last executing test programs: 28.674789211s ago: executing program 3 (id=471): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) 23.884161438s ago: executing program 3 (id=479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x600, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='trylock '], 0xc) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) 17.135288416s ago: executing program 0 (id=489): syz_open_dev$char_usb(0xc, 0xb4, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0xfffffbff, @empty, 0x9}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000700)=0xc, 0x4) socket$inet(0x2, 0x2, 0xfe51) r4 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 13.91231444s ago: executing program 0 (id=499): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x8, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec4, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xa, 0x2}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a5, 0x3, 0x6, 0x7, 0x5b8, 0x2, 0x6, 0x3, 0x7, 0x54, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x7, 0x26, 0x1, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0xfffffff9, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x1c, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x100007, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x2, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x50000, 0xfffffffd, 0x3, 0x2, 0x89a, 0x100, 0xd3, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x918, 0x4, 0x0, 0x8ea, 0x5, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000001, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0xfffffffd, 0x1fb, 0xb, 0x400, 0x7f, 0xbc, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xff, 0x80000000, 0xa, 0x8, 0x2, 0x5, 0xfffffffb, 0x400005, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x28, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0x101, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) 13.227124374s ago: executing program 3 (id=502): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x38, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xffff}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044080) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 12.450245323s ago: executing program 3 (id=505): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='wlan0\x00'}) r1 = socket(0x28, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xfffffffe, 0x3, 0x1}, 0x10) write(r1, &(0x7f00000000c0)="4ed2162044583ccd16169b619a0de597c32e679fdbf0aeacad0478c1d23a8de035b0f539218e82661bb5d3ca9f257e0774cc2a5e2b8fde34feea7177b3fbfbf7e5bf9d5cb768d10144ebd92ab1df93da01d46d8b64eda8a8f6cfb873156000affbf8a09a0514fb3c68a3a01024c135c6fa19a78a75a7e1290af6f536cb1c11f2ad85cbc0e0b9466ad048fce8a677a536c0ca5f0678966f0b4b4ca61373c5f18fc1c052da6a3384b2acf9371f861666b6a445f7ccbb07211a91ded1502ffc5f4b971e44957e", 0xc5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x30, r3, 0x101, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x4800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x1, 0x8000, {{0x21, 0x4, 0x2, 0x8, 0x84, 0x68, 0x0, 0x1d, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@cipso={0x86, 0x2a, 0x3, [{0x0, 0x3, "a7"}, {0x1, 0x10, "5ab88be5462f3a7d27d019c39b5c"}, {0x1, 0x11, "3ada4cd9adb2ebc23d951847eeab3b"}]}, @lsrr={0x83, 0x2b, 0xf2, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @broadcast, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @local]}, @ssrr={0x89, 0x1b, 0x27, [@broadcast, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local]}]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x60, r7, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x16}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x880) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x7, 0x1, 0x1, @mcast2, @private2, 0x8, 0x8, 0xfff, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000004140)={'syztnl2\x00', &(0x7f00000040c0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x4, 0x2815, 0x2, @loopback, @empty, 0x80, 0xced6, 0x5, 0x1ff}}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r11, &(0x7f0000000000)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000004180)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000041c0)=0x0, &(0x7f0000004200)=0x4) sendmmsg$inet(r2, &(0x7f0000004400)=[{{&(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a7b49995f205f62bd70712fe4d5fc7a106fcdb00b86806b0da82c349a56a2e3c90a25a5c072e05cb719e700f18984129cd97127e0bf5740c7f83e5d68da58b284b95ac54d0aac59b660767c12e2bfeafa0ed5378ae8c5083c1a80695ea2fb89680f179d0a15aeba0848f7c3903e34632caa8a2d60a3d72f6469984f569f86fa72a6ce267c5a8d5b69e5b6b", 0x8b}, {&(0x7f0000000300)="3e0fbdcd524a803e9c01baee56695b95876955d45f0e71a075c138cf513910531dc7ec721d2083e2db13cc9d0db2e2456c49785f0c152e9499f3c4fb8e564ac0197de72000f83f4529964ff689475afb1225e39cf23f3c0555654a6e6fa26d3c342eca6cd9886e", 0x67}, {&(0x7f0000000380)="3c4fb2fd841f5e01bcc1daedb253a670b3fa38338a072eca77108dbaab7f5b0e0c523a038447f0327617c3fb4292094e540ff03c86157712d21f88c068db4a6d8b8f44b13d34b8e1a25c565f0b", 0x4d}, {&(0x7f0000000400)="1adf95eb82fc8abd7397be4ee935fb65a6c2ec011f24ecd3a084dbd0e4236d75263a4673d5b1c518022ec077192210d2724df6ea4c609839c3d51938a508bf85e1298f65e52806d3be8857c8ec0551ea02bd9a1eba6bfa6dc0cdc61ec4f3594dd7146b0dde11867ca7863998ae89b0b984a1a5c6c72b90425f488534d34343f68435fea3c561ae1cdc7a1f3cb6f7b02bcf76cc7d6e5de5", 0x97}, {&(0x7f00000004c0)="457d0fff2812306f6c47b697eeca4ed3feb62b2c154507c45f6ac66d0da1784a2ed4355d9a1c47b16415d8ed65f871c2c5105ab2e1caef5260f55f2cf44618ee693d8ea6cddb00853cc6b42ebcc63be3bcf8ba3ab52402f4b98629b3a3", 0x5d}], 0x5, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x300000}}], 0x30}}, {{&(0x7f0000000600)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000640)="648831710c2cb053df61d26cb9c13960e6c6f3d07c859339ebd447f7e984ebde03ed56ba5c8bc7a61eee8271e35c0f828d8a66d0d554242d1a143f08c7001c0b715152686adc2873b2a0b7f16a7fc94ab81b9b5b144575aa15761af5deaa563c97a8066e2157daf39a29344900dba8aa0d5d5beb011e907145398a90092b679b3509d888bee1e5e48cad4f873a1791e4ad6ca27154a8c5bbab01e20186d9c8dc3d0043", 0xa3}, {&(0x7f0000000700)="7057a0ed4e1458fe6fbde434f914966bb1b6117166ba5564465a4437dd577dd8f3a5f4a5a6c57ea9abb678a9db6718e6a983b83c1dd289cd96c1c753a0632d23f8fe0fa0ff93729627c25de26d5d1010d1a060e01fb5adc36f04e5ecb0fe820d88f982e95a52f66310a1d12eff41fec7d830afee6e25a7bc458151193d0a9377c82642392857e8260a005516c075421df3a3f08c7a11b59499433b6f2dc327345f8382b12f1e9eb28319962ec4ea26b9c65e6e18477ade6b9eed378cbb2036e42998178a9c553c527f0802afaa352e9870fc036c9c813feb2709434721310539c498", 0xe2}], 0x2, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @loopback}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000009c0)="a5ca1d146d5f8286d9273083f5586906c0f53f8feb86de7fde4e6eb594a917f7862967dead70d3e2b43b7a82e2f571323e09fa818ced69", 0x37}, {&(0x7f0000000a00)="a38a187a7641b5ae1d822f2feeb7a1c3cf4f826a28c921b23a2b233ba272cb62cad3f8aa1294612a3b832e8498fec720945fb2e2e9d2395d9e1b98a5a6af3322e0c5753e8e00e07252a1aa8dcbf36606adc12ff3315056d13bef12626900c2629b41c9c913f0233d9b57a0a1377c35601ee0934635db4bb7385bdf811157565da13be6717f60d555be0dbc1b5d77c1f82e39c7de7a8244bf8b41a3dafbafb33830ad9f11a35d58aae1ff66a50c36036b9e0170e8769a5b21c692c1842c66c3b5d92816a1099d98ef07bc942d652cbc81991d9ff135f0ae6df0604e96b76aace4288699b6ceac23b498301b", 0xeb}, {&(0x7f0000000b00)="147792a925c16c3f2ce6ade990dd8e7295375410b1a6df98eb04676899d36747862ad8da16d49aad25de47350ccc842a0a20cbd1fe2c9f566291af3e98bfbde25ef26c0d1a1adb17ce25c36c4e4938b76dd9b137687a43ca590848d39249b1c808051fbfe1a2aec7734d2b679a848438861ee0107cd7bd0997e8cb43488452232087fde9685d0baebb6232955f963df0755f0927", 0x94}], 0x3, &(0x7f0000000cc0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xbf, [@private=0xa010100]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010101, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @broadcast, @rand_addr=0x64010102}}}], 0x58}}, {{&(0x7f0000000d40)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000000d80)="ec38437f5e5d936f88223d656d7a79183ee5596dbe14d913fa4be32db9d193a11f949ab5b1187e465f2d7c7c8a0e9a50847fa123c6b5618bf4b88527fb214cdd41dd0b1c6bf74d1570254e1152ae3b88c19539cc8e0d05c0415d395a26992af95b80ad9540efbf9d15bd48a8cfe27427ee487c5b815ec248b24f4734c9476be9e877", 0x82}, {&(0x7f0000000e40)="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", 0x1000}], 0x2, &(0x7f0000001e80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xae}}, @ip_retopts={{0x54, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0xa1, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2]}, @cipso={0x86, 0x26, 0xffffffffffffffff, [{0x0, 0x2}, {0x1, 0x7, "f2919582ec"}, {0x1, 0xc, "bc28ed3053001c23fb78"}, {0x7, 0x6, "8fb18661"}, {0x7, 0x5, "b6a633"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010102}}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001f40)}, {&(0x7f0000001f80)="30fac413f59d7af28aa93eb561be1b834d9e4718ac294169d1ca9188f1ee2c0eefec55dead79e14c56d92291ba9e031b7197e5696e25ca4deb053d7ebf4e797dee049f8a543f259771864c4749d89804520869ec8ca11dc2476ce377e6d67619e6259c52b31cbe6ed555651635c289f45f310a94eee2834a7e41edf602dc21eae6491264a73030435ae667a2dd31a83f82e377eef8f02fc3e4105e0fe1ca687da2caaa9943fd79905faa217a8f9f237032dbd513e50620e26aef3343394db439f8d4be773bf2fc45414f3d758ae4b04a9ff5ea154df38a4c6b60eb90cb2e7ceb54", 0xe1}, {&(0x7f0000002080)="13eee1b0783a9d4a64064cd4190a77f5e40e687e7d80a59bdc45dcf2ef0c38fe1197726754bf9db9021d72c15a008b64a1a6a8a712414682266631f33f26521581c51954c4adf4d3d8b6cf246d360872a4913dc40a1c9cea3c809bf4d228f339282716850f14e8e5619ebb993d", 0x6d}, {&(0x7f0000002100)="56def43e575f4b823dddbee1c4ca302c2599ca7d9ecc3ce5574f7498037df1f4853d1dfa1930e0dc811b5d10e03f38b7cc033e6489d89c6bd4db17efa60f4395d27075e94c6b01109967b95e93dc5219a26e2c42377529ca41864b281d7aea3178f851b5456c8ba464ec734b07f2157e14c0b990037a6136a37937d8b50c641e7ca0e7f8fe911f003e025ba0844a848b37d892aa18c4cdd9678b620b12ce5b17d70bf82534bf5f83718062079dfff4d2f93956e1c9ce669f1d55110c6a7ac32b8fa71a5f351f6f12f04fa82ee94830df64bdc9a41f20ecebb6fcd15783f0acb430e6a4004a77cfaa7a0ccef7e41b4b28ce634c0de278e4bf", 0xf8}, {&(0x7f0000002200)="36185fbc678682a9c1edf56de812ad80eb9401e2a095d1d17fe89615ad4058610b800ce3dd5567029b472f552ed3835e6385595c9e6d678974d33cc19b7b8536cfa8c5a8a6dc97502969c6575cba4e5905f4459998d5f808e67098b34be8326c0b67fdc8dfbac030", 0x68}, {&(0x7f0000002280)="ec0fa0b7a0324eb9cc9d4e3767270aab83c067ede1d27d11870461", 0x1b}], 0x6, &(0x7f0000002340)=[@ip_retopts={{0x44, 0x0, 0x7, {[@generic={0x86, 0xa, "700c4fade442de65"}, @ssrr={0x89, 0xb, 0xbe, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x1, 0xf, "39ef2394f095e37213dad9191c"}, {0x0, 0x8, "8e09e029f1ff"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x43}}], 0xa8}}, {{&(0x7f0000002400)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000002440)="102f3737e1ca8d8814c105345b5742515ecdfff9e9fd808aae6f05846fdbeb1f6583463e78e4c02e183b13724ca032d32264a36fbbc7493b032ee4a2a7cb9a8dcc0130ab2c94906f26fd1b167a09f79bfed1cef21c603d52acb8fb75", 0x5c}, {&(0x7f00000024c0)="9f3ef077ca365f45bb1af028a71330d59829ee78853dcf40ec00445f1450a4af3fad52da6c318157eb8805dbc4fec112b5c954079ffc93116e5d45402bb40a2d665d437cc49631aee076ce64eb46d5bad615dceaa7a9d3ece4411435eff8257fc0efe0976506e1c55afa9ddb97e0f788f8f1279a92aa203b3333b51925aa441544476e9f0585ebedce73d3fc52411f93a85f9557659823f8d2e418427c3dfaf4e75435cb9c38cadc9a6b34b313ce7fe8f62f0a698d18ab98f32732171641c6d2067ded751a581e1df09d9fbeaeb359241cfec9410f", 0xd5}, {&(0x7f00000025c0)="ad1ace38", 0x4}, {&(0x7f0000002600)="91df87524b486f063f18e67d3ab39a8ce7e6b69b647cb80f0d752f7f66834c9369b403855477b40956aa3bbe667c607d97b73fd4c1484a1ef65b685b4989b2943db9767f557b2085fe951ad3c8bd78d5fd0cde1bba63e005bd1986038b1294a687bb5ba6eb58c8665a68cb17949931a950c7fe333b84ab06c9612b5e00d1f6add283b5cf9c1b1b59eed8f4e2ccd52146de4c5d3d17fe8d108d481b618bbc6a5d0910fc52bfa5cb7c11ac97477a7d43cd0c8650961c8447645121caa5bb3e31c41bcc24dbfcf2dc539acc8187e84b81", 0xcf}, {&(0x7f0000002700)="86688667f4072016898fc8a3a9b2f1fbd00823854eeaa7ab931503a52021efc4059b7a62750791b2e9954059f6d72d819bd1b84b44e8a2b6653400200b560cef9f2b65e265abed024c98441b9c9be9f816eed246464597213634b4c2", 0x5c}, {&(0x7f0000002780)="c781037e3d75349405194043d5574c9cfd3b8512392c0a4d0e967cce962ae5675f1d19ee11436ac002c4ff7670891263ca0d0ec6e6f77175e416a21a051c8c42868d2a9808b806b80721c78c7d2f06488eb775fd72e4f0c2e45254061401cc45fc712e54d9ea5c45ee1d53f61d7ad1868c9e38aa497fe4fc154ef7258a7e7c13d26404f2bb39dceb6ef2d7722f8870336ac9cc5bb2b5f544c7ef2f910114ec9b30a80f83a6c5c937dce1b677e17000d3a73c1ece8c48b9621bb46526a99b31abe3226b9bcda58a1ddb60ac3aaeea36663633a5a0004e63d50486e5e88178897f8d17f23751", 0xe5}, {&(0x7f0000002880)="86cea7b03e1b003d60256ac79dad4145593600ac139a849118027f7cebf1df38bf544e4bf589ae9562b5f71dd75c932532a4d8eef62f7b699bc77c94f5d231b868ddce619965bcc4efb269615e178282a77ffeb310fd70f91a65718b7ef504e7a4637d2567998540460be1a14c110eb1f3c58743edfac7bd876379bd4791da4b2b409cddb8a83f85bb7bc7aa755ee9f25fc2e5106ff377dd65a8589b8a4e3dfe8219da09ba3106386e78505dbb229444b7868670a3d8d937319d04", 0xbb}, {&(0x7f0000002940)="7f577026ef0088aee76f5100442b9fffb4a22bbeae8c99274f4c31e5531d5c9dd6027e7c40229006a441a836e210664ab736b422db2a7d7bf7bcb7cd4f29e8649f84a0aa412419469455a46813e514a409093c0eb7f33152d35cc4c9abd1bba5ce58cfe8ffa355c58c8062202505cad5998accd558f36b1778729afe305993deee450ec8e531e5cd5cfd046d7fc8d9dd74e71d9cdeef6df072ab631a184bc7090585ce3fc41a4face6680f0937b8d2c48d261ed9174001f67e", 0xb9}, {&(0x7f0000002a00)="8a1e1781a613ca34085d9a3997c4f90c75b3e952dfe8e2a70f32089e0f9ea3d569d8ede01febb65f395699825742eb736f3e93fcc421142433e02646748cc598115816c1db9b657e13", 0x49}], 0x9, &(0x7f0000002b40)}}, {{&(0x7f0000002b80)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000004000)=[{&(0x7f0000002bc0)="0254f4", 0x3}, {&(0x7f0000002c00)="551d15fb44a3bf7fb5cb066baedceb698f9d9d419aec5075a2caa00d1977a6ac289e4a423526288c950bb3eeae6185842902dedda96773cf3b423806e2c5feb4ecbaabdedce5ebf386986432267a99e298381a7508e90c340fa83f867070a3cdbcf3ab54f374eb780f06dea17eafa53f9e30a7f6b3f3ccf4b067aa6f4dea15f7", 0x80}, {&(0x7f0000002c80)="1698fbb6c54c1c0a6e2ed3d1cee1b5f8084e5ebbcfebd7b5d43efe6a8e8522a9b2fd4c7a6c240dc9af8be101b967617baaa7d9b8a323", 0x36}, {&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003cc0)="a706f89e3176ffaf07bd1c08d185ae3434ff7af6a2135bac0ddb4335c52653c9ee84785ae299b06de8e5e716e8fc27249a452e5dd829d9517943d686ff5cf2c2925765a63c23f76393dfa494dc780c6faf1e86ac45c839505e74e01c395822760754ceece78b95749c49e9b82c06925aec98bcf5876ad3258a42bb18d74a363fd2b759b85b5c9793b76b0f2247e96c25d7280afd19a94571586982eef115cc3870a37cdceb5bea79416c1cc426f5147fca", 0xb1}, {&(0x7f0000003d80)="4420ac03cd3c381e060f5cfcde6b5a375320c666bdcc1633f428e0e417881425fd30fa4027b472752e21ef035c66173d2b2acf7ce371633b295f2b3a8bcc38364ab9da6f6f20eb30d47ccd032a30ab32976f45f074154bd056c9acaed53b9f610c764cca", 0x64}, {&(0x7f0000003e00)="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", 0xfd}, {&(0x7f0000003f00)="1b603569967e1f64299640840514ef7c8b26953261acae6504afeabf3ef0c941c8c03be3f7035278312e2a328162e90f522eb72d4246768ffe59b50a75b23599f7bac42e343b6dc966d119e6a27b1d9dbbfd4e3319fcb3f073802753c78cc1df9d82311e75a35b278d9312a02cf35c5725bf970d7f0fe02140b2ba7224079e05ca65c2e489550c9cbb6cd32a7aa1654a4038edae9f5a0047bb1ccf7d1ee4b94925f8433bbe9e", 0xa6}, {&(0x7f0000003fc0)="ace4c67b9fb9b684534dd874ec31680e4eaa34539af34d3aac151b905241e24bde93929e6de500a5af5f", 0x2a}], 0x9, &(0x7f0000004240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @loopback, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @empty, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4d}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @cipso={0x86, 0x10, 0x349ce71a7f4f6d1a, [{0xffecd98c43ae9a04, 0x2}, {0x2, 0x8, "110240473e60"}]}, @cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4, 0xf6, 0x1, 0x5}, @timestamp_addr={0x44, 0x4, 0x6f, 0x1, 0xc}, @timestamp_addr={0x44, 0xc, 0xf5, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x8}]}, @timestamp_prespec={0x44, 0x14, 0x90, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@local, 0x1}]}, @generic={0x86, 0x2}, @generic={0x89, 0xb, "740be34eaea38788e4"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @private=0xa010101, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @broadcast, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3c}}], 0x160}}], 0x7, 0xc67a30e7c2f0ea8b) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYRES64=r1, @ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c1) 10.813429389s ago: executing program 3 (id=509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x5c}}, 0x0) 10.732442959s ago: executing program 0 (id=511): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x1, 0x0, 0x0, 0x1, 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 6.628299926s ago: executing program 0 (id=518): r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)='##[\x00') r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000480)=0x1c, 0x80000) getsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000540), &(0x7f0000000580)=0x4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0xfffffffd, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000180)='5\x00', 0x2) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) keyctl$setperm(0x5, r0, 0xa0009) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780050014007f000000050015000c0000000500010006040000050005000a00000005000400060000000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x20004040) getsockopt$inet_int(r4, 0x0, 0xc, 0x0, &(0x7f0000000140)) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000300)}, {&(0x7f0000000600)=""/157, 0x9d}], 0xa, &(0x7f0000000300)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)) 6.233194837s ago: executing program 2 (id=522): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) (fail_nth: 6) 5.361250988s ago: executing program 0 (id=524): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000100)=0x7c) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff030000000100000000000000000001a8dbc295ec000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b3410ce36bb74032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0xd4bc, &(0x7f0000000000)=""/23) r3 = gettid() r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x8, @mcast1, 