last executing test programs: 26.936085441s ago: executing program 2 (id=267): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = getpgrp(0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x10000000000007, 0x40000000}, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@private1, 0x2000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x4, 0x2, 0x8000000000000}, {0x8, 0x9544, 0x65e, 0xa78a}, 0x100, 0x0, 0x1, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x40}, 0x4d3, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7, 0x0, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x79}}, 0x20008004) 21.394862868s ago: executing program 2 (id=279): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002240)={0x3}) r2 = fsopen(&(0x7f0000000ac0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000027c0)={0x14}, 0x14) 19.602383998s ago: executing program 2 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 19.463822926s ago: executing program 3 (id=285): r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) r2 = socket$l2tp6(0xa, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@metacopy_on}], [], 0x2c}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x2}, 0x1c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1}) 18.689387349s ago: executing program 2 (id=287): getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000006c0)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x6f, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r2 = epoll_create1(0x80000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000400)={0x2000}) close(r2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200003e9c00008500000086000000bf91000000000000b7020000000020008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r7, 0x11, 0x64, 0x0, &(0x7f0000000100)) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r12 = epoll_create(0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb00f919"], 0x0, 0x26, 0x0, 0x1}, 0x28) r14 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x9, 0x0, r12, r14, &(0x7f0000000040)={0x4000001a}, 0x1, 0x0, 0x1, {0x0, r15}}) r16 = getpid() sched_setscheduler(r16, 0x2, &(0x7f0000000200)=0x7) keyctl$search(0xa, 0x0, &(0x7f0000000440)='keyring\x00', 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x30, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf79, 0x0, r15, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x3, 0xb05, 0x0, 0x0, 0x1000, 0xffffffff, r16, 0x0, 0x189}}}, &(0x7f0000000140)) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000003c0)) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r17, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24020884}, 0x4000) 17.423864389s ago: executing program 3 (id=291): unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) 17.117829495s ago: executing program 3 (id=293): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.015791816s ago: executing program 2 (id=294): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d004dd000000000000010902240001000000000904"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xda, 0x35, 0x8e, 0x8, 0x46d, 0x900, 0x669e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000004c0)=@md0, 0x0, &(0x7f00000005c0)='./file0/../file0/file0\x00') read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0/file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 13.324315521s ago: executing program 3 (id=304): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000001880)='./file0/../file0\x00', 0x9) (fail_nth: 1) 12.364959791s ago: executing program 3 (id=306): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xfffffffffffffff0}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = getegid() sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, r2}}}], 0x20, 0x4}}], 0x1, 0x4000000) setpgid(0x0, 0x0) 12.280103406s ago: executing program 0 (id=307): bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000007c0)=""/159, &(0x7f0000000480), &(0x7f0000000780), 0x4, 0xffffffffffffffff, 0x4}, 0x38) 12.080600347s ago: executing program 0 (id=308): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) 11.531062068s ago: executing program 1 (id=310): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffd0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x600}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x3010000}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 10.167208559s ago: executing program 0 (id=312): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = getpgrp(0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x10000000000007, 0x40000000}, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@private1, 0x2000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x4, 0x2, 0x8000000000000}, {0x8, 0x9544, 0x65e, 0xa78a}, 0x100, 0x0, 0x1, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x40}, 0x4d3, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7, 0x0, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x79}}, 0x20008004) 9.844860907s ago: executing program 1 (id=313): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000840000"], 0x18}], 0x1, 0xc4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x3f) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x65, "7bb07b8f7faaa1d356eff1a7d882b52d18cbe0161edb349479eab0eab617ed3886531d3d91216a2ee013b925ed59a846c44fe1c7054e1f018eb65d0df5750544a934f7162408b4371b4ca5aab1a1753509ac14e3a7cb8514d691c852736b4cd783de6f0e04"}, &(0x7f0000000240)=0x6d) 8.459454454s ago: executing program 1 (id=315): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e8000380080001"], 0x2dc}}, 0x4008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c0000080001804ee4c0103c1402"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) 7.184498691s ago: executing program 1 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)={'a', ' *:* ', 'rw\x00'}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x6, &(0x7f0000000d80)=0x0) r3 = eventfd2(0x83, 0x80001) io_submit(r2, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r3, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1, r3}]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) sendmsg$inet6(r4, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="a9030000000012000000", 0xfff7}], 0x1}, 0x4000841) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd28, 0x3, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_DST={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40804) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0) 5.689842889s ago: executing program 2 (id=322): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000087d1e242c000000000001090224f7000000000109040003020800000000000000ea01222800090581030800040d09"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) userfaultfd(0x80001) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00C)'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.921964386s ago: executing program 0 (id=323): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0xffff, 0x5}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00114788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.921659495s ago: executing program 4 (id=324): socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1de1, &(0x7f0000000040)={0x0, 0x68a2, 0xc000, 0x800007, 0x41}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.488129497s ago: executing program 4 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x801) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0, 0x1}) 2.322210086s ago: executing program 4 (id=326): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, "3e95e3791d198f63c52480496335d54f055ea8fa62d7f46d25b1ef74c4440cdee8d0e893c82ed2c4274b5a2997043509c2a7cf7014fe206a6e3c8ab1fdf383", 0x21}, 0x60) (fail_nth: 1) 2.295054247s ago: executing program 0 (id=327): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x13, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3780}, {0x85, 0x0, 0x0, 0x2d}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)={0x28, 0x25, 0x4, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xd, 0x0, 0x0, @fd}, @nested={0x10, 0x11a, 0x0, 0x1, [@nested={0xc, 0xdb, 0x0, 0x1, [@nested={0x8, 0xac, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x20004880}, 0xc800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r5 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000800)={r6, 0x10, "f14de913463685e8294d447b18e16c14"}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={r6, 0x4a7}, 0x8) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x8f) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pidfd_getfd(r7, r0, 0x0) 2.095356999s ago: executing program 1 (id=328): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffff", 0x6}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000400)="5277c8d23d5d0f9e69b4600c655dbd0d97325289d6a118fb98651a8bd045a018807c9f0123c42e58fc6128b79c1149e3a29b80b40cc8a5228c65772c2d9304f3f0fb8a89011b41e73bdc852d9404f4ffe221cebfcd46352fff7c4e2c715cb565997d2095089f57e4bf2a4acea1", 0x6d, 0x4, 0x0, 0x0) 1.598543027s ago: executing program 3 (id=329): bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000007c0)=""/159, &(0x7f0000000480), &(0x7f0000000780), 0x4, 0xffffffffffffffff, 0x4}, 0x38) 1.392984933s ago: executing program 1 (id=330): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setlink={0x34, 0x13, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x402d2, 0x2000f}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040840}, 0x4008000) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$devlink(0x0, r1) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, 0x0, 0x2000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c00000002020104000000000000000002000000240002801400018008000100e00e000208000200ac1414000c000280"], 0x6c}}, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x0}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x8) syz_usb_connect(0x6, 0x2a5, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xc2, 0xf6, 0xb2, 0x10, 0x7b8, 0x2870, 0xeba7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x293, 0x2, 0xec, 0xba, 0x60, 0x5, "", [{{0x9, 0x4, 0x10, 0xe5, 0x6, 0xf4, 0x70, 0x35, 0x2, [], [{{0x9, 0x5, 0xd, 0x14, 0x210, 0x40, 0xf, 0x1, [@generic={0x2c, 0x21, "c92b76c998f7e6ee9891d2c712ef8f3c84ede7093137b9d3ecd4d5e4e3c6e758fb5d4c442ebf137c1aaf"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x88, 0x7}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x1, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0xff, 0x6, 0xf6, [@generic={0x4a, 0x5, "f0ddadd07e9fe978e4384d259adc9af197966e296c0c959f93567a477c4e02c91af9c2c86d9c69b1b59f905854b022ecf6a8497ee5cfbcb498c1d5b06a1b89e7b6afbc312b437590"}, @generic={0x41, 0x4, "1da75a9d4e7a8192bdc4baf7b6272ab9c9c14568f7426a9b1d1dfcdd6bc0df7f2944c98ca786726a5ef644a40bd5c0b8f0773888e7190ad4faa061baba5bb0"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0xdb, 0x2, 0xf7}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x7, 0x5, 0x7f}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x8, 0x2, 0x9}}]}}, {{0x9, 0x4, 0x4, 0x6, 0x8, 0x66, 0x3, 0x6a, 0x4, [@generic={0x36, 0x23, "d66e75790444ae562bc07d029460a98b1e6e9a48be2343fd24bc4ab254ba00ade02a8e36953eff0f508f7726638b3159b8a702cc"}, @generic={0x2f, 0x3, "e08484bd30f17aea766a64541670c2480a08bf030a1cad8829ab7ac1881e8b3383e9faec23d85e876b703928ab"}], [{{0x9, 0x5, 0xa, 0x0, 0x400, 0xf2, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf4, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xc}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x4, 0x9, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x4, 0x7, 0xff, [@generic={0x29, 0x22, "63abe35102c9f232aff82ed5c7e1287505a39bfbc5f3baf742380e39c57949cd0ab119e84ad490"}, @generic={0x10, 0x27, "6704c9ba23d6308806d488509347"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x5a, 0x0, 0x3, [@generic={0x26, 0x23, "a70f9f45f41d93c6aaf238e7426ad32306466b581f8cb4a08f7e99807a53a603ba730343"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x1, 0x8c, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0xb, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x6}, @generic={0x53, 0x31, "826e2e692f56d4953d5cdf6dbcd4a244183317bfe626044f39ab74b2d2530ba9b78a9b1c8678ef4ad795927a8fb5c4b441fe8e41795bc630add94f67e2afa53b36515f3053f867e33f4746c01767e6658c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x7, 0x7, 0x4, [@generic={0x8, 0xd, "e86a3994bffa"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x6, 0x8, 0xc, [@generic={0x8, 0x30, "1bf957b8fe3a"}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x300, 0xaf, 0x3, 0x4, 0x8, 0xd}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x411}}, {0x88, &(0x7f00000008c0)=@string={0x88, 0x3, "13823a70d510413dc6db501fad65f5925666e09233dba299f79a7dc06b04d5ee0340a4e6c50b136678c1ebb9c6d7f911ee7ee979042db3cf67320fa69dee8c685d6c23d62e2e98a58f3dc0b7b7d609f6d60ed04f09e9b756735a2fc496289072bf89c3558f0960ca162ab3165294415bb7295d62c35963b6c0765786bf618cd539fbf378bfcb"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x41b}}, {0xb7, &(0x7f0000000380)=@string={0xb7, 0x3, "61597f6dd7f37836189d1a0105548d757b08cf218c17ba9bf895b26907af19c84003f5fcbf4fd91d19501030acdf1a6f634c48ffc0e717f688bd747358177b1460cc22bc77ccf2aa33e6e57a12ae2e489cb10d81030f60173f8546087bc52d6182c4588a2f7d427e863d8b1d5c735b81cb8e0f994717f706e3ca37166be2ccc87cee62072116aa86dc7b1ed2931a75e2990b1a9b20a2463564c5ed3c742de7ae044fe26a09d50370c5e78031f800b643237c4af9ca"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x43e}}]}) syz_usb_control_io$hid(r4, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096"], 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fedbdf2520010000000000000000000000000001000004d5ff000000fe880000000000000000000000000101e0000002000000000000000000000000ac1414aa00004e2101004e2000000200e0202b00"/104, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000000000000000000000000000014e2400094e2200830200000029000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d5000000000000000200000000000000fc4e0000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba0000000200000002000003000000000800000001000000fc01000029bd70000c00080008"], 0x134}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000006f440000000000006b0a00fe000000007303ffb000000000b500feff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050cdcfc92f5daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf9bf04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff4e2c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc8230000065937f36f6490eb033b1ce0d4922701cb42aa86ee11cd5950b58ebffffae2aba1a21410e6cb3835bc2c19c9dacbb5f836d1c0de069c20c55fa567859aca8be3afdc3a14779e9181a382831580eac154d314974d209c00896548b04f80d68da1c7ecdfea1e05d0f442b81c4f2a38ae1f43688aff1d3eb14112da5d5289bedeeff7093a12faf47f55bd7ffc82893600042e761ec18de4cd287e176befc4af4063e5f091f8a50cbf02ad70682c0131d616ff6d999fc6fba6e9d4a3fc4e6430aca493d38db18ef4b2d46a22c1dc14910a49126684e453d30ea51dc537a0c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe27}, 0x48) 1.352296218s ago: executing program 4 (id=331): socketpair$unix(0x1, 0x2, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, 0x0, 0x0) r2 = gettid() tkill(r2, 0x16) 433.55894ms ago: executing program 32 (id=329): bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000007c0)=""/159, &(0x7f0000000480), &(0x7f0000000780), 