last executing test programs: 1m37.331183031s ago: executing program 2 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x2, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004081}, 0x20004851) write(r0, &(0x7f0000000000)='7', 0x1) syz_clone(0x940000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m36.673277378s ago: executing program 2 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) syz_clone(0x940000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m35.99868539s ago: executing program 2 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f") 1m35.379902171s ago: executing program 2 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r0, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x6458, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x800) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000400)='./file0/../file0/../file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b00), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14, r5, 0x200, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x24008010) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x60, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000000)='./file1/file0\x00') 1m34.23893877s ago: executing program 2 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) syz_clone(0x940000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 1m33.655455454s ago: executing program 2 (id=113): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_io_uring_complete(0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', r3, 0x20, 0x40, 0x580000, 0x2, {{0x5, 0x4, 0x0, 0x2d, 0x14, 0x66, 0x0, 0x5, 0x4, 0x0, @multicast2, @loopback}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020027bd7000fcdbdf250500000008000500fbffffff0c00018008000100", @ANYRES32=r4, @ANYBLOB="ce1ec5fc2392323c1f6da78eb36ba4f60600f09b31472361c72afab3c08e684ed5a515764e3632ac93d44fefeb54c997f20c5d65e299782bfcf924fb6dada71be3349cfa19400e28f7340dff6e5e4f88e233704c78aa882bf3b0eb461eeee18a7a6616eff22e8d3267770500a5d0e4fffd557c1946620312e82686564c886eb274805d36ce2cbe10be62dc9405e83c2fbc5b261ed549b17a"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4004004) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) truncate(&(0x7f0000000080)='./file1\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x2000000000000) 1m32.678711656s ago: executing program 32 (id=113): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_io_uring_complete(0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', r3, 0x20, 0x40, 0x580000, 0x2, {{0x5, 0x4, 0x0, 0x2d, 0x14, 0x66, 0x0, 0x5, 0x4, 0x0, @multicast2, @loopback}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020027bd7000fcdbdf250500000008000500fbffffff0c00018008000100", @ANYRES32=r4, @ANYBLOB="ce1ec5fc2392323c1f6da78eb36ba4f60600f09b31472361c72afab3c08e684ed5a515764e3632ac93d44fefeb54c997f20c5d65e299782bfcf924fb6dada71be3349cfa19400e28f7340dff6e5e4f88e233704c78aa882bf3b0eb461eeee18a7a6616eff22e8d3267770500a5d0e4fffd557c1946620312e82686564c886eb274805d36ce2cbe10be62dc9405e83c2fbc5b261ed549b17a"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4004004) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) truncate(&(0x7f0000000080)='./file1\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x2000000000000) 48.82108048s ago: executing program 1 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1fe) r0 = socket(0x1d, 0x2, 0x6) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)="2d2519", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) bind$inet6(r3, 0x0, 0x0) io_setup(0x7, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, &(0x7f0000000a00)="1c73de19da4e24a4be5c3011d88efffbb251589a5bef61f451a747474f315938cc426a841b78d07b04cc6f2d276323ea48a6fd1c0ba66f5055239df5a21b234315694fd58fe32aeaa543e5fe08ccdf3e689caa8cedec8010f8bb8c59eaa1ecbf0f6f66afde88c010b3138095b6a0116af9c9011f03cc24e087286f2553198568c0aea639920383723c52ce2839b5dcb5ecf2eb92eeb24271354e1719e92347b792d0402fb04bbbf78fbebbf4b4832385561e1010dd612da55e8f738b13288b548d333c1d174ade527cafb3fc6576c16cd2e71f68286e28d5d8a17ef63d253bc56ce36b8d4aef6c0a34d8b9463ce4535f9c1700a5bf7b0f217ae63d3d377ddbcf7d4dd2f3f8f08de60c87b1e07487cae176e2f76ea307fa1693d84328c7f751d6d997555964813b103ea44b6e2e8bcc09609c25e5d1e0f174c44dfed19aa2fc6e6a60c589909709ff6b1a8e3c7462427d11469f81fa4d9a69ee39b8f3824889f3ee0c5838a22832193d9f42bfcff8f1990746da71c109c82f51aaffbc9b33b03fe4993f4bfb59461c5a2e13514072283677447793cfe1e7bf5b48416b80a7e18e22cb13e0370f7bb9bf952c4c5355dbb8fe0d912f88d743c536db4b306075c2dcd59d602e75bb159f71e4f11192631fc338203c136c9efc5f05bf94d2fee1a6ad20f2c7e834e5be49ebedde2d9735f46eb08c6537d24f3f06589a4597f2d9378f", 0xffffffffffffffec, 0x200}]) read(r2, &(0x7f00000091c0)=""/16384, 0x4000) io_getevents(r4, 0x4, 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000140)) 47.665304122s ago: executing program 3 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror', 0x1e) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="04000000320000000000000090010000380100000100000000000000000000000000000000000000000000000000000074") 47.430688272s ago: executing program 1 (id=262): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000000209010100000000df"], 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) syz_usb_connect(0x3, 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010248304d10c5047910f337010203010902ae0001010110040904225d02a2adcf0209050400400008010083314292d6ddadd8842310745a0776ab19072054c3096ec38851868e06c26eeef36945031175eb25fd8ee1c936e6a7cf55ce227b6d8b0d71484d21db2fb79162b9267b24c5da14e894a7cd75d7e79765fe7728cc4bd1b75c6511a7d7582772a91a906aeba989956b184a59ee3995a54887653c1c7814da5aaa66c35301096acac7bf220725010004ffff0905830200"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x30}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 47.08202996s ago: executing program 3 (id=263): setns(0xc9, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x1, 0x97ff, &(0x7f0000000200)={0x2, 0x1f90, @local}, 0x10) 46.425173466s ago: executing program 3 (id=265): mkdirat(0xffffffffffffff9c, 0x0, 0x777) unshare(0x100000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0xa) lseek(r0, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYBLOB="031c"], 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) fspick(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/test/memory.oom_control\x00', 0x0) 44.995072733s ago: executing program 0 (id=268): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf58, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x2, @sdr={0x32314d48, 0x2fe}}) r1 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x2000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x0, {}, {0x0, 0xff, 0x4}, 0xfd}], 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001fc0)={'team_slave_1\x00', 0x7101}) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r8 = syz_ublk_setup_io_uring(0x5e59, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r9 = syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r12, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r11, &(0x7f00000009c0)='1', 0x1, 0x23000080000005}]) syz_ublk_setup_queues(r1, r2, &(0x7f00000001c0)={0x0, 0x9b5f, 0x200, 0x0, 0x250, 0x0, r8}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x321a, 0x1000, 0x2, 0x297, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdb6b, 0x8, 0x1, 0x389, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd573, 0x4, 0x1, 0xe6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc388, 0x1, 0x2, 0x216, 0x0, r0}}], 0x4, &(0x7f0000001680)={0x2e, 0x0, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, '\x00', {0x4, 0xe02, 0x0, &(0x7f0000000680)=@buf_1k="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"}}, &(0x7f0000001700)) 44.345739421s ago: executing program 0 (id=269): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x16, 0xfd, 0x0, 0xe4}]}, 0x10) 44.277454037s ago: executing program 1 (id=270): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(0x0, 0x4, 0x0, &(0x7f0000fd7ff0), 0x0, 0x0) futex(0x0, 0x5, 0x0, &(0x7f0000000180), &(0x7f0000048000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1dcc}, 0x1, 0x0, 0x0, 0x20044040}, 0x20004440) (fail_nth: 7) 44.032251318s ago: executing program 3 (id=271): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe}}, './debug/bluetooth/6lowpan_enable\x00'}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000540)={0x3, [0x8, 0xc6, 0x45a]}, &(0x7f00000006c0)=0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000940)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000800)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/124, 0x7c, 0x0, &(0x7f0000000780)=""/16, 0x10}, &(0x7f0000000840)=0x40) write(r3, &(0x7f0000000400)='1\n\x00', 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x0, 0x163) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$sndseq(r6, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick=0xf, {}, {}, @raw32}], 0x1c) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='c *:'], 0x11) close(r3) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20000000) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e00100100000000000518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000800) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902480001010010000904000000020600000524060000050000000004241b63"], 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 43.420595205s ago: executing program 0 (id=272): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x52, 0x201, 0x0, 0x25dfdbfd, {0x9}}, 0x14}}, 0x40044c4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) recvmmsg$unix(r1, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000004c0)="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", 0x1d8, r0) 43.209312277s ago: executing program 1 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0x4010aa0a, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304, 0x38}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df6bd29", 'H\x00'}, 0x28) write(r0, &(0x7f0000000000)='7', 0x1) 42.889752238s ago: executing program 0 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40a0cc0}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000061c000327bd7000fddbdf25080001000200000008000100020000000800010001000001de65d1eac0e363e641ccd4e100080001005b"], 0x48}, 0x1, 0x0, 0x0, 0x20000880}, 0x800) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000840)={0x5c, 0x224, '\x00', [@pad1, @generic={0xb3, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0xffffff26}, @generic={0xf9, 0x42, "de387ff3894457d88fa02ad80921c9980f73566a38ff43b7fe85b4033bd27f3931c1f873221fcea88daf762d18ea9d11d668fb67d9f0d0735fa6393bbd81f4e6731f"}, @generic={0x5, 0xd5, "f1902a62ab21b0d73e2cfbf4a9161a2e83f759ae3b89ed0b51fb06b6a05f97ae4a83948fda66f8ef9fb344df7216997cd4099813ab5ef14b0d88388fe72dce800e51b31fc5e7c6326169b3e618f54d286e7a0bf9ac16c1c0bc53bc3cba63de52f8b4f7e419516ad7425513e19b927972b2e1696e4b1dee94e8a309700bf41ea316a7041faf2611051276cf3112ac722bc3c857e4994818fa557eb78fee7c1a77948bb34f42c11e8a66614448dd79ab3fdcf40f3b5ae30b3bef807271d4f6ded42fc71199cd5cb31a8e973a28d0ce734285d4263e45"}]}, 0x1130) r3 = dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0x2aa02) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000080)={0x9, {0xe, 0x108b9, 0x8001}}) r5 = openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}}, &(0x7f0000000340)) ioctl$FIBMAP(r5, 0x1, &(0x7f00000003c0)=0x2) write$P9_RVERSION(r3, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x20, 0x8, '9P2000.L'}, 0x15) 41.834316469s ago: executing program 4 (id=276): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x1}}], 0x5, 0x4040000) r1 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x86) fchdir(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x804c4700, &(0x7f0000000080)={0x1000, 0x1, 0x2, 0x2, 0x8, "35cc00010000000600000000000000fcffffff"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_off}]}) 41.831726287s ago: executing program 0 (id=284): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) syz_emit_vhci(0x0, 0xe) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f016, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004c0000000e0001006e657464657673696d0000000f00fcd95003bcc3401f73696d300000"], 0x34}}, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, 0x0, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 41.721097797s ago: executing program 3 (id=277): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf58, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x2, @sdr={0x32314d48, 0x2fe}}) r1 = syz_open_dev$ublk_chdev(&(0x7f0000000000), 0x0, 0x2000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x0, {}, {0x0, 0xff, 0x4}, 0xfd}], 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001fc0)={'team_slave_1\x00', 0x7101}) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r8 = syz_ublk_setup_io_uring(0x5e59, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r9 = syz_open_dev$vcsa(&(0x7f0000000240), 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r12, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r11, &(0x7f00000009c0)='1', 0x1, 0x23000080000005}]) syz_ublk_setup_queues(r1, r2, &(0x7f00000001c0)={0x0, 0x9b5f, 0x200, 0x0, 0x250, 0x0, r8}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x321a, 0x1000, 0x2, 0x297, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdb6b, 0x8, 0x1, 0x389, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd573, 0x4, 0x1, 0xe6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc388, 0x1, 0x2, 0x216, 0x0, r0}}], 0x4, &(0x7f0000001680)={0x2e, 0x0, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, '\x00', {0x4, 0xe02, 0x0, &(0x7f0000000680)=@buf_1k="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"}}, &(0x7f0000001700)) 41.660405419s ago: executing program 1 (id=278): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) nanosleep(0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x3, 0x4, "01010101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='stm32g0-typec 0x3', 0x11) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./config\x00', 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00df256b0000000c0099000900000040000000ffffbf00000a001200ffffffffffff00000a00308aa52da54fef3800000a00060008021100000100000a001a00080211000000000000000000000000000000000000000800000000"], 0x68}, 0x1, 0x0, 0x0, 0x14008090}, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x1, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x5}) (async) pread64(r6, 0x0, 0x0, 0xe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/rtc/rtc0/wakealarm\x00', 0x80002, 0x13) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000d80)={0x20, 0x18, 0x28, "1435663ed79448d2c0845cbb8939fcb5cdca43ab3c15d1aa24c6d5012bd367397530056b8bf25a10"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, &(0x7f0000000140)="04b50749f0fdad6a7c786424dcd07880dd28cbdf1d69422bd5596a13f1da92a3c60f45a049677fd7a52ae7170e1cc2a2b69eafde5b9c1a1164db5de98fb08b62113e"}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r7, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r8}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f00000007c0)={0x0, 0x18, 0x48, "24bc8c0b84853dffb260e69c38531aac4c45124e7e5448ad2262fb2323dce2ebb3f496b577faecd3bcf38f0cf7ff5fb12ab960c97520822349888d3e1140ec0b1d658e7bf34cde91"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x10, 0xc, "cead605d2feee498328228bd"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x84, 0x3, "4d22ad"}, 0x0}) 41.095361458s ago: executing program 3 (id=279): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff, 0x0, 0x0, 0x4000], [], [0x400000000000000]}) setns(0xc9, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0xfb, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0108000400000000f7ff0a00000008000300", @ANYRES32=r7, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef1f16f10ccf40000000500090002000000050002"], 0x58}}, 0x0) 40.930487146s ago: executing program 4 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1be) 40.545348376s ago: executing program 4 (id=281): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x48d5}, 0xc050) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000040)="040000000000", 0x6) 39.991428801s ago: executing program 0 (id=282): userfaultfd(0x801) (async) r0 = userfaultfd(0x801) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1a7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="06c73d97d0a717cc9af54f0641c6f3a9d081c0085ca425477c782ba52487f8935a5d740a7f3135ec893a8e179600767a4bb2bf69373c550e31d3641a931e9ca2a152139b9366d97f0589f67003ba59c0d56b93cc7d511ae4d3c4e83140ab8a14f3721e5c824e4adb97ae9c1d64ebc95c347c60e0fd16ebe9904e93621d460f4539e285bcaa23d4653a38bce0391e712f460df427b41d29", 0x97}, {&(0x7f00000002c0)="d67a68b07f86bfcd497a5fe006cec37dec2da9b87bc44d06f864617a576e97f86ef1bb21735511f692cee50279ce02680d7fe6b778141dfbc41d6f44559e77faf1cf4735ce1cf3c46fb30bc1b93ff96c3d0b8a95db45c0cba250d4af6c1fb1b1340cf45e5f56d6bccc98200970b564eb0e6c8692ef2a081161e54c9f6d", 0x7d}, {&(0x7f0000000340)="4016196e218c6d8251de8e23261baf53282e06a5d08ed0504d9db980f129373fb44d60828bfee7a3106286696adbac3837bbdfffeeb9f85dd2d98ec11099535641f9f7ede649b306d42a6ca04a16efb292050e5aa8eddebe4368abcfc30bfffa448a1d4c6f3b142e4f75271aca53c563bfbb525d1368f84eb365d1e7bd2dd44711b8379aea318e8225597e355987f6029f9ccb214303a3dc7f1ea5555558a20105178c5e16a4c7200f4264a62caf61299981b7b2d1e4e4", 0xb7}, {&(0x7f0000000440)="bbc499704de791abee0d2823d9c9d123f7a7c64b8cf975c12f3c969badb37ee5213040ff1eadb10ed8cc26118275b3230d024e0ccbea33aa4af72e4e19daea4a67ab78a000e1b0ec588213860ba4b88c83dacc4149d0f19646102644e1b89ae4e17ab6be868a50d8a05b386ef8c55447ff0a1304", 0x74}], 0x4, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x50}, 