last executing test programs: 7.630268203s ago: executing program 3 (id=7763): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) socket(0x2d, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) (fail_nth: 1) 5.298590899s ago: executing program 1 (id=7774): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000280)={{0x80, 0x44}, 'port0\x00', 0x786520dbf34c80ff, 0x30202, 0x122, 0x0, 0x0, 0x4c4dc0a6, 0x400, 0x0, 0x5, 0x88}) readv(r0, &(0x7f0000002880)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) (fail_nth: 1) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) 5.039240223s ago: executing program 3 (id=7776): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) 4.815805783s ago: executing program 3 (id=7778): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f0000000040)={0x4, 0x7fff}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x390e}}}, 0x104) 4.743541523s ago: executing program 1 (id=7779): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) socket(0x2d, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x2540) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x1c}, 0x0, 0x7}) 4.171681856s ago: executing program 0 (id=7782): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.778623727s ago: executing program 0 (id=7784): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (fail_nth: 1) 3.127097007s ago: executing program 3 (id=7788): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) 3.090227375s ago: executing program 0 (id=7790): openat$dlm_control(0xffffff9c, &(0x7f0000001a00), 0x20000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="1d0c25bd7000ffdbdf250c00000008000300", @ANYRES32, @ANYBLOB="0c005080fd004200000000000a00"], 0x34}, 0x1, 0x0, 0x0, 0x48810}, 0x20008001) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x2002810, &(0x7f0000001cc0)=ANY=[@ANYBLOB="66643ddd4cde71a501f4cc8192e28d9700a79fc49ae2d75d4da4061da315416c3c00532ea37f831a3de04f9cd1d43f7974510ee3229927c20efc6a20d0d806da0199a11f94df0584b685d0e6a0b6a800"/90, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0xee00, @ANYRES16, @ANYRESDEC, @ANYBLOB=',max_read=0x000000000000000b,blksize=0x0000000000000800,blksize=0x0000000000001400,blksize=0x0000000000000a00,blksize=0x0000000000001000,func=CREDS_CHECK,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c657569643e59863dba1776be4004bb231f4d9785721e0f488ee882019ac4526edca00b25259545aadf5ce0f852229eb3cf069f514dde1493c96cc2181f82e4efbad4f95ec85d96bdd34625d6480d6ed6d44c42e58323af7f81e096b8f722eb37e40e7c9922065857", @ANYRESDEC, @ANYBLOB="2c7065726d697405000000656374696f2c00"], 0x0, 0x0, &(0x7f0000000380)="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") fsopen(&(0x7f0000000000)='proc\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0xf6ffffff, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x400, 0x0) 2.769127564s ago: executing program 3 (id=7791): syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x101000) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x9) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x8, 0x1}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) landlock_restrict_self(r2, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) 2.650249321s ago: executing program 1 (id=7793): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x8000) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x361f045a65d0fea6}, {}, {r0, 0x81d2}, {0xffffffffffffffff, 0x8005}], 0x4, 0x0, 0x0, 0x0) read$dsp(r2, &(0x7f0000003200)=""/4088, 0x57d) write$dsp(r1, &(0x7f0000002200)="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", 0x1000) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) 2.639110295s ago: executing program 0 (id=7794): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000040)=0x8) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x80) fchdir(r3) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "c30d3290d26ac510", "13a809198512fb0d6f83efa680149745", "ed7aa615", "88da67d7a68b8bef"}, 0x28) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x3, 0x10, 0x0, 0x7fff0000}]}) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x39a3019, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x644c0, 0x0) r5 = getpid() chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) close_range(r4, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000004}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 2.481910077s ago: executing program 0 (id=7796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) 2.410860304s ago: executing program 0 (id=7797): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x26b41) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000240)=0x1700) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x8290, 0x4}) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0xffffffff9673e35d]}}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[r9], &(0x7f0000000040), 0x0, 0x300}) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 2.258302159s ago: executing program 1 (id=7799): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500040001000000050008000100000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.029980927s ago: executing program 1 (id=7801): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0xfe) (async) r2 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r2, 0x29, 0xcf, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file3\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) (async, rerun: 64) r5 = inotify_init1(0x0) (rerun: 64) inotify_add_watch(r5, &(0x7f0000000180)='./file1\x00', 0xa500014c) (async) inotify_add_watch(r5, &(0x7f0000000140)='./file0/file3\x00', 0xd0000080) inotify_add_watch(r5, &(0x7f00000000c0)='./file1/file3\x00', 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800150a", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.73150117s ago: executing program 3 (id=7803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0xfffffffffffffe84, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x202, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) unshare(0x60600) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000000)=0x1) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7ef6, 0x8}) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0x3, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x9, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xef}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYRES16=r6], 0x0) 1.664441109s ago: executing program 2 (id=7804): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r3, 0x7, 0x2, r2}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xfe, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0xca, 0xd, 0x2000000000004, 0x6d, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbe2], 0x2000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 1) 1.087870102s ago: executing program 4 (id=7806): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8050, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x2, 0x7fffffffffffffff, 0x7, 0x7fffffffffffffff, 0x2, 0x2, 0x6dd, 0xfffffffffffffff9, 0xb482, 0x9, 0xfffffffffffffffc, 0x7ff, 0xa, 0x0, 0x9], 0x80a0000, 0x148800}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x3, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) 935.974932ms ago: executing program 2 (id=7807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) 876.228994ms ago: executing program 1 (id=7808): r0 = epoll_create1(0x80000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000100000000000040040000000000000010000000000000002000000000000000"], 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x3}]}) r2 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000780)={0x0, 0x1, 0x8}) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x500, 0xa0000, 0x32315842, 0x32315559}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000b80)={r3, 0x9, 0x0, [0x3f, 0x3, 0xc1c9, 0x1, 0xfffffffffffffffb], [0x7fffffff, 0x6, 0x4, 0x9, 0x0, 0x7c32, 0x8, 0x4, 0x80000001, 0x2, 0x7fff, 0x6, 0x20000000, 0x1, 0x9, 0xffff, 0x80000001, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x20, 0x8000, 0x3, 0x4, 0x2, 0x1, 0x9, 0x7, 0x81, 0xfffffffffffff001, 0x6, 0xffff, 0x6, 0x7, 0xb1, 0x4, 0x3, 0x4, 0xffffffffffffffff, 0x4, 0x1000, 0x2, 0x2, 0x64c96ad2, 0xfffffffffffffffd, 0x401, 0x799, 0x0, 0x6, 0x8, 0x72e9c113, 0x100000000, 0x9, 0x98b, 0xd00000, 0x5, 0x10, 0x8000000000000000, 0x7, 0x10, 0x3, 0x0, 0x1, 0xfffffffffffffffe, 0x6, 0x4, 0xe, 0x200, 0x84, 0x2, 0x8, 0x6, 0x636da4b8, 0x6, 0x8c, 0x34c, 0xfffffffffffffff8, 0x6, 0x7, 0x6, 0x4e3e, 0xb3c1, 0x2, 0x8, 0xe, 0xed7, 0x7, 0x6, 0xffffffff7fffffff, 0x8, 0x6, 0x6, 0x8000000000000000, 0x8000000000000001, 0x1565, 0x3ff, 0x8000000000000001, 0x9, 0x401, 0x10001, 0x1, 0x3d7, 0x1, 0x3, 0x4, 0x4, 0x2, 0xffffffffffffff81, 0x9, 0x2, 0x92, 0x4, 0x4, 0x1, 0x7c, 0x3, 0x7, 0x707f, 0x1]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003b00)=""/4096, 0x1000}, {0x0}], 0x2}, 0x9}], 0x1, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) sendmmsg(0xffffffffffffffff, &(0x7f0000004380), 0x34000, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000000206030000000000000000000000000705000400030000000900020073797a31000000000500050005000000358d00a7d30500010007000000ba000000000000003a69702c706f72"], 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20004014) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8c0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000040)="290000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd", 0x2a}], 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000040)={0x4, r1, 0x80000}) socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r11 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r11, 0x25, &(0x7f00000002c0)) 861.153228ms ago: executing program 2 (id=7809): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x8000) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x361f045a65d0fea6}, {}, {r0, 0x81d2}, {0xffffffffffffffff, 0x8005}], 0x4, 0x0, 0x0, 0x0) read$dsp(r2, &(0x7f0000003200)=""/4088, 0x57d) write$dsp(r1, &(0x7f0000002200)="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", 0x1000) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) 704.323089ms ago: executing program 4 (id=7810): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000240)='~', 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc018620b, &(0x7f000001ed80)) mprotect(&(0x7f0000adf000/0x1000)=nil, 0x1000, 0xd) r3 = accept4$inet(r0, 0x0, &(0x7f00000000c0), 0x80000) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000100)=""/36, &(0x7f0000000040)=0x24) 573.642952ms ago: executing program 4 (id=7811): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0) (fail_nth: 1) 296.362368ms ago: executing program 2 (id=7812): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000380)="a5", 0x1, 0x894, &(0x7f0000001380)={0xa, 0x4e22, 0xfffffffe, @mcast2, 0x2}, 0x1c) 231.155778ms ago: executing program 4 (id=7813): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000dc0)={0x108, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x38}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 202.430339ms ago: executing program 2 (id=7814): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000001c0)={0x1e, 0x0}) sendto$inet6(r0, &(0x7f0000000080)="a563232f02f5a65971c80d4b770039df42537becc2031b1381d07576dde9c96bc020b5f249e7505b2b6872684ac211aa09594e5df5a1bcbe89956c25a4cf8bc34962bc056411abe48baed0459f000acc2671accf00f6224869d23c966b4dfcdc8727a5d14f95fbd80321d6efd5fbb599ce4176967a390b502dc1c801feeed89a0bc7e346bd22abeb452f3209c4cdb6cb8d341bdb6002579be1f6fac351e1735c", 0x1, 0x8894, &(0x7f0000001380)={0xa, 0x4e21, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x17}, 0x2}, 0xfffffffffffffdfe) 109.289164ms ago: executing program 4 (id=7815): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000380)={0x28, 0x2, 0x0, {0x5, 0x100000001, 0x9}}, 0x28) 51.658675ms ago: executing program 2 (id=7816): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r6 = dup(r4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0xaa}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r7, 0x0, r4, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x8000000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000003c0)={0x50000, 0x2000}) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x290}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10024, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYBLOB=',r']) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x400000002, 0x9, 0x86, 0x100000001, 0x2, 0x3, 0x4002004c4, 0x1004, 0x3e6d40000000, 0xc595, 0x4000000000000000, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x4], 0xb000, 0x2010d3}) r11 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r11, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) 0s ago: executing program 4 (id=7817): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8050, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x2, 0x7fffffffffffffff, 0x7, 0x7fffffffffffffff, 0x2, 0x2, 0x6dd, 0xfffffffffffffff9, 0xb482, 0x9, 0xfffffffffffffffc, 0x7ff, 0xa, 0x0, 0x9], 0x80a0000, 0x148800}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x3, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): e device [ 1314.234302][T27170] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1314.273109][T25359] usb 2-1: USB disconnect, device number 99 [ 1314.285557][T25359] usb 2-1: ath9k_htc: USB layer deinitialized [ 1314.298110][T27170] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1314.356474][T27170] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1314.400651][T27170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.680838][T27170] usb 4-1: usb_control_msg returned -71 [ 1314.703694][T27170] usbtmc 4-1:16.0: can't read capabilities [ 1314.770974][T27466] netlink: 'syz.1.7525': attribute type 3 has an invalid length. [ 1314.790128][T27170] usb 4-1: USB disconnect, device number 113 [ 1315.259674][T23830] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1315.429658][T23830] usb 2-1: Using ep0 maxpacket: 8 [ 1315.446256][T23830] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1315.466780][T23830] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 0 [ 1315.499333][T23830] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1315.526736][T23830] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 0 [ 1315.548928][T23830] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1315.588344][T23830] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1315.618445][T23830] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1315.638334][T23830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.666993][T23830] usb 2-1: Product: syz [ 1315.690473][T23830] usb 2-1: Manufacturer: syz [ 1315.709060][T23830] usb 2-1: SerialNumber: syz [ 1315.733553][T27475] misc userio: The device must be registered before sending interrupts [ 1315.752020][T23830] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1315.771675][T23830] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1315.801661][T23830] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1315.956139][T27480] fuse: Bad value for 'group_id' [ 1315.966657][T25359] usb 2-1: USB disconnect, device number 100 [ 1315.983039][T27480] fuse: Bad value for 'group_id' [ 1315.996934][T27482] VFS: Mount too revealing [ 1316.049747][T27170] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1316.209678][T27170] usb 4-1: Using ep0 maxpacket: 16 [ 1316.217526][T27170] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1316.228171][T27170] usb 4-1: config 0 has no interface number 0 [ 1316.234663][T27170] usb 4-1: config 0 interface 1 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1316.249320][T27170] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1316.256151][T27170] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1316.265700][T23830] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1316.284378][T27170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.298750][T27170] usb 4-1: config 0 descriptor?? [ 1316.318801][T27170] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1316.409726][T23830] usb 5-1: device descriptor read/64, error -71 [ 1316.532021][T27170] gspca_sonixj: reg_w1 err -71 [ 1316.554892][T27170] sonixj 4-1:0.1: probe with driver sonixj failed with error -71 [ 1316.657967][T27170] usb 4-1: USB disconnect, device number 114 [ 1316.672323][T23830] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1316.764297][T27495] netlink: 'syz.1.7536': attribute type 3 has an invalid length. [ 1316.796269][T27497] netlink: 'syz.0.7537': attribute type 10 has an invalid length. [ 1316.822100][T23830] usb 5-1: device descriptor read/64, error -71 [ 1316.937736][T27502] FAULT_INJECTION: forcing a failure. [ 1316.937736][T27502] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.960177][T23830] usb usb5-port1: attempt power cycle [ 1316.970819][T27502] CPU: 1 UID: 0 PID: 27502 Comm: syz.1.7540 Tainted: G L syzkaller #0 PREEMPT(full) [ 1316.970856][T27502] Tainted: [L]=SOFTLOCKUP [ 1316.970866][T27502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1316.970879][T27502] Call Trace: [ 1316.970889][T27502] [ 1316.970899][T27502] dump_stack_lvl+0xe8/0x150 [ 1316.970933][T27502] should_fail_ex+0x412/0x560 [ 1316.970967][T27502] should_failslab+0xa8/0x100 [ 