last executing test programs: 23.101388794s ago: executing program 2 (id=3191): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000024c25c2108d14754a740411cd8908000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x1ffffffffffffe82, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000640)="3fd181f95263c6c3806e089fc3f79eec7c25d3db4d008a07d923abb8c2f4e2638341ccb4ef7d23f943d59336b02b45a35e7e79f335a7b5548d709a8ed023170daecf3de6c67450f4efa3c8d96736821185b5873b245d3de7f9895d701329c991cff42e985c6c4276779aa217bec0935f4b8904a092b34f05bcdb5ba35d68b627be3a4c4831c00e49b54b2ecd", 0x8c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r8, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 22.906139528s ago: executing program 2 (id=3194): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a5", 0x3e}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000044) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 22.635069015s ago: executing program 2 (id=3196): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = socket$rxrpc(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000019300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6a000000004d1100fe8000000000000000000000000000aaff0200000000000000000000000000014e214e20004d90"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r2]) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b200090585", @ANYBLOB="f95b"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB='!'], 0x9) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000"], 0x50) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x124, 0x1, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x102, 0x6, "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"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x44910}, 0x4) 22.356181869s ago: executing program 2 (id=3200): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r0, r0, 0x2, r2, r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x3e, 0x9, 0x2, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private0, 0x8, 0x0, 0x101, 0x6e}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'tunl0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0xac, 0x0, 0x0, 0x70bd25, 0x7, {}, [@NL80211_ATTR_REG_RULES={0x98, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe6c}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfbf}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1cd7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x82f}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004080}, 0x80800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000280050001000000000024000180140001"], 0x80}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x34b00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000500)={0xffffffff, 0x7, 0x0, 'queue1\x00'}) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r5, 0x0, 0x0, 0x1400, 0x0, 0x1) ioctl$IOMMU_DESTROY$hwpt(r5, 0x3b80, &(0x7f0000000440)={0x8}) 8.493607994s ago: executing program 1 (id=3351): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="d2df03c3ff4f84e5fbb1cb4688a8", 0x0, 0x95b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv6_getroute={0x1c, 0x1a, 0x401, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x5, 0x700}}, 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x21, 0xfe, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @empty}}}}) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000400)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x5, 0xdb, "33492e439168f42895548a3bb710086b79c3f0d9002f816f2bdfd6c776caec4aba3643c297f7e58f764f22bfb391dbb3bdb241c70bae42e2a0b4c70edb07af", 0x19}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000580)="3a56e18343e96708e115ff9198c214102df139fab178a4c2fde1e927d5622cd41c12949a729c0f675a6ed1462aae61e53402a9a25c60d89717d3603a82c73086c00dc4bf6418f206fb5c31ceaee6a9214956bbe9a8ff584d53ea62895dce093ed27b94aca4db6d98aa35d3959371", 0x6e}, {&(0x7f0000000600)="df8ec02bff344a669eee0816a88e217915ad5a4d34d3a360039ac11714dcc0e243f50819ac11cfc8a0f8c700cd8d86d50515b90f4b39bd18a7c212691bfe92830008ad8e56c752530247092d00c67ac746a49f46af71931d172ce8df1196be5758cdad41050e08e775e9b46a444feab8cbad32b8bc4226461ab50d288f55c2363d0da1cda53db6f97620c55db046ec93245429e1d1dd4307196bc74a3c6a0c66e758f858c8296705eb796d268a63d2feb2aecc1d5bb61255fa8acba3437c0c21f9ea528a9b4bdbc764cf5ebbe05183662178c119984ed17d0271da5886790b67995fe7019bcf061eda57a3859c78f2a3f94f16b8fde3f0b7", 0xf8}], 0x2, &(0x7f00000007c0)=[{0x60, 0x101, 0x3, "c28eae78fa96c2919d9204d6012fb008b7addb3fa8bf00ee02b53b00f52f3b11cbf854dfe552d101f515e11a73ad9d206bf2ab0d009d17a7630602f2e3d08e6ae5d48d30695f5574f0ab3c58"}, {0x10, 0x108, 0x108}], 0x70}, 0x20000004) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00', &(0x7f0000000180)='lowerdir', 0x8, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000200)) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x30}, &(0x7f0000000040)=0xc) 8.290202598s ago: executing program 1 (id=3353): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20281, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080088ddff74717edf849e42ec459c001c0400000000029078000000007f"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x400) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x4000, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.092475355s ago: executing program 1 (id=3355): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229310698ab94c7e6699587b0d033c2f17d1ccbd45cba0000000000000000d6ae3c", 0x28}, {&(0x7f0000000580)="8f966bd94d168820f6b844307d323b8c13deb1ff9125f39f", 0x18}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x6, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0x0) syz_clone(0x4e100080, 0x0, 0x0, 0x0, 0x0, 0x0) 7.807287365s ago: executing program 1 (id=3358): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000545000/0x4000)=nil, 0x4000, 0x300000f, 0x4008032, 0xffffffffffffffff, 0x25cff000) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) timer_create(0x3, &(0x7f0000000400)={0x0, 0xf, 0x4, @thr={&(0x7f0000000200)="21bbe5707f3645831441eb79b1ba673145c8f94623aed183b74c621241af0daa3e8875fe99e3bdb71cbcb0b0761add55a24e993b0c6debab379489adb61348eed63a6b458481e3cfef64e41692d8f7e0385670ecbef04d947d79d48539ba1a2a7ea1aedf5db1b774dd8cf128821bd3843a84967271001d28d4be6ddd6f74fe1151ff40d13be700e712b530b8c3a4d236de91791d8638999a2a77830807871fa7668502ed8a303b9e0c87c746cc6eac8463758b61d187033d8cb28121b22d93028075a6e263897edd323b23b42aa5a019300d0927ff6b91830ce62059c0a85638eec2577e218ff9b17eca62a29551742bd830b022e9460b", &(0x7f0000000300)="c5bf9c4b4a656ca0e18246185a811892f356ac891b54b753c399ac83939b1b529090660be8a5b7d61ece6a6696d9078f4d36525f898ef6ba613419d74eb4cca12bb8d62bdd6d88cec60ec3796a561c410fe199d52cfa8be1ddd01750d284961af6d4fc2d01b2ca3bb8fc74fe4b7f3c2f66f227c39a1ec206d558e10898ab2903433e48a2ec8216b8f8927dc57054c2f6132785f383370813bdfb2556dcc402cb65cb5330ad00d310a1d50e125a65b6b480fbdf60a34af73552610e9adf8f47d6934d7a40d433fcb2bf866bd3eefa971b354234a04d6aa3af577cd0caa7"}}, &(0x7f0000000440)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x60183, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000bc0)={{}, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000000c0)={0x4, 0x80000001, {0x0}, {0xee01}, 0x9, 0x7}) getpgid(r5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000080)={0x6, 'team_slave_0\x00', {0xc000000}, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r6, 0xc0286404, &(0x7f00000004c0)={&(0x7f000021a000/0x3000)=nil}) 7.661752389s ago: executing program 4 (id=3361): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805", 0x97}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408b", 0x35}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.59383226s ago: executing program 1 (id=3362): socket$pppoe(0x18, 0x1, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000020004001000080001400400", 0x56}], 0x1) 7.504333575s ago: executing program 4 (id=3364): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20281, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080088ddff74717edf849e42ec459c001c0400000000029078000000007f"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x400) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x4000, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.440361386s ago: executing program 1 (id=3365): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 7.439327424s ago: executing program 2 (id=3203): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x17, 0xd, "de6ab3a50950e0ce04b72b75dc"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x97}, &(0x7f00000001c0)={0x20, 0x81, 0x1, '%'}, &(0x7f0000000200)={0x20, 0x82, 0x1, "f2"}, &(0x7f0000000240)={0x20, 0x83, 0x1, 'B'}, &(0x7f0000000280)={0x20, 0x84, 0x3, "fc9403"}, &(0x7f00000002c0)={0x20, 0x85, 0x3, "c3a670"}}) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1, 0xfffffffe, 0x2}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.563303268s ago: executing program 4 (id=3372): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001300)="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", 0x211}, {&(0x7f0000000fc0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001540)="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", 0x862}], 0x1}}], 0x3, 0x2090) 6.4227202s ago: executing program 3 (id=3375): socket$pppoe(0x18, 0x1, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000020004001000080001400400", 0x56}], 0x1) 6.294334168s ago: executing program 4 (id=3376): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="e43006ea3eb060409f11616b0ff107c8b5c84a2513725dd800704d068c0a1d6565ec464eaa", 0x0, 0x3}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c"]) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r4 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) 6.177365982s ago: executing program 3 (id=3378): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x1c, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) 4.156546266s ago: executing program 3 (id=3381): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20281, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080088ddff74717edf849e42ec459c001c0400000000029078000000007f"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x400) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x4000, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.263370448s ago: executing program 4 (id=3385): r0 = socket$inet(0x2, 0x1, 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x28080, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) close_range(r4, r4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) sendto$inet6(r3, &(0x7f00000001c0)="a6", 0x1, 0x40, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x51, 0x0, 0x0}, &(0x7f0000000100)=0x3e) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@loopback, @remote, 0x1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@loopback, @rand_addr=0x64010102, 0x5, 0xd}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x6, 0x2f, 0x0, @loopback, @multicast2}}}}) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0xc, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$nl_netfilter(r1, &(0x7f0000000ac0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x34004080}, 0xc, &(0x7f0000000a80)={&(0x7f0000000640)={0x414, 0xb, 0x2, 0x201, 0x70bd28, 0x25dfdbfe, {0x5, 0x0, 0x1}, [@typed={0x4, 0xe1}, @nested={0xa9, 0x13, 0x0, 0x1, [@typed={0x14, 0x116, 0x0, 0x0, @ipv6=@private1}, @generic="da1f0e0c4858015f4c92be7e95b7e1e4b754f0b1b9bb7b7e7b20e9d1feed604fb9201df5fc0287758c48c10280b527717d17f47c829e635d6cf7c07ec03cb300b9adc25fe1bab7b1d26e03ea766bd86fb4575d5aea991c641cd981a96b55dcae4d1e9b75e908cf8f0d0139e04a39d7542bf45ba8077e60cd555c80e9f8b144d3dd9faee95438309954f1722976ee1ee0a9"]}, @generic="94fe8a450a84eb966b4d58cd78413a7d46a122f4d85469cd0abab3d7ad57496aa193188410122aec03f1daafefae50c8282ac2d86f4d179e69d593bfc0896c39dadafcb34b07c55efe7f3af1705c51a2e39c061d1c31c521b3c34a8b619d48064e0e0eb9f1b5b9c8fa7c6e345f7df6bf80bd290b5633e3f622c06ce7fc97bed7493597f4cdc978c507f0d3d65f36bfd760d3e2036891f38013ff39b3e2477d6bd55d056f09fbc879539ecb311155f3", @typed={0xc, 0xd9, 0x0, 0x0, @u64=0x5}, @typed={0xc, 0x5, 0x0, 0x0, @str='ethtool\x00'}, @nested={0x14, 0xda, 0x0, 0x1, [@nested={0x4, 0x10e}, @generic, @nested={0x4, 0x78}, @nested={0x4, 0x104}, @nested={0x4, 0xe}]}, @typed={0xc, 0x130, 0x0, 0x0, @u64=0xc}, @nested={0x1c3, 0xe4, 0x0, 0x1, [@generic="cb1264a973752ad15dda7152e6e74acc399149ccd968d61c216c9c6881b5c0b7fac556f438301623d2133048526660485f2db237152654ca8accd0b7fdcc93797686e487939005a7f65f484af9f68e189cc98d6d93bd46071f3e4ae69d0588acecc3b613e4663b5fbed3e7d9a5aba92705ffb16762ed90beb2e451fe191e2fab804143ceeb934981c1d01c130a126f3dc1b6fd9f5f131226c0af5f86a2ab6df338c8e2732d283d6b021bd8e2d25a228b", @generic="9a17e43a71d066347523cd932e96982d33f3b12965524c1aa0cf18406ed94f29595a1f0a87eab02672055b588c439c66a1b6c5d7c6a9fe9b0b08d7b8b34cc1dac23f232b30765162532fccd477787f0cc01694b31c75d62c7ca1b15abaa526ba6c28d342802ddec369042aba286be87a9e0409012a0e949512569f95694845be2b4ae8c414ad181db433e8d2ada02ca5f372926df6ec7fa42520cad74e2c4d343bd0fe3298bf7b705a74e6f97ff34bb93bbe5be670caf8ae98fd3b6e5e40ab84407f1d41165b711eef9f03a92861f76f0eb9", @typed={0x4, 0xb0}, @nested={0x4, 0x4c}, @typed={0x4, 0xe}, @generic="5f20c5793205717203f7e9a25b9762135ef2d0085aee440d53d3cfc668a4e09267497a74b15f87876bc1561568", @nested={0x4, 0x36}]}, @generic="1e7412636e718d80d5353321f719154adc9e38d42d1d427e34d2a894ec87cf97a3434eafae703675ef9e3e3495f01e4b9373b5677de2761943c73228e0a76ac1d7c0942f2ce489c5f943fddca332", @generic="95f8e920ebc5f25e8594ce96f20dda5c42b544783b6b18810709421fe77e2bae7ba26091f7a8b0fbcf907230cd5642bfb232103d1892a4947808dc66612f4dbdf2692396a0bd70954113298cba7155ff4b0856132e85"]}, 0x414}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r7, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24004041}, 0x40000) 1.815774066s ago: executing program 3 (id=3389): socket$pppoe(0x18, 0x1, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000400100008000140040000", 0x57}], 0x1) 1.674904225s ago: executing program 2 (id=3390): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) r1 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000545000/0x4000)=nil, 0x4000, 0x300000f, 0x4008032, r0, 0x25cff000) madvise(&(0x7f000066d000/0x4000)=nil, 0x4000, 0xd) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) timer_create(0x3, &(0x7f0000000400)={0x0, 0xf, 0x4, @thr={&(0x7f0000000200)="21bbe5707f3645831441eb79b1ba673145c8f94623aed183b74c621241af0daa3e8875fe99e3bdb71cbcb0b0761add55a24e993b0c6debab379489adb61348eed63a6b458481e3cfef64e41692d8f7e0385670ecbef04d947d79d48539ba1a2a7ea1aedf5db1b774dd8cf128821bd3843a84967271001d28d4be6ddd6f74fe1151ff40d13be700e712b530b8c3a4d236de91791d8638999a2a77830807871fa7668502ed8a303b9e0c87c746cc6eac8463758b61d187033d8cb28121b22d93028075a6e263897edd323b23b42aa5a019300d0927ff6b91830ce62059c0a85638eec2577e218ff9b17eca62a29551742bd830b022e9460b", &(0x7f0000000300)="c5bf9c4b4a656ca0e18246185a811892f356ac891b54b753c399ac83939b1b529090660be8a5b7d61ece6a6696d9078f4d36525f898ef6ba613419d74eb4cca12bb8d62bdd6d88cec60ec3796a561c410fe199d52cfa8be1ddd01750d284961af6d4fc2d01b2ca3bb8fc74fe4b7f3c2f66f227c39a1ec206d558e10898ab2903433e48a2ec8216b8f8927dc57054c2f6132785f383370813bdfb2556dcc402cb65cb5330ad00d310a1d50e125a65b6b480fbdf60a34af73552610e9adf8f47d6934d7a40d433fcb2bf866bd3eefa971b354234a04d6aa3af577cd0caa7"}}, &(0x7f0000000440)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x60183, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000bc0)={{}, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0x200002e6) fcntl$setpipe(r4, 0x407, 0x7000000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x80000) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x4, 0x80000001, {0x0}, {0xee01}, 0x9, 0x7}) getpgid(r6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000080)={0x6, 'team_slave_0\x00', {0xc000000}, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r7, 0xc0286404, &(0x7f00000004c0)={&(0x7f000021a000/0x3000)=nil}) 1.473514338s ago: executing program 3 (id=3392): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x2, 0x100000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0x5f, r4}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x80044d76, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc4c85513, &(0x7f0000000b80)={0xa, 0x0, 0x2008, 0x7, '\x00', 0x900005}) 1.104804086s ago: executing program 4 (id=3393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805", 0x97}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408b", 0x35}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 862.316697ms ago: executing program 0 (id=3396): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8000000000000a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25DELUID(r4, 0x891e, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000540)={0x3, "2a123b084c1295533fd0a4bb9ad6ca7be3ced96f00000000000100", 0x0, 0xfffffffe, 0x1, 0x7, 0x4000200}) 632.636069ms ago: executing program 0 (id=3397): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(0x0) r1 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000545000/0x4000)=nil, 0x4000, 0x300000f, 0x4008032, r0, 