last executing test programs: 13.849531301s ago: executing program 0 (id=421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12.627590869s ago: executing program 0 (id=423): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x3, 0x2000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 12.572762815s ago: executing program 1 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000800)={@in6={{0xa, 0x4, 0x8, @empty, 0x8}}, 0x0, 0x0, 0x6, 0x0, "30fa9375120054c1b5a34f91c57d8c79f12c8b720f1c000000000000370ca14e54048280a3d3e78f7a7bac580000ad0107c346583f917700000005000000000200"}, 0xd8) 12.205799665s ago: executing program 0 (id=426): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x104, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0xa0, 0x3, "06275c852770226714b06026799504d26462d0f7a66ead44d6899e1445d97832ad457d06138b69af69d529be95f1911eab1846eb51bda151a6b0736302fdfb9f2c903fa06bb26b5a1ce76b17878e8174d345499079f1da597f0326854d62b1f5d97f2de35a9cb60da0764d08dbaf74939de34af914a3ea3f02ca57df07e9ed10aecb90bdbabcfcdd62e3ef6913b29a63fd42d9276dc54b68f9bc26a0"}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x12c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000002040)={0xf0f080, 0x5}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x2, 0xdb, {0xdb, 0x21, "4c0599dee1e68706a667894514117676c48512a1e4dc2478a6e18d43b1397b062e94c685719eb1ddd329e3f68b3927d0d10fea76098cca625686d41bfc2b465ac8bb842a6df73ed4f8a2c5f62bb1f2e4a32ff2f1945c3f0096c9dbae82e164f2e419aedde149b4b5d10210b80db0833900518af79f170223c92a6165e3c7844dbc2c733b76b083d2bd755744fab8271c96fb6e215df109ae26adffe694237103b8c78a35ede0712fe62afc83482d7af0024b7c8a4699d2156de1f9a7701eee7a31171bc64f4ba8ba22c700b80137af95bb06f1a3960d85217b"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x44, &(0x7f00000004c0)={0x40, 0x8, 0x37, "74e3274094bc41c4960fea3bdcfb3bb4434e71493096f26fb2b13a4256b68aabf5cf7c8fef04626f35023064e5570f56362d717ba5e9b4"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0x2, 0xd, 0x8, 0x80, 0x2, 0x1, 0x0, 0x5, 0x7, 0x7, 0x2, 0xfffe}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x200}, &(0x7f0000000780)={0x20, 0x83, 0x2}, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000880)={0x20, 0x89, 0x2}}) 10.940195578s ago: executing program 2 (id=429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000002000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4008000) 10.919556841s ago: executing program 1 (id=430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xae5}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x8c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPR={0x70, 0x11, 0x0, 0x1, @inner={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x3c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x7c}]}}}]}, @NFT_MSG_NEWCHAIN={0x104, 0x3, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffbff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x401}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe0b}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x240}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) 10.854830921s ago: executing program 2 (id=431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e96", 0x8) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000480)="439dce3672b42d0ac56da6cfae9bbaa2bbb23fd219a88c55cfb134448890fd3aa11f6574a521422666d0ae8060999be0f9f8c88fa4cd808ff3f1a4a5f0f051b695e9dd25a112e1aff097823d825f94547f6e7783c87dd97a8eb2ecad4d97a561781b3e531157301bac971f273659c064e72603ffb832b8a94d3be8", 0x7b}, {&(0x7f0000000580)="69ec03397cf0ed32bbe95e7e45d7918307939da4b8f86f5733217ac61385d95befada2439a", 0x25}, {&(0x7f0000000680)="08e88d4de4594308ad8ecf5db5f83d72be47105ab5fd2fb7298dc4036dd6d448812651ac61b66c2362979a6bf8e64cf2d7ed9c81089a2c391ca57a6582731c1c81aadfe31838e48a832be9ecc9a94a1b68d17a00d091f39fd10d876e038437ae53cfd6f023194d61033b11dd600001c065ab80a76db7e1d9a26ae5e786a12e2ea88e5fa63bf276dd866724da678fb33f55f971554d9c4c51cdd9661d3db3a5d28823d3f977a45daccca53ab53e53719fd4b8c1b0b205c88caeffbe7ab7c6e2c6bdbab5b50f471f4e7aeae8a78270c29aaae19d351f6f3814e6ed43b45a97ad980165c8e5492345", 0xe7}, {&(0x7f0000000980)="f1ed9f18c3e6655229989e1b55a4ed9be38fcaa1400b280d1d8e65b89e1051719ac4b6d2653a55945fd17ea51772b08749bb488ff980b5d33a560174a3da58f07b21ecd080bfc0ac405e10ceb2e1a7828b57ffc3ce8154000ba4558395985d156739b74b2ec79eb71ee6141487f2bb0e75910262fce0e339f70229d30d543d31ecf635218738d12ea114dee20e7bcdfd07bb34bc816d629bd09c526447c316db6e11262f9c473cc77842ac9926d51d0f1b0fb75cbca5ed965c1691", 0xbb}, {&(0x7f0000002200)="5702e2743459d73f9d1ece44887aef19280f4309ebb0079fa99925678060a1832f69b1fd4dd06f6f1c8d6ce9fa98d81c881c094d1c289205c110b24cb67f08d3f4e0e50b43fe642d28f4576d8b391397de0ba5ce13412aa49656eaabd5217be9f96d0a5b13931e1985b7c00a3cb24f4472ca8cd818c72a9556022b7ef8b5ffd7d797ad4cbb01c1b129030f236859990dc65c2af712da023ca91e2a8635a152b974442643506f1b02a2cfc61f292edf8445ff59023c1e3337af2c04023f571c35808a6c2b8a40d4ba28f493adff598a37e1013459cd096a085e22da02ca4a067112676900a281af595bfe1dd8367f9d64689140f084434b1df21baa917a9024aa0007fbe5b90177257768972ca885c32bf2df70e6f96b082b0e730ff15ed5dbf35539eda309ed706c4a2940931e613a44ed1450379f7cfe17fe7c34a7db71755f83adf671dccf68e8fe326600e802d1d6ac5bfe23bfe8d0ed51fbeece12e8e6e03c19c0e32184e0ff5d57069cb19ead29e8b7e8c121f659dbd43b6dcf515b01ca2e5a710f49da62d477f4374bed30c9e6c41a4b07e3689ac216f2e85847ae810fc8b849c910d5c0688ed3b7c9a28b45405457d4f1e5907a440fc05d2bd7c83f31f6e0c40fd5a15988cb0ffd83a756cacdbcc945b4ba83c0898e624a9521a233e3285d23212a4ec92ab49e81ead17d2cadf39ebe68c37003035967a3725ccb18fa7ad0caf83cb30aead51002bea50282dfb97698fd47b5e25b5e6f6ac000b6d9015ddfd5a60881a3d95ab087eed36c50a8f05df522608b5ad2081bc593f76624501f5b2677673cc33bdf76bee0400147926e9fbcadcd9975557e5a49f72442e828d88fd0337d97286d0c2040764801020eef7f22ab9429248a9982be86fc5221dd9299b4359290657669402467672a7889e637a88d37dbdf23e42940eecbf604bdc6aa268f064896c2b76d5f73915a455f1a6e875c0a3b7a56be797e8cea1d743fad5fb3e88503a900fbcfca99de270cb1fb82b8dcd6ff37b08bf68df539a62ea264691600b67c34e98c9d86b3eebbb0fa3f525535fc2d8a7249df24b68c2336a0f11ae20fd7de73a6d31f86cca13b505dfad3d207176feaba16da124116c238036925a1223d1b700a50f21c6a1a8beebb029139a3af738902fc34b25239d9de6310595d98a30fe5b6d125f3fc1295ca8de1604babbab35ab5578907397064ac47996a8475af45bfedbe1587f27de76edb074976ca9e86c337e11b129e4c24f55848dd232c9904966eb4d916dde836970ef1e3d154b191a863f29de700d9dc89fc37dda8855d9fc3de564a2929f19ccdb119c5cee578d635e8bea63c715c773a8178da51a9e1eb3ad7adc515302b98465df69520d4dededf7e3c689f1cf5dff23a0b6d9102b638d3aea4c3417b26028df2bdb071f969503f4bdb75f6cd616fca78b3891b650abc95194500a9c642d2648bf8c50cc79f52228366314b5e95e06d463ebee3a7a870f8b6c9135eba98e18ff4cdafda5ca5fea5ff6d9a883e0d4d6e161826b363f1789e3ea07d1f83cf6587d102cfc22008a6133e1d749850c72a90455dac58885ec59d2fc55948ad3cf34365be3267cc2b91a11e5c29d687a856e8cbbbddef7e4b42601de76809e50b9ccde5b53dff83b8f4d79e897a6d0e430c87b76a185a389075cc87d9b17d2701206ff89cf38b761fd3f54239a0424d6bdac4a540e9f84b7da0444108ff1c85735e862a009b86e5d30576d45a6c4c11834c75d9f7abcbb265435548be60d006476e69d872b4fac9dd965cb8d7e4b10c722bc0539de33f7741ff13f7b93be88828a6cfe5e63be626a185135492c48d93e4b61111eaabad91cb49531e5230cb2985a19268c8f79bb9a6df2083ac57099761c683f45ee3b090d8dae7329df34d76f9bd48ae686d5baf907ceae71dc534aca7060579ece4de9aff7c4de65ea341398c18888a182fb46ff7497fb409d89b5f6f74f6ac8a5f55a5e79b9cf1117993f1129611eb5df4819ef2d5455c5299bb42bfe900dd3f12d6a3939daaa9c47d7680a30e9a6917b6c415ebea2b2411e1ebed8cae68096220693abcdec1b458c092bf34dab5ccefb7b497d240d7255d1a9d68a968b7ce0823c81fea69742aad704a34481a5b67bcc8ff7c440da648e5a560aae3d06aa0b61b395869a075b303000da3a93fdcd9186bc9b84d77e7d29df5ad45ff622748bf38e4c712dc5cc11aa7f4b82c2a1407a70b7f8c70aac78f87f24dc00977dc9ed55af952f2798ec547eed33099eeb940a4cfdc19e11726c3a793c0afe6c436fc3784d2666c269530e7c78c767e0b91fe3ef8ab7ded22ffb317a901d61af95ec749fcd75ce0f0ff49c867923340ff68c35c64bcfba38d9a098c99b7a03e81ac2a12115873169013e6da721d8aa747bb02ac0233df4aa6dbc81e5cce3eab3354f715703e22da891af17e5a8e27e0cf13263bcaec95cc5dfd1ddd2f483a161da571aade36ffd9325dbe8e6700a805774e6c0c08a78013c107fea51b7e8e41cfd1c580170090f1109580f963cd62ca52c906944191582c5fe3ae53454e797d6ee51cc311b7465892b8f0d1b97a20a4868d28e3451db7cd89b0b62d67b97704a1040bb272bee5cfc5f385f058f8942e72504e52d024d6e84f3265a9f8fb465b59425624e4461e19f50fe0ff901be855b5a91d371dab74eb7f7b27f4755a702d8f1c7ca9ec8976c7404152e4e2d38778ad6227bee4b57d3c0173", 0x797}], 0x6, &(0x7f0000000640)=ANY=[], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x2}, 0x8005}], 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.602366956s ago: executing program 2 (id=437): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x70411, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) (fail_nth: 2) 9.478965508s ago: executing program 1 (id=438): write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) link(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001d00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x20a0, 0x4287, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xe0, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xe, 0x9, 0x1, {0x22, 0xa96}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0xf8, 0x8}}}}}]}}]}}, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000002400)={0x24, 0x0, &(0x7f0000002280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x38, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x17, 0x0, 0x1, [@nested={0x4, 0x10f}, @typed={0x8, 0x158, 0x0, 0x0, @uid}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="39006974d36ccfc86153e3292e0bf2ae8507140000000000400fbb65e1c3e4ff0f075dc34f2c29c6aac139b1dbdf31a6600016000000560000002500", 0x3c}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x800, 0x0, 0x2, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x2802, 0x80002800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000170a0103000000000000000004000008"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x80000001, &(0x7f0000000040)=0x0) io_submit(r8, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xfe2, r6, &(0x7f00000002c0)="17d1fb778d9738ba7a2e6925b67b697302cc5f68cf98723c599958f6c49d827c9d66cf3a95c40093e85c6797bcd60826cdd8374a3e927713976b5e22ae46411bffb9c65b83b41cf1b30e4674e90cb51eb67f68880a00c9da676534d112bb7678f22e447f77ec440cd80117116a2f9d49c083a48d2e", 0x75, 0xfffffffffffffff8, 0x0, 0x1}]) close_range(r7, 0xffffffffffffffff, 0x0) 9.416737013s ago: executing program 4 (id=440): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000700)={{0x7, 0x4, 0x9, 0x40, 0x8009}, &(0x7f0000000780)=[{}, {}, {}, {}, {}]}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffd, 0x2}, 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="460001"], 0x8) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) 8.226462377s ago: executing program 0 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchownat(r5, &(0x7f0000000080)='.\x00', 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000700)=[{&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722d3f9bc6cd3f362", 0x28}], 0x1) write$UHID_INPUT(r7, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0x4, 0x4}, 0x6) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) r9 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) r10 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x50009404, &(0x7f00000004c0)={0x7, 0x0, 0x3a}) 8.02885436s ago: executing program 3 (id=442): unshare(0x28000600) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) (fail_nth: 2) 6.695056971s ago: executing program 0 (id=443): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x48d, 0xce50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r1, 0x100000100ff9, 0x1) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffee, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x19}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x20, 0xd, 0x28, {0x28, 0x3, "c565940300010000c8000000cb4fdc4d050fb30d546f0200007f0a99ec1766216d5da3bc8723"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.688525883s ago: executing program 3 (id=444): r0 = syz_open_procfs(0x0, 0x0) getdents(r0, &(0x7f0000000ec0)=""/4114, 0x1012) 6.446469913s ago: executing program 2 (id=445): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic='\x00']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) write$P9_RSTAT(r2, &(0x7f00000001c0)={0x43, 0x7d, 0x2, {0x0, 0x3c, 0x2, 0x8b4, {0x2, 0x1, 0x5}, 0x20100000, 0x5d, 0xfff, 0x1000, 0x2, '),', 0x0, '', 0x7, '--#}\xb2:@'}}, 0x43) 6.388531442s ago: executing program 4 (id=446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a00400109"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) (fail_nth: 2) 6.232972508s ago: executing program 3 (id=447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x205, 0x100, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a00400109"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 6.187609112s ago: executing program 4 (id=448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000002000)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x4008000) 5.886803893s ago: executing program 2 (id=449): r0 = timerfd_create(0x0, 0x0) io_setup(0x2, &(0x7f0000000440)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 32) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) (async, rerun: 64) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async, rerun: 32) r5 = inotify_init() (rerun: 32) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0x4000423) (async) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x0, 0x5, 0x7, 0x1, 0x0, [{0x8, 0x3ff, 0xfffffffffffffff9}]}) (async, rerun: 32) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r7 = socket(0x27, 0x1, 0x0) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x440d1}, 0x890) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x9, 0x0, 0xf0b0, 0x0, 0x0, 0x3}) 5.874016745s ago: executing program 3 (id=450): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x3, 0x2000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 5.873331381s ago: executing program 4 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init1(0x80800) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee84400", 0x30}, {&(0x7f0000000800)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091c", 0x47}, {&(0x7f0000000880)="088d85d1f427cc11b21caca442b2a4af8e69b0c132387b8de793ab327e16f27134fe420c1f7a1589836c736d2341f792240fecfd95e2206e7eaa54d08feafc4e009b7ad23f7c18a49c875b5b7266fc799ed90a099cedfe0c57000000000000000000000000000000003c4627b2367d6c49fc1dd9a9139362968da8e19f98", 0x7e}, {&(0x7f0000000100)="df3b06000000fd03ce04654680d6c9431d9e7af9e172000000", 0x19}, {&(0x7f0000001780)="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", 0xe33}], 0x5}, 0x40080) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x10, 0x0, 0x9f}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) writev(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000400)="b84fa87d945897f682d2c1960b684ae4b164e113042f385bd958ccad106d5fe8d75d1ee57c4d1ef0da2704cec3724d5b8b0ea1dc0e6d72043fb2dc69fe679ee85208d88c3527276408a6de2bfc66fac5", 0x50}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000900)="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", 0x1d6}, {&(0x7f0000000280)="8b59143dd1c57f53fc3fb94c8a3f985807bb1c4278f7999ea9062f88a981d96ef235602a1e6e0fb9b8a76740140d90b659621140079fb3d15a5da0676f220620ee0ea91f36ca5f2a4761309cb70e45517dc007eceecaef7b704f0dd629a9a73615c20326ae44c773e5b669b38d0b3567d6fbfeea1221a8a53b9b2312285d69c1331bd9b16801e109e3ef79cae7b0cf126bf167ae7bc08c36418422fce342f696f168b1c59e56a324fe6d5c2f6986a278079925266f40cf2ae57eefb8eb2178485b1f243cdc1602041a33190cd24ea35996393e4b35994c7485575301", 0xdc}], 0x2) r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) iopl(0x3) keyctl$read(0x2, 0x0, &(0x7f00000019c0)=""/4098, 0x1002) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x48, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) 5.180838639s ago: executing program 1 (id=452): r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r1, 0x0, 0x42) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x1, 0x1, 0x1, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000080) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000000200"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 3.29900656s ago: executing program 1 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchownat(r5, &(0x7f0000000080)='.