last executing test programs: 10.152032916s ago: executing program 3 (id=576): r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x80803, 0x6) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x8000, 0x5}, 0x4}, 0x20, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz1\x00', {0xf9e, 0x3, 0x4}, 0x4d, [0x8, 0x6, 0x9, 0xfffffff7, 0x2, 0xfffffffc, 0x7fffffff, 0x80000001, 0x6, 0x1, 0xfd, 0x0, 0x7, 0x7, 0xf70, 0x3c00, 0x10000e7, 0x4007, 0x401, 0xbc5e, 0x4, 0x5, 0x8, 0xffff, 0x12, 0xe, 0x14, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x7fffffff, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x40000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x13, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x4, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x1, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x81, 0x5, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x100000, 0xd, 0x2, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0xfffffffb, 0x7, 0x4, 0xd, 0x80, 0xfff, 0x1000004, 0x0, 0x40000040, 0x1, 0x8, 0x1, 0x8, 0xb, 0x34f1, 0x1ff, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x7, 0x0, 0x1, 0x1, 0x6, 0x4, 0xac, 0x2, 0x56, 0xcfb9], [0x5, 0xdb8, 0x9, 0xffff, 0x2, 0x200006, 0x4000005, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0x401, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000007, 0x5, 0x4, 0x800, 0x7, 0x9, 0x10000, 0xfffffffd, 0x1, 0xfffffffe, 0x5, 0x0, 0x4, 0x8be, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x400, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x10007, 0xa, 0x6, 0x2, 0xfffffefe, 0xda15, 0xa, 0xffffffff, 0x10], [0x4, 0x5, 0x8, 0x246d, 0x2, 0x101, 0x4, 0x5, 0x6, 0x606, 0x1, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x6, 0x2, 0x0, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x10000006, 0x7, 0x101, 0x9, 0x3000000, 0x9, 0x4000006, 0x7, 0xfffffffd, 0x0, 0x4, 0x4, 0x10000b, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x1, 0x2015, 0x8000, 0x7, 0x7d, 0x8, 0x7, 0xfffdfffc, 0xb, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x6]}, 0x8, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0), 0xc) r6 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0x2000e7b3, 0x13500}, &(0x7f0000000280), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440)=r5, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0xfffffffd, 0x0, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r8, 0xc0040d07, &(0x7f0000000040)=0x121) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 7.762835824s ago: executing program 3 (id=583): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x6, &(0x7f0000000040)=[{0x60, 0x3, 0x13, 0x3}, {0x6, 0x4, 0xe, 0x1ff}, {0x6, 0x2, 0x7, 0xb}, {0x3d, 0x89, 0xb, 0xd}, {0x4, 0x3, 0x33, 0x71e9f1b1}, {0x6, 0x40, 0x5, 0x7}]}, 0x8) 7.588702142s ago: executing program 1 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0xf5, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "acdb4f0cd84f6c4dd42a4f58d561008caa642b5526f49bd098b76cac0a34080bfb3631069b78a82d68ae441d266a9e2d78a495bef5b04801ca048cc2a0f0eb1910"}]}]}]}]}], {0x14, 0x11, 0x7c, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.515571065s ago: executing program 3 (id=585): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x315, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x51}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_012={0x1, 0x1, 0x2, ']'}, @local=@item_012={0x1, 0x2, 0x0, "a6"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x80000, 0x25dfdbfd, {0x2, 0x0, 0x52, 0xfe}}, 0x18}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 7.415875037s ago: executing program 4 (id=586): syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) 7.405492419s ago: executing program 1 (id=587): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x121800, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffff8, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x9, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000040)) sendmsg$netlink(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0100001300010000000000000000001c01008085013ee98bf0a850b89d66cc57fa58ef4a05a90632128e77f035870bacbd517779f932ac75f1cda52be47ee9aa28ee08000000d25f00dd058c29e21040"], 0x12c}], 0x1}, 0x0) 7.123435448s ago: executing program 1 (id=588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)='+', 0x1}], 0x1}}], 0x1, 0x4000041) sendmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="d0a42f46b1def4c9f7a84b5cee0ba9dbaebd9ae5914239a4dec1e0cca6b0b8c290ca654d7de092d6b1218eeb18fc4e09eba0a2813f526675e1babad0c7f046ed7c29c6a8d2daf216a2717ed4", 0x4c}, {&(0x7f00000005c0)="0ea461c720cfdb9bf164", 0xa}, {&(0x7f00000007c0)="8f5b5e772d791c9c5309a82ea8aa66a9cda5dc3446f50a45bcb055287a35e17b70db89f9de908aaaafb8f23aa327c171f520587ef9d8f9710da41fcd2f4f222206ab33568bc10a35ae9846eaf9b8836fdb61e9f68f731a4b863261eb28980d2759fccf4ef62052675e984d88dcda2a905e521bc68d62252b0c4da1b790a401d91529a114304c50340e16b74515ba945b6d27512801e4fbfd554aa884708d9b948c62ab0831a24a1ea0322f164d6cd77ab48d607f33245f3e", 0xb8}, {&(0x7f0000000880)="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", 0xfd}, {&(0x7f0000000980)="a33513ec74357338e8177ccc1554159d8633ec2f912c7e7f65ad6ad0e56a93a751cc77b0bd24149c851c67635aec3ded744f19fe9a21", 0x36}, {0x0}], 0x6}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d00)="c998a70efa32030d9f2c0107971c0bdb7737e96a6905dd1ee61f37ec07816df7dd84ddbc6abf00734163bf80fb2f9e911b03489e3fab72b0dc0f10edc57defb1bc22bc93a3c77fd2dd416841a60fa6626f62a330", 0x54}, {&(0x7f0000000d80)="2a9fdf72ca6eb93eeb2d38f2cba96a97b5be0e92bfa287893fb173ccf9350869ea3a5e0f6d08da4ee4aec8e9a587334476bfa6facab80123905e91f218b4019aa7312abb8c6d9c24bfaa13c04947fb3dd0378119cca984", 0x57}], 0x2}}], 0x2, 0x4800) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c71, 0x3, 0x1000, 0x101, 0x8, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r13 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r13, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x80) 6.727993329s ago: executing program 1 (id=589): openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x177b, 0x33) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000004036290471a4072eb9ad7d13fe7d2a19", @ANYRES16=r4, @ANYBLOB="01082bbd7000fedbdf250b0000000800030041454960caf479ee3ac7d6d56eed10b79cad165ad2754b3ca502430652aab086778e06c1144b2c2a6a17f5ed214e214c4f974d78ad98e70bb86ad465e421a7faee6ad95bb6728a41b74d96cbd0d491339654055b6074cc876500885385c2a1d40d914ce52be87443d50395070cc6b03ce4d846787dc51cca263a4980fdd68ac43aa4443dea2a076eed071c9838a6a74c8d18d456b94831cfbe9bb52241db77826b7e066e43b53d6b2c9cce52e92f9bb6b395808fba2e0b941b5f30b34713f0f75391934ff3508317fe4bbae612ee8c53ac9170aa402bbdc18b838ce1da00"/251, @ANYRES32=r6, @ANYBLOB="09000700babf2f0f080000000800370007000000"], 0x30}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x0, 0x0, 0x3}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="0400000077de050000ffffffe900000026c6ed32fa4f6aa60ce4721a55edb25f73c9fac82ef515c0e43b679d44e13a6905badcea9f0bacbb7b52f3e1ff08ae44f9d21bf99dc1a6f25645cae6f69dd8ee3e3206a3a82c517458c4dbf22e176a191a81d6656fa65e832208fbbbe702a0f3205c1b9587ac40484c0700", @ANYBLOB="e3a790abf400cf52a5efb7bec6c85e7943a46b18ebce4474a9cd859d6828", @ANYBLOB="0c0002", @ANYRES32=r3, @ANYRESDEC, @ANYRES16=r4, @ANYRESHEX=r2, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f00000000c0)={0x1d, r11, 0x20000000000, {0x0, 0xf0}}, 0x18) connect$can_j1939(r10, &(0x7f0000000140)={0x1d, r11, 0xfffffffffffffffd}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) 6.289939995s ago: executing program 4 (id=593): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) socket$rds(0x15, 0x5, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r0], 0x54}}, 0x20000000) 6.230710135s ago: executing program 2 (id=594): syz_open_dev$vim2m(0x0, 0x2f1, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) gettid() openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="b6", 0x1}], 0x1}}], 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = fsopen(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x41, '\x00', 0x0, @fallback=0x1c, r1, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='sched_switch\x00', r3, 0x0, 0x20000000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x800, @multicast2}, 'wg0\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @random="10414c9854c6"}, 0x4a, {}, 'veth1_to_bridge\x00'}) gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 6.116450998s ago: executing program 4 (id=595): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x78) openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x400201, 0x0) 6.053995077s ago: executing program 4 (id=596): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x27, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x3}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x4}) socketpair$unix(0x1, 0x5, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000002340)=@known='system.posix_acl_access\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13, 0xc3}]}, 0x24}}, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) dup2(r5, 0xffffffffffffffff) 5.648502915s ago: executing program 2 (id=598): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) rt_sigaction(0x7, &(0x7f00000000c0)={0x0, 0x80000003, 0x0, {[0x7, 0xbf1]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000002380)) preadv(0xffffffffffffffff, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}, {0x0}], 0x2, 0x33, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000200)={{0x3, @name="678e24935d70f0d0b9719a84c589c03af0175e6635a91fc8a062c0955c161a5e"}, 0x8, 0xfc06, 0x8}) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000140)={0x2a, 0x4, 0x0, {0x1, 0xffffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d2403f5005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) 5.583055582s ago: executing program 3 (id=599): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x23, 0x9, 0x6}, {0x3, 0x1, 0x9, 0xef17e523}]}) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@mcast1, 0x1f, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r7, &(0x7f0000004800)={0x2020}, 0x2020) pread64(r7, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf250d000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) recvmmsg(r4, &(0x7f0000001280), 0x0, 0x0, &(0x7f0000001300)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000001c0)=0xfffffffc, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x28, r11, 0x31, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) 5.243561988s ago: executing program 1 (id=600): openat$adsp1(0xffffffffffffff9c, 0x0, 0x5c1c1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009c147010861246205bb4018203010902240001000000000904000002ff0401"], 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0x0, 0x101, 0x3, {0x8f, 0x9, 0x82, 0x1000002}}) 4.15728218s ago: executing program 3 (id=604): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRES16=r4, @ANYRES8=r3], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24004040) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') write$UHID_INPUT(r2, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) 4.048897616s ago: executing program 0 (id=605): r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x16) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000080)) 3.931706437s ago: executing program 0 (id=606): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) socket$rds(0x15, 0x5, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r0], 0x54}}, 0x20000000) 3.870089736s ago: executing program 3 (id=607): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20008840, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000007ea040000000000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000380)='./file0\x00', 0x6ec58fa5834dfb19, 0xdb) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vcan0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x7, [{0x9, 0x1}, {0x6, 0x6}, {0x4, 0x8001}, {0x4, 0x3}, {0x1, 0xd5}, {0xffff8001, 0x7f}, {0x5, 0xffffffff}]}}) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4004550d, &(0x7f0000000500)) 3.837108056s ago: executing program 0 (id=608): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0x7fffffff, {0x7, 0x2b, 0x1000, 0x11b0400, 0x5, 0x5e2, 0x6, 0x9, 0x0, 0x0, 0x8, 0xcfc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.715617586s ago: executing program 2 (id=609): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_clone(0x8020000, &(0x7f0000000000)="77ee4a29dd7aee5a2f510b2ae148b95bf7c742817b6f33bbc0eedf", 0x1b, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200)="d30aa608859e823197b3ba1c24f8a468fffdaf34c4f07aceeaad7c418741111d9bceccb7fe2526b67e3362eaf7d39e69039aad6df3ce7aadc7251fc82e8f90aff2504a8094c87d3c36a513ec9464d01fa4cfe9e793d8a0815403b8a6f890338a7830f6e78f0e66084229756d0379a0304098") ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f00000002c0), 0x1004) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r1, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRESDEC=r0], 0x50}}, 0x0) 3.685131794s ago: executing program 0 (id=610): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x403, 0x2, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x864, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x8}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.471085335s ago: executing program 1 (id=611): preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x36, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002af000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002"], 0x20c) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_disconnect(r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) 3.403466002s ago: executing program 2 (id=612): openat$fb0(0xffffffffffffff9c, 0x0, 0x60c40, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001200)={0x18, 0x22, 0x601, 0x70bd2a, 0x0, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x34, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x4, 0x2, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x100, 0x2}]}}}}}}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20) 2.963951181s ago: executing program 0 (id=613): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40881) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2b", 0x13}], 0x1}, 0x0) unshare(0x2c060000) unshare(0x30060e00) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='i', 0x1, 0x4050, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)) r4 = syz_io_uring_setup(0x2be, &(0x7f0000000140)={0x0, 0x978, 0x0, 0x6, 0x1000111}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x24, 0x0, r2, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)=@isdn, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/65, 0x41}, {&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000680)=""/210, 0xd2}, {&(0x7f0000000780)=""/112, 0x70}, {&(0x7f0000000800)=""/130, 0x82}], 0x5, &(0x7f0000000600)}, 0x0, 0x20}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r7, &(0x7f0000000000)=[{&(0x7f0000000500)="002e000000000000d8c1a2", 0xb}], 0x1, 0x9, 0x8000400, 0x0) r8 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=ANY=[@ANYBLOB="10000000890000000700006fff5fa18c"], 0x10}}], 0x2, 0x0) 2.723914169s ago: executing program 4 (id=614): modify_ldt$write(0x1, &(0x7f0000000040)={0x1, 0x100000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) get_thread_area(&(0x7f0000000000)={0x96, 0x20000000, 0x4000, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 553.327762ms ago: executing program 4 (id=615): r0 = socket$kcm(0x2, 0x1, 0x84) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) accept4$inet6(r4, 0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r7, &(0x7f0000000180), 0x400000000000077, 0x7600) r9 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r9}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r2}) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x48014) 550.780705ms ago: executing program 2 (id=616): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x403, 0x2, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x8}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 7) 535.377814ms ago: executing program 0 (id=617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x1, 0x0, 0x6b}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xa, r3, &(0x7f0000000100)="8a510eb48dbdfcb4", 0x8, 0x9}]) io_submit(r4, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3511, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) syz_open_dev$ttys(0xc, 0x2, 0x1) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETS(r9, 0x5401, &(0x7f0000000000)) r10 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) pwrite64(r12, &(0x7f0000000080)="6e3a662541288c3a", 0x8, 0xd26) ioctl$vim2m_VIDIOC_S_FMT(r13, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32315258}}) fcntl$lock(r12, 0x21, 0x0) 0s ago: executing program 2 (id=618): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) preadv2(r2, &(0x7f0000000280)=[{&(0x7f0000000940)=""/4107, 0x100b}], 0x1, 0x10001, 0x0, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x5, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x19f4, @remote, 0x2}, 0x20) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x10201, 0x7, 0xdddd0000, 0x1000, &(0x7f00005ed000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) kernel console output (not intermixed with test programs): failslab, interval 1, probability 0, space 0, times 0 [ 107.414109][ T6382] CPU: 1 UID: 0 PID: 6382 Comm: syz.4.123 Not tainted syzkaller #0 PREEMPT(full) [ 107.414132][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 107.414140][ T6382] Call Trace: [ 107.414145][ T6382] [ 107.414150][ T6382] dump_stack_lvl+0x189/0x250 [ 107.414167][ T6382] ? __pfx____ratelimit+0x10/0x10 [ 107.414178][ T6382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.414189][ T6382] ? __pfx__printk+0x10/0x10 [ 107.414205][ T6382] ? __pfx___might_resched+0x10/0x10 [ 107.414215][ T6382] ? fs_reclaim_acquire+0x7d/0x100 [ 107.414226][ T6382] should_fail_ex+0x414/0x560 [ 107.414244][ T6382] should_failslab+0xa8/0x100 [ 107.414259][ T6382] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 107.414272][ T6382] ? __alloc_skb+0x112/0x2d0 [ 107.414285][ T6382] __alloc_skb+0x112/0x2d0 [ 107.414298][ T6382] netlink_ack+0x146/0xa50 [ 107.414307][ T6382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.414322][ T6382] ? __asan_memcpy+0x40/0x70 [ 107.414332][ T6382] ? __pfx_ref_tracker_free+0x10/0x10 [ 107.414346][ T6382] netlink_rcv_skb+0x28c/0x470 [ 107.414355][ T6382] ? __lock_acquire+0xab9/0xd20 [ 107.414369][ T6382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.414382][ T6382] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.414402][ T6382] ? down_read+0x1ad/0x2e0 [ 107.414415][ T6382] genl_rcv+0x28/0x40 [ 107.414426][ T6382] netlink_unicast+0x82c/0x9e0 [ 107.414446][ T6382] ? __pfx_netlink_unicast+0x10/0x10 [ 107.414461][ T6382] ? netlink_sendmsg+0x642/0xb30 [ 107.414470][ T6382] ? skb_put+0x11b/0x210 [ 107.414483][ T6382] netlink_sendmsg+0x805/0xb30 [ 107.414498][ T6382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.414509][ T6382] ? __import_iovec+0x5d4/0x7f0 [ 107.414522][ T6382] ? aa_sock_msg_perm+0xf1/0x1d0 [ 107.414533][ T6382] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.414543][ T6382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.414554][ T6382] __sock_sendmsg+0x21c/0x270 [ 107.414570][ T6382] ____sys_sendmsg+0x505/0x830 [ 107.414585][ T6382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.414605][ T6382] ___sys_sendmsg+0x21f/0x2a0 [ 107.414619][ T6382] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.414649][ T6382] ? __fget_files+0x2a/0x420 [ 107.414658][ T6382] ? __fget_files+0x3a0/0x420 [ 107.414671][ T6382] __sys_sendmsg+0x164/0x220 [ 107.414684][ T6382] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.414705][ T6382] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.414716][ T6382] __do_fast_syscall_32+0xb6/0x2b0 [ 107.414728][ T6382] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.414739][ T6382] do_fast_syscall_32+0x34/0x80 [ 107.414750][ T6382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.414761][ T6382] RIP: 0023:0xf7f96539 [ 107.414770][ T6382] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 107.414778][ T6382] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 107.414788][ T6382] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 107.414795][ T6382] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.414800][ T6382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.414806][ T6382] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.414811][ T6382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.414825][ T6382] [ 107.821574][ T6353] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 107.829298][ T6353] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.118'. [ 107.839588][ T6353] mmap: syz.1.118 (6353) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.757362][ T30] audit: type=1326 audit(1758847076.251:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 109.807457][ T30] audit: type=1326 audit(1758847076.251:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 109.914073][ T30] audit: type=1326 audit(1758847076.251:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 110.084460][ T30] audit: type=1326 audit(1758847076.251:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 110.294932][ T30] audit: type=1326 audit(1758847076.251:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e539 code=0x7ffc0000 [ 110.305932][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 110.333643][ T6422] bridge_slave_1: left allmulticast mode [ 110.352124][ T6422] bridge_slave_1: left promiscuous mode [ 110.419907][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.460548][ T6422] bridge_slave_0: left allmulticast mode [ 110.467787][ T6422] bridge_slave_0: left promiscuous mode [ 110.473567][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.860422][ T6434] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 110.890166][ T30] audit: type=1326 audit(1758847077.351:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 110.929798][ T6434] audit: out of memory in audit_log_start [ 111.117281][ T30] audit: type=1326 audit(1758847077.361:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 111.239288][ T30] audit: type=1326 audit(1758847077.361:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 112.016720][ T6458] syz.2.145 uses obsolete (PF_INET,SOCK_PACKET) [ 112.247313][ T5872] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.412700][ T6458] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.448670][ T6458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.486299][ T6458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.508905][ T6458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.513206][ T5872] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 112.564541][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.594127][ T6458] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.603426][ T5872] usb 5-1: Product: syz [ 112.666578][ T5872] usb 5-1: Manufacturer: syz [ 112.687991][ T5872] usb 5-1: SerialNumber: syz [ 112.705230][ T5872] usb 5-1: config 0 descriptor?? [ 112.718218][ T6467] sctp: [Deprecated]: syz.1.146 (pid 6467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.718218][ T6467] Use struct sctp_sack_info instead [ 112.734930][ T5872] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 112.963201][ T5872] usb 5-1: USB disconnect, device number 5 [ 113.800980][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 113.830301][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.150'. [ 114.024249][ T6486] warning: `syz.1.151' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.107684][ T6470] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 114.128260][ T6470] ALSA: mixer_oss: invalid OSS volume 'Â' [ 114.162819][ T6470] ALSA: mixer_oss: invalid OSS volume '(' [ 114.174029][ T6470] ALSA: mixer_oss: invalid OSS volume '' [ 114.186323][ T6470] ALSA: mixer_oss: invalid OSS volume '' [ 114.419823][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.507935][ T5875] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.514023][ T5878] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.577415][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.607366][ T5872] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.657341][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 114.769394][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 114.781488][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.796949][ T5872] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.810020][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.832123][ T5872] usb 4-1: config 0 descriptor?? [ 115.045523][ T5872] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 115.595131][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.640786][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.659244][ T6503] trusted_key: syz.4.158 sent an empty control message without MSG_MORE. [ 115.670420][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 116.076537][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.085717][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.187142][ T5966] usb 4-1: USB disconnect, device number 7 [ 116.742708][ T6526] FAULT_INJECTION: forcing a failure. [ 116.742708][ T6526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.819205][ T6526] CPU: 0 UID: 0 PID: 6526 Comm: syz.2.163 Not tainted syzkaller #0 PREEMPT(full) [ 116.819221][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.819227][ T6526] Call Trace: [ 116.819232][ T6526] [ 116.819237][ T6526] dump_stack_lvl+0x189/0x250 [ 116.819254][ T6526] ? __pfx____ratelimit+0x10/0x10 [ 116.819265][ T6526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.819276][ T6526] ? __pfx__printk+0x10/0x10 [ 116.819290][ T6526] ? __might_fault+0xb0/0x130 [ 116.819309][ T6526] should_fail_ex+0x414/0x560 [ 116.819326][ T6526] _copy_from_user+0x2d/0xb0 [ 116.819340][ T6526] csum_and_copy_from_iter_full+0x4a1/0x1ed0 [ 116.819364][ T6526] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 116.819385][ T6526] ? trace_kmalloc+0x1f/0xd0 [ 116.819400][ T6526] ip_generic_getfrag+0x12f/0x2b0 [ 116.819415][ T6526] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 116.819430][ T6526] ? skb_put+0x11b/0x210 [ 116.819443][ T6526] __ip6_append_data+0x3974/0x3f30 [ 116.819459][ T6526] ? __lock_acquire+0xab9/0xd20 [ 116.819487][ T6526] ? __pfx_raw6_getfrag+0x10/0x10 [ 116.819507][ T6526] ? __pfx___ip6_append_data+0x10/0x10 [ 116.819521][ T6526] ? __pfx_ip6_mtu+0x10/0x10 [ 116.819540][ T6526] ip6_append_data+0x1c4/0x380 [ 116.819557][ T6526] ? __pfx_raw6_getfrag+0x10/0x10 [ 116.819568][ T6526] rawv6_sendmsg+0x127a/0x1820 [ 116.819588][ T6526] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 116.819611][ T6526] ? __pfx_aa_sk_perm+0x10/0x10 [ 116.819628][ T6526] ? sock_rps_record_flow+0x19/0x410 [ 116.819644][ T6526] ? inet_sendmsg+0x2f4/0x370 [ 116.819657][ T6526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.819670][ T6526] __sock_sendmsg+0x19c/0x270 [ 116.819686][ T6526] ____sys_sendmsg+0x52d/0x830 [ 116.819702][ T6526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.819724][ T6526] ___sys_sendmsg+0x21f/0x2a0 [ 116.819739][ T6526] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.819770][ T6526] ? __fget_files+0x2a/0x420 [ 116.819778][ T6526] ? __fget_files+0x3a0/0x420 [ 116.819791][ T6526] __sys_sendmmsg+0x28e/0x430 [ 116.819807][ T6526] ? __pfx___sys_sendmmsg+0x10/0x10 [ 116.819824][ T6526] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.819847][ T6526] ? ksys_write+0x22a/0x250 [ 116.819868][ T6526] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 116.819882][ T6526] __do_fast_syscall_32+0xb6/0x2b0 [ 116.819894][ T6526] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.819906][ T6526] do_fast_syscall_32+0x34/0x80 [ 116.819917][ T6526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.819928][ T6526] RIP: 0023:0xf700e539 [ 116.819937][ T6526] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 116.819945][ T6526] RSP: 002b:00000000f53fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 116.819956][ T6526] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001040 [ 116.819962][ T6526] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.819968][ T6526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.819973][ T6526] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 116.819978][ T6526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.819991][ T6526] [ 117.629269][ T6537] netlink: 'syz.2.165': attribute type 4 has an invalid length. [ 117.638199][ T6537] netlink: 17 bytes leftover after parsing attributes in process `syz.2.165'. [ 118.634664][ T6547] bridge1: entered allmulticast mode [ 118.775980][ T6547] team0: Port device bridge1 added [ 118.830165][ T6550] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 119.265138][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 119.356959][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 119.386048][ T9] IPVS: starting estimator thread 0... [ 119.517862][ T6560] IPVS: using max 27 ests per chain, 64800 per kthread [ 120.720306][ T6576] bridge_slave_0: left allmulticast mode [ 120.726054][ T6576] bridge_slave_0: left promiscuous mode [ 120.732195][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.819456][ T6576] bridge_slave_1: left allmulticast mode [ 120.827001][ T6576] bridge_slave_1: left promiscuous mode [ 120.834745][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.905639][ T6576] bond0: (slave bond_slave_0): Releasing backup interface [ 120.972316][ T6576] bond0: (slave bond_slave_1): Releasing backup interface [ 121.118919][ T6576] team0: Port device team_slave_0 removed [ 121.266713][ T6576] team0: Port device team_slave_1 removed [ 121.280006][ T6576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.289510][ T6576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.324463][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 121.324481][ T30] audit: type=1800 audit(1758847087.821:18): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.178" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 121.333674][ T6576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.367518][ T6580] sctp: [Deprecated]: syz.2.178 (pid 6580) Use of int in max_burst socket option. [ 121.367518][ T6580] Use struct sctp_assoc_value instead [ 121.395587][ T6576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.455044][ T5875] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 121.566360][ T6576] team0: Port device bridge1 removed [ 122.173115][ T6592] netlink: 'syz.4.176': attribute type 1 has an invalid length. [ 122.361223][ T6593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.370437][ T6593] bond1: (slave bond2): making interface the new active one [ 122.380287][ T6593] bond1: (slave bond2): Enslaving as an active interface with an up link [ 122.668091][ T5872] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 122.917037][ T6604] FAULT_INJECTION: forcing a failure. [ 122.917037][ T6604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.931018][ T6604] CPU: 0 UID: 0 PID: 6604 Comm: syz.0.184 Not tainted syzkaller #0 PREEMPT(full) [ 122.931042][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.931053][ T6604] Call Trace: [ 122.931060][ T6604] [ 122.931068][ T6604] dump_stack_lvl+0x189/0x250 [ 122.931095][ T6604] ? __pfx____ratelimit+0x10/0x10 [ 122.931113][ T6604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.931130][ T6604] ? __pfx__printk+0x10/0x10 [ 122.931150][ T6604] ? __might_fault+0xb0/0x130 [ 122.931182][ T6604] should_fail_ex+0x414/0x560 [ 122.931209][ T6604] _copy_from_user+0x2d/0xb0 [ 122.931230][ T6604] scsi_ioctl+0xc59/0x1fb0 [ 122.931252][ T6604] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.931275][ T6604] ? __pfx_scsi_ioctl+0x10/0x10 [ 122.931328][ T6604] ? __pfx___might_resched+0x10/0x10 [ 122.931352][ T6604] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 122.931381][ T6604] ? scsi_block_when_processing_errors+0x390/0x470 [ 122.931407][ T6604] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 122.931450][ T6604] sg_ioctl+0x1886/0x2230 [ 122.931478][ T6604] ? __pfx_sg_ioctl+0x10/0x10 [ 122.931498][ T6604] ? __fget_files+0x2a/0x420 [ 122.931518][ T6604] ? __fget_files+0x3a0/0x420 [ 122.931532][ T6604] ? __fget_files+0x2a/0x420 [ 122.931550][ T6604] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 122.931581][ T6604] __ia32_compat_sys_ioctl+0x543/0x840 [ 122.931604][ T6604] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 122.931625][ T6604] ? __fget_files+0x3a0/0x420 [ 122.931646][ T6604] ? fput+0xa0/0xd0 [ 122.931664][ T6604] ? ksys_write+0x22a/0x250 [ 122.931694][ T6604] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.931715][ T6604] __do_fast_syscall_32+0xb6/0x2b0 [ 122.931734][ T6604] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.931754][ T6604] do_fast_syscall_32+0x34/0x80 [ 122.931773][ T6604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.931791][ T6604] RIP: 0023:0xf7ff8539 [ 122.931811][ T6604] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 122.931824][ T6604] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 122.931841][ T6604] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000005393 [ 122.931852][ T6604] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.931862][ T6604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.931872][ T6604] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 122.931881][ T6604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.931907][ T6604] [ 122.933195][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 123.315151][ T5872] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 123.335029][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.358779][ T5872] usb 4-1: config 0 descriptor?? [ 123.393591][ T5872] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 123.516925][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 123.531011][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 123.761747][ T6613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.768083][ T6613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.775173][ T6613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.799970][ T6613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.811743][ T6613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.858963][ T5872] usb 4-1: USB disconnect, device number 8 [ 124.357554][ T5872] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 124.719439][ T5872] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 124.757310][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 124.869791][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.889307][ T5872] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.901977][ T5872] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.911756][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 124.920184][ T5872] usb 4-1: Product: syz [ 124.924576][ T5872] usb 4-1: Manufacturer: syz [ 124.931214][ T5872] usb 4-1: SerialNumber: syz [ 124.943476][ T5872] usb 4-1: config 0 descriptor?? [ 125.020469][ T9] usb 5-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 