0x25cff000) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) timer_create(0x3, &(0x7f0000000400)={0x0, 0xf, 0x4, @thr={&(0x7f0000000200)="21bbe5707f3645831441eb79b1ba673145c8f94623aed183b74c621241af0daa3e8875fe99e3bdb71cbcb0b0761add55a24e993b0c6debab379489adb61348eed63a6b458481e3cfef64e41692d8f7e0385670ecbef04d947d79d48539ba1a2a7ea1aedf5db1b774dd8cf128821bd3843a84967271001d28d4be6ddd6f74fe1151ff40d13be700e712b530b8c3a4d236de91791d8638999a2a77830807871fa7668502ed8a303b9e0c87c746cc6eac8463758b61d187033d8cb28121b22d93028075a6e263897edd323b23b42aa5a019300d0927ff6b91830ce62059c0a85638eec2577e218ff9b17eca62a29551742bd830b022e9460b", &(0x7f0000000300)="c5bf9c4b4a656ca0e18246185a811892f356ac891b54b753c399ac83939b1b529090660be8a5b7d61ece6a6696d9078f4d36525f898ef6ba613419d74eb4cca12bb8d62bdd6d88cec60ec3796a561c410fe199d52cfa8be1ddd01750d284961af6d4fc2d01b2ca3bb8fc74fe4b7f3c2f66f227c39a1ec206d558e10898ab2903433e48a2ec8216b8f8927dc57054c2f6132785f383370813bdfb2556dcc402cb65cb5330ad00d310a1d50e125a65b6b480fbdf60a34af73552610e9adf8f47d6934d7a40d433fcb2bf866bd3eefa971b354234a04d6aa3af577cd0caa7"}}, &(0x7f0000000440)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x60183, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000bc0)={{}, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0x200002e6) fcntl$setpipe(r4, 0x407, 0x7000000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x80000) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x4, 0x80000001, {0x0}, {0xee01}, 0x9, 0x7}) getpgid(r6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000080)={0x6, 'team_slave_0\x00', {0xc000000}, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r7, 0xc0286404, &(0x7f00000004c0)={&(0x7f000021a000/0x3000)=nil}) 522.134973ms ago: executing program 0 (id=3398): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) r1 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000545000/0x4000)=nil, 0x4000, 0x300000f, 0x4008032, r0, 0x25cff000) madvise(&(0x7f000066d000/0x4000)=nil, 0x4000, 0xd) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) timer_create(0x3, &(0x7f0000000400)={0x0, 0xf, 0x4, @thr={&(0x7f0000000200)="21bbe5707f3645831441eb79b1ba673145c8f94623aed183b74c621241af0daa3e8875fe99e3bdb71cbcb0b0761add55a24e993b0c6debab379489adb61348eed63a6b458481e3cfef64e41692d8f7e0385670ecbef04d947d79d48539ba1a2a7ea1aedf5db1b774dd8cf128821bd3843a84967271001d28d4be6ddd6f74fe1151ff40d13be700e712b530b8c3a4d236de91791d8638999a2a77830807871fa7668502ed8a303b9e0c87c746cc6eac8463758b61d187033d8cb28121b22d93028075a6e263897edd323b23b42aa5a019300d0927ff6b91830ce62059c0a85638eec2577e218ff9b17eca62a29551742bd830b022e9460b", &(0x7f0000000300)="c5bf9c4b4a656ca0e18246185a811892f356ac891b54b753c399ac83939b1b529090660be8a5b7d61ece6a6696d9078f4d36525f898ef6ba613419d74eb4cca12bb8d62bdd6d88cec60ec3796a561c410fe199d52cfa8be1ddd01750d284961af6d4fc2d01b2ca3bb8fc74fe4b7f3c2f66f227c39a1ec206d558e10898ab2903433e48a2ec8216b8f8927dc57054c2f6132785f383370813bdfb2556dcc402cb65cb5330ad00d310a1d50e125a65b6b480fbdf60a34af73552610e9adf8f47d6934d7a40d433fcb2bf866bd3eefa971b354234a04d6aa3af577cd0ca"}}, &(0x7f0000000440)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x60183, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000bc0)={{}, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0x200002e6) fcntl$setpipe(r4, 0x407, 0x7000000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x80000) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x4, 0x80000001, {0x0}, {0xee01}, 0x9, 0x7}) getpgid(r6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000080)={0x6, 'team_slave_0\x00', {0xc000000}, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r7, 0xc0286404, &(0x7f00000004c0)={&(0x7f000021a000/0x3000)=nil}) 307.424251ms ago: executing program 3 (id=3399): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x20, 0x17, 0xd, "de6ab3a50950e0ce04b72b75dc"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x97}, &(0x7f00000001c0)={0x20, 0x81, 0x1, '%'}, &(0x7f0000000200)={0x20, 0x82, 0x1, "f2"}, &(0x7f0000000240)={0x20, 0x83, 0x1, 'B'}, &(0x7f0000000280)={0x20, 0x84, 0x3, "fc9403"}, &(0x7f00000002c0)={0x20, 0x85, 0x3, "c3a670"}}) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1, 0xfffffffe, 0x2}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 262.62029ms ago: executing program 0 (id=3400): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805", 0x97}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408b", 0x35}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 93.07613ms ago: executing program 0 (id=3401): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x1c, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) 0s ago: executing program 0 (id=3402): r0 = socket$inet(0x2, 0x1, 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x28080, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) close_range(r4, r4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) sendto$inet6(r3, &(0x7f00000001c0)="a6", 0x1, 0x40, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x51, 0x0, 0x0}, &(0x7f0000000100)=0x3e) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@loopback, @remote, 0x1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@loopback, @rand_addr=0x64010102, 0x5, 0xd}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x6, 0x2f, 0x0, @loopback, @multicast2}}}}) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0xc, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$nl_netfilter(r1, &(0x7f0000000ac0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x34004080}, 0xc, &(0x7f0000000a80)={&(0x7f0000000640)={0x414, 0xb, 0x2, 0x201, 0x70bd28, 0x25dfdbfe, {0x5, 0x0, 0x1}, [@typed={0x4, 0xe1}, @nested={0xa9, 0x13, 0x0, 0x1, [@typed={0x14, 0x116, 0x0, 0x0, @ipv6=@private1}, @generic="da1f0e0c4858015f4c92be7e95b7e1e4b754f0b1b9bb7b7e7b20e9d1feed604fb9201df5fc0287758c48c10280b527717d17f47c829e635d6cf7c07ec03cb300b9adc25fe1bab7b1d26e03ea766bd86fb4575d5aea991c641cd981a96b55dcae4d1e9b75e908cf8f0d0139e04a39d7542bf45ba8077e60cd555c80e9f8b144d3dd9faee95438309954f1722976ee1ee0a9"]}, @generic="94fe8a450a84eb966b4d58cd78413a7d46a122f4d85469cd0abab3d7ad57496aa193188410122aec03f1daafefae50c8282ac2d86f4d179e69d593bfc0896c39dadafcb34b07c55efe7f3af1705c51a2e39c061d1c31c521b3c34a8b619d48064e0e0eb9f1b5b9c8fa7c6e345f7df6bf80bd290b5633e3f622c06ce7fc97bed7493597f4cdc978c507f0d3d65f36bfd760d3e2036891f38013ff39b3e2477d6bd55d056f09fbc879539ecb311155f3", @typed={0xc, 0xd9, 0x0, 0x0, @u64=0x5}, @typed={0xc, 0x5, 0x0, 0x0, @str='ethtool\x00'}, @nested={0x14, 0xda, 0x0, 0x1, [@nested={0x4, 0x10e}, @generic, @nested={0x4, 0x78}, @nested={0x4, 0x104}, @nested={0x4, 0xe}]}, @typed={0xc, 0x130, 0x0, 0x0, @u64=0xc}, @nested={0x1c3, 0xe4, 0x0, 0x1, [@generic="cb1264a973752ad15dda7152e6e74acc399149ccd968d61c216c9c6881b5c0b7fac556f438301623d2133048526660485f2db237152654ca8accd0b7fdcc93797686e487939005a7f65f484af9f68e189cc98d6d93bd46071f3e4ae69d0588acecc3b613e4663b5fbed3e7d9a5aba92705ffb16762ed90beb2e451fe191e2fab804143ceeb934981c1d01c130a126f3dc1b6fd9f5f131226c0af5f86a2ab6df338c8e2732d283d6b021bd8e2d25a228b", @generic="9a17e43a71d066347523cd932e96982d33f3b12965524c1aa0cf18406ed94f29595a1f0a87eab02672055b588c439c66a1b6c5d7c6a9fe9b0b08d7b8b34cc1dac23f232b30765162532fccd477787f0cc01694b31c75d62c7ca1b15abaa526ba6c28d342802ddec369042aba286be87a9e0409012a0e949512569f95694845be2b4ae8c414ad181db433e8d2ada02ca5f372926df6ec7fa42520cad74e2c4d343bd0fe3298bf7b705a74e6f97ff34bb93bbe5be670caf8ae98fd3b6e5e40ab84407f1d41165b711eef9f03a92861f76f0eb9", @typed={0x4, 0xb0}, @nested={0x4, 0x4c}, @typed={0x4, 0xe}, @generic="5f20c5793205717203f7e9a25b9762135ef2d0085aee440d53d3cfc668a4e09267497a74b15f87876bc1561568", @nested={0x4, 0x36}]}, @generic="1e7412636e718d80d5353321f719154adc9e38d42d1d427e34d2a894ec87cf97a3434eafae703675ef9e3e3495f01e4b9373b5677de2761943c73228e0a76ac1d7c0942f2ce489c5f943fddca332", @generic="95f8e920ebc5f25e8594ce96f20dda5c42b544783b6b18810709421fe77e2bae7ba26091f7a8b0fbcf907230cd5642bfb232103d1892a4947808dc66612f4dbdf2692396a0bd70954113298cba7155ff4b0856132e85"]}, 0x414}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r7, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24004041}, 0x40000) kernel console output (not intermixed with test programs): roduct: syz [ 198.372916][ T36] usb 2-1: Manufacturer: syz [ 198.372931][ T36] usb 2-1: SerialNumber: syz [ 198.416311][ T36] usb 2-1: config 0 descriptor?? [ 198.444844][ T36] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 198.681802][ T36] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 198.720538][ T36] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 198.729054][ T8415] FAULT_INJECTION: forcing a failure. [ 198.729054][ T8415] name failslab, interval 1, probability 0, space 0, times 0 [ 198.729084][ T8415] CPU: 0 UID: 0 PID: 8415 Comm: syz.3.1005 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.729105][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 198.729116][ T8415] Call Trace: [ 198.729123][ T8415] [ 198.729131][ T8415] dump_stack_lvl+0xe8/0x150 [ 198.729166][ T8415] should_fail_ex+0x46b/0x600 [ 198.729192][ T8415] should_failslab+0xa8/0x100 [ 198.729212][ T8415] __kmalloc_noprof+0xdf/0x7b0 [ 198.729240][ T8415] ? bpf_test_init+0x9f/0x150 [ 198.729272][ T8415] bpf_test_init+0x9f/0x150 [ 198.729301][ T8415] bpf_prog_test_run_xdp+0x529/0x1160 [ 198.729343][ T8415] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 198.729376][ T8415] ? __fget_files+0x2a/0x420 [ 198.729404][ T8415] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 198.729432][ T8415] bpf_prog_test_run+0x2cd/0x340 [ 198.729456][ T8415] __sys_bpf+0x643/0x950 [ 198.729478][ T8415] ? __pfx___sys_bpf+0x10/0x10 [ 198.729495][ T8415] ? rt_mutex_slowunlock+0x1cb/0x300 [ 198.729529][ T8415] ? ksys_write+0x248/0x270 [ 198.729562][ T8415] ? __pfx_ksys_write+0x10/0x10 [ 198.729603][ T8415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.729624][ T8415] __x64_sys_bpf+0x7c/0x90 [ 198.729656][ T8415] do_syscall_64+0x15f/0xf80 [ 198.729678][ T8415] ? trace_irq_disable+0x3b/0x140 [ 198.729696][ T8415] ? clear_bhb_loop+0x40/0x90 [ 198.729718][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.729736][ T8415] RIP: 0033:0x7f4f916fc819 [ 198.729753][ T8415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.729769][ T8415] RSP: 002b:00007f4f8f94e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.729789][ T8415] RAX: ffffffffffffffda RBX: 00007f4f91975fa0 RCX: 00007f4f916fc819 [ 198.729803][ T8415] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 198.729814][ T8415] RBP: 00007f4f8f94e090 R08: 0000000000000000 R09: 0000000000000000 [ 198.729825][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.729839][ T8415] R13: 00007f4f91976038 R14: 00007f4f91975fa0 R15: 00007ffcdf82b6d8 [ 198.729869][ T8415] [ 198.777120][ T8417] FAULT_INJECTION: forcing a failure. [ 198.777120][ T8417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.777153][ T8417] CPU: 0 UID: 0 PID: 8417 Comm: syz.4.1006 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.777174][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 198.777185][ T8417] Call Trace: [ 198.777192][ T8417] [ 198.777200][ T8417] dump_stack_lvl+0xe8/0x150 [ 198.777233][ T8417] should_fail_ex+0x46b/0x600 [ 198.777260][ T8417] _copy_from_user+0x2d/0xb0 [ 198.777285][ T8417] __copy_msghdr+0x3c5/0x5b0 [ 198.777310][ T8417] ___sys_sendmsg+0x213/0x360 [ 198.777329][ T8417] ? __lock_acquire+0x6b5/0x2cf0 [ 198.777354][ T8417] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.777406][ T8417] ? __fget_files+0x2a/0x420 [ 198.777428][ T8417] ? __fget_files+0x3a6/0x420 [ 198.777461][ T8417] __x64_sys_sendmsg+0x1c3/0x2a0 [ 198.777483][ T8417] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.777512][ T8417] ? __pfx_ksys_write+0x10/0x10 [ 198.777546][ T8417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.777574][ T8417] do_syscall_64+0x15f/0xf80 [ 198.777596][ T8417] ? trace_irq_disable+0x3b/0x140 [ 198.777616][ T8417] ? clear_bhb_loop+0x40/0x90 [ 198.777639][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.777657][ T8417] RIP: 0033:0x7f74986ac819 [ 198.777674][ T8417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.777689][ T8417] RSP: 002b:00007f7496906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.777709][ T8417] RAX: ffffffffffffffda RBX: 00007f7498925fa0 RCX: 00007f74986ac819 [ 198.777722][ T8417] RDX: 0000000006040000 RSI: 0000200000000380 RDI: 0000000000000003 [ 198.777734][ T8417] RBP: 00007f7496906090 R08: 0000000000000000 R09: 0000000000000000 [ 198.777746][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.777757][ T8417] R13: 00007f7498926038 R14: 00007f7498925fa0 R15: 00007ffd118b82e8 [ 198.777788][ T8417] [ 198.825076][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 8 [ 198.900156][ T8419] FAULT_INJECTION: forcing a failure. [ 198.900156][ T8419] name failslab, interval 1, probability 0, space 0, times 0 [ 198.900186][ T8419] CPU: 0 UID: 0 PID: 8419 Comm: syz.0.1007 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.900208][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 198.900220][ T8419] Call Trace: [ 198.900227][ T8419] [ 198.900234][ T8419] dump_stack_lvl+0xe8/0x150 [ 198.900269][ T8419] should_fail_ex+0x46b/0x600 [ 198.900295][ T8419] should_failslab+0xa8/0x100 [ 198.900316][ T8419] __kvmalloc_node_noprof+0x170/0x8e0 [ 198.900333][ T8419] ? __fget_files+0x2a/0x420 [ 198.900356][ T8419] ? map_get_next_key+0x23a/0x630 [ 198.900382][ T8419] map_get_next_key+0x23a/0x630 [ 198.900402][ T8419] ? bpf_lsm_bpf+0x9/0x20 [ 198.900426][ T8419] __sys_bpf+0x768/0x950 [ 198.900448][ T8419] ? __pfx___sys_bpf+0x10/0x10 [ 198.900465][ T8419] ? rt_mutex_slowunlock+0x1cb/0x300 [ 198.900498][ T8419] ? ksys_write+0x248/0x270 [ 198.900526][ T8419] ? __pfx_ksys_write+0x10/0x10 [ 198.900564][ T8419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.900585][ T8419] __x64_sys_bpf+0x7c/0x90 [ 198.900613][ T8419] do_syscall_64+0x15f/0xf80 [ 198.900637][ T8419] ? trace_irq_disable+0x3b/0x140 [ 198.900654][ T8419] ? clear_bhb_loop+0x40/0x90 [ 198.900677][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.900695][ T8419] RIP: 0033:0x7fda5bf4c819 [ 198.900712][ T8419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.900728][ T8419] RSP: 002b:00007fda5a19e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.900748][ T8419] RAX: ffffffffffffffda RBX: 00007fda5c1c5fa0 RCX: 00007fda5bf4c819 [ 198.900762][ T8419] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 198.900775][ T8419] RBP: 00007fda5a19e090 R08: 0000000000000000 R09: 0000000000000000 [ 198.900787][ T8419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.900797][ T8419] R13: 00007fda5c1c6038 R14: 00007fda5c1c5fa0 R15: 00007ffef51c7368 [ 198.900827][ T8419] [ 199.027296][ T8385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.031285][ T8385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.156472][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 199.196229][ T36] usb 2-1: USB disconnect, device number 22 [ 199.441158][ T36] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 199.465501][ T36] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 199.478121][ T36] quatech2 2-1:0.51: device disconnected [ 199.550855][ T8435] sg_write: data in/out 431069/402 bytes for SCSI command 0x0-- guessing data in; [ 199.550855][ T8435] program syz.2.1013 not setting count and/or reply_len properly [ 200.085886][ T5899] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 200.241898][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.241933][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.241957][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.241999][ T5899] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.242022][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.276341][ T5899] usb 3-1: config 0 descriptor?? [ 200.765612][ T5899] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 200.765663][ T5899] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 200.765691][ T5899] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 200.765719][ T5899] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 200.766397][ T5899] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 200.766427][ T5899] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 200.766454][ T5899] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 200.813041][ T5899] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 201.022383][ T5968] usb 3-1: USB disconnect, device number 26 [ 201.237590][ T8498] fido_id[8498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 202.019999][ T8553] QAT: Device 1 not found [ 202.103158][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 202.530077][ T8584] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1081'. [ 202.563387][ T8586] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1081'. [ 203.532335][ T8626] FAULT_INJECTION: forcing a failure. [ 203.532335][ T8626] name failslab, interval 1, probability 0, space 0, times 0 [ 203.532370][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.0.1102 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 203.532392][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 203.532403][ T8626] Call Trace: [ 203.532410][ T8626] [ 203.532418][ T8626] dump_stack_lvl+0xe8/0x150 [ 203.532452][ T8626] should_fail_ex+0x46b/0x600 [ 203.532477][ T8626] should_failslab+0xa8/0x100 [ 203.532498][ T8626] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 203.532526][ T8626] ? __alloc_skb+0x1d0/0x7d0 [ 203.532553][ T8626] ? lockdep_hardirqs_on+0x7a/0x110 [ 203.532582][ T8626] __alloc_skb+0x1d0/0x7d0 [ 203.532615][ T8626] netlink_sendmsg+0x5d4/0xb40 [ 203.532653][ T8626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.532683][ T8626] ? unwind_get_return_address+0x4d/0x90 [ 203.532709][ T8626] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.532740][ T8626] ____sys_sendmsg+0x94c/0x9c0 [ 203.532766][ T8626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.532795][ T8626] ? import_iovec+0x73/0xa0 [ 203.532821][ T8626] ___sys_sendmsg+0x2a5/0x360 [ 203.532840][ T8626] ? __lock_acquire+0x6b5/0x2cf0 [ 203.532866][ T8626] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.532919][ T8626] ? __fget_files+0x2a/0x420 [ 203.532942][ T8626] ? __fget_files+0x3a6/0x420 [ 203.532975][ T8626] __x64_sys_sendmsg+0x1c3/0x2a0 [ 203.532999][ T8626] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.533029][ T8626] ? __pfx_ksys_write+0x10/0x10 [ 203.533064][ T8626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.533092][ T8626] do_syscall_64+0x15f/0xf80 [ 203.533115][ T8626] ? trace_irq_disable+0x3b/0x140 [ 203.533134][ T8626] ? clear_bhb_loop+0x40/0x90 [ 203.533158][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.533177][ T8626] RIP: 0033:0x7fda5bf4c819 [ 203.533195][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.533211][ T8626] RSP: 002b:00007fda5a19e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.533231][ T8626] RAX: ffffffffffffffda RBX: 00007fda5c1c5fa0 RCX: 00007fda5bf4c819 [ 203.533245][ T8626] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 203.533258][ T8626] RBP: 00007fda5a19e090 R08: 0000000000000000 R09: 0000000000000000 [ 203.533270][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.533281][ T8626] R13: 00007fda5c1c6038 R14: 00007fda5c1c5fa0 R15: 00007ffef51c7368 [ 203.533311][ T8626] [ 205.225322][ T8656] QAT: Device 1 not found [ 206.719201][ T8711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.766532][ T8711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.975818][ T5968] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 207.391568][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 208.169479][ T8785] FAULT_INJECTION: forcing a failure. [ 208.169479][ T8785] name failslab, interval 1, probability 0, space 0, times 0 [ 208.169511][ T8785] CPU: 0 UID: 0 PID: 8785 Comm: syz.0.1176 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 208.169532][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 208.169544][ T8785] Call Trace: [ 208.169551][ T8785] [ 208.169558][ T8785] dump_stack_lvl+0xe8/0x150 [ 208.169591][ T8785] should_fail_ex+0x46b/0x600 [ 208.169616][ T8785] should_failslab+0xa8/0x100 [ 208.169637][ T8785] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 208.169664][ T8785] ? __alloc_skb+0x1d0/0x7d0 [ 208.169691][ T8785] ? lockdep_hardirqs_on+0x7a/0x110 [ 208.169719][ T8785] __alloc_skb+0x1d0/0x7d0 [ 208.169750][ T8785] pfkey_sendmsg+0x212/0x1120 [ 208.169775][ T8785] ? unwind_next_frame+0xa6/0x2550 [ 208.169799][ T8785] ? smack_socket_sendmsg+0x1a9/0x590 [ 208.169819][ T8785] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 208.169844][ T8785] ? __lock_acquire+0x6b5/0x2cf0 [ 208.169872][ T8785] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 208.169903][ T8785] ? __kernel_text_address+0xd/0x30 [ 208.169927][ T8785] ? unwind_get_return_address+0x4d/0x90 [ 208.169954][ T8785] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.169984][ T8785] ____sys_sendmsg+0x94c/0x9c0 [ 208.170011][ T8785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.170039][ T8785] ? import_iovec+0x73/0xa0 [ 208.170066][ T8785] ___sys_sendmsg+0x2a5/0x360 [ 208.170085][ T8785] ? __lock_acquire+0x6b5/0x2cf0 [ 208.170111][ T8785] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.170162][ T8785] ? __fget_files+0x2a/0x420 [ 208.170185][ T8785] ? __fget_files+0x3a6/0x420 [ 208.170217][ T8785] __x64_sys_sendmsg+0x1c3/0x2a0 [ 208.170239][ T8785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.170266][ T8785] ? __pfx_ksys_write+0x10/0x10 [ 208.170299][ T8785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.170318][ T8785] do_syscall_64+0x15f/0xf80 [ 208.170340][ T8785] ? trace_irq_disable+0x3b/0x140 [ 208.170359][ T8785] ? clear_bhb_loop+0x40/0x90 [ 208.170380][ T8785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.170399][ T8785] RIP: 0033:0x7fda5bf4c819 [ 208.170416][ T8785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.170432][ T8785] RSP: 002b:00007fda5a19e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.170452][ T8785] RAX: ffffffffffffffda RBX: 00007fda5c1c5fa0 RCX: 00007fda5bf4c819 [ 208.170464][ T8785] RDX: 0000000000002080 RSI: 0000200000000180 RDI: 0000000000000007 [ 208.170476][ T8785] RBP: 00007fda5a19e090 R08: 0000000000000000 R09: 0000000000000000 [ 208.170487][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.170498][ T8785] R13: 00007fda5c1c6038 R14: 00007fda5c1c5fa0 R15: 00007ffef51c7368 [ 208.170527][ T8785] [ 209.931274][ T8860] FAULT_INJECTION: forcing a failure. [ 209.931274][ T8860] name failslab, interval 1, probability 0, space 0, times 0 [ 209.931307][ T8860] CPU: 1 UID: 0 PID: 8860 Comm: syz.2.1213 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.931330][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 209.931341][ T8860] Call Trace: [ 209.931348][ T8860] [ 209.931356][ T8860] dump_stack_lvl+0xe8/0x150 [ 209.931391][ T8860] should_fail_ex+0x46b/0x600 [ 209.931417][ T8860] should_failslab+0xa8/0x100 [ 209.931437][ T8860] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 209.931465][ T8860] ? __alloc_skb+0x1d0/0x7d0 [ 209.931492][ T8860] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.931521][ T8860] __alloc_skb+0x1d0/0x7d0 [ 209.931553][ T8860] netlink_sendmsg+0x5d4/0xb40 [ 209.931591][ T8860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.931622][ T8860] ? unwind_get_return_address+0x4d/0x90 [ 209.931647][ T8860] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.931677][ T8860] ____sys_sendmsg+0x94c/0x9c0 [ 209.931703][ T8860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.931743][ T8860] ? import_iovec+0x73/0xa0 [ 209.931769][ T8860] ___sys_sendmsg+0x2a5/0x360 [ 209.931787][ T8860] ? __lock_acquire+0x6b5/0x2cf0 [ 209.931813][ T8860] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.931863][ T8860] ? __fget_files+0x2a/0x420 [ 209.931884][ T8860] ? __fget_files+0x3a6/0x420 [ 209.931924][ T8860] __x64_sys_sendmsg+0x1c3/0x2a0 [ 209.931947][ T8860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.931975][ T8860] ? __pfx_ksys_write+0x10/0x10 [ 209.932009][ T8860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.932030][ T8860] do_syscall_64+0x15f/0xf80 [ 209.932053][ T8860] ? trace_irq_disable+0x3b/0x140 [ 209.932072][ T8860] ? clear_bhb_loop+0x40/0x90 [ 209.932095][ T8860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.932114][ T8860] RIP: 0033:0x7fc66c84c819 [ 209.932136][ T8860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.932152][ T8860] RSP: 002b:00007fc66aa9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.932173][ T8860] RAX: ffffffffffffffda RBX: 00007fc66cac5fa0 RCX: 00007fc66c84c819 [ 209.932187][ T8860] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 209.932199][ T8860] RBP: 00007fc66aa9e090 R08: 0000000000000000 R09: 0000000000000000 [ 209.932212][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.932224][ T8860] R13: 00007fc66cac6038 R14: 00007fc66cac5fa0 R15: 00007ffea170b368 [ 209.932254][ T8860] [ 210.008170][ T8862] FAULT_INJECTION: forcing a failure. [ 210.008170][ T8862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.008200][ T8862] CPU: 1 UID: 0 PID: 8862 Comm: syz.3.1214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 210.008221][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 210.008233][ T8862] Call Trace: [ 210.008240][ T8862] [ 210.008247][ T8862] dump_stack_lvl+0xe8/0x150 [ 210.008281][ T8862] should_fail_ex+0x46b/0x600 [ 210.008306][ T8862] _copy_to_user+0x31/0xb0 [ 210.008332][ T8862] simple_read_from_buffer+0xe1/0x170 [ 210.008361][ T8862] proc_fail_nth_read+0x1be/0x230 [ 210.008388][ T8862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.008414][ T8862] ? rw_verify_area+0x2ac/0x4e0 [ 210.008446][ T8862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.008471][ T8862] vfs_read+0x212/0xa80 [ 210.008504][ T8862] ? __pfx_vfs_read+0x10/0x10 [ 210.008531][ T8862] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 210.008564][ T8862] ? lockdep_hardirqs_on+0x7a/0x110 [ 210.008586][ T8862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 210.008609][ T8862] ? mutex_lock_nested+0x152/0x1d0 [ 210.008634][ T8862] ? fdget_pos+0x252/0x320 [ 210.008666][ T8862] ksys_read+0x156/0x270 [ 210.008694][ T8862] ? __pfx_ksys_read+0x10/0x10 [ 210.008727][ T8862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.008747][ T8862] do_syscall_64+0x15f/0xf80 [ 210.008768][ T8862] ? trace_irq_disable+0x3b/0x140 [ 210.008787][ T8862] ? clear_bhb_loop+0x40/0x90 [ 210.008809][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.008827][ T8862] RIP: 0033:0x7f4f916bd04e [ 210.008844][ T8862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 210.008860][ T8862] RSP: 002b:00007f4f8f94dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.008879][ T8862] RAX: ffffffffffffffda RBX: 00007f4f8f94e6c0 RCX: 00007f4f916bd04e [ 210.008893][ T8862] RDX: 000000000000000f RSI: 00007f4f8f94e0a0 RDI: 0000000000000003 [ 210.008904][ T8862] RBP: 00007f4f8f94e090 R08: 0000000000000000 R09: 0000000000000000 [ 210.008916][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.008927][ T8862] R13: 00007f4f91976038 R14: 00007f4f91975fa0 R15: 00007ffcdf82b6d8 [ 210.008957][ T8862] [ 210.075873][ T5884] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 210.353450][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.353482][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.353506][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.353548][ T5884] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.353570][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.507709][ T5884] usb 2-1: config 0 descriptor?? [ 210.991464][ T5884] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.991501][ T5884] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.991530][ T5884] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.991558][ T5884] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.991596][ T5884] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.991624][ T5884] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 210.991652][ T5884] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 211.120533][ T5884] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 211.238721][ T5962] usb 2-1: USB disconnect, device number 23 [ 211.794630][ T8933] FAULT_INJECTION: forcing a failure. [ 211.794630][ T8933] name failslab, interval 1, probability 0, space 0, times 0 [ 211.794663][ T8933] CPU: 1 UID: 0 PID: 8933 Comm: syz.2.1249 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 211.794686][ T8933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 211.794698][ T8933] Call Trace: [ 211.794705][ T8933] [ 211.794714][ T8933] dump_stack_lvl+0xe8/0x150 [ 211.794748][ T8933] should_fail_ex+0x46b/0x600 [ 211.794775][ T8933] should_failslab+0xa8/0x100 [ 211.794796][ T8933] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 211.794825][ T8933] ? __alloc_skb+0x1d0/0x7d0 [ 211.794852][ T8933] ? lockdep_hardirqs_on+0x7a/0x110 [ 211.794881][ T8933] __alloc_skb+0x1d0/0x7d0 [ 211.794914][ T8933] netlink_sendmsg+0x5d4/0xb40 [ 211.794953][ T8933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.794984][ T8933] ? unwind_get_return_address+0x4d/0x90 [ 211.795010][ T8933] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.795041][ T8933] ____sys_sendmsg+0x94c/0x9c0 [ 211.795068][ T8933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.795098][ T8933] ? import_iovec+0x73/0xa0 [ 211.795124][ T8933] ___sys_sendmsg+0x2a5/0x360 [ 211.795143][ T8933] ? __lock_acquire+0x6b5/0x2cf0 [ 211.795168][ T8933] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.795218][ T8933] ? __fget_files+0x2a/0x420 [ 211.795255][ T8933] ? __fget_files+0x3a6/0x420 [ 211.795292][ T8933] __x64_sys_sendmsg+0x1c3/0x2a0 [ 211.795315][ T8933] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.795342][ T8933] ? __pfx_ksys_write+0x10/0x10 [ 211.795374][ T8933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.795394][ T8933] do_syscall_64+0x15f/0xf80 [ 211.795416][ T8933] ? trace_irq_disable+0x3b/0x140 [ 211.795434][ T8933] ? clear_bhb_loop+0x40/0x90 [ 211.795457][ T8933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.795475][ T8933] RIP: 0033:0x7fc66c84c819 [ 211.795492][ T8933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.795507][ T8933] RSP: 002b:00007fc66aa9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.795527][ T8933] RAX: ffffffffffffffda RBX: 00007fc66cac5fa0 RCX: 00007fc66c84c819 [ 211.795540][ T8933] RDX: 0000000000040000 RSI: 0000200000000480 RDI: 0000000000000003 [ 211.795553][ T8933] RBP: 00007fc66aa9e090 R08: 0000000000000000 R09: 0000000000000000 [ 211.795565][ T8933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.795580][ T8933] R13: 00007fc66cac6038 R14: 00007fc66cac5fa0 R15: 00007ffea170b368 [ 211.795609][ T8933] [ 212.225185][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 212.225203][ T37] audit: type=1326 audit(1776501958.411:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 212.225246][ T37] audit: type=1326 audit(1776501958.411:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 212.238657][ T37] audit: type=1326 audit(1776501958.431:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 212.238701][ T37] audit: type=1326 audit(1776501958.431:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 212.238738][ T37] audit: type=1326 audit(1776501958.431:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 212.242492][ T37] audit: type=1326 audit(1776501958.431:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 212.242534][ T37] audit: type=1326 audit(1776501958.431:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 212.242571][ T37] audit: type=1326 audit(1776501958.431:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 212.251817][ T37] audit: type=1326 audit(1776501958.431:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a1470c4ab code=0x7ffc0000 [ 212.251861][ T37] audit: type=1326 audit(1776501958.441:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.1.