ T7464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 320.078872][ T7464] CPU: 1 UID: 0 PID: 7464 Comm: syz.0.476 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 320.078902][ T7464] Tainted: [L]=SOFTLOCKUP [ 320.078909][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.078921][ T7464] Call Trace: [ 320.078929][ T7464] [ 320.078938][ T7464] dump_stack_lvl+0xe8/0x150 [ 320.078981][ T7464] should_fail_ex+0x46b/0x600 [ 320.079014][ T7464] prepare_alloc_pages+0x223/0x690 [ 320.079046][ T7464] __alloc_frozen_pages_noprof+0x12f/0x380 [ 320.079076][ T7464] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 320.079106][ T7464] ? __pfx_policy_nodemask+0x10/0x10 [ 320.079132][ T7464] ? reacquire_held_locks+0x104/0x190 [ 320.079186][ T7464] alloc_pages_mpol+0xce/0x280 [ 320.079219][ T7464] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 320.079252][ T7464] swap_cache_alloc_folio+0x1ac/0x5a0 [ 320.079304][ T7464] read_swap_cache_async+0xe4/0x210 [ 320.079359][ T7464] ? __pfx_read_swap_cache_async+0x10/0x10 [ 320.079395][ T7464] ? madvise_vma_behavior+0xb82/0x42b0 [ 320.079467][ T7464] madvise_vma_behavior+0x2df9/0x42b0 [ 320.079498][ T7464] ? madvise_vma_behavior+0xb82/0x42b0 [ 320.079546][ T7464] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 320.079592][ T7464] ? rcu_is_watching+0x16/0xb0 [ 320.079621][ T7464] ? trace_sched_exit_tp+0x3a/0x130 [ 320.079644][ T7464] ? __schedule+0x16f5/0x5510 [ 320.079689][ T7464] ? __lock_acquire+0x683/0x2ce0 [ 320.079721][ T7464] ? __lock_acquire+0x683/0x2ce0 [ 320.079750][ T7464] ? __pfx___schedule+0x10/0x10 [ 320.079790][ T7464] ? unwind_next_frame+0x8f/0x2550 [ 320.079823][ T7464] ? is_bpf_text_address+0x26/0x2b0 [ 320.079869][ T7464] ? mas_prev_slot+0xb79/0xc00 [ 320.079929][ T7464] ? __lock_acquire+0x683/0x2ce0 [ 320.079967][ T7464] madvise_walk_vmas+0x576/0xb00 [ 320.080011][ T7464] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 320.080046][ T7464] ? blk_start_plug+0x6e/0x1b0 [ 320.080072][ T7464] madvise_do_behavior+0x385/0x540 [ 320.080108][ T7464] ? __pfx_madvise_do_behavior+0x10/0x10 [ 320.080135][ T7464] ? down_read+0x156/0x200 [ 320.080178][ T7464] do_madvise+0x26f/0x330 [ 320.080224][ T7464] ? __pfx_do_madvise+0x10/0x10 [ 320.080266][ T7464] ? __pfx_ksys_write+0x10/0x10 [ 320.080305][ T7464] __x64_sys_madvise+0xa6/0xc0 [ 320.080337][ T7464] do_syscall_64+0x166/0x520 [ 320.080359][ T7464] ? trace_irq_disable+0x3b/0x140 [ 320.080381][ T7464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.080403][ T7464] ? clear_bhb_loop+0x70/0xc0 [ 320.080430][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.080452][ T7464] RIP: 0033:0x7fa00f87e0d9 [ 320.080473][ T7464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.080491][ T7464] RSP: 002b:00007fa00da94028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 320.080515][ T7464] RAX: ffffffffffffffda RBX: 00007fa00fb06180 RCX: 00007fa00f87e0d9 [ 320.080531][ T7464] RDX: 0000000000000003 RSI: 000000000060005f RDI: 0000200000000000 [ 320.080547][ T7464] RBP: 00007fa00da94090 R08: 0000000000000000 R09: 0000000000000000 [ 320.080560][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.080573][ T7464] R13: 00007fa00fb06218 R14: 00007fa00fb06180 R15: 00007ffcff740c48 [ 320.080608][ T7464] [ 320.443519][ T7465] Illegal XDP return value 4294967282 on prog (id 53) dev N/A, expect packet loss! [ 321.806160][ T7483] ./dev/mtdblock0: Can't lookup blockdev [ 322.797669][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.797743][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.114554][ T5716] usbhid 5-1:0.0: can't add hid device: -71 [ 323.114691][ T5716] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 323.243778][ T5716] usb 5-1: USB disconnect, device number 8 [ 324.212150][ T7499] No control pipe specified [ 324.401300][ T5590] kernel write not supported for file /316/gid_map (pid: 5590 comm: kworker/0:3) [ 326.813625][ T7526] netlink: 428 bytes leftover after parsing attributes in process `syz.1.493'. [ 326.813665][ T7526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.493'. [ 327.471962][ T5716] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 328.674271][ T5716] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 328.675785][ T5716] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 328.675811][ T5716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.675832][ T5716] usb 3-1: config 0 has no interface number 0 [ 328.721018][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.721046][ T5716] usb 3-1: Product: syz [ 328.721062][ T5716] usb 3-1: Manufacturer: syz [ 328.721077][ T5716] usb 3-1: SerialNumber: syz [ 328.803603][ T7546] No control pipe specified [ 328.828275][ T5716] usb 3-1: config 0 descriptor?? [ 328.889427][ T5716] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 329.152939][ T7546] bridge: RTM_NEWNEIGH with invalid ether address [ 330.596794][ T5688] usb 3-1: USB disconnect, device number 18 [ 330.657940][ T7564] netlink: 116 bytes leftover after parsing attributes in process `syz.4.505'. [ 330.829408][ T7566] netlink: 428 bytes leftover after parsing attributes in process `syz.2.506'. [ 330.829443][ T7566] netlink: 32 bytes leftover after parsing attributes in process `syz.2.506'. [ 332.040458][ T7584] binder: 7583:7584 ioctl 541b 0 returned -22 [ 332.151668][ T5715] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 332.256392][ T37] kauditd_printk_skb: 984 callbacks suppressed [ 332.256412][ T37] audit: type=1326 audit(1787266324.522:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.1.513" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe15ffdf459 code=0x7ffc0000 [ 332.256462][ T37] audit: type=1326 audit(1787266324.522:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.1.513" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe15ffdf459 code=0x7ffc0000 [ 332.256511][ T37] audit: type=1326 audit(1787266324.522:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.1.513" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe15ffdf459 code=0x7ffc0000 [ 332.256555][ T37] audit: type=1326 audit(1787266324.522:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.1.513" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe15ffdf459 code=0x7ffc0000 [ 332.256599][ T37] audit: type=1326 audit(1787266324.522:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.1.513" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe15ffdf459 code=0x7ffc0000 [ 332.259641][ T37] audit: type=1326 audit(1787266324.522:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.1.513" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe15ffdf459 code=0x7ffc0000 [ 332.259694][ T37] audit: type=1326 audit(1787266324.522:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.1.513" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe15ffdf459 code=0x7ffc0000 [ 332.259740][ T37] audit: type=1326 audit(1787266324.522:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.1.513" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe15ffdf459 code=0x7ffc0000 [ 332.259786][ T37] audit: type=1326 audit(1787266324.522:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.1.513" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe15ffdf459 code=0x7ffc0000 [ 332.259832][ T37] audit: type=1326 audit(1787266324.522:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7583 comm="syz.1.513" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe15ffdf459 code=0x7ffc0000 [ 332.311973][ T5715] usb 4-1: Using ep0 maxpacket: 8 [ 332.323910][ T5715] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.356231][ T5715] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 332.356378][ T5715] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 332.356445][ T5715] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 332.356511][ T5715] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 332.356577][ T5715] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 332.356635][ T5715] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.356755][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.853126][ T5715] usb 4-1: usb_control_msg returned -32 [ 332.853177][ T5715] usbtmc 4-1:16.0: can't read capabilities [ 332.919889][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 