last executing test programs: 3m50.39587539s ago: executing program 0 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000600000a58000000060a0b040000000000000000020000002c0004802800038008000100666962001c0002800800014000000014080002400000000108000340000000120900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) 3m49.843616748s ago: executing program 0 (id=247): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="0307fafff8fffddbdf253d"], 0x14}, 0x1, 0xffffffffffffffa6}, 0x40040) 3m49.70890172s ago: executing program 0 (id=249): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000043340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000433c0)="11000000100003000000000000000000000000000600", 0x16) 3m49.577584858s ago: executing program 0 (id=250): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000800)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d85c8af0401a80016000a003a40f8ff070000000020070d03003a00004dcf5c044c9dc661c1a1b36f94007134cf6ee08000a0e408e8d8e752a98516277ce06bbace8017b4ec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae34edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bff0fe1b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x24008054) 3m49.50997022s ago: executing program 0 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000002740)='./sec\x00', 0x1ff) (async) mount(0x0, &(0x7f0000002780)='./sec\x00', &(0x7f00000027c0)='securityfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000002800)='./sec/tomoyo/domain_policy\x00', 0x2, 0x110) write(r0, &(0x7f0000002840)="3c6b65726e656c3e202fbd76696c652072656164202f6574632f706173737764207461736b2e7569643d30207461736b2e657569643d300a73656c65637420646f6d61696e3d3c6b65726e655c3e20fdac1d19b4a8981244f11ec1eae970ae50431a52e3d200000000000041710000000000000000000000000000000000000000e800000000d323d22701bf312510b6ace065a0d0365103ae99deeb114d357fb322e34c3da8c438307a1da24ab0121ea749182d230a", 0xb6) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) modify_ldt$write(0x1, &(0x7f0000000000)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) (rerun: 32) r1 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/core/rps_default_mask\x00', 0xa75c2583d03bcc51, 0x0) (async) syz_clone3(&(0x7f0000000300)={0x8801400, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) (async, rerun: 32) r3 = fsmount(r1, 0x0, 0x0) (rerun: 32) readv(r3, &(0x7f0000002600)=[{&(0x7f00000023c0)=""/189, 0xbd}, {&(0x7f0000002480)=""/101, 0x65}, {&(0x7f0000002500)=""/32, 0x20}, {&(0x7f0000002540)=""/141, 0x8d}], 0x4) (async) fchdir(r3) mkdirat(r3, &(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace$setregs(0xd, r4, 0x5, &(0x7f0000000040)="84fff29ab187e0e7598238b73bb330b800b6a8dfb20858c411ff069d4e4b7617e77d2bee4113caeb90da3c5f72e6012834e060e9ec243030f1e204d17c2a46dd1276b2ce0d617a8b5ae78ad7ad44f03994a7d48c4988dcc38a59a9afc818413737f0f29bb6858832d56c17b21457381466e8ad258acbc4fdc2b0b9e941f37351ef0ab2bae2634b747f") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002640), r5) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)={0x18, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x400460d0) (async) ptrace$cont(0x21, r4, 0x80000001, 0x4) 3m49.273939389s ago: executing program 0 (id=252): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="010000fffffffd000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008", @ANYRES64=r1], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x80) 3m33.957666253s ago: executing program 32 (id=252): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="010000fffffffd000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008", @ANYRES64=r1], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x80) 3m9.074676353s ago: executing program 4 (id=371): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d10009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x4cc6, 0x84803) 3m7.545243506s ago: executing program 4 (id=372): syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x24, &(0x7f0000000140)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x16, 0x7c, 0x9, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "c24bbc21cb28e4ce028500cab3c7687a"}]}}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000ffef00bc61682a00968008001d00"], 0x1c}], 0x1}, 0x4008004) 3m6.950903194s ago: executing program 4 (id=374): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x4, 0x3f0, [0x0, 0x0, 0x0, 0x0, 0x2000, 0x200000000200], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}, 0x468) 3m6.871796071s ago: executing program 4 (id=375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0xfcff}, 0x0) 3m6.752564454s ago: executing program 4 (id=376): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='./dev/sda1\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000005c0)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f0000000640)="ff", 0x582f2, 0xfb2200) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001840)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x1000000, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000240)={0xd, 0x3831354f, 0x3, @stepwise={0xfffffffe, 0x100, 0x8000, 0xc6, 0x0, 0x9}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000000c0)={{0xffffffffffffffff, &(0x7f0000000140)='debugfs\x00', 0x100, 0x0, 0xab, 0x0, 0x0}, 0x0, 0x0}) clock_gettime(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/lru_gen\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='% 1 0 0 1 1', 0xb) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r5, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x44}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x80}, 0x1, 0x0, 0x0, 0x240008a0}, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 3m6.546046262s ago: executing program 4 (id=377): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c19c0, 0x10c) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 2m51.229157191s ago: executing program 33 (id=377): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c19c0, 0x10c) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 2m49.971619858s ago: executing program 5 (id=428): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x90) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) openat$urandom(0xffffffffffffff9c, 0x0, 0x103b02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000e5b000/0x4000)=nil, 0x4000, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0) ioctl$KVM_TDX_GET_CPUID(r3, 0xc008aeba, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000180)={0x1, 0x0, [{0xc0000000, 0x7, 0x1, 0x4, 0x0, 0x200, 0xffffff7f}]}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, r4, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f00000000c0)={0x20, r5, 0x0}) 2m48.200860641s ago: executing program 2 (id=437): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/hci\x00') r1 = add_key$keyring(&(0x7f0000001100), &(0x7f0000001180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000012c0), &(0x7f0000001300)={'syz', 0x1}, 0x0, 0x0, r3) add_key(&(0x7f0000001340)='rxrpc\x00', 0x0, &(0x7f0000001380)="0000000000000002ff6900000000006ef829b975b4afa65a1100ecd9df1eaa01000000180000000200020086", 0x2c, r4) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000001140)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000140)='27', 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000e00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) (fail_nth: 12) capset(&(0x7f0000000180)={0x19980330}, 0x0) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000380)="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", 0x559, 0xffffffffffffffff) mount(0x0, &(0x7f0000000240)='./proc\x00', 0x0, 0x4000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000300)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000001740)=ANY=[@ANYBLOB="e9f94f66e1bffabf1572d16d67fd654d0e4abf31c5554af0ed946535dde125712f015900f18f7d6b30a75de863f744d7035742555557a65b6d88c5d8e08ae5122e3bc2893ec97cd1f46ca7046a9494d7ea04b749fc21478136e8de4c44d7319153b687e6a74744427f172d8a445c29245f28a1e1c4cc5314a368cbd1e02c014cfc20a2a77ea9732f60ba44c69a10b1e5f74d2ace6a815e5c4df0fb0300beed7d537119798812a51068bf03a1f43b1f881b84e4e65f11", @ANYBLOB="3fc222908cabe1f03741d46218926722ed239551f7c4eda7e2103ee2f830d0109d87feed0f3fb8ba71895005e101d8c73b10d4044160a4a376501f8029e2133fd4bf7a3a5f87ca51b979", @ANYBLOB="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"], 0x324}, 0x1, 0x0, 0x0, 0xc010}, 0x12) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='numa_maps\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000d00)={0x0, 0x0}) capset(&(0x7f0000000d80)={0x20071026, r11}, &(0x7f0000000dc0)={0x4, 0x4, 0x10000, 0xb3e, 0xc, 0xa}) 2m47.453667039s ago: executing program 5 (id=428): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x90) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) openat$urandom(0xffffffffffffff9c, 0x0, 0x103b02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000e5b000/0x4000)=nil, 0x4000, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0) ioctl$KVM_TDX_GET_CPUID(r3, 0xc008aeba, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000180)={0x1, 0x0, [{0xc0000000, 0x7, 0x1, 0x4, 0x0, 0x200, 0xffffff7f}]}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, r4, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f00000000c0)={0x20, r5, 0x0}) 2m47.372728297s ago: executing program 2 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000140)='6', 0x32) sendmsg$sock(r0, &(0x7f0000003680)={&(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000000240)="3ae89722bb7f4c86ee60289b16c8f96ae64152d23066fbf4de68da0b508f84a94d71f4fd6e00087d20cef4815169ee3d8dc373851f57d685e38401d8c32c274e4a434b71ae588c4ac724a6134ce90d2313d5097024222363c60d2f62fb65d2aa7d2f17e3f494baf1520fb382a01e794a656d525a83518bd756aa9e6acf3d968ae5dadf1e8aa09a7193172a4dd88ad9b0453ce87fb68d7d751838208708dda9cf", 0xa0}, {&(0x7f0000000300)="0f82365e5f3526c8a2f4899b4c100724bd566ab62950bb64a0e33e7967546f030eaa04b887b04570a1e59f502bfcb6f3bf95e3181013f75587a96ddf70e923a9a46236436219d063ba81442b6170d644c944a2fbcadc864ef7eeb949563c8a08fd48df8717436b0ab783", 0x6a}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="22a7ea942f", 0x5}, {&(0x7f00000013c0)="0aec505db7f7b5f830f25766d17b65401caea7b8087de758f8780fa92669df5f095e65a41ad878fb6ae7fc0527a97b973caca5c60d415581e12c885ca000d45bfff0dc71cc6d9a19f15b57f600077cdb2696d2ee2ea2714ee6470a89b7ecf9c130ab9811243b9652ba2949a5583f81528ef448f8f730de64909bb7834c77c82da142efbcf0cb1dbcfeea8512831f40cb69162af53ee6325276fbe2c336b0fa327d88d1cd6b45dd97a7487852f714f9b95b8e7628901254ea489473c032de9157647781d162d7a11513315fa797e8dcb50de142969d232375344e9189455607579ffb664e148370bb8103532b2e48e1d36769777c5b93823fadf13df6e98cc2e38fcb0897b7008135e51fffa24a3ad71430eadc4daca7965e6b487e5489a4b15d6bf8267dc35cada5c011966bd5d002757785838cf90e46dcead784153c37e50ae1586e84cdc431d0be76cefc63702d51c68b68e047153b911c2eba0035390f99d81c83c4f0e64a82f01d3e7a65e47d5d0cb7a1807a5b1516fd33d2342e6ffa2ed6d35a675442ce5e8380f3d29ebf61b7ae6c124be50f802b39dd09657ae35fbdcb7756d14be4f6304f5bb0e2919807da30c6c45d30e8d985b02ca8935b41985015725f9a42329a6c228c2fbbb9dc4131874b8166490fded899fe11ff778d4c9eaa38197cc39314bab2c67a6a2058703132450e333bfb2f6f7f743ad6f0a71d984c46394f153e488ba6754401715a17ff57c5e7dbf8840b08f6b30c2bb24b42d58558281d86e0fe1da387fab56b5d1a89148a908745b329812f39e7621db729020f69658a1db6714535c285a1da2639fbaac05e83720ec95478a80bfdda3081383e16e91fd8fc0e6c8374948c7c9b792b4880d58b41d73e42faffc765e4444386bb715cbc59f3567ffdfa38faddaa0637db7b9a67a8aac4af8a0cdd93d3731a60a78bdddfb88028718790d30a6df7bf86549e658473bc33dc785ae468ce8a5a3786c9d8e999c73a93aff9d201d2dc9426455e6b56cb20962a07da107c33810ae3737707713167cbdcc21e11941fb758b5b5d52e5863f5e68bb5958ab01b1b8aedba04137a791993d7b7f7c631ebe9607826c26fc9626a2891201a3677e003b17b76d89749b39a991e3a555aa3148f0050b6c7eec641a956326c3410400c72b5ba847bd8a50bb56faa85836516abfe8a916c86e6c01d9ff51f3673b96f2e9d09c8c6b3571683f443ae73784a5537b144b2231a6496c76e5b79b502c91e302df9e5246ffd98e8ef7dfe54916b9c35e7b9bb0c3ffd56cb9fcf415781107531c3b4e88f49ff672cda7a82255808410401c4e1ec0f6b25f5f411459f419109437d9197a3d763556bbe3f23fab6d54a4d4ce866ee284a5244aedd37c6822d0070cd0b6afa9fc6c099997f1aabfaadae3b9439b95086c2ec80b29305b9cb848c787f75242c0ba6793c592635e666771b4922f5bbb47e614362529f4304608b2272833a76eb855db2fcfcd74b1d50d6ef54223439c6f83fe1599172331d4c55d230612eab89d043b259566308f9e69f31987ca4e7ff93ae14a03b24ee1fbf5956bdc897d6d7a5d6fcff662b9c957b752bc9459d618ead8f509a8efd3a627fa4fda07a87c90a4c37ea77c58bff00b0b8347c4ab70e70b5f6424b1270ad383cf488535ee9c82571c91b0c3ce50503dc22eb9c6abe5ea8edcc7275f62ef32a3155e371863902f8d62f4421046195ba34cd0ea4bda9d9187863a52da9003a23c11bb98e91d3a4d84be4a3459b2edb32ff7c0baa7704e6e694076e6a5d490926888e802255f4e0452d657b6ca9231a968dd6f2833705c9c39290193670369e90cacf45a6a3597b848c68fb0b9de54e3dd6615dff07aa7fd456dc28d39327de262dcc09715e05a7b0ce697149256d35522ee1758a8916e480b728a7a73fe1199d8497ba4c236a5eeb120d272d3412dbe6e5f045401d41be99476f396627f74cb6cbf2552e7bc1143926f742ea34ad3790bc23b88ca1ca3d91f9127994cdf8f73411f0c4a731043c89485b02f8bbbcf5309e529f87deef554f0b32e7bb015c1b78bd4c5188a633851200035066b9a5a26b75868d94b5385d1c5c6cf6b27d7d16978352fe3b9ea2cd4815114c94aaa855cb8e5d51a0484cdfe3d5a1af4215dc855c4275adcf5e5f932fe6fb3349e5e06e622fc99282e636e1f0b1525b707deec35b2896196f14cfa9a126e7fbd87594305565151c918f0a47a3cfdfadaae9d5acd06bd6d22b0a72a41f9a1676c252aed2d9d3dc079daa18562d73baea23dc2a2701d7ba59f4ffae43f026306500ce75c77f14a0e1dc42df1edd4d56707acc77163b710863c97a942c43f7f96c363e73149c8cbb467762b4880c790851d35c67cb83e68f541abb4c530ed4ab6ccff8d6f2ded34289414b1804cf375dfc3d1ca9dbb58af410681fb5c7fb2608314de79df197ede815962507c132a1509ddf63f307210f7227071b7f43a95447e4bb3d7c7ec64fb8ce48f2ac13833e585d5e0458e191bf17b1af8a117251adf1adec281ae0627f2d11188ebd0781fc58712977d80ba0b7123a18bbe92fb71ff5745fd113a8f729363bd618eee72104cc15a5d9afb7f2711ea3ad6533e29388722449d8c407ac4d76814930f15839260981d30b5cd55a6754fe5d928b5d8393ee269347f6c1b4d7c93e90fac971d5804066d5376c05924e5a468435be64ab4548620d5f1bb4ed9dcf076b73fa6983201fcc005d1c994269952ca57d09655676ea51764191bafa645b19dd309fcc0b367c53acb1117376758d8eacaba90417dd5f8a3050f88fc1a6d0342eaadd4f0e6a5f6f59443453bc8a421691583941e82ae43ad18d9b83c345c8ffc8d259103cbccedbb1b435b08fb6135fff4d2e355cde4050181bfa897fe45f9e909fe0607d8394adaf4843939daed0b5b74b13cf07854dbe2ace1a43802644a7f05018068b2415a7f1dde7aa2c4a2771d979e636fc335160c04e2e7a4550c2bfecf94417b83438b539265e214922fb46dfa9c3203e345a5266b47abe0524fad6e594737b0ed6ee5fa4820a52e94bf038535fa36b98bd7c18dc6a67c26ba76becd58e7d62338af2f24ce20cec20c46ffa11dd1819049a96e21fae30f66c1e7032d7bed337d810610d2da1689291b5be4f198c748ff33b9b7c2122789187175669d08bca87516e4dda57a7663400ca0a99afc2d7214608d796adcc59d0df77d0ba7845e045baf07bb89639581f695399e2bb152667e5e7299ed387a61383d13f55ab1852fe6db9da7e6dc1f7af1374f5c8bd4666db8685b5e1954c3adb8086c467dabf0d457158222d221dd63c52f34e4cc26f93c25bd208d1e56e5badfae4197064858c69755590af64182fc03a5c017249fd6b96c4a9e124dd5306c1a1763313d49db1451d96a584ca3ebf1a75175e1291cfc32a9a034a4e30b72b027c1f86c6514146c57064d321f18b215a338a4b1851097110eaa5af3bcb11eab9399645b92a033651400d1b6aed7b848b5ec01dcdc4631b57cac737f55424621d695bf34e4ae3fe4a1033a271b48e280be0e25edb9e8ff076cc9ad05a39725c54d1cfd1750da92b5a4166d5d7f3ca659b3a74a4763782ab37bca441f2f928f35383c46d77135ae2319d613ad54fe5fb1d891160ec01541d69dbcd440ace6551b855e4a823729b957546e6f40e26c9a0f665c39c55c01400f5705692f4babda19a811af3171e1c7fd07e29aeba851b1feb640e4319be93bbe847b6a6a9ca5ea1afa599fb9211295de9195857906d21e6a46f722ceb5fe76db9ca6a55d053e5824041babf4f63aad54e4eb0ab3c2b1762574da3916040377843f8c1c49370200667aaf549371295202944225ae861293233db34dd2562ee2375869a60811f683989af5896036138de2a2db926dc775f764c685a9446aeed4e96088c4c7fdc1c5093b34bce336a1cf12301bf8d1c3d465f7c1841cae35325c22ff5d848f48624c0d2baaaa77c340bb984471db26f9362bb85084114860387ead56d39de5cf8c8778334e07a3178cbdb6ed728a79bb2359951835f7d57e54abcdc7d1d7ca2da7f9a806e367e159ba05abae5eb0e282e13dc0aed1bfcae2c448365b7a7c782422c2fa3bca463ee32109228a22234136bc10db5239a62b9d87805e46fcf3aecdda7fc672a33d906ab6d2ddf11ed9878ed2921d4348f0682bef76d3021568190ab87c55c3b6614f6e5cca0ed98897029ab9fe040c3ac6793347e2ce4d32647383c68ebd4aa0f48b1c21433410c2c1f2bc0de82afa10e6a28d22562792e78085794a361f36cef20e588f5b3bffbdbae3d0afd76841dfe641f3ddb2cdbc9b0fb582d28ff98135efaf4e68977023d104336700aaf1e93d7786cdf5062844b7f120693f68024e0fb905e6a01d2fb090fab92ea20d3586592bb19c06842a809a883e10e0f896b2154d48a0111a4fe4253f5706c401bd4f512acb59746d7165e27de0851226660cf5a9210090e7521c6f27d17683d4ab8b41d9064434f7a6df5e62c0279bc7a6399ccbdd4546eee4bca64dd60b57e9e622bc789991bab629d35a3e253368ec3a2ef27a6249e3ec7eb5ad01107abcb72296b7f80d289a1b5e8a33f333a884c4f86dabf3e79bd9268463d2ab7b559230d5a46d6fba89930cdfeac61fc7210421fc46a605dced3a774b129d9b4346ef6faae96fd4f611c0038ab80c06e1e5e1164207a673676b55d0470fe24985d82605bdacdf0835de30afefd9d9d92629eaa945f7629dadaa4be7a8f3e725b8a660a43e87e74423e4cb998da87558f87ae3bb387a333c62635b18c436896c5c1276d8ca2aceb3828b0c3409ad68b477b942c12d57f9c8fe0c051ca1f341096726b0ca76ea2e4e19697f3e4e35ba44f76dfdfc07f982f4e08301fbe51969d82df37130efdc21624a31e104b6c684706b8e050fe0c98a9dc243a7565488944cc10661299b0bdecd5d36921a37f9321535334da6e2fcdce6eb2e31bc9570ad8529efc960273203c7817f1c276d7157717955d568b388e20dda615c60fdeeb44dae99c3217545371e21cc640d89507ab6a60bb34533615abf3352dbdedd135f0ea1abe3f5228cce1fa6af4e142d797465cd5c66d3406e916a24671174b0b29bcc95341215a356ee152acff0638a80746c9ef2dc7fdafd89f5aca33ff7894b63593998524bfd18508520401618d55f363eef3e927069f00a6e01eb227c67daa1ac2b886444ba5acf7096e3022d6169f46172a68eb31886a33424b986aeeedf307373a96b337261254480f7172c8c7fa1a7e91eec17e2f5297a125b4c30f8dbf5db773f8fb24f31f445f736a128cc46f674d1d32cd73680b50fcdee1df436a721139bb907e93234c5e33b2015d89bf3e37dbcc5a76f99b3fde11cc86e00e413cf2d8cc13fbb8b6ff17baf85178644581cd9710785fd4077bfa96805b8d2c326618b3152b2d5ebeb6957e7dd6e3a69110682b72670dc52ce70b5bb8fd5d277f024efcb5f8d3c87adce5be3b763e15f76d252eda9660e5c495ccb0255473b86182bc7a38e6277694ad270076ca6cabf8552554f1abea443938bb7e076105d28c798cc071534502d4908404c429b125631b3d7c60621aa4c2cf87d1ad2dabb21489fad07d35acd4affdac728f0431457643828ee5754a3adb59d97a7ec1fdb6305dbfdba6ff7a632a1b8ac051e8f55de61907d94c9f0bd0a38fae251fc53432c0d506dab92ada3c154cece694d2c6c29e0fc187199b51fe2c539b6663d2bfaf1f5dc01713df6974bcb2638230ddd14c76", 0x1000}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f00000033c0)="565a8c5f339997", 0x7}, {&(0x7f0000003400)="4d03273bddf9f60cccf853c13bb32c3f6e5ff968940a0f40d98eecf1e9d9417a5890dd11020bc0698f058ecb1db1e9c0f65061d347a48868ed656cf77610fb2e09cbde695528d738c22cc7e7adfad6b23a99fb13a96caef9e4661581267ccd2ee0326f38cfb62de11d007f82afc7a439a05eaaf68808e5e7987abc01e9bf69ed1fe5e402780197706bd3579fe08f0f9a3df1ba4db43d42204cad3fc3e8aaed93fa29", 0xa2}, {&(0x7f00000034c0)="f02393dc0e69fe6668036f160447f647f455a5bef1d7c63e3df66e77eb20906858666d4900eaa93a7823321d31c5e573faee0e997e9c1c78ac99dc47908e8dd1698bd31ba9fe5e54f3985ba29cd7d201b0ac66fc1573747984aaf9041bf56a5c70acc02c65c727f330095d860c00b41002b00d639fb8956cb969fae73819678adef8098cd084b1490d28bf062cce7e8fa2628be649a0e35a368d64b0b7725eba3fe5f9d671215b7b633fb4ecfe6dae40bd96f63853401d426e0fa24ccaf50d3595299e3b57125732594f7ebce3cca599dcfc7d6ff6f3b7a36025a5b8c72b85382d9ac5f9388a7e", 0xe7}], 0x9}, 0x1) fsopen(&(0x7f0000000100)='sockfs\x00', 0x1) 2m47.027004229s ago: executing program 2 (id=439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100200000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0) 2m46.252290975s ago: executing program 2 (id=441): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) inotify_init1(0x80800) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x2, "2fd68285"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x200, 0x26b5, 0xfffffffe}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000080)={0x528eb22, 0x30000, 0x2, r0, 0xc}) r4 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x2, 