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 213.166215][ T815] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 213.317374][ T815] usb 2-1: Using ep0 maxpacket: 32 [ 213.319960][ T815] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 213.319985][ T815] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 213.320007][ T815] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 213.320029][ T815] usb 2-1: config 1 has no interface number 0 [ 213.320087][ T815] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.320114][ T815] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 213.320153][ T815] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 213.320176][ T815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.426871][ T815] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 213.636546][ T815] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 213.711237][ T9013] FAULT_INJECTION: forcing a failure. [ 213.711237][ T9013] name failslab, interval 1, probability 0, space 0, times 0 [ 213.711269][ T9013] CPU: 0 UID: 0 PID: 9013 Comm: syz.4.1289 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 213.711291][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 213.711309][ T9013] Call Trace: [ 213.711320][ T9013] [ 213.711328][ T9013] dump_stack_lvl+0xe8/0x150 [ 213.711362][ T9013] should_fail_ex+0x46b/0x600 [ 213.711390][ T9013] should_failslab+0xa8/0x100 [ 213.711411][ T9013] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 213.711441][ T9013] ? lockdep_hardirqs_on+0x7a/0x110 [ 213.711464][ T9013] ? __get_vm_area_node+0x171/0x350 [ 213.711495][ T9013] __get_vm_area_node+0x171/0x350 [ 213.711526][ T9013] __vmalloc_node_range_noprof+0x36a/0x1750 [ 213.711555][ T9013] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 213.711580][ T9013] ? __lock_acquire+0x6b5/0x2cf0 [ 213.711620][ T9013] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 213.711644][ T9013] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 213.711672][ T9013] ? __lock_acquire+0x6b5/0x2cf0 [ 213.711697][ T9013] ? _parse_integer_limit+0x1ae/0x1f0 [ 213.711732][ T9013] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 213.711751][ T9013] __vmalloc_noprof+0xd2/0x120 [ 213.711778][ T9013] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 213.711801][ T9013] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 213.711827][ T9013] bpf_prog_alloc+0x3c/0x1a0 [ 213.711849][ T9013] bpf_prog_load+0x779/0x1a10 [ 213.711882][ T9013] ? __pfx_bpf_prog_load+0x10/0x10 [ 213.711902][ T9013] ? __might_fault+0xaf/0x130 [ 213.711947][ T9013] ? bpf_lsm_bpf+0x9/0x20 [ 213.711965][ T9013] ? security_bpf+0x7e/0x2d0 [ 213.711986][ T9013] __sys_bpf+0x618/0x950 [ 213.712008][ T9013] ? __pfx___sys_bpf+0x10/0x10 [ 213.712026][ T9013] ? rt_mutex_slowunlock+0x1cb/0x300 [ 213.712058][ T9013] ? ksys_write+0x248/0x270 [ 213.712089][ T9013] ? __pfx_ksys_write+0x10/0x10 [ 213.712121][ T9013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.712142][ T9013] __x64_sys_bpf+0x7c/0x90 [ 213.712171][ T9013] do_syscall_64+0x15f/0xf80 [ 213.712193][ T9013] ? trace_irq_disable+0x3b/0x140 [ 213.712212][ T9013] ? clear_bhb_loop+0x40/0x90 [ 213.712236][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.712255][ T9013] RIP: 0033:0x7f74986ac819 [ 213.712272][ T9013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.712289][ T9013] RSP: 002b:00007f7496906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.712315][ T9013] RAX: ffffffffffffffda RBX: 00007f7498925fa0 RCX: 00007f74986ac819 [ 213.712330][ T9013] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 213.712342][ T9013] RBP: 00007f7496906090 R08: 0000000000000000 R09: 0000000000000000 [ 213.712354][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.712365][ T9013] R13: 00007f7498926038 R14: 00007f7498925fa0 R15: 00007ffd118b82e8 [ 213.712392][ T9013] [ 213.712691][ T9013] syz.4.1289: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 213.715059][ T9013] CPU: 0 UID: 0 PID: 9013 Comm: syz.4.1289 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 213.715080][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 213.715091][ T9013] Call Trace: [ 213.715098][ T9013] [ 213.715108][ T9013] dump_stack_lvl+0xe8/0x150 [ 213.715140][ T9013] warn_alloc+0x263/0x3e0 [ 213.715165][ T9013] ? __pfx_warn_alloc+0x10/0x10 [ 213.715182][ T9013] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 213.715211][ T9013] ? lockdep_hardirqs_on+0x7a/0x110 [ 213.715233][ T9013] ? __get_vm_area_node+0x171/0x350 [ 213.715261][ T9013] ? __get_vm_area_node+0x2e1/0x350 [ 213.715294][ T9013] __vmalloc_node_range_noprof+0x38f/0x1750 [ 213.715333][ T9013] ? __lock_acquire+0x6b5/0x2cf0 [ 213.715368][ T9013] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 213.715390][ T9013] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 213.715418][ T9013] ? __lock_acquire+0x6b5/0x2cf0 [ 213.715441][ T9013] ? _parse_integer_limit+0x1ae/0x1f0 [ 213.715475][ T9013] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 213.715494][ T9013] __vmalloc_noprof+0xd2/0x120 [ 213.715519][ T9013] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 213.715541][ T9013] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 213.715565][ T9013] bpf_prog_alloc+0x3c/0x1a0 [ 213.715587][ T9013] bpf_prog_load+0x779/0x1a10 [ 213.715619][ T9013] ? __pfx_bpf_prog_load+0x10/0x10 [ 213.715640][ T9013] ? __might_fault+0xaf/0x130 [ 213.715682][ T9013] ? bpf_lsm_bpf+0x9/0x20 [ 213.715700][ T9013] ? security_bpf+0x7e/0x2d0 [ 213.715721][ T9013] __sys_bpf+0x618/0x950 [ 213.715741][ T9013] ? __pfx___sys_bpf+0x10/0x10 [ 213.715757][ T9013] ? rt_mutex_slowunlock+0x1cb/0x300 [ 213.715789][ T9013] ? ksys_write+0x248/0x270 [ 213.715818][ T9013] ? __pfx_ksys_write+0x10/0x10 [ 213.715849][ T9013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.715870][ T9013] __x64_sys_bpf+0x7c/0x90 [ 213.715898][ T9013] do_syscall_64+0x15f/0xf80 [ 213.715919][ T9013] ? trace_irq_disable+0x3b/0x140 [ 213.715938][ T9013] ? clear_bhb_loop+0x40/0x90 [ 213.715961][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.715980][ T9013] RIP: 0033:0x7f74986ac819 [ 213.715995][ T9013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.716011][ T9013] RSP: 002b:00007f7496906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.716030][ T9013] RAX: ffffffffffffffda RBX: 00007f7498925fa0 RCX: 00007f74986ac819 [ 213.716043][ T9013] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 213.716054][ T9013] RBP: 00007f7496906090 R08: 0000000000000000 R09: 0000000000000000 [ 213.716064][ T9013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.716074][ T9013] R13: 00007f7498926038 R14: 00007f7498925fa0 R15: 00007ffd118b82e8 [ 213.716102][ T9013] [ 213.735900][ T9013] Mem-Info: [ 213.735913][ T9013] active_anon:254 inactive_anon:6598 isolated_anon:0 [ 213.735913][ T9013] active_file:5506 inactive_file:41015 isolated_file:0 [ 213.735913][ T9013] unevictable:768 dirty:193 writeback:0 [ 213.735913][ T9013] slab_reclaimable:11693 slab_unreclaimable:104073 [ 213.735913][ T9013] mapped:30505 shmem:1357 pagetables:1246 [ 213.735913][ T9013] sec_pagetables:0 bounce:0 [ 213.735913][ T9013] kernel_misc_reclaimable:0 [ 213.735913][ T9013] free:1323294 free_pcp:3175 free_cma:0 [ 213.735968][ T9013] Node 0 active_anon:1016kB inactive_anon:26392kB active_file:21824kB inactive_file:164060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122020kB dirty:772kB writeback:0kB shmem:3892kB kernel_stack:13240kB pagetables:4816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 213.736095][ T9013] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:96kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 213.736161][ T9013] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.736218][ T9013] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 213.736250][ T9013] Node 0 DMA32 free:1343900kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1016kB inactive_anon:26392kB active_file:21824kB inactive_file:164060kB unevictable:1536kB writepending:772kB zspages:0kB present:3129332kB managed:2565008kB mlocked:0kB bounce:0kB free_pcp:12700kB local_pcp:6288kB free_cma:0kB [ 213.736308][ T9013] lowmem_reserve[]: 0 0 0 0 0 [ 213.736337][ T9013] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:136kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.736389][ T9013] lowmem_reserve[]: 0 0 0 0 0 [ 213.736418][ T9013] Node 1 Normal free:3933916kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.736474][ T9013] lowmem_reserve[]: 0 0 0 0 0 [ 213.736503][ T9013] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.736615][ T9013] Node 0 DMA32: 2207*4kB (UME) 1176*8kB (UME) 926*16kB (UME) 165*32kB (UME) 83*64kB (ME) 25*128kB (M) 18*256kB (UME) 8*512kB (UME) 2*1024kB (M) 8*2048kB (M) 310*4096kB (UM) = 1343740kB [ 213.736756][ T9013] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 213.736847][ T9013] Node 1 Normal: 3*4kB (U) 6*8kB (UM) 10*16kB (UM) 12*32kB (UM) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3933916kB [ 213.736993][ T9013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.737008][ T9013] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.737023][ T9013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.737038][ T9013] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.737059][ T9013] 47874 total pagecache pages [ 213.737069][ T9013] 0 pages in swap cache [ 213.737076][ T9013] Free swap = 124996kB [ 213.737083][ T9013] Total swap = 124996kB [ 213.737090][ T9013] 2097051 pages RAM [ 213.737097][ T9013] 0 pages HighMem/MovableOnly [ 213.737103][ T9013] 424150 pages reserved [ 213.737110][ T9013] 0 pages cma reserved [ 214.246508][ T5968] usb 2-1: USB disconnect, device number 24 [ 214.258601][ T5968] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 214.783362][ T9045] FAULT_INJECTION: forcing a failure. [ 214.783362][ T9045] name failslab, interval 1, probability 0, space 0, times 0 [ 214.783420][ T9045] CPU: 0 UID: 0 PID: 9045 Comm: syz.4.1305 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 214.783442][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 214.783454][ T9045] Call Trace: [ 214.783461][ T9045] [ 214.783469][ T9045] dump_stack_lvl+0xe8/0x150 [ 214.783504][ T9045] should_fail_ex+0x46b/0x600 [ 214.783531][ T9045] should_failslab+0xa8/0x100 [ 214.783552][ T9045] __kmalloc_cache_node_noprof+0x8a/0x6c0 [ 214.783582][ T9045] ? __get_vm_area_node+0x171/0x350 [ 214.783613][ T9045] __get_vm_area_node+0x171/0x350 [ 214.783645][ T9045] __vmalloc_node_range_noprof+0x36a/0x1750 [ 214.783673][ T9045] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 214.783697][ T9045] ? __lock_acquire+0x6b5/0x2cf0 [ 214.783734][ T9045] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 214.783757][ T9045] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.783786][ T9045] ? __lock_acquire+0x6b5/0x2cf0 [ 214.783811][ T9045] ? _parse_integer_limit+0x1ae/0x1f0 [ 214.783844][ T9045] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 214.783863][ T9045] __vmalloc_noprof+0xd2/0x120 [ 214.783891][ T9045] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 214.783914][ T9045] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 214.783939][ T9045] bpf_prog_alloc+0x3c/0x1a0 [ 214.783962][ T9045] bpf_prog_load+0x779/0x1a10 [ 214.783994][ T9045] ? __pfx_bpf_prog_load+0x10/0x10 [ 214.784015][ T9045] ? __might_fault+0xaf/0x130 [ 214.784059][ T9045] ? bpf_lsm_bpf+0x9/0x20 [ 214.784078][ T9045] ? security_bpf+0x7e/0x2d0 [ 214.784099][ T9045] __sys_bpf+0x618/0x950 [ 214.784121][ T9045] ? __pfx___sys_bpf+0x10/0x10 [ 214.784138][ T9045] ? rt_mutex_slowunlock+0x1cb/0x300 [ 214.784173][ T9045] ? ksys_write+0x248/0x270 [ 214.784208][ T9045] ? __pfx_ksys_write+0x10/0x10 [ 214.784241][ T9045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.784262][ T9045] __x64_sys_bpf+0x7c/0x90 [ 214.784292][ T9045] do_syscall_64+0x15f/0xf80 [ 214.784319][ T9045] ? trace_irq_disable+0x3b/0x140 [ 214.784338][ T9045] ? clear_bhb_loop+0x40/0x90 [ 214.784365][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.784384][ T9045] RIP: 0033:0x7f74986ac819 [ 214.784402][ T9045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.784418][ T9045] RSP: 002b:00007f7496906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.784438][ T9045] RAX: ffffffffffffffda RBX: 00007f7498925fa0 RCX: 00007f74986ac819 [ 214.784452][ T9045] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 214.784464][ T9045] RBP: 00007f7496906090 R08: 0000000000000000 R09: 0000000000000000 [ 214.784476][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.784487][ T9045] R13: 00007f7498926038 R14: 00007f7498925fa0 R15: 00007ffd118b82e8 [ 214.784514][ T9045] [ 216.105331][ T9102] FAULT_INJECTION: forcing a failure. [ 216.105331][ T9102] name failslab, interval 1, probability 0, space 0, times 0 [ 216.105363][ T9102] CPU: 0 UID: 0 PID: 9102 Comm: syz.2.1330 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 216.105388][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 216.105399][ T9102] Call Trace: [ 216.105406][ T9102] [ 216.105414][ T9102] dump_stack_lvl+0xe8/0x150 [ 216.105447][ T9102] should_fail_ex+0x46b/0x600 [ 216.105474][ T9102] should_failslab+0xa8/0x100 [ 216.105494][ T9102] __kmalloc_noprof+0xdf/0x7b0 [ 216.105522][ T9102] ? tomoyo_encode+0x28b/0x550 [ 216.105548][ T9102] tomoyo_encode+0x28b/0x550 [ 216.105572][ T9102] tomoyo_realpath_from_path+0x58d/0x5d0 [ 216.105602][ T9102] ? tomoyo_path_number_perm+0x219/0x630 [ 216.105628][ T9102] tomoyo_path_number_perm+0x246/0x630 [ 216.105657][ T9102] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 216.105683][ T9102] ? __lock_acquire+0x6b5/0x2cf0 [ 216.105707][ T9102] ? do_raw_spin_lock+0x12b/0x2f0 [ 216.105753][ T9102] ? __fget_files+0x2a/0x420 [ 216.105777][ T9102] ? __fget_files+0x2a/0x420 [ 216.105794][ T9102] ? __fget_files+0x3a6/0x420 [ 216.105809][ T9102] ? __fget_files+0x2a/0x420 [ 216.105828][ T9102] security_file_ioctl+0xc3/0x2a0 [ 216.105852][ T9102] __se_sys_ioctl+0x47/0x170 [ 216.105873][ T9102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.105887][ T9102] do_syscall_64+0x15f/0xf80 [ 216.105905][ T9102] ? trace_irq_disable+0x3b/0x140 [ 216.105919][ T9102] ? clear_bhb_loop+0x40/0x90 [ 216.105937][ T9102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.105950][ T9102] RIP: 0033:0x7fc66c84c819 [ 216.105964][ T9102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.105975][ T9102] RSP: 002b:00007fc66aa7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.105991][ T9102] RAX: ffffffffffffffda RBX: 00007fc66cac6090 RCX: 00007fc66c84c819 [ 216.106001][ T9102] RDX: 0000200000000040 RSI: 00000000400454e2 RDI: 0000000000000003 [ 216.106010][ T9102] RBP: 00007fc66aa7d090 R08: 0000000000000000 R09: 0000000000000000 [ 216.106018][ T9102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.106027][ T9102] R13: 00007fc66cac6128 R14: 00007fc66cac6090 R15: 00007ffea170b368 [ 216.106049][ T9102] [ 216.128585][ T9102] ERROR: Out of memory at tomoyo_realpath_from_path. [ 217.196938][ T9149] FAULT_INJECTION: forcing a failure. [ 217.196938][ T9149] name failslab, interval 1, probability 0, space 0, times 0 [ 217.196978][ T9149] CPU: 0 UID: 0 PID: 9149 Comm: syz.3.1355 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 217.196999][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 217.197010][ T9149] Call Trace: [ 217.197018][ T9149] [ 217.197027][ T9149] dump_stack_lvl+0xe8/0x150 [ 217.197061][ T9149] should_fail_ex+0x46b/0x600 [ 217.197087][ T9149] should_failslab+0xa8/0x100 [ 217.197107][ T9149] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 217.197136][ T9149] ? __alloc_skb+0x1d0/0x7d0 [ 217.197162][ T9149] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.197191][ T9149] __alloc_skb+0x1d0/0x7d0 [ 217.197223][ T9149] netlink_sendmsg+0x5d4/0xb40 [ 217.197261][ T9149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.197291][ T9149] ? unwind_get_return_address+0x4d/0x90 [ 217.197317][ T9149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.197348][ T9149] ____sys_sendmsg+0x94c/0x9c0 [ 217.197374][ T9149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.197402][ T9149] ? import_iovec+0x73/0xa0 [ 217.197429][ T9149] ___sys_sendmsg+0x2a5/0x360 [ 217.197449][ T9149] ? __lock_acquire+0x6b5/0x2cf0 [ 217.197475][ T9149] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.197530][ T9149] ? __fget_files+0x2a/0x420 [ 217.197553][ T9149] ? __fget_files+0x3a6/0x420 [ 217.197586][ T9149] __x64_sys_sendmsg+0x1c3/0x2a0 [ 217.197609][ T9149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.197639][ T9149] ? __pfx_ksys_write+0x10/0x10 [ 217.197673][ T9149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.197693][ T9149] do_syscall_64+0x15f/0xf80 [ 217.197715][ T9149] ? trace_irq_disable+0x3b/0x140 [ 217.197734][ T9149] ? clear_bhb_loop+0x40/0x90 [ 217.197757][ T9149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.197776][ T9149] RIP: 0033:0x7f4f916fc819 [ 217.197794][ T9149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.197810][ T9149] RSP: 002b:00007f4f8f94e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.197831][ T9149] RAX: ffffffffffffffda RBX: 00007f4f91975fa0 RCX: 00007f4f916fc819 [ 217.197845][ T9149] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 217.197858][ T9149] RBP: 00007f4f8f94e090 R08: 0000000000000000 R09: 0000000000000000 [ 217.197870][ T9149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.197882][ T9149] R13: 00007f4f91976038 R14: 00007f4f91975fa0 R15: 00007ffcdf82b6d8 [ 217.197913][ T9149] [ 217.982218][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 217.982235][ T37] audit: type=1326 audit(1776501964.171:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9181 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 217.982277][ T37] audit: type=1326 audit(1776501964.171:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9181 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 217.993259][ T37] audit: type=1326 audit(1776501964.181:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9181 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 217.993307][ T37] audit: type=1326 audit(1776501964.181:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9181 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 217.995371][ T37] audit: type=1326 audit(1776501964.181:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9181 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 217.995417][ T37] audit: type=1326 audit(1776501964.181:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9181 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 218.000233][ T37] audit: type=1326 audit(1776501964.181:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9181 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a146cd04e code=0x7ffc0000 [ 218.002729][ T37] audit: type=1326 audit(1776501964.191:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9181 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a1470c4ab code=0x7ffc0000 [ 218.002773][ T37] audit: type=1326 audit(1776501964.191:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9181 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a1470c4ab code=0x7ffc0000 [ 218.019503][ T37] audit: type=1326 audit(1776501964.201:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9181 comm="syz.1.