0x24004810) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^=\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^=\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) (async) write(r3, &(0x7f0000000000)='3', 0x4e) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) (async) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config\x00', 0x2c801, 0x100) write(r4, &(0x7f0000000400)='512', 0x3) (async) write(r4, &(0x7f0000000400)='512', 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r5 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, &(0x7f00000006c0)={0x14, &(0x7f00000000c0)={0x0, 0x31, 0x22, {0x22, 0x8, "6b2ac4b6116816fc6059dca3a82cc576fa756cd1ff79a7f73ba59f05e11b4142"}}, &(0x7f0000000680)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "ba76f1e17704391b529e54f5ae971ab6485f5c5d96be5399f082438a0a"}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000700)={0x0, 0x16, 0x60, "f01c58d6345ee55d52c7a8f8128de67909dc43ba19f8c4af0258d90ec7714cbc43f6ae09e0dfe4433af04313f6b92ae4d030fa31e74bc93bb67291cf7a6f9d282723a3561fbdb0df14db2ff0597bced60555bdfe1bbac2ff65b492caf156276f"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000840)={0x20, 0x0, 0xa0, {0x9e, "14d3341b81a105822167b9def8579327bd3ebbca14d10f9eba93a19da33089b8216493e652c7629ab94fa4cdf470fa52f3b9ce9724063db1fbcf7562b0dacd87368ed6e69ad85cdbd26ea7948c236fedbf232a4578f5afeabbb30e2bae73b78df29370ee9b764e82ecd12a0ac1b144bd6e9f1b0f2f0f4553650186172659bdd4ff34180ab434216b8fe9ba94cc8e84a7e0ef8d578fe74fae98dc7563fd6d"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0x40}}) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="f8ffffffffffffff7d29fc272a7d53d9efffb4bb0cea47cbaa66c3b7cab81472905bc09c214fa3ab981a38b818d0fc66fcb6d5ea16e338362d4cde34df4755353775c239016cef31ed073e1e6a0256ba4b2027000d595090bcfef48cb7c8c7f70bc769051e989029d3a909c7caca603c6e30cdf0864021e288c96373dd71afc25668f62edec528fe047c0adb5bc7539073187ad9149d6470e60539dcefcbbe5c4044aca8cf4de17a7a090d6097a4d09630"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 38.783550187s ago: executing program 4 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 38.474021829s ago: executing program 4 (id=285): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e21, 0x3, @mcast1, 0x800004}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc6af, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) 38.00515369s ago: executing program 1 (id=286): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000006c0)={0x1, 0x0, @pic={0xa, 0x2, 0x4, 0xc0, 0xcd, 0x9, 0xfa, 0x8, 0x33, 0x9, 0x2, 0x8, 0xa, 0x7, 0x4, 0x4}}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x41, 0x9, 0x1, 0x4, 0x3, 0x26, 0x40, 0x8, 0x80, 0x0, 0xf9, 0x8, 0x2, 0x40, 0x9, 0x8}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c011}, 0x4c020) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x1, 0xc, 0x3, 0x7, 0x4, 0x84, 0x10, 0x1, 0x3, 0x1, 0x40, 0x1, 0x2}, {0x806, 0x50, 0x6, 0x2, 0x3, 0x8, 0x7f, 0x8, 0x19, 0x1, 0x5, 0x9}, {0x40, 0x0, 0xff, 0x2, 0x4, 0x5c, 0x0, 0x9, 0x14, 0x1b, 0xf9, 0x3, 0x100080000}], 0x100006}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}], 0x30}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}]}, 0x4c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0xd, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x4, 0x4], 0xdddd0000, 0x1d4217}) ioctl$KVM_RUN(r2, 0xae80, 0xfd7f) 37.951158862s ago: executing program 4 (id=287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a0080ffffffffffffff00000000000001000000000000000209ef57ac6289e993a22e7f7d2c70017f0f0fd809e0bf4f51fe3b31698895c556760a2bc2c60eb8cfb6132145bdb4c3aae16f35eaedd5e8636668e5996f4ecd8d6e94f538f45659f5faea461b55c061fc9ac359e44ffb2065bb1261b03c994f2dbcca678f143901e064"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x2, 0x4) bind(r3, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) connect(r3, &(0x7f0000000640)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0xfffffddd) sendto(r3, &(0x7f0000000500)='\x00', 0x34000, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) connect(r1, &(0x7f00000005c0)=@ethernet={0x1, @remote}, 0x80) ftruncate(0xffffffffffffffff, 0xb66f) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="c9b0fd8ff816c0e7a09c91a8be34efc1454260ffdac74c9365f6a5f175f913115ebd2c62228d6bdc2f20d8c10b7835277e8a4d76f514e950d0af4ce21649a6301102210aa51a13457ac5efe3c3", 0x4d}, {&(0x7f0000000400)="b19790a8159d1e20c96b74362c291a8aba7dd70678b5a5609541b100075f23e387f046b6e9178f68b23bc6e9254487c9a63752be2d402a16abc112b34602920ad94faaa4f4c00b922e73d17ce3e7223431a58687605f8ec2516f4fad10739582a770201ded1031bec51c42906f26e38db6d6c6e74fff271940309ba5a6016759128442", 0x83}], 0x2}, 0x4040) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff006) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x201, 0x2000401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x7, 0x200}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000340)=0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/173, 0xad, 0x0, 0x0}, &(0x7f0000000100)=0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'batadv0\x00', 0x4000}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x4008014}, 0x4040014) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000340)=0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 33 (id=279): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff, 0x0, 0x0, 0x4000], [], [0x400000000000000]}) setns(0xc9, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0xfb, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0108000400000000f7ff0a00000008000300", @ANYRES32=r7, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef1f16f10ccf40000000500090002000000050002"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.483157][ T6008] RSP: 002b:00007f102880b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.483184][ T6008] RAX: ffffffffffffffda RBX: 00007f1027c25fa0 RCX: 00007f102799e159 [ 105.483203][ T6008] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 105.483219][ T6008] RBP: 00007f102880b090 R08: 0000000000000000 R09: 0000000000000000 [ 105.483235][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.483250][ T6008] R13: 00007f1027c26038 R14: 00007f1027c25fa0 R15: 00007ffd82575d48 [ 105.483287][ T6008] [ 105.503171][ T6008] ERROR: Out of memory at tomoyo_realpath_from_path. [ 105.524339][ T5683] usb 4-1: USB disconnect, device number 4 [ 106.010053][ T5696] usb 1-1: USB disconnect, device number 9 [ 106.420886][ T6024] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 106.764285][ C0] net_ratelimit: 606 callbacks suppressed [ 106.856476][ T6029] FAULT_INJECTION: forcing a failure. [ 106.856476][ T6029] name failslab, interval 1, probability 0, space 0, times 0 [ 106.856513][ T6029] CPU: 0 UID: 0 PID: 6029 Comm: syz.2.101 Not tainted syzkaller #0 PREEMPT(full) [ 106.856541][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.856557][ T6029] Call Trace: [ 106.856568][ T6029] [ 106.856580][ T6029] dump_stack_lvl+0xe8/0x150 [ 106.856620][ T6029] should_fail_ex+0x3eb/0x540 [ 106.856655][ T6029] should_failslab+0xa8/0x100 [ 106.856686][ T6029] __kmalloc_noprof+0xf9/0x710 [ 106.856724][ T6029] ? tomoyo_encode+0x2ad/0x570 [ 106.856754][ T6029] ? tomoyo_encode+0x2ad/0x570 [ 106.856793][ T6029] tomoyo_encode+0x2ad/0x570 [ 106.856835][ T6029] tomoyo_realpath_from_path+0x5fa/0x640 [ 106.856879][ T6029] tomoyo_path_perm+0x283/0x560 [ 106.856903][ T6029] ? tomoyo_path_perm+0x251/0x560 [ 106.856926][ T6029] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 106.856999][ T6029] ? __fget_files+0x2a/0x420 [ 106.857034][ T6029] ? __fget_files+0x2a/0x420 [ 106.857065][ T6029] ? __fget_files+0x2a/0x420 [ 106.857101][ T6029] security_inode_getattr+0x12b/0x310 [ 106.857138][ T6029] __se_sys_newfstat+0x133/0x440 [ 106.857170][ T6029] ? __pfx___se_sys_newfstat+0x10/0x10 [ 106.857207][ T6029] ? do_futex+0x458/0x4e0 [ 106.857239][ T6029] ? __pfx_do_futex+0x10/0x10 [ 106.857286][ T6029] ? rcu_is_watching+0x16/0xb0 [ 106.857324][ T6029] do_syscall_64+0x166/0x520 [ 106.857347][ T6029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.857373][ T6029] ? clear_bhb_loop+0x70/0xc0 [ 106.857404][ T6029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.857433][ T6029] RIP: 0033:0x7f102799e159 [ 106.857456][ T6029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.857477][ T6029] RSP: 002b:00007f102880b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 106.857502][ T6029] RAX: ffffffffffffffda RBX: 00007f1027c25fa0 RCX: 00007f102799e159 [ 106.857520][ T6029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 106.857536][ T6029] RBP: 00007f1027a3503b R08: 0000000000000000 R09: 0000000000000000 [ 106.857551][ T6029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.857564][ T6029] R13: 00007f1027c26038 R14: 00007f1027c25fa0 R15: 00007ffd82575d48 [ 106.857601][ T6029] [ 106.867406][ T6029] ERROR: Out of memory at tomoyo_realpath_from_path. [ 106.935375][ T4933] Bluetooth: hci4: command 0x1003 tx timeout [ 106.936444][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 107.055400][ T5695] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.254369][ T5695] usb 4-1: Using ep0 maxpacket: 8 [ 107.258207][ T5695] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 107.261748][ T5695] usb 4-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 107.261780][ T5695] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.261805][ T5695] usb 4-1: config 1 has no interface number 0 [ 107.261874][ T5695] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 107.261905][ T5695] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 107.261936][ T5695] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 107.299778][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.299836][ T5695] usb 4-1: Product: syz [ 107.299881][ T5695] usb 4-1: Manufacturer: syz [ 107.299924][ T5695] usb 4-1: SerialNumber: syz [ 107.366613][ T5705] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 107.482341][ T6036] FAULT_INJECTION: forcing a failure. [ 107.482341][ T6036] name failslab, interval 1, probability 0, space 0, times 0 [ 107.482381][ T6036] CPU: 0 UID: 0 PID: 6036 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT(full) [ 107.482414][ T6036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.482430][ T6036] Call Trace: [ 107.482441][ T6036] [ 107.482452][ T6036] dump_stack_lvl+0xe8/0x150 [ 107.482493][ T6036] should_fail_ex+0x3eb/0x540 [ 107.482528][ T6036] should_failslab+0xa8/0x100 [ 107.482556][ T6036] ? dup_fd+0x56/0xaf0 [ 107.482585][ T6036] kmem_cache_alloc_noprof+0x9c/0x600 [ 107.482623][ T6036] ? dup_fd+0x56/0xaf0 [ 107.482658][ T6036] dup_fd+0x56/0xaf0 [ 107.482684][ T6036] ? __kmalloc_noprof+0x387/0x710 [ 107.482720][ T6036] ? __kmalloc_noprof+0x1a6/0x710 [ 107.482754][ T6036] ? security_task_alloc+0x4d/0x330 [ 107.482778][ T6036] ? security_task_alloc+0x4d/0x330 [ 107.482805][ T6036] ? apparmor_task_alloc+0x1ef/0x2d0 [ 107.482837][ T6036] copy_files+0xaf/0x120 [ 107.482866][ T6036] ? copy_process+0xd37/0x43e0 [ 107.482893][ T6036] copy_process+0x1cc5/0x43e0 [ 107.482939][ T6036] ? copy_process+0xd37/0x43e0 [ 107.482987][ T6036] ? __pfx_copy_process+0x10/0x10 [ 107.483019][ T6036] ? futex_private_hash_put+0x132/0x160 [ 107.483068][ T6036] kernel_clone+0x2d7/0x940 [ 107.483098][ T6036] ? __pfx_futex_wake+0x10/0x10 [ 107.483135][ T6036] ? __pfx_kernel_clone+0x10/0x10 [ 107.483178][ T6036] ? do_futex+0x458/0x4e0 [ 107.483213][ T6036] __x64_sys_clone+0x1b6/0x230 [ 107.483248][ T6036] ? __pfx___x64_sys_clone+0x10/0x10 [ 107.483298][ T6036] ? rcu_is_watching+0x16/0xb0 [ 107.483343][ T6036] do_syscall_64+0x166/0x520 [ 107.483367][ T6036] ? trace_irq_disable+0x3b/0x140 [ 107.483403][ T6036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.483429][ T6036] ? clear_bhb_loop+0x70/0xc0 [ 107.483461][ T6036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.483487][ T6036] RIP: 0033:0x7f102799e159 [ 107.483510][ T6036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.483532][ T6036] RSP: 002b:00007f102880afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 107.483560][ T6036] RAX: ffffffffffffffda RBX: 00007f1027c25fa0 RCX: 00007f102799e159 [ 107.483579][ T6036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000940000 [ 107.483596][ T6036] RBP: 00007f1027a3503b R08: 0000000000000000 R09: 0000000000000000 [ 107.483612][ T6036] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.483628][ T6036] R13: 00007f1027c26038 R14: 00007f1027c25fa0 R15: 00007ffd82575d48 [ 107.483660][ T6036] [ 107.547862][ T5705] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 107.573026][ T5705] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 107.573097][ T5705] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.573128][ T5705] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 107.573162][ T5705] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 107.573191][ T5705] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.573276][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.655041][ T5705] usb 1-1: config 0 descriptor?? [ 107.662926][ T6032] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.923987][ T5751] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.942954][ T6040] FAULT_INJECTION: forcing a failure. [ 107.942954][ T6040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 107.943003][ T6040] CPU: 1 UID: 0 PID: 6040 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) [ 107.943039][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.943058][ T6040] Call Trace: [ 107.943069][ T6040] [ 107.943082][ T6040] dump_stack_lvl+0xe8/0x150 [ 107.943125][ T6040] should_fail_ex+0x3eb/0x540 [ 107.943162][ T6040] prepare_alloc_pages+0x21e/0x5f0 [ 107.943214][ T6040] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 107.943256][ T6040] ? __lock_acquire+0x747/0x2de0 [ 107.943300][ T6040] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.943353][ T6040] ? policy_nodemask+0x2cc/0x8e0 [ 107.943382][ T6040] ? __pfx_free_vmap_area_rb_augment_cb_rotate+0x10/0x10 [ 107.943433][ T6040] alloc_pages_mpol+0x21e/0x390 [ 107.943471][ T6040] alloc_pages_noprof+0xb1/0x2b0 [ 107.943505][ T6040] get_free_pages_noprof+0xf/0x80 [ 107.943549][ T6040] __kasan_populate_vmalloc+0x38/0x1c0 [ 107.943589][ T6040] ? do_raw_spin_unlock+0xf5/0x200 [ 107.943628][ T6040] alloc_vmap_area+0xd10/0x1410 [ 107.943673][ T6040] ? __pfx_alloc_vmap_area+0x10/0x10 [ 107.943702][ T6040] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 107.943741][ T6040] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 107.943778][ T6040] ? __get_vm_area_node+0x155/0x2f0 [ 107.943816][ T6040] __get_vm_area_node+0x200/0x2f0 [ 107.943857][ T6040] __vmalloc_node_range_noprof+0x340/0x1690 [ 107.943895][ T6040] ? copy_process+0x81b/0x43e0 [ 107.943961][ T6040] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.944008][ T6040] ? dup_task_struct+0x52/0xa00 [ 107.944039][ T6040] ? trace_kmem_cache_alloc+0x29/0xe0 [ 107.944080][ T6040] ? memcpy_and_pad+0x48/0x80 [ 107.944127][ T6040] __vmalloc_node_noprof+0xc2/0x100 [ 107.944164][ T6040] ? copy_process+0x81b/0x43e0 [ 107.944192][ T6040] ? copy_process+0x81b/0x43e0 [ 107.944226][ T6040] dup_task_struct+0x2c6/0xa00 [ 107.944273][ T6040] copy_process+0x81b/0x43e0 [ 107.944315][ T6040] ? __pfx___futex_wait+0x10/0x10 [ 107.944368][ T6040] ? try_to_wake_up+0x8c5/0x14d0 [ 107.944398][ T6040] ? __pfx_copy_process+0x10/0x10 [ 107.944444][ T6040] kernel_clone+0x2d7/0x940 [ 107.944485][ T6040] ? __pfx_kernel_clone+0x10/0x10 [ 107.944530][ T6040] ? do_futex+0x3e7/0x4e0 [ 107.944566][ T6040] __x64_sys_clone+0x1b6/0x230 [ 107.944605][ T6040] ? __pfx___x64_sys_clone+0x10/0x10 [ 107.944657][ T6040] ? rcu_is_watching+0x16/0xb0 [ 107.944699][ T6040] do_syscall_64+0x166/0x520 [ 107.944725][ T6040] ? trace_irq_disable+0x3b/0x140 [ 107.944771][ T6040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.944801][ T6040] ? clear_bhb_loop+0x70/0xc0 [ 107.944837][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.944865][ T6040] RIP: 0033:0x7f102799e159 [ 107.944892][ T6040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.944916][ T6040] RSP: 002b:00007f102880afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 107.944947][ T6040] RAX: ffffffffffffffda RBX: 00007f1027c25fa0 RCX: 00007f102799e159 [ 107.944969][ T6040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000940000 [ 107.944989][ T6040] RBP: 00007f1027a3503b R08: 0000000000000000 R09: 0000000000000000 [ 107.945017][ T6040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.945035][ T6040] R13: 00007f1027c26038 R14: 00007f1027c25fa0 R15: 00007ffd82575d48 [ 107.945078][ T6040] [ 107.946552][ T6040] syz.2.105: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 107.947165][ T6040] CPU: 1 UID: 0 PID: 6040 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) [ 107.947250][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.947301][ T6040] Call Trace: [ 107.947331][ T6040] [ 107.947362][ T6040] dump_stack_lvl+0xe8/0x150 [ 107.947458][ T6040] warn_alloc+0x24d/0x270 [ 107.947578][ T6040] ? lockdep_hardirqs_on+0x7b/0x110 [ 107.947686][ T6040] ? __pfx_warn_alloc+0x10/0x10 [ 107.947794][ T6040] ? kfree+0x1c5/0x650 [ 107.947901][ T6040] ? __get_vm_area_node+0x219/0x2f0 [ 107.948018][ T6040] __vmalloc_node_range_noprof+0x368/0x1690 [ 107.948240][ T6040] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.948338][ T6040] ? dup_task_struct+0x52/0xa00 [ 107.948411][ T6040] ? trace_kmem_cache_alloc+0x29/0xe0 [ 107.948499][ T6040] ? memcpy_and_pad+0x48/0x80 [ 107.948609][ T6040] __vmalloc_node_noprof+0xc2/0x100 [ 107.948703][ T6040] ? copy_process+0x81b/0x43e0 [ 107.948777][ T6040] ? copy_process+0x81b/0x43e0 [ 107.948861][ T6040] dup_task_struct+0x2c6/0xa00 [ 107.948957][ T6040] copy_process+0x81b/0x43e0 [ 107.949064][ T6040] ? __pfx___futex_wait+0x10/0x10 [ 107.949190][ T6040] ? try_to_wake_up+0x8c5/0x14d0 [ 107.949260][ T6040] ? __pfx_copy_process+0x10/0x10 [ 107.949370][ T6040] kernel_clone+0x2d7/0x940 [ 107.949478][ T6040] ? __pfx_kernel_clone+0x10/0x10 [ 107.949607][ T6040] ? do_futex+0x3e7/0x4e0 [ 107.949694][ T6040] __x64_sys_clone+0x1b6/0x230 [ 107.949793][ T6040] ? __pfx___x64_sys_clone+0x10/0x10 [ 107.949913][ T6040] ? rcu_is_watching+0x16/0xb0 [ 107.950030][ T6040] do_syscall_64+0x166/0x520 [ 107.950098][ T6040] ? trace_irq_disable+0x3b/0x140 [ 107.950190][ T6040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.950264][ T6040] ? clear_bhb_loop+0x70/0xc0 [ 107.950350][ T6040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.950419][ T6040] RIP: 0033:0x7f102799e159 [ 107.950477][ T6040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.950534][ T6040] RSP: 002b:00007f102880afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 107.950611][ T6040] RAX: ffffffffffffffda RBX: 00007f1027c25fa0 RCX: 00007f102799e159 [ 107.950666][ T6040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000940000 [ 107.950712][ T6040] RBP: 00007f1027a3503b R08: 0000000000000000 R09: 0000000000000000 [ 107.950757][ T6040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.950801][ T6040] R13: 00007f1027c26038 R14: 00007f1027c25fa0 R15: 00007ffd82575d48 [ 107.950909][ T6040] [ 107.951651][ T6040] Mem-Info: [ 107.951684][ T6040] active_anon:5801 inactive_anon:0 isolated_anon:0 [ 107.951684][ T6040] active_file:3 inactive_file:42920 isolated_file:0 [ 107.951684][ T6040] unevictable:0 dirty:154 writeback:0 [ 107.951684][ T6040] slab_reclaimable:9712 slab_unreclaimable:85372 [ 107.951684][ T6040] mapped:24887 shmem:522 pagetables:1148 [ 107.951684][ T6040] sec_pagetables:0 bounce:0 [ 107.951684][ T6040] kernel_misc_reclaimable:0 [ 107.951684][ T6040] free:1353077 free_pcp:10417 free_cma:0 [ 107.951907][ T6040] Node 0 active_anon:23204kB inactive_anon:0kB active_file:12kB inactive_file:171476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99548kB dirty:616kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11720kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 107.952135][ T6040] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 107.952344][ T6040] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.952546][ T6040] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 107.952677][ T6040] Node 0 DMA32 free:1453588kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23204kB inactive_anon:0kB active_file:12kB inactive_file:171476kB unevictable:0kB writepending:616kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:41664kB local_pcp:20752kB free_cma:0kB [ 107.952928][ T6040] lowmem_reserve[]: 0 0 1 1 1 [ 107.953126][ T6040] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 107.953300][ T6040] lowmem_reserve[]: 0 0 0 0 0 [ 107.953408][ T6040] Node 1 Normal free:3943360kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.953583][ T6040] lowmem_reserve[]: 0 0 0 0 0 [ 107.956619][ T6040] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 107.956992][ T6040] Node 0 DMA32: 408*4kB (UME) 700*8kB (UME) 50*16kB (UM) 221*32kB (UM) 72*64kB (UM) 20*128kB (UME) 9*256kB (ME) 7*512kB (M) 8*1024kB (UM) 8*2048kB (UME) 342*4096kB (M) = 1453568kB [ 107.960730][ T6040] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 107.961049][ T6040] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 15*16kB (UM) 5*32kB (UM) 4*64kB (UM) 4*128kB (UM) 3*256kB (UM) [ 107.966404][ T6040] 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943368kB [ 107.966648][ T6040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.966702][ T6040] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.966747][ T6040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.966799][ T6040] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.966852][ T6040] 43441 total pagecache pages [ 107.969599][ T6040] 0 pages in swap cache [ 107.969612][ T6040] Free swap = 124996kB [ 107.969622][ T6040] Total swap = 124996kB [ 107.969633][ T6040] 2097051 pages RAM [ 107.969642][ T6040] 0 pages HighMem/MovableOnly [ 107.969650][ T6040] 429554 pages reserved [ 107.969660][ T6040] 0 pages cma reserved [ 108.082900][ T5751] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.096876][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.096974][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.097046][ T5751] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.097224][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.423107][ T5751] usb 2-1: config 0 descriptor?? [ 109.101798][ T5705] waltop 0003:172F:0500.0001: item fetching failed at offset 6/7 [ 109.122890][ T5705] waltop 0003:172F:0500.0001: probe with driver waltop failed with error -22 [ 109.241024][ T5705] usb 1-1: USB disconnect, device number 10 [ 109.392249][ T5751] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 109.577452][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 109.609547][ T6053] ======================================================= [ 109.609547][ T6053] WARNING: The mand mount option has been deprecated and [ 109.609547][ T6053] and is ignored by this kernel. Remove the mand [ 109.609547][ T6053] option from the mount to silence this warning. [ 109.609547][ T6053] ======================================================= [ 109.675920][ T5695] usb 4-1: USB disconnect, device number 5 [ 109.863160][ T6054] syzkaller1: entered allmulticast mode [ 110.274406][ T6062] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 110.446385][ C1] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 110.876020][ T6068] FAULT_INJECTION: forcing a failure. [ 110.876020][ T6068] name failslab, interval 1, probability 0, space 0, times 0 [ 110.876054][ T6068] CPU: 0 UID: 0 PID: 6068 Comm: syz.0.111 Not tainted syzkaller #0 PREEMPT(full) [ 110.876078][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.876093][ T6068] Call Trace: [ 110.876102][ T6068] [ 110.876112][ T6068] dump_stack_lvl+0xe8/0x150 [ 110.876145][ T6068] should_fail_ex+0x3eb/0x540 [ 110.876183][ T6068] should_failslab+0xa8/0x100 [ 110.876211][ T6068] __kmalloc_noprof+0xf9/0x710 [ 110.876245][ T6068] ? tomoyo_encode+0x2ad/0x570 [ 110.876272][ T6068] ? tomoyo_encode+0x2ad/0x570 [ 110.876312][ T6068] tomoyo_encode+0x2ad/0x570 [ 110.876347][ T6068] tomoyo_realpath_from_path+0x5fa/0x640 [ 110.876387][ T6068] ? tomoyo_path_number_perm+0x219/0x5f0 [ 110.876413][ T6068] tomoyo_path_number_perm+0x246/0x5f0 [ 110.876440][ T6068] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 110.876477][ T6068] ? __lock_acquire+0x747/0x2de0 [ 110.876527][ T6068] ? hook_file_ioctl+0x1f2/0x600 [ 110.876574][ T6068] ? __fget_files+0x2a/0x420 [ 110.876606][ T6068] ? __fget_files+0x2a/0x420 [ 110.876633][ T6068] ? __fget_files+0x3a2/0x420 [ 110.876660][ T6068] ? __fget_files+0x2a/0x420 [ 110.876689][ T6068] security_file_ioctl+0xc3/0x2a0 [ 110.876739][ T6068] __se_sys_ioctl+0x47/0x170 [ 110.876783][ T6068] do_syscall_64+0x166/0x520 [ 110.876803][ T6068] ? trace_irq_disable+0x3b/0x140 [ 110.876837][ T6068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.876861][ T6068] ? clear_bhb_loop+0x70/0xc0 [ 110.876889][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.876915][ T6068] RIP: 0033:0x7f3657d9e159 [ 110.876934][ T6068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.876950][ T6068] RSP: 002b:00007f3655ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.876970][ T6068] RAX: ffffffffffffffda RBX: 00007f3658025fa0 RCX: 00007f3657d9e159 [ 110.876983][ T6068] RDX: 0000200000000300 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 110.876996][ T6068] RBP: 00007f3655ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.877014][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.877026][ T6068] R13: 00007f3658026038 R14: 00007f3658025fa0 R15: 00007ffeb4887308 [ 110.877057][ T6068] [ 110.877108][ T6068] ERROR: Out of memory at tomoyo_realpath_from_path. [ 111.241114][ T5695] usb 2-1: USB disconnect, device number 5 [ 111.357415][ T1254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.564255][ T6073] netlink: 64 bytes leftover after parsing attributes in process `syz.0.114'. [ 111.564282][ T6073] netlink: 64 bytes leftover after parsing attributes in process `syz.0.114'. [ 111.564298][ T6073] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 111.610554][ T1254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.770700][ T1254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.001974][ T6078] net_ratelimit: 260 callbacks suppressed [ 112.013288][ T1254] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.129412][ T6084] Zero length message leads to an empty skb [ 112.660130][ T4933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.670964][ T4933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.682716][ T4933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.697321][ T4933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.702049][ T4933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.831826][ T6094] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 112.932258][ T6097] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 112.962204][ T1254] bridge_slave_1: left allmulticast mode [ 112.973480][ T1254] bridge_slave_1: left promiscuous mode [ 112.982828][ T1254] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.130926][ T1254] bridge_slave_0: left allmulticast mode [ 113.130959][ T1254] bridge_slave_0: left promiscuous mode [ 113.131519][ T1254] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.801660][ T6112] FAULT_INJECTION: forcing a failure. [ 113.801660][ T6112] name failslab, interval 1, probability 0, space 0, times 0 [ 113.801689][ T6112] CPU: 1 UID: 0 PID: 6112 Comm: syz.1.126 Not tainted syzkaller #0 PREEMPT(full) [ 113.801715][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.801730][ T6112] Call Trace: [ 113.801740][ T6112] [ 113.801750][ T6112] dump_stack_lvl+0xe8/0x150 [ 113.801787][ T6112] should_fail_ex+0x3eb/0x540 [ 113.801818][ T6112] should_failslab+0xa8/0x100 [ 113.801846][ T6112] __kmalloc_noprof+0xf9/0x710 [ 113.801880][ T6112] ? tomoyo_encode+0x2ad/0x570 [ 113.801908][ T6112] ? tomoyo_encode+0x2ad/0x570 [ 113.801943][ T6112] tomoyo_encode+0x2ad/0x570 [ 113.801978][ T6112] tomoyo_realpath_from_path+0x5fa/0x640 [ 113.802020][ T6112] ? tomoyo_path_number_perm+0x219/0x5f0 [ 113.802045][ T6112] tomoyo_path_number_perm+0x246/0x5f0 [ 113.802073][ T6112] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.802097][ T6112] ? __lock_acquire+0x747/0x2de0 [ 113.802147][ T6112] ? hook_file_ioctl+0x1f2/0x600 [ 113.802194][ T6112] ? __fget_files+0x2a/0x420 [ 113.802227][ T6112] ? __fget_files+0x2a/0x420 [ 113.802255][ T6112] ? __fget_files+0x3a2/0x420 [ 113.802283][ T6112] ? __fget_files+0x2a/0x420 [ 113.802317][ T6112] security_file_ioctl+0xc3/0x2a0 [ 113.802356][ T6112] __se_sys_ioctl+0x47/0x170 [ 113.802396][ T6112] do_syscall_64+0x166/0x520 [ 113.802417][ T6112] ? trace_irq_disable+0x3b/0x140 [ 113.802452][ T6112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.802477][ T6112] ? clear_bhb_loop+0x70/0xc0 [ 113.802506][ T6112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.802530][ T6112] RIP: 0033:0x7fe8e6b9e159 [ 113.802552][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.802579][ T6112] RSP: 002b:00007fe8e7aae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.802605][ T6112] RAX: ffffffffffffffda RBX: 00007fe8e6e25fa0 RCX: 00007fe8e6b9e159 [ 113.802621][ T6112] RDX: 0000200000000500 RSI: 0000000040045612 RDI: 0000000000000003 [ 113.802637][ T6112] RBP: 00007fe8e7aae090 R08: 0000000000000000 R09: 0000000000000000 [ 113.802652][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.802667][ T6112] R13: 00007fe8e6e26038 R14: 00007fe8e6e25fa0 R15: 00007fffd2389ee8 [ 113.802703][ T6112] [ 113.838577][ T6112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.068711][ T6112] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 114.091339][ T6114] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 114.474109][ T5683] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 114.628961][ T5683] usb 2-1: not running at top speed; connect to a high speed hub [ 114.628995][ T5683] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 114.631312][ T5683] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 114.631371][ T5683] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.631394][ T5683] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 114.631636][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.697667][ T5683] usb 2-1: config 0 descriptor?? [ 114.725652][ T5683] uvcvideo 2-1:0.0: Found UVC 9.00 device (046d:0825) [ 114.764626][ T52] Bluetooth: hci1: command tx timeout [ 114.892190][ T1254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.918594][ T1254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.939573][ T1254] bond0 (unregistering): Released all slaves [ 114.959459][ T6117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.960365][ T6117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.991766][ T6122] tipc: Failed to obtain node identity [ 114.991792][ T6122] tipc: Enabling of bearer rejected, failed to enable media [ 114.994016][ T6121] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 115.188187][ T6117] loop8: detected capacity change from 0 to 7 [ 115.270629][ T6117] Dev loop8: unable to read RDB block 7 [ 115.270675][ T6117] loop8: unable to read partition table [ 115.270947][ T6117] loop8: partition table beyond EOD, truncated [ 115.270986][ T6117] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 115.551141][ T6135] FAULT_INJECTION: forcing a failure. [ 115.551141][ T6135] name failslab, interval 1, probability 0, space 0, times 0 [ 115.551171][ T6135] CPU: 0 UID: 0 PID: 6135 Comm: syz.3.131 Not tainted syzkaller #0 PREEMPT(full) [ 115.551200][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.551214][ T6135] Call Trace: [ 115.551224][ T6135] [ 115.551235][ T6135] dump_stack_lvl+0xe8/0x150 [ 115.551286][ T6135] should_fail_ex+0x3eb/0x540 [ 115.551319][ T6135] ? alloc_io_context+0x27/0x290 [ 115.551345][ T6135] should_failslab+0xa8/0x100 [ 115.551373][ T6135] ? alloc_io_context+0x27/0x290 [ 115.551396][ T6135] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 115.551433][ T6135] ? alloc_io_context+0x27/0x290 [ 115.551465][ T6135] alloc_io_context+0x27/0x290 [ 115.551494][ T6135] set_task_ioprio+0x45c/0x5d0 [ 115.551520][ T6135] ? set_task_ioprio+0x5a/0x5d0 [ 115.551548][ T6135] __se_sys_ioprio_set+0x534/0xa50 [ 115.551585][ T6135] ? __se_sys_ioprio_set+0xd0/0xa50 [ 115.551629][ T6135] do_syscall_64+0x166/0x520 [ 115.551652][ T6135] ? trace_irq_disable+0x3b/0x140 [ 115.551687][ T6135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.551713][ T6135] ? clear_bhb_loop+0x70/0xc0 [ 115.551744][ T6135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.551769][ T6135] RIP: 0033:0x7f856fd9e159 [ 115.551791][ T6135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.551812][ T6135] RSP: 002b:00007f856dff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 115.551837][ T6135] RAX: ffffffffffffffda RBX: 00007f8570025fa0 RCX: 00007f856fd9e159 [ 115.551855][ T6135] RDX: 0100000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 115.551871][ T6135] RBP: 00007f856fe3503b R08: 0000000000000000 R09: 0000000000000000 [ 115.551888][ T6135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.551902][ T6135] R13: 00007f8570026038 R14: 00007f8570025fa0 R15: 00007ffcf6cc20f8 [ 115.551938][ T6135] [ 115.825403][ T5683] uvcvideo 2-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 115.825982][ T5683] uvcvideo 2-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 115.826046][ T5683] uvcvideo 2-1:0.1: Failed to initialize the device (-71). [ 115.841961][ T5683] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -71 [ 115.910692][ T5683] usb 2-1: USB disconnect, device number 6 [ 115.931137][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 116.026155][ T6138] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 116.436426][ T6150] rust_binder: 6149:6150 no such ref 0 [ 116.535941][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.711168][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.712434][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 116.712464][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.712526][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.774513][ T9] usb 4-1: config 0 descriptor?? [ 116.823596][ T1254] hsr_slave_0: left promiscuous mode [ 116.837470][ T1254] hsr_slave_1: left promiscuous mode [ 116.842955][ T1254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.843010][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.857095][ T52] Bluetooth: hci1: command tx timeout [ 116.868318][ T1254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.868371][ T1254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.990403][ T1254] veth1_macvtap: left promiscuous mode [ 116.990468][ T1254] veth0_macvtap: left promiscuous mode [ 116.990612][ T1254] veth1_vlan: left promiscuous mode [ 116.990744][ T1254] veth0_vlan: left promiscuous mode [ 117.031794][ T1254] net_ratelimit: 887 callbacks suppressed [ 117.219046][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 117.219090][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 117.222327][ T9] plantronics 0003:047F:FFFF.0003: item fetching failed at offset 6/15 [ 117.223125][ T9] plantronics 0003:047F:FFFF.0003: parse failed [ 117.223233][ T9] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 117.567770][ T5705] usb 4-1: USB disconnect, device number 6 [ 118.461184][ T1254] team0 (unregistering): Port device team_slave_1 removed [ 118.538627][ T1254] team0 (unregistering): Port device team_slave_0 removed [ 118.936122][ T52] Bluetooth: hci1: command tx timeout [ 119.129341][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 119.743304][ T6187] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 121.015321][ T52] Bluetooth: hci1: command tx timeout [ 121.479075][ T6218] FAULT_INJECTION: forcing a failure. [ 121.479075][ T6218] name failslab, interval 1, probability 0, space 0, times 0 [ 121.479104][ T6218] CPU: 1 UID: 60928 PID: 6218 Comm: syz.3.150 Not tainted syzkaller #0 PREEMPT(full) [ 121.479132][ T6218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.479146][ T6218] Call Trace: [ 121.479156][ T6218] [ 121.479166][ T6218] dump_stack_lvl+0xe8/0x150 [ 121.479205][ T6218] should_fail_ex+0x3eb/0x540 [ 121.479239][ T6218] should_failslab+0xa8/0x100 [ 121.479267][ T6218] __kmalloc_cache_noprof+0x9e/0x600 [ 121.479302][ T6218] ? __kasan_kmalloc+0x93/0xb0 [ 121.479326][ T6218] ? mqueue_init_fs_context+0x55/0x580 [ 121.479348][ T6218] ? mqueue_init_fs_context+0x55/0x580 [ 121.479379][ T6218] mqueue_init_fs_context+0x55/0x580 [ 121.479407][ T6218] alloc_fs_context+0x99e/0xd00 [ 121.479452][ T6218] mq_init_ns+0x10d/0x770 [ 121.479491][ T6218] copy_ipcs+0x460/0x6c0 [ 121.479520][ T6218] create_new_namespaces+0x210/0x6b0 [ 121.479552][ T6218] ? security_capable+0x7e/0x2c0 [ 121.479585][ T6218] unshare_nsproxy_namespaces+0x144/0x190 [ 121.479617][ T6218] ksys_unshare+0x5a7/0x950 [ 121.479654][ T6218] ? __pfx_ksys_unshare+0x10/0x10 [ 121.479685][ T6218] ? rcu_is_watching+0x16/0xb0 [ 121.479722][ T6218] __x64_sys_unshare+0x38/0x50 [ 121.479752][ T6218] do_syscall_64+0x166/0x520 [ 121.479775][ T6218] ? trace_irq_disable+0x3b/0x140 [ 121.479809][ T6218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.479845][ T6218] ? clear_bhb_loop+0x70/0xc0 [ 121.479876][ T6218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.479902][ T6218] RIP: 0033:0x7f856fd9e159 [ 121.479926][ T6218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.479948][ T6218] RSP: 002b:00007f856dff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 121.479976][ T6218] RAX: ffffffffffffffda RBX: 00007f8570025fa0 RCX: 00007f856fd9e159 [ 121.479995][ T6218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 121.480012][ T6218] RBP: 00007f856fe3503b R08: 0000000000000000 R09: 0000000000000000 [ 121.480028][ T6218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.480044][ T6218] R13: 00007f8570026038 R14: 00007f8570025fa0 R15: 00007ffcf6cc20f8 [ 121.480082][ T6218] [ 122.088733][ T5683] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.125335][ T5710] net_ratelimit: 293 callbacks suppressed [ 122.235322][ T5683] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 122.237953][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 122.243020][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.243042][ T5683] usb 4-1: Product: syz [ 122.243058][ T5683] usb 4-1: Manufacturer: syz [ 122.243074][ T5683] usb 4-1: SerialNumber: syz [ 122.277343][ T5683] usb 4-1: config 0 descriptor?? [ 122.306874][ T5683] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 122.435206][ T5683] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.436385][ T5683] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 122.436462][ T5683] usb 4-1: media controller created [ 122.526461][ T6223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.585487][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.659114][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.670048][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.828854][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.828961][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.829158][ T6089] bridge_slave_0: entered allmulticast mode [ 122.856487][ T6089] bridge_slave_0: entered promiscuous mode [ 122.867399][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.867583][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.867815][ T6089] bridge_slave_1: entered allmulticast mode [ 122.869926][ T6089] bridge_slave_1: entered promiscuous mode [ 122.877660][ T5683] DVB: Unable to find symbol mt352_attach() [ 122.970989][ T5683] DVB: Unable to find symbol nxt6000_attach() [ 122.971000][ T5683] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 123.034007][ T5683] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 123.075091][ T5683] dvb-usb: schedule remote query interval to 1000 msecs. [ 123.075111][ T5683] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 123.075387][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 123.075407][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 123.130535][ T5683] usb 4-1: USB disconnect, device number 7 [ 123.337955][ T6089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.366713][ T5683] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 123.416835][ T6089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.613161][ T6244] FAULT_INJECTION: forcing a failure. [ 123.613161][ T6244] name failslab, interval 1, probability 0, space 0, times 0 [ 123.613194][ T6244] CPU: 1 UID: 0 PID: 6244 Comm: syz.1.156 Not tainted syzkaller #0 PREEMPT(full) [ 123.613221][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.613236][ T6244] Call Trace: [ 123.613246][ T6244] [ 123.613257][ T6244] dump_stack_lvl+0xe8/0x150 [ 123.613295][ T6244] should_fail_ex+0x3eb/0x540 [ 123.613334][ T6244] should_failslab+0xa8/0x100 [ 123.613368][ T6244] __kmalloc_noprof+0xf9/0x710 [ 123.613402][ T6244] ? tomoyo_encode+0x2ad/0x570 [ 123.613430][ T6244] ? tomoyo_encode+0x2ad/0x570 [ 123.613467][ T6244] tomoyo_encode+0x2ad/0x570 [ 123.613502][ T6244] tomoyo_realpath_from_path+0x5fa/0x640 [ 123.613542][ T6244] ? tomoyo_path_number_perm+0x219/0x5f0 [ 123.613567][ T6244] tomoyo_path_number_perm+0x246/0x5f0 [ 123.613595][ T6244] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.613623][ T6244] ? __lock_acquire+0x747/0x2de0 [ 123.613682][ T6244] ? hook_file_ioctl+0x1f2/0x600 [ 123.613730][ T6244] ? __fget_files+0x2a/0x420 [ 123.613764][ T6244] ? __fget_files+0x2a/0x420 [ 123.613792][ T6244] ? __fget_files+0x3a2/0x420 [ 123.613820][ T6244] ? __fget_files+0x2a/0x420 [ 123.613854][ T6244] security_file_ioctl+0xc3/0x2a0 [ 123.613892][ T6244] __se_sys_ioctl+0x47/0x170 [ 123.613931][ T6244] do_syscall_64+0x166/0x520 [ 123.613952][ T6244] ? trace_irq_disable+0x3b/0x140 [ 123.613985][ T6244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.614009][ T6244] ? clear_bhb_loop+0x70/0xc0 [ 123.614039][ T6244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.614062][ T6244] RIP: 0033:0x7fe8e6b9e159 [ 123.614084][ T6244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.614105][ T6244] RSP: 002b:00007fe8e7aae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.614131][ T6244] RAX: ffffffffffffffda RBX: 00007fe8e6e25fa0 RCX: 00007fe8e6b9e159 [ 123.614150][ T6244] RDX: 0000200000000000 RSI: 000000008010640b RDI: 0000000000000003 [ 123.614172][ T6244] RBP: 00007fe8e7aae090 R08: 0000000000000000 R09: 0000000000000000 [ 123.614186][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.614199][ T6244] R13: 00007fe8e6e26038 R14: 00007fe8e6e25fa0 R15: 00007fffd2389ee8 [ 123.614236][ T6244] [ 123.751715][ T6244] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.834550][ T5695] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 124.008720][ T5695] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.008773][ T5695] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice= 0.40 [ 124.028480][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.028541][ T5695] usb 1-1: Product: syz [ 124.028584][ T5695] usb 1-1: Manufacturer: syz [ 124.028613][ T5695] usb 1-1: SerialNumber: syz [ 124.058612][ T6089] team0: Port device team_slave_0 added [ 124.107144][ T6089] team0: Port device team_slave_1 added [ 124.299184][ T6248] netlink: 48 bytes leftover after parsing attributes in process `syz.3.158'. [ 124.361273][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.374460][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.432680][ T6241] nfs: Deprecated parameter 'nointr' [ 124.479242][ T5695] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 124.481909][ T5695] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 124.482513][ T5695] usb 1-1: unit 6 not found! [ 124.600146][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.600159][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.600188][ T6089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.665873][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.665888][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.665918][ T6089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.795420][ T5695] usb 1-1: USB disconnect, device number 11 [ 124.992830][ T6262] FAULT_INJECTION: forcing a failure. [ 124.992830][ T6262] name failslab, interval 1, probability 0, space 0, times 0 [ 124.992860][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.1.160 Not tainted syzkaller #0 PREEMPT(full) [ 124.992886][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.992901][ T6262] Call Trace: [ 124.992910][ T6262] [ 124.992920][ T6262] dump_stack_lvl+0xe8/0x150 [ 124.992955][ T6262] should_fail_ex+0x3eb/0x540 [ 124.992994][ T6262] ? __alloc_skb+0x1db/0x7a0 [ 124.993016][ T6262] should_failslab+0xa8/0x100 [ 124.993044][ T6262] ? __alloc_skb+0x1db/0x7a0 [ 124.993063][ T6262] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 124.993096][ T6262] ? __alloc_skb+0x18d/0x7a0 [ 124.993118][ T6262] ? __alloc_skb+0x1db/0x7a0 [ 124.993145][ T6262] __alloc_skb+0x1db/0x7a0 [ 124.993172][ T6262] netlink_sendmsg+0x577/0xae0 [ 124.993208][ T6262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.993247][ T6262] ? apparmor_socket_sendmsg+0x98/0x360 [ 124.993273][ T6262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.993302][ T6262] sock_sendmsg_nosec+0x13a/0x180 [ 124.993337][ T6262] ____sys_sendmsg+0x54e/0x850 [ 124.993368][ T6262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.993408][ T6262] ? import_iovec+0x73/0xa0 [ 124.993442][ T6262] ___sys_sendmsg+0x2a5/0x360 [ 124.993467][ T6262] ? __lock_acquire+0x747/0x2de0 [ 124.993505][ T6262] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.993568][ T6262] ? __fget_files+0x2a/0x420 [ 124.993597][ T6262] ? __fget_files+0x3a2/0x420 [ 124.993637][ T6262] __x64_sys_sendmsg+0x1b1/0x290 [ 124.993668][ T6262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.993717][ T6262] do_syscall_64+0x166/0x520 [ 124.993739][ T6262] ? trace_irq_disable+0x3b/0x140 [ 124.993778][ T6262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.993804][ T6262] ? clear_bhb_loop+0x70/0xc0 [ 124.993832][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.993856][ T6262] RIP: 0033:0x7fe8e6b9e159 [ 124.993878][ T6262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.993897][ T6262] RSP: 002b:00007fe8e7aae028 EFLAGS: 00000246 [ 124.993913][ T6262] ORIG_RAX: 000000000000002e [ 124.993924][ T6262] RAX: ffffffffffffffda RBX: 00007fe8e6e25fa0 RCX: 00007fe8e6b9e159 [ 124.993941][ T6262] RDX: 000000000000c040 RSI: 0000200000000100 RDI: 0000000000000003 [ 124.993957][ T6262] RBP: 00007fe8e7aae090 R08: 0000000000000000 R09: 0000000000000000 [ 124.993971][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.993993][ T6262] R13: 00007fe8e6e26038 R14: 00007fe8e6e25fa0 R15: 00007fffd2389ee8 [ 124.994027][ T6262] [ 125.315431][ T6264] netlink: 48 bytes leftover after parsing attributes in process `syz.0.161'. [ 125.487210][ T6089] hsr_slave_0: entered promiscuous mode [ 125.488573][ T6089] hsr_slave_1: entered promiscuous mode [ 125.501814][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.525628][ T6089] debugfs: 'hsr0' already exists in 'hsr' [ 125.525648][ T6089] Cannot create hsr debugfs directory [ 126.061787][ T6281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.165'. [ 126.520257][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 126.629542][ T6297] FAULT_INJECTION: forcing a failure. [ 126.629542][ T6297] name failslab, interval 1, probability 0, space 0, times 0 [ 126.629579][ T6297] CPU: 1 UID: 0 PID: 6297 Comm: syz.3.169 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.629612][ T6297] Tainted: [L]=SOFTLOCKUP [ 126.629622][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.629637][ T6297] Call Trace: [ 126.629647][ T6297] [ 126.629658][ T6297] dump_stack_lvl+0xe8/0x150 [ 126.629699][ T6297] should_fail_ex+0x3eb/0x540 [ 126.629731][ T6297] ? __alloc_skb+0x1db/0x7a0 [ 126.629753][ T6297] should_failslab+0xa8/0x100 [ 126.629781][ T6297] ? __alloc_skb+0x1db/0x7a0 [ 126.629803][ T6297] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 126.629838][ T6297] ? __alloc_skb+0x18d/0x7a0 [ 126.629862][ T6297] ? __alloc_skb+0x1db/0x7a0 [ 126.629892][ T6297] __alloc_skb+0x1db/0x7a0 [ 126.629919][ T6297] netlink_sendmsg+0x577/0xae0 [ 126.629960][ T6297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.630001][ T6297] ? apparmor_socket_sendmsg+0x98/0x360 [ 126.630030][ T6297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.630061][ T6297] sock_sendmsg_nosec+0x13a/0x180 [ 126.630098][ T6297] ____sys_sendmsg+0x54e/0x850 [ 126.630132][ T6297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.630170][ T6297] ? import_iovec+0x73/0xa0 [ 126.630206][ T6297] ___sys_sendmsg+0x2a5/0x360 [ 126.630232][ T6297] ? __lock_acquire+0x747/0x2de0 [ 126.630273][ T6297] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.630338][ T6297] ? __fget_files+0x2a/0x420 [ 126.630369][ T6297] ? __fget_files+0x3a2/0x420 [ 126.630410][ T6297] __x64_sys_sendmsg+0x1b1/0x290 [ 126.630450][ T6297] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.630501][ T6297] do_syscall_64+0x166/0x520 [ 126.630524][ T6297] ? trace_irq_disable+0x3b/0x140 [ 126.630558][ T6297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.630584][ T6297] ? clear_bhb_loop+0x70/0xc0 [ 126.630615][ T6297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.630640][ T6297] RIP: 0033:0x7f856fd9e159 [ 126.630662][ T6297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.630684][ T6297] RSP: 002b:00007f856dff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.630710][ T6297] RAX: ffffffffffffffda RBX: 00007f8570025fa0 RCX: 00007f856fd9e159 [ 126.630729][ T6297] RDX: 000000000000c040 RSI: 0000200000000100 RDI: 0000000000000003 [ 126.630745][ T6297] RBP: 00007f856dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 126.630761][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.630777][ T6297] R13: 00007f8570026038 R14: 00007f8570025fa0 R15: 00007ffcf6cc20f8 [ 126.630814][ T6297] [ 127.269731][ T6303] net_ratelimit: 425 callbacks suppressed [ 127.336763][ T6306] syzkaller1: entered promiscuous mode [ 127.336783][ T6306] syzkaller1: entered allmulticast mode [ 127.363739][ T5695] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 127.493768][ T5695] usb 1-1: device descriptor read/64, error -71 [ 127.649811][ T5683] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.672103][ T6311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.174'. [ 127.672130][ T6311] openvswitch: netlink: Message has 24 unknown bytes. [ 127.746186][ T5695] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 127.796849][ T5683] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.798395][ T5683] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.798508][ T5683] usb 2-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 127.798539][ T5683] usb 2-1: config 1 interface 0 has no altsetting 0 [ 127.802155][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 127.802180][ T5683] usb 2-1: SerialNumber: syz [ 127.876132][ T5683] cdc_ether 2-1:1.0: GUID doesn't match [ 127.903877][ T5695] usb 1-1: device descriptor read/64, error -71 [ 128.014604][ T5695] usb usb1-port1: attempt power cycle [ 128.078398][ T5683] usb 2-1: USB disconnect, device number 7 [ 128.097333][ T6089] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.143276][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.307731][ T6089] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.336944][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.338019][ T6089] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.373945][ T5695] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 128.394549][ T5695] usb 1-1: device descriptor read/8, error -71 [ 128.400458][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.409603][ T6089] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.432098][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.643902][ T5695] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 128.665399][ T5695] usb 1-1: device descriptor read/8, error -71 [ 128.691535][ T6089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.756856][ T6089] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.759377][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.779911][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.782284][ T5695] usb usb1-port1: unable to enumerate USB device [ 128.804431][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.832233][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.832344][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.885845][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.885956][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.506725][ T6337] FAULT_INJECTION: forcing a failure. [ 129.506725][ T6337] name failslab, interval 1, probability 0, space 0, times 0 [ 129.506769][ T6337] CPU: 0 UID: 0 PID: 6337 Comm: syz.1.179 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.506806][ T6337] Tainted: [L]=SOFTLOCKUP [ 129.506815][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.506833][ T6337] Call Trace: [ 129.506844][ T6337] [ 129.506855][ T6337] dump_stack_lvl+0xe8/0x150 [ 129.506895][ T6337] should_fail_ex+0x3eb/0x540 [ 129.506931][ T6337] should_failslab+0xa8/0x100 [ 129.506961][ T6337] ? sctp_chunkify+0x5a/0x260 [ 129.506998][ T6337] kmem_cache_alloc_noprof+0x9c/0x600 [ 129.507035][ T6337] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 129.507071][ T6337] ? __alloc_skb+0x27a/0x7a0 [ 129.507096][ T6337] ? sctp_chunkify+0x5a/0x260 [ 129.507137][ T6337] sctp_chunkify+0x5a/0x260 [ 129.507175][ T6337] _sctp_make_chunk+0x122/0x290 [ 129.507215][ T6337] sctp_make_heartbeat+0xc4/0x4b0 [ 129.507248][ T6337] ? lock_acquire+0x115/0x350 [ 129.507291][ T6337] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 129.507335][ T6337] ? is_bpf_text_address+0x292/0x2b0 [ 129.507363][ T6337] ? is_bpf_text_address+0x26/0x2b0 [ 129.507395][ T6337] sctp_sf_do_prm_requestheartbeat+0x2e/0x280 [ 129.507432][ T6337] sctp_do_sm+0x239/0x5dd0 [ 129.507471][ T6337] ? arch_stack_walk+0xfb/0x150 [ 129.507497][ T6337] ? __pfx_sctp_pname+0x10/0x10 [ 129.507540][ T6337] ? stack_trace_save+0xa9/0x100 [ 129.507575][ T6337] ? __pfx_sctp_do_sm+0x10/0x10 [ 129.507603][ T6337] ? vprintk_emit+0x4ee/0x560 [ 129.507687][ T6337] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 129.507757][ T6337] sctp_apply_peer_addr_params+0xd4/0x1880 [ 129.507806][ T6337] sctp_setsockopt_peer_addr_params+0x6be/0x980 [ 129.507847][ T6337] sctp_setsockopt+0x759/0x12c0 [ 129.507887][ T6337] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 129.507930][ T6337] do_sock_setsockopt+0x17c/0x1b0 [ 129.507963][ T6337] __x64_sys_setsockopt+0x13d/0x1b0 [ 129.507998][ T6337] do_syscall_64+0x166/0x520 [ 129.508022][ T6337] ? trace_irq_disable+0x3b/0x140 [ 129.508059][ T6337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.508086][ T6337] ? clear_bhb_loop+0x70/0xc0 [ 129.508117][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.508143][ T6337] RIP: 0033:0x7fe8e6b9e159 [ 129.508167][ T6337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.508189][ T6337] RSP: 002b:00007fe8e7aae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 129.508218][ T6337] RAX: ffffffffffffffda RBX: 00007fe8e6e25fa0 RCX: 00007fe8e6b9e159 [ 129.508237][ T6337] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 129.508254][ T6337] RBP: 00007fe8e6c3503b R08: 000000000000009c R09: 0000000000000000 [ 129.508271][ T6337] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 129.508289][ T6337] R13: 00007fe8e6e26038 R14: 00007fe8e6e25fa0 R15: 00007fffd2389ee8 [ 129.508328][ T6337] [ 130.125814][ T6345] FAULT_INJECTION: forcing a failure. [ 130.125814][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 130.125847][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: syz.1.182 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.125878][ T6345] Tainted: [L]=SOFTLOCKUP [ 130.125888][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.125902][ T6345] Call Trace: [ 130.125912][ T6345] [ 130.125922][ T6345] dump_stack_lvl+0xe8/0x150 [ 130.125959][ T6345] should_fail_ex+0x3eb/0x540 [ 130.125992][ T6345] should_failslab+0xa8/0x100 [ 130.126021][ T6345] __kmalloc_cache_noprof+0x9e/0x600 [ 130.126057][ T6345] ? proc_thread_self_get_link+0xfc/0x190 [ 130.126093][ T6345] ? proc_thread_self_get_link+0xfc/0x190 [ 130.126129][ T6345] ? __task_pid_nr_ns+0x399/0x470 [ 130.126167][ T6345] proc_thread_self_get_link+0xfc/0x190 [ 130.126204][ T6345] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 130.126242][ T6345] pick_link+0x77d/0xfd0 [ 130.126285][ T6345] step_into_slowpath+0x58a/0x820 [ 130.126318][ T6345] ? __pfx_step_into_slowpath+0x10/0x10 [ 130.126361][ T6345] link_path_walk+0xd5e/0x1910 [ 130.126415][ T6345] path_openat+0x1c4/0x1e40 [ 130.126473][ T6345] do_file_open+0x23e/0x4a0 [ 130.126516][ T6345] ? __pfx_do_file_open+0x10/0x10 [ 130.126590][ T6345] ? _raw_spin_unlock+0x28/0x50 [ 130.126623][ T6345] ? alloc_fd+0x651/0x6c0 [ 130.126664][ T6345] do_sys_openat2+0x115/0x200 [ 130.126692][ T6345] ? __se_sys_futex+0x3a8/0x450 [ 130.126721][ T6345] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.126755][ T6345] ? rcu_is_watching+0x16/0xb0 [ 130.126786][ T6345] __x64_sys_openat+0x138/0x170 [ 130.126821][ T6345] do_syscall_64+0x166/0x520 [ 130.126845][ T6345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.126870][ T6345] ? clear_bhb_loop+0x70/0xc0 [ 130.126901][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.126926][ T6345] RIP: 0033:0x7fe8e6b5e98e [ 130.126949][ T6345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.126970][ T6345] RSP: 002b:00007fe8e7aadf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.126997][ T6345] RAX: ffffffffffffffda RBX: 00007fe8e7aae6c0 RCX: 00007fe8e6b5e98e [ 130.127015][ T6345] RDX: 0000000000000002 RSI: 00007fe8e6c34942 RDI: ffffffffffffff9c [ 130.127032][ T6345] RBP: 00007fe8e6c3503b R08: 0000000000000000 R09: 0000000000000000 [ 130.127048][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.127064][ T6345] R13: 00007fe8e6e26038 R14: 00007fe8e6e25fa0 R15: 00007fffd2389ee8 [ 130.127102][ T6345] [ 130.129873][ T6345] FAULT_INJECTION: forcing a failure. [ 130.129873][ T6345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.129903][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: syz.1.182 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.129935][ T6345] Tainted: [L]=SOFTLOCKUP [ 130.129944][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.129959][ T6345] Call Trace: [ 130.129968][ T6345] [ 130.129978][ T6345] dump_stack_lvl+0xe8/0x150 [ 130.130012][ T6345] should_fail_ex+0x3eb/0x540 [ 130.130044][ T6345] _copy_from_user+0x2d/0xb0 [ 130.130074][ T6345] sctp_setsockopt+0x1c4/0x12c0 [ 130.130109][ T6345] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 130.130147][ T6345] do_sock_setsockopt+0x17c/0x1b0 [ 130.130176][ T6345] __x64_sys_setsockopt+0x13d/0x1b0 [ 130.130207][ T6345] do_syscall_64+0x166/0x520 [ 130.130228][ T6345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.130252][ T6345] ? clear_bhb_loop+0x70/0xc0 [ 130.130281][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.130303][ T6345] RIP: 0033:0x7fe8e6b9e159 [ 130.130324][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.130343][ T6345] RSP: 002b:00007fe8e7aae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.130368][ T6345] RAX: ffffffffffffffda RBX: 00007fe8e6e25fa0 RCX: 00007fe8e6b9e159 [ 130.130385][ T6345] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 130.130399][ T6345] RBP: 00007fe8e7aae090 R08: 000000000000009c R09: 0000000000000000 [ 130.130413][ T6345] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 130.130428][ T6345] R13: 00007fe8e6e26038 R14: 00007fe8e6e25fa0 R15: 00007fffd2389ee8 [ 130.130469][ T6345] [ 130.313972][ T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 130.514523][ T10] usb 4-1: device descriptor read/64, error -71 [ 130.766863][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 130.926450][ T10] usb 4-1: device descriptor read/64, error -71 [ 131.044645][ T5751] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 131.055731][ T10] usb usb4-port1: attempt power cycle [ 131.216671][ T5751] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 131.218526][ T5751] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.218606][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.262265][ T5751] usb 1-1: config 0 descriptor?? [ 131.296676][ T5751] pwc: Askey VC010 type 2 USB webcam detected. [ 131.404969][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 131.426231][ T10] usb 4-1: device descriptor read/8, error -71 [ 131.448357][ T6089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.663956][ T10] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 131.687434][ T10] usb 4-1: device descriptor read/8, error -71 [ 131.701702][ T6363] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 131.701756][ T6363] overlayfs: failed to set xattr on upper [ 131.701766][ T6363] overlayfs: ...falling back to redirect_dir=nofollow. [ 131.701777][ T6363] overlayfs: ...falling back to uuid=null. [ 131.794151][ T10] usb usb4-port1: unable to enumerate USB device [ 131.822444][ T5751] pwc: recv_control_msg error -32 req 02 val 2b00 [ 132.090532][ T6348] FAULT_INJECTION: forcing a failure. [ 132.090532][ T6348] name failslab, interval 1, probability 0, space 0, times 0 [ 132.090590][ T6348] CPU: 1 UID: 0 PID: 6348 Comm: syz.0.183 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.090623][ T6348] Tainted: [L]=SOFTLOCKUP [ 132.090633][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.090648][ T6348] Call Trace: [ 132.090658][ T6348] [ 132.090670][ T6348] dump_stack_lvl+0xe8/0x150 [ 132.090710][ T6348] should_fail_ex+0x3eb/0x540 [ 132.090742][ T6348] ? __alloc_skb+0x1db/0x7a0 [ 132.090765][ T6348] should_failslab+0xa8/0x100 [ 132.090793][ T6348] ? __alloc_skb+0x1db/0x7a0 [ 132.090813][ T6348] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 132.090846][ T6348] ? __alloc_skb+0x18d/0x7a0 [ 132.090870][ T6348] ? __alloc_skb+0x1db/0x7a0 [ 132.090900][ T6348] __alloc_skb+0x1db/0x7a0 [ 132.090926][ T6348] sctp_packet_transmit+0x2f2/0x2bb0 [ 132.090981][ T6348] ? sctp_outq_flush+0x2be4/0x3380 [ 132.091016][ T6348] ? sctp_outq_flush+0x2be4/0x3380 [ 132.091040][ T6348] ? sctp_outq_flush+0x2be4/0x3380 [ 132.091066][ T6348] sctp_outq_flush+0x2ec6/0x3380 [ 132.091102][ T6348] ? lockdep_hardirqs_on+0x7b/0x110 [ 132.091138][ T6348] ? irqentry_exit+0x218/0x910 [ 132.091171][ T6348] ? trace_irq_disable+0x3b/0x140 [ 132.091209][ T6348] ? __pfx_sctp_outq_flush+0x10/0x10 [ 132.091245][ T6348] ? sctp_do_8_2_transport_strike+0x43c/0x8d0 [ 132.091276][ T6348] ? sctp_outq_uncork+0x4d/0xa0 [ 132.091305][ T6348] sctp_do_sm+0x55a1/0x5dd0 [ 132.091331][ T6348] ? arch_stack_walk+0xfb/0x150 [ 132.091371][ T6348] ? __pfx_sctp_do_sm+0x10/0x10 [ 132.091404][ T6348] ? vprintk_emit+0x4ee/0x560 [ 132.091485][ T6348] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 132.091531][ T6348] sctp_apply_peer_addr_params+0xd4/0x1880 [ 132.091574][ T6348] sctp_setsockopt_peer_addr_params+0x6be/0x980 [ 132.091612][ T6348] sctp_setsockopt+0x759/0x12c0 [ 132.091649][ T6348] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 132.091686][ T6348] do_sock_setsockopt+0x17c/0x1b0 [ 132.091716][ T6348] __x64_sys_setsockopt+0x13d/0x1b0 [ 132.091749][ T6348] do_syscall_64+0x166/0x520 [ 132.091769][ T6348] ? trace_irq_disable+0x3b/0x140 [ 132.091798][ T6348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.091822][ T6348] ? clear_bhb_loop+0x70/0xc0 [ 132.091851][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.091876][ T6348] RIP: 0033:0x7f3657d9e159 [ 132.091900][ T6348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.091920][ T6348] RSP: 002b:00007f3655ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.091946][ T6348] RAX: ffffffffffffffda RBX: 00007f3658025fa0 RCX: 00007f3657d9e159 [ 132.091965][ T6348] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000007 [ 132.091980][ T6348] RBP: 00007f3657e3503b R08: 000000000000009c R09: 0000000000000000 [ 132.091996][ T6348] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 132.092012][ T6348] R13: 00007f3658026038 R14: 00007f3658025fa0 R15: 00007ffeb4887308 [ 132.092049][ T6348] [ 132.126553][ T5751] pwc: recv_control_msg error -71 req 02 val 2c00 [ 132.130085][ T5751] pwc: recv_control_msg error -71 req 04 val 1000 [ 132.133975][ T5751] pwc: recv_control_msg error -71 req 04 val 1300 [ 132.135322][ T5751] pwc: recv_control_msg error -71 req 04 val 1400 [ 132.138133][ T5751] pwc: recv_control_msg error -71 req 02 val 2000 [ 132.142603][ T5751] pwc: recv_control_msg error -71 req 02 val 2100 [ 132.148168][ T5751] pwc: recv_control_msg error -71 req 04 val 1500 [ 132.171533][ T5751] pwc: recv_control_msg error -71 req 02 val 2500 [ 132.190226][ T5751] pwc: recv_control_msg error -71 req 02 val 2400 [ 132.201654][ T5751] pwc: recv_control_msg error -71 req 02 val 2600 [ 132.206562][ T5751] pwc: recv_control_msg error -71 req 02 val 2900 [ 132.214672][ T5751] pwc: recv_control_msg error -71 req 02 val 2800 [ 132.230886][ T5751] pwc: recv_control_msg error -71 req 04 val 1100 [ 132.234113][ T5751] pwc: recv_control_msg error -71 req 04 val 1200 [ 132.238908][ T5696] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 132.363923][ C1] net_ratelimit: 391 callbacks suppressed [ 132.446093][ T5696] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= 1.00 [ 132.489185][ T5696] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 132.489277][ T5696] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 132.489443][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.507557][ T5751] pwc: Registered as video103. [ 132.561301][ T5751] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 132.605200][ T6369] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 132.605378][ T6369] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 132.633064][ T5751] usb 1-1: USB disconnect, device number 16 [ 132.796750][ T5696] ushc 2-1:1.0: probe with driver ushc failed with error -110 [ 132.822931][ T6089] veth0_vlan: entered promiscuous mode [ 132.861883][ T6089] veth1_vlan: entered promiscuous mode [ 132.892482][ T5696] usb 2-1: USB disconnect, device number 8 [ 133.018122][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.018201][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.064881][ T6089] veth0_macvtap: entered promiscuous mode [ 133.089824][ T6089] veth1_macvtap: entered promiscuous mode [ 133.233073][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.265990][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.284419][ T5696] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.325533][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.336861][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.388729][ T149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.415164][ T149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.434017][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 133.440149][ T5696] usb 2-1: unable to get BOS descriptor or descriptor too short [ 133.440194][ T5696] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 133.441821][ T5696] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.441982][ T5696] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.493111][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.493137][ T5696] usb 2-1: Product: syz [ 133.493156][ T5696] usb 2-1: Manufacturer: syz [ 133.493175][ T5696] usb 2-1: SerialNumber: syz [ 133.627469][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.627515][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.712410][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.712426][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.113266][ T6395] FAULT_INJECTION: forcing a failure. [ 134.113266][ T6395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.113314][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz.4.115 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.113346][ T6395] Tainted: [L]=SOFTLOCKUP [ 134.113355][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.113369][ T6395] Call Trace: [ 134.113378][ T6395] [ 134.113389][ T6395] dump_stack_lvl+0xe8/0x150 [ 134.113424][ T6395] should_fail_ex+0x3eb/0x540 [ 134.113455][ T6395] strncpy_from_user+0x36/0x2c0 [ 134.113486][ T6395] do_getname+0x77/0x250 [ 134.113515][ T6395] do_sys_openat2+0xcc/0x200 [ 134.113543][ T6395] ? __pfx_do_sys_openat2+0x10/0x10 [ 134.113572][ T6395] ? ksys_write+0x242/0x270 [ 134.113606][ T6395] ? __pfx_ksys_write+0x10/0x10 [ 134.113645][ T6395] __x64_sys_openat+0x138/0x170 [ 134.113678][ T6395] do_syscall_64+0x166/0x520 [ 134.113699][ T6395] ? trace_irq_disable+0x3b/0x140 [ 134.113732][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.113756][ T6395] ? clear_bhb_loop+0x70/0xc0 [ 134.113785][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.113809][ T6395] RIP: 0033:0x7f5c4215e98e [ 134.113830][ T6395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 134.113851][ T6395] RSP: 002b:00007f5c42f7ff18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.113877][ T6395] RAX: ffffffffffffffda RBX: 00007f5c42f806c0 RCX: 00007f5c4215e98e [ 134.113894][ T6395] RDX: 0000000000000000 RSI: 00007f5c42234776 RDI: ffffffffffffff9c [ 134.113911][ T6395] RBP: 00007f5c42f80090 R08: 0000000000000000 R09: 0000000000000000 [ 134.113926][ T6395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.113940][ T6395] R13: 00007f5c42426038 R14: 00007f5c42425fa0 R15: 00007ffc973e1f38 [ 134.113976][ T6395] [ 134.245833][ T6396] FAULT_INJECTION: forcing a failure. [ 134.245833][ T6396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.261174][ T6396] CPU: 1 UID: 0 PID: 6396 Comm: syz.3.193 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.261289][ T6396] Tainted: [L]=SOFTLOCKUP [ 134.261312][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.261353][ T6396] Call Trace: [ 134.261376][ T6396] [ 134.261405][ T6396] dump_stack_lvl+0xe8/0x150 [ 134.261501][ T6396] should_fail_ex+0x3eb/0x540 [ 134.261586][ T6396] _copy_from_user+0x2d/0xb0 [ 134.261668][ T6396] kstrtouint_from_user+0xd6/0x180 [ 134.261740][ T6396] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 134.261818][ T6396] ? lock_acquire+0x115/0x350 [ 134.261914][ T6396] proc_fail_nth_write+0x8e/0x210 [ 134.262009][ T6396] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 134.262116][ T6396] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 134.262199][ T6396] vfs_write+0x296/0xba0 [ 134.262323][ T6396] ? __pfx_vfs_write+0x10/0x10 [ 134.262408][ T6396] ? __fget_files+0x2a/0x420 [ 134.262501][ T6396] ? __fget_files+0x3a2/0x420 [ 134.262582][ T6396] ? __fget_files+0x2a/0x420 [ 134.262692][ T6396] ksys_write+0x150/0x270 [ 134.262787][ T6396] ? __pfx_ksys_write+0x10/0x10 [ 134.262902][ T6396] do_syscall_64+0x166/0x520 [ 134.262957][ T6396] ? trace_irq_disable+0x3b/0x140 [ 134.263050][ T6396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.263112][ T6396] ? clear_bhb_loop+0x70/0xc0 [ 134.263179][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.263241][ T6396] RIP: 0033:0x7f856fd5e98e [ 134.263306][ T6396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 134.263359][ T6396] RSP: 002b:00007f856dfd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.263431][ T6396] RAX: ffffffffffffffda RBX: 00007f856dfd56c0 RCX: 00007f856fd5e98e [ 134.263474][ T6396] RDX: 0000000000000001 RSI: 00007f856dfd50a0 RDI: 0000000000000005 [ 134.263515][ T6396] RBP: 00007f856dfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 134.263556][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.263590][ T6396] R13: 00007f8570026128 R14: 00007f8570026090 R15: 00007ffcf6cc20f8 [ 134.263702][ T6396] [ 134.780495][ T5696] usb 2-1: USB disconnect, device number 9 [ 135.244244][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.254032][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 135.328958][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 135.353062][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 135.447097][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.452272][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.486860][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.486883][ T10] usb 1-1: Product: syz [ 135.486899][ T10] usb 1-1: Manufacturer: syz [ 135.486915][ T10] usb 1-1: SerialNumber: syz [ 135.636188][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 136.029797][ T6402] netlink: 148 bytes leftover after parsing attributes in process `syz.0.195'. [ 136.169673][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 136.459600][ T6411] ceph: No mds server is up or the cluster is laggy [ 136.473546][ T6418] ceph: No mds server is up or the cluster is laggy [ 136.862760][ T10] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 136.892214][ T10] cdc_ncm 1-1:1.0: bind() failure [ 136.958682][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 136.958727][ T10] cdc_ncm 1-1:1.1: bind() failure [ 137.004305][ T10] usb 1-1: USB disconnect, device number 17 [ 137.353879][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 137.396958][ T5691] net_ratelimit: 594 callbacks suppressed [ 137.516121][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 137.517058][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.518455][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.518525][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.521881][ T9] usb 4-1: config 0 descriptor?? [ 137.948454][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 138.120565][ T6428] CIFS: VFS: UNC: path must begin with // or \\ [ 138.120582][ T6428] Malformed UNC in devname [ 138.120582][ T6428] [ 138.120672][ T6428] CIFS: VFS: Malformed UNC in devname [ 138.245670][ T6433] FAULT_INJECTION: forcing a failure. [ 138.245670][ T6433] name failslab, interval 1, probability 0, space 0, times 0 [ 138.245700][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: syz.4.205 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.245732][ T6433] Tainted: [L]=SOFTLOCKUP [ 138.245741][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.245760][ T6433] Call Trace: [ 138.245770][ T6433] [ 138.245780][ T6433] dump_stack_lvl+0xe8/0x150 [ 138.245815][ T6433] should_fail_ex+0x3eb/0x540 [ 138.245857][ T6433] should_failslab+0xa8/0x100 [ 138.245886][ T6433] __kmalloc_cache_noprof+0x9e/0x600 [ 138.245922][ T6433] ? ceph_create_client+0x6f/0x310 [ 138.245956][ T6433] ? ceph_create_client+0x6f/0x310 [ 138.245996][ T6433] ceph_create_client+0x6f/0x310 [ 138.246041][ T6433] ceph_get_tree+0x1ca/0x1a40 [ 138.246078][ T6433] ? apparmor_capable+0x126/0x170 [ 138.246119][ T6433] vfs_get_tree+0x92/0x2a0 [ 138.246156][ T6433] vfs_cmd_create+0xa2/0x200 [ 138.246185][ T6433] __se_sys_fsconfig+0x6b9/0x810 [ 138.246217][ T6433] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 138.246240][ T6433] ? ksys_write+0x242/0x270 [ 138.246275][ T6433] ? __pfx_ksys_write+0x10/0x10 [ 138.246314][ T6433] ? __x64_sys_fsconfig+0x20/0xc0 [ 138.246341][ T6433] do_syscall_64+0x166/0x520 [ 138.246366][ T6433] ? trace_irq_disable+0x3b/0x140 [ 138.246395][ T6433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.246421][ T6433] ? clear_bhb_loop+0x70/0xc0 [ 138.246450][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.246475][ T6433] RIP: 0033:0x7f5c4219e159 [ 138.246497][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.246517][ T6433] RSP: 002b:00007f5c42f80028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 138.246543][ T6433] RAX: ffffffffffffffda RBX: 00007f5c42425fa0 RCX: 00007f5c4219e159 [ 138.246567][ T6433] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 138.246581][ T6433] RBP: 00007f5c42f80090 R08: 0000000000000000 R09: 0000000000000000 [ 138.246597][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.246612][ T6433] R13: 00007f5c42426038 R14: 00007f5c42425fa0 R15: 00007ffc973e1f38 [ 138.246649][ T6433] [ 138.586977][ T6434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.587942][ T6434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.666787][ T5705] usb 4-1: USB disconnect, device number 13 [ 139.026786][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 139.186372][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.188651][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.291318][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.291341][ T9] usb 2-1: Product: syz [ 139.291357][ T9] usb 2-1: Manufacturer: syz [ 139.291374][ T9] usb 2-1: SerialNumber: syz [ 139.417160][ T6453] FAULT_INJECTION: forcing a failure. [ 139.417160][ T6453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.417196][ T6453] CPU: 0 UID: 0 PID: 6453 Comm: syz.4.210 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.417232][ T6453] Tainted: [L]=SOFTLOCKUP [ 139.417242][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.417256][ T6453] Call Trace: [ 139.417266][ T6453] [ 139.417277][ T6453] dump_stack_lvl+0xe8/0x150 [ 139.417313][ T6453] should_fail_ex+0x3eb/0x540 [ 139.417345][ T6453] _copy_from_user+0x2d/0xb0 [ 139.417378][ T6453] kstrtouint_from_user+0xd6/0x180 [ 139.417407][ T6453] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 139.417443][ T6453] ? lock_acquire+0x115/0x350 [ 139.417482][ T6453] proc_fail_nth_write+0x8e/0x210 [ 139.417518][ T6453] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 139.417562][ T6453] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 139.417596][ T6453] vfs_write+0x296/0xba0 [ 139.417639][ T6453] ? __pfx_vfs_write+0x10/0x10 [ 139.417673][ T6453] ? __fget_files+0x2a/0x420 [ 139.417707][ T6453] ? __fget_files+0x3a2/0x420 [ 139.417735][ T6453] ? __fget_files+0x2a/0x420 [ 139.417774][ T6453] ksys_write+0x150/0x270 [ 139.417818][ T6453] ? __pfx_ksys_write+0x10/0x10 [ 139.417864][ T6453] do_syscall_64+0x166/0x520 [ 139.417887][ T6453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.417913][ T6453] ? clear_bhb_loop+0x70/0xc0 [ 139.417942][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.417966][ T6453] RIP: 0033:0x7f5c4215e98e [ 139.417988][ T6453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 139.418009][ T6453] RSP: 002b:00007f5c403f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.418034][ T6453] RAX: ffffffffffffffda RBX: 00007f5c403f66c0 RCX: 00007f5c4215e98e [ 139.418051][ T6453] RDX: 0000000000000001 RSI: 00007f5c403f60a0 RDI: 0000000000000004 [ 139.418067][ T6453] RBP: 00007f5c403f6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.418082][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.418097][ T6453] R13: 00007f5c42426128 R14: 00007f5c42426090 R15: 00007ffc973e1f38 [ 139.418134][ T6453] [ 140.977102][ T6468] input: syz0 as /devices/virtual/input/input8 [ 141.169820][ T9] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 141.187214][ T9] cdc_ncm 2-1:1.0: bind() failure [ 141.270340][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 141.270395][ T9] cdc_ncm 2-1:1.1: bind() failure [ 141.338969][ T9] usb 2-1: USB disconnect, device number 10 [ 142.137469][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 142.311065][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 142.331580][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.331636][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.331665][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 142.331694][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.331769][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.446512][ C1] net_ratelimit: 243 callbacks suppressed [ 143.058783][ T6484] FAULT_INJECTION: forcing a failure. [ 143.058783][ T6484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.058817][ T6484] CPU: 0 UID: 0 PID: 6484 Comm: syz.3.218 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.058849][ T6484] Tainted: [L]=SOFTLOCKUP [ 143.058858][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.058873][ T6484] Call Trace: [ 143.058882][ T6484] [ 143.058893][ T6484] dump_stack_lvl+0xe8/0x150 [ 143.058929][ T6484] should_fail_ex+0x3eb/0x540 [ 143.058961][ T6484] _copy_from_user+0x2d/0xb0 [ 143.058993][ T6484] kstrtouint_from_user+0xd6/0x180 [ 143.059031][ T6484] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 143.059066][ T6484] ? lock_acquire+0x115/0x350 [ 143.059107][ T6484] proc_fail_nth_write+0x8e/0x210 [ 143.059143][ T6484] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 143.059187][ T6484] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 143.059221][ T6484] vfs_write+0x296/0xba0 [ 143.059264][ T6484] ? __pfx_vfs_write+0x10/0x10 [ 143.059297][ T6484] ? __fget_files+0x2a/0x420 [ 143.059332][ T6484] ? __fget_files+0x3a2/0x420 [ 143.059365][ T6484] ? __fget_files+0x2a/0x420 [ 143.059404][ T6484] ksys_write+0x150/0x270 [ 143.059440][ T6484] ? __pfx_ksys_write+0x10/0x10 [ 143.059485][ T6484] do_syscall_64+0x166/0x520 [ 143.059507][ T6484] ? trace_irq_disable+0x3b/0x140 [ 143.059541][ T6484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.059566][ T6484] ? clear_bhb_loop+0x70/0xc0 [ 143.059596][ T6484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.059620][ T6484] RIP: 0033:0x7f856fd5e98e [ 143.059642][ T6484] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 143.059662][ T6484] RSP: 002b:00007f856dff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.059688][ T6484] RAX: ffffffffffffffda RBX: 00007f856dff66c0 RCX: 00007f856fd5e98e [ 143.059706][ T6484] RDX: 0000000000000001 RSI: 00007f856dff60a0 RDI: 0000000000000003 [ 143.059721][ T6484] RBP: 00007f856dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 143.059737][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.059752][ T6484] R13: 00007f8570026038 R14: 00007f8570025fa0 R15: 00007ffcf6cc20f8 [ 143.059789][ T6484] [ 143.340560][ T9] usb 2-1: USB disconnect, device number 11 [ 143.785707][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 143.934388][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 143.935298][ T10] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 143.936980][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.937038][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.978903][ T10] usb 5-1: config 0 descriptor?? [ 144.721277][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.722197][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.783187][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.800760][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.063129][ T6488] netlink: 'syz.4.219': attribute type 15 has an invalid length. [ 145.063158][ T6488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.219'. [ 145.109352][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.237056][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.256190][ T6511] FAULT_INJECTION: forcing a failure. [ 145.256190][ T6511] name failslab, interval 1, probability 0, space 0, times 0 [ 145.256227][ T6511] CPU: 0 UID: 0 PID: 6511 Comm: syz.3.225 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.256260][ T6511] Tainted: [L]=SOFTLOCKUP [ 145.256270][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.256288][ T6511] Call Trace: [ 145.256298][ T6511] [ 145.256308][ T6511] dump_stack_lvl+0xe8/0x150 [ 145.256346][ T6511] should_fail_ex+0x3eb/0x540 [ 145.256377][ T6511] ? __alloc_skb+0x1db/0x7a0 [ 145.256400][ T6511] should_failslab+0xa8/0x100 [ 145.256427][ T6511] ? __alloc_skb+0x1db/0x7a0 [ 145.256448][ T6511] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 145.256482][ T6511] ? __alloc_skb+0x18d/0x7a0 [ 145.256505][ T6511] ? __alloc_skb+0x1db/0x7a0 [ 145.256534][ T6511] __alloc_skb+0x1db/0x7a0 [ 145.256562][ T6511] netlink_dump+0x1e7/0xee0 [ 145.256605][ T6511] ? __pfx_netlink_dump+0x10/0x10 [ 145.256632][ T6511] ? security_capable+0x7e/0x2c0 [ 145.256682][ T6511] __netlink_dump_start+0x589/0x7b0 [ 145.256719][ T6511] inet_diag_handler_cmd+0x1df/0x2c0 [ 145.256751][ T6511] ? lock_acquire+0x115/0x350 [ 145.256787][ T6511] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 145.256818][ T6511] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 145.256848][ T6511] ? __pfx_inet_diag_dump+0x10/0x10 [ 145.256877][ T6511] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 145.256919][ T6511] ? sock_diag_lock_handler+0x19/0x290 [ 145.256957][ T6511] ? sock_diag_lock_handler+0x19/0x290 [ 145.256999][ T6511] sock_diag_rcv_msg+0x4b0/0x5f0 [ 145.257042][ T6511] netlink_rcv_skb+0x226/0x4a0 [ 145.257073][ T6511] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 145.257112][ T6511] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.257157][ T6511] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.257187][ T6511] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.257223][ T6511] netlink_unicast+0x7bd/0x940 [ 145.257262][ T6511] netlink_sendmsg+0x7c3/0xae0 [ 145.257300][ T6511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.257340][ T6511] ? apparmor_socket_sendmsg+0x98/0x360 [ 145.257369][ T6511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.257399][ T6511] sock_sendmsg_nosec+0x13a/0x180 [ 145.257435][ T6511] sock_write_iter+0x2de/0x3e0 [ 145.257468][ T6511] ? __pfx_sock_write_iter+0x10/0x10 [ 145.257507][ T6511] ? preempt_schedule_common+0x7f/0xd0 [ 145.257551][ T6511] do_iter_readv_writev+0x612/0x8c0 [ 145.257591][ T6511] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 145.257631][ T6511] ? bpf_lsm_file_permission+0x9/0x20 [ 145.257660][ T6511] ? security_file_permission+0x75/0x260 [ 145.257698][ T6511] ? rw_verify_area+0x203/0x4c0 [ 145.257735][ T6511] vfs_writev+0x343/0x990 [ 145.257769][ T6511] ? __pfx_vfs_writev+0x10/0x10 [ 145.257810][ T6511] ? __fget_files+0x2a/0x420 [ 145.257846][ T6511] ? __fget_files+0x3a2/0x420 [ 145.257875][ T6511] ? __fget_files+0x2a/0x420 [ 145.257923][ T6511] do_writev+0x154/0x2e0 [ 145.257952][ T6511] ? __pfx_do_writev+0x10/0x10 [ 145.257990][ T6511] do_syscall_64+0x166/0x520 [ 145.258013][ T6511] ? trace_irq_disable+0x3b/0x140 [ 145.258046][ T6511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.258071][ T6511] ? clear_bhb_loop+0x70/0xc0 [ 145.258100][ T6511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.258125][ T6511] RIP: 0033:0x7f856fd9e159 [ 145.258148][ T6511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.258169][ T6511] RSP: 002b:00007f856dff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 145.258194][ T6511] RAX: ffffffffffffffda RBX: 00007f8570025fa0 RCX: 00007f856fd9e159 [ 145.258212][ T6511] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 145.258228][ T6511] RBP: 00007f856fe3503b R08: 0000000000000000 R09: 0000000000000000 [ 145.258245][ T6511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.258260][ T6511] R13: 00007f8570026038 R14: 00007f8570025fa0 R15: 00007ffcf6cc20f8 [ 145.258297][ T6511] [ 145.749523][ T10] usb 5-1: string descriptor 0 read error: -71 [ 145.760602][ T10] uclogic 0003:5543:3031.0004: failed retrieving string descriptor #200: -71 [ 145.760667][ T10] uclogic 0003:5543:3031.0004: failed retrieving pen parameters: -71 [ 145.760687][ T10] uclogic 0003:5543:3031.0004: failed probing pen v2 parameters: -71 [ 145.760753][ T10] uclogic 0003:5543:3031.0004: failed probing parameters: -71 [ 145.760865][ T10] uclogic 0003:5543:3031.0004: probe with driver uclogic failed with error -71 [ 145.836377][ T10] usb 5-1: USB disconnect, device number 2 [ 145.911391][ T6510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.226'. [ 147.298082][ T6521] dvmrp24: entered allmulticast mode [ 147.731492][ C1] net_ratelimit: 222 callbacks suppressed [ 148.121926][ T6540] No source specified [ 150.203358][ T6569] FAULT_INJECTION: forcing a failure. [ 150.203358][ T6569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.203394][ T6569] CPU: 0 UID: 0 PID: 6569 Comm: syz.1.240 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.203427][ T6569] Tainted: [L]=SOFTLOCKUP [ 150.203436][ T6569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.203451][ T6569] Call Trace: [ 150.203470][ T6569] [ 150.203481][ T6569] dump_stack_lvl+0xe8/0x150 [ 150.203519][ T6569] should_fail_ex+0x3eb/0x540 [ 150.203552][ T6569] _copy_to_user+0x31/0xb0 [ 150.203587][ T6569] __se_sys_newfstat+0x37b/0x440 [ 150.203623][ T6569] ? __pfx___se_sys_newfstat+0x10/0x10 [ 150.203664][ T6569] ? __pfx_do_futex+0x10/0x10 [ 150.203714][ T6569] ? rcu_is_watching+0x16/0xb0 [ 150.203752][ T6569] do_syscall_64+0x166/0x520 [ 150.203775][ T6569] ? trace_irq_disable+0x3b/0x140 [ 150.203809][ T6569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.203834][ T6569] ? clear_bhb_loop+0x70/0xc0 [ 150.203864][ T6569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.203889][ T6569] RIP: 0033:0x7fe8e6b9e159 [ 150.203911][ T6569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.203932][ T6569] RSP: 002b:00007fe8e7aae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 150.203958][ T6569] RAX: ffffffffffffffda RBX: 00007fe8e6e25fa0 RCX: 00007fe8e6b9e159 [ 150.203976][ T6569] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 150.203992][ T6569] RBP: 00007fe8e6c3503b R08: 0000000000000000 R09: 0000000000000000 [ 150.204009][ T6569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.204024][ T6569] R13: 00007fe8e6e26038 R14: 00007fe8e6e25fa0 R15: 00007fffd2389ee8 [ 150.204060][ T6569] [ 150.498462][ T6571] FAULT_INJECTION: forcing a failure. [ 150.498462][ T6571] name failslab, interval 1, probability 0, space 0, times 0 [ 150.498499][ T6571] CPU: 0 UID: 0 PID: 6571 Comm: syz.3.241 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.498531][ T6571] Tainted: [L]=SOFTLOCKUP [ 150.498541][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.498556][ T6571] Call Trace: [ 150.498566][ T6571] [ 150.498577][ T6571] dump_stack_lvl+0xe8/0x150 [ 150.498614][ T6571] should_fail_ex+0x3eb/0x540 [ 150.498647][ T6571] should_failslab+0xa8/0x100 [ 150.498676][ T6571] __kmalloc_cache_noprof+0x9e/0x600 [ 150.498714][ T6571] ? nf_tables_commit+0x906/0xad60 [ 150.498738][ T6571] ? nf_tables_commit+0x906/0xad60 [ 150.498769][ T6571] nf_tables_commit+0x906/0xad60 [ 150.498808][ T6571] ? lock_acquire+0x115/0x350 [ 150.498843][ T6571] ? nft_pernet+0x23/0x240 [ 150.498879][ T6571] ? nft_pernet+0x23/0x240 [ 150.498903][ T6571] ? nft_pernet+0x23/0x240 [ 150.498935][ T6571] ? __pfx_nf_tables_commit+0x10/0x10 [ 150.498958][ T6571] ? rcu_is_watching+0x16/0xb0 [ 150.498983][ T6571] ? kfree+0x4d/0x650 [ 150.499011][ T6571] ? nft_trans_rule_add+0x315/0x440 [ 150.499046][ T6571] ? nf_tables_newrule+0x258d/0x28a0 [ 150.499098][ T6571] ? __pfx_nf_tables_newrule+0x10/0x10 [ 150.499122][ T6571] ? lock_acquire+0x115/0x350 [ 150.499180][ T6571] nfnetlink_rcv+0x1caf/0x28c0 [ 150.499246][ T6571] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 150.499291][ T6571] ? ref_tracker_free+0x689/0x830 [ 150.499346][ T6571] ? skb_clone+0x246/0x3a0 [ 150.499378][ T6571] ? __netlink_deliver_tap+0x811/0x860 [ 150.499417][ T6571] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.499447][ T6571] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.499484][ T6571] netlink_unicast+0x7bd/0x940 [ 150.499523][ T6571] netlink_sendmsg+0x7c3/0xae0 [ 150.499561][ T6571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.499602][ T6571] ? apparmor_socket_sendmsg+0x98/0x360 [ 150.499641][ T6571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.499679][ T6571] sock_sendmsg_nosec+0x13a/0x180 [ 150.499724][ T6571] ____sys_sendmsg+0x54e/0x850 [ 150.499757][ T6571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.499794][ T6571] ? import_iovec+0x73/0xa0 [ 150.499829][ T6571] ___sys_sendmsg+0x2a5/0x360 [ 150.499855][ T6571] ? __lock_acquire+0x747/0x2de0 [ 150.499895][ T6571] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.499925][ T6571] ? futex_wait+0x2a2/0x390 [ 150.499990][ T6571] ? __fget_files+0x2a/0x420 [ 150.500019][ T6571] ? __fget_files+0x3a2/0x420 [ 150.500060][ T6571] __x64_sys_sendmsg+0x1b1/0x290 [ 150.500101][ T6571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.500150][ T6571] do_syscall_64+0x166/0x520 [ 150.500173][ T6571] ? trace_irq_disable+0x3b/0x140 [ 150.500207][ T6571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.500233][ T6571] ? clear_bhb_loop+0x70/0xc0 [ 150.500263][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.500287][ T6571] RIP: 0033:0x7f856fd9e159 [ 150.500309][ T6571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.500330][ T6571] RSP: 002b:00007f856dff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.500357][ T6571] RAX: ffffffffffffffda RBX: 00007f8570025fa0 RCX: 00007f856fd9e159 [ 150.500375][ T6571] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 150.500391][ T6571] RBP: 00007f856fe3503b R08: 0000000000000000 R09: 0000000000000000 [ 150.500407][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.500422][ T6571] R13: 00007f8570026038 R14: 00007f8570025fa0 R15: 00007ffcf6cc20f8 [ 150.500459][ T6571] [ 152.773474][ T6599] FAULT_INJECTION: forcing a failure. [ 152.773474][ T6599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.773559][ T6599] CPU: 0 UID: 0 PID: 6599 Comm: syz.1.249 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.773592][ T6599] Tainted: [L]=SOFTLOCKUP [ 152.773601][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.773619][ T6599] Call Trace: [ 152.773628][ T6599] [ 152.773638][ T6599] dump_stack_lvl+0xe8/0x150 [ 152.773675][ T6599] should_fail_ex+0x3eb/0x540 [ 152.773707][ T6599] strncpy_from_user+0x36/0x2c0 [ 152.773739][ T6599] do_getname+0x77/0x250 [ 152.773769][ T6599] do_sys_openat2+0xcc/0x200 [ 152.773799][ T6599] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.773828][ T6599] ? ksys_write+0x242/0x270 [ 152.773862][ T6599] ? __pfx_ksys_write+0x10/0x10 [ 152.773898][ T6599] __x64_sys_openat+0x138/0x170 [ 152.773931][ T6599] do_syscall_64+0x166/0x520 [ 152.773953][ T6599] ? trace_irq_disable+0x3b/0x140 [ 152.773986][ T6599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.774011][ T6599] ? clear_bhb_loop+0x70/0xc0 [ 152.774040][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.774064][ T6599] RIP: 0033:0x7fe8e6b9e159 [ 152.774085][ T6599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.774111][ T6599] RSP: 002b:00007fe8e7aae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 152.774137][ T6599] RAX: ffffffffffffffda RBX: 00007fe8e6e25fa0 RCX: 00007fe8e6b9e159 [ 152.774154][ T6599] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 152.774200][ T6599] RBP: 00007fe8e7aae090 R08: 0000000000000000 R09: 0000000000000000 [ 152.774216][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.774231][ T6599] R13: 00007fe8e6e26038 R14: 00007fe8e6e25fa0 R15: 00007fffd2389ee8 [ 152.774267][ T6599] [ 152.845204][ C1] net_ratelimit: 239 callbacks suppressed [ 153.538260][ T5792] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 153.834731][ T31] audit: type=1326 audit(1789483069.984:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.0.251" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3657d9e159 code=0x7ffc0000 [ 153.869685][ T31] audit: type=1326 audit(1789483070.024:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.0.251" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3657d9e159 code=0x7ffc0000 [ 153.928373][ T31] audit: type=1326 audit(1789483070.084:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.0.251" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3657d9e159 code=0x7ffc0000 [ 153.928429][ T31] audit: type=1326 audit(1789483070.084:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.0.251" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3657d9e159 code=0x7ffc0000 [ 153.928480][ T31] audit: type=1326 audit(1789483070.084:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.0.251" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3657d9e159 code=0x7ffc0000 [ 154.023488][ T31] audit: type=1326 audit(1789483070.174:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.0.251" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3657d9e159 code=0x7ffc0000 [ 154.099887][ T31] audit: type=1326 audit(1789483070.254:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.0.251" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3657d9e159 code=0x7ffc0000 [ 154.099944][ T31] audit: type=1326 audit(1789483070.254:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.0.251" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3657d9e159 code=0x7ffc0000 [ 154.100157][ T6607] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 154.202899][ T31] audit: type=1326 audit(1789483070.354:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.0.251" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3657d9e159 code=0x7ffc0000 [ 154.202953][ T31] audit: type=1326 audit(1789483070.354:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.0.251" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3657d9e159 code=0x7ffc0000 [ 155.050977][ T6625] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 155.223953][ T1218] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.390735][ T1218] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 155.428743][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.428767][ T1218] usb 5-1: Product: syz [ 155.428784][ T1218] usb 5-1: Manufacturer: syz [ 155.428801][ T1218] usb 5-1: SerialNumber: syz [ 155.983259][ T1218] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 156.474865][ T6639] FAULT_INJECTION: forcing a failure. [ 156.474865][ T6639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.474902][ T6639] CPU: 0 UID: 0 PID: 6639 Comm: syz.3.259 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.474933][ T6639] Tainted: [L]=SOFTLOCKUP [ 156.474942][ T6639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.474956][ T6639] Call Trace: [ 156.474966][ T6639] [ 156.474976][ T6639] dump_stack_lvl+0xe8/0x150 [ 156.475016][ T6639] should_fail_ex+0x3eb/0x540 [ 156.475048][ T6639] _copy_from_user+0x2d/0xb0 [ 156.475080][ T6639] dm_ctl_ioctl+0x52a/0xe10 [ 156.475126][ T6639] ? __pfx_table_load+0x10/0x10 [ 156.475161][ T6639] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 156.475226][ T6639] ? __fget_files+0x2a/0x420 [ 156.475255][ T6639] ? __fget_files+0x3a2/0x420 [ 156.475283][ T6639] ? __fget_files+0x2a/0x420 [ 156.475316][ T6639] ? bpf_lsm_file_ioctl+0x9/0x20 [ 156.475346][ T6639] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 156.475387][ T6639] __se_sys_ioctl+0xfc/0x170 [ 156.475434][ T6639] do_syscall_64+0x166/0x520 [ 156.475457][ T6639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.475481][ T6639] ? clear_bhb_loop+0x70/0xc0 [ 156.475511][ T6639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.475534][ T6639] RIP: 0033:0x7f856fd9e159 [ 156.475557][ T6639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.475578][ T6639] RSP: 002b:00007f856dff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.475603][ T6639] RAX: ffffffffffffffda RBX: 00007f8570025fa0 RCX: 00007f856fd9e159 [ 156.475622][ T6639] RDX: 0000200000000000 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 156.475638][ T6639] RBP: 00007f856dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.475653][ T6639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.475667][ T6639] R13: 00007f8570026038 R14: 00007f8570025fa0 R15: 00007ffcf6cc20f8 [ 156.475703][ T6639] [ 156.917030][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.922639][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.690990][ T1218] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 157.692650][ T1218] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 157.778782][ T1218] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 157.887664][ T1218] usb 5-1: USB disconnect, device number 3 [ 157.966932][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 158.044318][ C1] net_ratelimit: 239 callbacks suppressed [ 158.144878][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 158.172777][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 158.172833][ T10] usb 2-1: New USB device found, idVendor=04c5, idProduct=1079, bcdDevice=37.f3 [ 158.198775][ T10] usb 2-1: config 1 has an invalid interface number: 34 but max is 0 [ 158.198808][ T10] usb 2-1: config 1 has no interface number 0 [ 158.198875][ T10] usb 2-1: config 1 interface 34 altsetting 93 endpoint 0x83 has invalid wMaxPacketSize 0 [ 158.198900][ T10] usb 2-1: config 1 interface 34 altsetting 93 bulk endpoint 0x83 has invalid maxpacket 0 [ 158.198928][ T10] usb 2-1: config 1 interface 34 has no altsetting 0 [ 158.266179][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.266201][ T10] usb 2-1: Product: syz [ 158.266217][ T10] usb 2-1: Manufacturer: syz [ 158.266234][ T10] usb 2-1: SerialNumber: syz [ 158.479331][ T6656] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 158.479422][ T6656] overlayfs: failed to set xattr on upper [ 158.479431][ T6656] overlayfs: ...falling back to redirect_dir=nofollow. [ 158.479440][ T6656] overlayfs: ...falling back to uuid=null. [ 158.704878][ C1] sched: DL replenish lagged too much [ 159.223937][ T1218] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 159.279473][ T10] usb 2-1: USB disconnect, device number 12 [ 159.388999][ T1218] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 159.426582][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 159.426612][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 159.426681][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.488250][ T1218] usb 4-1: config 0 descriptor?? [ 159.753317][ T1218] ath6kl: Failed to submit usb control message: -71 [ 159.753366][ T1218] ath6kl: unable to send the bmi data to the device: -71 [ 159.753383][ T1218] ath6kl: Unable to send get target info: -71 [ 159.823937][ T1218] ath6kl: Failed to init ath6kl core: -71 [ 159.833142][ T1218] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 159.925702][ T1218] usb 4-1: USB disconnect, device number 14 [ 159.982424][ T6670] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 160.651274][ T6674] FAULT_INJECTION: forcing a failure. [ 160.651274][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 160.651308][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.1.270 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.651340][ T6674] Tainted: [L]=SOFTLOCKUP [ 160.651349][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.651364][ T6674] Call Trace: [ 160.651374][ T6674] [ 160.651384][ T6674] dump_stack_lvl+0xe8/0x150 [ 160.651420][ T6674] should_fail_ex+0x3eb/0x540 [ 160.651452][ T6674] should_failslab+0xa8/0x100 [ 160.651481][ T6674] __kmalloc_cache_noprof+0x9e/0x600 [ 160.651516][ T6674] ? nfnetlink_rcv+0x1021/0x28c0 [ 160.651540][ T6674] ? nfnetlink_rcv+0x1021/0x28c0 [ 160.651574][ T6674] nfnetlink_rcv+0x1021/0x28c0 [ 160.651637][ T6674] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 160.651682][ T6674] ? ref_tracker_free+0x689/0x830 [ 160.651742][ T6674] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 160.651776][ T6674] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 160.651831][ T6674] netlink_unicast+0x7bd/0x940 [ 160.651871][ T6674] netlink_sendmsg+0x7c3/0xae0 [ 160.651908][ T6674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.651952][ T6674] ? apparmor_socket_sendmsg+0x18b/0x360 [ 160.651979][ T6674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.652009][ T6674] sock_sendmsg_nosec+0x13a/0x180 [ 160.652050][ T6674] ____sys_sendmsg+0x54e/0x850 [ 160.652083][ T6674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.652127][ T6674] ? import_iovec+0x73/0xa0 [ 160.652161][ T6674] ___sys_sendmsg+0x2a5/0x360 [ 160.652194][ T6674] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.652245][ T6674] ? vfs_write+0x9ce/0xba0 [ 160.652293][ T6674] ? do_sys_openat2+0x14e/0x200 [ 160.652328][ T6674] __x64_sys_sendmsg+0x1b1/0x290 [ 160.652358][ T6674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.652408][ T6674] do_syscall_64+0x166/0x520 [ 160.652430][ T6674] ? trace_irq_disable+0x3b/0x140 [ 160.652462][ T6674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.652487][ T6674] ? clear_bhb_loop+0x70/0xc0 [ 160.652516][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.652540][ T6674] RIP: 0033:0x7fe8e6b9e159 [ 160.652561][ T6674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.652581][ T6674] RSP: 002b:00007fe8e7aae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.652607][ T6674] RAX: ffffffffffffffda RBX: 00007fe8e6e25fa0 RCX: 00007fe8e6b9e159 [ 160.652625][ T6674] RDX: 0000000020004440 RSI: 0000200000002500 RDI: 0000000000000006 [ 160.652641][ T6674] RBP: 00007fe8e7aae090 R08: 0000000000000000 R09: 0000000000000000 [ 160.652656][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.652670][ T6674] R13: 00007fe8e6e26038 R14: 00007fe8e6e25fa0 R15: 00007fffd2389ee8 [ 160.652707][ T6674] [ 162.330805][ T6683] FAULT_INJECTION: forcing a failure. [ 162.330805][ T6683] name failslab, interval 1, probability 0, space 0, times 0 [ 162.330843][ T6683] CPU: 0 UID: 0 PID: 6683 Comm: syz.1.274 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.330876][ T6683] Tainted: [L]=SOFTLOCKUP [ 162.330886][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.330901][ T6683] Call Trace: [ 162.330910][ T6683] [ 162.330921][ T6683] dump_stack_lvl+0xe8/0x150 [ 162.330958][ T6683] should_fail_ex+0x3eb/0x540 [ 162.331003][ T6683] should_failslab+0xa8/0x100 [ 162.331033][ T6683] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 162.331072][ T6683] ? __kthread_create_on_node+0x1b3/0x3d0 [ 162.331106][ T6683] ? __kthread_create_on_node+0x1b3/0x3d0 [ 162.331145][ T6683] kvasprintf+0xeb/0x1a0 [ 162.331181][ T6683] ? __pfx_kvasprintf+0x10/0x10 [ 162.331215][ T6683] ? __kmalloc_cache_noprof+0x148/0x600 [ 162.331249][ T6683] ? __kthread_create_on_node+0x115/0x3d0 [ 162.331277][ T6683] ? __kthread_create_on_node+0x115/0x3d0 [ 162.331316][ T6683] __kthread_create_on_node+0x1b3/0x3d0 [ 162.331352][ T6683] ? __pfx___kthread_create_on_node+0x10/0x10 [ 162.331397][ T6683] ? __pfx_cryptomgr_probe+0x10/0x10 [ 162.331426][ T6683] ? __pfx_cryptomgr_probe+0x10/0x10 [ 162.331454][ T6683] kthread_create_on_node+0xeb/0x140 [ 162.331492][ T6683] ? __pfx_kthread_create_on_node+0x10/0x10 [ 162.331524][ T6683] ? __kmalloc_cache_noprof+0x31c/0x600 [ 162.331560][ T6683] ? __kmalloc_cache_noprof+0x148/0x600 [ 162.331593][ T6683] ? cryptomgr_notify+0x85/0x920 [ 162.331619][ T6683] ? cryptomgr_notify+0x3fb/0x920 [ 162.331651][ T6683] cryptomgr_notify+0x75e/0x920 [ 162.331686][ T6683] notifier_call_chain+0x1a5/0x3d0 [ 162.331729][ T6683] blocking_notifier_call_chain+0x6a/0x90 [ 162.331767][ T6683] crypto_alg_mod_lookup+0x390/0x5d0 [ 162.331810][ T6683] crypto_alloc_tfm_node+0x135/0x3e0 [ 162.331844][ T6683] tls_set_sw_offload+0xa2b/0x1770 [ 162.331900][ T6683] tls_setsockopt+0x10c5/0x1710 [ 162.331939][ T6683] ? __pfx_tls_setsockopt+0x10/0x10 [ 162.331978][ T6683] ? aa_sock_opt_perm+0xe1/0x1e0 [ 162.332018][ T6683] ? sock_common_setsockopt+0x36/0xc0 [ 162.332053][ T6683] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 162.332091][ T6683] do_sock_setsockopt+0x17c/0x1b0 [ 162.332123][ T6683] __x64_sys_setsockopt+0x13d/0x1b0 [ 162.332155][ T6683] do_syscall_64+0x166/0x520 [ 162.332178][ T6683] ? trace_irq_disable+0x3b/0x140 [ 162.332212][ T6683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.332238][ T6683] ? clear_bhb_loop+0x70/0xc0 [ 162.332268][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.332293][ T6683] RIP: 0033:0x7fe8e6b9e159 [ 162.332316][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.332337][ T6683] RSP: 002b:00007fe8e7aae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 162.332364][ T6683] RAX: ffffffffffffffda RBX: 00007fe8e6e25fa0 RCX: 00007fe8e6b9e159 [ 162.332382][ T6683] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000006 [ 162.332397][ T6683] RBP: 00007fe8e6c3503b R08: 0000000000000028 R09: 0000000000000000 [ 162.332414][ T6683] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 162.332430][ T6683] R13: 00007fe8e6e26038 R14: 00007fe8e6e25fa0 R15: 00007fffd2389ee8 [ 162.332468][ T6683] [ 163.090159][ C1] net_ratelimit: 264 callbacks suppressed [ 163.408153][ T6700] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 163.408203][ T6700] overlayfs: failed to set xattr on upper [ 163.408213][ T6700] overlayfs: ...falling back to redirect_dir=nofollow. [ 163.408223][ T6700] overlayfs: ...falling back to uuid=null. [ 163.564304][ T1218] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 163.735031][ T1218] usb 2-1: Using ep0 maxpacket: 32 [ 163.739519][ T1218] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 163.741613][ T1218] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.741641][ T1218] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 163.741668][ T1218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.792764][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.792787][ T1218] usb 2-1: Product: syz [ 163.792805][ T1218] usb 2-1: Manufacturer: syz [ 163.792821][ T1218] usb 2-1: SerialNumber: syz [ 163.835977][ T1218] usb 2-1: config 0 descriptor?? [ 164.113876][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 164.277496][ T6699] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: 0 [ 164.299902][ T6699] ucsi-stm32g0-i2c 0-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 164.300659][ T6699] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 164.301168][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 164.340505][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.368338][ T10] usb 4-1: config 0 descriptor?? [ 164.659550][ T1218] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 164.700115][ T6708] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 164.748731][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 165.002705][ T1218] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EREMOTEIO) [ 165.003223][ T1218] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 165.073319][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 165.073342][ T10] [drm] Initialized udl on minor 1 [ 165.361329][ T6712] FAULT_INJECTION: forcing a failure. [ 165.361329][ T6712] name fail_futex, interval 1, probability 0, space 0, times 0 [ 165.361368][ T6712] CPU: 0 UID: 0 PID: 6712 Comm: syz.0.282 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.361403][ T6712] Tainted: [L]=SOFTLOCKUP [ 165.361412][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.361427][ T6712] Call Trace: [ 165.361436][ T6712] [ 165.361447][ T6712] dump_stack_lvl+0xe8/0x150 [ 165.361485][ T6712] should_fail_ex+0x3eb/0x540 [ 165.361516][ T6712] get_futex_key+0x1b4/0x1580 [ 165.361551][ T6712] ? __lock_acquire+0x747/0x2de0 [ 165.361598][ T6712] ? __pfx_get_futex_key+0x10/0x10 [ 165.361641][ T6712] ? update_se+0x90/0x1020 [ 165.361674][ T6712] futex_wait_setup+0x4a/0x590 [ 165.361710][ T6712] ? __futex_wait+0xdb/0x470 [ 165.361746][ T6712] __futex_wait+0x175/0x470 [ 165.361777][ T6712] ? update_protect_slice+0x128/0x210 [ 165.361815][ T6712] ? __pfx___futex_wait+0x10/0x10 [ 165.361850][ T6712] ? __pfx_futex_wake_mark+0x10/0x10 [ 165.361886][ T6712] ? try_to_wake_up+0x8c5/0x14d0 [ 165.361923][ T6712] futex_wait+0x121/0x390 [ 165.361956][ T6712] ? __pfx_futex_wait+0x10/0x10 [ 165.362006][ T6712] do_futex+0x3e7/0x4e0 [ 165.362037][ T6712] ? __pfx_do_futex+0x10/0x10 [ 165.362060][ T6712] ? kmem_cache_free+0x182/0x650 [ 165.362105][ T6712] __se_sys_futex+0x3a8/0x450 [ 165.362138][ T6712] ? __pfx___se_sys_futex+0x10/0x10 [ 165.362164][ T6712] ? rcu_is_watching+0x16/0xb0 [ 165.362195][ T6712] ? __x64_sys_futex+0x21/0xf0 [ 165.362224][ T6712] do_syscall_64+0x166/0x520 [ 165.362245][ T6712] ? trace_irq_disable+0x3b/0x140 [ 165.362286][ T6712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.362311][ T6712] ? clear_bhb_loop+0x70/0xc0 [ 165.362344][ T6712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.362369][ T6712] RIP: 0033:0x7f3657d9e159 [ 165.362390][ T6712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.362410][ T6712] RSP: 002b:00007f3655ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 165.362436][ T6712] RAX: ffffffffffffffda RBX: 00007f3658025fa8 RCX: 00007f3657d9e159 [ 165.362454][ T6712] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3658025fa8 [ 165.362470][ T6712] RBP: 00007f3658025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 165.362485][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.362501][ T6712] R13: 00007f3658026038 R14: 00007ffeb4887220 R15: 00007ffeb4887308 [ 165.362536][ T6712] [ 165.953818][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 166.115200][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 166.118599][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.118711][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.181241][ T9] usb 1-1: config 0 descriptor?? [ 166.229708][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 166.259609][ T6719] sock: sock_timestamping_bind_phc: sock not bind to device [ 166.432434][ T1218] usb 2-1: USB disconnect, device number 13 [ 166.644690][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 166.645727][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 166.882675][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 166.890831][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 167.046711][ T6724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.287'. [ 168.213513][ C1] net_ratelimit: 353 callbacks suppressed [ 173.326422][ C0] net_ratelimit: 26 callbacks suppressed [ 174.283113][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 175.548360][ T9] pwc: recv_control_msg error -110 req 02 val 2000 [ 176.010123][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 178.363707][ C0] net_ratelimit: 11 callbacks suppressed [ 180.508211][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 183.573179][ C0] net_ratelimit: 2 callbacks suppressed [ 197.390727][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.407852][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.506579][ T6321] net_ratelimit: 19 callbacks suppressed [ 200.257348][ T5705] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 204.694943][ C1] net_ratelimit: 45 callbacks suppressed [ 207.747017][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 207.747133][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 207.747197][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 209.049637][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 209.805783][ C1] net_ratelimit: 13 callbacks suppressed [ 215.564875][ C1] net_ratelimit: 8 callbacks suppressed [ 222.616711][ C0] net_ratelimit: 22 callbacks suppressed [ 228.221787][ C0] net_ratelimit: 10 callbacks suppressed [ 229.062735][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 233.490763][ C0] net_ratelimit: 23 callbacks suppressed [ 238.939930][ C0] net_ratelimit: 34 callbacks suppressed [ 248.460507][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 250.133915][ C1] net_ratelimit: 12 callbacks suppressed [ 255.248733][ C0] net_ratelimit: 2 callbacks suppressed [ 256.615322][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.630748][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.286539][ T3090] net_ratelimit: 12 callbacks suppressed [ 261.388686][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 266.417549][ T1218] net_ratelimit: 16 callbacks suppressed [ 271.627526][ T5711] net_ratelimit: 9 callbacks suppressed [ 271.672386][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 277.007902][ C1] net_ratelimit: 29 callbacks suppressed [ 284.690159][ T1012] net_ratelimit: 13 callbacks suppressed [ 290.948273][ T5804] net_ratelimit: 7 callbacks suppressed [ 304.995826][ T4933] Bluetooth: hci1: command tx timeout [ 306.494720][ T3335] net_ratelimit: 1 callbacks suppressed [ 317.732179][ T5704] net_ratelimit: 1 callbacks suppressed [ 318.515147][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.531910][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.316905][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 328.848350][ T5804] net_ratelimit: 1 callbacks suppressed [ 329.605705][ T5705] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 333.879432][ T5683] net_ratelimit: 5 callbacks suppressed [ 345.468533][ T5705] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 345.596437][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 345.997876][ T3090] wireguard: wg1: Sending handshake initiation to peer 3 ([::1]:20001/0%0) [ 346.816347][ T3090] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 346.850164][ T3090] wireguard: wg2: Sending handshake initiation to peer 18 (127.0.0.1:20002) [ 347.428759][ C0] wireguard: wg1: Handshake for peer 15 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 2) [ 347.428917][ C0] wireguard: wg2: Sending keepalive packet to peer 29 ([::1]:20001/0%0) [ 348.152140][ T76] wireguard: wg1: Sending handshake initiation to peer 16 (127.0.0.1:20003) [ 348.185668][ T30] wireguard: wg0: Keypair 41 destroyed for peer 1 [ 348.185784][ T30] wireguard: wg0: Keypair 51 created for peer 1 [ 349.198728][ T5805] wireguard: wg1: Keypair 52 created for peer 4 [ 349.381121][ T5805] wireguard: wg1: Invalid handshake response from [::1]:20001/0%0 [ 349.542406][ C0] virtqueue callback for ffff8880262c8600 (ffffffff86c736f0) [ 349.557164][ C0] No more buffers in queue [ 349.557711][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 349.557739][ C0] No more buffers in queue [ 349.557947][ C0] eth0: xmit ffff8880b4026a00 42:01:0a:80:00:01 [ 349.557979][ C0] Added buffer head 19 to ffff8880262c8400 [ 349.558077][ C0] virtqueue callback for ffff8880262c8400 (ffffffff86c73830) [ 349.575377][ C0] Sent skb ffff8880b4026a00 [ 349.575438][ C0] No more buffers in queue [ 349.731506][ T3090] wireguard: wg0: Sending handshake initiation to peer 20 ([::1]:20003/0%0) [ 349.976244][ T32] INFO: task kworker/0:3:5695 blocked for more than 140 seconds. [ 349.976279][ T32] Tainted: G L syzkaller #0 [ 349.976294][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.976305][ T32] task:kworker/0:3 state:D stack:21840 pid:5695 tgid:5695 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 349.976383][ T32] Workqueue: events_power_efficient reg_check_chans_work [ 349.976442][ T32] Call Trace: [ 349.976451][ T32] [ 349.976466][ T32] __schedule+0x17dd/0x5940 [ 349.976524][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 349.976562][ T32] ? __pfx___schedule+0x10/0x10 [ 349.976605][ T32] ? schedule+0x90/0x2b0 [ 349.976642][ T32] schedule+0x164/0x2b0 [ 349.976678][ T32] schedule_preempt_disabled+0x13/0x30 [ 349.976711][ T32] __mutex_lock+0x7c4/0x15a0 [ 349.976740][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 349.976768][ T32] ? reg_check_chans_work+0x1a1/0x1110 [ 349.976806][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 349.976846][ T32] ? add_lock_to_list+0xc7/0x100 [ 349.976879][ T32] reg_check_chans_work+0x1a1/0x1110 [ 349.976932][ T32] ? __pfx_reg_check_chans_work+0x10/0x10 [ 349.976972][ T32] ? lock_acquire+0x115/0x350 [ 349.977016][ T32] ? rcu_is_watching+0x16/0xb0 [ 349.977042][ T32] ? process_scheduled_works+0x97a/0x1630 [ 349.977071][ T32] process_scheduled_works+0xc3d/0x1630 [ 349.977132][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.977167][ T32] ? assign_work+0x3cf/0x5d0 [ 349.977199][ T32] worker_thread+0xa47/0xfb0 [ 349.977242][ T32] ? __kthread_parkme+0x71/0x1f0 [ 349.977283][ T32] kthread+0x38b/0x480 [ 349.977317][ T32] ? __pfx_worker_thread+0x10/0x10 [ 349.977352][ T32] ? __pfx_kthread+0x10/0x10 [ 349.977387][ T32] ret_from_fork+0x514/0xb70 [ 349.977425][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 349.977458][ T32] ? __switch_to+0xc89/0x1420 [ 349.977490][ T32] ? __pfx_kthread+0x10/0x10 [ 349.977525][ T32] ret_from_fork_asm+0x1a/0x30 [ 349.977574][ T32] [ 349.977617][ T32] [ 349.977617][ T32] Showing all locks held in the system: [ 349.977628][ T32] locks held by kthreadd/2: 2, last CPU#0: [ 349.977645][ T32] #0: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 349.977715][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 349.977774][ T32] locks held by kworker/0:0/9: 6, last CPU#0: [ 349.977791][ T32] #0: ffff888022ef9140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.977852][ T32] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.977912][ T32] #2: ffff88802a2f01d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 349.977967][ T32] #3: ffff88803657f1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 349.978028][ T32] #4: ffff88807915c1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 349.978090][ T32] #5: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 349.978155][ T32] locks held by kworker/0:1/10: 4, last CPU#0: [ 349.978172][ T32] #0: ffff888022ef9140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.978233][ T32] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.978292][ T32] #2: ffff88802a4b81d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 349.978354][ T32] #3: ffffffff8f0acdb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 349.978420][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 349.978438][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.978498][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.978557][ T32] #2: ffff8880577407a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 349.978622][ T32] locks held by kworker/u8:1/13: 3, last CPU#1: [ 349.978638][ T32] #0: ffff88813fe04140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 351.026392][ C0] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 351.906603][ T3335] net_ratelimit: 3 callbacks suppressed [ 351.906627][ T3335] wireguard: wg2: Sending handshake initiation to peer 6 (127.0.0.1:20002) [ 352.531859][ C0] wireguard: wg1: Handshake for peer 3 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 2) [ 353.084179][ T6726] wireguard: wg1: Keypair 39 destroyed for peer 28 [ 353.084228][ T6726] wireguard: wg1: Keypair 55 created for peer 28 [ 353.175697][ C0] ipv6_addr_label(addr=fc00:0000:0000:0000:0000:0000:0000:0001, type=0, ifindex=0) => 00000005 [ 353.175751][ C0] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 353.175772][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:0000:000a, type=0, ifindex=1) => 00000001 [ 353.175797][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:0000:000e, type=0, ifindex=2) => 00000001 [ 353.175820][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140d, type=0, ifindex=3) => 00000001 [ 353.175841][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:140c, type=0, ifindex=3) => 00000001 [ 353.175863][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:ac14:14aa, type=0, ifindex=3) => 00000001 [ 353.176091][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 353.178515][ C0] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 353.178861][ C0] nf_nat: Already setup manip DST for ct ffff888029b1f080 (status bits 0x188) [ 353.178893][ C0] nf_nat: Already setup manip SRC for ct ffff888029b1f080 (status bits 0x188) [ 353.228715][ T6726] Added buffer head 0 to ffff88801df8b200 [ 353.228906][ C0] virtqueue callback for ffff88801df8b200 (ffffffff85687ad0) [ 353.228962][ C0] virtqueue interrupt with no work for ffff88801df8b400 [ 353.228978][ C0] virtqueue interrupt with no work for ffff88801df8b600 [ 353.816338][ C1] wireguard: wg1: Handshake for peer 21 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 2) [ 354.802416][ C0] virtqueue callback for ffff8880262c8600 (ffffffff86c736f0) [ 354.813626][ C0] No more buffers in queue [ 354.814345][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 354.814374][ C0] No more buffers in queue [ 354.863703][ C0] eth0: xmit ffff88804bff3780 42:01:0a:80:00:01 [ 354.863745][ C0] Added buffer head 19 to ffff8880262c8400 [ 354.864454][ C0] virtqueue callback for ffff8880262c8400 (ffffffff86c73830) [ 354.881432][ C0] Sent skb ffff88804bff3780 [ 354.881499][ C0] No more buffers in queue [ 354.900751][ T6703] kobject: 'gadget.3' (ffff88802a27ccd8): fill_kobj_path: path = '/devices/platform/dummy_udc.3/gadget.3'