last executing test programs: 7.64830443s ago: executing program 3 (id=474): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) r1 = getpid() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf2502"], 0x1c}}, 0x840) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000003340)={0x2020}, 0x2020) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYRES32=r0], 0x34}}, 0x4854) sendmsg$nl_route(r6, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000bc0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @rand_addr=0x64010100, {[@ssrr={0x89, 0xb, 0xce, [@empty, @rand_addr=0x64010100]}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x3}}}}}}, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r5) 7.631316482s ago: executing program 0 (id=475): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x1) tee(r0, r4, 0xf3a, 0x4) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) 7.159183956s ago: executing program 3 (id=476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, 0x2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000500)="16", 0x1}], 0x1}}, {{&(0x7f0000000140)=@in={0x2, 0x4e21, @private=0xa010100}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='S', 0x1}], 0x1, &(0x7f0000000540)=[{0x10, 0x84, 0x4}], 0x10}}], 0x2, 0xa3e4bbaf62f461ca) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e0"], 0x1000f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, 0x0, &(0x7f0000000400)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) syz_open_procfs(0xffffffffffffffff, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x1400) 4.304010764s ago: executing program 4 (id=485): ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x40, &(0x7f0000002b40)={0x2, 0x5, 0xbbf7, 0x7, 0x3, 0x0, 0x1, 0x8}, 0x0, &(0x7f0000002bc0)={0x9, 0x494, 0x2, 0x1, 0x200, 0x7, 0x169, 0xe}, &(0x7f0000002c00)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xf1ff, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x8, 0x200001, 0x0, 0xfffffffc, 0xfffffffd, 0x401}, [@TCA_NETEM_CORR={0x10, 0x1, {0xffffffff, 0x7, 0x2}}]}}}]}, 0x5c}}, 0x0) sendmmsg(r1, &(0x7f0000003580)=[{{&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @local}, 0x4, 0x2, 0x0, 0x2}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="ce775d1174b7ddddd06d4d347b1571af08380dcc640b64676e3baff02b78fa2755479b88028e4cc0e3d79ebb8d7aab012cb7efa59e1ed038f430dfcb9f9c038d27823fa6cd2bc3eefeff9587fb26567a8e136c72c95d33d030b632c173f1b88856b21dee7f15dfd3e80cb8e688b30126cf7b0f66813cd0f8ddab357898c179bcc528225e533adf687355141de4e157e07011493e563ed28f2a34f5ca3332cecbc76b7e504385c0753525b272b900551ba8ab9ebe54850a7ef341b54b", 0xbc}], 0x1, &(0x7f0000000380)=[{0xc0, 0x10e, 0x8, "743e1bfcbcabd3fb4f3f10d20ed3678e1537a6a80233145380e94839c8d23c9ae833bceb67f98e81eb022877913366ce33e65512860cbac535eb0b4ac3c51e2a586a8c82ed60dc3a0b3aa0c02a402d1819f096a1b1a07ba894b922ffc8ec90a7b1532ad8305a01162f875d23f5ed478a8b51568cb00623b9d0c0c2e31b930203f54278d9fa71b262a1c9e038dd3df37042b349a86838a0373de4f6634dce2a2b5f8163165de62c8de70b24"}, {0x18, 0x11, 0x9, "bf29"}, {0xe0, 0x117, 0x4, "92490399d65df333794e80fa40a43f779a1ebef9138c3b972bee154b2bcf278a4f52846020055a1534cb26aca24aa2ad9855377b412b0d6cd4f456daf8e2f3e45c071c5900cc278651770e4808f4112ae0836c91a6fc74e2186bd36cb88e72802b894f899194c271b6ab2669d053050329a58122a9e005619edc5fae79ade9341b3f5b745b160471296d77f594917c8a58293222bab4fab9e5daa0d17dc30ee52deaf669a367060080fae190afe02e4d63bb27a046771bd81a761e11d467d57cb5c031c9ec154c0bf65d649c96"}, {0xd8, 0x103, 0x3, "d658a7bd094b8a27ec5725f8b1a1456c9c48495ed2897e1a56d87b8b6ba482b58f7558e4ed8a31ede26a8771acbaaece1321df1b55d669591b6996d62b1b1603c15f3c3c7ff9d62c3b9ef0994d0d7fff04f45ebe45015d909a7c08dbda133ef4d92a139e0eb95a302a60997b06f650928fa9a4ec33862e5b8ca6d6c4e182232a7ac031df819e1c12f50b3763dda3ef3aca20ebfafda1ae59a6b3fa5517f410e506f776215c8e82c5bf047ec02ace489f5ae6a85a52ef2ef916251b5ac37fd5d08e73aa5f"}, {0x108, 0x112, 0x9, "b6033acab7e973390bd9458cd5ec297df6e8f048b9c2b3cd4ac861094e22212ec8631e0092085278a39abbd2c7473d84b14b3817402129bac11f5c5fe2e09484acdbff7718d1fd3664a41883f8d6992c4ada25be48124a62302f6d81b0abe56dbab23ded994dd23515bd3e38f63777d0747e8ed605fbaf58d95f9c93439048de7eb7cda1971a79726a18df844759d1ed45bde4fb58ab8d6f2dbd11fd9265c207a02500fe34c630400e4a0c9ae09c3a2f6a53a1720a4976c103fbedd5a96f9b3f7657a4c9412b2026dd94ac14ca31776ade8766b8363626cdc838a8f9375a751d4f2519d11d23c3a6312f5d143bf90256dbb4734e3d83"}, {0xa0, 0x112, 0x9, "a65b220581f3683fea6ae53e13e68cd96a991ca59d24a202ab8b05cfdc5e7ebd3f689e9c6f239206d24df2078b70cc01332901fa5f40810061d8b5fb2e3ca254892374a58e35b6bb374c788691049b487f65c0d917ea4fc14449d10279627a01334a5a209fd9c12a917e9328a851f25d8892ccb30caa22390a9172ff6ac0248d1d7f74ec3aa191764aacbe8fc8eb0217"}, {0xa0, 0x57, 0x43, "89fe0945bc309a58e22151622df1b4930b8c56e9fd7d74818e5f1fe01b1e6584acd58bb14337b6e105c125f75219329cad173ef76ae37bc4777b38845d62b5b1d4126db311294f2d6f2bdc1ed75b90f79041ef52e86b5d183a7009819070b92ce223f87ebb211c53e502918452df761da2f18a7b1434ba08a09bc5505b523fff24f3538ea3466015becbb115cc"}, {0xe0, 0x93, 0x6, "55f2bb782417961f05d90ff6c0f2f2cc6c6ffa524cb93078c38b235a9b8ad6a7efa2df70e9239314e353a60cf3f387e24bc97fbac0a7925ebb5e22c6d3c6633a46a745d6d95597b50d645c5396a60ca0705c6faef2a1cc28465cd7cba9b3da68db162545f17f9f4f40a38d653bf60446396e6bc4f7f91e33a6b456661f6c2aabcb835dca678c53797c3db8f93fb8b2a814f5b4096810d84efb7e338f0f329d79f57e0584b44eded47004ea65426f604816961a0ed9112784f3a06ceb69e3f67194cb715aa589dd6862b0320c7d7e4663"}, {0x18, 0x10f, 0x3, "296f18fef341"}], 0x5d0}}, {{&(0x7f0000000980)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xa}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000a40)=[{0xa0, 0x115, 0x2, "6aca0c1ac915dc4c2da8e814c34f953f46b08262d4461d17126d18f960a63006b3f84965eb685ecd9d658dcee6a059b2056d601fd988c00337765a7959e5fa135218cbb3e3c1a2f29f3c5f849e88c19176e9fccef94efb26ebc41f939f0e2c9ea40ba5ee14b37be412951e1c157bb653cb561758904ca03f2902ce1ee4ce1fad972bccf457c3ad2adec9ed61f7"}, {0x30, 0x1, 0xc, "0eb302a6fe487a94170c575e798438ef6283cee67f371a72f0965f"}], 0xd0}}, {{&(0x7f0000000b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x1, 0x2, {0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000bc0)="8d11c54c7e3f646b774ac5f03eb51f89c74d23cc04e986a915a04a3ed52136cf591df485272d16bd372979857d7c77623e2f3d83f19a031aa4f26ad9d7c3d2f73d735e9aa570ff6863b5e921259f7da659fb0365399d7ecf", 0x58}], 0x1, &(0x7f0000000c80)=[{0x108, 0x10f, 0xf, "a5cfed58fb9c591783326220e68f6d01fffbbae08592db990d9f5df2a7442b3f6f36efb9a7eb22a5f6aac7017c23618393cf0ec2126cb06b7717e68c9cea226889008fc1275bccb23cb1c6ead0e29286f277614aa9b29eb8d703c5fff92aa1cb95c72d2c81c0e81230973588df050abddb8d0b4b6bee1e3658b3e4d2d05da710bffbab220606c942855bb51cfb2c9388a9807bd006dd8b18e8ed3197b67eda3c6e53340dae26c5901f5e11c5142a53b06956dc8c355187ccb6a4d52635f388dd271500092d3546b50240b3c37e638f8fc7ef44a6f8cbe118f5c5ac049c6e4f190943130b69cd1811ec52a676d98796afc5d1f13eed6c9c"}, {0x60, 0x119, 0x2ccf, "b239c08dd5acf7821d40999f8de3b1a891dca0c80694366703a7806f18f51b87b6988e915604495a0612c9a4fd05d55a019d281256caa0893c2699f9ed4968a80c7f038442cbc94d3edcc1a5e8842e4a"}, {0x18, 0x0, 0x9, "7d4a120b0058d650"}, {0xf8, 0x29, 0x80, "42a83814b36948f0c5d57f4533c0a9acef1a8a9bb66124a73b967d8885daad5da3b4729a353297d500f974baae965d8321ce4e581f2ff54490103bb6c99ef2221a8de5403781b5bd76809161535679cac664323bceec917a149a9ffd2d232aafdc27a43744a0b6b08bdd89cf5811583d6f89fbbf1a40236c5290dd5e6fbd07bf9c56046e719efe18f2f518ec02261097e27da38c26c165dac8b4aa0361eba08b0aa672e9081aaaca321faf34fdd0c906682e24093fdef74318270106c2246183cef24a898fcc04b49eefcb067b2c5ae626faf97e44810e5a2fd926baf58285135514fecf"}], 0x278}}, {{&(0x7f0000000f00)=@caif=@dbg={0x25, 0x6, 0x8}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000f80)="75fd596650a5cd077804f29193336f5de3226f9a1fdeb37eea4f6d8b2dcadd0a5d30496ce93603d803cf6bbe5bcbf612ce48b04425b8e61186696e84fe8024d6e6f881a5e28bfaad26f8a72cd46d073023f5f43ebbb2064b91cc1fa4db75f870cfb73e9c7c8b4f3de061c536b4836893", 0x70}, {&(0x7f0000001000)="4b7242b0bc29ce4cb5e3f0e6bda056d3abb8711179d88d29444d1513a70872bb23d06a19cdc2f1146dc21b958ecfb0c32c1d48c85559039dcc33046f43ca968c0fbc3c882a77ebaab940ed28eb48ce6d4895ae3ffbed1470fe34103dfe058bfce087771a", 0x64}], 0x2, &(0x7f00000010c0)=[{0x98, 0x10a, 0x81, "7acc4c1d99d49396f396fc7dbe1aac91fcba374e5664074dbf5c1e42a9322afd52d50e7444e912a744c9760934c069f7253c1f6d1f7a472bc200b4e76bc9a132a8587cf025c78ccbf2ef6128d0d2a90fcffdc54c3813cbdbcf7a559912fe82017a8bfa0b98b86eebc3c00f66b9ba71ea0944bf32f8000224b0ccad15d0a7b2c96767ff750e"}, {0x30, 0x111, 0x4, "c1be0fe68c51dfc04f3acab8290bfbc8fac88a6a867201287e251854"}, {0xb8, 0x112, 0x14d, "34439d4d02cc5e8734b8bfe40ca153025316448d2644bd7e9b1fcf24c902fe6ed25bd444ab26afb96aab5526c8d25d7732c8a2f85a4bd2650651532a84f9f9f32a7d2271de8dbde5e6d817c5d3c3f10b7cfb73fb6570a61288a1dde300167820bdb4fbd74673c5b0f2e75bc359fcd7f056d906e874c8e15ffb239f15dd730d1be723c1ba225cc270b9499da33c12c4d0bb8e0569865b95a7add4b263161fc10b1073febb58"}, {0x1010, 0xff, 0x8, "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"}], 0x1190}}, {{&(0x7f0000002280)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002300)="eaa8b4804507d172178b8df93fd3ae136ecc8d5ab4e2a45c3e8a20641debfcfefa4665fbfa99370a1878c7e709e278e04d4ec32da2227ef83a3532dfa91fcbd677fd6bb129905edf3f6adf5018972e78a0a9456924b4469195845a18de6e957fc20e65af19cf7e23494306dff27d8b2fc526f0a856c1df8263b030dc021b478177d78194220551e1b65cfb8ac711ba2d432c75b914d84f5f113319740aa0ffab7835920c2c632f7a09dc4aca3f2adf024ceb5bea107ef9a4d0981b2fb2791405d8e082a6924c094858cd61", 0xcb}, {&(0x7f0000002400)="a1a3cbd9ef531acce34f1329d797ace4e8405d11296426691a9f7870121a5201d9d9b0cea074f1fb88c01ebcddee087f03158a94eda2b9cc962fdbd5b3dfb51f891203834f7708f93e2664d27f8e29ff54f0e88ded7fe51cc9b6b5e8316bd3d9d6ea771bbd6cc15fe744c0477347e8414c54a0980fdcc6ac1b2e5c133a18e480ae1c681df61e61bfa7f3c050c0a0e13ed14ffd04014415523f198b4e6f068aa72056c19bb58bc297199952221aaccaa5f47e80", 0xb3}, {&(0x7f00000024c0)="79f740f48b5e2b8b3f2f498f15cb3224d40ec8ef337a17cbeb099ada77580c569757d89af989dac0740181c5cc96922d3c622056e64b4a7043aa35e7e715abafa501b7c8dfd017f3f26f4457a002f04bd0d0dd9d81882c731ed7a4e4a75a01dda9f14843e76d475828a07a3a1c94f795a0", 0x71}, {&(0x7f0000002540)="016ef3fec298cd6e422c092fdfd20c70f2854f388025f04310a74f627eb8f948c08d34cd9c9a73f04260c9dcd3c8278b518e28d334f57345706696d683c38de2af23256ba64c610f95af6c0b53199b116185a542978a366cc57108f746046d8fe0e7dad803724c98c41d9d3c263331bf7f4d49007490513f1b8b5fb527baaf7ea3acb38df287a51b9c2797af24faa131121909248e438541cd43afb794f7", 0x9e}, {&(0x7f0000002600)="be3ed4ab0b05c18d807c5bb433ed075a12cb2f621a813a83bdc2300adde96d1f54a1b92e098043d43145", 0x2a}, {&(0x7f0000002640)="856a9aed2a3cedcfd9fb0ed7be017084841b780fac1a0f39f0bc2f2196125021b293fa7d12f485d905e8101c1416b5f951597601e251f9284bf26fafa023f9cfe8347a4b383228a19b19599d1719aed977dc080eb402b2952bc824924ee2af8700521622ce30813d3e3fca32b4e4a8b7183bb52925d5b71c36d0579acabc409e620653c23d786c802611de36245d06dcd9bace3e73adc19b9fc000b313c1c4dc34486494c78ff78d844f1b1394a636655a9691fedc73ffc9803a", 0xba}, {&(0x7f0000002700)="44d2f1706566d5178767", 0xa}, {&(0x7f0000002740)="365a93580e0c3e62798660f265db9726dadc207564af264c8d64d622", 0x1c}, {&(0x7f0000002780)="6ede839ede1a5b27ae581ab3ad6e33697f3f8402d7834af775bc8f5a2c604f5f42df89bc084317", 0x27}], 0x9, &(0x7f0000002880)=[{0x60, 0x107, 0x7, "37f9b1791079a49bec4959c9068762466b211910e50e1148fefd1fb37c401c72ab6e8e934ae251c257537aee188901dddd861926cf80c5bb7cdc5e88822e054dbd1b66a156ac2002a6"}, {0xa0, 0x117, 0x7, "2481da4296ec082521e59acc0f5ed5f0faffa8fc824e76325652654f2f6a2a6b3c647447c0ff1039ee693ee7650430124ccc3f1d77f4d3b1dfaf685016927abd25f5d59862632a6b7dc7b0e5f0686e5df1ab24bad11068730ff1a162e08e0760d420888b40bed3c8d807cca265e771a91da0e71ec8f87c9b475d97e2d4677ad23f0734683cda95a1f2eb8b7cbf"}], 0x100}}, {{&(0x7f0000002980)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x2}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002a00)="4cb4056afc697638e103e44966f196d9283868221b9e2cdbdd2fe92b", 0x1c}, {&(0x7f0000002a40)="7947f74e1a568604bdfa9e0f206bf7da41ab187f5a3739034c7d8857fcb39e840af161d4bec24acfadda980b83c0bcaa02a84bb6599759ed07be41a0811a66593a11e062b21ded61282e3f65211efeed361bc50d0d3102aee2c557274a71018b4d7b77c225c5010673293a13a0b7afad79e9a0ab524806560114dda8ee54daf41f298aff7a0342b632c5197a0f3b17a3c9e3a068aa48f964c998208698a6d54a90892c9e44668b6b1f202c6a6628e2c603ac3efadab63e", 0xb7}, {&(0x7f0000002c40)="c34b64ebde5bcc89931c5c4811aba39844af1aa49cfbf7346719f00eff2023f52a6be2aca4d8151af0befa3f8e15e20c1a02972e7039f784152622a157fcce46ed4246c2ed52893e03d08ffdf7bea1408d5635b907a6dacea11fbcf9d925e2d855c6bd7985aa87afde81fe99", 0x6c}, {&(0x7f0000002cc0)="cfc780ccb942f9b16a41c0169d4c07d7f0f2ece31076559fe48a9910d6baa325006fbab0fbbe0245836aa9683a7f33cc4947504a303047ec343a79894e4d75595054eb722dc2c4e2a1f665daaec6dee3f94260e2207c6b295647292d814d54131d7a7eff9b74dc9b912077ca441820d5e5533efcea7ead90d109c24e441508c39f891b8641a2579906bb83f1a9b5bbd64a8c69ceda6fa2c514e52d63189da3f4317f0f17a309564fa03b72ccc598273d1d556aa4f03dfe5f219fe5e0a0f4ef8891531b17076776e87e8dffaf9ba16ea4e96cee221fbab0f7cb4ced", 0xdb}, {&(0x7f0000002dc0)="bde340f00ae22ee0b54a06da4b2d26dfcb261c12cd5e6a2244806f70940b487699eaf424706cba1a9fd2c56f51060937f6656c01901bee295f466670acbd7f1384e8dbd5", 0x44}, {&(0x7f0000002e40)="a74f7dd84dacb4ae02968054e99b5d80b3374a3dd285ffee3e3c2d6b5968bb420a71f204b395b0c3519af2e2a8519e11b2cdb54375b428257d74b97b05c6209ecb7e14750da1c0876e541254bdfc9965f4aeee7bf3d394b8a6414f154a745dfbd8b5c955de16f351f2f7ce1bc6d48c88ccf0d210c8e048f3af29e4105d2d207e87e88c66bf37756a6e9fb7d2d96e64f298287fda9fb5750f7ccbed579865a6bb9406e2008a4a2ed905bd88a918ecc1ed52f7ff141dd2663b07c18fd053d31605e5be5c36c526a46cdf4429a78b54f6c189ad3fdd22", 0xd5}, {&(0x7f0000002f40)="d283636acb2d71fa651978e88960a30a68998f1460071d119230bac2846a91941f1a02806f99bf8b2720e35b8c924d147be2cad51d1bfe4127308e81a8dc", 0x3e}, {&(0x7f0000002f80)="a4d60eab1f5565268d06eb5c8e7fd9142115833117e141ed9220d186b22f6cff2d69ba62740ae10a6437f6048b52742c5564ac68e9d696f46b639e0e1d777b2a9355820f6ef757683a3259245b0d13ec728a976595a48d42c4e904ce686540c64c48220638024f4caf92c876a3", 0x6d}, {&(0x7f0000003000)="932227703f4d9ce9b13fd390ecb9c3be82bc3251d809d9cf33b99f516afa8e3051b040959450246924d7ebc2d98e43e2c95c11c49f2d6444ebfdba980e7b1cf7de0b1b3a22ad86a7abd24263293f4110d476a9b7a3f8ff17d94d7b50eefc2c6610a0b9d5701daef8c53b18cd6a0197faf12be22f780f84877aae48c234053203c3036f6f92b8793b1fec3048bb8191d15f22bbe0ff4adff6723669ccd503897893c1e8db098977aaa7fc768067d7f573fe1639f49ed1fce1bf588f228dbb6762659a6b4b7d62334050caa7a3c10a66f81430", 0xd2}], 0x9}}, {{&(0x7f00000031c0)=@ll={0x11, 0xc, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003240)}, {&(0x7f0000003280)="84e6cd05e6e600bcce89aca561dd36dd99ce8d9bd2977859cbe1606a8effdbe8f1bd9ec55aa20b59c03d3c5d378b65fdd2bb1e82adc9ba813e555067d48565d281c3d7baff00a320fb223699b65eedf345c10f95e5d946103b2b308082297f77b30ef1b08a", 0x65}, {&(0x7f0000003300)="1ef38890a2867aeb3e83e2e3e480ba25c06884261cfbeabbc00642191ab95f2fe2444cd3d1cc5d9f3b349adbf28f097994d46fbd4e671f89dd67803b179ccf6cabe232636fda56dc83e3a1dc767a395d6a072f68", 0x54}, {&(0x7f0000003380)="51238e75b2eb2a32476510feefb1d749643f56577bad064f46ca5ec62c26cccea9e1c53137da700ca2d69c7e1001631d03c9d85e15f1161c5ffec4dcd77ddb38d0d5423ab1b71c60d877d85bf0a0c421875901b4c77efc8ad42e15667c515f5259", 0x61}, {&(0x7f0000003400)="3f44c3d41a467f1983b1e2278a4d65583361973e6ef4e969b8d7bea893beeba7c289a34f8b36876ab8170c5c7608bbc994acee4f477e3ae071", 0x39}, {&(0x7f0000003440)="375d080e6d93c98857e1a4b5cac073f0167af43196d672b1074d35934e9ab9acf64f42bf87569764f9a34dac8736f60694a1cedc0750e66b16e610731f0d77d0741e75f8308603f8129a5dce4fc82739b0ac5d9bee54ab9cc126dd3ea4", 0x5d}, {&(0x7f00000034c0)="3cdfc27216ee107a41365a6b7aa8456438b526f513298bd32d78fd67472061ce5b111802c0e0da9578da359a4a117f492ddab4e0301fde22c3", 0x39}], 0x7}}], 0x7, 0x801) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0x2000) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r6, 0x40184152, &(0x7f0000003a00)={0x0, &(0x7f00000039c0)=[&(0x7f0000003740)="b1b34245c5d3a9e8d2a08ac88399350dd2679feae98413fc297a6a2c018c08c919c3c929fdfe62bf1655a0038b131358ff72e15dd6c0b07bacaa1dd12adf424fa21bf705eba4e1050b225339420f43ca9c5ce2d419ba8b38e1cc71448992cad900b77eb16dc46d511018a34ff3b4810c9bc988587988dc07f40767391daa2a7efa6a16352e0ade0acd14333ecade5078489eecbe9e0d25005fffbab4af6ee12a21ee78c0c1a55796a8353aa9bb8087769301253ef7400fcd89bbb572c5d139137d00098fabf4f450e9542a4d49f3e8b1310827955aeff8ccee4acda547639d4065306b63b26a8b0f97fc5a1b001854", &(0x7f0000003840)="dcc45a4e7e024dce5f5fb71a9b1a51e0f570c3edba26d6745d04ab321a7abe5a950877fcad1af574762746939a992bd6307749ff762a1988782f08d80ae402ea980c63aeb57e1feecc785e7cb3d87986cbe2129d3eac0581d93337a631a2a1fbb6f63f2be8a4d92668d352c6c025f226a9472d4d1b23764fc15aad426a898193766a592f4d", &(0x7f0000003900)="4f2ab9accc8d6912d243210e35cb573c85a11a8e1568dc31c81e439c9ea89224f5d8f3959ec4695e19e1ef35e497b1664cf048fd089bd6173dba8048fbeefaa2d9885642b77e7c28a3f31bff90f538a0a2c6e6e5deb0e4f11f7f87dc7bf749fcef871c99bc0feae2b585304844a368b071abe4eb0aa07aa10f2dd6c8599b89d832b4867bc19ae0d93b03ba6e780ad57b475dc7ff3afce8acf20e7284"], 0x8}) ioctl$sock_ifreq(r1, 0x8938, &(0x7f0000000140)={'sit0\x00', @ifru_settings={0x8, 0x80000000, @cisco=&(0x7f00000000c0)={0x400, 0x1}}}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="011802000311000020001280080001006774700014000280080003000900000008000200", @ANYRES32, @ANYBLOB="e18f61ae1e35c2de300781c9684072c53742e777dfb2d97736e7888266e759057795094aac"], 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) 4.066761326s ago: executing program 1 (id=486): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f00000000c0)) 4.009524869s ago: executing program 0 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x80000001, 0x40c100) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000140)=r1) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004051}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x1, 0x0) socket(0xa, 0x1, 0x0) getpid() socket$netlink(0x10, 0x3, 0x8000000004) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket(0x10, 0x803, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r6], 0x18}, 0x40c0) 3.910446792s ago: executing program 2 (id=488): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1192410, 0x0, 0x0, 0x81}}, 0x50) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000021c0)={0x1, 0x0, [{0x280}]}) socket$inet(0xa, 0x801, 0x84) listen(0xffffffffffffffff, 0x8) 3.81493969s ago: executing program 1 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40080) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x88, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc040}, 0x800) openat$kvm(0xffffffffffffff9c, 0x0, 0x22003, 0x0) mq_open(0x0, 0x8c2, 0x30, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000fb0400000a38000000200a05000000000000000000020001000c00054000000000001f74020900010073797a30"], 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) modify_ldt$write2(0x11, &(0x7f00000002c0)={0x81, 0x20101000, 0x2000, 0x1}, 0x10) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x27, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x40088c0) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={&(0x7f00000003c0)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e", 0x28}) 3.814632356s ago: executing program 4 (id=490): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x300}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000080000000000000000000000850000006c00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @mcast2, 0xffff}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 3.579879956s ago: executing program 2 (id=491): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000401"], &(0x7f0000000600)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x20, 0x81, 0x1a, '\x00'/26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000780)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffff9) keyctl$read(0xb, r1, &(0x7f0000000880)=""/35, 