125.034293][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.048982][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 125.067329][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.075258][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 125.099575][ T9] usb 5-1: SerialNumber: syz [ 125.140217][ T9] usb 5-1: 0:2 : does not exist [ 125.145491][ T9] usb 5-1: unit 108 not found! [ 125.555018][ T9] usb 5-1: USB disconnect, device number 6 [ 125.788810][ T5878] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.857748][ T5878] Bluetooth: hci4: command 0x0405 tx timeout [ 125.863878][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.869959][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.869988][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.391586][ T6671] fuse: Bad value for 'user_id' [ 127.410173][ T6671] fuse: Bad value for 'user_id' [ 127.688012][ T6679] ptrace attach of "./syz-executor exec"[5880] was attempted by "./syz-executor exec"[6679] [ 127.916344][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 127.941216][ T6683] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 127.981977][ T6683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.869979][ T5872] usb 4-1: USB disconnect, device number 9 [ 129.437414][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.663053][ T5872] usb 2-1: device descriptor read/64, error -71 [ 129.957282][ T5872] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.997352][ T5952] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.097474][ T5872] usb 2-1: device descriptor read/64, error -71 [ 130.150081][ T5952] usb 5-1: device descriptor read/64, error -71 [ 130.207786][ T5872] usb usb2-port1: attempt power cycle [ 130.323500][ T6712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.407444][ T5952] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 130.567323][ T5952] usb 5-1: device descriptor read/64, error -71 [ 130.918431][ T5872] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.960329][ T5872] usb 2-1: device descriptor read/8, error -71 [ 130.979876][ T5952] usb usb5-port1: attempt power cycle [ 131.256656][ T5872] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.297560][ T5872] usb 2-1: device descriptor read/8, error -71 [ 131.487313][ T5952] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 131.649945][ T5952] usb 5-1: device descriptor read/8, error -71 [ 131.967468][ T5872] usb usb2-port1: unable to enumerate USB device [ 132.027336][ T5952] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 132.462482][ T5952] usb 5-1: device descriptor read/8, error -71 [ 132.579200][ T5952] usb usb5-port1: unable to enumerate USB device [ 132.916966][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.923461][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.996535][ T6757] usb usb1: usbfs: process 6757 (syz.2.225) did not claim interface 0 before use [ 136.119816][ T980] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.217785][ T6820] kAFS: unable to lookup cell '.,' [ 136.337445][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 136.357914][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.388284][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 136.401725][ T980] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 136.412220][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.433189][ T980] usb 2-1: config 0 descriptor?? [ 136.905429][ T980] cherry 0003:046A:0027.0003: unknown main item tag 0x6 [ 136.923474][ T980] cherry 0003:046A:0027.0003: unexpected long global item [ 136.933187][ T980] cherry 0003:046A:0027.0003: probe with driver cherry failed with error -22 [ 136.949906][ T6824] vlan2: entered allmulticast mode [ 136.955175][ T6824] macsec0: entered allmulticast mode [ 136.961116][ T6824] veth1_macvtap: entered allmulticast mode [ 137.563695][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 138.257780][ T5952] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 138.301014][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 138.348685][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 138.483468][ T5952] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 138.491894][ T5952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.502455][ T5952] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 138.651285][ T5952] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 138.692205][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 138.704908][ T5952] usb 3-1: Product: syz [ 138.715915][ T5952] usb 3-1: Manufacturer: syz [ 138.816578][ T5952] usb 3-1: SerialNumber: syz [ 138.833453][ T5952] usb 3-1: config 0 descriptor?? [ 138.935675][ T5872] usb 2-1: USB disconnect, device number 7 [ 138.947371][ T5937] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.114300][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.527293][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 139.531131][ T6848] netlink: 200 bytes leftover after parsing attributes in process `syz.4.252'. [ 139.579186][ T5937] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 139.619600][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.666306][ T5937] usb 4-1: config 0 descriptor?? [ 139.903287][ T6841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.937294][ T6857] IPVS: length: 153 != 8 [ 140.101333][ T5937] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 140.503410][ T6840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.524203][ T6840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.590139][ T5937] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 140.656129][ T5937] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 140.692099][ T5937] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -71 [ 140.714753][ T5937] usb 4-1: USB disconnect, device number 10 [ 140.761392][ T6866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.257'. [ 140.831396][ T6866] bond1: entered promiscuous mode [ 140.838218][ T6866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.097514][ T980] usb 3-1: USB disconnect, device number 5 [ 141.632583][ T6877] FAULT_INJECTION: forcing a failure. [ 141.632583][ T6877] name failslab, interval 1, probability 0, space 0, times 0 [ 141.661670][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: syz.0.261 Not tainted syzkaller #0 PREEMPT(full) [ 141.661693][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.661703][ T6877] Call Trace: [ 141.661710][ T6877] [ 141.661716][ T6877] dump_stack_lvl+0x189/0x250 [ 141.661740][ T6877] ? __pfx____ratelimit+0x10/0x10 [ 141.661759][ T6877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.661775][ T6877] ? __pfx__printk+0x10/0x10 [ 141.661798][ T6877] ? __pfx___might_resched+0x10/0x10 [ 141.661814][ T6877] ? fs_reclaim_acquire+0x7d/0x100 [ 141.661834][ T6877] should_fail_ex+0x414/0x560 [ 141.661860][ T6877] should_failslab+0xa8/0x100 [ 141.661882][ T6877] __kmalloc_noprof+0xcb/0x4f0 [ 141.661900][ T6877] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.661914][ T6877] ? sk_prot_alloc+0xe7/0x220 [ 141.661937][ T6877] sk_prot_alloc+0xe7/0x220 [ 141.661954][ T6877] ? sk_alloc+0x24/0x370 [ 141.661974][ T6877] sk_alloc+0x3a/0x370 [ 141.662003][ T6877] __netlink_create+0x65/0x260 [ 141.662021][ T6877] ? __pfx_genl_release+0x10/0x10 [ 141.662041][ T6877] netlink_create+0x3ca/0x590 [ 141.662060][ T6877] ? __pfx_genl_unbind+0x10/0x10 [ 141.662077][ T6877] ? __pfx_genl_bind+0x10/0x10 [ 141.662098][ T6877] __sock_create+0x4b3/0x9f0 [ 141.662122][ T6877] __sys_socket+0xd7/0x1b0 [ 141.662142][ T6877] __ia32_compat_sys_socketcall+0x6df/0x9c0 [ 141.662168][ T6877] ? __fget_files+0x3a0/0x420 [ 141.662187][ T6877] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 141.662204][ T6877] ? fput+0xa0/0xd0 [ 141.662221][ T6877] ? ksys_write+0x22a/0x250 [ 141.662249][ T6877] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.662268][ T6877] __do_fast_syscall_32+0xb6/0x2b0 [ 141.662286][ T6877] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.662305][ T6877] do_fast_syscall_32+0x34/0x80 [ 141.662324][ T6877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.662342][ T6877] RIP: 0023:0xf7ff8539 [ 141.662357][ T6877] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 141.662370][ T6877] RSP: 002b:00000000f54e54d0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 141.662387][ T6877] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f54e54e0 [ 141.662398][ T6877] RDX: 00000000f7485ff4 RSI: 0000000000000026 RDI: 0000000000000000 [ 141.662409][ T6877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.662417][ T6877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 141.662426][ T6877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.662452][ T6877] [ 141.997893][ T980] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.008217][ T6876] batman_adv: batadv0: Adding interface: dummy0 [ 142.014694][ T6876] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.040668][ T6876] batman_adv: batadv0: Interface activated: dummy0 [ 142.061091][ T6876] batadv0: mtu less than device minimum [ 142.067706][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.078966][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.090179][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.101303][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.112445][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.123563][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.134683][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.145803][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.156946][ T6876] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.179163][ T980] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 142.220370][ T6880] tipc: Started in network mode [ 142.225409][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.231511][ T6880] tipc: Node identity 46f5c3111755, cluster identity 4711 [ 142.236578][ T980] usb 3-1: config 0 descriptor?? [ 142.243429][ T6880] tipc: Enabled bearer , priority 0 [ 142.257027][ T6880] syzkaller0: entered promiscuous mode [ 142.263594][ T6880] syzkaller0: entered allmulticast mode [ 142.274694][ T6880] tipc: Resetting bearer [ 142.287643][ T6879] tipc: Resetting bearer [ 142.304415][ T6879] tipc: Disabling bearer [ 142.464995][ T6883] tipc: Enabled bearer , priority 0 [ 142.495489][ T6883] syzkaller0: entered promiscuous mode [ 142.520618][ T6883] syzkaller0: entered allmulticast mode [ 142.554301][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 142.576210][ T6883] tipc: Resetting bearer [ 142.595788][ T6882] tipc: Resetting bearer [ 142.623804][ T6882] tipc: Disabling bearer [ 143.037392][ T5937] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.187432][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 143.200523][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.226445][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.238445][ T5937] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 143.247896][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.260207][ T5937] usb 2-1: config 0 descriptor?? [ 143.269370][ T5937] hub 2-1:0.0: USB hub found [ 143.312160][ T980] usb 3-1: Cannot set autoneg [ 143.326109][ T980] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 143.359500][ T980] usb 3-1: USB disconnect, device number 6 [ 144.552461][ T5937] hub 2-1:0.0: 1 port detected [ 144.958888][ T5937] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 145.067830][ T980] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 145.183697][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.200075][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.243544][ T980] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 145.540086][ T6925] loop0: detected capacity change from 0 to 2560 [ 146.002775][ T6924] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.014712][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.039825][ T6035] Buffer I/O error on dev loop0, logical block 0, async page read [ 146.087041][ T980] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.095470][ T6035] Buffer I/O error on dev loop0, logical block 0, async page read [ 146.119952][ T980] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.129570][ T980] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.145376][ T980] usb 4-1: Product: syz [ 146.161100][ T980] usb 4-1: Manufacturer: syz [ 146.229622][ T6035] Buffer I/O error on dev loop0, logical block 0, async page read [ 146.230402][ T980] usb 4-1: SerialNumber: syz [ 146.317983][ T980] usb 4-1: config 0 descriptor?? [ 146.397550][ T5916] usb 2-1: USB disconnect, device number 8 [ 146.418531][ T6035] Buffer I/O error on dev loop0, logical block 0, async page read [ 146.461690][ T6035] Buffer I/O error on dev loop0, logical block 0, async page read [ 146.536610][ T6927] tipc: Enabled bearer , priority 0 [ 146.573655][ T6924] block device autoloading is deprecated and will be removed. [ 146.600881][ T6927] syzkaller0: entered promiscuous mode [ 146.616856][ T6927] syzkaller0: entered allmulticast mode [ 146.685414][ T6926] tipc: Resetting bearer [ 146.772316][ T6926] tipc: Disabling bearer [ 147.047128][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 147.198050][ T6933] FAULT_INJECTION: forcing a failure. [ 147.198050][ T6933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.241359][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.1.278 Not tainted syzkaller #0 PREEMPT(full) [ 147.241385][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.241395][ T6933] Call Trace: [ 147.241403][ T6933] [ 147.241411][ T6933] dump_stack_lvl+0x189/0x250 [ 147.241441][ T6933] ? __pfx____ratelimit+0x10/0x10 [ 147.241459][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.241478][ T6933] ? __pfx__printk+0x10/0x10 [ 147.241511][ T6933] should_fail_ex+0x414/0x560 [ 147.241539][ T6933] _copy_to_user+0x31/0xb0 [ 147.241561][ T6933] copy_to_sockptr+0x5e/0xa0 [ 147.241580][ T6933] do_ip_getsockopt+0x1592/0x1b60 [ 147.241606][ T6933] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 147.241620][ T6933] ? aa_label_sk_perm+0x4cd/0x630 [ 147.241652][ T6933] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 147.241701][ T6933] ? rcu_read_lock_any_held+0xb3/0x120 [ 147.241720][ T6933] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 147.241749][ T6933] ip_getsockopt+0xbb/0x220 [ 147.241774][ T6933] ? __pfx_ip_getsockopt+0x10/0x10 [ 147.241789][ T6933] ? aa_sock_opt_perm+0xff/0x1b0 [ 147.241808][ T6933] ? sock_common_getsockopt+0x2d/0xb0 [ 147.241823][ T6933] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 147.241839][ T6933] do_sock_getsockopt+0x36f/0x450 [ 147.241859][ T6933] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 147.241874][ T6933] ? lockdep_hardirqs_on+0x90/0x150 [ 147.241889][ T6933] ? __fget_files+0x2a/0x420 [ 147.241902][ T6933] ? __fget_files+0x3a0/0x420 [ 147.241915][ T6933] ? __fget_files+0x2a/0x420 [ 147.241933][ T6933] __ia32_sys_getsockopt+0x1a5/0x250 [ 147.241951][ T6933] ? lockdep_hardirqs_on+0x90/0x150 [ 147.241968][ T6933] ? lockdep_hardirqs_on+0x90/0x150 [ 147.241989][ T6933] __do_fast_syscall_32+0xb6/0x2b0 [ 147.242008][ T6933] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.242029][ T6933] do_fast_syscall_32+0x34/0x80 [ 147.242047][ T6933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.242067][ T6933] RIP: 0023:0xf70ee539 [ 147.242082][ T6933] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 147.242095][ T6933] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 147.242113][ T6933] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 147.242124][ T6933] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 00000000800001c0 [ 147.242134][ T6933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.242144][ T6933] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 147.242153][ T6933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.242177][ T6933] [ 147.904049][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 148.027345][ T5952] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.188816][ T5952] usb 3-1: Using ep0 maxpacket: 8 [ 148.209495][ T5952] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 148.225333][ T5952] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 148.277404][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 148.286890][ T5952] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 148.320443][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.367071][ T5952] usb 3-1: config 0 descriptor?? [ 148.697321][ T5937] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.778376][ T5952] gt683r_led 0003:1770:FF00.0005: collection stack underflow [ 148.804059][ T5952] gt683r_led 0003:1770:FF00.0005: item 0 4 0 12 parsing failed [ 148.837586][ T5937] usb 2-1: device descriptor read/64, error -71 [ 148.844326][ T5952] gt683r_led 0003:1770:FF00.0005: hid parsing failed [ 148.852147][ T5952] gt683r_led 0003:1770:FF00.0005: probe with driver gt683r_led failed with error -22 [ 149.003786][ T5952] usb 3-1: USB disconnect, device number 7 [ 149.087885][ T5937] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 149.315963][ T9] usb 4-1: USB disconnect, device number 11 [ 149.470082][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 149.538592][ T5937] usb 2-1: device descriptor read/64, error -71 [ 149.669904][ T5937] usb usb2-port1: attempt power cycle [ 149.883174][ T6972] tipc: Started in network mode [ 149.889587][ T6972] tipc: Node identity 62df2cd899b4, cluster identity 4711 [ 149.909811][ T6972] tipc: Enabled bearer , priority 0 [ 149.923754][ T6972] syzkaller0: entered promiscuous mode [ 149.924324][ T6972] syzkaller0: entered allmulticast mode [ 149.960928][ T6972] tipc: Resetting bearer [ 150.087407][ T5937] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 150.107948][ T5937] usb 2-1: device descriptor read/8, error -71 [ 150.236132][ T6982] netlink: 'syz.2.294': attribute type 21 has an invalid length. [ 150.271393][ T6982] netlink: 128 bytes leftover after parsing attributes in process `syz.2.294'. [ 150.293623][ T6982] netlink: 'syz.2.294': attribute type 4 has an invalid length. [ 150.317023][ T6984] binder_alloc: 6983: pid 6983 spamming oneway? 