last executing test programs: 17.368861848s ago: executing program 3 (id=895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8c01, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000040)="963905000000", 0x6}], 0x2, &(0x7f0000000200)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x1a, 0x0, 0x8, [0x7, 0x7, 0x7ff, 0x7, 0x5, 0x695, 0x94]}]}}}], 0x30}, 0x40010) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r7 = semget$private(0x0, 0x7, 0x180) semtimedop(r7, 0x0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) read$FUSE(r6, &(0x7f0000002200)={0x2020}, 0x2020) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x14008885, 0x0, 0x0) syz_emit_ethernet(0x77, &(0x7f0000000300)={@random="3c657bb5884b", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x69, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}, 0x2, {0xfffffffd, 0x1}}}, {0x8, 0x6558, 0x4000000, "c0bc00abebb8b6b624bfbf6219029f0e18"}}}}}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x202b) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b000000ffffefffdefe00", 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 15.818437518s ago: executing program 3 (id=897): r0 = syz_open_dev$video(&(0x7f0000001180), 0x0, 0x20040) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000011c0)={0x7, 0xc, 0x6, "e87291889ca4fa5b0b64e5026d2b93665e18d247f83344f1d763769be7dc8cfa", 0x39555659}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, &(0x7f0000000000)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$inet6(r4, 0x0, 0x0, 0x20000045, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) poll(&(0x7f0000000080)=[{r6, 0x1410}], 0x1, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 13.946430901s ago: executing program 3 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) fanotify_mark(0xffffffffffffffff, 0x10f, 0x20000011, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$packet(0x11, 0x3, 0x300) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 12.930430833s ago: executing program 1 (id=906): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000040), 0x49, 0xc10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0xfe77) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="752e842d2c0000006111a4000000000018000000000000000000000049960a000000009500000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 11.618192213s ago: executing program 1 (id=907): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0xa, 0x4f, {"3ef30f090f20c035010000000f22c0c441c9e513c462f94196d5bc589d66b83e018ed8b9800000c00f3235000100000f30f3dcfc0f015d010fc719440f30"}}], 0x4f}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100005b51a17f5db8f30000"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe79b", 0x0, 0x19}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = inotify_init() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10) r5 = io_uring_setup(0x4281, &(0x7f0000002480)={0x0, 0x11b7, 0x10, 0x3, 0x2b7}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, 0xfffffffffffffffe, 0x1) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005440)=@newtfilter={0x1758, 0x2c, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xb}, {0x7, 0x10}, {0x4, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x38c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x4}}, @TCA_BASIC_EMATCHES={0x370, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc4, 0x1, 0x0, 0x0, {{}, "462021ba8a210d67bae943a9098b71044ea01c60fdcfc899e4df5623d74dbf05353215e04464e9f00683ea7f4bdc45dee52f8aba619d171cb05561cb41a39c481f413c518f1e9589d657c5aad709ab69ec9fdbf85e29db6b4a13c53e845cb5cfe9a05a5216abb634762fec43fd5ab890b5cd660233b6e79fae562c5647bf624c5d3bb1bad083f44576facb845eb94746efe9da370be7c3fc5696f0dfa352811bd29e9f216528d338e3c9690d65d6a307dc320725e8c7"}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="36e854cd7d5fd370", @TCF_META_TYPE_VAR="7be5c6e5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x8, 0x2}, {0x6, 0x0, 0x2}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xc, 0x8, 0x4}, {0x1, 0x3, 0xc}}}]}, @TCA_EMATCH_TREE_LIST={0x24c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x11c, 0x3, 0x0, 0x0, {{0x3, 0x4, 0xfff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x10, 0x2}, {0x100, 0x63, 0x1}}}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="41477eca5d"]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="1f80ac68eb0f", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="a1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0x0, 0x1}, {0xc, 0xfc}}}, @TCA_EM_META_LVALUE={0x36, 0x2, [@TCF_META_TYPE_VAR="1fddd0cea83a158c47aa", @TCF_META_TYPE_VAR="3dd857f2cb3a", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="ff8844083dca1f23", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="afa406e767ab8aa60819"]}, @TCA_EM_META_RVALUE={0x36, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xfffffff7, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="c17d7b32b9416047aee5", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="e15ec17d55914cba6938", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="7093"]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="139bc87784b3cb", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="67490fb717375ed20c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x83, 0x1}, {0x5, 0x6, 0x1}}}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="afcd9846a1bfa18ef0", @TCF_META_TYPE_VAR='L', @TCF_META_TYPE_VAR="693cc3a75d8e06", @TCF_META_TYPE_VAR="8acd0be9de", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_META={0xbc, 0x1, 0x0, 0x0, {{0xfff5, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="a897ce", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="ebefcb353f12", @TCF_META_TYPE_VAR="1c9ee6973cd704"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x8}, {0x5, 0x40, 0x1}}}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="face18", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="12f189"]}, @TCA_EM_META_RVALUE={0x35, 0x3, [@TCF_META_TYPE_VAR="02b2d0db0b3e", @TCF_META_TYPE_VAR="46ef651ab1832aec3b55", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="2161820b4576cd0baaea", @TCF_META_TYPE_VAR="233dea556dad", @TCF_META_TYPE_VAR="bc43d34db8", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="b3f786b07f07"]}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6}, {0x0, 0x4, 0x6}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x595, 0x1, 0x2}, {0xa, 0xe84d, 0xa, 0x2, 0xc}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x67f, 0x2, 0x8}, {0x87, 0x4, 0x2, "6eff42ba"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x2}, {0x0, 0x139, 0x1, 0x1, 0x7, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x55, 0x3, 0x5}, {0x88e, 0x3, 0x37ed, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_RATE64={0xc}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x6d}}, @filter_kind_options=@f_bpf={{0x8}, {0x136c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffeffffffff}]}, @TCA_BPF_POLICE={0xd0c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x2, 0x3, 0x4, {0x7, 0x2, 0x64fd, 0xa, 0x74, 0x10000}, {0x8, 0x2, 0x8, 0x7, 0x3d7, 0xa}, 0x2, 0x6, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x6, 0x4, 0x1, 0xdd, 0x9, 0x3, 0x2, 0x6, 0x6, 0x13a17781, 0xfe000000, 0x8, 0xb2, 0xfffffffb, 0xfffffffa, 0x3, 0x2, 0x5, 0x4, 0xff, 0x6, 0x70, 0x7, 0x0, 0xf64, 0x2, 0x4, 0x2, 0x4, 0xfffffffa, 0x0, 0x6, 0x5, 0x8, 0x5, 0x5, 0x401, 0x1, 0x7, 0x80000000, 0xffffffff, 0xa, 0x5, 0xff, 0xff, 0x849, 0xc2, 0xb8b, 0x3, 0x7, 0x7, 0x2, 0x1, 0xb, 0x4, 0x87d, 0x5, 0x3, 0x9, 0x3, 0x3, 0x10000, 0x7, 0x8000, 0x6, 0xffff8000, 0xa1, 0x9, 0x8000, 0x0, 0x64a3, 0x6, 0x3, 0x10000, 0x209, 0x5, 0x2, 0x8, 0x80000001, 0x8000, 0x3, 0x8, 0x401, 0x5, 0x253b603f, 0x0, 0x5, 0x2, 0x8000, 0x9, 0x2, 0x8, 0x9, 0x3745c488, 0x3c000, 0x5, 0x6, 0x200, 0x0, 0x6, 0xffffff01, 0x8, 0x0, 0x9, 0xfffffffa, 0x7e, 0x0, 0x2, 0x1, 0xe, 0x7, 0xfffffff3, 0x6, 0x9, 0x80000000, 0x0, 0x80000000, 0x401, 0x0, 0x5, 0x2, 0x80, 0x7, 0x8, 0x5, 0x7fffffff, 0x1, 0x2, 0x0, 0x1ff, 0x589, 0x1, 0x3, 0x7, 0x6, 0x1a, 0x9, 0x7, 0x0, 0x9, 0x3ff, 0x90, 0x5, 0x854a, 0x9, 0x2bd, 0xc0a7, 0x4, 0x8001, 0x9, 0x2, 0xc44e, 0x10, 0x6, 0x9, 0x6, 0xfffffe00, 0x8, 0x2, 0x101, 0x76b, 0x1, 0x8, 0x655bc2f, 0x3, 0x8, 0xd, 0x1, 0x7, 0x0, 0x8, 0x1, 0x200, 0x6, 0xfffffffa, 0xfffffffa, 0x7, 0x4, 0x9, 0x0, 0x7, 0xa, 0x3, 0x4, 0x8, 0x101, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7477c13, 0x10000, 0xf, 0x590, 0x80000000, 0xffffff13, 0x18000000, 0x5, 0x3, 0x6cd5, 0x4e, 0x9, 0x0, 0xae, 0x57b780e8, 0xaa8, 0x0, 0x81, 0x80000000, 0xfffffffa, 0xfff, 0x8001, 0x9, 0x1ff, 0xffffffff, 0x7fff, 0x8, 0x3ff, 0x7641, 0x2, 0x2, 0x10, 0x5, 0x2, 0x9, 0x4, 0x9854, 0xd, 0x6, 0x7, 0xe, 0x9, 0x9, 0x5, 0xf68, 0xffffff5a, 0x9, 0x100, 0x2, 0xe, 0x8, 0x2b, 0x0, 0x1, 0x4, 0x1ff, 0x5, 0x3, 0x90, 0xd, 0x0, 0x72b5, 0x3, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x3, 0x40, 0x2, 0x44c5, 0xe, 0x1, 0x0, 0x6, 0xf, 0x3, 0xc, 0x9, 0x7ff, 0x1, 0xa, 0x8, 0x8, 0xff, 0x7f, 0x200, 0x674, 0x1, 0x6, 0x2, 0x3, 0x25, 0x8, 0x654fc814, 0x9, 0x7, 0x0, 0x5, 0xffffffff, 0x5, 0x0, 0xa, 0x0, 0x8, 0x18000000, 0x9, 0xe, 0x5, 0x7fff, 0x7, 0x7, 0xdde6, 0x528f, 0x1000, 0x9, 0x8, 0x7, 0x1, 0x12, 0x3, 0x10, 0x8, 0x3, 0x6, 0x2, 0x0, 0x1, 0x2, 0x6, 0x80, 0x7fff, 0x2, 0x3, 0x5, 0x1, 0x5, 0x3, 0x1, 0xdc, 0x5, 0x7b5, 0x2, 0x1000, 0x0, 0x1, 0x82e, 0x3ff, 0x3, 0x0, 0xff, 0x9, 0x28, 0x0, 0x81, 0x9, 0x1, 0x7, 0x0, 0x5, 0x0, 0xc58, 0xd, 0x0, 0x8cd, 0x9, 0x4, 0x8, 0x2, 0x3, 0x80, 0x3, 0x80000000, 0x1, 0x0, 0x3, 0x3, 0x10, 0x5, 0x8, 0x22, 0x401, 0x4, 0x3, 0x7, 0x0, 0x9, 0x81, 0x0, 0xda, 0x8, 0x6, 0x3, 0x6a, 0x10, 0xfffffff8, 0xfff, 0x3, 0x7fffffff, 0xfffffff4, 0x0, 0x7, 0x2, 0x98b, 0x3b7, 0xfffffffc, 0x2, 0x2, 0x7, 0x2a36, 0x0, 0x1, 0x8ea2, 0x535c, 0x9, 0xfffffff9, 0x652e, 0x0, 0x8, 0x524, 0xffffff01, 0x3, 0xe, 0x8, 0x4, 0x8, 0xf, 0xfffffffd, 0x8, 0x8, 0x7, 0x80000000, 0x0, 0x6, 0x9, 0x2, 0xb, 0x6, 0xe87, 0x101, 0xa, 0x7, 0x0, 0xc, 0x6, 0x7, 0x5999c4af, 0x1, 0x3, 0x1, 0x2, 0x5, 0x81, 0x0, 0x0, 0xea, 0x100, 0x4, 0x6, 0x3, 0x9200, 0x1, 0x800, 0x10001, 0x6, 0x100, 0x401, 0x400, 0x8, 0x70b3, 0x100, 0x0, 0xe, 0x4, 0x1, 0xf, 0x2, 0x1, 0x1, 0xffff249a, 0x9, 0x1, 0x9, 0x1000, 0x100, 0xbad5, 0x3, 0x2, 0xe09, 0x5, 0x7, 0x0, 0x0, 0x7, 0x2, 0x8, 0x657, 0x9, 0xff, 0xe, 0x8, 0x0, 0x5, 0x65c1, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x7, 0x2b5, 0xb, 0x101, 0x5, 0x5, 0xfc53, 0x1, 0x8000, 0x9a8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x20000000, 0x4b2, 0x52a, 0x1, {0x4, 0x0, 0x0, 0x3, 0x6, 0x518b}, {0x0, 0x2, 0x0, 0x1, 0xffff, 0x1}, 0x0, 0x2, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x1, 0x4, 0x6, 0x5, {0x6, 0x0, 0x56, 0x3, 0x6, 0xc}, {0x7f, 0x2, 0x2, 0x8, 0x0, 0x1}, 0x7fffffff, 0xffff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x2, 0x0, 0x77100, {0x1, 0x1, 0x0, 0x3, 0x0, 0x3}, {0x7, 0x1, 0xf08c, 0xb, 0x8000, 0x7d3}, 0x81, 0x5, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xb, 0x8, 0x72, 0xd, 0x0, 0x1, 0x872, 0x3, 0x7f, 0x8, 0x3, 0x6, 0x6, 0x0, 0xf1ee, 0x3, 0x0, 0xffff5095, 0x5, 0x9, 0xf, 0x6, 0x9, 0x8, 0x7, 0x8, 0x9, 0x1, 0x2, 0x2d9, 0x0, 0x401, 0x3, 0x9, 0x3, 0x1000, 0x4, 0xf, 0x7, 0x5, 0x2, 0x4fe9, 0x80, 0x549, 0x2, 0x100, 0x63cc, 0x8, 0x7, 0x6a, 0x4ecf, 0xc, 0x0, 0x9, 0xa, 0x2, 0x5, 0xd, 0x7, 0x8, 0x81, 0x3, 0x7fff, 0xbed, 0x81, 0x3, 0x3, 0x9, 0x7, 0x7fffffff, 0x2, 0x3ff, 0x8, 0x7, 0x0, 0x7, 0xffffffff, 0x2, 0xb, 0x2, 0x6, 0x88b, 0x1, 0x4, 0x4, 0xfffff00c, 0xf, 0x6, 0x3, 0x80, 0x1, 0x6, 0x9, 0x2, 0xd45, 0x2, 0x3, 0x1, 0x4, 0x7fffffff, 0x10, 0x3, 0x1, 0x6, 0x4, 0x7, 0x5, 0x800, 0x6, 0xffffffff, 0x9, 0xe, 0x3, 0xb, 0x7, 0x57, 0x5, 0x7, 0x69c50a7e, 0x8, 0x0, 0xffffffff, 0x401, 0x9, 0x5, 0x8d, 0x1, 0x7, 0x7ff, 0x5, 0xff, 0x1, 0x6, 0x800, 0x101, 0x7, 0x4, 0x0, 0x2, 0x80, 0x7, 0x2, 0x7f, 0x6, 0x7, 0xa, 0xc2fe, 0x9, 0x897, 0x1, 0x6, 0x3, 0x2, 0x6, 0x8, 0xfffffffe, 0x548f, 0x8b, 0x1, 0x8, 0xd603, 0xfffffff7, 0x3, 0x2, 0x40, 0x81, 0x800, 0x7dfc53b7, 0x10000, 0x83d3, 0x2, 0x9, 0x80000000, 0x5, 0x7, 0x10000, 0x2, 0x65, 0x8, 0x4b15, 0x8a8e, 0x0, 0x2, 0xb2, 0x6, 0x2, 0x5a, 0x0, 0x2d, 0x6e36, 0x5, 0x3, 0x9, 0x8, 0x57, 0x5, 0x7, 0x3, 0x9, 0x0, 0x9, 0x100, 0x5, 0x7, 0x28, 0x9a, 0x3, 0x8, 0x8, 0x80, 0x100, 0x70cd, 0x401, 0x101, 0x2, 0x87, 0x80, 0xa, 0x2, 0x0, 0x2e1c, 0xb3, 0x7, 0x6, 0x9, 0x9, 0x9, 0x8, 0x9, 0xaf, 0x38e, 0x3, 0xffff, 0x8, 0xfff, 0xffffffc6, 0x1, 0x10bc, 0x6, 0xffffffff, 0x400, 0x0, 0x80000001, 0x3, 0xe5, 0xa, 0x100, 0x0, 0x5, 0x9, 0x8, 0xf16, 0x3, 0x4, 0x7]}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xfff3}}, @TCA_BPF_POLICE={0x1c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffa}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x5d8, 0x1, [@m_xt={0xc0, 0xc, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xff}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8}]}, {0xa, 0x6, "6e030a298c04"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xf4, 0x8, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x101}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10001, 0x5, 0x4, 0x2}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8001, 0x6, 0x7, 0x400, 0x3}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x52, 0x6, "a77592800f4415fec4fce87854f8e9200e981422d125b81f9d11d2c096e2f88819d95ce09c70ac64fbd96c58ab4984c3bb19aa77183ccc469cf65f931ae8fcb6e442d721347014d2bbeb4b4cf9f9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0xd0, 0x1e, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r7}]}, {0x9e, 0x6, "c4cd38342e2c900a7d39a5ae596f410692b91f3ba575cb99efa45da5dd487175a206af9b2f9624376856473e1caa8cb5ca8db517a5624c2bf81e63aaeb64d16279a24ffd92dbd243fa28a8ade3a8943466a0d08067a406dbec91f8fc4182797e99c3b226772597fe14768a6cc06b64c66bb78dcf090020f1ffaf8ae14e4b35a4474ac9cbe2d95031bf86eadf292fd3e47b779c116f0d43bf021e"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xc8, 0xb, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x8655}]}, {0x93, 0x6, "38d944f0dbf4f9f312ff36ffb25573190a523e9e58367ba4045ca6e083ad4d3e5668be3af57d97370d52a84e4ee5b16e0b8aedc16a6e4af933ae956bec4711edb354b71225ddf885ae86b38dda04b193e5e005d7e9c2134a9c923a737fd34252aedacbae01e199e931bb8ef88a692ae01bfe77ff0e40f3e3787834731d81067335b718d023ad79ca984e554e1b9b1d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x138, 0x16, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0xf4, 0x6, "8add4a2136f1862814b5e16cb9bfbf48cbf7354f5198ea986d72d5293dad8a58b49cb9ae4f5618f9dacf297ddd995a9dd0ee67c101ac189124d1f696944dfc32e4ae1f3bc9e3e0a0dec9fe8bcd3210fa6f123553314addd303b23c6837e168534e610ff6da821db51ff9e165e51dfbf696bdba44cbd141423cc9a0e19186519ef5ce66e47ed893cb01060ae0959ff290c80a9c668209efb82ce28302436d167bdfccaf343d6d84edf5b1d92277f1477ac870370cc823456388f2b3f3f9e38ec7914cbcaf706fb59693c6c5a6500d62d5b5468023ffa6f63c4b5d862ed618d20d5aef3d298ccf1e9934eb52c891161b1d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x150, 0x11, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}]}, {0xf3, 0x6, "97d85a0f82e575529c62960d4f85c1673835e0037418963a4b386d897c0bfdb78c7ea4e821718ced6c4f100f61046649df909e7456d53b8699ae3dbfe340793c7bf655aa91a3dc94279d6023ddf071e18ab82ed4f55b4e03ff1afdba1742617b3168b4b278a068a1361e7f37a03283619d213364a59b31db9515044ed1cb1615cdb8a48dc86fcc68367ec2ba0c48d1064698e9a2bc3da0644861bce8d8b1ca44e7f058b733d1855afd7e1d704796cea808d3ce054cd2357eb6feadbd60d4b8597c508fbdb97a7f0216c08bf5ea61a55f5b344466a99656669bafc33c8a509cabaef4c366e44251bc0fb44c8765aac5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x6, 0x7, 0x2, 0x80000000}, {0xb51, 0x3, 0x1, 0x81}, {0x5, 0x0, 0xb2, 0x7}, {0x7, 0x9, 0x2, 0x6}]}}]}}, @TCA_RATE={0x6, 0x5, {0x6a}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}]}, 0x1758}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) sendmmsg$unix(r9, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) r10 = fsmount(r6, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r3, 0x4000, r10}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 11.260540163s ago: executing program 3 (id=909): getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f0000000140)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa4, &(0x7f0000000100)={0x0, 0x200089bb, 0x400, 0x5, 0x1c3}, &(0x7f0000000240)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r3, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x1e}) syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, 0x0, 0x0) io_uring_enter(r4, 0x32dc, 0x4, 0x40, 0x0, 0x0) 10.764112052s ago: executing program 1 (id=911): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8c01, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000040)="963905000000", 0x6}], 0x2, &(0x7f0000000200)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x1a, 0x0, 0x8, [0x7, 0x7, 0x7ff, 0x7, 0x5, 0x695, 0x94]}]}}}], 0x30}, 0x40010) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r6 = semget$private(0x0, 0x7, 0x180) semtimedop(r6, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) read$FUSE(r5, &(0x7f0000002200)={0x2020}, 0x2020) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x14008885, 0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b000000ffffefffdefe00", 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 9.478177234s ago: executing program 4 (id=913): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="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", 0x17b}, {&(0x7f0000000a80)="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", 0x110}, {&(0x7f00000012c0)="8e39308f7428bb361aa0e207e2191e9248da9eac174411869ef60059a981c6a11223cca963f4b365a2419adcb920c2a14965defd6186c5bfc157b6c1c219985ea4badc7bf93f3c939e452c503f86abee100fd05e2367155747876bd524b58bf60f115d5ac1d8bcd3dc85840f8ee47f46c74a4d11f53e68baa8de704b0d9b419407f8ddf3ec6b", 0x86}], 0x3, 0x0, 0x0, 0x44000}], 0x1, 0x0) recvfrom(r1, &(0x7f00000000c0)=""/74, 0x4a, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) 9.303017903s ago: executing program 1 (id=915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1000100, 0x9, 0x6361, 0x805, 0x9, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.302545394s ago: executing program 4 (id=916): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 9.175337719s ago: executing program 2 (id=917): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) socket$inet6(0xa, 0x80002, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) 7.516124896s ago: executing program 2 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrlimit(0xe, &(0x7f00000000c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r3 = io_uring_setup(0x785a, &(0x7f0000000580)={0x0, 0xddf4, 0x400, 0xfffffdfe, 0x183}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$netlink(0x10, 0x3, 0x0) close_range(r3, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000880)={r6, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x66}}, 0x1}}}, &(0x7f0000000300)=0x90) 6.060113917s ago: executing program 4 (id=921): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000180)='gid=1\x00\x1c\x00\x00\x00m\xbe\xd7\xa9:\n\xf9\b\rk[\xa1\xcc\xd6\xa28|5}(\x06l\xa8\x86di\xf3vJ,S.