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a1470c4ab code=0x7ffc0000 [ 218.294364][ T5968] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 218.427198][ T5968] usb 2-1: device descriptor read/64, error -71 [ 218.676512][ T5968] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 218.816103][ T5968] usb 2-1: device descriptor read/64, error -71 [ 218.874919][ T9226] FAULT_INJECTION: forcing a failure. [ 218.874919][ T9226] name failslab, interval 1, probability 0, space 0, times 0 [ 218.875021][ T9226] CPU: 0 UID: 0 PID: 9226 Comm: syz.4.1392 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.875044][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 218.875056][ T9226] Call Trace: [ 218.875064][ T9226] [ 218.875072][ T9226] dump_stack_lvl+0xe8/0x150 [ 218.875107][ T9226] should_fail_ex+0x46b/0x600 [ 218.875134][ T9226] should_failslab+0xa8/0x100 [ 218.875155][ T9226] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 218.875183][ T9226] ? __alloc_skb+0x1d0/0x7d0 [ 218.875211][ T9226] ? lockdep_hardirqs_on+0x7a/0x110 [ 218.875239][ T9226] __alloc_skb+0x1d0/0x7d0 [ 218.875268][ T9226] ? __lock_acquire+0x6b5/0x2cf0 [ 218.875293][ T9226] alloc_skb_with_frags+0xc8/0x760 [ 218.875312][ T9226] ? __pfx_smack_log+0x10/0x10 [ 218.875344][ T9226] sock_alloc_send_pskb+0x884/0x9a0 [ 218.875370][ T9226] ? __lock_acquire+0x6b5/0x2cf0 [ 218.875408][ T9226] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 218.875437][ T9226] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 218.875465][ T9226] unix_dgram_sendmsg+0x460/0x18d0 [ 218.875501][ T9226] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 218.875528][ T9226] ? __lock_acquire+0x6b5/0x2cf0 [ 218.875562][ T9226] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 218.875593][ T9226] ? __kernel_text_address+0xd/0x30 [ 218.875624][ T9226] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 218.875655][ T9226] ____sys_sendmsg+0x94c/0x9c0 [ 218.875681][ T9226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.875710][ T9226] ? import_iovec+0x73/0xa0 [ 218.875736][ T9226] ___sys_sendmsg+0x2a5/0x360 [ 218.875755][ T9226] ? __lock_acquire+0x6b5/0x2cf0 [ 218.875779][ T9226] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.875832][ T9226] ? __fget_files+0x2a/0x420 [ 218.875854][ T9226] ? __fget_files+0x3a6/0x420 [ 218.875885][ T9226] __x64_sys_sendmsg+0x1c3/0x2a0 [ 218.875909][ T9226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.875938][ T9226] ? __pfx_ksys_write+0x10/0x10 [ 218.875972][ T9226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.875994][ T9226] do_syscall_64+0x15f/0xf80 [ 218.876016][ T9226] ? trace_irq_disable+0x3b/0x140 [ 218.876036][ T9226] ? clear_bhb_loop+0x40/0x90 [ 218.876060][ T9226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.876079][ T9226] RIP: 0033:0x7f74986ac819 [ 218.876097][ T9226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.876114][ T9226] RSP: 002b:00007f7496906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.876134][ T9226] RAX: ffffffffffffffda RBX: 00007f7498925fa0 RCX: 00007f74986ac819 [ 218.876149][ T9226] RDX: 000000002400c014 RSI: 0000200000001b40 RDI: 0000000000000005 [ 218.876162][ T9226] RBP: 00007f7496906090 R08: 0000000000000000 R09: 0000000000000000 [ 218.876174][ T9226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.876186][ T9226] R13: 00007f7498926038 R14: 00007f7498925fa0 R15: 00007ffd118b82e8 [ 218.876216][ T9226] [ 218.936773][ T5968] usb usb2-port1: attempt power cycle [ 219.326360][ T5968] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 219.365134][ T9238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1401'. [ 219.373042][ T5968] usb 2-1: device descriptor read/8, error -71 [ 219.383130][ T9238] FAULT_INJECTION: forcing a failure. [ 219.383130][ T9238] name failslab, interval 1, probability 0, space 0, times 0 [ 219.383159][ T9238] CPU: 1 UID: 0 PID: 9238 Comm: syz.0.1401 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 219.383180][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 219.383192][ T9238] Call Trace: [ 219.383199][ T9238] [ 219.383207][ T9238] dump_stack_lvl+0xe8/0x150 [ 219.383241][ T9238] should_fail_ex+0x46b/0x600 [ 219.383268][ T9238] should_failslab+0xa8/0x100 [ 219.383288][ T9238] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 219.383317][ T9238] ? __alloc_skb+0x1d0/0x7d0 [ 219.383347][ T9238] ? lockdep_hardirqs_on+0x7a/0x110 [ 219.383376][ T9238] __alloc_skb+0x1d0/0x7d0 [ 219.383406][ T9238] netlink_sendmsg+0x5d4/0xb40 [ 219.383444][ T9238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.383473][ T9238] ? unwind_get_return_address+0x4d/0x90 [ 219.383505][ T9238] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.383533][ T9238] ____sys_sendmsg+0x94c/0x9c0 [ 219.383554][ T9238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.383571][ T9238] ? import_iovec+0x73/0xa0 [ 219.383586][ T9238] ___sys_sendmsg+0x2a5/0x360 [ 219.383596][ T9238] ? __lock_acquire+0x6b5/0x2cf0 [ 219.383611][ T9238] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.383637][ T9238] ? __fget_files+0x2a/0x420 [ 219.383650][ T9238] ? __fget_files+0x3a6/0x420 [ 219.383667][ T9238] __x64_sys_sendmsg+0x1c3/0x2a0 [ 219.383680][ T9238] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.383695][ T9238] ? __pfx_ksys_write+0x10/0x10 [ 219.383714][ T9238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.383725][ T9238] do_syscall_64+0x15f/0xf80 [ 219.383740][ T9238] ? trace_irq_disable+0x3b/0x140 [ 219.383751][ T9238] ? clear_bhb_loop+0x40/0x90 [ 219.383763][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.383774][ T9238] RIP: 0033:0x7fda5bf4c819 [ 219.383785][ T9238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.383794][ T9238] RSP: 002b:00007fda5a19e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.383805][ T9238] RAX: ffffffffffffffda RBX: 00007fda5c1c5fa0 RCX: 00007fda5bf4c819 [ 219.383813][ T9238] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 219.383819][ T9238] RBP: 00007fda5a19e090 R08: 0000000000000000 R09: 0000000000000000 [ 219.383826][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.383832][ T9238] R13: 00007fda5c1c6038 R14: 00007fda5c1c5fa0 R15: 00007ffef51c7368 [ 219.383848][ T9238] [ 219.617713][ T5968] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 219.647132][ T5968] usb 2-1: device descriptor read/8, error -71 [ 219.756199][ T5968] usb usb2-port1: unable to enumerate USB device [ 221.413275][ T9334] FAULT_INJECTION: forcing a failure. [ 221.413275][ T9334] name failslab, interval 1, probability 0, space 0, times 0 [ 221.413317][ T9334] CPU: 0 UID: 0 PID: 9334 Comm: syz.2.1444 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.413339][ T9334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 221.413350][ T9334] Call Trace: [ 221.413357][ T9334] [ 221.413365][ T9334] dump_stack_lvl+0xe8/0x150 [ 221.413398][ T9334] should_fail_ex+0x46b/0x600 [ 221.413423][ T9334] should_failslab+0xa8/0x100 [ 221.413443][ T9334] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 221.413471][ T9334] ? __alloc_skb+0x1d0/0x7d0 [ 221.413497][ T9334] ? lockdep_hardirqs_on+0x7a/0x110 [ 221.413525][ T9334] __alloc_skb+0x1d0/0x7d0 [ 221.413556][ T9334] netlink_sendmsg+0x5d4/0xb40 [ 221.413594][ T9334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.413624][ T9334] ? unwind_get_return_address+0x4d/0x90 [ 221.413650][ T9334] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.413679][ T9334] ____sys_sendmsg+0x94c/0x9c0 [ 221.413705][ T9334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.413733][ T9334] ? import_iovec+0x73/0xa0 [ 221.413760][ T9334] ___sys_sendmsg+0x2a5/0x360 [ 221.413779][ T9334] ? __lock_acquire+0x6b5/0x2cf0 [ 221.413805][ T9334] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.413855][ T9334] ? __fget_files+0x2a/0x420 [ 221.413877][ T9334] ? __fget_files+0x3a6/0x420 [ 221.413909][ T9334] __x64_sys_sendmsg+0x1c3/0x2a0 [ 221.413931][ T9334] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.413960][ T9334] ? __pfx_ksys_write+0x10/0x10 [ 221.413999][ T9334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.414019][ T9334] do_syscall_64+0x15f/0xf80 [ 221.414042][ T9334] ? trace_irq_disable+0x3b/0x140 [ 221.414060][ T9334] ? clear_bhb_loop+0x40/0x90 [ 221.414083][ T9334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.414101][ T9334] RIP: 0033:0x7fc66c84c819 [ 221.414119][ T9334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.414135][ T9334] RSP: 002b:00007fc66aa9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.414155][ T9334] RAX: ffffffffffffffda RBX: 00007fc66cac5fa0 RCX: 00007fc66c84c819 [ 221.414169][ T9334] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000004 [ 221.414181][ T9334] RBP: 00007fc66aa9e090 R08: 0000000000000000 R09: 0000000000000000 [ 221.414193][ T9334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.414204][ T9334] R13: 00007fc66cac6038 R14: 00007fc66cac5fa0 R15: 00007ffea170b368 [ 221.414233][ T9334] [ 226.224182][ T9514] FAULT_INJECTION: forcing a failure. [ 226.224182][ T9514] name failslab, interval 1, probability 0, space 0, times 0 [ 226.224214][ T9514] CPU: 1 UID: 0 PID: 9514 Comm: syz.4.1527 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 226.224235][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 226.224247][ T9514] Call Trace: [ 226.224254][ T9514] [ 226.224262][ T9514] dump_stack_lvl+0xe8/0x150 [ 226.224296][ T9514] should_fail_ex+0x46b/0x600 [ 226.224321][ T9514] should_failslab+0xa8/0x100 [ 226.224342][ T9514] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 226.224368][ T9514] ? __alloc_skb+0x1d0/0x7d0 [ 226.224394][ T9514] ? lockdep_hardirqs_on+0x7a/0x110 [ 226.224423][ T9514] __alloc_skb+0x1d0/0x7d0 [ 226.224454][ T9514] netlink_sendmsg+0x5d4/0xb40 [ 226.224489][ T9514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.224518][ T9514] ? unwind_get_return_address+0x4d/0x90 [ 226.224542][ T9514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.224572][ T9514] ____sys_sendmsg+0x94c/0x9c0 [ 226.224596][ T9514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.224622][ T9514] ? import_iovec+0x73/0xa0 [ 226.224649][ T9514] ___sys_sendmsg+0x2a5/0x360 [ 226.224666][ T9514] ? __lock_acquire+0x6b5/0x2cf0 [ 226.224691][ T9514] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.224745][ T9514] ? __fget_files+0x2a/0x420 [ 226.224767][ T9514] ? __fget_files+0x3a6/0x420 [ 226.224803][ T9514] __x64_sys_sendmsg+0x1c3/0x2a0 [ 226.224826][ T9514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.224856][ T9514] ? __pfx_ksys_write+0x10/0x10 [ 226.224892][ T9514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.224913][ T9514] do_syscall_64+0x15f/0xf80 [ 226.224935][ T9514] ? trace_irq_disable+0x3b/0x140 [ 226.224954][ T9514] ? clear_bhb_loop+0x40/0x90 [ 226.224977][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.224997][ T9514] RIP: 0033:0x7f74986ac819 [ 226.225014][ T9514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.225031][ T9514] RSP: 002b:00007f7496906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.225051][ T9514] RAX: ffffffffffffffda RBX: 00007f7498925fa0 RCX: 00007f74986ac819 [ 226.225072][ T9514] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 226.225084][ T9514] RBP: 00007f7496906090 R08: 0000000000000000 R09: 0000000000000000 [ 226.225095][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.225106][ T9514] R13: 00007f7498926038 R14: 00007f7498925fa0 R15: 00007ffd118b82e8 [ 226.225135][ T9514] [ 227.406271][ T9561] veth0_macvtap: left promiscuous mode [ 228.774420][ T9637] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 229.786971][ T5899] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 229.939719][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.939746][ T5899] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.941678][ T5899] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 229.941711][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.941731][ T5899] usb 4-1: SerialNumber: syz [ 230.299413][ T5899] usb 4-1: 0:2 : does not exist [ 230.576592][ T5465] veth0_macvtap: entered promiscuous mode [ 230.697403][ T9703] QAT: Device 1 not found [ 231.530659][ T5899] usb 4-1: USB disconnect, device number 5 [ 232.558572][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.287363][ T5899] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 234.439327][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.439360][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.439382][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.439423][ T5899] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.439448][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.517671][ T5899] usb 2-1: config 0 descriptor?? [ 234.979388][ T5899] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 234.979425][ T5899] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 234.979453][ T5899] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 234.979480][ T5899] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 234.979506][ T5899] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 234.979533][ T5899] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 234.979561][ T5899] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 235.014390][ T5899] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 235.232405][ T5968] usb 2-1: USB disconnect, device number 29 [ 235.882644][ T9880] FAULT_INJECTION: forcing a failure. [ 235.882644][ T9880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.882700][ T9880] CPU: 1 UID: 0 PID: 9880 Comm: syz.4.1679 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 235.882724][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 235.882736][ T9880] Call Trace: [ 235.882746][ T9880] [ 235.882755][ T9880] dump_stack_lvl+0xe8/0x150 [ 235.882791][ T9880] should_fail_ex+0x46b/0x600 [ 235.882820][ T9880] _copy_to_user+0x31/0xb0 [ 235.882847][ T9880] simple_read_from_buffer+0xe1/0x170 [ 235.882877][ T9880] proc_fail_nth_read+0x1be/0x230 [ 235.882906][ T9880] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.882934][ T9880] ? rw_verify_area+0x2ac/0x4e0 [ 235.882960][ T9880] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.882987][ T9880] vfs_read+0x212/0xa80 [ 235.883022][ T9880] ? __pfx_vfs_read+0x10/0x10 [ 235.883052][ T9880] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 235.883083][ T9880] ? lockdep_hardirqs_on+0x7a/0x110 [ 235.883107][ T9880] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 235.883131][ T9880] ? mutex_lock_nested+0x152/0x1d0 [ 235.883159][ T9880] ? fdget_pos+0x252/0x320 [ 235.883192][ T9880] ksys_read+0x156/0x270 [ 235.883222][ T9880] ? __pfx_ksys_read+0x10/0x10 [ 235.883258][ T9880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.883279][ T9880] do_syscall_64+0x15f/0xf80 [ 235.883305][ T9880] ? clear_bhb_loop+0x40/0x90 [ 235.883329][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.883353][ T9880] RIP: 0033:0x7f749866d04e [ 235.883372][ T9880] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.883388][ T9880] RSP: 002b:00007f74968c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.883412][ T9880] RAX: ffffffffffffffda RBX: 00007f74968c46c0 RCX: 00007f749866d04e [ 235.883427][ T9880] RDX: 000000000000000f RSI: 00007f74968c40a0 RDI: 0000000000000007 [ 235.883443][ T9880] RBP: 00007f74968c4090 R08: 0000000000000000 R09: 0000000000000000 [ 235.883455][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.883467][ T9880] R13: 00007f7498926218 R14: 00007f7498926180 R15: 00007ffd118b82e8 [ 235.883499][ T9880] [ 236.311032][ T9870] fido_id[9870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 237.032387][ T9919] FAULT_INJECTION: forcing a failure. [ 237.032387][ T9919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.032420][ T9919] CPU: 0 UID: 0 PID: 9919 Comm: syz.4.1702 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 237.032441][ T9919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 237.032451][ T9919] Call Trace: [ 237.032458][ T9919] [ 237.032465][ T9919] dump_stack_lvl+0xe8/0x150 [ 237.032500][ T9919] should_fail_ex+0x46b/0x600 [ 237.032526][ T9919] _copy_from_user+0x2d/0xb0 [ 237.032551][ T9919] __copy_msghdr+0x3c5/0x5b0 [ 237.032574][ T9919] ___sys_sendmsg+0x213/0x360 [ 237.032593][ T9919] ? __lock_acquire+0x6b5/0x2cf0 [ 237.032619][ T9919] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.032671][ T9919] ? __fget_files+0x2a/0x420 [ 237.032713][ T9919] ? __fget_files+0x3a6/0x420 [ 237.032744][ T9919] __x64_sys_sendmsg+0x1c3/0x2a0 [ 237.032767][ T9919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.032797][ T9919] ? __pfx_ksys_write+0x10/0x10 [ 237.032833][ T9919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.032854][ T9919] do_syscall_64+0x15f/0xf80 [ 237.032877][ T9919] ? trace_irq_disable+0x3b/0x140 [ 237.032897][ T9919] ? clear_bhb_loop+0x40/0x90 [ 237.032921][ T9919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.032940][ T9919] RIP: 0033:0x7f74986ac819 [ 237.032958][ T9919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.032980][ T9919] RSP: 002b:00007f7496906028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.033001][ T9919] RAX: ffffffffffffffda RBX: 00007f7498925fa0 RCX: 00007f74986ac819 [ 237.033015][ T9919] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005 [ 237.033027][ T9919] RBP: 00007f7496906090 R08: 0000000000000000 R09: 0000000000000000 [ 237.033040][ T9919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.033051][ T9919] R13: 00007f7498926038 R14: 00007f7498925fa0 R15: 00007ffd118b82e8 [ 237.033082][ T9919] [ 237.479803][ T9935] fuse: Bad value for 'fd' [ 237.766030][ T5884] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 237.915817][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 237.924036][ T5884] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 237.924065][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.924086][ T5884] usb 2-1: Product: syz [ 237.924100][ T5884] usb 2-1: Manufacturer: syz [ 237.924114][ T5884] usb 2-1: SerialNumber: syz [ 237.945199][ T5884] usb 2-1: config 0 descriptor?? [ 238.176275][ T5884] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 238.202442][ T5884] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 238.214763][ T5884] usb 2-1: USB disconnect, device number 30 [ 238.982961][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.129502][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.132900][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.144047][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.144771][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.286467][ T5808] Bluetooth: hci5: command tx timeout [ 241.834885][T10113] FAULT_INJECTION: forcing a failure. [ 241.834885][T10113] name failslab, interval 1, probability 0, space 0, times 0 [ 241.834919][T10113] CPU: 0 UID: 0 PID: 10113 Comm: syz.2.1791 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 241.834941][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 241.834952][T10113] Call Trace: [ 241.834960][T10113] [ 241.834968][T10113] dump_stack_lvl+0xe8/0x150 [ 241.835004][T10113] should_fail_ex+0x46b/0x600 [ 241.835030][T10113] should_failslab+0xa8/0x100 [ 241.835051][T10113] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 241.835081][T10113] ? __alloc_skb+0x1d0/0x7d0 [ 241.835108][T10113] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.835136][T10113] __alloc_skb+0x1d0/0x7d0 [ 241.835170][T10113] netlink_sendmsg+0x5d4/0xb40 [ 241.835209][T10113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.835238][T10113] ? unwind_get_return_address+0x4d/0x90 [ 241.835264][T10113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.835295][T10113] ____sys_sendmsg+0x94c/0x9c0 [ 241.835322][T10113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.835352][T10113] ? import_iovec+0x73/0xa0 [ 241.835379][T10113] ___sys_sendmsg+0x2a5/0x360 [ 241.835398][T10113] ? __lock_acquire+0x6b5/0x2cf0 [ 241.835425][T10113] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.835486][T10113] ? __fget_files+0x2a/0x420 [ 241.835510][T10113] ? __fget_files+0x3a6/0x420 [ 241.835543][T10113] __x64_sys_sendmsg+0x1c3/0x2a0 [ 241.835566][T10113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.835596][T10113] ? __pfx_ksys_write+0x10/0x10 [ 241.835632][T10113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.835653][T10113] do_syscall_64+0x15f/0xf80 [ 241.835677][T10113] ? trace_irq_disable+0x3b/0x140 [ 241.835696][T10113] ? clear_bhb_loop+0x40/0x90 [ 241.835722][T10113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.835741][T10113] RIP: 0033:0x7fc66c84c819 [ 241.835758][T10113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.835773][T10113] RSP: 002b:00007fc66aa9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.835792][T10113] RAX: ffffffffffffffda RBX: 00007fc66cac5fa0 RCX: 00007fc66c84c819 [ 241.835806][T10113] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 241.835818][T10113] RBP: 00007fc66aa9e090 R08: 0000000000000000 R09: 0000000000000000 [ 241.835830][T10113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.835841][T10113] R13: 00007fc66cac6038 R14: 00007fc66cac5fa0 R15: 00007ffea170b368 [ 241.835870][T10113] [ 242.564370][ T9995] chnl_net:caif_netlink_parms(): no params data found [ 243.365893][ T5808] Bluetooth: hci5: command tx timeout [ 243.954538][ T9995] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.963349][ T9995] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.963545][ T9995] bridge_slave_0: entered allmulticast mode [ 243.991285][ T9995] bridge_slave_0: entered promiscuous mode [ 244.027589][ T9995] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.027713][ T9995] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.027910][ T9995] bridge_slave_1: entered allmulticast mode [ 244.043573][ T9995] bridge_slave_1: entered promiscuous mode [ 244.373357][ T9995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.415596][ T9995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.675923][T10232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.676458][T10232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.703966][ T9995] team0: Port device team_slave_0 added [ 244.714195][ T9995] team0: Port device team_slave_1 added [ 244.908182][ T5968] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 245.060591][ T9995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.060607][ T9995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.060630][ T9995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.067461][T10242] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1842'. [ 245.075052][ T9995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.075066][ T9995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.075090][ T9995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.085879][ T5968] usb 5-1: device descriptor read/64, error -71 [ 245.346988][ T5968] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 245.446228][ T5808] Bluetooth: hci5: command tx timeout [ 245.477441][ T5968] usb 5-1: device descriptor read/64, error -71 [ 245.589801][ T5968] usb usb5-port1: attempt power cycle [ 245.664761][ T9995] hsr_slave_0: entered promiscuous mode [ 245.714249][ T9995] hsr_slave_1: entered promiscuous mode [ 245.715214][ T9995] debugfs: 'hsr0' already exists in 'hsr' [ 245.715236][ T9995] Cannot create hsr debugfs directory [ 245.936137][ T5968] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 245.963141][ T5968] usb 5-1: device descriptor read/8, error -71 [ 246.147637][T10273] netlink: 'syz.1.1857': attribute type 29 has an invalid length. [ 246.197584][ T5968] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 246.228007][ T5968] usb 5-1: device descriptor read/8, error -71 [ 246.337839][ T5968] usb usb5-port1: unable to enumerate USB device [ 247.527551][ T5808] Bluetooth: hci5: command tx timeout [ 248.022390][ T9995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.020236][ T9995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.552154][ T9995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.887963][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 249.887980][ T37] audit: type=1326 audit(1776501996.081:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10391 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 249.888018][ T37] audit: type=1326 audit(1776501996.081:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10391 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 249.907038][ T37] audit: type=1326 audit(1776501996.091:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10391 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 249.907086][ T37] audit: type=1326 audit(1776501996.091:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10391 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 249.907515][ T37] audit: type=1326 audit(1776501996.101:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10391 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 249.961825][ T37] audit: type=1326 audit(1776501996.151:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10391 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 249.961872][ T37] audit: type=1326 audit(1776501996.151:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10391 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1470c819 code=0x7ffc0000 [ 249.961910][ T37] audit: type=1326 audit(1776501996.151:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10391 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a146cd04e code=0x7ffc0000 [ 249.961947][ T37] audit: type=1326 audit(1776501996.151:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10391 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a1470c4ab code=0x7ffc0000 [ 249.961983][ T37] audit: type=1326 audit(1776501996.151:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10391 comm="syz.1.1906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a1470c4ab code=0x7ffc0000 [ 250.227881][ T9995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.237047][ T5899] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 250.392855][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 250.413947][ T5899] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 250.413975][ T5899] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 250.413996][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 250.414017][ T5899] usb 2-1: config 1 has no interface number 0 [ 250.414060][ T5899] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.414088][ T5899] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 250.414129][ T5899] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 250.414152][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.472679][ T5899] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 250.682014][ T5899] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 251.131483][ T36] usb 2-1: USB disconnect, device number 31 [ 251.160729][ T36] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 251.767103][ T9995] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 251.839716][ T9995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.840516][ T9995] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 251.923381][ T9995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.930830][ T9995] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.028643][ T9995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.035361][ T9995] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.101580][ T9995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.594038][ T9995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.737287][ T9995] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.767312][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.767446][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.891264][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.891444][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.835859][ T36] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 253.996017][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 254.000271][ T36] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 254.000310][ T36] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 254.000331][ T36] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.000350][ T36] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 254.000370][ T36] usb 2-1: config 1 has no interface number 0 [ 254.000414][ T36] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 254.000438][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.113641][ T36] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 254.325417][ T36] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 254.377858][ T36] snd_usb_pod 2-1:1.1: invalid control EP [ 254.377879][ T36] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 254.382495][ T36] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 254.383041][ T36] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 254.424366][ T9995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.553454][ T5884] usb 2-1: USB disconnect, device number 32 [ 254.869387][ T9995] veth0_vlan: entered promiscuous mode [ 254.941363][ T9995] veth1_vlan: entered promiscuous mode [ 255.007137][ T9995] veth0_macvtap: entered promiscuous mode [ 255.036620][ T9995] veth1_macvtap: entered promiscuous mode [ 255.078975][ T9995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.135565][ T9995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.220638][ T143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.222331][ T143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.224866][ T143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.255659][ T1137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.633165][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.633230][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.171552][ T2014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.171573][ T2014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.553627][ T1420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.553647][ T1420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.813912][T10674] FAULT_INJECTION: forcing a failure. [ 257.813912][T10674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.813945][T10674] CPU: 0 UID: 0 PID: 10674 Comm: syz.3.2037 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 257.813967][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 257.813978][T10674] Call Trace: [ 257.813986][T10674] [ 257.813994][T10674] dump_stack_lvl+0xe8/0x150 [ 257.814030][T10674] should_fail_ex+0x46b/0x600 [ 257.814056][T10674] _copy_to_user+0x31/0xb0 [ 257.814080][T10674] simple_read_from_buffer+0xe1/0x170 [ 257.814109][T10674] proc_fail_nth_read+0x1be/0x230 [ 257.814136][T10674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.814162][T10674] ? rw_verify_area+0x2ac/0x4e0 [ 257.814189][T10674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.814214][T10674] vfs_read+0x212/0xa80 [ 257.814249][T10674] ? __pfx_vfs_read+0x10/0x10 [ 257.814279][T10674] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 257.814304][T10674] ? lockdep_hardirqs_on+0x7a/0x110 [ 257.814327][T10674] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 257.814351][T10674] ? mutex_lock_nested+0x152/0x1d0 [ 257.814379][T10674] ? fdget_pos+0x252/0x320 [ 257.814412][T10674] ksys_read+0x156/0x270 [ 257.814441][T10674] ? __pfx_ksys_read+0x10/0x10 [ 257.814477][T10674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.814498][T10674] do_syscall_64+0x15f/0xf80 [ 257.814521][T10674] ? trace_irq_disable+0x3b/0x140 [ 257.814540][T10674] ? clear_bhb_loop+0x40/0x90 [ 257.814563][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.814583][T10674] RIP: 0033:0x7fc74e07d04e [ 257.814600][T10674] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 257.814616][T10674] RSP: 002b:00007fc74c30dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.814644][T10674] RAX: ffffffffffffffda RBX: 00007fc74c30e6c0 RCX: 00007fc74e07d04e [ 257.814659][T10674] RDX: 000000000000000f RSI: 00007fc74c30e0a0 RDI: 0000000000000004 [ 257.814671][T10674] RBP: 00007fc74c30e090 R08: 0000000000000000 R09: 0000000000000000 [ 257.814683][T10674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.814695][T10674] R13: 00007fc74e336038 R14: 00007fc74e335fa0 R15: 00007fff7c908138 [ 257.814727][T10674] [ 258.723886][T10719] QAT: Device 1 not found [ 260.335092][T10774] QAT: Device 1 not found [ 263.078833][T10846] netlink: 'syz.3.2115': attribute type 29 has an invalid length. [ 263.228911][ T5962] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 263.375833][ T5962] usb 2-1: Using ep0 maxpacket: 32 [ 263.378382][ T5962] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 263.378407][ T5962] usb 2-1: config 0 has no interface number 0 [ 263.378447][ T5962] usb 2-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.378474][ T5962] usb 2-1: config 0 interface 89 has no altsetting 0 [ 263.386656][ T5962] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 263.386682][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.386702][ T5962] usb 2-1: Product: syz [ 263.386715][ T5962] usb 2-1: Manufacturer: syz [ 263.386729][ T5962] usb 2-1: SerialNumber: syz [ 263.398780][ T5962] usb 2-1: config 0 descriptor?? [ 266.124419][ T5962] usb 2-1: USB disconnect, device number 33 [ 266.285289][T11005] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2189'. [ 266.490107][ T5808] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 267.005871][ T5962] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 267.158567][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.158600][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.158623][ T5962] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.158663][ T5962] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.158687][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.176041][ T5962] usb 2-1: config 0 descriptor?? [ 267.421607][T11021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.433233][T11021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.727962][ T5962] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 267.727999][ T5962] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 267.728028][ T5962] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 267.728055][ T5962] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 267.728082][ T5962] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 267.728109][ T5962] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 267.728135][ T5962] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 