1316.971005][T27502] __kmalloc_noprof+0xe8/0x760 [ 1316.971037][T27502] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1316.971077][T27502] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1316.971111][T27502] ? tomoyo_domain+0xd7/0x130 [ 1316.971147][T27502] ? tomoyo_path_number_perm+0x219/0x630 [ 1316.971173][T27502] tomoyo_path_number_perm+0x246/0x630 [ 1316.971201][T27502] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1316.971227][T27502] ? __lock_acquire+0x6b5/0x2cf0 [ 1316.971295][T27502] ? __fget_files+0x2a/0x420 [ 1316.971327][T27502] ? __fget_files+0x3a0/0x420 [ 1316.971353][T27502] ? __fget_files+0x2a/0x420 [ 1316.971382][T27502] security_file_ioctl_compat+0xc3/0x2a0 [ 1316.971410][T27502] __ia32_compat_sys_ioctl+0x139/0x950 [ 1316.971448][T27502] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1316.971487][T27502] ? __fget_files+0x3a0/0x420 [ 1316.971520][T27502] ? fput+0xa0/0xd0 [ 1316.971546][T27502] ? ksys_write+0x242/0x270 [ 1316.971590][T27502] __do_fast_syscall_32+0x229/0x6e0 [ 1316.971630][T27502] ? do_fast_syscall_32+0x33/0x70 [ 1316.971657][T27502] ? lockdep_hardirqs_on+0x7a/0x110 [ 1316.971683][T27502] ? asm_int80_emulation+0x1a/0x20 [ 1316.971705][T27502] ? do_int80_emulation+0x286/0x530 [ 1316.971731][T27502] ? trace_irq_disable+0x3b/0x140 [ 1316.971768][T27502] do_fast_syscall_32+0x33/0x70 [ 1316.971796][T27502] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1316.971824][T27502] RIP: 0023:0xf7f8901c [ 1316.971845][T27502] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1316.971865][T27502] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1316.971889][T27502] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 1316.971904][T27502] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1316.971918][T27502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1316.971930][T27502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1316.971944][T27502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1316.971976][T27502] [ 1316.971998][T27502] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1317.070298][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1317.090277][T27502] loop2: detected capacity change from 0 to 7 [ 1317.277876][T27502] loop2: [ 1317.285487][T27502] loop2: partition table partially beyond EOD, truncated [ 1317.352373][T23830] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1317.381039][T23830] usb 5-1: device descriptor read/8, error -71 [ 1317.515052][T27513] FAULT_INJECTION: forcing a failure. [ 1317.515052][T27513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.528620][T27513] CPU: 1 UID: 0 PID: 27513 Comm: syz.1.7544 Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.528656][T27513] Tainted: [L]=SOFTLOCKUP [ 1317.528665][T27513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1317.528679][T27513] Call Trace: [ 1317.528687][T27513] [ 1317.528698][T27513] dump_stack_lvl+0xe8/0x150 [ 1317.528731][T27513] should_fail_ex+0x412/0x560 [ 1317.528765][T27513] _copy_from_user+0x2d/0xb0 [ 1317.528798][T27513] get_compat_msghdr+0xb3/0x4c0 [ 1317.528831][T27513] ? _parse_integer_limit+0x1ae/0x1f0 [ 1317.528857][T27513] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1317.528890][T27513] ? kstrtoull+0x12f/0x1d0 [ 1317.528921][T27513] ___sys_sendmsg+0x201/0x360 [ 1317.528949][T27513] ? __lock_acquire+0x6b5/0x2cf0 [ 1317.528975][T27513] ? __pfx____sys_sendmsg+0x10/0x10 [ 1317.529005][T27513] ? get_pid_task+0x20/0x1f0 [ 1317.529031][T27513] ? get_pid_task+0x20/0x1f0 [ 1317.529055][T27513] ? get_pid_task+0x20/0x1f0 [ 1317.529106][T27513] ? __fget_files+0x2a/0x420 [ 1317.529131][T27513] ? __fget_files+0x3a0/0x420 [ 1317.529167][T27513] __sys_sendmsg+0x183/0x260 [ 1317.529198][T27513] ? __pfx___sys_sendmsg+0x10/0x10 [ 1317.529248][T27513] __do_fast_syscall_32+0x229/0x6e0 [ 1317.529279][T27513] ? do_fast_syscall_32+0x33/0x70 [ 1317.529305][T27513] ? lockdep_hardirqs_on+0x7a/0x110 [ 1317.529329][T27513] ? asm_int80_emulation+0x1a/0x20 [ 1317.529350][T27513] ? do_int80_emulation+0x286/0x530 [ 1317.529376][T27513] ? trace_irq_disable+0x3b/0x140 [ 1317.529413][T27513] do_fast_syscall_32+0x33/0x70 [ 1317.529441][T27513] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1317.529468][T27513] RIP: 0023:0xf7f8901c [ 1317.529488][T27513] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1317.529508][T27513] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1317.529535][T27513] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 1317.529550][T27513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1317.529564][T27513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1317.529576][T27513] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1317.529589][T27513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1317.529629][T27513] [ 1317.920319][T23830] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1317.944926][T23830] usb 5-1: device descriptor read/8, error -71 [ 1318.044725][T27524] netlink: 'syz.3.7548': attribute type 3 has an invalid length. [ 1318.060429][T23830] usb usb5-port1: unable to enumerate USB device [ 1318.167215][T27528] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7551'. [ 1318.398618][T27536] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 1318.409954][T23830] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1318.496150][T27541] FAULT_INJECTION: forcing a failure. [ 1318.496150][T27541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.529673][T27541] CPU: 0 UID: 0 PID: 27541 Comm: syz.0.7557 Tainted: G L syzkaller #0 PREEMPT(full) [ 1318.529707][T27541] Tainted: [L]=SOFTLOCKUP [ 1318.529716][T27541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1318.529729][T27541] Call Trace: [ 1318.529739][T27541] [ 1318.529748][T27541] dump_stack_lvl+0xe8/0x150 [ 1318.529781][T27541] should_fail_ex+0x412/0x560 [ 1318.529815][T27541] _copy_from_user+0x2d/0xb0 [ 1318.529847][T27541] get_compat_msghdr+0xb3/0x4c0 [ 1318.529880][T27541] ? _parse_integer_limit+0x1ae/0x1f0 [ 1318.529906][T27541] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1318.529936][T27541] ? kstrtoull+0x12f/0x1d0 [ 1318.529969][T27541] ___sys_sendmsg+0x201/0x360 [ 1318.529997][T27541] ? __lock_acquire+0x6b5/0x2cf0 [ 1318.530025][T27541] ? __pfx____sys_sendmsg+0x10/0x10 [ 1318.530054][T27541] ? get_pid_task+0x20/0x1f0 [ 1318.530082][T27541] ? get_pid_task+0x20/0x1f0 [ 1318.530106][T27541] ? get_pid_task+0x20/0x1f0 [ 1318.530158][T27541] ? __fget_files+0x2a/0x420 [ 1318.530182][T27541] ? __fget_files+0x3a0/0x420 [ 1318.530217][T27541] __sys_sendmsg+0x183/0x260 [ 1318.530246][T27541] ? __pfx___sys_sendmsg+0x10/0x10 [ 1318.530295][T27541] __do_fast_syscall_32+0x229/0x6e0 [ 1318.530325][T27541] ? do_fast_syscall_32+0x33/0x70 [ 1318.530350][T27541] ? lockdep_hardirqs_on+0x7a/0x110 [ 1318.530375][T27541] ? asm_int80_emulation+0x1a/0x20 [ 1318.530396][T27541] ? do_int80_emulation+0x286/0x530 [ 1318.530422][T27541] ? trace_irq_disable+0x3b/0x140 [ 1318.530458][T27541] do_fast_syscall_32+0x33/0x70 [ 1318.530484][T27541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1318.530511][T27541] RIP: 0023:0xf707f01c [ 1318.530542][T27541] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1318.530561][T27541] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1318.530584][T27541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001080 [ 1318.530600][T27541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1318.530614][T27541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1318.530627][T27541] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1318.530641][T27541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1318.530670][T27541] [ 1318.575735][T23830] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1318.618126][T12494] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1318.646498][T23830] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1318.819292][T23830] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1318.829358][T23830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.843015][T23830] usb 4-1: Product: syz [ 1318.867760][T23830] usb 4-1: Manufacturer: syz [ 1318.892934][T23830] usb 4-1: SerialNumber: syz [ 1318.933082][T23830] usb 4-1: config 0 descriptor?? [ 1318.955347][T23830] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1318.969641][T12494] usb 2-1: Using ep0 maxpacket: 8 [ 1318.986345][T12494] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1319.006733][T12494] usb 2-1: config 240 has an invalid interface number: 167 but max is 0 [ 1319.019015][T12494] usb 2-1: config 240 has no interface number 0 [ 1319.071437][T12494] usb 2-1: config 240 interface 167 altsetting 255 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1319.083251][T12494] usb 2-1: config 240 interface 167 has no altsetting 0 [ 1319.099261][T12494] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=40.c1 [ 1319.109939][T12494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.118072][T12494] usb 2-1: Product: syz [ 1319.122869][T12494] usb 2-1: Manufacturer: syz [ 1319.127561][T12494] usb 2-1: SerialNumber: syz [ 1319.158984][T27533] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1319.199897][T25359] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1319.297316][T27553] netlink: 'syz.4.7563': attribute type 3 has an invalid length. [ 1319.306514][T27554] FAULT_INJECTION: forcing a failure. [ 1319.306514][T27554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1319.329743][T27554] CPU: 1 UID: 0 PID: 27554 Comm: syz.2.7562 Tainted: G L syzkaller #0 PREEMPT(full) [ 1319.329781][T27554] Tainted: [L]=SOFTLOCKUP [ 1319.329789][T27554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1319.329803][T27554] Call Trace: [ 1319.329812][T27554] [ 1319.329823][T27554] dump_stack_lvl+0xe8/0x150 [ 1319.329856][T27554] should_fail_ex+0x412/0x560 [ 1319.329891][T27554] _copy_from_user+0x2d/0xb0 [ 1319.329923][T27554] get_compat_msghdr+0xb3/0x4c0 [ 1319.329957][T27554] ? _parse_integer_limit+0x1ae/0x1f0 [ 1319.329984][T27554] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1319.330015][T27554] ? kstrtoull+0x12f/0x1d0 [ 1319.330046][T27554] ___sys_sendmsg+0x201/0x360 [ 1319.330075][T27554] ? __lock_acquire+0x6b5/0x2cf0 [ 1319.330104][T27554] ? __pfx____sys_sendmsg+0x10/0x10 [ 1319.330137][T27554] ? get_pid_task+0x20/0x1f0 [ 1319.330165][T27554] ? get_pid_task+0x20/0x1f0 [ 1319.330190][T27554] ? get_pid_task+0x20/0x1f0 [ 1319.330246][T27554] ? __fget_files+0x2a/0x420 [ 1319.330273][T27554] ? __fget_files+0x3a0/0x420 [ 1319.330310][T27554] __sys_sendmsg+0x183/0x260 [ 1319.330340][T27554] ? __pfx___sys_sendmsg+0x10/0x10 [ 1319.330390][T27554] __do_fast_syscall_32+0x229/0x6e0 [ 1319.330421][T27554] ? do_fast_syscall_32+0x33/0x70 [ 1319.330461][T27554] ? lockdep_hardirqs_on+0x7a/0x110 [ 1319.330486][T27554] ? asm_int80_emulation+0x1a/0x20 [ 1319.330508][T27554] ? do_int80_emulation+0x286/0x530 [ 1319.330535][T27554] ? trace_irq_disable+0x3b/0x140 [ 1319.330572][T27554] do_fast_syscall_32+0x33/0x70 [ 1319.330601][T27554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1319.330627][T27554] RIP: 0023:0xf700f01c [ 1319.330646][T27554] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1319.330673][T27554] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1319.330697][T27554] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1319.330712][T27554] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 1319.330725][T27554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1319.330738][T27554] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1319.330751][T27554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1319.330782][T27554] [ 1319.454340][T25359] usb 1-1: Using ep0 maxpacket: 16 [ 1319.698687][T27529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.721077][T12494] kvaser_usb 2-1:240.167: error -ENODEV: Cannot get usb endpoint(s) [ 1319.743738][T27529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.799407][T14563] usb 4-1: USB disconnect, device number 115 [ 1319.852627][T12494] usb 2-1: USB disconnect, device number 101 [ 1319.940899][T25359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.967452][T25359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.981161][T25359] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1320.026178][T25359] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1320.042976][T25359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.068179][T25359] usb 1-1: config 0 descriptor?? [ 1320.386497][T27576] bond2: (slave macvlan6): Error -98 calling set_mac_address [ 1320.499444][T25359] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1320.549838][T25359] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0011/input/input52 [ 1320.782734][T27545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.813724][T25359] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1320.840101][T27545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.869888][T27545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7559'. [ 1320.897222][T25359] usb 1-1: USB disconnect, device number 100 [ 1321.088061][T27587] fido_id[27587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1321.422325][T14581] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1321.586071][T14581] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1321.606788][T14581] usb 3-1: config 0 has an invalid interface number: 255 but max is 252 [ 1321.644062][T14581] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1321.662241][T23830] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1321.671846][T14581] usb 3-1: config 0 has no interface number 0 [ 1321.678679][T14581] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1321.691825][T14581] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1321.706068][T14581] usb 3-1: config 0 interface 255 has no altsetting 0 [ 1321.716824][T14581] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1321.727791][T14581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.737375][T14581] usb 3-1: Product: syz [ 1321.744902][T14581] usb 3-1: Manufacturer: syz [ 1321.754726][T14581] usb 3-1: SerialNumber: syz [ 1321.772140][T14581] usb 3-1: config 0 descriptor?? [ 1321.822880][T23830] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1321.843380][T23830] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1321.853538][T23830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.858144][T23830] usb 5-1: config 0 descriptor?? [ 1321.905741][T27613] FAULT_INJECTION: forcing a failure. [ 1321.905741][T27613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1321.907841][T27613] CPU: 1 UID: 0 PID: 27613 Comm: syz.0.7583 Tainted: G L syzkaller #0 PREEMPT(full) [ 1321.907874][T27613] Tainted: [L]=SOFTLOCKUP [ 1321.907883][T27613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1321.907895][T27613] Call Trace: [ 1321.907904][T27613] [ 1321.907916][T27613] dump_stack_lvl+0xe8/0x150 [ 1321.907953][T27613] should_fail_ex+0x412/0x560 [ 1321.907987][T27613] _copy_to_user+0x31/0xb0 [ 1321.908023][T27613] simple_read_from_buffer+0xe1/0x170 [ 1321.908057][T27613] proc_fail_nth_read+0x1bb/0x230 [ 1321.908091][T27613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1321.908125][T27613] ? rw_verify_area+0x2a6/0x4d0 [ 1321.908156][T27613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1321.908187][T27613] vfs_read+0x20c/0xa70 [ 1321.908223][T27613] ? __pfx___mutex_lock+0x10/0x10 [ 1321.908254][T27613] ? __pfx_vfs_read+0x10/0x10 [ 1321.908287][T27613] ? __fget_files+0x2a/0x420 [ 1321.908329][T27613] ? __fget_files+0x3a0/0x420 [ 1321.908354][T27613] ? __fget_files+0x2a/0x420 [ 1321.908390][T27613] ksys_read+0x150/0x270 [ 1321.908424][T27613] ? __pfx_ksys_read+0x10/0x10 [ 1321.908460][T27613] ? asm_int80_emulation+0x1a/0x20 [ 1321.908488][T27613] do_int80_emulation+0x181/0x530 [ 1321.908516][T27613] ? trace_irq_disable+0x3b/0x140 [ 1321.908548][T27613] ? asm_int80_emulation+0x1a/0x20 [ 1321.908569][T27613] ? clear_bhb_loop+0x40/0x90 [ 1321.908591][T27613] ? clear_bhb_loop+0x40/0x90 [ 1321.908618][T27613] asm_int80_emulation+0x1a/0x20 [ 1321.908640][T27613] RIP: 0023:0xf71b616b [ 1321.908661][T27613] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1321.908681][T27613] RSP: 002b:00000000f544c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1321.908704][T27613] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f544c5d0 [ 1321.908720][T27613] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1321.908733][T27613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1321.908745][T27613] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1321.908759][T27613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1321.908791][T27613] [ 1322.015010][T27593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.246703][T27593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.287606][T27593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.313935][T27593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.356526][T14581] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1322.545926][T14581] gspca_sunplus: reg_r err -71 [ 1322.578028][T14581] sunplus 3-1:0.255: probe with driver sunplus failed with error -71 [ 1322.625721][T14581] usb 3-1: USB disconnect, device number 104 [ 