\xc3\x9b\xaaNj0\xef\x810EZ\xb6\x16\x88AZg`\xee\xe2\x93r\xd7\xa3v\x1f\xdb\x04\xd1\xe0\xabR \xeb\x80\r\x1b\x17\x0e\r\x93K\xe6\xc3BFz\xba\x7f\xc0\x1e@\xe4\xd0\xea\x16\xaa-aR)\\\x16\x8b^>\xbf\x06p\xc8\x9b\xf0N:\x05F\xe7fJ\x9a8\xa4\xb0FA\x9a\xe9E\xf9GJaGTf\x0f\xec\xff\x00\xb4\x97\x86\xd1&\a\xb554\x86\xd7\xbdeY\xa6\x91\r@0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x7, 0x70bd25, 0xc3ff, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)) (async) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000180)='gid=1\x00\x1c\x00\x00\x00m\xbe\xd7\xa9:\n\xf9\b\rk[\xa1\xcc\xd6\xa28|5}(\x06l\xa8\x86di\xf3vJ,S.\xc3\x9b\xaaNj0\xef\x810EZ\xb6\x16\x88AZg`\xee\xe2\x93r\xd7\xa3v\x1f\xdb\x04\xd1\xe0\xabR \xeb\x80\r\x1b\x17\x0e\r\x93K\xe6\xc3BFz\xba\x7f\xc0\x1e@\xe4\xd0\xea\x16\xaa-aR)\\\x16\x8b^>\xbf\x06p\xc8\x9b\xf0N:\x05F\xe7fJ\x9a8\xa4\xb0FA\x9a\xe9E\xf9GJaGTf\x0f\xec\xff\x00\xb4\x97\x86\xd1&\a\xb554\x86\xd7\xbdeY\xa6\x91\r@0x0) ptrace$peek(0xffffffffffffffff, r1, &(0x7f0000000100)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) close(r5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) 4.770020423s ago: executing program 3 (id=923): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT=r0], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) read$char_usb(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.664028629s ago: executing program 2 (id=924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x854}, 0x4040080) 4.45610801s ago: executing program 4 (id=926): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8c01, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000040)="963905000000", 0x6}], 0x2, &(0x7f0000000200)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x1a, 0x0, 0x8, [0x7, 0x7, 0x7ff, 0x7, 0x5, 0x695, 0x94]}]}}}], 0x30}, 0x40010) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r6 = semget$private(0x0, 0x7, 0x180) semtimedop(r6, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) read$FUSE(r5, &(0x7f0000002200)={0x2020}, 0x2020) syz_emit_ethernet(0x77, &(0x7f0000000300)={@random="3c657bb5884b", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x69, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}, 0x2, {0xfffffffd, 0x1}}}, {0x8, 0x6558, 0x4000000, "c0bc00abebb8b6b624bfbf6219029f0e18"}}}}}}, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b000000ffffefffdefe00", 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 4.455657442s ago: executing program 0 (id=927): ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000000)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000040)={0x5, 0x6, 0x1, 0x8, 0x3, [0x6, 0x7, 0x7, 0x5]}) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0xfffffffffffffffe}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x222000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x14) 4.420261006s ago: executing program 2 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) fanotify_mark(0xffffffffffffffff, 0x10f, 0x20000011, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$packet(0x11, 0x3, 0x300) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 4.364816418s ago: executing program 1 (id=929): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x8, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001400)=0xc) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r2, 0x0, 0x0, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup2(r4, r7) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000140)={r6}, 0x8) 2.920086115s ago: executing program 0 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) socket$inet6(0xa, 0x80002, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) 2.749237082s ago: executing program 2 (id=931): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=ANY=[], 0x28}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_emit_ethernet(0x2be, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e80)=@newtaction={0x74, 0x30, 0x871a15abc695fa3d, 0x4, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x94, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="98f9d143e30eabaffb24e0e3803c6ccde65251eeda8cce0a99d6b091fca1c685479d141b6d9bf3c7fe8050b8ff1858f92d661c47a6eee30bba405e8e8e35f422b00ec7fec2da60f002505a369ef07bcb178900100d7249d782a6bbb530980cbb30b5841ca0e93449d4a1da8ab164605f89e45d0c04f3b09dfb1db464e73da45f784837d3c8ef7e1dfafcac7f8f29935a21002d87036c", @ANYRESDEC, @ANYRES16], 0x0) 2.748525837s ago: executing program 4 (id=932): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrlimit(0xe, &(0x7f00000000c0)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r3 = io_uring_setup(0x785a, &(0x7f0000000580)={0x0, 0xddf4, 0x400, 0xfffffdfe, 0x183}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$netlink(0x10, 0x3, 0x0) close_range(r3, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000880)={r6, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x66}}, 0x1}}}, &(0x7f0000000300)=0x90) 2.363988823s ago: executing program 0 (id=933): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0xffff1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) getrlimit(0x1, &(0x7f0000000080)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001900)=0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000180), 0x7, 0x282601) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000200)) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r5 = syz_usbip_server_init(0x3) write$usbip_server(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x30) r6 = openat$snapshot(0xffffff9c, &(0x7f0000000480), 0x800, 0x0) write$sequencer(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="0c01e5d0d867737805e20c01e397512a3db7328b19920b519301a000620507000004ff07"], 0x28) ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, &(0x7f00000004c0)) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="020900090200000000000000fedbdf255954cbcfee992aff881b9e63f7ff6f0277d75f0a40657ea028cf317e23311ac1c9f2a110d9b506132ecf85ee5b395668abd3f187a71168b4256744becb9e1d116149ab65093e5c6ae493105a62ddcd39fa0e61460eb9fa9dbded94b0a632530f159145"], 0x10}}, 0x0) 1.97599286s ago: executing program 0 (id=934): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="437f49649862e7d1b6a20f36ae359361e9d7a568cd16f02ed329704291940e9ce90b90575e72607ddde86a6df8d78be4aeda0c326e326cce9c069e8668223162f466400730b964fb517bafa46b26b63ce930509f2e0afef786e0", 0x5a}, {&(0x7f00000006c0)="330bc6fe0d99e2eef52d677bc589efb174eb9b8fe283d27d18ef588dfd4857086e024361deb6970c068af2c9273ab2fc3fc724e7d35273d6fde756eb605e16a4abaf96aac08baa1bb7ce1febeb1d807332fc6d7b138797316a2f5e83641ff66b5375a2ddb414f25804b565370120ded71742c77e5f5134e61d11ff07", 0x7c}, {&(0x7f0000001080)="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", 0xa47}], 0x3}}], 0x1, 0x4048884) 1.336791881s ago: executing program 4 (id=935): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x7}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0xb6c2, 0x1000}], 0x1) semop(r0, &(0x7f0000000100)=[{}, {0x0, 0x5b52}, {0x1, 0x6f9, 0x1000}, {0x4, 0x8, 0x800}], 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000100)=0xfff, 0x4) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d5) semctl$IPC_RMID(r0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x58) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b37adb6dc4e24bf020fd0b050065d2010203010902240001040000000904760502f638780009050402400008040e090503020800030302"], 0x0) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000140)=""/30) 1.164300963s ago: executing program 1 (id=936): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64d0, &(0x7f0000000280)={0x3, 0x0, 0x6, 0x3}) r1 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x5, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4000000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendmmsg(r1, &(0x7f0000007900)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x1, {0xa, 0x4e23, 0x0, @mcast2, 0x8000}}}, 0x80, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000003c80)}}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f00000052c0)}], 0x1, &(0x7f0000005400)=[{0x60, 0x108, 0x6, "942adfaff109ce1b62efb5d19e8e586bd9e3e9730edd65235718ea832819ce87d6e4678fce31d74c70bef78522c4cc69187fa3018796c1c7198891017873a26f3a10d6167d616372586bb8c2ed"}, {0x20, 0x115, 0xa, "8adc201b78c3d739fcc76a74"}, {0x310, 0x104, 0x6, "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"}, {0x70, 0xff, 0x4, "5e2b2953b06b84e7022ec41a9c678311464f13166d4e32a419e2ef8563c7c019bbb376575efe4978f699edc334e801f0e317b1a4d208564817172e63a1608be7c1154b00b306347da766500530977654d17abcafdfd128d80ca1"}, {0x48, 0xff, 0x4, "79e76523392399021cdc9612d86b70e325bca636accbbe6655a9ee237bb013b3bea17ebbf7b952c5aa2802f4c4af2c85e6445dfc9e3691"}, {0xd8, 0x103, 0xb1eb, "2f2020d0021961c048786c4377c543ffd31ba7ff5eb0788e0401b340088c727ac6c47f7299cad99a3ac22734ef06d532015151272d31308ddcbc3811868a1cf94471a8157a19afab67475de4dafdfac91113b2bfa9032a027cd7d490bb57055b79365c9d93414d8663e9e12ab14223a3acbc682c9fe865969e2b419824e822b3534f052888c33932f519134bac7fc2a1c31819d7fee6d71737fb4749507db24711fd86ecb42c397dafdafd4d4773d0502915ce1bda012bd91078579a43733b8108b9ebfc"}, {0xa0, 0x104, 0x4c, "ac7a98e7a466e7fdc4560307e3eb3996c28e562181e589b598e5408ace927ee12af43989c8b6838aa93f7f53f4c77fa071cf9d14f5775ea4ba7a31ff3bc1471c692e83a3b83831f67edff515116a50b3d529bc205c58a6bb62ad9a429da6a0cd013babb5af6a4f9f925235ef78722381731323c2193e4652ab9d4cc70b0c08115bf374c4bf862c5e4c"}], 0x5c0}}], 0x3, 0x10) 283.613176ms ago: executing program 0 (id=937): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="35010000000000002c00128009000100626f6e64000000f0ed8a148008001c00ed00000008000500080000000800030005000000"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = creat(&(0x7f0000000540)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000001fc0)=""/184, 0x20002078) 101.975487ms ago: executing program 0 (id=938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x854}, 0x4040080) 0s ago: executing program 3 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x8000000000000, 0x0, 0x4004845}, 0x44) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x28, 0x5, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r6 = socket$inet(0xa, 0x801, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) kernel console output (not intermixed with test programs): 3.518700][ T7261] ? __pfx___might_resched+0x10/0x10 [ 223.518723][ T7261] should_fail_ex+0x46c/0x600 [ 223.518751][ T7261] should_failslab+0xa8/0x100 [ 223.518768][ T7261] __kmalloc_node_noprof+0xd4/0x7f0 [ 223.518781][ T7261] ? alloc_slab_obj_exts+0x3e/0x100 [ 223.518795][ T7261] alloc_slab_obj_exts+0x3e/0x100 [ 223.518812][ T7261] __memcg_slab_post_alloc_hook+0x33b/0x810 [ 223.518850][ T7261] ? ep_insert+0x26b/0x1750 [ 223.518871][ T7261] kmem_cache_alloc_noprof+0x41f/0x6b0 [ 223.518891][ T7261] ? __percpu_counter_compare+0xae/0x2e0 [ 223.518917][ T7261] ep_insert+0x26b/0x1750 [ 223.518938][ T7261] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 223.518951][ T7261] ? __pfx_ep_insert+0x10/0x10 [ 223.518966][ T7261] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 223.518987][ T7261] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 223.519018][ T7261] ? mutex_lock_nested+0x154/0x1d0 [ 223.519034][ T7261] ? do_epoll_ctl+0x3d2/0xe90 [ 223.519059][ T7261] do_epoll_ctl+0x7fd/0xe90 [ 223.519089][ T7261] __x64_sys_epoll_ctl+0x163/0x1a0 [ 223.519104][ T7261] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 223.519119][ T7261] ? do_syscall_64+0xbe/0xfa0 [ 223.519132][ T7261] do_syscall_64+0xfa/0xfa0 [ 223.519149][ T7261] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.519169][ T7261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.519186][ T7261] ? clear_bhb_loop+0x60/0xb0 [ 223.519207][ T7261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.519224][ T7261] RIP: 0033:0x7f60f9e4efc9 [ 223.519240][ T7261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.519255][ T7261] RSP: 002b:00007f60f80ae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 223.519267][ T7261] RAX: ffffffffffffffda RBX: 00007f60fa0a5fa0 RCX: 00007f60f9e4efc9 [ 223.519275][ T7261] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 223.519280][ T7261] RBP: 00007f60f80ae090 R08: 0000000000000000 R09: 0000000000000000 [ 223.519286][ T7261] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 223.519292][ T7261] R13: 00007f60fa0a6038 R14: 00007f60fa0a5fa0 R15: 00007ffe7c841b98 [ 223.519314][ T7261] [ 225.072426][ T10] usb 3-1: USB disconnect, device number 5 [ 225.567399][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.804023][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.832158][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.894732][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.151929][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.637937][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.864492][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.978324][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.328697][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.882442][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.545454][ T7315] FAULT_INJECTION: forcing a failure. [ 229.545454][ T7315] name failslab, interval 1, probability 0, space 0, times 0 [ 229.545486][ T7315] CPU: 1 UID: 0 PID: 7315 Comm: syz.1.437 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.545506][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 229.545515][ T7315] Call Trace: [ 229.545522][ T7315] [ 229.545530][ T7315] dump_stack_lvl+0x189/0x250 [ 229.545559][ T7315] ? __pfx____ratelimit+0x10/0x10 [ 229.545580][ T7315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.545603][ T7315] ? __pfx__printk+0x10/0x10 [ 229.545639][ T7315] should_fail_ex+0x46c/0x600 [ 229.545664][ T7315] ? dst_alloc+0x105/0x170 [ 229.545683][ T7315] should_failslab+0xa8/0x100 [ 229.545705][ T7315] ? dst_alloc+0x105/0x170 [ 229.545721][ T7315] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 229.545751][ T7315] dst_alloc+0x105/0x170 [ 229.545775][ T7315] ip_route_input_rcu+0x1ec2/0x30d0 [ 229.545809][ T7315] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 229.545866][ T7315] ? ip_route_input_noref+0x98/0x250 [ 229.545887][ T7315] ip_route_input_noref+0x167/0x250 [ 229.545911][ T7315] ? __pfx_ip_route_input_noref+0x10/0x10 [ 229.545938][ T7315] ? __lock_acquire+0xab9/0xd20 [ 229.545968][ T7315] ip_rcv_finish_core+0x5af/0x1c00 [ 229.545998][ T7315] ip_rcv_finish+0x14c/0x2f0 [ 229.546018][ T7315] NF_HOOK+0x30c/0x3a0 [ 229.546044][ T7315] ? __pfx_ip_rcv_finish+0x10/0x10 [ 229.546058][ T7315] ? NF_HOOK+0x9a/0x3a0 [ 229.546080][ T7315] ? __pfx_NF_HOOK+0x10/0x10 [ 229.546098][ T7315] ? ip_rcv_core+0x7f7/0xd00 [ 229.546123][ T7315] ? __pfx_ip_rcv_finish+0x10/0x10 [ 229.546149][ T7315] ? __pfx_ip_rcv+0x10/0x10 [ 229.546170][ T7315] __netif_receive_skb+0x143/0x380 [ 229.546191][ T7315] ? insn_get_modrm_rm_off+0x178/0x1a0 [ 229.546207][ T7315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.546228][ T7315] ? netif_receive_skb+0x115/0x790 [ 229.546250][ T7315] netif_receive_skb+0x1cb/0x790 [ 229.546275][ T7315] ? __pfx_netif_receive_skb+0x10/0x10 [ 229.546302][ T7315] ? __local_bh_enable+0x28c/0x410 [ 229.546322][ T7315] ? tun_rx_batched+0x166/0x730 [ 229.546352][ T7315] tun_rx_batched+0x1bf/0x730 [ 229.546380][ T7315] ? __pfx_tun_rx_batched+0x10/0x10 [ 229.546400][ T7315] ? __lock_acquire+0xab9/0xd20 [ 229.546434][ T7315] ? tun_get_user+0x272f/0x3ec0 [ 229.546470][ T7315] tun_get_user+0x2b7a/0x3ec0 [ 229.546500][ T7315] ? tun_get_user+0x6f6/0x3ec0 [ 229.546521][ T7315] ? tun_get_user+0x272f/0x3ec0 [ 229.546547][ T7315] ? __might_fault+0xb0/0x130 [ 229.546569][ T7315] ? __pfx_tun_get_user+0x10/0x10 [ 229.546603][ T7315] ? __lock_acquire+0xab9/0xd20 [ 229.546631][ T7315] ? ref_tracker_alloc+0x2fe/0x450 [ 229.546651][ T7315] ? __lock_acquire+0xab9/0xd20 [ 229.546674][ T7315] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 229.546703][ T7315] ? tun_get+0x1c/0x2f0 [ 229.546730][ T7315] ? tun_get+0x1c/0x2f0 [ 229.546750][ T7315] ? tun_get+0x1c/0x2f0 [ 229.546775][ T7315] tun_chr_write_iter+0x119/0x200 [ 229.546800][ T7315] vfs_write+0x5d5/0xb40 [ 229.546827][ T7315] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 229.546849][ T7315] ? __pfx_vfs_write+0x10/0x10 [ 229.546882][ T7315] ? __fget_files+0x2a/0x420 [ 229.546914][ T7315] ksys_write+0x14b/0x260 [ 229.546938][ T7315] ? __pfx_ksys_write+0x10/0x10 [ 229.546962][ T7315] ? do_syscall_64+0xbe/0xfa0 [ 229.546988][ T7315] do_syscall_64+0xfa/0xfa0 [ 229.547006][ T7315] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.547027][ T7315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.547044][ T7315] ? clear_bhb_loop+0x60/0xb0 [ 229.547066][ T7315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.547083][ T7315] RIP: 0033:0x7fe859f0da7f [ 229.547100][ T7315] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 229.547116][ T7315] RSP: 002b:00007fe858176000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 229.547135][ T7315] RAX: ffffffffffffffda RBX: 00007fe85a165fa0 RCX: 00007fe859f0da7f [ 229.547149][ T7315] RDX: 0000000000000032 RSI: 0000200000000140 RDI: 00000000000000c8 [ 229.547160][ T7315] RBP: 00007fe858176090 R08: 0000000000000000 R09: 0000000000000000 [ 229.547172][ T7315] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001 [ 229.547183][ T7315] R13: 00007fe85a166038 R14: 00007fe85a165fa0 R15: 00007ffc03cd40e8 [ 229.547218][ T7315] [ 230.422857][ T7343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.443'. [ 230.423136][ T7343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.443'. [ 230.519605][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.495863][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.848691][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.982544][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.509713][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.919481][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.650836][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.108826][ T7399] dvmrp1: entered