1 buffers allocated for a total size of 4096 [ 150.329989][ T6982] netlink: 'syz.2.294': attribute type 5 has an invalid length. [ 150.339288][ T6984] FAULT_INJECTION: forcing a failure. [ 150.339288][ T6984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.354938][ T5937] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 150.365372][ T6982] netlink: 3 bytes leftover after parsing attributes in process `syz.2.294'. [ 150.375192][ T6984] CPU: 1 UID: 0 PID: 6984 Comm: syz.4.295 Not tainted syzkaller #0 PREEMPT(full) [ 150.375215][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 150.375224][ T6984] Call Trace: [ 150.375231][ T6984] [ 150.375238][ T6984] dump_stack_lvl+0x189/0x250 [ 150.375262][ T6984] ? __pfx____ratelimit+0x10/0x10 [ 150.375280][ T6984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.375298][ T6984] ? __pfx__printk+0x10/0x10 [ 150.375319][ T6984] ? __might_fault+0xb0/0x130 [ 150.375351][ T6984] should_fail_ex+0x414/0x560 [ 150.375379][ T6984] _copy_from_user+0x2d/0xb0 [ 150.375404][ T6984] binder_ioctl_write_read+0x124/0xa040 [ 150.375436][ T6984] ? is_bpf_text_address+0x292/0x2b0 [ 150.375457][ T6984] ? is_bpf_text_address+0x26/0x2b0 [ 150.375481][ T6984] ? kernel_text_address+0xa5/0xe0 [ 150.375503][ T6984] ? __kernel_text_address+0xd/0x40 [ 150.375522][ T6984] ? unwind_get_return_address+0x4d/0x90 [ 150.375540][ T6984] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 150.375559][ T6984] ? arch_stack_walk+0xfc/0x150 [ 150.375587][ T6984] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 150.375604][ T6984] ? stack_trace_save+0x9c/0xe0 [ 150.375622][ T6984] ? __pfx_stack_trace_save+0x10/0x10 [ 150.375642][ T6984] ? stack_depot_save_flags+0x40/0x860 [ 150.375672][ T6984] ? kasan_save_track+0x4f/0x80 [ 150.375689][ T6984] ? kasan_save_track+0x3e/0x80 [ 150.375706][ T6984] ? kasan_save_free_info+0x46/0x50 [ 150.375721][ T6984] ? __kasan_slab_free+0x5b/0x80 [ 150.375739][ T6984] ? kfree+0x18e/0x440 [ 150.375756][ T6984] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 150.375776][ T6984] ? security_file_ioctl_compat+0xcb/0x2d0 [ 150.375795][ T6984] ? __ia32_compat_sys_ioctl+0x128/0x840 [ 150.375814][ T6984] ? __do_fast_syscall_32+0xb6/0x2b0 [ 150.375830][ T6984] ? do_fast_syscall_32+0x34/0x80 [ 150.375846][ T6984] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.375875][ T6984] ? __lock_acquire+0xab9/0xd20 [ 150.375896][ T6984] ? binder_debug+0x13f/0x1b0 [ 150.375918][ T6984] ? __pfx_binder_debug+0x10/0x10 [ 150.375935][ T6984] ? do_raw_spin_lock+0x121/0x290 [ 150.375970][ T6984] ? _raw_spin_unlock+0x28/0x50 [ 150.375991][ T6984] ? binder_get_thread+0x178/0x6d0 [ 150.376014][ T6984] binder_ioctl+0x3e0/0x19c0 [ 150.376034][ T6984] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 150.376056][ T6984] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 150.376081][ T6984] ? do_vfs_ioctl+0xbe8/0x1430 [ 150.376099][ T6984] ? __pfx_binder_ioctl+0x10/0x10 [ 150.376119][ T6984] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 150.376152][ T6984] ? __lock_acquire+0xab9/0xd20 [ 150.376198][ T6984] ? __fget_files+0x2a/0x420 [ 150.376217][ T6984] ? __fget_files+0x3a0/0x420 [ 150.376231][ T6984] ? __fget_files+0x2a/0x420 [ 150.376249][ T6984] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 150.376272][ T6984] __ia32_compat_sys_ioctl+0x543/0x840 [ 150.376295][ T6984] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 150.376315][ T6984] ? __fget_files+0x3a0/0x420 [ 150.376336][ T6984] ? fput+0xa0/0xd0 [ 150.376354][ T6984] ? ksys_write+0x22a/0x250 [ 150.376383][ T6984] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.376403][ T6984] __do_fast_syscall_32+0xb6/0x2b0 [ 150.376422][ T6984] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.376443][ T6984] do_fast_syscall_32+0x34/0x80 [ 150.376461][ T6984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.376479][ T6984] RIP: 0023:0xf7f96539 [ 150.376493][ T6984] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 150.376506][ T6984] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 150.376525][ T6984] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 150.376536][ T6984] RDX: 0000000080000c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.376547][ T6984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.376556][ T6984] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.376566][ T6984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.376591][ T6984] [ 150.376670][ T6984] binder: 6983:6984 ioctl c0306201 80000c00 returned -14 [ 150.790745][ T6965] tipc: Resetting bearer [ 150.796246][ T5937] usb 2-1: device descriptor read/8, error -71 [ 150.915706][ T5937] usb usb2-port1: unable to enumerate USB device [ 150.936757][ T9] tipc: Node number set to 4218105048 [ 150.953449][ T6965] tipc: Disabling bearer [ 151.000040][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 151.990895][ T7015] FAULT_INJECTION: forcing a failure. [ 151.990895][ T7015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.017298][ T7015] CPU: 0 UID: 0 PID: 7015 Comm: syz.4.302 Not tainted syzkaller #0 PREEMPT(full) [ 152.017314][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.017320][ T7015] Call Trace: [ 152.017325][ T7015] [ 152.017329][ T7015] dump_stack_lvl+0x189/0x250 [ 152.017345][ T7015] ? __pfx____ratelimit+0x10/0x10 [ 152.017356][ T7015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.017368][ T7015] ? __pfx__printk+0x10/0x10 [ 152.017381][ T7015] ? __might_fault+0xb0/0x130 [ 152.017401][ T7015] should_fail_ex+0x414/0x560 [ 152.017418][ T7015] _copy_from_user+0x2d/0xb0 [ 152.017432][ T7015] get_compat_msghdr+0xad/0x4a0 [ 152.017447][ T7015] ? __pfx_get_compat_msghdr+0x10/0x10 [ 152.017464][ T7015] ___sys_sendmsg+0x193/0x2a0 [ 152.017478][ T7015] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.017507][ T7015] ? __fget_files+0x2a/0x420 [ 152.017516][ T7015] ? __fget_files+0x3a0/0x420 [ 152.017529][ T7015] __sys_sendmsg+0x164/0x220 [ 152.017542][ T7015] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.017561][ T7015] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.017573][ T7015] __do_fast_syscall_32+0xb6/0x2b0 [ 152.017585][ T7015] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.017596][ T7015] do_fast_syscall_32+0x34/0x80 [ 152.017607][ T7015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.017618][ T7015] RIP: 0023:0xf7f96539 [ 152.017627][ T7015] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 152.017634][ T7015] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 152.017645][ T7015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 152.017651][ T7015] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.017657][ T7015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.017662][ T7015] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 152.017667][ T7015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.017680][ T7015] [ 152.226574][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.668613][ T7031] netlink: 36 bytes leftover after parsing attributes in process `syz.0.306'. [ 153.074463][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 153.289211][ T30] audit: type=1326 audit(1758847119.791:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 153.310950][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.437449][ T30] audit: type=1326 audit(1758847119.821:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 153.459200][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.502338][ T30] audit: type=1326 audit(1758847119.821:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 153.524093][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.546543][ T30] audit: type=1326 audit(1758847119.821:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 153.594080][ T30] audit: type=1326 audit(1758847119.821:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 153.636268][ T30] audit: type=1326 audit(1758847119.821:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 153.658901][ T30] audit: type=1326 audit(1758847119.821:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 153.684619][ T30] audit: type=1326 audit(1758847119.821:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 153.804573][ T30] audit: type=1326 audit(1758847119.821:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 153.920132][ T30] audit: type=1326 audit(1758847119.821:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 153.932210][ T7074] netlink: 44 bytes leftover after parsing attributes in process `syz.3.318'. [ 155.476123][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 156.094116][ T7122] FAULT_INJECTION: forcing a failure. [ 156.094116][ T7122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.122938][ T7122] CPU: 1 UID: 0 PID: 7122 Comm: syz.1.327 Not tainted syzkaller #0 PREEMPT(full) [ 156.122962][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.122971][ T7122] Call Trace: [ 156.122978][ T7122] [ 156.122985][ T7122] dump_stack_lvl+0x189/0x250 [ 156.123010][ T7122] ? __pfx____ratelimit+0x10/0x10 [ 156.123028][ T7122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.123048][ T7122] ? __pfx__printk+0x10/0x10 [ 156.123069][ T7122] ? __might_fault+0xb0/0x130 [ 156.123101][ T7122] should_fail_ex+0x414/0x560 [ 156.123129][ T7122] _copy_from_user+0x2d/0xb0 [ 156.123150][ T7122] get_compat_msghdr+0xad/0x4a0 [ 156.123175][ T7122] ? __pfx_get_compat_msghdr+0x10/0x10 [ 156.123197][ T7122] ? rcu_is_watching+0x15/0xb0 [ 156.123213][ T7122] ? ___sys_recvmsg+0x1c4/0x510 [ 156.123240][ T7122] ___sys_recvmsg+0x17f/0x510 [ 156.123266][ T7122] ? __pfx____sys_recvmsg+0x10/0x10 [ 156.123310][ T7122] ? __fget_files+0x3a0/0x420 [ 156.123337][ T7122] do_recvmmsg+0x36a/0x770 [ 156.123366][ T7122] ? __pfx_do_recvmmsg+0x10/0x10 [ 156.123397][ T7122] ? __pfx_vfs_write+0x10/0x10 [ 156.123434][ T7122] __sys_recvmmsg+0x19d/0x280 [ 156.123457][ T7122] ? __pfx___sys_recvmmsg+0x10/0x10 [ 156.123475][ T7122] ? ksys_write+0x22a/0x250 [ 156.123505][ T7122] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 156.123529][ T7122] __do_fast_syscall_32+0xb6/0x2b0 [ 156.123548][ T7122] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.123570][ T7122] do_fast_syscall_32+0x34/0x80 [ 156.123589][ T7122] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.123608][ T7122] RIP: 0023:0xf70ee539 [ 156.123623][ T7122] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 156.123642][ T7122] RSP: 002b:00000000f549c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 156.123660][ T7122] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800066c0 [ 156.123672][ T7122] RDX: 0000000000000a0d RSI: 0000000000000000 RDI: 0000000000000000 [ 156.123681][ T7122] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.123690][ T7122] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 156.123700][ T7122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.123725][ T7122] [ 156.446123][ T7127] FAULT_INJECTION: forcing a failure. [ 156.446123][ T7127] name failslab, interval 1, probability 0, space 0, times 0 [ 156.625719][ T7127] CPU: 1 UID: 0 PID: 7127 Comm: syz.4.329 Not tainted syzkaller #0 PREEMPT(full) [ 156.625744][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.625753][ T7127] Call Trace: [ 156.625760][ T7127] [ 156.625768][ T7127] dump_stack_lvl+0x189/0x250 [ 156.625792][ T7127] ? __pfx____ratelimit+0x10/0x10 [ 156.625811][ T7127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.625829][ T7127] ? __pfx__printk+0x10/0x10 [ 156.625857][ T7127] ? __pfx___might_resched+0x10/0x10 [ 156.625872][ T7127] ? fs_reclaim_acquire+0x7d/0x100 [ 156.625893][ T7127] should_fail_ex+0x414/0x560 [ 156.625921][ T7127] should_failslab+0xa8/0x100 [ 156.625945][ T7127] __kmalloc_noprof+0xcb/0x4f0 [ 156.625965][ T7127] ? kfree+0x4d/0x440 [ 156.625981][ T7127] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 156.626004][ T7127] tomoyo_realpath_from_path+0xe3/0x5d0 [ 156.626036][ T7127] tomoyo_check_open_permission+0x1c1/0x3b0 [ 156.626057][ T7127] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 156.626077][ T7127] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 156.626099][ T7127] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 156.626137][ T7127] ? sk_getsockopt+0x1e53/0x2530 [ 156.626168][ T7127] ? __lock_acquire+0xab9/0xd20 [ 156.626210][ T7127] ? mnt_get_write_access+0x68/0x2a0 [ 156.626230][ T7127] ? tomoyo_file_open+0x165/0x220 [ 156.626253][ T7127] security_file_open+0xb1/0x270 [ 156.626281][ T7127] do_dentry_open+0x384/0x13f0 [ 156.626306][ T7127] ? vfs_open+0x31/0x340 [ 156.626327][ T7127] vfs_open+0x3b/0x340 [ 156.626347][ T7127] dentry_open+0x61/0xa0 [ 156.626364][ T7127] pidfs_alloc_file+0x186/0x270 [ 156.626385][ T7127] ? _raw_spin_unlock+0x28/0x50 [ 156.626408][ T7127] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 156.626438][ T7127] pidfd_prepare+0x14e/0x1b0 [ 156.626455][ T7127] ? sk_getsockopt+0x1e41/0x2530 [ 156.626476][ T7127] sk_getsockopt+0x1e53/0x2530 [ 156.626501][ T7127] ? __pfx_sk_getsockopt+0x10/0x10 [ 156.626518][ T7127] ? lockdep_hardirqs_on+0x90/0x150 [ 156.626543][ T7127] ? rcu_read_lock_any_held+0xb3/0x120 [ 156.626562][ T7127] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 156.626583][ T7127] ? vfs_write+0x956/0xb30 [ 156.626607][ T7127] ? sb_end_write+0xe9/0x1c0 [ 156.626624][ T7127] ? vfs_write+0x956/0xb30 [ 156.626661][ T7127] do_sock_getsockopt+0x237/0x450 [ 156.626680][ T7127] ? lockdep_hardirqs_on+0x90/0x150 [ 156.626694][ T7127] ? count_memcg_event_mm+0x21/0x260 [ 156.626715][ T7127] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 156.626733][ T7127] ? lockdep_hardirqs_on+0x90/0x150 [ 156.626766][ T7127] __ia32_sys_getsockopt+0x1a5/0x250 [ 156.626785][ T7127] ? lockdep_hardirqs_on+0x90/0x150 [ 156.626803][ T7127] ? lockdep_hardirqs_on+0x90/0x150 [ 156.626823][ T7127] __do_fast_syscall_32+0xb6/0x2b0 [ 156.626842][ T7127] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.626863][ T7127] do_fast_syscall_32+0x34/0x80 [ 156.626881][ T7127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.626900][ T7127] RIP: 0023:0xf7f96539 [ 156.626914][ T7127] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 156.626927][ T7127] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 156.626944][ T7127] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 156.626955][ T7127] RDX: 000000000000004d RSI: 0000000000000000 RDI: 0000000080000000 [ 156.626965][ T7127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.626974][ T7127] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 156.626983][ T7127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.627008][ T7127] [ 156.627036][ T7127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.260733][ T7132] binder_alloc: 7131: pid 7131 spamming oneway? 