\x00', 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000700)=[{&(0x7f00000003c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722d3f9bc6cd3f362", 0x28}], 0x1) write$UHID_INPUT(r7, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0x4, 0x4}, 0x6) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) r9 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) r10 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x50009404, &(0x7f00000004c0)={0x7, 0x0, 0x3a}) 3.09348922s ago: executing program 3 (id=454): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) syz_open_procfs$namespace(r5, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) write$FUSE_INIT(r0, 0x0, 0x0) 1.006881038s ago: executing program 1 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000000c0)={0x3f, {{0xa, 0x4e23, 0x1000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x88) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000180), 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, 0x0) inotify_add_watch(r2, 0x0, 0x220) (async) inotify_add_watch(r2, 0x0, 0x220) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}}, 0x0) 736.460444ms ago: executing program 0 (id=456): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f00000001c0)=0x7, 0x4) socket$kcm(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x20000080) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='ntfs3\x00', 0x212000, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a01030000000000000000020000000900020073797a30000000000900010073797a300000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) r6 = syz_usbip_server_init(0x1) write$usbip_server(r6, &(0x7f0000000000)=ANY=[], 0x35) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) r8 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000080)={0x0, r0, 0x33, {0x100000001, 0x5}, 0x3}, 0x1) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030500000000000001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000010301"], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) r9 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000280)={@private, @rand_addr, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x3f}, @remote, @local, 0x5, 0x12, 0x5, 0x500, 0x5, 0x130000, r10}) write(r9, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030004000500e1000c", 0x1c) r11 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x8000) ioctl$HIDIOCGREPORTINFO(r11, 0xc00c4809, &(0x7f0000000040)={0x1, 0x1, 0x5}) 490.743235ms ago: executing program 4 (id=457): r0 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x4, 0x7, {0x0}, {}, 0x3, 0xffffffffffffffff}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) r3 = syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') timer_delete(r2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x21c888, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 275.186464ms ago: executing program 2 (id=458): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) r1 = syz_open_procfs$pagemap(r0, &(0x7f00000001c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f00009d4000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000)=[{0x7, 0x0, 0xffffffffffffffff}], 0x1, 0xbfc, 0x54, 0x0, 0x0, 0x6a}) 144.936095ms ago: executing program 3 (id=459): ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x49, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000300)={0xfb, 0x9b3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0xb, 0xd5, 0x8}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000440)={0x24, &(0x7f0000000100)={0x40, 0x9, 0x9, {0x9, 0x21, "0c7d692b30bc8d"}}, 0x0, &(0x7f00000003c0), 0x0}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000002c0)=0xe, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 4 (id=460): ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x49, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000300)={0xfb, 0x9b3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0xb, 0xd5, 0x8}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100007f0009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000440)={0x24, &(0x7f0000000100)={0x40, 0x9, 0x9, {0x9, 0x21, "0c7d692b30bc8d"}}, 0x0, &(0x7f00000003c0), 0x0}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000002c0)=0xe, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): rk, BSSID 50:50:50:50:50:50 [ 94.898481][ T5790] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.180281][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.326994][ T5790] usb 1-1: Using ep0 maxpacket: 32 [ 95.332076][ T5790] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.366088][ T5790] usb 1-1: config 1 interface 0 has no altsetting 0 [ 95.436854][ T5790] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 95.436882][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.436899][ T5790] usb 1-1: Product: syz [ 95.436911][ T5790] usb 1-1: Manufacturer: syz [ 95.436923][ T5790] usb 1-1: SerialNumber: syz [ 95.786109][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 96.086460][ T31] usb 3-1: config 0 has no interfaces? [ 96.159495][ T31] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 96.159533][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.159551][ T31] usb 3-1: Product: syz [ 96.159564][ T31] usb 3-1: Manufacturer: syz [ 96.159577][ T31] usb 3-1: SerialNumber: syz [ 96.226935][ T31] usb 3-1: config 0 descriptor?? [ 96.477813][ T5829] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.634315][ T5817] FAULT_INJECTION: forcing a failure. [ 96.634315][ T5817] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.634356][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 96.634380][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.634396][ T5817] Call Trace: [ 96.634403][ T5817] [ 96.634410][ T5817] dump_stack_lvl+0xe8/0x150 [ 96.634449][ T5817] should_fail_ex+0x467/0x600 [ 96.634479][ T5817] _copy_from_user+0x2d/0xb0 [ 96.634501][ T5817] __copy_msghdr+0x390/0x590 [ 96.634523][ T5817] ___sys_sendmsg+0x213/0x360 [ 96.634541][ T5817] ? __lock_acquire+0x683/0x2ce0 [ 96.634563][ T5817] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.634611][ T5817] ? __fget_files+0x2a/0x420 [ 96.634628][ T5817] ? __fget_files+0x3a8/0x420 [ 96.634654][ T5817] __x64_sys_sendmsg+0x1b7/0x290 [ 96.634676][ T5817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.634707][ T5817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.634726][ T5817] do_syscall_64+0x174/0x580 [ 96.634751][ T5817] ? trace_irq_disable+0x3b/0x140 [ 96.634778][ T5817] ? clear_bhb_loop+0x40/0x90 [ 96.634800][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.634818][ T5817] RIP: 0033:0x7f7b169dde59 [ 96.634844][ T5817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.634857][ T5817] RSP: 002b:00007f7b14c36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.634876][ T5817] RAX: ffffffffffffffda RBX: 00007f7b16c65fa0 RCX: 00007f7b169dde59 [ 96.634890][ T5817] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 96.634901][ T5817] RBP: 00007f7b14c36090 R08: 0000000000000000 R09: 0000000000000000 [ 96.634912][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.634922][ T5817] R13: 00007f7b16c66038 R14: 00007f7b16c65fa0 R15: 00007ffe94468b48 [ 96.634950][ T5817] [ 96.711289][ T5813] openvswitch: netlink: Missing valid actions attribute. [ 96.711326][ T5813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.163104][ T5790] usbhid 1-1:1.0: can't add hid device: -71 [ 97.163205][ T5790] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 97.270148][ T10] usb 3-1: USB disconnect, device number 2 [ 97.287317][ T5790] usb 1-1: USB disconnect, device number 2 [ 97.474159][ T197] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.694816][ T197] usb 4-1: Using ep0 maxpacket: 16 [ 97.696869][ T197] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.696890][ T197] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.699203][ T197] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 97.699227][ T197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.699244][ T197] usb 4-1: Product: syz [ 97.699257][ T197] usb 4-1: Manufacturer: syz [ 97.699270][ T197] usb 4-1: SerialNumber: syz [ 98.403452][ T37] audit: type=1326 audit(1784019801.004:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5855 comm="syz.2.16" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b169dde59 code=0x0 [ 98.560968][ T197] usb 4-1: config 0 descriptor?? [ 101.221562][ T36] usb 4-1: USB disconnect, device number 2 [ 102.797640][ T5885] process 'syz.4.22' launched '/dev/fd/4' with NULL argv: empty string added [ 102.797849][ T36] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.953028][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 102.955004][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.955026][ T36] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.957135][ T36] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 102.957159][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.957177][ T36] usb 2-1: Product: syz [ 102.957190][ T36] usb 2-1: Manufacturer: syz [ 102.957203][ T36] usb 2-1: SerialNumber: syz [ 103.023305][ T36] usb 2-1: config 0 descriptor?? [ 103.448470][ T5895] bond1: entered promiscuous mode [ 103.448500][ T5895] bond1: entered allmulticast mode [ 103.449312][ T5895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.452837][ T5902] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20'. [ 104.833743][ T5904] sch_fq: defrate 9 ignored. [ 107.295150][ T5790] usb 2-1: USB disconnect, device number 2 [ 109.971451][ T5944] loop8: detected capacity change from 0 to 7 [ 110.314737][ T5944] Dev loop8: unable to read RDB block 7 [ 110.314789][ T5944] loop8: unable to read partition table [ 110.314989][ T5944] loop8: partition table beyond EOD, truncated [ 110.315007][ T5944] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 111.469278][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 111.668847][ T5954] 9p: Bad value for 'rfdno' [ 111.801568][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.132616][ T5960] mmap: syz.3.42 (5960) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.144627][ T5960] wg1: entered promiscuous mode [ 112.144654][ T5960] wg1: entered allmulticast mode [ 112.453332][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 112.470305][ T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 112.470381][ T31] usb 1-1: config 179 has no interface number 0 [ 112.470692][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 112.470768][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 112.470840][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 112.470873][ T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 112.470947][ T31] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 112.471065][ T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 112.471121][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.702583][ T36] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.194395][ T31] usb 1-1: can't set config #179, error -71 [ 115.247656][ T31] usb 1-1: USB disconnect, device number 3 [ 115.620618][ T5984] FAULT_INJECTION: forcing a failure. [ 115.620618][ T5984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.620658][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz.3.46 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.620679][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.620690][ T5984] Call Trace: [ 115.620697][ T5984] [ 115.620705][ T5984] dump_stack_lvl+0xe8/0x150 [ 115.620748][ T5984] should_fail_ex+0x467/0x600 [ 115.620780][ T5984] _copy_from_user+0x2d/0xb0 [ 115.620801][ T5984] ___sys_sendmsg+0x1c6/0x360 [ 115.620821][ T5984] ? __lock_acquire+0x683/0x2ce0 [ 115.620844][ T5984] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.620891][ T5984] ? __fget_files+0x2a/0x420 [ 115.620908][ T5984] ? __fget_files+0x3a8/0x420 [ 115.620933][ T5984] __x64_sys_sendmsg+0x1b7/0x290 [ 115.620953][ T5984] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.620988][ T5984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.621016][ T5984] do_syscall_64+0x174/0x580 [ 115.621043][ T5984] ? trace_irq_disable+0x3b/0x140 [ 115.621072][ T5984] ? clear_bhb_loop+0x40/0x90 [ 115.621094][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.621113][ T5984] RIP: 0033:0x7f6077d0de59 [ 115.621136][ T5984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.621150][ T5984] RSP: 002b:00007f6075f45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.621178][ T5984] RAX: ffffffffffffffda RBX: 00007f6077f96090 RCX: 00007f6077d0de59 [ 115.621192][ T5984] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 115.621203][ T5984] RBP: 00007f6075f45090 R08: 0000000000000000 R09: 0000000000000000 [ 115.621215][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.621225][ T5984] R13: 00007f6077f96128 R14: 00007f6077f96090 R15: 00007ffd8b87f508 [ 115.621254][ T5984] [ 116.413808][ T5986] loop8: detected capacity change from 0 to 7 [ 116.435255][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 116.453918][ T5986] Dev loop8: unable to read RDB block 7 [ 116.453967][ T5986] loop8: unable to read partition table [ 116.454167][ T5986] loop8: partition table beyond EOD, truncated [ 116.454183][ T5986] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 116.459942][ T5981] overlayfs: failed to resolve './bus': -2 [ 118.055938][ T5730] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.141548][ T6014] FAULT_INJECTION: forcing a failure. [ 118.141548][ T6014] name failslab, interval 1, probability 0, space 0, times 1 [ 118.141601][ T6014] CPU: 1 UID: 0 PID: 6014 Comm: syz.2.53 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.141622][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 118.141634][ T6014] Call Trace: [ 118.141641][ T6014] [ 118.141649][ T6014] dump_stack_lvl+0xe8/0x150 [ 118.141682][ T6014] should_fail_ex+0x467/0x600 [ 118.141714][ T6014] should_failslab+0xa8/0x100 [ 118.141736][ T6014] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 118.141757][ T6014] ? __get_vm_area_node+0x136/0x300 [ 118.141784][ T6014] ? __get_vm_area_node+0x136/0x300 [ 118.141816][ T6014] __get_vm_area_node+0x136/0x300 [ 118.141848][ T6014] __vmalloc_node_range_noprof+0x358/0x1730 [ 118.141878][ T6014] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 118.141900][ T6014] ? __pfx___schedule+0x10/0x10 [ 118.141927][ T6014] ? finish_task_switch+0x412/0xc60 [ 118.141953][ T6014] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.141979][ T6014] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.142010][ T6014] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 118.142024][ T6014] __vmalloc_noprof+0xd2/0x120 [ 118.142046][ T6014] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 118.142063][ T6014] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 118.142077][ T6014] ? bpf_prog_alloc+0x2a/0x1a0 [ 118.142093][ T6014] bpf_prog_alloc+0x3c/0x1a0 [ 118.142109][ T6014] bpf_prog_load+0x7f8/0x1c00 [ 118.142132][ T6014] ? __pfx_bpf_prog_load+0x10/0x10 [ 118.142158][ T6014] ? security_bpf+0x90/0x2d0 [ 118.142179][ T6014] __sys_bpf+0xd0d/0xd90 [ 118.142198][ T6014] ? __pfx___sys_bpf+0x10/0x10 [ 118.142211][ T6014] ? __schedule+0x16f2/0x5500 [ 118.142232][ T6014] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.142257][ T6014] ? rt_mutex_slowunlock+0x219/0x460 [ 118.142287][ T6014] ? ksys_write+0x248/0x270 [ 118.142312][ T6014] __x64_sys_bpf+0xba/0xd0 [ 118.142333][ T6014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.142349][ T6014] do_syscall_64+0x174/0x580 [ 118.142372][ T6014] ? clear_bhb_loop+0x40/0x90 [ 118.142396][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.142410][ T6014] RIP: 0033:0x7f7b169dde59 [ 118.142424][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.142435][ T6014] RSP: 002b:00007f7b14bf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.142451][ T6014] RAX: ffffffffffffffda RBX: 00007f7b16c66180 RCX: 00007f7b169dde59 [ 118.142462][ T6014] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 118.142472][ T6014] RBP: 00007f7b14bf4090 R08: 0000000000000000 R09: 0000000000000000 [ 118.142481][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.142489][ T6014] R13: 00007f7b16c66218 R14: 00007f7b16c66180 R15: 00007ffe94468b48 [ 118.142512][ T6014] [ 118.142726][ T6014] syz.2.53: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 118.144898][ T6014] CPU: 1 UID: 0 PID: 6014 Comm: syz.2.53 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.144920][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 118.144931][ T6014] Call Trace: [ 118.144939][ T6014] [ 118.144947][ T6014] dump_stack_lvl+0xe8/0x150 [ 118.144980][ T6014] warn_alloc+0x24c/0x270 [ 118.145005][ T6014] ? __pfx_warn_alloc+0x10/0x10 [ 118.145033][ T6014] ? __get_vm_area_node+0x2af/0x300 [ 118.145066][ T6014] __vmalloc_node_range_noprof+0x37d/0x1730 [ 118.145099][ T6014] ? __pfx___schedule+0x10/0x10 [ 118.145127][ T6014] ? finish_task_switch+0x412/0xc60 [ 118.145155][ T6014] ? lockdep_hardirqs_on+0x7a/0x110 [ 118.145186][ T6014] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.145227][ T6014] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 118.145245][ T6014] __vmalloc_noprof+0xd2/0x120 [ 118.145272][ T6014] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 118.145292][ T6014] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 118.145309][ T6014] ? bpf_prog_alloc+0x2a/0x1a0 [ 118.145327][ T6014] bpf_prog_alloc+0x3c/0x1a0 [ 118.145344][ T6014] bpf_prog_load+0x7f8/0x1c00 [ 118.145368][ T6014] ? __pfx_bpf_prog_load+0x10/0x10 [ 118.145399][ T6014] ? security_bpf+0x90/0x2d0 [ 118.145421][ T6014] __sys_bpf+0xd0d/0xd90 [ 118.145441][ T6014] ? __pfx___sys_bpf+0x10/0x10 [ 118.145453][ T6014] ? __schedule+0x16f2/0x5500 [ 118.145474][ T6014] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.145500][ T6014] ? rt_mutex_slowunlock+0x219/0x460 [ 118.145530][ T6014] ? ksys_write+0x248/0x270 [ 118.145555][ T6014] __x64_sys_bpf+0xba/0xd0 [ 118.145576][ T6014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.145592][ T6014] do_syscall_64+0x174/0x580 [ 118.145615][ T6014] ? clear_bhb_loop+0x40/0x90 [ 118.145633][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.145647][ T6014] RIP: 0033:0x7f7b169dde59 [ 118.145661][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.145673][ T6014] RSP: 002b:00007f7b14bf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.145687][ T6014] RAX: ffffffffffffffda RBX: 00007f7b16c66180 RCX: 00007f7b169dde59 [ 118.145698][ T6014] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 118.145708][ T6014] RBP: 00007f7b14bf4090 R08: 0000000000000000 R09: 0000000000000000 [ 118.145717][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.145725][ T6014] R13: 00007f7b16c66218 R14: 00007f7b16c66180 R15: 00007ffe94468b48 [ 118.145748][ T6014] [ 118.145812][ T6014] Mem-Info: [ 118.145859][ T6014] active_anon:184 inactive_anon:6068 isolated_anon:0 [ 118.145859][ T6014] active_file:13332 inactive_file:41486 isolated_file:0 [ 118.145859][ T6014] unevictable:768 dirty:147 writeback:0 [ 118.145859][ T6014] slab_reclaimable:11479 slab_unreclaimable:100923 [ 118.145859][ T6014] mapped:29970 shmem:1288 pagetables:1235 [ 118.145859][ T6014] sec_pagetables:0 bounce:0 [ 118.145859][ T6014] kernel_misc_reclaimable:0 [ 118.145859][ T6014] free:1304393 free_pcp:17199 free_cma:0 [ 118.145928][ T6014] Node 0 active_anon:736kB inactive_anon:24272kB active_file:53132kB inactive_file:165944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119880kB dirty:584kB writeback:0kB shmem:3616kB kernel_stack:13448kB pagetables:4788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 118.146002][ T6014] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 118.146088][ T6014] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.146181][ T6014] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 118.146350][ T6014] Node 0 DMA32 free:1267132kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:736kB inactive_anon:24344kB active_file:53132kB inactive_file:165944kB unevictable:1536kB writepending:584kB zspages:0kB present:3129332kB managed:2560732kB mlocked:0kB bounce:0kB free_pcp:68788kB local_pcp:16528kB free_cma:0kB [ 118.146455][ T6014] lowmem_reserve[]: 0 0 1 1 1 [ 118.146534][ T6014] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1860kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 118.146625][ T6014] lowmem_reserve[]: 0 0 0 0 0 [ 118.146792][ T6014] Node 1 Normal free:3935080kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.146885][ T6014] lowmem_reserve[]: 0 0 0 0 0 [ 118.147013][ T6014] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 118.147327][ T6014] Node 0 DMA32: 1398*4kB (UME) 1032*8kB (UM) 372*16kB (UME) 94*32kB (UME) 95*64kB (UME) 66*128kB (UME) 54*256kB (UME) 27*512kB (UME) 12*1024kB (UME) 5*2048kB (UM) 288*4096kB (M) = 1267160kB [ 118.148012][ T6014] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 118.148244][ T6014] Node 1 Normal: 0*4kB 5*8kB (UM) 8*16kB (UM) 4*32kB (UM) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935080kB [ 118.148897][ T6014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.148934][ T6014] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.148949][ T6014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.148964][ T6014] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.148978][ T6014] 56102 total pagecache pages [ 118.149020][ T6014] 0 pages in swap cache [ 118.149046][ T6014] Free swap = 124996kB [ 118.149072][ T6014] Total swap = 124996kB [ 118.149108][ T6014] 2097051 pages RAM [ 118.149134][ T6014] 0 pages HighMem/MovableOnly [ 118.149159][ T6014] 424788 pages reserved [ 118.149185][ T6014] 0 pages cma reserved [ 119.464380][ T5730] usb 1-1: config 4 has an invalid interface number: 140 but max is 1 [ 119.464406][ T5730] usb 1-1: config 4 has an invalid interface number: 101 but max is 1 [ 119.464423][ T5730] usb 1-1: config 4 has no interface number 0 [ 119.464438][ T5730] usb 1-1: config 4 has no interface number 1 [ 119.464490][ T5730] usb 1-1: config 4 interface 140 altsetting 5 bulk endpoint 0xC has invalid maxpacket 32 [ 119.464512][ T5730] usb 1-1: config 4 interface 140 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 119.464530][ T5730] usb 1-1: config 4 interface 140 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 119.464550][ T5730] usb 1-1: config 4 interface 140 altsetting 5 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 119.464571][ T5730] usb 1-1: config 4 interface 140 altsetting 5 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 119.464594][ T5730] usb 1-1: config 4 interface 140 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 119.464613][ T5730] usb 1-1: config 4 interface 140 altsetting 5 endpoint 0x1 has an invalid bInterval 252, changing to 7 [ 119.464634][ T5730] usb 1-1: config 4 interface 140 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 119.464654][ T5730] usb 1-1: config 4 interface 140 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 119.464674][ T5730] usb 1-1: config 4 interface 140 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 119.464693][ T5730] usb 1-1: config 4 interface 140 has no altsetting 0 [ 119.464708][ T5730] usb 1-1: config 4 interface 101 has no altsetting 0 [ 120.201515][ T5730] usb 1-1: New USB device found, idVendor=1e2d, idProduct=0051, bcdDevice=b9.22 [ 120.201542][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.201563][ T5730] usb 1-1: Product: Љ [ 120.201573][ T5730] usb 1-1: Manufacturer: 煾蟖獶䝳颙뷟뫷卌㆗啋ᡐϚ鋽桅㵆沊ම័퐗ꚼ폘䊙᭘칵턓렼슽㱔馶嫖왩志郼㠛癑艢搏륊㐎鰒鐒ⰱ普悒烬蠫ﺧ嗨腛謣ᶠ㣝寢ꨯꢙ㻈㙑㠩쮄꥚㡮䛧黷欼堀壘 [ 120.201591][ T5730] usb 1-1: SerialNumber: 꼓㒶樂㵻Ỉ富죈у㫇⤜͙쁢踄篇㓾ꏌ䂤䎢亱꿫烳쎔傭曹鲱㝰宄ꄳ뿯ⶮ懸곲亘ぺ髥砑ꬵ芑ᯛẀ蚄꿨䙱ݎႎ鱣ᘄ嵰쁇䰹糘옺䉼⥚쳾ਜࢷ嚴硳垧맧ᦽ焵䖎薨ꂂ䒴华㤬톒烺쪗高崍䴕륮幕䒦裟饙ꈐ歘鉔걌홨룇稯떢첶㲃ᐪ낧륤뤱提篫繍ᓒ滳離훤㣣杽痍舔롲㙿믥联꺓ﲑ羗髼护 [ 120.709716][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 120.934301][ T5730] usb 1-1: can't set config #4, error -71 [ 120.980833][ T5730] usb 1-1: USB disconnect, device number 4 [ 121.011556][ T36] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.158165][ T6043] FAULT_INJECTION: forcing a failure. [ 121.158165][ T6043] name failslab, interval 1, probability 0, space 0, times 0 [ 121.158192][ T6043] CPU: 1 UID: 0 PID: 6043 Comm: syz.0.63 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.158208][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.158216][ T6043] Call Trace: [ 121.158225][ T6043] [ 121.158231][ T6043] dump_stack_lvl+0xe8/0x150 [ 121.158258][ T6043] should_fail_ex+0x467/0x600 [ 121.158282][ T6043] should_failslab+0xa8/0x100 [ 121.158299][ T6043] kmem_cache_alloc_node_noprof+0xae/0x670 [ 121.158321][ T6043] ? __alloc_skb+0x1d7/0x7a0 [ 121.158341][ T6043] ? __alloc_skb+0x1d7/0x7a0 [ 121.158365][ T6043] __alloc_skb+0x1d7/0x7a0 [ 121.158387][ T6043] netlink_sendmsg+0x5d4/0xb40 [ 121.158409][ T6043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.158426][ T6043] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 121.158446][ T6043] ? __kernel_text_address+0xd/0x30 [ 121.158459][ T6043] ? unwind_get_return_address+0x4d/0x90 [ 121.158486][ T6043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.158500][ T6043] sock_sendmsg_nosec+0x13a/0x180 [ 121.158521][ T6043] ____sys_sendmsg+0x565/0x870 [ 121.158536][ T6043] ? __might_fault+0xaf/0x130 [ 121.158556][ T6043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.158575][ T6043] ? import_iovec+0x73/0xa0 [ 121.158592][ T6043] ___sys_sendmsg+0x2a5/0x360 [ 121.158604][ T6043] ? __lock_acquire+0x683/0x2ce0 [ 121.158621][ T6043] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.158658][ T6043] ? __fget_files+0x2a/0x420 [ 121.158672][ T6043] ? __fget_files+0x3a8/0x420 [ 121.158693][ T6043] __x64_sys_sendmsg+0x1b7/0x290 [ 121.158710][ T6043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.158739][ T6043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.158754][ T6043] do_syscall_64+0x174/0x580 [ 121.158773][ T6043] ? trace_irq_disable+0x3b/0x140 [ 121.158794][ T6043] ? clear_bhb_loop+0x40/0x90 [ 121.158810][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.158824][ T6043] RIP: 0033:0x7f4c9698de59 [ 121.158839][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.158851][ T6043] RSP: 002b:00007f4c94be6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.158867][ T6043] RAX: ffffffffffffffda RBX: 00007f4c96c15fa0 RCX: 00007f4c9698de59 [ 121.158876][ T6043] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 121.158889][ T6043] RBP: 00007f4c94be6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.158898][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.158905][ T6043] R13: 00007f4c96c16038 R14: 00007f4c96c15fa0 R15: 00007fff289ed618 [ 121.158928][ T6043] [ 121.203286][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 121.211078][ T36] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.214914][ T36] usb 3-1: config 1 interface 0 has no altsetting 0 [ 121.218681][ T36] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 121.218706][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.218723][ T36] usb 3-1: Product: syz [ 121.218736][ T36] usb 3-1: Manufacturer: syz [ 121.218749][ T36] usb 3-1: SerialNumber: syz [ 121.406280][ T6047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.64'. [ 121.664575][ T6036] openvswitch: netlink: Missing valid actions attribute. [ 121.664600][ T6036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.780644][ T36] usbhid 3-1:1.0: can't add hid device: -71 [ 121.780755][ T36] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 121.820223][ T36] usb 3-1: USB disconnect, device number 3 [ 122.241752][ T5729] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.575778][ T5729] usb 2-1: Using ep0 maxpacket: 8 [ 122.580643][ T5729] usb 2-1: config 16 has an invalid interface number: 22 but max is 1 [ 122.580668][ T5729] usb 2-1: config 16 contains an unexpected descriptor of type 0x2, skipping [ 122.580684][ T5729] usb 2-1: config 16 has an invalid interface number: 22 but max is 1 [ 122.580702][ T5729] usb 2-1: config 16 has an invalid interface number: 25 but max is 1 [ 122.580719][ T5729] usb 2-1: config 16 has no interface number 0 [ 122.580734][ T5729] usb 2-1: config 16 has no interface number 1 [ 122.580796][ T5729] usb 2-1: config 16 interface 22 altsetting 3 endpoint 0x7 has invalid maxpacket 520, setting to 64 [ 122.580820][ T5729] usb 2-1: config 16 interface 22 altsetting 3 has an endpoint descriptor with address 0x41, changing to 0x1 [ 122.580842][ T5729] usb 2-1: config 16 interface 22 altsetting 3 endpoint 0x1 has invalid maxpacket 54747, setting to 1024 [ 122.580865][ T5729] usb 2-1: config 16 interface 22 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 122.580887][ T5729] usb 2-1: config 16 interface 22 altsetting 3 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 122.580911][ T5729] usb 2-1: config 16 interface 22 altsetting 3 endpoint 0x3 has an invalid bInterval 246, changing to 7 [ 122.580933][ T5729] usb 2-1: config 16 interface 22 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 122.580953][ T5729] usb 2-1: config 16 interface 22 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 122.580973][ T5729] usb 2-1: config 16 interface 22 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 122.580995][ T5729] usb 2-1: config 16 interface 22 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 122.581014][ T5729] usb 2-1: config 16 interface 22 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 122.581033][ T5729] usb 2-1: config 16 interface 22 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 122.581052][ T5729] usb 2-1: config 16 interface 22 altsetting 3 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 122.581089][ T5729] usb 2-1: config 16 interface 22 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 122.581111][ T5729] usb 2-1: config 16 interface 22 altsetting 6 has a duplicate endpoint with address 0x8E, skipping [ 122.581131][ T5729] usb 2-1: config 16 interface 22 altsetting 6 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 122.581153][ T5729] usb 2-1: config 16 interface 22 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 122.581176][ T5729] usb 2-1: too many endpoints for config 16 interface 25 altsetting 254: 232, using maximum allowed: 30 [ 122.581219][ T5729] usb 2-1: config 16 interface 25 altsetting 254 has a duplicate endpoint with address 0x9, skipping [ 122.581239][ T5729] usb 2-1: config 16 interface 25 altsetting 254 endpoint 0xD has invalid maxpacket 576, setting to 64 [ 122.581261][ T5729] usb 2-1: config 16 interface 25 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 232 [ 122.581285][ T5729] usb 2-1: config 16 interface 22 has no altsetting 0 [ 122.581301][ T5729] usb 2-1: config 16 interface 22 has no altsetting 1 [ 122.581317][ T5729] usb 2-1: config 16 interface 25 has no altsetting 0 [ 122.993725][ T5729] usb 2-1: New USB device found, idVendor=066b, idProduct=200c, bcdDevice=6d.ff [ 122.993752][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.993770][ T5729] usb 2-1: Product: ᱂ [ 122.993782][ T5729] usb 2-1: Manufacturer: ⠲炯ኸ雽ࣅᦘ鰼䵎챆瑊Ꮢ函췿ꞹ墎ꈎ [ 122.993797][ T5729] usb 2-1: SerialNumber: У [ 123.105989][ T6058] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.224044][ T5730] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.400692][ T5730] usb 3-1: config 4 has an invalid interface number: 140 but max is 1 [ 123.400720][ T5730] usb 3-1: config 4 has an invalid interface number: 101 but max is 1 [ 123.400738][ T5730] usb 3-1: config 4 has no interface number 0 [ 123.400752][ T5730] usb 3-1: config 4 has no interface number 1 [ 123.400808][ T5730] usb 3-1: config 4 interface 140 altsetting 5 bulk endpoint 0xC has invalid maxpacket 32 [ 123.400831][ T5730] usb 3-1: config 4 interface 140 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 123.400889][ T5730] usb 3-1: config 4 interface 140 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 123.400930][ T5730] usb 3-1: config 4 interface 140 altsetting 5 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 123.400953][ T5730] usb 3-1: config 4 interface 140 altsetting 5 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 123.400976][ T5730] usb 3-1: config 4 interface 140 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 123.400996][ T5730] usb 3-1: config 4 interface 140 altsetting 5 endpoint 0x1 has an invalid bInterval 252, changing to 7 [ 123.401018][ T5730] usb 3-1: config 4 interface 140 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 123.401036][ T5730] usb 3-1: config 4 interface 140 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 123.401057][ T5730] usb 3-1: config 4 interface 140 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 123.401074][ T5730] usb 3-1: config 4 interface 140 has no altsetting 0 [ 123.401089][ T5730] usb 3-1: config 4 interface 101 has no altsetting 0 [ 123.463923][ T5730] usb 3-1: New USB device found, idVendor=1e2d, idProduct=0051, bcdDevice=b9.22 [ 123.463951][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.463968][ T5730] usb 3-1: Product: Љ [ 123.463981][ T5730] usb 3-1: Manufacturer: 煾蟖獶䝳颙뷟뫷卌㆗啋ᡐϚ鋽桅㵆沊ම័퐗ꚼ폘䊙᭘칵턓렼슽㱔馶嫖왩志郼㠛癑艢搏륊㐎鰒鐒ⰱ普悒烬蠫ﺧ嗨腛謣ᶠ㣝寢ꨯꢙ㻈㙑㠩쮄꥚㡮䛧黷欼堀壘 [ 123.464005][ T5730] usb 3-1: SerialNumber: 꼓㒶樂㵻Ỉ富죈у㫇⤜͙쁢踄篇㓾ꏌ䂤䎢亱꿫烳쎔傭曹鲱㝰宄ꄳ뿯ⶮ懸곲亘ぺ髥砑ꬵ芑ᯛẀ蚄꿨䙱ݎႎ鱣ᘄ嵰쁇䰹糘옺䉼⥚쳾ਜࢷ嚴硳垧맧ᦽ焵䖎薨ꂂ䒴华㤬톒烺쪗高崍䴕륮幕䒦裟饙ꈐ歘鉔걌홨룇稯떢첶㲃ᐪ낧륤뤱提篫繍ᓒ滳離훤㣣杽痍舔롲㙿믥联꺓ﲑ羗髼护 [ 123.795978][ T6069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 123.874709][ T5729] pegasus 2-1:16.22: Missing or invalid endpoints [ 123.899988][ T5729] pegasus 2-1:16.25: Missing or invalid endpoints [ 124.895861][ T5729] usb 2-1: USB disconnect, device number 3 [ 125.435665][ T5730] option 3-1:4.140: GSM modem (1-port) converter detected [ 125.790196][ T5730] option 3-1:4.101: GSM modem (1-port) converter detected [ 125.853113][ T5730] usb 3-1: USB disconnect, device number 4 [ 126.043612][ T5730] option 3-1:4.140: device disconnected [ 126.111928][ T5730] option 3-1:4.101: device disconnected [ 128.520775][ T6123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.82'. [ 129.541745][ T6119] syz.3.85 (6119) used greatest stack depth: 19328 bytes left [ 131.361500][ T197] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.514353][ T197] usb 3-1: Using ep0 maxpacket: 32 [ 131.538307][ T197] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.539726][ T197] usb 3-1: config 1 interface 0 has no altsetting 0 [ 131.559736][ T197] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 131.559771][ T197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.559788][ T197] usb 3-1: Product: syz [ 131.559800][ T197] usb 3-1: Manufacturer: syz [ 131.559813][ T197] usb 3-1: SerialNumber: syz [ 131.788887][ T6145] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 132.012371][ T6136] openvswitch: netlink: Missing valid actions attribute. [ 132.012398][ T6136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.093457][ T5730] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.130283][ T197] usbhid 3-1:1.0: can't add hid device: -71 [ 132.130384][ T197] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 132.161131][ T197] usb 3-1: USB disconnect, device number 5 [ 132.241498][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 132.249674][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.249692][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.249712][ T5730] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.249723][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.262315][ T5729] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.314817][ T5730] usb 2-1: config 0 descriptor?? [ 132.356855][ T5730] hub 2-1:0.0: USB hub found [ 132.416448][ T5729] usb 5-1: config 4 has an invalid interface number: 140 but max is 1 [ 132.416474][ T5729] usb 5-1: config 4 has an invalid interface number: 101 but max is 1 [ 132.416492][ T5729] usb 5-1: config 4 has no interface number 0 [ 132.416506][ T5729] usb 5-1: config 4 has no interface number 1 [ 132.416552][ T5729] usb 5-1: config 4 interface 140 altsetting 5 bulk endpoint 0xC has invalid maxpacket 32 [ 132.416575][ T5729] usb 5-1: config 4 interface 140 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 132.416594][ T5729] usb 5-1: config 4 interface 140 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 132.416615][ T5729] usb 5-1: config 4 interface 140 altsetting 5 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 132.416636][ T5729] usb 5-1: config 4 interface 140 altsetting 5 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 132.416653][ T5729] usb 5-1: config 4 interface 140 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 132.416663][ T5729] usb 5-1: config 4 interface 140 altsetting 5 endpoint 0x1 has an invalid bInterval 252, changing to 7 [ 132.416675][ T5729] usb 5-1: config 4 interface 140 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 132.416685][ T5729] usb 5-1: config 4 interface 140 altsetting 5 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 132.416711][ T5729] usb 5-1: config 4 interface 140 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 132.416731][ T5729] usb 5-1: config 4 interface 140 has no altsetting 0 [ 132.416748][ T5729] usb 5-1: config 4 interface 101 has no altsetting 0 [ 132.419401][ T5729] usb 5-1: New USB device found, idVendor=1e2d, idProduct=0051, bcdDevice=b9.22 [ 132.419426][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.419443][ T5729] usb 5-1: Product: Љ [ 132.419455][ T5729] usb 5-1: Manufacturer: 煾蟖獶䝳颙뷟뫷卌㆗啋ᡐϚ鋽桅㵆沊ම័퐗ꚼ폘䊙᭘칵턓렼슽㱔馶嫖왩志郼㠛癑艢搏륊㐎鰒鐒ⰱ普悒烬蠫ﺧ嗨腛謣ᶠ㣝寢ꨯꢙ㻈㙑㠩쮄꥚㡮䛧黷欼堀壘 [ 132.419478][ T5729] usb 5-1: SerialNumber: 꼓㒶樂㵻Ỉ富죈у㫇⤜͙쁢踄篇㓾ꏌ䂤䎢亱꿫烳쎔傭曹鲱㝰宄ꄳ뿯ⶮ懸곲亘ぺ髥砑ꬵ芑ᯛẀ蚄꿨䙱ݎႎ鱣ᘄ嵰쁇䰹糘옺䉼⥚쳾ਜࢷ嚴硳垧맧ᦽ焵䖎薨ꂂ䒴华㤬톒烺쪗高崍䴕륮幕䒦裟饙ꈐ歘鉔걌홨룇稯떢첶㲃ᐪ낧륤뤱提篫繍ᓒ滳離훤㣣杽痍舔롲㙿믥联꺓ﲑ羗髼护 [ 132.552700][ T5730] hub 2-1:0.0: 12 ports detected [ 132.682815][ T5730] hub 2-1:0.0: insufficient power available to use all downstream ports [ 132.763116][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.763184][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.766543][ T6150] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 133.044450][ T5729] option 5-1:4.140: GSM modem (1-port) converter detected [ 133.136077][ T5729] option 5-1:4.101: GSM modem (1-port) converter detected [ 133.192104][ T5729] usb 5-1: USB disconnect, device number 2 [ 133.231567][ T5729] option 5-1:4.140: device disconnected [ 133.375010][ T5729] option 5-1:4.101: device disconnected [ 133.493178][ T5730] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 133.493203][ T5730] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 133.515543][ T197] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.553388][ T5730] usbhid 2-1:0.0: can't add hid device: -71 [ 133.553500][ T5730] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 133.658479][ T5730] usb 2-1: USB disconnect, device number 4 [ 133.681451][ T197] usb 3-1: Using ep0 maxpacket: 16 [ 133.698883][ T197] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.698906][ T197] usb 3-1: config 0 has no interface number 0 [ 133.706549][ T197] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 133.706575][ T197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.706592][ T197] usb 3-1: Product: syz [ 133.706604][ T197] usb 3-1: Manufacturer: syz [ 133.706617][ T197] usb 3-1: SerialNumber: syz [ 133.776627][ T197] usb 3-1: config 0 descriptor?? [ 133.816284][ T197] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 134.104887][ T6161] syz.3.96 (6161) used greatest stack depth: 18456 bytes left [ 134.894569][ T197] gspca_spca1528: reg_w err -110 [ 134.964390][ T197] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 137.919336][ T31] usb 3-1: USB disconnect, device number 6 [ 140.943836][ T6208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.110'. [ 140.969400][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 142.394785][ T6211] netlink: 'syz.1.112': attribute type 2 has an invalid length. [ 144.329011][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.369903][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.371079][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.372665][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.374494][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.157824][ T3571] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.683323][ T6249] loop8: detected capacity change from 0 to 7 [ 146.260343][ T6249] Dev loop8: unable to read RDB block 7 [ 146.260385][ T6249] loop8: unable to read partition table [ 146.260577][ T6249] loop8: partition table beyond EOD, truncated [ 146.260613][ T6249] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 146.471511][ T5612] Bluetooth: hci3: command tx timeout [ 147.146471][ T6264] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 147.225444][ T5612] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 147.225513][ T5612] Bluetooth: Wrong link type (-22) [ 147.821766][ T5730] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 147.843975][ T3571] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.940838][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.127'. [ 147.961851][ T6268] capability: warning: `syz.4.127' uses 32-bit capabilities (legacy support in use) [ 147.963018][ T6268] program syz.4.127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.991559][ T5730] usb 2-1: Using ep0 maxpacket: 8 [ 147.998836][ T5730] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.000323][ T5730] usb 2-1: config 7 has an invalid interface number: 177 but max is 2 [ 148.000344][ T5730] usb 2-1: config 7 has an invalid interface number: 26 but max is 2 [ 148.000361][ T5730] usb 2-1: config 7 has no interface number 1 [ 148.000376][ T5730] usb 2-1: config 7 has no interface number 2 [ 148.000428][ T5730] usb 2-1: config 7 interface 0 has no altsetting 0 [ 148.000444][ T5730] usb 2-1: config 7 interface 177 has no altsetting 0 [ 148.000460][ T5730] usb 2-1: config 7 interface 26 has no altsetting 0 [ 148.016159][ T5730] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=66.50 [ 148.016185][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.016203][ T5730] usb 2-1: Product: syz [ 148.016213][ T5730] usb 2-1: Manufacturer: syz [ 148.016220][ T5730] usb 2-1: SerialNumber: syz [ 148.181583][ T36] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 148.211462][ T5729] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.329102][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.334178][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.383479][ T5729] usb 5-1: Using ep0 maxpacket: 8 [ 148.384967][ T36] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 148.384991][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.392360][ T5729] usb 5-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 148.392383][ T5729] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 148.398154][ T5729] usb 5-1: New USB device found, idVendor=060b, idProduct=e90a, bcdDevice= 0.40 [ 148.398179][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.398196][ T5729] usb 5-1: Product: syz [ 148.398209][ T5729] usb 5-1: Manufacturer: К [ 148.398221][ T5729] usb 5-1: SerialNumber: syz [ 148.478536][ T36] usb 4-1: config 0 descriptor?? [ 148.489012][ T5730] usb 2-1: selecting invalid altsetting 0 [ 148.489033][ T5730] usb 2-1: Could not set interface, error -22 [ 148.513789][ T5730] usb 2-1: USB disconnect, device number 5 [ 148.553852][ T5612] Bluetooth: hci3: command tx timeout [ 148.563673][ T36] cp210x 4-1:0.0: cp210x converter detected [ 148.615971][ T3571] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.896794][ T5730] usb 5-1: USB disconnect, device number 3 [ 149.570780][ T3571] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.463201][ T36] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 150.463238][ T36] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 150.638753][ T5612] Bluetooth: hci3: command tx timeout [ 150.668765][ T36] usb 4-1: cp210x converter now attached to ttyUSB0 [ 150.876647][ T36] usb 4-1: USB disconnect, device number 4 [ 151.094787][ T5790] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 151.166244][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 151.168987][ T36] cp210x 4-1:0.0: device disconnected [ 151.263185][ T5790] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 151.263208][ T5790] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 151.263239][ T5790] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 151.263273][ T5790] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 151.266908][ T5790] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.266933][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.266950][ T5790] usb 5-1: SerialNumber: syz [ 151.345089][ T5729] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 151.346077][ T5790] cdc_acm 5-1:1.0: invalid descriptor buffer length [ 151.346097][ T5790] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 151.346113][ T5790] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 151.346150][ T5790] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 151.505325][ T5729] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 151.505355][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 151.505378][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 50669, setting to 64 [ 151.505419][ T5729] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 151.505440][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.515283][ T5729] usb 2-1: config 0 descriptor?? [ 151.517604][ T6301] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 151.628366][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.628535][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.628913][ T6231] bridge_slave_0: entered allmulticast mode [ 151.631069][ T6231] bridge_slave_0: entered promiscuous mode [ 151.688783][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.688899][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.689394][ T6231] bridge_slave_1: entered allmulticast mode [ 151.751592][ T5729] ath6kl: Failed to submit usb control message: -71 [ 151.751639][ T5729] ath6kl: unable to send the bmi data to the device: -71 [ 151.751652][ T5729] ath6kl: Unable to send get target info: -71 [ 151.769917][ T5729] ath6kl: Failed to init ath6kl core: -71 [ 151.792828][ T5729] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 151.798440][ T6231] bridge_slave_1: entered promiscuous mode [ 151.879408][ T5729] usb 2-1: USB disconnect, device number 6 [ 152.106269][ T6231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.129903][ T6231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.402005][ T6231] team0: Port device team_slave_0 added [ 152.508460][ T6231] team0: Port device team_slave_1 added [ 152.711474][ T5612] Bluetooth: hci3: command tx timeout [ 152.940211][ T6330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.145'. [ 154.928167][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.928182][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.928204][ T6231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.211162][ T6350] FAULT_INJECTION: forcing a failure. [ 156.211162][ T6350] name failslab, interval 1, probability 0, space 0, times 0 [ 156.211192][ T6350] CPU: 0 UID: 0 PID: 6350 Comm: syz.1.152 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 156.211211][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.211221][ T6350] Call Trace: [ 156.211227][ T6350] [ 156.211234][ T6350] dump_stack_lvl+0xe8/0x150 [ 156.211267][ T6350] should_fail_ex+0x467/0x600 [ 156.211297][ T6350] should_failslab+0xa8/0x100 [ 156.211319][ T6350] kmem_cache_alloc_node_noprof+0xae/0x670 [ 156.211349][ T6350] ? __alloc_skb+0x1d7/0x7a0 [ 156.211375][ T6350] ? __alloc_skb+0x1d7/0x7a0 [ 156.211404][ T6350] __alloc_skb+0x1d7/0x7a0 [ 156.211429][ T6350] netlink_sendmsg+0x5d4/0xb40 [ 156.211453][ T6350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.211473][ T6350] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 156.211498][ T6350] ? __kernel_text_address+0xd/0x30 [ 156.211514][ T6350] ? unwind_get_return_address+0x4d/0x90 [ 156.211534][ T6350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.211551][ T6350] sock_sendmsg_nosec+0x13a/0x180 [ 156.211575][ T6350] ____sys_sendmsg+0x565/0x870 [ 156.211590][ T6350] ? __might_fault+0xaf/0x130 [ 156.211611][ T6350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.211635][ T6350] ? import_iovec+0x73/0xa0 [ 156.211654][ T6350] ___sys_sendmsg+0x2a5/0x360 [ 156.211669][ T6350] ? __lock_acquire+0x683/0x2ce0 [ 156.211699][ T6350] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.211746][ T6350] ? __fget_files+0x2a/0x420 [ 156.211763][ T6350] ? __fget_files+0x3a8/0x420 [ 156.211789][ T6350] __x64_sys_sendmsg+0x1b7/0x290 [ 156.211811][ T6350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.211845][ T6350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.211870][ T6350] do_syscall_64+0x174/0x580 [ 156.211896][ T6350] ? trace_irq_disable+0x3b/0x140 [ 156.211923][ T6350] ? clear_bhb_loop+0x40/0x90 [ 156.211944][ T6350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.211961][ T6350] RIP: 0033:0x7f92476fde59 [ 156.211978][ T6350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.211991][ T6350] RSP: 002b:00007f9245956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.212011][ T6350] RAX: ffffffffffffffda RBX: 00007f9247985fa0 RCX: 00007f92476fde59 [ 156.212023][ T6350] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 156.212040][ T6350] RBP: 00007f9245956090 R08: 0000000000000000 R09: 0000000000000000 [ 156.212051][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.212061][ T6350] R13: 00007f9247986038 R14: 00007f9247985fa0 R15: 00007fffdfa2e208 [ 156.212089][ T6350] [ 156.835668][ T6354] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 157.122667][ T5612] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 157.122713][ T5612] Bluetooth: Wrong link type (-22) [ 157.429480][ T6357] capability: warning: `syz.3.153' uses deprecated v2 capabilities in a way that may be insecure [ 157.543214][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.543230][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.543267][ T6231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.731118][ T6231] hsr_slave_0: entered promiscuous mode [ 157.738338][ T6231] hsr_slave_1: entered promiscuous mode [ 157.739102][ T6231] debugfs: 'hsr0' already exists in 'hsr' [ 157.739119][ T6231] Cannot create hsr debugfs directory [ 158.740289][ T6370] FAULT_INJECTION: forcing a failure. [ 158.740289][ T6370] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 158.740319][ T6370] CPU: 1 UID: 0 PID: 6370 Comm: syz.1.158 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.740340][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.740351][ T6370] Call Trace: [ 158.740356][ T6370] [ 158.740362][ T6370] dump_stack_lvl+0xe8/0x150 [ 158.740389][ T6370] should_fail_ex+0x467/0x600 [ 158.740415][ T6370] prepare_alloc_pages+0x223/0x690 [ 158.740443][ T6370] __alloc_frozen_pages_noprof+0x12f/0x380 [ 158.740463][ T6370] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 158.740493][ T6370] __alloc_pages_noprof+0x10/0x100 [ 158.740510][ T6370] alloc_pages_bulk_noprof+0x67e/0x890 [ 158.740530][ T6370] ? copy_splice_read+0x16f/0xab0 [ 158.740544][ T6370] ? copy_splice_read+0x16f/0xab0 [ 158.740563][ T6370] copy_splice_read+0x19f/0xab0 [ 158.740578][ T6370] ? _parse_integer_limit+0x192/0x1e0 [ 158.740605][ T6370] ? __pfx_copy_splice_read+0x10/0x10 [ 158.740627][ T6370] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 158.740649][ T6370] ? lockdep_hardirqs_on+0x7a/0x110 [ 158.740671][ T6370] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 158.740692][ T6370] ? sock_splice_read+0xcd/0x100 [ 158.740714][ T6370] ? __pfx_sock_splice_read+0x10/0x10 [ 158.740734][ T6370] splice_file_to_pipe+0x450/0x6c0 [ 158.740760][ T6370] do_splice+0x11da/0x1990 [ 158.740793][ T6370] ? __pfx_do_splice+0x10/0x10 [ 158.740816][ T6370] __se_sys_splice+0x353/0x490 [ 158.740836][ T6370] ? __pfx___se_sys_splice+0x10/0x10 [ 158.740857][ T6370] ? __x64_sys_splice+0x21/0xf0 [ 158.740873][ T6370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.740889][ T6370] do_syscall_64+0x174/0x580 [ 158.740910][ T6370] ? trace_irq_disable+0x3b/0x140 [ 158.740933][ T6370] ? clear_bhb_loop+0x40/0x90 [ 158.740952][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.740966][ T6370] RIP: 0033:0x7f92476fde59 [ 158.740980][ T6370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.740991][ T6370] RSP: 002b:00007f9245935028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 158.741007][ T6370] RAX: ffffffffffffffda RBX: 00007f9247986090 RCX: 00007f92476fde59 [ 158.741018][ T6370] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 158.741027][ T6370] RBP: 00007f9245935090 R08: 000000007ffff000 R09: 0000000000000006 [ 158.741036][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.741045][ T6370] R13: 00007f9247986128 R14: 00007f9247986090 R15: 00007fffdfa2e208 [ 158.741068][ T6370] [ 158.741248][ T3571] bridge_slave_1: left allmulticast mode [ 158.754188][ T3571] bridge_slave_1: left promiscuous mode [ 158.762356][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.153354][ T3571] bridge_slave_0: left allmulticast mode [ 159.153377][ T3571] bridge_slave_0: left promiscuous mode [ 159.153519][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.412218][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.492141][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.527644][ T3571] bond0 (unregistering): Released all slaves [ 162.851530][ T5831] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.001492][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 163.003510][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.003539][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.003573][ T5831] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 163.003601][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.056602][ T5831] usb 2-1: config 0 descriptor?? [ 163.131052][ T5831] hub 2-1:0.0: USB hub found [ 163.164078][ T6426] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.562864][ T6426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.562932][ T6426] IPv6: NLM_F_CREATE should be set when creating new route [ 163.969569][ T5831] hub 2-1:0.0: 12 ports detected [ 163.970042][ T5831] hub 2-1:0.0: insufficient power available to use all downstream ports [ 164.000129][ T6426] IPv6: NLM_F_CREATE should be set when creating new route [ 164.001631][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.172'. [ 164.413891][ T5831] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 164.413917][ T5831] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 164.463195][ T5831] usbhid 2-1:0.0: can't add hid device: -71 [ 164.463306][ T5831] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 164.515199][ T5831] usb 2-1: USB disconnect, device number 7 [ 164.530386][ T6428] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 164.657196][ T5608] usb 5-1: USB disconnect, device number 4 [ 164.845813][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 164.921424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 164.941422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 164.951430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 164.961418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 164.971421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 164.981419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 164.991435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 165.001424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 165.011423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 165.021427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 168.110825][ T6459] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.199439][ T5612] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 168.199484][ T5612] Bluetooth: Wrong link type (-22) [ 171.803852][ T6494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.823577][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'. [ 172.262543][ T6498] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 172.301728][ T1390] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 172.512544][ T3571] hsr_slave_0: left promiscuous mode [ 172.556512][ T3571] hsr_slave_1: left promiscuous mode [ 172.558025][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.558103][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.603304][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.603327][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.701560][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 172.791195][ T3571] veth1_macvtap: left promiscuous mode [ 172.824329][ T3571] veth0_macvtap: left promiscuous mode [ 172.824643][ T3571] veth1_vlan: left promiscuous mode [ 172.845146][ T3571] veth0_vlan: left promiscuous mode [ 172.862925][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 172.865459][ T31] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 172.865481][ T31] usb 3-1: config 0 has no interface number 0 [ 172.865523][ T31] usb 3-1: config 0 interface 184 has no altsetting 0 [ 172.904635][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 172.904661][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.904674][ T31] usb 3-1: Product: syz [ 172.904681][ T31] usb 3-1: Manufacturer: syz [ 172.904687][ T31] usb 3-1: SerialNumber: syz [ 172.957065][ T31] usb 3-1: config 0 descriptor?? [ 173.165616][ T6513] netlink: 'syz.2.190': attribute type 7 has an invalid length. [ 173.165636][ T6513] netlink: 'syz.2.190': attribute type 8 has an invalid length. [ 173.940878][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 173.940907][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 173.968158][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 173.968175][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 173.968184][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 173.968194][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 174.016385][ T31] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 174.045986][ T31] usb 3-1: USB disconnect, device number 7 [ 174.398890][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 174.511924][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 174.541577][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 174.701897][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 174.706806][ T31] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 174.706829][ T31] usb 3-1: config 0 has no interface number 0 [ 174.706873][ T31] usb 3-1: config 0 interface 184 has no altsetting 0 [ 174.749245][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 174.749272][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.749289][ T31] usb 3-1: Product: syz [ 174.749302][ T31] usb 3-1: Manufacturer: syz [ 174.749313][ T31] usb 3-1: SerialNumber: syz [ 174.819920][ T31] usb 3-1: config 0 descriptor?? [ 175.490137][ T1390] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 176.217407][ T6528] FAULT_INJECTION: forcing a failure. [ 176.217407][ T6528] name failslab, interval 1, probability 0, space 0, times 0 [ 176.217427][ T6528] CPU: 1 UID: 0 PID: 6528 Comm: syz.3.194 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.217439][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 176.217447][ T6528] Call Trace: [ 176.217451][ T6528] [ 176.217456][ T6528] dump_stack_lvl+0xe8/0x150 [ 176.217475][ T6528] should_fail_ex+0x467/0x600 [ 176.217492][ T6528] should_failslab+0xa8/0x100 [ 176.217504][ T6528] __kmalloc_cache_node_noprof+0xa9/0x6a0 [ 176.217515][ T6528] ? __get_vm_area_node+0x136/0x300 [ 176.217528][ T6528] ? __get_vm_area_node+0x136/0x300 [ 176.217545][ T6528] __get_vm_area_node+0x136/0x300 [ 176.217560][ T6528] __vmalloc_node_range_noprof+0x358/0x1730 [ 176.217575][ T6528] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 176.217589][ T6528] ? is_bpf_text_address+0x26/0x2b0 [ 176.217608][ T6528] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 176.217622][ T6528] ? is_bpf_text_address+0x26/0x2b0 [ 176.217636][ T6528] ? kernel_text_address+0xa5/0xe0 [ 176.217648][ T6528] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 176.217657][ T6528] __vmalloc_noprof+0xd2/0x120 [ 176.217671][ T6528] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 176.217689][ T6528] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 176.217705][ T6528] ? bpf_prog_alloc+0x2a/0x1a0 [ 176.217724][ T6528] bpf_prog_alloc+0x3c/0x1a0 [ 176.217744][ T6528] bpf_prog_load+0x7f8/0x1c00 [ 176.217772][ T6528] ? __pfx_bpf_prog_load+0x10/0x10 [ 176.217806][ T6528] __sys_bpf+0xd0d/0xd90 [ 176.217820][ T6528] ? __pfx___sys_bpf+0x10/0x10 [ 176.217830][ T6528] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 176.217847][ T6528] ? rt_mutex_slowunlock+0x219/0x460 [ 176.217867][ T6528] ? ksys_write+0x248/0x270 [ 176.217880][ T6528] ? __pfx_ksys_write+0x10/0x10 [ 176.217893][ T6528] __x64_sys_bpf+0xba/0xd0 [ 176.217908][ T6528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.217918][ T6528] do_syscall_64+0x174/0x580 [ 176.217933][ T6528] ? clear_bhb_loop+0x40/0x90 [ 176.217945][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.217954][ T6528] RIP: 0033:0x7f6077d0de59 [ 176.217964][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.217972][ T6528] RSP: 002b:00007f6075f66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.217983][ T6528] RAX: ffffffffffffffda RBX: 00007f6077f95fa0 RCX: 00007f6077d0de59 [ 176.217990][ T6528] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 176.217996][ T6528] RBP: 00007f6075f66090 R08: 0000000000000000 R09: 0000000000000000 [ 176.218001][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.218007][ T6528] R13: 00007f6077f96038 R14: 00007f6077f95fa0 R15: 00007ffd8b87f508 [ 176.218021][ T6528] [ 176.218088][ T6528] syz.3.194: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 176.218142][ T6528] CPU: 1 UID: 0 PID: 6528 Comm: syz.3.194 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.218153][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 176.218158][ T6528] Call Trace: [ 176.218162][ T6528] [ 176.218166][ T6528] dump_stack_lvl+0xe8/0x150 [ 176.218184][ T6528] warn_alloc+0x24c/0x270 [ 176.218196][ T6528] ? __pfx_warn_alloc+0x10/0x10 [ 176.218210][ T6528] ? __get_vm_area_node+0x2af/0x300 [ 176.218227][ T6528] __vmalloc_node_range_noprof+0x37d/0x1730 [ 176.218245][ T6528] ? is_bpf_text_address+0x26/0x2b0 [ 176.218263][ T6528] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 176.218277][ T6528] ? is_bpf_text_address+0x26/0x2b0 [ 176.218288][ T6528] ? kernel_text_address+0xa5/0xe0 [ 176.218300][ T6528] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 176.218309][ T6528] __vmalloc_noprof+0xd2/0x120 [ 176.218323][ T6528] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 176.218334][ T6528] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 176.218343][ T6528] ? bpf_prog_alloc+0x2a/0x1a0 [ 176.218353][ T6528] bpf_prog_alloc+0x3c/0x1a0 [ 176.218363][ T6528] bpf_prog_load+0x7f8/0x1c00 [ 176.218378][ T6528] ? __pfx_bpf_prog_load+0x10/0x10 [ 176.218399][ T6528] __sys_bpf+0xd0d/0xd90 [ 176.218412][ T6528] ? __pfx___sys_bpf+0x10/0x10 [ 176.218422][ T6528] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 176.218438][ T6528] ? rt_mutex_slowunlock+0x219/0x460 [ 176.218458][ T6528] ? ksys_write+0x248/0x270 [ 176.218470][ T6528] ? __pfx_ksys_write+0x10/0x10 [ 176.218483][ T6528] __x64_sys_bpf+0xba/0xd0 [ 176.218497][ T6528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.218507][ T6528] do_syscall_64+0x174/0x580 [ 176.218521][ T6528] ? clear_bhb_loop+0x40/0x90 [ 176.218532][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.218541][ T6528] RIP: 0033:0x7f6077d0de59 [ 176.218549][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.218557][ T6528] RSP: 002b:00007f6075f66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.218566][ T6528] RAX: ffffffffffffffda RBX: 00007f6077f95fa0 RCX: 00007f6077d0de59 [ 176.218572][ T6528] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 176.218578][ T6528] RBP: 00007f6075f66090 R08: 0000000000000000 R09: 0000000000000000 [ 176.218583][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.218589][ T6528] R13: 00007f6077f96038 R14: 00007f6077f95fa0 R15: 00007ffd8b87f508 [ 176.218603][ T6528] [ 176.219392][ T6528] Mem-Info: [ 176.219483][ T6528] active_anon:185 inactive_anon:6032 isolated_anon:21 [ 176.219483][ T6528] active_file:15753 inactive_file:41461 isolated_file:0 [ 176.219483][ T6528] unevictable:768 dirty:205 writeback:0 [ 176.219483][ T6528] slab_reclaimable:11737 slab_unreclaimable:99306 [ 176.219483][ T6528] mapped:31604 shmem:1289 pagetables:1237 [ 176.219483][ T6528] sec_pagetables:0 bounce:0 [ 176.219483][ T6528] kernel_misc_reclaimable:0 [ 176.219483][ T6528] free:1312301 free_pcp:8022 free_cma:0 [ 176.219640][ T6528] Node 0 active_anon:740kB inactive_anon:24128kB active_file:62816kB inactive_file:165844kB unevictable:1536kB isolated(anon):84kB isolated(file):0kB mapped:126416kB dirty:816kB writeback:0kB shmem:3620kB kernel_stack:13380kB pagetables:4796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 176.219803][ T6528] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 176.219875][ T6528] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.220211][ T6528] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 176.220594][ T6528] Node 0 DMA32 free:1298764kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:740kB inactive_anon:24128kB active_file:62816kB inactive_file:165844kB unevictable:1536kB writepending:816kB zspages:0kB present:3129332kB managed:2560732kB mlocked:0kB bounce:0kB free_pcp:32080kB local_pcp:10104kB free_cma:0kB [ 176.220627][ T6528] lowmem_reserve[]: 0 0 1 1 1 [ 176.220644][ T6528] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1860kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 176.220670][ T6528] lowmem_reserve[]: 0 0 0 0 0 [ 176.220685][ T6528] Node 1 Normal free:3935080kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 176.220901][ T6528] lowmem_reserve[]: 0 0 0 0 0 [ 176.220918][ T6528] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 176.220971][ T6528] Node 0 DMA32: 848*4kB (UME) 833*8kB (UM) 498*16kB (UM) 602*32kB (UME) 284*64kB (UM) 161*128kB (UME) 104*256kB (UME) 10*512kB (UME) 7*1024kB (UME) 2*2048kB (UM) 288*4096kB (ME) = 1298728kB [ 176.272765][ T6528] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 176.273007][ T6528] Node 1 Normal: 0*4kB 5*8kB (UM) 8*16kB (UM) 4*32kB (UM) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935080kB [ 176.273142][ T6528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.273163][ T6528] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.273177][ T6528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.273190][ T6528] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.273204][ T6528] 58499 total pagecache pages [ 176.273211][ T6528] 0 pages in swap cache [ 176.273217][ T6528] Free swap = 124996kB [ 176.273224][ T6528] Total swap = 124996kB [ 176.273231][ T6528] 2097051 pages RAM [ 176.273237][ T6528] 0 pages HighMem/MovableOnly [ 176.273243][ T6528] 424788 pages reserved [ 176.273249][ T6528] 0 pages cma reserved [ 177.441805][ T1390] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 177.455694][ T1390] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 177.765817][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 177.766082][ T31] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 177.861728][ T31] usb 3-1: USB disconnect, device number 8 [ 178.056272][ T6543] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.970315][ T5612] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 178.970333][ T5612] Bluetooth: Wrong link type (-22) [ 178.970452][ T5612] Bluetooth: hci2: link tx timeout [ 178.970767][ T5612] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.992458][ T6543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.992473][ T6543] IPv6: NLM_F_CREATE should be set when creating new route [ 178.992518][ T6543] IPv6: NLM_F_CREATE should be set when creating new route [ 179.992650][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 180.142289][ T6547] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 180.556302][ T6543] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 180.556373][ T822] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 180.557787][ T822] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 180.558518][ T822] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 180.558554][ T822] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 181.035951][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 183.429804][ T6583] netlink: 104 bytes leftover after parsing attributes in process `syz.2.205'. [ 184.402060][ T6615] FAULT_INJECTION: forcing a failure. [ 184.402060][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 184.402112][ T6615] CPU: 0 UID: 0 PID: 6615 Comm: syz.2.210 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 184.402133][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.402145][ T6615] Call Trace: [ 184.402152][ T6615] [ 184.402159][ T6615] dump_stack_lvl+0xe8/0x150 [ 184.402192][ T6615] should_fail_ex+0x467/0x600 [ 184.402224][ T6615] should_failslab+0xa8/0x100 [ 184.402247][ T6615] __kmalloc_cache_noprof+0xa0/0x6b0 [ 184.402267][ T6615] ? __se_sys_fanotify_init+0x4d8/0xb20 [ 184.402284][ T6615] ? __se_sys_fanotify_init+0x4d8/0xb20 [ 184.402309][ T6615] __se_sys_fanotify_init+0x4d8/0xb20 [ 184.402333][ T6615] ? __pfx___se_sys_fanotify_init+0x10/0x10 [ 184.402350][ T6615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.402378][ T6615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.402398][ T6615] do_syscall_64+0x174/0x580 [ 184.402427][ T6615] ? clear_bhb_loop+0x40/0x90 [ 184.402451][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.402468][ T6615] RIP: 0033:0x7f7b169dde59 [ 184.402485][ T6615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.402500][ T6615] RSP: 002b:00007f7b14bf4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 184.402520][ T6615] RAX: ffffffffffffffda RBX: 00007f7b16c66180 RCX: 00007f7b169dde59 [ 184.402534][ T6615] RDX: 0000000000000000 RSI: 0000000000101000 RDI: 0000000000000010 [ 184.402545][ T6615] RBP: 00007f7b14bf4090 R08: 0000000000000000 R09: 0000000000000000 [ 184.402557][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.402567][ T6615] R13: 00007f7b16c66218 R14: 00007f7b16c66180 R15: 00007ffe94468b48 [ 184.402597][ T6615] [ 184.656661][ T6231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.664675][ T6231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 185.666078][ T6231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.147245][ T6231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.255133][ T6638] netlink: 128 bytes leftover after parsing attributes in process `syz.4.218'. [ 186.284171][ T6638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.284567][ T6231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.354191][ T6231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.359118][ T6231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.490589][ T6231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.896027][ T6665] netlink: 72 bytes leftover after parsing attributes in process `syz.2.221'. [ 189.215259][ T6231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.709106][ T6231] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.725194][ T822] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.986713][ T822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.342632][ T1390] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.342764][ T1390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.631377][ T5609] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 193.576546][ T6741] FAULT_INJECTION: forcing a failure. [ 193.576546][ T6741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.576589][ T6741] CPU: 0 UID: 0 PID: 6741 Comm: syz.4.241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 193.576614][ T6741] Tainted: [L]=SOFTLOCKUP [ 193.576619][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 193.576629][ T6741] Call Trace: [ 193.576636][ T6741] [ 193.576643][ T6741] dump_stack_lvl+0xe8/0x150 [ 193.576673][ T6741] should_fail_ex+0x467/0x600 [ 193.576703][ T6741] _copy_to_user+0x31/0xb0 [ 193.576725][ T6741] kvm_stats_read+0x1ff/0x560 [ 193.576759][ T6741] kvm_vm_stats_read+0x73/0x90 [ 193.576781][ T6741] vfs_readv+0x588/0x850 [ 193.576809][ T6741] ? __pfx_kvm_vm_stats_read+0x10/0x10 [ 193.576832][ T6741] ? __pfx_vfs_readv+0x10/0x10 [ 193.576872][ T6741] ? __fget_files+0x2a/0x420 [ 193.576894][ T6741] ? __fget_files+0x3a8/0x420 [ 193.576909][ T6741] ? __fget_files+0x2a/0x420 [ 193.576932][ T6741] __x64_sys_preadv+0x19f/0x2c0 [ 193.576957][ T6741] ? __pfx___x64_sys_preadv+0x10/0x10 [ 193.576988][ T6741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.577008][ T6741] do_syscall_64+0x174/0x580 [ 193.577034][ T6741] ? trace_irq_disable+0x3b/0x140 [ 193.577061][ T6741] ? clear_bhb_loop+0x40/0x90 [ 193.577084][ T6741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.577103][ T6741] RIP: 0033:0x7f5d6f1ede59 [ 193.577120][ T6741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.577133][ T6741] RSP: 002b:00007f5d6d446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 193.577153][ T6741] RAX: ffffffffffffffda RBX: 00007f5d6f475fa0 RCX: 00007f5d6f1ede59 [ 193.577167][ T6741] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000005 [ 193.577179][ T6741] RBP: 00007f5d6d446090 R08: 0000000000000009 R09: 0000000000000000 [ 193.577196][ T6741] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 193.577207][ T6741] R13: 00007f5d6f476038 R14: 00007f5d6f475fa0 R15: 00007ffedac790f8 [ 193.577234][ T6741] [ 195.263322][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.263387][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.741765][ T6231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.081661][ T6231] veth0_vlan: entered promiscuous mode [ 196.133285][ T6231] veth1_vlan: entered promiscuous mode [ 196.291262][ T6770] FAULT_INJECTION: forcing a failure. [ 196.291262][ T6770] name failslab, interval 1, probability 0, space 0, times 0 [ 196.291294][ T6770] CPU: 1 UID: 0 PID: 6770 Comm: syz.3.248 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 196.291318][ T6770] Tainted: [L]=SOFTLOCKUP [ 196.291324][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 196.291337][ T6770] Call Trace: [ 196.291344][ T6770] [ 196.291351][ T6770] dump_stack_lvl+0xe8/0x150 [ 196.291382][ T6770] should_fail_ex+0x467/0x600 [ 196.291411][ T6770] should_failslab+0xa8/0x100 [ 196.291441][ T6770] __kmalloc_noprof+0xfe/0x780 [ 196.291459][ T6770] ? tomoyo_encode+0x2ad/0x570 [ 196.291478][ T6770] ? tomoyo_encode+0x2ad/0x570 [ 196.291505][ T6770] tomoyo_encode+0x2ad/0x570 [ 196.291532][ T6770] tomoyo_realpath_from_path+0x5fa/0x640 [ 196.291562][ T6770] ? tomoyo_path_number_perm+0x219/0x5f0 [ 196.291590][ T6770] tomoyo_path_number_perm+0x246/0x5f0 [ 196.291622][ T6770] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 196.291650][ T6770] ? __lock_acquire+0x683/0x2ce0 [ 196.291681][ T6770] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 196.291706][ T6770] ? hook_file_ioctl+0x1f3/0x600 [ 196.291731][ T6770] ? lockdep_hardirqs_on+0x7a/0x110 [ 196.291775][ T6770] ? __fget_files+0x2a/0x420 [ 196.291795][ T6770] ? __fget_files+0x2a/0x420 [ 196.291812][ T6770] ? __fget_files+0x3a8/0x420 [ 196.291828][ T6770] ? __fget_files+0x2a/0x420 [ 196.291848][ T6770] security_file_ioctl+0xc3/0x2a0 [ 196.291868][ T6770] __se_sys_ioctl+0x47/0x170 [ 196.291890][ T6770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.291910][ T6770] do_syscall_64+0x174/0x580 [ 196.291936][ T6770] ? trace_irq_disable+0x3b/0x140 [ 196.291960][ T6770] ? clear_bhb_loop+0x40/0x90 [ 196.291983][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.292001][ T6770] RIP: 0033:0x7f6077d0de59 [ 196.292018][ T6770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.292032][ T6770] RSP: 002b:00007f6075f66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.292052][ T6770] RAX: ffffffffffffffda RBX: 00007f6077f95fa0 RCX: 00007f6077d0de59 [ 196.292065][ T6770] RDX: 0000000000000000 RSI: 0000000040084d06 RDI: 0000000000000003 [ 196.292075][ T6770] RBP: 00007f6075f66090 R08: 0000000000000000 R09: 0000000000000000 [ 196.292085][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.292096][ T6770] R13: 00007f6077f96038 R14: 00007f6077f95fa0 R15: 00007ffd8b87f508 [ 196.292126][ T6770] [ 196.293252][ T6770] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.409773][ T6231] veth0_macvtap: entered promiscuous mode [ 196.453743][ T6231] veth1_macvtap: entered promiscuous mode [ 196.583308][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.650634][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.670360][ T1119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.670782][ T1119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.671190][ T1119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.675936][ T1119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.463856][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.463877][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.863675][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.863694][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.976495][ T6791] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.976595][ T6791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.976605][ T6791] IPv6: NLM_F_CREATE should be set when creating new route [ 198.976634][ T6791] IPv6: NLM_F_CREATE should be set when creating new route [ 199.068650][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 199.366850][ T6799] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 199.520724][ T5729] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 199.701466][ T5729] usb 1-1: Using ep0 maxpacket: 16 [ 199.703303][ T5729] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.703627][ T5729] usb 1-1: config 0 has no interface number 0 [ 199.731548][ T5729] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 199.731574][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.731590][ T5729] usb 1-1: Product: syz [ 199.731603][ T5729] usb 1-1: Manufacturer: syz [ 199.731615][ T5729] usb 1-1: SerialNumber: syz [ 199.740072][ T5729] usb 1-1: config 0 descriptor?? [ 199.795483][ T5729] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 199.919159][ T3571] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 199.977843][ T3571] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 199.978460][ T3571] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 199.978500][ T3571] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 200.204691][ T5609] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 200.654744][ T5729] gspca_spca1528: reg_w err -110 [ 200.672174][ T5729] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 206.321501][ T6869] Zero length message leads to an empty skb [ 207.282506][ T5606] Bluetooth: hci4: command 0x0406 tx timeout [ 207.282540][ T5606] Bluetooth: hci2: command 0x0406 tx timeout [ 207.282562][ T5606] Bluetooth: hci0: command 0x0406 tx timeout [ 207.282584][ T5606] Bluetooth: hci1: command 0x0406 tx timeout [ 207.371467][ T5739] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 207.544307][ T5739] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.544334][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.579833][ T5739] usb 3-1: config 0 descriptor?? [ 207.594763][ T5739] cp210x 3-1:0.0: cp210x converter detected [ 207.879309][ T5612] Bluetooth: hci4: unexpected event for opcode 0x042c [ 207.889611][ T5612] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 208.064925][ T6881] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 209.455452][ T5739] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 209.455974][ T5739] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 209.455997][ T5739] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 209.562592][ T5739] usb 3-1: cp210x converter now attached to ttyUSB0 [ 209.629580][ T5739] usb 3-1: USB disconnect, device number 9 [ 209.720579][ T5739] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 209.726339][ T5739] cp210x 3-1:0.0: device disconnected [ 209.930169][ T5790] usb 1-1: USB disconnect, device number 5 [ 210.236086][ T6905] ======================================================= [ 210.236086][ T6905] WARNING: The mand mount option has been deprecated and [ 210.236086][ T6905] and is ignored by this kernel. Remove the mand [ 210.236086][ T6905] option from the mount to silence this warning. [ 210.236086][ T6905] ======================================================= [ 210.236237][ T6905] 9p: Bad value for 'wfdno' [ 210.244147][ T6905] netlink: 96 bytes leftover after parsing attributes in process `syz.2.284'. [ 210.573451][ T6908] FAULT_INJECTION: forcing a failure. [ 210.573451][ T6908] name failslab, interval 1, probability 0, space 0, times 0 [ 210.573485][ T6908] CPU: 1 UID: 0 PID: 6908 Comm: syz.4.286 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 210.573510][ T6908] Tainted: [L]=SOFTLOCKUP [ 210.573516][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 210.573527][ T6908] Call Trace: [ 210.573534][ T6908] [ 210.573541][ T6908] dump_stack_lvl+0xe8/0x150 [ 210.573579][ T6908] should_fail_ex+0x467/0x600 [ 210.573609][ T6908] should_failslab+0xa8/0x100 [ 210.573632][ T6908] __kmalloc_noprof+0xfe/0x780 [ 210.573652][ T6908] ? tomoyo_encode+0x2ad/0x570 [ 210.573671][ T6908] ? tomoyo_encode+0x2ad/0x570 [ 210.573699][ T6908] tomoyo_encode+0x2ad/0x570 [ 210.573727][ T6908] tomoyo_realpath_from_path+0x5fa/0x640 [ 210.573767][ T6908] ? tomoyo_path_number_perm+0x219/0x5f0 [ 210.573797][ T6908] tomoyo_path_number_perm+0x246/0x5f0 [ 210.573829][ T6908] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 210.573857][ T6908] ? __lock_acquire+0x683/0x2ce0 [ 210.573886][ T6908] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 210.573911][ T6908] ? hook_file_ioctl+0x1f3/0x600 [ 210.573935][ T6908] ? lockdep_hardirqs_on+0x7a/0x110 [ 210.573978][ T6908] ? __fget_files+0x2a/0x420 [ 210.573998][ T6908] ? __fget_files+0x2a/0x420 [ 210.574013][ T6908] ? __fget_files+0x3a8/0x420 [ 210.574029][ T6908] ? __fget_files+0x2a/0x420 [ 210.574050][ T6908] security_file_ioctl+0xc3/0x2a0 [ 210.574070][ T6908] __se_sys_ioctl+0x47/0x170 [ 210.574093][ T6908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.574112][ T6908] do_syscall_64+0x174/0x580 [ 210.574138][ T6908] ? trace_irq_disable+0x3b/0x140 [ 210.574166][ T6908] ? clear_bhb_loop+0x40/0x90 [ 210.574187][ T6908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.574205][ T6908] RIP: 0033:0x7f5d6f1ede59 [ 210.574222][ T6908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.574236][ T6908] RSP: 002b:00007f5d6d446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.574256][ T6908] RAX: ffffffffffffffda RBX: 00007f5d6f475fa0 RCX: 00007f5d6f1ede59 [ 210.574268][ T6908] RDX: 0000000000000000 RSI: 00000000000007a8 RDI: 0000000000000003 [ 210.574279][ T6908] RBP: 00007f5d6d446090 R08: 0000000000000000 R09: 0000000000000000 [ 210.574289][ T6908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.574300][ T6908] R13: 00007f5d6f476038 R14: 00007f5d6f475fa0 R15: 00007ffedac790f8 [ 210.574332][ T6908] [ 210.575932][ T6908] ERROR: Out of memory at tomoyo_realpath_from_path. [ 211.005601][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 211.005624][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 211.116900][ T6919] IPv6: NLM_F_CREATE should be specified when creating new route [ 211.117002][ T6919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.117012][ T6919] IPv6: NLM_F_CREATE should be set when creating new route [ 211.117042][ T6919] IPv6: NLM_F_CREATE should be set when creating new route [ 211.119937][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 212.072865][ T6922] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 212.203671][ T822] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 212.228725][ T5612] Bluetooth: hci1: unexpected event for opcode 0x042c [ 212.261546][ T1390] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 212.274320][ T43] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 212.274362][ T43] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.799318][ T6961] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 214.806529][ T6963] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.806633][ T6963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.806641][ T6963] IPv6: NLM_F_CREATE should be set when creating new route [ 214.806673][ T6963] IPv6: NLM_F_CREATE should be set when creating new route [ 214.811605][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'. [ 214.881610][ T36] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 215.041557][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 215.043767][ T36] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.070332][ T36] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 215.070359][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.070387][ T36] usb 2-1: Product: syz [ 215.070400][ T36] usb 2-1: Manufacturer: syz [ 215.070413][ T36] usb 2-1: SerialNumber: syz [ 216.115920][ T36] usb 2-1: interface 2 not found [ 216.239109][ T5730] usb 2-1: USB disconnect, device number 8 [ 216.252607][ T5612] Bluetooth: hci3: unexpected event for opcode 0x042c [ 217.711442][ T5612] Bluetooth: hci0: unexpected event for opcode 0x042c [ 217.717438][ T5612] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 218.521582][ T197] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 218.801671][ T197] usb 3-1: Using ep0 maxpacket: 32 [ 218.813196][ T197] usb 3-1: unable to get BOS descriptor or descriptor too short [ 218.815671][ T197] usb 3-1: config 1 interface 0 has no altsetting 0 [ 218.827786][ T197] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 218.827821][ T197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.827883][ T197] usb 3-1: Product: syz [ 218.827948][ T197] usb 3-1: Manufacturer: syz [ 218.827962][ T197] usb 3-1: SerialNumber: syz [ 219.558128][ T7008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.583192][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 219.794950][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 219.874587][ T6999] openvswitch: netlink: Missing valid actions attribute. [ 219.874616][ T6999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.013957][ T197] usbhid 3-1:1.0: can't add hid device: -71 [ 220.014064][ T197] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 220.044762][ T197] usb 3-1: USB disconnect, device number 10 [ 220.815464][ T5612] Bluetooth: hci2: unexpected event for opcode 0x042c [ 221.069530][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 221.222693][ T7051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.331'. [ 222.500775][ T37] audit: type=1326 audit(1784019925.084:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7057 comm="syz.3.