allmulticast mode [ 241.247525][ T5871] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 241.399230][ T5871] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 241.399258][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.447650][ T5871] usb 3-1: config 0 descriptor?? [ 242.741160][ T5871] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 242.749087][ T7459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.749863][ T7459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.955005][ T5871] [drm:udl_init] *ERROR* Selecting channel failed [ 243.061074][ T5871] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 243.061173][ T5871] [drm] Initialized udl on minor 2 [ 243.082617][ T5871] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 243.102868][ T5871] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 243.125781][ T5871] usb 3-1: USB disconnect, device number 6 [ 243.130363][ T7305] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 243.130877][ T7305] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 244.363777][ T7479] fuse: Bad value for 'fd' [ 244.716033][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.745829][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.810103][ T7523] sit0: entered promiscuous mode [ 246.818845][ T7523] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 247.014842][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.370223][ T7543] FAULT_INJECTION: forcing a failure. [ 248.370223][ T7543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.370261][ T7543] CPU: 1 UID: 0 PID: 7543 Comm: syz.0.505 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 248.370309][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 248.370334][ T7543] Call Trace: [ 248.370351][ T7543] [ 248.370368][ T7543] dump_stack_lvl+0x189/0x250 [ 248.370433][ T7543] ? __pfx____ratelimit+0x10/0x10 [ 248.370469][ T7543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.370493][ T7543] ? __pfx__printk+0x10/0x10 [ 248.370513][ T7543] ? __might_fault+0xb0/0x130 [ 248.370547][ T7543] should_fail_ex+0x46c/0x600 [ 248.370576][ T7543] _copy_from_user+0x2d/0xb0 [ 248.370595][ T7543] comedi_unlocked_ioctl+0x35c/0x1020 [ 248.370615][ T7543] ? kasan_quarantine_put+0xdd/0x220 [ 248.370636][ T7543] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.370662][ T7543] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 248.370697][ T7543] ? smack_log+0xef/0x3f0 [ 248.370720][ T7543] ? __pfx_smack_log+0x10/0x10 [ 248.370740][ T7543] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.370759][ T7543] ? smk_access+0x14c/0x4e0 [ 248.370786][ T7543] ? smk_tskacc+0x2fc/0x370 [ 248.370811][ T7543] ? smack_file_ioctl+0x24d/0x340 [ 248.370837][ T7543] ? __pfx_smack_file_ioctl+0x10/0x10 [ 248.370871][ T7543] ? __fget_files+0x3a6/0x420 [ 248.370893][ T7543] ? __fget_files+0x2a/0x420 [ 248.370919][ T7543] ? bpf_lsm_file_ioctl+0x9/0x20 [ 248.370936][ T7543] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 248.370955][ T7543] __se_sys_ioctl+0xff/0x170 [ 248.370977][ T7543] do_syscall_64+0xfa/0xfa0 [ 248.370997][ T7543] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.371017][ T7543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.371034][ T7543] ? clear_bhb_loop+0x60/0xb0 [ 248.371055][ T7543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.371072][ T7543] RIP: 0033:0x7f425347efc9 [ 248.371088][ T7543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.371103][ T7543] RSP: 002b:00007f42516a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.371123][ T7543] RAX: ffffffffffffffda RBX: 00007f42536d6180 RCX: 00007f425347efc9 [ 248.371136][ T7543] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 248.371148][ T7543] RBP: 00007f42516a4090 R08: 0000000000000000 R09: 0000000000000000 [ 248.371159][ T7543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.371170][ T7543] R13: 00007f42536d6218 R14: 00007f42536d6180 R15: 00007fffded2f6b8 [ 248.371201][ T7543] [ 250.026039][ T7542] fuse: Bad value for 'fd' [ 250.934704][ T5884] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 251.154787][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 251.173056][ T5884] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 251.173080][ T5884] usb 2-1: config 0 has no interface number 0 [ 251.180391][ T5884] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 251.180418][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.180436][ T5884] usb 2-1: Product: syz [ 251.180449][ T5884] usb 2-1: Manufacturer: syz [ 251.180462][ T5884] usb 2-1: SerialNumber: syz [ 251.531454][ T5884] usb 2-1: config 0 descriptor?? [ 251.554301][ T5884] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 251.859248][ T5884] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 251.934858][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 251.953263][ T5884] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 252.200809][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 252.222207][ T5884] usb 2-1: USB disconnect, device number 11 [ 252.590177][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 253.308664][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 253.309627][ T5884] quatech2 2-1:0.51: device disconnected [ 254.561153][ T7608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.958209][ T7610] fuse: Bad value for 'fd' [ 255.006480][ T7612] FAULT_INJECTION: forcing a failure. [ 255.006480][ T7612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.006512][ T7612] CPU: 1 UID: 0 PID: 7612 Comm: syz.0.529 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 255.006532][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.006543][ T7612] Call Trace: [ 255.006550][ T7612] [ 255.006557][ T7612] dump_stack_lvl+0x189/0x250 [ 255.006586][ T7612] ? __pfx____ratelimit+0x10/0x10 [ 255.006617][ T7612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.006640][ T7612] ? __pfx__printk+0x10/0x10 [ 255.006660][ T7612] ? __might_fault+0xb0/0x130 [ 255.006694][ T7612] should_fail_ex+0x46c/0x600 [ 255.006722][ T7612] core_sys_select+0x72b/0xa20 [ 255.006756][ T7612] ? __pfx_core_sys_select+0x10/0x10 [ 255.006801][ T7612] ? __pfx_set_user_sigmask+0x10/0x10 [ 255.006833][ T7612] __se_sys_pselect6+0x27a/0x300 [ 255.006860][ T7612] ? __pfx___se_sys_pselect6+0x10/0x10 [ 255.006886][ T7612] ? __pfx_ksys_write+0x10/0x10 [ 255.006910][ T7612] ? __x64_sys_pselect6+0x21/0xf0 [ 255.006934][ T7612] do_syscall_64+0xfa/0xfa0 [ 255.006954][ T7612] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.006973][ T7612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.006990][ T7612] ? clear_bhb_loop+0x60/0xb0 [ 255.007010][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.007027][ T7612] RIP: 0033:0x7f425347efc9 [ 255.007043][ T7612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.007058][ T7612] RSP: 002b:00007f42516e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 255.007077][ T7612] RAX: ffffffffffffffda RBX: 00007f42536d5fa0 RCX: 00007f425347efc9 [ 255.007089][ T7612] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 255.007101][ T7612] RBP: 00007f42516e6090 R08: 0000000000000000 R09: 0000000000000000 [ 255.007113][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.007124][ T7612] R13: 00007f42536d6038 R14: 00007f42536d5fa0 R15: 00007fffded2f6b8 [ 255.007154][ T7612] [ 255.484725][ T7614] comedi: valid board names for 8255 driver are: [ 255.486579][ T7614] 8255 [ 255.486590][ T7614] comedi: valid board names for vmk80xx driver are: [ 255.486599][ T7614] vmk80xx [ 255.486606][ T7614] comedi: valid board names for usbduxsigma driver are: [ 255.486614][ T7614] usbduxsigma [ 255.486620][ T7614] comedi: valid board names for usbduxfast driver are: [ 255.486628][ T7614] usbduxfast [ 255.486633][ T7614] comedi: valid board names for usbdux driver are: [ 255.486640][ T7614] usbdux [ 255.486645][ T7614] comedi: valid board names for ni6501 driver are: [ 255.486653][ T7614] ni6501 [ 255.486658][ T7614] comedi: valid board names for dt9812 driver are: [ 255.486665][ T7614] dt9812 [ 255.486670][ T7614] comedi: valid board names for ni_labpc_cs driver are: [ 255.486678][ T7614] ni_labpc_cs [ 255.486682][ T7614] comedi: valid board names for ni_daq_700 driver are: [ 255.486689][ T7614] ni_daq_700 [ 255.486695][ T7614] comedi: valid board names for labpc_pci driver are: [ 255.486703][ T7614] labpc_pci [ 255.486708][ T7614] comedi: valid board names for adl_pci9118 driver are: [ 255.486716][ T7614] pci9118dg [ 255.486721][ T7614] pci9118hg [ 255.486727][ T7614] pci9118hr [ 255.486734][ T7614] comedi: valid board names for 8255_pci driver are: [ 255.486743][ T7614] 8255_pci [ 255.486749][ T7614] comedi: valid board names for s526 driver are: [ 255.486756][ T7614] s526 [ 255.486762][ T7614] comedi: valid board names for multiq3 driver are: [ 255.486770][ T7614] multiq3 [ 255.486776][ T7614] comedi: valid board names for pcmuio driver are: [ 255.486784][ T7614] pcmuio48 [ 255.486790][ T7614] pcmuio96 [ 255.486796][ T7614] comedi: valid board names for pcmmio driver are: [ 255.486804][ T7614] pcmmio [ 255.486810][ T7614] comedi: valid board names for pcmda12 driver are: [ 255.486818][ T7614] pcmda12 [ 255.486825][ T7614] comedi: valid board names for pcmad driver are: [ 255.486832][ T7614] pcmad12 [ 255.486839][ T7614] pcmad16 [ 255.486845][ T7614] comedi: valid board names for ni_labpc driver are: [ 255.486853][ T7614] lab-pc-1200 [ 255.486859][ T7614] lab-pc-1200ai [ 255.486865][ T7614] lab-pc+ [ 255.486872][ T7614] comedi: valid board names for atmio16 driver are: [ 255.486880][ T7614] atmio16 [ 255.486886][ T7614] atmio16d [ 255.486892][ T7614] comedi: valid board names for ni_at_ao driver are: [ 255.486900][ T7614] at-ao-6 [ 255.486906][ T7614] at-ao-10 [ 255.486912][ T7614] comedi: valid board names for ni_at_a2150 driver are: [ 255.486920][ T7614] ni_at_a2150 [ 255.486926][ T7614] comedi: valid board names for adq12b driver are: [ 255.486934][ T7614] adq12b [ 255.486940][ T7614] comedi: valid board names for mpc624 driver are: [ 255.486948][ T7614] mpc624 [ 255.486952][ T7614] comedi: valid board names for c6xdigio driver are: [ 255.486959][ T7614] c6xdigio [ 255.486965][ T7614] comedi: valid board names for aio_iiro_16 driver are: [ 255.486972][ T7614] aio_iiro_16 [ 255.486978][ T7614] comedi: valid board names for aio_aio12_8 driver are: [ 255.486985][ T7614] aio_aio12_8 [ 255.486990][ T7614] aio_ai12_8 [ 255.486996][ T7614] aio_ao12_4 [ 255.487001][ T7614] comedi: valid board names for fl512 driver are: [ 255.487009][ T7614] fl512 [ 255.487014][ T7614] comedi: valid board names for dmm32at driver are: [ 255.487021][ T7614] dmm32at [ 255.487027][ T7614] comedi: valid board names for dt282x driver are: [ 255.487034][ T7614] dt2821 [ 255.487040][ T7614] dt2821-f [ 255.487046][ T7614] dt2821-g [ 255.487052][ T7614] dt2823 [ 255.487057][ T7614] dt2824-pgh [ 255.487063][ T7614] dt2824-pgl [ 255.487069][ T7614] dt2825 [ 255.487075][ T7614] dt2827 [ 255.487080][ T7614] dt2828 [ 255.487086][ T7614] dt2829 [ 255.487092][ T7614] dt21-ez [ 255.487097][ T7614] dt23-ez [ 255.487103][ T7614] dt24-ez [ 255.487109][ T7614] dt24-ez-pgl [ 255.487115][ T7614] comedi: valid board names for dt2817 driver are: [ 255.487123][ T7614] dt2817 [ 255.487128][ T7614] comedi: valid board names for dt2815 driver are: [ 255.487136][ T7614] dt2815 [ 255.487142][ T7614] comedi: valid board names for dt2814 driver are: [ 255.487150][ T7614] dt2814 [ 255.487155][ T7614] comedi: valid board names for dt2811 driver are: [ 255.487163][ T7614] dt2811-pgh [ 255.487169][ T7614] dt2811-pgl [ 255.487175][ T7614] comedi: valid board names for dt2801 driver are: [ 255.487183][ T7614] dt2801 [ 255.487189][ T7614] comedi: valid board names for das6402 driver are: [ 255.487197][ T7614] das6402-12 [ 255.487203][ T7614] das6402-16 [ 255.487209][ T7614] comedi: valid board names for das1800 driver are: [ 255.487217][ T7614] das-1701st [ 255.487223][ T7614] das-1701st-da [ 255.487229][ T7614] das-1702st [ 255.487235][ T7614] das-1702st-da [ 255.487241][ T7614] das-1702hr [ 255.487247][ T7614] das-1702hr-da [ 255.488707][ T7614] das-1701ao [ 255.488716][ T7614] das-1702ao [ 255.488723][ T7614] das-1801st [ 255.488729][ T7614] das-1801st-da [ 255.488735][ T7614] das-1802st [ 255.488740][ T7614] das-1802st-da [ 255.488747][ T7614] das-1802hr [ 255.488752][ T7614] das-1802hr-da [ 255.488758][ T7614] das-1801hc [ 255.488765][ T7614] das-1802hc [ 255.488771][ T7614] das-1801ao [ 255.488778][ T7614] das-1802ao [ 255.488784][ T7614] comedi: valid board names for das800 driver are: [ 255.488793][ T7614] das-800 [ 255.488799][ T7614] cio-das800 [ 255.488805][ T7614] das-801 [ 255.488811][ T7614] cio-das801 [ 255.488818][ T7614] das-802 [ 255.488823][ T7614] cio-das802 [ 255.488830][ T7614] cio-das802/16 [ 255.488836][ T7614] comedi: valid board names for isa-das08 driver are: [ 255.488845][ T7614] isa-das08 [ 255.488850][ T7614] das08-pgm [ 255.488857][ T7614] das08-pgh [ 255.488863][ T7614] das08-pgl [ 255.488869][ T7614] das08-aoh [ 255.488875][ T7614] das08-aol [ 255.488881][ T7614] das08-aom [ 255.488887][ T7614] das08/jr-ao [ 255.488893][ T7614] das08jr-16-ao [ 255.488899][ T7614] pc104-das08 [ 255.488905][ T7614] das08jr/16 [ 255.488911][ T7614] comedi: valid board names for das16m1 driver are: [ 255.488919][ T7614] das16m1 [ 255.488925][ T7614] comedi: valid board names for dac02 driver are: [ 255.488933][ T7614] dac02 [ 255.488939][ T7614] comedi: valid board names for rti802 driver are: [ 255.488947][ T7614] rti802 [ 255.488953][ T7614] comedi: valid board names for rti800 driver are: [ 255.488961][ T7614] rti800 [ 255.488966][ T7614] rti815 [ 255.488972][ T7614] comedi: valid board names for pcm3724 driver are: [ 255.488980][ T7614] pcm3724 [ 255.488986][ T7614] comedi: valid board names for pcl818 driver are: [ 255.488994][ T7614] pcl818l [ 255.489000][ T7614] pcl818h [ 255.489006][ T7614] pcl818hd [ 255.489012][ T7614] pcl818hg [ 255.489017][ T7614] pcl818 [ 255.489023][ T7614] pcl718 [ 255.489028][ T7614] pcm3718 [ 255.489034][ T7614] comedi: valid board names for pcl816 driver are: [ 255.489042][ T7614] pcl816 [ 255.489048][ T7614] pcl814b [ 255.489054][ T7614] comedi: valid board names for pcl812 driver are: [ 255.489062][ T7614] pcl812 [ 255.489068][ T7614] pcl812pg [ 255.489074][ T7614] acl8112pg [ 255.489079][ T7614] acl8112dg [ 255.489084][ T7614] acl8112hg [ 255.489090][ T7614] a821pgl [ 255.489095][ T7614] a821pglnda [ 255.489101][ T7614] a821pgh [ 255.489107][ T7614] a822pgl [ 255.489112][ T7614] a822pgh [ 255.489118][ T7614] a823pgl [ 255.489123][ T7614] a823pgh [ 255.489129][ T7614] pcl813 [ 255.489145][ T7614] pcl813b [ 255.489151][ T7614] acl8113 [ 255.489157][ T7614] iso813 [ 255.489163][ T7614] acl8216 [ 255.489169][ T7614] a826pg [ 255.489175][ T7614] comedi: valid board names for pcl730 driver are: [ 255.489184][ T7614] pcl730 [ 255.489190][ T7614] iso730 [ 255.489196][ T7614] acl7130 [ 255.489202][ T7614] pcm3730 [ 255.489208][ T7614] pcl725 [ 255.489214][ T7614] p8r8dio [ 255.489220][ T7614] acl7225b [ 255.489226][ T7614] p16r16dio [ 255.489232][ T7614] pcl733 [ 255.489238][ T7614] pcl734 [ 255.489244][ T7614] opmm-1616-xt [ 255.489250][ T7614] pearl-mm-p [ 255.489257][ T7614] ir104-pbf [ 255.489262][ T7614] comedi: valid board names for pcl726 driver are: [ 255.489270][ T7614] pcl726 [ 255.489277][ T7614] pcl727 [ 255.489282][ T7614] pcl728 [ 255.489288][ T7614] acl6126 [ 255.489294][ T7614] acl6128 [ 255.489300][ T7614] comedi: valid board names for pcl724 driver are: [ 255.489308][ T7614] pcl724 [ 255.489313][ T7614] pcl722 [ 255.489319][ T7614] pcl731 [ 255.489324][ T7614] acl7122 [ 255.489330][ T7614] acl7124 [ 255.489335][ T7614] pet48dio [ 255.489341][ T7614] pcmio48 [ 255.489347][ T7614] onyx-mm-dio [ 255.489353][ T7614] comedi: valid board names for pcl711 driver are: [ 255.489360][ T7614] pcl711 [ 255.489366][ T7614] pcl711b [ 255.489388][ T7614] acl8112hg [ 255.489394][ T7614] acl8112dg [ 255.489400][ T7614] comedi: valid board names for amplc_pc263 driver are: [ 255.489409][ T7614] pc263 [ 255.489415][ T7614] comedi: valid board names for amplc_pc236 driver are: [ 255.489423][ T7614] pc36at [ 255.489429][ T7614] comedi: valid board names for amplc_dio200 driver are: [ 255.489438][ T7614] pc212e [ 255.489443][ T7614] pc214e [ 255.489450][ T7614] pc215e [ 255.489455][ T7614] pc218e [ 255.489461][ T7614] pc272e [ 255.489467][ T7614] comedi: valid board names for comedi_parport driver are: [ 255.489476][ T7614] comedi_parport [ 255.489483][ T7614] comedi: valid board names for comedi_test driver are: [ 255.489491][ T7614] comedi_test [ 255.489496][ T7614] comedi: valid board names for comedi_bond driver are: [ 255.489516][ T7614] comedi_bond [ 255.835737][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.835807][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.614917][ T7305] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 257.764733][ T7305] usb 4-1: Using ep0 maxpacket: 16 [ 257.769946][ T7305] usb 4-1: config 0 has no interfaces? [ 257.769982][ T7305] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 257.770002][ T7305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.784727][ T5844] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 257.864710][ T5884] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 257.873331][ T7305] usb 4-1: config 0 descriptor?? [ 257.944630][ T5844] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 257.944662][ T5844] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 257.944686][ T5844] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.944717][ T5844] usb 5-1: New USB device found, idVendor=056a, idProduct=0021, bcdDevice= 0.00 [ 257.944737][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.967752][ T5844] usb 5-1: config 0 descriptor?? [ 257.987812][ T7638] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 258.037498][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 258.039703][ T5884] usb 1-1: not running at top speed; connect to a high speed hub [ 258.041323][ T5884] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.041352][ T5884] usb 1-1: config 1 interface 0 has no altsetting 0 [ 258.044475][ T5884] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 258.044499][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.044517][ T5884] usb 1-1: Product: 䀊 [ 258.044619][ T5884] usb 1-1: Manufacturer: ⹎㢴ꕽ㬳鎓꺢릟鬳⠏鄢逧ጧ烵׷Ნ猠㚧馼杜䣞粛㰊ﹹ嚹䰶䯭撂ꡣZ랑愩Ҥ鍸鐘ਝ攝嫈嫇폨ꃸ쵨䎢殷䓁眎友沢鮦玣ߥ꫘⪴箿 [ 258.044640][ T5884] usb 1-1: SerialNumber: 