0xe27}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r5, 0x7}, 0x8) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0) 2m45.30554306s ago: executing program 1 (id=444): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x820) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) setns(0xc9, 0x0) capset(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000000380)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x880, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000019380)={0xf, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f000001a3c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f000001a440)='./file0\x00', &(0x7f000001a480)='dax\x00', 0x810000, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f000001a4c0)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f000001a500)=0xd) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f000001a540)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f000001a580)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f000001a5c0)=0x1e) 2m44.490523934s ago: executing program 5 (id=428): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x90) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) openat$urandom(0xffffffffffffff9c, 0x0, 0x103b02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000e5b000/0x4000)=nil, 0x4000, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0) ioctl$KVM_TDX_GET_CPUID(r3, 0xc008aeba, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000180)={0x1, 0x0, [{0xc0000000, 0x7, 0x1, 0x4, 0x0, 0x200, 0xffffff7f}]}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, r4, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f00000000c0)={0x20, r5, 0x0}) 2m42.608789011s ago: executing program 1 (id=445): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsopen(&(0x7f0000000680)='ext3\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) r0 = msgget$private(0x0, 0x518) msgrcv(r0, 0x0, 0x0, 0x0, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) r2 = syz_clone3(0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000500)={0x0, 0x3}, 0x10, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x7) landlock_restrict_self(r3, 0xe) landlock_restrict_self(r3, 0xa) landlock_create_ruleset(&(0x7f00000005c0)={0x2fbd, 0x1}, 0x18, 0x0) tgkill(r2, r2, 0x21) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) recvfrom(r1, &(0x7f0000000200)=""/231, 0xe7, 0x40, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='loginuid\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m42.166318626s ago: executing program 2 (id=448): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x18, 0x140a, 0xabbdf26eb652137d, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000600)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r7, &(0x7f00000006c0)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x47, &(0x7f00000196c0)=0x7) socket$netlink(0x10, 0x3, 0xc) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace(0x10, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0xa000000c, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x30}}, 0x0) 2m41.894407805s ago: executing program 3 (id=449): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x5}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @tick=0x3, {0x6}, {0x0, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0x7, 0x81}}], 0x70) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m40.637948787s ago: executing program 3 (id=450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 2m40.508434183s ago: executing program 1 (id=451): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x303) 2m40.4995859s ago: executing program 3 (id=452): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r3, 0x3}, 0x8) write$cgroup_int(r0, &(0x7f0000000040)=0x2, 0x12) 2m40.422604127s ago: executing program 5 (id=428): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x90) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) openat$urandom(0xffffffffffffff9c, 0x0, 0x103b02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000e5b000/0x4000)=nil, 0x4000, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0) ioctl$KVM_TDX_GET_CPUID(r3, 0xc008aeba, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000180)={0x1, 0x0, [{0xc0000000, 0x7, 0x1, 0x4, 0x0, 0x200, 0xffffff7f}]}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, r4, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f00000000c0)={0x20, r5, 0x0}) 2m36.855164105s ago: executing program 1 (id=453): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0xf0f041}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) 2m36.854864168s ago: executing program 2 (id=454): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) 2m36.854580854s ago: executing program 3 (id=455): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r4, &(0x7f0000000a80)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019a80)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x20000005) landlock_restrict_self(0xffffffffffffffff, 0xc) 2m34.317377806s ago: executing program 3 (id=456): semget(0x2, 0x3, 0x39c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000c80)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1004, 0x1) r3 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000400)={0x30000009}) 2m34.135358668s ago: executing program 1 (id=457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r2, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 2m33.674561985s ago: executing program 5 (id=428): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x90) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) openat$urandom(0xffffffffffffff9c, 0x0, 0x103b02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000e5b000/0x4000)=nil, 0x4000, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0) ioctl$KVM_TDX_GET_CPUID(r3, 0xc008aeba, &(0x7f00000002c0)={0x5, 0x0, &(0x7f0000000180)={0x1, 0x0, [{0xc0000000, 0x7, 0x1, 0x4, 0x0, 0x200, 0xffffff7f}]}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, r4, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f00000000c0)={0x20, r5, 0x0}) 2m33.620947714s ago: executing program 1 (id=458): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060"], 0xfdef) 2m29.718192501s ago: executing program 3 (id=459): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 2m15.434399829s ago: executing program 34 (id=454): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) 1m20.989064851s ago: executing program 35 (id=458): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060"], 0xfdef) 0s ago: executing program 36 (id=459): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) kernel console output (not intermixed with test programs): disconnect, device number 12 [ 124.194642][ T6565] tipc: Started in network mode [ 124.194669][ T6565] tipc: Node identity 4, cluster identity 4711 [ 124.194680][ T6565] tipc: Node number set to 4 [ 124.208546][ T11] usb usb4-port1: unable to enumerate USB device [ 124.279652][ T6566] fido_id[6566]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 124.415597][ T6573] /dev/sg0: Can't lookup blockdev [ 124.557812][ T5744] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 124.707799][ T5744] usb 3-1: Using ep0 maxpacket: 16 [ 124.711479][ T5744] usb 3-1: unable to get BOS descriptor or descriptor too short [ 124.711537][ T5744] usb 3-1: New USB device found: idVendor=1235, idProduct=8212, bcdDevice=0.40 [ 124.714074][ T5744] usb 3-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 124.714103][ T5744] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.740026][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.740107][ T5744] usb 3-1: Product: syz [ 124.740153][ T5744] usb 3-1: Manufacturer: syz [ 124.740198][ T5744] usb 3-1: SerialNumber: syz [ 124.804319][ T6580] fuse: Bad value for 'fd' [ 124.992433][ T6565] tmpfs: Bad value for 'nr_inodes' [ 124.992852][ T5649] Bluetooth: min 9 > max 0 [ 125.017855][ T5744] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 125.018366][ T5744] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 125.100780][ T5744] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 125.106534][ T5744] usb 3-1: USB disconnect, device number 13 [ 125.151963][ T5657] udevd[5657]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.272335][ T6598] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 126.503024][ T6626] FAULT_INJECTION: forcing a failure. [ 126.503024][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 126.503062][ T6626] CPU: 1 UID: 0 PID: 6626 Comm: syz.0.235 Not tainted syzkaller #0 PREEMPT(full) [ 126.503092][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.503107][ T6626] Call Trace: [ 126.503116][ T6626] [ 126.503127][ T6626] dump_stack_lvl+0xe8/0x150 [ 126.503171][ T6626] should_fail_ex+0x3eb/0x540 [ 126.503221][ T6626] should_failslab+0xa8/0x100 [ 126.503257][ T6626] ? security_inode_alloc+0x39/0x310 [ 126.503295][ T6626] kmem_cache_alloc_noprof+0x9c/0x600 [ 126.503326][ T6626] ? security_inode_alloc+0x39/0x310 [ 126.503372][ T6626] security_inode_alloc+0x39/0x310 [ 126.503413][ T6626] inode_init_always_gfp+0x97e/0xd30 [ 126.503447][ T6626] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 126.503474][ T6626] alloc_inode+0x82/0x1b0 [ 126.503502][ T6626] new_inode+0x1f/0x170 [ 126.503534][ T6626] __debugfs_create_file+0xb8/0x400 [ 126.503566][ T6626] debugfs_create_file_full+0x3f/0x60 [ 126.503596][ T6626] kvm_create_vm_debugfs+0x6ec/0x8f0 [ 126.503635][ T6626] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 126.503679][ T6626] kvm_dev_ioctl+0x1245/0x1700 [ 126.503716][ T6626] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 126.503747][ T6626] ? bpf_lsm_file_ioctl+0x9/0x20 [ 126.503780][ T6626] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 126.503814][ T6626] __se_sys_ioctl+0xfc/0x170 [ 126.503853][ T6626] do_syscall_64+0x166/0x520 [ 126.503890][ T6626] ? trace_irq_disable+0x3b/0x140 [ 126.503922][ T6626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.503949][ T6626] ? clear_bhb_loop+0x70/0xc0 [ 126.503980][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.504006][ T6626] RIP: 0033:0x7f959f19f559 [ 126.504030][ T6626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.504052][ T6626] RSP: 002b:00007f959ff96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.504080][ T6626] RAX: ffffffffffffffda RBX: 00007f959f425fa0 RCX: 00007f959f19f559 [ 126.504099][ T6626] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 126.504115][ T6626] RBP: 00007f959f236b50 R08: 0000000000000000 R09: 0000000000000000 [ 126.504131][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.504146][ T6626] R13: 00007f959f426038 R14: 00007f959f425fa0 R15: 00007ffef2e9d378 [ 126.504188][ T6626] [ 126.520857][ T6626] debugfs: out of free dentries, can not create file 'host_state_reload' [ 126.905066][ T6632] FAULT_INJECTION: forcing a failure. [ 126.905066][ T6632] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.905106][ T6632] CPU: 1 UID: 0 PID: 6632 Comm: syz.2.236 Not tainted syzkaller #0 PREEMPT(full) [ 126.905129][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.905142][ T6632] Call Trace: [ 126.905151][ T6632] [ 126.905160][ T6632] dump_stack_lvl+0xe8/0x150 [ 126.905223][ T6632] should_fail_ex+0x3eb/0x540 [ 126.905270][ T6632] _copy_from_user+0x2d/0xb0 [ 126.905298][ T6632] kstrtouint_from_user+0xd6/0x180 [ 126.905333][ T6632] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 126.905373][ T6632] ? lock_acquire+0x115/0x350 [ 126.905405][ T6632] proc_fail_nth_write+0x8e/0x210 [ 126.905446][ T6632] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.905488][ T6632] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.905522][ T6632] vfs_write+0x296/0xba0 [ 126.905566][ T6632] ? __pfx_vfs_write+0x10/0x10 [ 126.905596][ T6632] ? __fget_files+0x2a/0x420 [ 126.905621][ T6632] ? __fget_files+0x3a2/0x420 [ 126.905654][ T6632] ? __fget_files+0x2a/0x420 [ 126.905684][ T6632] ? fdget+0x1ac/0x250 [ 126.905722][ T6632] ksys_write+0x150/0x270 [ 126.905758][ T6632] ? __pfx_ksys_write+0x10/0x10 [ 126.905805][ T6632] do_syscall_64+0x166/0x520 [ 126.905843][ T6632] ? trace_irq_disable+0x3b/0x140 [ 126.905876][ T6632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.905899][ T6632] ? clear_bhb_loop+0x70/0xc0 [ 126.905927][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.905954][ T6632] RIP: 0033:0x7f0d0cb5fd8e [ 126.905974][ T6632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 126.905994][ T6632] RSP: 002b:00007f0d0dac8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.906017][ T6632] RAX: ffffffffffffffda RBX: 00007f0d0dac96c0 RCX: 00007f0d0cb5fd8e [ 126.906033][ T6632] RDX: 0000000000000001 RSI: 00007f0d0dac90a0 RDI: 0000000000000003 [ 126.906047][ T6632] RBP: 00007f0d0dac9090 R08: 0000000000000000 R09: 0000000000000000 [ 126.906061][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.906074][ T6632] R13: 00007f0d0ce26038 R14: 00007f0d0ce25fa0 R15: 00007ffd6d105f48 [ 126.906127][ T6632] [ 127.059577][ T5649] Bluetooth: hci1: command tx timeout [ 127.200968][ T6629] rxe_eth0 speed is unknown, defaulting to 1000 [ 127.637484][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 127.689653][ T5796] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 127.827672][ T5796] usb 3-1: device descriptor read/64, error -71 [ 128.078908][ T5796] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 128.217531][ T5796] usb 3-1: device descriptor read/64, error -71 [ 128.338081][ T5796] usb usb3-port1: attempt power cycle [ 128.714516][ T5796] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 128.749848][ T5796] usb 3-1: device descriptor read/8, error -71 [ 128.987783][ T5796] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 129.017443][ T5796] usb 3-1: device descriptor read/8, error -71 [ 129.127741][ T5796] usb usb3-port1: unable to enumerate USB device [ 129.406121][ T6674] netlink: 'syz.0.250': attribute type 58 has an invalid length. [ 129.406145][ T6674] netlink: 152 bytes leftover after parsing attributes in process `syz.0.250'. [ 129.497378][ T5796] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 129.629727][ T5796] usb 4-1: device descriptor read/64, error -71 [ 129.867387][ T5796] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 129.997655][ T5796] usb 4-1: device descriptor read/64, error -71 [ 130.107744][ T5796] usb usb4-port1: attempt power cycle [ 130.447418][ T5796] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 130.468033][ T5796] usb 4-1: device descriptor read/8, error -71 [ 130.719384][ T5796] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 130.738009][ T5796] usb 4-1: device descriptor read/8, error -71 [ 130.847821][ T5796] usb usb4-port1: unable to enumerate USB device [ 130.937472][ T32] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 131.087445][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 131.088281][ T32] usb 3-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 131.089640][ T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.089664][ T32] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.092737][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.092762][ T32] usb 3-1: Product: syz [ 131.092778][ T32] usb 3-1: Manufacturer: syz [ 131.092793][ T32] usb 3-1: SerialNumber: syz [ 131.323172][ T32] usb 3-1: 0:1 : does not exist [ 131.323274][ T32] usb 3-1: unit 1 not found! [ 131.323297][ T32] usb 3-1: unit 9 not found! [ 131.524209][ T6685] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.750417][ T32] usb 3-1: unit 0 not found! [ 132.106736][ T5744] usb 3-1: USB disconnect, device number 18 [ 132.965540][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.965606][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.037569][ T5745] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 133.168244][ T5745] usb 4-1: device descriptor read/64, error -71 [ 133.418523][ T5745] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 133.549103][ T5745] usb 4-1: device descriptor read/64, error -71 [ 133.657792][ T5745] usb usb4-port1: attempt power cycle [ 133.998260][ T5745] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 134.018159][ T5745] usb 4-1: device descriptor read/8, error -71 [ 134.100541][ T5796] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 134.214742][ T6725] netlink: 36 bytes leftover after parsing attributes in process `syz.1.270'. [ 134.248169][ T5796] usb 3-1: New USB device found: idVendor=1286, idProduct=2046, bcdDevice=1.00 [ 134.249638][ T5796] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.249666][ T5796] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.255239][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.255265][ T5796] usb 3-1: Product: syz [ 134.255281][ T5796] usb 3-1: Manufacturer: syz [ 134.255297][ T5796] usb 3-1: SerialNumber: syz [ 134.277862][ T5745] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 134.325326][ T5796] usb 3-1: NFC: intf ffff888034f90000 id ffffffff90c906e0 [ 134.338828][ T5745] usb 4-1: device descriptor read/8, error -71 [ 134.431027][ T5796] nfcmrvl 3-1:1.0: NFC: registered with nci successfully [ 134.448183][ T5745] usb usb4-port1: unable to enumerate USB device [ 134.477725][ T5643] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 134.562328][ T14] nfcmrvl 3-1:1.0: NFC: send entry, len 4 [ 134.562554][ T14] usb 3-1: NFC: urb ffff88803408bd00 submission failed (90) [ 134.607154][ T5796] usb 3-1: USB disconnect, device number 19 [ 134.623917][ T5796] usb 3-1: NFC: intf ffff888034f90000 [ 134.642997][ T5643] usb 2-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 134.644204][ T5643] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 1024 [ 134.644237][ T5643] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 134.644278][ T5643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.670068][ T6725] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 134.752222][ T5643] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 135.554930][ T6731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.566996][ T6731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.651164][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.668045][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.427144][ T5643] usb 2-1: USB disconnect, device number 12 [ 136.455658][ T5643] idmouse 2-1:1.0: disconnected [ 136.707970][ T6719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.259475][ T6741] FAULT_INJECTION: forcing a failure. [ 137.259475][ T6741] name failslab, interval 1, probability 0, space 0, times 0 [ 137.259518][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.3.273 Not tainted syzkaller #0 PREEMPT(full) [ 137.259544][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.259558][ T6741] Call Trace: [ 137.259567][ T6741] [ 137.259576][ T6741] dump_stack_lvl+0xe8/0x150 [ 137.259617][ T6741] should_fail_ex+0x3eb/0x540 [ 137.259658][ T6741] should_failslab+0xa8/0x100 [ 137.259694][ T6741] __kmalloc_noprof+0xf9/0x710 [ 137.259720][ T6741] ? iter_file_splice_write+0x1ea/0x1240 [ 137.259747][ T6741] ? iter_file_splice_write+0x1ea/0x1240 [ 137.259782][ T6741] iter_file_splice_write+0x1ea/0x1240 [ 137.259810][ T6741] ? __lock_acquire+0x747/0x2de0 [ 137.259861][ T6741] ? __pfx_iter_file_splice_write+0x10/0x10 [ 137.259889][ T6741] ? lock_acquire+0x115/0x350 [ 137.259932][ T6741] ? __pfx_iter_file_splice_write+0x10/0x10 [ 137.259962][ T6741] direct_splice_actor+0x101/0x160 [ 137.259995][ T6741] splice_direct_to_actor+0x57b/0xcb0 [ 137.260046][ T6741] ? __pfx_direct_splice_actor+0x10/0x10 [ 137.260074][ T6741] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 137.260115][ T6741] do_splice_direct+0x195/0x290 [ 137.260147][ T6741] ? __pfx_do_splice_direct+0x10/0x10 [ 137.260176][ T6741] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 137.260214][ T6741] ? rw_verify_area+0x203/0x4c0 [ 137.260241][ T6741] ? fdget+0x1ac/0x250 [ 137.260269][ T6741] do_sendfile+0x52e/0x7c0 [ 137.260315][ T6741] ? __pfx_do_sendfile+0x10/0x10 [ 137.260352][ T6741] ? __might_fault+0xaf/0x130 [ 137.260394][ T6741] __se_sys_sendfile64+0xdf/0x1a0 [ 137.260430][ T6741] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 137.260477][ T6741] do_syscall_64+0x166/0x520 [ 137.260518][ T6741] ? trace_irq_disable+0x3b/0x140 [ 137.260547][ T6741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.260570][ T6741] ? clear_bhb_loop+0x70/0xc0 [ 137.260600][ T6741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.260625][ T6741] RIP: 0033:0x7faffe79f559 [ 137.260647][ T6741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.260667][ T6741] RSP: 002b:00007fafff735028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 137.260691][ T6741] RAX: ffffffffffffffda RBX: 00007faffea25fa0 RCX: 00007faffe79f559 [ 137.260708][ T6741] RDX: 00002000000069c0 RSI: 0000000000000006 RDI: 0000000000000006 [ 137.260722][ T6741] RBP: 00007faffe836b50 R08: 0000000000000000 R09: 0000000000000000 [ 137.260737][ T6741] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000000 [ 137.260752][ T6741] R13: 00007faffea26038 R14: 00007faffea25fa0 R15: 00007ffc828672c8 [ 137.260790][ T6741] [ 137.584995][ T6741] fuse: Unknown parameter 'jӜ0x0000000000000008' [ 138.187814][ T32] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 138.343004][ T32] usb 2-1: New USB device found: idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 138.344157][ T32] usb 2-1: config 0 has an invalid interface number: 37 but max is 1 [ 138.344183][ T32] usb 2-1: config 0 has an invalid interface number: 255 but max is 1 [ 138.344205][ T32] usb 2-1: config 0 has no interface number 0 [ 138.344223][ T32] usb 2-1: config 0 has no interface number 1 [ 138.344263][ T32] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 138.344336][ T32] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 138.344367][ T32] usb 2-1: config 0 interface 255 has no altsetting 0 [ 138.430897][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.430929][ T32] usb 2-1: Product: syz [ 138.430946][ T32] usb 2-1: Manufacturer: syz [ 138.430962][ T32] usb 2-1: SerialNumber: syz [ 138.435611][ T32] usb 2-1: config 0 descriptor?? [ 138.495078][ T32] usb 2-1: selecting invalid altsetting 0 [ 138.495105][ T32] usb 2-1: Could not set interface, error -22 [ 140.264732][ T5796] usb 2-1: USB disconnect, device number 13 [ 140.677512][ T32] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 140.817378][ T32] usb 3-1: device descriptor read/64, error -71 [ 140.944275][ T6760] syzkaller1: entered promiscuous mode [ 140.956376][ T6760] syzkaller1: entered allmulticast mode [ 141.057402][ T32] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 141.187341][ T32] usb 3-1: device descriptor read/64, error -71 [ 141.297700][ T32] usb usb3-port1: attempt power cycle [ 141.313945][ T6769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 141.637341][ T32] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 141.658155][ T32] usb 3-1: device descriptor read/8, error -71 [ 141.897406][ T32] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 141.919039][ T32] usb 3-1: device descriptor read/8, error -71 [ 142.027821][ T32] usb usb3-port1: unable to enumerate USB device [ 142.278596][ T32] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 142.408053][ T32] usb 2-1: device descriptor read/64, error -71 [ 142.657415][ T32] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 142.787771][ T32] usb 2-1: device descriptor read/64, error -71 [ 142.898418][ T32] usb usb2-port1: attempt power cycle [ 143.237342][ T32] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 143.259241][ T32] usb 2-1: device descriptor read/8, error -71 [ 143.507901][ T32] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 143.528022][ T32] usb 2-1: device descriptor read/8, error -71 [ 143.648017][ T32] usb usb2-port1: unable to enumerate USB device [ 143.987578][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.291'. [ 144.113866][ T6791] snd_dummy snd_dummy.0: control 1:5:99:syz1:6 is already present [ 144.135373][ T6793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.135843][ T6793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.244837][ T6796] FAULT_INJECTION: forcing a failure. [ 144.244837][ T6796] name failslab, interval 1, probability 0, space 0, times 0 [ 144.244871][ T6796] CPU: 1 UID: 0 PID: 6796 Comm: syz.2.293 Not tainted syzkaller #0 PREEMPT(full) [ 144.244898][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 144.244912][ T6796] Call Trace: [ 144.244922][ T6796] [ 144.244931][ T6796] dump_stack_lvl+0xe8/0x150 [ 144.244974][ T6796] should_fail_ex+0x3eb/0x540 [ 144.245014][ T6796] ? __pfx_sock_alloc_inode+0x10/0x10 [ 144.245037][ T6796] should_failslab+0xa8/0x100 [ 144.245076][ T6796] ? __pfx_sock_alloc_inode+0x10/0x10 [ 144.245097][ T6796] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 144.245124][ T6796] ? sock_alloc_inode+0x2c/0x1a0 [ 144.245145][ T6796] ? sock_alloc_inode+0x2c/0x1a0 [ 144.245173][ T6796] ? __pfx_sock_alloc_inode+0x10/0x10 [ 144.245194][ T6796] sock_alloc_inode+0x2c/0x1a0 [ 144.245217][ T6796] ? __pfx_sock_alloc_inode+0x10/0x10 [ 144.245238][ T6796] alloc_inode+0x6a/0x1b0 [ 144.245272][ T6796] __sock_create+0x127/0xac0 [ 144.245306][ T6796] __sys_socket+0xd6/0x1b0 [ 144.245335][ T6796] __x64_sys_socket+0x7a/0x90 [ 144.245361][ T6796] do_syscall_64+0x166/0x520 [ 144.245394][ T6796] ? trace_irq_disable+0x3b/0x140 [ 144.245423][ T6796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.245446][ T6796] ? clear_bhb_loop+0x70/0xc0 [ 144.245474][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.245497][ T6796] RIP: 0033:0x7f0d0cb9f559 [ 144.245519][ T6796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.245539][ T6796] RSP: 002b:00007f0d0dac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 144.245563][ T6796] RAX: ffffffffffffffda RBX: 00007f0d0ce25fa0 RCX: 00007f0d0cb9f559 [ 144.245580][ T6796] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 144.245593][ T6796] RBP: 00007f0d0cc36b50 R08: 0000000000000000 R09: 0000000000000000 [ 144.245607][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.245621][ T6796] R13: 00007f0d0ce26038 R14: 00007f0d0ce25fa0 R15: 00007ffd6d105f48 [ 144.245657][ T6796] [ 144.245680][ T6796] socket: no more sockets [ 144.537394][ T32] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 144.688492][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 144.691411][ T32] usb 4-1: New USB device found: idVendor=0582, idProduct=000c, bcdDevice=0.40 [ 144.692728][ T32] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.696288][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.696313][ T32] usb 4-1: Product: syz [ 144.696330][ T32] usb 4-1: Manufacturer: 鸎닜䏱᫥㽩脟褣订൷鋳㫆כֿ௴⚣幭ず傲픁沁䕈魷ⶑ⥇鮬홹푄땤䢧橚츠碴請挩ꃗⅡ⒊␞묑籱池쉣ꛖƍ᪹ᗞ精ŭ泝몞૽Ѭ퀲祱 [ 144.696357][ T32] usb 4-1: SerialNumber: syz [ 144.792239][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.294'. [ 145.312273][ T32] usb 4-1: USB disconnect, device number 25 [ 145.485470][ T5657] udevd[5657]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.537387][ T5796] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 145.797576][ T5796] usb 2-1: Using ep0 maxpacket: 16 [ 145.798434][ T5796] usb 2-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 145.799867][ T5796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.799892][ T5796] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.802370][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.802395][ T5796] usb 2-1: Product: syz [ 145.802411][ T5796] usb 2-1: Manufacturer: syz [ 145.802427][ T5796] usb 2-1: SerialNumber: syz [ 145.834765][ T5796] usb 2-1: config 0 descriptor?? [ 145.972967][ T6810] FAULT_INJECTION: forcing a failure. [ 145.972967][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 145.973002][ T6810] CPU: 1 UID: 0 PID: 6810 Comm: syz.3.299 Not tainted syzkaller #0 PREEMPT(full) [ 145.973029][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 145.973043][ T6810] Call Trace: [ 145.973052][ T6810] [ 145.973062][ T6810] dump_stack_lvl+0xe8/0x150 [ 145.973109][ T6810] should_fail_ex+0x3eb/0x540 [ 145.973151][ T6810] should_failslab+0xa8/0x100 [ 145.973187][ T6810] __kmalloc_cache_noprof+0x9e/0x600 [ 145.973216][ T6810] ? unix_autobind+0xee/0xa10 [ 145.973244][ T6810] ? unix_autobind+0xee/0xa10 [ 145.973282][ T6810] unix_autobind+0xee/0xa10 [ 145.973317][ T6810] ? tomoyo_check_unix_address+0x16d/0x7e0 [ 145.973352][ T6810] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 145.973386][ T6810] ? futex_wait+0x2a2/0x390 [ 145.973419][ T6810] unix_stream_connect+0x296/0x1000 [ 145.973463][ T6810] ? __pfx_unix_stream_connect+0x10/0x10 [ 145.973493][ T6810] ? apparmor_socket_connect+0x123/0x210 [ 145.973526][ T6810] ? bpf_lsm_socket_connect+0x9/0x20 [ 145.973556][ T6810] __sys_connect+0x316/0x450 [ 145.973588][ T6810] ? __pfx___sys_connect+0x10/0x10 [ 145.973629][ T6810] ? rcu_is_watching+0x16/0xb0 [ 145.973671][ T6810] __x64_sys_connect+0x7a/0x90 [ 145.973699][ T6810] do_syscall_64+0x166/0x520 [ 145.973733][ T6810] ? trace_irq_disable+0x3b/0x140 [ 145.973761][ T6810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.973785][ T6810] ? clear_bhb_loop+0x70/0xc0 [ 145.973815][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.973837][ T6810] RIP: 0033:0x7faffe79f559 [ 145.973859][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.973879][ T6810] RSP: 002b:00007fafff735028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 145.973903][ T6810] RAX: ffffffffffffffda RBX: 00007faffea25fa0 RCX: 00007faffe79f559 [ 145.973921][ T6810] RDX: 000000000000006e RSI: 0000200000000840 RDI: 000000000000000c [ 145.973936][ T6810] RBP: 00007faffe836b50 R08: 0000000000000000 R09: 0000000000000000 [ 145.973951][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.973964][ T6810] R13: 00007faffea26038 R14: 00007faffea25fa0 R15: 00007ffc828672c8 [ 145.974002][ T6810] [ 146.022585][ T5654] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.280714][ T5654] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.356438][ T5654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.367989][ T5654] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.368904][ T5654] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.197701][ T32] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 147.371488][ T32] usb 4-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 147.376509][ T32] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 147.376539][ T32] usb 4-1: config 0 has no interface number 0 [ 147.376581][ T32] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.376606][ T32] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 147.376634][ T32] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 147.376661][ T32] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 147.376689][ T32] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 147.376718][ T32] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 147.376764][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.495802][ T32] usb 4-1: config 0 descriptor?? [ 147.512590][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.545171][ T6823] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 147.545319][ T6823] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 147.577177][ T32] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 147.732998][ T6835] Bluetooth: MGMT ver 1.23 [ 147.789307][ T5796] usb 4-1: USB disconnect, device number 26 [ 147.814145][ T5796] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 147.864330][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.967190][ T6835] FAULT_INJECTION: forcing a failure. [ 147.967190][ T6835] name failslab, interval 1, probability 0, space 0, times 0 [ 147.967225][ T6835] CPU: 1 UID: 0 PID: 6835 Comm: syz.2.305 Not tainted syzkaller #0 PREEMPT(full) [ 147.967255][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 147.967268][ T6835] Call Trace: [ 147.967277][ T6835] [ 147.967287][ T6835] dump_stack_lvl+0xe8/0x150 [ 147.967326][ T6835] should_fail_ex+0x3eb/0x540 [ 147.967369][ T6835] should_failslab+0xa8/0x100 [ 147.967400][ T6835] ? __kernfs_new_node+0xe6/0x980 [ 147.967436][ T6835] kmem_cache_alloc_noprof+0x9c/0x600 [ 147.967464][ T6835] ? __kernfs_new_node+0xe6/0x980 [ 147.967508][ T6835] __kernfs_new_node+0xe6/0x980 [ 147.967555][ T6835] ? __pfx___kernfs_new_node+0x10/0x10 [ 147.967589][ T6835] ? lock_acquire+0x115/0x350 [ 147.967615][ T6835] ? kernfs_root+0x1c/0x230 [ 147.967656][ T6835] ? kernfs_root+0x1c/0x230 [ 147.967689][ T6835] ? kernfs_root+0x1c/0x230 [ 147.967721][ T6835] ? kernfs_root+0x1c/0x230 [ 147.967758][ T6835] kernfs_new_node+0xeb/0x140 [ 147.967797][ T6835] __kernfs_create_file+0x4b/0x2e0 [ 147.967827][ T6835] sysfs_add_file_mode_ns+0x237/0x300 [ 147.967866][ T6835] internal_create_group+0x679/0x1180 [ 147.967917][ T6835] ? kernfs_create_dir_ns+0x1c0/0x220 [ 147.967945][ T6835] ? __pfx_internal_create_group+0x10/0x10 [ 147.967978][ T6835] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 147.968013][ T6835] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 147.968053][ T6835] sysfs_create_groups+0x59/0x120 [ 147.968091][ T6835] kobject_add_internal+0x669/0xcd0 [ 147.968127][ T6835] kobject_add+0x163/0x240 [ 147.968153][ T6835] ? rcu_is_watching+0x16/0xb0 [ 147.968190][ T6835] ? __pfx_kobject_add+0x10/0x10 [ 147.968220][ T6835] ? __kmalloc_noprof+0x1a6/0x710 [ 147.968243][ T6835] ? ib_setup_port_attrs+0x485/0x2460 [ 147.968274][ T6835] ? ib_setup_port_attrs+0x485/0x2460 [ 147.968314][ T6835] ib_setup_port_attrs+0xfbe/0x2460 [ 147.968395][ T6835] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 147.968426][ T6835] ? __mutex_unlock_slowpath+0x731/0x900 [ 147.968471][ T6835] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 147.968524][ T6835] ? device_add+0x6f6/0xb80 [ 147.968558][ T6835] ib_register_device+0xda6/0x1080 [ 147.968592][ T6835] ? __pfx_ib_register_device+0x10/0x10 [ 147.968621][ T6835] ? __raw_spin_lock_init+0x45/0x100 [ 147.968659][ T6835] siw_newlink+0x8fe/0xde0 [ 147.968696][ T6835] nldev_newlink+0x5be/0x650 [ 147.968734][ T6835] ? __pfx_nldev_newlink+0x10/0x10 [ 147.968876][ T6835] ? __pfx_hook_capable+0x10/0x10 [ 147.968919][ T6835] ? __pfx_hook_capable+0x10/0x10 [ 147.968970][ T6835] ? apparmor_capable+0x126/0x170 [ 147.968997][ T6835] ? security_capable+0x7e/0x2c0 [ 147.969033][ T6835] ? __pfx_nldev_newlink+0x10/0x10 [ 147.969067][ T6835] rdma_nl_rcv+0x6ef/0xa40 [ 147.969116][ T6835] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 147.969178][ T6835] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.969203][ T6835] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.969234][ T6835] netlink_unicast+0x8ef/0xa80 [ 147.969292][ T6835] netlink_sendmsg+0x7f0/0xb20 [ 147.969326][ T6835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.969356][ T6835] ? aa_sock_msg_perm+0x144/0x210 [ 147.969395][ T6835] ? apparmor_socket_sendmsg+0x98/0x360 [ 147.969427][ T6835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.969452][ T6835] sock_sendmsg_nosec+0x14e/0x190 [ 147.969480][ T6835] ____sys_sendmsg+0x54e/0x850 [ 147.969518][ T6835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.969560][ T6835] ? import_iovec+0x73/0xa0 [ 147.969599][ T6835] ___sys_sendmsg+0x2a6/0x360 [ 147.969627][ T6835] ? __lock_acquire+0x747/0x2de0 [ 147.969658][ T6835] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.969694][ T6835] ? futex_wait+0x2a2/0x390 [ 147.969755][ T6835] ? __fget_files+0x3a2/0x420 [ 147.969780][ T6835] ? __fget_files+0x2a/0x420 [ 147.969817][ T6835] __x64_sys_sendmsg+0x1b1/0x290 [ 147.969852][ T6835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.969915][ T6835] do_syscall_64+0x166/0x520 [ 147.969950][ T6835] ? trace_irq_disable+0x3b/0x140 [ 147.969979][ T6835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.970003][ T6835] ? clear_bhb_loop+0x70/0xc0 [ 147.970031][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.970054][ T6835] RIP: 0033:0x7f0d0cb9f559 [ 147.970077][ T6835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.970097][ T6835] RSP: 002b:00007f0d0dac9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.970122][ T6835] RAX: ffffffffffffffda RBX: 00007f0d0ce25fa0 RCX: 00007f0d0cb9f559 [ 147.970140][ T6835] RDX: 000000000000c000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 147.970155][ T6835] RBP: 00007f0d0cc36b50 R08: 0000000000000000 R09: 0000000000000000 [ 147.970170][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.970184][ T6835] R13: 00007f0d0ce26038 R14: 00007f0d0ce25fa0 R15: 00007ffd6d105f48 [ 147.970222][ T6835] [ 148.482538][ T5654] Bluetooth: hci4: command tx timeout [ 148.564628][ T6809] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.603881][ T5796] usb 2-1: USB disconnect, device number 18 [ 148.656043][ T6835] kobject: kobject_add_internal failed for 1 (error: -12 parent: ports) [ 148.656223][ T6835] infiniband syz2: Couldn't register device with driver model [ 148.884948][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.028182][ T6835] siw: device registration error -12 [ 149.109717][ T6841] tipc: Enabling of bearer rejected, failed to enable media [ 149.355023][ T6846] comedi comedi1: comedi_config --init_data is deprecated [ 149.502914][ T6851] comedi: valid board names for 8255 driver are: [ 149.502933][ T6851] 8255 [ 149.502941][ T6851] comedi: valid board names for vmk80xx driver are: [ 149.502951][ T6851] vmk80xx [ 149.502958][ T6851] comedi: valid board names for usbduxsigma driver are: [ 149.505178][ T6851] usbduxsigma [ 149.505190][ T6851] comedi: valid board names for usbduxfast driver are: [ 149.505201][ T6851] usbduxfast [ 149.505210][ T6851] comedi: valid board names for usbdux driver are: [ 149.505220][ T6851] usbdux [ 149.505227][ T6851] comedi: valid board names for ni6501 driver are: [ 149.505238][ T6851] ni6501 [ 149.505245][ T6851] comedi: valid board names for dt9812 driver are: [ 149.505256][ T6851] dt9812 [ 149.505263][ T6851] comedi: valid board names for ni_labpc_cs driver are: [ 149.505273][ T6851] ni_labpc_cs [ 149.505281][ T6851] comedi: valid board names for ni_daq_700 driver are: [ 149.505291][ T6851] ni_daq_700 [ 149.505299][ T6851] comedi: valid board names for labpc_pci driver are: [ 149.505309][ T6851] labpc_pci [ 149.505317][ T6851] comedi: valid board names for adl_pci9118 driver are: [ 149.505327][ T6851] pci9118dg [ 149.505334][ T6851] pci9118hg [ 149.505342][ T6851] pci9118hr [ 149.505349][ T6851] comedi: valid board names for 8255_pci driver are: [ 149.505359][ T6851] 8255_pci [ 149.505367][ T6851] comedi: valid board names for s526 driver are: [ 149.505376][ T6851] s526 [ 149.505383][ T6851] comedi: valid board names for multiq3 driver are: [ 149.505394][ T6851] multiq3 [ 149.505401][ T6851] comedi: valid board names for pcmuio driver are: [ 149.505411][ T6851] pcmuio48 [ 149.505427][ T6851] pcmuio96 [ 149.505435][ T6851] comedi: valid board names for pcmmio driver are: [ 149.505445][ T6851] pcmmio [ 149.505452][ T6851] comedi: valid board names for pcmda12 driver are: [ 149.505462][ T6851] pcmda12 [ 149.505470][ T6851] comedi: valid board names for pcmad driver are: [ 149.505480][ T6851] pcmad12 [ 149.505487][ T6851] pcmad16 [ 149.505494][ T6851] comedi: valid board names for ni_labpc driver are: [ 149.505504][ T6851] lab-pc-1200 [ 149.505511][ T6851] lab-pc-1200ai [ 149.505520][ T6851] lab-pc+ [ 149.505527][ T6851] comedi: valid board names for atmio16 driver are: [ 149.505537][ T6851] atmio16 [ 149.505544][ T6851] atmio16d [ 149.505552][ T6851] comedi: valid board names for ni_at_ao driver are: [ 149.505562][ T6851] at-ao-6 [ 149.505570][ T6851] at-ao-10 [ 149.505577][ T6851] comedi: valid board names for ni_at_a2150 driver are: [ 149.505588][ T6851] ni_at_a2150 [ 149.505595][ T6851] comedi: valid board names for adq12b driver are: [ 149.505605][ T6851] adq12b [ 149.505613][ T6851] comedi: valid board names for mpc624 driver are: [ 