1 buffers allocated for a total size of 4096 [ 157.396483][ T7132] binder: BINDER_SET_CONTEXT_MGR already set [ 157.417459][ T7132] binder: 7131:7132 ioctl 4018620d 80000100 returned -16 [ 157.790753][ T7152] ptrace attach of "./syz-executor exec"[5884] was attempted by "./syz-executor exec"[7152] [ 158.341994][ T9] IPVS: starting estimator thread 0... [ 158.656709][ T7160] IPVS: using max 28 ests per chain, 67200 per kthread [ 159.493928][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 159.774915][ T7189] netlink: 'syz.1.339': attribute type 4 has an invalid length. [ 159.925095][ T7191] usb usb1: usbfs: process 7191 (syz.3.341) did not claim interface 0 before use [ 160.590317][ T7204] FAULT_INJECTION: forcing a failure. [ 160.590317][ T7204] name failslab, interval 1, probability 0, space 0, times 0 [ 160.641809][ T7204] CPU: 1 UID: 0 PID: 7204 Comm: syz.3.342 Not tainted syzkaller #0 PREEMPT(full) [ 160.641833][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.641840][ T7204] Call Trace: [ 160.641852][ T7204] [ 160.641857][ T7204] dump_stack_lvl+0x189/0x250 [ 160.641875][ T7204] ? __pfx____ratelimit+0x10/0x10 [ 160.641887][ T7204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.641898][ T7204] ? __pfx__printk+0x10/0x10 [ 160.641909][ T7204] ? __local_bh_enable_ip+0x12d/0x1c0 [ 160.641927][ T7204] should_fail_ex+0x414/0x560 [ 160.641944][ T7204] should_failslab+0xa8/0x100 [ 160.641960][ T7204] __kmalloc_cache_noprof+0x70/0x3d0 [ 160.641973][ T7204] ? sctp_add_bind_addr+0x8c/0x370 [ 160.641984][ T7204] sctp_add_bind_addr+0x8c/0x370 [ 160.641993][ T7204] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 160.642007][ T7204] sctp_do_bind+0x5ab/0x940 [ 160.642020][ T7204] ? do_raw_spin_unlock+0x122/0x240 [ 160.642035][ T7204] sctp_bind+0x9c/0x100 [ 160.642047][ T7204] __sys_bind+0x2c3/0x3e0 [ 160.642058][ T7204] ? __pfx___sys_bind+0x10/0x10 [ 160.642079][ T7204] __ia32_sys_bind+0x7a/0x90 [ 160.642089][ T7204] __do_fast_syscall_32+0xb6/0x2b0 [ 160.642101][ T7204] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.642119][ T7204] do_fast_syscall_32+0x34/0x80 [ 160.642130][ T7204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.642141][ T7204] RIP: 0023:0xf707e539 [ 160.642150][ T7204] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 160.642158][ T7204] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 160.642169][ T7204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 160.642176][ T7204] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 160.642181][ T7204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.642186][ T7204] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 160.642191][ T7204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.642205][ T7204] [ 160.851119][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.243675][ T7216] FAULT_INJECTION: forcing a failure. [ 161.243675][ T7216] name failslab, interval 1, probability 0, space 0, times 0 [ 161.267357][ T7216] CPU: 0 UID: 0 PID: 7216 Comm: syz.3.345 Not tainted syzkaller #0 PREEMPT(full) [ 161.267381][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 161.267390][ T7216] Call Trace: [ 161.267397][ T7216] [ 161.267404][ T7216] dump_stack_lvl+0x189/0x250 [ 161.267429][ T7216] ? __pfx____ratelimit+0x10/0x10 [ 161.267447][ T7216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.267465][ T7216] ? __pfx__printk+0x10/0x10 [ 161.267482][ T7216] ? netlink_unicast+0x82c/0x9e0 [ 161.267504][ T7216] ? ___sys_sendmsg+0x21f/0x2a0 [ 161.267521][ T7216] ? __do_fast_syscall_32+0xb6/0x2b0 [ 161.267549][ T7216] should_fail_ex+0x414/0x560 [ 161.267577][ T7216] should_failslab+0xa8/0x100 [ 161.267601][ T7216] kmem_cache_alloc_noprof+0x73/0x3c0 [ 161.267621][ T7216] ? skb_clone+0x212/0x3a0 [ 161.267643][ T7216] skb_clone+0x212/0x3a0 [ 161.267665][ T7216] __netlink_deliver_tap+0x404/0x850 [ 161.267694][ T7216] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.267712][ T7216] netlink_deliver_tap+0x19c/0x1b0 [ 161.267729][ T7216] netlink_sendskb+0x68/0x140 [ 161.267750][ T7216] netlink_unicast+0x397/0x9e0 [ 161.267770][ T7216] ? __asan_memcpy+0x40/0x70 [ 161.267795][ T7216] ? __pfx_netlink_unicast+0x10/0x10 [ 161.267826][ T7216] netlink_rcv_skb+0x28c/0x470 [ 161.267844][ T7216] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 161.267864][ T7216] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.267893][ T7216] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.267918][ T7216] netlink_unicast+0x82c/0x9e0 [ 161.267948][ T7216] ? __pfx_netlink_unicast+0x10/0x10 [ 161.267970][ T7216] ? netlink_sendmsg+0x642/0xb30 [ 161.267983][ T7216] ? skb_put+0x11b/0x210 [ 161.268002][ T7216] netlink_sendmsg+0x805/0xb30 [ 161.268027][ T7216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.268044][ T7216] ? __import_iovec+0x5d4/0x7f0 [ 161.268081][ T7216] ? aa_sock_msg_perm+0xf1/0x1d0 [ 161.268099][ T7216] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.268117][ T7216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.268134][ T7216] __sock_sendmsg+0x21c/0x270 [ 161.268158][ T7216] ____sys_sendmsg+0x505/0x830 [ 161.268182][ T7216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.268217][ T7216] ___sys_sendmsg+0x21f/0x2a0 [ 161.268238][ T7216] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.268290][ T7216] ? __fget_files+0x2a/0x420 [ 161.268304][ T7216] ? __fget_files+0x3a0/0x420 [ 161.268330][ T7216] __sys_sendmsg+0x164/0x220 [ 161.268352][ T7216] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.268383][ T7216] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.268403][ T7216] __do_fast_syscall_32+0xb6/0x2b0 [ 161.268421][ T7216] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.268454][ T7216] do_fast_syscall_32+0x34/0x80 [ 161.268473][ T7216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.268492][ T7216] RIP: 0023:0xf707e539 [ 161.268507][ T7216] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 161.268518][ T7216] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 161.268534][ T7216] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000580 [ 161.268545][ T7216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.268553][ T7216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.268561][ T7216] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 161.268569][ T7216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.268593][ T7216] [ 161.839998][ T7227] FAULT_INJECTION: forcing a failure. [ 161.839998][ T7227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.869419][ T7222] kvm: pic: non byte read [ 161.874122][ T7222] kvm: pic: non byte read [ 161.878782][ T7222] kvm: pic: non byte read [ 161.883282][ T7222] kvm: pic: non byte read [ 161.888149][ T7222] kvm: pic: non byte read [ 161.892673][ T7222] kvm: pic: non byte read [ 161.897159][ T7222] kvm: pic: non byte read [ 161.901707][ T7222] kvm: pic: non byte read [ 161.906193][ T7222] kvm: pic: non byte read [ 161.908736][ T7227] CPU: 1 UID: 0 PID: 7227 Comm: syz.3.347 Not tainted syzkaller #0 PREEMPT(full) [ 161.908757][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 161.908766][ T7227] Call Trace: [ 161.908772][ T7227] [ 161.908780][ T7227] dump_stack_lvl+0x189/0x250 [ 161.908803][ T7227] ? __pfx____ratelimit+0x10/0x10 [ 161.908821][ T7227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.908839][ T7227] ? __pfx__printk+0x10/0x10 [ 161.908872][ T7227] should_fail_ex+0x414/0x560 [ 161.908900][ T7227] _copy_to_user+0x31/0xb0 [ 161.908922][ T7227] simple_read_from_buffer+0xe1/0x170 [ 161.908949][ T7227] proc_fail_nth_read+0x1b3/0x220 [ 161.908971][ T7227] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.908992][ T7227] ? rw_verify_area+0x2a6/0x4d0 [ 161.909010][ T7227] ? __lock_acquire+0xab9/0xd20 [ 161.909036][ T7227] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.909055][ T7227] vfs_read+0x1fd/0xa30 [ 161.909074][ T7227] ? fdget_pos+0x247/0x320 [ 161.909092][ T7227] ? __pfx___mutex_lock+0x10/0x10 [ 161.909110][ T7227] ? __pfx_vfs_read+0x10/0x10 [ 161.909131][ T7227] ? __fget_files+0x2a/0x420 [ 161.909150][ T7227] ? __fget_files+0x3a0/0x420 [ 161.909164][ T7227] ? __fget_files+0x2a/0x420 [ 161.909186][ T7227] ksys_read+0x145/0x250 [ 161.909208][ T7227] ? __pfx_ksys_read+0x10/0x10 [ 161.909232][ T7227] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.909252][ T7227] __do_fast_syscall_32+0xb6/0x2b0 [ 161.909271][ T7227] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.909291][ T7227] do_fast_syscall_32+0x34/0x80 [ 161.909309][ T7227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.909327][ T7227] RIP: 0023:0xf707e539 [ 161.909341][ T7227] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 161.909354][ T7227] RSP: 002b:00000000f546e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 161.909371][ T7227] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f546e620 [ 161.909381][ T7227] RDX: 000000000000000f RSI: 00000000f7415ff4 RDI: 0000000000000000 [ 161.909391][ T7227] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 161.909400][ T7227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 161.909409][ T7227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.909435][ T7227] [ 162.185056][ T7222] kvm: pic: non byte read [ 162.202802][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 162.463516][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.351'. [ 162.493555][ T5916] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 162.673363][ T5916] usb 2-1: config 7 has an invalid interface number: 109 but max is 0 [ 162.691850][ T5916] usb 2-1: config 7 has no interface number 0 [ 162.712136][ T5916] usb 2-1: config 7 interface 109 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 162.760385][ T5916] usb 2-1: config 7 interface 109 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 162.814730][ T5916] usb 2-1: config 7 interface 109 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 162.842803][ T5916] usb 2-1: config 7 interface 109 altsetting 4 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 162.882605][ T5916] usb 2-1: config 7 interface 109 altsetting 4 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 162.947459][ T5916] usb 2-1: config 7 interface 109 altsetting 4 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.564186][ T5916] usb 2-1: config 7 interface 109 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 163.591361][ T5916] usb 2-1: config 7 interface 109 has no altsetting 0 [ 163.599512][ T5966] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 163.633752][ T5916] usb 2-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=d9.4d [ 163.651530][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.753148][ T7272] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 163.852153][ T5916] usb 2-1: Product: syz [ 163.856352][ T5916] usb 2-1: Manufacturer: syz [ 163.857579][ T5966] usb 3-1: Using ep0 maxpacket: 8 [ 164.177304][ T5916] usb 2-1: SerialNumber: syz [ 164.196236][ T5966] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 164.199926][ T7233] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.205751][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.317036][ T5966] usb 3-1: Product: syz [ 164.342632][ T5966] usb 3-1: Manufacturer: syz [ 164.354386][ T5966] usb 3-1: SerialNumber: syz [ 164.377854][ T5966] usb 3-1: config 0 descriptor?? [ 164.651200][ T5966] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 165.556384][ T5916] usb 2-1: USB disconnect, device number 13 [ 166.144140][ T7280] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 166.616310][ T7297] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.363'. [ 166.683489][ T5966] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 166.701409][ T5966] usb 3-1: USB disconnect, device number 8 [ 167.257271][ T5916] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 167.443655][ T5916] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 167.451884][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.467883][ T5916] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 167.502371][ T5916] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 167.525297][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 167.535664][ T5916] usb 4-1: Product: syz [ 167.542487][ T5916] usb 4-1: Manufacturer: syz [ 167.555274][ T5916] usb 4-1: SerialNumber: syz [ 167.588552][ T5916] usb 4-1: config 0 descriptor?? [ 167.797777][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 167.972455][ T9] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 167.981936][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.989999][ T9] usb 5-1: Product: syz [ 167.994266][ T9] usb 5-1: Manufacturer: syz [ 168.006849][ T9] usb 5-1: SerialNumber: syz [ 168.022100][ T9] usb 5-1: config 0 descriptor?? [ 168.232023][ T9] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 168.440575][ T9] usb 5-1: USB disconnect, device number 11 [ 169.258953][ T7347] FAULT_INJECTION: forcing a failure. [ 169.258953][ T7347] name failslab, interval 1, probability 0, space 0, times 0 [ 169.290315][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.1.379 Not tainted syzkaller #0 PREEMPT(full) [ 169.290347][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 169.290356][ T7347] Call Trace: [ 169.290367][ T7347] [ 169.290374][ T7347] dump_stack_lvl+0x189/0x250 [ 169.290398][ T7347] ? __pfx____ratelimit+0x10/0x10 [ 169.290416][ T7347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.290434][ T7347] ? __pfx__printk+0x10/0x10 [ 169.290460][ T7347] ? __pfx___might_resched+0x10/0x10 [ 169.290479][ T7347] should_fail_ex+0x414/0x560 [ 169.290506][ T7347] should_failslab+0xa8/0x100 [ 169.290531][ T7347] kmem_cache_alloc_noprof+0x73/0x3c0 [ 169.290550][ T7347] ? mas_alloc_nodes+0x2e9/0x8e0 [ 169.290571][ T7347] mas_alloc_nodes+0x2e9/0x8e0 [ 169.290598][ T7347] mas_preallocate+0x3ad/0x6f0 [ 169.290620][ T7347] ? __pfx_mas_preallocate+0x10/0x10 [ 169.290645][ T7347] ? __asan_memset+0x22/0x50 [ 169.290673][ T7347] commit_merge+0x1fd/0x700 [ 169.290701][ T7347] ? __pfx_commit_merge+0x10/0x10 [ 169.290733][ T7347] ? dup_anon_vma+0x7b/0x2c0 [ 169.290756][ T7347] vma_modify+0xfc1/0x1970 [ 169.290799][ T7347] vma_modify_policy+0x1e8/0x230 [ 169.290821][ T7347] ? __pfx_vma_modify_policy+0x10/0x10 [ 169.290864][ T7347] mbind_range+0x2bb/0x800 [ 169.290893][ T7347] __se_sys_mbind+0x730/0xc30 [ 169.290914][ T7347] ? __pfx_vfs_write+0x10/0x10 [ 169.290939][ T7347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.290959][ T7347] ? __pfx___se_sys_mbind+0x10/0x10 [ 169.291003][ T7347] ? __ia32_sys_mbind+0x21/0xf0 [ 169.291024][ T7347] __do_fast_syscall_32+0xb6/0x2b0 [ 169.291044][ T7347] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.291066][ T7347] do_fast_syscall_32+0x34/0x80 [ 169.291084][ T7347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.291103][ T7347] RIP: 0023:0xf70ee539 [ 169.291119][ T7347] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 169.291133][ T7347] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000112 [ 169.291153][ T7347] RAX: ffffffffffffffda RBX: 0000000080001000 RCX: 0000000000800000 [ 169.291166][ T7347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.291176][ T7347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.291186][ T7347] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 169.291197][ T7347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.291224][ T7347] [ 170.199018][ T5966] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 170.218030][ T9] usb 4-1: USB disconnect, device number 12 [ 170.297545][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 170.297557][ T30] audit: type=1326 audit(1758847136.791:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 170.381582][ T30] audit: type=1326 audit(1758847136.791:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 170.409414][ T5966] usb 3-1: device descriptor read/64, error -71 [ 170.461686][ T30] audit: type=1326 audit(1758847136.791:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 170.871772][ T5966] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 170.893178][ T30] audit: type=1326 audit(1758847136.791:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 170.963966][ T30] audit: type=1326 audit(1758847136.791:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 170.998045][ T30] audit: type=1326 audit(1758847136.791:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 171.027635][ T5966] usb 3-1: device descriptor read/64, error -71 [ 171.037578][ T30] audit: type=1326 audit(1758847136.791:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 171.076326][ T7374] input: syz0 as /devices/virtual/input/input6 [ 171.090392][ T30] audit: type=1326 audit(1758847136.791:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 171.157694][ T5966] usb usb3-port1: attempt power cycle [ 171.230351][ T30] audit: type=1326 audit(1758847136.831:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 171.253935][ T30] audit: type=1326 audit(1758847136.831:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 171.451003][ T7385] loop9: detected capacity change from 0 to 7 [ 171.466353][ T7385] Dev loop9: unable to read RDB block 7 [ 171.472688][ T7385] loop9: unable to read partition table [ 171.478913][ T7385] loop9: partition table beyond EOD, truncated [ 171.485194][ T7385] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 171.517799][ T5966] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 171.551152][ T5966] usb 3-1: device descriptor read/8, error -71 [ 171.628553][ T5872] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 171.768649][ T5872] usb 5-1: device descriptor read/64, error -71 [ 171.797442][ T5966] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 171.817571][ T5937] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 171.829867][ T5966] usb 3-1: device descriptor read/8, error -71 [ 171.939582][ T5966] usb usb3-port1: unable to enumerate USB device [ 171.979009][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 171.989795][ T5937] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 172.000729][ T5937] usb 2-1: config 179 has no interface number 0 [ 172.018368][ T5872] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 172.030871][ T5937] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 172.067519][ T5937] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 172.085726][ T5937] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 172.102785][ T5937] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 172.116617][ T5937] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 172.151382][ T5937] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 172.163501][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.167332][ T5872] usb 5-1: device descriptor read/64, error -71 [ 172.192775][ T7387] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 172.317484][ T5872] usb usb5-port1: attempt power cycle [ 172.448563][ T7387] capability: warning: `syz.1.391' uses deprecated v2 capabilities in a way that may be insecure [ 172.484576][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.501895][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.517436][ T9] usb 2-1: USB disconnect, device number 14 [ 172.517683][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 172.533146][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 172.688397][ T5872] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 172.718130][ T5872] usb 5-1: device descriptor read/8, error -71 [ 172.981732][ T5872] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 173.028090][ T5872] usb 5-1: device descriptor read/8, error -71 [ 173.150430][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 173.162016][ T5872] usb usb5-port1: unable to enumerate USB device [ 173.462210][ T5872] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 173.597369][ T5872] usb 4-1: device descriptor read/64, error -71 [ 173.837343][ T5872] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 173.987430][ T5872] usb 4-1: device descriptor read/64, error -71 [ 174.101581][ T5872] usb usb4-port1: attempt power cycle [ 174.407298][ T5937] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 174.627297][ T5937] usb 3-1: Using ep0 maxpacket: 32 [ 174.636851][ T5937] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 174.648484][ T5872] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 174.727500][ T5872] usb 4-1: device descriptor read/8, error -71 [ 174.728822][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.770100][ T5937] usb 3-1: Product: syz [ 174.776859][ T5937] usb 3-1: Manufacturer: syz [ 174.785325][ T5937] usb 3-1: SerialNumber: syz [ 174.809972][ T5937] usb 3-1: config 0 descriptor?? [ 174.989035][ T5872] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 175.033720][ T5952] usb 3-1: USB disconnect, device number 13 [ 175.072723][ T5872] usb 4-1: device descriptor read/8, error -71 [ 175.249029][ T5872] usb usb4-port1: unable to enumerate USB device [ 176.085777][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.409'. [ 176.172495][ T7456] netlink: 'syz.3.410': attribute type 8 has an invalid length. [ 176.287604][ T5872] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 176.448735][ T5872] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 176.448777][ T5872] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 176.448797][ T5872] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 0 [ 176.448817][ T5872] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 176.452996][ T5872] usb 3-1: string descriptor 0 read error: -22 [ 176.453076][ T5872] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.453088][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.461509][ T5872] usb 3-1: low speed audio streaming not supported [ 176.663031][ T5872] usb 3-1: USB disconnect, device number 14 [ 177.087028][ T7484] FAULT_INJECTION: forcing a failure. [ 177.087028][ T7484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.107430][ T7484] CPU: 0 UID: 0 PID: 7484 Comm: syz.4.419 Not tainted syzkaller #0 PREEMPT(full) [ 177.107454][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.107464][ T7484] Call Trace: [ 177.107468][ T7484] [ 177.107473][ T7484] dump_stack_lvl+0x189/0x250 [ 177.107489][ T7484] ? __pfx____ratelimit+0x10/0x10 [ 177.107501][ T7484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.107512][ T7484] ? __pfx__printk+0x10/0x10 [ 177.107526][ T7484] ? __might_fault+0xb0/0x130 [ 177.107545][ T7484] should_fail_ex+0x414/0x560 [ 177.107606][ T7484] _copy_from_iter+0x1de/0x1790 [ 177.107622][ T7484] ? rcu_is_watching+0x15/0xb0 [ 177.107634][ T7484] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 177.107649][ T7484] ? __pfx__copy_from_iter+0x10/0x10 [ 177.107661][ T7484] ? __build_skb_around+0x257/0x3e0 [ 177.107673][ T7484] ? netlink_sendmsg+0x642/0xb30 [ 177.107683][ T7484] ? skb_put+0x11b/0x210 [ 177.107696][ T7484] netlink_sendmsg+0x6b2/0xb30 [ 177.107711][ T7484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.107728][ T7484] ? __import_iovec+0x5d4/0x7f0 [ 177.107739][ T7484] ? aa_sock_msg_perm+0xf1/0x1d0 [ 177.107751][ T7484] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.107761][ T7484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.107772][ T7484] __sock_sendmsg+0x21c/0x270 [ 177.107789][ T7484] ____sys_sendmsg+0x505/0x830 [ 177.107804][ T7484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.107823][ T7484] ___sys_sendmsg+0x21f/0x2a0 [ 177.107836][ T7484] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.107865][ T7484] ? __fget_files+0x2a/0x420 [ 177.107874][ T7484] ? __fget_files+0x3a0/0x420 [ 177.107887][ T7484] __sys_sendmsg+0x164/0x220 [ 177.107900][ T7484] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.107920][ T7484] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.107932][ T7484] __do_fast_syscall_32+0xb6/0x2b0 [ 177.107944][ T7484] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.107955][ T7484] do_fast_syscall_32+0x34/0x80 [ 177.107966][ T7484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.107978][ T7484] RIP: 0023:0xf7f96539 [ 177.107988][ T7484] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 177.107995][ T7484] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 177.108007][ T7484] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 177.108014][ T7484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.108019][ T7484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.108025][ T7484] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 177.108030][ T7484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.108044][ T7484] [ 177.396580][ T7486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.406'. [ 177.532187][ T7490] vxcan1: entered allmulticast mode [ 177.553055][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.422'. [ 177.968782][ T980] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 178.206977][ T980] usb 2-1: config 0 has no interfaces? [ 178.324770][ T980] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 178.347349][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.365698][ T980] usb 2-1: Product: syz [ 178.406818][ T980] usb 2-1: Manufacturer: syz [ 178.499448][ T980] usb 2-1: SerialNumber: syz [ 178.558214][ T980] usb 2-1: config 0 descriptor?? [ 178.796311][ T7497] AppArmor: change_hat: Invalid input '0x0000000®00000001^' [ 178.864937][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.894885][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.130892][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 180.221061][ T7530] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 181.253455][ T5952] usb 2-1: USB disconnect, device number 15 [ 181.601664][ T7551] FAULT_INJECTION: forcing a failure. [ 181.601664][ T7551] name failslab, interval 1, probability 0, space 0, times 0 [ 181.706166][ T7551] CPU: 1 UID: 0 PID: 7551 Comm: syz.1.436 Not tainted syzkaller #0 PREEMPT(full) [ 181.706190][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.706200][ T7551] Call Trace: [ 181.706207][ T7551] [ 181.706215][ T7551] dump_stack_lvl+0x189/0x250 [ 181.706240][ T7551] ? __pfx____ratelimit+0x10/0x10 [ 181.706259][ T7551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.706278][ T7551] ? __pfx__printk+0x10/0x10 [ 181.706304][ T7551] ? __pfx___might_resched+0x10/0x10 [ 181.706319][ T7551] ? fs_reclaim_acquire+0x7d/0x100 [ 181.706340][ T7551] should_fail_ex+0x414/0x560 [ 181.706373][ T7551] should_failslab+0xa8/0x100 [ 181.706396][ T7551] kmem_cache_alloc_noprof+0x73/0x3c0 [ 181.706417][ T7551] ? getname_flags+0xb8/0x540 [ 181.706437][ T7551] getname_flags+0xb8/0x540 [ 181.706458][ T7551] __ia32_sys_renameat2+0xba/0xe0 [ 181.706484][ T7551] __do_fast_syscall_32+0xb6/0x2b0 [ 181.706503][ T7551] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.706525][ T7551] do_fast_syscall_32+0x34/0x80 [ 181.706543][ T7551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.706562][ T7551] RIP: 0023:0xf70ee539 [ 181.706577][ T7551] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 181.706591][ T7551] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 181.706610][ T7551] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000580 [ 181.706622][ T7551] RDX: 00000000ffffff9c RSI: 00000000800005c0 RDI: 0000000000000000 [ 181.706633][ T7551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.706643][ T7551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.706653][ T7551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.706680][ T7551] [ 181.977590][ T5916] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 182.168926][ T7561] fuse: Bad value for 'fd' [ 182.300057][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 182.313702][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 182.314111][ T5916] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 182.393465][ T5916] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.406976][ T5916] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.429654][ T5916] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.455445][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.469841][ T980] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 182.483642][ T5916] usb 3-1: Product: syz [ 182.513791][ T5916] usb 3-1: Manufacturer: syz [ 182.527549][ T5916] usb 3-1: SerialNumber: syz [ 182.559774][ T7582] FAULT_INJECTION: forcing a failure. [ 182.559774][ T7582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.607360][ T7582] CPU: 1 UID: 0 PID: 7582 Comm: syz.3.448 Not tainted syzkaller #0 PREEMPT(full) [ 182.607384][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.607395][ T7582] Call Trace: [ 182.607403][ T7582] [ 182.607410][ T7582] dump_stack_lvl+0x189/0x250 [ 182.607433][ T7582] ? __pfx____ratelimit+0x10/0x10 [ 182.607452][ T7582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.607471][ T7582] ? __pfx__printk+0x10/0x10 [ 182.607492][ T7582] ? __might_fault+0xb0/0x130 [ 182.607525][ T7582] should_fail_ex+0x414/0x560 [ 182.607552][ T7582] _copy_from_user+0x2d/0xb0 [ 182.607574][ T7582] get_compat_msghdr+0xad/0x4a0 [ 182.607600][ T7582] ? __pfx_get_compat_msghdr+0x10/0x10 [ 182.607621][ T7582] ? rcu_is_watching+0x15/0xb0 [ 182.607637][ T7582] ? ___sys_recvmsg+0x1c4/0x510 [ 182.607663][ T7582] ___sys_recvmsg+0x17f/0x510 [ 182.607689][ T7582] ? __pfx____sys_recvmsg+0x10/0x10 [ 182.607733][ T7582] ? __fget_files+0x3a0/0x420 [ 182.607760][ T7582] do_recvmmsg+0x36a/0x770 [ 182.607788][ T7582] ? __pfx_do_recvmmsg+0x10/0x10 [ 182.607820][ T7582] ? __pfx_vfs_write+0x10/0x10 [ 182.607856][ T7582] __sys_recvmmsg+0x19d/0x280 [ 182.607879][ T7582] ? __pfx___sys_recvmmsg+0x10/0x10 [ 182.607897][ T7582] ? ksys_write+0x22a/0x250 [ 182.607928][ T7582] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 182.607953][ T7582] __do_fast_syscall_32+0xb6/0x2b0 [ 182.607973][ T7582] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.607995][ T7582] do_fast_syscall_32+0x34/0x80 [ 182.608013][ T7582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.608038][ T7582] RIP: 0023:0xf707e539 [ 182.608053][ T7582] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 182.608067][ T7582] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 182.608085][ T7582] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003700 [ 182.608096][ T7582] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.608107][ T7582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 182.608117][ T7582] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 182.608127][ T7582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.608152][ T7582] [ 183.102565][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.139029][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.150933][ T5916] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 183.160684][ T5916] usb 3-1: unit 1 not found! [ 183.169908][ T980] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 183.183251][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.212979][ T5916] usb 3-1: USB disconnect, device number 15 [ 183.223893][ T980] usb 5-1: config 0 descriptor?? [ 183.298183][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.397328][ T5966] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 183.670596][ T5966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.692698][ T5966] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 183.693930][ T7591] FAULT_INJECTION: forcing a failure. [ 183.693930][ T7591] name failslab, interval 1, probability 0, space 0, times 0 [ 183.711250][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 183.737459][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 183.750309][ T5966] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 183.765329][ T7591] CPU: 1 UID: 0 PID: 7591 Comm: syz.2.451 Not tainted syzkaller #0 PREEMPT(full) [ 183.765344][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.765350][ T7591] Call Trace: [ 183.765355][ T7591] [ 183.765360][ T7591] dump_stack_lvl+0x189/0x250 [ 183.765376][ T7591] ? __pfx____ratelimit+0x10/0x10 [ 183.765388][ T7591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.765402][ T7591] ? __pfx__printk+0x10/0x10 [ 183.765419][ T7591] ? __pfx___might_resched+0x10/0x10 [ 183.765433][ T7591] ? fs_reclaim_acquire+0x7d/0x100 [ 183.765445][ T7591] should_fail_ex+0x414/0x560 [ 183.765464][ T7591] should_failslab+0xa8/0x100 [ 183.765479][ T7591] __kmalloc_noprof+0xcb/0x4f0 [ 183.765492][ T7591] ? tomoyo_init_log+0x1a6e/0x1f70 [ 183.765510][ T7591] tomoyo_init_log+0x1a6e/0x1f70 [ 183.765519][ T7591] ? ip4_addr_string+0x181/0x200 [ 183.765540][ T7591] ? __pfx_tomoyo_init_log+0x10/0x10 [ 183.765550][ T7591] ? tomoyo_profile+0x11/0x50 [ 183.765560][ T7591] ? tomoyo_domain_quota_is_ok+0x42b/0x570 [ 183.765576][ T7591] tomoyo_supervisor+0x340/0x1480 [ 183.765588][ T7591] ? format_decode+0x5a3/0xe30 [ 183.765605][ T7591] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 183.765621][ T7591] ? snprintf+0xda/0x120 [ 183.765637][ T7591] ? __pfx_snprintf+0x10/0x10 [ 183.765651][ T7591] ? tomoyo_check_acl+0x386/0x400 [ 183.765668][ T7591] tomoyo_check_inet_address+0x5ad/0x8c0 [ 183.765680][ T7591] ? tomoyo_check_inet_address+0x275/0x8c0 [ 183.765692][ T7591] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 183.765711][ T7591] ? __pfx_current_check_access_socket+0x10/0x10 [ 183.765728][ T7591] ? __might_fault+0xb0/0x130 [ 183.765744][ T7591] tomoyo_socket_connect_permission+0x1e8/0x290 [ 183.765760][ T7591] security_socket_connect+0xc8/0x2b0 [ 183.765773][ T7591] __sys_connect+0x231/0x440 [ 183.765784][ T7591] ? __fget_files+0x3a0/0x420 [ 183.765794][ T7591] ? __pfx___sys_connect+0x10/0x10 [ 183.765815][ T7591] __ia32_sys_connect+0x7a/0x90 [ 183.765827][ T7591] __do_fast_syscall_32+0xb6/0x2b0 [ 183.765838][ T7591] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.765851][ T7591] do_fast_syscall_32+0x34/0x80 [ 183.765861][ T7591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.765874][ T7591] RIP: 0023:0xf700e539 [ 183.765882][ T7591] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 183.765891][ T7591] RSP: 002b:00000000f53fe55c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 183.765902][ T7591] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 183.765909][ T7591] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 183.765915][ T7591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.765920][ T7591] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 183.765926][ T7591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.765940][ T7591] [ 183.774545][ T980] hid-led 0003:04D8:F372.0006: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0 [ 183.799513][ T5966] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 184.080101][ T980] hid-led 0003:04D8:F372.0006: Greynut Luxafor initialized [ 184.139397][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 184.155299][ T5966] usb 4-1: Product: syz [ 184.166497][ T5966] usb 4-1: Manufacturer: syz [ 184.175574][ T5966] usb 4-1: SerialNumber: syz [ 184.177936][ T980] usb 5-1: USB disconnect, device number 16 [ 184.186056][ T5966] usb 4-1: config 0 descriptor?? [ 184.199006][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 184.222485][ T7597] syz_tun: entered promiscuous mode [ 184.228355][ T12] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 184.241825][ T49] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 184.264114][ T7597] syz_tun: left promiscuous mode [ 184.301054][ T59] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 184.356376][ T3577] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 184.375815][ T3577] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 184.402341][ T59] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 184.425516][ T59] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 184.447380][ T59] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 184.469212][ T3577] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 184.482274][ T5966] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 184.489309][ T5966] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 184.572562][ T12] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 184.605119][ T12] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 184.687406][ T12] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 184.698075][ T49] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 184.707348][ T5966] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 184.716758][ T5966] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 184.734388][ T5966] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 184.754791][ T12] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 184.772229][ T7608] FAULT_INJECTION: forcing a failure. [ 184.772229][ T7608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.792271][ T7608] CPU: 1 UID: 0 PID: 7608 Comm: syz.1.456 Not tainted syzkaller #0 PREEMPT(full) [ 184.792294][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.792304][ T7608] Call Trace: [ 184.792311][ T7608] [ 184.792319][ T7608] dump_stack_lvl+0x189/0x250 [ 184.792342][ T7608] ? __pfx____ratelimit+0x10/0x10 [ 184.792362][ T7608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.792379][ T7608] ? __pfx__printk+0x10/0x10 [ 184.792413][ T7608] should_fail_ex+0x414/0x560 [ 184.792440][ T7608] strncpy_from_user+0x36/0x290 [ 184.792465][ T7608] getname_flags+0xf3/0x540 [ 184.792484][ T7608] __ia32_sys_renameat2+0xad/0xe0 [ 184.792508][ T7608] __do_fast_syscall_32+0xb6/0x2b0 [ 184.792524][ T7608] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.792544][ T7608] do_fast_syscall_32+0x34/0x80 [ 184.792562][ T7608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.792581][ T7608] RIP: 0023:0xf70ee539 [ 184.792595][ T7608] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 