슅啊ﰒŅ㋉퇊㋫᛭㓎鵿헯뺺鍋⅘ďꇧ쯃颂跽￉鷷䫍囀覴滕廇鱣䞈᧌ⵑ嚾둕Ẏ道࠽ൎꝀ䕆䳶筌넦쑂鞄騇縤췀쒡克㏢閩矓圀嵯痺ꇁ꛲쉭麀룔⺶郼諀짬섣̢ྡ䱒隷㑡鍉퉒哑᳁偠䖋⹜⃜㊭蚩繈ﴫ롸켁牀齮Ს랚㑂擝檺淼踁噗ꮁ뇋 [ 258.127025][ T7635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.157106][ T7635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.380228][ T5884] usb 1-1: USB disconnect, device number 10 [ 258.404148][ T5844] usbhid 5-1:0.0: can't add hid device: -71 [ 258.404270][ T5844] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 258.427214][ T5844] usb 5-1: USB disconnect, device number 10 [ 258.469789][ T37] audit: type=1804 audit(1761408196.805:23): pid=7635 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.539" name="bus" dev="ramfs" ino=15237 res=1 errno=0 [ 258.634090][ T5884] usb 4-1: USB disconnect, device number 11 [ 261.064737][ T5884] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 261.232486][ T5884] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 261.232515][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.265269][ T5884] usb 2-1: config 0 descriptor?? [ 261.634737][ T5913] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 261.688519][ T5884] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 261.694080][ T5884] [drm:udl_init] *ERROR* Selecting channel failed [ 261.787887][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 261.788625][ T5913] usb 1-1: not running at top speed; connect to a high speed hub [ 261.790149][ T5913] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.790177][ T5913] usb 1-1: config 1 interface 0 has no altsetting 0 [ 261.797238][ T5913] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 261.797273][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.797291][ T5913] usb 1-1: Product: 䀊 [ 261.797303][ T5913] usb 1-1: Manufacturer: ⹎㢴ꕽ㬳鎓꺢릟鬳⠏鄢逧ጧ烵׷Ნ猠㚧馼杜䣞粛㰊ﹹ嚹䰶䯭撂ꡣZ랑愩Ҥ鍸鐘ਝ攝嫈嫇폨ꃸ쵨䎢殷䓁眎友沢鮦玣ߥ꫘⪴箿 [ 261.797324][ T5913] usb 1-1: SerialNumber: 슅啊ﰒŅ㋉퇊㋫᛭㓎鵿헯뺺鍋⅘ďꇧ쯃颂跽￉鷷䫍囀覴滕廇鱣䞈᧌ⵑ嚾둕Ẏ道࠽ൎꝀ䕆䳶筌넦쑂鞄騇縤췀쒡克㏢閩矓圀嵯痺ꇁ꛲쉭麀룔⺶郼諀짬섣̢ྡ䱒隷㑡鍉퉒哑᳁偠䖋⹜⃜㊭蚩繈ﴫ롸켁牀齮Ს랚㑂擝檺淼踁噗ꮁ뇋 [ 261.917722][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.941268][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 262.083197][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.122201][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.155658][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.283521][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.392989][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.501342][ T5884] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 262.501368][ T5884] [drm] Initialized udl on minor 2 [ 262.554993][ T5871] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 262.585228][ T5884] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 262.587295][ T5884] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 262.643132][ T5967] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 262.845282][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 262.849556][ T5871] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 262.849581][ T5871] usb 4-1: config 0 has no interface number 0 [ 262.852413][ T5871] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 262.852441][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.852460][ T5871] usb 4-1: Product: syz [ 262.852472][ T5871] usb 4-1: Manufacturer: syz [ 262.852485][ T5871] usb 4-1: SerialNumber: syz [ 262.864206][ T5884] usb 2-1: USB disconnect, device number 12 [ 262.920129][ T5871] usb 4-1: config 0 descriptor?? [ 262.924382][ T5967] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 262.941781][ T5871] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 262.991600][ T5913] usb 1-1: USB disconnect, device number 11 [ 263.008611][ T5857] udevd[5857]: setting owner of /dev/bus/usb/001/011 to uid=0, gid=7 failed: No such file or directory [ 263.175102][ T5871] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 263.207956][ T7698] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 263.207979][ T7698] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 263.208067][ T7698] vhci_hcd vhci_hcd.0: Device attached [ 263.240107][ T7699] vhci_hcd: unknown pdu 2 [ 263.255266][ T3546] vhci_hcd: stop threads [ 263.255278][ T3546] vhci_hcd: release socket [ 263.255312][ T3546] vhci_hcd: disconnect device [ 263.295312][ T5871] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 263.334031][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 263.831061][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.424256][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.922281][ T7698] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 264.923801][ T7698] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.924018][ T7698] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 264.924247][ T7698] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 265.058164][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 265.062417][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.106466][ T5913] usb 4-1: USB disconnect, device number 12 [ 265.144902][ T5913] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 265.194422][ T5913] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 265.206801][ T5913] quatech2 4-1:0.51: device disconnected [ 265.384751][ T1660] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 265.404698][ T5871] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 265.425020][ T5117] Bluetooth: hci0: command 0x0c1a tx timeout [ 265.536290][ T1660] usb 3-1: Using ep0 maxpacket: 32 [ 265.550020][ T1660] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.550077][ T1660] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.559831][ T1660] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 265.559859][ T1660] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 265.559877][ T1660] usb 3-1: Product: syz [ 265.559889][ T1660] usb 3-1: Manufacturer: syz [ 265.559900][ T1660] usb 3-1: SerialNumber: syz [ 265.560472][ T5871] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.560492][ T5871] usb 5-1: config 0 has no interface number 0 [ 265.563119][ T5871] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 265.563142][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.563160][ T5871] usb 5-1: Product: syz [ 265.563172][ T5871] usb 5-1: Manufacturer: syz [ 265.563185][ T5871] usb 5-1: SerialNumber: syz [ 265.572415][ T5871] usb 5-1: config 0 descriptor?? [ 265.703736][ T1660] usb 3-1: config 0 descriptor?? [ 265.713996][ T1660] hub 3-1:0.0: bad descriptor, ignoring hub [ 265.714034][ T1660] hub 3-1:0.0: probe with driver hub failed with error -5 [ 265.966631][ T5871] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 266.017958][ T5871] usb 5-1: USB disconnect, device number 11 [ 266.037443][ T5844] usb 3-1: USB disconnect, device number 7 [ 266.623965][ T7745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 266.944787][ T5117] Bluetooth: hci4: command 0x0405 tx timeout [ 266.944824][ T5117] Bluetooth: hci2: command 0x0c1a tx timeout [ 266.944851][ T5117] Bluetooth: hci1: command 0x0c1a tx timeout [ 266.972112][ T7745] bond1: entered promiscuous mode [ 266.972659][ T7745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.075745][ T7745] 9pnet_fd: Insufficient options for proto=fd [ 267.093167][ T7745] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 267.093429][ T7745] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 267.414699][ T5871] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 267.546552][ T5871] usb 3-1: device descriptor read/64, error -71 [ 267.955645][ T5871] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 268.084745][ T5871] usb 3-1: device descriptor read/64, error -71 [ 268.194753][ T5844] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 268.200083][ T5871] usb usb3-port1: attempt power cycle [ 268.308408][ T7783] FAULT_INJECTION: forcing a failure. [ 268.308408][ T7783] name failslab, interval 1, probability 0, space 0, times 0 [ 268.308439][ T7783] CPU: 0 UID: 0 PID: 7783 Comm: syz.4.588 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 268.308459][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.308470][ T7783] Call Trace: [ 268.308478][ T7783] [ 268.308486][ T7783] dump_stack_lvl+0x189/0x250 [ 268.308513][ T7783] ? __pfx____ratelimit+0x10/0x10 [ 268.308535][ T7783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.308558][ T7783] ? __pfx__printk+0x10/0x10 [ 268.308583][ T7783] ? __pfx___might_resched+0x10/0x10 [ 268.308602][ T7783] ? fs_reclaim_acquire+0x7d/0x100 [ 268.308640][ T7783] should_fail_ex+0x46c/0x600 [ 268.308668][ T7783] should_failslab+0xa8/0x100 [ 268.308693][ T7783] __kmalloc_cache_noprof+0x6f/0x6c0 [ 268.308717][ T7783] ? tls_set_sw_offload+0x39d/0x1970 [ 268.308736][ T7783] ? get_netdev_for_sock+0x1c/0x3e0 [ 268.308758][ T7783] tls_set_sw_offload+0x39d/0x1970 [ 268.308782][ T7783] ? get_netdev_for_sock+0x1c/0x3e0 [ 268.308798][ T7783] ? get_netdev_for_sock+0x1c/0x3e0 [ 268.308823][ T7783] ? tls_set_device_offload_rx+0x38d/0x4b0 [ 268.308848][ T7783] tls_setsockopt+0xc8b/0x1340 [ 268.308876][ T7783] ? __pfx_tls_setsockopt+0x10/0x10 [ 268.308901][ T7783] ? __fget_files+0x2a/0x420 [ 268.308926][ T7783] ? sock_common_setsockopt+0x36/0xc0 [ 268.308950][ T7783] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 268.308976][ T7783] do_sock_setsockopt+0x17c/0x1b0 [ 268.309001][ T7783] __x64_sys_setsockopt+0x145/0x1b0 [ 268.309026][ T7783] do_syscall_64+0xfa/0xfa0 [ 268.309045][ T7783] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.309064][ T7783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.309081][ T7783] ? clear_bhb_loop+0x60/0xb0 [ 268.309101][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.309118][ T7783] RIP: 0033:0x7f60f9e4efc9 [ 268.309135][ T7783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.309151][ T7783] RSP: 002b:00007f60f80ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 268.309170][ T7783] RAX: ffffffffffffffda RBX: 00007f60fa0a5fa0 RCX: 00007f60f9e4efc9 [ 268.309184][ T7783] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000004 [ 268.309195][ T7783] RBP: 00007f60f80ae090 R08: 0000000000000028 R09: 0000000000000000 [ 268.309206][ T7783] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 268.309217][ T7783] R13: 00007f60fa0a6038 R14: 00007f60fa0a5fa0 R15: 00007ffe7c841b98 [ 268.309250][ T7783] [ 268.352168][ T5844] usb 4-1: config 0 has an invalid interface number: 245 but max is 0 [ 268.352195][ T5844] usb 4-1: config 0 has no interface number 0 [ 268.352240][ T5844] usb 4-1: New USB device found, idVendor=699b, idProduct=9cbd, bcdDevice=76.2a [ 268.352261][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.371220][ T5844] usb 4-1: config 0 descriptor?? [ 268.554688][ T5871] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 268.579752][ T5871] usb 3-1: device descriptor read/8, error -71 [ 268.739708][ T5844] usb 4-1: string descriptor 0 read error: -71 [ 268.765695][ T5844] usb-storage 4-1:0.245: USB Mass Storage device detected [ 268.836207][ T5871] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 268.855520][ T5871] usb 3-1: device descriptor read/8, error -71 [ 268.968694][ T5871] usb usb3-port1: unable to enumerate USB device [ 269.418243][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 269.418293][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.595'. [ 270.204673][ T5844] usb 4-1: USB disconnect, device number 13 [ 270.800889][ T7837] netlink: 'syz.0.606': attribute type 10 has an invalid length. [ 270.801698][ T7837] lo: entered promiscuous mode [ 270.821291][ T7837] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 271.015043][ T5967] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 271.045893][ T7842] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 271.144857][ T5884] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 271.164807][ T5967] usb 2-1: Using ep0 maxpacket: 32 [ 271.167032][ T5967] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 271.167054][ T5967] usb 2-1: config 0 has no interface number 0 [ 271.203584][ T5967] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 271.203612][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.203630][ T5967] usb 2-1: Product: syz [ 271.203643][ T5967] usb 2-1: Manufacturer: syz [ 271.203655][ T5967] usb 2-1: SerialNumber: syz [ 271.256269][ T5967] usb 2-1: config 0 descriptor?? [ 271.263248][ T5967] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 271.585583][ T5884] usb 1-1: Invalid ep0 maxpacket: 16 [ 271.609204][ T5967] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 271.646280][ T5967] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 271.724689][ T5884] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 271.782881][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 271.878015][ T5884] usb 1-1: Invalid ep0 maxpacket: 16 [ 271.881406][ T5884] usb usb1-port1: attempt power cycle [ 271.898777][ T1660] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 272.064455][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 272.094136][ T5913] usb 2-1: USB disconnect, device number 13 [ 272.114459][ T5913] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 272.135142][ T5913] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 272.136582][ T5913] quatech2 2-1:0.51: device disconnected [ 272.185178][ T1660] usb 5-1: Using ep0 maxpacket: 32 [ 272.192639][ T1660] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 272.192664][ T1660] usb 5-1: config 0 has no interface number 0 [ 272.222126][ T1660] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 272.222156][ T1660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.222183][ T1660] usb 5-1: Product: syz [ 272.222195][ T1660] usb 5-1: Manufacturer: syz [ 272.222208][ T1660] usb 5-1: SerialNumber: syz [ 272.277365][ T1660] usb 5-1: config 0 descriptor?? [ 272.301668][ T1660] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 272.356180][ T5884] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 272.391517][ T5884] usb 1-1: Invalid ep0 maxpacket: 16 [ 272.560983][ T1660] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 272.571620][ T5884] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 272.690048][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 272.716535][ T5884] usb 1-1: Invalid ep0 maxpacket: 16 [ 272.717949][ T5884] usb usb1-port1: unable to enumerate USB device [ 272.752500][ T1660] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 272.908601][ T7305] usb 5-1: USB disconnect, device number 12 [ 273.107182][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 273.181232][ T7305] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 273.219873][ T7305] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 273.220865][ T7305] quatech2 5-1:0.51: device disconnected [ 273.384669][ T5871] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 273.614683][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 273.619035][ T5871] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 273.619060][ T5871] usb 2-1: config 0 has no interface number 0 [ 273.621541][ T5871] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 273.621567][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.621585][ T5871] usb 2-1: Product: syz [ 273.621641][ T5871] usb 2-1: Manufacturer: syz [ 273.621654][ T5871] usb 2-1: SerialNumber: syz [ 273.687145][ T5871] usb 2-1: config 0 descriptor?? [ 273.709086][ T5871] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 273.943686][ T5871] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 273.980610][ T5871] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 274.100411][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 274.313014][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 274.327654][ T5871] usb 2-1: USB disconnect, device number 14 [ 274.351418][ T5871] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 274.392601][ T5871] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 274.393607][ T5871] quatech2 2-1:0.51: device disconnected [ 276.701714][ T7900] netlink: 68 bytes leftover after parsing attributes in process `syz.1.624'. [ 278.434703][ T7305] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 278.551007][ T7958] FAULT_INJECTION: forcing a failure. [ 278.551007][ T7958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.551040][ T7958] CPU: 1 UID: 0 PID: 7958 Comm: syz.3.644 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 278.551062][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.551072][ T7958] Call Trace: [ 278.551080][ T7958] [ 278.551089][ T7958] dump_stack_lvl+0x189/0x250 [ 278.551118][ T7958] ? __pfx____ratelimit+0x10/0x10 [ 278.551139][ T7958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.551163][ T7958] ? __pfx__printk+0x10/0x10 [ 278.551200][ T7958] should_fail_ex+0x46c/0x600 [ 278.551229][ T7958] _copy_to_user+0x31/0xb0 [ 278.551250][ T7958] simple_read_from_buffer+0xe1/0x170 [ 278.551278][ T7958] proc_fail_nth_read+0x1b6/0x220 [ 278.551301][ T7958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.551331][ T7958] ? rw_verify_area+0x2ac/0x4e0 [ 278.551351][ T7958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.551371][ T7958] vfs_read+0x206/0xa30 [ 278.551401][ T7958] ? __pfx_vfs_read+0x10/0x10 [ 278.551417][ T7958] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 278.551446][ T7958] ? mutex_lock_nested+0x154/0x1d0 [ 278.551462][ T7958] ? fdget_pos+0x253/0x320 [ 278.551494][ T7958] ksys_read+0x14b/0x260 [ 278.551516][ T7958] ? __pfx_ksys_read+0x10/0x10 [ 278.551540][ T7958] ? do_syscall_64+0xbe/0xfa0 [ 278.551563][ T7958] do_syscall_64+0xfa/0xfa0 [ 278.551581][ T7958] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.551601][ T7958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.551617][ T7958] ? clear_bhb_loop+0x60/0xb0 [ 278.551639][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.551656][ T7958] RIP: 0033:0x7f4af711d9dc [ 278.551671][ T7958] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 278.551687][ T7958] RSP: 002b:00007f4af537e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.551706][ T7958] RAX: ffffffffffffffda RBX: 00007f4af7375fa0 RCX: 00007f4af711d9dc [ 278.551719][ T7958] RDX: 000000000000000f RSI: 00007f4af537e0a0 RDI: 0000000000000003 [ 278.551731][ T7958] RBP: 00007f4af537e090 R08: 0000000000000000 R09: 0000000000000000 [ 278.551742][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.551753][ T7958] R13: 00007f4af7376038 R14: 00007f4af7375fa0 R15: 00007ffee2efd878 [ 278.551785][ T7958] [ 278.584695][ T7305] usb 3-1: Using ep0 maxpacket: 8 [ 278.587145][ T7305] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.587234][ T7305] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 278.587258][ T7305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 278.587354][ T7305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 278.587373][ T7305] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 278.872833][ T7305] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 278.872861][ T7305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 278.872879][ T7305] usb 3-1: Product: syz [ 278.872891][ T7305] usb 3-1: Manufacturer: syz [ 278.872903][ T7305] usb 3-1: SerialNumber: syz [ 278.922126][ T7305] usb 3-1: config 0 descriptor?? [ 279.174940][ T7949] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 279.279457][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.281213][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.454903][ T7305] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 279.455261][ T7305] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 280.211577][ T7979] FAULT_INJECTION: forcing a failure. [ 280.211577][ T7979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.211609][ T7979] CPU: 0 UID: 0 PID: 7979 Comm: syz.3.650 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 280.211630][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.211640][ T7979] Call Trace: [ 280.211648][ T7979] [ 280.211655][ T7979] dump_stack_lvl+0x189/0x250 [ 280.211684][ T7979] ? __pfx____ratelimit+0x10/0x10 [ 280.211704][ T7979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.211728][ T7979] ? __pfx__printk+0x10/0x10 [ 280.211749][ T7979] ? __might_fault+0xb0/0x130 [ 280.211782][ T7979] should_fail_ex+0x46c/0x600 [ 280.211810][ T7979] _copy_to_iter+0x1de/0x1790 [ 280.211849][ T7979] ? __pfx__copy_to_iter+0x10/0x10 [ 280.211876][ T7979] ? chacha_block_generic+0x53/0xc80 [ 280.211905][ T7979] get_random_bytes_user+0x1a0/0x380 [ 280.211933][ T7979] ? __pfx_get_random_bytes_user+0x10/0x10 [ 280.211955][ T7979] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 280.211983][ T7979] ? __pfx_vfs_write+0x10/0x10 [ 280.212000][ T7979] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 280.212028][ T7979] ? import_ubuf+0xfb/0x1d0 [ 280.212048][ T7979] __x64_sys_getrandom+0x16d/0x260 [ 280.212075][ T7979] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 280.212096][ T7979] ? ksys_write+0x230/0x260 [ 280.212117][ T7979] ? __pfx_ksys_write+0x10/0x10 [ 280.212141][ T7979] ? do_syscall_64+0xbe/0xfa0 [ 280.212164][ T7979] do_syscall_64+0xfa/0xfa0 [ 280.212182][ T7979] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.212202][ T7979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.212218][ T7979] ? clear_bhb_loop+0x60/0xb0 [ 280.212238][ T7979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.212254][ T7979] RIP: 0033:0x7f4af711efc9 [ 280.212268][ T7979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.212283][ T7979] RSP: 002b:00007f4af537e038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 280.212302][ T7979] RAX: ffffffffffffffda RBX: 00007f4af7375fa0 RCX: 00007f4af711efc9 [ 280.212313][ T7979] RDX: 0000000000000002 RSI: fffffffffffffdde RDI: 0000200000000040 [ 280.212323][ T7979] RBP: 00007f4af537e090 R08: 0000000000000000 R09: 0000000000000000 [ 280.212334][ T7979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.212344][ T7979] R13: 00007f4af7376038 R14: 00007f4af7375fa0 R15: 00007ffee2efd878 [ 280.212375][ T7979] [ 281.837129][ T5885] usb 3-1: USB disconnect, device number 12 [ 282.391142][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 282.401896][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'. [ 282.620213][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.132133][ T8021] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 283.132218][ T8021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 283.136983][ T8021] vhci_hcd vhci_hcd.0: Device attached [ 283.325690][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'. [ 283.565265][ T7305] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 283.793960][ T37] audit: type=1326 audit(1761408222.095:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe859f0efc9 code=0x7ffc0000 [ 283.794251][ T37] audit: type=1326 audit(1761408222.095:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe859f0efc9 code=0x7ffc0000 [ 283.879046][ T37] audit: type=1326 audit(1761408222.165:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe859f0efc9 code=0x7ffc0000 [ 283.879184][ T37] audit: type=1326 audit(1761408222.175:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe859f0efc9 code=0x7ffc0000 [ 283.995628][ T8027] vhci_hcd: connection reset by peer [ 284.090442][ T37] audit: type=1326 audit(1761408222.405:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe859f0efc9 code=0x7ffc0000 [ 284.090603][ T37] audit: type=1326 audit(1761408222.425:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe859f0efc9 code=0x7ffc0000 [ 284.090644][ T37] audit: type=1326 audit(1761408222.425:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe859f0efc9 code=0x7ffc0000 [ 284.095820][ T37] audit: type=1326 audit(1761408222.435:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe859f0ebcb code=0x7ffc0000 [ 284.102802][ T37] audit: type=1326 audit(1761408222.445:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe859f0ebcb code=0x7ffc0000 [ 284.103450][ T37] audit: type=1326 audit(1761408222.445:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe859f0ebcb code=0x7ffc0000 [ 284.580992][ T8021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 284.586674][ T8021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 284.592826][ T8021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 284.596816][ T8021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 284.702392][ T168] vhci_hcd: stop threads [ 284.835743][ T168] vhci_hcd: release socket [ 284.957553][ T168] vhci_hcd: disconnect device [ 285.504224][ T8039] FAULT_INJECTION: forcing a failure. [ 285.504224][ T8039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.504938][ T8039] CPU: 1 UID: 0 PID: 8039 Comm: syz.3.670 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 285.504962][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.504972][ T8039] Call Trace: [ 285.504980][ T8039] [ 285.504989][ T8039] dump_stack_lvl+0x189/0x250 [ 285.505018][ T8039] ? __pfx____ratelimit+0x10/0x10 [ 285.505040][ T8039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.505067][ T8039] ? __pfx__printk+0x10/0x10 [ 285.505088][ T8039] ? __might_fault+0xb0/0x130 [ 285.505121][ T8039] should_fail_ex+0x46c/0x600 [ 285.505149][ T8039] _copy_from_user+0x2d/0xb0 [ 285.505169][ T8039] do_vfs_ioctl+0x2d3/0x1440 [ 285.505188][ T8039] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 285.505214][ T8039] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 285.505230][ T8039] ? smack_log+0xef/0x3f0 [ 285.505253][ T8039] ? __pfx_smack_log+0x10/0x10 [ 285.505270][ T8039] ? rcu_is_watching+0x15/0xb0 [ 285.505286][ T8039] ? smk_access+0x14c/0x4e0 [ 285.505313][ T8039] ? smk_tskacc+0x2fc/0x370 [ 285.505344][ T8039] ? __pfx_smack_file_ioctl+0x10/0x10 [ 285.505398][ T8039] ? __fget_files+0x3a6/0x420 [ 285.505420][ T8039] ? __fget_files+0x2a/0x420 [ 285.505444][ T8039] ? bpf_lsm_file_ioctl+0x9/0x20 [ 285.505465][ T8039] __se_sys_ioctl+0x82/0x170 [ 285.505486][ T8039] do_syscall_64+0xfa/0xfa0 [ 285.505509][ T8039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.505526][ T8039] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 285.505541][ T8039] ? clear_bhb_loop+0x60/0xb0 [ 285.505566][ T8039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.505583][ T8039] RIP: 0033:0x7f4af711efc9 [ 285.505599][ T8039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.505614][ T8039] RSP: 002b:00007f4af537e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.505634][ T8039] RAX: ffffffffffffffda RBX: 00007f4af7375fa0 RCX: 00007f4af711efc9 [ 285.505646][ T8039] RDX: 00002000000000c0 RSI: 000000004020940d RDI: 0000000000000003 [ 285.505658][ T8039] RBP: 00007f4af537e090 R08: 0000000000000000 R09: 0000000000000000 [ 285.505669][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.505679][ T8039] R13: 00007f4af7376038 R14: 00007f4af7375fa0 R15: 00007ffee2efd878 [ 285.505711][ T8039] [ 286.065784][ T5117] Bluetooth: hci0: command 0x0c1a tx timeout [ 286.793393][ T5117] Bluetooth: hci4: command 0x0405 tx timeout [ 286.793433][ T5117] Bluetooth: hci2: command 0x0c1a tx timeout [ 286.793461][ T5117] Bluetooth: hci1: command 0x0c1a tx timeout [ 286.847791][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.374720][ T5884] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 287.570470][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 287.575341][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.575386][ T5884] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 287.575407][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.582631][ T5884] usb 4-1: config 0 descriptor?? [ 287.834474][ T5884] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 288.122410][ T8075] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 288.122435][ T8075] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 288.125879][ T8075] vhci_hcd vhci_hcd.0: Device attached [ 288.314057][ T8083] fuse: Bad value for 'fd' [ 288.392572][ T5884] usb 4-1: USB disconnect, device number 14 [ 288.765159][ T8077] vhci_hcd: connection reset by peer [ 288.770997][ T3546] vhci_hcd: stop threads [ 288.771016][ T3546] vhci_hcd: release socket [ 288.820382][ T3546] vhci_hcd: disconnect device [ 288.855498][ T7305] vhci_hcd: vhci_device speed not set [ 289.266821][ T8075] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 289.267062][ T8075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.267250][ T8075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.267439][ T8075] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 289.292217][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.807332][ T5885] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 289.967235][ T5885] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 289.967263][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.986627][ T5885] usb 4-1: config 0 descriptor?? [ 290.224697][ T5117] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.036091][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.195751][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.240919][ T5885] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 291.354801][ T5117] Bluetooth: hci4: command 0x0405 tx timeout [ 291.354843][ T5117] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.354869][ T5117] Bluetooth: hci1: command 0x0c1a tx timeout [ 291.652809][ T5885] [drm:udl_init] *ERROR* Selecting channel failed [ 291.684450][ T5885] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 291.684474][ T5885] [drm] Initialized udl on minor 2 [ 291.686043][ T5885] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 291.686365][ T5885] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 291.688936][ T5884] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 291.690635][ T5884] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 291.690778][ T5884] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 291.703022][ T5885] usb 4-1: USB disconnect, device number 15 [ 291.837626][ T8122] comedi: valid board names for 8255 driver are: [ 291.837641][ T8122] 8255 [ 291.837649][ T8122] comedi: valid board names for vmk80xx driver are: [ 291.837656][ T8122] vmk80xx [ 291.837663][ T8122] comedi: valid board names for usbduxsigma driver are: [ 291.837670][ T8122] usbduxsigma [ 291.837676][ T8122] comedi: valid board names for usbduxfast driver are: [ 291.837683][ T8122] usbduxfast [ 291.837690][ T8122] comedi: valid board names for usbdux driver are: [ 291.837698][ T8122] usbdux [ 291.837704][ T8122] comedi: valid board names for ni6501 driver are: [ 291.837711][ T8122] ni6501 [ 291.837716][ T8122] comedi: valid board names for dt9812 driver are: [ 291.837724][ T8122] dt9812 [ 291.837729][ T8122] comedi: valid board names for ni_labpc_cs driver are: [ 291.837736][ T8122] ni_labpc_cs [ 291.837740][ T8122] comedi: valid board names for ni_daq_700 driver are: [ 291.837747][ T8122] ni_daq_700 [ 291.837752][ T8122] comedi: valid board names for labpc_pci driver are: [ 291.837758][ T8122] labpc_pci [ 291.837764][ T8122] comedi: valid board names for adl_pci9118 driver are: [ 291.837771][ T8122] pci9118dg [ 291.837777][ T8122] pci9118hg [ 291.837783][ T8122] pci9118hr [ 291.837789][ T8122] comedi: valid board names for 8255_pci driver are: [ 291.837796][ T8122] 8255_pci [ 291.837801][ T8122] comedi: valid board names for s526 driver are: [ 291.837808][ T8122] s526 [ 291.837812][ T8122] comedi: valid board names for multiq3 driver are: [ 291.837819][ T8122] multiq3 [ 291.837823][ T8122] comedi: valid board names for pcmuio driver are: [ 291.837829][ T8122] pcmuio48 [ 291.837834][ T8122] pcmuio96 [ 291.837839][ T8122] comedi: valid board names for pcmmio driver are: [ 291.837845][ T8122] pcmmio [ 291.837850][ T8122] comedi: valid board names for pcmda12 driver are: [ 291.837857][ T8122] pcmda12 [ 291.837862][ T8122] comedi: valid board names for pcmad driver are: [ 291.837869][ T8122] pcmad12 [ 291.837874][ T8122] pcmad16 [ 291.837880][ T8122] comedi: valid board names for ni_labpc driver are: [ 291.837887][ T8122] lab-pc-1200 [ 291.837892][ T8122] lab-pc-1200ai [ 291.837897][ T8122] lab-pc+ [ 291.837902][ T8122] comedi: valid board names for atmio16 driver are: [ 291.837908][ T8122] atmio16 [ 291.837913][ T8122] atmio16d [ 291.837919][ T8122] comedi: valid board names for ni_at_ao driver are: [ 291.837926][ T8122] at-ao-6 [ 291.837931][ T8122] at-ao-10 [ 291.837936][ T8122] comedi: valid board names for ni_at_a2150 driver are: [ 291.837943][ T8122] ni_at_a2150 [ 291.837949][ T8122] comedi: valid board names for adq12b driver are: [ 291.837957][ T8122] adq12b [ 291.837962][ T8122] comedi: valid board names for mpc624 driver are: [ 291.837969][ T8122] mpc624 [ 291.837974][ T8122] comedi: valid board names for c6xdigio driver are: [ 291.837982][ T8122] c6xdigio [ 291.837987][ T8122] comedi: valid board names for aio_iiro_16 driver are: [ 291.837997][ T8122] aio_iiro_16 [ 291.838002][ T8122] comedi: valid board names for aio_aio12_8 driver are: [ 291.838011][ T8122] aio_aio12_8 [ 291.838016][ T8122] aio_ai12_8 [ 291.838022][ T8122] aio_ao12_4 [ 291.838027][ T8122] comedi: valid board names for fl512 driver are: [ 291.838036][ T8122] fl512 [ 291.838041][ T8122] comedi: valid board names for dmm32at driver are: [ 291.838049][ T8122] dmm32at [ 291.838054][ T8122] comedi: valid board names for dt282x driver are: [ 291.838063][ T8122] dt2821 [ 291.838069][ T8122] dt2821-f [ 291.838074][ T8122] dt2821-g [ 291.838080][ T8122] dt2823 [ 291.838086][ T8122] dt2824-pgh [ 291.838092][ T8122] dt2824-pgl [ 291.838097][ T8122] dt2825 [ 291.838103][ T8122] dt2827 [ 291.838108][ T8122] dt2828 [ 291.838114][ T8122] dt2829 [ 291.838120][ T8122] dt21-ez [ 291.838126][ T8122] dt23-ez [ 291.838131][ T8122] dt24-ez [ 291.838137][ T8122] dt24-ez-pgl [ 291.838143][ T8122] comedi: valid board names for dt2817 driver are: [ 291.838151][ T8122] dt2817 [ 291.838156][ T8122] comedi: valid board names for dt2815 driver are: [ 291.838164][ T8122] dt2815 [ 291.838169][ T8122] comedi: valid board names for dt2814 driver are: [ 291.838177][ T8122] dt2814 [ 291.838182][ T8122] comedi: valid board names for dt2811 driver are: [ 291.838189][ T8122] dt2811-pgh [ 291.838195][ T8122] dt2811-pgl [ 291.838201][ T8122] comedi: valid board names for dt2801 driver are: [ 291.838209][ T8122] dt2801 [ 291.838214][ T8122] comedi: valid board names for das6402 driver are: [ 291.838221][ T8122] das6402-12 [ 291.838227][ T8122] das6402-16 [ 291.838232][ T8122] comedi: valid board names for das1800 driver are: [ 291.838239][ T8122] das-1701st [ 291.838244][ T8122] das-1701st-da [ 291.838250][ T8122] das-1702st [ 291.838255][ T8122] das-1702st-da [ 291.838260][ T8122] das-1702hr [ 291.838265][ T8122] das-1702hr-da [ 291.838271][ T8122] das-1701ao [ 291.838276][ T8122] das-1702ao [ 291.838282][ T8122] das-1801st [ 291.838287][ T8122] das-1801st-da [ 291.838293][ T8122] das-1802st [ 291.838299][ T8122] das-1802st-da [ 291.838305][ T8122] das-1802hr [ 291.838310][ T8122] das-1802hr-da [ 291.838315][ T8122] das-1801hc [ 291.838319][ T8122] das-1802hc [ 291.838324][ T8122] das-1801ao [ 291.838329][ T8122] das-1802ao [ 291.838334][ T8122] comedi: valid board names for das800 driver are: [ 291.838341][ T8122] das-800 [ 291.838355][ T8122] cio-das800 [ 291.838360][ T8122] das-801 [ 291.838366][ T8122] cio-das801 [ 291.838372][ T8122] das-802 [ 291.838377][ T8122] cio-das802 [ 291.838383][ T8122] cio-das802/16 [ 291.838389][ T8122] comedi: valid board names for isa-das08 driver are: [ 291.838397][ T8122] isa-das08 [ 291.838401][ T8122] das08-pgm [ 291.838406][ T8122] das08-pgh [ 291.838412][ T8122] das08-pgl [ 291.838418][ T8122] das08-aoh [ 291.838423][ T8122] das08-aol [ 291.838428][ T8122] das08-aom [ 291.838435][ T8122] das08/jr-ao [ 291.838439][ T8122] das08jr-16-ao [ 291.838445][ T8122] pc104-das08 [ 291.838451][ T8122] das08jr/16 [ 291.838457][ T8122] comedi: valid board names for das16m1 driver are: [ 291.838465][ T8122] das16m1 [ 291.838471][ T8122] comedi: valid board names for dac02 driver are: [ 291.838478][ T8122] dac02 [ 291.838482][ T8122] comedi: valid board names for rti802 driver are: [ 291.838489][ T8122] rti802 [ 291.838494][ T8122] comedi: valid board names for rti800 driver are: [ 291.838500][ T8122] rti800 [ 291.838505][ T8122] rti815 [ 291.838509][ T8122] comedi: valid board names for pcm3724 driver are: [ 291.838516][ T8122] pcm3724 [ 291.838522][ T8122] comedi: valid board names for pcl818 driver are: [ 291.838529][ T8122] pcl818l [ 291.838535][ T8122] pcl818h [ 291.838540][ T8122] pcl818hd [ 291.838545][ T8122] pcl818hg [ 291.838550][ T8122] pcl818 [ 291.838556][ T8122] pcl718 [ 291.838561][ T8122] pcm3718 [ 291.838567][ T8122] comedi: valid board names for pcl816 driver are: [ 291.838574][ T8122] pcl816 [ 291.838579][ T8122] pcl814b [ 291.838585][ T8122] comedi: valid board names for pcl812 driver are: [ 291.838592][ T8122] pcl812 [ 291.838596][ T8122] pcl812pg [ 291.838602][ T8122] acl8112pg [ 291.838607][ T8122] acl8112dg [ 291.838612][ T8122] acl8112hg [ 291.838618][ T8122] a821pgl [ 291.838623][ T8122] a821pglnda [ 291.838629][ T8122] a821pgh [ 291.838634][ T8122] a822pgl [ 