333.079102][ T7596] FAULT_INJECTION: forcing a failure. [ 333.079102][ T7596] name failslab, interval 1, probability 0, space 0, times 0 [ 333.079147][ T7596] CPU: 1 UID: 0 PID: 7596 Comm: syz.4.517 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 333.079179][ T7596] Tainted: [L]=SOFTLOCKUP [ 333.079187][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.079200][ T7596] Call Trace: [ 333.079208][ T7596] [ 333.079218][ T7596] dump_stack_lvl+0xe8/0x150 [ 333.079256][ T7596] should_fail_ex+0x46b/0x600 [ 333.079291][ T7596] should_failslab+0xa8/0x100 [ 333.079322][ T7596] kmem_cache_alloc_noprof+0xa4/0x660 [ 333.079348][ T7596] ? do_getname+0x2e/0x250 [ 333.079370][ T7596] ? do_getname+0x2e/0x250 [ 333.079401][ T7596] do_getname+0x2e/0x250 [ 333.079423][ T7596] ? __se_sys_rmdir+0x12/0x140 [ 333.079449][ T7596] __se_sys_rmdir+0x1e/0x140 [ 333.079474][ T7596] do_syscall_64+0x166/0x520 [ 333.079497][ T7596] ? trace_irq_disable+0x3b/0x140 [ 333.079520][ T7596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.079544][ T7596] ? clear_bhb_loop+0x70/0xc0 [ 333.079572][ T7596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.079595][ T7596] RIP: 0033:0x7fd21427e0d9 [ 333.079616][ T7596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.079635][ T7596] RSP: 002b:00007fd2124d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 333.079659][ T7596] RAX: ffffffffffffffda RBX: 00007fd214505fa0 RCX: 00007fd21427e0d9 [ 333.079676][ T7596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 333.079690][ T7596] RBP: 00007fd2124d6090 R08: 0000000000000000 R09: 0000000000000000 [ 333.079718][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.079731][ T7596] R13: 00007fd214506038 R14: 00007fd214505fa0 R15: 00007fffa1d09628 [ 333.079766][ T7596] [ 333.283993][ T7597] FAULT_INJECTION: forcing a failure. [ 333.283993][ T7597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.284033][ T7597] CPU: 0 UID: 0 PID: 7597 Comm: syz.3.511 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 333.284064][ T7597] Tainted: [L]=SOFTLOCKUP [ 333.284071][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.284084][ T7597] Call Trace: [ 333.284092][ T7597] [ 333.284101][ T7597] dump_stack_lvl+0xe8/0x150 [ 333.284142][ T7597] should_fail_ex+0x46b/0x600 [ 333.284186][ T7597] _copy_to_user+0x31/0xb0 [ 333.284222][ T7597] simple_read_from_buffer+0xe1/0x170 [ 333.284257][ T7597] proc_fail_nth_read+0x1be/0x230 [ 333.284293][ T7597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.284329][ T7597] ? rw_verify_area+0x250/0x4d0 [ 333.284361][ T7597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.284392][ T7597] vfs_read+0x219/0xa90 [ 333.284429][ T7597] ? __pfx_vfs_read+0x10/0x10 [ 333.284461][ T7597] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 333.284487][ T7597] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 333.284509][ T7597] ? mutex_lock_nested+0x152/0x1d0 [ 333.284536][ T7597] ? fdget_pos+0x252/0x320 [ 333.284574][ T7597] ksys_read+0x156/0x270 [ 333.284606][ T7597] ? __pfx_ksys_read+0x10/0x10 [ 333.284649][ T7597] do_syscall_64+0x166/0x520 [ 333.284671][ T7597] ? trace_irq_disable+0x3b/0x140 [ 333.284693][ T7597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.284717][ T7597] ? clear_bhb_loop+0x70/0xc0 [ 333.284745][ T7597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.284768][ T7597] RIP: 0033:0x7fbba0b8e90e [ 333.284788][ T7597] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 333.284808][ T7597] RSP: 002b:00007fbb9ee04fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.284832][ T7597] RAX: ffffffffffffffda RBX: 00007fbb9ee056c0 RCX: 00007fbba0b8e90e [ 333.284849][ T7597] RDX: 000000000000000f RSI: 00007fbb9ee050a0 RDI: 0000000000000004 [ 333.284863][ T7597] RBP: 00007fbb9ee05090 R08: 0000000000000000 R09: 0000000000000000 [ 333.284877][ T7597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.284890][ T7597] R13: 00007fbba0e56128 R14: 00007fbba0e56090 R15: 00007ffebc3ac798 [ 333.284926][ T7597] [ 333.724521][ T5715] usb 4-1: USB disconnect, device number 9 [ 333.853691][ T7600] ======================================================= [ 333.853691][ T7600] WARNING: The mand mount option has been deprecated and [ 333.853691][ T7600] and is ignored by this kernel. Remove the mand [ 333.853691][ T7600] option from the mount to silence this warning. [ 333.853691][ T7600] ======================================================= [ 335.092559][ T7612] FAULT_INJECTION: forcing a failure. [ 335.092559][ T7612] name failslab, interval 1, probability 0, space 0, times 0 [ 335.092602][ T7612] CPU: 0 UID: 0 PID: 7612 Comm: syz.3.522 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 335.092638][ T7612] Tainted: [L]=SOFTLOCKUP [ 335.092646][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.092662][ T7612] Call Trace: [ 335.092670][ T7612] [ 335.092680][ T7612] dump_stack_lvl+0xe8/0x150 [ 335.092724][ T7612] should_fail_ex+0x46b/0x600 [ 335.092765][ T7612] should_failslab+0xa8/0x100 [ 335.092801][ T7612] __kvmalloc_node_noprof+0x17a/0x8a0 [ 335.092838][ T7612] ? cache_write+0xcb/0x210 [ 335.092873][ T7612] ? cache_write+0xcb/0x210 [ 335.092918][ T7612] cache_write+0xcb/0x210 [ 335.092955][ T7612] ? cache_write_procfs+0x26/0x80 [ 335.093009][ T7612] ? __pfx_cache_write_procfs+0x10/0x10 [ 335.093043][ T7612] proc_reg_write+0x1f6/0x2f0 [ 335.093086][ T7612] ? __pfx_proc_reg_write+0x10/0x10 [ 335.093123][ T7612] vfs_write+0x29f/0xbb0 [ 335.093170][ T7612] ? __pfx_vfs_write+0x10/0x10 [ 335.093208][ T7612] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 335.093242][ T7612] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 335.093269][ T7612] ? mutex_lock_nested+0x152/0x1d0 [ 335.093300][ T7612] ? fdget_pos+0x252/0x320 [ 335.093345][ T7612] ksys_write+0x156/0x270 [ 335.093383][ T7612] ? __pfx_ksys_write+0x10/0x10 [ 335.093424][ T7612] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 335.093462][ T7612] do_syscall_64+0x166/0x520 [ 335.093487][ T7612] ? trace_irq_disable+0x3b/0x140 [ 335.093512][ T7612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.093538][ T7612] ? clear_bhb_loop+0x70/0xc0 [ 335.093570][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.093597][ T7612] RIP: 0033:0x7fbba0bce0d9 [ 335.093620][ T7612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.093644][ T7612] RSP: 002b:00007fbb9ee26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 335.093687][ T7612] RAX: ffffffffffffffda RBX: 00007fbba0e55fa0 RCX: 00007fbba0bce0d9 [ 335.093707][ T7612] RDX: 000000000000009d RSI: 0000200000000000 RDI: 0000000000000003 [ 335.093724][ T7612] RBP: 00007fbb9ee26090 R08: 0000000000000000 R09: 0000000000000000 [ 335.093741][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.093757][ T7612] R13: 00007fbba0e56038 R14: 00007fbba0e55fa0 R15: 00007ffebc3ac798 [ 335.093800][ T7612] [ 336.020489][ T5585] Bluetooth: hci1: unexpected event for opcode 0x0024 [ 336.297579][ T7631] FAULT_INJECTION: forcing a failure. [ 336.297579][ T7631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.297619][ T7631] CPU: 1 UID: 0 PID: 7631 Comm: syz.1.530 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 336.297649][ T7631] Tainted: [L]=SOFTLOCKUP [ 336.297657][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.297672][ T7631] Call Trace: [ 336.297680][ T7631] [ 336.297689][ T7631] dump_stack_lvl+0xe8/0x150 [ 336.297726][ T7631] should_fail_ex+0x46b/0x600 [ 336.297761][ T7631] _copy_to_user+0x31/0xb0 [ 336.297796][ T7631] simple_read_from_buffer+0xe1/0x170 [ 336.297830][ T7631] proc_fail_nth_read+0x1be/0x230 [ 336.297864][ T7631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.297899][ T7631] ? rw_verify_area+0x250/0x4d0 [ 336.297930][ T7631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.297960][ T7631] vfs_read+0x219/0xa90 [ 336.297996][ T7631] ? __pfx_vfs_read+0x10/0x10 [ 336.298027][ T7631] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 336.298052][ T7631] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 336.298073][ T7631] ? mutex_lock_nested+0x152/0x1d0 [ 336.298101][ T7631] ? fdget_pos+0x252/0x320 [ 336.298141][ T7631] ksys_read+0x156/0x270 [ 336.298196][ T7631] ? __pfx_ksys_read+0x10/0x10 [ 336.298237][ T7631] do_syscall_64+0x166/0x520 [ 336.298260][ T7631] ? trace_irq_disable+0x3b/0x140 [ 336.298282][ T7631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.298305][ T7631] ? clear_bhb_loop+0x70/0xc0 [ 336.298333][ T7631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.298356][ T7631] RIP: 0033:0x7fe15fffe90e [ 336.298386][ T7631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 336.298406][ T7631] RSP: 002b:00007fe15e274fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.298429][ T7631] RAX: ffffffffffffffda RBX: 00007fe15e2756c0 RCX: 00007fe15fffe90e [ 336.298444][ T7631] RDX: 000000000000000f RSI: 00007fe15e2750a0 RDI: 0000000000000007 [ 336.298457][ T7631] RBP: 00007fe15e275090 R08: 0000000000000000 R09: 0000000000000000 [ 336.298477][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.298486][ T7631] R13: 00007fe1602c6128 R14: 00007fe1602c6090 R15: 00007ffff53fd4d8 [ 336.298512][ T7631] [ 337.284386][ T7634] No control pipe specified [ 337.344009][ T7634] bridge: RTM_NEWNEIGH with invalid ether address [ 337.627302][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 337.794581][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 339.978825][ T7655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.331688][ T127] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 346.935875][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 349.065193][ T7714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.468231][ T7704] nlmon0: Master is either lo or non-ether device [ 349.632033][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 351.167226][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 353.639282][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 353.764226][ T7748] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 353.841864][ T5688] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 353.842012][ T5716] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 353.971675][ T5688] usb 3-1: device descriptor read/64, error -71 [ 353.992588][ T5716] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 353.994356][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.034286][ T5716] usb 2-1: config 0 descriptor?? [ 354.058032][ T5716] cp210x 2-1:0.0: cp210x converter detected [ 354.221697][ T5688] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 354.361713][ T5688] usb 3-1: device descriptor read/64, error -71 [ 354.468375][ T5716] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 354.468408][ T5716] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 354.499451][ T5688] usb usb3-port1: attempt power cycle [ 355.790490][ T5716] usb 2-1: cp210x converter now attached to ttyUSB0 [ 355.811618][ T5688] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 355.833385][ T5716] usb 2-1: USB disconnect, device number 5 [ 355.834529][ T5688] usb 3-1: device descriptor read/8, error -71 [ 355.973905][ T7774] netlink: 204 bytes leftover after parsing attributes in process `syz.3.572'. [ 356.113360][ T5688] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 356.322261][ T5688] usb 3-1: device descriptor read/8, error -71 [ 356.324133][ T5716] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 356.326871][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 356.356249][ T5716] cp210x 2-1:0.0: device disconnected [ 356.422263][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 356.442728][ T5688] usb usb3-port1: unable to enumerate USB device [ 359.243968][ T5716] IPVS: starting estimator thread 0... [ 359.346140][ T7804] IPVS: using max 10 ests per chain, 24000 per kthread [ 359.487189][ T7810] netlink: 'syz.4.584': attribute type 2 has an invalid length. [ 360.841679][ T7440] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 360.981693][ T5826] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 360.991966][ T7440] usb 4-1: Using ep0 maxpacket: 16 [ 361.020890][ T7440] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 361.037065][ T7440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.037094][ T7440] usb 4-1: Product: syz [ 361.037110][ T7440] usb 4-1: Manufacturer: syz [ 361.037126][ T7440] usb 4-1: SerialNumber: syz [ 361.155083][ T5826] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 361.174361][ T5826] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.174422][ T5826] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 361.174560][ T5826] usb 1-1: config 1 interface 0 has no altsetting 0 [ 361.188838][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.202188][ T5826] usb 1-1: Product: syz [ 361.202213][ T5826] usb 1-1: Manufacturer: syz [ 361.202230][ T5826] usb 1-1: SerialNumber: syz [ 361.351708][ T5826] usb-storage 1-1:1.0: USB Mass Storage device detected [ 361.551202][ T5826] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 363.717424][ T7440] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 363.969259][ T5590] usb 1-1: USB disconnect, device number 11 [ 364.094775][ T7440] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 364.099634][ T7440] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 364.099738][ T7440] usb 4-1: media controller created [ 364.222997][ T7440] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.366824][ T7440] zl10353_read_register: readreg error (reg=127, ret==-71) [ 364.464200][ T7440] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 364.484756][ T7440] usb 4-1: USB disconnect, device number 10 [ 366.308496][ T1417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.033718][ T5588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.077914][ T5588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.079237][ T5588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.118483][ T5588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.127706][ T5588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.844983][ T5590] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 367.963052][ T1417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.003212][ T5590] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 368.004741][ T5590] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.004795][ T5590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.188609][ T5590] as10x_usb: device has been detected [ 368.190569][ T5590] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 368.306920][ T5590] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 368.802822][ T31] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 369.575150][ T5585] Bluetooth: hci4: command tx timeout [ 369.713365][ T31] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 369.717669][ T31] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 369.717706][ T31] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 369.717746][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 369.717773][ T31] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.717799][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 369.717826][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 369.717852][ T31] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 369.717879][ T31] usb 3-1: config 168 interface 0 has no altsetting 0 [ 369.723732][ T31] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 369.723767][ T31] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 369.723806][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 369.723840][ T31] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.723865][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 369.723892][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 369.723918][ T31] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 369.723945][ T31] usb 3-1: config 168 interface 0 has no altsetting 0 [ 369.950273][ T31] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 369.950320][ T31] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 369.950376][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 369.950406][ T31] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.950434][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 369.950463][ T31] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 369.950492][ T31] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 369.950521][ T31] usb 3-1: config 168 interface 0 has no altsetting 0 [ 370.055986][ T31] usb 3-1: string descriptor 0 read error: -22 [ 