0x4, 0xffffffffffffffff, 0x4}, 0x38) 379.859416ms ago: executing program 0 (id=333): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = getpgrp(0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x10000000000007, 0x40000000}, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@private1, 0x2000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x4, 0x2, 0x8000000000000}, {0x8, 0x9544, 0x65e, 0xa78a}, 0x100, 0x0, 0x1, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x40}, 0x4d3, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7, 0x0, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x79}}, 0x20008004) 379.548116ms ago: executing program 4 (id=334): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) r3 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffd0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x600}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x3010000}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 0s ago: executing program 4 (id=335): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) kernel console output (not intermixed with test programs): ck-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 133.172402][ T36] audit: type=1326 audit(1784139786.618:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.1.39" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 133.172448][ T36] audit: type=1326 audit(1784139786.618:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.1.39" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 133.203922][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 133.210723][ T5858] usb 1-1: no configurations [ 133.210744][ T5858] usb 1-1: can't read configurations, error -22 [ 133.285106][ T36] audit: type=1326 audit(1784139786.618:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.1.39" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 133.285163][ T36] audit: type=1326 audit(1784139786.658:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm=04 exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 133.286047][ T36] audit: type=1326 audit(1784139786.658:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.1.39" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 133.286103][ T36] audit: type=1326 audit(1784139786.658:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.1.39" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 133.286150][ T36] audit: type=1326 audit(1784139786.658:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm=04 exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 133.286197][ T36] audit: type=1326 audit(1784139786.708:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.1.39" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 133.286245][ T36] audit: type=1326 audit(1784139786.708:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5937 comm="syz.1.39" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d1e6fdbc2 code=0x7ffc0000 [ 133.555362][ T5858] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.726038][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 133.733204][ T5858] usb 1-1: no configurations [ 133.733224][ T5858] usb 1-1: can't read configurations, error -22 [ 133.733584][ T5858] usb usb1-port1: attempt power cycle [ 133.826658][ T5944] FAULT_INJECTION: forcing a failure. [ 133.826658][ T5944] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 133.827353][ T5944] CPU: 0 UID: 0 PID: 5944 Comm: syz.4.41 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.827386][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 133.827407][ T5944] Call Trace: [ 133.827416][ T5944] [ 133.827426][ T5944] dump_stack_lvl+0xe8/0x150 [ 133.827480][ T5944] should_fail_ex+0x467/0x600 [ 133.827517][ T5944] _copy_from_user+0x2d/0xb0 [ 133.827542][ T5944] __sys_bpf+0x2e7/0xd90 [ 133.827574][ T5944] ? __pfx___sys_bpf+0x10/0x10 [ 133.827627][ T5944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.827663][ T5944] __x64_sys_bpf+0xba/0xd0 [ 133.827698][ T5944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.827721][ T5944] do_syscall_64+0x174/0x580 [ 133.827756][ T5944] ? trace_irq_disable+0x3b/0x140 [ 133.827789][ T5944] ? clear_bhb_loop+0x40/0x90 [ 133.827817][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.827839][ T5944] RIP: 0033:0x7f2af675de59 [ 133.827864][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.827882][ T5944] RSP: 002b:00007f2af49b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.827912][ T5944] RAX: ffffffffffffffda RBX: 00007f2af69e5fa0 RCX: 00007f2af675de59 [ 133.827929][ T5944] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 133.827941][ T5944] RBP: 00007f2af49b6090 R08: 0000000000000000 R09: 0000000000000000 [ 133.827953][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.827965][ T5944] R13: 00007f2af69e6038 R14: 00007f2af69e5fa0 R15: 00007ffcc2b78d18 [ 133.827996][ T5944] [ 134.143914][ T5858] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.173741][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 134.176043][ T5858] usb 1-1: no configurations [ 134.176061][ T5858] usb 1-1: can't read configurations, error -22 [ 134.303964][ T5858] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.333603][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 134.356144][ T5858] usb 1-1: no configurations [ 134.356168][ T5858] usb 1-1: can't read configurations, error -22 [ 134.397208][ T5858] usb usb1-port1: unable to enumerate USB device [ 134.715286][ T5955] fuse: Bad value for 'fd' [ 134.925431][ T5957] netlink: 'syz.4.46': attribute type 2 has an invalid length. [ 136.625169][ T5858] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 136.777720][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.777780][ T5858] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.777805][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.948524][ T5858] usb 2-1: config 0 descriptor?? [ 137.037772][ T5858] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 137.311274][ T5858] usb 2-1: USB disconnect, device number 2 [ 137.577486][ T1600] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.974036][ T6007] FAULT_INJECTION: forcing a failure. [ 137.974036][ T6007] name failslab, interval 1, probability 0, space 0, times 1 [ 137.974070][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.2.60 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 137.974095][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 137.974108][ T6007] Call Trace: [ 137.974116][ T6007] [ 137.974125][ T6007] dump_stack_lvl+0xe8/0x150 [ 137.974165][ T6007] should_fail_ex+0x467/0x600 [ 137.974203][ T6007] should_failslab+0xa8/0x100 [ 137.974229][ T6007] kmem_cache_alloc_noprof+0xa4/0x650 [ 137.974264][ T6007] ? audit_log_start+0x108/0xa30 [ 137.974289][ T6007] ? audit_log_start+0x108/0xa30 [ 137.974323][ T6007] audit_log_start+0x108/0xa30 [ 137.974357][ T6007] ? __pfx_audit_log_start+0x10/0x10 [ 137.974387][ T6007] ? get_pid_task+0x20/0x1f0 [ 137.974419][ T6007] ? get_pid_task+0x20/0x1f0 [ 137.974449][ T6007] ? get_pid_task+0x20/0x1f0 [ 137.974491][ T6007] audit_seccomp+0x63/0x190 [ 137.974522][ T6007] __seccomp_filter+0xd14/0x1e00 [ 137.974559][ T6007] ? __pfx___seccomp_filter+0x10/0x10 [ 137.974582][ T6007] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 137.974617][ T6007] ? rt_mutex_slowunlock+0x219/0x460 [ 137.974644][ T6007] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.974679][ T6007] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 137.974716][ T6007] ? fput+0xa0/0xd0 [ 137.974757][ T6007] ? __pfx_ksys_write+0x10/0x10 [ 137.974788][ T6007] ? __secure_computing+0xe7/0x2b0 [ 137.974815][ T6007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.974838][ T6007] do_syscall_64+0x10e/0x580 [ 137.974871][ T6007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.974895][ T6007] ? clear_bhb_loop+0x40/0x90 [ 137.974923][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.974951][ T6007] RIP: 0033:0x7f48f881de59 [ 137.974971][ T6007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.974989][ T6007] RSP: 002b:00007f48f6a55028 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 137.975012][ T6007] RAX: ffffffffffffffda RBX: 00007f48f8aa6090 RCX: 00007f48f881de59 [ 137.975027][ T6007] RDX: 0000000000004000 RSI: 0000200000ffc000 RDI: 0000000000000000 [ 137.975042][ T6007] RBP: 00007f48f6a55090 R08: 0000000000000000 R09: 0000000000000000 [ 137.975056][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.975069][ T6007] R13: 00007f48f8aa6128 R14: 00007f48f8aa6090 R15: 00007ffd870f9008 [ 137.975103][ T6007] [ 138.543294][ T1600] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 138.543325][ T1600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.619557][ T1600] usb 5-1: config 0 descriptor?? [ 138.670975][ T1600] cp210x 5-1:0.0: cp210x converter detected [ 139.443276][ T1600] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 139.454282][ T1600] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 139.497937][ T6019] fuse: Bad value for 'fd' [ 140.418968][ T1600] usb 5-1: cp210x converter now attached to ttyUSB0 [ 140.493279][ T1600] usb 5-1: USB disconnect, device number 3 [ 140.674207][ T1600] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 140.722298][ T1600] cp210x 5-1:0.0: device disconnected [ 141.260405][ T36] kauditd_printk_skb: 137 callbacks suppressed [ 141.260425][ T36] audit: type=1326 audit(1784139794.708:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.66" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af675de59 code=0x7ffc0000 [ 141.260682][ T36] audit: type=1326 audit(1784139794.708:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.66" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af675de59 code=0x7ffc0000 [ 141.302153][ T36] audit: type=1326 audit(1784139794.748:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.66" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f2af675de59 code=0x7ffc0000 [ 141.302346][ T36] audit: type=1326 audit(1784139794.748:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.66" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af675de59 code=0x7ffc0000 [ 141.302477][ T36] audit: type=1326 audit(1784139794.748:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.66" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af675de59 code=0x7ffc0000 [ 141.302579][ T36] audit: type=1326 audit(1784139794.748:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.66" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2af675de59 code=0x7ffc0000 [ 141.302695][ T36] audit: type=1326 audit(1784139794.748:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.66" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af675de59 code=0x7ffc0000 [ 141.302811][ T36] audit: type=1326 audit(1784139794.748:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.66" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af675de59 code=0x7ffc0000 [ 141.624026][ T36] audit: type=1326 audit(1784139794.778:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.66" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2af675de59 code=0x7ffc0000 [ 141.624087][ T36] audit: type=1326 audit(1784139794.778:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.66" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af675de59 code=0x7ffc0000 [ 144.663968][ T5862] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 144.827266][ T5862] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.827311][ T5862] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 144.827336][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.867399][ T5862] usb 2-1: config 0 descriptor?? [ 144.887463][ T5862] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 145.088702][ T5862] usb 2-1: USB disconnect, device number 3 [ 145.333870][ T43] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 145.501603][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.501653][ T43] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 145.501678][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.672936][ T43] usb 5-1: config 0 descriptor?? [ 145.883710][ T43] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 145.995854][ T43] usb 5-1: USB disconnect, device number 4 [ 146.563887][ T1600] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 146.683094][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.693243][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.718527][ T1600] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 146.718557][ T1600] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 146.718579][ T1600] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 146.718693][ T1600] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 146.718719][ T1600] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.780194][ T1600] usb 1-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 146.780225][ T1600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.780245][ T1600] usb 1-1: Product: syz [ 146.780260][ T1600] usb 1-1: Manufacturer: syz [ 146.780274][ T1600] usb 1-1: SerialNumber: syz [ 146.815731][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.817759][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.903938][ T5858] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.285025][ T6093] ntfs3(loop3): try to read out of volume at offset 0x0 [ 147.717631][ T1600] usb 1-1: config 0 descriptor?? [ 147.719548][ T6077] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.913855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.933848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.943848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.953852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.963848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.973899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.983854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.739218][ T1600] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 149.739764][ T1600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 149.803847][ T1600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 149.803954][ T1600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 149.811271][ T1600] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 149.885486][ T1600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 149.885576][ T1600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 149.931839][ T1600] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 149.952634][ T1600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 149.952731][ T1600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 149.976409][ T1600] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 149.982180][ T1600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 149.982271][ T1600] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 150.020132][ T1600] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 150.079722][ T1600] usb 1-1: USB disconnect, device number 6 [ 150.124575][ T1600] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 150.251750][ T1600] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 150.285199][ T1600] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 150.364469][ T6114] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 150.372888][ T1600] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 