0x4}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0xfffffffd, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x4000) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 4.204576008s ago: executing program 2 (id=525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x88e5}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x12000060, {0x6, 0x6, "3be0e6", 0xd, 0x3a, 0x0, @mcast1, @loopback, [], "55d525215833bd91"}}}}}}}}, 0x72) 4.031708495s ago: executing program 2 (id=527): r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x200, 0x1cb182) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x24, r5, 0x1, 0x123, 0x233, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa6}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x24, r5, 0x1, 0x123, 0x233, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa6}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x298, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a69}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc97}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d9d262f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb81c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15694754}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9d4d90}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x581d2801}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc073}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bd616ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18a64bc1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6177}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f69383f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c928c80}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x637dd4bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c0d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd324}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78e0ceea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb23a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf68b2b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1581}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ba689fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37155803}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x134, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e01e15b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fbb2283}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbb2e989}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20ecb718}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40f69c58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7610d8fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19304cef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64e8f18c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a2941b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41944407}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b8a2d2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13cea22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66c82bfa}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e66df50}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={0x0}) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000a00)={0xa22c, 0x0, 0x0, 0xffff, 0x4, "87d3a15187b8c601cd4af6a637903184033c67"}) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000a00)={0xa22c, 0x0, 0x0, 0xffff, 0x4, "87d3a15187b8c601cd4af6a637903184033c67"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000101500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff14000280080006000200000008000900080000000800040002000000600001"], 0xc4}}, 0x4008800) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="7b5b5eef1ae04a94a0d22f259c00006ec8", @ANYRES16=r8, @ANYBLOB="000226bd7000fcdbdf2504000000080004001b0000005800028005000d000100000014000100fc010000000000000000000000000001060002004e21000008000500080000000800070006000000060002004e20000006000b000a000000080007008100000006000f000010000008000400020000000800060003000000080005000600000024000180080009001f000000060002002900000008000b007369700008000b0073697000"], 0xb0}}, 0x840) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2600, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/16]) (async) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/16]) 2.948991204s ago: executing program 1 (id=529): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r1 = memfd_secret(0x0) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10, 0x80000) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x219002, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f00000000c0)={0x74, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 2.008723238s ago: executing program 1 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x1, 0x1, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1e, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x13}}, {0x4e24, 0x4e20, 0xa, 0x0, @opaque='0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0800a0003a09000008009f000d000100080026006c09"], 0x34}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000100)="246cc2f4e9e17bb2539b9b3cb644205be5e5519b6f0293cf0f4e6bd1d913f95d637fc9bda9431c99398e3a6d59a1be1440e17311b438fb683c7f0935f8921029fc0623663e58e147d1c46b8a07974a9f8fb2c6f6b700"/98) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100100000020711e0e170000000000010902240001000000000904000608030000000921f7ff0c012228000967a94ecbd0b863ba504f2182f6ea801c76b5500e928bff047faa7de99bdb29198dde22e9858845a219a5210e54a272e6781372bfd25f999bf336750028f1303b45a722e7bc3af310b311e912dc0271139455feefd33d7c4abead7d2c7dd255733c29e7b40769f04cf8f1b3d16400"/167], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086a04270000000000000109022400010000000009040000010300000009210000000122450009"], 0x0) syz_usb_control_io(r8, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20052c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000180)={0x0, 0xc, 0xa, {0xa, 0x22, "b8a4287498b15801"}}, &(0x7f0000000480)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "8b2031b9ba46b72463b59e5bd7c76074e94669d355fae4c049229cb59bbdc997ba5cd2a736ea4ecb56efff7bc7910e24a3860d9178fe497c95d98367ff2257f1f3f9c2a388e4e423e246dd454f75b4fd579e94e27207d9cf9ec436c1431dbcba762fbdcb9e83c779a85ec61dd835ac4265ea87fbda0876866231ed55177ed3dc82da2ab74d1ea8bb18efc939cb9f487a031b3d68e372cef7f490d2584901f79a2359d59b8ee98ac19c1d97a2ae689762f85108866e5f5fc47c4c5cf78fe7d37f34877aa1490e08beeb8af738c93ff71533e59e16716f94c3f775d4de544a73d8c5ee9a4abd7068444ac83e397dccb722024777327ab5a5"}}}, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)={0x40, 0x10, 0xa, "9e8a790f07b4ecd07c5e"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x81, 0x1, "01"}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "7e13"}, &(0x7f0000000700)={0x20, 0x83, 0x3, "811e04"}, &(0x7f0000000740)={0x20, 0x84, 0x4, "8f4c6cfc"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "49aed1"}}) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1000003, 0x8010, r7, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0x507, 0xfffffffffffffeb8) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r9, &(0x7f0000000040)=[{&(0x7f00000000c0)="dc", 0x1}], 0x179, 0x7, 0x1) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4, 0x810, r5, 0xc42a000) 1.650768089s ago: executing program 3 (id=532): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x80fe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.498762829s ago: executing program 2 (id=533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x1a, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0x0, &(0x7f0000000180)={0x1ff, 0x7bf}) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r9, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r2, 0x0, 0x0, 0x8}]) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r10, &(0x7f0000000040)={0xa0000012}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r10, &(0x7f0000000c40)={0x2000000b}) 911.610599ms ago: executing program 1 (id=534): creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 869.226053ms ago: executing program 2 (id=535): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f93", 0x81, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb8", 0x21, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c99", 0x3c}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d62230167", 0x9e}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r4}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 522.724744ms ago: executing program 1 (id=536): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010027bd7000ffdbdf2509000200a0257a31000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x43, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect(0x6, 0x2c3, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2a, 0xb7, 0xfb, 0x40, 0x413c, 0x81a9, 0xeb17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b1, 0x2, 0x0, 0xa6, 0x50, 0x1}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x5b, {[@global=@item_012={0x0, 0x1, 0x3, "c0"}, @global=@item_012={0x1, 0x1, 0x7, "e3"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, 0x0}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4044050) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 183.274182ms ago: executing program 1 (id=537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x401, r0, 0x0, 0x0, 0x8}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x4, r1, &(0x7f0000000080), 0x0, 0x8, 0x0, 0x2}]) 0s ago: executing program 1 (id=538): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c11, &(0x7f0000000740)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x30]}}}, 0x4e}]}) r1 = syz_usb_connect$uac1(0x9c262bda82916d2f, 0xc9, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x1, 0xb0, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x200, 0x1b}, [@feature_unit={0x11, 0x24, 0x6, 0x3, 0x2, 0x5, [0x9, 0x7, 0x4, 0x4, 0x2], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x4, 0x33, "43d2ae922a417268"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2a, 0xb1, 0xa, {0x7, 0x25, 0x1, 0xc, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x3, 0x40, "be"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xd0, 0x4, 0xe, 0x7, "982745dca204d7f2"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x101, 0x1, 0x8, 0x24}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x7, 0x1, 0xee, 0x48}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6a, 0x24, 0x0, 0xf4, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xd, 0x50, 0xd8, {0x7, 0x25, 0x1, 0xc, 0x1, 0x5}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x10, 0x2, 0x8, 0x8, 0x6}, 0xf1, &(0x7f0000000140)={0x5, 0xf, 0xf1, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x5, 0x80}, @generic={0xe2, 0x10, 0x2, "f4a630f82702f254be5d995d489650a903f103f68cb4749f85d02c839eb450947a5104f14018e7b8fb56e93b72087e444cd0f2f0b08384ada345ba00092b33c43b8a2423f3f7023715a1a6400773f82732e5aa9d53d1f2f80b5f9354addf265465853d0d45e537e47ab34520091f81440696a7192d556ce6c18036acc6cf0afe58608e82bd5a09ceea78bb85ed8cc3e96fdce9fd4bdd27f0684f0de4c4fd74ffd45b8ed17fbab5db5377d630d2a5d3de5c5fa4a40b4c2f0979082bffbf237eaaa9d20658b4cc3a840b2d041fcbaa36cae67ee89a597093a0777d079d668106"}]}, 0x3, [{0x14, &(0x7f0000000240)=@string={0x14, 0x3, "f41e0091c0fa99fb0df9c6e54675358b3664"}}, {0xff, &(0x7f0000000280)=@string={0xff, 0x3, "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"}}, {0xbd, &(0x7f0000000380)=@string={0xbd, 0x3, "49aa11f1116d9372f08eeb0a40656b1eeb6dd7daa830a9d9b06ca1d5872d3817aca664be44f7ade3bdb3d5e4d024af5085fb1eedd043dab15c5ef9aaec20360f70b0eb630148be0c968163a77a79c35e26dc8c2c5a26939add812d8922e076be4cc3b7abf3ae7761ce1019047c0df7102fe143b4065ab433a8a3da0c297bf5c7b67d97c0677136fc1a3b368ed7128c4840ac04e718d0e3485ece5875e138697b7060e982e373f2f17942f89a14429c705bd082edb1a5a7e2e80c23"}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x0, 0x5, 0x1c, {0x1c, 0x11, "fc822085cee39118277bbf9d923b159fc2a99265bed38fc2f8db"}}, &(0x7f00000004c0)={0x0, 0x3, 0x55, @string={0x55, 0x3, "48acc081dbb7e55cc9af44c898512e64392dde89e067229359a8e160c5c81e399e7c498cd6ef7def4e7111377e3dbef58448906ade0eeb82847a36018d7ca625e1b53157e257dc2ea5c2e0473d2e47765c4d2b"}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x20, 0x0, 0x78, "6ae6ba321c6a76d1aa767e4a43fbaf09e8f070581064057b829ec959696523978146a49e777e8c84523fe9a47161d991bdf43f27d8041a99a370d46f17cb55917e5dde4c8cc89a2bf7a5d8078fb7b2c06e47d3c5b96b73a7f4f26c27913dd1a0ea73ca3d2e8d5ff2c94d1901182900a8f8c729e86366d4ea"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xae}, &(0x7f0000000640)={0x0, 0x8, 0x1}, &(0x7f0000000680)={0x20, 0x81, 0x2, 'g;'}, &(0x7f00000006c0)={0x20, 0x82, 0x1, '9'}, &(0x7f0000000700)={0x20, 0x83, 0x3, "289ae3"}, &(0x7f0000000740)={0x20, 0x84, 0x4, "9365cf2e"}, &(0x7f0000000780)={0x20, 0x85, 0x3, 'H#g'}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="09000000010000", 0x7) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) accept(r4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x150, 0x1403, 0x1, 0x70bd26, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x2400c000}, 0x90) sendto$inet6(0xffffffffffffffff, &(0x7f0000001180)="8096312500ddfb13ed835195667a50903b5822f14f91e9319be9d74331aa620fc44b5c6d1c4480a773b3a8da0edd6088a853d49909b23862bcb78a2d8daf02be858409222dadcc9e87893c01e814a0d8d36f8880cfa6bc6eda065fa4b150163862402a3446bfd79f718426907468831796ef76cd290467c7d39aa92499402c2e5d55458c3ade65bbbaecadb3fb750b81b6905353c1a1aff2545dd2b0be6cd89033aeb69cbc8d861f71ab003447aa1e2ac2de52233abb5987b55bd1740276d309d2f281ec4b77523a420556fb6571da5a8efedb63a06f7a38220b97f26828dca229d3edd4c7fee2d1b90d19447b056b5481300f4342e5435177dcb054410f5768057da06822b94b2a927166c91729037a79822fa86985b15bf8783983d3cd09e60a9311de2cf5e2b74dd85822d57b5435765aefd24ec23824a9daaa24e2ab76b741edb723c66dc14c814ae9f46496e75ecaabdb508fd70ebe6437d06d66b4658605ad0fbc85c1835a2c5afed5770c342c6dec2ea6ad6083463bcfe8cac87dff1896a4dab1bf39bc7a3172dee7bfcc018b0613bfcabbb3f557af693ba0eb5e5fb22ffc14374db74fe04461d5a18a0bdccc3f5c3d69a5f217c22441d6769862f8877170a2ae2a4c576826d4ad2cf2c04c54636fe7efac44d372ed266bd261e734cf26d7565cc98cb84f688498e3487b4fe9ba550097489c24213b0ac78664c31144cb6429e5a761ba00474f641260b35653ca72d7bad727c2aca9e0e452d22b5c09528a9709c8cf14684e3a4b508bb1f13a7267a6c7668b83e82b12868f199562dd304ad81c02a3b202d99c41960a2145582aa4bed1d19b92ebcc39ba110e67f467f5fcd0db2e8beafc42b6cd37e8b644a0df289f5e4d6ef21f44039d2f7fd91cf978c9594aea2e08f7fae4aaf6a82805a86c6a3ee363f79b7832bb9f6c96c28b87100f35ed7888527ce1eb6b23b58b373322b87de4dd092629e6a30687f2a1443f0d6a9083297d9289474bd24bdf1b7a8e77e73eccb292142a03cff9476d1eefaaaaa9fc22cd11ff8d5e9ad966486c68eb607a2b17fe797f0dac3b34564f210b839871f1bc24cfbb96cc3b3e0f3083eed4231d8763a100e96f5c19c4678834bd29464b5e2332296105b100dc4ac3ac85ea082eee387943083773e62cb47867531b0d603b6dc5495d3cf54556019585eae40d3f8d1b0145f42adf89f082a5618a4ad5cb0de08b1dc6245c3202d13b12e26dea25a53a60dfe6e2747b39a004f19c4f34f006cc53302640f79c2572abd30e9253679ca80d2252b1d1a4088ca21fdf4796248e055124431dc31bb004027d215633eb60c5c48646b6b4b159d1d81a113de1317403a561645284e5797d9326cdb12c3b103ee3adc3cd582f159ac9de3311335299fe056e0c459ce1b7b9146eaaf6bd6974b8d6c369aef7993ac4c4a81f98e874b179cf4d59c36e82ddbf622cee4bdfd5da97af3b91dfd7a3b1d672290a6045c5cbb2aff86910440946b627d48821992d3b0b67059b4f2b1cd33d32f87cacc25e8ab7c5319270bb0cca742fc8510e700df7840ae96a9847bdcbbbc5a6cab5493624357dbc463c79439c5136fcb554bcac86e4074dc96f054185d5fd971b35f7822e6d0a7447351dc0ccc551f62b0fb6dab76d57d71852527d2c3f080eb13fdc2c849e4bc0252c4e123b12aee7770aec54f660a0e30f10577d2cbf6bf6e5175203c78f50ae82886c81e942881dbbf165818fc2729880a8552115f957af1f457a8686fb6ceca4beb20226bec3ce87a07b7135fcf5a1e73f013c4d4d7c9ff6ba06f357ec4028404a9a62bdf050fcdb415066588f82f57740677509cf60a76cfbb56f59041441c4d92aaaef90f1ecb7824883917d44c4226de03e51b4d4177f33ca9650091c6693fae905831baa9be3dc26ee768931443e3fabf0631a963b4be97f62ca1b53c58037d485ccfc3eb37bedd3d099c536662ba2563eaa2485f326fca01bcfb80e69537a70e28b488182812363e6baa7b112abbb1c4974452ca511396ff1487cb7b4130e97a97ec1c4f3f3bf7e6a4886e440eb04b63f95e17438324cd6f935817d67086c435a4e67d14e64d03cf73e276e3791f704a622ed33256defe16c4de3f299d877457b94c1cc664273ad172e941ebe9e7663ba8ec8dea3161dc40a76872139beaa5ab1404fcb9df529a567b81b7386dff4fbf434960a6239bc73c569fef0e748fb25e0f29df52d589837c6ad3cb1d80f1d084045b86f25feead4e18197ec5109bf4f97f765237e0d3d9c3e4e26cc86158a9424ca48c3c933cb51d86745d68a08adc188b0c54784862abe5af97a57e5a558db865c3e254914c0b29e8349bda07770ac9cf4d2f90e14c02adb2636bda9b97e97431fbe41fe2e4482ee9d7fd9438267c7e7bea30d7db4824767755266224d5bcb636444688fa83cf6a3a0c5422a7c65475290ccdd2a8deff95cdd3dcf46d70eadc82f4bfeec835b526b65489cb66caeb8d06c74e45f3523ca99daa4ba0beb2bf472bb9cd07ea51fa031b5795443eaec899ecd3caf56ae0272ba6a176b304916278770ac46b1b4482d6cf609caf60e4c75e536bcb4c6539e3e0387dc9670909d1d3bd9494d1573d31ebec11a295696c11f2eff0887f6c67a5c0add7738d3900afb9ce5740519381330f42a8e4e0dd0b0ed51151b449f0b8431aa67ea3a4eca6f22cb58106cb3803b9a175e0dbc1cbed002ca174e2bddcb5c43441cc70de00d57affd50c9ea7841de567ae5439d51a4a3841a5eca5924db5432f877cec417822e582b0155de596733e41182c918e65921e0975fa2f7e37c7b0d9068d72c6ecdd2a3f27616bf04262d0bc815eba722c147f13911b1ce800fe6410d13165b487289f82c169919f698a41512159159ce1983d473337f8fc33d238ae8b79aba4048a12b1f7f4274e2a384fba83ce77e749d8d7076ef41faaa81f1406b9465405bed12f298d26ae221b5350b8be67a766fe7d519b1fda6af908821ea4d52e0d9c7ccfa7cadf7deac9d148a84d391feb0f77debbc3cecb012fb42de7ae80f9e142d01cca421e8207d7d5b7e4a9ba957d18349f05014684d3ec54cb702485410e6cb39c7104783867329c89f3dc5db0818179f5ceea6637347f7b5de1da5a0b2c9b3db38c84f6222938df02d2c993d4e59ccc544b709f049d96583258edd8cdaaebd3f34a73dd685ec0ba32e1a90d92677a3de796f97c56f24d4c4500931ffd39560a0588a10f752affcc592d4df8cec5addb03a70b7d02316ce78df0b8b657cb3a629e5e739b89c0f380033c62aadf9c436a58ff3bceb5d6c01d19ce1d9e50b2e56824b559fc2ee2e7e06d35da5b4311bad0aa5e35f0cb7c9174580cee52fa185619bdc47d44ecd2455af2852a0c7a723c4b4569849e9a7345aa08745eeeafc2ffa0da5732ce93361c6436f4b71f2d994237977b1dbde9ce6d01c9981d1783fc76120672b2a5eb663b2986b75c4627e667d8c58f610500a7d3aa324a91b3d14dca9229bf9d31b688c800be5d24833efbf9a64c889dd6aa7c19f1222d79483789c233be70f0f1a5dfd59a01e3dedeb48f76d8d41ffbe8b0162b768e7733658e70685fa8d76bf