370.056105][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.162281][ T5590] as10x_usb: error during firmware upload part1 [ 370.165387][ T5590] Registered device Abilis Systems DVB-Titan [ 370.287412][ T1417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.325239][ T31] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 370.421812][ T7891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.605'. [ 370.461776][ T127] usb 1-1: USB disconnect, device number 12 [ 370.484916][ T31] usb 3-1: USB disconnect, device number 23 [ 370.498074][ T7891] vlan0: entered promiscuous mode [ 371.107678][ T127] Unregistered device Abilis Systems DVB-Titan [ 371.121093][ T127] as10x_usb: device has been disconnected [ 371.678508][ T5585] Bluetooth: hci4: command tx timeout [ 372.391708][ T127] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 372.475667][ T1417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.161061][ T127] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 373.173641][ T127] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 373.173670][ T127] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.173692][ T127] usb 1-1: config 0 has no interface number 0 [ 373.177734][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.177760][ T127] usb 1-1: Product: syz [ 373.177774][ T127] usb 1-1: Manufacturer: syz [ 373.177790][ T127] usb 1-1: SerialNumber: syz [ 373.240400][ T127] usb 1-1: config 0 descriptor?? [ 373.269429][ T127] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 373.770216][ T5585] Bluetooth: hci4: command tx timeout [ 373.946606][ T7924] 9p: Bad value for 'wfdno' [ 374.678465][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 375.014326][ T5590] usb 1-1: USB disconnect, device number 13 [ 375.842116][ T5585] Bluetooth: hci4: command tx timeout [ 376.160842][ T7942] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 376.324111][ T7941] jffs2: notice: (7941) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 379.403804][ T7949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.616'. [ 379.521718][ T7955] FAULT_INJECTION: forcing a failure. [ 379.521718][ T7955] name failslab, interval 1, probability 0, space 0, times 0 [ 379.521785][ T7955] CPU: 0 UID: 0 PID: 7955 Comm: syz.2.619 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 379.521816][ T7955] Tainted: [L]=SOFTLOCKUP [ 379.521824][ T7955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.521855][ T7955] Call Trace: [ 379.521865][ T7955] [ 379.521874][ T7955] dump_stack_lvl+0xe8/0x150 [ 379.521929][ T7955] should_fail_ex+0x46b/0x600 [ 379.521966][ T7955] should_failslab+0xa8/0x100 [ 379.521997][ T7955] kmem_cache_alloc_node_noprof+0xae/0x670 [ 379.522025][ T7955] ? __alloc_skb+0x1db/0x7a0 [ 379.522056][ T7955] ? __alloc_skb+0x1db/0x7a0 [ 379.522096][ T7955] __alloc_skb+0x1db/0x7a0 [ 379.522133][ T7955] alloc_skb_with_frags+0xc6/0x760 [ 379.522179][ T7955] sock_alloc_send_pskb+0x884/0x9a0 [ 379.522210][ T7955] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 379.522252][ T7955] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 379.522284][ T7955] ? dev_get_by_index+0x22/0x2d0 [ 379.522310][ T7955] ? dev_get_by_index+0x22/0x2d0 [ 379.522342][ T7955] packet_sendmsg+0x31bb/0x4f80 [ 379.522367][ T7955] ? is_bpf_text_address+0x292/0x2b0 [ 379.522412][ T7955] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 379.522455][ T7955] ? __lock_acquire+0x683/0x2ce0 [ 379.522492][ T7955] ? __lock_acquire+0x683/0x2ce0 [ 379.522525][ T7955] ? smack_socket_sendmsg+0x1f8/0x5a0 [ 379.522554][ T7955] ? get_pid_task+0x20/0x1f0 [ 379.522587][ T7955] ? __pfx_packet_sendmsg+0x10/0x10 [ 379.522631][ T7955] ? __might_fault+0xaf/0x130 [ 379.522662][ T7955] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 379.522704][ T7955] ? __pfx_packet_sendmsg+0x10/0x10 [ 379.522727][ T7955] sock_sendmsg_nosec+0x13a/0x180 [ 379.522760][ T7955] __sys_sendto+0x41e/0x5d0 [ 379.522800][ T7955] ? __pfx___sys_sendto+0x10/0x10 [ 379.522863][ T7955] ? __pfx_ksys_write+0x10/0x10 [ 379.522900][ T7955] __x64_sys_sendto+0xde/0x100 [ 379.522939][ T7955] do_syscall_64+0x166/0x520 [ 379.522961][ T7955] ? trace_irq_disable+0x3b/0x140 [ 379.522983][ T7955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.523007][ T7955] ? clear_bhb_loop+0x70/0xc0 [ 379.523035][ T7955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.523071][ T7955] RIP: 0033:0x7fd2c99be0d9 [ 379.523104][ T7955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.523123][ T7955] RSP: 002b:00007fd2c7c16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 379.523146][ T7955] RAX: ffffffffffffffda RBX: 00007fd2c9c45fa0 RCX: 00007fd2c99be0d9 [ 379.523162][ T7955] RDX: 000000000001000a RSI: 0000200000000180 RDI: 0000000000000003 [ 379.523177][ T7955] RBP: 00007fd2c7c16090 R08: 0000200000000140 R09: 0000000000000014 [ 379.523192][ T7955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.523205][ T7955] R13: 00007fd2c9c46038 R14: 00007fd2c9c45fa0 R15: 00007ffc42b70788 [ 379.523239][ T7955] [ 381.060939][ T1417] bridge_slave_1: left allmulticast mode [ 381.061118][ T1417] bridge_slave_1: left promiscuous mode [ 381.100922][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.865406][ T1417] bridge_slave_0: left allmulticast mode [ 381.865444][ T1417] bridge_slave_0: left promiscuous mode [ 381.865812][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.906224][ T7990] netlink: 'syz.2.625': attribute type 2 has an invalid length. [ 383.664957][ T8010] jffs2: notice: (8010) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 383.698417][ T8010] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 383.834553][ T8013] FAULT_INJECTION: forcing a failure. [ 383.834553][ T8013] name failslab, interval 1, probability 0, space 0, times 0 [ 383.834593][ T8013] CPU: 0 UID: 0 PID: 8013 Comm: syz.3.632 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 383.834625][ T8013] Tainted: [L]=SOFTLOCKUP [ 383.834633][ T8013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.834647][ T8013] Call Trace: [ 383.834655][ T8013] [ 383.834670][ T8013] dump_stack_lvl+0xe8/0x150 [ 383.834708][ T8013] should_fail_ex+0x46b/0x600 [ 383.834746][ T8013] should_failslab+0xa8/0x100 [ 383.834777][ T8013] kmem_cache_alloc_noprof+0xa4/0x660 [ 383.834802][ T8013] ? security_inode_alloc+0x39/0x310 [ 383.834835][ T8013] ? security_inode_alloc+0x39/0x310 [ 383.834876][ T8013] security_inode_alloc+0x39/0x310 [ 383.834912][ T8013] inode_init_always_gfp+0x983/0xd40 [ 383.834946][ T8013] ? __pfx_sock_alloc_inode+0x10/0x10 [ 383.834975][ T8013] alloc_inode+0x82/0x1b0 [ 383.835003][ T8013] __sock_create+0x12d/0x9d0 [ 383.835034][ T8013] ? ksys_write+0x248/0x270 [ 383.835072][ T8013] __sys_socket+0xd6/0x1b0 [ 383.835107][ T8013] __x64_sys_socket+0x7a/0x90 [ 383.835139][ T8013] do_syscall_64+0x166/0x520 [ 383.835162][ T8013] ? trace_irq_disable+0x3b/0x140 [ 383.835192][ T8013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.835217][ T8013] ? clear_bhb_loop+0x70/0xc0 [ 383.835244][ T8013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.835268][ T8013] RIP: 0033:0x7fbba0bce0d9 [ 383.835288][ T8013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.835309][ T8013] RSP: 002b:00007fbb9ede4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 383.835332][ T8013] RAX: ffffffffffffffda RBX: 00007fbba0e56180 RCX: 00007fbba0bce0d9 [ 383.835349][ T8013] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000029 [ 383.835362][ T8013] RBP: 00007fbb9ede4090 R08: 0000000000000000 R09: 0000000000000000 [ 383.835376][ T8013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.835390][ T8013] R13: 00007fbba0e56218 R14: 00007fbba0e56180 R15: 00007ffebc3ac798 [ 383.835425][ T8013] [ 383.841348][ T8013] socket: no more sockets [ 384.307434][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.307506][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.613660][ T8019] netlink: 'syz.3.634': attribute type 2 has an invalid length. [ 387.681731][ T5716] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 387.833306][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 387.834129][ T5716] usb 5-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 387.835287][ T5716] usb 5-1: config 0 interface 0 has no altsetting 0 [ 