267.775130][ T5962] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 268.024968][ T5962] usb 2-1: USB disconnect, device number 34 [ 268.138476][T11060] fido_id[11060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 271.206132][ T5808] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 280.501271][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.557959][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.561543][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.562782][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.564645][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.849678][ T5801] Bluetooth: hci0: command tx timeout [ 283.065248][T11718] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20001 [ 283.079576][T11644] chnl_net:caif_netlink_parms(): no params data found [ 283.702324][T11644] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.703981][T11644] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.704180][T11644] bridge_slave_0: entered allmulticast mode [ 283.709738][T11644] bridge_slave_0: entered promiscuous mode [ 283.714566][T11644] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.714691][T11644] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.714849][T11644] bridge_slave_1: entered allmulticast mode [ 283.729554][T11644] bridge_slave_1: entered promiscuous mode [ 283.986826][T11644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.000810][T11644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.279448][T11644] team0: Port device team_slave_0 added [ 284.304888][T11644] team0: Port device team_slave_1 added [ 284.436494][T11644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.436512][T11644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.436536][T11644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.443188][T11644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.443201][T11644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.443226][T11644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.600945][T11644] hsr_slave_0: entered promiscuous mode [ 284.602261][T11644] hsr_slave_1: entered promiscuous mode [ 284.603108][T11644] debugfs: 'hsr0' already exists in 'hsr' [ 284.603131][T11644] Cannot create hsr debugfs directory [ 284.885956][ T5801] Bluetooth: hci0: command tx timeout [ 285.493233][T11644] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.233055][T11644] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.014362][ T5801] Bluetooth: hci0: command tx timeout [ 289.034502][T11644] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.055898][ T5801] Bluetooth: hci0: command tx timeout [ 289.565630][T11644] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.453630][T11644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 290.498877][T11644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 290.500331][T11644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 290.558656][T11644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.562566][T11644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.737837][T11644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.744332][T11644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.787686][T11644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 291.043030][T11644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.078892][T11644] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.094092][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.094275][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.183330][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.184978][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.288056][ T5801] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 291.479683][T12041] netlink: 'syz.3.2682': attribute type 1 has an invalid length. [ 291.479704][T12041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2682'. [ 291.768443][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2688'. [ 291.890995][T11644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.825919][T11644] veth0_vlan: entered promiscuous mode [ 292.836382][T12107] netlink: 'syz.3.2709': attribute type 1 has an invalid length. [ 292.836400][T12107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2709'. [ 292.868412][T11644] veth1_vlan: entered promiscuous mode [ 292.984544][T11644] veth0_macvtap: entered promiscuous mode [ 293.021633][T11644] veth1_macvtap: entered promiscuous mode [ 293.064849][T11644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.091899][T11644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.124397][ T45] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.186381][ T45] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.188122][ T45] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.191477][ T45] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.234809][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.234829][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.727281][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.727301][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.752511][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.550912][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.777615][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.784491][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.061771][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.534851][T12223] random: crng reseeded on system resumption [ 299.446411][ T5801] Bluetooth: hci1: command tx timeout [ 299.605754][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.145904][ T5885] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 300.304173][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.304209][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.304231][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.304271][ T5885] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.304302][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.340743][T12310] netlink: 'syz.3.2800': attribute type 1 has an invalid length. [ 300.340764][T12310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2800'. [ 300.361671][ T5885] usb 5-1: config 0 descriptor?? [ 300.594202][T12297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.607467][T12297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.843398][ T5885] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 300.843435][ T5885] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 300.843462][ T5885] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 300.843489][ T5885] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 300.843516][ T5885] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 300.843543][ T5885] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 300.843571][ T5885] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 300.943453][ T5885] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 300.965500][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.095923][ T36] usb 5-1: USB disconnect, device number 16 [ 301.267874][T12199] chnl_net:caif_netlink_parms(): no params data found [ 301.526165][ T5801] Bluetooth: hci1: command tx timeout [ 301.799121][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.836595][T12366] netlink: 'syz.4.2826': attribute type 1 has an invalid length. [ 301.836616][T12366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2826'. [ 302.079477][T12375] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2831'. [ 302.374939][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.543196][T12199] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.544250][ T36] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 302.572832][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.573059][T12199] bridge_slave_0: entered allmulticast mode [ 302.598974][T12199] bridge_slave_0: entered promiscuous mode [ 302.624825][T12199] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.624939][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.625125][T12199] bridge_slave_1: entered allmulticast mode [ 302.672174][T12199] bridge_slave_1: entered promiscuous mode [ 302.690004][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.690043][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.690066][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.690106][ T36] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.690131][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.714581][ T36] usb 4-1: config 0 descriptor?? [ 302.932230][T12387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.933960][T12387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.051095][T12405] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2843'. [ 303.075463][T12199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.116093][T12199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.240265][ T36] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 303.240309][ T36] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 303.240337][ T36] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 303.307309][ T36] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 303.514890][ T5885] usb 4-1: USB disconnect, device number 6 [ 303.605991][ T5801] Bluetooth: hci1: command tx timeout [ 303.622079][T12199] team0: Port device team_slave_0 added [ 303.791130][T12199] team0: Port device team_slave_1 added [ 304.129536][T12199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.129553][T12199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.129577][T12199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.384759][T12199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.384772][T12199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.384787][T12199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.765359][T12199] hsr_slave_0: entered promiscuous mode [ 304.774315][T12199] hsr_slave_1: entered promiscuous mode [ 304.775187][T12199] debugfs: 'hsr0' already exists in 'hsr' [ 304.775209][T12199] Cannot create hsr debugfs directory [ 305.319402][ T45] bridge_slave_1: left allmulticast mode [ 305.319537][ T45] bridge_slave_1: left promiscuous mode [ 305.347907][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.652476][ T45] bridge_slave_0: left allmulticast mode [ 305.652504][ T45] bridge_slave_0: left promiscuous mode [ 305.667440][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.687523][ T5801] Bluetooth: hci1: command tx timeout [ 307.550502][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.647542][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.730916][ T45] bond0 (unregistering): Released all slaves [ 307.822403][ T45] bond1 (unregistering): Released all slaves [ 309.250366][T12656] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20001 [ 309.624902][T12670] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2969'. [ 310.591961][ T5465] 8021q: adding VLAN 0 to HW filter on device eth1 [ 311.995808][ T5962] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 312.161216][ T5962] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 312.161247][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.216282][ T5962] usb 5-1: config 0 descriptor?? [ 312.254371][ T5962] cp210x 5-1:0.0: cp210x converter detected [ 312.447354][T12748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.447940][T12748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.448739][ T5962] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 312.448762][ T5962] cp210x 5-1:0.0: querying part number failed [ 312.464780][ T5962] usb 5-1: cp210x converter now attached to ttyUSB0 [ 313.423749][ T5869] usb 5-1: USB disconnect, device number 17 [ 313.425943][ T45] hsr_slave_0: left promiscuous mode [ 313.464559][ T5869] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 313.465002][ T5869] cp210x 5-1:0.0: device disconnected [ 313.478199][ T45] hsr_slave_1: left promiscuous mode [ 313.485609][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.520447][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.578584][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.578611][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.983590][ T45] veth1_macvtap: left promiscuous mode [ 316.983866][ T45] veth0_macvtap: left promiscuous mode [ 316.984152][ T45] veth1_vlan: left promiscuous mode [ 316.984480][ T45] veth0_vlan: left promiscuous mode [ 317.134043][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.134113][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.890446][ T45] team0 (unregistering): Port device team_slave_1 removed [ 318.948088][ T45] team0 (unregistering): Port device team_slave_0 removed [ 319.826757][T12956] QAT: Device 1 not found [ 321.674438][T12199] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.796008][T12199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.802157][T12199] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.890660][T12199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.891434][T12199] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 322.184648][ T5884] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 322.327737][T12199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.328591][T12199] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.375825][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 322.377823][ T5884] usb 5-1: no configurations [ 322.377838][ T5884] usb 5-1: can't read configurations, error -22 [ 322.451436][T12199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.505791][ T5884] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 322.657876][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 322.660022][ T5884] usb 5-1: no configurations [ 322.660038][ T5884] usb 5-1: can't read configurations, error -22 [ 322.663597][ T5884] usb usb5-port1: attempt power cycle [ 323.000060][T13055] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3123'. [ 323.145921][ T5884] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 323.166542][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 323.167336][ T5884] usb 5-1: no configurations [ 323.167351][ T5884] usb 5-1: can't read configurations, error -22 [ 323.306002][ T5884] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 323.327423][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 323.333037][T12199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.334988][ T5884] usb 5-1: no configurations [ 323.335004][ T5884] usb 5-1: can't read configurations, error -22 [ 323.361407][ T5884] usb usb5-port1: unable to enumerate USB device [ 323.469103][T12199] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.487156][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.487378][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.523555][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.523695][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.648386][T13124] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3147'. [ 325.060891][T12199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.391842][T12199] veth0_vlan: entered promiscuous mode [ 325.590648][T12199] veth1_vlan: entered promiscuous mode [ 325.812775][T12199] veth0_macvtap: entered promiscuous mode [ 325.862467][T12199] veth1_macvtap: entered promiscuous mode [ 325.952455][T12199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.956975][ T5885] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 326.038541][T12199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.078649][ T36] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 326.115294][ T143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.115340][ T143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.115374][ T143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.115408][ T143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.154120][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.154153][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.154176][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 326.154218][ T5885] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.154242][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.228155][ T5885] usb 5-1: config 0 descriptor?? [ 326.238104][ T36] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 326.238132][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.253860][ T36] usb 4-1: config 0 descriptor?? [ 326.264424][ T36] cp210x 4-1:0.0: cp210x converter detected [ 326.508745][T13168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.510657][T13172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.511601][T13168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.546312][T13172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.595030][ T36] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 326.595058][ T36] cp210x 4-1:0.0: querying part number failed [ 326.687948][ T36] usb 4-1: cp210x converter now attached to ttyUSB0 [ 326.863754][ T5885] hid_parser_main: 4 callbacks suppressed [ 326.863779][ T5885] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 326.863810][ T5885] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 326.863838][ T5885] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 