1322.843782][T27614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.852902][T27614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.972116][T25359] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1323.144437][T25359] usb 1-1: not running at top speed; connect to a high speed hub [ 1323.181323][T25359] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.208249][T25359] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 1323.227815][T25359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.238345][T25359] usb 1-1: Product: syz [ 1323.243762][T25359] usb 1-1: Manufacturer: syz [ 1323.248606][T25359] usb 1-1: SerialNumber: syz [ 1323.289671][T27641] FAULT_INJECTION: forcing a failure. [ 1323.289671][T27641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.321739][T27641] CPU: 0 UID: 0 PID: 27641 Comm: syz.3.7596 Tainted: G L syzkaller #0 PREEMPT(full) [ 1323.321774][T27641] Tainted: [L]=SOFTLOCKUP [ 1323.321782][T27641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1323.321799][T27641] Call Trace: [ 1323.321809][T27641] [ 1323.321819][T27641] dump_stack_lvl+0xe8/0x150 [ 1323.321851][T27641] should_fail_ex+0x412/0x560 [ 1323.321886][T27641] _copy_from_user+0x2d/0xb0 [ 1323.321918][T27641] get_compat_msghdr+0xb3/0x4c0 [ 1323.321951][T27641] ? _parse_integer_limit+0x1ae/0x1f0 [ 1323.321976][T27641] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1323.322008][T27641] ? kstrtoull+0x12f/0x1d0 [ 1323.322039][T27641] ___sys_sendmsg+0x201/0x360 [ 1323.322067][T27641] ? __lock_acquire+0x6b5/0x2cf0 [ 1323.322095][T27641] ? __pfx____sys_sendmsg+0x10/0x10 [ 1323.322125][T27641] ? get_pid_task+0x20/0x1f0 [ 1323.322153][T27641] ? get_pid_task+0x20/0x1f0 [ 1323.322177][T27641] ? get_pid_task+0x20/0x1f0 [ 1323.322230][T27641] ? __fget_files+0x2a/0x420 [ 1323.322266][T27641] ? __fget_files+0x3a0/0x420 [ 1323.322302][T27641] __sys_sendmsg+0x183/0x260 [ 1323.322332][T27641] ? __pfx___sys_sendmsg+0x10/0x10 [ 1323.322382][T27641] __do_fast_syscall_32+0x229/0x6e0 [ 1323.322412][T27641] ? do_fast_syscall_32+0x33/0x70 [ 1323.322438][T27641] ? lockdep_hardirqs_on+0x7a/0x110 [ 1323.322464][T27641] ? asm_int80_emulation+0x1a/0x20 [ 1323.322485][T27641] ? do_int80_emulation+0x286/0x530 [ 1323.322518][T27641] do_fast_syscall_32+0x33/0x70 [ 1323.322545][T27641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1323.322571][T27641] RIP: 0023:0xf703f01c [ 1323.322592][T27641] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1323.322611][T27641] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1323.322635][T27641] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 1323.322651][T27641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1323.322663][T27641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1323.322677][T27641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1323.322689][T27641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1323.322722][T27641] [ 1323.644372][T27648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.653475][T27648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.728870][T25359] usb 1-1: USB disconnect, device number 101 [ 1323.853994][T27651] bond2: (slave macvlan6): Error -98 calling set_mac_address [ 1324.082481][T27659] bond2: option mode: unable to set because the bond device has slaves [ 1324.115947][T27659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7602'. [ 1324.183986][T27659] bond2: (slave macvlan6): Error -98 calling set_mac_address [ 1324.562554][T14581] usb 5-1: USB disconnect, device number 95 [ 1324.650027][T12494] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1324.845773][T12494] usb 1-1: Using ep0 maxpacket: 32 [ 1324.855118][T12494] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1324.855151][T12494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.855170][T12494] usb 1-1: Product: â°Š [ 1324.855184][T12494] usb 1-1: Manufacturer: а [ 1324.855199][T12494] usb 1-1: SerialNumber: ⴞ湋 [ 1325.122455][T12494] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1325.203477][T12494] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1325.227205][T12494] usb 1-1: 2:1 : invalid channels 0 [ 1325.259750][T27170] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1325.261300][T12494] usb 1-1: unit 5 not found! [ 1325.439818][T27170] usb 5-1: Using ep0 maxpacket: 16 [ 1325.467850][T27170] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1325.508545][T27170] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1325.536674][T27170] usb 5-1: can't read configurations, error -61 [ 1325.565404][T12494] usb 1-1: USB disconnect, device number 102 [ 1325.668346][T18503] udevd[18503]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 1325.705479][T27170] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1325.728049][T27686] netlink: 'syz.3.7610': attribute type 3 has an invalid length. [ 1325.736825][T18503] udevd[18503]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1325.899638][T27170] usb 5-1: Using ep0 maxpacket: 16 [ 1325.924876][T27170] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1325.951739][T27170] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1325.969712][T27170] usb 5-1: can't read configurations, error -61 [ 1325.985548][T27170] usb usb5-port1: attempt power cycle [ 1326.340488][T27170] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1326.402180][T27170] usb 5-1: Using ep0 maxpacket: 16 [ 1326.432053][T27170] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1326.468583][T27170] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1326.491965][T27170] usb 5-1: can't read configurations, error -61 [ 1326.649765][T27170] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1326.692638][T27170] usb 5-1: Using ep0 maxpacket: 16 [ 1326.711035][T27170] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1326.734373][T27170] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1326.756758][T27170] usb 5-1: can't read configurations, error -61 [ 1326.774885][T27170] usb usb5-port1: unable to enumerate USB device [ 1326.947421][T27701] FAULT_INJECTION: forcing a failure. [ 1326.947421][T27701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.999653][T27701] CPU: 1 UID: 0 PID: 27701 Comm: syz.0.7612 Tainted: G L syzkaller #0 PREEMPT(full) [ 1326.999691][T27701] Tainted: [L]=SOFTLOCKUP [ 1326.999701][T27701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1326.999716][T27701] Call Trace: [ 1326.999725][T27701] [ 1326.999736][T27701] dump_stack_lvl+0xe8/0x150 [ 1326.999769][T27701] should_fail_ex+0x412/0x560 [ 1326.999805][T27701] _copy_from_user+0x2d/0xb0 [ 1326.999838][T27701] get_compat_msghdr+0xb3/0x4c0 [ 1326.999873][T27701] ? _parse_integer_limit+0x1ae/0x1f0 [ 1326.999899][T27701] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1326.999930][T27701] ? kstrtoull+0x12f/0x1d0 [ 1326.999963][T27701] ___sys_sendmsg+0x201/0x360 [ 1326.999992][T27701] ? __lock_acquire+0x6b5/0x2cf0 [ 1327.000021][T27701] ? __pfx____sys_sendmsg+0x10/0x10 [ 1327.000062][T27701] ? get_pid_task+0x20/0x1f0 [ 1327.000091][T27701] ? get_pid_task+0x20/0x1f0 [ 1327.000117][T27701] ? get_pid_task+0x20/0x1f0 [ 1327.000174][T27701] ? __fget_files+0x2a/0x420 [ 1327.000200][T27701] ? __fget_files+0x3a0/0x420 [ 1327.000235][T27701] __sys_sendmsg+0x183/0x260 [ 1327.000265][T27701] ? __pfx___sys_sendmsg+0x10/0x10 [ 1327.000318][T27701] __do_fast_syscall_32+0x229/0x6e0 [ 1327.000354][T27701] ? do_fast_syscall_32+0x33/0x70 [ 1327.000381][T27701] ? lockdep_hardirqs_on+0x7a/0x110 [ 1327.000406][T27701] ? asm_int80_emulation+0x1a/0x20 [ 1327.000428][T27701] ? do_int80_emulation+0x286/0x530 [ 1327.000455][T27701] ? trace_irq_disable+0x3b/0x140 [ 1327.000492][T27701] do_fast_syscall_32+0x33/0x70 [ 1327.000521][T27701] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1327.000547][T27701] RIP: 0023:0xf707f01c [ 1327.000566][T27701] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1327.000585][T27701] RSP: 002b:00000000f542b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1327.000608][T27701] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000840 [ 1327.000623][T27701] RDX: 0000000024044050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1327.000636][T27701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1327.000649][T27701] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1327.000663][T27701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1327.000695][T27701] [ 1328.012727][T27717] netlink: 'syz.2.7620': attribute type 10 has an invalid length. [ 1328.028034][T27716] bond2: (slave macvlan6): Error -98 calling set_mac_address [ 1328.102434][T27718] bond1: option mode: unable to set because the bond device has slaves [ 1328.123220][T27717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7620'. [ 1328.235349][T27720] netlink: 'syz.4.7621': attribute type 3 has an invalid length. [ 1328.610065][T14227] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1328.822947][T14227] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1328.854299][T14227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.886698][T14227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1328.928788][T14227] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1328.967832][T27736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7625'. [ 1328.969910][T14227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.045147][T14227] usb 2-1: Product: syz [ 1329.065193][T14227] usb 2-1: Manufacturer: syz [ 1329.108366][T14227] usb 2-1: SerialNumber: syz [ 1329.166265][T14227] usb 2-1: 0:1 : does not exist [ 1330.326945][T27755] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 1332.262403][T27776] FAULT_INJECTION: forcing a failure. [ 1332.262403][T27776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.294975][T27776] CPU: 0 UID: 0 PID: 27776 Comm: syz.3.7639 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.295013][T27776] Tainted: [L]=SOFTLOCKUP [ 1332.295022][T27776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1332.295037][T27776] Call Trace: [ 1332.295047][T27776] [ 1332.295061][T27776] dump_stack_lvl+0xe8/0x150 [ 1332.295094][T27776] should_fail_ex+0x412/0x560 [ 1332.295130][T27776] _copy_from_user+0x2d/0xb0 [ 1332.295164][T27776] get_compat_msghdr+0xb3/0x4c0 [ 1332.295198][T27776] ? _parse_integer_limit+0x1ae/0x1f0 [ 1332.295225][T27776] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1332.295256][T27776] ? kstrtoull+0x12f/0x1d0 [ 1332.295289][T27776] ___sys_sendmsg+0x201/0x360 [ 1332.295317][T27776] ? __lock_acquire+0x6b5/0x2cf0 [ 1332.295345][T27776] ? __pfx____sys_sendmsg+0x10/0x10 [ 1332.295377][T27776] ? get_pid_task+0x20/0x1f0 [ 1332.295407][T27776] ? get_pid_task+0x20/0x1f0 [ 1332.295432][T27776] ? get_pid_task+0x20/0x1f0 [ 1332.295489][T27776] ? __fget_files+0x2a/0x420 [ 1332.295515][T27776] ? __fget_files+0x3a0/0x420 [ 1332.295553][T27776] __sys_sendmsg+0x183/0x260 [ 1332.295584][T27776] ? __pfx___sys_sendmsg+0x10/0x10 [ 1332.295637][T27776] __do_fast_syscall_32+0x229/0x6e0 [ 1332.295668][T27776] ? do_fast_syscall_32+0x33/0x70 [ 1332.295703][T27776] ? lockdep_hardirqs_on+0x7a/0x110 [ 1332.295729][T27776] ? asm_int80_emulation+0x1a/0x20 [ 1332.295750][T27776] ? do_int80_emulation+0x286/0x530 [ 1332.295783][T27776] do_fast_syscall_32+0x33/0x70 [ 1332.295812][T27776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1332.295840][T27776] RIP: 0023:0xf703f01c [ 1332.295860][T27776] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1332.295880][T27776] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1332.295904][T27776] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001080 [ 1332.295920][T27776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.295933][T27776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1332.295946][T27776] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1332.295959][T27776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1332.295990][T27776] [ 1332.591629][T27783] FAULT_INJECTION: forcing a failure. [ 1332.591629][T27783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.657310][T27783] CPU: 1 UID: 0 PID: 27783 Comm: syz.3.7642 Tainted: G L syzkaller #0 PREEMPT(full) [ 1332.657348][T27783] Tainted: [L]=SOFTLOCKUP [ 1332.657356][T27783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1332.657370][T27783] Call Trace: [ 1332.657379][T27783] [ 1332.657390][T27783] dump_stack_lvl+0xe8/0x150 [ 1332.657421][T27783] should_fail_ex+0x412/0x560 [ 1332.657455][T27783] _copy_from_user+0x2d/0xb0 [ 1332.657488][T27783] get_compat_msghdr+0xb3/0x4c0 [ 1332.657521][T27783] ? _parse_integer_limit+0x1ae/0x1f0 [ 1332.657546][T27783] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1332.657577][T27783] ? kstrtoull+0x12f/0x1d0 [ 1332.657608][T27783] ___sys_sendmsg+0x201/0x360 [ 1332.657635][T27783] ? __lock_acquire+0x6b5/0x2cf0 [ 1332.657672][T27783] ? __pfx____sys_sendmsg+0x10/0x10 [ 1332.657703][T27783] ? get_pid_task+0x20/0x1f0 [ 1332.657730][T27783] ? get_pid_task+0x20/0x1f0 [ 1332.657755][T27783] ? get_pid_task+0x20/0x1f0 [ 1332.657811][T27783] ? __fget_files+0x2a/0x420 [ 1332.657837][T27783] ? __fget_files+0x3a0/0x420 [ 1332.657873][T27783] __sys_sendmsg+0x183/0x260 [ 1332.657904][T27783] ? __pfx___sys_sendmsg+0x10/0x10 [ 1332.657955][T27783] __do_fast_syscall_32+0x229/0x6e0 [ 1332.657985][T27783] ? do_fast_syscall_32+0x33/0x70 [ 1332.658012][T27783] ? lockdep_hardirqs_on+0x7a/0x110 [ 1332.658038][T27783] ? asm_int80_emulation+0x1a/0x20 [ 1332.658059][T27783] ? do_int80_emulation+0x286/0x530 [ 1332.658085][T27783] ? trace_irq_disable+0x3b/0x140 [ 1332.658122][T27783] do_fast_syscall_32+0x33/0x70 [ 1332.658151][T27783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1332.658178][T27783] RIP: 0023:0xf703f01c [ 1332.658198][T27783] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1332.658219][T27783] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1332.658243][T27783] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1332.658258][T27783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1332.658271][T27783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1332.658284][T27783] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1332.658297][T27783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1332.658332][T27783] [ 1333.040763][T27785] FAULT_INJECTION: forcing a failure. [ 1333.040763][T27785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1333.061902][T27785] CPU: 0 UID: 0 PID: 27785 Comm: syz.2.7643 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.061937][T27785] Tainted: [L]=SOFTLOCKUP [ 1333.061946][T27785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1333.061959][T27785] Call Trace: [ 1333.061969][T27785] [ 1333.061978][T27785] dump_stack_lvl+0xe8/0x150 [ 1333.062010][T27785] should_fail_ex+0x412/0x560 [ 1333.062044][T27785] _copy_from_user+0x2d/0xb0 [ 1333.062078][T27785] get_compat_msghdr+0xb3/0x4c0 [ 1333.062113][T27785] ? _parse_integer_limit+0x1ae/0x1f0 [ 1333.062139][T27785] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1333.062170][T27785] ? kstrtoull+0x12f/0x1d0 [ 1333.062202][T27785] ___sys_sendmsg+0x201/0x360 [ 1333.062232][T27785] ? __lock_acquire+0x6b5/0x2cf0 [ 1333.062261][T27785] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.062292][T27785] ? get_pid_task+0x20/0x1f0 [ 1333.062326][T27785] ? get_pid_task+0x20/0x1f0 [ 1333.062352][T27785] ? get_pid_task+0x20/0x1f0 [ 1333.062408][T27785] ? __fget_files+0x2a/0x420 [ 1333.062434][T27785] ? __fget_files+0x3a0/0x420 [ 1333.062471][T27785] __sys_sendmsg+0x183/0x260 [ 1333.062502][T27785] ? __pfx___sys_sendmsg+0x10/0x10 [ 1333.062554][T27785] __do_fast_syscall_32+0x229/0x6e0 [ 1333.062585][T27785] ? do_fast_syscall_32+0x33/0x70 [ 1333.062612][T27785] ? lockdep_hardirqs_on+0x7a/0x110 [ 1333.062637][T27785] ? asm_int80_emulation+0x1a/0x20 [ 1333.062666][T27785] ? do_int80_emulation+0x286/0x530 [ 1333.062693][T27785] ? trace_irq_disable+0x3b/0x140 [ 1333.062729][T27785] do_fast_syscall_32+0x33/0x70 [ 1333.062758][T27785] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.062785][T27785] RIP: 0023:0xf700f01c [ 1333.062806][T27785] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1333.062825][T27785] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1333.062849][T27785] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1333.062865][T27785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1333.062878][T27785] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1333.062890][T27785] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1333.062903][T27785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1333.062934][T27785] [ 1333.308963][T14227] usb 2-1: USB disconnect, device number 102 [ 1333.592524][T27798] FAULT_INJECTION: forcing a failure. [ 1333.592524][T27798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1333.607664][T27798] CPU: 1 UID: 0 PID: 27798 Comm: syz.0.7648 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.607701][T27798] Tainted: [L]=SOFTLOCKUP [ 1333.607709][T27798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1333.607721][T27798] Call Trace: [ 1333.607731][T27798] [ 1333.607740][T27798] dump_stack_lvl+0xe8/0x150 [ 1333.607772][T27798] should_fail_ex+0x412/0x560 [ 1333.607805][T27798] _copy_from_user+0x2d/0xb0 [ 1333.607838][T27798] get_compat_msghdr+0xb3/0x4c0 [ 1333.607871][T27798] ? _parse_integer_limit+0x1ae/0x1f0 [ 1333.607896][T27798] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1333.607927][T27798] ? kstrtoull+0x12f/0x1d0 [ 1333.607957][T27798] ___sys_sendmsg+0x201/0x360 [ 1333.607985][T27798] ? __lock_acquire+0x6b5/0x2cf0 [ 1333.608014][T27798] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.608044][T27798] ? get_pid_task+0x20/0x1f0 [ 1333.608071][T27798] ? get_pid_task+0x20/0x1f0 [ 1333.608096][T27798] ? get_pid_task+0x20/0x1f0 [ 1333.608149][T27798] ? __fget_files+0x2a/0x420 [ 1333.608174][T27798] ? __fget_files+0x3a0/0x420 [ 1333.608208][T27798] __sys_sendmsg+0x183/0x260 [ 1333.608239][T27798] ? __pfx___sys_sendmsg+0x10/0x10 [ 1333.608289][T27798] __do_fast_syscall_32+0x229/0x6e0 [ 1333.608318][T27798] ? do_fast_syscall_32+0x33/0x70 [ 1333.608344][T27798] ? lockdep_hardirqs_on+0x7a/0x110 [ 1333.608370][T27798] ? asm_int80_emulation+0x1a/0x20 [ 1333.608391][T27798] ? do_int80_emulation+0x286/0x530 [ 1333.608416][T27798] ? trace_irq_disable+0x3b/0x140 [ 1333.608495][T27798] do_fast_syscall_32+0x33/0x70 [ 1333.608525][T27798] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.608562][T27798] RIP: 0023:0xf707f01c [ 1333.608583][T27798] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1333.608607][T27798] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1333.608631][T27798] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1333.608646][T27798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1333.608658][T27798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1333.608671][T27798] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1333.608684][T27798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1333.608716][T27798] [ 1333.861359][T27800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7649'. [ 1333.915477][T27800] fuse: Bad value for 'group_id' [ 1333.925113][T27800] fuse: Bad value for 'group_id' [ 1333.989705][T14581] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1333.998622][T27170] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1334.039725][T14227] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1334.154381][T14581] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1334.164687][T14581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.175921][T27170] usb 3-1: Using ep0 maxpacket: 32 [ 1334.181446][T14581] usb 4-1: Product: syz [ 1334.187576][T27170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1334.201113][T14581] usb 4-1: Manufacturer: syz [ 1334.210759][T14581] usb 4-1: SerialNumber: syz [ 1334.216661][T14227] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1334.224555][T27170] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1334.239687][T14227] usb 2-1: not running at top speed; connect to a high speed hub [ 1334.262188][T27170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1334.275308][T14227] usb 2-1: config 1 has an invalid interface number: 116 but max is 0 [ 1334.288419][T14227] usb 2-1: config 1 has no interface number 0 [ 1334.295423][T14227] usb 2-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1334.307405][T14227] usb 2-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1334.319412][T27170] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1334.329021][T27170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.337879][T14227] usb 2-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1334.352063][T27170] usb 3-1: Product: syz [ 1334.356458][T27170] usb 3-1: Manufacturer: syz [ 1334.361442][T27170] usb 3-1: SerialNumber: syz [ 1334.366173][T14227] usb 2-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 1334.382410][T27170] usb 3-1: config 0 descriptor?? [ 1334.388735][T14227] usb 2-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1334.412839][T14227] usb 2-1: config 1 interface 116 has no altsetting 0 [ 1334.422916][T27170] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input53 [ 1334.478744][T14227] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 1334.495348][T14227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.525838][T14227] usb 2-1: Product: syz [ 1334.530391][T14227] usb 2-1: Manufacturer: syz [ 1334.535131][T14227] usb 2-1: SerialNumber: syz [ 1334.558907][T27789] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1334.570302][T27789] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1334.670961][T14581] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 116 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1334.682978][T14563] usb 3-1: USB disconnect, device number 105 [ 1334.689122][ C0] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 1334.827975][T14227] ums-usbat 2-1:1.116: USB Mass Storage device detected [ 1335.063526][T14227] ums-usbat 2-1:1.116: probe with driver ums-usbat failed with error -5 [ 1335.097740][T14227] usb 2-1: USB disconnect, device number 103 [ 1335.500982][T27830] ip6tnl1: entered allmulticast mode [ 1335.510195][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1335.518611][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1335.539951][T14581] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1335.839858][T27834] FAULT_INJECTION: forcing a failure. [ 1335.839858][T27834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1335.853147][T27834] CPU: 1 UID: 0 PID: 27834 Comm: syz.1.7660 Tainted: G L syzkaller #0 PREEMPT(full) [ 1335.853182][T27834] Tainted: [L]=SOFTLOCKUP [ 1335.853191][T27834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1335.853205][T27834] Call Trace: [ 1335.853215][T27834] [ 1335.853225][T27834] dump_stack_lvl+0xe8/0x150 [ 1335.853263][T27834] should_fail_ex+0x412/0x560 [ 1335.853298][T27834] _copy_from_user+0x2d/0xb0 [ 1335.853331][T27834] get_compat_msghdr+0xb3/0x4c0 [ 1335.853366][T27834] ? _parse_integer_limit+0x1ae/0x1f0 [ 1335.853403][T27834] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1335.853435][T27834] ? kstrtoull+0x12f/0x1d0 [ 1335.853466][T27834] ___sys_sendmsg+0x201/0x360 [ 1335.853496][T27834] ? __lock_acquire+0x6b5/0x2cf0 [ 1335.853526][T27834] ? __pfx____sys_sendmsg+0x10/0x10 [ 1335.853557][T27834] ? get_pid_task+0x20/0x1f0 [ 1335.853585][T27834] ? get_pid_task+0x20/0x1f0 [ 1335.853610][T27834] ? get_pid_task+0x20/0x1f0 [ 1335.853665][T27834] ? __fget_files+0x2a/0x420 [ 1335.853691][T27834] ? __fget_files+0x3a0/0x420 [ 1335.853727][T27834] __sys_sendmsg+0x183/0x260 [ 1335.853757][T27834] ? __pfx___sys_sendmsg+0x10/0x10 [ 1335.853808][T27834] __do_fast_syscall_32+0x229/0x6e0 [ 1335.853840][T27834] ? do_fast_syscall_32+0x33/0x70 [ 1335.853866][T27834] ? lockdep_hardirqs_on+0x7a/0x110 [ 1335.853892][T27834] ? asm_int80_emulation+0x1a/0x20 [ 1335.853913][T27834] ? do_int80_emulation+0x286/0x530 [ 1335.853940][T27834] ? trace_irq_disable+0x3b/0x140 [ 1335.853975][T27834] do_fast_syscall_32+0x33/0x70 [ 1335.854004][T27834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1335.854031][T27834] RIP: 0023:0xf7f8901c [ 1335.854052][T27834] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1335.854071][T27834] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1335.854094][T27834] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 1335.854109][T27834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1335.854123][T27834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1335.854135][T27834] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1335.854148][T27834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1335.854180][T27834] [ 1336.104460][T14581] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1336.201144][T14227] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1336.490193][T27842] FAULT_INJECTION: forcing a failure. [ 1336.490193][T27842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1336.507200][T27842] CPU: 1 UID: 0 PID: 27842 Comm: syz.0.7663 Tainted: G L syzkaller #0 PREEMPT(full) [ 1336.507237][T27842] Tainted: [L]=SOFTLOCKUP [ 1336.507246][T27842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1336.507260][T27842] Call Trace: [ 1336.507270][T27842] [ 1336.507284][T27842] dump_stack_lvl+0xe8/0x150 [ 1336.507318][T27842] should_fail_ex+0x412/0x560 [ 1336.507354][T27842] _copy_from_user+0x2d/0xb0 [ 1336.507388][T27842] get_compat_msghdr+0xb3/0x4c0 [ 1336.507422][T27842] ? _parse_integer_limit+0x1ae/0x1f0 [ 1336.507449][T27842] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1336.507481][T27842] ? kstrtoull+0x12f/0x1d0 [ 1336.507513][T27842] ___sys_sendmsg+0x201/0x360 [ 1336.507542][T27842] ? __lock_acquire+0x6b5/0x2cf0 [ 1336.507571][T27842] ? __pfx____sys_sendmsg+0x10/0x10 [ 1336.507604][T27842] ? get_pid_task+0x20/0x1f0 [ 1336.507641][T27842] ? get_pid_task+0x20/0x1f0 [ 1336.507667][T27842] ? get_pid_task+0x20/0x1f0 [ 1336.507723][T27842] ? __fget_files+0x2a/0x420 [ 1336.507750][T27842] ? __fget_files+0x3a0/0x420 [ 1336.507787][T27842] __sys_sendmsg+0x183/0x260 [ 1336.507818][T27842] ? __pfx___sys_sendmsg+0x10/0x10 [ 1336.507870][T27842] __do_fast_syscall_32+0x229/0x6e0 [ 1336.507901][T27842] ? do_fast_syscall_32+0x33/0x70 [ 1336.507927][T27842] ? lockdep_hardirqs_on+0x7a/0x110 [ 1336.507952][T27842] ? asm_int80_emulation+0x1a/0x20 [ 1336.507974][T27842] ? do_int80_emulation+0x286/0x530 [ 1336.508001][T27842] ? trace_irq_disable+0x3b/0x140 [ 1336.508038][T27842] do_fast_syscall_32+0x33/0x70 [ 1336.508066][T27842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1336.508093][T27842] RIP: 0023:0xf707f01c [ 1336.508113][T27842] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1336.508132][T27842] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1336.508156][T27842] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1336.508172][T27842] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1336.508185][T27842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1336.508198][T27842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1336.508211][T27842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1336.508243][T27842] [ 1337.015743][T14227] usb 4-1: USB disconnect, device number 116 [ 1337.025546][T14227] usblp0: removed [ 1337.093451][T27852] FAULT_INJECTION: forcing a failure. [ 1337.093451][T27852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1337.110145][T27852] CPU: 1 UID: 0 PID: 27852 Comm: syz.3.7668 Tainted: G L syzkaller #0 PREEMPT(full) [ 1337.110181][T27852] Tainted: [L]=SOFTLOCKUP [ 1337.110189][T27852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1337.110203][T27852] Call Trace: [ 1337.110213][T27852] [ 1337.110223][T27852] dump_stack_lvl+0xe8/0x150 [ 1337.110255][T27852] should_fail_ex+0x412/0x560 [ 1337.110290][T27852] _copy_to_user+0x31/0xb0 [ 1337.110325][T27852] simple_read_from_buffer+0xe1/0x170 [ 1337.110358][T27852] proc_fail_nth_read+0x1bb/0x230 [ 1337.110389][T27852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1337.110421][T27852] ? rw_verify_area+0x2a6/0x4d0 [ 1337.110451][T27852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1337.110481][T27852] vfs_read+0x20c/0xa70 [ 1337.110517][T27852] ? __pfx___mutex_lock+0x10/0x10 [ 1337.110547][T27852] ? __pfx_vfs_read+0x10/0x10 [ 1337.110580][T27852] ? __fget_files+0x2a/0x420 [ 1337.110611][T27852] ? __fget_files+0x3a0/0x420 [ 1337.110636][T27852] ? __fget_files+0x2a/0x420 [ 1337.110691][T27852] ksys_read+0x150/0x270 [ 1337.110725][T27852] ? __pfx_ksys_read+0x10/0x10 [ 1337.110759][T27852] ? asm_int80_emulation+0x1a/0x20 [ 1337.110788][T27852] do_int80_emulation+0x181/0x530 [ 1337.110816][T27852] ? trace_irq_disable+0x3b/0x140 [ 1337.110847][T27852] ? asm_int80_emulation+0x1a/0x20 [ 1337.110868][T27852] ? clear_bhb_loop+0x40/0x90 [ 1337.110889][T27852] ? clear_bhb_loop+0x40/0x90 [ 1337.110916][T27852] asm_int80_emulation+0x1a/0x20 [ 1337.110938][T27852] RIP: 0023:0xf717616b [ 1337.110958][T27852] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1337.110977][T27852] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1337.111001][T27852] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f542d5d0 [ 1337.111016][T27852] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1337.111029][T27852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1337.111042][T27852] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1337.111055][T27852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1337.111088][T27852] [ 1337.534891][T27857] VFS: Mount too revealing [ 1337.646484][ T29] audit: type=1326 audit(1777593761.713:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27849 comm="syz.0.7667" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 1337.685959][ T29] audit: type=1326 audit(1777593761.713:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27849 comm="syz.0.7667" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 1337.758521][T27861] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1337.778496][T27861] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7667'. [ 1337.793340][ T29] audit: type=1326 audit(1777593761.743:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27849 comm="syz.0.7667" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 1337.851688][ T29] audit: type=1326 audit(1777593761.743:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27849 comm="syz.0.7667" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 1337.928671][ T29] audit: type=1326 audit(1777593761.743:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27849 comm="syz.0.7667" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 1338.049026][ T29] audit: type=1326 audit(1777593761.743:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27849 comm="syz.0.7667" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 1338.204403][ T29] audit: type=1326 audit(1777593761.743:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27849 comm="syz.0.7667" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 1338.304239][ T29] audit: type=1326 audit(1777593761.743:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27849 comm="syz.0.7667" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 1338.484014][ T29] audit: type=1326 audit(1777593761.743:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27849 comm="syz.0.7667" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 1338.552353][ T29] audit: type=1326 audit(1777593761.743:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27849 comm="syz.0.7667" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 1338.649686][T14563] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1338.822868][T27872] netlink: 'syz.4.7666': attribute type 7 has an invalid length. [ 1338.840480][T14563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.888434][T14563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1338.926084][T27873] netlink: 'syz.4.7666': attribute type 7 has an invalid length. [ 1338.974625][T14563] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1338.996494][T27872] netlink: 'syz.4.7666': attribute type 7 has an invalid length. [ 1339.022312][T14563] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1339.047846][T27876] FAULT_INJECTION: forcing a failure. [ 1339.047846][T27876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1339.067475][T14563] usb 4-1: Manufacturer: syz [ 1339.094167][T14563] usb 4-1: config 0 descriptor?? [ 1339.103160][T27876] CPU: 0 UID: 0 PID: 27876 Comm: syz.2.7674 Tainted: G L syzkaller #0 PREEMPT(full) [ 1339.103216][T27876] Tainted: [L]=SOFTLOCKUP [ 1339.103226][T27876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1339.103248][T27876] Call Trace: [ 1339.103257][T27876] [ 1339.103268][T27876] dump_stack_lvl+0xe8/0x150 [ 1339.103301][T27876] should_fail_ex+0x412/0x560 [ 1339.103333][T27876] _copy_from_user+0x2d/0xb0 [ 1339.103364][T27876] get_compat_msghdr+0xb3/0x4c0 [ 1339.103396][T27876] ? _parse_integer_limit+0x1ae/0x1f0 [ 1339.103421][T27876] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1339.103452][T27876] ? kstrtoull+0x12f/0x1d0 [ 1339.103483][T27876] ___sys_sendmsg+0x201/0x360 [ 1339.103513][T27876] ? __lock_acquire+0x6b5/0x2cf0 [ 1339.103541][T27876] ? __pfx____sys_sendmsg+0x10/0x10 [ 1339.103575][T27876] ? get_pid_task+0x20/0x1f0 [ 1339.103603][T27876] ? get_pid_task+0x20/0x1f0 [ 1339.103627][T27876] ? get_pid_task+0x20/0x1f0 [ 1339.103683][T27876] ? __fget_files+0x2a/0x420 [ 1339.103709][T27876] ? __fget_files+0x3a0/0x420 [ 1339.103746][T27876] __sys_sendmsg+0x183/0x260 [ 1339.103777][T27876] ? __pfx___sys_sendmsg+0x10/0x10 [ 1339.103828][T27876] __do_fast_syscall_32+0x229/0x6e0 [ 1339.103858][T27876] ? do_fast_syscall_32+0x33/0x70 [ 1339.103884][T27876] ? lockdep_hardirqs_on+0x7a/0x110 [ 1339.103909][T27876] ? asm_int80_emulation+0x1a/0x20 [ 1339.103930][T27876] ? do_int80_emulation+0x286/0x530 [ 1339.103957][T27876] ? trace_irq_disable+0x3b/0x140 [ 1339.103993][T27876] do_fast_syscall_32+0x33/0x70 [ 1339.104021][T27876] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1339.104048][T27876] RIP: 0023:0xf700f01c [ 1339.104068][T27876] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1339.104088][T27876] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1339.104112][T27876] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 1339.104129][T27876] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1339.104142][T27876] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1339.104155][T27876] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1339.104168][T27876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1339.104197][T27876] [ 1339.311549][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1339.670452][T27882] netlink: 