387.838722][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.838742][ T5716] usb 5-1: Product: syz [ 387.838752][ T5716] usb 5-1: Manufacturer: syz [ 387.838763][ T5716] usb 5-1: SerialNumber: syz [ 387.904359][ T5716] usb 5-1: config 0 descriptor?? [ 388.065056][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.162602][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.205445][ T8029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.206208][ T8029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.246708][ T1417] bond0 (unregistering): Released all slaves [ 388.269965][ T5716] snd_usb_podhd 5-1:0.0: Line 6 POD HD500X found [ 388.289635][ T1417] bond1 (unregistering): Released all slaves [ 388.306866][ T5716] snd_usb_podhd 5-1:0.0: set_interface failed [ 388.307329][ T5716] snd_usb_podhd 5-1:0.0: Line 6 POD HD500X now disconnected [ 388.307468][ T5716] snd_usb_podhd 5-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 388.353120][ T5716] usb 5-1: USB disconnect, device number 10 [ 388.410090][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 388.428989][ T8024] vlan0: left promiscuous mode [ 388.452928][ T8024] team0: Port device vlan0 added [ 388.761692][ T5716] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 388.992544][ T5716] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=cc.da [ 388.994187][ T5716] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.994213][ T5716] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 388.997521][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.997545][ T5716] usb 5-1: Product: syz [ 388.997559][ T5716] usb 5-1: Manufacturer: syz [ 388.997573][ T5716] usb 5-1: SerialNumber: syz [ 389.032099][ T8035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.045324][ T5716] usb 5-1: config 0 descriptor?? [ 389.283098][ T8029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.285807][ T8029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.526958][ T7440] usb 5-1: USB disconnect, device number 11 [ 389.864931][ T8057] FAULT_INJECTION: forcing a failure. [ 389.864931][ T8057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.865690][ T8057] CPU: 1 UID: 0 PID: 8057 Comm: syz.2.644 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 389.865727][ T8057] Tainted: [L]=SOFTLOCKUP [ 389.865736][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.865750][ T8057] Call Trace: [ 389.865759][ T8057] [ 389.865769][ T8057] dump_stack_lvl+0xe8/0x150 [ 389.865826][ T8057] should_fail_ex+0x46b/0x600 [ 389.865922][ T8057] _copy_to_user+0x31/0xb0 [ 389.865960][ T8057] mctp_ioctl+0x883/0x960 [ 389.865992][ T8057] ? tomoyo_path_number_perm+0x219/0x5f0 [ 389.866020][ T8057] ? __pfx_mctp_ioctl+0x10/0x10 [ 389.866044][ T8057] ? tomoyo_path_number_perm+0x219/0x5f0 [ 389.866073][ T8057] ? do_vfs_ioctl+0x1184/0x1550 [ 389.866114][ T8057] ? __ia32_compat_sys_ioctl+0x8a1/0x960 [ 389.866158][ T8057] sock_do_ioctl+0x101/0x320 [ 389.866190][ T8057] ? __pfx_sock_do_ioctl+0x10/0x10 [ 389.866217][ T8057] ? hook_file_ioctl+0x1f3/0x600 [ 389.866257][ T8057] ? __asan_memset+0x22/0x50 [ 389.866280][ T8057] ? smack_file_ioctl+0x265/0x370 [ 389.866312][ T8057] sock_ioctl+0x57d/0x7f0 [ 389.866342][ T8057] ? __pfx_sock_ioctl+0x10/0x10 [ 389.866371][ T8057] ? __fget_files+0x2a/0x420 [ 389.866399][ T8057] ? __fget_files+0x3a8/0x420 [ 389.866427][ T8057] ? __fget_files+0x2a/0x420 [ 389.866460][ T8057] ? bpf_lsm_file_ioctl+0x9/0x20 [ 389.866483][ T8057] ? __pfx_sock_ioctl+0x10/0x10 [ 389.866511][ T8057] __se_sys_ioctl+0xff/0x170 [ 389.866549][ T8057] do_syscall_64+0x166/0x520 [ 389.866571][ T8057] ? trace_irq_disable+0x3b/0x140 [ 389.866603][ T8057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.866628][ T8057] ? clear_bhb_loop+0x70/0xc0 [ 389.866657][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.866682][ T8057] RIP: 0033:0x7fd2c99be0d9 [ 389.866703][ T8057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.866723][ T8057] RSP: 002b:00007fd2c7c16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.866748][ T8057] RAX: ffffffffffffffda RBX: 00007fd2c9c45fa0 RCX: 00007fd2c99be0d9 [ 389.866766][ T8057] RDX: 0000200000000040 RSI: 00000000000089e2 RDI: 0000000000000004 [ 389.866781][ T8057] RBP: 00007fd2c7c16090 R08: 0000000000000000 R09: 0000000000000000 [ 389.866796][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.866810][ T8057] R13: 00007fd2c9c46038 R14: 00007fd2c9c45fa0 R15: 00007ffc42b70788 [ 389.866847][ T8057] [ 390.589457][ T8067] netlink: 'syz.2.645': attribute type 2 has an invalid length. [ 393.395285][ T8077] netlink: 'syz.4.648': attribute type 8 has an invalid length. [ 394.365059][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 395.010897][ T8100] ./dev/mtdblock0: Can't lookup blockdev [ 395.206909][ T7855] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.206993][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.207156][ T7855] bridge_slave_0: entered allmulticast mode [ 395.243361][ T7855] bridge_slave_0: entered promiscuous mode [ 397.522868][ T7440] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 401.831061][ T8121] jffs2: notice: (8121) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 401.957988][ T7440] usb 5-1: device descriptor read/all, error -71 [ 401.960101][ T7855] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.960236][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.960483][ T7855] bridge_slave_1: entered allmulticast mode [ 402.436712][ T7855] bridge_slave_1: entered promiscuous mode [ 405.435730][ T7855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.464398][ T7855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.894632][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 406.732218][ T7855] team0: Port device team_slave_0 added [ 406.859133][ T7855] team0: Port device team_slave_1 added [ 407.098965][ T8154] kvm: user requested TSC rate below hardware speed [ 407.197473][ T1417] hsr_slave_0: left promiscuous mode [ 407.626382][ T1417] hsr_slave_1: left promiscuous mode [ 407.641220][ T1417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.642983][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.125052][ T1417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.125083][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.207183][ T8161] jffs2: notice: (8161) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 408.249882][ T1417] virt_wifi0: left promiscuous mode [ 408.250586][ T1417] veth1_macvtap: left promiscuous mode [ 408.250822][ T1417] veth0_macvtap: left promiscuous mode [ 408.251044][ T1417] veth1_vlan: left promiscuous mode [ 408.251293][ T1417] veth0_vlan: left promiscuous mode [ 408.376128][ T8164] netlink: 'syz.0.671': attribute type 1 has an invalid length. [ 411.044093][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 411.105213][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 411.589158][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.589175][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.589203][ T7855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.660983][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.661019][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.661049][ T7855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.783726][ T8182] ntfs3(nullb0): Primary boot signature is not NTFS. [ 411.788639][ T8182] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 412.613214][ T7855] hsr_slave_0: entered promiscuous mode [ 412.617532][ T7855] hsr_slave_1: entered promiscuous mode [ 412.618593][ T7855] debugfs: 'hsr0' already exists in 'hsr' [ 412.618620][ T7855] Cannot create hsr debugfs directory [ 413.067441][ T8205] netlink: 'syz.0.682': attribute type 1 has an invalid length. [ 413.676530][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 414.050542][ T31] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 414.056794][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 414.056825][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 414.056865][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.572348][ T31] gud 1-1:1.0: No supported pixel formats found [ 414.572388][ T31] gud 1-1:1.0: probe with driver gud failed with error -22 [ 415.472925][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 