149.505623][ T6851] mpc624 [ 149.505631][ T6851] comedi: valid board names for c6xdigio driver are: [ 149.505641][ T6851] c6xdigio [ 149.505779][ T6851] comedi: valid board names for aio_iiro_16 driver are: [ 149.505791][ T6851] aio_iiro_16 [ 149.505800][ T6851] comedi: valid board names for aio_aio12_8 driver are: [ 149.505810][ T6851] aio_aio12_8 [ 149.505818][ T6851] aio_ai12_8 [ 149.505826][ T6851] aio_ao12_4 [ 149.505834][ T6851] comedi: valid board names for fl512 driver are: [ 149.505844][ T6851] fl512 [ 149.505851][ T6851] comedi: valid board names for dmm32at driver are: [ 149.505861][ T6851] dmm32at [ 149.505868][ T6851] comedi: valid board names for dt282x driver are: [ 149.505879][ T6851] dt2821 [ 149.505886][ T6851] dt2821-f [ 149.505893][ T6851] dt2821-g [ 149.505901][ T6851] dt2823 [ 149.505908][ T6851] dt2824-pgh [ 149.505915][ T6851] dt2824-pgl [ 149.505922][ T6851] dt2825 [ 149.505930][ T6851] dt2827 [ 149.505937][ T6851] dt2828 [ 149.505944][ T6851] dt2829 [ 149.505951][ T6851] dt21-ez [ 149.505958][ T6851] dt23-ez [ 149.505966][ T6851] dt24-ez [ 149.505973][ T6851] dt24-ez-pgl [ 149.505980][ T6851] comedi: valid board names for dt2817 driver are: [ 149.505990][ T6851] dt2817 [ 149.505997][ T6851] comedi: valid board names for dt2815 driver are: [ 149.506006][ T6851] dt2815 [ 149.506014][ T6851] comedi: valid board names for dt2814 driver are: [ 149.506024][ T6851] dt2814 [ 149.506031][ T6851] comedi: valid board names for dt2811 driver are: [ 149.506040][ T6851] dt2811-pgh [ 149.506048][ T6851] dt2811-pgl [ 149.506055][ T6851] comedi: valid board names for dt2801 driver are: [ 149.506065][ T6851] dt2801 [ 149.506072][ T6851] comedi: valid board names for das6402 driver are: [ 149.506082][ T6851] das6402-12 [ 149.506089][ T6851] das6402-16 [ 149.506097][ T6851] comedi: valid board names for das1800 driver are: [ 149.506107][ T6851] das-1701st [ 149.506114][ T6851] das-1701st-da [ 149.506122][ T6851] das-1702st [ 149.506129][ T6851] das-1702st-da [ 149.506137][ T6851] das-1702hr [ 149.506144][ T6851] das-1702hr-da [ 149.506152][ T6851] das-1701ao [ 149.506159][ T6851] das-1702ao [ 149.506166][ T6851] das-1801st [ 149.506174][ T6851] das-1801st-da [ 149.506181][ T6851] das-1802st [ 149.506188][ T6851] das-1802st-da [ 149.506196][ T6851] das-1802hr [ 149.506203][ T6851] das-1802hr-da [ 149.506211][ T6851] das-1801hc [ 149.506218][ T6851] das-1802hc [ 149.506225][ T6851] das-1801ao [ 149.506233][ T6851] das-1802ao [ 149.506240][ T6851] comedi: valid board names for das800 driver are: [ 149.506250][ T6851] das-800 [ 149.506257][ T6851] cio-das800 [ 149.506264][ T6851] das-801 [ 149.506287][ T6851] cio-das801 [ 149.506295][ T6851] das-802 [ 149.506303][ T6851] cio-das802 [ 149.506310][ T6851] cio-das802/16 [ 149.506318][ T6851] comedi: valid board names for isa-das08 driver are: [ 149.506329][ T6851] isa-das08 [ 149.506336][ T6851] das08-pgm [ 149.506343][ T6851] das08-pgh [ 149.506351][ T6851] das08-pgl [ 149.506358][ T6851] das08-aoh [ 149.506366][ T6851] das08-aol [ 149.506373][ T6851] das08-aom [ 149.506380][ T6851] das08/jr-ao [ 149.506388][ T6851] das08jr-16-ao [ 149.506396][ T6851] pc104-das08 [ 149.506404][ T6851] das08jr/16 [ 149.506418][ T6851] comedi: valid board names for das16m1 driver are: [ 149.506428][ T6851] das16m1 [ 149.506436][ T6851] comedi: valid board names for dac02 driver are: [ 149.506446][ T6851] dac02 [ 149.506453][ T6851] comedi: valid board names for rti802 driver are: [ 149.506463][ T6851] rti802 [ 149.506471][ T6851] comedi: valid board names for rti800 driver are: [ 149.506481][ T6851] rti800 [ 149.506488][ T6851] rti815 [ 149.506496][ T6851] comedi: valid board names for pcm3724 driver are: [ 149.506506][ T6851] pcm3724 [ 149.506513][ T6851] comedi: valid board names for pcl818 driver are: [ 149.506523][ T6851] pcl818l [ 149.506531][ T6851] pcl818h [ 149.506538][ T6851] pcl818hd [ 149.506546][ T6851] pcl818hg [ 149.506553][ T6851] pcl818 [ 149.506561][ T6851] pcl718 [ 149.506568][ T6851] pcm3718 [ 149.506576][ T6851] comedi: valid board names for pcl816 driver are: [ 149.506586][ T6851] pcl816 [ 149.506593][ T6851] pcl814b [ 149.506601][ T6851] comedi: valid board names for pcl812 driver are: [ 149.506611][ T6851] pcl812 [ 149.506618][ T6851] pcl812pg [ 149.506626][ T6851] acl8112pg [ 149.506634][ T6851] acl8112dg [ 149.506641][ T6851] acl8112hg [ 149.506649][ T6851] a821pgl [ 149.506656][ T6851] a821pglnda [ 149.506664][ T6851] a821pgh [ 149.506671][ T6851] a822pgl [ 149.506679][ T6851] a822pgh [ 149.506686][ T6851] a823pgl [ 149.506693][ T6851] a823pgh [ 149.506701][ T6851] pcl813 [ 149.506708][ T6851] pcl813b [ 149.506716][ T6851] acl8113 [ 149.506723][ T6851] iso813 [ 149.506730][ T6851] acl8216 [ 149.506738][ T6851] a826pg [ 149.506746][ T6851] comedi: valid board names for pcl730 driver are: [ 149.506756][ T6851] pcl730 [ 149.506763][ T6851] iso730 [ 149.506770][ T6851] acl7130 [ 149.506778][ T6851] pcm3730 [ 149.506858][ T6851] pcl725 [ 149.506867][ T6851] p8r8dio [ 149.506874][ T6851] acl7225b [ 149.506882][ T6851] p16r16dio [ 149.506889][ T6851] pcl733 [ 149.506896][ T6851] pcl734 [ 149.506904][ T6851] opmm-1616-xt [ 149.506911][ T6851] pearl-mm-p [ 149.506919][ T6851] ir104-pbf [ 149.506926][ T6851] comedi: valid board names for pcl726 driver are: [ 149.506937][ T6851] pcl726 [ 149.506945][ T6851] pcl727 [ 149.506952][ T6851] pcl728 [ 149.506959][ T6851] acl6126 [ 149.506967][ T6851] acl6128 [ 149.506974][ T6851] comedi: valid board names for pcl724 driver are: [ 149.506984][ T6851] pcl724 [ 149.506992][ T6851] pcl722 [ 149.506999][ T6851] pcl731 [ 149.507006][ T6851] acl7122 [ 149.507013][ T6851] acl7124 [ 149.507021][ T6851] pet48dio [ 149.507028][ T6851] pcmio48 [ 149.507035][ T6851] onyx-mm-dio [ 149.507043][ T6851] comedi: valid board names for pcl711 driver are: [ 149.507053][ T6851] pcl711 [ 149.507060][ T6851] pcl711b [ 149.507068][ T6851] acl8112hg [ 149.507075][ T6851] acl8112dg [ 149.507082][ T6851] comedi: valid board names for amplc_pc263 driver are: [ 149.507092][ T6851] pc263 [ 149.507099][ T6851] comedi: valid board names for amplc_pc236 driver are: [ 149.507109][ T6851] pc36at [ 149.507116][ T6851] comedi: valid board names for amplc_dio200 driver are: [ 149.507126][ T6851] pc212e [ 149.507134][ T6851] pc214e [ 149.507140][ T6851] pc215e [ 149.507148][ T6851] pc218e [ 149.507155][ T6851] pc272e [ 149.507162][ T6851] comedi: valid board names for comedi_parport driver are: [ 149.507172][ T6851] comedi_parport [ 149.507180][ T6851] comedi: valid board names for comedi_test driver are: [ 149.507190][ T6851] comedi_test [ 149.507197][ T6851] comedi: valid board names for comedi_bond driver are: [ 149.507207][ T6851] comedi_bond [ 149.741825][ T5796] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 150.078828][ T5796] usb 3-1: New USB device found: idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 150.368459][ T5796] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.558676][ T5654] Bluetooth: hci4: command tx timeout [ 150.605740][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.605775][ T5796] usb 3-1: Product: syz [ 150.605791][ T5796] usb 3-1: Manufacturer: syz [ 150.605812][ T5796] usb 3-1: SerialNumber: syz [ 150.654885][ T5796] r8152-cfgselector 3-1: Unknown version 0x0000 [ 150.665670][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.890389][ T5796] r8152-cfgselector 3-1: Unknown version 0x0000 [ 150.930723][ T5796] r8152-cfgselector 3-1: USB disconnect, device number 24 [ 151.007610][ T5745] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 151.160547][ T5745] usb 2-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 151.163307][ T5745] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.163366][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.219726][ T5745] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 151.220556][ T5745] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 151.220657][ T5745] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 151.227149][ T5745] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 151.261824][ T5745] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 151.278145][ T5745] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 151.283536][ T5745] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 151.283638][ T5745] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 151.327933][ T32] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 151.329179][ T5745] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 151.477499][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 151.478232][ T32] usb 4-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 151.481439][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.481466][ T32] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.493561][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.493588][ T32] usb 4-1: Product: syz [ 151.493611][ T32] usb 4-1: Manufacturer: syz [ 151.493626][ T32] usb 4-1: SerialNumber: syz [ 151.566067][ T32] usb 4-1: config 0 descriptor?? [ 151.673773][ T6863] netlink: 'syz.2.314': attribute type 12 has an invalid length. [ 151.826549][ T32] usb 2-1: USB disconnect, device number 19 [ 151.871840][ T32] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 151.903608][ T32] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 151.905692][ T32] keyspan 2-1:1.0: device disconnected [ 152.066417][ T6809] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.066659][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.066810][ T6809] bridge_slave_0: entered allmulticast mode [ 152.095170][ T6809] bridge_slave_0: entered promiscuous mode [ 152.146215][ T6809] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.146330][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.146464][ T6809] bridge_slave_1: entered allmulticast mode [ 152.180618][ T6809] bridge_slave_1: entered promiscuous mode [ 152.287576][ T6809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.309752][ T6809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.433392][ T6809] team0: Port device team_slave_0 added [ 152.456758][ T6809] team0: Port device team_slave_1 added [ 152.612472][ T6869] input: syz0 as /devices/virtual/input/input11 [ 152.633870][ T14] bridge_slave_1: left allmulticast mode [ 152.633918][ T14] bridge_slave_1: left promiscuous mode [ 152.634885][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.637800][ T5654] Bluetooth: hci4: command tx timeout [ 152.837867][ T14] bridge_slave_0: left allmulticast mode [ 152.837897][ T14] bridge_slave_0: left promiscuous mode [ 152.839470][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.133443][ T6882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.317'. [ 154.110205][ T5796] usb 4-1: USB disconnect, device number 27 [ 154.181629][ T6896] FAULT_INJECTION: forcing a failure. [ 154.181629][ T6896] name failslab, interval 1, probability 0, space 0, times 0 [ 154.181742][ T6896] CPU: 1 UID: 0 PID: 6896 Comm: syz.3.320 Not tainted syzkaller #0 PREEMPT(full) [ 154.181770][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 154.181784][ T6896] Call Trace: [ 154.181793][ T6896] [ 154.181803][ T6896] dump_stack_lvl+0xe8/0x150 [ 154.181843][ T6896] should_fail_ex+0x3eb/0x540 [ 154.181885][ T6896] should_failslab+0xa8/0x100 [ 154.181921][ T6896] __kmalloc_cache_noprof+0x9e/0x600 [ 154.181949][ T6896] ? __kmalloc_cache_noprof+0x148/0x600 [ 154.181974][ T6896] ? x509_cert_parse+0xfa/0x7a0 [ 154.182002][ T6896] ? x509_cert_parse+0xfa/0x7a0 [ 154.182041][ T6896] x509_cert_parse+0xfa/0x7a0 [ 154.182078][ T6896] x509_key_preparse+0x64/0x6d0 [ 154.182111][ T6896] ? down_read+0x2b9/0x320 [ 154.182139][ T6896] asymmetric_key_preparse+0xb9/0x1b0 [ 154.182171][ T6896] __key_create_or_update+0x360/0xab0 [ 154.182216][ T6896] ? __pfx___key_create_or_update+0x10/0x10 [ 154.182246][ T6896] ? lookup_user_key+0x112c/0x12c0 [ 154.182295][ T6896] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 154.182340][ T6896] key_create_or_update+0x42/0x60 [ 154.182391][ T6896] __se_sys_add_key+0x349/0x420 [ 154.182420][ T6896] ? __pfx___se_sys_add_key+0x10/0x10 [ 154.182456][ T6896] ? __x64_sys_add_key+0x20/0xc0 [ 154.182519][ T6896] do_syscall_64+0x166/0x520 [ 154.182553][ T6896] ? trace_irq_disable+0x3b/0x140 [ 154.182582][ T6896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.182611][ T6896] ? clear_bhb_loop+0x70/0xc0 [ 154.182641][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.182664][ T6896] RIP: 0033:0x7faffe79f559 [ 154.182686][ T6896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.182705][ T6896] RSP: 002b:00007fafff735028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 154.182730][ T6896] RAX: ffffffffffffffda RBX: 00007faffea25fa0 RCX: 00007faffe79f559 [ 154.182747][ T6896] RDX: 0000200000000380 RSI: 0000000000000000 RDI: 00002000000001c0 [ 154.182763][ T6896] RBP: 00007faffe836b50 R08: ffffffffffffffff R09: 0000000000000000 [ 154.182783][ T6896] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 154.182797][ T6896] R13: 00007faffea26038 R14: 00007faffea25fa0 R15: 00007ffc828672c8 [ 154.182835][ T6896] [ 154.461768][ T6898] FAULT_INJECTION: forcing a failure. [ 154.461768][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 154.461803][ T6898] CPU: 1 UID: 0 PID: 6898 Comm: syz.3.320 Not tainted syzkaller #0 PREEMPT(full) [ 154.461829][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 154.461842][ T6898] Call Trace: [ 154.461850][ T6898] [ 154.461859][ T6898] dump_stack_lvl+0xe8/0x150 [ 154.461899][ T6898] should_fail_ex+0x3eb/0x540 [ 154.461940][ T6898] should_failslab+0xa8/0x100 [ 154.461975][ T6898] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 154.462002][ T6898] ? __d_alloc+0x37/0x820 [ 154.462027][ T6898] ? __d_alloc+0x37/0x820 [ 154.462062][ T6898] __d_alloc+0x37/0x820 [ 154.462095][ T6898] __d_alloc_parallel+0xde/0x1700 [ 154.462129][ T6898] ? lock_acquire+0x115/0x350 [ 154.462167][ T6898] ? __d_lookup+0x66/0x790 [ 154.462202][ T6898] ? __d_lookup+0x66/0x790 [ 154.462233][ T6898] ? __pfx___d_alloc_parallel+0x10/0x10 [ 154.462265][ T6898] ? d_lookup+0x1f/0xa0 [ 154.462297][ T6898] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 154.462357][ T6898] ? lockdep_hardirqs_on+0x7b/0x110 [ 154.462399][ T6898] lookup_open+0x2c2/0x1970 [ 154.462460][ T6898] path_openat+0x70c/0x20f0 [ 154.462522][ T6898] do_file_open+0x23e/0x4a0 [ 154.462561][ T6898] ? __pfx_do_file_open+0x10/0x10 [ 154.462603][ T6898] ? __pfx_kfree_link+0x10/0x10 [ 154.462640][ T6898] ? _raw_spin_unlock+0x28/0x50 [ 154.462670][ T6898] ? alloc_fd+0x6af/0x760 [ 154.462706][ T6898] do_sys_openat2+0x115/0x200 [ 154.462730][ T6898] ? __se_sys_futex+0x3a8/0x450 [ 154.462765][ T6898] ? __pfx_do_sys_openat2+0x10/0x10 [ 154.462794][ T6898] ? rcu_is_watching+0x16/0xb0 [ 154.462831][ T6898] __x64_sys_openat+0x138/0x170 [ 154.462861][ T6898] do_syscall_64+0x166/0x520 [ 154.462895][ T6898] ? trace_irq_disable+0x3b/0x140 [ 154.462923][ T6898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.462947][ T6898] ? clear_bhb_loop+0x70/0xc0 [ 154.462975][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.462998][ T6898] RIP: 0033:0x7faffe75fd8e [ 154.463019][ T6898] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 154.463039][ T6898] RSP: 002b:00007fafff713ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 154.463064][ T6898] RAX: ffffffffffffffda RBX: 00007fafff7146c0 RCX: 00007faffe75fd8e [ 154.463082][ T6898] RDX: 0000000000000002 RSI: 00007fafff713f90 RDI: ffffffffffffff9c [ 154.463097][ T6898] RBP: 00007faffe836b50 R08: 0000000000000000 R09: 0000000000000000 [ 154.463112][ T6898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.463131][ T6898] R13: 00007faffea26128 R14: 00007faffea26090 R15: 00007ffc828672c8 [ 154.463169][ T6898] [ 154.727187][ T5654] Bluetooth: hci4: command tx timeout [ 155.092434][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.171450][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.193792][ T14] bond0 (unregistering): Released all slaves [ 155.418687][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.418707][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.418738][ T6809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.464331][ T6809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.485680][ T6809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.485717][ T6809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.685311][ T5300] 8021q: adding VLAN 0 to HW filter on device eth1 [ 156.297554][ T6809] hsr_slave_0: entered promiscuous mode [ 156.325608][ T6809] hsr_slave_1: entered promiscuous mode [ 156.326405][ T6809] debugfs: 'hsr0' already exists in 'hsr' [ 156.326423][ T6809] Cannot create hsr debugfs directory [ 156.787430][ T1235] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 156.947688][ T1235] usb 3-1: Using ep0 maxpacket: 16 [ 156.948451][ T1235] usb 3-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 156.974735][ T1235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.974763][ T1235] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.003206][ T1235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.003237][ T1235] usb 3-1: Product: syz [ 157.003253][ T1235] usb 3-1: Manufacturer: syz [ 157.003269][ T1235] usb 3-1: SerialNumber: syz [ 157.106585][ T1235] usb 3-1: config 0 descriptor?? [ 157.559671][ T6944] FAULT_INJECTION: forcing a failure. [ 157.559671][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 157.559705][ T6944] CPU: 1 UID: 0 PID: 6944 Comm: syz.1.330 Not tainted syzkaller #0 PREEMPT(full) [ 157.559730][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 157.559744][ T6944] Call Trace: [ 157.559752][ T6944] [ 157.559761][ T6944] dump_stack_lvl+0xe8/0x150 [ 157.559800][ T6944] should_fail_ex+0x3eb/0x540 [ 157.559836][ T6944] ? __pfx_proc_alloc_inode+0x10/0x10 [ 157.559871][ T6944] should_failslab+0xa8/0x100 [ 157.559902][ T6944] ? __pfx_proc_alloc_inode+0x10/0x10 [ 157.559932][ T6944] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 157.559960][ T6944] ? proc_alloc_inode+0x2a/0xc0 [ 157.559991][ T6944] ? proc_alloc_inode+0x2a/0xc0 [ 157.560031][ T6944] ? __pfx_proc_alloc_inode+0x10/0x10 [ 157.560065][ T6944] proc_alloc_inode+0x2a/0xc0 [ 157.560108][ T6944] alloc_inode+0x6a/0x1b0 [ 157.560134][ T6944] new_inode+0x1f/0x170 [ 157.560155][ T6944] ? proc_pid_make_inode+0x19/0x130 [ 157.560184][ T6944] proc_pid_make_inode+0x21/0x130 [ 157.560212][ T6944] proc_pident_instantiate+0x6d/0x2a0 [ 157.560243][ T6944] proc_pident_lookup+0x1b7/0x270 [ 157.560279][ T6944] lookup_open+0x94b/0x1970 [ 157.560338][ T6944] path_openat+0x70c/0x20f0 [ 157.560391][ T6944] do_file_open+0x23e/0x4a0 [ 157.560427][ T6944] ? __pfx_do_file_open+0x10/0x10 [ 157.560469][ T6944] ? __pfx_kfree_link+0x10/0x10 [ 157.560506][ T6944] ? _raw_spin_unlock+0x28/0x50 [ 157.560536][ T6944] ? alloc_fd+0x6af/0x760 [ 157.560572][ T6944] do_sys_openat2+0x115/0x200 [ 157.560596][ T6944] ? __se_sys_futex+0x3a8/0x450 [ 157.560631][ T6944] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.560660][ T6944] ? rcu_is_watching+0x16/0xb0 [ 157.560697][ T6944] __x64_sys_openat+0x138/0x170 [ 157.560726][ T6944] do_syscall_64+0x166/0x520 [ 157.560759][ T6944] ? trace_irq_disable+0x3b/0x140 [ 157.560787][ T6944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.560810][ T6944] ? clear_bhb_loop+0x70/0xc0 [ 157.560838][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.560861][ T6944] RIP: 0033:0x7f696855fd8e [ 157.560882][ T6944] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.560902][ T6944] RSP: 002b:00007f6969384ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.560927][ T6944] RAX: ffffffffffffffda RBX: 00007f69693856c0 RCX: 00007f696855fd8e [ 157.560943][ T6944] RDX: 0000000000000002 RSI: 00007f6969384f90 RDI: ffffffffffffff9c [ 157.560962][ T6944] RBP: 00007f6968636b50 R08: 0000000000000000 R09: 0000000000000000 [ 