150.391241][ T1600] keyspan 1-1:0.0: device disconnected [ 150.533937][ T6114] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 150.533984][ T6114] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.534007][ T6114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.762412][ T6114] usb 5-1: config 0 descriptor?? [ 150.786487][ T6114] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 152.513994][ T5862] usb 5-1: USB disconnect, device number 6 [ 153.884271][ T6114] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 154.060893][ T6114] usb 3-1: Using ep0 maxpacket: 16 [ 154.063724][ T6114] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 154.077455][ T6114] usb 3-1: config 251 has no interface number 0 [ 154.077513][ T6114] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.077537][ T6114] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.077562][ T6114] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 154.077584][ T6114] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 154.077610][ T6114] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 154.077682][ T6114] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 14385, setting to 1024 [ 154.077710][ T6114] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 154.077734][ T6114] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.077762][ T6114] usb 3-1: config 251 interface 202 has no altsetting 0 [ 154.081906][ T6114] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 154.081937][ T6114] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 154.081957][ T6114] usb 3-1: Product: syz [ 154.081972][ T6114] usb 3-1: SerialNumber: syz [ 154.263095][ T6144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.034554][ T6162] FAULT_INJECTION: forcing a failure. [ 155.034554][ T6162] name failslab, interval 1, probability 0, space 0, times 0 [ 155.034596][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.4.103 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 155.034620][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 155.034632][ T6162] Call Trace: [ 155.034640][ T6162] [ 155.034647][ T6162] dump_stack_lvl+0xe8/0x150 [ 155.034679][ T6162] should_fail_ex+0x467/0x600 [ 155.034709][ T6162] should_failslab+0xa8/0x100 [ 155.034731][ T6162] kmem_cache_alloc_node_noprof+0xae/0x670 [ 155.034760][ T6162] ? __alloc_skb+0x1d7/0x7a0 [ 155.034785][ T6162] ? __alloc_skb+0x1d7/0x7a0 [ 155.034822][ T6162] __alloc_skb+0x1d7/0x7a0 [ 155.034858][ T6162] vhci_write+0xc2/0x480 [ 155.034892][ T6162] vfs_write+0x61e/0xbb0 [ 155.034926][ T6162] ? __pfx_vfs_write+0x10/0x10 [ 155.034960][ T6162] ? __fget_files+0x2a/0x420 [ 155.034989][ T6162] ksys_write+0x156/0x270 [ 155.035014][ T6162] ? __pfx_ksys_write+0x10/0x10 [ 155.035040][ T6162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.035061][ T6162] do_syscall_64+0x174/0x580 [ 155.035090][ T6162] ? trace_irq_disable+0x3b/0x140 [ 155.035119][ T6162] ? clear_bhb_loop+0x40/0x90 [ 155.035139][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.035156][ T6162] RIP: 0033:0x7f2af671e68e [ 155.035172][ T6162] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 155.035186][ T6162] RSP: 002b:00007f2af49b5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.035204][ T6162] RAX: ffffffffffffffda RBX: 00007f2af49b66c0 RCX: 00007f2af671e68e [ 155.035215][ T6162] RDX: 000000000000000b RSI: 0000200000000280 RDI: 00000000000000ca [ 155.035226][ T6162] RBP: 00007f2af49b6090 R08: 0000000000000000 R09: 0000000000000000 [ 155.035235][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.035245][ T6162] R13: 00007f2af69e6038 R14: 00007f2af69e5fa0 R15: 00007ffcc2b78d18 [ 155.035270][ T6162] [ 155.270355][ T6114] cxacru_cm: 78 callbacks suppressed [ 155.270383][ T6114] cxacru 3-1:251.202: submit of write urb for cm 0x90 failed (-90) [ 155.270422][ T6114] cxacru 3-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 155.270948][ T6114] cxacru 3-1:251.202: probe with driver cxacru failed with error -22 [ 155.324519][ T6114] usb 3-1: USB disconnect, device number 2 [ 156.921539][ T6180] FAULT_INJECTION: forcing a failure. [ 156.921539][ T6180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.921575][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: syz.0.107 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 156.921599][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 156.921613][ T6180] Call Trace: [ 156.921621][ T6180] [ 156.921631][ T6180] dump_stack_lvl+0xe8/0x150 [ 156.921670][ T6180] should_fail_ex+0x467/0x600 [ 156.921709][ T6180] _copy_to_user+0x31/0xb0 [ 156.921735][ T6180] simple_read_from_buffer+0xe1/0x170 [ 156.921763][ T6180] proc_fail_nth_read+0x1be/0x230 [ 156.921790][ T6180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.921821][ T6180] ? rw_verify_area+0x250/0x4d0 [ 156.921850][ T6180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.921871][ T6180] vfs_read+0x219/0xa90 [ 156.921906][ T6180] ? __pfx_vfs_read+0x10/0x10 [ 156.921934][ T6180] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 156.921978][ T6180] ? lockdep_hardirqs_on+0x7a/0x110 [ 156.922012][ T6180] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 156.922045][ T6180] ? mutex_lock_nested+0x152/0x1d0 [ 156.922070][ T6180] ? fdget_pos+0x252/0x320 [ 156.922101][ T6180] ksys_read+0x156/0x270 [ 156.922131][ T6180] ? __pfx_ksys_read+0x10/0x10 [ 156.922155][ T6180] ? fdget+0x189/0x1f0 [ 156.922183][ T6180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.922207][ T6180] do_syscall_64+0x174/0x580 [ 156.922240][ T6180] ? trace_irq_disable+0x3b/0x140 [ 156.922276][ T6180] ? clear_bhb_loop+0x40/0x90 [ 156.922304][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.922326][ T6180] RIP: 0033:0x7f2fad81e68e [ 156.922347][ T6180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.922365][ T6180] RSP: 002b:00007f2faba94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.922387][ T6180] RAX: ffffffffffffffda RBX: 00007f2faba956c0 RCX: 00007f2fad81e68e [ 156.922403][ T6180] RDX: 000000000000000f RSI: 00007f2faba950a0 RDI: 0000000000000003 [ 156.922415][ T6180] RBP: 00007f2faba95090 R08: 0000000000000000 R09: 0000000000000000 [ 156.922428][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.922440][ T6180] R13: 00007f2fadae6128 R14: 00007f2fadae6090 R15: 00007ffcfa097e58 [ 156.922474][ T6180] [ 158.534101][ T6114] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 158.812298][ T6114] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 158.812347][ T6114] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 158.812372][ T6114] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.857762][ T6114] usb 3-1: config 0 descriptor?? [ 159.055647][ T6114] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 159.777554][ T6114] usb 3-1: USB disconnect, device number 3 [ 160.773916][ T6114] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.926717][ T6114] usb 1-1: config 0 has no interfaces? [ 160.926760][ T6114] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 160.926785][ T6114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.985756][ T6114] usb 1-1: config 0 descriptor?? [ 161.249333][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.249960][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.301628][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.371393][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.504044][ T1600] usb 1-1: USB disconnect, device number 7 [ 161.888596][ T6221] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 162.104227][ T1600] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 162.295079][ T1600] usb 1-1: Using ep0 maxpacket: 8 [ 162.344000][ T1600] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 162.344034][ T1600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.344057][ T1600] usb 1-1: Product: syz [ 162.344073][ T1600] usb 1-1: Manufacturer: syz [ 162.344089][ T1600] usb 1-1: SerialNumber: syz [ 162.410850][ T1600] usb 1-1: config 0 descriptor?? [ 162.480101][ T1600] gspca_main: spca500-2.14.0 probing 046d:0900 [ 162.816132][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.119921][ T1600] gspca_spca500: reg write: error -32 [ 163.390875][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.600115][ T1600] gspca_spca500: reg write: error -32 [ 163.600590][ T1600] gspca_spca500: reg write: error -32 [ 163.601103][ T1600] gspca_spca500: reg write: error -32 [ 163.603173][ T1600] gspca_spca500: reg write: error -32 [ 163.603590][ T1600] gspca_spca500: reg write: error -32 [ 163.622403][ T1600] gspca_spca500: reg write: error -32 [ 163.630245][ T1600] gspca_spca500: reg write: error -32 [ 163.633909][ T1600] gspca_spca500: reg write: error -32 [ 163.637908][ T1600] gspca_spca500: reg write: error -32 [ 163.643372][ T1600] gspca_spca500: reg write: error -32 [ 163.671890][ T1600] gspca_spca500: reg write: error -32 [ 163.680138][ T1600] gspca_spca500: reg write: error -32 [ 163.682782][ T1600] gspca_spca500: reg write: error -32 [ 163.975178][ T6235] FAULT_INJECTION: forcing a failure. [ 163.975178][ T6235] name failslab, interval 1, probability 0, space 0, times 0 [ 163.975214][ T6235] CPU: 1 UID: 0 PID: 6235 Comm: syz.3.126 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.975238][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 163.975250][ T6235] Call Trace: [ 163.975258][ T6235] [ 163.975267][ T6235] dump_stack_lvl+0xe8/0x150 [ 163.975305][ T6235] should_fail_ex+0x467/0x600 [ 163.975342][ T6235] should_failslab+0xa8/0x100 [ 163.975368][ T6235] __kmalloc_noprof+0xfe/0x780 [ 163.975388][ T6235] ? rcu_is_watching+0x15/0xb0 [ 163.975413][ T6235] ? tomoyo_realpath_from_path+0xef/0x640 [ 163.975439][ T6235] ? tomoyo_realpath_from_path+0xef/0x640 [ 163.975473][ T6235] tomoyo_realpath_from_path+0xef/0x640 [ 163.975542][ T6235] ? tomoyo_path_number_perm+0x219/0x5f0 [ 163.975577][ T6235] tomoyo_path_number_perm+0x246/0x5f0 [ 163.975616][ T6235] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.975652][ T6235] ? __lock_acquire+0x683/0x2ce0 [ 163.975687][ T6235] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 163.975721][ T6235] ? hook_file_ioctl+0x1f3/0x600 [ 163.975751][ T6235] ? lockdep_hardirqs_on+0x7a/0x110 [ 163.975804][ T6235] ? __fget_files+0x2a/0x420 [ 163.975829][ T6235] ? __fget_files+0x2a/0x420 [ 163.975849][ T6235] ? __fget_files+0x3a8/0x420 [ 163.975868][ T6235] ? __fget_files+0x2a/0x420 [ 163.975895][ T6235] security_file_ioctl+0xc3/0x2a0 [ 163.975920][ T6235] __se_sys_ioctl+0x47/0x170 [ 163.975950][ T6235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.975973][ T6235] do_syscall_64+0x174/0x580 [ 163.976014][ T6235] ? trace_irq_disable+0x3b/0x140 [ 163.976049][ T6235] ? clear_bhb_loop+0x40/0x90 [ 163.976077][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.976098][ T6235] RIP: 0033:0x7f71b79ade59 [ 163.976119][ T6235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.976137][ T6235] RSP: 002b:00007f71b5c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.976159][ T6235] RAX: ffffffffffffffda RBX: 00007f71b7c35fa0 RCX: 00007f71b79ade59 [ 163.976176][ T6235] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 163.976189][ T6235] RBP: 00007f71b5c06090 R08: 0000000000000000 R09: 0000000000000000 [ 163.976202][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.976214][ T6235] R13: 00007f71b7c36038 R14: 00007f71b7c35fa0 R15: 00007fff368eb9d8 [ 163.976248][ T6235] [ 163.976257][ T6235] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.333565][ T6235] loop8: detected capacity change from 0 to 7 [ 164.352012][ T1600] usb 1-1: USB disconnect, device number 8 [ 164.400087][ T6237] fuse: Invalid rootmode [ 164.650733][ T6235] Dev loop8: unable to read RDB block 7 [ 164.650786][ T6235] loop8: unable to read partition table [ 164.651009][ T6235] loop8: partition table beyond EOD, truncated [ 164.652615][ T6235] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 165.923967][ T5614] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 166.010145][ T6261] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 166.078288][ T5614] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 166.078318][ T5614] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 166.078338][ T5614] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 166.078356][ T5614] usb 3-1: config 220 has no interface number 2 [ 166.078426][ T5614] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 166.078453][ T5614] usb 3-1: config 220 interface 0 has no altsetting 0 [ 166.078471][ T5614] usb 3-1: config 220 interface 76 has no altsetting 0 [ 166.078490][ T5614] usb 3-1: config 220 interface 1 has no altsetting 0 [ 166.094537][ T5614] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 166.094569][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.094614][ T5614] usb 3-1: Product: syz [ 166.094630][ T5614] usb 3-1: Manufacturer: syz [ 166.094645][ T5614] usb 3-1: SerialNumber: syz [ 171.153370][ T5614] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 171.153416][ T5614] uvcvideo 3-1:220.0: No valid video chain found. [ 171.153535][ T5614] usb 3-1: selecting invalid altsetting 0 [ 171.199167][ T6289] fuse: Invalid rootmode [ 171.252033][ T5614] usb 3-1: selecting invalid altsetting 0 [ 171.252069][ T5614] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 171.337585][ T5614] usb 3-1: USB disconnect, device number 4 [ 171.875257][ T5614] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.962163][ T6302] FAULT_INJECTION: forcing a failure. [ 171.962163][ T6302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.962197][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.1.147 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.962222][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 171.962235][ T6302] Call Trace: [ 171.962243][ T6302] [ 171.962252][ T6302] dump_stack_lvl+0xe8/0x150 [ 171.962293][ T6302] should_fail_ex+0x467/0x600 [ 171.962330][ T6302] _copy_to_user+0x31/0xb0 [ 171.962356][ T6302] simple_read_from_buffer+0xe1/0x170 [ 171.962384][ T6302] proc_fail_nth_read+0x1be/0x230 [ 171.962410][ T6302] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.962435][ T6302] ? rw_verify_area+0x250/0x4d0 [ 171.962458][ T6302] ? __fget_files+0x2a/0x420 [ 171.962480][ T6302] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.962501][ T6302] vfs_read+0x219/0xa90 [ 171.962536][ T6302] ? __pfx_vfs_read+0x10/0x10 [ 171.962564][ T6302] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 171.962597][ T6302] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.962631][ T6302] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 171.962664][ T6302] ? mutex_lock_nested+0x152/0x1d0 [ 171.962687][ T6302] ? fdget_pos+0x252/0x320 [ 171.962717][ T6302] ksys_read+0x156/0x270 [ 171.962752][ T6302] ? __pfx_ksys_read+0x10/0x10 [ 171.962786][ T6302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.962810][ T6302] do_syscall_64+0x174/0x580 [ 171.962847][ T6302] ? trace_irq_disable+0x3b/0x140 [ 171.962882][ T6302] ? clear_bhb_loop+0x40/0x90 [ 171.962909][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.962931][ T6302] RIP: 0033:0x7f6d1e6be68e [ 171.962951][ T6302] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.962969][ T6302] RSP: 002b:00007f6d1c955fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.962992][ T6302] RAX: ffffffffffffffda