417.121981][ T5590] usb 1-1: USB disconnect, device number 14 [ 418.182027][ T8249] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 418.619424][ T8256] kvm: user requested TSC rate below hardware speed [ 421.439287][ T8295] syz.0.702 (8295): drop_caches: 2 [ 422.667314][ T8310] jffs2: notice: (8310) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 422.750544][ T8315] netlink: 'syz.4.704': attribute type 1 has an invalid length. [ 425.314024][ T8321] macvlan0: entered promiscuous mode [ 425.314790][ T8321] netlink: 'syz.2.708': attribute type 1 has an invalid length. [ 425.314808][ T8321] netlink: 'syz.2.708': attribute type 2 has an invalid length. [ 425.419802][ T5588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 425.488195][ T5588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 425.513258][ T5588] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 425.542722][ T5588] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 425.544421][ T5588] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 426.063871][ T8342] FAULT_INJECTION: forcing a failure. [ 426.063871][ T8342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.063912][ T8342] CPU: 0 UID: 0 PID: 8342 Comm: syz.0.711 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 426.063942][ T8342] Tainted: [L]=SOFTLOCKUP [ 426.063949][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.063962][ T8342] Call Trace: [ 426.063970][ T8342] [ 426.063979][ T8342] dump_stack_lvl+0xe8/0x150 [ 426.064016][ T8342] should_fail_ex+0x46b/0x600 [ 426.064061][ T8342] _copy_from_user+0x2d/0xb0 [ 426.064096][ T8342] drm_ioctl+0x61c/0xba0 [ 426.064133][ T8342] ? __pfx_drm_syncobj_handle_to_fd_ioctl+0x10/0x10 [ 426.064164][ T8342] ? __pfx_drm_ioctl+0x10/0x10 [ 426.064205][ T8342] ? __fget_files+0x2a/0x420 [ 426.064237][ T8342] ? bpf_lsm_file_ioctl+0x9/0x20 [ 426.064261][ T8342] ? __pfx_drm_ioctl+0x10/0x10 [ 426.064288][ T8342] __se_sys_ioctl+0xff/0x170 [ 426.064327][ T8342] do_syscall_64+0x166/0x520 [ 426.064350][ T8342] ? trace_irq_disable+0x3b/0x140 [ 426.064371][ T8342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.064394][ T8342] ? clear_bhb_loop+0x70/0xc0 [ 426.064422][ T8342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.064445][ T8342] RIP: 0033:0x7fa00f87e0d9 [ 426.064465][ T8342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.064485][ T8342] RSP: 002b:00007fa00dad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.064509][ T8342] RAX: ffffffffffffffda RBX: 00007fa00fb05fa0 RCX: 00007fa00f87e0d9 [ 426.064526][ T8342] RDX: 0000200000000380 RSI: 00000000c01864c1 RDI: 0000000000000003 [ 426.064540][ T8342] RBP: 00007fa00dad6090 R08: 0000000000000000 R09: 0000000000000000 [ 426.064554][ T8342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.064572][ T8342] R13: 00007fa00fb06038 R14: 00007fa00fb05fa0 R15: 00007ffcff740c48 [ 426.064607][ T8342] [ 426.694484][ T8351] overlayfs: missing 'lowerdir' [ 427.374381][ T8349] ./dev/mtdblock0: Can't lookup blockdev [ 427.603149][ T5588] Bluetooth: hci5: command tx timeout [ 427.750030][ T8363] FAULT_INJECTION: forcing a failure. [ 427.750030][ T8363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 427.750076][ T8363] CPU: 0 UID: 0 PID: 8363 Comm: syz.2.715 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 427.750111][ T8363] Tainted: [L]=SOFTLOCKUP [ 427.750120][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.750134][ T8363] Call Trace: [ 427.750143][ T8363] [ 427.750154][ T8363] dump_stack_lvl+0xe8/0x150 [ 427.750196][ T8363] should_fail_ex+0x46b/0x600 [ 427.750238][ T8363] prepare_alloc_pages+0x223/0x690 [ 427.750279][ T8363] __alloc_frozen_pages_noprof+0x12f/0x380 [ 427.750318][ T8363] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 427.750368][ T8363] ? __pfx_policy_nodemask+0x10/0x10 [ 427.750401][ T8363] ? reacquire_held_locks+0x104/0x190 [ 427.750446][ T8363] alloc_pages_mpol+0xce/0x280 [ 427.750484][ T8363] alloc_pages_noprof+0xd2/0x2f0 [ 427.750522][ T8363] __pmd_alloc+0x3a/0x5e0 [ 427.750556][ T8363] handle_mm_fault+0xeb1/0x13f0 [ 427.750594][ T8363] ? handle_mm_fault+0xe8/0x13f0 [ 427.750624][ T8363] ? __pfx_handle_mm_fault+0x10/0x10 [ 427.750650][ T8363] ? lock_vma_under_rcu+0x45a/0x500 [ 427.750687][ T8363] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 427.750743][ T8363] do_user_addr_fault+0xa4f/0x1340 [ 427.750804][ T8363] ? trace_page_fault_user+0x84/0x1e0 [ 427.750843][ T8363] exc_page_fault+0x6a/0xc0 [ 427.750874][ T8363] asm_exc_page_fault+0x26/0x30 [ 427.750896][ T8363] RIP: 0033:0x7fd2c98771b6 [ 427.750917][ T8363] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 5c da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 427.750936][ T8363] RSP: 002b:00007fd2c7c15f60 EFLAGS: 00010206 [ 427.750955][ T8363] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 427.750970][ T8363] RDX: 00000000000025f5 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 427.750986][ T8363] RBP: 00007fd2c9a74660 R08: 0000000000000000 R09: 0000000000000003 [ 427.751000][ T8363] R10: 0000000000000003 R11: 0000000000000000 R12: 00000000003ff000 [ 427.751013][ T8363] R13: 0000200000c00000 R14: 00007fd2c9c45fa0 R15: 0000000000000000 [ 427.751048][ T8363] [ 427.869819][ T8363] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 428.025479][ T8368] FAULT_INJECTION: forcing a failure. [ 428.025479][ T8368] name failslab, interval 1, probability 0, space 0, times 0 [ 428.025524][ T8368] CPU: 0 UID: 0 PID: 8368 Comm: syz.0.717 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 428.025555][ T8368] Tainted: [L]=SOFTLOCKUP [ 428.025563][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.025575][ T8368] Call Trace: [ 428.025583][ T8368] [ 428.025592][ T8368] dump_stack_lvl+0xe8/0x150 [ 428.025630][ T8368] should_fail_ex+0x46b/0x600 [ 428.025665][ T8368] should_failslab+0xa8/0x100 [ 428.025696][ T8368] kmem_cache_alloc_noprof+0xa4/0x660 [ 428.025721][ T8368] ? ptlock_alloc+0x20/0x70 [ 428.025756][ T8368] ? ptlock_alloc+0x20/0x70 [ 428.025787][ T8368] ptlock_alloc+0x20/0x70 [ 428.025811][ T8368] pte_alloc_one+0x7e/0x380 [ 428.025838][ T8368] __pte_alloc+0x25/0x1a0 [ 428.025873][ T8368] do_pte_missing+0x1bda/0x28f0 [ 428.025917][ T8368] handle_mm_fault+0xd28/0x13f0 [ 428.025949][ T8368] ? handle_mm_fault+0xe8/0x13f0 [ 428.025974][ T8368] ? __pfx_handle_mm_fault+0x10/0x10 [ 428.025996][ T8368] ? lock_vma_under_rcu+0x45a/0x500 [ 428.026022][ T8368] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 428.026070][ T8368] do_user_addr_fault+0xa4f/0x1340 [ 428.026115][ T8368] ? trace_page_fault_user+0x84/0x1e0 [ 428.026152][ T8368] exc_page_fault+0x6a/0xc0 [ 428.026176][ T8368] asm_exc_page_fault+0x26/0x30 [ 428.026198][ T8368] RIP: 0033:0x7fa00f7371b6 [ 428.026217][ T8368] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 5c da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 428.026236][ T8368] RSP: 002b:00007fa00da93f60 EFLAGS: 00010206 [ 428.026255][ T8368] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 428.026269][ T8368] RDX: 00000000000025f5 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 428.026284][ T8368] RBP: 00007fa00f934660 R08: 0000000000000000 R09: ffffffffffffffff [ 428.026298][ T8368] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 428.026313][ T8368] R13: 0000200000c00000 R14: 00007fa00fb06180 R15: 0000000000000000 [ 428.026354][ T8368] [ 428.026398][ T8368] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 429.003656][ T8394] jffs2: notice: (8394) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 429.177680][ T8380] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 429.678998][ T5588] Bluetooth: hci5: command tx timeout [ 431.751591][ T5588] Bluetooth: hci5: command tx timeout [ 432.233661][ T8432] ./dev/mtdblock0: Can't lookup blockdev [ 433.889023][ T5588] Bluetooth: hci5: command tx timeout [ 434.364091][ T8450] jffs2: notice: (8450) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 434.501959][ T66] bridge_slave_1: left allmulticast mode [ 434.501996][ T66] bridge_slave_1: left promiscuous mode [ 434.502299][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.646418][ T66] bridge_slave_0: left allmulticast mode [ 434.646454][ T66] bridge_slave_0: left promiscuous mode [ 