0x23) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x5, 0x1, 0xfff, 0x1, 0xc}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x13, 0x0, 0x0, 0x810}, 0x20004000) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0) ioctl$VIDIOC_G_AUDIO(r4, 0x80345621, &(0x7f00000000c0)) (async) ioctl$VIDIOC_TRY_FMT(r4, 0xc0cc5640, &(0x7f0000000500)={0x1, @pix={0x280, 0x1e0, 0x56595559, 0x1}}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x40000000000, 0x200000000000000}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) pread64(r6, 0x0, 0x0, 0x19) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x808, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x7dc, 0x2, [@TCA_BPF_ACT={0x7d8, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1ec, 0x5, 0x0, 0x0, {{0x7}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd2, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036ca696f840b6fd058e9831b7d5556fc2ddb3310402db87ab3b0fb053ee9ec6a5623950d5c8c27e52368dee7c43591d3c2800"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x140, 0x1b, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58800, 0x3, 0x5, 0x6, 0x7}, 0xc33}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x7, 0x4}, 0x1}}]}, {0xd5, 0x6, "f270d82c886adacf5114c5d4956f4c0386b817377052208700569e3e94411f8656731bf43d4ce53f014d54b20522c3d868362a84b835ace8d5781d9502179d3ae2be79b08417ea95f622fbbe392f9a4a239373bb16bf08e1d1a31eb023d2007b6b41cb949b6308ddb142dbe0d846716145c55703fbd8c7a3936b5f2be5c41d959a6ae73d3b986e29a38be71293c21abf0c9e792157a90f9cc665de40a6566ab690253f7096302d89dfe6ecf48b4e79a6b22d951064f151a6ef776fe1ef8b510d561b11fe7475fb5af8fe93bec2dae22e1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x2b0, 0xd, 0x0, 0x0, {{0x7}, {0x15c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc8509"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xba, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648bffc21f0a74a340b278cc3949b549385a407cd95c5697ed222bd3d4e4c2a0bf56c7937d87120b4f89a05bbde47670503d8a27ee2823502a90679b7fb497e236ea19c82fa844f28657c3"}}]}, {0x12d, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e42a047c2fc7ba3b1e387f5628b3c86a55e4972d016f00000378526b1797e51bbca47fa852a731a6d7b7678b453e7c5c4642b54dcee1032681e6853f7c2f7f8aa5667dceac0f2e9f55d94a322ff7f926c35a7b8745989c4b1c88fbc02fb1d34f0dc8917bc6a1b7ffa0d4bbddada56c96a3f61363e90cdb6db84cab4aff681e54e5af5ebafd066309a6e03c9bdba1eb03c25e75d04d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x808}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) (async) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) syz_usb_disconnect(r0) 3.380845624s ago: executing program 3 (id=492): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x80}, 0x20000085) bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf09000000000000550901"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.366757278s ago: executing program 0 (id=493): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@empty, @in6=@local, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x80, 0xa0}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x101, 0x0, 0x0, 0x1, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74ae}, 0x0, 0xffffffff}}, 0xf8}, 0x1, 0x0, 0x0, 0x4c844}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r1 = socket(0x10, 0x80002, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x0, 0xb4, 0x5bc}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x0, 0xb4, 0xebf}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x0, 0xb4, 0x62f}]}, 0x2e}, 0x1, 0x0, 0x0, 0x8004}, 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000006c0)={0x2ccc0000, 0xf462, 0x0, 'queue0\x00', 0x6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) setreuid(0x0, r5) sendmsg$nl_generic(r1, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x224, 0x36, 0x10, 0x70bd27, 0x25dfdbfc, {0x1}, [@generic="968fb2988927e4b3d3e8bd3d084296cc0fa0f55d29a902a8a76ddfc5a6a84ccb6186e834051a3636455bcb85bce79265f9f83cb92127be500968ca92d1c00cc29e4b50d2caff0b82ddda05dbf07b", @nested={0x4, 0x117}, @nested={0x8, 0x10b, 0x0, 0x1, [@nested={0x4, 0xfa}]}, @generic="2a9230ee92eb62938560c01a15334bce5d3d27e7b4fcc267849f669f783b89ebf10f684518457c92fc77241d996f607256b9a10bf4c4c52e3b75d0650f998b431b5a74745e1e999a2f97a7fd227bab46aa73a699b35a1b3b4850e02a51d4093d11497b", @generic="20101d708e75b8b027d5e7ca8e33f3ae361514031a22d0da0f0278ad1c71af8933381823bedd8ef4889ff9b5933872ea340faa7700dcd29886b6d594233dff317b846122dc90a5d5470aaa33d9d91ad9398043270cf5cc6a172729523dcca2d5a0799251c143f02d2afad92c5c79b386540a457f81b368904b6ecff47a1cec9e6194cd3d64fa813c0650f0a2631908bb62722053a6073e51bc770e5819994561b728ecafa7d53dbbf0189bc7e3b00252", @typed={0x8, 0x11, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xe4, 0x0, 0x0, @uid}, @generic="2a7a51b6eb7f7a48134dc64befd3acb0a4cdcdc874c1d3bbab14b53347be297acc05dfc0386a3ef16646f9176cc138f4617c3f4d74ce22eba3df45bd364b3639249719f468c702c4e8a5c3b72d2d2021413721fe387fc566b5bf5a848398e1c9f7ace52b1317ea035e5685340d1aa1e8beb7fbe68269f92ab55179363e18e1328e6e894e12d3", @nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @u32=0xae}]}]}, 0x224}}, 0x80) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8008}, 0x20000050) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000080), 0x4) sendmmsg$inet6(r6, &(0x7f0000003e00)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc040) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000780), 0x12) write(r7, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.357180337s ago: executing program 4 (id=494): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delneigh={0x30, 0x1d, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x40, 0xac, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000240)={0x0, 0x6, 0x5, "a5efb87293"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.801709194s ago: executing program 3 (id=495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x188}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xfffffff8, 0x3}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0xfe}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = shmget$private(0x0, 0x8000, 0x84, &(0x7f0000ff7000/0x8000)=nil) shmat(r4, &(0x7f0000ffe000/0x1000)=nil, 0x2000) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000c80), 0x0, 0x8000, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000200)=0x8, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) ptrace$peeksig(0x4209, r6, &(0x7f0000000140)={0x4, 0x0, 0x1}, &(0x7f0000000180)=[{}]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 2.784352475s ago: executing program 1 (id=496): openat(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = open(0x0, 0x0, 0x20) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r1, r0, 0x0, 0x4000000053d2) 2.782111929s ago: executing program 0 (id=497): r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='\xf4\xff\xff\xff\x00', &(0x7f0000000140), 0x22) 2.52770302s ago: executing program 1 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf251400000018000180140002006e657464657673696d300000000000000500180000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000c817}, 0x404c080) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x7, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) close_range(r3, r4, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000000)=@raw=[@tail_call], 0x0, 0xccd, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x201ed, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x41}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x6) 2.416009529s ago: executing program 0 (id=499): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/41, 0x29}, 0x6}], 0x1, 0x4000830b, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a3"], 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_emit_ethernet(0x12, &(0x7f00000003c0)={@link_local, @link_local, @void, {@llc={0x4, {@llc={0x42, 0x0, "97", '\x00'}}}}}, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 2.415816969s ago: executing program 2 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0)=0x9, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @empty, 0x8}}, 0x0, 0x5}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r4, &(0x7f0000000040)=""/27, 0x1b) getdents(r4, &(0x7f00000005c0)=""/180, 0xb4) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/26, 0x1a}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='htcp', 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x18, &(0x7f0000000000)=0x800203, 0x4) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000180)=0x1) openat$iommufd(0xffffffffffffff9c, 0x0, 0x30100, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) 2.230506893s ago: executing program 1 (id=501): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1192410, 0x0, 0x0, 0x81}}, 0x50) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000021c0)={0x1, 0x0, [{0x280}]}) socket$inet(0xa, 0x801, 0x84) listen(0xffffffffffffffff, 0x8) 1.838639419s ago: executing program 1 (id=502): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x0, 0x25dfdbfc, {0x11}}, 0x14}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x6, 0xfe}}}}}]}}]}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r5, &(0x7f0000000600)='dir .', 0x5) sendmsg$NFT_BATCH(r2, &(0x7f0000001300)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x453d0fb5f7ef18c2, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELTABLE={0x1c8, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x101, 0x6, "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"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x61, 0x6, "8f5bf63da522f596dde79cb27c2f9f79ff899341d2fbe38a1d0b8bd262826952274f0cccd2379b927dedaf935bfee57119a6eb8ef1a8459110559d4efdc06b16655c3e7f4d4b2b8be62b5aed4e80c12370b23c1084cec2fa66106e8b89"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x418, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_EXPRESSIONS={0x70, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xb4}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x16}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xa8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf41e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x207}]}, @NFTA_SET_DESC={0x27c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6163}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x652}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}, @NFTA_SET_DESC_CONCAT={0x78, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x18000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}]}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0x144, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x459}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xed61}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4b}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4b89}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2f2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x55}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFT_MSG_NEWRULE={0x144, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x118, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}, {0x48, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_TTL={0x5, 0x2, 0x60}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_TTL={0x5, 0x2, 0x6}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14}}, 0x79c}, 0x1, 0x0, 0x0, 0x40002050}, 0x4080000) syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x7b, {0x7b, 0xf, "d2816bdd0c84c3aade9e90a8c03f79ad9ba6641cb4c9af5cf3dc499984a6f89ae4d0f9056f120b6da37d123c099af49ca0f486fed95f0abb384d94346f5e2410689b8c784a3ff11f9445ffa1eeb7e6eacad21d5cdf6c9d5f8b4b94080d8fdc7f94346c3bf191655162c3817a5920c2b3b62968c2976eb975a1"}}, &(0x7f0000000580)={0x0, 0x3, 0xf3, @string={0xf3, 0x3, "4d0b4059d5508546151bdb70b95e11ad0f9138d99bd59b09cce905ea375bbeb4390764837b76f2a68be96fbc2cdf3e933d78e0742889d56290f27dac715d180b741b42d89db1e1980f0e0b1ed5ad639c2b75dc20f9e8865b1b0ba98a80b28d8ef2b9c384ac21a494c8879133be4c193075af2c76b69c1ed3797f806b6877b1494bbe35ad6a551d3bacd532d28ad5812dd360c1059b6378b9f2fa637ff214463308fcf85bafcf79e19661a0321f96c72e4176260ba53f5923819478b158576d295ec7754ba48e37cb075d8098d85ae85ad17c23bec9e7cdd42f05754512a418575f9de57eff0456a3a7cb55bb7a9c9e23c1"}}, &(0x7f0000000680)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x4, "6c8c0587"}, @local=@item_4={0x3, 0x2, 0x7, "362355ba"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xd, 0x1, {0x22, 0x35f}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="200b130000006df222af58e1d3ed5ef4eaa9048dde471083e6349168b21758ef760ddbc6005daf899ee4a4566837d1d409249ef0cf7c6488e5cfff7488be57f17f0448c6815739eeea0a06"], &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000800)={0x20, 0x1, 0x58, "8a9223163460afb72323793c1a1ad71a5e8b4e4619dcccf901d03f9fd49462697b9d7e5995c393e9a15951227046d73f34decc5e6fce31a9d6e162b124fdc6ea1b9aeb6953718bff09742806d05f287aeaafc6605841344b"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x6}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) connect$inet6(r2, &(0x7f0000000980)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x80}, 0x1c) recvmmsg(r6, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r6], 0x48}}, 0x2404c054) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) 1.495544631s ago: executing program 2 (id=503): mknodat$null(0xffffffffffffff9c, 0x0, 0x1, 0x103) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0xee01, r0, 0x0) setresuid(0x0, 0x0, 0x0) (fail_nth: 1) 1.43188301s ago: executing program 3 (id=504): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0400) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000004c0)={0x6, 0xffffffffffffffff, 'id0\x00'}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1004a0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,uid']) 926.951012ms ago: executing program 4 (id=505): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000000a00000a70010000020a010100000000000000000a00000661000600946024968e1a1712fb0889442b6f8a0b358323a82d9d2050744d45be81f49a0fa06ee6d97eb1fcd4bb7391bf432ec3b851f9ede9c3b7d9deba726f8bea4e3c1ae84590d04e52b25dd097e755f75a5b3a82996770501ba3f61be6a8fa87a27c9d8a78fa7c01fc4a73a0e7bf3e0000000c0004400000000000000002e90006003d842b6d1629c72c20e49c5995197844d16ac0cba1136fe66e751d48d61275b27f3b78c59f1f4add1c655e2c5fed2bc7a36cd97f957589f6d5274ec2f832829f561640eca1f8b90ac6b2eefffb77ae94cb86039f7166856b6eb39539eaae7a9727695742291b4f771374b4f6df7d926b8a35a8b79da065851b2c84e9252eb00b90576fce807a7f6ddb65c89e7b4130ce9bf3b264eeaa6894d3df4d1d48abf7f54b778deb9466836838f7a4b1dab35f489ff8847bcdcd8bdcb24d21cf17725a5ab212c360409d4a6663032e19d82d6c6fbe32bf6cacedd3915aa70fbf2ff0fd3c810f54461a0000007c000000050a01010000000000000000070000000c00024000000000000000021c0008800c00024000000000000100010c00014000000000000000080c0002400000000000000003340004801400030070696d367265673000000000000000000800014000000003140003007465616d5f736c6176655f3100000000480000000b0a000000000000000000000300000208000a400000000308000f4000000008080007400000000f080007400400002308000740000000310c000b4000000000000000094c000000030a010200000000000000000b00000730000480080001400000000414000300766972745f77696669300000000000000800014000000001080001400000000304000c0004000480140000001100010000000000000000000300000a"], 0x2a8}, 0x1, 0x0, 0x0, 0x80}, 0x20000085) bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf09000000000000550901"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 625.810034ms ago: executing program 2 (id=506): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'wlan1\x00', {}, 0x23}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3, 0x5, 0xf, 0x9}]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@private1, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, 0x5, 0xf, 0x20, 0x500, 0x8000, 0x2, r3}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1c8, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xae59}, {0x8, 0x13, 0xa73}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfffa}, {0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x8000}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xd1}, {0x5}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x848}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x0, 0x4, 0x9, 0x2, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0xf4, &(0x7f0000000640)=""/244, 0x41100, 0x11, '\x00', r3, @fallback=0x2c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x5, &(0x7f0000000800)=[r1, r1, 0x1, r1, r1, r5, r1, r1, r1], &(0x7f0000000840)=[{0x4, 0x5, 0x1, 0xf}, {0x5, 0x5, 0x1}, {0x0, 0x3, 0xd, 0x6}, {0x0, 0x2, 0x6, 0x3}, {0x1, 0x5, 0x4, 0xc}], 0x10, 0x7f}, 0x94) connect$inet6(r1, &(0x7f0000000980)={0xa, 0x4e21, 0x3, @remote, 0x4}, 0x1c) r6 = syz_open_dev$ublk_chdev(&(0x7f00000009c0), 0x0, 0x8000) close_range(r6, r0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000a00)=0x1000000, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x640, 0xffffffff, 0x188, 0x188, 0x188, 0xffffffff, 0xffffffff, 0x570, 0x570, 0x570, 0xffffffff, 0x4, &(0x7f0000000a40), {[{{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0xb2, 0x4, 0x7fff, @empty, @local, @empty, [0xffffff00, 0x0, 0xff000000, 0xff], [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0x0, 0xffffff00, 0xffffff00], 0x925, 0x46c}}, @common=@hl={{0x28}, {0x0, 0xd}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x275, 0x7, 0x1}}}, {{@ipv6={@mcast2, @private2, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xffffff00, 0x0, 0xffffff00, 0xff000000], 'ip6_vti0\x00', 'geneve0\x00', {0xff}, {0xff}, 0x6d, 0xdb, 0x6, 0x26}, 0x0, 0x120, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x80, 0x2, 0x1, [0x9, 0x9, 0x1, 0x5, 0xfff7, 0xfffe, 0x1, 0x2, 0x7, 0x644, 0x5, 0xffaa, 0x100, 0x7, 0x0, 0x6], 0x10}}, @common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e24, 0x4e23], 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x2, 0x4}, {0xffffffffffffffff, 0x2, 0x2}, 0x7, 0x7fffffff}}}, {{@ipv6={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0x45d5411974d4ac1c, 0xff000000], 'bond0\x00', 'netpci0\x00', {}, {0xff}, 0x29, 0x6, 0x0, 0x46}, 0x0, 0x228, 0x298, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0xe, 0x8, 0x12, 0x4, 0x7, 0x6, 0x1, 0x101, 0x0, 0x20}, {0x2}}}, @common=@icmp6={{0x28}, {0x10, 'hU'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x3ff, 0x5, 0x0, 0x0, "50d1a0b2c2b7ab8a30b3824f1340455ad46fc852c8e2b3ba6402b423e96f812dad2ca63f010f22c55b80770a138a843a00975382f372901aca71daf57926996c"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001140)={0x1, 0x5, {0x0, @usage, 0x0, 0x7, 0x9, 0x7, 0x7fffffffffffffff, 0xdd, 0x90, @usage=0xa, 0xd, 0x8, [0x6, 0x4, 0x2, 0x1, 0x1, 0x3]}, {0x2, @struct={0x5, 0xe}, 0x0, 0x9, 0x1ff, 0x6, 0x5, 0x1, 0x7f90edc9b403c03d, @usage=0x1000, 0xff, 0x9, [0x8000, 0x7fffffff, 0xfffffffffffff521, 0xfffffffffffffffd, 0xffffffff, 0x8]}, {0xfffffffffffffff9, @struct={0x0, 0x7}, 0x0, 0x3, 0xb, 0x3ff, 0x1, 0x2, 0x2, @struct={0x9, 0x40}, 0xfffffff9, 0x4, [0x9, 0x0, 0xff, 0x2, 0x0, 0x6]}, {0x5, 0xa93e, 0x4}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001540)={r7, 0x5, 0x0, [0x3, 0x4, 0x0, 0x9, 0x7], [0x5, 0xe6, 0x2, 0x101, 0x80000001, 0x80000000, 0x84, 0xffffffffffffffff, 0x7, 0x0, 0x10, 0x7, 0xd, 0x5, 0xfff, 0x0, 0x2269, 0x39a, 0x0, 0x5, 0x5, 0xf7, 0xffffffff, 0xa180, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xea, 0x4, 0x7fffffffffffffff, 0xffffffffffffff01, 0x7, 0x7, 0x39, 0x4, 0x1, 0x91, 0x503, 0x8, 0x2, 0x6, 0x7, 0x80000001, 0xfffffffffffffff9, 0x100000001, 0x9, 0x6, 0xf8, 0x6, 0x3e6e, 0x40, 0x90, 0x7, 0x8, 0x2, 0x4, 0x9, 0xc8, 0x9, 0xfff, 0x1, 0x3, 0x10000, 0x0, 0xf00, 0x401, 0x7, 0x5, 0xfc, 0x3, 0x8c8, 0x9, 0x2, 0x63, 0xfffffffffffffff9, 0x9, 0x80, 0x8000000000000000, 0x4, 0xe27, 0x3ff, 0x9, 0x0, 0x5, 0x6e1, 0x9, 0x9, 0x9, 0x8, 0x7ff, 0x1000, 0x666, 0x8, 0xe, 0x8, 0x7ff, 0x200, 0x80, 0x6, 0x1, 0x9, 0x2, 0x2, 0x9, 0xffff, 0x8000000000000000, 0x3, 0x8000000000, 0x7fffffff, 0x8, 0x7fff, 0xe, 