RBX: 00007f6d1c9566c0 RCX: 00007f6d1e6be68e [ 171.963033][ T6302] RDX: 000000000000000f RSI: 00007f6d1c9560a0 RDI: 0000000000000005 [ 171.963047][ T6302] RBP: 00007f6d1c956090 R08: 0000000000000000 R09: 0000000000000000 [ 171.963060][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.963073][ T6302] R13: 00007f6d1e986038 R14: 00007f6d1e985fa0 R15: 00007ffe22f73d28 [ 171.963108][ T6302] [ 172.814374][ T5614] usb 3-1: Using ep0 maxpacket: 16 [ 172.912122][ T5614] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.912231][ T5614] usb 3-1: config 0 has no interfaces? [ 172.935024][ T5614] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 172.935061][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.935085][ T5614] usb 3-1: Product: syz [ 172.935101][ T5614] usb 3-1: Manufacturer: syz [ 172.935118][ T5614] usb 3-1: SerialNumber: syz [ 173.466441][ T5614] usb 3-1: config 0 descriptor?? [ 174.929693][ T6316] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 176.495403][ T6325] FAULT_INJECTION: forcing a failure. [ 176.495403][ T6325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.495439][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.3.152 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.495464][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 176.495478][ T6325] Call Trace: [ 176.495486][ T6325] [ 176.495495][ T6325] dump_stack_lvl+0xe8/0x150 [ 176.495541][ T6325] should_fail_ex+0x467/0x600 [ 176.495579][ T6325] _copy_from_user+0x2d/0xb0 [ 176.495604][ T6325] ___sys_sendmsg+0x1c6/0x360 [ 176.495627][ T6325] ? __lock_acquire+0x683/0x2ce0 [ 176.495654][ T6325] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.495715][ T6325] ? __fget_files+0x2a/0x420 [ 176.495736][ T6325] ? __fget_files+0x3a8/0x420 [ 176.495768][ T6325] __x64_sys_sendmsg+0x1b7/0x290 [ 176.495795][ T6325] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.495837][ T6325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.495861][ T6325] do_syscall_64+0x174/0x580 [ 176.495894][ T6325] ? trace_irq_disable+0x3b/0x140 [ 176.495930][ T6325] ? clear_bhb_loop+0x40/0x90 [ 176.495958][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.495981][ T6325] RIP: 0033:0x7f71b79ade59 [ 176.496001][ T6325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.496019][ T6325] RSP: 002b:00007f71b5c06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.496042][ T6325] RAX: ffffffffffffffda RBX: 00007f71b7c35fa0 RCX: 00007f71b79ade59 [ 176.496058][ T6325] RDX: 0000000000008080 RSI: 00002000000007c0 RDI: 0000000000000003 [ 176.496071][ T6325] RBP: 00007f71b5c06090 R08: 0000000000000000 R09: 0000000000000000 [ 176.496083][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.496094][ T6325] R13: 00007f71b7c36038 R14: 00007f71b7c35fa0 R15: 00007fff368eb9d8 [ 176.496128][ T6325] [ 177.358005][ T1600] usb 3-1: USB disconnect, device number 5 [ 177.666623][ T6333] fuse: Bad value for 'rootmode' [ 178.111586][ T6350] FAULT_INJECTION: forcing a failure. [ 178.111586][ T6350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.111626][ T6350] CPU: 0 UID: 0 PID: 6350 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.111652][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 178.111665][ T6350] Call Trace: [ 178.111674][ T6350] [ 178.111683][ T6350] dump_stack_lvl+0xe8/0x150 [ 178.111724][ T6350] should_fail_ex+0x467/0x600 [ 178.111763][ T6350] _copy_from_user+0x2d/0xb0 [ 178.111789][ T6350] __sys_bpf+0x2e7/0xd90 [ 178.111819][ T6350] ? __pfx___sys_bpf+0x10/0x10 [ 178.111843][ T6350] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 178.111876][ T6350] ? rt_mutex_slowunlock+0x219/0x460 [ 178.111914][ T6350] ? rcu_is_watching+0x15/0xb0 [ 178.111939][ T6350] __x64_sys_bpf+0xba/0xd0 [ 178.111965][ T6350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.111984][ T6350] do_syscall_64+0x174/0x580 [ 178.112011][ T6350] ? trace_irq_disable+0x3b/0x140 [ 178.112039][ T6350] ? clear_bhb_loop+0x40/0x90 [ 178.112062][ T6350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.112080][ T6350] RIP: 0033:0x7f2fad85de59 [ 178.112097][ T6350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.112111][ T6350] RSP: 002b:00007f2fabab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.112129][ T6350] RAX: ffffffffffffffda RBX: 00007f2fadae5fa0 RCX: 00007f2fad85de59 [ 178.112141][ T6350] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 178.112152][ T6350] RBP: 00007f2fabab6090 R08: 0000000000000000 R09: 0000000000000000 [ 178.112161][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.112171][ T6350] R13: 00007f2fadae6038 R14: 00007f2fadae5fa0 R15: 00007ffcfa097e58 [ 178.112197][ T6350] [ 180.892898][ T6359] binder: BINDER_SET_CONTEXT_MGR already set [ 180.892915][ T6359] binder: 6358:6359 ioctl 4018620d 200000000040 returned -16 [ 181.029186][ T6357] netlink: 'syz.0.162': attribute type 10 has an invalid length. [ 181.029211][ T6357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.162'. [ 181.029247][ T6357] veth0_to_bridge: entered promiscuous mode [ 181.029268][ T6357] veth0_to_bridge: entered allmulticast mode [ 181.065414][ T6357] bridge0: port 3(veth0_to_bridge) entered blocking state [ 181.065560][ T6357] bridge0: port 3(veth0_to_bridge) entered disabled state [ 181.108066][ T6357] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.203039][ T6357] bridge0: port 3(veth0_to_bridge) entered blocking state [ 181.226200][ T6357] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 181.243902][ T5903] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.324218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.325178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.325735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.326231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.326707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.331551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.332041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.332609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.333084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.333573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.413956][ T5903] usb 5-1: device descriptor read/64, error -71 [ 181.684029][ T5903] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 181.702507][ T6365] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 181.824014][ T5903] usb 5-1: device descriptor read/64, error -71 [ 181.927220][ T5903] usb usb5-port1: attempt power cycle [ 182.063908][ T1600] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 182.214961][ T1600] usb 2-1: Using ep0 maxpacket: 32 [ 182.218883][ T1600] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 182.218911][ T1600] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 182.218932][ T1600] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 182.218983][ T1600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.219006][ T1600] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.219030][ T1600] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 182.219196][ T1600] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 182.219227][ T1600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.458002][ T5903] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 182.461239][ T1600] usb 2-1: config 0 descriptor?? [ 182.489577][ T5903] usb 5-1: device descriptor read/8, error -71 [ 182.769538][ T6377] fuse: Bad value for 'rootmode' [ 182.877490][ T5903] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 183.081673][ T5903] usb 5-1: device descriptor read/8, error -71 [ 183.191045][ T5903] usb usb5-port1: unable to enumerate USB device [ 183.589735][ T1600] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 184.991737][ T5862] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 186.006689][ T5720] usb 2-1: USB disconnect, device number 4 [ 186.011015][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 186.169791][ T5862] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 186.169821][ T5862] usb 5-1: config 0 has no interface number 1 [ 186.219649][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 186.236086][ T5862] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 186.236117][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.236138][ T5862] usb 5-1: Product: syz [ 186.236153][ T5862] usb 5-1: Manufacturer: syz [ 186.236168][ T5862] usb 5-1: SerialNumber: syz [ 186.273944][ T1600] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 186.334096][ C0] net_ratelimit: 8549 callbacks suppressed [ 186.334118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.334755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 186.335449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.335716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.336357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 186.336861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.337175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.337834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 186.338375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.338694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.431045][ T1600] usb 1-1: device descriptor read/64, error -71 [ 186.618911][ T5862] usb 5-1: config 0 descriptor?? [ 186.655231][ T5720] usblp0: removed [ 186.793889][ T1600] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 186.891695][ T5862] viperboard 5-1:0.61: version 0.00 found at bus 005 address 011 [ 186.974093][ T820] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.993904][ T1600] usb 1-1: device descriptor read/64, error -71 [ 187.022213][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 187.071643][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.072252][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.129290][ T1600] usb usb1-port1: attempt power cycle [ 187.294388][ T820] usb 3-1: Using ep0 maxpacket: 16 [ 187.369230][ T820] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 187.369259][ T820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.369278][ T820] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.369351][ T820] usb 3-1: config 1 has no interface number 1 [ 187.369397][ T820] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 187.369440][ T820] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 29743, setting to 64 [ 187.457892][ T820] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.457915][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.457929][ T820] usb 3-1: Product: syz [ 187.457939][ T820] usb 3-1: Manufacturer: syz [ 187.457950][ T820] usb 3-1: SerialNumber: syz [ 187.767304][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.770058][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.037956][ T1600] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 188.397187][ T1600] usb 1-1: device descriptor read/8, error -71 [ 188.461362][ T5862] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 188.461395][ T5862] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 188.967203][ T5862] viperboard 5-1:0.0: version 0.00 found at bus 005 address 011 [ 189.105293][ T5862] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 189.105327][ T5862] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 189.427971][ T6404] FAULT_INJECTION: forcing a failure. [ 189.427971][ T6404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.428008][ T6404] CPU: 1 UID: 0 PID: 6404 Comm: syz.0.176 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 189.428031][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 189.428044][ T6404] Call Trace: [ 189.428053][ T6404] [ 189.428062][ T6404] dump_stack_lvl+0xe8/0x150 [ 189.428103][ T6404] should_fail_ex+0x467/0x600 [ 189.428140][ T6404] _copy_from_user+0x2d/0xb0 [ 189.428165][ T6404] ___sys_sendmsg+0x1c6/0x360 [ 189.428190][ T6404] ? __lock_acquire+0x683/0x2ce0 [ 189.428217][ T6404] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.428277][ T6404] ? __fget_files+0x2a/0x420 [ 189.428299][ T6404] ? __fget_files+0x3a8/0x420 [ 189.428332][ T6404] __x64_sys_sendmsg+0x1b7/0x290 [ 189.428360][ T6404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.428429][ T6404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.428456][ T6404] do_syscall_64+0x174/0x580 [ 189.428489][ T6404] ? trace_irq_disable+0x3b/0x140 [ 189.428525][ T6404] ? clear_bhb_loop+0x40/0x90 [ 189.428553][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.428575][ T6404] RIP: 0033:0x7f2fad85de59 [ 189.428596][ T6404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.428613][ T6404] RSP: 002b:00007f2fabab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.428636][ T6404] RAX: ffffffffffffffda RBX: 00007f2fadae5fa0 RCX: 00007f2fad85de59 [ 189.428652][ T6404] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 189.428664][ T6404] RBP: 00007f2fabab6090 R08: 0000000000000000 R09: 0000000000000000 [ 189.428677][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.428689][ T6404] R13: 00007f2fadae6038 R14: 00007f2fadae5fa0 R15: 00007ffcfa097e58 [ 189.428722][ T6404] [ 189.906340][ T5862] usb 5-1: USB disconnect, device number 11 [ 190.349864][ T6413] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 191.013632][ T6417] tmpfs: Cannot enable quota on remount [ 191.343928][ C0] net_ratelimit: 7997 callbacks suppressed [ 191.343951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.344314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.344745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.345690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 191.348028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.348450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.348867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.349798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 191.350605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.350977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.519085][ T820] usb 3-1: USB disconnect, device number 6 [ 194.512590][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.512665][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.569470][ T6431] syz.4.182 (6431) used greatest stack depth: 19232 bytes left [ 196.354190][ C0] net_ratelimit: 7885 callbacks suppressed [ 196.354211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.354503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.354835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.355581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 196.356175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.356611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.356923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.357835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 196.358608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.358984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.399471][ T6481] netlink: 'syz.4.197': attribute type 10 has an invalid length. [ 198.399496][ T6481] netlink: 40 bytes leftover after parsing attributes in process `syz.4.197'. [ 198.399531][ T6481] veth0_to_bridge: entered promiscuous mode [ 198.399552][ T6481] veth0_to_bridge: entered allmulticast mode [ 198.400308][ T6481] bridge0: port 3(veth0_to_bridge) entered blocking state [ 198.400450][ T6481] bridge0: port 3(veth0_to_bridge) entered