184.792610][ T7608] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 184.792627][ T7608] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000080000340 [ 184.792637][ T7608] RDX: 00000000ffffffff RSI: 0000000080000300 RDI: 0000000000000002 [ 184.792647][ T7608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.792655][ T7608] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 184.792664][ T7608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.792687][ T7608] [ 184.975601][ T12] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 184.995788][ T49] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 185.005456][ T49] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 185.013856][ T7611] input: syz0 as /devices/virtual/input/input7 [ 185.038629][ T5966] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 185.068806][ T12] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 185.296764][ T7616] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3354154791 (6708309582 ns) > initial count (4455734788 ns). Using initial count to start timer. [ 185.342280][ T9] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 185.452867][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 185.464865][ T7588] tipc: New replicast peer: 255.255.255.255 [ 185.473673][ T7588] tipc: Enabled bearer , priority 10 [ 185.537986][ T9] usb 3-1: device descriptor read/64, error -71 [ 185.593988][ T7623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.461'. [ 185.648031][ T980] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 185.792777][ T9] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 185.809086][ T980] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 185.821430][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 185.841493][ T980] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.851273][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.886209][ T5966] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 185.911889][ T5966] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 185.974843][ T980] usb 5-1: config 0 descriptor?? [ 185.987147][ T980] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 185.994862][ T9] usb 3-1: device descriptor read/64, error -71 [ 186.117698][ T9] usb usb3-port1: attempt power cycle [ 186.459964][ T5966] usb 4-1: USB disconnect, device number 17 [ 186.467455][ T9] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 186.487870][ T9] usb 3-1: device descriptor read/8, error -71 [ 186.743337][ T9] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 186.767873][ T9] usb 3-1: device descriptor read/8, error -71 [ 186.877642][ T9] usb usb3-port1: unable to enumerate USB device [ 186.884388][ T5952] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 187.047301][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 187.063020][ T5952] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.076792][ T5952] usb 2-1: config 128 contains an unexpected descriptor of type 0x1, skipping [ 187.086317][ T5952] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 187.097036][ T5952] usb 2-1: config 128 has 0 interfaces, different from the descriptor's value: 4 [ 187.110120][ T5952] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 187.120254][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.128737][ T5952] usb 2-1: Product: syz [ 187.133152][ T5952] usb 2-1: Manufacturer: syz [ 187.138301][ T5952] usb 2-1: SerialNumber: syz [ 187.484769][ T7634] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.494126][ T7634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.501639][ T7634] IPv6: NLM_F_CREATE should be set when creating new route [ 187.508957][ T7634] IPv6: NLM_F_CREATE should be set when creating new route [ 188.272548][ T9] usb 5-1: USB disconnect, device number 17 [ 188.386744][ T7647] binder: 7646:7647 ioctl 4018620d 0 returned -22 [ 188.533541][ T7647] binder: 7646:7647 ioctl c018620c 0 returned -14 [ 188.553770][ T7647] input: syz0 as /devices/virtual/input/input8 [ 189.555625][ T5952] usb 2-1: USB disconnect, device number 16 [ 192.117300][ T5872] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 192.286811][ T5872] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 192.306652][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.337956][ T5872] usb 2-1: config 0 descriptor?? [ 192.535896][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 192.555278][ T7724] wireguard0: entered promiscuous mode [ 192.561102][ T7724] wireguard0: entered allmulticast mode [ 192.573925][ T5872] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 192.631490][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 193.026558][ T7711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.097102][ T7711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.130137][ T7711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.165202][ T7711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.182841][ T5872] [drm:udl_init] *ERROR* Selecting channel failed [ 193.269245][ T5872] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 193.304179][ T5872] [drm] Initialized udl on minor 2 [ 193.324917][ T5872] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 193.360588][ T5872] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 193.411190][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 193.440278][ T5872] usb 2-1: USB disconnect, device number 17 [ 193.473314][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 193.704609][ T7737] loop2: detected capacity change from 0 to 7 [ 193.718092][ T7737] loop2: [ 193.721090][ T7737] loop2: partition table partially beyond EOD, truncated [ 193.945595][ T7741] wireguard0: entered promiscuous mode [ 193.951339][ T7741] wireguard0: entered allmulticast mode [ 194.343171][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.359307][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.792677][ T7759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.497'. [ 194.829088][ T7759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.497'. [ 195.626001][ T7771] fuse: Bad value for 'fd' [ 195.686975][ T7774] netlink: 'syz.1.499': attribute type 4 has an invalid length. [ 195.698368][ T7774] netlink: 'syz.1.499': attribute type 4 has an invalid length. [ 196.157270][ T7776] netlink: 60 bytes leftover after parsing attributes in process `syz.0.501'. [ 197.069145][ T7785] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 198.411266][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 198.433667][ T7794] syz_tun: entered promiscuous mode [ 198.446469][ T7794] syz_tun: left promiscuous mode [ 198.879429][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 198.895838][ T7801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.904890][ T7801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.941299][ T7801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.950869][ T7801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.189277][ T7814] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 199.208347][ T7814] netdevsim netdevsim0: Falling back to sysfs fallback for: þ [ 199.958410][ T7831] sg_write: process 319 (syz.2.517) changed security contexts after opening file descriptor, this is not allowed. [ 199.975169][ T7830] batadv_slave_1: entered promiscuous mode [ 201.428851][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 201.428866][ T30] audit: type=1400 audit(1758847167.911:100): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7836 comm="syz.0.519" [ 204.065196][ T7828] batadv_slave_1: left promiscuous mode [ 204.401808][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'. [ 204.547325][ T7884] netlink: 36 bytes leftover after parsing attributes in process `syz.2.533'. [ 205.877466][ T5872] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 206.057710][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 206.070453][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.082507][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.094326][ T5872] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.105479][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.121520][ T5872] usb 3-1: Product: syz [ 206.126019][ T5872] usb 3-1: Manufacturer: syz [ 206.131085][ T5872] usb 3-1: SerialNumber: syz [ 206.440613][ T5872] usb 3-1: 0:2 : does not exist [ 206.481477][ T5872] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 206.580253][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 206.647756][ T7911] syz_tun: entered promiscuous mode [ 206.687309][ T7911] syz_tun: left promiscuous mode [ 206.786659][ T7915] netlink: 96 bytes leftover after parsing attributes in process `syz.2.539'. [ 206.814506][ T7916] FAULT_INJECTION: forcing a failure. [ 206.814506][ T7916] name failslab, interval 1, probability 0, space 0, times 0 [ 206.827919][ T7916] CPU: 1 UID: 0 PID: 7916 Comm: syz.0.541 Not tainted syzkaller #0 PREEMPT(full) [ 206.827941][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.827951][ T7916] Call Trace: [ 206.827958][ T7916] [ 206.827966][ T7916] dump_stack_lvl+0x189/0x250 [ 206.827990][ T7916] ? __pfx____ratelimit+0x10/0x10 [ 206.828007][ T7916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.828024][ T7916] ? __pfx__printk+0x10/0x10 [ 206.828045][ T7916] ? __pfx___might_resched+0x10/0x10 [ 206.828061][ T7916] ? fs_reclaim_acquire+0x7d/0x100 [ 206.828079][ T7916] should_fail_ex+0x414/0x560 [ 206.828104][ T7916] should_failslab+0xa8/0x100 [ 206.828125][ T7916] __kmalloc_noprof+0xcb/0x4f0 [ 206.828143][ T7916] ? tomoyo_encode+0x28b/0x550 [ 206.828161][ T7916] tomoyo_encode+0x28b/0x550 [ 206.828182][ T7916] tomoyo_realpath_from_path+0x58d/0x5d0 [ 206.828210][ T7916] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 206.828232][ T7916] tomoyo_path_number_perm+0x1e8/0x5a0 [ 206.828256][ T7916] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 206.828295][ T7916] ? __lock_acquire+0xab9/0xd20 [ 206.828339][ T7916] ? __fget_files+0x2a/0x420 [ 206.828359][ T7916] ? __fget_files+0x3a0/0x420 [ 206.828373][ T7916] ? __fget_files+0x2a/0x420 [ 206.828392][ T7916] security_file_ioctl_compat+0xcb/0x2d0 [ 206.828416][ T7916] __ia32_compat_sys_ioctl+0x128/0x840 [ 206.828440][ T7916] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 206.828460][ T7916] ? __fget_files+0x3a0/0x420 [ 206.828495][ T7916] ? fput+0xa0/0xd0 [ 206.828512][ T7916] ? ksys_write+0x22a/0x250 [ 206.828540][ T7916] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.828559][ T7916] __do_fast_syscall_32+0xb6/0x2b0 [ 206.828576][ T7916] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.828593][ T7916] do_fast_syscall_32+0x34/0x80 [ 206.828608][ T7916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.828625][ T7916] RIP: 0023:0xf7ff8539 [ 206.828638][ T7916] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 206.828650][ T7916] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 206.828665][ T7916] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080045505 [ 206.828675][ T7916] RDX: 0000000080002a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.828683][ T7916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.828692][ T7916] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 206.828700][ T7916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.828723][ T7916] [ 206.828745][ T7916] ERROR: Out of memory at tomoyo_realpath_from_path. [ 207.111970][ T5872] usb 3-1: USB disconnect, device number 20 [ 207.175999][ T7916] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.541' sets config #0 [ 207.266045][ T7915] vlan3: entered allmulticast mode [ 207.302391][ T7915] erspan0: entered allmulticast mode [ 207.556769][ T7925] program syz.3.543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.857703][ T5872] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 208.155747][ T5872] usb 3-1: Invalid ep0 maxpacket: 9 [ 208.307279][ T5872] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 208.757323][ T5872] usb 3-1: Invalid ep0 maxpacket: 9 [ 208.765740][ T5872] usb usb3-port1: attempt power cycle [ 208.885367][ T7937] netlink: 'syz.3.546': attribute type 4 has an invalid length. [ 208.911815][ T7937] netlink: 'syz.3.546': attribute type 4 has an invalid length. [ 209.217513][ T5872] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 209.248636][ T5872] usb 3-1: Invalid ep0 maxpacket: 9 [ 209.409767][ T5872] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 209.458762][ T5872] usb 3-1: Invalid ep0 maxpacket: 9 [ 209.501913][ T5872] usb usb3-port1: unable to enumerate USB device [ 210.063734][ T7947] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.110835][ T7947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.118129][ T7947] IPv6: NLM_F_CREATE should be set when creating new route [ 210.125388][ T7947] IPv6: NLM_F_CREATE should be set when creating new route [ 210.439090][ T7953] bridge: RTM_NEWNEIGH with invalid state 0x24 [ 210.687391][ T5872] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 210.849319][ T5872] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 210.860481][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.873997][ T5872] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 210.889029][ T5872] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.900346][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 210.909968][ T5872] usb 5-1: Product: syz [ 210.914219][ T5872] usb 5-1: Manufacturer: syz [ 210.920575][ T5872] usb 5-1: SerialNumber: syz [ 210.930066][ T5872] usb 5-1: config 0 descriptor?? [ 211.827317][ T5952] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 212.020913][ T5952] usb 2-1: config 4 has an invalid interface number: 156 but max is 0 [ 212.071057][ T5952] usb 2-1: config 4 has no interface number 0 [ 212.105444][ T7972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.560'. [ 212.120292][ T5952] usb 2-1: config 4 interface 156 has no altsetting 0 [ 212.158315][ T5952] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 212.180923][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.212254][ T5952] usb 2-1: Product: syz [ 212.232900][ T5952] usb 2-1: Manufacturer: syz [ 212.254498][ T5952] usb 2-1: SerialNumber: syz [ 212.382171][ T5952] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 212.420607][ T5952] usb 2-1: setting power ON [ 212.436912][ T5952] dvb-usb: bulk message failed: -22 (2/0) [ 212.504442][ T5952] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 212.540017][ T5952] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 212.627085][ T5952] dvb_usb_cxusb 2-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 213.064871][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 213.607318][ T5872] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 213.681328][ T5966] usb 5-1: USB disconnect, device number 18 [ 213.783053][ T5872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 213.817711][ T5872] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 213.884596][ T5872] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 213.936434][ T5872] usb 4-1: config 1 interface 0 has no altsetting 0 [ 213.990015][ T5872] usb 4-1: string descriptor 0 read error: -22 [ 214.013276][ T5872] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.049843][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.053124][ T7994] tun0: tun_chr_ioctl cmd 1074025672 [ 214.099560][ T7994] tun0: ignored: set checksum enabled [ 214.133404][ T7989] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 214.147773][ T7989] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 214.213912][ T5872] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 214.481213][ T8006] tipc: Started in network mode [ 214.486237][ T8006] tipc: Node identity 080211, cluster identity 4711 [ 214.493922][ T8006] tipc: Enabled bearer , priority 0 [ 214.505136][ T8006] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 214.512768][ T8006] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 214.522225][ T8006] tipc: Resetting bearer [ 214.531504][ T1112] tipc: Resetting bearer [ 214.550554][ T8006] tipc: Resetting bearer [ 214.727580][ T8010] ptrace attach of "./syz-executor exec"[5884] was attempted by "./syz-executor exec"[8010] [ 214.796803][ T5952] usb 2-1: USB disconnect, device number 18 [ 215.188135][ T5872] usb 4-1: USB disconnect, device number 18 [ 215.410719][ T8014] netlink: 6 bytes leftover after parsing attributes in process `syz.4.571'. [ 215.717341][ T5872] tipc: Node number set to 134353152 [ 216.514186][ T8030] netlink: 'syz.4.577': attribute type 1 has an invalid length. [ 216.535635][ T8030] net_ratelimit: 10 callbacks suppressed [ 216.535646][ T8030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.821468][ T8036] input: syz1 as /devices/virtual/input/input10 [ 216.908036][ T8036] netlink: 'syz.3.576': attribute type 10 has an invalid length. [ 216.940763][ T8036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.576'. [ 216.953473][ T8003] delete_channel: no stack [ 217.002997][ T8036] batadv0: entered promiscuous mode [ 217.035236][ T8036] batadv0: entered allmulticast mode [ 217.060395][ T8036] bridge0: port 1(batadv0) entered blocking state [ 217.068418][ T8036] bridge0: port 1(batadv0) entered disabled state [ 217.079715][ T8036] batman_adv: batadv0: Local translation table size (136) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 217.097282][ T8036] bridge0: port 1(batadv0) entered blocking state [ 217.103905][ T8036] bridge0: port 1(batadv0) entered forwarding state [ 217.192317][ T5966] batman_adv: batadv0: Local translation table size (136) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 217.328023][ T3577] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 