0x0, 0x7, 0xa042, 0x3fffc000, 0x7, 0x9, 0x0, 0xa9, 0x6]}) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000001980)=0x3, 0x2) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000019c0)=0x180, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r1, 0x8044610a, &(0x7f0000001a00)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchmod(r8, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xfffffffffffff801, &(0x7f0000001ac0)=0x1) openat$cgroup_type(r8, &(0x7f0000001b00), 0x2, 0x0) r9 = add_key$keyring(&(0x7f0000001b40), &(0x7f0000001b80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x42324) 280.188708ms ago: executing program 3 (id=507): r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a0000000400000001"], 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) ptrace$pokeuser(0x6, r0, 0x1, 0x5) r3 = syz_pidfd_open(r0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x7, 0x9, 0x1, 0xbfbf, 0x2, "7f445ff404a962cc00e05d17fb12c0ec1122bc"}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r1}) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0x10002001}) ppoll(&(0x7f0000000200)=[{r8, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r3, r6, 0x0) 217.112481ms ago: executing program 4 (id=508): openat(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x4000000053d2) 191.077714ms ago: executing program 2 (id=509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x0, 0xc, 0x0, 0xfd, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x21, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8004], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 178.761773ms ago: executing program 0 (id=510): sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="58fb0000", @ANYRES16=0x0, @ANYBLOB="200025bd7000fddbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff070000100000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x40080) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040), 0x8) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x8e6}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0xe3900, 0x0) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) (async) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) (async) r6 = syz_open_dev$hidraw(0x0, 0x0, 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0) (async) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000081e000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000051a000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) poll(&(0x7f0000000140)=[{r5, 0x2cfc08c20dafc34e}, {r3, 0xf102}], 0x2, 0x8000007) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x14, 0x5f, 0x101, 0x0, 0xffffffff, "", [@nested={0x4, 0x141}]}, 0x14}], 0x1}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50ffffff1a0000042cbd7000fbdbdf2502201401fd01000f000f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x24008044) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008000) 0s ago: executing program 4 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf251400000018000180140002006e657464657673696d300000000000000500180000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000c817}, 0x404c080) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x7, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) close_range(r3, r4, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000000)=@raw=[@tail_call], 0x0, 0xccd, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x201ed, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x41}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x6) kernel console output (not intermixed with test programs): 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.675879][ T6039] RSP: 002b:00007faca8156028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.675902][ T6039] RAX: ffffffffffffffda RBX: 00007facaa185fa0 RCX: 00007faca9efe0d9 [ 115.675918][ T6039] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 115.675932][ T6039] RBP: 00007faca8156090 R08: 00002000000001c0 R09: 0000000000000000 [ 115.675946][ T6039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.675958][ T6039] R13: 00007facaa186038 R14: 00007facaa185fa0 R15: 00007fff6b09b6d8 [ 115.675991][ T6039] [ 116.031022][ T6043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.56'. [ 116.821436][ T37] kauditd_printk_skb: 244 callbacks suppressed [ 116.821468][ T37] audit: type=1326 audit(1786012766.051:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6044 comm="syz.1.57" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f746e0d9 code=0x7fc00000 [ 121.009994][ T6074] batman_adv: batadv0: Adding interface: veth0 [ 121.010013][ T6074] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.010047][ T6074] batman_adv: batadv0: Interface activated: veth0 [ 121.090717][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.090738][ T6078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.130322][ T6078] batman_adv: batadv0: Interface deactivated: veth0 [ 121.130347][ T6078] batman_adv: batadv0: Removing interface: veth0 [ 121.342470][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 121.468562][ T5979] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 121.645838][ T5979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 121.675438][ T5979] usb 5-1: not running at top speed; connect to a high speed hub [ 121.700022][ T5979] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 121.700052][ T5979] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 121.700072][ T5979] usb 5-1: config 14 has no interface number 0 [ 121.700082][ T5979] usb 5-1: config 14 has no interface number 1 [ 121.700126][ T5979] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 121.700139][ T5979] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 121.700157][ T5979] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 121.700172][ T5979] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 121.700187][ T5979] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 121.700202][ T5979] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 121.700214][ T5979] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.700229][ T5979] usb 5-1: config 14 interface 57 has no altsetting 0 [ 121.700239][ T5979] usb 5-1: config 14 interface 228 has no altsetting 0 [ 121.731003][ T5979] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 121.731033][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.731052][ T5979] usb 5-1: Product: syz [ 121.731065][ T5979] usb 5-1: Manufacturer: syz [ 121.731079][ T5979] usb 5-1: SerialNumber: syz [ 122.035527][ T6093] FAULT_INJECTION: forcing a failure. [ 122.035527][ T6093] name failslab, interval 1, probability 0, space 0, times 0 [ 122.035564][ T6093] CPU: 0 UID: 0 PID: 6093 Comm: syz.2.69 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.035589][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.035601][ T6093] Call Trace: [ 122.035609][ T6093] [ 122.035618][ T6093] dump_stack_lvl+0xe8/0x150 [ 122.035657][ T6093] should_fail_ex+0x467/0x600 [ 122.035698][ T6093] should_failslab+0xa8/0x100 [ 122.035726][ T6093] __kmalloc_cache_noprof+0xa0/0x6b0 [ 122.035749][ T6093] ? ima_d_path+0xd4/0x230 [ 122.035776][ T6093] ? ima_d_path+0xd4/0x230 [ 122.035811][ T6093] ima_d_path+0xd4/0x230 [ 122.035847][ T6093] ? __pfx_ima_d_path+0x10/0x10 [ 122.035880][ T6093] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 122.035903][ T6093] ? lockdep_hardirqs_on+0x7a/0x110 [ 122.035932][ T6093] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 122.035969][ T6093] process_measurement+0x155a/0x1c20 [ 122.036017][ T6093] ? __pfx_process_measurement+0x10/0x10 [ 122.036047][ T6093] ? _parse_integer_limit+0x192/0x1e0 [ 122.036115][ T6093] ? get_pid_task+0x20/0x1f0 [ 122.036157][ T6093] ? get_pid_task+0x20/0x1f0 [ 122.036206][ T6093] ima_file_mmap+0x1b0/0x200 [ 122.036236][ T6093] ? __pfx_ima_file_mmap+0x10/0x10 [ 122.036270][ T6093] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.036301][ T6093] security_mmap_file+0x773/0xa20 [ 122.036329][ T6093] vm_mmap_pgoff+0x134/0x4e0 [ 122.036367][ T6093] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 122.036403][ T6093] ? __fget_files+0x2a/0x420 [ 122.036425][ T6093] ? __fget_files+0x3a8/0x420 [ 122.036445][ T6093] ? __fget_files+0x2a/0x420 [ 122.036473][ T6093] ksys_mmap_pgoff+0x4a6/0x720 [ 122.036500][ T6093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.036523][ T6093] do_syscall_64+0x174/0x580 [ 122.036551][ T6093] ? trace_irq_disable+0x3b/0x140 [ 122.036572][ T6093] ? clear_bhb_loop+0x40/0x90 [ 122.036598][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.036619][ T6093] RIP: 0033:0x7f7eb639e0d9 [ 122.036639][ T6093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.036657][ T6093] RSP: 002b:00007f7eb45d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 122.036680][ T6093] RAX: ffffffffffffffda RBX: 00007f7eb6626090 RCX: 00007f7eb639e0d9 [ 122.036695][ T6093] RDX: 000000000100000f RSI: 0000000000c00000 RDI: 0000200000000000 [ 122.036709][ T6093] RBP: 00007f7eb45d5090 R08: 0000000000000003 R09: 0000000000002000 [ 122.036722][ T6093] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 122.036734][ T6093] R13: 00007f7eb6626128 R14: 00007f7eb6626090 R15: 00007ffefac4e548 [ 122.036768][ T6093] [ 122.268751][ T5979] legousbtower 5-1:14.57: interrupt endpoints not found [ 122.656231][ T5979] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 122.691076][ T5979] legousbtower 5-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 122.938887][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 123.336654][ T6097] Zero length message leads to an empty skb [ 124.284647][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 124.486270][ T5699] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.654464][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.654491][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.654520][ T5699] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 124.654533][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.679772][ T5699] usb 3-1: config 0 descriptor?? [ 125.174247][ T5699] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 125.174295][ T5699] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 125.174322][ T5699] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 125.174345][ T5699] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 125.174368][ T5699] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 125.174393][ T5699] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 125.174418][ T5699] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 125.312119][ T5729] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 125.488168][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD is Bulk; changing to Interrupt [ 125.488203][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 8, setting to 0 [ 125.488230][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 125.488258][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 125.596241][ T5699] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 125.631188][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 125.708956][ T6144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.76'. [ 125.721702][ T5729] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 125.721734][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.721753][ T5729] usb 2-1: Product: ꤷ껿㡓갗歂ꋌ收綊⯹儉쒥엏䘿祰芃㢎⁊⧉㳸陠褃굑俗ﻋᙇˁ瀨菗╠㺟ᏺ࢛ꨄ擦ꐶࢀ퍇⁽᫖隈ಖ㗷曒싍뵍鎞愚㨶聧먲慛爛귕㥰펠ꩅሖ柂沥❾ [ 125.721776][ T5729] usb 2-1: Manufacturer: ࠇ [ 125.721790][ T5729] usb 2-1: SerialNumber: ဃ漊듗⋓筒≿㋉㑻ꙉሴ腳鱞授⩠购개ၰ䀵⋞ᶸ䱭陱⑲䭷ꖹ [ 125.834907][ T6128] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 127.449038][ T5699] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device [ 127.449100][ T5699] arvo 0003:1E7D:30D4.0001: couldn't install keyboard [ 127.628909][ T5699] arvo 0003:1E7D:30D4.0001: probe with driver arvo failed with error -71 [ 127.690890][ T5729] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.903638][ T5699] usb 3-1: USB disconnect, device number 5 [ 128.009514][ T6162] netlink: 56 bytes leftover after parsing attributes in process `syz.4.82'. [ 128.764902][ T5729] usb 2-1: USB disconnect, device number 3 [ 128.912686][ T6172] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.440125][ T6180] FAULT_INJECTION: forcing a failure. [ 129.440125][ T6180] name failslab, interval 1, probability 0, space 0, times 0 [ 129.440160][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: syz.1.89 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.440184][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.440196][ T6180] Call Trace: [ 129.440204][ T6180] [ 129.440213][ T6180] dump_stack_lvl+0xe8/0x150 [ 129.440252][ T6180] should_fail_ex+0x467/0x600 [ 129.440289][ T6180] should_failslab+0xa8/0x100 [ 129.440318][ T6180] __kmalloc_noprof+0xfe/0x780 [ 129.440342][ T6180] ? bpf_test_init+0x9f/0x150 [ 129.440368][ T6180] ? bpf_test_init+0x9f/0x150 [ 129.440401][ T6180] bpf_test_init+0x9f/0x150 [ 129.440432][ T6180] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 129.440478][ T6180] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.440513][ T6180] ? __fget_files+0x2a/0x420 [ 129.440543][ T6180] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.440582][ T6180] bpf_prog_test_run+0x2cb/0x340 [ 129.440610][ T6180] __sys_bpf+0xa22/0xd90 [ 129.440643][ T6180] ? __pfx___sys_bpf+0x10/0x10 [ 129.440669][ T6180] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 129.440704][ T6180] ? rt_mutex_slowunlock+0x219/0x460 [ 129.440747][ T6180] ? ksys_write+0x248/0x270 [ 129.440778][ T6180] ? __pfx_ksys_write+0x10/0x10 [ 129.440811][ T6180] __x64_sys_bpf+0xba/0xd0 [ 129.440845][ T6180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.440869][ T6180] do_syscall_64+0x174/0x580 [ 129.440898][ T6180] ? trace_irq_disable+0x3b/0x140 [ 129.440919][ T6180] ? clear_bhb_loop+0x40/0x90 [ 129.440949][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.440970][ T6180] RIP: 0033:0x7f92f746e0d9 [ 129.440990][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.441008][ T6180] RSP: 002b:00007f92f56c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.441031][ T6180] RAX: ffffffffffffffda RBX: 00007f92f76f5fa0 RCX: 00007f92f746e0d9 [ 129.441046][ T6180] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 129.441059][ T6180] RBP: 00007f92f56c6090 R08: 0000000000000000 R09: 0000000000000000 [ 129.441071][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.441083][ T6180] R13: 00007f92f76f6038 R14: 00007f92f76f5fa0 R15: 00007ffd5be929a8 [ 129.441116][ T6180] [ 130.308141][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 130.345026][ T6190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.93'. [ 130.345048][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.93'. [ 130.345060][ T6190] netlink: 60 bytes leftover after parsing attributes in process `syz.3.93'. [ 130.454687][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.626766][ T6214] wg2 speed is unknown, defaulting to 1000 [ 131.626861][ T6214] wg2 speed is unknown, defaulting to 1000 [ 132.107085][ T6214] wg2 speed is unknown, defaulting to 1000 [ 132.184536][ T6214] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 132.184568][ T6214] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 132.184592][ T6214] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 132.471330][ T6214] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 132.481948][ T36] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 132.670825][ T36] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD is Bulk; changing to Interrupt [ 132.670846][ T36] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 8, setting to 0 [ 132.670862][ T36] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 132.670877][ T36] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 132.674202][ T36] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 132.674220][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.674232][ T36] usb 3-1: Product: ꤷ껿㡓갗歂ꋌ收綊⯹儉쒥엏䘿祰芃㢎⁊⧉㳸陠褃굑俗ﻋᙇˁ瀨菗╠㺟ᏺ࢛ꨄ擦ꐶࢀ퍇⁽᫖隈ಖ㗷曒싍뵍鎞愚㨶聧먲慛爛귕㥰펠ꩅሖ柂沥❾ [ 132.674245][ T36] usb 3-1: Manufacturer: ࠇ [ 132.674253][ T36] usb 3-1: SerialNumber: ဃ漊듗⋓筒≿㋉㑻ꙉሴ腳鱞授⩠购개ၰ䀵⋞ᶸ䱭陱⑲䭷ꖹ [ 132.717504][ T6228] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 132.875816][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.875922][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.114564][ T36] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.313963][ T37] audit: type=1326 audit(1786012782.568:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6243 comm="syz.0.105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca9efe0d9 code=0x7ffc0000 [ 133.315393][ T37] audit: type=1326 audit(1786012782.568:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6243 comm="syz.0.105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca9efe0d9 code=0x7ffc0000 [ 133.320379][ T37] audit: type=1326 audit(1786012782.568:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6243 comm="syz.0.105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca9efe0d9 code=0x7ffc0000 [ 133.320508][ T37] audit: type=1326 audit(1786012782.568:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6243 comm="syz.0.105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca9efe0d9 code=0x7ffc0000 [ 133.343049][ T37] audit: type=1326 audit(1786012782.598:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6243 comm="syz.0.105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faca9ebe90e code=0x7ffc0000 [ 133.343696][ T37] audit: type=1326 audit(1786012782.598:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6243 comm="syz.0.105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca9efe0d9 code=0x7ffc0000 [ 133.345289][ T37] audit: type=1326 audit(1786012782.598:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6243 comm="syz.0.105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca9efe0d9 code=0x7ffc0000 [ 133.345334][ T37] audit: type=1326 audit(1786012782.598:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6243 comm="syz.0.105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca9efe0d9 code=0x7ffc0000 [ 133.348096][ T37] audit: type=1326 audit(1786012782.598:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6243 comm="syz.0.105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faca9efe0d9 code=0x7ffc0000 [ 133.348654][ T37] audit: type=1326 audit(1786012782.598:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6243 comm="syz.0.105" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca9efe0d9 code=0x7ffc0000 [ 133.431403][ T6214] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 134.039820][ T36] usb 3-1: USB disconnect, device number 6 [ 134.210865][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 135.477707][ T6214] wg2 speed is unknown, defaulting to 1000 [ 135.498515][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.675595][ T36] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.694183][ T6214] wg2 speed is unknown, defaulting to 1000 [ 135.721040][ T6214] wg2 speed is unknown, defaulting to 1000 [ 135.821053][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 135.834029][ T36] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 135.834056][ T36] usb 3-1: config 0 has no interface number 0 [ 135.850223][ T36] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 135.850252][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.850271][ T36] usb 3-1: Product: syz [ 135.850284][ T36] usb 3-1: Manufacturer: syz [ 135.850297][ T36] usb 3-1: SerialNumber: syz [ 135.856681][ T6214] wg2 speed is unknown, defaulting to 1000 [ 135.897271][ T6214] wg2 speed is unknown, defaulting to 1000 [ 136.085199][ T36] usb 3-1: config 0 descriptor?? [ 136.136751][ T36] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 136.851113][ T36] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 136.877473][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 136.980463][ T36] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 137.193124][ T36] usb 3-1: USB disconnect, device number 7 [ 137.379400][ T36] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 137.407954][ T36] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 137.422675][ T36] quatech2 3-1:0.51: device disconnected [ 138.333940][ T5699] usb 4-1: USB disconnect, device number 7 [ 138.420243][ T5699] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 138.692282][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 142.590488][ T5879] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.760520][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 142.765852][ T5879] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 142.765889][ T5879] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 142.765908][ T5879] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 142.765928][ T5879] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 142.765947][ T5879] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 142.765965][ T5879] usb 2-1: config 0 has no interface number 0 [ 142.766007][ T5879] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 142.766033][ T5879] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 142.766054][ T5879] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.766087][ T5879] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.766113][ T5879] usb 2-1: config 0 interface 125 has no altsetting 0 [ 142.766130][ T5879] usb 2-1: config 0 interface 125 has no altsetting 2 [ 142.811552][ T5879] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 142.811583][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.811604][ T5879] usb 2-1: Product: syz [ 142.811620][ T5879] usb 2-1: Manufacturer: syz [ 142.811634][ T5879] usb 2-1: SerialNumber: syz [ 142.931993][ T5879] usb 2-1: config 0 descriptor?? [ 142.965653][ T5879] usb 2-1: selecting invalid altsetting 2 [ 142.985829][ T36] usb 5-1: USB disconnect, device number 2 [ 143.351828][ T36] legousbtower 5-1:14.228: LEGO USB Tower #-159 now disconnected [ 143.437813][ T6313] syz.1.126 uses obsolete (PF_INET,SOCK_PACKET) [ 143.483479][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.485815][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.535660][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.557816][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.558763][ T6339] Bluetooth: MGMT ver 1.23 [ 143.661031][ C0] usb 2-1: async_complete: urb error -71 [ 143.661135][ C0] usb 2-1: async_complete: urb error -71 [ 143.661212][ C0] usb 2-1: async_complete: urb error -71 [ 143.680268][ T5879] get_1284_register: usb error -71 [ 143.861596][ T5879] usb 2-1: USB disconnect, device number 4 [ 143.998444][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 144.917251][ T197] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.064238][ T6368] netlink: 48 bytes leftover after parsing attributes in process `syz.4.143'. [ 145.110835][ T197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.110900][ T197] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 145.110925][ T197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.150717][ T197] usb 1-1: config 0 descriptor?? [ 145.366696][ T197] usbhid 1-1:0.0: can't add hid device: -71 [ 145.366813][ T197] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 145.400591][ T197] usb 1-1: USB disconnect, device number 4 [ 146.003111][ T5699] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.153214][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.153272][ T5699] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 146.153297][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.174654][ T5699] usb 1-1: config 0 descriptor?? [ 146.338165][ T821] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 146.531734][ T821] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 146.532041][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.588270][ T821] usb 3-1: config 0 descriptor?? [ 146.614518][ T821] cp210x 3-1:0.0: cp210x converter detected [ 146.744838][ T37] kauditd_printk_skb: 157 callbacks suppressed [ 146.744858][ T37] audit: type=1326 audit(1786012796.019:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6407 comm="syz.1.157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f746e0d9 code=0x7ffc0000 [ 146.744904][ T37] audit: type=1326 audit(1786012796.019:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6407 comm="syz.1.157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f92f746e0d9 code=0x7ffc0000 [ 146.828955][ T821] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 146.828976][ T821] cp210x 3-1:0.0: querying part number failed [ 146.866321][ T821] usb 3-1: cp210x converter now attached to ttyUSB0 [ 147.044511][ T5699] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 147.078590][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.107187][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.130681][ T6410] smpboot: CPU 1 is now offline [ 147.182759][ T197] usb 3-1: USB disconnect, device number 8 [ 147.216430][ T5699] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 147.362884][ T197] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 147.363565][ T197] cp210x 3-1:0.0: device disconnected [ 149.959288][ T6412] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 151.083316][ T6422] FAULT_INJECTION: forcing a failure. [ 151.083316][ T6422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.083339][ T6422] CPU: 0 UID: 0 PID: 6422 Comm: syz.4.160 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 151.083354][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.083368][ T6422] Call Trace: [ 151.083373][ T6422] [ 151.083378][ T6422] dump_stack_lvl+0xe8/0x150 [ 151.083403][ T6422] should_fail_ex+0x467/0x600 [ 151.083424][ T6422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.083437][ T6422] _copy_from_user+0x2d/0xb0 [ 151.083452][ T6422] memdup_user+0x5e/0xd0 [ 151.083470][ T6422] strndup_user+0x68/0xd0 [ 151.083486][ T6422] __se_sys_fsopen+0x3d/0x2c0 [ 151.083505][ T6422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.083517][ T6422] do_syscall_64+0x174/0x580 [ 151.083534][ T6422] ? trace_irq_disable+0x3b/0x140 [ 151.083547][ T6422] ? clear_bhb_loop+0x40/0x90 [ 151.083561][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.083573][ T6422] RIP: 0033:0x7f5bec56e0d9 [ 151.083585][ T6422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.083595][ T6422] RSP: 002b:00007f5bea7a5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 151.083608][ T6422] RAX: ffffffffffffffda RBX: 00007f5bec7f6090 RCX: 00007f5bec56e0d9 [ 151.083617][ T6422] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000500 [ 151.083624][ T6422] RBP: 00007f5bea7a5090 R08: 0000000000000000 R09: 0000000000000000 [ 151.083631][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.083638][ T6422] R13: 00007f5bec7f6128 R14: 00007f5bec7f6090 R15: 00007ffe82202cf8 [ 151.083656][ T6422] [ 151.946745][ T6426] FAULT_INJECTION: forcing a failure. [ 151.946745][ T6426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.946769][ T6426] CPU: 0 UID: 0 PID: 6426 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 151.946783][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.946791][ T6426] Call Trace: [ 151.946795][ T6426] [ 151.946801][ T6426] dump_stack_lvl+0xe8/0x150 [ 151.946828][ T6426] should_fail_ex+0x467/0x600 [ 151.946850][ T6426] _copy_from_iter+0x1d3/0x1660 [ 151.946865][ T6426] ? rcu_is_watching+0x15/0xb0 [ 151.946881][ T6426] ? trace_kmem_cache_alloc+0x29/0xe0 [ 151.946896][ T6426] ? __pfx__copy_from_iter+0x10/0x10 [ 151.946908][ T6426] ? __alloc_skb+0x276/0x7a0 [ 151.946922][ T6426] ? __alloc_skb+0x276/0x7a0 [ 151.946938][ T6426] ? netlink_sendmsg+0x650/0xb40 [ 151.946954][ T6426] ? skb_put+0x112/0x210 [ 151.946971][ T6426] netlink_sendmsg+0x6c0/0xb40 [ 151.946992][ T6426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.947009][ T6426] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 151.947028][ T6426] ? __kernel_text_address+0xd/0x30 [ 151.947040][ T6426] ? unwind_get_return_address+0x4d/0x90 [ 151.947055][ T6426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.947071][ T6426] sock_sendmsg_nosec+0x13a/0x180 [ 151.947085][ T6426] ____sys_sendmsg+0x565/0x870 [ 151.947101][ T6426] ? __might_fault+0xaf/0x130 [ 151.947118][ T6426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.947139][ T6426] ? import_iovec+0x73/0xa0 [ 151.947156][ T6426] ___sys_sendmsg+0x2a5/0x360 [ 151.947171][ T6426] ? __lock_acquire+0x683/0x2ce0 [ 151.947187][ T6426] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.947223][ T6426] ? __fget_files+0x2a/0x420 [ 151.947235][ T6426] ? __fget_files+0x3a8/0x420 [ 151.947253][ T6426] __x64_sys_sendmsg+0x1b7/0x290 [ 151.947271][ T6426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.947298][ T6426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.947311][ T6426] do_syscall_64+0x174/0x580 [ 151.947327][ T6426] ? trace_irq_disable+0x3b/0x140 [ 151.947339][ T6426] ? clear_bhb_loop+0x40/0x90 [ 151.947362][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.947374][ T6426] RIP: 0033:0x7f7eb639e0d9 [ 151.947386][ T6426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.947396][ T6426] RSP: 002b:00007f7eb45f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.947410][ T6426] RAX: ffffffffffffffda RBX: 00007f7eb6625fa0 RCX: 00007f7eb639e0d9 [ 151.947419][ T6426] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 151.947426][ T6426] RBP: 00007f7eb45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 151.947433][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.947440][ T6426] R13: 00007f7eb6626038 R14: 00007f7eb6625fa0 R15: 00007ffefac4e548 [ 151.947459][ T6426] [ 152.255426][ T5729] usb 1-1: USB disconnect, device number 5 [ 152.255525][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 155.731937][ T6484] Bluetooth: MGMT ver 1.23 [ 155.731971][ T6484] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 156.469155][ T6504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.184'. [ 156.991420][ T5699] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.009493][ T5699] usb 3-1: Using ep0 maxpacket: 16 [ 158.012771][ T5699] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.012806][ T5699] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.012831][ T5699] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 158.012859][ T5699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.012896][ T5699] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 158.012921][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.211429][ T5699] usb 3-1: config 0 descriptor?? [ 158.323699][ T6514] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 158.323746][ T6514] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 158.323889][ T6514] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 159.475486][ T5699] usbhid 3-1:0.0: can't add hid device: -71 [ 159.475628][ T5699] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 159.559793][ T5699] usb 3-1: USB disconnect, device number 9 [ 160.067394][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 160.414818][ T6529] netlink: 168 bytes leftover after parsing attributes in process `syz.3.193'. [ 160.511414][ T6533] FAULT_INJECTION: forcing a failure. [ 160.511414][ T6533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.511450][ T6533] CPU: 0 UID: 0 PID: 6533 Comm: syz.2.192 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 160.511472][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.511482][ T6533] Call Trace: [ 160.511493][ T6533] [ 160.511501][ T6533] dump_stack_lvl+0xe8/0x150 [ 160.511539][ T6533] should_fail_ex+0x467/0x600 [ 160.511578][ T6533] _copy_from_iter+0x1d3/0x1660 [ 160.511602][ T6533] ? rcu_is_watching+0x15/0xb0 [ 160.511629][ T6533] ? trace_kmem_cache_alloc+0x29/0xe0 [ 160.511654][ T6533] ? __pfx__copy_from_iter+0x10/0x10 [ 160.511673][ T6533] ? __alloc_skb+0x276/0x7a0 [ 160.511694][ T6533] ? __alloc_skb+0x276/0x7a0 [ 160.511722][ T6533] ? netlink_sendmsg+0x650/0xb40 [ 160.511748][ T6533] ? skb_put+0x112/0x210 [ 160.511784][ T6533] netlink_sendmsg+0x6c0/0xb40 [ 160.511820][ T6533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.511848][ T6533] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 160.511879][ T6533] ? __kernel_text_address+0xd/0x30 [ 160.511900][ T6533] ? unwind_get_return_address+0x4d/0x90 [ 160.511928][ T6533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.511956][ T6533] sock_sendmsg_nosec+0x13a/0x180 [ 160.511979][ T6533] ____sys_sendmsg+0x565/0x870 [ 160.512006][ T6533] ? __might_fault+0xaf/0x130 [ 160.512037][ T6533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.512073][ T6533] ? import_iovec+0x73/0xa0 [ 160.512102][ T6533] ___sys_sendmsg+0x2a5/0x360 [ 160.512129][ T6533] ? __lock_acquire+0x683/0x2ce0 [ 160.512157][ T6533] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.512221][ T6533] ? __fget_files+0x2a/0x420 [ 160.512243][ T6533] ? __fget_files+0x3a8/0x420 [ 160.512276][ T6533] __x64_sys_sendmsg+0x1b7/0x290 [ 160.512308][ T6533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.512356][ T6533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.512379][ T6533] do_syscall_64+0x174/0x580 [ 160.512407][ T6533] ? trace_irq_disable+0x3b/0x140 [ 160.512429][ T6533] ? clear_bhb_loop+0x40/0x90 [ 160.512456][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.512476][ T6533] RIP: 0033:0x7f7eb639e0d9 [ 160.512498][ T6533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.512515][ T6533] RSP: 002b:00007f7eb45f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.512538][ T6533] RAX: ffffffffffffffda RBX: 00007f7eb6625fa0 RCX: 00007f7eb639e0d9 [ 160.512553][ T6533] RDX: 0000000004000010 RSI: 0000200000000380 RDI: 0000000000000003 [ 160.512567][ T6533] RBP: 00007f7eb45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.512580][ T6533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.512592][ T6533] R13: 00007f7eb6626038 R14: 00007f7eb6625fa0 R15: 00007ffefac4e548 [ 160.512626][ T6533] [ 160.514520][ T6532] FAULT_INJECTION: forcing a failure. [ 160.514520][ T6532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.514551][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz.0.194 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 160.514575][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.514587][ T6532] Call Trace: [ 160.514595][ T6532] [ 160.514603][ T6532] dump_stack_lvl+0xe8/0x150 [ 160.514644][ T6532] should_fail_ex+0x467/0x600 [ 160.514682][ T6532] _copy_to_user+0x31/0xb0 [ 160.514709][ T6532] simple_read_from_buffer+0xe1/0x170 [ 160.514738][ T6532] proc_fail_nth_read+0x1be/0x230 [ 160.514765][ T6532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.514802][ T6532] ? rw_verify_area+0x250/0x4d0 [ 160.514831][ T6532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.514854][ T6532] vfs_read+0x219/0xa90 [ 160.514890][ T6532] ? __pfx_vfs_read+0x10/0x10 [ 160.514919][ T6532] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 160.514947][ T6532] ? lockdep_hardirqs_on+0x7a/0x110 [ 160.514974][ T6532] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 160.515001][ T6532] ? mutex_lock_nested+0x152/0x1d0 [ 160.515022][ T6532] ? fdget_pos+0x252/0x320 [ 160.515055][ T6532] ksys_read+0x156/0x270 [ 160.515085][ T6532] ? __pfx_ksys_read+0x10/0x10 [ 160.515122][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.515146][ T6532] do_syscall_64+0x174/0x580 [ 160.515175][ T6532] ? trace_irq_disable+0x3b/0x140 [ 160.515197][ T6532] ? clear_bhb_loop+0x40/0x90 [ 160.515224][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.515245][ T6532] RIP: 0033:0x7faca9ebe90e [ 160.515264][ T6532] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 160.515280][ T6532] RSP: 002b:00007faca8155fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.515302][ T6532] RAX: ffffffffffffffda RBX: 00007faca81566c0 RCX: 00007faca9ebe90e [ 160.515318][ T6532] RDX: 000000000000000f RSI: 00007faca81560a0 RDI: 0000000000000004 [ 160.515331][ T6532] RBP: 00007faca8156090 R08: 0000000000000000 R09: 0000000000000000 [ 160.515343][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.515355][ T6532] R13: 00007facaa186038 R14: 00007facaa185fa0 R15: 00007fff6b09b6d8 [ 160.515391][ T6532] [ 161.213087][ T6550] FAULT_INJECTION: forcing a failure. [ 161.213087][ T6550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.213123][ T6550] CPU: 1 UID: 0 PID: 6550 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 161.213147][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.213160][ T6550] Call Trace: [ 161.213168][ T6550] [ 161.213177][ T6550] dump_stack_lvl+0xe8/0x150 [ 161.213215][ T6550] should_fail_ex+0x467/0x600 [ 161.213270][ T6550] _copy_from_user+0x2d/0xb0 [ 161.213299][ T6550] map_delete_elem+0x2be/0x680 [ 161.213334][ T6550] __sys_bpf+0x95d/0xd90 [ 161.213365][ T6550] ? __pfx___sys_bpf+0x10/0x10 [ 161.213391][ T6550] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 161.213426][ T6550] ? rt_mutex_slowunlock+0x219/0x460 [ 161.213469][ T6550] ? ksys_write+0x248/0x270 [ 161.213499][ T6550] ? __pfx_ksys_write+0x10/0x10 [ 161.213531][ T6550] __x64_sys_bpf+0xba/0xd0 [ 161.213564][ T6550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.213587][ T6550] do_syscall_64+0x174/0x580 [ 161.213615][ T6550] ? trace_irq_disable+0x3b/0x140 [ 161.213635][ T6550] ? clear_bhb_loop+0x40/0x90 [ 161.213659][ T6550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.213680][ T6550] RIP: 0033:0x7f92f746e0d9 [ 161.213699][ T6550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.213717][ T6550] RSP: 002b:00007f92f56a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.213740][ T6550] RAX: ffffffffffffffda RBX: 00007f92f76f6090 RCX: 00007f92f746e0d9 [ 161.213755][ T6550] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 161.213769][ T6550] RBP: 00007f92f56a5090 R08: 0000000000000000 R09: 0000000000000000 [ 161.213782][ T6550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.213795][ T6550] R13: 00007f92f76f6128 R14: 00007f92f76f6090 R15: 00007ffd5be929a8 [ 161.213829][ T6550] [ 161.315250][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 161.450811][ T6558] tmpfs: Unsupported parameter 'huge' [ 161.972677][ T6579] FAULT_INJECTION: forcing a failure. [ 161.972677][ T6579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.972714][ T6579] CPU: 1 UID: 0 PID: 6579 Comm: syz.3.211 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 161.972739][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.972751][ T6579] Call Trace: [ 161.972759][ T6579] [ 161.972767][ T6579] dump_stack_lvl+0xe8/0x150 [ 161.972805][ T6579] should_fail_ex+0x467/0x600 [ 161.972846][ T6579] _copy_from_user+0x2d/0xb0 [ 161.972872][ T6579] bpf_test_init+0xd8/0x150 [ 161.972905][ T6579] bpf_prog_test_run_skb+0x31e/0x2230 [ 161.972953][ T6579] ? __fget_files+0x3a8/0x420 [ 161.972976][ T6579] ? __fget_files+0x2a/0x420 [ 161.973002][ T6579] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 161.973039][ T6579] bpf_prog_test_run+0x2cb/0x340 [ 161.973069][ T6579] __sys_bpf+0xa22/0xd90 [ 161.973101][ T6579] ? __pfx___sys_bpf+0x10/0x10 [ 161.973127][ T6579] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 161.973162][ T6579] ? rt_mutex_slowunlock+0x219/0x460 [ 161.973205][ T6579] ? ksys_write+0x248/0x270 [ 161.973235][ T6579] ? __pfx_ksys_write+0x10/0x10 [ 161.973276][ T6579] __x64_sys_bpf+0xba/0xd0 [ 161.973309][ T6579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.973338][ T6579] do_syscall_64+0x174/0x580 [ 161.973366][ T6579] ? trace_irq_disable+0x3b/0x140 [ 161.973387][ T6579] ? clear_bhb_loop+0x40/0x90 [ 161.973413][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.973434][ T6579] RIP: 0033:0x7f8cc4a8e0d9 [ 161.973453][ T6579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.973469][ T6579] RSP: 002b:00007f8cc2ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.973492][ T6579] RAX: ffffffffffffffda RBX: 00007f8cc4d15fa0 RCX: 00007f8cc4a8e0d9 [ 161.973508][ T6579] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 161.973521][ T6579] RBP: 