disabled state [ 198.403573][ T6481] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.405833][ T6481] bridge0: port 3(veth0_to_bridge) entered blocking state [ 198.405974][ T6481] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 199.814168][ T6486] FAULT_INJECTION: forcing a failure. [ 199.814168][ T6486] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 199.814206][ T6486] CPU: 1 UID: 0 PID: 6486 Comm: syz.2.199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 199.814229][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 199.814242][ T6486] Call Trace: [ 199.814250][ T6486] [ 199.814259][ T6486] dump_stack_lvl+0xe8/0x150 [ 199.814300][ T6486] should_fail_ex+0x467/0x600 [ 199.814338][ T6486] prepare_alloc_pages+0x223/0x690 [ 199.814370][ T6486] __alloc_frozen_pages_noprof+0x12f/0x380 [ 199.814401][ T6486] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 199.814430][ T6486] ? __pfx_policy_nodemask+0x10/0x10 [ 199.814453][ T6486] ? filemap_get_entry+0x374/0x3f0 [ 199.814482][ T6486] ? try_to_take_rt_mutex+0x842/0xb00 [ 199.814512][ T6486] ? __pfx_filemap_get_entry+0x10/0x10 [ 199.814539][ T6486] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 199.814571][ T6486] alloc_pages_mpol+0xce/0x280 [ 199.814602][ T6486] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 199.814632][ T6486] shmem_get_folio_gfp+0x6ee/0x1c40 [ 199.814666][ T6486] ? __lock_acquire+0x683/0x2ce0 [ 199.814714][ T6486] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 199.814767][ T6486] shmem_write_begin+0x166/0x320 [ 199.814795][ T6486] generic_perform_write+0x2ad/0x8b0 [ 199.814843][ T6486] ? __pfx_generic_perform_write+0x10/0x10 [ 199.814879][ T6486] ? rt_spin_unlock+0x163/0x200 [ 199.814905][ T6486] ? mnt_put_write_access_file+0xc6/0x100 [ 199.814936][ T6486] ? file_update_time_flags+0x406/0x4b0 [ 199.814967][ T6486] shmem_file_write_iter+0xfb/0x120 [ 199.814996][ T6486] do_iter_readv_writev+0x624/0x8d0 [ 199.815028][ T6486] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 199.815076][ T6486] vfs_writev+0x34c/0x990 [ 199.815113][ T6486] ? do_raw_spin_lock+0x12b/0x2f0 [ 199.815152][ T6486] ? __pfx_vfs_writev+0x10/0x10 [ 199.815202][ T6486] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 199.815242][ T6486] ? mutex_lock_nested+0x152/0x1d0 [ 199.815267][ T6486] ? fdget_pos+0x252/0x320 [ 199.815297][ T6486] do_writev+0x15a/0x2e0 [ 199.815330][ T6486] ? __pfx_do_writev+0x10/0x10 [ 199.815369][ T6486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.815394][ T6486] do_syscall_64+0x174/0x580 [ 199.815428][ T6486] ? trace_irq_disable+0x3b/0x140 [ 199.815463][ T6486] ? clear_bhb_loop+0x40/0x90 [ 199.815491][ T6486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.815513][ T6486] RIP: 0033:0x7f48f881de59 [ 199.815534][ T6486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.815552][ T6486] RSP: 002b:00007f48f6a55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 199.815575][ T6486] RAX: ffffffffffffffda RBX: 00007f48f8aa6090 RCX: 00007f48f881de59 [ 199.815591][ T6486] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000005 [ 199.815605][ T6486] RBP: 00007f48f6a55090 R08: 0000000000000000 R09: 0000000000000000 [ 199.815619][ T6486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.815632][ T6486] R13: 00007f48f8aa6128 R14: 00007f48f8aa6090 R15: 00007ffd870f9008 [ 199.815667][ T6486] [ 200.398965][ T6467] syz.3.191 (6467) used greatest stack depth: 16808 bytes left [ 201.363939][ C1] net_ratelimit: 11146 callbacks suppressed [ 201.363960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.364353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.364429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 201.364877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.365270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.365792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.366240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.366754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.366768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.367203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.554046][ T5862] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 203.705983][ T6505] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 204.739638][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 204.770303][ T5862] usb 3-1: device descriptor read/all, error -71 [ 206.229616][ T36] audit: type=1326 audit(1784139859.668:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.2.211" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 206.229673][ T36] audit: type=1326 audit(1784139859.678:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.2.211" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 206.229720][ T36] audit: type=1326 audit(1784139859.678:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.2.211" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 206.229767][ T36] audit: type=1326 audit(1784139859.678:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.2.211" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 206.229815][ T36] audit: type=1326 audit(1784139859.678:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.2.211" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 206.229862][ T36] audit: type=1326 audit(1784139859.678:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm=04 exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 206.229908][ T36] audit: type=1326 audit(1784139859.678:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm=04 exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 206.233392][ T36] audit: type=1326 audit(1784139859.678:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.2.211" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 206.233449][ T36] audit: type=1326 audit(1784139859.678:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm=04 exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 206.233495][ T36] audit: type=1326 audit(1784139859.678:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.2.211" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 206.374540][ C0] net_ratelimit: 13709 callbacks suppressed [ 206.374563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.375011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.375504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.376565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.378915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 206.379754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.381976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.383390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.408139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.408577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.872992][ T6532] netlink: 'syz.4.212': attribute type 10 has an invalid length. [ 206.873019][ T6532] netlink: 40 bytes leftover after parsing attributes in process `syz.4.212'. [ 209.640456][ T6551] FAULT_INJECTION: forcing a failure. [ 209.640456][ T6551] name failslab, interval 1, probability 0, space 0, times 0 [ 209.640491][ T6551] CPU: 1 UID: 0 PID: 6551 Comm: syz.1.218 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.640515][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 209.640528][ T6551] Call Trace: [ 209.640536][ T6551] [ 209.640545][ T6551] dump_stack_lvl+0xe8/0x150 [ 209.640584][ T6551] should_fail_ex+0x467/0x600 [ 209.640621][ T6551] should_failslab+0xa8/0x100 [ 209.640649][ T6551] __kmalloc_node_track_caller_noprof+0x102/0x7c0 [ 209.640676][ T6551] ? kasprintf+0xe2/0x140 [ 209.640699][ T6551] ? kasprintf+0xe2/0x140 [ 209.640730][ T6551] kvasprintf+0xeb/0x1a0 [ 209.640754][ T6551] ? __kernel_text_address+0xd/0x30 [ 209.640776][ T6551] ? __pfx_kvasprintf+0x10/0x10 [ 209.640815][ T6551] kasprintf+0xe2/0x140 [ 209.640847][ T6551] ? __pfx_kasprintf+0x10/0x10 [ 209.640872][ T6551] ? kstrtouint+0x6e/0xe0 [ 209.640912][ T6551] logfc+0x15b/0x520 [ 209.640948][ T6551] ? __pfx_logfc+0x10/0x10 [ 209.640970][ T6551] ? lookup_bdev+0xf8/0x290 [ 209.641001][ T6551] ? __pfx_lookup_bdev+0x10/0x10 [ 209.641040][ T6551] get_tree_bdev_flags+0x146/0x4f0 [ 209.641069][ T6551] ? __pfx_isofs_fill_super+0x10/0x10 [ 209.641110][ T6551] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 209.641136][ T6551] ? rcu_is_watching+0x15/0xb0 [ 209.641163][ T6551] ? cap_capable+0x123/0x460 [ 209.641184][ T6551] ? safesetid_security_capable+0xa9/0x1a0 [ 209.641214][ T6551] vfs_get_tree+0x92/0x2a0 [ 209.641245][ T6551] vfs_cmd_create+0xa2/0x200 [ 209.641278][ T6551] __se_sys_fsconfig+0x6bf/0x810 [ 209.641315][ T6551] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 209.641344][ T6551] ? ksys_write+0x248/0x270 [ 209.641380][ T6551] ? __pfx_ksys_write+0x10/0x10 [ 209.641413][ T6551] ? __x64_sys_fsconfig+0x20/0xc0 [ 209.641442][ T6551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.641470][ T6551] do_syscall_64+0x174/0x580 [ 209.641504][ T6551] ? trace_irq_disable+0x3b/0x140 [ 209.641539][ T6551] ? clear_bhb_loop+0x40/0x90 [ 209.641568][ T6551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.641591][ T6551] RIP: 0033:0x7f6d1e6fde59 [ 209.641612][ T6551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.641630][ T6551] RSP: 002b:00007f6d1c956028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 209.641653][ T6551] RAX: ffffffffffffffda RBX: 00007f6d1e985fa0 RCX: 00007f6d1e6fde59 [ 209.641668][ T6551] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 209.641680][ T6551] RBP: 00007f6d1c956090 R08: 0000000000000000 R09: 0000000000000000 [ 209.641692][ T6551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.641704][ T6551] R13: 00007f6d1e986038 R14: 00007f6d1e985fa0 R15: 00007ffe22f73d28 [ 209.641738][ T6551] [ 211.385274][ C0] net_ratelimit: 8382 callbacks suppressed [ 211.385296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.386283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 211.386633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.387629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.387792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.388044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.388188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.388543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.388605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.388964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.983897][ T5720] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 212.277922][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 212.277939][ T36] audit: type=1326 audit(1784139865.718:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm="syz.2.227" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 212.277990][ T36] audit: type=1326 audit(1784139865.728:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm="syz.2.227" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 212.280047][ T36] audit: type=1326 audit(1784139865.728:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm="syz.2.227" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 212.282963][ T36] audit: type=1326 audit(1784139865.728:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm="syz.2.227" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 212.283007][ T36] audit: type=1326 audit(1784139865.728:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm=04 exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 212.433901][ T36] audit: type=1326 audit(1784139865.728:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm="syz.2.227" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 212.433959][ T36] audit: type=1326 audit(1784139865.878:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm=04 exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 212.434926][ T36] audit: type=1326 audit(1784139865.888:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm="syz.2.227" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 212.434977][ T36] audit: type=1326 audit(1784139865.888:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm=04 exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 212.806352][ T36] audit: type=1326 audit(1784139865.888:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm="syz.2.227" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f881de59 code=0x7ffc0000 [ 213.016775][ T5720] usb 4-1: config 0 has no interfaces? [ 213.021790][ T5720] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 213.021821][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.021842][ T5720] usb 4-1: Product: syz [ 213.021857][ T5720] usb 4-1: Manufacturer: syz [ 213.021872][ T5720] usb 4-1: SerialNumber: syz [ 213.262690][ T6583] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 213.276225][ T6582] netlink: 'syz.0.229': attribute type 10 has an invalid length. [ 213.276244][ T6582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.229'. [ 213.403334][ T5720] usb 4-1: config 0 descriptor?? [ 213.748712][ T6571] FAULT_INJECTION: forcing a failure. [ 213.748712][ T6571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.748748][ T6571] CPU: 1 UID: 0 PID: 6571 Comm: syz.3.224 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 213.748773][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 213.748787][ T6571] Call Trace: [ 213.748795][ T6571] [ 213.748804][ T6571] dump_stack_lvl+0xe8/0x150 [ 213.748844][ T6571] should_fail_ex+0x467/0x600 [ 213.748883][ T6571] _copy_from_user+0x2d/0xb0 [ 213.748908][ T6571] __se_sys_migrate_pages+0x252/0xc90 [ 213.748941][ T6571] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 213.748964][ T6571] ? ksys_write+0x248/0x270 [ 213.748992][ T6571] ? __pfx_ksys_write+0x10/0x10 [ 213.749027][ T6571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.749051][ T6571] do_syscall_64+0x174/0x580 [ 213.749085][ T6571] ? trace_irq_disable+0x3b/0x140 [ 213.749121][ T6571] ? clear_bhb_loop+0x40/0x90 [ 213.749153][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.749175][ T6571] RIP: 0033:0x7f71b79ade59 [ 213.749195][ T6571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.749213][ T6571] RSP: 002b:00007f71b5c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 213.749236][ T6571] RAX: ffffffffffffffda RBX: 00007f71b7c35fa0 RCX: 00007f71b79ade59 [ 213.749252][ T6571] RDX: 0000200000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 213.749267][ T6571] RBP: 00007f71b5c06090 R08: 0000000000000000 R09: 0000000000000000 [ 213.749280][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.749293][ T6571] R13: 00007f71b7c36038 R14: 00007f71b7c35fa0 R15: 00007fff368eb9d8 [ 213.749327][ T6571] [ 214.021529][ T5720] usb 4-1: USB disconnect, device number 3 [ 214.222041][ T6589] netlink: 'syz.2.230': attribute type 1 has an invalid length. [ 214.533004][ T6593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.230'. [ 216.146702][ T6592] bond1: (slave geneve2): making interface the new active one [ 216.394102][ C1] net_ratelimit: 10911 callbacks suppressed [ 216.394125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.394158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.394584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.395042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.395208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.395580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.395637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.395936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.396078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.396409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.734193][ T6592] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 216.773845][ T6593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.775551][ T207] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.811894][ T207] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.823873][ T1190] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.823922][ T1190] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.831702][ T6616] FAULT_INJECTION: forcing a failure. [ 216.831702][ T6616] name failslab, interval 1, probability 0, space 0, times 0 [ 216.831737][ T6616] CPU: 0 UID: 0 PID: 6616 Comm: syz.4.238 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 216.831763][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 216.831776][ T6616] Call Trace: [ 216.831784][ T6616] [ 216.831794][ T6616] dump_stack_lvl+0xe8/0x150 [ 216.831832][ T6616] should_fail_ex+0x467/0x600 [ 216.831879][ T6616] should_failslab+0xa8/0x100 [ 216.831907][ T6616] __kmalloc_noprof+0xfe/0x780 [ 216.831927][ T6616] ? rcu_is_watching+0x15/0xb0 [ 216.831953][ T6616] ? tomoyo_realpath_from_path+0xef/0x640 [ 216.831980][ T6616] ? tomoyo_realpath_from_path+0xef/0x640 [ 216.832015][ T6616] tomoyo_realpath_from_path+0xef/0x640 [ 216.832053][ T6616] ? tomoyo_path_number_perm+0x219/0x5f0 [ 216.832090][ T6616] tomoyo_path_number_perm+0x246/0x5f0 [ 216.832131][ T6616] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 216.832165][ T6616] ? __lock_acquire+0x683/0x2ce0 [ 216.832203][ T6616] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 216.832235][ T6616] ? hook_file_ioctl+0x1f3/0x600 [ 216.832265][ T6616] ? lockdep_hardirqs_on+0x7a/0x110 [ 216.832316][ T6616] ? __fget_files+0x2a/0x420 [ 216.832342][ T6616] ? __fget_files+0x2a/0x420 [ 216.832362][ T6616] ? __fget_files+0x3a8/0x420 [ 216.832383][ T6616] ? __fget_files+0x2a/0x420 [ 216.832409][ T6616] security_file_ioctl+0xc3/0x2a0 [ 216.832433][ T6616] __se_sys_ioctl+0x47/0x170 [ 216.832460][ T6616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.832485][ T6616] do_syscall_64+0x174/0x580 [ 216.832519][ T6616] ? trace_irq_disable+0x3b/0x140 [ 216.832553][ T6616] ? clear_bhb_loop+0x40/0x90 [ 216.832579][ T6616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.832602][ T6616] RIP: 0033:0x7f2af675de59 [ 216.832623][ T6616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.832641][ T6616] RSP: 002b:00007f2af4995028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.832665][ T6616] RAX: ffffffffffffffda RBX: 00007f2af69e6090 RCX: 00007f2af675de59 [ 216.832680][ T6616] RDX: 00002000000001c0 RSI: 00000000c0844123 RDI: 0000000000000005 [ 216.832695][ T6616] RBP: 00007f2af4995090 R08: 0000000000000000 R09: 0000000000000000 [ 216.832708][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.832721][ T6616] R13: 00007f2af69e6128 R14: 00007f2af69e6090 R15: 00007ffcc2b78d18 [ 216.832756][ T6616] [ 216.832765][ T6616] ERROR: Out of memory at tomoyo_realpath_from_path. [ 217.871421][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 217.871441][ T36] audit: type=1326 audit(1784139871.318:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.1.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 217.879406][ T36] audit: type=1326 audit(1784139871.328:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.1.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 217.879459][ T36] audit: type=1326 audit(1784139871.328:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.1.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 217.920647][ T36] audit: type=1326 audit(1784139871.338:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.1.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 217.983993][ T36] audit: type=1326 audit(1784139871.398:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.1.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1e6fde59 code=0x7ffc0000 [ 218.019191][ T36] audit: type=1326 audit(1784139871.468:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.1.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d1e6fdbc2 code=0x7ffc0000 [ 218.069671][ T36] audit: type=1326 audit(1784139871.468:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.1.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6d1e6fdc57 code=0x7ffc0000 [ 218.069729][ T36] audit: type=1326 audit(1784139871.518:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.1.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6d1e6bab51 code=0x7ffc0000 [ 218.069778][ T36] audit: type=1326 audit(1784139871.518:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.1.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6d1e6fec49 code=0x7ffc0000 [ 218.116561][ T36] audit: type=1326 audit(1784139871.568:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.1.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6d1e6babbb code=0x7ffc0000 [ 219.773896][ T31] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 220.031068][ T31] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 220.031096][ T31] usb 2-1: config 0 has no interface number 0 [ 220.031141][ T31] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 220.031168][ T31] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 220.031194][ T31] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 220.033456][ T31] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 220.033484][ T31] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 220.033506][ T31] usb 2-1: Product: syz [ 220.033521][ T31] usb 2-1: SerialNumber: syz [ 220.223514][ T31] usb 2-1: config 0 descriptor?? [ 220.400299][ T31] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 220.598122][ T6647] fuse: Bad value for 'fd' [ 220.778985][ T31] usb 2-1: USB disconnect, device number 5 [ 221.404938][ C1] net_ratelimit: 9033 callbacks suppressed [ 221.404974][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.409858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.418908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.440565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.453650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.475638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.563867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.564219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.564556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.564904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.184571][ T5720] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 222.189290][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 222.190750][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 222.190789][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 222.191066][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 222.265909][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 223.162652][ T36] kauditd_printk_skb: 122 callbacks suppressed [ 223.162671][ T36] audit: type=1326 audit(1784139876.608:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.0.254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad85de59 code=0x7ffc0000 [ 223.162721][ T36] audit: type=1326 audit(1784139876.608:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.0.254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad85de59 code=0x7ffc0000 [ 223.162768][ T36] audit: type=1326 audit(1784139876.608:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.0.254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad85de59 code=0x7ffc0000 [ 223.163406][ T36] audit: type=1326 audit(1784139876.608:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.0.254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad85de59 code=0x7ffc0000 [ 223.163455][ T36] audit: type=1326 audit(1784139876.608:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.0.254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad85de59 code=0x7ffc0000 [ 223.163853][ T36] audit: type=1326 audit(1784139876.608:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.0.254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2fad85de59 code=0x7ffc0000 [ 223.165283][ T36] audit: type=1326 audit(1784139876.618:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm=04 exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad85de59 code=0x7ffc0000 [ 223.172662][ T36] audit: type=1326 audit(1784139876.618:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm=04 exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad85de59 code=0x7ffc0000 [ 223.172837][ T36] audit: type=1326 audit(1784139876.618:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.0.254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad85de59 code=0x7ffc0000 [ 223.183970][ T36] audit: type=1326 audit(1784139876.628:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.0.254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fad85de59 code=0x7ffc0000 [ 223.518699][ T5720] usb 2-1: Using ep0 maxpacket: 16 [ 224.239716][ T5720] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 224.239746][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.239765][ T5720] usb 2-1: Product: syz [ 224.239780][ T5720] usb 2-1: Manufacturer: syz [ 224.239803][ T5720] usb 2-1: SerialNumber: syz [ 225.010872][ T5720] usb 2-1: config 0 descriptor?? [ 225.035865][ T5720] usb 2-1: can't set config #0, error -71 [ 225.125621][ T5720] usb 2-1: USB disconnect, device number 6 [ 225.142147][ T1600] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 225.307355][ T1600] usb 3-1: config 0 has no interfaces? [ 225.307395][ T1600] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 225.307419][ T1600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.480016][ T1600] usb 3-1: config 0 descriptor?? [ 225.836051][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.908448][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.949421][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.950050][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.036220][ T820] usb 3-1: USB disconnect, device number 9 [ 226.415647][ C0] net_ratelimit: 6554 callbacks suppressed [ 226.415667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 226.415707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.416009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.416180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.416504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.416898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.416947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.417343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.417827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.418262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.468905][ T6688] fuse: Unknown parameter 'user_id00000000000000000000' [ 226.936160][ T6690] FAULT_INJECTION: forcing a failure. [ 226.936160][ T6690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.936195][ T6690] CPU: 1 UID: 0 PID: 6690 Comm: syz.0.260 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 226.936219][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 226.936231][ T6690] Call Trace: [ 226.936239][ T6690] [ 226.936248][ T6690] dump_stack_lvl+0xe8/0x150 [ 226.936300][ T6690] should_fail_ex+0x467/0x600 [ 226.936339][ T6690] _copy_to_user+0x31/0xb0 [ 226.936366][ T6690] simple_read_from_buffer+0xe1/0x170 [ 226.936395][ T6690] proc_fail_nth_read+0x1be/0x230 [ 226.936422][ T6690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.936448][ T6690] ? rw_verify_area+0x250/0x4d0 [ 226.936476][ T6690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.936498][ T6690] vfs_read+0x219/0xa90 [ 226.936533][ T6690] ? __pfx_vfs_read+0x10/0x10 [ 226.936561][ T6690] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 226.936595][ T6690] ? lockdep_hardirqs_on+0x7a/0x110 [ 226.936629][ T6690] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 226.936661][ T6690] ? mutex_lock_nested+0x152/0x1d0 [ 226.936686][ T6690] ? fdget_pos+0x252/0x320 [ 226.936717][ T6690] ksys_read+0x156/0x270 [ 226.936746][ T6690] ? __pfx_ksys_read+0x10/0x10 [ 226.936782][ T6690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.936807][ T6690] do_syscall_64+0x174/0x580 [ 226.936840][ T6690] ? trace_irq_disable+0x3b/0x140 [ 226.936874][ T6690] ? clear_bhb_loop+0x40/0x90 [ 226.936902][ T6690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.936925][ T6690] RIP: 0033:0x7f2fad81e68e [ 226.936945][ T6690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 226.936963][ T6690] RSP: 002b:00007f2faba94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.936985][ T6690] RAX: ffffffffffffffda RBX: 00007f2faba956c0 RCX: 00007f2fad81e68e [ 226.937001][ T6690] RDX: 000000000000000f RSI: 00007f2faba950a0 RDI: 0000000000000005 [ 226.937015][ T6690] RBP: 00007f2faba95090 R08: 0000000000000000 R09: 0000000000000000 [ 226.937028][ T6690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.937041][ T6690] R13: 00007f2fadae6128 R14: 00007f2fadae6090 R15: 00007ffcfa097e58 [ 226.937076][ T6690] [ 227.941420][ T6698] syz.4.265 uses obsolete (PF_INET,SOCK_PACKET) [ 228.461900][ T6692] Bluetooth: MGMT ver 1.23 [ 228.741043][ T6704] capability: warning: `syz.3.266' uses deprecated v2 capabilities in a way that may be insecure [ 228.819179][ T6701] capability: warning: `syz.4.265' uses 32-bit capabilities (legacy support in use) [ 229.120006][ T6708] FAULT_INJECTION: forcing a failure. [ 229.120006][ T6708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.120041][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.1.269 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.120067][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 229.120080][ T6708] Call Trace: [ 229.120088][ T6708] [ 229.120097][ T6708] dump_stack_lvl+0xe8/0x150 [ 229.120140][ T6708] should_fail_ex+0x467/0x600 [ 229.120180][ T6708] _copy_from_user+0x2d/0xb0 [ 229.120205][ T6708] ___sys_sendmsg+0x1c6/0x360 [ 229.120228][ T6708] ? __lock_acquire+0x683/0x2ce0 [ 229.120256][ T6708] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.120316][ T6708] ? __fget_files+0x2a/0x420 [ 229.120337][ T6708] ? __fget_files+0x3a8/0x420 [ 229.120369][ T6708] __x64_sys_sendmsg+0x1b7/0x290 [ 229.120396][ T6708] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.120439][ T6708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.120463][ T6708] do_syscall_64+0x174/0x580 [ 229.120497][ T6708] ? trace_irq_disable+0x3b/0x140 [ 229.120531][ T6708] ? clear_bhb_loop+0x40/0x90 [ 229.120558][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.120581][ T6708] RIP: 0033:0x7f6d1e6fde59 [ 229.120601][ T6708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.120620][ T6708] RSP: 002b:00007f6d1c956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.120642][ T6708] RAX: ffffffffffffffda RBX: 00007f6d1e985fa0 RCX: 00007f6d1e6fde59 [ 229.120657][ T6708] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 229.120670][ T6708] RBP: 00007f6d1c956090 R08: 0000000000000000 R09: 0000000000000000 [ 229.120683][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.120694][ T6708] R13: 00007f6d1e986038 R14: 00007f6d1e985fa0 