291.838640][ T8122] a822pgh [ 291.838645][ T8122] a823pgl [ 291.838650][ T8122] a823pgh [ 291.838656][ T8122] pcl813 [ 291.838661][ T8122] pcl813b [ 291.838665][ T8122] acl8113 [ 291.838670][ T8122] iso813 [ 291.838675][ T8122] acl8216 [ 291.838680][ T8122] a826pg [ 291.838686][ T8122] comedi: valid board names for pcl730 driver are: [ 291.838693][ T8122] pcl730 [ 291.838698][ T8122] iso730 [ 291.838703][ T8122] acl7130 [ 291.838708][ T8122] pcm3730 [ 291.838713][ T8122] pcl725 [ 291.838719][ T8122] p8r8dio [ 291.838725][ T8122] acl7225b [ 291.838730][ T8122] p16r16dio [ 291.838737][ T8122] pcl733 [ 291.838742][ T8122] pcl734 [ 291.838748][ T8122] opmm-1616-xt [ 291.838754][ T8122] pearl-mm-p [ 291.838759][ T8122] ir104-pbf [ 291.838765][ T8122] comedi: valid board names for pcl726 driver are: [ 291.838774][ T8122] pcl726 [ 291.838779][ T8122] pcl727 [ 291.838785][ T8122] pcl728 [ 291.838791][ T8122] acl6126 [ 291.838796][ T8122] acl6128 [ 291.838803][ T8122] comedi: valid board names for pcl724 driver are: [ 291.838811][ T8122] pcl724 [ 291.838816][ T8122] pcl722 [ 291.838822][ T8122] pcl731 [ 291.838828][ T8122] acl7122 [ 291.838833][ T8122] acl7124 [ 291.838839][ T8122] pet48dio [ 291.838845][ T8122] pcmio48 [ 291.838850][ T8122] onyx-mm-dio [ 291.838856][ T8122] comedi: valid board names for pcl711 driver are: [ 291.838864][ T8122] pcl711 [ 291.838869][ T8122] pcl711b [ 291.838873][ T8122] acl8112hg [ 291.838877][ T8122] acl8112dg [ 291.838883][ T8122] comedi: valid board names for amplc_pc263 driver are: [ 291.838891][ T8122] pc263 [ 291.838896][ T8122] comedi: valid board names for amplc_pc236 driver are: [ 291.838904][ T8122] pc36at [ 291.838909][ T8122] comedi: valid board names for amplc_dio200 driver are: [ 291.838916][ T8122] pc212e [ 291.838922][ T8122] pc214e [ 291.838927][ T8122] pc215e [ 291.838933][ T8122] pc218e [ 291.838938][ T8122] pc272e [ 291.838943][ T8122] comedi: valid board names for comedi_parport driver are: [ 291.838951][ T8122] comedi_parport [ 291.838957][ T8122] comedi: valid board names for comedi_test driver are: [ 291.838965][ T8122] comedi_test [ 291.838971][ T8122] comedi: valid board names for comedi_bond driver are: [ 291.838978][ T8122] comedi_bond [ 292.077408][ T8131] nfs: Unknown parameter '' [ 292.086608][ T8132] nfs: Unknown parameter '' [ 292.878787][ T8138] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 292.878812][ T8138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 292.878897][ T8138] vhci_hcd vhci_hcd.0: Device attached [ 292.893752][ T7305] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 292.899363][ T8143] usbip_core: unknown command [ 292.899376][ T8143] vhci_hcd: unknown pdu 131072 [ 292.899384][ T8143] usbip_core: unknown command [ 292.905178][ T12] vhci_hcd: stop threads [ 292.905189][ T12] vhci_hcd: release socket [ 292.905221][ T12] vhci_hcd: disconnect device [ 293.048261][ T7305] usb 5-1: Using ep0 maxpacket: 8 [ 293.050796][ T7305] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 293.052827][ T7305] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.052851][ T7305] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.052874][ T7305] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.052894][ T7305] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.052935][ T7305] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 293.052967][ T7305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.445354][ T7305] usb 5-1: usb_control_msg returned -32 [ 293.445402][ T7305] usbtmc 5-1:16.0: can't read capabilities [ 294.802226][ T8138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 294.803398][ T8138] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 294.803705][ T8138] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 294.805542][ T8138] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 295.024580][ T5804] Bluetooth: hci0: command 0x0c1a tx timeout [ 295.123256][ T8166] comedi: valid board names for 8255 driver are: [ 295.123271][ T8166] 8255 [ 295.123277][ T8166] comedi: valid board names for vmk80xx driver are: [ 295.123286][ T8166] vmk80xx [ 295.123292][ T8166] comedi: valid board names for usbduxsigma driver are: [ 295.123301][ T8166] usbduxsigma [ 295.123307][ T8166] comedi: valid board names for usbduxfast driver are: [ 295.123315][ T8166] usbduxfast [ 295.123321][ T8166] comedi: valid board names for usbdux driver are: [ 295.123330][ T8166] usbdux [ 295.123336][ T8166] comedi: valid board names for ni6501 driver are: [ 295.123344][ T8166] ni6501 [ 295.123351][ T8166] comedi: valid board names for dt9812 driver are: [ 295.123359][ T8166] dt9812 [ 295.123364][ T8166] comedi: valid board names for ni_labpc_cs driver are: [ 295.123374][ T8166] ni_labpc_cs [ 295.123380][ T8166] comedi: valid board names for ni_daq_700 driver are: [ 295.123388][ T8166] ni_daq_700 [ 295.123394][ T8166] comedi: valid board names for labpc_pci driver are: [ 295.123403][ T8166] labpc_pci [ 295.123409][ T8166] comedi: valid board names for adl_pci9118 driver are: [ 295.123417][ T8166] pci9118dg [ 295.123423][ T8166] pci9118hg [ 295.123429][ T8166] pci9118hr [ 295.123435][ T8166] comedi: valid board names for 8255_pci driver are: [ 295.123443][ T8166] 8255_pci [ 295.123450][ T8166] comedi: valid board names for s526 driver are: [ 295.123458][ T8166] s526 [ 295.123463][ T8166] comedi: valid board names for multiq3 driver are: [ 295.123472][ T8166] multiq3 [ 295.123478][ T8166] comedi: valid board names for pcmuio driver are: [ 295.123486][ T8166] pcmuio48 [ 295.123492][ T8166] pcmuio96 [ 295.123498][ T8166] comedi: valid board names for pcmmio driver are: [ 295.123506][ T8166] pcmmio [ 295.123511][ T8166] comedi: valid board names for pcmda12 driver are: [ 295.123519][ T8166] pcmda12 [ 295.123525][ T8166] comedi: valid board names for pcmad driver are: [ 295.123533][ T8166] pcmad12 [ 295.123538][ T8166] pcmad16 [ 295.123544][ T8166] comedi: valid board names for ni_labpc driver are: [ 295.123552][ T8166] lab-pc-1200 [ 295.123558][ T8166] lab-pc-1200ai [ 295.123564][ T8166] lab-pc+ [ 295.123570][ T8166] comedi: valid board names for atmio16 driver are: [ 295.123578][ T8166] atmio16 [ 295.123583][ T8166] atmio16d [ 295.123589][ T8166] comedi: valid board names for ni_at_ao driver are: [ 295.123597][ T8166] at-ao-6 [ 295.123603][ T8166] at-ao-10 [ 295.123609][ T8166] comedi: valid board names for ni_at_a2150 driver are: [ 295.123617][ T8166] ni_at_a2150 [ 295.123623][ T8166] comedi: valid board names for adq12b driver are: [ 295.123630][ T8166] adq12b [ 295.123636][ T8166] comedi: valid board names for mpc624 driver are: [ 295.123644][ T8166] mpc624 [ 295.123650][ T8166] comedi: valid board names for c6xdigio driver are: [ 295.123658][ T8166] c6xdigio [ 295.123664][ T8166] comedi: valid board names for aio_iiro_16 driver are: [ 295.123672][ T8166] aio_iiro_16 [ 295.123677][ T8166] comedi: valid board names for aio_aio12_8 driver are: [ 295.123686][ T8166] aio_aio12_8 [ 295.123692][ T8166] aio_ai12_8 [ 295.123698][ T8166] aio_ao12_4 [ 295.123703][ T8166] comedi: valid board names for fl512 driver are: [ 295.123711][ T8166] fl512 [ 295.123717][ T8166] comedi: valid board names for dmm32at driver are: [ 295.123733][ T8166] dmm32at [ 295.123738][ T8166] comedi: valid board names for dt282x driver are: [ 295.123747][ T8166] dt2821 [ 295.123752][ T8166] dt2821-f [ 295.123759][ T8166] dt2821-g [ 295.123765][ T8166] dt2823 [ 295.123770][ T8166] dt2824-pgh [ 295.123776][ T8166] dt2824-pgl [ 295.123782][ T8166] dt2825 [ 295.123789][ T8166] dt2827 [ 295.123794][ T8166] dt2828 [ 295.123801][ T8166] dt2829 [ 295.123806][ T8166] dt21-ez [ 295.123812][ T8166] dt23-ez [ 295.123819][ T8166] dt24-ez [ 295.123824][ T8166] dt24-ez-pgl [ 295.123830][ T8166] comedi: valid board names for dt2817 driver are: [ 295.123838][ T8166] dt2817 [ 295.123845][ T8166] comedi: valid board names for dt2815 driver are: [ 295.123852][ T8166] dt2815 [ 295.123858][ T8166] comedi: valid board names for dt2814 driver are: [ 295.123866][ T8166] dt2814 [ 295.123872][ T8166] comedi: valid board names for dt2811 driver are: [ 295.123880][ T8166] dt2811-pgh [ 295.123886][ T8166] dt2811-pgl [ 295.123893][ T8166] comedi: valid board names for dt2801 driver are: [ 295.123901][ T8166] dt2801 [ 295.123907][ T8166] comedi: valid board names for das6402 driver are: [ 295.123915][ T8166] das6402-12 [ 295.123922][ T8166] das6402-16 [ 295.123928][ T8166] comedi: valid board names for das1800 driver are: [ 295.123936][ T8166] das-1701st [ 295.123942][ T8166] das-1701st-da [ 295.123948][ T8166] das-1702st [ 295.123954][ T8166] das-1702st-da [ 295.123959][ T8166] das-1702hr [ 295.123966][ T8166] das-1702hr-da [ 295.123971][ T8166] das-1701ao [ 295.123976][ T8166] das-1702ao [ 295.123982][ T8166] das-1801st [ 295.130386][ T8166] das-1801st-da [ 295.130398][ T8166] das-1802st [ 295.130404][ T8166] das-1802st-da [ 295.130411][ T8166] das-1802hr [ 295.130417][ T8166] das-1802hr-da [ 295.130423][ T8166] das-1801hc [ 295.130429][ T8166] das-1802hc [ 295.130436][ T8166] das-1801ao [ 295.130441][ T8166] das-1802ao [ 295.130449][ T8166] comedi: valid board names for das800 driver are: [ 295.130458][ T8166] das-800 [ 295.130464][ T8166] cio-das800 [ 295.130470][ T8166] das-801 [ 295.130476][ T8166] cio-das801 [ 295.130483][ T8166] das-802 [ 295.130488][ T8166] cio-das802 [ 295.130494][ T8166] cio-das802/16 [ 295.130500][ T8166] comedi: valid board names for isa-das08 driver are: [ 295.130509][ T8166] isa-das08 [ 295.130515][ T8166] das08-pgm [ 295.130521][ T8166] das08-pgh [ 295.130526][ T8166] das08-pgl [ 295.130532][ T8166] das08-aoh [ 295.130538][ T8166] das08-aol [ 295.130543][ T8166] das08-aom [ 295.130549][ T8166] das08/jr-ao [ 295.130555][ T8166] das08jr-16-ao [ 295.130562][ T8166] pc104-das08 [ 295.130568][ T8166] das08jr/16 [ 295.130574][ T8166] comedi: valid board names for das16m1 driver are: [ 295.130582][ T8166] das16m1 [ 295.130589][ T8166] comedi: valid board names for dac02 driver are: [ 295.130597][ T8166] dac02 [ 295.130604][ T8166] comedi: valid board names for rti802 driver are: [ 295.130612][ T8166] rti802 [ 295.130617][ T8166] comedi: valid board names for rti800 driver are: [ 295.130625][ T8166] rti800 [ 295.130631][ T8166] rti815 [ 295.130637][ T8166] comedi: valid board names for pcm3724 driver are: [ 295.130645][ T8166] pcm3724 [ 295.130650][ T8166] comedi: valid board names for pcl818 driver are: [ 295.130658][ T8166] pcl818l [ 295.130664][ T8166] pcl818h [ 295.130670][ T8166] pcl818hd [ 295.130676][ T8166] pcl818hg [ 295.130682][ T8166] pcl818 [ 295.130687][ T8166] pcl718 [ 295.130693][ T8166] pcm3718 [ 295.130699][ T8166] comedi: valid board names for pcl816 driver are: [ 295.130707][ T8166] pcl816 [ 295.130713][ T8166] pcl814b [ 295.130719][ T8166] comedi: valid board names for pcl812 driver are: [ 295.130735][ T8166] pcl812 [ 295.130741][ T8166] pcl812pg [ 295.130747][ T8166] acl8112pg [ 295.130753][ T8166] acl8112dg [ 295.130759][ T8166] acl8112hg [ 295.130765][ T8166] a821pgl [ 295.130771][ T8166] a821pglnda [ 295.130777][ T8166] a821pgh [ 295.130784][ T8166] a822pgl [ 295.130790][ T8166] a822pgh [ 295.130796][ T8166] a823pgl [ 295.130801][ T8166] a823pgh [ 295.130808][ T8166] pcl813 [ 295.130814][ T8166] pcl813b [ 295.130820][ T8166] acl8113 [ 295.130826][ T8166] iso813 [ 295.130832][ T8166] acl8216 [ 295.130838][ T8166] a826pg [ 295.130844][ T8166] comedi: valid board names for pcl730 driver are: [ 295.130853][ T8166] pcl730 [ 295.130859][ T8166] iso730 [ 295.130865][ T8166] acl7130 [ 295.130871][ T8166] pcm3730 [ 295.130877][ T8166] pcl725 [ 295.130882][ T8166] p8r8dio [ 295.130887][ T8166] acl7225b [ 295.130891][ T8166] p16r16dio [ 295.130896][ T8166] pcl733 [ 295.130900][ T8166] pcl734 [ 295.130906][ T8166] opmm-1616-xt [ 295.130913][ T8166] pearl-mm-p [ 295.130919][ T8166] ir104-pbf [ 295.130924][ T8166] comedi: valid board names for pcl726 driver are: [ 295.130932][ T8166] pcl726 [ 295.130938][ T8166] pcl727 [ 295.130944][ T8166] pcl728 [ 295.130949][ T8166] acl6126 [ 295.130955][ T8166] acl6128 [ 295.130961][ T8166] comedi: valid board names for pcl724 driver are: [ 295.130970][ T8166] pcl724 [ 295.130975][ T8166] pcl722 [ 295.130980][ T8166] pcl731 [ 295.130986][ T8166] acl7122 [ 295.130991][ T8166] acl7124 [ 295.130997][ T8166] pet48dio [ 295.131003][ T8166] pcmio48 [ 295.131009][ T8166] onyx-mm-dio [ 295.131015][ T8166] comedi: valid board names for pcl711 driver are: [ 295.131023][ T8166] pcl711 [ 295.131029][ T8166] pcl711b [ 295.131035][ T8166] acl8112hg [ 295.131040][ T8166] acl8112dg [ 295.131046][ T8166] comedi: valid board names for amplc_pc263 driver are: [ 295.131055][ T8166] pc263 [ 295.131061][ T8166] comedi: valid board names for amplc_pc236 driver are: [ 295.131070][ T8166] pc36at [ 295.131075][ T8166] comedi: valid board names for amplc_dio200 driver are: [ 295.131084][ T8166] pc212e [ 295.131090][ T8166] pc214e [ 295.131096][ T8166] pc215e [ 295.131102][ T8166] pc218e [ 295.131108][ T8166] pc272e [ 295.131114][ T8166] comedi: valid board names for comedi_parport driver are: [ 295.131122][ T8166] comedi_parport [ 295.131128][ T8166] comedi: valid board names for comedi_test driver are: [ 295.131137][ T8166] comedi_test [ 295.131143][ T8166] comedi: valid board names for comedi_bond driver are: [ 295.131151][ T8166] comedi_bond [ 296.289725][ T7305] usb 5-1: USB disconnect, device number 13 [ 296.876415][ T5117] Bluetooth: hci2: command 0x0c1a tx timeout [ 296.876454][ T5117] Bluetooth: hci1: command 0x0c1a tx timeout [ 296.876504][ T5804] Bluetooth: hci4: command 0x0405 tx timeout [ 296.979327][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.004809][ T5844] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 297.275450][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 297.577326][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.577357][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.577378][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 297.577418][ T5844] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 297.577438][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.656012][ T5844] usb 3-1: config 0 descriptor?? [ 297.859233][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 298.009739][ T8196] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 298.097459][ T5844] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 298.097495][ T5844] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 298.151915][ T5844] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 298.151949][ T5844] microsoft 0003:045E:07DA.0003: no inputs found [ 298.151961][ T5844] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 298.220314][ T8194] macvlan2: entered promiscuous mode [ 298.220382][ T8194] macvlan2: entered allmulticast mode [ 298.225099][ T8194] bond1: entered promiscuous mode [ 298.225122][ T8194] bridge2: entered promiscuous mode [ 298.230591][ T8194] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.310878][ T8194] bond1: left promiscuous mode [ 298.310902][ T8194] bridge2: left promiscuous mode [ 298.454011][ T8202] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 298.742482][ T8201] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 298.742508][ T8201] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 298.742600][ T8201] vhci_hcd vhci_hcd.0: Device attached [ 298.743594][ T8207] usbip_core: unknown command [ 298.743605][ T8207] vhci_hcd: unknown pdu 131072 [ 298.743615][ T8207] usbip_core: unknown command [ 298.744105][ T5973] vhci_hcd: stop threads [ 298.744114][ T5973] vhci_hcd: release socket [ 298.744145][ T5973] vhci_hcd: disconnect device [ 298.869315][ T5884] usb 3-1: USB disconnect, device number 13 [ 299.319388][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.859501][ T8201] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 299.859752][ T8201] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.859956][ T8201] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 299.860137][ T8201] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 300.211594][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.874810][ T5884] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 300.944642][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 301.024754][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 301.030490][ T5884] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 301.030517][ T5884] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 301.030535][ T5884] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 301.030554][ T5884] usb 4-1: config 250 has no interface number 0 [ 301.030601][ T5884] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 301.030625][ T5884] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 301.030647][ T5884] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 301.030667][ T5884] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 301.030688][ T5884] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 301.030713][ T5884] usb 4-1: config 250 interface 228 has no altsetting 0 [ 301.033060][ T5884] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 301.033086][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 301.033105][ T5884] usb 4-1: Product: syz [ 301.033117][ T5884] usb 4-1: SerialNumber: syz [ 301.078707][ T5884] hub 4-1:250.228: bad descriptor, ignoring hub [ 301.078745][ T5884] hub 4-1:250.228: probe with driver hub failed with error -5 [ 301.331632][ T5884] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 301.995426][ T5809] Bluetooth: hci4: command 0x0405 tx timeout [ 302.064760][ T5809] Bluetooth: hci1: command 0x0c1a tx timeout [ 302.064799][ T5809] Bluetooth: hci2: command 0x0c1a tx timeout [ 302.632536][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 302.632554][ T37] audit: type=1326 audit(1761408240.975:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8238 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af711efc9 code=0x7ffc0000 [ 302.633295][ T37] audit: type=1326 audit(1761408240.975:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8238 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af711efc9 code=0x7ffc0000 [ 302.634002][ T37] audit: type=1326 audit(1761408240.975:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8238 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f4af711efc9 code=0x7ffc0000 [ 302.634281][ T37] audit: type=1326 audit(1761408240.975:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8238 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af711efc9 