00007f8cc2ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.973534][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.973547][ T6579] R13: 00007f8cc4d16038 R14: 00007f8cc4d15fa0 R15: 00007ffd9e009418 [ 161.973580][ T6579] [ 162.012826][ T6578] netlink: 240 bytes leftover after parsing attributes in process `syz.2.212'. [ 162.012847][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 162.147947][ T37] audit: type=1107 audit(1786012810.412:475): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 162.380056][ T6586] FAULT_INJECTION: forcing a failure. [ 162.380056][ T6586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.380093][ T6586] CPU: 0 UID: 0 PID: 6586 Comm: syz.3.214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 162.380118][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.380130][ T6586] Call Trace: [ 162.380138][ T6586] [ 162.380147][ T6586] dump_stack_lvl+0xe8/0x150 [ 162.380187][ T6586] should_fail_ex+0x467/0x600 [ 162.380229][ T6586] _copy_to_user+0x31/0xb0 [ 162.380258][ T6586] sctp_getsockopt_enable_strreset+0x236/0x2e0 [ 162.380286][ T6586] ? __local_bh_enable+0x1e1/0x2f0 [ 162.380316][ T6586] ? __pfx_sctp_getsockopt_enable_strreset+0x10/0x10 [ 162.380345][ T6586] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 162.380373][ T6586] ? lockdep_hardirqs_on+0x7a/0x110 [ 162.380409][ T6586] sctp_getsockopt+0xa4f/0xb90 [ 162.380438][ T6586] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 162.380463][ T6586] do_sock_getsockopt+0x51d/0x7e0 [ 162.380497][ T6586] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 162.380547][ T6586] ? __fget_files+0x3a8/0x420 [ 162.380570][ T6586] ? __fget_files+0x2a/0x420 [ 162.380600][ T6586] __x64_sys_getsockopt+0x1aa/0x250 [ 162.380637][ T6586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.380662][ T6586] do_syscall_64+0x174/0x580 [ 162.380691][ T6586] ? trace_irq_disable+0x3b/0x140 [ 162.380713][ T6586] ? clear_bhb_loop+0x40/0x90 [ 162.380739][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.380769][ T6586] RIP: 0033:0x7f8cc4a8e0d9 [ 162.380790][ T6586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.380808][ T6586] RSP: 002b:00007f8cc2ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 162.380831][ T6586] RAX: ffffffffffffffda RBX: 00007f8cc4d15fa0 RCX: 00007f8cc4a8e0d9 [ 162.380846][ T6586] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000004 [ 162.380859][ T6586] RBP: 00007f8cc2ce6090 R08: 0000200000000080 R09: 0000000000000000 [ 162.380873][ T6586] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.380887][ T6586] R13: 00007f8cc4d16038 R14: 00007f8cc4d15fa0 R15: 00007ffd9e009418 [ 162.380923][ T6586] [ 162.783400][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 162.948716][ T5729] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.069001][ T197] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 163.121610][ T5729] usb 4-1: Using ep0 maxpacket: 16 [ 163.124604][ T5729] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 163.124625][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.126479][ T5729] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 163.126496][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.126507][ T5729] usb 4-1: Product: syz [ 163.126515][ T5729] usb 4-1: Manufacturer: syz [ 163.126523][ T5729] usb 4-1: SerialNumber: syz [ 163.130932][ T5729] usb 4-1: config 0 descriptor?? [ 163.160137][ T5729] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 163.160170][ T5729] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 163.231131][ T197] usb 5-1: Using ep0 maxpacket: 16 [ 163.248845][ T197] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 163.248867][ T197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.275787][ T197] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 163.275818][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.275838][ T197] usb 5-1: Product: syz [ 163.275852][ T197] usb 5-1: Manufacturer: syz [ 163.276089][ T197] usb 5-1: SerialNumber: syz [ 163.411154][ T197] usb 5-1: config 0 descriptor?? [ 163.527552][ T197] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 163.527592][ T197] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 163.762333][ T6620] netlink: 'syz.2.226': attribute type 1 has an invalid length. [ 164.734803][ T6620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.748462][ T5729] em28xx 4-1:0.0: chip ID is em2874 [ 164.921610][ T197] em28xx 5-1:0.0: chip ID is em2828X [ 165.117726][ T6625] bond1: (slave dummy0): making interface the new active one [ 165.120238][ T6625] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 165.145643][ T5885] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 165.194660][ T36] usb 5-1: USB disconnect, device number 3 [ 165.215457][ T36] em28xx 5-1:0.0: Disconnecting em28xx [ 165.285635][ T36] em28xx 5-1:0.0: Freeing device [ 165.320105][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 165.339958][ T5885] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 165.339981][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 165.339996][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.340009][ T5885] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.340035][ T5885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.340048][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.627033][ T6637] FAULT_INJECTION: forcing a failure. [ 165.627033][ T6637] name failslab, interval 1, probability 0, space 0, times 0 [ 165.627079][ T6637] CPU: 1 UID: 0 PID: 6637 Comm: syz.2.231 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.627115][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.627127][ T6637] Call Trace: [ 165.627135][ T6637] [ 165.627143][ T6637] dump_stack_lvl+0xe8/0x150 [ 165.627179][ T6637] should_fail_ex+0x467/0x600 [ 165.627216][ T6637] should_failslab+0xa8/0x100 [ 165.627244][ T6637] kmem_cache_alloc_noprof+0xa4/0x650 [ 165.627265][ T6637] ? alloc_empty_file+0x5b/0x1d0 [ 165.627284][ T6637] ? alloc_empty_file+0x5b/0x1d0 [ 165.627310][ T6637] alloc_empty_file+0x5b/0x1d0 [ 165.627331][ T6637] path_openat+0x8f/0x3850 [ 165.627363][ T6637] ? kasan_save_track+0x3e/0x80 [ 165.627382][ T6637] ? __kasan_slab_alloc+0x6c/0x80 [ 165.627404][ T6637] ? kmem_cache_alloc_noprof+0x355/0x650 [ 165.627423][ T6637] ? do_getname+0x2e/0x250 [ 165.627439][ T6637] ? do_sys_openat2+0xcc/0x200 [ 165.627459][ T6637] ? __x64_sys_openat+0x138/0x170 [ 165.627478][ T6637] ? do_syscall_64+0x174/0x580 [ 165.627503][ T6637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.627542][ T6637] do_file_open+0x23e/0x4a0 [ 165.627567][ T6637] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.627599][ T6637] ? __pfx_do_file_open+0x10/0x10 [ 165.627649][ T6637] ? alloc_fd+0x654/0x6d0 [ 165.627680][ T6637] do_sys_openat2+0x115/0x200 [ 165.627703][ T6637] ? __pfx_do_sys_openat2+0x10/0x10 [ 165.627725][ T6637] ? ksys_write+0x248/0x270 [ 165.627754][ T6637] ? __pfx_ksys_write+0x10/0x10 [ 165.627784][ T6637] __x64_sys_openat+0x138/0x170 [ 165.627808][ T6637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.627829][ T6637] do_syscall_64+0x174/0x580 [ 165.627853][ T6637] ? trace_irq_disable+0x3b/0x140 [ 165.627874][ T6637] ? clear_bhb_loop+0x40/0x90 [ 165.627898][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.627918][ T6637] RIP: 0033:0x7f7eb639e0d9 [ 165.627938][ T6637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.627954][ T6637] RSP: 002b:00007f7eb45d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 165.627977][ T6637] RAX: ffffffffffffffda RBX: 00007f7eb6626090 RCX: 00007f7eb639e0d9 [ 165.627991][ T6637] RDX: 0000000000009842 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 165.628005][ T6637] RBP: 00007f7eb45d5090 R08: 0000000000000000 R09: 0000000000000000 [ 165.628017][ T6637] R10: 0000000000000180 R11: 0000000000000246 R12: 0000000000000001 [ 165.628029][ T6637] R13: 00007f7eb6626128 R14: 00007f7eb6626090 R15: 00007ffefac4e548 [ 165.628059][ T6637] [ 165.678147][ T5885] usb 1-1: GET_CAPABILITIES returned 0 [ 165.678196][ T5885] usbtmc 1-1:16.0: can't read capabilities [ 166.285957][ T36] usb 4-1: USB disconnect, device number 8 [ 166.316532][ T36] em28xx 4-1:0.0: Disconnecting em28xx [ 166.547211][ T821] usb 1-1: USB disconnect, device number 6 [ 166.669199][ T36] em28xx 4-1:0.0: Freeing device [ 166.684790][ T6645] capability: warning: `syz.1.236' uses 32-bit capabilities (legacy support in use) [ 166.689415][ T6645] program syz.1.236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.950136][ T6657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'. [ 167.121223][ T6661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'. [ 167.776523][ T5885] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 167.949725][ T5885] usb 4-1: Invalid ep0 maxpacket: 64 [ 168.116069][ T5885] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 168.132285][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 168.256352][ T36] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.285549][ T5885] usb 4-1: Invalid ep0 maxpacket: 64 [ 168.286147][ T5885] usb usb4-port1: attempt power cycle [ 168.415355][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 168.423849][ T36] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 168.423885][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.463036][ T36] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 168.463058][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.463069][ T36] usb 1-1: Product: syz [ 168.463077][ T36] usb 1-1: Manufacturer: syz [ 168.463085][ T36] usb 1-1: SerialNumber: syz [ 168.466010][ T6695] FAULT_INJECTION: forcing a failure. [ 168.466010][ T6695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.466043][ T6695] CPU: 0 UID: 0 PID: 6695 Comm: syz.4.253 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.466066][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.466077][ T6695] Call Trace: [ 168.466084][ T6695] [ 168.466091][ T6695] dump_stack_lvl+0xe8/0x150 [ 168.466161][ T6695] should_fail_ex+0x467/0x600 [ 168.466198][ T6695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.466220][ T6695] _copy_from_user+0x2d/0xb0 [ 168.466247][ T6695] memdup_user+0x5e/0xd0 [ 168.466277][ T6695] strndup_user+0x68/0xd0 [ 168.466312][ T6695] __se_sys_fsopen+0x3d/0x2c0 [ 168.466343][ T6695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.466366][ T6695] do_syscall_64+0x174/0x580 [ 168.466396][ T6695] ? trace_irq_disable+0x3b/0x140 [ 168.466418][ T6695] ? clear_bhb_loop+0x40/0x90 [ 168.466443][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.466463][ T6695] RIP: 0033:0x7f5bec56e0d9 [ 168.466483][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.466500][ T6695] RSP: 002b:00007f5bea7c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 168.466523][ T6695] RAX: ffffffffffffffda RBX: 00007f5bec7f5fa0 RCX: 00007f5bec56e0d9 [ 168.466538][ T6695] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000080 [ 168.466549][ T6695] RBP: 00007f5bea7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 168.466562][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.466573][ T6695] R13: 00007f5bec7f6038 R14: 00007f5bec7f5fa0 R15: 00007ffe82202cf8 [ 168.466607][ T6695] [ 168.643439][ T36] usb 1-1: config 0 descriptor?? [ 168.671472][ T5885] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 168.690997][ T5885] usb 4-1: Invalid ep0 maxpacket: 64 [ 168.723288][ T36] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 168.723326][ T36] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 168.837940][ T5885] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 168.862274][ T5885] usb 4-1: Invalid ep0 maxpacket: 64 [ 168.865400][ T5885] usb usb4-port1: unable to enumerate USB device [ 170.250110][ T36] em28xx 1-1:0.0: chip ID is em2874 [ 170.881561][ T6721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.908808][ T36] kernel write not supported for file /input/mice (pid: 36 comm: kworker/1:1) [ 171.675944][ T5729] usb 1-1: USB disconnect, device number 7 [ 171.677752][ T5729] em28xx 1-1:0.0: Disconnecting em28xx [ 171.806792][ T6720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.920244][ T5729] em28xx 1-1:0.0: Freeing device [ 172.996488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.709508][ T6776] FAULT_INJECTION: forcing a failure. [ 174.709508][ T6776] name failslab, interval 1, probability 0, space 0, times 0 [ 174.709543][ T6776] CPU: 0 UID: 0 PID: 6776 Comm: syz.1.279 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 174.709568][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.709579][ T6776] Call Trace: [ 174.709587][ T6776] [ 174.709605][ T6776] dump_stack_lvl+0xe8/0x150 [ 174.709643][ T6776] should_fail_ex+0x467/0x600 [ 174.709688][ T6776] should_failslab+0xa8/0x100 [ 174.709716][ T6776] __kmalloc_noprof+0xfe/0x780 [ 174.709741][ T6776] ? tomoyo_encode+0x2ad/0x570 [ 174.709768][ T6776] ? tomoyo_encode+0x2ad/0x570 [ 174.709804][ T6776] tomoyo_encode+0x2ad/0x570 [ 174.709840][ T6776] tomoyo_realpath_from_path+0x5fa/0x640 [ 174.709880][ T6776] ? tomoyo_path_number_perm+0x219/0x5f0 [ 174.709905][ T6776] tomoyo_path_number_perm+0x246/0x5f0 [ 174.709932][ T6776] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 174.709956][ T6776] ? __lock_acquire+0x683/0x2ce0 [ 174.709996][ T6776] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 174.710024][ T6776] ? hook_file_ioctl+0x1f3/0x600 [ 174.710044][ T6776] ? lockdep_hardirqs_on+0x7a/0x110 [ 174.710093][ T6776] ? __fget_files+0x2a/0x420 [ 174.710119][ T6776] ? __fget_files+0x2a/0x420 [ 174.710141][ T6776] ? __fget_files+0x3a8/0x420 [ 174.710163][ T6776] ? __fget_files+0x2a/0x420 [ 174.710190][ T6776] security_file_ioctl+0xc3/0x2a0 [ 174.710218][ T6776] __se_sys_ioctl+0x47/0x170 [ 174.710246][ T6776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.710269][ T6776] do_syscall_64+0x174/0x580 [ 174.710297][ T6776] ? trace_irq_disable+0x3b/0x140 [ 174.710317][ T6776] ? clear_bhb_loop+0x40/0x90 [ 174.710343][ T6776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.710364][ T6776] RIP: 0033:0x7f92f746e0d9 [ 174.710383][ T6776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.710399][ T6776] RSP: 002b:00007f92f56c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.710422][ T6776] RAX: ffffffffffffffda RBX: 00007f92f76f5fa0 RCX: 00007f92f746e0d9 [ 174.710437][ T6776] RDX: 00002000000000c0 RSI: 0000000040bc5311 RDI: 0000000000000003 [ 174.710450][ T6776] RBP: 00007f92f56c6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.710462][ T6776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.710474][ T6776] R13: 00007f92f76f6038 R14: 00007f92f76f5fa0 R15: 00007ffd5be929a8 [ 174.710509][ T6776] [ 174.710695][ T6776] ERROR: Out of memory at tomoyo_realpath_from_path. [ 174.796237][ T5885] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 174.988772][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 174.994733][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 174.994764][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 175.001767][ T5885] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 175.001795][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.001814][ T5885] usb 3-1: Product: syz [ 175.001827][ T5885] usb 3-1: Manufacturer: syz [ 175.001841][ T5885] usb 3-1: SerialNumber: syz [ 175.039578][ T5885] usb 3-1: config 0 descriptor?? [ 175.131044][ T5885] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 175.131082][ T5885] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 175.263867][ T5879] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 176.354213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 176.485048][ T5879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.485103][ T5879] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 176.485127][ T5879] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 176.485149][ T5879] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 176.485171][ T5879] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 176.485194][ T5879] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 176.485216][ T5879] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 176.485238][ T5879] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 176.485259][ T5879] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 176.485281][ T5879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 176.485300][ T5879] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 176.485321][ T5879] usb 2-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 176.539027][ T5879] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 176.539058][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.539077][ T5879] usb 2-1: Product: syz [ 176.539091][ T5879] usb 2-1: Manufacturer: syz [ 176.539105][ T5879] usb 2-1: SerialNumber: syz [ 176.649433][ T6779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 176.649652][ T6779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 176.649835][ T6779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 176.650013][ T6779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 176.650327][ T6779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 176.650537][ T6779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 176.650826][ T6779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 176.651021][ T6779] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 176.658407][ T5885] em28xx 3-1:0.0: chip ID is em2874 [ 176.872177][ T5879] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 176.994116][ T5879] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 177.101203][ T5879] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 5 [ 177.143683][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 177.209320][ T5879] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 177.216612][ T5879] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 177.216714][ T5879] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4 [ 177.216831][ T5879] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 177.219936][ T5879] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 177.531630][ T5879] usb 2-1: USB disconnect, device number 5 [ 177.660583][ T5879] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 177.801100][ T5879] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 177.808945][ T5879] keyspan 2-1:1.0: device disconnected [ 178.165480][ T197] usb 3-1: USB disconnect, device number 10 [ 178.204783][ T197] em28xx 3-1:0.0: Disconnecting em28xx [ 178.418512][ T197] em28xx 3-1:0.0: Freeing device [ 178.851835][ T6848] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 178.983786][ T6852] openvswitch: netlink: Actions may not be safe on all matching packets [ 179.077884][ T6861] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 179.104689][ T6857] FAULT_INJECTION: forcing a failure. [ 179.104689][ T6857] name failslab, interval 1, probability 0, space 0, times 0 [ 179.104724][ T6857] CPU: 0 UID: 0 PID: 6857 Comm: syz.4.298 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.104748][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.104760][ T6857] Call Trace: [ 179.104768][ T6857] [ 179.104778][ T6857] dump_stack_lvl+0xe8/0x150 [ 179.104816][ T6857] should_fail_ex+0x467/0x600 [ 179.104857][ T6857] should_failslab+0xa8/0x100 [ 179.104886][ T6857] kmem_cache_alloc_noprof+0xa4/0x650 [ 179.104908][ T6857] ? dst_alloc+0x105/0x170 [ 179.104936][ T6857] ? dst_alloc+0x105/0x170 [ 179.104969][ T6857] ? __pfx_ip6_dst_gc+0x10/0x10 [ 179.104991][ T6857] dst_alloc+0x105/0x170 [ 179.105019][ T6857] ? __rt6_find_exception_rcu+0x13b/0x4e0 [ 179.105055][ T6857] ip6_rt_cache_alloc+0x3ae/0xa10 [ 179.105086][ T6857] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 179.105107][ T6857] ? fib6_select_path+0x114/0xb50 [ 179.105137][ T6857] ip6_pol_route+0x1237/0x14d0 [ 179.105158][ T6857] ? ip6_pol_route+0x163/0x14d0 [ 179.105185][ T6857] ? __pfx_ip6_pol_route+0x10/0x10 [ 179.105211][ T6857] ? __lock_acquire+0x683/0x2ce0 [ 179.105240][ T6857] ? ip6_addr_string+0x263/0x300 [ 179.105274][ T6857] fib6_rule_lookup+0x222/0x730 [ 179.105299][ T6857] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 179.105321][ T6857] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 179.105344][ T6857] ? ip6_route_output_flags+0x2e/0x5d0 [ 179.105370][ T6857] ? ip6_route_output_flags+0x2e/0x5d0 [ 179.105409][ T6857] ip6_route_output_flags+0x364/0x5d0 [ 179.105443][ T6857] ? ip6_route_output_flags+0x2e/0x5d0 [ 179.105469][ T6857] ip6_dst_lookup_tail+0x1a1/0x1610 [ 179.105500][ T6857] ? txopt_get+0x79/0x3f0 [ 179.105530][ T6857] ? txopt_get+0x79/0x3f0 [ 179.105560][ T6857] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 179.105588][ T6857] ? txopt_get+0x79/0x3f0 [ 179.105615][ T6857] ? txopt_get+0x79/0x3f0 [ 179.105641][ T6857] ? txopt_get+0x79/0x3f0 [ 179.105670][ T6857] ? txopt_get+0x343/0x3f0 [ 179.105703][ T6857] ? __pfx_txopt_get+0x10/0x10 [ 179.105736][ T6857] ip6_dst_lookup_flow+0x89/0x150 [ 179.105768][ T6857] rawv6_sendmsg+0xdd0/0x18c0 [ 179.105806][ T6857] ? smack_ipv6host_label+0x824/0x8e0 [ 179.105840][ T6857] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 179.105875][ T6857] ? smack_socket_sendmsg+0x4b4/0x590 [ 179.105905][ T6857] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 179.105950][ T6857] ? sock_rps_record_flow+0x19/0x350 [ 179.105977][ T6857] ? inet_sendmsg+0x298/0x320 [ 179.106002][ T6857] ? __pfx_inet_sendmsg+0x10/0x10 [ 179.106023][ T6857] sock_sendmsg_nosec+0x10e/0x180 [ 179.106048][ T6857] ____sys_sendmsg+0x565/0x870 [ 179.106087][ T6857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.106126][ T6857] ? import_iovec+0x73/0xa0 [ 179.106156][ T6857] ___sys_sendmsg+0x2a5/0x360 [ 179.106182][ T6857] ? __lock_acquire+0x683/0x2ce0 [ 179.106210][ T6857] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.106274][ T6857] ? __fget_files+0x2a/0x420 [ 179.106296][ T6857] ? __fget_files+0x3a8/0x420 [ 179.106330][ T6857] __x64_sys_sendmsg+0x1b7/0x290 [ 179.106362][ T6857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.106420][ T6857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.106444][ T6857] do_syscall_64+0x174/0x580 [ 179.106473][ T6857] ? trace_irq_disable+0x3b/0x140 [ 179.106496][ T6857] ? clear_bhb_loop+0x40/0x90 [ 179.106522][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.106544][ T6857] RIP: 0033:0x7f5bec56e0d9 [ 179.106565][ T6857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.106584][ T6857] RSP: 002b:00007f5bea7a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.106607][ T6857] RAX: ffffffffffffffda RBX: 00007f5bec7f6090 RCX: 00007f5bec56e0d9 [ 179.106622][ T6857] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 179.106636][ T6857] RBP: 00007f5bea7a5090 R08: 0000000000000000 R09: 0000000000000000 [ 179.106649][ T6857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.106662][ T6857] R13: 00007f5bec7f6128 R14: 00007f5bec7f6090 R15: 00007ffe82202cf8 [ 179.106698][ T6857] [ 179.354712][ T197] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 179.519700][ T197] usb 3-1: Using ep0 maxpacket: 16 [ 179.522184][ T197] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 179.522213][ T197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 179.538462][ T197] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 179.538492][ T197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.538512][ T197] usb 3-1: Product: syz [ 179.538525][ T197] usb 3-1: Manufacturer: syz [ 179.538539][ T197] usb 3-1: SerialNumber: syz [ 179.600000][ T197] usb 3-1: config 0 descriptor?? [ 179.645050][ T197] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 179.645075][ T197] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 180.753074][ T197] em28xx 3-1:0.0: chip ID is em2874 [ 182.355104][ T5879] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 182.466613][ T5699] usb 3-1: USB disconnect, device number 11 [ 182.473508][ T5699] em28xx 3-1:0.0: Disconnecting em28xx [ 182.557442][ T5699] em28xx 3-1:0.0: Freeing device [ 182.582587][ T5879] usb 5-1: device descriptor read/64, error -71 [ 182.842525][ T5879] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 182.983578][ T5879] usb 5-1: device descriptor read/64, error -71 [ 183.108853][ T5879] usb usb5-port1: attempt power cycle [ 184.547784][ T5879] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 184.813475][ T5879] usb 5-1: device descriptor read/8, error -71 [ 185.216790][ T5879] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 185.249555][ T5879] usb 5-1: device descriptor read/8, error -71 [ 185.366665][ T5879] usb usb5-port1: unable to enumerate USB device [ 185.858484][ T6950] netlink: 'syz.0.318': attribute type 13 has an invalid length. [ 185.858563][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 186.478076][ T6950] gretap0: refused to change device tx_queue_len [ 186.478611][ T6950] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 188.253226][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 188.634277][ T6988] FAULT_INJECTION: forcing a failure. [ 188.634277][ T6988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.634325][ T6988] CPU: 0 UID: 0 PID: 6988 Comm: syz.2.330 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 188.634350][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.634362][ T6988] Call Trace: [ 188.634371][ T6988] [ 188.634379][ T6988] dump_stack_lvl+0xe8/0x150 [ 188.634418][ T6988] should_fail_ex+0x467/0x600 [ 188.634457][ T6988] strncpy_from_user+0x36/0x2c0 [ 188.634493][ T6988] do_getname+0x77/0x250 [ 188.634517][ T6988] do_utimes+0x11c/0x2c0 [ 188.634547][ T6988] ? __pfx___seccomp_filter+0x10/0x10 [ 188.634573][ T6988] ? __pfx_do_utimes+0x10/0x10 [ 188.634600][ T6988] ? rt_mutex_slowunlock+0x219/0x460 [ 188.634624][ T6988] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 188.634660][ T6988] __x64_sys_utimes+0x15c/0x250 [ 188.634695][ T6988] ? __pfx___x64_sys_utimes+0x10/0x10 [ 188.634739][ T6988] ? __secure_computing+0xe7/0x2b0 [ 188.634765][ T6988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.634787][ T6988] do_syscall_64+0x174/0x580 [ 188.634813][ T6988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.634833][ T6988] ? clear_bhb_loop+0x40/0x90 [ 188.634859][ T6988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.634880][ T6988] RIP: 0033:0x7f7eb639e0d9 [ 188.634899][ T6988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.634916][ T6988] RSP: 002b:00007f7eb45f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 188.634938][ T6988] RAX: ffffffffffffffda RBX: 00007f7eb6625fa0 RCX: 00007f7eb639e0d9 [ 188.634953][ T6988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.634965][ T6988] RBP: 00007f7eb45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.634978][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.634990][ T6988] R13: 00007f7eb6626038 R14: 00007f7eb6625fa0 R15: 00007ffefac4e548 [ 188.635022][ T6988] [ 188.820751][ T5729] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 188.974289][ T36] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 189.019324][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD is Bulk; changing to Interrupt [ 189.019361][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 8, setting to 0 [ 189.019389][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 189.019417][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 189.025417][ T5729] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 189.025450][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.025471][ T5729] usb 2-1: Product: ꤷ껿㡓갗歂ꋌ收綊⯹儉쒥엏䘿祰芃㢎⁊⧉㳸陠褃굑俗ﻋᙇˁ瀨菗╠㺟ᏺ࢛ꨄ擦ꐶࢀ퍇⁽᫖隈ಖ㗷曒싍뵍鎞愚㨶聧먲慛爛귕㥰펠ꩅሖ柂沥❾ [ 189.025497][ T5729] usb 2-1: Manufacturer: ࠇ [ 189.025511][ T5729] usb 2-1: SerialNumber: ဃ漊듗⋓筒≿㋉㑻ꙉሴ腳鱞授⩠购개ၰ䀵⋞ᶸ䱭陱⑲䭷ꖹ [ 189.137535][ T6981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.140675][ T36] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 189.140702][ T36] usb 5-1: config 179 has no interface number 0 [ 189.140745][ T36] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 189.140771][ T36] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 189.140795][ T36] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 189.140833][ T36] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 189.140860][ T36] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 189.140900][ T36] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 189.140923][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.225369][ T6989] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 189.363520][ T821] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 189.477344][ T36] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 189.539433][ T821] usb 4-1: Using ep0 maxpacket: 32 [ 189.561824][ T5729] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.588002][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 189.598163][ T821] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 189.598192][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.598210][ T821] usb 4-1: Product: syz [ 189.598224][ T821] usb 4-1: Manufacturer: syz [ 189.598237][ T821] usb 4-1: SerialNumber: syz [ 189.636048][ T36] xpad 5-1:179.65: probe with driver xpad failed with error -90 [ 189.671973][ T821] usb 4-1: config 0 descriptor?? [ 189.689890][ T7002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.716512][ T7002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.777282][ T821] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 189.778949][ T821] dvb-usb: bulk message failed: -22 (4/0) [ 189.778970][ T821] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 189.779126][ T821] dvb-usb: bulk message failed: -22 (5/0) [ 189.779143][ T821] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 190.017827][ T5729] usb 2-1: USB disconnect, device number 6 [ 190.217965][ T36] usb 5-1: USB disconnect, device number 8 [ 190.241914][ T821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.247981][ T821] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 190.248082][ T821] usb 4-1: media controller created [ 190.402829][ T7011] FAULT_INJECTION: forcing a failure. [ 190.402829][ T7011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.402853][ T7011] CPU: 1 UID: 0 PID: 7011 Comm: syz.1.336 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 190.402868][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.402875][ T7011] Call Trace: [ 190.402880][ T7011] [ 190.402885][ T7011] dump_stack_lvl+0xe8/0x150 [ 190.402909][ T7011] should_fail_ex+0x467/0x600 [ 190.402932][ T7011] _copy_from_user+0x2d/0xb0 [ 190.402948][ T7011] bpf_test_init+0xd8/0x150 [ 190.402970][ T7011] bpf_prog_test_run_skb+0x31e/0x2230 [ 190.403016][ T7011] ? __fget_files+0x3a8/0x420 [ 190.403038][ T7011] ? __fget_files+0x2a/0x420 [ 190.403065][ T7011] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 190.403094][ T7011] bpf_prog_test_run+0x2cb/0x340 [ 190.403123][ T7011] __sys_bpf+0xa22/0xd90 [ 190.403154][ T7011] ? __pfx___sys_bpf+0x10/0x10 [ 190.403179][ T7011] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 190.403213][ T7011] ? rt_mutex_slowunlock+0x219/0x460 [ 190.403255][ T7011] ? ksys_write+0x248/0x270 [ 190.403286][ T7011] ? __pfx_ksys_write+0x10/0x10 [ 190.403327][ T7011] __x64_sys_bpf+0xba/0xd0 [ 190.403359][ T7011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.403383][ T7011] do_syscall_64+0x174/0x580 [ 190.403412][ T7011] ? trace_irq_disable+0x3b/0x140 [ 190.403431][ T7011] ? clear_bhb_loop+0x40/0x90 [ 190.403457][ T7011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.403478][ T7011] RIP: 0033:0x7f92f746e0d9 [ 190.403498][ T7011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.403516][ T7011] RSP: 002b:00007f92f56c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.403539][ T7011] RAX: ffffffffffffffda RBX: 00007f92f76f5fa0 RCX: 00007f92f746e0d9 [ 190.403555][ T7011] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 190.403569][ T7011] RBP: 00007f92f56c6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.403582][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.403594][ T7011] R13: 00007f92f76f6038 R14: 00007f92f76f5fa0 R15: 00007ffd5be929a8 [ 190.403628][ T7011] [ 190.413030][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.451567][ T821] usb 4-1: selecting invalid altsetting 3 [ 192.451591][ T821] ttusb2: set interface to alts=3 failed [ 192.631310][ T7042] FAULT_INJECTION: forcing a failure. [ 192.631310][ T7042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.631348][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.0.348 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.631372][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.631385][ T7042] Call Trace: [ 192.631393][ T7042] [ 192.631402][ T7042] dump_stack_lvl+0xe8/0x150 [ 192.631440][ T7042] should_fail_ex+0x467/0x600 [ 192.631480][ T7042] _copy_from_user+0x2d/0xb0 [ 192.631509][ T7042] ___sys_recvmsg+0x173/0x5a0 [ 192.631538][ T7042] ? ktime_get_ts64+0xa9/0x410 [ 192.631564][ T7042] ? __pfx____sys_recvmsg+0x10/0x10 [ 192.631600][ T7042] ? __fget_files+0x2a/0x420 [ 192.631641][ T7042] ? __fget_files+0x3a8/0x420 [ 192.631676][ T7042] do_recvmmsg+0x320/0x7f0 [ 192.631715][ T7042] ? __pfx_do_recvmmsg+0x10/0x10 [ 192.631757][ T7042] ? get_timespec64+0x119/0x1b0 [ 192.631783][ T7042] ? __pfx_get_timespec64+0x10/0x10 [ 192.631818][ T7042] __x64_sys_recvmmsg+0x1b7/0x250 [ 192.631851][ T7042] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 192.631899][ T7042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.631923][ T7042] do_syscall_64+0x174/0x580 [ 192.631952][ T7042] ? trace_irq_disable+0x3b/0x140 [ 192.631975][ T7042] ? clear_bhb_loop+0x40/0x90 [ 192.632002][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.632021][ T7042] RIP: 0033:0x7faca9efe0d9 [ 192.632041][ T7042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.632060][ T7042] RSP: 002b:00007faca8135028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 192.632083][ T7042] RAX: ffffffffffffffda RBX: 00007facaa186090 RCX: 00007faca9efe0d9 [ 192.632099][ T7042] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 192.632114][ T7042] RBP: 00007faca8135090 R08: 0000200000003700 R09: 0000000000000000 [ 192.632127][ T7042] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 192.632141][ T7042] R13: 00007facaa186128 R14: 00007facaa186090 R15: 00007fff6b09b6d8 [ 192.632174][ T7042] [ 192.726434][ T821] DVB: Unable to find symbol tda10086_attach() [ 192.726451][ T821] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 192.727423][ T821] dvb-usb: bulk message failed: -22 (4/0) [ 192.727442][ T821] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 192.727589][ T821] dvb-usb: bulk message failed: -22 (5/0) [ 192.727604][ T821] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 192.727677][ T821] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 192.823959][ T7045] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 192.915315][ T6834] udevd[6834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.946796][ T821] usb 4-1: USB disconnect, device number 13 [ 193.041697][ T821] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 193.313204][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 193.561348][ T7064] gfs2: not a GFS2 filesystem [ 193.668122][ T197] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 194.130446][ T7061] syz.0.351 (7061) used greatest stack depth: 18528 bytes left [ 194.141103][ T197] usb 5-1: device descriptor read/64, error -71 [ 195.134722][ T197] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 195.288502][ T197] usb 5-1: device descriptor read/64, error -71 [ 195.381850][ T36] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 195.413502][ T197] usb usb5-port1: attempt power cycle [ 195.563385][ T36] usb 4-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 195.563417][ T36] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 195.563439][ T36] usb 4-1: config 0 has no interface number 0 [ 195.579231][ T36] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 195.579264][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.579283][ T36] usb 4-1: Product: syz [ 195.579297][ T36] usb 4-1: Manufacturer: syz [ 195.579312][ T36] usb 4-1: SerialNumber: syz [ 195.598993][ T36] usb 4-1: config 0 descriptor?? [ 195.775875][ T197] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 195.798183][ T197] usb 5-1: device descriptor read/8, error -71 [ 195.916062][ T36] usb-storage 4-1:0.1: USB Mass Storage device detected [ 195.988125][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 196.057707][ T197] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 196.084420][ T197] usb 5-1: device descriptor read/8, error -71 [ 196.097377][ T36] usb-storage 4-1:0.1: Quirks match for vid 1908 pid 1315: 20000 [ 196.200705][ T197] usb usb5-port1: unable to enumerate USB device [ 196.291457][ T36] usb 4-1: USB disconnect, device number 14 [ 196.616842][ T37] audit: type=1800 audit(1786012842.366:476): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.366" name="bus" dev="tmpfs" ino=414 res=0 errno=0 [ 197.332380][ T5879] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 197.484284][ T5879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD is Bulk; changing to Interrupt [ 197.484319][ T5879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 8, setting to 0 [ 197.484345][ T5879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 197.484371][ T5879] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 197.544869][ T5879] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 197.544902][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.544924][ T5879] usb 4-1: Product: ꤷ껿㡓갗歂ꋌ收綊⯹儉쒥엏䘿祰芃㢎⁊⧉㳸陠褃굑俗ﻋᙇˁ瀨菗╠㺟ᏺ࢛ꨄ擦ꐶࢀ퍇⁽᫖隈ಖ㗷曒싍뵍鎞愚㨶聧먲慛爛귕㥰펠ꩅሖ柂沥❾ [ 197.544949][ T5879] usb 4-1: Manufacturer: ࠇ [ 197.544964][ T5879] usb 4-1: SerialNumber: ဃ漊듗⋓筒≿㋉㑻ꙉሴ腳鱞授⩠购개ၰ䀵⋞ᶸ䱭陱⑲䭷ꖹ [ 197.622259][ T7121] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 197.762418][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.768296][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.779391][ T7127] .