R15: 00007ffe22f73d28 [ 229.120727][ T6708] [ 229.333922][ T5614] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 229.475057][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 229.593887][ T5614] usb 4-1: device descriptor read/64, error -71 [ 229.984113][ T5614] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 230.018373][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 230.030666][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 230.030696][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.030715][ T31] usb 3-1: Product: syz [ 230.030728][ T31] usb 3-1: Manufacturer: syz [ 230.030740][ T31] usb 3-1: SerialNumber: syz [ 230.122802][ T31] usb 3-1: config 0 descriptor?? [ 230.135302][ T31] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 230.183848][ T5614] usb 4-1: device descriptor read/64, error -71 [ 230.733895][ T31] usb 3-1: clie_3_5_startup: get config number failed: -32 [ 230.734068][ T31] visor 3-1:0.0: probe with driver visor failed with error -32 [ 230.759773][ T5614] usb usb4-port1: attempt power cycle [ 230.996829][ T6718] fuse: Unknown parameter 'user_id00000000000000000000' [ 231.105831][ T6716] FAULT_INJECTION: forcing a failure. [ 231.105831][ T6716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.105859][ T6716] CPU: 0 UID: 0 PID: 6716 Comm: syz.1.271 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 231.105878][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 231.105887][ T6716] Call Trace: [ 231.105893][ T6716] [ 231.105900][ T6716] dump_stack_lvl+0xe8/0x150 [ 231.105929][ T6716] should_fail_ex+0x467/0x600 [ 231.105957][ T6716] _copy_from_user+0x2d/0xb0 [ 231.105975][ T6716] __sys_sendto+0x2b5/0x5d0 [ 231.106006][ T6716] ? __pfx___sys_sendto+0x10/0x10 [ 231.106049][ T6716] ? __pfx_ksys_write+0x10/0x10 [ 231.106073][ T6716] __x64_sys_sendto+0xde/0x100 [ 231.106098][ T6716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.106115][ T6716] do_syscall_64+0x174/0x580 [ 231.106139][ T6716] ? trace_irq_disable+0x3b/0x140 [ 231.106164][ T6716] ? clear_bhb_loop+0x40/0x90 [ 231.106184][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.106199][ T6716] RIP: 0033:0x7f6d1e6fde59 [ 231.106213][ T6716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.106225][ T6716] RSP: 002b:00007f6d1c956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 231.106248][ T6716] RAX: ffffffffffffffda RBX: 00007f6d1e985fa0 RCX: 00007f6d1e6fde59 [ 231.106260][ T6716] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 231.106269][ T6716] RBP: 00007f6d1c956090 R08: 000020000005ffe4 R09: 000000000000001c [ 231.106280][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.106289][ T6716] R13: 00007f6d1e986038 R14: 00007f6d1e985fa0 R15: 00007ffe22f73d28 [ 231.106312][ T6716] [ 231.423834][ C0] net_ratelimit: 9262 callbacks suppressed [ 231.423851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.424124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.424413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.424675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.425275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 231.425488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.426059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.426321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.426754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.427493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.523861][ T5614] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 231.824369][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 231.903078][ T5614] usb 4-1: device descriptor read/8, error -71 [ 232.421124][ T31] usb 5-1: config 0 has no interfaces? [ 232.421152][ T31] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 232.421170][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.532906][ T31] usb 5-1: config 0 descriptor?? [ 232.780944][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.781612][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.805480][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.827122][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.854858][ T5733] usb 5-1: USB disconnect, device number 12 [ 233.640907][ T5733] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 234.014304][ T5858] usb 3-1: USB disconnect, device number 10 [ 234.222273][ T5733] usb 5-1: Using ep0 maxpacket: 8 [ 234.936944][ T6738] FAULT_INJECTION: forcing a failure. [ 234.936944][ T6738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.936981][ T6738] CPU: 0 UID: 0 PID: 6738 Comm: syz.3.280 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 234.937007][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 234.937020][ T6738] Call Trace: [ 234.937028][ T6738] [ 234.937038][ T6738] dump_stack_lvl+0xe8/0x150 [ 234.937077][ T6738] should_fail_ex+0x467/0x600 [ 234.937115][ T6738] _copy_from_user+0x2d/0xb0 [ 234.937150][ T6738] ___sys_sendmsg+0x1c6/0x360 [ 234.937176][ T6738] ? __lock_acquire+0x683/0x2ce0 [ 234.937203][ T6738] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.937263][ T6738] ? __fget_files+0x2a/0x420 [ 234.937284][ T6738] ? __fget_files+0x3a8/0x420 [ 234.937317][ T6738] __x64_sys_sendmsg+0x1b7/0x290 [ 234.937345][ T6738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.937387][ T6738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.937412][ T6738] do_syscall_64+0x174/0x580 [ 234.937444][ T6738] ? trace_irq_disable+0x3b/0x140 [ 234.937480][ T6738] ? clear_bhb_loop+0x40/0x90 [ 234.937508][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.937531][ T6738] RIP: 0033:0x7f71b79ade59 [ 234.937551][ T6738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.937570][ T6738] RSP: 002b:00007f71b5c06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.937593][ T6738] RAX: ffffffffffffffda RBX: 00007f71b7c35fa0 RCX: 00007f71b79ade59 [ 234.937609][ T6738] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 234.937622][ T6738] RBP: 00007f71b5c06090 R08: 0000000000000000 R09: 0000000000000000 [ 234.937636][ T6738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.937649][ T6738] R13: 00007f71b7c36038 R14: 00007f71b7c35fa0 R15: 00007fff368eb9d8 [ 234.937689][ T6738] [ 235.810684][ T5733] usb 5-1: string descriptor 0 read error: -71 [ 235.810836][ T5733] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 235.810860][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.844736][ T5733] usb 5-1: config 0 descriptor?? [ 235.845852][ T5733] usb 5-1: can't set config #0, error -71 [ 235.866559][ T5733] usb 5-1: USB disconnect, device number 13 [ 236.129543][ T6746] FAULT_INJECTION: forcing a failure. [ 236.129543][ T6746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.129591][ T6746] CPU: 1 UID: 0 PID: 6746 Comm: syz.0.282 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 236.129625][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 236.129644][ T6746] Call Trace: [ 236.129653][ T6746] [ 236.129663][ T6746] dump_stack_lvl+0xe8/0x150 [ 236.129712][ T6746] should_fail_ex+0x467/0x600 [ 236.129750][ T6746] _copy_from_user+0x2d/0xb0 [ 236.129775][ T6746] ___sys_sendmsg+0x1c6/0x360 [ 236.129798][ T6746] ? __lock_acquire+0x683/0x2ce0 [ 236.129825][ T6746] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.129885][ T6746] ? __fget_files+0x2a/0x420 [ 236.129932][ T6746] ? __fget_files+0x3a8/0x420 [ 236.129971][ T6746] __x64_sys_sendmsg+0x1b7/0x290 [ 236.130006][ T6746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.130048][ T6746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.130073][ T6746] do_syscall_64+0x174/0x580 [ 236.130107][ T6746] ? trace_irq_disable+0x3b/0x140 [ 236.130139][ T6746] ? clear_bhb_loop+0x40/0x90 [ 236.130166][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.130189][ T6746] RIP: 0033:0x7f2fad85de59 [ 236.130210][ T6746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.130228][ T6746] RSP: 002b:00007f2fabab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.130251][ T6746] RAX: ffffffffffffffda RBX: 00007f2fadae5fa0 RCX: 00007f2fad85de59 [ 236.130266][ T6746] RDX: 0000000008000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 236.130280][ T6746] RBP: 00007f2fabab6090 R08: 0000000000000000 R09: 0000000000000000 [ 236.130293][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.130309][ T6746] R13: 00007f2fadae6038 R14: 00007f2fadae5fa0 R15: 00007ffcfa097e58 [ 236.130342][ T6746] [ 236.436604][ C1] net_ratelimit: 8158 callbacks suppressed [ 236.436627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.436905][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.437234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.439627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.439986][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.442196][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.442649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.470560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.474508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.477334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 236.889016][ T6753] overlay: Unknown parameter 'O˜éé9*€æ' [ 237.402108][ T6114] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 238.138333][ T6114] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.262272][ T6114] usb 2-1: not running at top speed; connect to a high speed hub [ 238.266935][ T6114] usb 2-1: config 14 has too many interfaces: 65, using maximum allowed: 32 [ 238.267061][ T6114] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 238.267154][ T6114] usb 2-1: config 14 has 1 interface, different from the descriptor's value: 65 [ 238.313624][ T6114] usb 2-1: New USB device found, idVendor=a168, idProduct=0617, bcdDevice=40.3f [ 238.313663][ T6114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.313687][ T6114] usb 2-1: SerialNumber: syz [ 238.563926][ T5733] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 238.835102][ T6114] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0617 [ 238.849195][ T6114] gspca_sn9c20x: Write register 1000 failed -71 [ 238.849232][ T6114] gspca_sn9c20x: Device initialization failed [ 238.849405][ T6114] gspca_sn9c20x 2-1:14.0: probe with driver gspca_sn9c20x failed with error -71 [ 238.983871][ T5733] usb 1-1: Using ep0 maxpacket: 16 [ 239.009317][ T5733] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 239.009347][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.009367][ T5733] usb 1-1: Product: syz [ 239.009382][ T5733] usb 1-1: Manufacturer: syz [ 239.009397][ T5733] usb 1-1: SerialNumber: syz [ 239.054209][ T6114] usb 2-1: USB disconnect, device number 7 [ 239.069379][ T6779] FAULT_INJECTION: forcing a failure. [ 239.069379][ T6779] name failslab, interval 1, probability 0, space 0, times 0 [ 239.069412][ T6779] CPU: 1 UID: 0 PID: 6779 Comm: syz.4.295 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 239.069436][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 239.069449][ T6779] Call Trace: [ 239.069457][ T6779] [ 239.069467][ T6779] dump_stack_lvl+0xe8/0x150 [ 239.069505][ T6779] should_fail_ex+0x467/0x600 [ 239.069546][ T6779] should_failslab+0xa8/0x100 [ 239.069574][ T6779] __kmalloc_noprof+0xfe/0x780 [ 239.069595][ T6779] ? rcu_is_watching+0x15/0xb0 [ 239.069623][ T6779] ? tomoyo_realpath_from_path+0xef/0x640 [ 239.069657][ T6779] ? tomoyo_realpath_from_path+0xef/0x640 [ 239.069693][ T6779] tomoyo_realpath_from_path+0xef/0x640 [ 239.069733][ T6779] ? tomoyo_path_number_perm+0x219/0x5f0 [ 239.069769][ T6779] tomoyo_path_number_perm+0x246/0x5f0 [ 239.069818][ T6779] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 239.069853][ T6779] ? __lock_acquire+0x683/0x2ce0 [ 239.069893][ T6779] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 239.069926][ T6779] ? hook_file_ioctl+0x1f3/0x600 [ 239.069956][ T6779] ? lockdep_hardirqs_on+0x7a/0x110 [ 239.070011][ T6779] ? __fget_files+0x2a/0x420 [ 239.070036][ T6779] ? __fget_files+0x2a/0x420 [ 239.070056][ T6779] ? __fget_files+0x3a8/0x420 [ 239.070076][ T6779] ? __fget_files+0x2a/0x420 [ 239.070103][ T6779] security_file_ioctl+0xc3/0x2a0 [ 239.070130][ T6779] __se_sys_ioctl+0x47/0x170 [ 239.070164][ T6779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.070188][ T6779] do_syscall_64+0x174/0x580 [ 239.070222][ T6779] ? trace_irq_disable+0x3b/0x140 [ 239.070258][ T6779] ? clear_bhb_loop+0x40/0x90 [ 239.070286][ T6779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.070309][ T6779] RIP: 0033:0x7f2af675de59 [ 239.070331][ T6779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.070350][ T6779] RSP: 002b:00007f2af4995028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.070372][ T6779] RAX: ffffffffffffffda RBX: 00007f2af69e6090 RCX: 00007f2af675de59 [ 239.070388][ T6779] RDX: 00002000000004c0 RSI: 0000000000003b85 RDI: 0000000000000003 [ 239.070401][ T6779] RBP: 00007f2af4995090 R08: 0000000000000000 R09: 0000000000000000 [ 239.070414][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.070426][ T6779] R13: 00007f2af69e6128 R14: 00007f2af69e6090 R15: 00007ffcc2b78d18 [ 239.070461][ T6779] [ 239.070720][ T6779] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.107025][ T5733] usb 1-1: config 0 descriptor?? [ 239.152576][ T5733] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 239.485352][ T5733] usb 1-1: clie_3_5_startup: get config number failed: -32 [ 239.485842][ T5733] visor 1-1:0.0: probe with driver visor failed with error -32 [ 239.968139][ T5720] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 240.153904][ T5733] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 240.236948][ T5720] usb 3-1: config 0 has no interfaces? [ 240.236989][ T5720] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 240.237014][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.278667][ T5720] usb 3-1: config 0 descriptor?? [ 240.309333][ T5733] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 240.309365][ T5733] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 240.309383][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.436426][ T5733] usb 4-1: config 0 descriptor?? [ 240.520557][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.532397][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.558954][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.559396][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.678463][ T5733] usb 3-1: USB disconnect, device number 11 [ 241.448965][ C0] net_ratelimit: 6801 callbacks suppressed [ 241.448988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 241.449303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c3:0c:34:c2:90, vlan:0) [ 241.449334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.449626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.456155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.471542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.471940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.472264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.472348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.472742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.733859][ T5614] usb 1-1: USB disconnect, device number 13 [ 241.973911][ T5733] usb 4-1: USB disconnect, device number 8 [ 242.520383][ T6810] FAULT_INJECTION: forcing a failure. [ 