61afe866b31acaee759d2439042573e9da51778a51f78a4cae5004dd0c0965720cae7c7e025df18e547d630cc80a7c47dbaf808bb40dc32f01da689109488269d2ab61922fdc65f6c48d2df09d73846650906f3e6448e070bc0f7a8d3703d2f9f826ad62bc5a93e47688709ee570507b54de91627839110a3a81e76b65e075188c5e89d7df9b2f81d66970cd887e1b626ee4dde3b883dae0d6333582366c0f8445c1be9b052725684beeafaf373a1928d10e46ecd383b8c8a43b4533770906edeefda892c527f73a1aed0c5994ded8e6842d63cf5f86cee2e6481cc06609ea72fde7241d1e5cbe80eb55fbe6148cfc785d58224911a36692fdd21330349e898245ff2a2b56a5ad4f3f71ffa6e1e934da33a8a79d45d0bf6aa03f50ff71cc74d50b6edf68b77e91c79a081dca21c41255bbe61300a3903a7d69033ba241704753ccc7bb24bace9e9d56787e460a78e048d9f77f25e3380e65ca5aeece4928847cb9008d34d039286d5d16ed2ac7a7baa21d0ef42641c8e5f860292f9a83cca90818631691963f63bf04feb78cfb589c6075f8605a74c175158d05bff318dd1dde519d62e3b715298e11f1e040281acb1c3b0fd8031cd40d540ad0504b8b7f0e67f6f563f61526237f6fc8fffa891053ef94235848190a16e2374ae81aff070bc119e5f4a73eaaf7c0bb7a6c963818e4c90fe3b841b79f2e36c0b3b71c4d3fb65a2fc00bbbb58767c810644fa0892aafda8dc339ce5000c1ea631b1a2141dbbc4f42c029b3831818f35a5fdab4c8fba9df7dcc0ef18a8f121540362b58b131d32cb3b840b41ee17e26c56071c9e4412ed3542f7f230c2d05f6855dfd79d4813841f7c15e3240ad278402ee93f2f3bc115fce318bdf2c5a85d7be61f3f9342d19c7519a8cf68332573a76c436f7a4001385b898eecb9e5a6f65996c90c1d57ec16e0bd78b8f37dab83aa2baf55c679d446e6fc0dbc72b9886e59e8b7f1743fa13c342e971955dafb883dd7a6f35bbdcfb62458758dc2f26305e00563464dafe28df4e1dfb37e4488cec4ba71770981b6a7aa5f6c8ac2b198acef3f1fca203479c2a8acd7fbe69dc0879247062ee566668876975adde3f6d4f0c045697c6a98f189ed73555fef6473bdbd87075af001ac1407ca68f883a51fafe3c762040beb36da7c6a1e92c4d4810fe6a3b1c40e4aeaa3185d602515885747cf8d991a5686ec374d27e5ad6c9b97c45678403df62095b6cea9f5fa3030018c8c453ee05bf68921ccead99425ebd2220dfdb2b15be4783d4ad659a3087beb0c03db1677768ec53e04d74bda9993df7c5de18b39b3ab5c69b668bfc6fc8453f829491883e84ec1afe6efdf4ab005405e3fc8bb647bffe9d30d2370fb35d43a719ac0d14f30265e513c55c18ee1b93e5355db8e330bc765f9ed8ae786ff9595e19f20a9a2f4eb6f9bb1708da7fc254a89bc0d43124bccf64d73962d09b927630124a75bbee6d64cd5f7dcc6cc20462edbfd4035020d7fd7facc1307d6e090c297225c18a74b70bdbda26704dce323112b678a80d5858a27c7c8b7fe3a0cc7b7fd1b121576a809b08d9f29092b7d9bf4d84e0487a1ad0174851370c4daad68aa3e06082a645bb1f599e2c1353e2bb1cf372279e08b70069470fe8dc9e23d271d262570b34dd469174368ced1ab91205e57621af7a4bb996bfa80fcc98c9d69f337d23dc91881d73f7be5cc4be3d1cf0ca417028847cfb954be82ffadc2005862bc445ef84eb74d8c5eecb5f2e93e6b47d1ddde205b9f416ea9dacb428b7498bf87fa1ed7ab8ae7ee56b75643eb04ab19400d4e76701cd9325687bf2cf0617483a46273fec741ed092a7c1abf72e4a4bfa0e8cb9ab77ca68c713e6d6a89be835c0ee1609682b1fffdccdcabc6862b796f9751a3d32238f228581d1ef1d78e7bd0006a7754b11a0f5cd064a0a3d4d7cd4f5a4421410aed0e822714f9f6fd12529cc52db780f23aae8b520868c0a43f212657c51d632a65f7c60d544bc9b8d34b51a30e948dfc66a6e100eb1d209ec6ce36f3d9d744b198bf0c3f90d8f3f723e8682de4fb254e3b97c0b92266aa3618253e49b0126bbf39179dfe15ebb67c13d35b88e945f2d43e48db21a95c83c3bde28a70aa071044232f7ad73546690b5519675bbcf445a6da548f63811695dc2f540", 0x1000, 0x20008050, &(0x7f0000002180)={0xa, 0x4e21, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@uuid_on}]}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r5 = syz_usb_connect$uac2(0x4, 0xd6, &(0x7f0000000840)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x4, 0x50, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfff8, 0x1, 0x44, 0x4}, [@processing_unit={0x7, 0x24, 0x8, 0x4, 0x1, [0x0]}, @source_unit={0x8, 0x24, 0xa, 0x0, 0x3, 0x7, 0x35}, @sample_rate={0x13, 0x24, 0xd, 0x6, 0x3, 0x1, [0x3, 0x1, 0x1, 0x1, 0x0, 0x2]}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x100, 0x3, 0x1, 0x5, 0x7, 0xa, 0x4, 0x3}, @effect_unit={0x9, 0x24, 0x7, 0x6, 0x1, 0x6, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x3, 0x5, 0x2, 0x5, 0x4, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x7, 0x3, {0x8, 0x25, 0x1, 0x1, 0xc, 0x2, 0xc9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x1, 0x2, 0x2, 0x1001, 0xd5, 0x40, 0x40}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xec, 0x80, 0x8, {0x8, 0x25, 0x1, 0x2, 0xc, 0x1, 0x5}}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x250, 0x8, 0x2, 0x7f, 0x10, 0x8}, 0x23, &(0x7f0000000980)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x3, 0x6, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "af5ee43fbe4b19c3393490b4e03627e3"}]}, 0x1, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x2001}}]}) syz_usb_control_io$uac2(r5, &(0x7f0000000c00)={0x14, &(0x7f0000000a40)={0x0, 0x22, 0xd1, {0xd1, 0x1, "4971678bc524316cc3279e256f9849529a216876e9c8d93a4bc2c2782cd60d9738813ceaf24c7b0bb70ccf68e74822c049f31ffc48862f1f65a860b5388a0a0547e5af7187d4ebef4670a6c35dccfacf95f9a5fef39b870a691f49060b88a24d3120827d0ca19d718fe2124a4b6b97e38d3efde2b504dc4040e5f568e09edb9d7b14c6978bf62080f15ce33639a4d8acf185d1465cf903528c965ad19354a3b09511d4c505a26077b54859722b07a57fcdcd73939aa61470c4b714fc8712fa60da2371286c9c2c04529e9d556c46e5"}}, &(0x7f0000000b40)={0x0, 0x3, 0x9c, @string={0x9c, 0x3, "1a0298774484d35fe58bb5323d668e957a58b8bb3aa650ce1c3c6e4b924aa9d26696a376e0a6f4a30166f67b079d9956b944634f2d640f131f8d316a3608385b0c2556476da961f1c6b0463164cc50e62cda9f3304f1dd9dbd7ff776d25be3153489ed7b791ac46e9c5d63a4370896957e0eeb3bf10fb713699f433d9b32c05fd8b56a852e7917f1f3af4ef33762eaa7ae4683e3f9f6ad30520c"}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000c40)={0x20, 0x10, 0x4f, "3b04d02b75631b4d6846aec45b07129b0f9e1f525b7dbdd681599df46dbff85c1fb2e3657b6582c3f5cc49578166ec48d430628c4b5612270d182b2daa74d4263f6950b96c20480cd976e2f9d6631f"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d40)={0x20, 0x81, 0x2, '\t`'}, &(0x7f0000000d80)={0x20, 0x82, 0x3, "081332"}, &(0x7f0000000e00)={0x20, 0x83, 0x1, "d9"}, &(0x7f0000000e40)={0x20, 0x84, 0x4, "f341d216"}, &(0x7f0000000e80)={0x20, 0x85, 0x3, "8c5c12"}}) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000f40)) kernel console output (not intermixed with test programs): bage [ 127.276942][ T5616] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 127.276960][ T5616] cdc_wdm 3-1:1.0: Unknown control protocol [ 127.483582][ T9] usb 3-1: USB disconnect, device number 13 [ 127.796997][ T5616] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 127.968127][ T5616] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 127.968193][ T5616] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 127.968207][ T5616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.975072][ T5616] usb 2-1: config 0 descriptor?? [ 128.002589][ T5616] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 128.507355][ T821] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 128.507534][ T821] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 128.530085][ T821] usb 4-1: USB disconnect, device number 10 [ 129.117532][ T6299] FAULT_INJECTION: forcing a failure. [ 129.117532][ T6299] name failslab, interval 1, probability 0, space 0, times 0 [ 129.117658][ T6299] CPU: 0 UID: 0 PID: 6299 Comm: syz.3.156 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.117681][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.117692][ T6299] Call Trace: [ 129.117699][ T6299] [ 129.117707][ T6299] dump_stack_lvl+0xe8/0x150 [ 129.117732][ T6299] should_fail_ex+0x46b/0x600 [ 129.117765][ T6299] should_failslab+0xa8/0x100 [ 129.117792][ T6299] kmem_cache_alloc_noprof+0x87/0x680 [ 129.117814][ T6299] ? skb_clone+0x212/0x3a0 [ 129.117837][ T6299] skb_clone+0x212/0x3a0 [ 129.117859][ T6299] __netlink_deliver_tap+0x424/0x8b0 [ 129.117900][ T6299] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.117931][ T6299] netlink_deliver_tap+0x19c/0x1b0 [ 129.117962][ T6299] netlink_sendskb+0x68/0x140 [ 129.117990][ T6299] netlink_rcv_skb+0x2b6/0x4b0 [ 129.118020][ T6299] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 129.118043][ T6299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.118084][ T6299] ? lockdep_hardirqs_on+0x7a/0x110 [ 129.118114][ T6299] ? mutex_lock_nested+0x152/0x1d0 [ 129.118135][ T6299] ? xfrm_netlink_rcv+0x6a/0x90 [ 129.118158][ T6299] xfrm_netlink_rcv+0x79/0x90 [ 129.118178][ T6299] netlink_unicast+0x780/0x920 [ 129.118214][ T6299] netlink_sendmsg+0x813/0xb40 [ 129.118249][ T6299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.118269][ T6299] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 129.118302][ T6299] ? aa_sock_msg_perm+0x122/0x200 [ 129.118325][ T6299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.118342][ T6299] sock_sendmsg_nosec+0x13a/0x180 [ 129.118367][ T6299] ____sys_sendmsg+0x55c/0x870 [ 129.118402][ T6299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.118439][ T6299] ? import_iovec+0x73/0xa0 [ 129.118463][ T6299] ___sys_sendmsg+0x2a5/0x360 [ 129.118491][ T6299] ? __lock_acquire+0x6b5/0x2d10 [ 129.118518][ T6299] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.118581][ T6299] ? __fget_files+0x2a/0x420 [ 129.118603][ T6299] ? __fget_files+0x3a6/0x420 [ 129.118635][ T6299] __x64_sys_sendmsg+0x1c3/0x2a0 [ 129.118667][ T6299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.118705][ T6299] ? __pfx_ksys_write+0x10/0x10 [ 129.118739][ T6299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.118760][ T6299] do_syscall_64+0x174/0x580 [ 129.118786][ T6299] ? trace_irq_disable+0x3b/0x140 [ 129.118807][ T6299] ? clear_bhb_loop+0x40/0x90 [ 129.118831][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.118850][ T6299] RIP: 0033:0x7f758e28ce59 [ 129.118868][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.118882][ T6299] RSP: 002b:00007f758c4e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.118901][ T6299] RAX: ffffffffffffffda RBX: 00007f758e505fa0 RCX: 00007f758e28ce59 [ 129.118915][ T6299] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 129.118927][ T6299] RBP: 00007f758c4e6090 R08: 0000000000000000 R09: 0000000000000000 [ 129.118943][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.118954][ T6299] R13: 00007f758e506038 R14: 00007f758e505fa0 R15: 00007ffdb15661a8 [ 129.118983][ T6299] [ 129.562660][ T5615] Bluetooth: Unexpected start frame (len 18) [ 129.617396][ T6303] hsr0: entered allmulticast mode [ 129.617419][ T6303] hsr_slave_0: entered allmulticast mode [ 129.617442][ T6303] hsr_slave_1: entered allmulticast mode [ 129.639464][ T6305] FAULT_INJECTION: forcing a failure. [ 129.639464][ T6305] name failslab, interval 1, probability 0, space 0, times 0 [ 129.639484][ T6305] CPU: 1 UID: 0 PID: 6305 Comm: syz.2.159 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.639499][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.639506][ T6305] Call Trace: [ 129.639510][ T6305] [ 129.639514][ T6305] dump_stack_lvl+0xe8/0x150 [ 129.639529][ T6305] should_fail_ex+0x46b/0x600 [ 129.639547][ T6305] should_failslab+0xa8/0x100 [ 129.639562][ T6305] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 129.639575][ T6305] ? __alloc_skb+0x1d0/0x7d0 [ 129.639587][ T6305] ? lockdep_hardirqs_on+0x7a/0x110 [ 129.639605][ T6305] __alloc_skb+0x1d0/0x7d0 [ 129.639628][ T6305] _sctp_make_chunk+0x59/0x290 [ 129.639644][ T6305] sctp_make_init+0x5e3/0xe00 [ 129.639662][ T6305] ? __pfx_sctp_make_init+0x10/0x10 [ 129.639676][ T6305] ? arch_stack_walk+0xfb/0x150 [ 129.639695][ T6305] ? stack_trace_save+0xa9/0x100 [ 129.639708][ T6305] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 129.639722][ T6305] sctp_do_sm+0x238/0x5cf0 [ 129.639733][ T6305] ? __pfx_sctp_pname+0x10/0x10 [ 129.639749][ T6305] ? kasan_save_track+0x3e/0x80 [ 129.639760][ T6305] ? sctp_stream_init_ext+0x57/0x180 [ 129.639771][ T6305] ? sctp_sendmsg+0x173c/0x29b0 [ 129.639785][ T6305] ? sock_sendmsg_nosec+0x10e/0x180 [ 129.639795][ T6305] ? __sys_sendto+0x402/0x590 [ 129.639807][ T6305] ? __x64_sys_sendto+0xde/0x100 [ 129.639820][ T6305] ? do_syscall_64+0x174/0x580 [ 129.639837][ T6305] ? __pfx_sctp_do_sm+0x10/0x10 [ 129.639866][ T6305] ? __sk_mem_raise_allocated+0x290/0x1320 [ 129.639877][ T6305] ? __genradix_ptr+0x1e1/0x220 [ 129.639893][ T6305] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 129.639912][ T6305] sctp_sendmsg_to_asoc+0x143d/0x1900 [ 129.639931][ T6305] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 129.639948][ T6305] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 129.639964][ T6305] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 129.639974][ T6305] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 129.639984][ T6305] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 129.639993][ T6305] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 129.640003][ T6305] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 129.640017][ T6305] ? security_sctp_bind_connect+0x7e/0x2c0 [ 129.640033][ T6305] sctp_sendmsg+0x173c/0x29b0 [ 129.640055][ T6305] ? __pfx_sctp_sendmsg+0x10/0x10 [ 129.640074][ T6305] ? aa_sk_perm+0x703/0x950 [ 129.640088][ T6305] ? __pfx_aa_sk_perm+0x10/0x10 [ 129.640097][ T6305] ? sock_rps_record_flow+0x19/0x350 [ 129.640111][ T6305] ? inet_sendmsg+0x2f4/0x370 [ 129.640126][ T6305] ? aa_sock_msg_perm+0x122/0x200 [ 129.640138][ T6305] ? __pfx_inet_sendmsg+0x10/0x10 [ 129.640149][ T6305] sock_sendmsg_nosec+0x10e/0x180 [ 129.640162][ T6305] __sys_sendto+0x402/0x590 [ 129.640179][ T6305] ? __pfx___sys_sendto+0x10/0x10 [ 129.640205][ T6305] ? ksys_write+0x248/0x270 [ 129.640220][ T6305] ? __pfx_ksys_write+0x10/0x10 [ 129.640235][ T6305] __x64_sys_sendto+0xde/0x100 [ 129.640249][ T6305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.640260][ T6305] do_syscall_64+0x174/0x580 [ 129.640274][ T6305] ? trace_irq_disable+0x3b/0x140 [ 129.640285][ T6305] ? clear_bhb_loop+0x40/0x90 [ 129.640298][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.640307][ T6305] RIP: 0033:0x7f7b9149ce59 [ 129.640317][ T6305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.640326][ T6305] RSP: 002b:00007f7b8f6f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 129.640338][ T6305] RAX: ffffffffffffffda RBX: 00007f7b91715fa0 RCX: 00007f7b9149ce59 [ 129.640345][ T6305] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 129.640351][ T6305] RBP: 00007f7b8f6f6090 R08: 000020000005ffe4 R09: 000000000000003a [ 129.640358][ T6305] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 129.640364][ T6305] R13: 00007f7b91716038 R14: 00007f7b91715fa0 R15: 00007ffc4e401078 [ 129.640379][ T6305] [ 129.816506][ T821] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 129.974414][ T821] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.974441][ T821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.974459][ T821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.974504][ T821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.994579][ T821] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.994606][ T821] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.994625][ T821] usb 4-1: Product: syz [ 129.994639][ T821] usb 4-1: Manufacturer: syz [ 130.049568][ T821] cdc_wdm 4-1:1.0: skipping garbage [ 130.049587][ T821] cdc_wdm 4-1:1.0: skipping garbage [ 130.081345][ T821] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 130.081365][ T821] cdc_wdm 4-1:1.0: Unknown control protocol [ 130.248724][ T821] usb 4-1: USB disconnect, device number 11 [ 130.492878][ T821] usb 2-1: USB disconnect, device number 11 [ 131.116467][ T5342] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 131.271878][ T5342] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.271931][ T5342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.271955][ T5342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.271975][ T5342] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 131.271987][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.282910][ T5342] usb 2-1: config 0 descriptor?? [ 131.699472][ T6342] use of bytesused == 0 is deprecated and will be removed in the future, [ 131.699487][ T6342] use the actual size instead. [ 131.719177][ T5342] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 131.719233][ T5342] wacom 0003:056A:0000.0006: unknown main item tag 0x0 [ 131.720582][ T5342] wacom 0003:056A:0000.0006: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 131.770536][ T5342] wacom 0003:056A:0000.0006: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.1-1/input0 [ 131.816422][ T5614] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 131.871976][ T5615] Bluetooth: hci1: unexpected cc 0x1408 length: 9 > 4 [ 131.882628][ T5342] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0000.0006/input/input5 [ 131.985833][ T5614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.985866][ T5614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.985902][ T5614] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 131.985925][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.068985][ T5614] usb 4-1: config 0 descriptor?? [ 132.431002][ T5342] usb 2-1: USB disconnect, device number 12 [ 132.530693][ T5614] elan 0003:04F3:0755.0007: item fetching failed at offset 3/5 [ 132.531414][ T5614] elan 0003:04F3:0755.0007: Hid Parse failed [ 132.531513][ T5614] elan 0003:04F3:0755.0007: probe with driver elan failed with error -22 [ 132.765503][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.765575][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.918459][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.918945][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.281546][ T6360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.313767][ T6360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.826366][ T5780] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 133.986333][ T5780] usb 1-1: Using ep0 maxpacket: 16 [ 133.989245][ T5780] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.989276][ T5780] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.989313][ T5780] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.989336][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.538241][ T5780] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 134.538279][ T5780] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 134.538304][ T5780] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 134.538330][ T5780] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 134.538354][ T5780] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 134.540564][ T5780] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 134.654240][ T821] usb 4-1: USB disconnect, device number 12 [ 134.798486][ T5780] usb 1-1: USB disconnect, device number 11 [ 134.876504][ T5342] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 135.016408][ T5342] usb 2-1: device descriptor read/64, error -71 [ 135.171606][ T821] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 135.296412][ T5342] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 135.326759][ T821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.326786][ T821] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.326828][ T821] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 135.326850][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.380479][ T821] usb 4-1: config 0 descriptor?? [ 135.426407][ T5342] usb 2-1: device descriptor read/64, error -71 [ 135.450711][ T821] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 135.537762][ T5342] usb usb2-port1: attempt power cycle [ 135.606373][ T32] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 135.770716][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 135.773245][ T32] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 135.773271][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.823697][ T32] usb 3-1: config 0 descriptor?? [ 135.839572][ T32] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 135.896732][ T5342] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 135.916922][ T5342] usb 2-1: device descriptor read/8, error -71 [ 136.026397][ T5614] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 136.034430][ T32] gspca_sonixj: reg_r err -32 [ 136.034520][ T32] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 136.156489][ T5342] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 136.186372][ T5614] usb 1-1: Using ep0 maxpacket: 16 [ 136.190913][ T5342] usb 2-1: device descriptor read/8, error -71 [ 136.191290][ T5614] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 136.191315][ T5614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.195484][ T5614] usb 1-1: config 0 descriptor?? [ 136.239194][ T5614] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 136.299074][ T5342] usb usb2-port1: unable to enumerate USB device [ 136.764071][ T5342] usb 3-1: USB disconnect, device number 14 [ 137.137060][ T6424] 9p: Bad value for 'rfdno' [ 137.418111][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.445574][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.520536][ T5614] gspca_sonixj: i2c_w8 err -71 [ 137.537676][ T5614] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 137.557810][ T5614] usb 1-1: USB disconnect, device number 12 [ 137.909746][ T32] usb 4-1: USB disconnect, device number 13 [ 138.143667][ T6447] bridge0: port 3(veth0_to_bridge) entered blocking state [ 138.143887][ T6447] bridge0: port 3(veth0_to_bridge) entered disabled state [ 138.144062][ T6447] veth0_to_bridge: entered allmulticast mode [ 138.176020][ T6447] veth0_to_bridge: entered promiscuous mode [ 138.176150][ T6447] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.194520][ T6447] bridge0: port 3(veth0_to_bridge) entered blocking state [ 138.195139][ T6447] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 138.226389][ T5780] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 138.274247][ T5614] IPVS: starting estimator thread 0... [ 138.282940][ T6449] 9pnet_fd: Insufficient options for proto=fd [ 138.316378][ T32] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 138.356472][ T6450] IPVS: using max 16 ests per chain, 38400 per kthread [ 138.376343][ T5780] usb 1-1: Using ep0 maxpacket: 16 [ 138.378249][ T5780] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.378278][ T5780] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.378316][ T5780] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 138.378333][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.470813][ T32] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 138.470842][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.470862][ T32] usb 4-1: Product: syz [ 138.470876][ T32] usb 4-1: Manufacturer: syz [ 138.470889][ T32] usb 4-1: SerialNumber: syz [ 138.520185][ T5342] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 138.670220][ T5342] usb 2-1: unable to get BOS descriptor or descriptor too short [ 138.670996][ T5342] usb 2-1: not running at top speed; connect to a high speed hub [ 138.672949][ T5342] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 138.672998][ T5342] usb 2-1: config 1 interface 0 has no altsetting 0 [ 138.677503][ T5342] usb 2-1: string descriptor 0 read error: -22 [ 138.677694][ T5342] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 138.677717][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.738339][ T6449] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 138.863805][ T5780] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 138.863848][ T5780] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 138.863875][ T5780] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 138.863900][ T5780] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 138.863923][ T5780] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 138.864752][ T5780] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 138.964539][ T32] rtl8150 4-1:1.0: couldn't reset the device [ 138.966113][ T32] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 139.029037][ T5780] usb 1-1: USB disconnect, device number 13 [ 139.111681][ T32] usb 4-1: USB disconnect, device number 14 [ 139.174755][ T5342] acrux 0003:1A34:F705.000A: unknown main item tag 0x0 [ 139.174791][ T5342] acrux 0003:1A34:F705.000A: unknown main item tag 0x0 [ 139.174818][ T5342] acrux 0003:1A34:F705.000A: unknown main item tag 0x0 [ 139.174844][ T5342] acrux 0003:1A34:F705.000A: unknown main item tag 0x0 [ 139.180270][ T5342] acrux 0003:1A34:F705.000A: unknown main item tag 0x0 [ 139.305018][ T5342] acrux 0003:1A34:F705.000A: hidraw0: USB HID v0.07 Device [HID 1a34:f705] on usb-dummy_hcd.1-1/input0 [ 139.305050][ T5342] acrux 0003:1A34:F705.000A: no inputs found [ 139.305063][ T5342] acrux 0003:1A34:F705.000A: Failed to enable force feedback support, error: -19 [ 139.426565][ T5342] usb 2-1: USB disconnect, device number 17 [ 139.470031][ T6461] fido_id[6461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 139.580502][ T6463] netlink: 165 bytes leftover after parsing attributes in process `syz.2.209'. [ 139.580612][ T6463] FAULT_INJECTION: forcing a failure. [ 139.580612][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 139.580628][ T6463] CPU: 1 UID: 0 PID: 6463 Comm: syz.2.209 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.580640][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.580646][ T6463] Call Trace: [ 139.580651][ T6463] [ 139.580655][ T6463] dump_stack_lvl+0xe8/0x150 [ 139.580670][ T6463] should_fail_ex+0x46b/0x600 [ 139.580689][ T6463] should_failslab+0xa8/0x100 [ 139.580703][ T6463] kmem_cache_alloc_noprof+0x87/0x680 [ 139.580716][ T6463] ? skb_clone+0x212/0x3a0 [ 139.580728][ T6463] skb_clone+0x212/0x3a0 [ 139.580739][ T6463] __netlink_deliver_tap+0x424/0x8b0 [ 139.580760][ T6463] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.580776][ T6463] netlink_deliver_tap+0x19c/0x1b0 [ 139.580791][ T6463] netlink_sendskb+0x68/0x140 [ 139.580806][ T6463] netlink_rcv_skb+0x2b6/0x4b0 [ 139.580821][ T6463] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 139.580833][ T6463] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.580853][ T6463] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.580870][ T6463] ? mutex_lock_nested+0x152/0x1d0 [ 139.580881][ T6463] ? xfrm_netlink_rcv+0x6a/0x90 [ 139.580912][ T6463] xfrm_netlink_rcv+0x79/0x90 [ 139.580923][ T6463] netlink_unicast+0x780/0x920 [ 139.580942][ T6463] netlink_sendmsg+0x813/0xb40 [ 139.580957][ T6463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.580967][ T6463] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 139.580983][ T6463] ? aa_sock_msg_perm+0x122/0x200 [ 139.580995][ T6463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.581004][ T6463] sock_sendmsg_nosec+0x13a/0x180 [ 139.581017][ T6463] ____sys_sendmsg+0x55c/0x870 [ 139.581036][ T6463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.581056][ T6463] ? import_iovec+0x73/0xa0 [ 139.581069][ T6463] ___sys_sendmsg+0x2a5/0x360 [ 139.581083][ T6463] ? __lock_acquire+0x6b5/0x2d10 [ 139.581098][ T6463] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.581131][ T6463] ? __fget_files+0x2a/0x420 [ 139.581142][ T6463] ? __fget_files+0x3a6/0x420 [ 139.581159][ T6463] __x64_sys_sendmsg+0x1c3/0x2a0 [ 139.581175][ T6463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.581195][ T6463] ? __pfx_ksys_write+0x10/0x10 [ 139.581213][ T6463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.581224][ T6463] do_syscall_64+0x174/0x580 [ 139.581238][ T6463] ? trace_irq_disable+0x3b/0x140 [ 139.581249][ T6463] ? clear_bhb_loop+0x40/0x90 [ 139.581262][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.581272][ T6463] RIP: 0033:0x7f7b9149ce59 [ 139.581283][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.581291][ T6463] RSP: 002b:00007f7b8f6f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.581303][ T6463] RAX: ffffffffffffffda RBX: 00007f7b91715fa0 RCX: 00007f7b9149ce59 [ 139.581310][ T6463] RDX: 00000000000000c0 RSI: 0000200000000480 RDI: 0000000000000003 [ 139.581316][ T6463] RBP: 00007f7b8f6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.581323][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.581328][ T6463] R13: 00007f7b91716038 R14: 00007f7b91715fa0 R15: 00007ffc4e401078 [ 139.581344][ T6463] [ 140.017175][ T5342] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 140.191704][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.191732][ T5342] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.191771][ T5342] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 140.191793][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.194553][ T5342] usb 4-1: config 0 descriptor?? [ 140.272986][ T5342] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 140.686076][ T6504] FAULT_INJECTION: forcing a failure. [ 140.686076][ T6504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.686097][ T6504] CPU: 1 UID: 0 PID: 6504 Comm: syz.2.226 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 140.686110][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.686116][ T6504] Call Trace: [ 140.686120][ T6504] [ 140.686125][ T6504] dump_stack_lvl+0xe8/0x150 [ 140.686140][ T6504] should_fail_ex+0x46b/0x600 [ 140.686158][ T6504] _copy_to_user+0x31/0xb0 [ 140.686171][ T6504] pagemap_read+0x4df/0x7d0 [ 140.686186][ T6504] ? __pfx_pagemap_read+0x10/0x10 [ 140.686199][ T6504] ? rw_verify_area+0x2ac/0x4e0 [ 140.686212][ T6504] ? __pfx_pagemap_read+0x10/0x10 [ 140.686228][ T6504] vfs_read+0x212/0xa80 [ 140.686256][ T6504] ? __pfx_vfs_read+0x10/0x10 [ 140.686280][ T6504] ? __fget_files+0x2a/0x420 [ 140.686302][ T6504] ? __fget_files+0x2a/0x420 [ 140.686323][ T6504] ? __fget_files+0x3a6/0x420 [ 140.686343][ T6504] ? __fget_files+0x2a/0x420 [ 140.686372][ T6504] __x64_sys_pread64+0x19c/0x230 [ 140.686401][ T6504] ? __pfx___x64_sys_pread64+0x10/0x10 [ 140.686436][ T6504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.686455][ T6504] do_syscall_64+0x174/0x580 [ 140.686484][ T6504] ? clear_bhb_loop+0x40/0x90 [ 140.686506][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.686524][ T6504] RIP: 0033:0x7f7b9149ce59 [ 140.686542][ T6504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.686557][ T6504] RSP: 002b:00007f7b8f6f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 140.686576][ T6504] RAX: ffffffffffffffda RBX: 00007f7b91715fa0 RCX: 00007f7b9149ce59 [ 140.686590][ T6504] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000003 [ 140.686602][ T6504] RBP: 00007f7b8f6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 140.686614][ T6504] R10: 0000001000000300 R11: 0000000000000246 R12: 0000000000000001 [ 140.686626][ T6504] R13: 00007f7b91716038 R14: 00007f7b91715fa0 R15: 00007ffc4e401078 [ 140.686655][ T6504] [ 141.227207][ T5614] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 141.296676][ T5342] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 141.303300][ T6525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.377214][ T5614] usb 3-1: device descriptor read/64, error -71 [ 141.456366][ T5342] usb 1-1: Using ep0 maxpacket: 32 [ 141.459495][ T5342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.459525][ T5342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.459562][ T5342] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 141.459584][ T5342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.462937][ T5342] usb 1-1: config 0 descriptor?? [ 141.531570][ T6522] syz.1.233 (6522) used greatest stack depth: 16704 bytes left [ 141.656368][ T5614] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 141.856368][ T5614] usb 3-1: device descriptor read/64, error -71 [ 141.976765][ T5614] usb usb3-port1: attempt power cycle [ 142.085435][ T5342] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 142.283499][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.285427][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.326704][ T5614] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 142.347027][ T5614] usb 3-1: device descriptor read/8, error -71 [ 142.511249][ T6546] warning: `syz.1.239' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.597266][ T5614] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 142.617193][ T5614] usb 3-1: device descriptor read/8, error -71 [ 142.728866][ T5614] usb usb3-port1: unable to enumerate USB device [ 142.824350][ T32] usb 4-1: USB disconnect, device number 15 [ 143.452027][ T37] audit: type=1326 audit(1780327403.026:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.1.242" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c57dece59 code=0x0 [ 143.963370][ T6560] 9p: Bad value for 'rfdno' [ 144.261960][ T6569] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 144.288486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.288939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.289249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.289552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.289831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.290120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.290414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.290689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.290970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.292686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.708181][ T5780] usb 1-1: USB disconnect, device number 14 [ 145.696449][ T32] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 145.800687][ T5780] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 145.883768][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 145.893060][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.893120][ T32] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 145.893142][ T32] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.953831][ T32] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 145.953860][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.953880][ T32] usb 4-1: Product: syz [ 145.953893][ T32] usb 4-1: Manufacturer: syz [ 145.953907][ T32] usb 4-1: SerialNumber: syz [ 146.010692][ T6604] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.062630][ T6612] FAULT_INJECTION: forcing a failure. [ 146.062630][ T6612] name failslab, interval 1, probability 0, space 0, times 0 [ 146.062662][ T6612] CPU: 1 UID: 0 PID: 6612 Comm: syz.2.266 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 146.062687][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.062698][ T6612] Call Trace: [ 146.062706][ T6612] [ 146.062714][ T6612] dump_stack_lvl+0xe8/0x150 [ 146.062741][ T6612] should_fail_ex+0x46b/0x600 [ 146.062774][ T6612] should_failslab+0xa8/0x100 [ 146.062800][ T6612] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 146.062824][ T6612] ? __kasan_kmalloc+0x93/0xb0 [ 146.062846][ T6612] ? __request_module+0x2ec/0x630 [ 146.062877][ T6612] kstrdup+0x42/0x100 [ 146.062896][ T6612] __request_module+0x2ec/0x630 [ 146.062925][ T6612] ? __pfx___request_module+0x10/0x10 [ 146.062957][ T6612] ? crypto_alg_lookup+0x3d3/0x450 [ 146.062994][ T6612] ? up_read+0x23/0x40 [ 146.063024][ T6612] crypto_alg_mod_lookup+0xa5/0x5f0 [ 146.063057][ T6612] crypto_alloc_tfm_node+0x13e/0x3f0 [ 146.063094][ T6612] kdf_alloc+0x21/0x100 [ 146.063117][ T6612] __keyctl_dh_compute+0x4f9/0xd10 [ 146.063151][ T6612] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 146.063186][ T6612] ? __might_fault+0xaf/0x130 [ 146.063229][ T6612] keyctl_dh_compute+0x124/0x180 [ 146.063254][ T6612] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 146.063283][ T6612] ? __se_sys_keyctl+0x435/0x9e0 [ 146.063316][ T6612] __se_sys_keyctl+0x44c/0x9e0 [ 146.063346][ T6612] ? __pfx___se_sys_keyctl+0x10/0x10 [ 146.063373][ T6612] ? lockdep_hardirqs_on+0x7a/0x110 [ 146.063401][ T6612] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 146.063428][ T6612] ? rt_mutex_slowunlock+0x1cb/0x300 [ 146.063450][ T6612] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 146.063480][ T6612] ? fput+0xa0/0xd0 [ 146.063502][ T6612] ? ksys_write+0x248/0x270 [ 146.063529][ T6612] ? __pfx_ksys_write+0x10/0x10 [ 146.063559][ T6612] ? __x64_sys_keyctl+0x20/0xc0 [ 146.063585][ T6612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.063606][ T6612] do_syscall_64+0x174/0x580 [ 146.063632][ T6612] ? trace_irq_disable+0x3b/0x140 [ 146.063653][ T6612] ? clear_bhb_loop+0x40/0x90 [ 146.063676][ T6612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.063695][ T6612] RIP: 0033:0x7f7b9149ce59 [ 146.063712][ T6612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.063728][ T6612] RSP: 002b:00007f7b8f6f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 146.063747][ T6612] RAX: ffffffffffffffda RBX: 00007f7b91715fa0 RCX: 00007f7b9149ce59 [ 146.063761][ T6612] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000017 [ 146.063773][ T6612] RBP: 00007f7b8f6f6090 R08: 0000200000000500 R09: 0000000000000000 [ 146.063785][ T6612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.063796][ T6612] R13: 00007f7b91716038 R14: 00007f7b91715fa0 R15: 00007ffc4e401078 [ 146.063826][ T6612] [ 146.167265][ T5780] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.167806][ T5780] usb 1-1: not running at top speed; connect to a high speed hub [ 146.208853][ T5780] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.208878][ T5780] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.450177][ T5780] usb 1-1: string descriptor 0 read error: -22 [ 146.450324][ T5780] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.450347][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.535352][ T5780] usb 1-1: 0:2 : does not exist [ 146.580358][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.706736][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.166371][ T821] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 147.320298][ T821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.320322][ T821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 147.320364][ T821] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 147.320402][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.400430][ T821] usb 3-1: config 0 descriptor?? [ 147.455131][ T821] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 147.455527][ T821] dvb-usb: bulk message failed: -22 (3/0) [ 147.594359][ T821] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 147.608947][ T6618] FAULT_INJECTION: forcing a failure. [ 147.608947][ T6618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.608977][ T6618] CPU: 1 UID: 0 PID: 6618 Comm: syz.2.268 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.608999][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.609010][ T6618] Call Trace: [ 147.609017][ T6618] [ 147.609025][ T6618] dump_stack_lvl+0xe8/0x150 [ 147.609053][ T6618] should_fail_ex+0x46b/0x600 [ 147.609086][ T6618] _copy_from_user+0x2d/0xb0 [ 147.609109][ T6618] memdup_user+0x5e/0xd0 [ 147.609129][ T6618] i2cdev_ioctl+0x659/0x890 [ 147.609160][ T6618] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 147.609188][ T6618] ? __fget_files+0x3a6/0x420 [ 147.609210][ T6618] ? __fget_files+0x2a/0x420 [ 147.609235][ T6618] ? bpf_lsm_file_ioctl+0x9/0x20 [ 147.609262][ T6618] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 147.609288][ T6618] __se_sys_ioctl+0xff/0x170 [ 147.609314][ T6618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.609335][ T6618] do_syscall_64+0x174/0x580 [ 147.609362][ T6618] ? trace_irq_disable+0x3b/0x140 [ 147.609391][ T6618] ? clear_bhb_loop+0x40/0x90 [ 147.609414][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.609432][ T6618] RIP: 0033:0x7f7b9149ce59 [ 147.609449][ T6618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.609464][ T6618] RSP: 002b:00007f7b8f6f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.609484][ T6618] RAX: ffffffffffffffda RBX: 00007f7b91715fa0 RCX: 00007f7b9149ce59 [ 147.609498][ T6618] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 147.609509][ T6618] RBP: 00007f7b8f6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.609522][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.609533][ T6618] R13: 00007f7b91716038 R14: 00007f7b91715fa0 R15: 00007ffc4e401078 [ 147.609562][ T6618] [ 147.610355][ T821] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 147.610415][ T821] usb 3-1: media controller created [ 147.855788][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.898666][ T821] dvb-usb: bulk message failed: -22 (6/0) [ 147.898818][ T821] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 147.939305][ T821] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 148.150038][ T821] dvb-usb: schedule remote query interval to 150 msecs. [ 148.150059][ T821] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 148.197666][ T821] usb 3-1: USB disconnect, device number 19 [ 148.596019][ T5780] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 148.705233][ T5780] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 149.299456][ C0] net_ratelimit: 9592 callbacks suppressed [ 149.299474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.300733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.301054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.303122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.304470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.304777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.305152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.308703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.309069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.309414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.397592][ T821] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 150.076831][ T6661] FAULT_INJECTION: forcing a failure. [ 150.076831][ T6661] name failslab, interval 1, probability 0, space 0, times 0 [ 150.076859][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz.2.283 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 150.076875][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.076885][ T6661] Call Trace: [ 150.076892][ T6661] [ 150.076899][ T6661] dump_stack_lvl+0xe8/0x150 [ 150.076920][ T6661] should_fail_ex+0x46b/0x600 [ 150.076944][ T6661] should_failslab+0xa8/0x100 [ 150.076963][ T6661] __kmalloc_noprof+0xdf/0x7b0 [ 150.076979][ T6661] ? kfree+0x4d/0x6c0 [ 150.076992][ T6661] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 150.077012][ T6661] tomoyo_realpath_from_path+0xe3/0x5d0 [ 150.077030][ T6661] ? tomoyo_domain+0xd7/0x130 [ 150.077051][ T6661] ? tomoyo_path_number_perm+0x219/0x630 [ 150.077073][ T6661] tomoyo_path_number_perm+0x246/0x630 [ 150.077096][ T6661] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 150.077117][ T6661] ? __lock_acquire+0x6b5/0x2d10 [ 150.077137][ T6661] ? do_raw_spin_lock+0x12b/0x2f0 [ 150.077175][ T6661] ? __fget_files+0x2a/0x420 [ 150.077193][ T6661] ? __fget_files+0x2a/0x420 [ 150.077207][ T6661] ? __fget_files+0x3a6/0x420 [ 150.077222][ T6661] ? __fget_files+0x2a/0x420 [ 150.077251][ T6661] security_file_ioctl+0xc3/0x2a0 [ 150.077273][ T6661] __se_sys_ioctl+0x47/0x170 [ 150.077296][ T6661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.077313][ T6661] do_syscall_64+0x174/0x580 [ 150.077333][ T6661] ? trace_irq_disable+0x3b/0x140 [ 150.077350][ T6661] ? clear_bhb_loop+0x40/0x90 [ 150.077368][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.077383][ T6661] RIP: 0033:0x7f7b9149ce59 [ 150.077398][ T6661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.077410][ T6661] RSP: 002b:00007f7b8f6f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.077427][ T6661] RAX: ffffffffffffffda RBX: 00007f7b91715fa0 RCX: 00007f7b9149ce59 [ 150.077438][ T6661] RDX: 00002000000003c0 RSI: 00000000c0386105 RDI: 0000000000000003 [ 150.077448][ T6661] RBP: 00007f7b8f6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 150.077458][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.077468][ T6661] R13: 00007f7b91716038 R14: 00007f7b91715fa0 R15: 00007ffc4e401078 [ 150.077492][ T6661] [ 150.077499][ T6661] ERROR: Out of memory at tomoyo_realpath_from_path. [ 150.128554][ T5780] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 150.227630][ T5780] usb 1-1: USB disconnect, device number 15 [ 150.242522][ T32] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.499110][ T32] usb 4-1: USB disconnect, device number 16 [ 153.193159][ T6714] Bluetooth: MGMT ver 1.23 [ 153.193603][ T6714] FAULT_INJECTION: forcing a failure. [ 153.193603][ T6714] name failslab, interval 1, probability 0, space 0, times 0 [ 153.193642][ T6714] CPU: 0 UID: 0 PID: 6714 Comm: syz.2.308 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 153.193669][ T6714] Tainted: [L]=SOFTLOCKUP [ 153.193675][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.193685][ T6714] Call Trace: [ 153.193692][ T6714] [ 153.193700][ T6714] dump_stack_lvl+0xe8/0x150 [ 153.193728][ T6714] should_fail_ex+0x46b/0x600 [ 153.193762][ T6714] should_failslab+0xa8/0x100 [ 153.193788][ T6714] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 153.193811][ T6714] ? __alloc_skb+0x1d0/0x7d0 [ 153.193836][ T6714] ? lockdep_hardirqs_on+0x7a/0x110 [ 153.193870][ T6714] __alloc_skb+0x1d0/0x7d0 [ 153.193894][ T6714] ? trace_kmalloc+0x2a/0xf0 [ 153.193923][ T6714] mgmt_cmd_complete+0x49/0x5f0 [ 153.193946][ T6714] ? get_connections+0x2f1/0x680 [ 153.193976][ T6714] get_connections+0x54d/0x680 [ 153.194013][ T6714] hci_mgmt_cmd+0xa14/0xfa0 [ 153.194041][ T6714] ? mutex_lock_nested+0x152/0x1d0 [ 153.194069][ T6714] hci_sock_sendmsg+0x6dd/0xf40 [ 153.194098][ T6714] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 153.194123][ T6714] ? __pfx_aa_file_perm+0x10/0x10 [ 153.194145][ T6714] ? aa_sock_msg_perm+0x122/0x200 [ 153.194166][ T6714] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 153.194187][ T6714] sock_sendmsg_nosec+0x13a/0x180 [ 153.194213][ T6714] sock_write_iter+0x308/0x410 [ 153.194237][ T6714] ? __pfx_sock_write_iter+0x10/0x10 [ 153.194279][ T6714] vfs_write+0x629/0xba0 [ 153.194311][ T6714] ? __pfx_vfs_write+0x10/0x10 [ 153.194342][ T6714] ? __fget_files+0x2a/0x420 [ 153.194373][ T6714] ksys_write+0x156/0x270 [ 153.194401][ T6714] ? __pfx_ksys_write+0x10/0x10 [ 153.194433][ T6714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.194453][ T6714] do_syscall_64+0x174/0x580 [ 153.194478][ T6714] ? trace_irq_disable+0x3b/0x140 [ 153.194499][ T6714] ? clear_bhb_loop+0x40/0x90 [ 153.194522][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.194541][ T6714] RIP: 0033:0x7f7b9149ce59 [ 153.194557][ T6714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.194572][ T6714] RSP: 002b:00007f7b8f6f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.194590][ T6714] RAX: ffffffffffffffda RBX: 00007f7b91715fa0 RCX: 00007f7b9149ce59 [ 153.194603][ T6714] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000004 [ 153.194620][ T6714] RBP: 00007f7b8f6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.194632][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.194643][ T6714] R13: 00007f7b91716038 R14: 00007f7b91715fa0 R15: 00007ffc4e401078 [ 153.194675][ T6714] [ 154.194885][ T32] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 154.307006][ C0] net_ratelimit: 6504 callbacks suppressed [ 154.307019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.307201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.307400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.308124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.308277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.308453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.309122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.309275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.309470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.310179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.346319][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 154.349187][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.349216][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.349252][ T32] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 154.349274][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.553998][ T32] usb 4-1: config 0 descriptor?? [ 154.737811][ T32] usbhid 4-1:0.0: can't add hid device: -71 [ 154.737940][ T32] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 154.778853][ T32] usb 4-1: USB disconnect, device number 17 [ 154.928626][ T6727] FAULT_INJECTION: forcing a failure. [ 154.928626][ T6727] name failslab, interval 1, probability 0, space 0, times 0 [ 154.928659][ T6727] CPU: 1 UID: 0 PID: 6727 Comm: syz.0.315 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 154.928684][ T6727] Tainted: [L]=SOFTLOCKUP [ 154.928691][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.928701][ T6727] Call Trace: [ 154.928708][ T6727] [ 154.928715][ T6727] dump_stack_lvl+0xe8/0x150 [ 154.928744][ T6727] should_fail_ex+0x46b/0x600 [ 154.928778][ T6727] should_failslab+0xa8/0x100 [ 154.928803][ T6727] __kmalloc_noprof+0xdf/0x7b0 [ 154.928826][ T6727] ? __pcs_replace_empty_main+0x331/0x720 [ 154.928859][ T6727] __pcs_replace_empty_main+0x331/0x720 [ 154.928898][ T6727] ? rt_spin_trylock+0x13a/0x2b0 [ 154.928926][ T6727] kmem_cache_alloc_noprof+0x433/0x680 [ 154.928948][ T6727] ? fanotify_add_mark+0x32e/0x14a0 [ 154.928976][ T6727] fanotify_add_mark+0x32e/0x14a0 [ 154.929016][ T6727] ? bpf_lsm_path_notify+0x9/0x20 [ 154.929042][ T6727] do_fanotify_mark+0xeb7/0x1040 [ 154.929078][ T6727] ? __pfx_do_fanotify_mark+0x10/0x10 [ 154.929102][ T6727] ? ksys_write+0x248/0x270 [ 154.929131][ T6727] ? __pfx_ksys_write+0x10/0x10 [ 154.929162][ T6727] __x64_sys_fanotify_mark+0xb5/0xd0 [ 154.929185][ T6727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.929205][ T6727] do_syscall_64+0x174/0x580 [ 154.929234][ T6727] ? clear_bhb_loop+0x40/0x90 [ 154.929257][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.929275][ T6727] RIP: 0033:0x7f0b27d3ce59 [ 154.929292][ T6727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.929308][ T6727] RSP: 002b:00007f0b25f8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 154.929328][ T6727] RAX: ffffffffffffffda RBX: 00007f0b27fb5fa0 RCX: 00007f0b27d3ce59 [ 154.929341][ T6727] RDX: 0000000048000038 RSI: 0000000000000001 RDI: 0000000000000004 [ 154.929353][ T6727] RBP: 00007f0b25f8e090 R08: 0000000000000000 R09: 0000000000000000 [ 154.929364][ T6727] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 154.929374][ T6727] R13: 00007f0b27fb6038 R14: 00007f0b27fb5fa0 R15: 00007ffeadd07f38 [ 154.929408][ T6727] [ 156.718643][ T6718] syz.1.311 (6718) used greatest stack depth: 16128 bytes left [ 158.286675][ T6743] netlink: 'syz.2.322': attribute type 10 has an invalid length. [ 158.376165][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.414734][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.772145][ T6743] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.772362][ T6743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.806777][ T6743] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.806994][ T6743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.993828][ T6743] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 159.145914][ T6748] netlink: 9 bytes leftover after parsing attributes in process `syz.0.323'. [ 159.316818][ C0] net_ratelimit: 14702 callbacks suppressed [ 159.316838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.317223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.318637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.319033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.319449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.320859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.321189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.321590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.322972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.323355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.308739][ T6748] gretap0: entered promiscuous mode [ 162.585233][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 163.226401][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 164.010260][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.021436][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.021470][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 164.021495][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 164.021515][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.021557][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 164.021579][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.326269][ C0] net_ratelimit: 14172 callbacks suppressed [ 164.326290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.326295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 164.326647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 164.326987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 164.327329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 164.327518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.327677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 164.327803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.328017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 164.328138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.073092][ T9] usb 1-1: config 0 descriptor?? [ 169.337444][ C0] net_ratelimit: 21831 callbacks suppressed [ 169.337464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.337752][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.338088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.339816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.340114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.340445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.341730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.342016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.342354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.343528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.306579][ T9] usb 1-1: can't set config #0, error -71 [ 172.400376][ T9] usb 1-1: USB disconnect, device number 16 [ 172.590811][ T821] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 173.501928][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 173.501980][ T821] usb 2-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 173.502003][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.542306][ T821] usb 2-1: config 0 descriptor?? [ 173.552399][ T6780] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 173.856336][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 174.346426][ C1] net_ratelimit: 9607 callbacks suppressed [ 174.346448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 174.346530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.346797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 174.346865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.347147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 174.347204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.347539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 174.347935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 174.348278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 