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6077d0de59 code=0x7ffc0000 [ 222.500826][ T37] audit: type=1326 audit(1784019925.104:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7057 comm="syz.3.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6077d0de59 code=0x7ffc0000 [ 222.500866][ T37] audit: type=1326 audit(1784019925.114:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7057 comm="syz.3.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6077d0de59 code=0x7ffc0000 [ 222.500904][ T37] audit: type=1326 audit(1784019925.114:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7057 comm="syz.3.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6077d0de59 code=0x7ffc0000 [ 222.503006][ T37] audit: type=1326 audit(1784019925.124:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7057 comm="syz.3.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f6077d0de59 code=0x7ffc0000 [ 222.503048][ T37] audit: type=1326 audit(1784019925.124:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7057 comm="syz.3.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6077d0de59 code=0x7ffc0000 [ 222.503080][ T37] audit: type=1326 audit(1784019925.134:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7057 comm="syz.3.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6077d0de59 code=0x7ffc0000 [ 222.503112][ T37] audit: type=1326 audit(1784019925.134:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7057 comm="syz.3.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6077d0de59 code=0x7ffc0000 [ 222.503149][ T37] audit: type=1326 audit(1784019925.134:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7057 comm="syz.3.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6077d0de59 code=0x7ffc0000 [ 222.503184][ T37] audit: type=1326 audit(1784019925.134:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7057 comm="syz.3.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6077d0de59 code=0x7ffc0000 [ 222.535641][ T7058] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.334'. [ 222.967726][ T7072] FAULT_INJECTION: forcing a failure. [ 222.967726][ T7072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.967766][ T7072] CPU: 1 UID: 0 PID: 7072 Comm: syz.3.340 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 222.967792][ T7072] Tainted: [L]=SOFTLOCKUP [ 222.967799][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 222.967809][ T7072] Call Trace: [ 222.967816][ T7072] [ 222.967824][ T7072] dump_stack_lvl+0xe8/0x150 [ 222.967857][ T7072] should_fail_ex+0x467/0x600 [ 222.967890][ T7072] _copy_from_user+0x2d/0xb0 [ 222.967914][ T7072] ___sys_sendmsg+0x1c6/0x360 [ 222.967935][ T7072] ? __lock_acquire+0x683/0x2ce0 [ 222.967957][ T7072] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.968009][ T7072] ? __fget_files+0x2a/0x420 [ 222.968027][ T7072] ? __fget_files+0x3a8/0x420 [ 222.968053][ T7072] __x64_sys_sendmsg+0x1b7/0x290 [ 222.968081][ T7072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.968116][ T7072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.968137][ T7072] do_syscall_64+0x174/0x580 [ 222.968164][ T7072] ? trace_irq_disable+0x3b/0x140 [ 222.968193][ T7072] ? clear_bhb_loop+0x40/0x90 [ 222.968216][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.968235][ T7072] RIP: 0033:0x7f6077d0de59 [ 222.968252][ T7072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.968266][ T7072] RSP: 002b:00007f6075f66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.968286][ T7072] RAX: ffffffffffffffda RBX: 00007f6077f95fa0 RCX: 00007f6077d0de59 [ 222.968299][ T7072] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 222.968311][ T7072] RBP: 00007f6075f66090 R08: 0000000000000000 R09: 0000000000000000 [ 222.968322][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.968333][ T7072] R13: 00007f6077f96038 R14: 00007f6077f95fa0 R15: 00007ffd8b87f508 [ 222.968362][ T7072] [ 223.105317][ T5790] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 223.471486][ T5831] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 223.804314][ T5790] usb 5-1: Using ep0 maxpacket: 16 [ 224.255091][ T5790] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 224.255119][ T5790] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.255145][ T5790] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 224.255163][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.298035][ T5790] usb 5-1: config 0 descriptor?? [ 224.411504][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 224.414138][ T5831] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.415520][ T5831] usb 2-1: config 1 interface 0 has no altsetting 0 [ 224.418158][ T5831] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 224.418184][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.418201][ T5831] usb 2-1: Product: syz [ 224.418215][ T5831] usb 2-1: Manufacturer: syz [ 224.418228][ T5831] usb 2-1: SerialNumber: syz [ 224.758285][ T5790] usbhid 5-1:0.0: can't add hid device: -71 [ 224.758493][ T5790] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 224.776015][ T5790] usb 5-1: USB disconnect, device number 5 [ 224.934853][ T7073] openvswitch: netlink: Missing valid actions attribute. [ 224.934881][ T7073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.943104][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 225.345710][ T5612] Bluetooth: hci1: unexpected event for opcode 0x042c [ 226.800134][ T5831] usbhid 2-1:1.0: can't add hid device: -71 [ 226.800253][ T5831] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 227.456614][ T5831] usb 2-1: USB disconnect, device number 9 [ 231.414336][ T7142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.481588][ T197] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 231.532150][ T7153] FAULT_INJECTION: forcing a failure. [ 231.532150][ T7153] name failslab, interval 1, probability 0, space 0, times 0 [ 231.532183][ T7153] CPU: 1 UID: 0 PID: 7153 Comm: syz.3.367 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 231.532209][ T7153] Tainted: [L]=SOFTLOCKUP [ 231.532216][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 231.532227][ T7153] Call Trace: [ 231.532235][ T7153] [ 231.532242][ T7153] dump_stack_lvl+0xe8/0x150 [ 231.532276][ T7153] should_fail_ex+0x467/0x600 [ 231.532308][ T7153] should_failslab+0xa8/0x100 [ 231.532331][ T7153] __kmalloc_noprof+0xfe/0x780 [ 231.532349][ T7153] ? rcu_is_watching+0x15/0xb0 [ 231.532371][ T7153] ? tomoyo_realpath_from_path+0xef/0x640 [ 231.532393][ T7153] ? tomoyo_realpath_from_path+0xef/0x640 [ 231.532422][ T7153] tomoyo_realpath_from_path+0xef/0x640 [ 231.532453][ T7153] ? tomoyo_path_number_perm+0x219/0x5f0 [ 231.532483][ T7153] tomoyo_path_number_perm+0x246/0x5f0 [ 231.532516][ T7153] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 231.532544][ T7153] ? __lock_acquire+0x683/0x2ce0 [ 231.532575][ T7153] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 231.532603][ T7153] ? hook_file_ioctl+0x1f3/0x600 [ 231.532628][ T7153] ? lockdep_hardirqs_on+0x7a/0x110 [ 231.532672][ T7153] ? __fget_files+0x2a/0x420 [ 231.532694][ T7153] ? __fget_files+0x2a/0x420 [ 231.532710][ T7153] ? __fget_files+0x3a8/0x420 [ 231.532727][ T7153] ? __fget_files+0x2a/0x420 [ 231.532749][ T7153] security_file_ioctl+0xc3/0x2a0 [ 231.532770][ T7153] __se_sys_ioctl+0x47/0x170 [ 231.532794][ T7153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.532815][ T7153] do_syscall_64+0x174/0x580 [ 231.532843][ T7153] ? trace_irq_disable+0x3b/0x140 [ 231.532873][ T7153] ? clear_bhb_loop+0x40/0x90 [ 231.532899][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.532918][ T7153] RIP: 0033:0x7f6077d0de59 [ 231.532936][ T7153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.532952][ T7153] RSP: 002b:00007f6075f66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.532972][ T7153] RAX: ffffffffffffffda RBX: 00007f6077f95fa0 RCX: 00007f6077d0de59 [ 231.532986][ T7153] RDX: 0000200000000040 RSI: 00000000c034564b RDI: 0000000000000004 [ 231.532998][ T7153] RBP: 00007f6075f66090 R08: 0000000000000000 R09: 0000000000000000 [ 231.533010][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.533021][ T7153] R13: 00007f6077f96038 R14: 00007f6077f95fa0 R15: 00007ffd8b87f508 [ 231.533052][ T7153] [ 231.535709][ T7153] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.881470][ T197] usb 5-1: Using ep0 maxpacket: 32 [ 232.883555][ T197] usb 5-1: unable to get BOS descriptor or descriptor too short [ 232.884848][ T197] usb 5-1: config 1 interface 0 has no altsetting 0 [ 232.886983][ T197] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 232.887008][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.887036][ T197] usb 5-1: Product: syz [ 232.887049][ T197] usb 5-1: Manufacturer: syz [ 232.887062][ T197] usb 5-1: SerialNumber: syz [ 233.235392][ T7167] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 233.319955][ T5612] Bluetooth: hci4: unexpected event for opcode 0x042c [ 233.320692][ T5612] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 233.509395][ T7168] openvswitch: netlink: Missing valid actions attribute. [ 233.509423][ T7168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.515973][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 233.921889][ T197] usbhid 5-1:1.0: can't add hid device: -71 [ 233.922033][ T197] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 233.971892][ T197] usb 5-1: USB disconnect, device number 6 [ 234.495308][ T7186] FAULT_INJECTION: forcing a failure. [ 234.495308][ T7186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.495342][ T7186] CPU: 1 UID: 0 PID: 7186 Comm: syz.1.379 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 234.495368][ T7186] Tainted: [L]=SOFTLOCKUP [ 234.495375][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 234.495386][ T7186] Call Trace: [ 234.495394][ T7186] [ 234.495402][ T7186] dump_stack_lvl+0xe8/0x150 [ 234.495435][ T7186] should_fail_ex+0x467/0x600 [ 234.495467][ T7186] _copy_from_user+0x2d/0xb0 [ 234.495488][ T7186] ___sys_sendmsg+0x1c6/0x360 [ 234.495535][ T7186] ? __lock_acquire+0x683/0x2ce0 [ 234.495558][ T7186] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.495609][ T7186] ? __fget_files+0x2a/0x420 [ 234.495627][ T7186] ? __fget_files+0x3a8/0x420 [ 234.495654][ T7186] __x64_sys_sendmsg+0x1b7/0x290 [ 234.495677][ T7186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.495713][ T7186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.495734][ T7186] do_syscall_64+0x174/0x580 [ 234.495761][ T7186] ? trace_irq_disable+0x3b/0x140 [ 234.495790][ T7186] ? clear_bhb_loop+0x40/0x90 [ 234.495813][ T7186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.495831][ T7186] RIP: 0033:0x7f92476fde59 [ 234.495848][ T7186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.495864][ T7186] RSP: 002b:00007f9245956028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.495887][ T7186] RAX: ffffffffffffffda RBX: 00007f9247985fa0 RCX: 00007f92476fde59 [ 234.495901][ T7186] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 234.495913][ T7186] RBP: 00007f9245956090 R08: 0000000000000000 R09: 0000000000000000 [ 234.495925][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.495937][ T7186] R13: 00007f9247986038 R14: 00007f9247985fa0 R15: 00007fffdfa2e208 [ 234.495966][ T7186] [ 236.081479][ T197] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 236.103414][ T5730] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 236.231657][ T197] usb 5-1: Using ep0 maxpacket: 32 [ 236.233825][ T197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.233854][ T197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.233890][ T197] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 236.233912][ T197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.251445][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 236.311299][ T5730] usb 4-1: config 16 has an invalid interface number: 22 but max is 0 [ 236.311480][ T5730] usb 4-1: config 16 has an invalid interface descriptor of length 2, skipping [ 236.311499][ T5730] usb 4-1: config 16 has no interface number 0 [ 236.311541][ T5730] usb 4-1: config 16 interface 22 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 236.311566][ T5730] usb 4-1: config 16 interface 22 altsetting 6 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 236.311588][ T5730] usb 4-1: config 16 interface 22 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 236.311611][ T5730] usb 4-1: config 16 interface 22 has no altsetting 0 [ 237.262736][ T5730] usb 4-1: New USB device found, idVendor=066b, idProduct=200c, bcdDevice=6d.ff [ 237.262766][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.262785][ T5730] usb 4-1: Product: ᱂ [ 237.262798][ T5730] usb 4-1: Manufacturer: ⠲炯ኸ雽ࣅᦘ鰼䵎챆瑊Ꮢ函췿ꞹ墎ꈎ [ 237.262814][ T5730] usb 4-1: SerialNumber: У [ 237.264470][ T197] usb 5-1: config 0 descriptor?? [ 238.021193][ T197] hub 5-1:0.0: USB hub found [ 238.139498][ T197] hub 5-1:0.0: 12 ports detected [ 238.140297][ T197] hub 5-1:0.0: insufficient power available to use all downstream ports [ 238.163128][ T5730] pegasus 4-1:16.22: Missing or invalid endpoints [ 238.189700][ T5730] rndis_host 4-1:16.22: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 238.226209][ T5730] usb 4-1: USB disconnect, device number 5 [ 238.286956][ T5835] udevd[5835]: setting mode of /dev/bus/usb/004/005 to 020664 failed: No such file or directory [ 238.287596][ T5835] udevd[5835]: setting owner of /dev/bus/usb/004/005 to uid=0, gid=0 failed: No such file or directory [ 238.361530][ T5739] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 239.261547][ T197] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 239.261573][ T197] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 239.479648][ T197] usbhid 5-1:0.0: can't add hid device: -32 [ 239.479763][ T197] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 239.633446][ T5739] usb 3-1: device not accepting address 11, error -71 [ 239.723056][ T197] usb 5-1: USB disconnect, device number 7 [ 240.011490][ T5731] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 240.067748][ T5612] Bluetooth: hci2: unexpected event for opcode 0x042c [ 240.213616][ T7237] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 240.213616][ T7237] Please contact the netfilter-devel mailing list or update your nftables rules. [ 240.544755][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 240.559488][ T5731] usb 4-1: unable to get BOS descriptor or descriptor too short [ 240.570536][ T5731] usb 4-1: config 1 interface 0 has no altsetting 0 [ 240.582957][ T5731] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 240.582984][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.583002][ T5731] usb 4-1: Product: syz [ 240.583015][ T5731] usb 4-1: Manufacturer: syz [ 240.583027][ T5731] usb 4-1: SerialNumber: syz [ 241.671899][ T7245] openvswitch: netlink: Missing valid actions attribute. [ 241.671928][ T7245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.967992][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 242.133299][ T5731] usbhid 4-1:1.0: can't add hid device: -71 [ 242.133412][ T5731] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 242.151277][ T5731] usb 4-1: USB disconnect, device number 6 [ 242.761536][ T5729] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 242.913813][ T5729] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 242.913843][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.006331][ T5729] usb 5-1: config 0 descriptor?? [ 243.037677][ T5729] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 243.542379][ T5729] gspca_cpia1: usb_control_msg 03, error -71 [ 243.542992][ T5729] gspca_cpia1: usb_control_msg 01, error -71 [ 243.543008][ T5729] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 243.584254][ T5729] usb 5-1: USB disconnect, device number 8 [ 247.875919][ T7308] serio: Serial port ptm0 [ 248.625589][ T7299] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 248.686384][ T5739] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 248.770171][ T7318] netlink: 104 bytes leftover after parsing attributes in process `syz.4.419'. [ 248.844395][ T5739] usb 3-1: Using ep0 maxpacket: 32 [ 248.847907][ T5739] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.852507][ T5739] usb 3-1: config 1 interface 0 has no altsetting 0 [ 248.857289][ T5739] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 