242.520383][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 242.520428][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.3.304 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 242.520453][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 242.520466][ T6810] Call Trace: [ 242.520475][ T6810] [ 242.520484][ T6810] dump_stack_lvl+0xe8/0x150 [ 242.520524][ T6810] should_fail_ex+0x467/0x600 [ 242.520561][ T6810] should_failslab+0xa8/0x100 [ 242.520588][ T6810] kmem_cache_alloc_noprof+0xa4/0x650 [ 242.520623][ T6810] ? do_getname+0x2e/0x250 [ 242.520654][ T6810] ? do_getname+0x2e/0x250 [ 242.520692][ T6810] do_getname+0x2e/0x250 [ 242.520723][ T6810] ? user_path_at+0x1e/0x160 [ 242.520750][ T6810] user_path_at+0x2a/0x160 [ 242.520777][ T6810] __x64_sys_umount+0xf6/0x170 [ 242.520810][ T6810] ? __pfx___x64_sys_umount+0x10/0x10 [ 242.520852][ T6810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.520879][ T6810] do_syscall_64+0x174/0x580 [ 242.520916][ T6810] ? clear_bhb_loop+0x40/0x90 [ 242.520944][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.520967][ T6810] RIP: 0033:0x7f71b79ade59 [ 242.520987][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.521006][ T6810] RSP: 002b:00007f71b5c06028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 242.521028][ T6810] RAX: ffffffffffffffda RBX: 00007f71b7c35fa0 RCX: 00007f71b79ade59 [ 242.521043][ T6810] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000001880 [ 242.521056][ T6810] RBP: 00007f71b5c06090 R08: 0000000000000000 R09: 0000000000000000 [ 242.521069][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.521080][ T6810] R13: 00007f71b7c36038 R14: 00007f71b7c35fa0 R15: 00007fff368eb9d8 [ 242.521113][ T6810] [ 243.203101][ T6813] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 243.203171][ T6813] overlayfs: overlapping lowerdir path [ 245.431259][ T6825] forcing mempool usage for bio_alloc_bioset+0x631/0xc80 [ 246.454095][ C1] net_ratelimit: 7843 callbacks suppressed [ 246.454119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.454528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.454719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.454927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.455110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.455392][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.455505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.455820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c3:0c:34:c2:90, vlan:0) [ 246.455903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.456140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.885429][ T5733] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 247.243936][ T5733] usb 1-1: Using ep0 maxpacket: 16 [ 247.298304][ T5733] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 247.298336][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.298355][ T5733] usb 1-1: Product: syz [ 247.298370][ T5733] usb 1-1: Manufacturer: syz [ 247.298385][ T5733] usb 1-1: SerialNumber: syz [ 247.315871][ T6836] FAULT_INJECTION: forcing a failure. [ 247.315871][ T6836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.315971][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: syz.4.314 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 247.316036][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 247.316081][ T6836] Call Trace: [ 247.316109][ T6836] [ 247.316138][ T6836] dump_stack_lvl+0xe8/0x150 [ 247.316259][ T6836] should_fail_ex+0x467/0x600 [ 247.316365][ T6836] _copy_from_user+0x2d/0xb0 [ 247.316430][ T6836] __sys_connect+0x155/0x470 [ 247.316526][ T6836] ? __pfx___sys_connect+0x10/0x10 [ 247.316679][ T6836] ? __pfx_ksys_write+0x10/0x10 [ 247.316779][ T6836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.316844][ T6836] __x64_sys_connect+0x7a/0x90 [ 247.316930][ T6836] do_syscall_64+0x174/0x580 [ 247.317045][ T6836] ? trace_irq_disable+0x3b/0x140 [ 247.317433][ T6836] ? clear_bhb_loop+0x40/0x90 [ 247.317497][ T6836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.317522][ T6836] RIP: 0033:0x7f2af675de59 [ 247.317545][ T6836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.317564][ T6836] RSP: 002b:00007f2af4974028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 247.317588][ T6836] RAX: ffffffffffffffda RBX: 00007f2af69e6180 RCX: 00007f2af675de59 [ 247.317623][ T6836] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 247.317637][ T6836] RBP: 00007f2af4974090 R08: 0000000000000000 R09: 0000000000000000 [ 247.317651][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.317673][ T6836] R13: 00007f2af69e6218 R14: 00007f2af69e6180 R15: 00007ffcc2b78d18 [ 247.317725][ T6836] [ 247.455638][ T5733] usb 1-1: config 0 descriptor?? [ 247.592790][ T6838] netlink: 'syz.1.315': attribute type 1 has an invalid length. [ 247.605254][ T5733] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 247.677332][ T5733] usb 1-1: clie_3_5_startup: get config number failed: -32 [ 247.677500][ T5733] visor 1-1:0.0: probe with driver visor failed with error -32 [ 247.846136][ T6841] FAULT_INJECTION: forcing a failure. [ 247.846136][ T6841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.846181][ T6841] CPU: 0 UID: 0 PID: 6841 Comm: syz.4.316 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 247.846206][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 247.846220][ T6841] Call Trace: [ 247.846228][ T6841] [ 247.846237][ T6841] dump_stack_lvl+0xe8/0x150 [ 247.846279][ T6841] should_fail_ex+0x467/0x600 [ 247.846318][ T6841] _copy_from_user+0x2d/0xb0 [ 247.846344][ T6841] ___sys_sendmsg+0x1c6/0x360 [ 247.846367][ T6841] ? __lock_acquire+0x683/0x2ce0 [ 247.846407][ T6841] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.846472][ T6841] ? __fget_files+0x2a/0x420 [ 247.846492][ T6841] ? __fget_files+0x3a8/0x420 [ 247.846525][ T6841] __x64_sys_sendmsg+0x1b7/0x290 [ 247.846552][ T6841] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.846601][ T6841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.846634][ T6841] do_syscall_64+0x174/0x580 [ 247.846673][ T6841] ? trace_irq_disable+0x3b/0x140 [ 247.846709][ T6841] ? clear_bhb_loop+0x40/0x90 [ 247.846735][ T6841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.846759][ T6841] RIP: 0033:0x7f2af675de59 [ 247.846780][ T6841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.846799][ T6841] RSP: 002b:00007f2af49b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.846821][ T6841] RAX: ffffffffffffffda RBX: 00007f2af69e5fa0 RCX: 00007f2af675de59 [ 247.846838][ T6841] RDX: 0000000000040084 RSI: 0000200000000040 RDI: 0000000000000003 [ 247.846852][ T6841] RBP: 00007f2af49b6090 R08: 0000000000000000 R09: 0000000000000000 [ 247.846867][ T6841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.846880][ T6841] R13: 00007f2af69e6038 R14: 00007f2af69e5fa0 R15: 00007ffcc2b78d18 [ 247.846915][ T6841] [ 251.464098][ C0] net_ratelimit: 8595 callbacks suppressed [ 251.464119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.464396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.464685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.464990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.466535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 251.466852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c3:0c:34:c2:90, vlan:0) [ 251.467147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:be:06:56:97:4e:6d, vlan:0) [ 251.467421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.468800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:92:c3:0c:34:c2:90, vlan:0) [ 251.469018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.871176][ T10] usb 1-1: USB disconnect, device number 14 [ 253.330974][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.366970][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.409974][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.534268][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.535639][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.680805][ T6874] FAULT_INJECTION: forcing a failure. [ 253.680805][ T6874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.680842][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 253.680870][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 253.680883][ T6874] Call Trace: [ 253.680892][ T6874] [ 253.680902][ T6874] dump_stack_lvl+0xe8/0x150 [ 253.680948][ T6874] should_fail_ex+0x467/0x600 [ 253.680987][ T6874] _copy_to_user+0x31/0xb0 [ 253.681014][ T6874] simple_read_from_buffer+0xe1/0x170 [ 253.681043][ T6874] proc_fail_nth_read+0x1be/0x230 [ 253.681069][ T6874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.681095][ T6874] ? rw_verify_area+0x250/0x4d0 [ 253.681124][ T6874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.681147][ T6874] vfs_read+0x219/0xa90 [ 253.681182][ T6874] ? __pfx_vfs_read+0x10/0x10 [ 253.681210][ T6874] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 253.681247][ T6874] ? lockdep_hardirqs_on+0x7a/0x110 [ 253.681280][ T6874] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 253.681314][ T6874] ? mutex_lock_nested+0x152/0x1d0 [ 253.681340][ T6874] ? fdget_pos+0x252/0x320 [ 253.681373][ T6874] ksys_read+0x156/0x270 [ 253.681402][ T6874] ? __pfx_ksys_read+0x10/0x10 [ 253.681438][ T6874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.681463][ T6874] do_syscall_64+0x174/0x580 [ 253.681497][ T6874] ? trace_irq_disable+0x3b/0x140 [ 253.681533][ T6874] ? clear_bhb_loop+0x40/0x90 [ 253.681561][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.681585][ T6874] RIP: 0033:0x7f2af671e68e [ 253.681605][ T6874] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.681631][ T6874] RSP: 002b:00007f2af4994fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.681655][ T6874] RAX: ffffffffffffffda RBX: 00007f2af49956c0 RCX: 00007f2af671e68e [ 253.681671][ T6874] RDX: 000000000000000f RSI: 00007f2af49950a0 RDI: 0000000000000004 [ 253.681685][ T6874] RBP: 00007f2af4995090 R08: 0000000000000000 R09: 0000000000000000 [ 253.681698][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.681710][ T6874] R13: 00007f2af69e6128 R14: 00007f2af69e6090 R15: 00007ffcc2b78d18 [ 253.681753][ T6874] [ 254.434328][ T6882] netlink: 52 bytes leftover after parsing attributes in process `syz.1.330'. [ 254.434379][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 254.834046][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 255.088459][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 64 [ 255.088501][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.088542][ T10] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 255.088564][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.160332][ T10] usb 2-1: config 0 descriptor?? [ 255.166433][ T6882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.532636][ T1434] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.532675][ T1434] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.698555][ T5617] Bluetooth: hci2: command tx timeout [ 256.188186][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.202042][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.414078][ T820] 1024-page vmalloc region starting at 0xffffc9000751a000 allocated at kcov_ioctl+0x58/0x650 [ 256.414132][ T820] list_del corruption. next->prev should be ffffc9001b67c000, but was 0000000000000000. (next=ffffc9000751a000) [ 256.414964][ T820] ------------[ cut here ]------------ [ 256.414974][ T820] kernel BUG at lib/list_debug.c:67! [ 256.415016][ T820] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 256.415043][ T820] CPU: 0 UID: 0 PID: 820 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 256.415068][ T820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 256.415083][ T820] Workqueue: usb_hub_wq hub_event [ 256.415122][ T820] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 256.415160][ T820] Code: ac fd 40 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 0d 5e 61 fd 49 8b 56 08 48 c7 c7 c0 68 ca 8b 48 89 de 4c 89 f1 e8 27 20 5a fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 256.415179][ T820] RSP: 0018:ffffc900057cf7b8 EFLAGS: 00010246 [ 256.415197][ T820] RAX: 000000000000006d RBX: ffffc9001b67c000 RCX: 15e5748384b6d600 [ 256.415212][ T820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.415225][ T820] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 256.415237][ T820] R10: dffffc0000000000 R11: ffffed10170c4903 R12: 1ffff92000ea3401 [ 256.415253][ T820] R13: dffffc0000000000 R14: ffffc9000751a000 R15: ffffc9000751a008 [ 256.415267][ T820] FS: 0000000000000000(0000) GS:ffff888125c49000(0000) knlGS:0000000000000000 [ 256.415282][ T820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.415295][ T820] CR2: 0000001b33413ff8 CR3: 000000005b762000 CR4: 00000000003526f0 [ 256.415314][ T820] Call Trace: [ 256.415322][ T820] [ 256.415333][ T820] kcov_remote_start+0x295/0x6f0 [ 256.415378][ T820] hub_event+0x15d/0x4cf0 [ 256.415411][ T820] ? rt_spin_unlock+0x163/0x200 [ 256.415439][ T820] ? __lock_acquire+0x683/0x2ce0 [ 256.415463][ T820] ? register_lock_class+0x31/0x2e0 [ 256.415485][ T820] ? __lock_acquire+0x683/0x2ce0 [ 256.415512][ T820] ? do_raw_spin_lock+0x12b/0x2f0 [ 256.415551][ T820] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 256.415583][ T820] ? __pfx_hub_event+0x10/0x10 [ 256.415616][ T820] ? process_scheduled_works+0xa20/0x14e0 [ 256.415644][ T820] ? rcu_is_watching+0x15/0xb0 [ 256.415671][ T820] ? process_scheduled_works+0xa20/0x14e0 [ 256.415696][ T820] process_scheduled_works+0xa8e/0x14e0 [ 256.415735][ T820] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.415762][ T820] ? assign_work+0x3cf/0x5d0 [ 256.415789][ T820] worker_thread+0xa47/0xfb0 [ 256.415828][ T820] kthread+0x388/0x470 [ 256.415860][ T820] ? __pfx_worker_thread+0x10/0x10 [ 256.415884][ T820] ? __pfx_kthread+0x10/0x10 [ 256.415916][ T820] ret_from_fork+0x514/0xb70 [ 256.415951][ T820] ? __pfx_ret_from_fork+0x10/0x10 [ 256.415984][ T820] ? __switch_to+0xc89/0x1420 [ 256.416013][ T820] ? __pfx_kthread+0x10/0x10 [ 256.416045][ T820] ret_from_fork_asm+0x1a/0x30 [ 256.416074][ T820] [ 256.416082][ T820] Modules linked in: [ 256.416104][ T820] ---[ end trace 0000000000000000 ]--- [ 256.416125][ T820] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 256.416163][ T820] Code: ac fd 40 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 0d 5e 61 fd 49 8b 56 08 48 c7 c7 c0 68 ca 8b 48 89 de 4c 89 f1 e8 27 20 5a fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 256.416182][ T820] RSP: 0018:ffffc900057cf7b8 EFLAGS: 00010246 [ 256.416201][ T820] RAX: 000000000000006d RBX: ffffc9001b67c000 RCX: 15e5748384b6d600 [ 256.416216][ T820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.416228][ T820] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 256.416241][ T820] R10: dffffc0000000000 R11: ffffed10170c4903 R12: 1ffff92000ea3401 [ 256.416256][ T820] R13: dffffc0000000000 R14: ffffc9000751a000 R15: ffffc9000751a008 [ 256.416273][ T820] FS: 0000000000000000(0000) GS:ffff888125c49000(0000) knlGS:0000000000000000 [ 256.416290][ T820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.416304][ T820] CR2: 0000001b33413ff8 CR3: 000000005b762000 CR4: 00000000003526f0 [ 256.416325][ T820] Kernel panic - not syncing: Fatal exception [ 256.416501][ T820] Kernel Offset: disabled