174.348442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.929798][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 176.117292][ T6780] netlink: 830 bytes leftover after parsing attributes in process `syz.1.335'. [ 177.158083][ T821] hid_parser_main: 4012 callbacks suppressed [ 177.158107][ T821] wacom 0003:056A:0043.000C: unknown main item tag 0x0 [ 177.158138][ T821] wacom 0003:056A:0043.000C: unknown main item tag 0x0 [ 177.158165][ T821] wacom 0003:056A:0043.000C: unknown main item tag 0x0 [ 177.158191][ T821] wacom 0003:056A:0043.000C: unknown main item tag 0x0 [ 177.158218][ T821] wacom 0003:056A:0043.000C: unknown main item tag 0x0 [ 177.158243][ T821] wacom 0003:056A:0043.000C: unknown main item tag 0x0 [ 177.158268][ T821] wacom 0003:056A:0043.000C: unknown main item tag 0x0 [ 177.158294][ T821] wacom 0003:056A:0043.000C: unknown main item tag 0x0 [ 177.158320][ T821] wacom 0003:056A:0043.000C: unknown main item tag 0x0 [ 177.158346][ T821] wacom 0003:056A:0043.000C: unknown main item tag 0x0 [ 177.284335][ T821] wacom 0003:056A:0043.000C: ignoring exceeding usage max [ 177.548914][ T9] usb 1-1: device descriptor read/all, error -71 [ 178.766356][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 179.229854][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.287279][ T9] usb 1-1: config 2 has an invalid interface number: 2 but max is 0 [ 179.287307][ T9] usb 1-1: config 2 has no interface number 0 [ 179.287340][ T9] usb 1-1: config 2 interface 2 has no altsetting 0 [ 179.356480][ C1] net_ratelimit: 16877 callbacks suppressed [ 179.356499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 179.356842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 179.357189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 179.357203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.357489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.357536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 179.357868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 179.357880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.358210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 179.358572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 180.598909][ T5614] usb 2-1: USB disconnect, device number 18 [ 180.640527][ T9] usb 1-1: New USB device found, idVendor=1608, idProduct=021e, bcdDevice=d6.6c [ 180.640558][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.640577][ T9] usb 1-1: Product: syz [ 180.640590][ T9] usb 1-1: Manufacturer: syz [ 180.640604][ T9] usb 1-1: SerialNumber: syz [ 184.366305][ C0] net_ratelimit: 19908 callbacks suppressed [ 184.366326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.366371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 184.366764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 184.367118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 184.367474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 184.367553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.367819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 184.367842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.368159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.368465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 184.617186][ T9] io_ti 1-1:2.2: required endpoints missing [ 184.681767][ T9] usb 1-1: USB disconnect, device number 18 [ 186.444028][ T6837] FAULT_INJECTION: forcing a failure. [ 186.444028][ T6837] name failslab, interval 1, probability 0, space 0, times 0 [ 186.444062][ T6837] CPU: 0 UID: 0 PID: 6837 Comm: syz.2.353 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 186.444087][ T6837] Tainted: [L]=SOFTLOCKUP [ 186.444094][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.444104][ T6837] Call Trace: [ 186.444110][ T6837] [ 186.444118][ T6837] dump_stack_lvl+0xe8/0x150 [ 186.444143][ T6837] should_fail_ex+0x46b/0x600 [ 186.444172][ T6837] should_failslab+0xa8/0x100 [ 186.444197][ T6837] kmem_cache_alloc_noprof+0x87/0x680 [ 186.444218][ T6837] ? alloc_empty_file+0x5b/0x1d0 [ 186.444244][ T6837] alloc_empty_file+0x5b/0x1d0 [ 186.444265][ T6837] alloc_file_pseudo+0x155/0x240 [ 186.444291][ T6837] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 186.444322][ T6837] do_accept+0x4a4/0x930 [ 186.444363][ T6837] ? __pfx_do_accept+0x10/0x10 [ 186.444407][ T6837] __sys_accept4+0x139/0x230 [ 186.444434][ T6837] ? __pfx___sys_accept4+0x10/0x10 [ 186.444458][ T6837] ? __pfx_ksys_write+0x10/0x10 [ 186.444488][ T6837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.444509][ T6837] __x64_sys_accept+0x7d/0x90 [ 186.444534][ T6837] do_syscall_64+0x174/0x580 [ 186.444560][ T6837] ? trace_irq_disable+0x3b/0x140 [ 186.444581][ T6837] ? clear_bhb_loop+0x40/0x90 [ 186.444604][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.444623][ T6837] RIP: 0033:0x7f7b9149ce59 [ 186.444640][ T6837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.444656][ T6837] RSP: 002b:00007f7b8f6f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 186.444676][ T6837] RAX: ffffffffffffffda RBX: 00007f7b91715fa0 RCX: 00007f7b9149ce59 [ 186.444690][ T6837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 186.444702][ T6837] RBP: 00007f7b8f6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 186.444715][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.444726][ T6837] R13: 00007f7b91716038 R14: 00007f7b91715fa0 R15: 00007ffc4e401078 [ 186.444756][ T6837] [ 186.796547][ T5614] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 187.257892][ T821] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 187.269027][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 187.336393][ T5614] usb 1-1: Using ep0 maxpacket: 16 [ 187.476348][ T821] usb 4-1: device descriptor read/64, error -32 [ 187.507900][ T5614] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.507954][ T5614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.507980][ T5614] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 187.509901][ T5614] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 187.509927][ T5614] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 187.509947][ T5614] usb 1-1: Manufacturer: syz [ 187.599036][ T5614] usb 1-1: config 0 descriptor?? [ 187.806350][ T821] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 188.446354][ T821] usb 4-1: Using ep0 maxpacket: 16 [ 188.451449][ T821] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.451482][ T821] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.451521][ T821] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 188.451543][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.376572][ C1] net_ratelimit: 13897 callbacks suppressed [ 189.376593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 189.376942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 189.377284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 189.377664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 189.378046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 189.378400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 189.378755][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 189.379136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 189.379475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 189.379843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 189.794942][ T821] hid_parser_main: 338 callbacks suppressed [ 189.794966][ T821] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 189.794997][ T821] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 189.795023][ T821] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 189.795049][ T821] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 189.795076][ T821] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 189.795907][ T821] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 189.868444][ T5713] usb 1-1: USB disconnect, device number 19 [ 191.126344][ T821] usb 4-1: USB disconnect, device number 19 [ 194.380523][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.386619][ C0] net_ratelimit: 17246 callbacks suppressed [ 194.386634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.387992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.388314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.388682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.390023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.390339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.390711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.392077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.392398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.392773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.400198][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.396432][ C0] net_ratelimit: 18192 callbacks suppressed [ 199.396458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.396545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 199.396799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.396917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 199.397283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 199.397627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 199.397975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 199.398012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.398299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.398317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 200.829363][ T10] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 201.048021][ T10] usb 2-1: config 248 has an invalid interface number: 168 but max is 0 [ 201.048051][ T10] usb 2-1: config 248 has no interface number 0 [ 201.048083][ T10] usb 2-1: config 248 interface 168 has no altsetting 0 [ 201.052697][ T10] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 6.7e [ 201.052725][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.052745][ T10] usb 2-1: Product: syz [ 201.052760][ T10] usb 2-1: Manufacturer: syz [ 201.052774][ T10] usb 2-1: SerialNumber: syz [ 201.646170][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.660862][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.662097][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.662651][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.663884][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.664440][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.725228][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.725816][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.806593][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.807168][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.404017][ T10] usb 2-1: USB disconnect, device number 19 [ 204.406442][ C0] net_ratelimit: 15205 callbacks suppressed [ 204.406461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.406624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 204.406803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.407019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 204.407133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.407407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 204.407787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 204.408165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 204.408339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.408616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.333830][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 207.355103][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 207.355141][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 208.085110][ T6953] FAULT_INJECTION: forcing a failure. [ 208.085110][ T6953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.085147][ T6953] CPU: 1 UID: 0 PID: 6953 Comm: syz.3.397 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 208.085174][ T6953] Tainted: [L]=SOFTLOCKUP [ 208.085180][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.085192][ T6953] Call Trace: [ 208.085200][ T6953] [ 208.085208][ T6953] dump_stack_lvl+0xe8/0x150 [ 208.085234][ T6953] should_fail_ex+0x46b/0x600 [ 208.085267][ T6953] _copy_from_user+0x2d/0xb0 [ 208.085290][ T6953] ___sys_recvmsg+0x175/0x590 [ 208.085316][ T6953] ? get_pid_task+0x20/0x1f0 [ 208.085336][ T6953] ? get_pid_task+0x20/0x1f0 [ 208.085359][ T6953] ? __pfx____sys_recvmsg+0x10/0x10 [ 208.085382][ T6953] ? __fget_files+0x2a/0x420 [ 208.085420][ T6953] ? __fget_files+0x3a6/0x420 [ 208.085452][ T6953] __x64_sys_recvmsg+0x1c0/0x2a0 [ 208.085473][ T6953] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 208.085500][ T6953] ? __pfx_ksys_write+0x10/0x10 [ 208.085533][ T6953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.085554][ T6953] do_syscall_64+0x174/0x580 [ 208.085581][ T6953] ? trace_irq_disable+0x3b/0x140 [ 208.085602][ T6953] ? clear_bhb_loop+0x40/0x90 [ 208.085626][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.085644][ T6953] RIP: 0033:0x7f758e28ce59 [ 208.085662][ T6953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.085678][ T6953] RSP: 002b:00007f758c4c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 208.085699][ T6953] RAX: ffffffffffffffda RBX: 00007f758e506090 RCX: 00007f758e28ce59 [ 208.085712][ T6953] RDX: 0000000000000002 RSI: 0000200000001e80 RDI: 0000000000000004 [ 208.085724][ T6953] RBP: 00007f758c4c5090 R08: 0000000000000000 R09: 0000000000000000 [ 208.085737][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.085748][ T6953] R13: 00007f758e506128 R14: 00007f758e506090 R15: 00007ffdb15661a8 [ 208.085778][ T6953] [ 209.416429][ C1] net_ratelimit: 18392 callbacks suppressed [ 209.416450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 209.416789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 209.417080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.417128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 209.417473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 209.417531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.417818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 209.417932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.418154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 209.418262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.460446][ T6966] capability: warning: `syz.1.399' uses 32-bit capabilities (legacy support in use) [ 214.426615][ C0] net_ratelimit: 17342 callbacks suppressed [ 214.426636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.426967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.427252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.427585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.428596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.429691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.430086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.430415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.430648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.430967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.436401][ C1] net_ratelimit: 17698 callbacks suppressed [ 219.436421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 219.436856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.436934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 219.437331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 219.437808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 219.437990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.438307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 219.438401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.438714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 219.438739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.130123][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 221.675083][ T7018] binder: 7016:7018 ioctl 4018620d 0 returned -22 [ 222.098451][ T37] audit: type=1800 audit(1780327481.606:4): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.416" name="file1" dev="ramfs" ino=13852 res=0 errno=0 [ 222.666397][ T5780] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 222.770291][ T7029] FAULT_INJECTION: forcing a failure. [ 222.770291][ T7029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.770326][ T7029] CPU: 0 UID: 0 PID: 7029 Comm: syz.1.421 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 222.770352][ T7029] Tainted: [L]=SOFTLOCKUP [ 222.770359][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.770370][ T7029] Call Trace: [ 222.770378][ T7029] [ 222.770386][ T7029] dump_stack_lvl+0xe8/0x150 [ 222.770414][ T7029] should_fail_ex+0x46b/0x600 [ 222.770447][ T7029] _copy_from_user+0x2d/0xb0 [ 222.770471][ T7029] __sys_bind+0x1cc/0x410 [ 222.770499][ T7029] ? __pfx___sys_bind+0x10/0x10 [ 222.770534][ T7029] ? __pfx_ksys_write+0x10/0x10 [ 222.770565][ T7029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.770585][ T7029] __x64_sys_bind+0x7a/0x90 [ 222.770610][ T7029] do_syscall_64+0x174/0x580 [ 222.770637][ T7029] ? trace_irq_disable+0x3b/0x140 [ 222.770658][ T7029] ? clear_bhb_loop+0x40/0x90 [ 222.770682][ T7029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.770700][ T7029] RIP: 0033:0x7f9c57dece59 [ 222.770718][ T7029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.770734][ T7029] RSP: 002b:00007f9c56025028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 222.770754][ T7029] RAX: ffffffffffffffda RBX: 00007f9c58066090 RCX: 00007f9c57dece59 [ 222.770768][ T7029] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 222.770780][ T7029] RBP: 00007f9c56025090 R08: 0000000000000000 R09: 0000000000000000 [ 222.770792][ T7029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.770804][ T7029] R13: 00007f9c58066128 R14: 00007f9c58066090 R15: 00007fff72661f78 [ 222.770835][ T7029] [ 223.061102][ T5780] usb 4-1: unable to get BOS descriptor or descriptor too short [ 223.074274][ T5780] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 223.074316][ T5780] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 223.074336][ T5780] usb 4-1: config 63 has no interface number 0 [ 223.074368][ T5780] usb 4-1: config 63 interface 66 has no altsetting 0 [ 224.446335][ C0] net_ratelimit: 17422 callbacks suppressed [ 224.446356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.446684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 224.447092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 