'syz.4.7677': attribute type 10 has an invalid length. [ 1339.684437][T27882] bond1: option mode: unable to set because the bond device has slaves [ 1339.705828][T27882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7677'. [ 1339.719802][T27884] FAULT_INJECTION: forcing a failure. [ 1339.719802][T27884] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.749146][T27884] CPU: 1 UID: 0 PID: 27884 Comm: syz.1.7678 Tainted: G L syzkaller #0 PREEMPT(full) [ 1339.749204][T27884] Tainted: [L]=SOFTLOCKUP [ 1339.749212][T27884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1339.749226][T27884] Call Trace: [ 1339.749236][T27884] [ 1339.749245][T27884] dump_stack_lvl+0xe8/0x150 [ 1339.749277][T27884] should_fail_ex+0x412/0x560 [ 1339.749302][T27884] should_failslab+0xa8/0x100 [ 1339.749351][T27884] __kmalloc_noprof+0xe8/0x760 [ 1339.749382][T27884] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1339.749422][T27884] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1339.749447][T27884] ? tomoyo_domain+0xd7/0x130 [ 1339.749488][T27884] ? tomoyo_path_number_perm+0x219/0x630 [ 1339.749514][T27884] tomoyo_path_number_perm+0x246/0x630 [ 1339.749540][T27884] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1339.749565][T27884] ? __lock_acquire+0x6b5/0x2cf0 [ 1339.749626][T27884] ? __fget_files+0x2a/0x420 [ 1339.749659][T27884] ? __fget_files+0x3a0/0x420 [ 1339.749684][T27884] ? __fget_files+0x2a/0x420 [ 1339.749713][T27884] security_file_ioctl_compat+0xc3/0x2a0 [ 1339.749742][T27884] __ia32_compat_sys_ioctl+0x139/0x950 [ 1339.749769][T27884] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1339.749819][T27884] ? __fget_files+0x3a0/0x420 [ 1339.749852][T27884] ? fput+0xa0/0xd0 [ 1339.749875][T27884] ? ksys_write+0x242/0x270 [ 1339.749915][T27884] __do_fast_syscall_32+0x229/0x6e0 [ 1339.749936][T27884] ? do_fast_syscall_32+0x33/0x70 [ 1339.749976][T27884] ? lockdep_hardirqs_on+0x7a/0x110 [ 1339.750001][T27884] ? asm_int80_emulation+0x1a/0x20 [ 1339.750022][T27884] ? do_int80_emulation+0x286/0x530 [ 1339.750053][T27884] ? trace_irq_disable+0x3b/0x140 [ 1339.750078][T27884] do_fast_syscall_32+0x33/0x70 [ 1339.750097][T27884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1339.750138][T27884] RIP: 0023:0xf7f8901c [ 1339.750158][T27884] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1339.750176][T27884] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1339.750204][T27884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089e0 [ 1339.750216][T27884] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1339.750227][T27884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1339.750238][T27884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1339.750249][T27884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1339.750291][T27884] [ 1340.004308][T27882] bond1: (slave macvlan9): Error -98 calling set_mac_address [ 1340.010523][T12494] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 1340.047045][T27870] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1340.094280][T27884] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1340.197094][T12494] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1340.234056][T12494] usb 3-1: config 250 has an invalid interface number: 59 but max is 0 [ 1340.249434][T27888] bond2: option mode: unable to set because the bond device has slaves [ 1340.265798][T12494] usb 3-1: config 250 has no interface number 0 [ 1340.277231][T27888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7680'. [ 1340.295257][T12494] usb 3-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 8 [ 1340.343262][T12494] usb 3-1: config 250 interface 59 altsetting 255 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 1340.344147][T27888] bond2: (slave macvlan6): Error -98 calling set_mac_address [ 1340.398525][T12494] usb 3-1: config 250 interface 59 altsetting 255 endpoint 0x82 is Bulk; changing to Interrupt [ 1340.426248][T12494] usb 3-1: config 250 interface 59 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1340.453045][T12494] usb 3-1: config 250 interface 59 has no altsetting 0 [ 1340.490924][T12494] usb 3-1: string descriptor 0 read error: -22 [ 1340.500584][T12494] usb 3-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 1340.518091][T12494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.543821][T27880] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1340.566728][T12494] em28xx 3-1:250.59: New device @ 1.5 Mbps (1b80:e302, interface 59, class 59) [ 1340.576567][T12494] em28xx 3-1:250.59: Device initialization failed. [ 1340.588253][T12494] em28xx 3-1:250.59: Device must be connected to a high-speed USB 2.0 port. [ 1340.602742][T27870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7673'. [ 1340.769409][T27880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.780748][T27880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.808211][T14227] usb 3-1: USB disconnect, device number 106 [ 1340.858456][T14563] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #100: -71 [ 1340.883230][T14563] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 1340.921460][T14563] uclogic 0003:256C:006D.0012: failed probing pen v1 parameters: -71 [ 1340.922012][T15354] Bluetooth: hci4: command 0x0406 tx timeout [ 1340.947648][T14563] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 1340.961331][T14581] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1340.980420][T14563] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 1341.025567][T14563] usb 4-1: USB disconnect, device number 117 [ 1341.119647][T14581] usb 1-1: Using ep0 maxpacket: 16 [ 1341.131326][T14581] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1341.140667][T14581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.148809][T14581] usb 1-1: Product: syz [ 1341.153627][T14581] usb 1-1: Manufacturer: syz [ 1341.158432][T14581] usb 1-1: SerialNumber: syz [ 1341.166759][T14581] usb 1-1: config 0 descriptor?? [ 1341.178399][T14581] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1341.188572][T14581] usb 1-1: Detected FT-X [ 1341.378205][T14581] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1341.387282][T14581] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1341.397005][T14581] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1341.407983][T14581] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1341.432232][T14581] usb 1-1: USB disconnect, device number 103 [ 1341.444162][T14581] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1341.457209][T27908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7686'. [ 1341.457810][T14581] ftdi_sio 1-1:0.0: device disconnected [ 1341.491234][T27908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7686'. [ 1341.760299][T27918] netlink: 'syz.3.7691': attribute type 10 has an invalid length. [ 1341.783774][T27918] bond1: option mode: unable to set because the bond device has slaves [ 1341.794657][T27918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7691'. [ 1341.827078][T27918] bond1: (slave macvlan8): Error -98 calling set_mac_address [ 1342.102587][T27931] lo: entered allmulticast mode [ 1342.157140][T27931] dvmrp8: entered allmulticast mode [ 1342.180885][T27934] bond1: (slave macvlan5): Error -98 calling set_mac_address [ 1342.195157][T27928] lo: left allmulticast mode [ 1342.313352][T27936] FAULT_INJECTION: forcing a failure. [ 1342.313352][T27936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1342.328753][T27936] CPU: 1 UID: 0 PID: 27936 Comm: syz.0.7697 Tainted: G L syzkaller #0 PREEMPT(full) [ 1342.328788][T27936] Tainted: [L]=SOFTLOCKUP [ 1342.328797][T27936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1342.328810][T27936] Call Trace: [ 1342.328820][T27936] [ 1342.328829][T27936] dump_stack_lvl+0xe8/0x150 [ 1342.328861][T27936] should_fail_ex+0x412/0x560 [ 1342.328895][T27936] _copy_from_user+0x2d/0xb0 [ 1342.328934][T27936] __se_sys_io_uring_register+0x1bc/0x1ac0 [ 1342.329050][T27936] ? __fget_files+0x3a0/0x420 [ 1342.329081][T27936] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1342.329121][T27936] ? __secure_computing+0xe1/0x2a0 [ 1342.329149][T27936] __do_fast_syscall_32+0x229/0x6e0 [ 1342.329180][T27936] ? do_fast_syscall_32+0x33/0x70 [ 1342.329206][T27936] ? lockdep_hardirqs_on+0x7a/0x110 [ 1342.329232][T27936] ? asm_int80_emulation+0x1a/0x20 [ 1342.329253][T27936] ? do_int80_emulation+0x286/0x530 [ 1342.329286][T27936] do_fast_syscall_32+0x33/0x70 [ 1342.329315][T27936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1342.329349][T27936] RIP: 0023:0xf707f01c [ 1342.329370][T27936] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1342.329390][T27936] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 1342.329414][T27936] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 000000000000001f [ 1342.329429][T27936] RDX: 0000000080000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1342.329443][T27936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1342.329456][T27936] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1342.329469][T27936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1342.329499][T27936] [ 1342.513956][T14581] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1342.682134][T14581] usb 4-1: Using ep0 maxpacket: 16 [ 1342.700491][T14581] usb 4-1: config 1 has an invalid descriptor of length 45, skipping remainder of the config [ 1342.715799][T14581] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1342.741843][T14581] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1342.768384][T14581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.801717][T14581] usb 4-1: Product: syz [ 1342.816132][T14581] usb 4-1: Manufacturer: syz [ 1342.831817][T14581] usb 4-1: SerialNumber: syz [ 1342.849494][T14581] usb 4-1: 0:2 : does not exist [ 1343.051767][T27930] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1343.114462][T14581] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1343.291365][T14581] usb 4-1: USB disconnect, device number 118 [ 1343.421827][T27951] FAULT_INJECTION: forcing a failure. [ 1343.421827][T27951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1343.473377][T14594] udevd[14594]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1343.493292][T27951] CPU: 0 UID: 0 PID: 27951 Comm: syz.2.7703 Tainted: G L syzkaller #0 PREEMPT(full) [ 1343.493330][T27951] Tainted: [L]=SOFTLOCKUP [ 1343.493339][T27951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1343.493353][T27951] Call Trace: [ 1343.493362][T27951] [ 1343.493372][T27951] dump_stack_lvl+0xe8/0x150 [ 1343.493403][T27951] should_fail_ex+0x412/0x560 [ 1343.493435][T27951] _copy_from_user+0x2d/0xb0 [ 1343.493465][T27951] get_compat_msghdr+0xb3/0x4c0 [ 1343.493498][T27951] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1343.493536][T27951] ___sys_sendmsg+0x201/0x360 [ 1343.493562][T27951] ? __lock_acquire+0x6b5/0x2cf0 [ 1343.493588][T27951] ? __pfx____sys_sendmsg+0x10/0x10 [ 1343.493618][T27951] ? kstrtoull+0x12f/0x1d0 [ 1343.493664][T27951] ? __fget_files+0x2a/0x420 [ 1343.493687][T27951] ? __fget_files+0x3a0/0x420 [ 1343.493719][T27951] __sys_sendmmsg+0x2e7/0x4e0 [ 1343.493750][T27951] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1343.493800][T27951] ? fput+0xa0/0xd0 [ 1343.493823][T27951] ? ksys_write+0x242/0x270 [ 1343.493862][T27951] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1343.493894][T27951] __do_fast_syscall_32+0x229/0x6e0 [ 1343.493924][T27951] ? do_fast_syscall_32+0x33/0x70 [ 1343.493950][T27951] ? lockdep_hardirqs_on+0x7a/0x110 [ 1343.493975][T27951] ? asm_int80_emulation+0x1a/0x20 [ 1343.493997][T27951] ? do_int80_emulation+0x286/0x530 [ 1343.494024][T27951] ? trace_irq_disable+0x3b/0x140 [ 1343.494060][T27951] do_fast_syscall_32+0x33/0x70 [ 1343.494088][T27951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1343.494115][T27951] RIP: 0023:0xf700f01c [ 1343.494135][T27951] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1343.494154][T27951] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1343.494177][T27951] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 1343.494193][T27951] RDX: 0000000000000001 RSI: 0000000000008020 RDI: 0000000000000000 [ 1343.494207][T27951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1343.494227][T27951] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1343.494240][T27951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1343.494272][T27951] [ 1343.907846][T27962] netdevsim netdevsim4: Firmware load for '/../file0' refused, path contains '..' component [ 1344.105714][T27967] FAULT_INJECTION: forcing a failure. [ 1344.105714][T27967] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.147093][T27967] CPU: 1 UID: 0 PID: 27967 Comm: syz.0.7707 Tainted: G L syzkaller #0 PREEMPT(full) [ 1344.147126][T27967] Tainted: [L]=SOFTLOCKUP [ 1344.147134][T27967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1344.147146][T27967] Call Trace: [ 1344.147155][T27967] [ 1344.147164][T27967] dump_stack_lvl+0xe8/0x150 [ 1344.147195][T27967] should_fail_ex+0x412/0x560 [ 1344.147229][T27967] should_failslab+0xa8/0x100 [ 1344.147263][T27967] __kmalloc_noprof+0xe8/0x760 [ 1344.147292][T27967] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1344.147327][T27967] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1344.147357][T27967] ? tomoyo_domain+0xd7/0x130 [ 1344.147390][T27967] ? tomoyo_path_number_perm+0x219/0x630 [ 1344.147414][T27967] tomoyo_path_number_perm+0x246/0x630 [ 1344.147443][T27967] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1344.147467][T27967] ? __lock_acquire+0x6b5/0x2cf0 [ 1344.147527][T27967] ? __fget_files+0x2a/0x420 [ 1344.147557][T27967] ? __fget_files+0x3a0/0x420 [ 1344.147581][T27967] ? __fget_files+0x2a/0x420 [ 1344.147610][T27967] security_file_ioctl_compat+0xc3/0x2a0 [ 1344.147636][T27967] __ia32_compat_sys_ioctl+0x139/0x950 [ 1344.147674][T27967] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1344.147712][T27967] ? __fget_files+0x3a0/0x420 [ 1344.147743][T27967] ? fput+0xa0/0xd0 [ 1344.147767][T27967] ? ksys_write+0x242/0x270 [ 1344.147810][T27967] __do_fast_syscall_32+0x229/0x6e0 [ 1344.147841][T27967] ? do_fast_syscall_32+0x33/0x70 [ 1344.147867][T27967] ? lockdep_hardirqs_on+0x7a/0x110 [ 1344.147893][T27967] ? asm_int80_emulation+0x1a/0x20 [ 1344.147913][T27967] ? do_int80_emulation+0x286/0x530 [ 1344.147940][T27967] ? trace_irq_disable+0x3b/0x140 [ 1344.147985][T27967] do_fast_syscall_32+0x33/0x70 [ 1344.148014][T27967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.148040][T27967] RIP: 0023:0xf707f01c [ 1344.148060][T27967] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1344.148079][T27967] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1344.148108][T27967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01c64a3 [ 1344.148123][T27967] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 1344.148136][T27967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1344.148149][T27967] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1344.148163][T27967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1344.148195][T27967] [ 1344.149402][T27967] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1344.186444][T27973] FAULT_INJECTION: forcing a failure. [ 1344.186444][T27973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.464969][T27973] CPU: 0 UID: 0 PID: 27973 Comm: syz.1.7709 Tainted: G L syzkaller #0 PREEMPT(full) [ 1344.465010][T27973] Tainted: [L]=SOFTLOCKUP [ 1344.465019][T27973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1344.465031][T27973] Call Trace: [ 1344.465041][T27973] [ 1344.465049][T27973] dump_stack_lvl+0xe8/0x150 [ 1344.465079][T27973] should_fail_ex+0x412/0x560 [ 1344.465112][T27973] _copy_from_user+0x2d/0xb0 [ 1344.465146][T27973] ucma_write+0x15d/0x2f0 [ 1344.465251][T27973] ? __pfx_ucma_write+0x10/0x10 [ 1344.465268][T27973] ? security_file_permission+0x75/0x260 [ 1344.465286][T27973] ? rw_verify_area+0x255/0x4d0 [ 1344.465311][T27973] vfs_writev+0x4bd/0x990 [ 1344.465329][T27973] ? __pfx_ucma_write+0x10/0x10 [ 1344.465349][T27973] ? __pfx_vfs_writev+0x10/0x10 [ 1344.465375][T27973] ? __fget_files+0x2a/0x420 [ 1344.465397][T27973] ? __fget_files+0x3a0/0x420 [ 1344.465414][T27973] ? __fget_files+0x2a/0x420 [ 1344.465439][T27973] do_writev+0x154/0x2e0 [ 1344.465456][T27973] ? __pfx_do_writev+0x10/0x10 [ 1344.465480][T27973] __do_fast_syscall_32+0x229/0x6e0 [ 1344.465501][T27973] ? do_fast_syscall_32+0x33/0x70 [ 1344.465519][T27973] ? lockdep_hardirqs_on+0x7a/0x110 [ 1344.465560][T27973] ? asm_int80_emulation+0x1a/0x20 [ 1344.465582][T27973] ? do_int80_emulation+0x286/0x530 [ 1344.465605][T27973] ? trace_irq_disable+0x3b/0x140 [ 1344.465631][T27973] do_fast_syscall_32+0x33/0x70 [ 1344.465651][T27973] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.465670][T27973] RIP: 0023:0xf7f8901c [ 1344.465684][T27973] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1344.465698][T27973] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1344.465715][T27973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1344.465726][T27973] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 1344.465735][T27973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1344.465744][T27973] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1344.465753][T27973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1344.465774][T27973] [ 