@: renamed from bridge_slave_1 (while UP) [ 197.897811][ T5879] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.386099][ T5879] usb 4-1: USB disconnect, device number 15 [ 198.934207][ T7055] udevd[7055]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.290873][ T5879] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 199.319570][ T5583] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 199.465974][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.466034][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 199.466064][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 199.466093][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 2176, setting to 64 [ 199.466121][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 199.531918][ T5879] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 199.531953][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 199.531975][ T5879] usb 4-1: Product: syz [ 199.531990][ T5879] usb 4-1: Manufacturer: syz [ 199.532005][ T5879] usb 4-1: SerialNumber: syz [ 199.567203][ T5583] usb 5-1: unable to get BOS descriptor or descriptor too short [ 199.569315][ T5583] usb 5-1: not running at top speed; connect to a high speed hub [ 199.587575][ T5583] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 199.587605][ T5583] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 199.587627][ T5583] usb 5-1: config 14 has no interface number 0 [ 199.587645][ T5583] usb 5-1: config 14 has no interface number 1 [ 199.587736][ T5583] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 199.587761][ T5583] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 199.587788][ T5583] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 199.588383][ T5583] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 199.588415][ T5583] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 199.588443][ T5583] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 199.588467][ T5583] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.588495][ T5583] usb 5-1: config 14 interface 57 has no altsetting 0 [ 199.588515][ T5583] usb 5-1: config 14 interface 228 has no altsetting 0 [ 199.724161][ T5583] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 199.724193][ T5583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.724216][ T5583] usb 5-1: Product: syz [ 199.724231][ T5583] usb 5-1: Manufacturer: syz [ 199.724246][ T5583] usb 5-1: SerialNumber: syz [ 199.892541][ T5879] usb 4-1: config 0 descriptor?? [ 199.966206][ T7152] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 200.204981][ T5879] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 200.205067][ T5879] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 201.095617][ T5583] legousbtower 5-1:14.57: interrupt endpoints not found [ 201.105313][ T5879] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 201.105341][ T5879] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 201.105718][ T5879] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 201.235157][ T5583] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 201.768679][ T7185] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 202.329044][ T5583] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 202.836746][ T5879] usb 4-1: USB disconnect, device number 16 [ 202.983914][ T7194] FAULT_INJECTION: forcing a failure. [ 202.983914][ T7194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.983951][ T7194] CPU: 0 UID: 0 PID: 7194 Comm: syz.0.391 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 202.983976][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.983989][ T7194] Call Trace: [ 202.983997][ T7194] [ 202.984007][ T7194] dump_stack_lvl+0xe8/0x150 [ 202.984046][ T7194] should_fail_ex+0x467/0x600 [ 202.984087][ T7194] _copy_to_user+0x31/0xb0 [ 202.984115][ T7194] simple_read_from_buffer+0xe1/0x170 [ 202.984144][ T7194] proc_fail_nth_read+0x1be/0x230 [ 202.984166][ T7194] ? __local_bh_enable+0x1e1/0x2f0 [ 202.984195][ T7194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.984221][ T7194] ? rw_verify_area+0x250/0x4d0 [ 202.984249][ T7194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.984272][ T7194] vfs_read+0x219/0xa90 [ 202.984310][ T7194] ? __pfx_vfs_read+0x10/0x10 [ 202.984341][ T7194] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 202.984372][ T7194] ? lockdep_hardirqs_on+0x7a/0x110 [ 202.984402][ T7194] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 202.984431][ T7194] ? mutex_lock_nested+0x152/0x1d0 [ 202.984453][ T7194] ? fdget_pos+0x252/0x320 [ 202.984487][ T7194] ksys_read+0x156/0x270 [ 202.984518][ T7194] ? __pfx_ksys_read+0x10/0x10 [ 202.984543][ T7194] ? fput+0xa0/0xd0 [ 202.984574][ T7194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.984598][ T7194] do_syscall_64+0x174/0x580 [ 202.984629][ T7194] ? clear_bhb_loop+0x40/0x90 [ 202.984658][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.984680][ T7194] RIP: 0033:0x7faca9ebe90e [ 202.984701][ T7194] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 202.984721][ T7194] RSP: 002b:00007faca8155fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.984754][ T7194] RAX: ffffffffffffffda RBX: 00007faca81566c0 RCX: 00007faca9ebe90e [ 202.984770][ T7194] RDX: 000000000000000f RSI: 00007faca81560a0 RDI: 0000000000000005 [ 202.984784][ T7194] RBP: 00007faca8156090 R08: 0000000000000000 R09: 0000000000000000 [ 202.984798][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.984810][ T7194] R13: 00007facaa186038 R14: 00007facaa185fa0 R15: 00007fff6b09b6d8 [ 202.984847][ T7194] [ 203.309596][ T821] usb 5-1: USB disconnect, device number 13 [ 203.419514][ T5722] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 203.428019][ T821] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 203.583593][ T5722] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD is Bulk; changing to Interrupt [ 203.583646][ T5722] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 8, setting to 0 [ 203.583674][ T5722] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 203.583694][ T5722] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 203.587748][ T5722] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 203.587780][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.587802][ T5722] usb 3-1: Product: ꤷ껿㡓갗歂ꋌ收綊⯹儉쒥엏䘿祰芃㢎⁊⧉㳸陠褃굑俗ﻋᙇˁ瀨菗╠㺟ᏺ࢛ꨄ擦ꐶࢀ퍇⁽᫖隈ಖ㗷曒싍뵍鎞愚㨶聧먲慛爛귕㥰펠ꩅሖ柂沥❾ [ 203.587830][ T5722] usb 3-1: Manufacturer: ࠇ [ 203.587845][ T5722] usb 3-1: SerialNumber: ဃ漊듗⋓筒≿㋉㑻ꙉሴ腳鱞授⩠购개ၰ䀵⋞ᶸ䱭陱⑲䭷ꖹ [ 203.705923][ T7199] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 204.001864][ T5722] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.054083][ T821] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 204.235713][ T821] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 204.235755][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.235768][ T821] usb 5-1: Product: syz [ 204.235777][ T821] usb 5-1: Manufacturer: syz [ 204.235785][ T821] usb 5-1: SerialNumber: syz [ 204.259785][ T821] usb 5-1: config 0 descriptor?? [ 204.390466][ T5722] usb 3-1: USB disconnect, device number 12 [ 204.754444][ T7207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.837211][ T7207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.842168][ T821] usb 5-1: Firmware version (0.0) predates our first public release. [ 204.842197][ T821] usb 5-1: Please update to version 0.2 or newer [ 205.380862][ T821] usb 5-1: Firmware: build [ 205.735308][ T5729] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 205.771062][ T7057] udevd[7057]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.898955][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.899012][ T5729] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 205.899037][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.018536][ T5729] usb 1-1: config 0 descriptor?? [ 206.411022][ T5729] usbhid 1-1:0.0: can't add hid device: -71 [ 206.411163][ T5729] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 206.456591][ T5729] usb 1-1: USB disconnect, device number 8 [ 207.178230][ T5729] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 207.337329][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.337383][ T5729] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 207.337410][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.418977][ T5729] usb 1-1: config 0 descriptor?? [ 207.930308][ T821] usb 5-1: USB disconnect, device number 14 [ 208.230367][ T36] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 208.401906][ T5729] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 208.427096][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 208.428275][ T5729] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 208.431855][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.431888][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.431904][ T36] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.431930][ T36] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 208.431954][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.685433][ T36] usb 2-1: config 0 descriptor?? [ 209.335595][ T36] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 209.335643][ T36] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 209.335669][ T36] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 209.982743][ T36] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 209.982769][ T36] microsoft 0003:045E:07DA.0002: no inputs found [ 209.982783][ T36] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 210.186967][ T36] usb 2-1: USB disconnect, device number 7 [ 210.734074][ T7263] fido_id[7263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 210.789858][ T5699] usb 1-1: USB disconnect, device number 9 [ 210.790002][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 210.819283][ T5599] Bluetooth: hci4: command 0x0406 tx timeout [ 210.825849][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 210.826623][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 210.903537][ T7267] Bluetooth: hci2: command 0x0406 tx timeout [ 210.903801][ T7267] Bluetooth: hci3: command 0x0406 tx timeout [ 212.634805][ T821] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 214.052076][ T7290] FAULT_INJECTION: forcing a failure. [ 214.052076][ T7290] name failslab, interval 1, probability 0, space 0, times 0 [ 214.052112][ T7290] CPU: 1 UID: 0 PID: 7290 Comm: syz.4.423 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 214.052137][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.052150][ T7290] Call Trace: [ 214.052159][ T7290] [ 214.052168][ T7290] dump_stack_lvl+0xe8/0x150 [ 214.052208][ T7290] should_fail_ex+0x467/0x600 [ 214.052250][ T7290] should_failslab+0xa8/0x100 [ 214.052279][ T7290] __kmalloc_cache_noprof+0xa0/0x6b0 [ 214.052305][ T7290] ? vhost_task_create+0x123/0x380 [ 214.052338][ T7290] ? vhost_task_create+0x123/0x380 [ 214.052380][ T7290] vhost_task_create+0x123/0x380 [ 214.052414][ T7290] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 214.052440][ T7290] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 214.052467][ T7290] ? __pfx_vhost_task_create+0x10/0x10 [ 214.052511][ T7290] ? __pfx_vhost_task_fn+0x10/0x10 [ 214.052549][ T7290] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 214.052580][ T7290] ? lockdep_hardirqs_on+0x7a/0x110 [ 214.052611][ T7290] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 214.052641][ T7290] ? mutex_lock_nested+0x152/0x1d0 [ 214.052663][ T7290] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 214.052695][ T7290] kvm_mmu_post_init_vm+0x147/0x2b0 [ 214.052727][ T7290] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 214.052776][ T7290] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 214.052803][ T7290] ? do_raw_spin_lock+0x12b/0x2f0 [ 214.052851][ T7290] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 214.052881][ T7290] ? lockdep_hardirqs_on+0x7a/0x110 [ 214.052910][ T7290] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 214.052941][ T7290] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 214.052966][ T7290] ? do_raw_spin_lock+0x12b/0x2f0 [ 214.052996][ T7290] ? lock_acquire+0x106/0x350 [ 214.053028][ T7290] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 214.053061][ T7290] ? rt_write_unlock+0x19c/0x360 [ 214.053091][ T7290] ? rt_write_unlock+0x1a8/0x360 [ 214.053124][ T7290] kvm_vcpu_ioctl+0xa64/0xfe0 [ 214.053155][ T7290] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 214.053179][ T7290] ? hook_file_ioctl+0x1f3/0x600 [ 214.053205][ T7290] ? __asan_memset+0x22/0x50 [ 214.053237][ T7290] ? smack_file_ioctl+0x331/0x360 [ 214.053262][ T7290] ? __pfx_smack_file_ioctl+0x10/0x10 [ 214.053295][ T7290] ? __fget_files+0x2a/0x420 [ 214.053317][ T7290] ? __fget_files+0x3a8/0x420 [ 214.053337][ T7290] ? __fget_files+0x2a/0x420 [ 214.053364][ T7290] ? bpf_lsm_file_ioctl+0x9/0x20 [ 214.053385][ T7290] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 214.053411][ T7290] __se_sys_ioctl+0xff/0x170 [ 214.053441][ T7290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.053465][ T7290] do_syscall_64+0x174/0x580 [ 214.053494][ T7290] ? trace_irq_disable+0x3b/0x140 [ 214.053517][ T7290] ? clear_bhb_loop+0x40/0x90 [ 214.053544][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.053565][ T7290] RIP: 0033:0x7f5bec56e0d9 [ 214.053586][ T7290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.053605][ T7290] RSP: 002b:00007f5bea7a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.053628][ T7290] RAX: ffffffffffffffda RBX: 00007f5bec7f6090 RCX: 00007f5bec56e0d9 [ 214.053644][ T7290] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 214.053657][ T7290] RBP: 00007f5bea7a5090 R08: 0000000000000000 R09: 0000000000000000 [ 214.053670][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.053682][ T7290] R13: 00007f5bec7f6128 R14: 00007f5bec7f6090 R15: 00007ffe82202cf8 [ 214.053716][ T7290] [ 215.419423][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.429'. [ 215.454578][ T5881] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 215.454678][ T5881] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 215.473389][ T7310] tmpfs: Bad value for 'mpol' [ 216.270963][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.529458][ T5890] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.539830][ T5890] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.668952][ T5979] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 216.820605][ T5979] usb 5-1: device descriptor read/64, error -71 [ 216.826889][ T7338] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 216.826927][ T7338] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 216.826941][ T7338] overlayfs: missing 'lowerdir' [ 217.074791][ T7345] netlink: 5428 bytes leftover after parsing attributes in process `syz.0.440'. [ 217.105053][ T5979] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 217.242615][ T5979] usb 5-1: device descriptor read/64, error -71 [ 217.362073][ T5979] usb usb5-port1: attempt power cycle [ 217.480859][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 217.785003][ T5979] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 217.809627][ T5979] usb 5-1: device descriptor read/8, error -71 [ 217.847297][ T37] audit: type=1326 audit(1786012862.452:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz.3.446" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cc4a8e0d9 code=0x0 [ 218.043801][ T5699] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 218.065469][ T5979] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 218.091517][ T5979] usb 5-1: device descriptor read/8, error -71 [ 218.181503][ T7366] FAULT_INJECTION: forcing a failure. [ 218.181503][ T7366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.181527][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.0.449 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.181543][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.181550][ T7366] Call Trace: [ 218.181554][ T7366] [ 218.181568][ T7366] dump_stack_lvl+0xe8/0x150 [ 218.181592][ T7366] should_fail_ex+0x467/0x600 [ 218.181614][ T7366] _copy_from_user+0x2d/0xb0 [ 218.181630][ T7366] bpf_test_init+0xd8/0x150 [ 218.181649][ T7366] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 218.181674][ T7366] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 218.181694][ T7366] ? __fget_files+0x2a/0x420 [ 218.181710][ T7366] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 218.181731][ T7366] bpf_prog_test_run+0x2cb/0x340 [ 218.181748][ T7366] __sys_bpf+0xa22/0xd90 [ 218.181765][ T7366] ? __pfx___sys_bpf+0x10/0x10 [ 218.181780][ T7366] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 218.181800][ T7366] ? rt_mutex_slowunlock+0x219/0x460 [ 218.181824][ T7366] ? ksys_write+0x248/0x270 [ 218.181841][ T7366] ? __pfx_ksys_write+0x10/0x10 [ 218.181860][ T7366] __x64_sys_bpf+0xba/0xd0 [ 218.181879][ T7366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.181892][ T7366] do_syscall_64+0x174/0x580 [ 218.181909][ T7366] ? trace_irq_disable+0x3b/0x140 [ 218.181921][ T7366] ? clear_bhb_loop+0x40/0x90 [ 218.181936][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.181948][ T7366] RIP: 0033:0x7faca9efe0d9 [ 218.181960][ T7366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.181971][ T7366] RSP: 002b:00007faca8156028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.181985][ T7366] RAX: ffffffffffffffda RBX: 00007facaa185fa0 RCX: 00007faca9efe0d9 [ 218.181994][ T7366] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 218.182002][ T7366] RBP: 00007faca8156090 R08: 0000000000000000 R09: 0000000000000000 [ 218.182009][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.182017][ T7366] R13: 00007facaa186038 R14: 00007facaa185fa0 R15: 00007fff6b09b6d8 [ 218.182035][ T7366] [ 218.208971][ T5979] usb usb5-port1: unable to enumerate USB device [ 218.210771][ T5699] usb 3-1: Using ep0 maxpacket: 8 [ 218.225724][ T5699] usb 3-1: config 7 has an invalid interface number: 39 but max is 0 [ 218.225749][ T5699] usb 3-1: config 7 has no interface number 0 [ 218.225780][ T5699] usb 3-1: config 7 interface 39 has no altsetting 0 [ 218.263874][ T5699] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=c7.71 [ 218.263904][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.264019][ T5699] usb 3-1: Product: syz [ 218.264034][ T5699] usb 3-1: Manufacturer: syz [ 218.264048][ T5699] usb 3-1: SerialNumber: syz [ 218.617260][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.628854][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.853457][ T7373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.884986][ T7373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.190138][ T5699] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 219.193248][ T5699] gspca_vc032x: reg_w err -71 [ 219.193264][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193274][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193283][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193291][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193300][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193308][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193316][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193324][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193332][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193341][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193348][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193357][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193365][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193373][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193381][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193390][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193398][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193406][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193414][ T5699] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.193422][ T5699] gspca_vc032x: Unknown sensor... [ 219.193510][ T5699] vc032x 3-1:7.39: probe with driver vc032x failed with error -22 [ 219.206949][ T5699] usb 3-1: USB disconnect, device number 13 [ 219.542745][ T7382] netlink: 160 bytes leftover after parsing attributes in process `syz.0.453'. [ 219.657523][ T7387] FAULT_INJECTION: forcing a failure. [ 219.657523][ T7387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.657549][ T7387] CPU: 1 UID: 0 PID: 7387 Comm: syz.0.454 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 219.657564][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.657572][ T7387] Call Trace: [ 219.657577][ T7387] [ 219.657582][ T7387] dump_stack_lvl+0xe8/0x150 [ 219.657606][ T7387] should_fail_ex+0x467/0x600 [ 219.657629][ T7387] _copy_from_user+0x2d/0xb0 [ 219.657645][ T7387] ___sys_sendmsg+0x1c6/0x360 [ 219.657661][ T7387] ? __lock_acquire+0x683/0x2ce0 [ 219.657677][ T7387] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.657712][ T7387] ? __fget_files+0x2a/0x420 [ 219.657725][ T7387] ? __fget_files+0x3a8/0x420 [ 219.657744][ T7387] __x64_sys_sendmsg+0x1b7/0x290 [ 219.657762][ T7387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.657788][ T7387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.657801][ T7387] do_syscall_64+0x174/0x580 [ 219.657817][ T7387] ? trace_irq_disable+0x3b/0x140 [ 219.657830][ T7387] ? clear_bhb_loop+0x40/0x90 [ 219.657845][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.657857][ T7387] RIP: 0033:0x7faca9efe0d9 [ 219.657869][ T7387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.657880][ T7387] RSP: 002b:00007faca8156028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.657894][ T7387] RAX: ffffffffffffffda RBX: 00007facaa185fa0 RCX: 00007faca9efe0d9 [ 219.657903][ T7387] RDX: 0000000004000004 RSI: 00002000000005c0 RDI: 0000000000000003 [ 219.657911][ T7387] RBP: 00007faca8156090 R08: 0000000000000000 R09: 0000000000000000 [ 219.657918][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.657925][ T7387] R13: 00007facaa186038 R14: 00007facaa185fa0 R15: 