326.863866][ T5885] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 326.863894][ T5885] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 326.863921][ T5885] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 326.863949][ T5885] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 327.014044][ T5885] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 327.113315][ T5885] usb 5-1: USB disconnect, device number 22 [ 327.571648][T13206] fido_id[13206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 327.715080][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.715097][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.192749][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.192770][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.252813][ T36] usb 4-1: USB disconnect, device number 7 [ 328.283075][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 328.283865][ T36] cp210x 4-1:0.0: device disconnected [ 328.966537][ T5870] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 329.132453][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.132489][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.132527][ T5870] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 329.132551][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.212333][ T5870] usb 1-1: config 0 descriptor?? [ 329.249687][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.279529][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.302291][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.345385][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.359305][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.880780][ T5870] usbhid 1-1:0.0: can't add hid device: -71 [ 329.881004][ T5870] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 329.976683][ T5870] usb 1-1: USB disconnect, device number 12 [ 330.243692][T13272] kvm_pr_unimpl_wrmsr: 22 callbacks suppressed [ 330.243713][T13272] kvm: kvm [13271]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x5120 [ 331.240756][T13255] chnl_net:caif_netlink_parms(): no params data found [ 331.313704][ T209] Bluetooth: hci3: Frame reassembly failed (-84) [ 331.447475][ T5801] Bluetooth: hci2: command tx timeout [ 331.658805][T13318] QAT: Device 1 not found [ 331.697170][T13255] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.697358][T13255] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.697538][T13255] bridge_slave_0: entered allmulticast mode [ 331.702779][T13255] bridge_slave_0: entered promiscuous mode [ 331.739374][T13255] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.739565][T13255] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.739759][T13255] bridge_slave_1: entered allmulticast mode [ 331.743159][T13255] bridge_slave_1: entered promiscuous mode [ 331.846431][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 331.913407][T13255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.923649][T13255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.999190][T13255] team0: Port device team_slave_0 added [ 332.003385][T13255] team0: Port device team_slave_1 added [ 332.011505][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 332.014200][ T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 332.014223][ T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 332.014243][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.014261][ T9] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 332.014294][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 332.014322][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.194453][T13255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.194470][T13255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.194489][T13255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.241270][T13255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.241281][T13255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.241297][T13255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.522830][T13255] hsr_slave_0: entered promiscuous mode [ 332.529601][T13255] hsr_slave_1: entered promiscuous mode [ 332.530458][T13255] debugfs: 'hsr0' already exists in 'hsr' [ 332.530480][T13255] Cannot create hsr debugfs directory [ 333.365842][ T5801] Bluetooth: hci3: command 0x1003 tx timeout [ 333.366865][ T5808] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 333.381294][ T36] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 333.541174][ T5808] Bluetooth: hci2: command tx timeout [ 333.578540][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.578568][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.578580][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 333.578604][ T36] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 333.578616][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.591607][ T36] usb 5-1: config 0 descriptor?? [ 333.675376][T13255] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.844280][T13351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.856668][T13351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.081245][ T36] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 334.081307][ T36] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 334.081335][ T36] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 334.081362][ T36] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 334.081389][ T36] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 334.081414][ T36] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 334.081440][ T36] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 334.124846][ T36] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 334.189450][T13255] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.375366][ T36] usb 5-1: USB disconnect, device number 23 [ 334.544564][T13255] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.605923][ T36] usb 4-1: USB disconnect, device number 8 [ 334.945387][T13255] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.075819][ T36] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 335.237745][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 335.243546][ T36] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 335.243570][ T36] usb 4-1: config 0 has no interface number 0 [ 335.247499][ T36] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 335.247525][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.247545][ T36] usb 4-1: Product: syz [ 335.247560][ T36] usb 4-1: Manufacturer: syz [ 335.247574][ T36] usb 4-1: SerialNumber: syz [ 335.393808][ T36] usb 4-1: config 0 descriptor?? [ 335.606222][ T5808] Bluetooth: hci2: command tx timeout [ 335.609945][ T36] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 337.649206][ T36] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 337.656178][ T36] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 337.726235][ T5808] Bluetooth: hci2: command tx timeout [ 338.786710][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 338.792285][ T5884] usb 4-1: USB disconnect, device number 9 [ 338.876279][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 338.908448][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 338.920581][ T5884] quatech2 4-1:0.51: device disconnected [ 339.453023][T13255] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.487695][T13255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.489858][T13255] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.559924][T13255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.567118][T13255] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.650560][T13255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.656183][T13255] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.708088][T13255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.827573][T13479] kvm: kvm [13475]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x5120 [ 339.898059][T13472] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3303'. [ 340.230503][T13255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.281710][T13255] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.316089][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.316297][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.348886][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.349014][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.371237][ T5968] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 340.517968][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.518002][ T5968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.518078][ T5968] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 340.518121][ T5968] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.518144][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.581642][ T5968] usb 4-1: config 0 descriptor?? [ 340.813568][T13502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.816133][T13502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.048693][ T5968] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 341.048732][ T5968] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 341.048758][ T5968] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 341.048786][ T5968] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 341.048813][ T5968] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 341.048840][ T5968] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 341.048866][ T5968] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 341.121681][ T5968] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 341.341276][ T5884] usb 4-1: USB disconnect, device number 10 [ 341.554514][T13255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.718085][T13255] veth0_vlan: entered promiscuous mode [ 341.741944][T13255] veth1_vlan: entered promiscuous mode [ 341.849757][T13255] veth0_macvtap: entered promiscuous mode [ 341.871628][T13255] veth1_macvtap: entered promiscuous mode [ 341.997106][T13255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.080130][T13255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.119997][ T2014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.121266][ T2014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.121314][ T2014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.121346][ T2014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.857989][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.858009][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.134433][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.134453][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.715872][ T5884] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 343.799258][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.835907][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.864986][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.874600][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.875785][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 343.884033][ T5884] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 343.884104][ T5884] usb 3-1: config 0 has no interface number 0 [ 343.884153][ T5884] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 343.884175][ T5884] usb 3-1: config 0 interface 89 has no altsetting 0 [ 343.903692][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.956137][ T5884] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 343.956165][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.956184][ T5884] usb 3-1: Product: syz [ 343.956197][ T5884] usb 3-1: Manufacturer: syz [ 343.956210][ T5884] usb 3-1: SerialNumber: syz [ 344.123929][ T5884] usb 3-1: config 0 descriptor?? [ 344.145516][ T5884] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 344.145538][ T5884] em28xx 3-1:0.89: Video interface 89 found: [ 344.739310][ T5884] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 346.222619][ T5808] Bluetooth: hci3: command tx timeout [ 348.352044][ T5808] Bluetooth: hci3: command tx timeout [ 349.224688][ T5884] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 349.224719][ T5884] em28xx 3-1:0.89: board has no eeprom [ 349.287838][ T5884] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 349.287866][ T5884] em28xx 3-1:0.89: analog set to bulk mode. [ 349.288839][ T5978] em28xx 3-1:0.89: Registering V4L2 extension [ 349.347420][T13686] QAT: Device 1 not found [ 349.498450][ T5884] usb 3-1: USB disconnect, device number 27 [ 349.499875][ T5884] em28xx 3-1:0.89: Disconnecting em28xx [ 349.527697][ T5978] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 349.527761][ T5978] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 349.527777][ T5978] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 349.527790][ T5978] em28xx 3-1:0.89: No AC97 audio processor [ 349.785099][ T5978] usb 3-1: Decoder not found [ 349.785118][ T5978] em28xx 3-1:0.89: failed to create media graph [ 349.785148][ T5978] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 349.888006][ T5978] em28xx 3-1:0.89: Registering snapshot button... [ 350.062193][ T5978] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input9 [ 350.242064][ T5978] em28xx 3-1:0.89: Remote control support is not available for this card. [ 350.242127][ T5884] em28xx 3-1:0.89: Closing input extension [ 350.242149][ T5884] em28xx 3-1:0.89: Deregistering snapshot button [ 350.419460][ T5808] Bluetooth: hci3: command tx timeout [ 350.615475][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.916576][ T5978] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 350.951599][ T45] 1024-page vmalloc region starting at 0xffffc9000549a000 allocated at kcov_ioctl+0x58/0x640 [ 350.951632][ T45] list_del corruption. next->prev should be ffffc9001b284000, but was 0000000000000000. (next=ffffc9000549a000) [ 350.951916][ T45] ------------[ cut here ]------------ [ 350.951921][ T45] kernel BUG at lib/list_debug.c:67! [ 350.951948][ T45] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 350.951962][ T45] CPU: 0 UID: 0 PID: 45 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 350.951974][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 350.951981][ T45] Workqueue: events_unbound cfg80211_wiphy_work [ 350.951997][ T45] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 350.952010][ T45] Code: 6c df 60 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 9d ad 80 fd 49 8b 56 08 48 c7 c7 20 30 a7 8b 48 89 de 4c 89 f1 e8 e7 da 7c fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 350.952019][ T45] RSP: 0018:ffffc90000b779a8 EFLAGS: 00010246 [ 350.952028][ T45] RAX: 000000000000006d RBX: ffffc9001b284000 RCX: 596a4ed3c7c2d900 [ 350.952036][ T45] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.952041][ T45] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 350.952048][ T45] R10: dffffc0000000000 R11: ffffed1017104923 R12: 1ffff92000a93401 [ 350.952055][ T45] R13: dffffc0000000000 R14: ffffc9000549a000 R15: ffffc9000549a008 [ 350.952063][ T45] FS: 0000000000000000(0000) GS:ffff888126109000(0000) knlGS:0000000000000000 [ 350.952071][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.952078][ T45] CR2: 00007fae6ae8ba40 CR3: 000000005dfc8000 CR4: 00000000003526f0 [ 350.952087][ T45] Call Trace: [ 350.952092][ T45] [ 350.952096][ T45] kcov_remote_start+0x2af/0x710 [ 350.952113][ T45] ieee80211_iface_work+0x211/0x1390 [ 350.952130][ T45] cfg80211_wiphy_work+0x2cf/0x460 [ 350.952141][ T45] ? process_scheduled_works+0xa70/0x1860 [ 350.952157][ T45] process_scheduled_works+0xb5d/0x1860 [ 350.952176][ T45] ? __pfx_process_scheduled_works+0x10/0x10 [ 350.952198][ T45] ? assign_work+0x3d5/0x5e0 [ 350.952212][ T45] worker_thread+0xa53/0xfc0 [ 350.952226][ T45] kthread+0x388/0x470 [ 350.952237][ T45] ? __pfx_worker_thread+0x10/0x10 [ 350.952245][ T45] ? __pfx_kthread+0x10/0x10 [ 350.952256][ T45] ret_from_fork+0x514/0xb70 [ 350.952273][ T45] ? __pfx_ret_from_fork+0x10/0x10 [ 350.952288][ T45] ? __switch_to+0xc79/0x1410 [ 350.952301][ T45] ? __pfx_kthread+0x10/0x10 [ 350.952312][ T45] ret_from_fork_asm+0x1a/0x30 [ 350.952326][ T45] [ 350.952330][ T45] Modules linked in: [ 350.952352][ T45] ---[ end trace 0000000000000000 ]--- [ 350.952358][ T45] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 350.952369][ T45] Code: 6c df 60 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 9d ad 80 fd 49 8b 56 08 48 c7 c7 20 30 a7 8b 48 89 de 4c 89 f1 e8 e7 da 7c fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 350.952378][ T45] RSP: 0018:ffffc90000b779a8 EFLAGS: 00010246 [ 350.952386][ T45] RAX: 000000000000006d RBX: ffffc9001b284000 RCX: 596a4ed3c7c2d900 [ 350.952393][ T45] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 350.952399][ T45] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 350.952406][ T45] R10: dffffc0000000000 R11: ffffed1017104923 R12: 1ffff92000a93401 [ 350.952413][ T45] R13: dffffc0000000000 R14: ffffc9000549a000 R15: ffffc9000549a008 [ 350.952420][ T45] FS: 0000000000000000(0000) GS:ffff888126109000(0000) knlGS:0000000000000000 [ 350.952433][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.952440][ T45] CR2: 00007fae6ae8ba40 CR3: 000000005dfc8000 CR4: 00000000003526f0 [ 350.952450][ T45] Kernel panic - not syncing: Fatal exception [ 350.952789][ T45] Kernel Offset: disabled