1344.798760][T27980] FAULT_INJECTION: forcing a failure. [ 1344.798760][T27980] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.812617][T27980] CPU: 0 UID: 0 PID: 27980 Comm: syz.2.7711 Tainted: G L syzkaller #0 PREEMPT(full) [ 1344.812653][T27980] Tainted: [L]=SOFTLOCKUP [ 1344.812661][T27980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1344.812675][T27980] Call Trace: [ 1344.812684][T27980] [ 1344.812694][T27980] dump_stack_lvl+0xe8/0x150 [ 1344.812724][T27980] should_fail_ex+0x412/0x560 [ 1344.812755][T27980] should_failslab+0xa8/0x100 [ 1344.812788][T27980] __kmalloc_noprof+0xe8/0x760 [ 1344.812818][T27980] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1344.812853][T27980] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1344.812895][T27980] ? tomoyo_domain+0xd7/0x130 [ 1344.812931][T27980] ? tomoyo_path_number_perm+0x219/0x630 [ 1344.812957][T27980] tomoyo_path_number_perm+0x246/0x630 [ 1344.812986][T27980] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1344.813012][T27980] ? __lock_acquire+0x6b5/0x2cf0 [ 1344.813078][T27980] ? __fget_files+0x2a/0x420 [ 1344.813109][T27980] ? __fget_files+0x3a0/0x420 [ 1344.813134][T27980] ? __fget_files+0x2a/0x420 [ 1344.813165][T27980] security_file_ioctl_compat+0xc3/0x2a0 [ 1344.813192][T27980] __ia32_compat_sys_ioctl+0x139/0x950 [ 1344.813231][T27980] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1344.813269][T27980] ? __fget_files+0x3a0/0x420 [ 1344.813302][T27980] ? fput+0xa0/0xd0 [ 1344.813327][T27980] ? ksys_write+0x242/0x270 [ 1344.813371][T27980] __do_fast_syscall_32+0x229/0x6e0 [ 1344.813402][T27980] ? do_fast_syscall_32+0x33/0x70 [ 1344.813428][T27980] ? lockdep_hardirqs_on+0x7a/0x110 [ 1344.813454][T27980] ? asm_int80_emulation+0x1a/0x20 [ 1344.813475][T27980] ? do_int80_emulation+0x286/0x530 [ 1344.813502][T27980] ? trace_irq_disable+0x3b/0x140 [ 1344.813540][T27980] do_fast_syscall_32+0x33/0x70 [ 1344.813568][T27980] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.813595][T27980] RIP: 0023:0xf700f01c [ 1344.813616][T27980] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1344.813635][T27980] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1344.813658][T27980] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c2c45512 [ 1344.813674][T27980] RDX: 0000000080000640 RSI: 0000000000000000 RDI: 0000000000000000 [ 1344.813687][T27980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1344.813700][T27980] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1344.813712][T27980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1344.813745][T27980] [ 1344.813756][T27980] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1345.251896][T27989] VFS: Mount too revealing [ 1345.319926][T27170] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1345.439686][T25359] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1345.474331][T28001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7719'. [ 1345.489845][T27170] usb 4-1: Using ep0 maxpacket: 16 [ 1345.503243][T27170] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.519669][T27170] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.543482][T27998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7718'. [ 1345.552577][T27170] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 1345.552618][T27170] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1345.556287][T27170] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1345.601477][T27170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1345.610225][T27170] usb 4-1: SerialNumber: syz [ 1345.625285][T25359] usb 3-1: Using ep0 maxpacket: 32 [ 1345.637070][T25359] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1345.649200][T25359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.664613][T25359] usb 3-1: Product: syz [ 1345.669246][T25359] usb 3-1: Manufacturer: syz [ 1345.673568][T27170] hub 4-1:1.0: bad descriptor, ignoring hub [ 1345.679976][T25359] usb 3-1: SerialNumber: syz [ 1345.693357][T27170] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1345.709096][T27170] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1345.752271][T25359] usb 3-1: config 0 descriptor?? [ 1345.827733][T25359] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1345.862082][T28005] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7721'. [ 1345.874118][T25359] dvb-usb: bulk message failed: -22 (4/0) [ 1345.888188][T25359] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1345.914073][T28005] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7721'. [ 1345.925467][T25359] dvb-usb: bulk message failed: -22 (5/0) [ 1345.938712][T25359] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1345.955382][T28005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7721'. [ 1345.979749][T28008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7721'. [ 1346.010158][T25359] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1346.036006][T25359] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1346.053270][T27972] raw-gadget.0 gadget.3: fail, usb_ep_set_halt returned -11 [ 1346.068947][T25359] usb 3-1: media controller created [ 1346.136518][T28011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7715'. [ 1346.173205][T25359] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1346.226980][T28011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7715'. [ 1346.245406][T28011] netlink: 'syz.2.7715': attribute type 15 has an invalid length. [ 1346.290640][T25359] usb 3-1: selecting invalid altsetting 3 [ 1346.296690][T28011] netlink: 'syz.2.7715': attribute type 18 has an invalid length. [ 1346.299401][T25359] ttusb2: set interface to alts=3 failed [ 1346.531649][T25359] DVB: Unable to find symbol tda10086_attach() [ 1346.557184][T25359] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1346.610834][T25359] dvb-usb: bulk message failed: -22 (4/0) [ 1346.628703][T25359] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1346.665974][T25359] dvb-usb: bulk message failed: -22 (5/0) [ 1346.693413][T25359] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1346.746398][T25359] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1347.149904][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1347.389923][T25359] usb 4-1: USB disconnect, device number 119 [ 1347.701716][T25359] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1347.869706][T25359] usb 4-1: Using ep0 maxpacket: 32 [ 1347.894608][T25359] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1347.931387][T25359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.967256][T25359] usb 4-1: Product: syz [ 1347.997341][T25359] usb 4-1: Manufacturer: syz [ 1348.021916][T25359] usb 4-1: SerialNumber: syz [ 1348.057431][T25359] usb 4-1: config 0 descriptor?? [ 1348.101634][T25359] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1348.958967][T14581] usb 3-1: USB disconnect, device number 107 [ 1349.078659][T11208] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1349.116169][T28053] FAULT_INJECTION: forcing a failure. [ 1349.116169][T28053] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.146931][T14581] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1349.176139][T28053] CPU: 1 UID: 0 PID: 28053 Comm: syz.0.7734 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.176177][T28053] Tainted: [L]=SOFTLOCKUP [ 1349.176185][T28053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1349.176198][T28053] Call Trace: [ 1349.176208][T28053] [ 1349.176218][T28053] dump_stack_lvl+0xe8/0x150 [ 1349.176250][T28053] should_fail_ex+0x412/0x560 [ 1349.176284][T28053] should_failslab+0xa8/0x100 [ 1349.176323][T28053] __kmalloc_noprof+0xe8/0x760 [ 1349.176353][T28053] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1349.176391][T28053] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1349.176424][T28053] ? tomoyo_domain+0xd7/0x130 [ 1349.176460][T28053] ? tomoyo_path_number_perm+0x219/0x630 [ 1349.176487][T28053] tomoyo_path_number_perm+0x246/0x630 [ 1349.176515][T28053] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1349.176545][T28053] ? __lock_acquire+0x6b5/0x2cf0 [ 1349.176608][T28053] ? __fget_files+0x2a/0x420 [ 1349.176640][T28053] ? __fget_files+0x3a0/0x420 [ 1349.176676][T28053] ? __fget_files+0x2a/0x420 [ 1349.176705][T28053] security_file_ioctl_compat+0xc3/0x2a0 [ 1349.176734][T28053] __ia32_compat_sys_ioctl+0x139/0x950 [ 1349.176773][T28053] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1349.176809][T28053] ? __fget_files+0x3a0/0x420 [ 1349.176839][T28053] ? fput+0xa0/0xd0 [ 1349.176866][T28053] ? ksys_write+0x242/0x270 [ 1349.176907][T28053] __do_fast_syscall_32+0x229/0x6e0 [ 1349.176936][T28053] ? do_fast_syscall_32+0x33/0x70 [ 1349.176962][T28053] ? lockdep_hardirqs_on+0x7a/0x110 [ 1349.176987][T28053] ? asm_int80_emulation+0x1a/0x20 [ 1349.177009][T28053] ? do_int80_emulation+0x286/0x530 [ 1349.177040][T28053] do_fast_syscall_32+0x33/0x70 [ 1349.177069][T28053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1349.177096][T28053] RIP: 0023:0xf707f01c [ 1349.177116][T28053] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1349.177137][T28053] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1349.177162][T28053] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c040aed5 [ 1349.177177][T28053] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1349.177191][T28053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1349.177203][T28053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1349.177217][T28053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1349.177249][T28053] [ 1349.177341][T28053] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1349.912529][T25359] gspca_topro: reg_r err -71 [ 1349.923787][T25359] gspca_topro: Sensor soi763a [ 1349.993078][T25359] usb 4-1: USB disconnect, device number 120 [ 1350.007234][T28061] FAULT_INJECTION: forcing a failure. [ 1350.007234][T28061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.065815][T28061] CPU: 0 UID: 0 PID: 28061 Comm: syz.4.7738 Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.065850][T28061] Tainted: [L]=SOFTLOCKUP [ 1350.065858][T28061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1350.065868][T28061] Call Trace: [ 1350.065876][T28061] [ 1350.065885][T28061] dump_stack_lvl+0xe8/0x150 [ 1350.065917][T28061] should_fail_ex+0x412/0x560 [ 1350.065946][T28061] _copy_from_user+0x2d/0xb0 [ 1350.065979][T28061] get_compat_msghdr+0xb3/0x4c0 [ 1350.066014][T28061] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1350.066056][T28061] ___sys_sendmsg+0x201/0x360 [ 1350.066083][T28061] ? __lock_acquire+0x6b5/0x2cf0 [ 1350.066110][T28061] ? __pfx____sys_sendmsg+0x10/0x10 [ 1350.066143][T28061] ? kstrtoull+0x12f/0x1d0 [ 1350.066195][T28061] ? __fget_files+0x2a/0x420 [ 1350.066222][T28061] ? __fget_files+0x3a0/0x420 [ 1350.066258][T28061] __sys_sendmmsg+0x2e7/0x4e0 [ 1350.066291][T28061] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1350.066346][T28061] ? fput+0xa0/0xd0 [ 1350.066372][T28061] ? ksys_write+0x242/0x270 [ 1350.066412][T28061] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1350.066445][T28061] __do_fast_syscall_32+0x229/0x6e0 [ 1350.066475][T28061] ? do_fast_syscall_32+0x33/0x70 [ 1350.066503][T28061] ? lockdep_hardirqs_on+0x7a/0x110 [ 1350.066528][T28061] ? asm_int80_emulation+0x1a/0x20 [ 1350.066550][T28061] ? do_int80_emulation+0x286/0x530 [ 1350.066578][T28061] ? trace_irq_disable+0x3b/0x140 [ 1350.066628][T28061] do_fast_syscall_32+0x33/0x70 [ 1350.066657][T28061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1350.066685][T28061] RIP: 0023:0xf704f01c [ 1350.066706][T28061] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1350.066726][T28061] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1350.066750][T28061] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080002340 [ 1350.066767][T28061] RDX: 00000000000003e8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1350.066781][T28061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1350.066795][T28061] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1350.066808][T28061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1350.066840][T28061] [ 1350.718956][T12494] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1350.879630][T12494] usb 5-1: Using ep0 maxpacket: 32 [ 1350.915704][T12494] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.949441][T12494] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1350.969615][T12494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.981282][T28070] CIFS: bad ip= option (%‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 1350.993018][T12494] usb 5-1: Product: syz [ 1350.999156][T12494] usb 5-1: Manufacturer: syz [ 1351.014569][T12494] usb 5-1: SerialNumber: syz [ 1351.050299][T12494] usb 5-1: config 0 descriptor?? [ 1351.087525][T12494] cdc_ether 5-1:0.0: missing cdc header descriptor [ 1351.112644][T12494] usb 5-1: unsupported MDLM descriptors [ 1351.295263][T28064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.319604][T28064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.542521][T28082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7744'. [ 1351.796527][T28094] FAULT_INJECTION: forcing a failure. [ 1351.796527][T28094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1351.830543][T28094] CPU: 1 UID: 0 PID: 28094 Comm: syz.3.7746 Tainted: G L syzkaller #0 PREEMPT(full) [ 1351.830570][T28094] Tainted: [L]=SOFTLOCKUP [ 1351.830577][T28094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1351.830587][T28094] Call Trace: [ 1351.830594][T28094] [ 1351.830601][T28094] dump_stack_lvl+0xe8/0x150 [ 1351.830625][T28094] should_fail_ex+0x412/0x560 [ 1351.830650][T28094] _copy_from_user+0x2d/0xb0 [ 1351.830674][T28094] get_compat_msghdr+0xb3/0x4c0 [ 1351.830702][T28094] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1351.830733][T28094] ___sys_sendmsg+0x201/0x360 [ 1351.830756][T28094] ? __lock_acquire+0x6b5/0x2cf0 [ 1351.830776][T28094] ? __pfx____sys_sendmsg+0x10/0x10 [ 1351.830800][T28094] ? kstrtoull+0x12f/0x1d0 [ 1351.830836][T28094] ? __fget_files+0x2a/0x420 [ 1351.830854][T28094] ? __fget_files+0x3a0/0x420 [ 1351.830879][T28094] __sys_sendmmsg+0x2e7/0x4e0 [ 1351.830904][T28094] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1351.830944][T28094] ? fput+0xa0/0xd0 [ 1351.830961][T28094] ? ksys_write+0x242/0x270 [ 1351.830988][T28094] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1351.831010][T28094] __do_fast_syscall_32+0x229/0x6e0 [ 1351.831035][T28094] ? do_fast_syscall_32+0x33/0x70 [ 1351.831054][T28094] ? lockdep_hardirqs_on+0x7a/0x110 [ 1351.831072][T28094] ? asm_int80_emulation+0x1a/0x20 [ 1351.831087][T28094] ? do_int80_emulation+0x286/0x530 [ 1351.831107][T28094] ? trace_irq_disable+0x3b/0x140 [ 1351.831132][T28094] do_fast_syscall_32+0x33/0x70 [ 1351.831153][T28094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1351.831172][T28094] RIP: 0023:0xf703f01c [ 1351.831187][T28094] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1351.831201][T28094] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1351.831217][T28094] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004ac0 [ 1351.831228][T28094] RDX: 000000000000001c RSI: 0000000000044010 RDI: 0000000000000000 [ 1351.831238][T28094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1351.831247][T28094] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1351.831256][T28094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1351.831278][T28094] [ 1352.333693][T28100] FAULT_INJECTION: forcing a failure. [ 1352.333693][T28100] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.376339][T28100] CPU: 0 UID: 0 PID: 28100 Comm: syz.3.7748 Tainted: G L syzkaller #0 PREEMPT(full) [ 1352.376367][T28100] Tainted: [L]=SOFTLOCKUP [ 1352.376373][T28100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1352.376383][T28100] Call Trace: [ 1352.376390][T28100] [ 1352.376397][T28100] dump_stack_lvl+0xe8/0x150 [ 1352.376422][T28100] should_fail_ex+0x412/0x560 [ 1352.376447][T28100] should_failslab+0xa8/0x100 [ 1352.376500][T28100] __kmalloc_noprof+0xe8/0x760 [ 1352.376532][T28100] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1352.376570][T28100] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1352.376606][T28100] ? tomoyo_domain+0xd7/0x130 [ 1352.376631][T28100] ? tomoyo_path_number_perm+0x219/0x630 [ 1352.376648][T28100] tomoyo_path_number_perm+0x246/0x630 [ 1352.376668][T28100] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1352.376685][T28100] ? __lock_acquire+0x6b5/0x2cf0 [ 1352.376735][T28100] ? __fget_files+0x2a/0x420 [ 1352.376757][T28100] ? __fget_files+0x3a0/0x420 [ 1352.376775][T28100] ? __fget_files+0x2a/0x420 [ 1352.376796][T28100] security_file_ioctl_compat+0xc3/0x2a0 [ 1352.376816][T28100] __ia32_compat_sys_ioctl+0x139/0x950 [ 1352.376843][T28100] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1352.376870][T28100] ? __fget_files+0x3a0/0x420 [ 1352.376893][T28100] ? fput+0xa0/0xd0 [ 1352.376911][T28100] ? ksys_write+0x242/0x270 [ 1352.376941][T28100] __do_fast_syscall_32+0x229/0x6e0 [ 1352.376963][T28100] ? do_fast_syscall_32+0x33/0x70 [ 1352.376981][T28100] ? lockdep_hardirqs_on+0x7a/0x110 [ 1352.376999][T28100] ? asm_int80_emulation+0x1a/0x20 [ 