00007fff6b09b6d8 [ 219.657944][ T7387] [ 220.382721][ T821] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 220.564370][ T821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xD is Bulk; changing to Interrupt [ 220.564404][ T821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 8, setting to 0 [ 220.564434][ T821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 8 [ 220.564463][ T821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 220.574411][ T821] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 220.574442][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.574462][ T821] usb 1-1: Product: ꤷ껿㡓갗歂ꋌ收綊⯹儉쒥엏䘿祰芃㢎⁊⧉㳸陠褃굑俗ﻋᙇˁ瀨菗╠㺟ᏺ࢛ꨄ擦ꐶࢀ퍇⁽᫖隈ಖ㗷曒싍뵍鎞愚㨶聧먲慛爛귕㥰펠ꩅሖ柂沥❾ [ 220.574485][ T821] usb 1-1: Manufacturer: ࠇ [ 220.574498][ T821] usb 1-1: SerialNumber: ဃ漊듗⋓筒≿㋉㑻ꙉሴ腳鱞授⩠购개ၰ䀵⋞ᶸ䱭陱⑲䭷ꖹ [ 220.599606][ T7393] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 220.856727][ T821] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.948197][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.445179][ T821] usb 1-1: USB disconnect, device number 10 [ 221.772324][ T7422] FAULT_INJECTION: forcing a failure. [ 221.772324][ T7422] name failslab, interval 1, probability 0, space 0, times 0 [ 221.772360][ T7422] CPU: 1 UID: 0 PID: 7422 Comm: syz.0.466 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.772385][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.772398][ T7422] Call Trace: [ 221.772406][ T7422] [ 221.772415][ T7422] dump_stack_lvl+0xe8/0x150 [ 221.772463][ T7422] should_fail_ex+0x467/0x600 [ 221.772504][ T7422] should_failslab+0xa8/0x100 [ 221.772531][ T7422] __kmalloc_cache_noprof+0xa0/0x6b0 [ 221.772560][ T7422] ? vhost_task_create+0x123/0x380 [ 221.772590][ T7422] ? vhost_task_create+0x123/0x380 [ 221.772629][ T7422] vhost_task_create+0x123/0x380 [ 221.772659][ T7422] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 221.772683][ T7422] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 221.772708][ T7422] ? __pfx_vhost_task_create+0x10/0x10 [ 221.772750][ T7422] ? __pfx_vhost_task_fn+0x10/0x10 [ 221.772786][ T7422] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 221.772815][ T7422] ? lockdep_hardirqs_on+0x7a/0x110 [ 221.772844][ T7422] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 221.772873][ T7422] ? mutex_lock_nested+0x152/0x1d0 [ 221.772893][ T7422] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 221.772924][ T7422] kvm_mmu_post_init_vm+0x147/0x2b0 [ 221.772954][ T7422] kvm_arch_vcpu_ioctl_run+0x103/0x2010 [ 221.773000][ T7422] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 221.773025][ T7422] ? do_raw_spin_lock+0x12b/0x2f0 [ 221.773075][ T7422] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 221.773103][ T7422] ? lockdep_hardirqs_on+0x7a/0x110 [ 221.773129][ T7422] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 221.773156][ T7422] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 221.773179][ T7422] ? do_raw_spin_lock+0x12b/0x2f0 [ 221.773207][ T7422] ? lock_acquire+0x106/0x350 [ 221.773229][ T7422] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 221.773255][ T7422] ? rt_write_unlock+0x19c/0x360 [ 221.773278][ T7422] ? rt_write_unlock+0x1a8/0x360 [ 221.773299][ T7422] kvm_vcpu_ioctl+0xa64/0xfe0 [ 221.773325][ T7422] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 221.773343][ T7422] ? hook_file_ioctl+0x1f3/0x600 [ 221.773363][ T7422] ? __asan_memset+0x22/0x50 [ 221.773389][ T7422] ? smack_file_ioctl+0x331/0x360 [ 221.773409][ T7422] ? __pfx_smack_file_ioctl+0x10/0x10 [ 221.773437][ T7422] ? __fget_files+0x2a/0x420 [ 221.773464][ T7422] ? __fget_files+0x3a8/0x420 [ 221.773481][ T7422] ? __fget_files+0x2a/0x420 [ 221.773504][ T7422] ? bpf_lsm_file_ioctl+0x9/0x20 [ 221.773520][ T7422] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 221.773541][ T7422] __se_sys_ioctl+0xff/0x170 [ 221.773566][ T7422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.773585][ T7422] do_syscall_64+0x174/0x580 [ 221.773609][ T7422] ? trace_irq_disable+0x3b/0x140 [ 221.773629][ T7422] ? clear_bhb_loop+0x40/0x90 [ 221.773652][ T7422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.773670][ T7422] RIP: 0033:0x7faca9efe0d9 [ 221.773690][ T7422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.773706][ T7422] RSP: 002b:00007faca8135028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.773724][ T7422] RAX: ffffffffffffffda RBX: 00007facaa186090 RCX: 00007faca9efe0d9 [ 221.773737][ T7422] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 221.773747][ T7422] RBP: 00007faca8135090 R08: 0000000000000000 R09: 0000000000000000 [ 221.773758][ T7422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.773768][ T7422] R13: 00007facaa186128 R14: 00007facaa186090 R15: 00007fff6b09b6d8 [ 221.773797][ T7422] [ 222.051942][ T7057] udevd[7057]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.310471][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 222.407076][ T7430] mmap: syz.2.469 (7430) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 222.472990][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 222.475788][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 222.475816][ T9] usb 2-1: config 0 has no interface number 0 [ 222.475881][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 222.478355][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 222.478386][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.478407][ T9] usb 2-1: Product: syz [ 222.478419][ T9] usb 2-1: Manufacturer: syz [ 222.478428][ T9] usb 2-1: SerialNumber: syz [ 222.552773][ T9] usb 2-1: config 0 descriptor?? [ 222.555077][ T7419] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 222.722057][ T5729] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 222.884599][ T5729] usb 5-1: Using ep0 maxpacket: 16 [ 222.892309][ T5729] usb 5-1: unable to get BOS descriptor or descriptor too short [ 222.935264][ T5729] usb 5-1: config 1 has an invalid interface number: 139 but max is 0 [ 222.935295][ T5729] usb 5-1: config 1 has no interface number 0 [ 222.935406][ T5729] usb 5-1: config 1 interface 139 has no altsetting 0 [ 222.973498][ T5729] usb 5-1: New USB device found, idVendor=054c, idProduct=0066, bcdDevice=d6.e5 [ 222.973533][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.973616][ T5729] usb 5-1: Product: syz [ 222.973632][ T5729] usb 5-1: Manufacturer: syz [ 222.973648][ T5729] usb 5-1: SerialNumber: syz [ 223.153045][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 223.317690][ T7432] openvswitch: netlink: Actions may not be safe on all matching packets [ 223.320025][ T7432] 9p: Bad value for 'rfdno' [ 223.948038][ T5729] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 223.948194][ T5729] visor 5-1:1.139: Handspring Visor / Palm OS converter detected [ 224.042338][ T5729] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 224.090116][ T9] asix 2-1:0.188: probe with driver asix failed with error -71 [ 224.095296][ T5729] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 224.149581][ T5729] usb 5-1: USB disconnect, device number 20 [ 224.150687][ T9] usb 2-1: USB disconnect, device number 8 [ 224.210775][ T5729] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 224.231765][ T5729] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 224.233289][ T5729] visor 5-1:1.139: device disconnected [ 226.074854][ T7464] FAULT_INJECTION: forcing a failure. [ 226.074854][ T7464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.074892][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.4.482 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 226.074922][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.074935][ T7464] Call Trace: [ 226.074943][ T7464] [ 226.074952][ T7464] dump_stack_lvl+0xe8/0x150 [ 226.074991][ T7464] should_fail_ex+0x467/0x600 [ 226.075031][ T7464] _copy_to_user+0x31/0xb0 [ 226.075060][ T7464] simple_read_from_buffer+0xe1/0x170 [ 226.075090][ T7464] proc_fail_nth_read+0x1be/0x230 [ 226.075116][ T7464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.075143][ T7464] ? rw_verify_area+0x250/0x4d0 [ 226.075168][ T7464] ? splice_file_to_pipe+0x549/0x6c0 [ 226.075194][ T7464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.075216][ T7464] vfs_read+0x219/0xa90 [ 226.075249][ T7464] ? __pfx_vfs_read+0x10/0x10 [ 226.075277][ T7464] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 226.075306][ T7464] ? lockdep_hardirqs_on+0x7a/0x110 [ 226.075336][ T7464] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 226.075364][ T7464] ? mutex_lock_nested+0x152/0x1d0 [ 226.075385][ T7464] ? fdget_pos+0x252/0x320 [ 226.075429][ T7464] ksys_read+0x156/0x270 [ 226.075455][ T7464] ? __pfx_ksys_read+0x10/0x10 [ 226.075484][ T7464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.075502][ T7464] do_syscall_64+0x174/0x580 [ 226.075524][ T7464] ? trace_irq_disable+0x3b/0x140 [ 226.075541][ T7464] ? clear_bhb_loop+0x40/0x90 [ 226.075561][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.075577][ T7464] RIP: 0033:0x7f5bec52e90e [ 226.075594][ T7464] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 226.075608][ T7464] RSP: 002b:00007f5bea7c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.075627][ T7464] RAX: ffffffffffffffda RBX: 00007f5bea7c66c0 RCX: 00007f5bec52e90e [ 226.075640][ T7464] RDX: 000000000000000f RSI: 00007f5bea7c60a0 RDI: 0000000000000007 [ 226.075650][ T7464] RBP: 00007f5bea7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 226.075660][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.075670][ T7464] R13: 00007f5bec7f6038 R14: 00007f5bec7f5fa0 R15: 00007ffe82202cf8 [ 226.075697][ T7464] [ 226.976371][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 227.234884][ T7484] syz_tun: entered allmulticast mode [ 227.275453][ T7484] netlink: 'syz.1.489': attribute type 39 has an invalid length. [ 227.416996][ T5729] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 227.469678][ T7484] syz_tun (unregistering): left allmulticast mode [ 227.574225][ T5583] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 227.583454][ T5729] usb 3-1: not running at top speed; connect to a high speed hub [ 227.589190][ T5729] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 227.589245][ T5729] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 227.589270][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.685221][ T5729] gspca_main: spca501-2.14.0 probing 0000:0000 [ 227.823479][ T5583] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 227.823575][ T5583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.823598][ T5583] usb 5-1: Product: syz [ 227.823613][ T5583] usb 5-1: Manufacturer: syz [ 227.823628][ T5583] usb 5-1: SerialNumber: syz [ 227.901109][ T5583] usb 5-1: config 0 descriptor?? [ 227.962144][ T5583] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 021 [ 228.128249][ T5729] gspca_spca501: reg write: error -71 [ 228.128341][ T5729] spca501 3-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 228.128510][ T5729] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 228.206534][ T5729] uvcvideo 3-1:1.0: Found UVC 1.00 device (0000:0000) [ 228.238022][ T5729] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 228.238976][ T5729] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 228.239402][ T5729] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 228.310592][ T5729] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 228.378845][ T5729] usb 3-1: USB disconnect, device number 14 [ 228.400274][ T5583] (null): failure reading functionality [ 228.477746][ T5583] i2c i2c-1: connected i2c-tiny-usb device [ 228.662486][ T821] usb 5-1: USB disconnect, device number 21 [ 228.668263][ T5979] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 228.878542][ T5979] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 228.878581][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 228.878622][ T5979] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 228.878646][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.913139][ T5979] usb 1-1: config 0 descriptor?? [ 229.107124][ T5729] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 229.269129][ T5729] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.269167][ T5729] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 229.269195][ T5729] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.269232][ T5729] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 229.269256][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.329625][ T5729] usb 2-1: config 0 descriptor?? [ 229.391434][ T5979] ath6kl: Failed to submit usb control message: -71 [ 229.391500][ T5979] ath6kl: unable to send the bmi data to the device: -71 [ 229.391516][ T5979] ath6kl: Unable to send get target info: -71 [ 229.484734][ T5979] ath6kl: Failed to init ath6kl core: -71 [ 229.485576][ T5979] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 229.528160][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 229.967463][ T5979] usb 1-1: USB disconnect, device number 11 [ 230.168826][ T7538] tmpfs: Bad value for 'uid' [ 230.168849][ T7538] tmpfs: Bad value for 'uid' [ 230.191324][ T5729] usbhid 2-1:0.0: can't add hid device: -71 [ 230.191457][ T5729] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 230.238427][ T5729] usb 2-1: USB disconnect, device number 9 [ 230.725718][ T7527] ------------[ cut here ]------------ [ 230.725735][ T7527] kcov->t != t [ 230.725742][ T7527] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#1: syz.1.502/7527 [ 230.725802][ T7527] Modules linked in: [ 230.725822][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.1.502 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 230.725848][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.725862][ T7527] RIP: 0010:kcov_task_exit+0x181/0x240 [ 230.725895][ T7527] Code: 90 00 00 00 e8 a0 d3 57 00 4c 89 f7 5b 41 5e 41 5f e9 83 93 5d 00 7c 40 5b 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 230.725914][ T7527] RSP: 0018:ffffc9001d4ffd20 EFLAGS: 00010206 [ 230.725934][ T7527] RAX: e7fb09532dddce00 RBX: ffff888031368000 RCX: 0000000000000000 [ 230.725950][ T7527] RDX: 0000000014dee08c RSI: ffffffff8bca7860 RDI: 00000000ffffffff [ 230.725966][ T7527] RBP: ffffc9001d4ffe80 R08: ffffffff8b465b20 R09: 0000000000000000 [ 230.725981][ T7527] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 230.725996][ T7527] R13: ffff888031368000 R14: ffff88801d300400 R15: ffff88801d300408 [ 230.726013][ T7527] FS: 0000555560d63500(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 230.726033][ T7527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.726048][ T7527] CR2: 0000555580754a38 CR3: 000000003cd5c000 CR4: 00000000003526f0 [ 230.726069][ T7527] Call Trace: [ 230.726078][ T7527] [ 230.726090][ T7527] do_exit+0x159/0x2360 [ 230.726109][ T7527] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 230.726141][ T7527] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 230.726169][ T7527] ? reacquire_held_locks+0x104/0x190 [ 230.726205][ T7527] ? __pfx_do_exit+0x10/0x10 [ 230.726246][ T7527] ? rt_spin_unlock+0x157/0x200 [ 230.726276][ T7527] ? rt_spin_unlock+0x163/0x200 [ 230.726307][ T7527] do_group_exit+0x22d/0x2f0 [ 230.726335][ T7527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.726359][ T7527] __x64_sys_exit_group+0x3f/0x40 [ 230.726384][ T7527] x64_sys_call+0x221a/0x2240 [ 230.726414][ T7527] do_syscall_64+0x174/0x580 [ 230.726441][ T7527] ? trace_irq_disable+0x3b/0x140 [ 230.726462][ T7527] ? clear_bhb_loop+0x40/0x90 [ 230.726488][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.726507][ T7527] RIP: 0033:0x7f92f746e0d9 [ 230.726527][ T7527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.726544][ T7527] RSP: 002b:00007ffd5be92ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 230.726567][ T7527] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f92f746e0d9 [ 230.726581][ T7527] RDX: 00007f92f66c9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.726595][ T7527] RBP: 00007ffd5be92d4c R08: 0000000000000000 R09: 00000000000927c0 [ 230.726610][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000065 [ 230.726622][ T7527] R13: 00000000000927c0 R14: 00000000000367d6 R15: 00007ffd5be92da0 [ 230.726656][ T7527] [ 230.726666][ T7527] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 230.726682][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.1.502 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 230.726707][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.726720][ T7527] Call Trace: [ 230.726729][ T7527] [ 230.726738][ T7527] vpanic+0x56c/0xa60 [ 230.726762][ T7527] ? __pfx__printk+0x10/0x10 [ 230.726799][ T7527] ? __pfx_vpanic+0x10/0x10 [ 230.726819][ T7527] ? is_bpf_text_address+0x292/0x2b0 [ 230.726844][ T7527] ? is_bpf_text_address+0x26/0x2b0 [ 230.726880][ T7527] panic+0xc5/0xd0 [ 230.726900][ T7527] ? __pfx_panic+0x10/0x10 [ 230.726939][ T7527] __warn+0x315/0x4c0 [ 230.726959][ T7527] ? kcov_task_exit+0x181/0x240 [ 230.726993][ T7527] ? kcov_task_exit+0x181/0x240 [ 230.727024][ T7527] __report_bug+0x276/0x570 [ 230.727051][ T7527] ? __lock_acquire+0x683/0x2ce0 [ 230.727077][ T7527] ? kcov_task_exit+0x181/0x240 [ 230.727110][ T7527] ? __pfx___report_bug+0x10/0x10 [ 230.727142][ T7527] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 230.727171][ T7527] ? rt_spin_lock+0x1e0/0x400 [ 230.727194][ T7527] ? rt_spin_lock+0x1e0/0x400 [ 230.727220][ T7527] ? kcov_task_exit+0x181/0x240 [ 230.727250][ T7527] report_bug+0x16a/0x220 [ 230.727280][ T7527] ? kcov_task_exit+0x181/0x240 [ 230.727307][ T7527] ? kcov_task_exit+0x183/0x240 [ 230.727337][ T7527] handle_bug+0x9c/0x200 [ 230.727367][ T7527] exc_invalid_op+0x1a/0x50 [ 230.727400][ T7527] asm_exc_invalid_op+0x1a/0x20 [ 230.727419][ T7527] RIP: 0010:kcov_task_exit+0x181/0x240 [ 230.727452][ T7527] Code: 90 00 00 00 e8 a0 d3 57 00 4c 89 f7 5b 41 5e 41 5f e9 83 93 5d 00 7c 40 5b 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 230.727469][ T7527] RSP: 0018:ffffc9001d4ffd20 EFLAGS: 00010206 [ 230.727488][ T7527] RAX: e7fb09532dddce00 RBX: ffff888031368000 RCX: 0000000000000000 [ 230.727503][ T7527] RDX: 0000000014dee08c RSI: ffffffff8bca7860 RDI: 00000000ffffffff [ 230.727518][ T7527] RBP: ffffc9001d4ffe80 R08: ffffffff8b465b20 R09: 0000000000000000 [ 230.727534][ T7527] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 230.727548][ T7527] R13: ffff888031368000 R14: ffff88801d300400 R15: ffff88801d300408 [ 230.727573][ T7527] ? rt_spin_lock+0x1e0/0x400 [ 230.727608][ T7527] do_exit+0x159/0x2360 [ 230.727628][ T7527] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 230.727660][ T7527] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 230.727688][ T7527] ? reacquire_held_locks+0x104/0x190 [ 230.727717][ T7527] ? __pfx_do_exit+0x10/0x10 [ 230.727758][ T7527] ? rt_spin_unlock+0x157/0x200 [ 230.727795][ T7527] ? rt_spin_unlock+0x163/0x200 [ 230.727825][ T7527] do_group_exit+0x22d/0x2f0 [ 230.727848][ T7527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.727873][ T7527] __x64_sys_exit_group+0x3f/0x40 [ 230.727896][ T7527] x64_sys_call+0x221a/0x2240 [ 230.727918][ T7527] do_syscall_64+0x174/0x580 [ 230.727949][ T7527] ? trace_irq_disable+0x3b/0x140 [ 230.727971][ T7527] ? clear_bhb_loop+0x40/0x90 [ 230.728000][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.728024][ T7527] RIP: 0033:0x7f92f746e0d9 [ 230.728041][ T7527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.728058][ T7527] RSP: 002b:00007ffd5be92ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 230.728077][ T7527] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f92f746e0d9 [ 230.728092][ T7527] RDX: 00007f92f66c9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.728106][ T7527] RBP: 00007ffd5be92d4c R08: 0000000000000000 R09: 00000000000927c0 [ 230.728118][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000065 [ 230.728131][ T7527] R13: 00000000000927c0 R14: 00000000000367d6 R15: 00007ffd5be92da0 [ 230.728165][ T7527] [ 230.728441][ T7527] Kernel Offset: disabled