248.857315][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.857333][ T5739] usb 3-1: Product: syz [ 248.857346][ T5739] usb 3-1: Manufacturer: syz [ 248.857359][ T5739] usb 3-1: SerialNumber: syz [ 249.395256][ T5612] Bluetooth: hci0: unexpected event for opcode 0x042c [ 249.395952][ T5612] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 249.396010][ T5612] Bluetooth: hci3: command 0x0401 tx timeout [ 249.506915][ T7326] openvswitch: netlink: Missing valid actions attribute. [ 249.506946][ T7326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.982535][ T5739] usbhid 3-1:1.0: can't add hid device: -71 [ 249.982658][ T5739] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 250.037854][ T5739] usb 3-1: USB disconnect, device number 13 [ 250.543274][ T197] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 251.551481][ T197] usb 5-1: Using ep0 maxpacket: 32 [ 251.554187][ T197] usb 5-1: unable to get BOS descriptor or descriptor too short [ 251.555543][ T197] usb 5-1: config 1 interface 0 has no altsetting 0 [ 251.558188][ T197] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 251.558212][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.558231][ T197] usb 5-1: Product: syz [ 251.558243][ T197] usb 5-1: Manufacturer: syz [ 251.558256][ T197] usb 5-1: SerialNumber: syz [ 251.616121][ T5731] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 251.788154][ T5731] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 251.788183][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.821792][ T5731] usb 1-1: config 0 descriptor?? [ 251.884234][ T5731] cp210x 1-1:0.0: cp210x converter detected [ 252.031200][ T7333] openvswitch: netlink: Missing valid actions attribute. [ 252.031231][ T7333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.101098][ T197] usbhid 5-1:1.0: can't add hid device: -71 [ 252.101260][ T197] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 252.134597][ T197] usb 5-1: USB disconnect, device number 9 [ 252.558579][ T7359] binder: 7351:7359 ioctl c0306201 200000000000 returned -14 [ 252.772846][ T5731] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 252.772876][ T5731] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 252.826220][ T5731] usb 1-1: cp210x converter now attached to ttyUSB0 [ 252.829163][ T5731] usb 1-1: USB disconnect, device number 6 [ 252.853506][ T5731] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.860102][ T5731] cp210x 1-1:0.0: device disconnected [ 253.522703][ T7382] binder: 7378:7382 ioctl c0306201 0 returned -14 [ 254.691525][ T5333] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 254.806070][ T7391] FAULT_INJECTION: forcing a failure. [ 254.806070][ T7391] name failslab, interval 1, probability 0, space 0, times 0 [ 254.806092][ T7391] CPU: 1 UID: 0 PID: 7391 Comm: syz.3.442 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 254.806107][ T7391] Tainted: [L]=SOFTLOCKUP [ 254.806110][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.806116][ T7391] Call Trace: [ 254.806120][ T7391] [ 254.806125][ T7391] dump_stack_lvl+0xe8/0x150 [ 254.806144][ T7391] should_fail_ex+0x467/0x600 [ 254.806161][ T7391] should_failslab+0xa8/0x100 [ 254.806173][ T7391] kmem_cache_alloc_node_noprof+0xae/0x670 [ 254.806189][ T7391] ? __alloc_skb+0x1d7/0x7a0 [ 254.806203][ T7391] ? __alloc_skb+0x1d7/0x7a0 [ 254.806226][ T7391] __alloc_skb+0x1d7/0x7a0 [ 254.806243][ T7391] do_mq_notify+0x16f/0xf00 [ 254.806257][ T7391] ? __pfx_do_mq_notify+0x10/0x10 [ 254.806271][ T7391] __x64_sys_mq_notify+0x134/0x190 [ 254.806288][ T7391] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 254.806301][ T7391] ? ksys_write+0x202/0x270 [ 254.806319][ T7391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.806330][ T7391] do_syscall_64+0x174/0x580 [ 254.806344][ T7391] ? trace_irq_disable+0x3b/0x140 [ 254.806359][ T7391] ? clear_bhb_loop+0x40/0x90 [ 254.806371][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.806381][ T7391] RIP: 0033:0x7f6077d0de59 [ 254.806391][ T7391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.806399][ T7391] RSP: 002b:00007f6075f66028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 254.806410][ T7391] RAX: ffffffffffffffda RBX: 00007f6077f95fa0 RCX: 00007f6077d0de59 [ 254.806417][ T7391] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 254.806424][ T7391] RBP: 00007f6075f66090 R08: 0000000000000000 R09: 0000000000000000 [ 254.806430][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.806436][ T7391] R13: 00007f6077f96038 R14: 00007f6077f95fa0 R15: 00007ffd8b87f508 [ 254.806450][ T7391] [ 254.876830][ T7392] loop8: detected capacity change from 0 to 7 [ 255.396999][ T7392] Dev loop8: unable to read RDB block 7 [ 255.397046][ T7392] loop8: unable to read partition table [ 255.397247][ T7392] loop8: partition table beyond EOD, truncated [ 255.397265][ T7392] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 255.609187][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.609255][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.664388][ T5333] usb 2-1: Using ep0 maxpacket: 32 [ 255.670997][ T5333] usb 2-1: unable to get BOS descriptor or descriptor too short [ 255.672790][ T5333] usb 2-1: config 1 interface 0 has no altsetting 0 [ 255.698597][ T5333] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 255.698633][ T5333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.698647][ T5333] usb 2-1: Product: syz [ 255.698654][ T5333] usb 2-1: Manufacturer: syz [ 255.698660][ T5333] usb 2-1: SerialNumber: syz [ 256.235195][ T7384] openvswitch: netlink: Missing valid actions attribute. [ 256.235224][ T7384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.268557][ T7404] FAULT_INJECTION: forcing a failure. [ 256.268557][ T7404] name failslab, interval 1, probability 0, space 0, times 0 [ 256.268588][ T7404] CPU: 0 UID: 0 PID: 7404 Comm: syz.4.446 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 256.268609][ T7404] Tainted: [L]=SOFTLOCKUP [ 256.268614][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.268624][ T7404] Call Trace: [ 256.268629][ T7404] [ 256.268645][ T7404] dump_stack_lvl+0xe8/0x150 [ 256.268676][ T7404] should_fail_ex+0x467/0x600 [ 256.268702][ T7404] should_failslab+0xa8/0x100 [ 256.268718][ T7404] kmem_cache_alloc_node_noprof+0xae/0x670 [ 256.268740][ T7404] ? __alloc_skb+0x1d7/0x7a0 [ 256.268759][ T7404] ? __alloc_skb+0x1d7/0x7a0 [ 256.268782][ T7404] __alloc_skb+0x1d7/0x7a0 [ 256.268805][ T7404] netlink_sendmsg+0x5d4/0xb40 [ 256.268827][ T7404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.268844][ T7404] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 256.268863][ T7404] ? __kernel_text_address+0xd/0x30 [ 256.268876][ T7404] ? unwind_get_return_address+0x4d/0x90 [ 256.268893][ T7404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.268914][ T7404] sock_sendmsg_nosec+0x13a/0x180 [ 256.268936][ T7404] ____sys_sendmsg+0x565/0x870 [ 256.268950][ T7404] ? __might_fault+0xaf/0x130 [ 256.268969][ T7404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.268990][ T7404] ? import_iovec+0x73/0xa0 [ 256.269010][ T7404] ___sys_sendmsg+0x2a5/0x360 [ 256.269025][ T7404] ? __lock_acquire+0x683/0x2ce0 [ 256.269042][ T7404] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.269080][ T7404] ? __fget_files+0x2a/0x420 [ 256.269093][ T7404] ? __fget_files+0x3a8/0x420 [ 256.269114][ T7404] __x64_sys_sendmsg+0x1b7/0x290 [ 256.269129][ T7404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.269158][ T7404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.269178][ T7404] do_syscall_64+0x174/0x580 [ 256.269201][ T7404] ? trace_irq_disable+0x3b/0x140 [ 256.269221][ T7404] ? clear_bhb_loop+0x40/0x90 [ 256.269237][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.269250][ T7404] RIP: 0033:0x7f5d6f1ede59 [ 256.269264][ T7404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.269276][ T7404] RSP: 002b:00007f5d6d446028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.269291][ T7404] RAX: ffffffffffffffda RBX: 00007f5d6f475fa0 RCX: 00007f5d6f1ede59 [ 256.269301][ T7404] RDX: 0000000000044054 RSI: 0000200000000000 RDI: 0000000000000003 [ 256.269309][ T7404] RBP: 00007f5d6d446090 R08: 0000000000000000 R09: 0000000000000000 [ 256.269318][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.269326][ T7404] R13: 00007f5d6f476038 R14: 00007f5d6f475fa0 R15: 00007ffedac790f8 [ 256.269349][ T7404] [ 256.487484][ T7411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.447'. [ 256.599967][ T5825] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 256.721227][ T5333] usbhid 2-1:1.0: can't add hid device: -71 [ 256.727714][ T5333] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 256.767606][ T5333] usb 2-1: USB disconnect, device number 10 [ 256.791622][ T5825] usb 1-1: Using ep0 maxpacket: 8 [ 256.793673][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.793703][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 256.793742][ T5825] usb 1-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 256.793763][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.856606][ T5825] usb 1-1: config 0 descriptor?? [ 259.364350][ T7419] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.364486][ T7419] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 259.742788][ T7419] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.742838][ T7419] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 260.095297][ T7438] loop8: detected capacity change from 0 to 7 [ 260.806826][ T7438] Dev loop8: unable to read RDB block 7 [ 260.806870][ T7438] loop8: unable to read partition table [ 260.807066][ T7438] loop8: partition table beyond EOD, truncated [ 260.807084][ T7438] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 260.808175][ T7419] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.808258][ T7419] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 261.498911][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 261.735750][ T7419] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.735926][ T7419] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.735996][ T7419] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 261.761444][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 261.789363][ T5825] usbhid 1-1:0.0: can't add hid device: -71 [ 261.789476][ T5825] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 261.814944][ T5825] usb 1-1: USB disconnect, device number 7 [ 261.818855][ T7419] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 262.109917][ T7447] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(72) [ 262.109944][ T7447] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 262.241478][ T7394] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 262.255645][ T7447] vhci_hcd vhci_hcd.0: Device attached [ 262.370092][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'. [ 262.401459][ T7394] usb 2-1: Using ep0 maxpacket: 16 [ 262.408947][ T7394] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 262.408975][ T7394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.408994][ T7394] usb 2-1: Product: syz [ 262.409007][ T7394] usb 2-1: Manufacturer: syz [ 262.409020][ T7394] usb 2-1: SerialNumber: syz [ 262.450005][ T5825] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 262.474614][ T7394] usb 2-1: config 0 descriptor?? [ 262.501436][ T5731] kernel read not supported for file /288/map_files (pid: 5731 comm: kworker/0:5) [ 262.859201][ T5729] ================================================================== [ 262.859218][ T5729] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 262.859255][ T5729] Read of size 8 at addr ffffc90005809008 by task kworker/1:5/5729 [ 262.859270][ T5729] [ 262.859283][ T5729] CPU: 1 UID: 0 PID: 5729 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 262.859312][ T5729] Tainted: [L]=SOFTLOCKUP [ 262.859320][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 262.859332][ T5729] Workqueue: usb_hub_wq hub_event [ 262.859363][ T5729] Call Trace: [ 262.859370][ T5729] [ 262.859378][ T5729] dump_stack_lvl+0xe8/0x150 [ 262.859407][ T5729] print_address_description+0x55/0x1e0 [ 262.859434][ T5729] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 262.859460][ T5729] print_report+0x58/0x70 [ 262.859485][ T5729] kasan_report+0x117/0x150 [ 262.859507][ T5729] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 262.859539][ T5729] __list_del_entry_valid_or_report+0xb5/0x190 [ 262.859568][ T5729] kcov_remote_start+0x295/0x6f0 [ 262.859596][ T5729] hub_event+0x15d/0x4cf0 [ 262.859623][ T5729] ? rt_spin_unlock+0x163/0x200 [ 262.859645][ T5729] ? __lock_acquire+0x683/0x2ce0 [ 262.859661][ T5729] ? register_lock_class+0x31/0x2e0 [ 262.859680][ T5729] ? __lock_acquire+0x683/0x2ce0 [ 262.859704][ T5729] ? do_raw_spin_lock+0x12b/0x2f0 [ 262.859731][ T5729] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 262.859757][ T5729] ? __pfx_hub_event+0x10/0x10 [ 262.859784][ T5729] ? process_scheduled_works+0xa20/0x14e0 [ 262.859808][ T5729] ? rcu_is_watching+0x15/0xb0 [ 262.859831][ T5729] ? process_scheduled_works+0xa20/0x14e0 [ 262.859852][ T5729] process_scheduled_works+0xa8e/0x14e0 [ 262.859891][ T5729] ? __pfx_process_scheduled_works+0x10/0x10 [ 262.859916][ T5729] ? assign_work+0x3cf/0x5d0 [ 262.859938][ T5729] worker_thread+0xa47/0xfb0 [ 262.859966][ T5729] ? __kthread_parkme+0x71/0x1f0 [ 262.859994][ T5729] kthread+0x388/0x470 [ 262.860020][ T5729] ? __pfx_worker_thread+0x10/0x10 [ 262.860040][ T5729] ? __pfx_kthread+0x10/0x10 [ 262.860066][ T5729] ret_from_fork+0x514/0xb70 [ 262.860094][ T5729] ? __pfx_ret_from_fork+0x10/0x10 [ 262.860120][ T5729] ? __switch_to+0xc89/0x1420 [ 262.860150][ T5729] ? __pfx_kthread+0x10/0x10 [ 262.860176][ T5729] ret_from_fork_asm+0x1a/0x30 [ 262.860202][ T5729] [ 262.860208][ T5729] [ 262.860213][ T5729] The buggy address belongs to a vmalloc virtual mapping [ 262.860231][ T5729] Memory state around the buggy address: [ 262.860240][ T5729] ffffc90005808f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 262.860252][ T5729] ffffc90005808f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 262.860265][ T5729] >ffffc90005809000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 262.860274][ T5729] ^ [ 262.860283][ T5729] ffffc90005809080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 262.860295][ T5729] ffffc90005809100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 262.860305][ T5729] ================================================================== [ 262.860382][ T5729] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 262.860398][ T5729] CPU: 1 UID: 0 PID: 5729 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 262.860423][ T5729] Tainted: [L]=SOFTLOCKUP [ 262.860430][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 262.860442][ T5729] Workqueue: usb_hub_wq hub_event [ 262.860469][ T5729] Call Trace: [ 262.860478][ T5729] [ 262.860486][ T5729] vpanic+0x56c/0xa60 [ 262.860504][ T5729] ? rcu_is_watching+0x15/0xb0 [ 262.860526][ T5729] ? __pfx_vpanic+0x10/0x10 [ 262.860548][ T5729] panic+0xc5/0xd0 [ 262.860564][ T5729] ? __pfx_panic+0x10/0x10 [ 262.860582][ T5729] ? preempt_schedule_thunk+0x16/0x40 [ 262.860606][ T5729] ? preempt_schedule_thunk+0x16/0x40 [ 262.860629][ T5729] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 262.860656][ T5729] check_panic_on_warn+0x89/0xb0 [ 262.860684][ T5729] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 262.860711][ T5729] end_report+0x73/0x170 [ 262.860731][ T5729] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 262.860758][ T5729] kasan_report+0x128/0x150 [ 262.860778][ T5729] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 262.860810][ T5729] __list_del_entry_valid_or_report+0xb5/0x190 [ 262.860839][ T5729] kcov_remote_start+0x295/0x6f0 [ 262.860866][ T5729] hub_event+0x15d/0x4cf0 [ 262.860894][ T5729] ? rt_spin_unlock+0x163/0x200 [ 262.860918][ T5729] ? __lock_acquire+0x683/0x2ce0 [ 262.860937][ T5729] ? register_lock_class+0x31/0x2e0 [ 262.860956][ T5729] ? __lock_acquire+0x683/0x2ce0 [ 262.860980][ T5729] ? do_raw_spin_lock+0x12b/0x2f0 [ 262.861007][ T5729] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 262.861033][ T5729] ? __pfx_hub_event+0x10/0x10 [ 262.861060][ T5729] ? process_scheduled_works+0xa20/0x14e0 [ 262.861084][ T5729] ? rcu_is_watching+0x15/0xb0 [ 262.861106][ T5729] ? process_scheduled_works+0xa20/0x14e0 [ 262.861127][ T5729] process_scheduled_works+0xa8e/0x14e0 [ 262.861168][ T5729] ? __pfx_process_scheduled_works+0x10/0x10 [ 262.861191][ T5729] ? assign_work+0x3cf/0x5d0 [ 262.861213][ T5729] worker_thread+0xa47/0xfb0 [ 262.861241][ T5729] ? __kthread_parkme+0x71/0x1f0 [ 262.861268][ T5729] kthread+0x388/0x470 [ 262.861294][ T5729] ? __pfx_worker_thread+0x10/0x10 [ 262.861312][ T5729] ? __pfx_kthread+0x10/0x10 [ 262.861333][ T5729] ret_from_fork+0x514/0xb70 [ 262.861356][ T5729] ? __pfx_ret_from_fork+0x10/0x10 [ 262.861379][ T5729] ? __switch_to+0xc89/0x1420 [ 262.861400][ T5729] ? __pfx_kthread+0x10/0x10 [ 262.861422][ T5729] ret_from_fork_asm+0x1a/0x30 [ 262.861444][ T5729] [ 262.861596][ T5729] Kernel Offset: disabled