1352.377014][T28100] ? do_int80_emulation+0x286/0x530 [ 1352.377032][T28100] ? trace_irq_disable+0x3b/0x140 [ 1352.377059][T28100] do_fast_syscall_32+0x33/0x70 [ 1352.377080][T28100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1352.377100][T28100] RIP: 0023:0xf703f01c [ 1352.377114][T28100] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1352.377128][T28100] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1352.377145][T28100] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040107447 [ 1352.377156][T28100] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1352.377166][T28100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1352.377175][T28100] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1352.377184][T28100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1352.377206][T28100] [ 1352.377438][T28100] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1353.479655][T12494] usb 5-1: USB disconnect, device number 100 [ 1353.812156][T28115] netlink: 'syz.0.7754': attribute type 10 has an invalid length. [ 1353.855759][T28117] netlink: 'syz.1.7753': attribute type 10 has an invalid length. [ 1353.880053][T28115] bond1: option mode: unable to set because the bond device has slaves [ 1353.922836][T28115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7754'. [ 1353.933747][T28117] bond2: option mode: unable to set because the bond device has slaves [ 1353.960443][T28117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7753'. [ 1354.001920][T28115] bond1: (slave macvlan6): Error -98 calling set_mac_address [ 1354.060792][T28117] bond2: (slave macvlan7): Error -98 calling set_mac_address [ 1354.559261][T28131] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1354.810008][T28136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7757'. [ 1354.888395][T28139] syzkaller0: entered promiscuous mode [ 1354.913896][T28139] syzkaller0: entered allmulticast mode [ 1355.190554][T28144] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7762'. [ 1355.843239][T27170] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1356.010557][T27170] usb 5-1: Using ep0 maxpacket: 8 [ 1356.048040][T27170] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1356.071484][T27170] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1356.093554][T27170] usb 5-1: string descriptor 0 read error: -22 [ 1356.103044][T27170] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1356.130433][T27170] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1356.164497][T27170] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1356.194550][T27170] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1356.222208][T27170] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1356.229840][T27170] usb 5-1: media controller created [ 1356.250175][T12494] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1356.293642][T27170] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1356.420132][T12494] usb 3-1: Using ep0 maxpacket: 32 [ 1356.421059][T27170] zl10353_read_register: readreg error (reg=127, ret==0) [ 1356.449570][T12494] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1356.487910][T12494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.542654][T12494] usb 3-1: config 0 descriptor?? [ 1356.573451][T12494] as10x_usb: device has been detected [ 1356.584833][T12494] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1356.625606][T27170] usb 5-1: USB disconnect, device number 101 [ 1356.668878][T12494] usb 3-1: DVB: registering adapter 3 frontend 0 (nBox DVB-T Dongle)... [ 1356.812747][T28174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7771'. [ 1356.862585][T28173] FAULT_INJECTION: forcing a failure. [ 1356.862585][T28173] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.875718][T28173] CPU: 1 UID: 0 PID: 28173 Comm: syz.3.7763 Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.875748][T28173] Tainted: [L]=SOFTLOCKUP [ 1356.875755][T28173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1356.875768][T28173] Call Trace: [ 1356.875776][T28173] [ 1356.875785][T28173] dump_stack_lvl+0xe8/0x150 [ 1356.875814][T28173] should_fail_ex+0x412/0x560 [ 1356.875842][T28173] should_failslab+0xa8/0x100 [ 1356.875871][T28173] __kmalloc_noprof+0xe8/0x760 [ 1356.875896][T28173] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1356.875927][T28173] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1356.875954][T28173] ? tomoyo_domain+0xd7/0x130 [ 1356.875983][T28173] ? tomoyo_path_number_perm+0x219/0x630 [ 1356.876003][T28173] tomoyo_path_number_perm+0x246/0x630 [ 1356.876026][T28173] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1356.876045][T28173] ? __lock_acquire+0x6b5/0x2cf0 [ 1356.876095][T28173] ? __fget_files+0x2a/0x420 [ 1356.876119][T28173] ? __fget_files+0x3a0/0x420 [ 1356.876139][T28173] ? __fget_files+0x2a/0x420 [ 1356.876163][T28173] security_file_ioctl_compat+0xc3/0x2a0 [ 1356.876185][T28173] __ia32_compat_sys_ioctl+0x139/0x950 [ 1356.876218][T28173] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1356.876249][T28173] ? __fget_files+0x3a0/0x420 [ 1356.876275][T28173] ? fput+0xa0/0xd0 [ 1356.876295][T28173] ? ksys_write+0x242/0x270 [ 1356.876330][T28173] __do_fast_syscall_32+0x229/0x6e0 [ 1356.876355][T28173] ? do_fast_syscall_32+0x33/0x70 [ 1356.876391][T28173] ? lockdep_hardirqs_on+0x7a/0x110 [ 1356.876412][T28173] ? asm_int80_emulation+0x1a/0x20 [ 1356.876429][T28173] ? do_int80_emulation+0x286/0x530 [ 1356.876463][T28173] do_fast_syscall_32+0x33/0x70 [ 1356.876515][T28173] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1356.876538][T28173] RIP: 0023:0xf703f01c [ 1356.876556][T28173] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1356.876572][T28173] RSP: 002b:00000000f53eb50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1356.876592][T28173] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040505331 [ 1356.876604][T28173] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 1356.876615][T28173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1356.876626][T28173] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1356.876637][T28173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1356.876663][T28173] [ 1356.876673][T28173] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1357.388281][T12494] as10x_usb: error during firmware upload part1 [ 1357.418108][T12494] Registered device nBox DVB-T Dongle [ 1357.429713][T12494] usb 3-1: USB disconnect, device number 108 [ 1357.506626][T12494] Unregistered device nBox DVB-T Dongle [ 1357.508838][T12494] as10x_usb: device has been disconnected [ 1357.611050][T28183] FAULT_INJECTION: forcing a failure. [ 1357.611050][T28183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1357.634462][T28189] VFS: Mount too revealing [ 1357.638890][T28183] CPU: 1 UID: 0 PID: 28183 Comm: syz.1.7774 Tainted: G L syzkaller #0 PREEMPT(full) [ 1357.638992][T28183] Tainted: [L]=SOFTLOCKUP [ 1357.639023][T28183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1357.639065][T28183] Call Trace: [ 1357.639088][T28183] [ 1357.639113][T28183] dump_stack_lvl+0xe8/0x150 [ 1357.639167][T28183] should_fail_ex+0x412/0x560 [ 1357.639201][T28183] _copy_to_user+0x31/0xb0 [ 1357.639322][T28183] snd_seq_read+0x455/0x630 [ 1357.639581][T28183] ? __pfx_snd_seq_read+0x10/0x10 [ 1357.639638][T28183] ? apparmor_file_permission+0x1f4/0x300 [ 1357.639716][T28183] ? bpf_lsm_file_permission+0x9/0x20 [ 1357.639808][T28183] ? security_file_permission+0x75/0x260 [ 1357.639893][T28183] ? rw_verify_area+0x2a6/0x4d0 [ 1357.639984][T28183] vfs_readv+0x587/0x840 [ 1357.640054][T28183] ? __pfx_snd_seq_read+0x10/0x10 [ 1357.640122][T28183] ? __pfx_vfs_readv+0x10/0x10 [ 1357.640439][T28183] ? __fget_files+0x2a/0x420 [ 1357.640522][T28183] ? __fget_files+0x3a0/0x420 [ 1357.640592][T28183] ? __fget_files+0x2a/0x420 [ 1357.640696][T28183] do_readv+0x154/0x2e0 [ 1357.640788][T28183] ? __pfx_do_readv+0x10/0x10 [ 1357.640888][T28183] __do_fast_syscall_32+0x229/0x6e0 [ 1357.640981][T28183] ? do_fast_syscall_32+0x33/0x70 [ 1357.641058][T28183] ? lockdep_hardirqs_on+0x7a/0x110 [ 1357.641142][T28183] ? asm_int80_emulation+0x1a/0x20 [ 1357.641201][T28183] ? do_int80_emulation+0x286/0x530 [ 1357.641281][T28183] ? trace_irq_disable+0x3b/0x140 [ 1357.641379][T28183] do_fast_syscall_32+0x33/0x70 [ 1357.641472][T28183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1357.641552][T28183] RIP: 0023:0xf7f8901c [ 1357.641612][T28183] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1357.641661][T28183] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000091 [ 1357.641729][T28183] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002880 [ 1357.641775][T28183] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1357.641818][T28183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1357.641857][T28183] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1357.641896][T28183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1357.641985][T28183] [ 1358.082016][T28200] FAULT_INJECTION: forcing a failure. [ 1358.082016][T28200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.136804][T28200] CPU: 0 UID: 0 PID: 28200 Comm: syz.4.7780 Tainted: G L syzkaller #0 PREEMPT(full) [ 1358.136841][T28200] Tainted: [L]=SOFTLOCKUP [ 1358.136850][T28200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1358.136864][T28200] Call Trace: [ 1358.136873][T28200] [ 1358.136883][T28200] dump_stack_lvl+0xe8/0x150 [ 1358.136919][T28200] should_fail_ex+0x412/0x560 [ 1358.136954][T28200] _copy_from_user+0x2d/0xb0 [ 1358.136987][T28200] get_compat_msghdr+0xb3/0x4c0 [ 1358.137023][T28200] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1358.137075][T28200] ___sys_sendmsg+0x201/0x360 [ 1358.137104][T28200] ? __lock_acquire+0x6b5/0x2cf0 [ 1358.137133][T28200] ? __pfx____sys_sendmsg+0x10/0x10 [ 1358.137196][T28200] ? __fget_files+0x2a/0x420 [ 1358.137222][T28200] ? __fget_files+0x3a0/0x420 [ 1358.137258][T28200] __sys_sendmsg+0x183/0x260 [ 1358.137290][T28200] ? __pfx___sys_sendmsg+0x10/0x10 [ 1358.137329][T28200] ? rcu_is_watching+0x15/0xb0 [ 1358.137366][T28200] __do_fast_syscall_32+0x229/0x6e0 [ 1358.137396][T28200] ? do_fast_syscall_32+0x33/0x70 [ 1358.137425][T28200] ? irqentry_exit+0x10f/0x730 [ 1358.137449][T28200] ? rcu_is_watching+0x15/0xb0 [ 1358.137479][T28200] do_fast_syscall_32+0x33/0x70 [ 1358.137507][T28200] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1358.137535][T28200] RIP: 0023:0xf704f01c [ 1358.137555][T28200] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1358.137574][T28200] RSP: 002b:00000000f541c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1358.137596][T28200] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 1358.137612][T28200] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 1358.137625][T28200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1358.137638][T28200] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1358.137650][T28200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1358.137679][T28200] [ 1358.593596][T28207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7782'. [ 1358.679291][T28207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1358.742959][T28209] ipvlan2: entered allmulticast mode [ 1358.763018][T28209] bond2: entered allmulticast mode [ 1358.984900][T28214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7784'. [ 1359.043622][T28215] FAULT_INJECTION: forcing a failure. [ 1359.043622][T28215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.098550][T28215] CPU: 1 UID: 0 PID: 28215 Comm: syz.0.7784 Tainted: G L syzkaller #0 PREEMPT(full) [ 1359.098587][T28215] Tainted: [L]=SOFTLOCKUP [ 1359.098596][T28215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1359.098610][T28215] Call Trace: [ 1359.098620][T28215] [ 1359.098630][T28215] dump_stack_lvl+0xe8/0x150 [ 1359.098662][T28215] should_fail_ex+0x412/0x560 [ 1359.098697][T28215] _copy_from_user+0x2d/0xb0 [ 1359.098730][T28215] get_compat_msghdr+0xb3/0x4c0 [ 1359.098763][T28215] ? _parse_integer_limit+0x1ae/0x1f0 [ 1359.098789][T28215] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1359.098820][T28215] ? kstrtoull+0x12f/0x1d0 [ 1359.098853][T28215] ___sys_sendmsg+0x201/0x360 [ 1359.098881][T28215] ? __lock_acquire+0x6b5/0x2cf0 [ 1359.098910][T28215] ? __pfx____sys_sendmsg+0x10/0x10 [ 1359.098940][T28215] ? get_pid_task+0x20/0x1f0 [ 1359.098968][T28215] ? get_pid_task+0x20/0x1f0 [ 1359.098993][T28215] ? get_pid_task+0x20/0x1f0 [ 1359.099054][T28215] ? __fget_files+0x2a/0x420 [ 1359.099080][T28215] ? __fget_files+0x3a0/0x420 [ 1359.099116][T28215] __sys_sendmsg+0x183/0x260 [ 1359.099146][T28215] ? __pfx___sys_sendmsg+0x10/0x10 [ 1359.099200][T28215] __do_fast_syscall_32+0x229/0x6e0 [ 1359.099231][T28215] ? do_fast_syscall_32+0x33/0x70 [ 1359.099257][T28215] ? lockdep_hardirqs_on+0x7a/0x110 [ 1359.099283][T28215] ? asm_int80_emulation+0x1a/0x20 [ 1359.099305][T28215] ? do_int80_emulation+0x286/0x530 [ 1359.099331][T28215] ? trace_irq_disable+0x3b/0x140 [ 1359.099367][T28215] do_fast_syscall_32+0x33/0x70 [ 1359.099396][T28215] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1359.099423][T28215] RIP: 0023:0xf707f01c [ 1359.099442][T28215] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1359.099462][T28215] RSP: 002b:00000000f544c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1359.099485][T28215] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 1359.099502][T28215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1359.099514][T28215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1359.099526][T28215] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1359.099539][T28215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1359.099569][T28215] [ 1359.423823][T28222] FAULT_INJECTION: forcing a failure. [ 1359.423823][T28222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.524416][T28214] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1359.596419][T28222] CPU: 0 UID: 0 PID: 28222 Comm: syz.4.7787 Tainted: G L syzkaller #0 PREEMPT(full) [ 1359.596457][T28222] Tainted: [L]=SOFTLOCKUP [ 1359.596466][T28222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1359.596479][T28222] Call Trace: [ 1359.596489][T28222] [ 1359.596499][T28222] dump_stack_lvl+0xe8/0x150 [ 1359.596529][T28222] should_fail_ex+0x412/0x560 [ 1359.596559][T28222] _copy_from_user+0x2d/0xb0 [ 1359.596587][T28222] __sys_sendto+0x2b0/0x710 [ 1359.596612][T28222] ? __pfx___sys_sendto+0x10/0x10 [ 1359.596653][T28222] ? fput+0xa0/0xd0 [ 1359.596675][T28222] ? ksys_write+0x242/0x270 [ 1359.596705][T28222] __ia32_sys_sendto+0xdd/0x100 [ 1359.596731][T28222] __do_fast_syscall_32+0x229/0x6e0 [ 1359.596757][T28222] ? do_fast_syscall_32+0x33/0x70 [ 1359.596780][T28222] ? lockdep_hardirqs_on+0x7a/0x110 [ 1359.596800][T28222] ? asm_int80_emulation+0x1a/0x20 [ 1359.596818][T28222] ? do_int80_emulation+0x286/0x530 [ 1359.596844][T28222] do_fast_syscall_32+0x33/0x70 [ 1359.596869][T28222] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1359.596891][T28222] RIP: 0023:0xf704f01c [ 1359.596909][T28222] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1359.596926][T28222] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1359.596947][T28222] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1359.596960][T28222] RDX: 000000000000fce0 RSI: 0000000000000004 RDI: 0000000080000140 [ 1359.596972][T28222] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1359.596983][T28222] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1359.596994][T28222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1359.597021][T28222] [ 1359.636569][T28225] VFS: Mount too revealing [ 1360.209474][T28245] Set syz1 is full, maxelem 0 reached [ 1360.461921][T28254] netlink: 'syz.1.7799': attribute type 1 has an invalid length. [ 1360.518316][T28254] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1360.794157][T28264] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1360.967019][T28267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7803'. [ 1361.167724][T28272] VFS: Mount too revealing [ 1361.218208][T28273] FAULT_INJECTION: forcing a failure. [ 1361.218208][T28273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.237226][T28273] CPU: 1 UID: 0 PID: 28273 Comm: syz.2.7804 Tainted: G L syzkaller #0 PREEMPT(full) [ 1361.237264][T28273] Tainted: [L]=SOFTLOCKUP [ 1361.237273][T28273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1361.237287][T28273] Call Trace: [ 1361.237296][T28273] [ 1361.237307][T28273] dump_stack_lvl+0xe8/0x150 [ 1361.237340][T28273] should_fail_ex+0x412/0x560 [ 1361.237374][T28273] _copy_to_user+0x31/0xb0 [ 1361.237410][T28273] simple_read_from_buffer+0xe1/0x170 [ 1361.237443][T28273] proc_fail_nth_read+0x1bb/0x230 [ 1361.237476][T28273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1361.237509][T28273] ? rw_verify_area+0x2a6/0x4d0 [ 1361.237539][T28273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1361.237569][T28273] vfs_read+0x20c/0xa70 [ 1361.237606][T28273] ? __pfx___mutex_lock+0x10/0x10 [ 1361.237635][T28273] ? __pfx_vfs_read+0x10/0x10 [ 1361.237668][T28273] ? __fget_files+0x2a/0x420 [ 1361.237700][T28273] ? __fget_files+0x3a0/0x420 [ 1361.237725][T28273] ? __fget_files+0x2a/0x420 [ 1361.237761][T28273] ksys_read+0x150/0x270 [ 1361.237795][T28273] ? __pfx_ksys_read+0x10/0x10 [ 1361.237831][T28273] ? asm_int80_emulation+0x1a/0x20 [ 1361.237860][T28273] do_int80_emulation+0x181/0x530 [ 1361.237888][T28273] ? trace_irq_disable+0x3b/0x140 [ 1361.237920][T28273] ? asm_int80_emulation+0x1a/0x20 [ 1361.237941][T28273] ? clear_bhb_loop+0x40/0x90 [ 1361.237964][T28273] ? clear_bhb_loop+0x40/0x90 [ 1361.237990][T28273] asm_int80_emulation+0x1a/0x20 [ 1361.238011][T28273] RIP: 0023:0xf714616b [ 1361.238032][T28273] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1361.238052][T28273] RSP: 002b:00000000f53dc4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1361.238077][T28273] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53dc5d0 [ 1361.238102][T28273] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1361.238115][T28273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1361.238127][T28273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1361.238141][T28273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1361.238172][T28273] [ 1361.621064][T14581] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1361.696407][T28277] netlink: 'syz.4.7806': attribute type 10 has an invalid length. [ 1361.720363][T28277] bond1: option mode: unable to set because the bond device has slaves [ 1361.743279][T28277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7806'. [ 1361.759765][T14581] usb 4-1: device descriptor read/64, error -71 [ 1361.796170][T28277] bond1: (slave macvlan9): Error -98 calling set_mac_address [ 1361.865422][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 1361.865444][ T29] audit: type=1326 audit(1777593785.933:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28279 comm="syz.1.7808" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f8901c code=0x0 [ 1361.984238][T28285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7808'. [ 1362.019686][T14581] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1362.054795][T28288] FAULT_INJECTION: forcing a failure. [ 1362.054795][T28288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1362.070744][T28288] CPU: 1 UID: 0 PID: 28288 Comm: syz.4.7811 Tainted: G L syzkaller #0 PREEMPT(full) [ 1362.070770][T28288] Tainted: [L]=SOFTLOCKUP [ 1362.070776][T28288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1362.070787][T28288] Call Trace: [ 1362.070794][T28288] [ 1362.070809][T28288] dump_stack_lvl+0xe8/0x150 [ 1362.070834][T28288] should_fail_ex+0x412/0x560 [ 1362.070860][T28288] _copy_to_user+0x31/0xb0 [ 1362.070886][T28288] simple_read_from_buffer+0xe1/0x170 [ 1362.070910][T28288] proc_fail_nth_read+0x1bb/0x230 [ 1362.070934][T28288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1362.070957][T28288] ? rw_verify_area+0x2a6/0x4d0 [ 1362.070980][T28288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1362.071001][T28288] vfs_read+0x20c/0xa70 [ 1362.071027][T28288] ? __pfx___mutex_lock+0x10/0x10 [ 1362.071048][T28288] ? __pfx_vfs_read+0x10/0x10 [ 1362.071071][T28288] ? __fget_files+0x2a/0x420 [ 1362.071092][T28288] ? __fget_files+0x3a0/0x420 [ 1362.071109][T28288] ? __fget_files+0x2a/0x420 [ 1362.071133][T28288] ksys_read+0x150/0x270 [ 1362.071156][T28288] ? __pfx_ksys_read+0x10/0x10 [ 1362.071180][T28288] ? asm_int80_emulation+0x1a/0x20 [ 1362.071199][T28288] do_int80_emulation+0x181/0x530 [ 1362.071219][T28288] ? trace_irq_disable+0x3b/0x140 [ 1362.071241][T28288] ? asm_int80_emulation+0x1a/0x20 [ 1362.071256][T28288] ? clear_bhb_loop+0x40/0x90 [ 1362.071271][T28288] ? clear_bhb_loop+0x40/0x90 [ 1362.071289][T28288] asm_int80_emulation+0x1a/0x20 [ 1362.071305][T28288] RIP: 0023:0xf718616b [ 1362.071319][T28288] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1362.071333][T28288] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1362.071350][T28288] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f543d5d0 [ 1362.071361][T28288] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1362.071371][T28288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1362.071380][T28288] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1362.071394][T28288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1362.071416][T28288] [ 1362.372523][T14581] usb 4-1: device descriptor read/64, error -71 [ 1362.429702][T14587] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1362.479889][T14581] usb usb4-port1: attempt power cycle [ 1362.500088][T28294] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1362.509807][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1362.608091][T14587] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1362.628548][T14587] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1362.648808][T14587] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 167, changing to 7 [ 1362.685881][T14587] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1362.699313][T14587] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1362.714501][T14587] usb 2-1: Manufacturer: syz [ 1362.728777][T28301] netlink: 'syz.4.7817': attribute type 10 has an invalid length. [ 1362.734905][T14587] usb 2-1: config 0 descriptor?? [ 1362.743195][T28301] bond1: option mode: unable to set because the bond device has slaves [ 1362.756175][T28301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7817'. [ 1362.774807][T14587] smsusb:smsusb_probe: board id=9, interface number 0 [ 1362.789193][T28301] bond1: (slave macvlan9): Error -98 calling set_mac_address [ 1362.808504][T14587] smsusb:siano_media_device_register: media controller created [ 1362.819624][T14581] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1362.831250][T14587] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 1362.839209][T14587] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 1362.846416][T14581] usb 4-1: device descriptor read/8, error -71 [ 1362.864228][T14587] ------------[ cut here ]------------ [ 1362.870142][T14587] !PageLargeKmalloc(page) [ 1362.870218][T14587] WARNING: mm/slub.c:6471 at free_large_kmalloc+0x9b/0x110, CPU#0: kworker/0:14/14587 [ 1362.885266][T14587] Modules linked in: [ 1362.890063][T14587] CPU: 0 UID: 0 PID: 14587 Comm: kworker/0:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 1362.901604][T14587] Tainted: [L]=SOFTLOCKUP [ 1362.907016][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1362.918163][T14587] Workqueue: usb_hub_wq hub_event [ 1362.923419][T14587] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 1362.929256][T14587] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 82 ff fb 8d 5b 41 5e 5d e9 df 66 02 ff [ 1362.949636][T14587] RSP: 0000:ffffc90006926b20 EFLAGS: 00010206 [ 1362.955966][T14587] RAX: 00000000ff000000 RBX: ffffea000241b880 RCX: 0000000000000001 [ 1362.964233][T14587] RDX: ffffc9001a9bc000 RSI: ffff8880906e2000 RDI: ffffea000241b880 [ 1362.972550][T14587] RBP: 0000000000000000 R08: ffff88802bd40603 R09: 1ffff110057a80c0 [ 1362.981144][T14587] R10: dffffc0000000000 R11: ffffed10057a80c1 R12: 1ffff1100584c882 [ 1362.989278][T14587] R13: 0000000000000000 R14: ffff88802bd40660 R15: dffffc0000000000 [ 1362.997394][T14587] FS: 0000000000000000(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 1363.007540][T14587] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1363.014876][T14587] CR2: 0000000000000000 CR3: 000000008edb2000 CR4: 00000000003526f0 [ 1363.023241][T14587] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1363.028039][T28285] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7808'. [ 1363.031669][T14587] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1363.048668][T14587] Call Trace: [ 1363.052085][T14587] [ 1363.055077][T14587] usb_free_urb+0xd0/0x120 [ 1363.059686][T14587] smsusb_term_device+0x1d7/0x3e0 [ 1363.065007][T14587] smsusb_probe+0x1aba/0x2280 [ 1363.070237][T14587] ? __pfx_smsusb_probe+0x10/0x10 [ 1363.075403][T14587] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1363.081122][T14587] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1363.087104][T14587] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 1363.092999][T14587] usb_probe_interface+0x659/0xc70 [ 1363.098205][T14587] ? __pfx_usb_probe_interface+0x10/0x10 [ 1363.103966][T14587] really_probe+0x267/0xaf0 [ 1363.109653][T14587] __driver_probe_device+0x1ef/0x380 [ 1363.115043][T14587] driver_probe_device+0x4f/0x240 [ 1363.120775][T14587] __device_attach_driver+0x279/0x430 [ 1363.126285][T14587] bus_for_each_drv+0x258/0x2f0 [ 1363.131392][T14587] ? __pfx___device_attach_driver+0x10/0x10 [ 1363.137407][T14587] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1363.142941][T14587] ? lockdep_hardirqs_on+0x7a/0x110 [ 1363.148220][T14587] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1363.154417][T14587] __device_attach+0x2c5/0x450 [ 1363.159294][T14587] ? __pfx___device_attach+0x10/0x10 [ 1363.164697][T14587] ? _raw_spin_unlock+0x28/0x50 [ 1363.169694][T14587] device_initial_probe+0xa1/0xd0 [ 1363.174942][T14587] bus_probe_device+0x12a/0x220 [ 1363.179904][T14581] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1363.179930][T14587] device_add+0x7e9/0xbb0 [ 1363.192389][T14587] usb_set_configuration+0x1a87/0x2110 [ 1363.197993][T14587] usb_generic_driver_probe+0x8d/0x150 [ 1363.203810][T14587] usb_probe_device+0x1c4/0x3b0 [ 1363.208764][T14587] ? __pfx_usb_probe_device+0x10/0x10 [ 1363.215347][T14587] really_probe+0x267/0xaf0 [ 1363.220607][T14587] __driver_probe_device+0x1ef/0x380 [ 1363.226002][T14587] driver_probe_device+0x4f/0x240 [ 1363.231264][T14587] __device_attach_driver+0x279/0x430 [ 1363.236737][T14587] bus_for_each_drv+0x258/0x2f0 [ 1363.241828][T14587] ? __pfx___device_attach_driver+0x10/0x10 [ 1363.247842][T14587] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1363.253702][T14587] ? lockdep_hardirqs_on+0x7a/0x110 [ 1363.259043][T14587] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1363.264977][T14587] __device_attach+0x2c5/0x450 [ 1363.270235][T14587] ? __pfx___device_attach+0x10/0x10 [ 1363.275747][T14587] ? _raw_spin_unlock+0x28/0x50 [ 1363.280765][T14587] device_initial_probe+0xa1/0xd0 [ 1363.285886][T14587] bus_probe_device+0x12a/0x220 [ 1363.290876][T14587] device_add+0x7e9/0xbb0 [ 1363.295294][T14587] usb_new_device+0xa08/0x16f0 [ 1363.300384][T14587] ? __pfx_usb_new_device+0x10/0x10 [ 1363.305693][T14587] ? _raw_spin_unlock_irq+0x23/0x50 [ 1363.311189][T14587] hub_event+0x2a1c/0x4f30 [ 1363.316798][T14587] ? __pfx_hub_event+0x10/0x10 [ 1363.322309][T14587] ? process_scheduled_works+0xa70/0x1860 [ 1363.328222][T14587] ? process_scheduled_works+0xa70/0x1860 [ 1363.334071][T14587] ? process_scheduled_works+0xa70/0x1860 [ 1363.340058][T14587] process_scheduled_works+0xb5d/0x1860 [ 1363.345723][T14587] ? __pfx_process_scheduled_works+0x10/0x10 [ 1363.351958][T14587] ? assign_work+0x3d5/0x5e0 [ 1363.356647][T14587] worker_thread+0xa53/0xfc0 [ 1363.361415][T14587] kthread+0x388/0x470 [ 1363.365652][T14587] ? __pfx_worker_thread+0x10/0x10 [ 1363.370907][T14587] ? __pfx_kthread+0x10/0x10 [ 1363.375577][T14587] ret_from_fork+0x514/0xb70 [ 1363.380349][T14587] ? __pfx_ret_from_fork+0x10/0x10 [ 1363.385540][T14587] ? __switch_to+0xc79/0x1410 [ 1363.391086][T14587] ? __pfx_kthread+0x10/0x10 [ 1363.395972][T14587] ret_from_fork_asm+0x1a/0x30 [ 1363.401056][T14587] [ 1363.404271][T14587] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1363.411800][T14587] CPU: 0 UID: 0 PID: 14587 Comm: kworker/0:14 Tainted: G L syzkaller #0 PREEMPT(full) [ 1363.423071][T14587] Tainted: [L]=SOFTLOCKUP [ 1363.427435][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1363.437566][T14587] Workqueue: usb_hub_wq hub_event [ 1363.442651][T14587] Call Trace: [ 1363.445964][T14587] [ 1363.448950][T14587] vpanic+0x56c/0xa60 [ 1363.453096][T14587] ? __pfx__printk+0x10/0x10 [ 1363.457750][T14587] ? __pfx_vpanic+0x10/0x10 [ 1363.462320][T14587] ? is_bpf_text_address+0x292/0x2b0 [ 1363.467680][T14587] ? is_bpf_text_address+0x26/0x2b0 [ 1363.473127][T14587] panic+0xc5/0xd0 [ 1363.476912][T14587] ? __pfx_panic+0x10/0x10 [ 1363.481483][T14587] ? ret_from_fork_asm+0x1a/0x30 [ 1363.486471][T14587] __warn+0x315/0x4c0 [ 1363.490495][T14587] ? free_large_kmalloc+0x9b/0x110 [ 1363.495656][T14587] ? free_large_kmalloc+0x9b/0x110 [ 1363.500905][T14587] __report_bug+0x29a/0x540 [ 1363.505508][T14587] ? device_initial_probe+0xa1/0xd0 [ 1363.510782][T14587] ? bus_probe_device+0x12a/0x220 [ 1363.515851][T14587] ? device_add+0x7e9/0xbb0 [ 1363.520410][T14587] ? free_large_kmalloc+0x9b/0x110 [ 1363.525587][T14587] ? __pfx___report_bug+0x10/0x10 [ 1363.530654][T14587] ? usb_new_device+0xa08/0x16f0 [ 1363.535667][T14587] ? hub_event+0x2a1c/0x4f30 [ 1363.540291][T14587] ? process_scheduled_works+0xb5d/0x1860 [ 1363.546067][T14587] ? smscore_unregister_device+0x651/0x780 [ 1363.552120][T14587] ? free_large_kmalloc+0x9b/0x110 [ 1363.557457][T14587] report_bug+0x16a/0x220 [ 1363.561830][T14587] ? free_large_kmalloc+0x9b/0x110 [ 1363.566984][T14587] ? free_large_kmalloc+0x9d/0x110 [ 1363.572136][T14587] handle_bug+0x9c/0x200 [ 1363.576421][T14587] exc_invalid_op+0x1a/0x50 [ 1363.580979][T14587] asm_exc_invalid_op+0x1a/0x20 [ 1363.585898][T14587] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 1363.591703][T14587] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 82 ff fb 8d 5b 41 5e 5d e9 df 66 02 ff [ 1363.611372][T14587] RSP: 0000:ffffc90006926b20 EFLAGS: 00010206 [ 1363.617597][T14587] RAX: 00000000ff000000 RBX: ffffea000241b880 RCX: 0000000000000001 [ 1363.625685][T14587] RDX: ffffc9001a9bc000 RSI: ffff8880906e2000 RDI: ffffea000241b880 [ 1363.633801][T14587] RBP: 0000000000000000 R08: ffff88802bd40603 R09: 1ffff110057a80c0 [ 1363.641831][T14587] R10: dffffc0000000000 R11: ffffed10057a80c1 R12: 1ffff1100584c882 [ 1363.649860][T14587] R13: 0000000000000000 R14: ffff88802bd40660 R15: dffffc0000000000 [ 1363.657988][T14587] usb_free_urb+0xd0/0x120 [ 1363.662473][T14587] smsusb_term_device+0x1d7/0x3e0 [ 1363.667563][T14587] smsusb_probe+0x1aba/0x2280 [ 1363.672322][T14587] ? __pfx_smsusb_probe+0x10/0x10 [ 1363.677399][T14587] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 1363.682997][T14587] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1363.688862][T14587] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 1363.694544][T14587] usb_probe_interface+0x659/0xc70 [ 1363.699726][T14587] ? __pfx_usb_probe_interface+0x10/0x10 [ 1363.705501][T14587] really_probe+0x267/0xaf0 [ 1363.710152][T14587] __driver_probe_device+0x1ef/0x380 [ 1363.715491][T14587] driver_probe_device+0x4f/0x240 [ 1363.720559][T14587] __device_attach_driver+0x279/0x430 [ 1363.726167][T14587] bus_for_each_drv+0x258/0x2f0 [ 1363.731125][T14587] ? __pfx___device_attach_driver+0x10/0x10 [ 1363.737085][T14587] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1363.742591][T14587] ? lockdep_hardirqs_on+0x7a/0x110 [ 1363.747829][T14587] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1363.753687][T14587] __device_attach+0x2c5/0x450 [ 1363.758509][T14587] ? __pfx___device_attach+0x10/0x10 [ 1363.763908][T14587] ? _raw_spin_unlock+0x28/0x50 [ 1363.768830][T14587] device_initial_probe+0xa1/0xd0 [ 1363.773894][T14587] bus_probe_device+0x12a/0x220 [ 1363.778795][T14587] device_add+0x7e9/0xbb0 [ 1363.783426][T14587] usb_set_configuration+0x1a87/0x2110 [ 1363.788957][T14587] usb_generic_driver_probe+0x8d/0x150 [ 1363.794558][T14587] usb_probe_device+0x1c4/0x3b0 [ 1363.799456][T14587] ? __pfx_usb_probe_device+0x10/0x10 [ 1363.804964][T14587] really_probe+0x267/0xaf0 [ 1363.809629][T14587] __driver_probe_device+0x1ef/0x380 [ 1363.814983][T14587] driver_probe_device+0x4f/0x240 [ 1363.820047][T14587] __device_attach_driver+0x279/0x430 [ 1363.825461][T14587] bus_for_each_drv+0x258/0x2f0 [ 1363.830447][T14587] ? __pfx___device_attach_driver+0x10/0x10 [ 1363.836465][T14587] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1363.841965][T14587] ? lockdep_hardirqs_on+0x7a/0x110 [ 1363.847225][T14587] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1363.853072][T14587] __device_attach+0x2c5/0x450 [ 1363.858066][T14587] ? __pfx___device_attach+0x10/0x10 [ 1363.863396][T14587] ? _raw_spin_unlock+0x28/0x50 [ 1363.868555][T14587] device_initial_probe+0xa1/0xd0 [ 1363.873896][T14587] bus_probe_device+0x12a/0x220 [ 1363.878800][T14587] device_add+0x7e9/0xbb0 [ 1363.883243][T14587] usb_new_device+0xa08/0x16f0 [ 1363.888065][T14587] ? __pfx_usb_new_device+0x10/0x10 [ 1363.893508][T14587] ? _raw_spin_unlock_irq+0x23/0x50 [ 1363.898746][T14587] hub_event+0x2a1c/0x4f30 [ 1363.903247][T14587] ? __pfx_hub_event+0x10/0x10 [ 1363.908062][T14587] ? process_scheduled_works+0xa70/0x1860 [ 1363.914031][T14587] ? process_scheduled_works+0xa70/0x1860 [ 1363.919787][T14587] ? process_scheduled_works+0xa70/0x1860 [ 1363.925540][T14587] process_scheduled_works+0xb5d/0x1860 [ 1363.931235][T14587] ? __pfx_process_scheduled_works+0x10/0x10 [ 1363.937261][T14587] ? assign_work+0x3d5/0x5e0 [ 1363.941973][T14587] worker_thread+0xa53/0xfc0 [ 1363.946627][T14587] kthread+0x388/0x470 [ 1363.950746][T14587] ? __pfx_worker_thread+0x10/0x10 [ 1363.955883][T14587] ? __pfx_kthread+0x10/0x10 [ 1363.960560][T14587] ret_from_fork+0x514/0xb70 [ 1363.965206][T14587] ? __pfx_ret_from_fork+0x10/0x10 [ 1363.970381][T14587] ? __switch_to+0xc79/0x1410 [ 1363.975104][T14587] ? __pfx_kthread+0x10/0x10 [ 1363.979734][T14587] ret_from_fork_asm+0x1a/0x30 [ 1363.984924][T14587] [ 1363.988998][T14587] Kernel Offset: disabled [ 1363.993373][T14587] Rebooting in 86400 seconds..