157.560976][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.560989][ T6944] R13: 00007f6968826128 R14: 00007f6968826090 R15: 00007ffd90894418 [ 157.561026][ T6944] [ 158.225447][ T14] hsr_slave_0: left promiscuous mode [ 158.264876][ T14] hsr_slave_1: left promiscuous mode [ 158.266084][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.266121][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.304568][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.304594][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.512218][ T14] veth1_macvtap: left promiscuous mode [ 158.514998][ T14] veth0_macvtap: left promiscuous mode [ 158.515183][ T14] veth0_vlan: left promiscuous mode [ 159.027450][ T5796] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 159.202671][ T5796] usb 2-1: Using ep0 maxpacket: 32 [ 159.203551][ T5796] usb 2-1: New USB device found: idVendor=01f0, idProduct=6c17, bcdDevice=0.40 [ 159.203592][ T5796] usb 2-1: no configurations [ 159.203607][ T5796] usb 2-1: can't read configurations, error -22 [ 159.339981][ T5796] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 159.472837][ T14] team0 (unregistering): Port device team_slave_1 removed [ 159.512296][ T5796] usb 2-1: Using ep0 maxpacket: 32 [ 159.517132][ T5796] usb 2-1: New USB device found: idVendor=01f0, idProduct=6c17, bcdDevice=0.40 [ 159.517176][ T5796] usb 2-1: no configurations [ 159.517190][ T5796] usb 2-1: can't read configurations, error -22 [ 159.536496][ T5796] usb usb2-port1: attempt power cycle [ 159.561523][ T14] team0 (unregistering): Port device team_slave_0 removed [ 159.597461][ T1235] usb 3-1: USB disconnect, device number 25 [ 159.920784][ T5796] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 159.940066][ T5796] usb 2-1: Using ep0 maxpacket: 32 [ 159.944175][ T5796] usb 2-1: New USB device found: idVendor=01f0, idProduct=6c17, bcdDevice=0.40 [ 159.944220][ T5796] usb 2-1: no configurations [ 159.944233][ T5796] usb 2-1: can't read configurations, error -22 [ 160.068039][ T5796] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 160.093527][ T5300] 8021q: adding VLAN 0 to HW filter on device eth2 [ 160.108082][ T5796] usb 2-1: Using ep0 maxpacket: 32 [ 160.108625][ T5796] usb 2-1: New USB device found: idVendor=01f0, idProduct=6c17, bcdDevice=0.40 [ 160.108665][ T5796] usb 2-1: no configurations [ 160.108679][ T5796] usb 2-1: can't read configurations, error -22 [ 160.108956][ T5796] usb usb2-port1: unable to enumerate USB device [ 160.430653][ T1235] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 160.546144][ T6977] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 160.577580][ T1235] usb 3-1: Using ep0 maxpacket: 8 [ 160.578431][ T1235] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.579887][ T1235] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 160.579919][ T1235] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.579947][ T1235] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.579982][ T1235] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.580026][ T1235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.731675][ T6809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.862292][ T6809] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.865349][ T6809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.902909][ T1235] usb 3-1: GET_CAPABILITIES returned 0 [ 160.902968][ T1235] usbtmc 3-1:16.0: can't read capabilities [ 161.011059][ T6809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.025628][ T6809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.059990][ T6809] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.064529][ T6809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.097469][ T6981] FAULT_INJECTION: forcing a failure. [ 161.097469][ T6981] name failslab, interval 1, probability 0, space 0, times 0 [ 161.097505][ T6981] CPU: 1 UID: 0 PID: 6981 Comm: syz.3.340 Not tainted syzkaller #0 PREEMPT(full) [ 161.097531][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 161.097545][ T6981] Call Trace: [ 161.097553][ T6981] [ 161.097563][ T6981] dump_stack_lvl+0xe8/0x150 [ 161.097601][ T6981] should_fail_ex+0x3eb/0x540 [ 161.097642][ T6981] should_failslab+0xa8/0x100 [ 161.097674][ T6981] ? security_inode_alloc+0x39/0x310 [ 161.097707][ T6981] kmem_cache_alloc_noprof+0x9c/0x600 [ 161.097732][ T6981] ? __pfx_make_kgid+0x10/0x10 [ 161.097756][ T6981] ? security_inode_alloc+0x39/0x310 [ 161.097796][ T6981] security_inode_alloc+0x39/0x310 [ 161.097831][ T6981] inode_init_always_gfp+0x97e/0xd30 [ 161.097863][ T6981] alloc_inode+0x82/0x1b0 [ 161.097888][ T6981] new_inode+0x1f/0x170 [ 161.097916][ T6981] devpts_pty_new+0xd9/0x5d0 [ 161.097949][ T6981] ? __pfx_devpts_pty_new+0x10/0x10 [ 161.097981][ T6981] ? do_raw_spin_unlock+0xf5/0x200 [ 161.098020][ T6981] ptmx_open+0x1c8/0x2e0 [ 161.098058][ T6981] chrdev_open+0x4d9/0x600 [ 161.098093][ T6981] ? __pfx_chrdev_open+0x10/0x10 [ 161.098124][ T6981] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 161.098156][ T6981] ? devcgroup_check_permission+0x31/0x8f0 [ 161.098192][ T6981] ? __pfx_chrdev_open+0x10/0x10 [ 161.098224][ T6981] do_dentry_open+0x80e/0x1360 [ 161.098277][ T6981] vfs_open_consume+0x4a/0x350 [ 161.098310][ T6981] ? path_openat+0x16e1/0x20f0 [ 161.098343][ T6981] path_openat+0x16fc/0x20f0 [ 161.098394][ T6981] do_file_open+0x23e/0x4a0 [ 161.098430][ T6981] ? __pfx_do_file_open+0x10/0x10 [ 161.098484][ T6981] ? _raw_spin_unlock+0x28/0x50 [ 161.098513][ T6981] ? alloc_fd+0x6af/0x760 [ 161.098549][ T6981] do_sys_openat2+0x115/0x200 [ 161.098572][ T6981] ? __se_sys_futex+0x3a8/0x450 [ 161.098605][ T6981] ? __pfx_do_sys_openat2+0x10/0x10 [ 161.098634][ T6981] ? rcu_is_watching+0x16/0xb0 [ 161.098671][ T6981] __x64_sys_openat+0x138/0x170 [ 161.098699][ T6981] do_syscall_64+0x166/0x520 [ 161.098730][ T6981] ? trace_irq_disable+0x3b/0x140 [ 161.098758][ T6981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.098781][ T6981] ? clear_bhb_loop+0x70/0xc0 [ 161.098809][ T6981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.098832][ T6981] RIP: 0033:0x7faffe79f559 [ 161.098858][ T6981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.098878][ T6981] RSP: 002b:00007fafff714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 161.098902][ T6981] RAX: ffffffffffffffda RBX: 00007faffea26090 RCX: 00007faffe79f559 [ 161.098919][ T6981] RDX: 0000000000121301 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 161.098935][ T6981] RBP: 00007faffe836b50 R08: 0000000000000000 R09: 0000000000000000 [ 161.098948][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.098962][ T6981] R13: 00007faffea26128 R14: 00007faffea26090 R15: 00007ffc828672c8 [ 161.098998][ T6981] [ 161.381566][ T6809] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.066675][ T6809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.186686][ T6809] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.223523][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.223637][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.251620][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.251736][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.316564][ T6809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.316591][ T6809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.759239][ T5649] Bluetooth: hci2: command 0xfc11 tx timeout [ 163.759340][ T5654] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 164.087645][ T32] usb 3-1: USB disconnect, device number 26 [ 164.210045][ T1235] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 164.369381][ T1235] usb 4-1: Using ep0 maxpacket: 16 [ 164.371736][ T1235] usb 4-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 164.377133][ T1235] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.377182][ T1235] usb 4-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.377212][ T1235] usb 4-1: config 0 interface 0 has no altsetting 0 [ 164.449837][ T5300] 8021q: adding VLAN 0 to HW filter on device eth3 [ 164.488630][ T1235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.488662][ T1235] usb 4-1: Product: syz [ 164.488678][ T1235] usb 4-1: Manufacturer: syz [ 164.488693][ T1235] usb 4-1: SerialNumber: syz [ 164.494529][ T1235] usb 4-1: config 0 descriptor?? [ 164.955094][ T1235] usb 4-1: USB disconnect, device number 28 [ 165.439455][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 165.479458][ T6809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.912962][ T7073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'. [ 165.913030][ T7073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'. [ 166.337423][ T1235] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 166.497430][ T1235] usb 4-1: Using ep0 maxpacket: 16 [ 166.501416][ T1235] usb 4-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 166.502770][ T1235] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 166.502838][ T1235] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 166.502866][ T1235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 166.502894][ T1235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 166.672043][ T5300] 8021q: adding VLAN 0 to HW filter on device eth4 [ 166.685181][ T1235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.685209][ T1235] usb 4-1: Product: syz [ 166.685225][ T1235] usb 4-1: Manufacturer: syz [ 166.685241][ T1235] usb 4-1: SerialNumber: syz [ 166.688377][ T1235] usb 4-1: config 0 descriptor?? [ 166.937340][ T7080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.964056][ T7080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.965814][ T1235] appledisplay 4-1:0.0: Error while getting initial brightness: -71 [ 166.994185][ T1235] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71 [ 167.011777][ T1235] usb 4-1: USB disconnect, device number 29 [ 167.243685][ T7098] netlink: 'syz.2.357': attribute type 58 has an invalid length. [ 167.243711][ T7098] netlink: 152 bytes leftover after parsing attributes in process `syz.2.357'. [ 167.363641][ T6809] veth0_vlan: entered promiscuous mode [ 167.381429][ T6809] veth1_vlan: entered promiscuous mode [ 167.468042][ T32] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 167.476052][ T6809] veth0_macvtap: entered promiscuous mode [ 167.509586][ T6809] veth1_macvtap: entered promiscuous mode [ 167.627671][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 167.628414][ T32] usb 2-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 167.631055][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.631103][ T32] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 167.631132][ T32] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.692215][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.692245][ T32] usb 2-1: Product: syz [ 167.692280][ T32] usb 2-1: Manufacturer: syz [ 167.692296][ T32] usb 2-1: SerialNumber: syz [ 167.731523][ T32] usb 2-1: config 0 descriptor?? [ 167.782909][ T6809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.863473][ T6809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.937712][ T96] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.941168][ T1020] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.941375][ T1020] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.048447][ T96] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.279883][ T5796] usb 2-1: USB disconnect, device number 24 [ 168.539691][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.539718][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.004822][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.004885][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.598001][ T5643] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 169.757596][ T5643] usb 2-1: Using ep0 maxpacket: 8 [ 169.758732][ T5643] usb 2-1: New USB device found: idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 169.765209][ T5643] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 169.765238][ T5643] usb 2-1: Product: syz [ 169.765255][ T5643] usb 2-1: Manufacturer: syz [ 169.765271][ T5643] usb 2-1: SerialNumber: syz [ 169.816690][ T5643] usb 2-1: config 0 descriptor?? [ 169.836707][ T5643] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 169.855627][ T7142] netlink: 'syz.4.370': attribute type 1 has an invalid length. [ 169.960488][ T32] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 170.107476][ T32] usb 4-1: device descriptor read/64, error -71 [ 170.187453][ T5796] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 170.316622][ T7145] fuse: Bad value for 'group_id' [ 170.316644][ T7145] fuse: Bad value for 'group_id' [ 170.347396][ T5796] usb 5-1: Using ep0 maxpacket: 16 [ 170.349369][ T5796] usb 5-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 170.351517][ T5796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.351567][ T5796] usb 5-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.351623][ T5796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.355374][ T5796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.355401][ T5796] usb 5-1: Product: syz [ 170.355416][ T5796] usb 5-1: Manufacturer: syz [ 170.355431][ T5796] usb 5-1: SerialNumber: syz [ 170.384201][ T32] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 170.450383][ T5796] usb 5-1: config 0 descriptor?? [ 170.537625][ T5643] gspca_zc3xx: reg_r err -110 [ 170.537777][ T5643] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 170.577394][ T32] usb 4-1: device descriptor read/64, error -71 [ 170.687938][ T32] usb usb4-port1: attempt power cycle [ 170.883635][ T5796] usb 5-1: USB disconnect, device number 2 [ 171.027424][ T32] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 171.049150][ T32] usb 4-1: device descriptor read/8, error -71 [ 171.297449][ T32] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 171.318970][ T32] usb 4-1: device descriptor read/8, error -71 [ 171.438842][ T32] usb usb4-port1: unable to enumerate USB device [ 172.263572][ T33] audit: type=1800 audit(1793480653.506:4): pid=7156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.376" name="file2" dev="sda1" ino=2045 res=0 errno=-22 [ 172.345252][ T5796] usb 2-1: USB disconnect, device number 25 [ 173.134633][ T7167] x_tables: unsorted entry at hook 2 [ 173.288026][ T32] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 173.447376][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 173.448125][ T32] usb 3-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 173.449467][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.449518][ T32] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 173.449543][ T32] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.449571][ T32] usb 3-1: config 0 interface 0 has no altsetting 0 [ 173.452103][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.452129][ T32] usb 3-1: Product: syz [ 173.452145][ T32] usb 3-1: Manufacturer: syz [ 173.452161][ T32] usb 3-1: SerialNumber: syz [ 173.456901][ T32] usb 3-1: config 0 descriptor?? [ 173.996542][ T5796] usb 3-1: USB disconnect, device number 28 [ 174.067375][ T32] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 174.211221][ T32] usb 2-1: device descriptor read/64, error -71 [ 174.449122][ T32] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 174.577397][ T32] usb 2-1: device descriptor read/64, error -71 [ 174.688672][ T32] usb usb2-port1: attempt power cycle [ 174.696896][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 174.764614][ T7186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.388'. [ 175.037971][ T32] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 175.070850][ T32] usb 2-1: device descriptor read/8, error -71 [ 175.164902][ T7192] FAULT_INJECTION: forcing a failure. [ 175.164902][ T7192] name fail_futex, interval 1, probability 0, space 0, times 0 [ 175.164937][ T7192] CPU: 1 UID: 0 PID: 7192 Comm: syz.3.389 Not tainted syzkaller #0 PREEMPT(full) [ 175.164963][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 175.164977][ T7192] Call Trace: [ 175.164985][ T7192] [ 175.164995][ T7192] dump_stack_lvl+0xe8/0x150 [ 175.165034][ T7192] should_fail_ex+0x3eb/0x540 [ 175.165074][ T7192] get_futex_key+0xed2/0x1410 [ 175.165120][ T7192] ? __pfx_get_futex_key+0x10/0x10 [ 175.165162][ T7192] futex_wake+0x119/0x5f0 [ 175.165193][ T7192] ? __pfx_futex_wake+0x10/0x10 [ 175.165227][ T7192] ? mm_exit_exec_release+0x20/0x290 [ 175.165260][ T7192] do_futex+0x458/0x4e0 [ 175.165300][ T7192] ? __pfx_do_futex+0x10/0x10 [ 175.165338][ T7192] ? __might_fault+0xaf/0x130 [ 175.165375][ T7192] mm_exit_exec_release+0x10d/0x290 [ 175.165406][ T7192] exit_mm+0x50/0x240 [ 175.165443][ T7192] do_exit+0x6a8/0x2360 [ 175.165485][ T7192] ? __pfx_do_exit+0x10/0x10 [ 175.165531][ T7192] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.165576][ T7192] do_group_exit+0x22d/0x2f0 [ 175.165603][ T7192] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.165638][ T7192] get_signal+0x136a/0x1430 [ 175.165688][ T7192] arch_do_signal_or_restart+0xbb/0x860 [ 175.165725][ T7192] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 175.165768][ T7192] ? ksys_read+0xf8/0x270 [ 175.165806][ T7192] exit_to_user_mode_loop+0x10e/0x770 [ 175.165834][ T7192] ? rcu_is_watching+0x16/0xb0 [ 175.165870][ T7192] do_syscall_64+0x328/0x520 [ 175.165903][ T7192] ? trace_irq_disable+0x3b/0x140 [ 175.165929][ T7192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.165952][ T7192] ? clear_bhb_loop+0x70/0xc0 [ 175.165980][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.166003][ T7192] RIP: 0033:0x7faffe79f559 [ 175.166023][ T7192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.166059][ T7192] RSP: 002b:00007fafff6b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 175.166083][ T7192] RAX: fffffffffffffe00 RBX: 00007faffea26368 RCX: 00007faffe79f559 [ 175.166101][ T7192] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faffea26368 [ 175.166120][ T7192] RBP: 00007faffea26360 R08: 0000000000000000 R09: 0000000000000000 [ 175.166134][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.166147][ T7192] R13: 00007faffea263f8 R14: 00007ffc828671e0 R15: 00007ffc828672c8 [ 175.166182][ T7192] [ 175.405089][ T32] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 175.451863][ T32] usb 2-1: device descriptor read/8, error -71 [ 175.561405][ T32] usb usb2-port1: unable to enumerate USB device [ 175.847919][ T32] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 175.987400][ T32] usb 3-1: device descriptor read/64, error -71 [ 176.058975][ T5796] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 176.207793][ T5796] usb 4-1: Using ep0 maxpacket: 16 [ 176.208646][ T5796] usb 4-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 176.209905][ T5796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.209954][ T5796] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 176.209978][ T5796] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.210008][ T5796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.214807][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.214834][ T5796] usb 4-1: Product: syz [ 176.214850][ T5796] usb 4-1: Manufacturer: syz [ 176.214866][ T5796] usb 4-1: SerialNumber: syz [ 176.231840][ T32] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 176.269441][ T5796] usb 4-1: config 0 descriptor?? [ 176.378356][ T32] usb 3-1: device descriptor read/64, error -71 [ 176.492556][ T32] usb usb3-port1: attempt power cycle [ 176.737531][ T33] audit: type=1804 audit(1793480657.976:5): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/7/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 176.782532][ T5755] usb 4-1: USB disconnect, device number 34 [ 176.784852][ T5005] udevd[5005]: could not touch /run/udev/queue: No such file or directory [ 176.809079][ T5005] udevd[5005]: could not touch /run/udev/queue: No such file or directory [ 176.809388][ T5005] udevd[5005]: could not touch /run/udev/queue: No such file or directory [ 176.810493][ T5005] udevd[5005]: could not touch /run/udev/queue: No such file or directory [ 176.818359][ T5005] udevd[5005]: could not touch /run/udev/queue: No such file or directory [ 176.837339][ T32] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 176.864260][ T32] usb 3-1: device descriptor read/8, error -71 [ 176.865442][ T5005] udevd[5005]: could not touch /run/udev/queue: No such file or directory [ 177.098058][ T32] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 177.120942][ T32] usb 3-1: device descriptor read/8, error -71 [ 177.227632][ T32] usb usb3-port1: unable to enumerate USB device [ 177.553940][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 177.883724][ T7213] FAULT_INJECTION: forcing a failure. [ 177.883724][ T7213] name failslab, interval 1, probability 0, space 0, times 0 [ 177.883777][ T7213] CPU: 1 UID: 0 PID: 7213 Comm: syz.3.398 Not tainted syzkaller #0 PREEMPT(full) [ 177.883823][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 177.883853][ T7213] Call Trace: [ 177.883863][ T7213] [ 177.883872][ T7213] dump_stack_lvl+0xe8/0x150 [ 177.883921][ T7213] should_fail_ex+0x3eb/0x540 [ 177.883960][ T7213] ? __pfx_sock_alloc_inode+0x10/0x10 [ 177.883983][ T7213] should_failslab+0xa8/0x100 [ 177.884017][ T7213] ? __pfx_sock_alloc_inode+0x10/0x10 [ 177.884039][ T7213] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 177.884066][ T7213] ? sock_alloc_inode+0x2c/0x1a0 [ 177.884087][ T7213] ? sock_alloc_inode+0x2c/0x1a0 [ 177.884115][ T7213] ? __pfx_sock_alloc_inode+0x10/0x10 [ 177.884137][ T7213] sock_alloc_inode+0x2c/0x1a0 [ 177.884159][ T7213] ? __pfx_sock_alloc_inode+0x10/0x10 [ 177.884180][ T7213] alloc_inode+0x6a/0x1b0 [ 177.884205][ T7213] __sock_create+0x127/0xac0 [ 177.884239][ T7213] __sys_socket+0xd6/0x1b0 [ 177.884268][ T7213] __x64_sys_socket+0x7a/0x90 [ 177.884294][ T7213] do_syscall_64+0x166/0x520 [ 177.884328][ T7213] ? trace_irq_disable+0x3b/0x140 [ 177.884356][ T7213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.884380][ T7213] ? clear_bhb_loop+0x70/0xc0 [ 177.884408][ T7213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.884431][ T7213] RIP: 0033:0x7faffe79f559 [ 177.884452][ T7213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.884472][ T7213] RSP: 002b:00007fafff735028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 177.884497][ T7213] RAX: ffffffffffffffda RBX: 00007faffea25fa0 RCX: 00007faffe79f559 [ 177.884514][ T7213] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 177.884528][ T7213] RBP: 00007faffe836b50 R08: 0000000000000000 R09: 0000000000000000 [ 177.884542][ T7213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.884556][ T7213] R13: 00007faffea26038 R14: 00007faffea25fa0 R15: 00007ffc828672c8 [ 177.884592][ T7213] [ 177.884604][ T7213] socket: no more sockets [ 178.355391][ T7217] netlink: 204 bytes leftover after parsing attributes in process `syz.1.400'. [ 178.482046][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.401'. [ 178.482087][ T7220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.401'. [ 179.528067][ T5755] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 179.634991][ T7240] netlink: 'syz.3.408': attribute type 62 has an invalid length. [ 179.658167][ T5643] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 179.689027][ T5755] usb 3-1: Using ep0 maxpacket: 16 [ 179.695217][ T5755] usb 3-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 179.697131][ T5755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.697181][ T5755] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 179.697206][ T5755] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.697291][ T5755] usb 3-1: config 0 interface 0 has no altsetting 0 [ 179.818029][ T5643] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 179.820150][ T5643] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 179.820177][ T5643] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.820198][ T5643] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 179.825930][ T5643] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.886257][ T5643] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.886302][ T5643] usb 2-1: Product: syz [ 179.886318][ T5643] usb 2-1: Manufacturer: syz [ 179.909570][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.909599][ T5755] usb 3-1: Product: syz [ 179.909614][ T5755] usb 3-1: Manufacturer: syz [ 179.909631][ T5755] usb 3-1: SerialNumber: syz [ 179.945920][ T5755] usb 3-1: config 0 descriptor?? [ 179.968103][ T5643] cdc_wdm 2-1:1.0: skipping garbage [ 179.968125][ T5643] cdc_wdm 2-1:1.0: skipping garbage [ 179.996785][ T5643] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 179.996823][ T5643] cdc_wdm 2-1:1.0: Unknown control protocol [ 180.165373][ T5643] usb 2-1: USB disconnect, device number 30 [ 180.438611][ T32] usb 3-1: USB disconnect, device number 33 [ 180.708255][ T5643] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 180.862975][ T5643] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 180.863988][ T5643] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.864015][ T5643] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.864036][ T5643] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.864084][ T5643] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.892691][ T5643] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.892720][ T5643] usb 2-1: Product: syz [ 180.892736][ T5643] usb 2-1: Manufacturer: syz [ 180.963773][ T5643] cdc_wdm 2-1:1.0: skipping garbage [ 180.963797][ T5643] cdc_wdm 2-1:1.0: skipping garbage [ 180.980293][ T5643] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 180.980316][ T5643] cdc_wdm 2-1:1.0: Unknown control protocol [ 181.509634][ T7259] tipc: Enabling of bearer rejected, failed to enable media [ 181.571254][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.595640][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.629032][ T7260] evm: overlay not supported [ 181.773904][ T5755] usb 2-1: USB disconnect, device number 31 [ 182.187375][ T5643] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 182.301669][ T7264] comedi comedi1: comedi_config --init_data is deprecated [ 182.317775][ T5643] usb 3-1: device descriptor read/64, error -71 [ 182.557434][ T5643] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 182.697470][ T5643] usb 3-1: device descriptor read/64, error -71 [ 182.810203][ T5643] usb usb3-port1: attempt power cycle [ 183.129919][ T32] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 183.177416][ T5755] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 183.177592][ T5643] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 183.204475][ T5643] usb 3-1: device descriptor read/8, error -71 [ 183.287417][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 183.289412][ T32] usb 4-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 183.290794][ T32] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 183.290822][ T32] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.290850][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 183.294678][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.294704][ T32] usb 4-1: Product: syz [ 183.294720][ T32] usb 4-1: Manufacturer: syz [ 183.294736][ T32] usb 4-1: SerialNumber: syz [ 183.345467][ T5755] usb 2-1: New USB device found: idVendor=0a92, idProduct=1020, bcdDevice=0.40 [ 183.386135][ T32] usb 4-1: config 0 descriptor?? [ 183.405783][ T5755] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 183.424990][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.425019][ T5755] usb 2-1: Product: syz [ 183.425063][ T5755] usb 2-1: Manufacturer: syz [ 183.425079][ T5755] usb 2-1: SerialNumber: syz [ 183.459873][ T7268] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 183.511228][ T5643] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 183.528362][ T5643] usb 3-1: device descriptor read/8, error -71 [ 183.638440][ T5643] usb usb3-port1: unable to enumerate USB device [ 183.674499][ T5755] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.676846][ T5755] usb 2-1: MIDIStreaming interface descriptor not found [ 183.850648][ T5643] usb 4-1: USB disconnect, device number 35 [ 183.908111][ T5755] usb 2-1: USB disconnect, device number 32 [ 184.258839][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.525749][ T7275] netlink: 'syz.1.420': attribute type 12 has an invalid length. [ 184.917416][ T5755] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 185.047726][ T5755] usb 4-1: device descriptor read/64, error -71 [ 185.288471][ T5755] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 185.309198][ T7285] FAULT_INJECTION: forcing a failure. [ 185.309198][ T7285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.309232][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.1.424 Not tainted syzkaller #0 PREEMPT(full) [ 185.309258][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.309273][ T7285] Call Trace: [ 185.309281][ T7285] [ 185.309291][ T7285] dump_stack_lvl+0xe8/0x150 [ 185.309342][ T7285] should_fail_ex+0x3eb/0x540 [ 185.309384][ T7285] prepare_alloc_pages+0x21e/0x5f0 [ 185.309419][ T7285] __alloc_frozen_pages_noprof+0x17c/0x410 [ 185.309454][ T7285] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.309480][ T7285] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 185.309512][ T7285] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.309553][ T7285] __alloc_pages_noprof+0x10/0x100 [ 185.309582][ T7285] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 185.309620][ T7285] ? alloc_pages_noprof+0x140/0x2b0 [ 185.309659][ T7285] __kasan_populate_vmalloc+0xb7/0x1c0 [ 185.309693][ T7285] alloc_vmap_area+0xd10/0x1410 [ 185.309744][ T7285] ? __pfx_alloc_vmap_area+0x10/0x10 [ 185.309781][ T7285] ? __get_vm_area_node+0x195/0x330 [ 185.309813][ T7285] ? __get_vm_area_node+0x195/0x330 [ 185.309853][ T7285] __get_vm_area_node+0x24a/0x330 [ 185.309896][ T7285] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 185.309919][ T7285] ? do_replace+0x22f/0x470 [ 185.309943][ T7285] ? __lock_acquire+0x747/0x2de0 [ 185.309978][ T7285] ? rcu_is_watching+0x16/0xb0 [ 185.310024][ T7285] ? hrtimer_start_range_ns_common+0x7f6/0xb60 [ 185.310066][ T7285] ? lock_acquire+0x115/0x350 [ 185.310094][ T7285] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 185.310130][ T7285] ? do_replace+0x22f/0x470 [ 185.310151][ T7285] __vmalloc_noprof+0xd2/0x120 [ 185.310174][ T7285] ? do_replace+0x22f/0x470 [ 185.310204][ T7285] do_replace+0x22f/0x470 [ 185.310234][ T7285] ? __pfx_do_replace+0x10/0x10 [ 185.310269][ T7285] ? bpf_lsm_capable+0x9/0x20 [ 185.310337][ T7285] ? security_capable+0x7e/0x2c0 [ 185.310375][ T7285] do_ebt_set_ctl+0x2fb/0x1020 [ 185.310401][ T7285] ? __lock_acquire+0x747/0x2de0 [ 185.310427][ T7285] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 185.310458][ T7285] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 185.310492][ T7285] ? ip4_datagram_release_cb+0x976/0xbe0 [ 185.310526][ T7285] ? __mutex_trylock_common+0x15f/0x270 [ 185.310561][ T7285] ? __pfx___mutex_trylock_common+0x10/0x10 [ 185.310597][ T7285] ? rcu_is_watching+0x16/0xb0 [ 185.310628][ T7285] ? trace_contention_end+0x3d/0x140 [ 185.310670][ T7285] ? nf_setsockopt+0x221/0x290 [ 185.310710][ T7285] ? __mutex_unlock_slowpath+0x731/0x900 [ 185.310752][ T7285] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.310803][ T7285] nf_setsockopt+0x26f/0x290 [ 185.310840][ T7285] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 185.310868][ T7285] do_sock_setsockopt+0x17c/0x1b0 [ 185.310904][ T7285] __x64_sys_setsockopt+0x13d/0x1b0 [ 185.310939][ T7285] do_syscall_64+0x166/0x520 [ 185.310972][ T7285] ? trace_irq_disable+0x3b/0x140 [ 185.311001][ T7285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.311024][ T7285] ? clear_bhb_loop+0x70/0xc0 [ 185.311053][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.311076][ T7285] RIP: 0033:0x7f696859f559 [ 185.311098][ T7285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.311118][ T7285] RSP: 002b:00007f69693a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 185.311142][ T7285] RAX: ffffffffffffffda RBX: 00007f6968825fa0 RCX: 00007f696859f559 [ 185.311159][ T7285] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 185.311173][ T7285] RBP: 00007f6968636b50 R08: 0000000000000296 R09: 0000000000000000 [ 185.311188][ T7285] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000000 [ 185.311203][ T7285] R13: 00007f6968826038 R14: 00007f6968825fa0 R15: 00007ffd90894418 [ 185.311239][ T7285] [ 185.314663][ T7285] syz.1.424: vmalloc error: size 536870912, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 185.314736][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.1.424 Not tainted syzkaller #0 PREEMPT(full) [ 185.314761][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.314776][ T7285] Call Trace: [ 185.314784][ T7285] [ 185.314793][ T7285] dump_stack_lvl+0xe8/0x150 [ 185.314832][ T7285] warn_alloc+0x24d/0x270 [ 185.314858][ T7285] ? kasan_quarantine_put+0xbb/0x1f0 [ 185.314890][ T7285] ? __pfx_warn_alloc+0x10/0x10 [ 185.314916][ T7285] ? __get_vm_area_node+0x263/0x330 [ 185.314958][ T7285] ? __get_vm_area_node+0x263/0x330 [ 185.315000][ T7285] __vmalloc_node_range_noprof+0x396/0x16f0 [ 185.315026][ T7285] ? __lock_acquire+0x747/0x2de0 [ 185.315059][ T7285] ? rcu_is_watching+0x16/0xb0 [ 185.315097][ T7285] ? hrtimer_start_range_ns_common+0x7f6/0xb60 [ 185.315140][ T7285] ? lock_acquire+0x115/0x350 [ 185.315168][ T7285] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 185.315204][ T7285] ? do_replace+0x22f/0x470 [ 185.315225][ T7285] __vmalloc_noprof+0xd2/0x120 [ 185.315248][ T7285] ? do_replace+0x22f/0x470 [ 185.315279][ T7285] do_replace+0x22f/0x470 [ 185.315312][ T7285] ? __pfx_do_replace+0x10/0x10 [ 185.315347][ T7285] ? bpf_lsm_capable+0x9/0x20 [ 185.315379][ T7285] ? security_capable+0x7e/0x2c0 [ 185.315418][ T7285] do_ebt_set_ctl+0x2fb/0x1020 [ 185.315444][ T7285] ? __lock_acquire+0x747/0x2de0 [ 185.315470][ T7285] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 185.315499][ T7285] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 185.315531][ T7285] ? ip4_datagram_release_cb+0x976/0xbe0 [ 185.315567][ T7285] ? __mutex_trylock_common+0x15f/0x270 [ 185.315602][ T7285] ? __pfx___mutex_trylock_common+0x10/0x10 [ 185.315642][ T7285] ? rcu_is_watching+0x16/0xb0 [ 185.315674][ T7285] ? trace_contention_end+0x3d/0x140 [ 185.315715][ T7285] ? nf_setsockopt+0x221/0x290 [ 185.315751][ T7285] ? __mutex_unlock_slowpath+0x731/0x900 [ 185.315792][ T7285] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.315844][ T7285] nf_setsockopt+0x26f/0x290 [ 185.315880][ T7285] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 185.315909][ T7285] do_sock_setsockopt+0x17c/0x1b0 [ 185.315944][ T7285] __x64_sys_setsockopt+0x13d/0x1b0 [ 185.315979][ T7285] do_syscall_64+0x166/0x520 [ 185.316012][ T7285] ? trace_irq_disable+0x3b/0x140 [ 185.316041][ T7285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.316065][ T7285] ? clear_bhb_loop+0x70/0xc0 [ 185.316093][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.316116][ T7285] RIP: 0033:0x7f696859f559 [ 185.316138][ T7285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.316158][ T7285] RSP: 002b:00007f69693a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 185.316182][ T7285] RAX: ffffffffffffffda RBX: 00007f6968825fa0 RCX: 00007f696859f559 [ 185.316199][ T7285] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 185.316213][ T7285] RBP: 00007f6968636b50 R08: 0000000000000296 R09: 0000000000000000 [ 185.316228][ T7285] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000000 [ 185.316243][ T7285] R13: 00007f6968826038 R14: 00007f6968825fa0 R15: 00007ffd90894418 [ 185.316280][ T7285] [ 185.454233][ T7285] Mem-Info: [ 185.454250][ T7285] active_anon:6100 inactive_anon:0 isolated_anon:0 [ 185.454250][ T7285] active_file:0 inactive_file:42687 isolated_file:0 [ 185.454250][ T7285] unevictable:0 dirty:154 writeback:0 [ 185.454250][ T7285] slab_reclaimable:10450 slab_unreclaimable:98899 [ 185.454250][ T7285] mapped:25069 shmem:527 pagetables:1286 [ 185.454250][ T7285] sec_pagetables:0 bounce:0 [ 185.454250][ T7285] kernel_misc_reclaimable:0 [ 185.454250][ T7285] free:1325366 free_pcp:16583 free_cma:0 [ 185.454320][ T7285] Node 0 active_anon:24400kB inactive_anon:0kB active_file:0kB inactive_file:170548kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100276kB dirty:564kB writeback:0kB shmem:2108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12300kB pagetables:5000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 185.454386][ T7285] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:52kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 185.454448][ T7285] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 185.454558][ T7285] lowmem_reserve[]: 0 2460 2461 2461 2461 [ 185.454599][ T7285] Node 0 DMA32 free:1358068kB boost:0kB min:33916kB low:42392kB high:50868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24400kB inactive_anon:0kB active_file:0kB inactive_file:170548kB unevictable:0kB writepending:564kB zspages:0kB present:3129332kB managed:2519516kB mlocked:0kB bounce:0kB free_pcp:66332kB local_pcp:48736kB free_cma:0kB [ 185.454679][ T7285] lowmem_reserve[]: 0 0 1 1 1 [ 185.454718][ T7285] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1320kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 185.454789][ T7285] lowmem_reserve[]: 0 0 0 0 0 [ 185.454827][ T7285] Node 1 Normal free:3928036kB boost:0kB min:55968kB low:69960kB high:83952kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:52kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 185.454895][ T7285] lowmem_reserve[]: 0 0 0 0 0 [ 185.454933][ T7285] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 185.455083][ T7285] Node 0 DMA32: 1761*4kB (UME) 844*8kB (UM) 263*16kB (UME) 119*32kB (UME) 48*64kB (UME) 23*128kB (UM) 18*256kB (UM) 7*512kB (ME) 9*1024kB (M) 3*2048kB (ME) 319*4096kB (UM) = 1358004kB [ 185.455271][ T7285] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 185.455388][ T7285] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 9*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 958*4096kB (UM) = 3928036kB [ 185.455569][ T7285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.455588][ T7285] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.455607][ T7285] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.455625][ T7285] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.497290][ T5755] usb 4-1: device descriptor read/64, error -71 [ 185.652045][ T5755] usb usb4-port1: attempt power cycle [ 185.694727][ T7287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.423'. [ 185.884485][ T7285] 43210 total pagecache pages [ 185.884501][ T7285] 0 pages in swap cache [ 185.884511][ T7285] Free swap = 124996kB [ 185.884520][ T7285] Total swap = 124996kB [ 185.884530][ T7285] 2097051 pages RAM [ 185.884538][ T7285] 0 pages HighMem/MovableOnly [ 185.884547][ T7285] 435226 pages reserved [ 185.884554][ T7285] 0 pages cma reserved [ 186.468513][ T5755] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 186.650468][ T7285] FAULT_INJECTION: forcing a failure. [ 186.650468][ T7285] name failslab, interval 1, probability 0, space 0, times 0 [ 186.650506][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.1.424 Not tainted syzkaller #0 PREEMPT(full) [ 186.650538][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.650553][ T7285] Call Trace: [ 186.650563][ T7285] [ 186.650574][ T7285] dump_stack_lvl+0xe8/0x150 [ 186.650619][ T7285] should_fail_ex+0x3eb/0x540 [ 186.650666][ T7285] should_failslab+0xa8/0x100 [ 186.650705][ T7285] __kmalloc_noprof+0xf9/0x710 [ 186.650732][ T7285] ? rcu_is_watching+0x16/0xb0 [ 186.650767][ T7285] ? tomoyo_realpath_from_path+0xf2/0x640 [ 186.650805][ T7285] ? tomoyo_realpath_from_path+0xf2/0x640 [ 186.650853][ T7285] tomoyo_realpath_from_path+0xf2/0x640 [ 186.650909][ T7285] tomoyo_check_open_permission+0x229/0x470 [ 186.650944][ T7285] ? tomoyo_check_open_permission+0x1d3/0x470 [ 186.650978][ T7285] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 186.651012][ T7285] ? __asan_memset+0x22/0x50 [ 186.651086][ T7285] ? mnt_get_write_access+0x66/0x280 [ 186.651133][ T7285] security_file_open+0xa9/0x240 [ 186.651166][ T7285] do_dentry_open+0x495/0x1360 [ 186.651219][ T7285] vfs_open_consume+0x4a/0x350 [ 186.651258][ T7285] ? path_openat+0x16e1/0x20f0 [ 186.651295][ T7285] path_openat+0x16fc/0x20f0 [ 186.651358][ T7285] do_file_open+0x23e/0x4a0 [ 186.651399][ T7285] ? __pfx_do_file_open+0x10/0x10 [ 186.651446][ T7285] ? __pfx_kfree_link+0x10/0x10 [ 186.651488][ T7285] ? _raw_spin_unlock+0x28/0x50 [ 186.651522][ T7285] ? alloc_fd+0x6af/0x760 [ 186.651563][ T7285] do_sys_openat2+0x115/0x200 [ 186.651589][ T7285] ? __se_sys_futex+0x3a8/0x450 [ 186.651629][ T7285] ? __pfx_do_sys_openat2+0x10/0x10 [ 186.651662][ T7285] ? rcu_is_watching+0x16/0xb0 [ 186.651703][ T7285] __x64_sys_openat+0x138/0x170 [ 186.651736][ T7285] do_syscall_64+0x166/0x520 [ 186.651774][ T7285] ? trace_irq_disable+0x3b/0x140 [ 186.651814][ T7285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.651841][ T7285] ? clear_bhb_loop+0x70/0xc0 [ 186.651872][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.651898][ T7285] RIP: 0033:0x7f696855fd8e [ 186.651923][ T7285] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.651945][ T7285] RSP: 002b:00007f69693a5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 186.651972][ T7285] RAX: ffffffffffffffda RBX: 00007f69693a66c0 RCX: 00007f696855fd8e [ 186.651992][ T7285] RDX: 0000000000000002 RSI: 00007f69693a5f90 RDI: ffffffffffffff9c [ 186.652010][ T7285] RBP: 00007f6968636b50 R08: 0000000000000000 R09: 0000000000000000 [ 186.652027][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.652042][ T7285] R13: 00007f6968826038 R14: 00007f6968825fa0 R15: 00007ffd90894418 [ 186.652091][ T7285] [ 186.735177][ T5755] usb 4-1: device descriptor read/8, error -71 [ 186.804417][ T7285] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.047367][ T5755] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 187.067982][ T5755] usb 4-1: device descriptor read/8, error -71 [ 187.177825][ T5755] usb usb4-port1: unable to enumerate USB device [ 188.197363][ T32] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 188.266797][ T5649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.280828][ T5649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.281681][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.283668][ T5649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.296475][ T5755] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 188.311812][ T5649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.381284][ T32] usb 2-1: New USB device found: idVendor=046d, idProduct=c20a, bcdDevice=0.40 [ 188.398179][ T32] usb 2-1: config 1 interface 0 has no altsetting 0 [ 188.414477][ T32] usb 2-1: string descriptor 0 read error: -22 [ 188.415877][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.441683][ T7307] netlink: 'syz.3.432': attribute type 20 has an invalid length. [ 188.489033][ T5755] usb 3-1: Using ep0 maxpacket: 16 [ 188.491345][ T5755] usb 3-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 188.585774][ T5755] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 188.585833][ T5755] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.585862][ T5755] usb 3-1: config 0 interface 0 has no altsetting 0 [ 188.599906][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.599968][ T5755] usb 3-1: Product: syz [ 188.599985][ T5755] usb 3-1: Manufacturer: syz [ 188.600000][ T5755] usb 3-1: SerialNumber: syz [ 188.604066][ T5755] usb 3-1: config 0 descriptor?? [ 188.991716][ T32] hid_parser_main: 4006 callbacks suppressed [ 188.991743][ T32] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 188.991775][ T32] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 188.991803][ T32] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 188.991832][ T32] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 188.991859][ T32] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 188.991887][ T32] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 188.991915][ T32] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 188.991943][ T32] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 188.991970][ T32] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 188.991998][ T32] logitech 0003:046D:C20A.0004: unknown main item tag 0x0 [ 189.181822][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.215470][ T32] logitech 0003:046D:C20A.0004: hidraw0: USB HID vff.7f Device [HID 046d:c20a] on usb-dummy_hcd.1-1/input0 [ 189.215520][ T32] logitech 0003:046D:C20A.0004: no inputs found [ 189.253952][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.353982][ T7313] udevd[7313]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 189.480498][ T5755] usb 3-1: USB disconnect, device number 38 [ 189.632599][ T7315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.433'. [ 189.663791][ T5796] usb 2-1: USB disconnect, device number 33 [ 189.716492][ T7316] FAULT_INJECTION: forcing a failure. [ 189.716492][ T7316] name failslab, interval 1, probability 0, space 0, times 0 [ 189.716528][ T7316] CPU: 1 UID: 0 PID: 7316 Comm: syz.3.433 Not tainted syzkaller #0 PREEMPT(full) [ 189.716554][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 189.716569][ T7316] Call Trace: [ 189.716578][ T7316] [ 189.716588][ T7316] dump_stack_lvl+0xe8/0x150 [ 189.716628][ T7316] should_fail_ex+0x3eb/0x540 [ 189.716670][ T7316] should_failslab+0xa8/0x100 [ 189.716704][ T7316] __kmalloc_noprof+0xf9/0x710 [ 189.716735][ T7316] ? tomoyo_encode+0x2ad/0x570 [ 189.716767][ T7316] ? tomoyo_encode+0x2ad/0x570 [ 189.716809][ T7316] tomoyo_encode+0x2ad/0x570 [ 189.716849][ T7316] tomoyo_realpath_from_path+0x5fd/0x640 [ 189.716896][ T7316] ? tomoyo_path_number_perm+0x219/0x5f0 [ 189.716926][ T7316] tomoyo_path_number_perm+0x246/0x5f0 [ 189.716959][ T7316] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 189.716986][ T7316] ? __lock_acquire+0x747/0x2de0 [ 189.717019][ T7316] ? lock_acquire+0x115/0x350 [ 189.717052][ T7316] ? do_futex+0x458/0x4e0 [ 189.717108][ T7316] ? __fget_files+0x2a/0x420 [ 189.717136][ T7316] ? __fget_files+0x2a/0x420 [ 189.717162][ T7316] ? __fget_files+0x2a/0x420 [ 189.717193][ T7316] security_file_ioctl+0xc3/0x2a0 [ 189.717223][ T7316] __se_sys_ioctl+0x47/0x170 [ 189.717256][ T7316] do_syscall_64+0x166/0x520 [ 189.717289][ T7316] ? trace_irq_disable+0x3b/0x140 [ 189.717318][ T7316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.717343][ T7316] ? clear_bhb_loop+0x70/0xc0 [ 189.717380][ T7316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.717404][ T7316] RIP: 0033:0x7faffe79f559 [ 189.717425][ T7316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.717445][ T7316] RSP: 002b:00007fafff714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.717470][ T7316] RAX: ffffffffffffffda RBX: 00007faffea26090 RCX: 00007faffe79f559 [ 189.717487][ T7316] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 189.717501][ T7316] RBP: 00007faffe836b50 R08: 0000000000000000 R09: 0000000000000000 [ 189.717516][ T7316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.717530][ T7316] R13: 00007faffea26128 R14: 00007faffea26090 R15: 00007ffc828672c8 [ 189.717566][ T7316] [ 189.899212][ T7316] ERROR: Out of memory at tomoyo_realpath_from_path. [ 190.313618][ T1181] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.574713][ T1181] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.674800][ T5649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.686483][ T5649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.694861][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.695847][ T5649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.696504][ T5649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.856388][ T7329] FAULT_INJECTION: forcing a failure. [ 190.856388][ T7329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.856424][ T7329] CPU: 1 UID: 0 PID: 7329 Comm: syz.2.437 Not tainted syzkaller #0 PREEMPT(full) [ 190.856449][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 190.856463][ T7329] Call Trace: [ 190.856471][ T7329] [ 190.856481][ T7329] dump_stack_lvl+0xe8/0x150 [ 190.856520][ T7329] should_fail_ex+0x3eb/0x540 [ 190.856560][ T7329] _copy_from_user+0x2d/0xb0 [ 190.856584][ T7329] do_replace+0x305/0x470 [ 190.856610][ T7329] ? __pfx_do_replace+0x10/0x10 [ 190.856645][ T7329] ? bpf_lsm_capable+0x9/0x20 [ 190.856676][ T7329] ? security_capable+0x7e/0x2c0 [ 190.856713][ T7329] do_ebt_set_ctl+0x2fb/0x1020 [ 190.856740][ T7329] ? __lock_acquire+0x747/0x2de0 [ 190.856766][ T7329] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 190.856797][ T7329] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 190.856829][ T7329] ? ip4_datagram_release_cb+0x976/0xbe0 [ 190.856863][ T7329] ? __mutex_trylock_common+0x15f/0x270 [ 190.856898][ T7329] ? __pfx___mutex_trylock_common+0x10/0x10 [ 190.856933][ T7329] ? rcu_is_watching+0x16/0xb0 [ 190.856964][ T7329] ? trace_contention_end+0x3d/0x140 [ 190.857007][ T7329] ? nf_setsockopt+0x221/0x290 [ 190.857046][ T7329] ? __mutex_unlock_slowpath+0x731/0x900 [ 190.857088][ T7329] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.857137][ T7329] nf_setsockopt+0x26f/0x290 [ 190.857173][ T7329] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 190.857201][ T7329] do_sock_setsockopt+0x17c/0x1b0 [ 190.857245][ T7329] __x64_sys_setsockopt+0x13d/0x1b0 [ 190.857279][ T7329] do_syscall_64+0x166/0x520 [ 190.857311][ T7329] ? trace_irq_disable+0x3b/0x140 [ 190.857339][ T7329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.857362][ T7329] ? clear_bhb_loop+0x70/0xc0 [ 190.857389][ T7329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.857412][ T7329] RIP: 0033:0x7f0d0cb9f559 [ 190.857432][ T7329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.857451][ T7329] RSP: 002b:00007f0d0dac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.857475][ T7329] RAX: ffffffffffffffda RBX: 00007f0d0ce25fa0 RCX: 00007f0d0cb9f559 [ 190.857492][ T7329] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 190.857505][ T7329] RBP: 00007f0d0dac9090 R08: 0000000000000296 R09: 0000000000000000 [ 190.857519][ T7329] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000002 [ 190.857533][ T7329] R13: 00007f0d0ce26038 R14: 00007f0d0ce25fa0 R15: 00007ffd6d105f48 [ 190.857568][ T7329] [ 191.156266][ T7329] FAULT_INJECTION: forcing a failure. [ 191.156266][ T7329] name fail_futex, interval 1, probability 0, space 0, times 0 [ 191.156300][ T7329] CPU: 1 UID: 0 PID: 7329 Comm: syz.2.437 Not tainted syzkaller #0 PREEMPT(full) [ 191.156325][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.156339][ T7329] Call Trace: [ 191.156348][ T7329] [ 191.156357][ T7329] dump_stack_lvl+0xe8/0x150 [ 191.156400][ T7329] should_fail_ex+0x3eb/0x540 [ 191.156441][ T7329] get_futex_key+0x1ab/0x1410 [ 191.156485][ T7329] ? __pfx_get_futex_key+0x10/0x10 [ 191.156520][ T7329] ? update_se+0x90/0x1080 [ 191.156556][ T7329] futex_wait_setup+0x4a/0x590 [ 191.156588][ T7329] ? __futex_wait+0xdb/0x470 [ 191.156617][ T7329] __futex_wait+0x175/0x470 [ 191.156641][ T7329] ? update_protect_slice+0x45/0x320 [ 191.156671][ T7329] ? __pfx___futex_wait+0x10/0x10 [ 191.156701][ T7329] ? __pfx_futex_wake_mark+0x10/0x10 [ 191.156728][ T7329] ? try_to_wake_up+0x8ce/0x14e0 [ 191.156766][ T7329] futex_wait+0x121/0x390 [ 191.156793][ T7329] ? __pfx_futex_wait+0x10/0x10 [ 191.156839][ T7329] do_futex+0x3e7/0x4e0 [ 191.156877][ T7329] ? __pfx_do_futex+0x10/0x10 [ 191.156909][ T7329] ? kmem_cache_free+0x182/0x650 [ 191.156945][ T7329] __se_sys_futex+0x3a8/0x450 [ 191.156986][ T7329] ? __pfx___se_sys_futex+0x10/0x10 [ 191.157019][ T7329] ? rcu_is_watching+0x16/0xb0 [ 191.157057][ T7329] ? __x64_sys_futex+0x21/0xf0 [ 191.157092][ T7329] do_syscall_64+0x166/0x520 [ 191.157127][ T7329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.157150][ T7329] ? clear_bhb_loop+0x70/0xc0 [ 191.157177][ T7329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.157200][ T7329] RIP: 0033:0x7f0d0cb9f559 [ 191.157228][ T7329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.157246][ T7329] RSP: 002b:00007f0d0dac90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 191.157268][ T7329] RAX: ffffffffffffffda RBX: 00007f0d0ce25fa8 RCX: 00007f0d0cb9f559 [ 191.157286][ T7329] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0d0ce25fa8 [ 191.157300][ T7329] RBP: 00007f0d0ce25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 191.157314][ T7329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.157328][ T7329] R13: 00007f0d0ce26038 R14: 00007ffd6d105e60 R15: 00007ffd6d105f48 [ 191.157364][ T7329] [ 191.422597][ T5718] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 191.423432][ T1181] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.664150][ T7333] FAULT_INJECTION: forcing a failure. [ 191.664150][ T7333] name failslab, interval 1, probability 0, space 0, times 0 [ 191.664194][ T7333] CPU: 1 UID: 0 PID: 7333 Comm: syz.2.438 Not tainted syzkaller #0 PREEMPT(full) [ 191.664220][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.664234][ T7333] Call Trace: [ 191.664243][ T7333] [ 191.664252][ T7333] dump_stack_lvl+0xe8/0x150 [ 191.664292][ T7333] should_fail_ex+0x3eb/0x540 [ 191.664333][ T7333] should_failslab+0xa8/0x100 [ 191.664368][ T7333] __kmalloc_cache_noprof+0x9e/0x600 [ 191.664396][ T7333] ? alloc_fs_context+0x66/0xd00 [ 191.664426][ T7333] ? alloc_fs_context+0x66/0xd00 [ 191.664463][ T7333] alloc_fs_context+0x66/0xd00 [ 191.664496][ T7333] ? __se_sys_fsopen+0x109/0x370 [ 191.664535][ T7333] __se_sys_fsopen+0x118/0x370 [ 191.664572][ T7333] do_syscall_64+0x166/0x520 [ 191.664606][ T7333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.664648][ T7333] ? clear_bhb_loop+0x70/0xc0 [ 191.664678][ T7333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.664700][ T7333] RIP: 0033:0x7f0d0cb9f559 [ 191.664722][ T7333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.664742][ T7333] RSP: 002b:00007f0d0dac9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 191.664766][ T7333] RAX: ffffffffffffffda RBX: 00007f0d0ce25fa0 RCX: 00007f0d0cb9f559 [ 191.664784][ T7333] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 191.664798][ T7333] RBP: 00007f0d0cc36b50 R08: 0000000000000000 R09: 0000000000000000 [ 191.664813][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.664827][ T7333] R13: 00007f0d0ce26038 R14: 00007f0d0ce25fa0 R15: 00007ffd6d105f48 [ 191.664864][ T7333] [ 191.869517][ T5718] usb 4-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 191.938962][ T5718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.939028][ T5718] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 191.939074][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.065572][ T1181] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.091423][ T5718] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 192.235959][ T7322] netlink: 'syz.3.435': attribute type 58 has an invalid length. [ 192.235985][ T7322] netlink: 152 bytes leftover after parsing attributes in process `syz.3.435'. [ 192.440418][ T5300] 8021q: adding VLAN 0 to HW filter on device eth5 [ 192.488420][ T1181] bridge_slave_1: left allmulticast mode [ 192.488450][ T1181] bridge_slave_1: left promiscuous mode [ 192.488688][ T1181] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.528696][ T1181] bridge_slave_0: left allmulticast mode [ 192.528724][ T1181] bridge_slave_0: left promiscuous mode [ 192.533208][ T1181] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.541340][ T5718] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 4) [ 193.088080][ T5643] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 193.211659][ T5654] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.215802][ T5654] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.235261][ T5654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.248348][ T5643] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 193.251659][ T5643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.251695][ T5643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.251723][ T5643] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.251774][ T5643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.338984][ T5654] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.339815][ T5654] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.519533][ T1181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.572921][ T5643] usb 3-1: config 0 descriptor?? [ 193.731098][ T1181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.733304][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.444'. [ 193.754381][ T1181] bond0 (unregistering): Released all slaves [ 194.400896][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.400969][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.608804][ T5300] 8021q: adding VLAN 0 to HW filter on device eth6 [ 194.633828][ T5643] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 194.666577][ T5718] usb 4-1: USB disconnect, device number 40 [ 194.733541][ T5643] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 194.785022][ T7355] udevd[7355]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 195.015085][ T5300] 8021q: adding VLAN 0 to HW filter on device eth7 [ 195.287269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 195.317268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 195.397264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 195.860959][ C1] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 196.155990][ T5643] usb 3-1: reset high-speed USB device number 39 using dummy_hcd [ 196.476240][ T5300] 8021q: adding VLAN 0 to HW filter on device eth8 [ 196.933140][ T5649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.950613][ T5649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.966847][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.007124][ T5755] usb 3-1: USB disconnect, device number 39 [ 197.099391][ T5649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.102251][ T5649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.534535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 197.556375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 197.586770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 197.606405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 197.646443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 197.676379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 197.696877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 198.516162][ T1181] hsr_slave_0: left promiscuous mode [ 198.617417][ T1181] hsr_slave_1: left promiscuous mode [ 198.618445][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.618468][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.207049][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.207077][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.202766][ T1181] veth1_macvtap: left promiscuous mode [ 202.202812][ T1181] veth0_macvtap: left promiscuous mode [ 202.202921][ T1181] veth1_vlan: left promiscuous mode [ 202.202997][ T1181] veth0_vlan: left promiscuous mode [ 204.601735][ T7403] vivid-002: disconnect [ 204.646407][ T7400] vivid-002: reconnect [ 204.865882][ T5648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.886381][ T5648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.901916][ T5648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.913330][ T5648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.914397][ T5648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.201510][ T1181] team0 (unregistering): Port device team_slave_1 removed [ 206.279904][ T1181] team0 (unregistering): Port device team_slave_0 removed [ 206.721472][ T5653] Bluetooth: hci1: command 0x0406 tx timeout [ 206.721523][ T5653] Bluetooth: hci3: command 0x0406 tx timeout [ 206.722602][ T5648] Bluetooth: hci0: command 0x0c20 tx timeout [ 211.387291][ C0] sched: DL replenish lagged too much [ 256.576007][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.585147][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.681643][ T7431] syz.3.459 (7431) used greatest stack depth: 19040 bytes left [ 303.889247][ T5654] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 317.832372][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.840505][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.472430][ T7432] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 372.394642][ T36] INFO: task dhcpcd:5300 blocked for more than 147 seconds. [ 372.394675][ T36] Not tainted syzkaller #0 [ 372.394696][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.394707][ T36] task:dhcpcd state:D stack:21416 pid:5300 tgid:5300 ppid:5299 task_flags:0x400140 flags:0x00080000 [ 372.394788][ T36] Call Trace: [ 372.394797][ T36] [ 372.394812][ T36] __schedule+0x17dd/0x5830 [ 372.394883][ T36] ? __pfx___schedule+0x10/0x10 [ 372.394926][ T36] ? schedule+0x90/0x2b0 [ 372.394961][ T36] schedule+0x164/0x2b0 [ 372.394995][ T36] schedule_preempt_disabled+0x13/0x30 [ 372.395027][ T36] __mutex_lock+0x7c4/0x15a0 [ 372.395066][ T36] ? __mutex_lock+0x5cd/0x15a0 [ 372.395105][ T36] ? inet_rtm_newaddr+0x470/0x19f0 [ 372.395136][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 372.395185][ T36] ? __nla_parse+0x40/0x60 [ 372.395216][ T36] inet_rtm_newaddr+0x470/0x19f0 [ 372.395249][ T36] ? kernel_text_address+0xa5/0xe0 [ 372.395277][ T36] ? __pfx_hook_capable+0x10/0x10 [ 372.395310][ T36] ? unwind_get_return_address+0x4d/0x90 [ 372.395337][ T36] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 372.395366][ T36] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 372.395418][ T36] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 372.395444][ T36] rtnetlink_rcv_msg+0x802/0xc00 [ 372.395480][ T36] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 372.395510][ T36] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 372.395541][ T36] ? __lock_acquire+0x747/0x2de0 [ 372.395581][ T36] netlink_rcv_skb+0x226/0x4a0 [ 372.395608][ T36] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 372.395640][ T36] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.395687][ T36] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.395712][ T36] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.395744][ T36] netlink_unicast+0x8ef/0xa80 [ 372.395801][ T36] netlink_sendmsg+0x7f0/0xb20 [ 372.395834][ T36] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.395865][ T36] ? aa_sock_msg_perm+0x144/0x210 [ 372.395902][ T36] ? apparmor_socket_sendmsg+0x98/0x360 [ 372.395934][ T36] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.395959][ T36] sock_sendmsg_nosec+0x14e/0x190 [ 372.395988][ T36] ____sys_sendmsg+0x54e/0x850 [ 372.396025][ T36] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.396068][ T36] ? import_iovec+0x73/0xa0 [ 372.396107][ T36] ___sys_sendmsg+0x2a6/0x360 [ 372.396136][ T36] ? count_memcg_event_mm+0x21/0x260 [ 372.396173][ T36] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.396246][ T36] ? __pfx_handle_mm_fault+0x10/0x10 [ 372.396277][ T36] ? lock_vma_under_rcu+0x45a/0x500 [ 372.396321][ T36] __x64_sys_sendmsg+0x1b1/0x290 [ 372.396355][ T36] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.396411][ T36] do_syscall_64+0x166/0x520 [ 372.396444][ T36] ? trace_irq_disable+0x3b/0x140 [ 372.396472][ T36] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.396495][ T36] ? clear_bhb_loop+0x70/0xc0 [ 372.396531][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.396561][ T36] RIP: 0033:0x7fdd3c07e407 [ 372.396582][ T36] RSP: 002b:00007fffdc30b590 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 372.396606][ T36] RAX: ffffffffffffffda RBX: 00007fdd3bff4780 RCX: 00007fdd3c07e407 [ 372.396623][ T36] RDX: 0000000000000000 RSI: 00007fffdc31f770 RDI: 0000000000000004 [ 372.396637][ T36] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 372.396650][ T36] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffdc32f9a0 [ 372.396665][ T36] R13: 00007fdd3bff4708 R14: 0000000000000044 R15: 00007fffdc31f770 [ 372.396710][ T36] [ 372.396767][ T36] INFO: task syz.1.458:7419 blocked for more than 147 seconds. [ 372.396784][ T36] Not tainted syzkaller #0 [ 372.396796][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.396806][ T36] task:syz.1.458 state:D stack:28336 pid:7419 tgid:7417 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 372.396871][ T36] Call Trace: [ 372.396880][ T36] [ 372.396893][ T36] __schedule+0x17dd/0x5830 [ 372.396947][ T36] ? do_raw_spin_lock+0x12b/0x2f0 [ 372.396988][ T36] ? __pfx___schedule+0x10/0x10 [ 372.397029][ T36] ? schedule+0x90/0x2b0 [ 372.397063][ T36] schedule+0x164/0x2b0 [ 372.397097][ T36] schedule_preempt_disabled+0x13/0x30 [ 372.397128][ T36] __mutex_lock+0x7c4/0x15a0 [ 372.406929][ T36] ? __mutex_lock+0x5cd/0x15a0 [ 372.406980][ T36] ? devinet_ioctl+0x2fb/0x1c50 [ 372.407008][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 372.407052][ T36] ? bpf_lsm_capable+0x9/0x20 [ 372.407084][ T36] ? security_capable+0x7e/0x2c0 [ 372.407122][ T36] devinet_ioctl+0x2fb/0x1c50 [ 372.426536][ T36] ? __might_fault+0xaf/0x130 [ 372.426670][ T36] ? __pfx_devinet_ioctl+0x10/0x10 [ 372.426717][ T36] ? get_user_ifreq+0x12b/0x180 [ 372.426779][ T36] inet_ioctl+0x42a/0x560 [ 372.426830][ T36] ? __pfx_inet_ioctl+0x10/0x10 [ 372.426886][ T36] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 372.426920][ T36] ? packet_ioctl+0x26b/0x350 [ 372.426957][ T36] sock_do_ioctl+0x101/0x320 [ 372.426983][ T36] ? __pfx_sock_do_ioctl+0x10/0x10 [ 372.427016][ T36] ? do_futex+0x3e7/0x4e0 [ 372.427067][ T36] sock_ioctl+0x57a/0x7e0 [ 372.427102][ T36] ? __fget_files+0x2a/0x420 [ 372.427127][ T36] ? __pfx_sock_ioctl+0x10/0x10 [ 376.353066][ T36] ? __fget_files+0x2a/0x420 [ 376.353107][ T36] ? __fget_files+0x2a/0x420 [ 376.353138][ T36] ? bpf_lsm_file_ioctl+0x9/0x20 [ 376.353169][ T36] ? __pfx_sock_ioctl+0x10/0x10 [ 376.353205][ T36] __se_sys_ioctl+0xfc/0x170 [ 376.353240][ T36] do_syscall_64+0x166/0x520 [ 376.353272][ T36] ? trace_irq_disable+0x3b/0x140 [ 376.353301][ T36] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.353326][ T36] ? clear_bhb_loop+0x70/0xc0 [ 376.353354][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.353386][ T36] RIP: 0033:0x7f696859f559 [ 376.353407][ T36] RSP: 002b:00007f6969385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.353432][ T36] RAX: ffffffffffffffda RBX: 00007f6968826090 RCX: 00007f696859f559 [ 376.353449][ T36] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 376.353464][ T36] RBP: 00007f6968636b50 R08: 0000000000000000 R09: 0000000000000000 [ 376.353478][ T36] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.353492][ T36] R13: 00007f6968826128 R14: 00007f6968826090 R15: 00007ffd90894418 [ 376.353529][ T36] [ 376.353546][ T36] INFO: task syz.2.454:7424 blocked for more than 151 seconds. [ 376.353563][ T36] Not tainted syzkaller #0 [ 376.353575][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.353585][ T36] task:syz.2.454 state:D stack:28808 pid:7424 tgid:7423 ppid:5640 task_flags:0x400040 flags:0x00080002 [ 376.353652][ T36] Call Trace: [ 376.353660][ T36] [ 376.353674][ T36] __schedule+0x17dd/0x5830 [ 376.353737][ T36] ? __pfx___schedule+0x10/0x10 [ 376.353780][ T36] ? schedule+0x90/0x2b0 [ 376.353815][ T36] schedule+0x164/0x2b0 [ 376.353849][ T36] schedule_preempt_disabled+0x13/0x30 [ 376.353880][ T36] __mutex_lock+0x7c4/0x15a0 [ 376.353919][ T36] ? __mutex_lock+0x5cd/0x15a0 [ 376.353958][ T36] ? do_ip_setsockopt+0xe95/0x2e30 [ 376.353995][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 376.354041][ T36] ? __pfx___mutex_trylock_common+0x10/0x10 [ 376.354082][ T36] do_ip_setsockopt+0xe95/0x2e30 [ 376.354123][ T36] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 376.354157][ T36] ? __lock_acquire+0x747/0x2de0 [ 376.354185][ T36] ? smc_setsockopt+0x174/0xb40 [ 376.354219][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 376.354270][ T36] ip_setsockopt+0x66/0x110 [ 376.354304][ T36] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 376.354332][ T36] smc_setsockopt+0x232/0xb40 [ 376.354379][ T36] ? __pfx_smc_setsockopt+0x10/0x10 [ 376.354415][ T36] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 376.354441][ T36] ? __pfx_smc_setsockopt+0x10/0x10 [ 376.354474][ T36] do_sock_setsockopt+0x17c/0x1b0 [ 376.354510][ T36] __x64_sys_setsockopt+0x13d/0x1b0 [ 376.354545][ T36] do_syscall_64+0x166/0x520 [ 376.354578][ T36] ? trace_irq_disable+0x3b/0x140 [ 376.354604][ T36] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.354628][ T36] ? clear_bhb_loop+0x70/0xc0 [ 376.354656][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.354679][ T36] RIP: 0033:0x7f0d0cb9f559 [ 376.354698][ T36] RSP: 002b:00007f0d0dac9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 376.354720][ T36] RAX: ffffffffffffffda RBX: 00007f0d0ce25fa0 RCX: 00007f0d0cb9f559 [ 376.354737][ T36] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000003 [ 376.354751][ T36] RBP: 00007f0d0cc36b50 R08: 0000000000000000 R09: 0000000000000000 [ 376.354766][ T36] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.354779][ T36] R13: 00007f0d0ce26038 R14: 00007f0d0ce25fa0 R15: 00007ffd6d105f48 [ 376.354816][ T36] [ 376.354841][ T36] [ 376.354841][ T36] Showing all locks held in the system: [ 376.354856][ T36] locks held by kworker/0:0/10: 4, on CPU#0: [ 376.354873][ T36] #0: ffff88807f5be548 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.354944][ T36] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.355024][ T36] #2: ffff88807a311480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 376.355081][ T36] #3: ffff88807ae8dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 376.355140][ T36] locks held by kworker/1:1/32: 3, last CPU#1: [ 376.355156][ T36] #0: ffff88807f5bd948 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.355222][ T36] #1: ffffc90000a87c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.355301][ T36] #2: ffff88807aec9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 376.355364][ T36] locks held by pr/ttyS0/35: 1, last CPU#0: [ 376.355380][ T36] #0: ffffffff90033f18 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 376.355438][ T36] locks held by khungtaskd/36: 1, last CPU#0: [ 376.355454][ T36] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 376.355513][ T36] locks held by kworker/u8:3/53: 3, last CPU#0: [ 376.355529][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.355590][ T36] #1: ffffc90000bd7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.355654][ T36] #2: ffff88807b655258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 376.355718][ T36] locks held by kworker/u8:5/96: 3, last CPU#0: [ 376.355734][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.355795][ T36] #1: ffffc9000254fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.355857][ T36] #2: ffff888079b4f258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 376.355926][ T36] locks held by kworker/u8:8/1020: 3, last CPU#0: [ 376.355942][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.356003][ T36] #1: ffffc90004e07c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.356066][ T36] #2: ffff88807ba73258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 376.356124][ T36] locks held by kworker/u8:9/1166: 4, last CPU#0: [ 376.356141][ T36] #0: ffff888078764148 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.356206][ T36] #1: ffffc900052f7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.356287][ T36] #2: ffff88807868d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 376.356343][ T36] #3: ffff88807ae2f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 376.356407][ T36] locks held by kworker/u8:10/1181: 4, on CPU#1: [ 376.356423][ T36] #0: ffff88801d69e148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.356484][ T36] #1: ffffc900052e7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.356558][ T36] #2: ffffffff916b1308 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 376.356615][ T36] #3: ffffffff916bffe0 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x310 [ 376.356685][ T36] locks held by klogd/4994: 1, last CPU#1: [ 376.356701][ T36] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 376.356754][ T36] locks held by udevd/5005: 4, last CPU#0: [ 376.356770][ T36] #0: ffffffff9023a5b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470 [ 376.356828][ T36] #1: ffff88807ea3b440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18a/0x1e10 [ 376.356880][ T36] #2: ffff888033ea4cc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x277/0x1e10 [ 376.365788][ T36] #3: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.365864][ T36] locks held by dhcpcd/5300: 1, on CPU#0: [ 376.365880][ T36] #0: ffffffff916bffe0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 376.365941][ T36] locks held by getty/5396: 2, on CPU#0: [ 376.365957][ T36] #0: ffff8880369fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 376.366023][ T36] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 376.366084][ T36] locks held by syz-executor/5626: 2, last CPU#0: [ 376.366100][ T36] #0: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.366155][ T36] #1: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 376.366230][ T36] locks held by kworker/0:3/5628: 3, last CPU#0: [ 376.366246][ T36] #0: ffff88805b05c148 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.366315][ T36] #1: ffffc900039ffc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.366403][ T36] #2: ffff88807ae8b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 376.366460][ T36] locks held by syz-executor/5637: 1, last CPU#0: [ 376.366476][ T36] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 376.366534][ T36] locks held by kworker/1:3/5643: 2, last CPU#1: [ 376.366550][ T36] #0: ffff88813fe21d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.366612][ T36] #1: ffffc900042bfc40 ((work_completion)(&(&gc->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.366677][ T36] locks held by kworker/0:4/5718: 3, last CPU#0: [ 376.366693][ T36] #0: ffff88805b05d948 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.366760][ T36] #1: ffffc900045cfc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.366852][ T36] #2: ffff88807b45c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 376.366911][ T36] locks held by kworker/1:4/5745: 6, last CPU#1: [ 376.366927][ T36] #0: ffff88805b05d948 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.366993][ T36] #1: ffffc90004c5fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 376.367074][ T36] #2: ffff88807646d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 376.367129][ T36] #3: ffffffff9015a420 [ 379.543324][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.551597][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.626152][ T36] (rcu_read_lock){....}-{1:3}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 380.626212][ T36] #4: ffff8880b833c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 380.626278][ T36] #5: ffff8880b8324708 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 380.626339][ T36] locks held by kworker/1:5/5755: 4, on CPU#1: [ 380.626356][ T36] #0: ffff88805b05c148 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.626424][ T36] #1: ffffc90004cefc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.626513][ T36] #2: ffff8880349f5480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 380.626569][ T36] #3: ffff88807ae8b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 380.626626][ T36] locks held by kworker/0:7/6560: 2, last CPU#0: [ 380.626642][ T36] #0: ffff88813fe21d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.626704][ T36] #1: ffffc9000eaffc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.626768][ T36] locks held by kworker/u8:11/7026: 2, last CPU#0: [ 380.626784][ T36] #0: ffff88802c926148 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.626850][ T36] #1: ffffc90004d67c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.626911][ T36] locks held by kworker/u8:12/7028: 4, last CPU#0: [ 380.626928][ T36] #0: ffff888078760948 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.626999][ T36] #1: ffffc90004d57c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.627061][ T36] #2: ffff88807a311480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 380.627115][ T36] #3: ffff88807ae8d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 380.649673][ T36] locks held by kworker/u8:13/7029: 3, on CPU#1: [ 380.649692][ T36] #0: ffff88801ebb9148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.649757][ T36] #1: ffffc9000ebafc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.649820][ T36] #2: ffffffff916bffe0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 380.649885][ T36] locks held by kworker/u8:14/7031: 4, last CPU#1: [ 380.649901][ T36] #0: ffff88803255b148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.649962][ T36] #1: ffffc90004d37c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.650024][ T36] #2: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 380.650081][ T36] #3: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 380.650137][ T36] locks held by syz.1.458/7418: 3, last CPU#0: [ 380.650154][ T36] #0: ffffffff916bffe0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 380.650212][ T36] #1: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 380.650268][ T36] #2: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 380.650326][ T36] locks held by syz.1.458/7419: 1, on CPU#0: [ 380.650342][ T36] #0: ffffffff916bffe0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 380.650395][ T36] locks held by syz.2.454/7424: 2, on CPU#1: [ 380.650411][ T36] #0: ffff8880765b1830 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x174/0xb40 [ 380.650473][ T36] #1: ffffffff916bffe0 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xe95/0x2e30 [ 380.650545][ T36] locks held by syz-executor/7429: 1, last CPU#0: [ 380.650561][ T36] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 380.650619][ T36] locks held by syz-executor/7433: 3, last CPU#0: [ 380.650636][ T36] #0: ffffffff90907b98 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 380.650695][ T36] #1: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 380.650751][ T36] #2: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 380.650809][ T36] locks held by kworker/u8:16/7434: 2, last CPU#0: [ 380.650825][ T36] #0: ffff88813fe63948 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.650887][ T36] #1: ffffc90003e4fc40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.650949][ T36] locks held by kworker/u8:17/7435: 3, last CPU#0: [ 380.650966][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.651027][ T36] #1: ffffc9000325fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.651090][ T36] #2: ffff888034b21258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 380.651153][ T36] locks held by syz-executor/7436: 5, last CPU#0: [ 380.651169][ T36] #0: ffff888025ad2478 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 380.651235][ T36] #1: ffff888076a45e20 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 380.651306][ T36] #2: ffff888025ad0950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 380.651362][ T36] #3: ffff888035678218 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0xacb/0x1c60 [ 380.651423][ T36] #4: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 380.651479][ T36] locks held by kworker/1:7/7437: 3, on CPU#1: [ 380.651503][ T36] #0: ffff88813fe22d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.651564][ T36] #1: ffffc900036afc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 380.651624][ T36] #2: ffffffff916bffe0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20