217.337632][ T3577] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 217.917480][ T5952] batman_adv: batadv0: Local translation table size (136) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 218.251699][ T8053] netlink: 'syz.2.582': attribute type 10 has an invalid length. [ 218.324439][ T9] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 218.363722][ T9] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.295818][ T8063] netlink: 76 bytes leftover after parsing attributes in process `syz.1.587'. [ 219.417560][ T980] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 219.585271][ T8072] tipc: Enabled bearer , priority 0 [ 219.602808][ T8072] syzkaller0: entered promiscuous mode [ 219.608809][ T8072] syzkaller0: entered allmulticast mode [ 219.617480][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 219.625408][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 219.643683][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.654788][ T8072] tipc: Resetting bearer [ 219.675073][ T8071] tipc: Resetting bearer [ 219.681241][ T980] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 219.703607][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.715255][ T8071] tipc: Disabling bearer [ 219.752799][ T980] usb 4-1: config 0 descriptor?? [ 220.315065][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 220.333226][ T8088] syz_tun: entered promiscuous mode [ 220.342799][ T8088] syz_tun: left promiscuous mode [ 220.435171][ T5952] usb 4-1: USB disconnect, device number 19 [ 220.887277][ T5952] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 221.050069][ T5952] usb 5-1: config 0 has no interfaces? [ 221.066902][ T5952] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 221.076436][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.084507][ T5952] usb 5-1: Product: syz [ 221.089021][ T5952] usb 5-1: Manufacturer: syz [ 221.093631][ T5952] usb 5-1: SerialNumber: syz [ 221.100662][ T5952] usb 5-1: config 0 descriptor?? [ 221.538017][ T5952] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 221.834136][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 221.851432][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.871767][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.889370][ T5952] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 221.898709][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 221.908155][ T5952] usb 2-1: Product: syz [ 221.918302][ T5952] usb 2-1: Manufacturer: syz [ 222.131900][ T5952] usb 2-1: SerialNumber: syz [ 222.237082][ T5952] usb 2-1: config 0 descriptor?? [ 222.260172][ T5952] usb 2-1: NFC: intf ffff888023d37000 id ffffffff8eb55080 [ 222.465380][ T5952] usb 2-1: USB disconnect, device number 19 [ 222.652832][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 223.090935][ T8137] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 223.127862][ T8137] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 223.262911][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.272119][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.808298][ T9] usb 5-1: USB disconnect, device number 19 [ 225.047302][ T980] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 225.408712][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.437416][ T980] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 225.505869][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.718446][ T980] usb 2-1: config 0 descriptor?? [ 226.310390][ T8165] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 226.354419][ T8165] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 226.587664][ T8162] ================================================================== [ 226.595794][ T8162] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 226.603970][ T8162] Read of size 1 at addr ffff88805976cbb0 by task syz.4.615/8162 [ 226.611699][ T8162] [ 226.614032][ T8162] CPU: 1 UID: 0 PID: 8162 Comm: syz.4.615 Not tainted syzkaller #0 PREEMPT(full) [ 226.614054][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 226.614065][ T8162] Call Trace: [ 226.614072][ T8162] [ 226.614080][ T8162] dump_stack_lvl+0x189/0x250 [ 226.614105][ T8162] ? __kasan_check_byte+0x12/0x40 [ 226.614130][ T8162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.614150][ T8162] ? lock_release+0x4b/0x3e0 [ 226.614175][ T8162] ? __virt_addr_valid+0x4a5/0x5c0 [ 226.614197][ T8162] print_report+0xca/0x240 [ 226.614214][ T8162] ? xfrm_state_find+0x2cf2/0x5400 [ 226.614232][ T8162] kasan_report+0x118/0x150 [ 226.614255][ T8162] ? xfrm_state_find+0x2cf2/0x5400 [ 226.614278][ T8162] xfrm_state_find+0x2cf2/0x5400 [ 226.614297][ T8162] ? __lock_acquire+0xab9/0xd20 [ 226.614328][ T8162] ? xfrm_state_find+0x1da/0x5400 [ 226.614349][ T8162] ? __pfx_xfrm_state_find+0x10/0x10 [ 226.614373][ T8162] ? __lock_acquire+0xab9/0xd20 [ 226.614397][ T8162] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 226.614430][ T8162] ? stack_depot_save_flags+0x40/0x860 [ 226.614455][ T8162] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 226.614477][ T8162] ? __lock_acquire+0xab9/0xd20 [ 226.614507][ T8162] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 226.614530][ T8162] ? rt_set_nexthop+0x693/0xa80 [ 226.614555][ T8162] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 226.614579][ T8162] ? xfrm_expand_policies+0x41f/0x6a0 [ 226.614603][ T8162] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 226.614628][ T8162] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 226.614656][ T8162] xfrm_lookup_route+0x3c/0x1c0 [ 226.614679][ T8162] udp_sendmsg+0x142e/0x2170 [ 226.614707][ T8162] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 226.614729][ T8162] ? __pfx_udp_sendmsg+0x10/0x10 [ 226.614761][ T8162] ? finish_task_switch+0x18b/0x950 [ 226.614793][ T8162] ? __pfx_aa_sk_perm+0x10/0x10 [ 226.614817][ T8162] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 226.614839][ T8162] ? __asan_memset+0x22/0x50 [ 226.614855][ T8162] ? sock_rps_record_flow+0x19/0x410 [ 226.614879][ T8162] ? inet_sendmsg+0x29c/0x370 [ 226.614900][ T8162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.614920][ T8162] __sock_sendmsg+0x19c/0x270 [ 226.614945][ T8162] ____sys_sendmsg+0x52d/0x830 [ 226.614967][ T8162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.614993][ T8162] ___sys_sendmsg+0x21f/0x2a0 [ 226.615013][ T8162] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.615033][ T8162] ? __lock_acquire+0xab9/0xd20 [ 226.615067][ T8162] ? __fget_files+0x2a/0x420 [ 226.615082][ T8162] ? __fget_files+0x3a0/0x420 [ 226.615101][ T8162] __sys_sendmmsg+0x28e/0x430 [ 226.615123][ T8162] ? __pfx___sys_sendmmsg+0x10/0x10 [ 226.615147][ T8162] ? __pfx_do_futex+0x10/0x10 [ 226.615178][ T8162] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 226.615200][ T8162] __do_fast_syscall_32+0xb6/0x2b0 [ 226.615220][ T8162] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.615238][ T8162] do_fast_syscall_32+0x34/0x80 [ 226.615256][ T8162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.615279][ T8162] RIP: 0023:0xf7f96539 [ 226.615295][ T8162] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 226.615311][ T8162] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 226.615330][ T8162] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000180 [ 226.615342][ T8162] RDX: 0000000000000077 RSI: 0000000000007600 RDI: 0000000000000000 [ 226.615354][ T8162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.615364][ T8162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 226.615375][ T8162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.615393][ T8162] [ 226.615399][ T8162] [ 226.977845][ T8162] Allocated by task 6838: [ 226.982180][ T8162] kasan_save_track+0x3e/0x80 [ 226.986872][ T8162] __kasan_slab_alloc+0x6c/0x80 [ 226.991721][ T8162] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 226.997188][ T8162] xfrm_state_alloc+0x24/0x2f0 [ 227.001954][ T8162] __find_acq_core+0x8a7/0x1c00 [ 227.006798][ T8162] xfrm_find_acq+0x78/0xa0 [ 227.011219][ T8162] xfrm_alloc_userspi+0x6b3/0xc90 [ 227.016251][ T8162] xfrm_user_rcv_msg+0x7a0/0xab0 [ 227.021191][ T8162] netlink_rcv_skb+0x205/0x470 [ 227.025966][ T8162] xfrm_netlink_rcv+0x79/0x90 [ 227.030716][ T8162] netlink_unicast+0x82c/0x9e0 [ 227.035468][ T8162] netlink_sendmsg+0x805/0xb30 [ 227.040247][ T8162] __sock_sendmsg+0x21c/0x270 [ 227.044935][ T8162] ____sys_sendmsg+0x505/0x830 [ 227.049693][ T8162] ___sys_sendmsg+0x21f/0x2a0 [ 227.054404][ T8162] __sys_sendmsg+0x164/0x220 [ 227.058996][ T8162] __do_fast_syscall_32+0xb6/0x2b0 [ 227.064107][ T8162] do_fast_syscall_32+0x34/0x80 [ 227.068972][ T8162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.075295][ T8162] [ 227.077637][ T8162] Freed by task 5916: [ 227.081609][ T8162] kasan_save_track+0x3e/0x80 [ 227.086288][ T8162] kasan_save_free_info+0x46/0x50 [ 227.091315][ T8162] __kasan_slab_free+0x5b/0x80 [ 227.096088][ T8162] kmem_cache_free+0x18f/0x400 [ 227.100855][ T8162] xfrm_state_gc_task+0x52d/0x6b0 [ 227.105887][ T8162] process_scheduled_works+0xae1/0x17b0 [ 227.111435][ T8162] worker_thread+0x8a0/0xda0 [ 227.116028][ T8162] kthread+0x70e/0x8a0 [ 227.120095][ T8162] ret_from_fork+0x439/0x7d0 [ 227.124667][ T8162] ret_from_fork_asm+0x1a/0x30 [ 227.129508][ T8162] [ 227.131824][ T8162] The buggy address belongs to the object at ffff88805976c880 [ 227.131824][ T8162] which belongs to the cache xfrm_state of size 928 [ 227.145785][ T8162] The buggy address is located 816 bytes inside of [ 227.145785][ T8162] freed 928-byte region [ffff88805976c880, ffff88805976cc20) [ 227.159576][ T8162] [ 227.161914][ T8162] The buggy address belongs to the physical page: [ 227.168431][ T8162] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805976c000 pfn:0x5976c [ 227.178509][ T8162] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 227.186990][ T8162] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 227.194606][ T8162] page_type: f5(slab) [ 227.198598][ T8162] raw: 00fff00000000040 ffff8881422ec500 dead000000000122 0000000000000000 [ 227.207196][ T8162] raw: ffff88805976c000 00000000800f000e 00000000f5000000 0000000000000000 [ 227.215881][ T8162] head: 00fff00000000040 ffff8881422ec500 dead000000000122 0000000000000000 [ 227.224743][ T8162] head: ffff88805976c000 00000000800f000e 00000000f5000000 0000000000000000 [ 227.233410][ T8162] head: 00fff00000000002 ffffea000165db01 00000000ffffffff 00000000ffffffff [ 227.242361][ T8162] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 227.251027][ T8162] page dumped because: kasan: bad access detected [ 227.257465][ T8162] page_owner tracks the page as allocated [ 227.263180][ T8162] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6307, tgid 6306 (syz.0.107), ts 102649070632, free_ts 102190465815 [ 227.282440][ T8162] post_alloc_hook+0x240/0x2a0 [ 227.287233][ T8162] get_page_from_freelist+0x21e4/0x22c0 [ 227.292772][ T8162] __alloc_frozen_pages_noprof+0x181/0x370 [ 227.298562][ T8162] alloc_pages_mpol+0x232/0x4a0 [ 227.303432][ T8162] allocate_slab+0x8a/0x370 [ 227.307979][ T8162] ___slab_alloc+0xbeb/0x1420 [ 227.312676][ T8162] kmem_cache_alloc_noprof+0x283/0x3c0 [ 227.318127][ T8162] xfrm_state_alloc+0x24/0x2f0 [ 227.322896][ T8162] xfrm_state_find+0x37d4/0x5400 [ 227.327854][ T8162] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 227.334033][ T8162] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 227.339476][ T8162] xfrm_lookup_route+0x3c/0x1c0 [ 227.344343][ T8162] sctp_v6_get_dst+0x7cc/0x1bc0 [ 227.349370][ T8162] sctp_transport_route+0x118/0x2f0 [ 227.354591][ T8162] sctp_assoc_add_peer+0x657/0x13b0 [ 227.359815][ T8162] sctp_connect_new_asoc+0x30a/0x690 [ 227.365111][ T8162] page last free pid 5872 tgid 5872 stack trace: [ 227.371543][ T8162] __free_frozen_pages+0xbc4/0xd30 [ 227.376669][ T8162] free_large_kmalloc+0x13a/0x1f0 [ 227.381707][ T8162] device_release+0x9c/0x1c0 [ 227.386392][ T8162] kobject_put+0x22b/0x480 [ 227.390804][ T8162] usbhid_probe+0xe4d/0x12a0 [ 227.395390][ T8162] usb_probe_interface+0x668/0xc30 [ 227.400507][ T8162] really_probe+0x26a/0x9e0 [ 227.405013][ T8162] __driver_probe_device+0x18c/0x2f0 [ 227.410470][ T8162] driver_probe_device+0x4f/0x430 [ 227.415525][ T8162] __device_attach_driver+0x2ce/0x530 [ 227.420928][ T8162] bus_for_each_drv+0x251/0x2e0 [ 227.425872][ T8162] __device_attach+0x2b8/0x400 [ 227.430654][ T8162] bus_probe_device+0x185/0x260 [ 227.435515][ T8162] device_add+0x7b6/0xb50 [ 227.439842][ T8162] usb_set_configuration+0x1a87/0x20e0 [ 227.445410][ T8162] usb_generic_driver_probe+0x8d/0x150 [ 227.450888][ T8162] [ 227.453209][ T8162] Memory state around the buggy address: [ 227.458826][ T8162] ffff88805976ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.466967][ T8162] ffff88805976cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.475030][ T8162] >ffff88805976cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.483085][ T8162] ^ [ 227.488698][ T8162] ffff88805976cc00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 227.496754][ T8162] ffff88805976cc80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 227.504817][ T8162] ================================================================== [ 227.515298][ T980] video4linux radio48: keene_cmd_main failed (-110) [ 227.546517][ T980] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 227.547624][ T8162] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 227.547643][ T8162] CPU: 1 UID: 0 PID: 8162 Comm: syz.4.615 Not tainted syzkaller #0 PREEMPT(full) [ 227.547664][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.547676][ T8162] Call Trace: [ 227.547684][ T8162] [ 227.547692][ T8162] dump_stack_lvl+0x99/0x250 [ 227.547718][ T8162] ? __asan_memcpy+0x40/0x70 [ 227.547739][ T8162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.547758][ T8162] ? __pfx__printk+0x10/0x10 [ 227.547785][ T8162] vpanic+0x281/0x750 [ 227.547804][ T8162] ? preempt_schedule+0xae/0xc0 [ 227.547821][ T8162] ? __pfx_vpanic+0x10/0x10 [ 227.547837][ T8162] ? preempt_schedule_common+0x83/0xd0 [ 227.547854][ T8162] ? preempt_schedule+0xae/0xc0 [ 227.547870][ T8162] ? __pfx_preempt_schedule+0x10/0x10 [ 227.547889][ T8162] panic+0xb9/0xc0 [ 227.547907][ T8162] ? __pfx_panic+0x10/0x10 [ 227.547926][ T8162] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 227.547954][ T8162] ? xfrm_state_find+0x2cf2/0x5400 [ 227.547974][ T8162] check_panic_on_warn+0x89/0xb0 [ 227.547997][ T8162] ? xfrm_state_find+0x2cf2/0x5400 [ 227.548015][ T8162] end_report+0x78/0x160 [ 227.548038][ T8162] kasan_report+0x129/0x150 [ 227.548062][ T8162] ? xfrm_state_find+0x2cf2/0x5400 [ 227.548085][ T8162] xfrm_state_find+0x2cf2/0x5400 [ 227.548104][ T8162] ? __lock_acquire+0xab9/0xd20 [ 227.548135][ T8162] ? xfrm_state_find+0x1da/0x5400 [ 227.548157][ T8162] ? __pfx_xfrm_state_find+0x10/0x10 [ 227.548179][ T8162] ? __lock_acquire+0xab9/0xd20 [ 227.548204][ T8162] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 227.548238][ T8162] ? stack_depot_save_flags+0x40/0x860 [ 227.548265][ T8162] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 227.548288][ T8162] ? __lock_acquire+0xab9/0xd20 [ 227.548319][ T8162] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 227.548341][ T8162] ? rt_set_nexthop+0x693/0xa80 [ 227.548367][ T8162] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 227.548392][ T8162] ? xfrm_expand_policies+0x41f/0x6a0 [ 227.548417][ T8162] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 227.548450][ T8162] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 227.548479][ T8162] xfrm_lookup_route+0x3c/0x1c0 [ 227.548502][ T8162] udp_sendmsg+0x142e/0x2170 [ 227.548531][ T8162] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 227.548554][ T8162] ? __pfx_udp_sendmsg+0x10/0x10 [ 227.548578][ T8162] ? finish_task_switch+0x18b/0x950 [ 227.548610][ T8162] ? __pfx_aa_sk_perm+0x10/0x10 [ 227.548633][ T8162] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 227.548653][ T8162] ? __asan_memset+0x22/0x50 [ 227.548671][ T8162] ? sock_rps_record_flow+0x19/0x410 [ 227.548695][ T8162] ? inet_sendmsg+0x29c/0x370 [ 227.548716][ T8162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.548736][ T8162] __sock_sendmsg+0x19c/0x270 [ 227.548762][ T8162] ____sys_sendmsg+0x52d/0x830 [ 227.548788][ T8162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.548814][ T8162] ___sys_sendmsg+0x21f/0x2a0 [ 227.548835][ T8162] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.548855][ T8162] ? __lock_acquire+0xab9/0xd20 [ 227.548892][ T8162] ? __fget_files+0x2a/0x420 [ 227.548907][ T8162] ? __fget_files+0x3a0/0x420 [ 227.548926][ T8162] __sys_sendmmsg+0x28e/0x430 [ 227.548949][ T8162] ? __pfx___sys_sendmmsg+0x10/0x10 [ 227.548973][ T8162] ? __pfx_do_futex+0x10/0x10 [ 227.549006][ T8162] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 227.549027][ T8162] __do_fast_syscall_32+0xb6/0x2b0 [ 227.549048][ T8162] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.549067][ T8162] do_fast_syscall_32+0x34/0x80 [ 227.549086][ T8162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.549107][ T8162] RIP: 0023:0xf7f96539 [ 227.549122][ T8162] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 227.549137][ T8162] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 227.549158][ T8162] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000180 [ 227.549171][ T8162] RDX: 0000000000000077 RSI: 0000000000007600 RDI: 0000000000000000 [ 227.549183][ T8162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.549194][ T8162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 227.549206][ T8162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.549223][ T8162] [ 227.553872][ T8162] Kernel Offset: disabled