224.447512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.447603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 224.448005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 224.448399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 224.448637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.448781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 224.449027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.937638][ T5780] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 224.937676][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.937696][ T5780] usb 4-1: Product: syz [ 224.937710][ T5780] usb 4-1: Manufacturer: syz [ 224.937725][ T5780] usb 4-1: SerialNumber: syz [ 225.292551][ T5780] uvcvideo 4-1:63.66: Found Unit with invalid ID 0 [ 225.292687][ T5780] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 225.292829][ T5780] uvcvideo 4-1:63.66: No valid video chain found. [ 225.303779][ T5780] usb 4-1: USB disconnect, device number 20 [ 225.716360][ T5732] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 226.105456][ T5732] usb 1-1: device not accepting address 20, error -71 [ 228.900745][ T5732] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 229.456485][ C0] net_ratelimit: 16037 callbacks suppressed [ 229.456505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.456818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.457985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.459032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.459387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.459708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.459981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.460301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.461430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.462579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.796692][ T5616] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 230.223123][ T5732] usb 1-1: Using ep0 maxpacket: 8 [ 230.229768][ T5616] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.231271][ T5616] usb 2-1: not running at top speed; connect to a high speed hub [ 230.236544][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 230.236575][ T5732] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 230.236616][ T5732] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 230.236639][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.239215][ T5616] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 230.239237][ T5616] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 230.255733][ T5732] usb 1-1: config 0 descriptor?? [ 230.265863][ T5616] usb 2-1: string descriptor 0 read error: -22 [ 230.266009][ T5616] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 230.266034][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.552963][ T5616] snd-usb-6fire 2-1:2.0: unknown device firmware state received from device: [ 231.552982][ T5616] 23 ad 01 c0 cd a8 9d bf [ 231.553730][ T5616] snd-usb-6fire 2-1:2.0: probe with driver snd-usb-6fire failed with error -5 [ 231.734077][ T5732] usbhid 1-1:0.0: can't add hid device: -71 [ 231.734195][ T5732] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 231.759952][ T32] usb 2-1: USB disconnect, device number 20 [ 231.773389][ T5732] usb 1-1: USB disconnect, device number 21 [ 233.788029][ T5614] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 233.976381][ T5614] usb 4-1: Using ep0 maxpacket: 32 [ 233.978938][ T5614] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 233.978979][ T5614] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 233.979018][ T5614] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 233.979046][ T5614] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 233.979081][ T5614] usb 4-1: config 0 interface 0 has no altsetting 0 [ 233.981760][ T5614] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 233.981787][ T5614] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 233.981808][ T5614] usb 4-1: Product: syz [ 233.981822][ T5614] usb 4-1: Manufacturer: syz [ 233.981837][ T5614] usb 4-1: SerialNumber: syz [ 234.044275][ T5732] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 234.239084][ T5732] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 234.239115][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.466387][ C1] net_ratelimit: 17091 callbacks suppressed [ 234.466408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 234.466531][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.466763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 234.467096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 234.467437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 234.467681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.467774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 234.468198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 234.468548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 234.468830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.706475][ T5614] usb 4-1: config 0 descriptor?? [ 234.709563][ T5732] usb 1-1: config 0 descriptor?? [ 234.843896][ T5614] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 234.870434][ T5732] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 234.877479][ T5614] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 235.046524][ T5614] usb 4-1: USB disconnect, device number 21 [ 235.198148][ T5732] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 235.198194][ T5732] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 235.239066][ T32] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 235.396810][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 235.406917][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.406948][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.406986][ T32] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 235.407009][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.502295][ T32] usb 2-1: config 0 descriptor?? [ 236.029913][ T5614] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 236.064281][ T6777] udevd[6777]: setting owner of /dev/bus/usb/004/021 to uid=0, gid=0 failed: No such file or directory [ 236.111745][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 236.112579][ T32] usbhid 2-1:0.0: can't add hid device: -71 [ 236.112707][ T32] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 237.191918][ T32] usb 2-1: USB disconnect, device number 21 [ 237.428805][ T5616] usb 1-1: USB disconnect, device number 22 [ 239.476821][ C1] net_ratelimit: 16120 callbacks suppressed [ 239.476841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 239.477233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 239.477561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 239.477840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.477901][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 239.478234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.478244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 239.478571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.478597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 239.478939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 239.758994][ T7124] ubi16: attaching mtd0 [ 239.994889][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 240.109973][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 240.347861][ T7124] ubi16: scanning is finished [ 240.347881][ T7124] ubi16: empty MTD device detected [ 240.370201][ T5732] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 240.511715][ T5732] usb 4-1: device descriptor read/64, error -71 [ 240.846381][ T5732] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 240.847964][ T5780] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 241.013776][ T5780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.024865][ T5732] usb 4-1: device descriptor read/64, error -71 [ 241.054373][ T5780] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 241.054406][ T5780] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 241.054497][ T5780] usb 1-1: Manufacturer: syz [ 241.105046][ T5780] usb 1-1: config 0 descriptor?? [ 241.159934][ T5780] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 241.240719][ T5732] usb usb4-port1: attempt power cycle [ 242.311649][ T5732] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 242.327117][ T5732] usb 4-1: device descriptor read/8, error -71 [ 242.564410][ T7132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.661139][ T7132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.676430][ T5732] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 242.818611][ T5732] usb 4-1: device descriptor read/8, error -71 [ 243.080863][ T7158] FAULT_INJECTION: forcing a failure. [ 243.080863][ T7158] name failslab, interval 1, probability 0, space 0, times 0 [ 243.080898][ T7158] CPU: 1 UID: 0 PID: 7158 Comm: syz.2.470 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 243.080925][ T7158] Tainted: [L]=SOFTLOCKUP [ 243.080931][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.080958][ T7158] Call Trace: [ 243.080965][ T7158] [ 243.080973][ T7158] dump_stack_lvl+0xe8/0x150 [ 243.080999][ T7158] should_fail_ex+0x46b/0x600 [ 243.081030][ T7158] should_failslab+0xa8/0x100 [ 243.081057][ T7158] kmem_cache_alloc_noprof+0x87/0x680 [ 243.081089][ T7158] ? skb_clone+0x212/0x3a0 [ 243.081110][ T7158] skb_clone+0x212/0x3a0 [ 243.081127][ T7158] ? nfnetlink_rcv+0x4b0/0x27b0 [ 243.081155][ T7158] nfnetlink_rcv+0x4e2/0x27b0 [ 243.081183][ T7158] ? sock_sendmsg_nosec+0x13a/0x180 [ 243.081207][ T7158] ? __pfx_snprintf+0x10/0x10 [ 243.081231][ T7158] ? unwind_get_return_address+0x4d/0x90 [ 243.081266][ T7158] ? trim_netdev_trace+0x7ac/0x840 [ 243.081291][ T7158] ? __pfx_trim_netdev_trace+0x10/0x10 [ 243.081310][ T7158] ? stack_trace_save+0xa9/0x100 [ 243.081333][ T7158] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 243.081373][ T7158] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 243.081393][ T7158] ? ref_tracker_free+0x673/0x820 [ 243.081420][ T7158] ? __netlink_deliver_tap+0x636/0x8b0 [ 243.081447][ T7158] ? netlink_deliver_tap+0x19c/0x1b0 [ 243.081472][ T7158] ? netlink_unicast+0x754/0x920 [ 243.081495][ T7158] ? netlink_sendmsg+0x813/0xb40 [ 243.081510][ T7158] ? sock_sendmsg_nosec+0x13a/0x180 [ 243.081529][ T7158] ? ____sys_sendmsg+0x55c/0x870 [ 243.081555][ T7158] ? ___sys_sendmsg+0x2a5/0x360 [ 243.081581][ T7158] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 243.081607][ T7158] ? do_syscall_64+0x174/0x580 [ 243.081633][ T7158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.081666][ T7158] ? skb_clone+0x246/0x3a0 [ 243.081687][ T7158] ? __netlink_deliver_tap+0x866/0x8b0 [ 243.081716][ T7158] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.081750][ T7158] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.081777][ T7158] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.081810][ T7158] netlink_unicast+0x780/0x920 [ 243.081846][ T7158] netlink_sendmsg+0x813/0xb40 [ 243.081873][ T7158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.081894][ T7158] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 243.081922][ T7158] ? aa_sock_msg_perm+0x122/0x200 [ 243.081943][ T7158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.081961][ T7158] sock_sendmsg_nosec+0x13a/0x180 [ 243.081986][ T7158] ____sys_sendmsg+0x55c/0x870 [ 243.082020][ T7158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.082056][ T7158] ? import_iovec+0x73/0xa0 [ 243.082097][ T7158] ___sys_sendmsg+0x2a5/0x360 [ 243.082124][ T7158] ? __lock_acquire+0x6b5/0x2d10 [ 243.082150][ T7158] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.082211][ T7158] ? __fget_files+0x2a/0x420 [ 243.082233][ T7158] ? __fget_files+0x3a6/0x420 [ 243.082264][ T7158] __x64_sys_sendmsg+0x1c3/0x2a0 [ 243.082295][ T7158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.082331][ T7158] ? __pfx_ksys_write+0x10/0x10 [ 243.082365][ T7158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.082385][ T7158] do_syscall_64+0x174/0x580 [ 243.082411][ T7158] ? trace_irq_disable+0x3b/0x140 [ 243.082432][ T7158] ? clear_bhb_loop+0x40/0x90 [ 243.082456][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.082476][ T7158] RIP: 0033:0x7f7b9149ce59 [ 243.082493][ T7158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.082509][ T7158] RSP: 002b:00007f7b8f6d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.082530][ T7158] RAX: ffffffffffffffda RBX: 00007f7b91716090 RCX: 00007f7b9149ce59 [ 243.082544][ T7158] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 243.082556][ T7158] RBP: 00007f7b8f6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 243.082568][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.082579][ T7158] R13: 00007f7b91716128 R14: 00007f7b91716090 R15: 00007ffc4e401078 [ 243.082609][ T7158] [ 243.294856][ T5732] usb usb4-port1: unable to enumerate USB device [ 244.030508][ T7163] 9p: Bad value for 'rfdno' [ 244.220686][ T7124] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 244.220802][ T7124] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 244.220822][ T7124] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 244.220838][ T7124] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 244.220855][ T7124] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 244.220872][ T7124] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 244.220889][ T7124] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 358425214 [ 244.220909][ T7124] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 244.234332][ T7164] ubi16: background thread "ubi_bgt16d" started, PID 7164 [ 244.336417][ T5745] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 244.486369][ C1] net_ratelimit: 13080 callbacks suppressed [ 244.486389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 244.486791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 244.486990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.487302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 244.487701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 244.488135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.488209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 244.488530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.488679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 244.488860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.910049][ T7169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.912820][ T7169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.566384][ T5616] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 246.093920][ T5745] usb 4-1: device descriptor read/64, error -71 [ 246.095135][ T5780] usb 1-1: USB disconnect, device number 23 [ 246.373874][ T5745] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 249.496639][ C1] net_ratelimit: 13040 callbacks suppressed [ 249.496656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 249.497109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 249.497590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 249.498032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 249.498481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 249.498937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 249.499544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 249.499932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 249.500318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 249.500683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 249.688361][ T7189] 9p: Bad value for 'rfdno' [ 250.437970][ T5745] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 250.607888][ T5745] usb 4-1: Using ep0 maxpacket: 32 [ 250.610133][ T5745] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.610159][ T5745] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 250.610182][ T5745] usb 4-1: config 0 interface 0 has no altsetting 0 [ 250.617100][ T5745] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 250.617127][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.617148][ T5745] usb 4-1: Product: syz [ 250.617161][ T5745] usb 4-1: Manufacturer: syz [ 250.617175][ T5745] usb 4-1: SerialNumber: syz [ 250.680408][ T5745] usb 4-1: config 0 descriptor?? [ 252.113933][ T7193] FAULT_INJECTION: forcing a failure. [ 252.113933][ T7193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.113968][ T7193] CPU: 1 UID: 0 PID: 7193 Comm: syz.0.484 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 252.113994][ T7193] Tainted: [L]=SOFTLOCKUP [ 252.114001][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.114012][ T7193] Call Trace: [ 252.114019][ T7193] [ 252.114028][ T7193] dump_stack_lvl+0xe8/0x150 [ 252.114056][ T7193] should_fail_ex+0x46b/0x600 [ 252.114089][ T7193] _copy_from_user+0x2d/0xb0 [ 252.114112][ T7193] snd_seq_write+0x314/0x830 [ 252.114148][ T7193] ? __pfx_snd_seq_write+0x10/0x10 [ 252.114177][ T7193] ? rw_verify_area+0x25b/0x4e0 [ 252.114207][ T7193] vfs_writev+0x4c6/0x9a0 [ 252.114230][ T7193] ? __pfx_snd_seq_write+0x10/0x10 [ 252.114257][ T7193] ? __pfx_vfs_writev+0x10/0x10 [ 252.114293][ T7193] ? __fget_files+0x2a/0x420 [ 252.114325][ T7193] ? __fget_files+0x3a6/0x420 [ 252.114345][ T7193] ? __fget_files+0x2a/0x420 [ 252.114382][ T7193] do_writev+0x15a/0x2e0 [ 252.114404][ T7193] ? __pfx_do_writev+0x10/0x10 [ 252.114432][ T7193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.114453][ T7193] do_syscall_64+0x174/0x580 [ 252.114479][ T7193] ? trace_irq_disable+0x3b/0x140 [ 252.114501][ T7193] ? clear_bhb_loop+0x40/0x90 [ 252.114524][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.114543][ T7193] RIP: 0033:0x7f0b27d3ce59 [ 252.114561][ T7193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.114577][ T7193] RSP: 002b:00007f0b25f8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 252.114597][ T7193] RAX: ffffffffffffffda RBX: 00007f0b27fb5fa0 RCX: 00007f0b27d3ce59 [ 252.114612][ T7193] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000004 [ 252.114624][ T7193] RBP: 00007f0b25f8e090 R08: 0000000000000000 R09: 0000000000000000 [ 252.114636][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.114647][ T7193] R13: 00007f0b27fb6038 R14: 00007f0b27fb5fa0 R15: 00007ffeadd07f38 [ 252.114678][ T7193] [ 252.795200][ T5616] usb 