434.646808][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.572895][ T8467] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.737'. [ 435.804172][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.882300][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.944919][ T66] bond0 (unregistering): Released all slaves [ 435.965390][ T8470] netlink: 'syz.0.737': attribute type 2 has an invalid length. [ 436.698181][ T8478] ./dev/mtdblock0: Can't lookup blockdev [ 436.732917][ T66] hsr_slave_0: left promiscuous mode [ 436.773209][ T66] hsr_slave_1: left promiscuous mode [ 436.775173][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.812473][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.881608][ T5826] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 437.037984][ T5826] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 437.040265][ T5826] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.040314][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.102224][ T5826] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 437.102532][ T5826] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 437.102612][ T5826] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 437.108874][ T5826] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 437.108968][ T5826] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 437.185681][ T5826] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 437.190862][ T5826] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 437.190953][ T5826] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 437.259615][ T5826] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 437.409495][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.447334][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.101450][ T8492] netlink: 'syz.0.745': attribute type 2 has an invalid length. [ 438.147511][ T5696] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 438.752612][ T5696] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 438.754463][ T5696] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 438.754490][ T5696] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.754513][ T5696] usb 4-1: config 0 has no interface number 0 [ 438.915549][ T8498] FAULT_INJECTION: forcing a failure. [ 438.915549][ T8498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.915590][ T8498] CPU: 0 UID: 0 PID: 8498 Comm: syz.0.747 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 438.915620][ T8498] Tainted: [L]=SOFTLOCKUP [ 438.915633][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.915647][ T8498] Call Trace: [ 438.915656][ T8498] [ 438.915665][ T8498] dump_stack_lvl+0xe8/0x150 [ 438.915704][ T8498] should_fail_ex+0x46b/0x600 [ 438.915740][ T8498] _copy_from_iter+0x1d3/0x1660 [ 438.915777][ T8498] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 438.915813][ T8498] ? __pfx_policy_nodemask+0x10/0x10 [ 438.915843][ T8498] ? unwind_next_frame+0x8f/0x2550 [ 438.915868][ T8498] ? __pfx__copy_from_iter+0x10/0x10 [ 438.915900][ T8498] ? alloc_pages_mpol+0x115/0x280 [ 438.915939][ T8498] copy_page_from_iter+0x219/0x2d0 [ 438.915973][ T8498] tun_get_user+0x1b68/0x4380 [ 438.916019][ T8498] ? is_bpf_text_address+0x292/0x2b0 [ 438.916049][ T8498] ? tun_get_user+0x6e7/0x4380 [ 438.916104][ T8498] ? __pfx_tun_get_user+0x10/0x10 [ 438.916140][ T8498] ? __lock_acquire+0x683/0x2ce0 [ 438.916180][ T8498] ? ref_tracker_alloc+0x353/0x4c0 [ 438.916209][ T8498] ? get_pid_task+0x20/0x1f0 [ 438.916243][ T8498] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 438.916276][ T8498] ? tun_get+0x1c/0x2f0 [ 438.916310][ T8498] ? tun_get+0x1c/0x2f0 [ 438.916349][ T8498] ? tun_get+0x1c/0x2f0 [ 438.916382][ T8498] ? tun_get+0x1c/0x2f0 [ 438.916421][ T8498] tun_chr_write_iter+0x119/0x200 [ 438.916456][ T8498] vfs_write+0x61e/0xbb0 [ 438.916497][ T8498] ? __pfx_vfs_write+0x10/0x10 [ 438.916539][ T8498] ? __fget_files+0x2a/0x420 [ 438.916576][ T8498] ksys_write+0x156/0x270 [ 438.916609][ T8498] ? __pfx_ksys_write+0x10/0x10 [ 438.916652][ T8498] do_syscall_64+0x166/0x520 [ 438.916675][ T8498] ? trace_irq_disable+0x3b/0x140 [ 438.916696][ T8498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.916721][ T8498] ? clear_bhb_loop+0x70/0xc0 [ 438.916748][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.916778][ T8498] RIP: 0033:0x7fa00f83e90e [ 438.916799][ T8498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 438.916818][ T8498] RSP: 002b:00007fa00dad5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.916842][ T8498] RAX: ffffffffffffffda RBX: 00007fa00dad66c0 RCX: 00007fa00f83e90e [ 438.916859][ T8498] RDX: 0000000000000022 RSI: 0000200000000480 RDI: 00000000000000c8 [ 438.916874][ T8498] RBP: 00007fa00dad6090 R08: 0000000000000000 R09: 0000000000000000 [ 438.916888][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.916902][ T8498] R13: 00007fa00fb06038 R14: 00007fa00fb05fa0 R15: 00007ffcff740c48 [ 438.916937][ T8498] [ 439.129220][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.129262][ T5696] usb 4-1: Product: syz [ 439.129279][ T5696] usb 4-1: Manufacturer: syz [ 439.129295][ T5696] usb 4-1: SerialNumber: syz [ 439.185265][ T5696] usb 4-1: config 0 descriptor?? [ 439.261596][ T5696] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 440.200522][ T66] team0 (unregistering): Port device team_slave_1 removed [ 440.285554][ T8502] netlink: 536 bytes leftover after parsing attributes in process `syz.4.749'. [ 440.312194][ T66] team0 (unregistering): Port device team_slave_0 removed [ 440.339584][ T8503] netlink: 'syz.0.748': attribute type 2 has an invalid length. [ 440.884138][ T9] usb 4-1: USB disconnect, device number 11 [ 441.759375][ T8514] kvm: user requested TSC rate below hardware speed [ 442.283006][ T5826] usb 3-1: USB disconnect, device number 24 [ 442.337762][ T5826] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 442.378109][ T5826] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 442.378826][ T5826] keyspan 3-1:1.0: device disconnected [ 442.791737][ T5826] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 442.971983][ T5826] usb 3-1: Using ep0 maxpacket: 16 [ 442.972934][ T5826] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 442.979517][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.979543][ T5826] usb 3-1: Product: syz [ 442.979557][ T5826] usb 3-1: Manufacturer: syz [ 442.979572][ T5826] usb 3-1: SerialNumber: syz [ 445.752850][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.768974][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.928769][ T8551] netlink: 'syz.0.761': attribute type 2 has an invalid length. [ 447.195810][ T5826] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 447.200799][ T5826] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 447.201073][ T5826] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 447.201106][ T5826] usb 3-1: media controller created [ 447.263839][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.318190][ T5826] zl10353_read_register: readreg error (reg=127, ret==-71) [ 447.442041][ T5826] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 447.446952][ T8324] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.447102][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.447309][ T8324] bridge_slave_0: entered allmulticast mode [ 447.525408][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 447.525461][ T8558] netlink: 'syz.2.764': attribute type 10 has an invalid length. [ 447.525477][ T8558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.764'. [ 447.539633][ T5826] usb 3-1: USB disconnect, device number 25 [ 447.542780][ T8324] bridge_slave_0: entered promiscuous mode [ 447.791107][ T8558] geneve2: entered promiscuous mode [ 447.791140][ T8558] geneve2: entered allmulticast mode [ 447.811946][ T8324] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.812195][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.812412][ T8324] bridge_slave_1: entered allmulticast mode [ 447.819202][ T8324] bridge_slave_1: entered promiscuous mode [ 447.963884][ T8324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.968262][ T8324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.054959][ T8324] team0: Port device team_slave_0 added [ 448.077190][ T8324] team0: Port device team_slave_1 added [ 448.220913][ T8569] netlink: del zone limit has 4 unknown bytes [ 448.376816][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.769'. [ 448.417369][ T8324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.417388][ T8324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.417418][ T8324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.419741][ T8324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.419758][ T8324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.419789][ T8324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.582651][ T8324] hsr_slave_0: entered promiscuous mode [ 448.584067][ T8324] hsr_slave_1: entered promiscuous mode [ 448.585027][ T8324] debugfs: 'hsr0' already exists in 'hsr' [ 448.585053][ T8324] Cannot create hsr debugfs directory [ 449.195406][ T8586] netlink: 536 bytes leftover after parsing attributes in process `syz.0.763'. [ 449.708075][ T8587] loop5: detected capacity change from 0 to 4095 [ 450.078878][ T8127] Buffer I/O error on dev loop5, logical block 511, async page read [ 450.563877][ T8598] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 450.947847][ T8596] netlink: 'syz.4.776': attribute type 10 has an invalid length. [ 450.947872][ T8596] netlink: 40 bytes leftover after parsing attributes in process `syz.4.776'. [ 450.986167][ T8596] team0: entered promiscuous mode [ 450.986183][ T8596] team_slave_0: entered promiscuous mode [ 450.986356][ T8596] team_slave_1: entered promiscuous mode [ 450.986566][ T8596] team0: entered allmulticast mode [ 450.986576][ T8596] team_slave_0: entered allmulticast mode [ 450.986591][ T8596] team_slave_1: entered allmulticast mode [ 450.994377][ T8596] bridge0: port 3(team0) entered blocking state [ 451.000649][ T8596] bridge0: port 3(team0) entered disabled state [ 451.091739][ T8596] bridge0: port 3(team0) entered blocking state [ 451.091897][ T8596] bridge0: port 3(team0) entered forwarding state [ 451.266468][ T8324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 451.522858][ T8324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 451.710388][ T8324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 451.749894][ T8324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.751109][ T8324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 451.859947][ T8324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 451.895447][ T8324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 451.947772][ T8324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.297900][ T8628] netlink: 536 bytes leftover after parsing attributes in process `syz.2.784'. [ 452.327198][ T5590] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 452.451588][ T8324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.511396][ T5590] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 452.536457][ T5590] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.536521][ T5590] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 452.536548][ T5590] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 452.536574][ T5590] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.536620][ T5590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.614958][ T8634] netlink: 'syz.4.785': attribute type 2 has an invalid length. [ 453.237967][ T8324] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.334073][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.334210][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.399380][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.400049][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.568213][ T8620] ================================================================== [ 454.568230][ T8620] BUG: KASAN: vmalloc-out-of-bounds in __li[ 454.568230][ T8620] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 454.568274][ T8620] Read of size 8 at addr ffffc900065c1008 by task vhost-8613/8620 [ 454.568294][ T8620] [ 454.568310][ T8620] CPU: 0 UID: 0 PID: 8620 Comm: vhost-8613 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 454.568341][ T8620] Tainted: [L]=SOFTLOCKUP [ 454.568349][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.568363][ T8620] Call Trace: [ 454.568372][ T8620] [ 454.568381][ T8620] dump_stack_lvl+0xe8/0x150 [ 454.568414][ T8620] print_address_description+0x55/0x1e0 [ 454.568446][ T8620] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 454.568479][ T8620] print_report+0x58/0x70 [ 454.568507][ T8620] kasan_report+0x117/0x150 [ 454.568534][ T8620] ? rt_spin_lock+0x210/0x400 [ 454.568564][ T8620] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 454.568601][ T8620] __list_del_entry_valid_or_report+0xb5/0x190 [ 454.568636][ T8620] kcov_remote_start+0x2aa/0x710 [ 454.568673][ T8620] vhost_run_work_list+0x129/0x1e0 [ 454.568702][ T8620] ? __pfx_vhost_run_work_list+0x10/0x10 [ 454.568728][ T8620] vhost_task_fn+0x2fc/0x4b0 [ 454.568788][ T8620] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 454.568816][ T8620] ? __pfx_vhost_task_fn+0x10/0x10 [ 454.568853][ T8620] ? rt_spin_unlock+0x159/0x200 [ 454.568885][ T8620] ? rt_spin_unlock+0x165/0x200 [ 454.568916][ T8620] ? __pfx_vhost_task_fn+0x10/0x10 [ 454.568949][ T8620] ret_from_fork+0x514/0xb70 [ 454.568982][ T8620] ? __pfx_ret_from_fork+0x10/0x10 [ 454.569013][ T8620] ? __switch_to+0xc89/0x1420 [ 454.569042][ T8620] ? __pfx_vhost_task_fn+0x10/0x10 [ 454.569075][ T8620] ret_from_fork_asm+0x1a/0x30 [ 454.569117][ T8620] [ 454.569125][ T8620] [ 454.569131][ T8620] The buggy address belongs to a vmalloc virtual mapping [ 454.569150][ T8620] Memory state around the buggy address: [ 454.569162][ T8620] ffffc900065c0f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 454.569177][ T8620] ffffc900065c0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 454.569192][ T8620] >ffffc900065c1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 454.569203][ T8620] ^ [ 454.569214][ T8620] ffffc900065c1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 454.569228][ T8620] ffffc900065c1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 454.569240][ T8620] ================================================================== [ 454.592624][ T8620] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 454.592651][ T8620] CPU: 0 UID: 0 PID: 8620 Comm: vhost-8613 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 454.592683][ T8620] Tainted: [L]=SOFTLOCKUP [ 454.592690][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.592704][ T8620] Call Trace: [ 454.592712][ T8620] [ 454.592720][ T8620] vpanic+0x56d/0xa60 [ 454.592766][ T8620] ? rcu_is_watching+0x16/0xb0 [ 454.592794][ T8620] ? __pfx_vpanic+0x10/0x10 [ 454.592832][ T8620] panic+0xc5/0xd0 [ 454.592864][ T8620] ? __pfx_panic+0x10/0x10 [ 454.592895][ T8620] ? preempt_schedule_thunk+0x16/0x40 [ 454.592927][ T8620] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 454.592960][ T8620] ? preempt_schedule_thunk+0x16/0x40 [ 454.592986][ T8620] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 454.593018][ T8620] check_panic_on_warn+0x89/0xb0 [ 454.593053][ T8620] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 454.593084][ T8620] end_report+0x73/0x170 [ 454.593111][ T8620] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 454.593142][ T8620] kasan_report+0x128/0x150 [ 454.593167][ T8620] ? rt_spin_lock+0x210/0x400 [ 454.593196][ T8620] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 454.593232][ T8620] __list_del_entry_valid_or_report+0xb5/0x190 [ 454.593268][ T8620] kcov_remote_start+0x2aa/0x710 [ 454.593305][ T8620] vhost_run_work_list+0x129/0x1e0 [ 454.593332][ T8620] ? __pfx_vhost_run_work_list+0x10/0x10 [ 454.593357][ T8620] vhost_task_fn+0x2fc/0x4b0 [ 454.593389][ T8620] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 454.593415][ T8620] ? __pfx_vhost_task_fn+0x10/0x10 [ 454.593450][ T8620] ? rt_spin_unlock+0x159/0x200 [ 454.593481][ T8620] ? rt_spin_unlock+0x165/0x200 [ 454.593509][ T8620] ? __pfx_vhost_task_fn+0x10/0x10 [ 454.593542][ T8620] ret_from_fork+0x514/0xb70 [ 454.593576][ T8620] ? __pfx_ret_from_fork+0x10/0x10 [ 454.593606][ T8620] ? __switch_to+0xc89/0x1420 [ 454.593634][ T8620] ? __pfx_vhost_task_fn+0x10/0x10 [ 454.593666][ T8620] ret_from_fork_asm+0x1a/0x30 [ 454.593706][ T8620] [ 454.594310][ T8620] Kernel Offset: disabled