code=0x7ffc0000 [ 302.635076][ T37] audit: type=1326 audit(1761408240.985:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8238 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4af711efc9 code=0x7ffc0000 [ 302.635456][ T37] audit: type=1326 audit(1761408240.985:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8238 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af711efc9 code=0x7ffc0000 [ 302.636103][ T37] audit: type=1326 audit(1761408240.985:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8238 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af711efc9 code=0x7ffc0000 [ 302.636494][ T37] audit: type=1326 audit(1761408240.985:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8238 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4af711efc9 code=0x7ffc0000 [ 302.636783][ T37] audit: type=1326 audit(1761408240.985:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8238 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af711efc9 code=0x7ffc0000 [ 302.637298][ T37] audit: type=1326 audit(1761408240.985:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8238 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af711efc9 code=0x7ffc0000 [ 303.050076][ T8271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.747'. [ 303.185372][ T8266] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 303.185398][ T8266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 303.185489][ T8266] vhci_hcd vhci_hcd.0: Device attached [ 303.443790][ T5844] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 303.796644][ T8292] fuse: Bad value for 'fd' [ 303.814114][ T7305] usb 4-1: USB disconnect, device number 16 [ 303.825360][ T8272] vhci_hcd: connection reset by peer [ 303.833674][ T59] vhci_hcd: stop threads [ 303.833695][ T59] vhci_hcd: release socket [ 303.833769][ T59] vhci_hcd: disconnect device [ 303.870843][ T7305] usblp0: removed [ 304.376583][ T8275] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.376830][ T8275] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.381246][ T8275] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.382080][ T8275] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 305.408457][ T8302] netlink: 72 bytes leftover after parsing attributes in process `syz.4.758'. [ 305.666168][ T5809] Bluetooth: hci0: command 0x0c1a tx timeout [ 306.464792][ T5804] Bluetooth: hci2: command 0x0c1a tx timeout [ 306.464833][ T5804] Bluetooth: hci1: command 0x0c1a tx timeout [ 306.464893][ T5809] Bluetooth: hci4: command 0x0405 tx timeout [ 306.563107][ T8317] input: syz0 as /devices/virtual/input/input6 [ 308.930646][ T5844] vhci_hcd: vhci_device speed not set [ 310.226195][ T8347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.771'. [ 310.541714][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.369031][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.772332][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.143898][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.978759][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.994679][ T5871] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 313.120206][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.206206][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.216912][ T5871] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 313.222836][ T5871] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 313.222865][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.222882][ T5871] usb 4-1: Product: syz [ 313.222894][ T5871] usb 4-1: Manufacturer: syz [ 313.222906][ T5871] usb 4-1: SerialNumber: syz [ 313.236240][ T5871] usb 4-1: config 0 descriptor?? [ 313.438526][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 313.451884][ T5871] usb 4-1: USB disconnect, device number 17 [ 313.570405][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.776791][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.996835][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.047166][ T8394] veth0_macvtap: left promiscuous mode [ 314.664687][ T5871] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 314.668269][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.523442][ T5871] usb 4-1: not running at top speed; connect to a high speed hub [ 315.526438][ T5871] usb 4-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.526468][ T5871] usb 4-1: config 1 interface 0 has no altsetting 0 [ 315.535780][ T5871] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 315.535807][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.535824][ T5871] usb 4-1: Product: 䀊 [ 315.535837][ T5871] usb 4-1: Manufacturer: ⹎㢴ꕽ㬳鎓꺢릟鬳⠏鄢逧ጧ烵׷Ნ猠㚧馼杜䣞粛㰊ﹹ嚹䰶䯭撂ꡣZ랑愩Ҥ鍸鐘ਝ攝嫈嫇폨ꃸ쵨䎢殷䓁眎友沢鮦玣ߥ꫘⪴箿 [ 315.535856][ T5871] usb 4-1: SerialNumber: 슅啊ﰒŅ㋉퇊㋫᛭㓎鵿헯뺺鍋⅘ďꇧ쯃颂跽￉鷷䫍囀覴滕廇鱣䞈᧌ⵑ嚾둕Ẏ道࠽ൎꝀ䕆䳶筌넦쑂鞄騇縤췀쒡克㏢閩矓圀嵯痺ꇁ꛲쉭麀룔⺶郼諀짬섣̢ྡ䱒隷㑡鍉퉒哑᳁偠䖋⹜⃜㊭蚩繈ﴫ롸켁牀齮Ს랚㑂擝檺淼踁噗ꮁ뇋 [ 315.845482][ T5871] usb 4-1: USB disconnect, device number 18 [ 315.905175][ T49] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 316.054662][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 316.060798][ T49] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 316.060824][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.060837][ T49] usb 1-1: Product: syz [ 316.060844][ T49] usb 1-1: Manufacturer: syz [ 316.060851][ T49] usb 1-1: SerialNumber: syz [ 316.094741][ T49] usb 1-1: config 0 descriptor?? [ 316.204669][ T5885] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 316.274866][ T7305] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 316.354693][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 316.358143][ T5885] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 316.358167][ T5885] usb 3-1: config 0 has no interface number 0 [ 316.360758][ T5885] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 316.360783][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.360800][ T5885] usb 3-1: Product: syz [ 316.360813][ T5885] usb 3-1: Manufacturer: syz [ 316.360825][ T5885] usb 3-1: SerialNumber: syz [ 316.382337][ T5885] usb 3-1: config 0 descriptor?? [ 316.389707][ T5885] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 316.707565][ T49] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 317.045284][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 317.139006][ T7305] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 317.139070][ T7305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.139126][ T7305] usb 2-1: Product: syz [ 317.139181][ T7305] usb 2-1: Manufacturer: syz [ 317.139195][ T7305] usb 2-1: SerialNumber: syz [ 317.346380][ T5885] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 317.347305][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.360171][ T49] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 317.360230][ T49] usb 1-1: media controller created [ 317.368651][ T5885] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 317.371719][ T7305] usb 2-1: config 0 descriptor?? [ 317.383153][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.383225][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.383730][ T5885] usb 3-1: USB disconnect, device number 14 [ 317.404677][ T5885] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 317.426177][ T5885] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 317.427168][ T5885] quatech2 3-1:0.51: device disconnected [ 317.430877][ T8440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.431368][ T8440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.678936][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.761137][ T49] zl10353_read_register: readreg error (reg=127, ret==0) [ 317.761201][ T49] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 317.761230][ T49] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 317.764491][ T49] usb 1-1: USB disconnect, device number 16 [ 317.813039][ T7305] usb 2-1: USB disconnect, device number 15 [ 317.965172][ T49] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 318.148224][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.411361][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.809'. [ 318.446609][ T8466] FAULT_INJECTION: forcing a failure. [ 318.446609][ T8466] name failslab, interval 1, probability 0, space 0, times 0 [ 318.446632][ T8466] CPU: 1 UID: 0 PID: 8466 Comm: syz.1.810 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 318.446650][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 318.446668][ T8466] Call Trace: [ 318.446676][ T8466] [ 318.446684][ T8466] dump_stack_lvl+0x189/0x250 [ 318.446712][ T8466] ? __pfx____ratelimit+0x10/0x10 [ 318.446732][ T8466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.446746][ T8466] ? __pfx__printk+0x10/0x10 [ 318.446760][ T8466] ? __pfx___might_resched+0x10/0x10 [ 318.446771][ T8466] ? fs_reclaim_acquire+0x7d/0x100 [ 318.446795][ T8466] should_fail_ex+0x46c/0x600 [ 318.446811][ T8466] should_failslab+0xa8/0x100 [ 318.446825][ T8466] __kmalloc_noprof+0xcc/0x7d0 [ 318.446838][ T8466] ? sock_kmalloc+0xd6/0x160 [ 318.446852][ T8466] sock_kmalloc+0xd6/0x160 [ 318.446864][ T8466] skcipher_recvmsg+0x571/0x11d0 [ 318.446887][ T8466] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 318.446901][ T8466] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 318.446914][ T8466] ? security_socket_recvmsg+0x7e/0x2e0 [ 318.446928][ T8466] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 318.446940][ T8466] sock_recvmsg+0x22c/0x270 [ 318.446956][ T8466] ____sys_recvmsg+0x1ce/0x470 [ 318.446972][ T8466] ? __pfx_____sys_recvmsg+0x10/0x10 [ 318.446991][ T8466] ? import_iovec+0x74/0xa0 [ 318.447004][ T8466] ___sys_recvmsg+0x1b5/0x510 [ 318.447018][ T8466] ? __pfx____sys_recvmsg+0x10/0x10 [ 318.447042][ T8466] ? __fget_files+0x3a6/0x420 [ 318.447060][ T8466] do_recvmmsg+0x30d/0x770 [ 318.447076][ T8466] ? __pfx_do_recvmmsg+0x10/0x10 [ 318.447085][ T8466] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 318.447097][ T8466] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 318.447115][ T8466] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 318.447134][ T8466] __x64_sys_recvmmsg+0x190/0x240 [ 318.447146][ T8466] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 318.447160][ T8466] ? do_syscall_64+0xbe/0xfa0 [ 318.447173][ T8466] do_syscall_64+0xfa/0xfa0 [ 318.447183][ T8466] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.447195][ T8466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.447204][ T8466] ? clear_bhb_loop+0x60/0xb0 [ 318.447216][ T8466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.447226][ T8466] RIP: 0033:0x7fe859f0efc9 [ 318.447236][ T8466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.447244][ T8466] RSP: 002b:00007fe858176038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 318.447256][ T8466] RAX: ffffffffffffffda RBX: 00007fe85a165fa0 RCX: 00007fe859f0efc9 [ 318.447263][ T8466] RDX: 0000000000000001 RSI: 0000200000003900 RDI: 0000000000000004 [ 318.447269][ T8466] RBP: 00007fe858176090 R08: 0000000000000000 R09: 0000000000000000 [ 318.447275][ T8466] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 318.447281][ T8466] R13: 00007fe85a166038 R14: 00007fe85a165fa0 R15: 00007ffc03cd40e8 [ 318.447298][ T8466] [ 319.293736][ T8481] netlink: 'syz.1.812': attribute type 2 has an invalid length. [ 319.306317][ T8481] [U]  [ 319.306363][ T8481] [U] K{ [ 319.306869][ T8481] [U] T 1ŠFFˊ`GJǘGO/MC [ 319.309376][ T8481] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 319.309946][ T8481] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 319.312049][ T8481] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 319.314916][ T8481] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 319.315428][ T8481] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 319.315974][ T8481] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 319.317180][ T8481] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 319.321830][ T8481] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 319.322505][ T8481] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 319.322605][ T8481] [U] 22Ʃ۩X?0;3U [ 319.323977][ T8481] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 319.324621][ T8481] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 319.325242][ T8481] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 319.325476][ T8481] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 319.326076][ T8481] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 319.326106][ T8481] [U] EC [ 319.326699][ T8481] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 320.683364][ T8482] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 322.073592][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 322.314802][ T1660] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 323.533265][ T1660] usb 3-1: Using ep0 maxpacket: 8 [ 323.655287][ T5884] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 323.758647][ T1660] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 323.758710][ T1660] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.758730][ T1660] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.758751][ T1660] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.758771][ T1660] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.758811][ T1660] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 323.758830][ T1660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.223613][ T5884] usb 1-1: device descriptor read/64, error -71 [ 325.134695][ T5884] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 325.317894][ T1660] usb 3-1: can't set config #16, error -71 [ 325.328140][ T1660] usb 3-1: USB disconnect, device number 15 [ 325.364778][ T5884] usb 1-1: device descriptor read/64, error -71 [ 325.485131][ T5884] usb usb1-port1: attempt power cycle [ 325.548940][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 325.664050][ T8545] FAULT_INJECTION: forcing a failure. [ 325.664050][ T8545] name failslab, interval 1, probability 0, space 0, times 0 [ 325.664082][ T8545] CPU: 1 UID: 0 PID: 8545 Comm: syz.3.839 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 325.664102][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.664112][ T8545] Call Trace: [ 325.664120][ T8545] [ 325.664128][ T8545] dump_stack_lvl+0x189/0x250 [ 325.664156][ T8545] ? __pfx____ratelimit+0x10/0x10 [ 325.664177][ T8545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.664201][ T8545] ? __pfx__printk+0x10/0x10 [ 325.664228][ T8545] ? __pfx___might_resched+0x10/0x10 [ 325.664245][ T8545] ? fs_reclaim_acquire+0x7d/0x100 [ 325.664272][ T8545] should_fail_ex+0x46c/0x600 [ 325.664300][ T8545] should_failslab+0xa8/0x100 [ 325.664325][ T8545] __kmalloc_noprof+0xcc/0x7d0 [ 325.664347][ T8545] ? tomoyo_encode+0x28b/0x550 [ 325.664372][ T8545] tomoyo_encode+0x28b/0x550 [ 325.664397][ T8545] tomoyo_realpath_from_path+0x58d/0x5d0 [ 325.664428][ T8545] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 325.664453][ T8545] tomoyo_path_number_perm+0x1e8/0x5a0 [ 325.664480][ T8545] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 325.664511][ T8545] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 325.664529][ T8545] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.664578][ T8545] ? __fget_files+0x2a/0x420 [ 325.664605][ T8545] ? __fget_files+0x3a6/0x420 [ 325.664632][ T8545] ? __fget_files+0x2a/0x420 [ 325.664658][ T8545] security_file_ioctl+0xcb/0x2d0 [ 325.664678][ T8545] __se_sys_ioctl+0x47/0x170 [ 325.664700][ T8545] do_syscall_64+0xfa/0xfa0 [ 325.664720][ T8545] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.664740][ T8545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.664757][ T8545] ? clear_bhb_loop+0x60/0xb0 [ 325.664778][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.664795][ T8545] RIP: 0033:0x7f4af711efc9 [ 325.664811][ T8545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.664827][ T8545] RSP: 002b:00007f4af537e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.664851][ T8545] RAX: ffffffffffffffda RBX: 00007f4af7375fa0 RCX: 00007f4af711efc9 [ 325.664864][ T8545] RDX: 0000200000001900 RSI: 000000000000541c RDI: 0000000000000004 [ 325.664876][ T8545] RBP: 00007f4af537e090 R08: 0000000000000000 R09: 0000000000000000 [ 325.664887][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.664898][ T8545] R13: 00007f4af7376038 R14: 00007f4af7375fa0 R15: 00007ffee2efd878 [ 325.664930][ T8545] [ 325.865335][ T8545] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.893983][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.523181][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 327.110829][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.121392][ T8577] FAULT_INJECTION: forcing a failure. [ 327.121392][ T8577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.121424][ T8577] CPU: 1 UID: 0 PID: 8577 Comm: syz.0.849 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 327.121443][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 327.121453][ T8577] Call Trace: [ 327.121459][ T8577] [ 327.121467][ T8577] dump_stack_lvl+0x189/0x250 [ 327.121495][ T8577] ? __pfx____ratelimit+0x10/0x10 [ 327.121515][ T8577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.121538][ T8577] ? __pfx__printk+0x10/0x10 [ 327.121557][ T8577] ? __might_fault+0xb0/0x130 [ 327.121588][ T8577] should_fail_ex+0x46c/0x600 [ 327.121615][ T8577] _copy_from_user+0x2d/0xb0 [ 327.121634][ T8577] snd_rawmidi_ioctl+0x298/0xb30 [ 327.121654][ T8577] ? smack_file_ioctl+0x2ac/0x340 [ 327.121685][ T8577] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 327.121703][ T8577] ? __pfx_smack_file_ioctl+0x10/0x10 [ 327.121736][ T8577] ? ksys_write+0x1e7/0x260 [ 327.121762][ T8577] ? bpf_lsm_file_ioctl+0x9/0x20 [ 327.121777][ T8577] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 327.121795][ T8577] __se_sys_ioctl+0xff/0x170 [ 327.121814][ T8577] do_syscall_64+0xfa/0xfa0 [ 327.121833][ T8577] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.121852][ T8577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.121868][ T8577] ? clear_bhb_loop+0x60/0xb0 [ 327.121892][ T8577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.121908][ T8577] RIP: 0033:0x7f425347efc9 [ 327.121928][ T8577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.121943][ T8577] RSP: 002b:00007f42516e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.121961][ T8577] RAX: ffffffffffffffda RBX: 00007f42536d5fa0 RCX: 00007f425347efc9 [ 327.121974][ T8577] RDX: 0000000000000000 RSI: 00000000c0305710 RDI: 0000000000000003 [ 327.121985][ T8577] RBP: 00007f42516e6090 R08: 0000000000000000 