2-1: device descriptor read/64, error -110 [ 253.156336][ T5616] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 253.221429][ T5745] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 253.221468][ T5745] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 253.269532][ T5745] usb 4-1: USB disconnect, device number 28 [ 253.293922][ T7199] FAULT_INJECTION: forcing a failure. [ 253.293922][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 253.293956][ T7199] CPU: 1 UID: 0 PID: 7199 Comm: syz.0.487 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 253.293983][ T7199] Tainted: [L]=SOFTLOCKUP [ 253.293990][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 253.294001][ T7199] Call Trace: [ 253.294008][ T7199] [ 253.294016][ T7199] dump_stack_lvl+0xe8/0x150 [ 253.294045][ T7199] should_fail_ex+0x46b/0x600 [ 253.294078][ T7199] should_failslab+0xa8/0x100 [ 253.294104][ T7199] __kmalloc_noprof+0xdf/0x7b0 [ 253.294128][ T7199] ? tomoyo_encode+0x28b/0x550 [ 253.294155][ T7199] tomoyo_encode+0x28b/0x550 [ 253.294182][ T7199] tomoyo_realpath_from_path+0x58d/0x5d0 [ 253.294215][ T7199] ? tomoyo_path_number_perm+0x219/0x630 [ 253.294243][ T7199] tomoyo_path_number_perm+0x246/0x630 [ 253.294275][ T7199] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 253.294302][ T7199] ? __lock_acquire+0x6b5/0x2d10 [ 253.294327][ T7199] ? do_raw_spin_lock+0x12b/0x2f0 [ 253.294374][ T7199] ? __fget_files+0x2a/0x420 [ 253.294408][ T7199] ? __fget_files+0x2a/0x420 [ 253.294428][ T7199] ? __fget_files+0x3a6/0x420 [ 253.294449][ T7199] ? __fget_files+0x2a/0x420 [ 253.294475][ T7199] security_file_ioctl+0xc3/0x2a0 [ 253.294504][ T7199] __se_sys_ioctl+0x47/0x170 [ 253.294530][ T7199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.294551][ T7199] do_syscall_64+0x174/0x580 [ 253.294579][ T7199] ? trace_irq_disable+0x3b/0x140 [ 253.294600][ T7199] ? clear_bhb_loop+0x40/0x90 [ 253.294624][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.294643][ T7199] RIP: 0033:0x7f0b27d3ce59 [ 253.294660][ T7199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.294677][ T7199] RSP: 002b:00007f0b25f8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.294697][ T7199] RAX: ffffffffffffffda RBX: 00007f0b27fb5fa0 RCX: 00007f0b27d3ce59 [ 253.294711][ T7199] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000003 [ 253.294724][ T7199] RBP: 00007f0b25f8e090 R08: 0000000000000000 R09: 0000000000000000 [ 253.294736][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.294748][ T7199] R13: 00007f0b27fb6038 R14: 00007f0b27fb5fa0 R15: 00007ffeadd07f38 [ 253.294779][ T7199] [ 253.294797][ T7199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 254.058655][ T5616] usb 2-1: device descriptor read/64, error -32 [ 254.328063][ T5616] usb usb2-port1: attempt power cycle [ 254.506729][ C1] net_ratelimit: 13152 callbacks suppressed [ 254.506747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 254.510030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 254.510438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 254.510812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 254.511201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 254.562447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.565124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.565636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.572113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.572554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.708940][ T5616] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 254.897051][ T7206] loop7: detected capacity change from 0 to 16384 [ 255.491537][ T7169] raw-gadget.3 gadget.1: failed to queue disconnect event [ 255.565651][ T7207] loop7: detected capacity change from 16384 to 16383 [ 255.677251][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.677351][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.949932][ T5616] usb 2-1: device descriptor read/8, error -71 [ 256.188568][ T7207] Dev loop7: unable to read RDB block 8 [ 256.286153][ T7207] loop7: unable to read partition table [ 256.320209][ T7207] loop_reread_partitions: partition scan of loop7 ((õÉê—) failed (rc=-5) [ 256.529170][ T60] Bluetooth: hci0: Malformed Event: 0x2f [ 256.579490][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 257.978046][ T7223] netlink: 84 bytes leftover after parsing attributes in process `syz.1.496'. [ 259.390701][ T7231] input: syz0 as /devices/virtual/input/input11 [ 259.516567][ C0] net_ratelimit: 14439 callbacks suppressed [ 259.516587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.517101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.517275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 259.517435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.517685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 259.517731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.518072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.518092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 259.518508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 259.518919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 259.700441][ T7243] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 259.812334][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.505'. [ 259.812585][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.505'. [ 261.906606][ T5780] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 262.171843][ T5780] usb 1-1: Using ep0 maxpacket: 16 [ 262.185597][ T5780] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 262.185630][ T5780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 262.341989][ T5780] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 262.342019][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.342040][ T5780] usb 1-1: Product: syz [ 262.342054][ T5780] usb 1-1: Manufacturer: syz [ 262.342068][ T5780] usb 1-1: SerialNumber: syz [ 262.361541][ T5780] usb 1-1: config 0 descriptor?? [ 262.472915][ T5780] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 262.472947][ T5780] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 263.754097][ T7262] FAULT_INJECTION: forcing a failure. [ 263.754097][ T7262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.754131][ T7262] CPU: 0 UID: 0 PID: 7262 Comm: syz.2.514 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 263.754155][ T7262] Tainted: [L]=SOFTLOCKUP [ 263.754161][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.754172][ T7262] Call Trace: [ 263.754178][ T7262] [ 263.754186][ T7262] dump_stack_lvl+0xe8/0x150 [ 263.754212][ T7262] should_fail_ex+0x46b/0x600 [ 263.754246][ T7262] _copy_to_user+0x31/0xb0 [ 263.754271][ T7262] simple_read_from_buffer+0xe1/0x170 [ 263.754299][ T7262] proc_fail_nth_read+0x1be/0x230 [ 263.754324][ T7262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.754348][ T7262] ? rw_verify_area+0x2ac/0x4e0 [ 263.754373][ T7262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.754397][ T7262] vfs_read+0x212/0xa80 [ 263.754431][ T7262] ? __pfx_vfs_read+0x10/0x10 [ 263.754459][ T7262] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 263.754487][ T7262] ? lockdep_hardirqs_on+0x7a/0x110 [ 263.754513][ T7262] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 263.754539][ T7262] ? mutex_lock_nested+0x152/0x1d0 [ 263.754559][ T7262] ? fdget_pos+0x252/0x320 [ 263.754590][ T7262] ksys_read+0x156/0x270 [ 263.754618][ T7262] ? __pfx_ksys_read+0x10/0x10 [ 263.754642][ T7262] ? fput+0xa0/0xd0 [ 263.754669][ T7262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.754690][ T7262] do_syscall_64+0x174/0x580 [ 263.754729][ T7262] ? trace_irq_disable+0x3b/0x140 [ 263.754751][ T7262] ? clear_bhb_loop+0x40/0x90 [ 263.754774][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.754793][ T7262] RIP: 0033:0x7f7b9145d68e [ 263.754810][ T7262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.754827][ T7262] RSP: 002b:00007f7b8f6f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.754847][ T7262] RAX: ffffffffffffffda RBX: 00007f7b8f6f66c0 RCX: 00007f7b9145d68e [ 263.754861][ T7262] RDX: 000000000000000f RSI: 00007f7b8f6f60a0 RDI: 0000000000000003 [ 263.754873][ T7262] RBP: 00007f7b8f6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 263.754886][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.754898][ T7262] R13: 00007f7b91716038 R14: 00007f7b91715fa0 R15: 00007ffc4e401078 [ 263.754928][ T7262] [ 263.755602][ T5780] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 264.008042][ T5780] em28xx 1-1:0.0: Config register raw data: 0x41 [ 264.150481][ T5780] usb 1-1: USB disconnect, device number 24 [ 264.192897][ T5780] em28xx 1-1:0.0: Disconnecting em28xx [ 264.526350][ C0] net_ratelimit: 14984 callbacks suppressed [ 264.526371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.526417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 264.526829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 264.527263][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 264.527677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 264.527724][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.528109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 264.528165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.528543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 264.528553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.925722][ T5780] em28xx 1-1:0.0: Freeing device [ 267.081593][ T7279] FAULT_INJECTION: forcing a failure. [ 267.081593][ T7279] name failslab, interval 1, probability 0, space 0, times 0 [ 267.081629][ T7279] CPU: 0 UID: 0 PID: 7279 Comm: syz.2.522 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 267.081656][ T7279] Tainted: [L]=SOFTLOCKUP [ 267.081663][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.081674][ T7279] Call Trace: [ 267.081681][ T7279] [ 267.081689][ T7279] dump_stack_lvl+0xe8/0x150 [ 267.081717][ T7279] should_fail_ex+0x46b/0x600 [ 267.081751][ T7279] should_failslab+0xa8/0x100 [ 267.081778][ T7279] kmem_cache_alloc_noprof+0x87/0x680 [ 267.081802][ T7279] ? ptlock_alloc+0x20/0x70 [ 267.081829][ T7279] ptlock_alloc+0x20/0x70 [ 267.081854][ T7279] pte_alloc_one+0x7e/0x380 [ 267.081883][ T7279] __pte_alloc+0x25/0x1a0 [ 267.081911][ T7279] do_pte_missing+0x1c13/0x2940 [ 267.081945][ T7279] ? __pmd_alloc+0x41b/0x5e0 [ 267.081971][ T7279] handle_mm_fault+0xdc2/0x14d0 [ 267.081997][ T7279] ? handle_mm_fault+0xed/0x14d0 [ 267.082024][ T7279] ? __pfx_handle_mm_fault+0x10/0x10 [ 267.082059][ T7279] ? __lock_acquire+0x6b5/0x2d10 [ 267.082087][ T7279] ? lock_mm_and_find_vma+0xa7/0x340 [ 267.082116][ T7279] do_user_addr_fault+0x75b/0x1340 [ 267.082154][ T7279] exc_page_fault+0x6a/0xc0 [ 267.082184][ T7279] asm_exc_page_fault+0x26/0x30 [ 267.082202][ T7279] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 267.082225][ T7279] Code: c4 10 e9 14 2a 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 267.082242][ T7279] RSP: 0018:ffffc90005aafc98 EFLAGS: 00050202 [ 267.082259][ T7279] RAX: 00007ffffffff001 RBX: 0000000000000002 RCX: 0000000000000002 [ 267.082272][ T7279] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffc90005aafd90 [ 267.082284][ T7279] RBP: ffffc90005aafe48 R08: 0000000000000001 R09: 0000000000000002 [ 267.082296][ T7279] R10: dffffc0000000000 R11: fffff52000b55fb2 R12: ffff888025a9e000 [ 267.082310][ T7279] R13: dffffc0000000000 R14: ffffc90005aafd90 R15: 0000200000000080 [ 267.082341][ T7279] _copy_from_user+0x7a/0xb0 [ 267.082365][ T7279] l2cap_sock_setsockopt+0xf13/0x20d0 [ 267.082403][ T7279] ? aa_sk_perm+0x703/0x950 [ 267.082425][ T7279] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 267.082451][ T7279] ? __vec_find+0x321/0x450 [ 267.082482][ T7279] ? apparmor_unix_stream_connect+0x60/0x5e0 [ 267.082516][ T7279] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 267.082540][ T7279] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 267.082565][ T7279] do_sock_setsockopt+0x17c/0x1b0 [ 267.082597][ T7279] __x64_sys_setsockopt+0x143/0x1b0 [ 267.082627][ T7279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.082648][ T7279] do_syscall_64+0x174/0x580 [ 267.082675][ T7279] ? trace_irq_disable+0x3b/0x140 [ 267.082696][ T7279] ? clear_bhb_loop+0x40/0x90 [ 267.082720][ T7279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.082738][ T7279] RIP: 0033:0x7f7b9149ce59 [ 267.082755][ T7279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.082771][ T7279] RSP: 002b:00007f7b8f6f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 267.082790][ T7279] RAX: ffffffffffffffda RBX: 00007f7b91715fa0 RCX: 00007f7b9149ce59 [ 267.082803][ T7279] RDX: 0000000000000004 RSI: 0000000000000112 RDI: 0000000000000004 [ 267.082815][ T7279] RBP: 00007f7b8f6f6090 R08: 0000000000000002 R09: 0000000000000000 [ 267.082827][ T7279] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 267.082839][ T7279] R13: 00007f7b91716038 R14: 00007f7b91715fa0 R15: 00007ffc4e401078 [ 267.082871][ T7279] [ 267.859701][ T7287] netlink: 164 bytes leftover after parsing attributes in process `syz.0.524'. [ 269.476032][ T7288] [U] ^C^C [ 269.537156][ C0] net_ratelimit: 15447 callbacks suppressed [ 269.537178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.537582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.537928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.538234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.538568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.538973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 269.539316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 269.539693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 269.539704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.540032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:60:02:d9:b5:3d, vlan:0) [ 271.964764][ T5615] ================================================================== [ 271.964780][ T5615] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 271.964817][ T5615] Read of size 8 at addr ffffc9000eb89008 by task kworker/u9:3/5615 [ 271.964832][ T5615] [ 271.964845][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 271.964871][ T5615] Tainted: [L]=SOFTLOCKUP [ 271.964878][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.964890][ T5615] Workqueue: hci3 hci_rx_work [ 271.964915][ T5615] Call Trace: [ 271.964922][ T5615] [ 271.964930][ T5615] dump_stack_lvl+0xe8/0x150 [ 271.964953][ T5615] print_address_description+0x55/0x1e0 [ 271.964978][ T5615] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 271.965006][ T5615] print_report+0x58/0x70 [ 271.965027][ T5615] kasan_report+0x117/0x150 [ 271.965050][ T5615] ? rt_spin_lock+0x20e/0x400 [ 271.965073][ T5615] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 271.965105][ T5615] __list_del_entry_valid_or_report+0xb5/0x190 [ 271.965133][ T5615] kcov_remote_start+0x2af/0x710 [ 271.965154][ T5615] hci_rx_work+0x10f/0x1040 [ 271.965182][ T5615] ? process_one_work+0x8be/0x1630 [ 271.965206][ T5615] process_one_work+0x98b/0x1630 [ 271.965240][ T5615] ? __pfx_process_one_work+0x10/0x10 [ 271.965264][ T5615] ? do_raw_spin_lock+0x12b/0x2f0 [ 271.965289][ T5615] worker_thread+0xb49/0x1140 [ 271.965324][ T5615] kthread+0x388/0x470 [ 271.965344][ T5615] ? __pfx_worker_thread+0x10/0x10 [ 271.965369][ T5615] ? __pfx_kthread+0x10/0x10 [ 271.965389][ T5615] ret_from_fork+0x514/0xb70 [ 271.965412][ T5615] ? __pfx_ret_from_fork+0x10/0x10 [ 271.965433][ T5615] ? __switch_to+0xc79/0x1410 [ 271.965451][ T5615] ? __pfx_kthread+0x10/0x10 [ 271.965471][ T5615] ret_from_fork_asm+0x1a/0x30 [ 271.965500][ T5615] [ 271.965507][ T5615] [ 271.965512][ T5615] The buggy address belongs to a vmalloc virtual mapping [ 271.965527][ T5615] Memory state around the buggy address: [ 271.965538][ T5615] ffffc9000eb88f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 271.965550][ T5615] ffffc9000eb88f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 271.965563][ T5615] >ffffc9000eb89000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 271.965572][ T5615] ^ [ 271.965581][ T5615] ffffc9000eb89080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 271.965594][ T5615] ffffc9000eb89100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 271.965603][ T5615] ================================================================== [ 271.965625][ T5615] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 271.965641][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 271.965666][ T5615] Tainted: [L]=SOFTLOCKUP [ 271.965673][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.965685][ T5615] Workqueue: hci3 hci_rx_work [ 271.965708][ T5615] Call Trace: [ 271.965715][ T5615] [ 271.965722][ T5615] vpanic+0x56c/0xa60 [ 271.965749][ T5615] ? __pfx_vpanic+0x10/0x10 [ 271.965778][ T5615] panic+0xc5/0xd0 [ 271.965803][ T5615] ? __pfx_panic+0x10/0x10 [ 271.965829][ T5615] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 271.965861][ T5615] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 271.965889][ T5615] check_panic_on_warn+0x89/0xb0 [ 271.965911][ T5615] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 271.965939][ T5615] end_report+0x73/0x170 [ 271.965961][ T5615] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 271.965989][ T5615] kasan_report+0x128/0x150 [ 271.966009][ T5615] ? rt_spin_lock+0x20e/0x400 [ 271.966031][ T5615] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 271.966063][ T5615] __list_del_entry_valid_or_report+0xb5/0x190 [ 271.966094][ T5615] kcov_remote_start+0x2af/0x710 [ 271.966113][ T5615] hci_rx_work+0x10f/0x1040 [ 271.966143][ T5615] ? process_one_work+0x8be/0x1630 [ 271.966165][ T5615] process_one_work+0x98b/0x1630 [ 271.966195][ T5615] ? __pfx_process_one_work+0x10/0x10 [ 271.966218][ T5615] ? do_raw_spin_lock+0x12b/0x2f0 [ 271.966240][ T5615] worker_thread+0xb49/0x1140 [ 271.966272][ T5615] kthread+0x388/0x470 [ 271.966290][ T5615] ? __pfx_worker_thread+0x10/0x10 [ 271.966313][ T5615] ? __pfx_kthread+0x10/0x10 [ 271.966332][ T5615] ret_from_fork+0x514/0xb70 [ 271.966353][ T5615] ? __pfx_ret_from_fork+0x10/0x10 [ 271.966374][ T5615] ? __switch_to+0xc79/0x1410 [ 271.966391][ T5615] ? __pfx_kthread+0x10/0x10 [ 271.966410][ T5615] ret_from_fork_asm+0x1a/0x30 [ 271.966440][ T5615] [ 271.966720][ T5615] Kernel Offset: disabled