R09: 0000000000000000 [ 327.121995][ T8577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.122006][ T8577] R13: 00007f42536d6038 R14: 00007f42536d5fa0 R15: 00007fffded2f6b8 [ 327.122036][ T8577] [ 327.966873][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.066281][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.066399][ T49] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 328.216981][ T49] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 328.217010][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.242947][ T49] usb 2-1: config 0 descriptor?? [ 328.446759][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 328.700527][ T49] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 328.905382][ T49] [drm:udl_init] *ERROR* Selecting channel failed [ 328.988113][ T49] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 328.988139][ T49] [drm] Initialized udl on minor 2 [ 329.007435][ T49] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 329.007829][ T49] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 329.013594][ T7305] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 329.037841][ T7305] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 329.038006][ T7305] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 329.976256][ T49] usb 2-1: USB disconnect, device number 16 [ 330.573888][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 330.584689][ T5884] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 331.007120][ T5884] usb 4-1: config 0 has an invalid interface number: 72 but max is 0 [ 331.007138][ T5884] usb 4-1: config 0 has no interface number 0 [ 331.391154][ T5884] usb 4-1: New USB device found, idVendor=ce9e, idProduct=d4fc, bcdDevice=7c.43 [ 331.391183][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.391202][ T5884] usb 4-1: Product: syz [ 331.391215][ T5884] usb 4-1: Manufacturer: syz [ 331.391227][ T5884] usb 4-1: SerialNumber: syz [ 331.416846][ T5884] usb 4-1: config 0 descriptor?? [ 331.482973][ T5884] usb 4-1: bad CDC descriptors [ 331.796861][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.871'. [ 331.796884][ T8641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.871'. [ 332.962171][ T49] usb 4-1: USB disconnect, device number 19 [ 333.164747][ T5884] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 333.317046][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 333.319064][ T5884] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 333.319089][ T5884] usb 2-1: config 0 has no interface number 0 [ 333.321940][ T5884] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 333.321957][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.321967][ T5884] usb 2-1: Product: syz [ 333.321974][ T5884] usb 2-1: Manufacturer: syz [ 333.321981][ T5884] usb 2-1: SerialNumber: syz [ 333.356565][ T5884] usb 2-1: config 0 descriptor?? [ 333.374667][ T5967] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 333.375966][ T5884] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 333.528678][ T5967] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 333.528697][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.533847][ T5967] usb 1-1: config 0 descriptor?? [ 333.763377][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 333.907145][ T5884] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 333.956438][ T5884] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 333.968436][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 334.003982][ T5967] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 334.018667][ T5884] usb 2-1: USB disconnect, device number 17 [ 334.099781][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 334.737578][ T5967] [drm:udl_init] *ERROR* Selecting channel failed [ 334.785549][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 334.786338][ T5884] quatech2 2-1:0.51: device disconnected [ 334.930295][ T5967] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 334.930321][ T5967] [drm] Initialized udl on minor 2 [ 334.955194][ T5967] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 334.955531][ T5967] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 334.967870][ T5967] usb 1-1: USB disconnect, device number 20 [ 334.968047][ T5885] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 334.968558][ T5885] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 334.968716][ T5885] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 335.783508][ T5884] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 336.323637][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 336.362789][ T5884] usb 3-1: not running at top speed; connect to a high speed hub [ 336.365149][ T5884] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.365179][ T5884] usb 3-1: config 1 interface 0 has no altsetting 0 [ 336.369848][ T5884] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 336.369872][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.369890][ T5884] usb 3-1: Product: 䀊 [ 336.369902][ T5884] usb 3-1: Manufacturer: ⹎㢴ꕽ㬳鎓꺢릟鬳⠏鄢逧ጧ烵׷Ნ猠㚧馼杜䣞粛㰊ﹹ嚹䰶䯭撂ꡣZ랑愩Ҥ鍸鐘ਝ攝嫈嫇폨ꃸ쵨䎢殷䓁眎友沢鮦玣ߥ꫘⪴箿 [ 336.369923][ T5884] usb 3-1: SerialNumber: 슅啊ﰒŅ㋉퇊㋫᛭㓎鵿헯뺺鍋⅘ďꇧ쯃颂跽￉鷷䫍囀覴滕廇鱣䞈᧌ⵑ嚾둕Ẏ道࠽ൎꝀ䕆䳶筌넦쑂鞄騇縤췀쒡克㏢閩矓圀嵯痺ꇁ꛲쉭麀룔⺶郼諀짬섣̢ྡ䱒隷㑡鍉퉒哑᳁偠䖋⹜⃜㊭蚩繈ﴫ롸켁牀齮Ს랚㑂擝檺淼踁噗ꮁ뇋 [ 336.642551][ T8678] veth0_macvtap: left promiscuous mode [ 336.767894][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.428051][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.507847][ T5884] usb 3-1: USB disconnect, device number 16 [ 338.102151][ T8694] binder: 8693:8694 ioctl c0306201 0 returned -14 [ 338.597398][ T49] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 338.734692][ T49] usb 2-1: device descriptor read/64, error -71 [ 338.874836][ T10] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 339.435168][ T8706] comedi comedi1: pcl730: I/O port conflict (0xffffffff80000000,4) [ 340.252137][ T10] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 340.252167][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 340.261565][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 340.261593][ T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 340.261611][ T10] usb 1-1: Product: syz [ 340.261623][ T10] usb 1-1: Manufacturer: syz [ 340.261636][ T10] usb 1-1: SerialNumber: syz [ 340.278230][ T10] usb 1-1: config 0 descriptor?? [ 340.357820][ T10] usb 1-1: selecting invalid altsetting 0 [ 340.364784][ T49] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 340.492006][ T8703] FAULT_INJECTION: forcing a failure. [ 340.492006][ T8703] name failslab, interval 1, probability 0, space 0, times 0 [ 340.492027][ T8703] CPU: 0 UID: 0 PID: 8703 Comm: syz.0.893 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 340.492039][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 340.492046][ T8703] Call Trace: [ 340.492050][ T8703] [ 340.492054][ T8703] dump_stack_lvl+0x189/0x250 [ 340.492078][ T8703] ? __pfx____ratelimit+0x10/0x10 [ 340.492091][ T8703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.492104][ T8703] ? __pfx__printk+0x10/0x10 [ 340.492118][ T8703] ? __pfx___might_resched+0x10/0x10 [ 340.492129][ T8703] ? fs_reclaim_acquire+0x7d/0x100 [ 340.492145][ T8703] should_fail_ex+0x46c/0x600 [ 340.492160][ T8703] ? alloc_empty_file+0x55/0x1d0 [ 340.492169][ T8703] should_failslab+0xa8/0x100 [ 340.492184][ T8703] ? alloc_empty_file+0x55/0x1d0 [ 340.492191][ T8703] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 340.492207][ T8703] alloc_empty_file+0x55/0x1d0 [ 340.492217][ T8703] path_openat+0x10d/0x3840 [ 340.492231][ T8703] ? try_to_take_rt_mutex+0x840/0xb00 [ 340.492248][ T8703] ? rtlock_slowlock_locked+0xd8/0x4010 [ 340.492264][ T8703] ? __pfx_path_openat+0x10/0x10 [ 340.492275][ T8703] ? do_raw_spin_lock+0x121/0x290 [ 340.492290][ T8703] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 340.492302][ T8703] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.492315][ T8703] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 340.492329][ T8703] do_filp_open+0x1fa/0x410 [ 340.492341][ T8703] ? __pfx_do_filp_open+0x10/0x10 [ 340.492350][ T8703] ? rt_mutex_slowunlock+0x493/0x8a0 [ 340.492371][ T8703] ? alloc_fd+0x64f/0x6c0 [ 340.492390][ T8703] do_sys_openat2+0x121/0x1c0 [ 340.492401][ T8703] ? __pfx_do_sys_openat2+0x10/0x10 [ 340.492412][ T8703] ? ksys_write+0x230/0x260 [ 340.492424][ T8703] ? __pfx_ksys_write+0x10/0x10 [ 340.492437][ T8703] __x64_sys_openat+0x138/0x170 [ 340.492449][ T8703] do_syscall_64+0xfa/0xfa0 [ 340.492459][ T8703] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.492476][ T8703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.492486][ T8703] ? clear_bhb_loop+0x60/0xb0 [ 340.492497][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.492506][ T8703] RIP: 0033:0x7f425347d810 [ 340.492516][ T8703] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 340.492524][ T8703] RSP: 002b:00007f42516e5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 340.492536][ T8703] RAX: ffffffffffffffda RBX: 00000000008c4201 RCX: 00007f425347d810 [ 340.492543][ T8703] RDX: 00000000008c4201 RSI: 00007f42516e5c10 RDI: 00000000ffffff9c [ 340.492549][ T8703] RBP: 00007f42516e5c10 R08: 0000000000000000 R09: 00236f696475612f [ 340.492556][ T8703] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 340.492562][ T8703] R13: 00007f42536d6038 R14: 00007f42536d5fa0 R15: 00007fffded2f6b8 [ 340.492578][ T8703] [ 340.494648][ T49] usb 2-1: device descriptor read/64, error -71 [ 340.605046][ T49] usb usb2-port1: attempt power cycle [ 340.815619][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.958676][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.959571][ T49] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 341.762149][ T10] usb 1-1: USB disconnect, device number 21 [ 341.930004][ T49] usb 2-1: device descriptor read/8, error -71 [ 342.497229][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.465336][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.702065][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.407310][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.389879][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.533777][ T8778] tipc: Started in network mode [ 348.533809][ T8778] tipc: Node identity f20696f088d9, cluster identity 4711 [ 348.539195][ T8778] tipc: Enabled bearer , priority 0 [ 348.543176][ T8778] syzkaller0: entered promiscuous mode [ 348.543203][ T8778] syzkaller0: entered allmulticast mode [ 349.128281][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.342515][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.793552][ T5967] tipc: Node number set to 2061473520 [ 349.864303][ T8787] tipc: Resetting bearer [ 350.195659][ T8775] tipc: Resetting bearer [ 352.315600][ T8775] tipc: Disabling bearer [ 353.185897][ T8807] vlan0: entered promiscuous mode [ 353.195983][ T8807] team0: Port device vlan0 added [ 353.304691][ T5885] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 353.601692][ T5885] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 353.601721][ T5885] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 353.601739][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 353.601789][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 353.607865][ T5885] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 353.607893][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 353.607910][ T5885] usb 4-1: Product: syz [ 353.607923][ T5885] usb 4-1: Manufacturer: syz [ 353.632782][ T5885] cdc_wdm 4-1:1.0: skipping garbage [ 353.632801][ T5885] cdc_wdm 4-1:1.0: skipping garbage [ 353.647909][ T5885] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 353.647943][ T5885] cdc_wdm 4-1:1.0: Unknown control protocol [ 354.710143][ T5885] usb 4-1: USB disconnect, device number 20 [ 355.755082][ T5967] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 355.935263][ T5967] usb 3-1: device descriptor read/64, error -71 [ 356.264734][ T5967] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 356.394665][ T5967] usb 3-1: device descriptor read/64, error -71 [ 356.507191][ T5967] usb usb3-port1: attempt power cycle [ 357.269901][ T5871] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 357.457485][ T5871] usb 5-1: device descriptor read/64, error -71 [ 357.484682][ T5967] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 357.505529][ T5967] usb 3-1: device descriptor read/8, error -71 [ 357.704919][ T5871] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 357.744703][ T5967] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 357.771084][ T5967] usb 3-1: device descriptor read/8, error -71 [ 357.844797][ T5871] usb 5-1: device descriptor read/64, error -71 [ 357.875261][ T5967] usb usb3-port1: unable to enumerate USB device [ 357.875736][ T5967] ================================================================== [ 357.875748][ T5967] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 357.875773][ T5967] Read of size 8 at addr ffffc9000df0a008 by task kworker/0:8/5967 [ 357.875789][ T5967] [ 357.875797][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 357.875808][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.875816][ T5967] Workqueue: usb_hub_wq hub_event [ 357.875830][ T5967] Call Trace: [ 357.875834][ T5967] [ 357.875840][ T5967] dump_stack_lvl+0x189/0x250 [ 357.875856][ T5967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.875869][ T5967] ? __pfx__printk+0x10/0x10 [ 357.875880][ T5967] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 357.875893][ T5967] ? __virt_addr_valid+0xdc/0x5c0 [ 357.875907][ T5967] ? __virt_addr_valid+0xdc/0x5c0 [ 357.875919][ T5967] print_report+0xca/0x240 [ 357.875931][ T5967] ? __list_add_valid_or_report+0x4e/0x130 [ 357.875941][ T5967] kasan_report+0x118/0x150 [ 357.875955][ T5967] ? __list_add_valid_or_report+0x4e/0x130 [ 357.875967][ T5967] __list_add_valid_or_report+0x4e/0x130 [ 357.875979][ T5967] kcov_remote_stop+0x52d/0x660 [ 357.875992][ T5967] hub_event+0x45d2/0x4a20 [ 357.876013][ T5967] ? __pfx_hub_event+0x10/0x10 [ 357.876022][ T5967] ? process_scheduled_works+0x9ef/0x17b0 [ 357.876034][ T5967] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.876045][ T5967] ? process_scheduled_works+0x9ef/0x17b0 [ 357.876055][ T5967] ? process_scheduled_works+0x9ef/0x17b0 [ 357.876066][ T5967] process_scheduled_works+0xae1/0x17b0 [ 357.876082][ T5967] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.876096][ T5967] worker_thread+0x8a0/0xda0 [ 357.876108][ T5967] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 357.876121][ T5967] ? __kthread_parkme+0x7b/0x200 [ 357.876135][ T5967] kthread+0x711/0x8a0 [ 357.876148][ T5967] ? __pfx_worker_thread+0x10/0x10 [ 357.876158][ T5967] ? __pfx_kthread+0x10/0x10 [ 357.876169][ T5967] ? rt_spin_unlock+0x150/0x200 [ 357.876180][ T5967] ? rt_spin_unlock+0x161/0x200 [ 357.876188][ T5967] ? __pfx_kthread+0x10/0x10 [ 357.876200][ T5967] ret_from_fork+0x4bc/0x870 [ 357.876212][ T5967] ? __pfx_ret_from_fork+0x10/0x10 [ 357.876223][ T5967] ? __switch_to_asm+0x39/0x70 [ 357.876232][ T5967] ? __switch_to_asm+0x33/0x70 [ 357.876241][ T5967] ? __pfx_kthread+0x10/0x10 [ 357.876253][ T5967] ret_from_fork_asm+0x1a/0x30 [ 357.876266][ T5967] [ 357.876269][ T5967] [ 357.876272][ T5967] The buggy address belongs to a vmalloc virtual mapping [ 357.876283][ T5967] Memory state around the buggy address: [ 357.876288][ T5967] ffffc9000df09f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 357.876295][ T5967] ffffc9000df09f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 357.876301][ T5967] >ffffc9000df0a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 357.876308][ T5967] ^ [ 357.876314][ T5967] ffffc9000df0a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 357.876320][ T5967] ffffc9000df0a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 357.876324][ T5967] ================================================================== [ 357.876336][ T5967] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 357.876343][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 357.876354][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.876360][ T5967] Workqueue: usb_hub_wq hub_event [ 357.876368][ T5967] Call Trace: [ 357.876372][ T5967] [ 357.876376][ T5967] dump_stack_lvl+0x99/0x250 [ 357.876388][ T5967] ? __asan_memcpy+0x40/0x70 [ 357.876399][ T5967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.876411][ T5967] ? __pfx__printk+0x10/0x10 [ 357.876424][ T5967] vpanic+0x237/0x6d0 [ 357.876433][ T5967] ? __pfx_vpanic+0x10/0x10 [ 357.876443][ T5967] panic+0xb9/0xc0 [ 357.876451][ T5967] ? __pfx_panic+0x10/0x10 [ 357.876459][ T5967] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 357.876471][ T5967] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.876482][ T5967] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 357.876494][ T5967] ? __list_add_valid_or_report+0x4e/0x130 [ 357.876505][ T5967] check_panic_on_warn+0x89/0xb0 [ 357.876514][ T5967] ? __list_add_valid_or_report+0x4e/0x130 [ 357.876524][ T5967] end_report+0x78/0x160 [ 357.876536][ T5967] kasan_report+0x129/0x150 [ 357.876553][ T5967] ? __list_add_valid_or_report+0x4e/0x130 [ 357.876565][ T5967] __list_add_valid_or_report+0x4e/0x130 [ 357.876576][ T5967] kcov_remote_stop+0x52d/0x660 [ 357.876589][ T5967] hub_event+0x45d2/0x4a20 [ 357.876609][ T5967] ? __pfx_hub_event+0x10/0x10 [ 357.876618][ T5967] ? process_scheduled_works+0x9ef/0x17b0 [ 357.876630][ T5967] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.876641][ T5967] ? process_scheduled_works+0x9ef/0x17b0 [ 357.876651][ T5967] ? process_scheduled_works+0x9ef/0x17b0 [ 357.876661][ T5967] process_scheduled_works+0xae1/0x17b0 [ 357.876678][ T5967] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.876692][ T5967] worker_thread+0x8a0/0xda0 [ 357.876703][ T5967] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 357.876716][ T5967] ? __kthread_parkme+0x7b/0x200 [ 357.876729][ T5967] kthread+0x711/0x8a0 [ 357.876741][ T5967] ? __pfx_worker_thread+0x10/0x10 [ 357.876752][ T5967] ? __pfx_kthread+0x10/0x10 [ 357.876763][ T5967] ? rt_spin_unlock+0x150/0x200 [ 357.876772][ T5967] ? rt_spin_unlock+0x161/0x200 [ 357.876786][ T5967] ? __pfx_kthread+0x10/0x10 [ 357.876798][ T5967] ret_from_fork+0x4bc/0x870 [ 357.876809][ T5967] ? __pfx_ret_from_fork+0x10/0x10 [ 357.876820][ T5967] ? __switch_to_asm+0x39/0x70 [ 357.876829][ T5967] ? __switch_to_asm+0x33/0x70 [ 357.876838][ T5967] ? __pfx_kthread+0x10/0x10 [ 357.876849][ T5967] ret_from_fork_asm+0x1a/0x30 [ 357.876862][ T5967] [ 357.877172][ T5967] Kernel Offset: disabled